Abstract:
A self-service terminal ( 22 ) that includes an optical system ( 28 ) for detecting a terminal overlay or artifact.

Description:
BACKGROUND  
       [0001]     The present invention relates to a self-service terminal, such as an automated teller machine (ATM).  
         [0002]      FIGS. 1 and 2  show schematic views of a typical ATM  10 . This includes a processor  12  for controlling interaction with the terminal  10  and communicating with a remote host (not shown). Connected to the processor  12  are the following: a screen  14  for presenting instructions to a user, a conventional keyboard  16  for receiving user inputs, a card slot  18  for allowing a user&#39;s bank card to be fed into a card reader and a dispensing slot  20  for allowing valuable media, such as cash to be dispensed. Data input by the user is received by the keyboard  16  and sent from there to the processor  12 , which is programmed to react in accordance with any user requests.  
         [0003]     In order to defraud ATM systems and/or customers, criminals are becoming increasingly sophisticated. For example, artefacts or overlays are sometimes added to the front of ATMs by fraudsters in order to collect data pertaining to customer transactions or intercept media entering or leaving the ATM (such as card trapping mechanisms). These add-ons are becoming so advanced they can blend in with the manufacturer&#39;s design of the ATM matching color, shape, etc. This can make it almost impossible for an untrained observer to establish that an additional device has compromised the ATM.  
       SUMMARY  
       [0004]     According to one aspect of the invention there is provided a self-service terminal comprising means for sensing/detecting an unauthorized overlay or artifact on a portion of the terminal.  
         [0005]     By providing a means for sensing/detecting the presence of a device overlaying a part of the terminal, for example the keyboard or card reader slot, potential fraud can be detected. In the event that such an overlay or device is detected, the terminal is operable to take remedial action such as shutting itself down.  
         [0006]     The means for detecting/sensing may comprise an optical system having one or more optical sensors.  
         [0007]     The optical system may be operable to detect long-term changes in the static topography of a front portion of the terminal, thereby to identify an unauthorized overlay. The optical system may be operable to determine a three-dimensional relief map of a portion of the terminal and use this to determine any changes in the static topography, thereby to detect an overlay or artifact.  
         [0008]     Additionally or alternatively, the optical system may be operable to detect finger movement over the keyboard and use this to detect a terminal overlay. In particular, the optical system may include a camera that is operable to detect ambient light received from the vicinity of the keyboard to identify user selections and use the received light to detect a terminal overlay. In the event that the optical system detects that a user is interacting with the keyboard, but the received signal is interpreted as invalid, this is indicative of the presence of an overlay or some other potentially fraudulent activity.  
         [0009]     The optical system may be operable to provide an optical keyboard using visible light, thereby to provide a visual guide for the user, as well to detect a terminal overlay. Alternatively, a mechanical/physical keyboard or pad arrangement may be provided as a visual guide. This could be visually identical to conventional terminal parts such keyboards or pad arrangements, so that users are comfortable with the look and feel of the terminal. However since the inputs are detected by the optical system, in this case the keyboard or pad arrangement would not be connected to any internal processors or other such devices.  
         [0010]     The optical system may be provided internally of the terminal, ideally behind a window that is transparent at the operating wavelength of that system.  
         [0011]     According to another aspect of the invention there is provided a method for detecting potential fraud in a self-service terminal, such as an automated teller machine, the method comprising sensing /detecting an unauthorized overlay or artifact that is carried or mounted on a portion of the terminal.  
         [0012]     The method may involve detecting/sensing an overlay using an optical system having one or more optical sensors.  
         [0013]     The method may involve detecting a change in height or width of a portion of the terminal.  
         [0014]     The method may involve detecting changes in a static topography of a portion of the terminal, thereby to identify an unauthorized overlay. This may involve determining a three-dimensional relief map of all or designated portion of the terminal and using this to determine any changes.  
         [0015]     Additionally or alternatively, the method may further involve using an optical system to detect finger movement over the keyboard and using this to detect a terminal overlay or artifact.  
         [0016]     The method may further involve using visible light to provide a visual keyboard/user interface. Alternatively, the method may involve providing a mechanical/physical keyboard or pad arrangement for use as a visual guide.  
         [0017]     According to another aspect of the invention there is provided a self-service terminal comprising an optical system for generating an optical user input interface. The optical system may be operable to detect an overlay or artifact on a front portion of the terminal. 
     
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0018]     Various aspects of the invention will now be described by way of example only and with reference to the following drawings, of which:  
         [0019]      FIG. 3  is a cross section of an ATM that includes an optical activated keyboard;  
         [0020]      FIG. 4  is a front view of a dummy keyboard for use in the ATM of  FIG. 3 , and  
         [0021]      FIG. 5  is a front view of another dummy keyboard arrangement for use in the ATM of  FIG. 3 . 
     
    
     DETAILED DESCRIPTION  
       [0022]      FIG. 3  shows an ATM  22  that has a virtual keyboard  24 . By this it is meant that the keyboard  24  that is presented on the front of the terminal  24  is not connected to the processor  26  and instead is provided merely as a visual guide for a user.  FIG. 4  shows an example of a suitable such keyboard  24 . Typically this would be designed to have the look and feel of a conventional keyboard, so that customers would find it familiar. Associated with the keyboard  24  is an optical system  28 . This includes a camera (not shown) having a plurality of optical detectors for detecting ambient light reflected from a front face of the terminal  22 . Ideally, the optical system  28  is provided internally of the terminal, behind a window or portion of the housing that is optically transparent at the desired wavelength of operation.  
         [0023]     The optical system  28  is provided for detecting possible device overlays and receiving and interpreting user inputs. The overlay detection process can be done either by using an optically derived static topography of a portion of the terminal, typically the keyboard or the card reader slot, or by identifying irregularities in received signals when a user is interacting with the keyboard. Any suitable optical arrangement could be used. A preferred example is described in U.S. Pat. No. 6,323,942, the contents of which are incorporated herein by reference. In this, “time of flight” calculations are used to determine the distance between the features under surveillance and an array of photo-detectors.  
         [0024]     In a preferred embodiment, the optical system  28  is operable to detect ambient light reflected from the dummy keyboard  24  and use that to detect any long-term changes in the overall topography. This information can then be used to detect the presence of an overlay. This is done by monitoring the static topography as a function of time. In the event that a change is detected, for example a change in the level of the keyboard  24  above a pre-determined level, the optical system  28  is configured to send a signal indicative of this to the terminal processor. In response to receipt of this signal, the processor  26  is arranged to close down the terminal  22  and where appropriate notify the remote host (not shown). In this way, potential fraud can be detected and steps can be taken to limit any damage.  
         [0025]     In addition to detecting changes in the static topography of the terminal, the optical system  28  of  FIG. 3  is operable to function as part of an optically activated user input. In particular, the optical system  28  is able to monitor and detect when a user&#39;s hand is located over the dummy keyboard. In the event that a user&#39;s hand is detected, the optical system is operable to use light reflected therefrom to identify and monitor movement of the user&#39;s fingers, thereby to provide positional information. Using this positional information, the keys of the dummy keyboard  24  that are pressed by the user can be identified. Optionally, an IR sensor (not shown) may be provided for verifying user selections. Typically this would be positioned in the vicinity of the keyboard  24  so that it can detect when the user&#39;s fingers physically make contact with that keyboard  24 . This information can be used to identify user selections, and in conjunction with the optical system  28  provide a means for verifying such selections. Once an input is identified using the optical system  28  and optionally verified using the IR sensor, a signal indicative of the user selection is sent from the optical system  28  to the processor  26 , and the transaction can proceed in a conventional manner.  
         [0026]     In practice, it is important for the relationship between the physical positions of the various parts of the dummy keyboard  24  and the optical system  28  of  FIG. 3  to be well defined, in order to ensure correct interpretation of the detected light signals and thereby identify user selections. Even small variations in, for example, the height of the keyboard affect the integrity of the data received. Because of this, in the event that an overlay were to be fitted to the front of the ATM  22  in order to cover the keyboard  24  and thereby capture data entered by the user (such as their personal identification number), although finger movement would be detected, the reflected signals received by the optical system  28  would not be used to interpret user data input commands. Hence, a user would not be able to carry out a transaction. This inability to interpret the data would be identified by the system  28  as being indicative of the presence of an overlay.  
         [0027]     As will be appreciated, detecting the presence of an overlay would not in itself prevent the capture by the overlay of the user&#39;s personal identification number. However, data received at the optical system  28  could be used to close down the ATM  22  and thereby limit the potential damage. To this end, the optical system  28  is configured to identify movement that would indicate user activity and in the event that this is interpreted as an invalid user keyboard input send a warning signal to the processor  26 . The processor  26  is arranged so that on receipt of this signal, the ATM  22  can be closed down and an alarm signal sent to the remote host. By doing this subsequent frauds can be prevented and the host can be immediately alerted to the attack. In addition to this, where a user&#39;s private bank details have been entered, then the ATM  22  is operable to send a signal to the host to suspend the user&#39;s account. In this way, both the ATM  22  and the user can be protected.  
         [0028]     A skilled person will appreciate that variations of the disclosed arrangements are possible without departing from the invention. For example, whilst the optical system  28  is described as determining the user inputs, the positional data acquired by that system could instead be processed in the central ATM processor  26 , thereby to provide details of the user inputs. Additionally or alternatively, whilst the dummy keyboard  24  described above is a physical board with keypads marked on it, the keyboard itself could be provided by projecting visible light onto a predetermined area of the front fascia of the ATM  22 . Equally, although the keyboard of  FIG. 4  is shown as having numbered keys, the arrangement of  FIG. 5  could be used. In this, a plurality of keypads  30  is arranged around the terminal screen  32 . These are functionally connected to information that is presented on the screen  32 , so that user selections can be made. Furthermore, although the optical system described above is used for the dual purpose of identifying user inputs and detecting a terminal overlay, it will be appreciated that a simpler optical system could be used for detecting a change in height or width of any part of the terminal. Accordingly the above description of the specific embodiment is made by way of example only and not for the purposes of limitation. It will be clear to the skilled person that minor modifications may be made without significant changes to the operation described.