Abstract:
A data entry device is provided which includes display means for displaying data thereon and selection means for allowing a user to make one or more selections of data displayed on said display means. The display means are arranged in a substantially horizontal orientation and are recessed within a cavity or channel means defined in said device. The walls of the cavity or channel means which define an opening through which a viewer views the display means are arranged substantially perpendicular to said display means.

Description:
FIELD OF THE INVENTION  
       [0001]     The present invention relates to concealed data entry devices, including data entry devices for automatic teller machines and data entry devices for locking and unlocking closure members such as doors and windows.  
       BACKGROUND TO THE INVENTION  
       [0002]     Locks are used for securing closure members, such as doors and windows. Locks have a mechanism by which they can be in a locked or an open position, as selected by a user. Traditional locks use a key to co-operate with the locking mechanism to operate the lock, and for example move a bolt between a locked and an open position. In addition to locks operated by keys, there are also “keyless locks”. These have the advantage of not requiring a key to open the lock, for example, if a door to a building should remain locked to all except the personnel who work in the building, then the personnel can be given the means to open the lock. These means could be a swipe card, a combination code and so on.  
         [0003]     There are many different types of keyless lock on the market. These include mechanical digital locks, wherein a user has to input a code to open the lock. These use mechanical actuator means to release the bolt. Electric digital locks can also be used wherein a user has to enter a code in order to open the lock. These can be powered either by batteries or by mains power. Magnetic strips can be used, wherein a user is issued with a card having a magnetic strip with coded information on the magnetic strip. By swiping the card through the magnetic strip lock, the magnetic strip lock reads whether the code is correct and opens the lock if the code is correct. Proximity locks are also available, which can work by sensing a signal from a device carried by the user. Hand readers and retinal readers are also used, wherein the signature hand print or retinal print of a user is stored in the lock, and in order for a user to open the lock its hand prints or retinal prints must match the hand print or retinal print stored in the lock.  
         [0004]     Referring to  FIG. 1 , herein, there is illustrated schematically a first type of prior art digital lock. This could be a mechanical digital lock or an electric digital lock. The digital lock  101  comprises a base plate  102 , a handle  103 , a keypad  104  and an indicator  105 . The prior art digital lock is affixed to a door, and operatively connected to a bolt. By entering the correct combination in the data entry device, in this instance a keypad  104 , a user can move the bolt from a locked to an open position, thereby allowing a user to open the door. When the user has entered the correct combination in the keypad  104 , an indicator light  105  is activated to show the user that the door is now unlocked and may be opened.  
         [0005]     In another embodiment, the handle  103  is operatively connected to a sprung latch (not shown). When the door is in a locked position, the handle  103  will not turn, and therefore will not release the latch to allow the user to open the door. When the correct combination is entered into the keypad  104 , then the handle  103  is released, allowing it to turn and thereby allowing the sprung latch to open and allowing the user to open the door.  
         [0006]     In a further embodiment, the door is held shut, and so effectively locked, by an electromagnet. By entering the correct combination in the keypad  104 , power is cut to the electromagnet for a predetermined period of time, thereby allowing a user to open the door.  
         [0007]     Other types of locking mechanism are known that can be released by entering the correct combination in a keypad  104 .  
         [0008]     Digital keypads may be affixed to the door as shown in  FIG. 1 , or may be fixed on a wall adjacent to the door. Referring to  FIG. 2  herein, there is illustrated schematically a second type of prior art digital lock. The door  201  comprises a handle  202  that must be turned by a user to release the latch (not shown), thereby allowing the user to open the door. In addition to the latch, there is a bolt (not shown) that maintains the door in a locked position. To release the bolt, the user must enter the correct combination in a keypad  203  disposed on a wall  204  adjacent to the door. The system operates in a similar manner to that described for  FIG. 1 .  
         [0009]     Problems with existing mechanical and electric digital locks include the following:  
         [0010]     The data entry device, or keypad  104 , is in open view, and so when an authorized person enters the code to open the door, anyone who is not authorised to open the door can easily see the correct code being entered into the  104 , and will then be able to open the lock themselves. This is a security problem.  
         [0011]     Another problem with existing mechanical or electric digital locks is that they require either sequential or two-handed operation. For sequential operation, the code is entered into the keypad  104  to unlock the door. When the correct combination is entered the indicator  105  indicates that the door is unlocked. The user then turns the handle  103  to open the door. For two-handed operation, the user must use one hand to enter the combination into the keypad  104  and the other hand to turn the handle  103 . Two-handed operation is inconvenient if the user is carrying an object when he/she wishes to open the door.  
         [0012]     A further problem with prior art mechanical or electric digital locks is that they do not necessarily allow easy access to a door by people with certain disabilities, for example, people with visual impairment. Where the keypad  104  is not located adjacent to the handle  103 , but is located on a wall  204  adjacent to the door  201 , it can be difficult for a visually impaired person to find the keypad to enter the correct combination. Furthermore, not all keypads  104  comprise tactile indicators on the keys, and so the visually impaired person cannot be sure that they are entering the correct combination.  
         [0013]     Other fields where the problem of a data entry device being seen by a third party include keypads on data entry devices, for example automatic teller machines (ATMs). The keypad is in plain view and a third party can see confidential information being entered into the keypad, such as a personal identification number (PIN). Prior art solutions include retrofitting a cover over an existing keypad, although these can be easily removed. Alternatively, a dial which is capable of rotation in a linear manner or in a two directional manner is used alone in combination with a selection button. The dial can be used to move a selector arrow on the display screen between different viewable numbers or options and the user can select a required number or option using the selection button, thereby removing the requirement for a user having to input numbers into a keypad. However, the numbers or options which the user is selecting using the dial are still typically visible to a third party and therefore the third party can still decipher a PIN or other confidential information from the screen. It is therefore desirable to find some way in which to restrict the view of data entry keypads to reduce the risk of confidential information being seen by a third party.  
       SUMMARY OF THE INVENTION  
       [0014]     The inventor has realised the problems associated with security of data entry devices, for example, for opening a door having a keyless lock or accessing an ATM. Such data entry devices are generally in view of third parties and can be easily seen. The inventor has accordingly devised an ATM that restricts the view of a data entry device, thereby increasing the security of a user&#39;s confidential details, and a lock for a closure member in which the data entry device to open the closure member is concealed by disposing it on the handle for the closure member. In one embodiment, the means to operate the locking mechanism are disposed on a surface of the handle in a concealed location, thereby preventing third parties from seeing how to operate the locking mechanism. In another embodiment the means to operate the locking mechanism comprises means to respond to a plurality of movements of the handle.  
         [0015]     According to a first aspect of the present invention, there is provided a data entry device, said device including display means for displaying data thereon and selection means for allowing a user to make one or more selections of data displayed on said display means, characterised in that the display means are arranged in a substantially horizontal orientation and are recessed within a cavity or channel means defined in said device, the walls of the cavity or channel means which define an opening through which a viewer views the display means being arranged substantially perpendicular to said display means.  
         [0016]     Thus, in order for a user to view the display means through an opening of said cavity or channel means, a user is required to view the display means at an angle substantially perpendicularly to said display means (i.e. in a substantially vertical orientation).  
         [0017]     This prevents the third party from viewing the display means when in use by a user.  
         [0018]     The walls of the cavity or channel means are of sufficient height or depth to prevent a third party from viewing the display means from a side or distance from the device. The walls defining the cavity and/or channel means can protrude outwardly from a surface in which the display means is mounted or forms part thereof or can be recessed within said surface.  
         [0019]     The selection means can include any or any combination of one or more dials, scrolling elements, buttons, sliders, switches and/or the like.  
         [0020]     The selection means can be used to navigate and/or move an indicator on a screen on the display means between two or more different positions and/or can be used to make a selection once the indicator is in a required location on said display means.  
         [0021]     Preferably the selection means includes a selector element which is capable of undergoing movement in one of a plurality of arbitrary user selectable paths, such as in a non-linear manner, in three dimensions (i.e. about X, Y and Z axes), in more than two positions, is rotatably mounted and/or the like. By providing the selection means to move in a plurality of user selectable directions, it makes it more difficult for a third party to correlate movement of the selection means with selection of data on the display means.  
         [0022]     In a preferred embodiment the selection means includes a ball or hemispherical member mounted on or associated with said device, which can be rotated in more than one direction, and preferably a plurality of directions, such as in three dimensions, to allow selection of data displayed on the display means. The ball or hemispherical member can be mounted on a suitable surface of the device in use. The ball or hemispherical member typically navigates an indicator around a screen on the display means and this or a separate selector button or selection means can be used to make a selection once the indicator is in a suitable place on the screen.  
         [0023]     The data entry display device is typically an electrical device and the display means is typically in the form of a display screen.  
         [0024]     In one embodiment the data entry device is provided on or associated with an automatic teller machine (ATM). A card entry port, cash dispensing port and/or other features can be provided on or in association with the data entry device. This aspect of the present invention has the advantage of removing the problems associated with having an exposed keypad on an ATM or pin &amp; chip machine.  
         [0025]     In an alternative embodiment the data entry device is provided on or associated with a handle of a closure member or door.  
         [0026]     The data displayed on the display means can be scrambled or randomly changed (i.e. the position of one or more data items displayed on the display means can be changed) after each use via processing means forming part of or associated with said device and/or moved about on selection of a data item using the selection means, such that a user is required to undertake different movements using the selection means for selecting data items on the display means. Thus, movement of the selection means by a user appears arbitrary or random to a third party looking at a user inputting data into the data entry device.  
         [0027]     Thus, according to separate aspects of the present invention there is provided an ATM with data entry device; and a handle for a closure member with data entry device.  
         [0028]     According to a second aspect, there is provided a data entry device for an automatic teller machine, the automatic teller machine includes a screen configured to display information, a card entry port, a hand rest, and the data entry device including a keypad, the keypad including a plurality of keys, said keys being configured to allow a user to enter data characterised in that said data entry device is disposed at said hand rest and substantially facing said screen, or disposed substantially at a lower surface of said hand rest thereby restricting a view of said data entry device.  
         [0029]     In whichever embodiment, the data entry device faces away from a user of the same so as to restrict the view of a third party viewing the data entry device.  
         [0030]     Preferably, the hand rest comprises or includes a bar.  
         [0031]     Preferably, the automatic teller machine further includes a reflective surface, the reflective surface configured to allow a user to see the keypad.  
         [0032]     Alternatively, the automatic teller machine further includes a camera, the camera being configured to capture an image of the data entry device; a viewing port, the viewing port being operatively connected to the camera and configured to display the captured image; wherein a view of the captured image is apparent to a single user only.  
         [0033]     Alternatively, the data entry device is mounted at a pivoting drum, the data entry device configured to move between a visible position and a concealed position substantially facing the screen.  
         [0034]     Preferably, the automatic teller machine further includes at least one projecting stud disposed in proximity to the card entry port, the stud configured to restrict a fitting of a dummy cover.  
         [0035]     Preferably, the stud includes a trapezoidal cross section.  
         [0036]     Preferably, an upper surface of the stud is disposed substantially above the card entry port.  
         [0037]     According to a third aspect there is provided a handle for a closure member, the closure member including a locking mechanism, the handle including means for operating the locking mechanism characterized in that the means for operating the locking mechanism is disposed on a surface of the handle, the surface of the handle substantially facing the closure member or facing away from a user of the closure member.  
         [0038]     For example, the means for operating the locking mechanism could be located on a surface facing the closure member, on a base surface of the handle, on an angled surface facing away from the user and/or the like.  
         [0039]     Preferably, the means for operating the locking mechanism includes a plurality of elements, the elements configured to co-operate in combination to operate the locking mechanism.  
         [0040]     Preferably, the elements are selected from a set including any or any combination of one or more buttons, sliders, dials, switches, direction dials and/or the like.  
         [0041]     Preferably, the elements are configured to be operated sequentially.  
         [0042]     Alternatively, the elements are configured to be operated simultaneously.  
         [0043]     Preferably, the handle further includes a projecting lug configured to partially cover the means for operating the locking mechanism.  
         [0044]     Preferably, the means for operating the locking mechanism includes tactile indicators, the tactile indicators configured to impart information about the means for operating the locking mechanism.  
         [0045]     Preferably, the tactile indicators are chosen from a set including any or any combination of a raised profile, surface finish, raised Braille profile and/or the like.  
         [0046]     Preferably, the locking mechanism includes a bolt configuration to selectively lock the closure member in a closed position.  
         [0047]     Alternatively, the locking mechanism includes means to selectively restrict operation of the handle.  
         [0048]     Preferably, the means for operating the locking mechanism includes at least one mechanical actuator.  
         [0049]     Alternatively, the locking mechanism includes at least one electronic actuator.  
         [0050]     Preferably, the handle for a closure further includes a secondary device configured to restrict operation of the locking mechanism unless the secondary device is actuated, the secondary device being selected from any or any combination of a button, a touch pad, a swipe card reader, identification technology, logistics, a proximity device such as a radio transmitter and/or the like.  
         [0051]     According to a fourth aspect, there is provided a handle for a closure member, the closure member having a locking mechanism including means for operating the locking mechanism and further including means to respond to a plurality of movements of the handle, wherein the locking mechanism is configured to be operated in response to the plurality of movements of the handle corresponding with a predetermined plurality of movements of the handle.  
         [0052]     Preferably, the predetermined movements are selected from any or any combination of rotation of the handle about an axis substantially perpendicular to a main plane of the closure member, rotation of the handle about an axis substantially parallel to a main plane of the closure member, movement of the handle in a direction substantially perpendicular to a main plane of the closure member and/or the like.  
         [0053]     Preferably, the means for operating the locking mechanism includes at least one mechanical actuator.  
         [0054]     Alternatively, the means for operating the locking mechanism includes at least one electronic actuator.  
         [0055]     According to a fifth aspect, there is provided a handle for a closure member including a combination lock, the combination lock being disposed at a surface of the handle substantially facing the closure member, and the combination lock configured to selectively operate a locking mechanism for the closure member.  
         [0056]     Preferably, the combination lock includes a plurality of elements, the elements selected from any or any combination of one or more buttons, sliders, switches, dials, direction dials and/or the like.  
         [0057]     Preferably, the locking mechanism includes a bolt.  
         [0058]     Alternatively, the locking mechanism includes means to selectively restrict operation of the handle.  
         [0059]     According to a sixth aspect, there is provided a door including a locking mechanism, a handle, means for operating the locking mechanism, characterized in that the means for operating the locking mechanism is disposed at a surface of the handle, the surface of the handle substantially facing the door or facing away from a user of the door.  
         [0060]     The handle can include any type of user actuation means to allow user access to the door.  
         [0061]     Preferably, the means for operating the locking mechanism includes a plurality of elements, the elements configured to co-operate in combination to operate the locking mechanism.  
         [0062]     Preferably, the elements are selected from a set including any or any combination of one or more buttons, sliders, dials, switches, direction dials and/or the like.  
         [0063]     Preferably, the elements are configured to be operated sequentially.  
         [0064]     Alternatively, the elements are configured to be operated simultaneously.  
         [0065]     Alternatively, the means for operating the locking mechanism includes means to respond to a plurality of movements of the handle wherein, the locking mechanism is configured to be operated in response to the plurality of movements of the handle corresponding with a predetermined plurality of movements of the handle.  
         [0066]     Preferably, the predetermined movements are selected from any or any combination of rotation of the handle about an axis substantially perpendicular to a main plane of the closure member, rotation of the handle about an axis substantially parallel to a main plane of the closure member, movement of the handle in a direction substantially perpendicular to a main plane of the closure member and/or the like. 
     
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0067]     For a better understanding of the invention and to show how the same may be put into effect, there will now be described by way of example only, specific embodiments, methods and processes according to the present invention with reference to the accompanying drawings in which:  
         [0068]      FIG. 1  illustrates schematically a first type of prior art digital lock.  
         [0069]      FIG. 2  illustrates schematically a second type of prior art digital lock.  
         [0070]      FIG. 3  illustrates schematically a perspective view of a handle and back plate according to a first specific embodiment.  
         [0071]      FIG. 4  illustrates schematically a rear elevation view of a handle and back plate according to a first specific embodiment.  
         [0072]      FIG. 5  illustrates schematically a plan view of a cross section through a door showing two handles and a locking bolt according to the first specific embodiment.  
         [0073]      FIG. 6  illustrates schematically a perspective view of a door showing two handles and a locking bolt according to the first specific embodiment.  
         [0074]      FIG. 7  illustrates schematically examples of elements for entering a code.  
         [0075]      FIG. 8  illustrates schematically examples of tactile indicators for elements for entering a code.  
         [0076]      FIG. 9  illustrates schematically examples of handle movements.  
         [0077]      FIG. 10  illustrates schematically an automatic teller machine (ATM).  
         [0078]      FIG. 11  illustrates schematically a cross-section view of an ATM having a pivotally mounted keypad.  
         [0079]      FIG. 12  illustrates schematically a cross-section view of an ATM having studs fitted to a surface of the ATM.  
         [0080]      FIG. 13  illustrates schematically an ATM comprising a trough with a keypad disposed in the trough.  
         [0081]      FIG. 14  illustrates schematically an ATM having a viewing port.  
         [0082]      FIG. 15  illustrates an ATM according to one embodiment of the present invention.  
         [0083]      FIG. 16  illustrates a Pin and Chip Card Machine according to a further embodiment of the present invention. 
     
    
     DETAILED DESCRIPTION  
       [0084]     There will now be described by way of example a specific mode contemplated by the inventors. In the following description numerous specific details are set forth in order to provide a thorough understanding. It will be apparent however, to one skilled in the art, that the present invention may be practiced without limitation to these specific details. In other instances, well-known methods and structures have not been described in detail so as not to unnecessarily obscure the description.  
         [0085]     Throughout this description, reference will be made to a door for the sake of clarity. However, the invention can be applied equally to other closure members, for example, exterior or interior doors, car doors, garage doors, windows, safe doors and so on.  
         [0086]     Furthermore, reference is made throughout the description to a handle. This applies to handles including lever handles, which actuate a latch when turned, knobs, pull handles (such as those found on car doors or filing cabinets).  
         [0087]     Furthermore, reference is made throughout to a locking mechanism. A locking mechanism is distinct from a latch, in that a latch is configured to hold a door in a closed position, but to be released simply by turning a handle or performing a similar operation. A locking mechanism on the other hand is a mechanism that is configured to lock a door in a closed position, and requires a separate operation to operate and unlock. A locking mechanism can include, but is not limited to, a separate bolt from the latch, or means to restrict movement of the latch.  
         [0088]     Referring to  FIG. 3  herein, there is illustrated schematically a perspective view of a handle and back plate according to the first specific embodiment. Referring to  FIG. 4  herein, there is illustrated schematically a rear elevation view of a handle and back plate according to the first specific embodiment. The back plate  102  is configured in use to be affixed to a door. A handle  301  is provided. The handle  301  shown is a lever-type of handle. The handle  301  is operatively connected to a latch (not shown) in the door. The latch co-operates with an orifice in a doorframe such that when the latch is extended the door remains closed, and when the latch is retracted the door can be opened. When the handle  301  is in a first position, the latch is in its extended position. When a user wishes to open the door, he rotates the handle  301  such that the latch retracts and allows the door to be opened.  
         [0089]     The handle  301  further comprises means  302 ,  303 ,  304  for operating a locking mechanism. The locking mechanism (not shown in  FIG. 1 ) allows a user to selectively lock or unlock a door. Typically the locking mechanism comprises a prior art locking mechanism such as a bolt that extends from the leading edge of the door into an orifice in the frame, and electromagnet disposed to hold the door to the frame when current is passed through the electromagnet, or means to immobilize the handle  301  such that it cannot be turned to retract the latch.  
         [0090]     The means  302 ,  303 ,  304  for operating a locking mechanism in the first embodiments comprises a first set  302  of three elements, a second set  303  of three elements and a third set  304  of three elements. The elements in this embodiment are buttons.  
         [0091]     The buttons  302 ,  303 ,  304  are disposed on a surface of the handle  301  that faces the door. This is for two reasons; the first is that it allows simple one-handed operation of the buttons. When a user grasps the handle  301 , his fingers are placed over the buttons  302 ,  303 ,  304  in a position to press the buttons  302 ,  303 ,  304 . In this way, a user can enter a code using the buttons  302 ,  303 ,  304  to unlock the door, and then turn the handle  301  to open the door without moving his hand. The second reason for disposing the buttons  302 ,  303 ,  304  on a surface of the handle that faces the door is security. If the user&#39;s hand is grasping the handle whilst entering the code, it is much more difficult for a third party to see the code that is entered, and therefore makes it less likely that unauthorized persons will be able to ascertain the code. This is because the third party&#39;s view of the buttons  302 ,  303 ,  304  is restricted as the code is being entered.  
         [0092]     The buttons  302 ,  303 ,  304  are configured to operate the locking mechanism to unlock the door only if a predetermined code is entered using the buttons  302 ,  303 ,  304 . In this way unauthorized persons cannot unlock the door, as they will not know the code required.  
         [0093]     The correct code may be entered by pressing preselected buttons in the correct sequence. For example, the code to operate the locking mechanism may be pressing the second button from the first set of buttons  301  followed by the third button from the third set of buttons  304  followed by the second button from the second set of buttons  303 . This type of sequential operation gives many different permutations to give many different codes that may be correct (729 possible codes in the example shown).  
         [0094]     Alternatively, the correct code may be entered by simultaneously holding down the required buttons, although this gives fewer permutations of code.  
         [0095]     The elements  302 ,  303 ,  304  disposed on the handle  301  effectively perform the same function as a keypad  104  that is disposed in proximity to the handle in prior art keyless locks.  
         [0096]     The locking mechanism is operated by the elements  302 ,  303 ,  304  by either mechanical means, electrical means or a combination of electrical and mechanical means. For example, depressing the elements  302 ,  303 ,  304  in the correct code may mechanically actuate a bolt causing it to retract, thereby unlocking the door. Alternatively, the elements  302 ,  303 ,  304  may form electrical contacts with a circuit such that entering the correct code on the buttons activates an electric actuator that unlocks the door. A combination of electric and mechanical means can be used to actuate the locking mechanism.  
         [0097]     Where electrical means are used to actuate the locking mechanism, power is provided from a battery or from a mains power source. Where power is provided by a mains power source, it is desirable to have a backup battery in place to ensure that the electrical means to actuate the locking mechanism can still be used in the event of a power cut. A backup battery may be rechargeable to ensure that it remains charged as long as a mains power source is active.  
         [0098]     Referring to  FIG. 5  herein, there is illustrated schematically a plan view of a cross section through a door showing two handles and a locking bolt according to the first specific embodiment. Referring to  FIG. 6  herein, there is illustrated schematically a perspective view of a door showing two handles and a locking bolt according to the first specific embodiment. The door  501  has an outer face on which the back plate  102  and the handle  301  is disposed. It is the outer face that has restricted entry. A user cannot open the door from the side of the outer face without knowing the code to enter in the elements  302 ,  303 ,  304 . The door  501  also has an inner face on which a second back plate  502  is disposed, and a second handle  503  is disposed extending from the second back plate  502 .  
         [0099]     The second handle  503  does not comprise elements by which a user enters a code to operate the locking mechanism, as if the user is on the inner face side of the door  501  then they should already be authorized to be able to operate the locking mechanism.  
         [0100]     A locking button (not shown) may be provided on the second handle  503 . When the locking button is depressed, then the elements  302 ,  303 ,  304  on the handle  301  are active so that the door can only be opened by a user who knows the code to operate the locking mechanism. When the locking button is released then the elements  302 ,  303 ,  304  are not active such that the door remains unlocked and can be opened by anyone from the outer face or the inner face side of the door without necessarily knowing the code to activate the locking mechanism.  
         [0101]     A locking button is not necessary, but if one is required then an alternative to a locking button is to raise the second handle  503  to deactivate the elements  302 ,  303 ,  304 . Other methods of deactivating the elements may also be used.  
         [0102]     In this embodiment a bolt  504  is shown that comprises part of the locking mechanism. The bolt is shown extended such that it would co-operate with a bolt orifice in a doorframe to lock the door. When the locking mechanism is operated then the bolt  504  is retracted to unlock the door.  
         [0103]     A latch  601  is also shown. The latch is biased towards an extended position such that it co-operates with a latch orifice in the doorframe to keep the door shut. By lowering either handle  301 ,  503 , the latch is retracted allowing the door to open.  
         [0104]     In the embodiment shown, the latch is not part of the locking mechanism. However, in an alternative embodiment a bolt  504  is not provided, but the means to operate the locking mechanism comprises means to selectively restrict operation of the handle  301 . That is to say, if the correct code is not entered into the elements  302 ,  303 ,  304  then the handle  301  cannot be lowered and so the latch cannot be retracted, thereby effectively maintaining the door in a locked position.  
         [0105]     To reduce the risk of unauthorized entry, the back plate  102  cannot be removed from the door  501  as no attaching screws are used. The back plate  102  is secured to the door  501  by bolts from the second back plate  502 . In this way, access to the locking mechanism can only be obtained by removing the second back plate  502  from the inner face of the door  501 . Access to the locking mechanism is required for maintenance or repair of the locking mechanism, or for changing or resetting the code required to operate the locking mechanism.  
         [0106]     In some circumstances a person who knows the correct code to operate the locking mechanism may inadvertently enter the wrong code. To this end, a reset mechanism is provided that clears the previous code entered and allows the user to re-enter the correct code.  
         [0107]     Several different types of reset mechanism may be used. These include a separate reset button, a facility that allows the handle  301  to be pulled away from the door  501  and then returned to its usual position, or lifting the handle  301  upwards.  
         [0108]     In alternative embodiments, different types of elements may be used for entering the code. Referring to  FIG. 7  herein, there is illustrated schematically examples of elements for entering a code.  
         [0109]      FIG. 7A  shows 6 buttons  701 , giving 216 permutations for a three-digit code or 1296 permutations for a four-digit code. The buttons are grouped into three groups of two to allow a user to easily identify the correct buttons are in the correct position. Alternatively, the groupings may add a further layer of complexity to the permutations of code. The correct buttons must be pressed in the correct sequence in order to operate the locking mechanism.  
         [0110]      FIG. 7B  shows twelve buttons  702 , giving 1728 permutations for a three-digit code or 20,736 permutations for a four-digit code. The buttons are grouped into four groups of three to allow a user to easily identify the correct buttons are in the correct position. Alternatively, the groupings may add a further layer of complexity to the permutations or code. The correct buttons must be pressed in the correct sequence in order to operate the locking mechanism.  
         [0111]      FIG. 7C  shows a digital type  703  of combination that is commonly seen on combination locks for padlocks or briefcases. The correct code must be entered on the dials. Each dial must therefore be in the correct position to operate the locking mechanism. Where four dials having ten positions are used, as shown in  FIG. 7C , there are 10,000 permutations of code that may be used.  
         [0112]      FIG. 7D  shows a switch-type of element. A required number of switch type elements can be used. In the example shown in  FIG. 7D , each switch has three positions; a first position  704 , a second position  705  and a third position  706 . Each switch must be in the correct position in order to operate the locking mechanism. Where four such switches are used there are 81 different permutations of code.  
         [0113]      FIG. 7E  shows a series of direction dial type of elements. Direction dials allow a user to rotate each dial  707 ,  708 ,  709  to required positions, and the locking mechanism is only operated when each direction dial is in the correct position. In the example shown in  FIG. 7E , three direction dials are provided each having eight possible positions, giving a total of 512 permutations of code.  
         [0114]      FIG. 7E  shows a series of slider type of element. Each slider in this example has seven discrete positions. Each slider must be in the correct position to operate the locking mechanism. Where three such sliders are provided there are 343 different permutations of code.  
         [0115]     It will be apparent that other types of element may be used, and that combinations of different types of element may be used.  
         [0116]     A disadvantage of this type of system is that it requires a user to be able to see the code that has been entered. This is a disadvantage because where the elements are disposed on a surface of the handle  301  facing the door, it is difficult for a user to see which elements are in which position. Additionally, where a visually impaired person requires access they will not be able to easily distinguish the elements.  
         [0117]     Referring to  FIG. 8  herein, there is illustrated schematically examples of tactile indicators for elements for entering a code. The elements shown comprise buttons, although it will be apparent that tactile indicators can be equally used on other types of elements.  
         [0118]      FIG. 8A  illustrates a plurality of buttons having different surface finishes. Different surface finishes include knurling  801 , stripes  802 , dimples  803  or a smooth finish  804 . Other types of surface finish may also be used. The surface finish allows a user to distinguish between different elements using touch alone. In this way, a user could think of the code to operate the locking mechanism as, for example, “smooth, knurled, striped, knurled”.  
         [0119]      FIG. 8B  illustrates a plurality of buttons having different raised profiles. Raised profiles may include easily distinguishable shapes such as a diamond  805 , a square  806 , or a circle  807 . Again, the raised profile allows a user to distinguish different buttons by the way they feel.  
         [0120]      FIG. 8C  illustrates a plurality of buttons having different raised Braille profiles. This is of particular relevance to visually impaired users. The raised Braille profile allows buttons to be distinguished by letters or numbers using touch. In the example shown in  FIG. 8C , the buttons have Braille symbols for A  808 , B  809 , C  810  and D  811 .  
         [0121]     Where the elements are disposed on the handle, it is advantageous to provide a projecting hood disposed over the elements to partially shield them from atmospheric conditions. This is particularly advantageous where the handle is disposed on a surface of a door on the outside of a building, as the projecting hood can partially shield the elements from the effects of rain and other weather conditions.  
         [0122]     In a further embodiment, the means for operating the locking mechanism comprises means to respond to a plurality of movements of the handle. Referring to  FIG. 9  herein, there are illustrated schematically examples of handle movements.  
         [0123]     Instead of having elements such as buttons disposed on a surface of the handle, a code can be entered directly using the handle itself, and the locking mechanism can be operated if the entered code corresponds with a predetermined code. The code is entered by moving the handle.  
         [0124]      FIG. 9A  shows rotation of the handle about an axis substantially perpendicular to a main plane of the door. The door  901  comprises a main plane  902  of the face of the door  901 . The handle  903  can be moved  904  by rotating it about an axis substantially perpendicular to the main plane  902  of the door  901 . The locking mechanism is configured to be operated in response to movements of the handle. Each rotation may be a discrete amount. Indications such as audio clicks can notify the user how many discrete amounts the handle has been rotated. For example, by turning the handle upwards for two clicks, down for three clicks, upwards again for one click and down for a further two clicks, the locking mechanism can be operated. The precise code required to operate the locking mechanism is predetermined, and the code entered by the user in the form of handle movements must correspond with the predetermined movements required to operate the locking mechanism.  
         [0125]     Other types of handle movement are illustrated in  FIGS. 9B and 9C . However, these types of movement may also be used to operate the locking mechanism.  
         [0126]      FIG. 9B  illustrates rotation  906  of the handle  905  about an axis substantially parallel to the main plane  902  of the door  901 . This type of movement is similar to a method of changing gears on a bicycle using the handlebars. The user grasps the handle and rotates it either clockwise or anti-clockwise in a predetermined code.  
         [0127]      FIG. 9C  illustrates linear movement  908  of the handle  907  in a direction substantially perpendicular to the main plane  902  of the door  901 . By pulling or pushing the handle relative to the door, a code may be entered.  
         [0128]     The locking mechanism described with reference to  FIGS. 9A, 9B  and  9 C may be operated mechanically where, for example, entering the code using the handle  903  allows tumblers to fall into place thereby releasing the locking mechanism.  
         [0129]     Alternatively, the locking mechanism may be operated electrically where, for example, the code entered using the handle is analyzed digitally and the locking mechanism is operated using an electrical actuator if the code entered corresponds with the correct code for operating the locking mechanism.  
         [0130]     Where the means for operating the locking mechanism comprises means to respond to a plurality of movements of the handle, different styles of handle may be used. A lever type of handle is particularly suitable where the handle  905  is rotated  906  about an axis substantially parallel to the main plane  902  of the door  901 . Lever or knob types of handle are particularly suitable where the handle  903  is rotated  904  about an axis substantially parallel to the main plane  902  of the door  901 , or where the handle  907  is moved in a direction substantially perpendicular to the main plane  902  of the door  901 .  
         [0131]     According to a further specific embodiment, a further operation is required to operate the locking mechanism. This further operation includes, but is not limited to, any or any combination of an operating button, operating a touch pad, use of a swipe card, use of a fob tag of a key, use of identification technology, such as fingerprint recognition technology, use of logistics, automatic operation in response to a proximity device such as a radio transmitter and/or the like.  
         [0132]     If a user performs the further operation without having first entered a predetermined code, then the locking mechanism will not be operated. This type of locking mechanism may be used on, for example, a car door in which a combination of entering the correct code and having the correct key fob will open the door.  
         [0133]     In a further specific embodiment, each user has a personal code unique to that user. By entering their code, the locking mechanism may or may not be operated depending on whether that user is permitted to operate that locking mechanism. Thus, a first user may have their own personal identification number (PIN), and a second user may also have their own personal PIN, which is different to the first user&#39;s PIN. If the first user has clearance to access a door, but the second user does not have clearance to access that door, then the first user&#39;s PIN will operate the locking mechanism, but the second user&#39;s PIN will not operate the locking mechanism.  
         [0134]     A further specific embodiment that utilizes concealed locking elements is in automated teller machines (ATMs) and similar devices that require data to be entered via a keypad. Other such devices include, but are not limited to, point of sale PIN entry devices.  
         [0135]     ATMs require a user to enter a code such as a personal identification number (PIN) and to enter instructions. The PIN and instructions are entered through a keypad on the ATM, which for prior art ATMs is in view of third parties other than the user of the ATM. The user therefore risks a third party being able to find their details such as a PIN number or the amount of money being deposited or withdrawn.  
         [0136]     Referring to  FIG. 10A  herein, there is illustrated schematically a cross-section view of an ATM according to this specific embodiment. The ATM  1001  comprises a screen  1002  to provide the user with information, a hand rest  1003  on which a user can rest his or her hand, and a plurality of keys  1004 . The keys  1004  are disposed on a lower surface  1005  that is situated below the hand rest  1003 .  
         [0137]     Referring to  FIG. 10B  herein, there is illustrated schematically a view of the ATM from the perspective of a user. The only parts of the ATM that are visible are the hand rest  1003  and the screen  1002 . In use, the user places his/her hand on the hand rest  1003 . The user&#39;s fingers are positioned such that they curl over the edge  1006  of the hand rest and come into contact with the keys  1004 . The keys are disposed in a row along the lower surface  1005 . The keys  1004  may comprise tactile indicators as described above. The screen  1002  displays a key map  1007  that shows the user the relative position of the keys  1004  on the lower surface  1005  to assist the user in quickly identifying the correct keys.  
         [0138]     The keys  1004  can be used for any type of data input. Examples of the type of operations that can have keys  1004  assigned to them include, but are not limited to, the following numerical data input for, for example, entering a PIN or a value, cancelling a transaction, confirming a transaction and/or the like.  
         [0139]     By disposing the keys below a hand rest, a third party cannot see which keys are being pressed. In this way, a user&#39;s PIN can remain confidential as it is entered through the keys  1004 . Other aspects of a transaction, such as entering a value of money, cancelling a transaction, confirming and so on are also entered using the concealed keys  1004 .  
         [0140]     An ATM using these keys  1004  can be made to be triple data encryption standard (TDES) compliant, an industry standard algorithm for encrypting PINs, and for VISA ATMs should be compliant with VISA security requirements.  
         [0141]     In an alternative specific embodiment, the keys  1004  are disposed substantially at a surface of a bar and facing substantially towards the screen  1002  to prevent a third party from seeing which keys are being pressed. The bar may be disposed at any suitable angle. Suitable angles include the disposition of a bar such that its longitudinal axis is substantially horizontal or such that its longitudinal axis is substantially vertical. The bar need not necessarily be linear along its full length but can be shaped and angled to provide a comfortable grasp for the user that allows the user to intuitively identify the key required.  
         [0142]     In a further specific embodiment, the ATM includes disabled function keys to ensure compliance with both the Americans Disability Act and they UK Disability Discrimination Act.  
         [0143]     Disabled function keys can include keys having, for example, Braille profiles to assist a visually impaired user. Disabled function keys can be included as part of a secondary keypad, the ATM further comprises means to alert the ATM if a disabled or visually impaired person is using the machine, thereby enabling the disabled function keys.  
         [0144]     In a further specific embodiment, a numeric keypad is pivotally mounted on a surface of an ATM. Referring to  FIG. 11  herein, there is illustrated schematically a cross-section view of an ATM having a pivotally mounted keypad. The ATM  1100  comprises a hand rest  1101  and a data entry device in the form of a keypad  1102 . The keypad  1102  comprises a plurality of keys  1103  and is disposed at the hand rest  1101 . The keypad  1102  is mounted on a pivotally moveable drum  1104 . The drum can pivot as shown by arrow  1105  such that the keypad can be angled substantially towards a user or substantially towards a screen  1106 , and hence away from a user.  
         [0145]     In this way, a user can see the keypad  1102  and the position of the keys  1103  when the keypad  1102  is angled towards the user. Once the user has seen the position of the keys  1103 , the drum  1104  is rotated such that the keypad  1102  substantially faces the screen  1106 , and is therefore more difficult for third parties to see. The restricted view of the keypad  1102  provides more security for a user&#39;s PIN. The keypad is therefore configured to move between a visible position relative to a user and a concealed position relative to a user.  
         [0146]     A further advantage of having a pivoting drum  1104  on which a keypad  1102  is mounted is that it restricts fitting of a cover. A way of defrauding an ATM is to fit a cover having a dummy keypad that records keystrokes on the keypad, and hence a PIN, and a dummy card entrance that records card details. Dummy covers can look extremely convincing. However, having a pivoting keypad  1102  restricts the fitting of a dummy cover.  
         [0147]     A further way to restrict fitting a dummy cover is to provide chamfered studs as part of an ATM. Referring to  FIG. 12A  herein, there is illustrated schematically a cross-section view of an ATM having studs fitted to a surface of the ATM. A stud  1201  is provided ostensibly as a decorative feature. However, its function is to restrict the fitting of a dummy cover. The stud  1201  is disposed on a surface  1202  of the ATM in close proximity to a card entry port  1203 . The stud is chamfered such that a surface width  1204  of the stud  1202  disposed on the surface  1202  is less than an opposite width  1205  of the stud  1201  opposing the surface  1202 . The stud can be of any suitable shape that fits these criteria. An example of such a shape would be an inverted truncated cone. In any case, a shape having a trapezoidal cross-section is suitable.  
         [0148]     More than one chamfered stud  1201  can be provided at different regions of the ATM.  
         [0149]     If a dummy cover were to be fitted to the ATM, it would be apparent to a user that a dummy cover was in place on the ATM as the chamfered studs would no longer look chamfered, but straight-walled. For example, where the chamfered studs have the shape of an inverted truncated cone, the dummy cover would need to be cylindrical to cover the chamfered studs. Referring to  FIG. 12B  herein, there is illustrated schematically a cross-section view of an ATM having studs fitted to a surface of the ATM with a dummy cover placed over the stud.  
         [0150]     The dummy cover  1206  has a cross-section to fit over the opposite width  1205  of the stud  1201 , and therefore does not have angled walls  1206 . As the walls  1206  are not angled, they block off the card entry port  1203  owing to the proximity of the stud  1201  to the card entry port  1203 . This prevents a user from being able to use the ATM if a dummy cover is fitted, thereby reducing ATM fraud. The card entry port  1203  is blocked off because the opposite width  1205 , or upper surface of the stud  1201 , is disposed above the card entry port  1203 .  
         [0151]     In a further specific embodiment, a keypad for an ATM is disposed in a trough on a surface of the ATM. Referring to  FIG. 13A  herein, there is illustrated schematically an ATM comprising a trough with a keypad disposed in the trough. The ATM  1301  comprises a screen  1302  configured to provide a user with information, a trough  1303  at the ATM having a base, the base being substantially perpendicular to the main plane of the screen  1302 . A data entry device in the form of a keypad  1304  is disposed at said base.  
         [0152]     Owing to the depth of the trough, a line of sight  1305  directly above the keypad  1304  allows a user to see the keypad  1304 . However, a third party standing a little way behind or to one side of the user cannot see the keypad  1304  as their line of sight  1306  is restricted. In this way the information entered by a user is more likely to remain confidential.  
         [0153]     Referring to  FIG. 13B  herein, is illustrated schematically an ATM comprising a trough with a keypad disposed on a wall of the trough. The ATM  1301  comprises the screen  1302  and a trough. The keypad  1306  is disposed on a wall of the trough substantially facing the screen  1302 , and in a main plane substantially parallel to a main plane of the screen  1302 . A reflective surface such as a mirror  1308  is disposed on an opposing wall of the trough, thereby allowing a user to view the mirror in their line of sight  1309  and view the reflection  1310  of the keypad. It is considered that by inverting the normal array of keys on the keypad  1307 , the mirror image of the keypad  1307  will be apparent to the user, allowing him or her to easily enter data.  
         [0154]     More that one mirror can be used to reflect the keypad if it is disposed at a different point in the trough  1303 .  
         [0155]     In a further specific embodiment, a viewing port can be provided to allow a user to see the keypad. Referring to  FIG. 14  herein, there is illustrated schematically an ATM having a viewing port.  FIG. 14A  illustrates schematically a cross-section of an ATM having a viewing port. The ATM  1401  comprises a display device  1402 , in the form of a screen. The display device  1402  is configured to display information to the user. The ATM further comprises a trough  1403  at the ATM, the trough having a base  1404  and side walls, a main plane of the base being substantially perpendicular to a main plane of the screen  1402 . A first side wall  1405  has a main plane substantially parallel to the main plane of the screen  1402 , and has a face substantially facing said screen. A second side wall  1406  also has a main plane substantially parallel to the main plane of the screen  1402  and is substantially facing the first side wall  1405 .  
         [0156]     A data entry device in the form of a keypad  1407  is disposed on the first side wall  1405  of the trough. The keypad  1407  is configured to allow the user to enter data, and is disposed on the first side wall  1405  to restrict the view of the keypad  1407 .  
         [0157]     A camera  1408  is disposed on the second side wall  1408  of the trough  1403 , and is configured to capture an image of the keypad  1407 . The camera  1408  is operatively connected to a viewing port  1409 . The viewing port  1409  allows the user to see the image of the keypad  1407 , and thereby see which keys are being pressed. The viewing port  1409  is configured so that only the user looking directly down the viewing port  1409  can see the image of the keypad  1407 . In this way, no third party can see the image of the keypad  1407  whilst the user is operating the keypad  1407 .  
         [0158]     The viewing port  1409  is mounted on a slider  1410  that allows a user to adjust the height of the viewing port  1409 .  
         [0159]     Referring to  FIG. 14B , there is illustrated schematically a perspective view of the ATM having a viewing port  1409 . A marker  1411  is placed on a surface of the ATM adjacent the first side wall  1407  of the trough to illustrate to the user the location of the keypad  1407  and assist the user in positioning his or her hand in the correct place for operating the keypad.  
         [0160]     The camera may be provided with an on/off switch to conserve energy. The camera  1409  defaults to an off mode, and if the user wishes to use the facility of the camera he or she may turn the camera to an on mode.  
         [0161]     Alternatively, the camera may be configured to turn on in response to a hand being placed over the marker  1411 , and to turn off again when the user&#39;s hand is removed from over the marker  1411 .  
         [0162]     Referring to  FIGS. 15 and 16 , there is illustrated examples of an ATM machine  1502  and a card and pin input device  1602 . The ATM machine  1502  and device  1602  includes a first display screen  1504  which is arranged in a conventional manner such that it is substantially vertical or at a small acute angle to the vertical and therefore can be viewed by a user in a horizontal orientation. A second display screen  1506  is provided in accordance with the present invention which is arranged in a substantially horizontal orientation, although it will be appreciated that small acute angles to the horizontal also still fall within the meaning of substantially horizontal.  
         [0163]     Second display screen  1506  is recessed within a channel  1508  defined in surface  1510  of machine  1502 . The side walls of channel  1508  are arranged substantially perpendicular to display screen  1506 , such that a user looking through an opening arranged opposite to screen  1506  has to look in a substantially vertical direction downwardly in order to view data displayed on the display screen. As such, a third party standing behind the user would not be able to view the display screen  1506  due to the walls of channel  1508  restricting their view.  
         [0164]     The data displayed on display screen  1506  typically relates to confidential data, such as a user&#39;s pin number, virtual keypad for inputting a pin number and/or the like. The arrangement of data on screen  1506  can be randomly moved and/or scrambled to prevent a third party from correlating movement of selection means to selection of a particular data item on the display screen.  
         [0165]     Selection means in the form of a rotatably mounted ball member  1512  is mounted on surface  1510  to allow selection of data displayed on screen  1506  and/or on screen  1504 . Ball member  1512  is typically rotatable in one of an arbitrary number of directions, such that a third party cannot easily correlate movement of the selector ball  1512  with movement of an indicator arrow on the display screens or selection of data on the display screen. Ball member  1512  can be depressed to allow selection of a data item on the display screen in addition to rotation of the ball member to move an indicator arrow around the display screen. Alternatively, or in addition, a further selection button can be provided to allow selection of one or more data items from screens  1506  and/or  1504 .  
         [0166]     The ATM can include any other features normally provided on an ATM machine, such as a credit card entry port, cash dispensing slot and/or the like. In addition, only a single display screen  1506  need be provided if required.