DE102005005378A1 - Device for entering and transmitting encrypted signals - Google Patents

Abstract

An apparatus and a method for transmitting encrypted data signals with this apparatus operate according to the following steps: DOLLAR A (a) reading and storing of data values input by means of an input device (6); DOLLAR A (b) encrypting these read-in data values by means of an encryption device (16) and storing the encrypted data values; DOLLAR A (c) enabling the transmission device (13) within a predefinable time interval; DOLLAR A (d) transmitting the stored encrypted data signals and DOLLAR A (e) switching off the transmission device (13) after the predeterminable time interval.

Description

The The invention relates to a device for input and transmission from encrypted Signals according to the preamble of claim 1 and a method for operating the device.

At certain self-service devices, such as for example, ATMs, Überwei payment terminals in retail and the like, must be for security reasons a password, that is a personal one Secret number, a so-called PIN number, for the authorization of the user be entered. Only then can a payout or a transfer respectively. This PIN number is usually encrypted and secured within the keyboard of the self-service device to a parent Transfer computer. Such keyboards are referred to as EPP (= Encrypted Pin Pad).

• – einem vorzugsweise am Selbstbedienungsgerät oder über der Tastatur des Terminals installierten Spiegel,
• – einer zusätzlichen Tastatur, die auf die Originaltastatur aufgesetzt wird, oder
• – einer vorzugsweise am Selbstbedienungsgerät oder über der Tastatur des Terminals installierten Miniaturkamera mit Übertragungseinrichtung.

In tampering attempts, inter alia, attempts to copy the inserted by the user on the self-service device magnetic card and spy out the associated PIN number. This spying of the PIN number as you type it in, for example, in the following way:

• A mirror preferably installed on the self-service device or above the keyboard of the terminal,
• - an additional keyboard, which is placed on the original keyboard, or
• - A preferably installed on the self-service device or on the keyboard of the terminal miniature camera with transmission device.

One On the other hand, side view protection on the EPP only helps to a limited extent. Also hints to users to handle the PIN carefully and when entering it for example, to use the other hand as a privacy screen too little attention in practice.

It is also known, the PIN number on a separate device to enter, e.g. about one Mobile phone with which the PIN number is then directly and preferably wirelessly transferred to the self-service device becomes. Again, the PIN number should be encrypted.

The Invention has the task of a device against this background and to provide a method of operating the device to Information, in particular a secret number (PIN) in secure Way to a self-service device forward.

The solution the object is achieved by the subject matter of claim 1 and by the method according to claim 11.

The The invention provides a device for input and transmission from encrypted Data signals having an input device for inputting characters; an encryption device for encode of data; a transmission device to transfer of data; a controller for processing data; and with at least one switching device for influencing the transmission device and the entered and encrypted stored data and for enabling the transmission device within a predeterminable time interval.

By the self-service device independent Device, it is advantageously possible that the user has his secret number or a required password first in this device according to the invention independently from the location of a self-service machine or the like can. Conveniently, The device may require the entered PIN in required Encrypt the way. The user can then in front of a self-service device such as a ATMs the transmission device activate the devices and a transmission of the entered Arrange codes to the machine. It can be advantageous before specify in which period a transmission of the encrypted Data is possible. After the period has expired, the device is automatically deactivated. so that another transmission the encrypted Data not possible anymore is. A restriction on a one-time transfer is particularly advantageous. A loss of the device leads to it not automatically to a risk of unauthorized use of the device.

Farther it is appropriate that the switching device also for deletion of entered data after unlocking the transmission within a predetermined time interval is formed. This will after the transmission or after the expiration of the predetermined time interval also erased a stored value of the PIN, allowing a misreading by means of special devices not possible anymore is. The security is thus advantageously increased.

In Another preferred embodiment is the transmission device the device according to the invention for transmission of data for a wireless and / or wired transmission path is formed. In addition, it is designed so that they are suitable for different types of construction of self-service devices and terminals can be used.

It is in a further preferred embodiment appropriate that the control device at least one processor, a memory and an encryption device has, thus a treatment and processing of the entered data like a self-service device can be done.

In a further embodiment, the inventive device a sensor system for sampling biometric data. This additional security guaranteed on the one hand, that only the authorized user use the device can, and on the other hand, that at a loss one advantageous even higher Security level is available.

For a favorable Communication of the device according to the invention with the respective self-service device, it is appropriate that the transmission device for one two-sided data exchange formed with the self-service device is.

In a further preferred embodiment is the device according to the invention as an intelligent smart card with the characteristics of at least the Claim 1 formed, in particular a so-called smart card. This is a particularly advantageous design with low Dimensions achieved which a simple and convenient handling allows.

A other design provides that the device consists of a chip card and a transmission device, preferably a radiotelephone. So can Equipment, the from the daily Life are indispensable for the device according to the invention advantageous to use.

Preferably is the device finally with a display device for displaying data and / or an energy store provided for self-sufficient operation.

• (a) Einlesen und Speichern von mittels einer Eingabeeinrichtung eingegebenen Daten;
• (b) Verschlüsseln dieser eingelesenen Daten mittels einer Verschlüsselungseinrichtung und Speichern der verschlüsselten Daten;
• (c) Freischalten der Übertragungseinrichtung innerhalb eines vorgebbaren Zeitintervalls;
• (d) Übertragen der gespeicherten verschlüsselten Daten; und
• (e) Ausschalten der Übertragungseinrichtung nach dem vorgebbaren Zeitintervall.

The invention also provides a method for transmitting encrypted data with the device according to the invention with the following method steps:

• (a) reading and storing data entered by means of an input device;
• (b) encrypting this read-in data by means of an encryption device and storing the encrypted data;
• (c) enabling the transmission device within a predeterminable time interval;
• (d) transmitting the stored encrypted data; and
• (e) switching off the transmission device after the predeterminable time interval.

This Method can be advantageous in the control device of the device according to the invention be executed by the processor by a suitable software program. It is also of great Advantage, if in a preferred embodiment in the process step (a) a default password or PIN is entered and / or biometric data of the user by means of a sensor system be read in, and that with wrong input values after a specifiable number of repetitions the device is deactivated becomes.

Especially it is preferred that in process step (e), in the process steps (a) and (b) stored data are deleted, thus a high level of security against abuse.

One Another advantage is that in another preferred Embodiment in method step (a) an input of a predefinable Time interval takes place, whereby a special flexibility achieved becomes. The user can completely change the time interval entered by him individually to his needs adjust, for example, the way from the place of his input to the self-service device especially is long, and no more opportunity before to a safe Input offers.

In another, particularly advantageous embodiment can in the process step (a) entering data for a complete one Operating procedure for a self-service device carried out and, in particular, the entry of the amount of money to be withdrawn. This is another high security level against spying on the secret number given, since the complete Input process on the self-service device on site is eliminated and made by the user in a safe place chosen by him can be.

The Security of the procedure is through cryptographic keys and given cryptographic procedures and the use of smart cards. each device according to the invention, who also as a personal EPP (Encrypted Pin Pad) can also be called by a unique worldwide serial number will be identified.

By the device according to the invention with a time limit on the validity of the inputs, for example PIN number and / or amount of money, causes a loss of personal EPP outside of the previously set validity period inevitably also to a financial loss of the account holder. From this results a particularly economical safety advantage.

Through secure encryption and the Time limitation, the personal EPP, for example, to other persons for a single or multiple temporally and / or amount limited outgoing or paying operation, without these persons the secret number must be communicated.

Further advantageous embodiments The invention are set forth in the subclaims.

The Invention will now be described with reference to the accompanying drawings with reference to a embodiment explained. Hereby shows:

1 a perspective view of an exemplary embodiment of a device according to the invention in one application; and

2 an exemplary block diagram of a device according to the invention.

The 1 shows a perspective view of an exemplary embodiment of a device according to the invention 1 when using a data transfer to a self-service device 2 ,

Usually, the self-service device 2 which is in the 1 an ATM is via a keyboard 3 a password or PIN, a so-called PIN code entered so that a specific process, such as a payment, can be made. The prompts and responses of the self-service device are displayed on a screen 4 for operator guidance. When the payment process, the corresponding money through an input / output device 5 issued in a known manner.

Instead of manual input using the keyboard 3 is the device according to the invention for transmitting the secret number 1 provided, which preferably consists of a smart card. The smart card 1 has an input keyboard 6 for entering the secret number and preferably an advertisement 7 for operator guidance. This allows the PIN to be stored in a location safe for the user regardless of the location of the self-service device 2 be made.

At the location of the self-service device 2 will be like in 1 shown in the smart card 1 stored secret number over a transmission path 8th to a receiving device 9 of the self-service device 2 transfer. The transmission route 8th may be a known embodiment of a wireless signal link, such as infrared or near-field radio transmission such as blue-tooth. Likewise, an induction loop is possible. A wired transmission can also be performed by the transmission link 8th is designed as a cable, which from the smart card 1 to the self-service device 2 is connected.

The following is the structure of the smart card 1 described. This description is made with reference to 2 , which is an exemplary block diagram.

The input keyboard 6 with key elements 10 is intended for entering alphanumeric characters as well as other control characters. It is with a control device 11 connected. User prompting for correct entry in the input keyboard 6 can via the display device 7 respectively. The display device 7 is in this embodiment with the control device 11 connected. However, it can also have its own processor or its own control device.

Furthermore, the smart card 1 a transmission device 13 on that with the controller 11 connected is. The transmission device 13 can also have a first contact field 14 for a wired transmission.

To the controller 11 is still a switching device 15 connected. This switching device 15 activates the transmission device 13 to transfer the entered data to the self-service device 2 , In the control device 11 there is an encryption device 16 , a processor 17 and an unillustrated memory. The encryption device 16 and the memory may also be outside the controller 11 be arranged.

The smart card 1 has a sensor in a further embodiment 18 with a second contact field 19 which is intended for the scanning of biometric data, such as a fingerprint sensor.

An energy storage 20 Provides the necessary electrical energy to operate the smart card. It is preferably a rechargeable battery, which may also be a solar charger. The recharge may be by induction wireless or wired via the first or second contact pad 14 . 19 take place in a corresponding, not shown device. Because the operation of the smart card 1 only takes place at short notice, the energy requirement is extremely low.

Furthermore, the operation of the smart card 1 explained in more detail. The smart card 1 is via the input device 6 switched on. The control device 11 enters the input procedure via the display direction 7 the user. The user is prompted to enter his PIN number and / or password, which is compared to a stored reference value. This stored reference value may be from the smart card 1 be stored issuing financial institution. But it is also possible that in another embodiment of the smart card 1 such a review does not take place.

The thus checked or input data value is by means of the control device 11 stored and with the encryption device 16 encrypted and stored. The first saving can also be omitted.

Now the smart card is unlocked 1 by means of the switching device 15 during a predetermined time interval, which is either stored stored by the financial institution or fixed, or even by the user on request by the controller 11 can be specified. The user must then within this time interval a transfer process of his on the smart card 1 perform entered data.

This transfer process is done by the user using the smart card 1 at the location of the self-service device 2 either by a key combination on the input device 6 activated, or by the smart card 1 from the receiving device 9 of the self-service device 2 is activated wirelessly after the user is at the self-service device 2 has registered. This application may also be automatic via the transmission device 13 the smart card 1 respectively.

If the user of the self-service device 2 is asked to enter his PIN number, he leads this with the smart card 1 by typing a corresponding keyboard shortcut of the input device 6 pressed, or the smart card 1 in the receiving area of the receiving device 9 of the self-service device 2 brings. It can also be an insertion of the smart card 1 in a known card reader of the self-service device 2 take place, in which case the transmission of the encrypted data from the transmission device 13 the smart card 1 over the first contact field 14 is made.

After expiration of the predeterminable time interval, or after completion of the transmission process of the encrypted data, or after pressing the key of the input device 6 the smart card 1 becomes the transmission device 13 the smart card 1 from the switching device 15 switched off so that no further transfer process can take place. In a preferred embodiment, the stored data value of the encrypted and unencrypted data input on the smart card simultaneously becomes 1 irrevocably deleted. The smart card 1 must be reactivated for a new transfer, that is, another input procedure is required. Thus, an advantageous security against abuse is ensured, for example in the case of a lost smart card 1 ,

The Invention is not on the embodiment described above limited.

So it is conceivable that the smart card 1 or a chip card can be used in combination with a radiotelephone, wherein the wireless transmission link 8th operated by the radiotelephone and the transmission device 13 the smart card 1 wired with the radiotelephone over the first contact field 14 communicated.

Furthermore, the control device 11 the smart card 1 have such software, with which the entire user operation process of the self-service device 2 can be carried out beforehand in a safe place for the user. This means that the user at the location of the self-service device 2 only this must activate the encrypted data with its smart card 1 transfers and so the whole process, for example, the data input for cash dispensing, from the data transfer of the smart card 1 is taken over. For this it is advantageous that the transmission link 8th and the transmission device 13 the smart card 1 is formed bidirectionally.

It is also conceivable that the device according to the invention is completely compatible with the functions of the smart card 1 is integrated in a radiotelephone or vice versa. This can be designed as a piggyback similar to a clip-on camera. The data transmission can take place, for example, by means of an infrared link or a so-called wireless "Bluetooth" radio link.

Likewise, the smart card 1 for a limited time and to a certain amount of money, so that it is also suitable, for example, for withdrawing a certain amount of money for third persons, being misused by the switching device 15 is completely excluded.

1

contraption

2

Self-service device

3

keyboard

4

screen

5

Input / Ausgabeeirnichtung

6

input keyboard

7

display

8th

transmission path

9

receiver

10

key elements

11

control device

13

transmission equipment

14

first Contact field

15

switching device

16

encryption unit

17

processor

18

sensors

19

second Contact field

20

energy storage

Claims (15)

Device for entering information and transmitting encrypted data signals to a self-service device ( 2 ), comprising: a) an input device ( 6 ) for entering characters; b) an encryption device ( 16 ) for encrypting data; c) a transmission device ( 13 ) for transmitting data to the self-service device; d) a control device ( 11 ) for the processing of data; and e) at least one switching device ( 15 ) for influencing the transmission device ( 13 ) and the input and encrypted stored data which is required for enabling the transmission device ( 13 ) is formed within a predeterminable time interval. Device according to claim 1 or 2, characterized in that the switching device ( 15 ) for deleting entered data after the activation of the transmission device ( 13 ) is formed within a predeterminable time interval. Device according to one of the preceding claims, characterized by an energy store ( 20 ). Device according to one of the preceding claims, characterized by a display device ( 7 ) for displaying data. Device according to one of the preceding claims, characterized in that the transmission device ( 13 ) for transmitting data for a wireless and / or wired transmission link ( 8th ) is trained. Device according to one of the preceding claims, characterized in that the control device ( 11 ) at least one processor ( 17 ) and an encryption device ( 16 ) having. Device according to one of the preceding claims, characterized by a sensor system ( 18 ) for sampling biometric data. Device according to one of the preceding claims, characterized in that the transmission device ( 13 ) for bidirectional data exchange with the transmission link ( 8th ) is trained. Device according to one of claims 1-8, characterized in that the device is a smart card ( 1 ). Device according to one of claims 1-8, characterized in that the device consists of a chip card and a transmission device, preferably Radiotelephone, exists. Method for operating a device according to one of the preceding claims, characterized by the following steps: (a) reading in and storing by means of an input device ( 6 ) entered data values; (b) encrypting these read-in data values by means of an encryption device ( 16 ) and storing the encrypted data values; (c) enabling the transmission device ( 13 ) within a predeterminable time interval; (d) transmitting the stored encrypted data signals; and (e) turning off the transmission equipment ( 13 ) after the predefinable time interval. A method according to claim 11, characterized in that in step (a) "reading" a password or a secret number is requested and / or biometric data of the user by means of a sensor ( 18 ) and that, if the input values are incorrect after a certain number of repetitions, the device is deactivated. Method according to claim 11 or 12, characterized that in step (e) "turn off" in the process steps (a) and (b) stored data are deleted. Method according to one of claims 11 to 13, characterized in method step (a) "reading in" an input of a predetermined time interval occurs. Method according to one of claims 11 to 14, characterized in that in step (a) "reading" the input of data for a complete operation process for a self-service device ( 2 ) is carried out.