Abstract:
A manipulation detection system for removable insertable cash cartridges in automated banking machines is described,
       wherein the cash cartridge has a lockable cash dispensing/deposit opening for disbursing money and/or depositing money in the operating position of the cash cartridge,   wherein the cash dispensing/deposit opening is opened automatically when the cash cartridge is inserted into the automated banking machine even before said cassette reaches its operating position,   wherein when the cash dispensing/deposit opening is opened, a manipulation alert is generated at the cash cartridge by means of a sensor.       
 
     The system is also characterized in that
       at least two switches (S 1 , S 2 , S*) are provided in the cash cartridge,   the at least two switches (S 1 , S 2 , S*) are actuated automatically when the cash cartridge is inserted into the automated banking machine,   the switch actuation sequence of the at least two switches (S 1 , S 2 , S*) is evaluated using pre-determined criteria for the generation of a manipulation alert.

Description:
CROSS-REFERENCE TO RELATED APPLICATIONS 
     This application is a National Stage of International Application No. PCT/EP2009/004815, filed Jul. 3, 2009. This application claims the benefit and priority of German application 10 2008 035 915.7 filed Jul. 31, 2008. The entire disclosures of the above applications are incorporated herein by reference. 
     BACKGROUND 
     This section provides background information related to the present disclosure which is not necessarily prior art. 
     1. Technical Field 
     The invention relates to a manipulation detection system for removable insertable cash cartridges in automated banking machines (ABMs). Generic cash cartridges have a lockable cash dispensing/deposit opening for disbursing money and/or depositing money when in the operating position in the automated banking machine. 
     2. Discussion 
     Discussion For security reasons, it is important to know whether the cash dispensing/deposit opening of the cash cartridge has been opened without authorization outside the automated banking machine in order to remove bank notes. In this regard, it is of particular interest whether a) the cash cartridge was opened in the time period between being filled with bank notes at a bank or a valuables transport company and its deployment in an automated banking machine, and b) whether the cash cartridge was opened in a time period between its removal from an automated banking machine and the official opening at a bank or a valuables transport company. 
     For this reason it is proposed in DE 690 04906 T2 that to recognize manipulation via a sensor that detects the opening of the cash dispensing/deposit opening, a manipulation alert is generated at the cash cartridge. A manipulation alert of this type can be used specifically to activate a dye pack located in the cash cartridge. Money in the cash cartridge, particularly bank notes, can thereby be rendered unusable by being dyed with a special ink. 
     In a system consisting of automated banking machine and cash cartridge, in which, due to the design of the system, the money dispensing/deposit opening is opened automatically, for example by a guide, when inserted into the automated banking machine before reaching the operating position, this opening of the dispensing/deposit opening is problematic to the extent that this permissible opening can erroneously result in a manipulation alert at the cash cartridge. Such a manipulation alert in cash cartridges with a dye pack would lead to undesirable activation of the dye pack which would result in great losses. 
     SUMMARY OF THE INVENTION 
     An object of the invention is, therefore, to develop a manipulation detection system that can distinguish in a simple and reliable way between authorized opening of the cash dispensing/deposit opening of a cash cartridge inside the automated banking machine and unauthorized opening outside the automated banking machine. 
     In accordance with the invention, at least two, preferably three switches are provided in the cash cartridge that are automatically actuated when the cash cartridge is inserted into the automated banking machine. In order to generate a manipulation alert (i.e., some response due to unauthorized tampering) , the switch actuation sequence of the at least two switches is evaluated using predefined criteria. Unauthorized opening of the cash dispensing/deposit opening outside the ABM always leads to a manipulation alert, and in the case of cash cartridges with a dye pack, to activation of said pack because the specified switch actuation sequence does not occur in this instance. The more switches that are used, the more complex the switch actuation sequence and the more reliably manipulation is detected. Through the use of three switches, a very high degree of reliability and security is obtained at an acceptable cost. 
     In accordance with the invention, an automated banking machine is understood to mean any automat for depositing or dispensing money using cash cartridges. The term automated banking machine includes both self-service and staffed automats, e.g. so-called automatic teller safes. The generic automated banking machine can be operated in a retail operation, for example, in conjunction with a payment station as a point-of-sales terminal. 
    
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
       The drawings described herein are for illustrative purposes only of selected embodiments and not all possible implementations, and are not intended to limit the scope of the present disclosure. 
       Using the appended drawings, the invention is to be explained in greater detail in what follows: 
         FIGS. 1A-1D  show different phases when inserting the cash cartridge into the automated banking machine, 
         FIG. 2  shows timing diagrams for the switch actuations, 
         FIG. 3  shows a block diagram of a cash cartridge with the components located therein. 
     
    
    
     Corresponding reference numerals indicate corresponding parts throughout the several views of the drawings. 
     DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
     Example embodiments will now be described more fully with reference to the accompanying drawings. 
     An automated banking machine ( 1 ) with a cash cartridge ( 2 ) is shown schematically in  FIGS. 1A to 1D , where various phases during the insertion of the cash cartridge are shown. The cash dispensing/deposit opening ( 2 C) is located essentially on the front side of the cash cartridge ( 2 ). To close this opening ( 2 C), for example, a blind or shutter is provided. The cash dispensing/deposit opening ( 2 C) is opened automatically by a slotted guide (not shown) before it has reached its operating position when the cash cartridge ( 2 ) is inserted into the automated banking machine ( 1 ). This happens, for instance, by a blind being slid open. The displacement of the blind is shown schematically and identified with the reference numeral  2 B. The insertion of the cash cartridge ( 2 ) preferably takes place by pushing the cash cartridge ( 2 ) into a frame in the automated banking machine ( 1 ). 
     Three switches (S 1 , S 2 , S*) are provided in the cash cartridge that are actuated automatically in a specific, pre-determined sequence when the cash cartridge ( 2 ) is inserted into the automated banking machine ( 1 ). In addition, the cash cartridge has a plug ( 2 A) that, in the fully inserted position (operating position), is connected to a mating connector ( 1  C) in the automated banking machine to provide energy and/or data transmission between the automated banking machine and the cash cartridge ( 2 ). A magnet ( 1 A) is shown schematically as a component of the automated banking machine, the function of which will be explained later. 
     As depicted in  FIG. 1A , the cash cartridge ( 2 ) has already been pushed far enough into the automated banking machine ( 1 ) that the cash dispensing/deposit opening ( 2 C) has been opened slightly. At time TO, the switch (S 1 ) in the cash cartridge is actuated. Switch (S 1 ) is preferably a mechanically actuatable switch, e.g. a pushbutton switch that is actuated, for instance, by the displacement of the blind or shutter. 
     As depicted in  FIG. 1B , the cash cartridge ( 2 ) has been pushed further into the automated banking machine compared with the position of  FIG. 1A . In this position, the switch (S*) in the cash cartridge is actuated at time T 1 . In the case of switch (S*), it is preferably a Hall switch that is actuated when it detects a magnetic field with a magnetic field strength that lies above a certain threshold. The Hall switch (S*) is thus actuated when the Hall switch (S*) is moved into the effective range of the magnet ( 1 A) as the cash cartridge ( 2 ) is inserted. This is the case—as shown in FIG.  1 B—at time T 1  when the Hall switch (S*) and the magnet ( 1 A) lie directly opposite each other and the distance between Hall switch (S*) and magnet ( 1 A) is minimal. 
     As shown in  FIG. 1C , the cash cartridge ( 2 ) has been pushed further into the automated banking machine compared with the position of  FIG. 1B . In this position, the cash dispensing/deposit opening ( 2 C) is already almost completely open. The Hall switch (S*) is no longer within the effective range of the magnet ( 1 A) in this position. The switch (S 2 ) is actuated in this position at time T 2 . As in the case of switch (S 1 ), switch (S 2 ) is preferably a mechanically actuatable switch, e.g. a pushbutton switch that is actuated for example by the displacement of the blind or shutter. 
     As shown in  FIG. 1D , the cash cartridge ( 2 ) is located in the completely inserted position, i.e. in the operating position. In this position, the cash dispensing/deposit opening ( 2 C) is fully open. Additionally, the plug ( 2 A) for the cash cartridge and the mating connector ( 1 C) of the automated banking machine ( 1 ) are in electrical contact with each other. In the operating position, money can be removed from and/or deposited into the cartridge ( 2 ) by way of a module ( 1 B) located in the automated banking machine ( 1 ). 
     The switch times T 0 , T 1  and T 2  are indicated symbolically in  FIGS. 1A-1C  at the locations where the front face of the cash cartridge ( 2 ) has reached the respective positions at which switches S 1 , S* or S 2  are actuated. 
     The sequence of switch actuations (S 1 →S*→S 2 ), as was explained using  FIGS. 1A-1D , is shown again in the timing diagram in  FIG. 2 . Also shown there is the switch position (also known as switch status) for each of the switches (S 1 , S 2 , S*) relative to the time when the cash cartridge ( 2 ) was inserted. Switch (S 1 ) is the first to be actuated, where the actuation of this switch (S 1 ) defines time T 0 . At time T 1 , the Hall switch (S*) is actuated. As soon as the Hall switch (S*) has left the effective range of the magnet ( 1 A) as the cash cartridge ( 2 ) is inserted further, the switch status of the Hall switch (S*) returns from “On” to “Off”. At time T 2 , switch (S 2 ) is actuated as the last of the three switches. 
     In one embodiment of the invention provision is made for switches S 1  and S 2  to remain in the “On” status after actuation until the cash cartridge ( 2 ) is in the operating position at time T stop , which is detected through the plug contact (cash cartridge plug/mating connection of automated banking machine). 
     In an alternative embodiment, provision is made for switches S 1  and S 2  to remain in the “On” status after actuation until the cash dispensing/deposit opening ( 2 C) is closed again after being removed from the automated banking machine ( 1 ). 
     In further alternative embodiment, provision is made for switches S 1  and S 2  to return automatically again from status “On” to status “Off” after a certain time following actuation. 
     A manipulation alert is always generated when the switch actuation sequence detected does not match the previously defined switch actuation sequence for the system. The pre-defined switch actuation sequence is determined as follows: 
     First, actuation of switch S 1  (Off→On), then actuation of switch S* (Off→On) and then actuation of switch S 2  (Off→On). 
     In a further developed variant, the pre-defined resetting of switch (S*) in the switch actuation sequence is scanned: 
     First, actuation of switch S 1  (Off→On), then actuation of switch S* (Off→On), then the resetting of switch S* (On→Off), and then actuation of switch S 2  (Off→On). 
     The more complex the pre-defined switch actuation sequence is, the more difficult it is to imitate said sequence outside the automated banking machine. 
     Furthermore, provision is also made not only to scan the sequence of switch actuation per se but also whether said sequence took place within a pre-determined time period (ΔT). For this reason, a mechanical resistance to insertion (not shown) is provided that has to be overcome in terms of time when inserting the cash cartridge ( 2 ) before the first switch (S 1 ) is actuated. To overcome this resistance, the operator has to exert a certain minimum force when inserting the cash cartridge which ensures that after overcoming this resistance, a maximum time is not exceeded to complete the subsequent distance over which the three switches (S 1 , S*, S 2 ) are then actuated. In other words, overcoming the resistance to insertion effects sufficient impetus so that the time period between actuation of the first switch (S 1 ) and the last switch (S 2 ) can be reduced to a calculable maximum amount. 
     Provision is further made in one embodiment to scan the time intervals between actuation of the individual switches. 
     The pre-defined criteria, using which the switch actuation sequence detected is evaluated, are accordingly: fixed sequence for switch actuation and/or reset, time period for the actuation of all switches and/or time intervals between individual switch actuations. 
     Through the use of at least one non-mechanically actuatable switch S* (e.g. in the form of a Hall switch), which requires a further element (e.g. magnet) located on the automated banking machine ( 1 ) for its actuation, the reliability of the manipulation detection system is substantially increased because a fraudulent re-creation of the switch activation sequence presupposes precise knowledge of the magnet, its strength, installation location and distance to the Hall sensor at the time of actuation. 
     In the manipulation detection system in accordance with the invention, generation of a manipulation alert is used specifically to activate a dye pack located in the cash cartridge ( 2 ) in order make the money in the cash cartridge ( 2 ) unusable by dying said money with ink in the event of manipulation (=unauthorized opening of the cash dispensing/deposit opening outside the automated banking machine). Alternatively or additionally, the manipulation alert can also be used to generate an optical and/or acoustic manipulation alert signal at the cash cartridge ( 2 ). The manipulation alert can also be saved in a manipulation memory (not shown) of the cash cartridge ( 2 ). 
     In one embodiment of the invention, provision is made to use the actuation of one of the three switches (S 1 , S 2 , S*) to generate a provisional manipulation alert, where this provisional manipulation alert is canceled if the evaluation of the switch actuation sequence shows that no manipulation has taken place. Only if the evaluation of the switch actuation sequence shows that manipulation has taken place, does the preliminary manipulation alert became a final manipulation alert, which then results in activation of a dye pack for example. The use of switch (S 2 ) is particularly suitable for generating a preliminary manipulation alert because the switch (S 2 ) is actuated when the cash dispensing/deposit opening ( 2 C) is already almost fully open. 
     The manipulation detection system in accordance with the invention, which is specifically also intended to prevent the generation of an unwanted manipulation alert during insertion into an automated banking machine ( 1 ), has the advantage that it also operates if the power supply to the automated banking machine ( 1 ) fails when the cash cartridge ( 2 ) is inserted since the switches (S 1 , S 2 , S*) and the evaluation for the detection of manipulation are located in the cash cartridge ( 2 ) that uses an independent power supply, e.g. through a battery. In this way, erroneous triggering of the dye pack when the cash cartridge ( 2 ) is inserted can be reliably prevented if the power supply for the automated banking machine fails. 
       FIG. 3  shows a block diagram for a cash cartridge with the components located therein. The battery supplies the remaining components with energy (current, voltage). In the operating position, the components can also be supplied with energy through the plug from the automated banking machine. The switch modes of the three switches are scanned and evaluated by an evaluation and control unit in order to check whether the switch actuation sequence scanned matches the pre-defined criteria. The timer is started with the actuation of the first switch (S 1 ), which defines time T 0 . Actuation of the last switch (S 2 ) at time T 2  defines the end of the switch actuation sequence, where ΔT=T 2 −T 1 . 
     The foregoing description of the embodiments has been provided for purposes of illustration and description. It is not intended to be exhaustive or to limit the invention. Individual elements or features of a particular embodiment are generally not limited to that particular embodiment, but, where applicable, are interchangeable and can be used in a selected embodiment, even if not specifically shown or described. The same may also be varied in many ways. Such variations are not to be regarded as a departure from the invention, and all such modifications are intended to be included within the scope of the invention.