Patent Description:
<CIT> discloses a DATA CARD AUTHENTICATION SYSTEM AND METHOD which provides a method and an apparatus for authenticating a data card. The method for authenticating a data card having data storage comprises the steps capturing an image of the data card and comparing the image with a predetermined image to authenticate the data card. Alternatively, the method for authenticating comprises the step of receiving the data card to determine whether embossed data is present on the data card. Often, counterfeit data cards are merely cards with the data storage reprogrammed for access. By performing an image comparison between a valid card image and the incoming card image or a check for presence of embossment, counterfeit data cards are discoverable.

<CIT> discloses DETECTING UNAUTHORIZED CARD SKIMMERS. In an example embodiment, an automated banking machine that includes an antifraud arrangement that can deter effective operation of unauthorized devices attached to the machine. The arrangement allows for the machine's card slot bezel to be frequently exchanged for a differently configured card slot bezel, where the bezel configuration is displayed to a potential user.

<CIT> discloses a BANKING MACHINE CONTROLLED RESPONISVE TO DATA READ FROM DATA BEARING RECORDS. The banking system operates responsive to data read from data bearing records. The system includes an automated banking machine comprising a card reader. The card reader includes a movable read head that can read card data along a magnetic stripe of a card that was inserted long-edge first. The card reader includes a card entry gate. The gate is opened for a card that is determined to be properly oriented for data reading. The card reader can encrypt card data, including account data. The card data is usable by the machine to authorize a user to carry out a financial transfer involving the account.

<CIT> discloses a self-service device i.e. automated teller machine, for dispensing cash in bank, with a control panel with magnetic card reader and detection device for optical detection of a surface of a magnetic card. The device has a control unit, a control panel with a magnetic card reader and a detection device for optical detection of surface of a magnetic card. The detection device is designed as a camera or an optical sensor, and provided in the magnetic card reader. A data storage unit is connected with the detection device, and an image processing device is connected with the detection device and/or the control unit. The control panel is arranged at a front side of a housing. An independent claim is also included for a method for detecting an operation of a manipulated magnetic card in a self-service device.

<CIT> discloses a highly integrated and flexible system for vending products and services to consumers. The system receives information in advance of the vend by having the consumer insert an identification (ID) card, preferably a driver's license, into a point-of-purchase terminal (referred to as an OSU device). The OSU device preferably contains an Optical Scanning Unit (OSU), capable of scanning the textual information on the ID card. In one embodiment, the scanned information is compared against optical templates present in the system to discern or verify the information on the ID card, and is then used by the system to enable or disable the vending transaction, and/or to allow access to several preregistered system accounts.

<CIT>discloses an embossed card reader comprising an incident angle variable mechanism <NUM> for changing only the angle for projecting light to the embossed card <NUM>.

A self-service terminal is disclosed herein. The self-service terminal includes a computing device having one or more processors. The self-service terminal also includes a display in communication with the computing device. Indicia displayed by the display is controlled by the computing device. The self-service terminal also includes a transceiver in communication with the computing device. The computing device can transmit data remotely through the transceiver and can receive data through the transceiver. The self-service terminal also includes a card module having an intake configured to receive a card. The card module defines a path of movement for the card. The card module includes first and second optical scanners positioned on opposite sides of the path to respectively capture images from opposite sides of the card. The card module also includes at least one card reader configured to read one of a chip embedded in the card and a magnetic strip of the card. The self-service terminal also includes at least one radiation source positioned on a first side of said path with said first optical scanner, said at least one radiation source configured to emit light on a card in said card path and said first optical scanner configured to capture an image of the card to which light from said at least one radiation source is directed, said at least one radiation source being moveable relative to said path and to said first optical scanner.

Various aspects will become apparent to those skilled in the art from the following detailed description and the accompanying drawings.

A plurality of different embodiments of the present disclosure is shown in the Figures of the application. Similar features are shown in the various embodiments of the present disclosure. Similar features across different embodiments have been numbered with a common reference numeral and have been differentiated by an alphabetic suffix. Also, to enhance consistency, the structures in any particular drawing share the same alphabetic suffix even if a particular feature is shown in less than all embodiments. Similar features are structured similarly, operate similarly, and/or have the same function unless otherwise indicated by the drawings or this specification. Furthermore, particular features of one embodiment can replace corresponding features in another embodiment or can supplement other embodiments unless otherwise indicated by the drawings or this specification.

The present disclosure provides an enhanced SST. One objective that can be realized by the present disclosure is the combination of a motorized card reader with an optical scanner to enhance authentication of a user and inhibit security risks. For example, a driving license can be received in the same slot that receives a bank card. The user of an SST can introduce the bank card in the motorized card reader to start a transaction. If the scanning of the driving license is required, the bank card can be returned, and the customer is requested to input his driving license in the same card reader. The driving license can then be transferred to an "optical reading station" (a camera for example) that takes a picture of the driving license and supply it to a PC of the SST or a remote server for further processing in order to approve a requested transaction. One alternative use of the feature of optical reading is the increased security about the authenticity of the bank card. In the well-known "skimming attacks," the magnetic information on a bank card is stolen and duplicated on a "clone card" with the scope to use such clone card to perform transactions. If a picture of the original card was taken and stored for reference on a server of the particular bank operating the SST, it will be easy to compare the picture taken by the optical scanner at the SST with a stored picture and block the transaction in case of a discrepancy. An additional use could be the implementation of a "two step" authorization, where both cards are used (bank card and driving license) to secure the identity of the user performing the transaction.

Referring now to the drawings, there is illustrated in <FIG> a functional block diagram of an exemplary ATM <NUM> according to one or more implementations of the present disclosure. It will be understood that embodiments of the present disclosure are applicable to other types of SSTs, such as vending machines and kiosks, by way of example and not limitation. The ATM <NUM> includes different structures and subsystems for executing and recording transactions. The ATM <NUM> includes a computing device <NUM>. The exemplary computing device <NUM> has one or more processors and a non-transitory, computer readable medium. The computing device <NUM> operates under the control of an operating system, kernel and/or firmware and executes or otherwise relies upon various computer software applications, components, programs, objects, modules, data structures, etc. The exemplary computing device <NUM> can operate under the control of the Windows® operating system. The computer readable medium (memory) of the computing device <NUM> can include random access memory (RAM) devices comprising the main storage of computing device <NUM>, as well as any supplemental levels of memory, e.g., cache memories, non-volatile or backup memories (e.g., programmable or flash memories), read-only memories, etc. In addition, the memory may be considered to include memory storage physically located elsewhere in computing device <NUM>, such as any cache memory in a processor, as well as any storage capacity used as a virtual memory. The computing device <NUM> can also include one or more mass storage devices, e.g., a floppy or other removable disk drive, a hard disk drive, a direct access storage device (DASD), an optical drive (e.g., a CD drive, a DVD drive, etc.), and/or a tape drive, among others.

The exemplary ATM <NUM> also includes a display <NUM>. The computing device <NUM> can control the display <NUM> to present information to the user for furthering completion of the transaction. The display <NUM> can be a touch screen that allows the user to enter information through the display <NUM>. The exemplary display <NUM> is configured to transmit any user-entered information to the computing device <NUM>.

The exemplary ATM <NUM> also includes a key pad <NUM> and an encryption module <NUM>. Generally, the combination of a key pad and an encryption module are referred to in the art as an encrypted pin pad (EPP). The exemplary key pad <NUM> includes a plurality of keys, such as key <NUM>. The exemplary encryption module <NUM> has one or more processors and a non-transitory, computer readable medium. The user can press the keys of the key pad <NUM> to enter a pin. The key pad is placed in communication with the encryption module <NUM> and therefore the numbers of the pin are received by the encryption module <NUM>. It is noted that the communication of the pin is direct and secure; the pin cannot be intercepted between the key pad <NUM> and the encryption module <NUM>. The pin is then encrypted by the encryption module to define a pin block. The encryption module <NUM> includes a network encryption key and applies the network encryption key to encrypt the pin to a pin block. The exemplary encryption module <NUM> is configured to transmit the pin block to the computing device <NUM>.

The exemplary ATM <NUM> also includes a card module <NUM>. The card module <NUM> can receive a token from the user, such as a card. The card module <NUM> can be configured to execute read and write operations with respect to any storage medium fixed to the user's card. The exemplary card module <NUM> is configured to transmit any data read from the user's card to the computing device <NUM>. The exemplary card module <NUM> can also be configured to receive commands and data from the computing device <NUM> and change data stored on the user's card.

The exemplary ATM <NUM> also includes a printer module <NUM>. The computing device <NUM> can control the printer module <NUM> to print a receipt when a transaction has been completed. The printer module <NUM> can communicate one or more messages to the computing device <NUM>, such as a maintenance message regarding the need to refill printer paper.

The exemplary ATM <NUM> also includes an article exchange unit <NUM>. In the exemplary embodiment, the article exchange unit <NUM> is configured to receive and dispense items such as bank notes (cash) and checks. The exemplary article exchange unit <NUM> includes a slot <NUM> defined on an exterior of the ATM <NUM> for the passage of such items. In other embodiments of the present disclosure, an article exchange unit can be configured to facilitate the exchange of other items. The article exchange unit <NUM> can include one or more sensors and transmit signals from any such sensors to the computing device <NUM> to execute an exchange. The computing device <NUM> can control the article exchange unit <NUM> in response to such signals. For example, the article exchange unit <NUM> can include a sensor that detects receipt of an item such as a check. The article exchange unit <NUM> can include a further sensor in the form of a scanner that generates an image of the received item and transmits the image to the computing device <NUM>. When an exchange involves the dispensation of an article to the user, the computing device <NUM> can control the article exchange unit <NUM> to dispense the item(s) requested by the user.

The exemplary ATM <NUM> also includes a printer module <NUM>. The printer module <NUM> can generate a continuous record of all transactions executed by the ATM <NUM>. The computing device <NUM> can control the printer module <NUM> to supplement the record after each transaction has been completed. The printer module <NUM> can communicate one or more messages to the computing device <NUM>, such as a maintenance message regarding the need to refill printer paper.

The exemplary ATM <NUM> also includes an access module <NUM>. The access module <NUM> can be positioned proximate to a rear side of the ATM <NUM>. The access module <NUM> can be utilized for service and support technicians. For example, the access module <NUM> can be utilized by a field engineer to complete software updates to the computing device <NUM>. The access module <NUM> can also be utilized when non-software updates and maintenance is performed, such as the refilling of printer paper or currency.

The exemplary ATM <NUM> also includes a transceiver <NUM>. The exemplary transceiver <NUM> is configured to facilitate communication between the computing device <NUM> and other computing devices that are distinct from and physically remote from the computing device <NUM>. An example of such a remote computing device is a server computing device, such as a banking server communicating with a plurality of ATMs. The exemplary transceiver <NUM> places the computing device <NUM> in communication with one or more networks, such as network <NUM>. The network <NUM> can be a local area network (LAN), a wide area network (WAN) such as the Internet, or any combination thereof. The transceiver <NUM> can transmit data and requests for input generated by the computing device <NUM> and receive responses to these requests, directing these responses to the computing device <NUM>.

The exemplary ATM <NUM> also includes a transceiver <NUM>. The exemplary transceiver <NUM> is configured to facilitate communication between at least one of the encryption module <NUM> and the computing device <NUM> and other computing devices that are distinct from and physically proximate to the ATM <NUM>. An example of such a proximate computing device is a smartphone possessed by the user. The dashed connection lines in <FIG> represents optional interconnections. The exemplary transceiver <NUM> can place the user's smartphone in communication with the encryption module <NUM>, the computing device <NUM>, or both. The exemplary transceiver <NUM> can implement various communication protocols. For example, the transceiver <NUM> can be a Near Field Communication (NFC) device. Alternatively, the transceiver <NUM> can be a Bluetooth beacon. The transceiver <NUM> can transmit and receive data and requests for input generated by the encryption module <NUM> and/or the computing device <NUM>, such transmissions occurring with the user's smart phone for example.

The exemplary computing device <NUM> is thus configured to communicate with other computing devices. <FIG> is a functional block diagram of an exemplary system <NUM> according to one or more implementations of the present disclosure. An exemplary database of the system <NUM> is referenced at <NUM>. The exemplary system <NUM> includes the ATM <NUM>. The exemplary system <NUM> also includes a computing device <NUM>, which is a server computing device in the exemplary embodiment of the present disclosure. The exemplary computing device <NUM> has one or more processors and a non-transitory, computer readable medium. The system <NUM> can be operated by a financial institution and the user can be an account holder of the financial institution.

The ATM <NUM> and the computing device <NUM> can communicate over the network <NUM>. Transmissions over the network <NUM> may be encrypted and may include Message Authentication Codes (MACs) to enhance security. MACs are appended to messages sent from and received by a device such as the ATM <NUM>. MACs verify that the messages sent and the messages received are identical and also confirm that messages originate from an approved source. The computing devices <NUM> and <NUM> can also apply Transport Layer Security (TLS) or Secure Sockets Layer (SSL) protocols and include respective firewalls to enhance security.

The exemplary system <NUM> can interact with a computing device possessed by a user. A computing device possessed by a user can be a smartphone, such as referenced at <NUM> in <FIG>. The smartphone <NUM> can be operating at least partially under the control of the system <NUM>. For example, the smartphone <NUM> can be operating a computer application (APP) at least partially controlled by the financial institution, such as a mobile banking APP. The APP, and thus the smartphone <NUM>, can therefore be controlled in part by the computing device <NUM>.

In operation, the exemplary system <NUM> can execute a transaction that is pre-staged and then completed at the ATM <NUM>. For example, the user can communicate to the computing device <NUM> a desire to withdraw cash in the future. In <FIG>, the smartphone <NUM> is shown in solid line during pre-staging and in dash line when the transaction is completed at the ATM <NUM>. The communication for pre-staging can be generated using the mobile banking APP running on the computing device <NUM>. The computing device <NUM> can communicate with the computing device <NUM> over a network <NUM>. The network <NUM> can be a cellular phone network. The network <NUM> can be a more secure network than the network <NUM>. The computing device <NUM> can store the communication from the user. When the user arrives at the ATM <NUM>, the computing device <NUM> can transmit at least part of the communication to the ATM <NUM> for quicker completion of the transaction.

<FIG> is a schematic diagram of the exemplary card module <NUM>. The card module <NUM> is exemplary and shown schematically; embodiments of the present disclosure can be practiced with card modules configured differently. The exemplary card module <NUM> includes an intake <NUM> exposed on the front face of the ATM <NUM>. The user can insert a card in the intake <NUM>. The card module <NUM> defines a path of movement of the card, referenced by spaced, dash lines at <NUM>. The exemplary card module <NUM> also includes a plurality of conveyor members <NUM>, <NUM>, <NUM> configured to move the card along the path <NUM>.

The exemplary card module <NUM> also includes card readers <NUM>, <NUM>. The card reader <NUM> is positioned along the path <NUM> and configured to read data held on a magnetic strip on an underside of the card. The card reader <NUM> is positioned along the path <NUM> and configured to read data held on a chip embedded in the card.

The exemplary card module <NUM> also includes optical scanners <NUM>, <NUM>. The optical scanner <NUM> is positioned along the path <NUM> and configured to capture an image of a top side of the card. The optical scanner <NUM> is positioned along the path <NUM> and configured to capture an image of a bottom side of the card. The card readers <NUM>, <NUM> and the optical scanners <NUM>, <NUM> communicate with the computing device <NUM>. The card readers <NUM>, <NUM> and the optical scanners <NUM>, <NUM> are configured to transmit sensed conditions to the computing device <NUM>. The card reader <NUM> is configured to transmit the detected account data stored on the magnetic strip of the card to the computing device <NUM>. The optical scanner <NUM> is configured to transmit captured image(s) to the computing device <NUM>. The computing device <NUM> can be configured to transmit data received from the card readers <NUM>, <NUM> and the optical scanners <NUM>, <NUM> to the computing device <NUM> to enhance authentication of the user.

In the embodiment shown in <FIG>, the card readers <NUM>, <NUM> and the optical scanners <NUM>, <NUM> are part of an integrally-housed card module <NUM>. <FIG> is a functional block diagram of a second exemplary card module according to one or more implementations of the present disclosure. In the embodiment shown in <FIG>, a card module 22a includes a card reader 52a and the optical scanner 54a that are distinct assemblies and positioned adjacent to one another along a path 50a of movement of a card. The card module 22a also includes an optical scanner 55a to capture images of a top side of a card and a bin 57a to retain cards that cannot be returned to the person who inserted the card in the ATM 10a.

The exemplary optical scanner <NUM> and/or <NUM> can be configured to capture a full-color image of a card received by the card reader <NUM>. The exemplary optical scanner <NUM> and/or <NUM> can be configured to emit ultraviolet (UV) radiation and capture images of indicia that becomes visible when subjected to UV radiation. The exemplary optical scanner <NUM> and/or <NUM> can be configured to emit infrared (IR) radiation and capture images of indicia that becomes visible when subjected to IR radiation. Emitters of radiation (visible light, UV, IR) can be components of the ATM <NUM> that are distinct from the optical scanner <NUM> and/or <NUM>. The exemplary optical scanner <NUM> and/or <NUM> can be configured to capture and read single dimension bar codes, twodimensional bar codes, and/or QR codes. The exemplary optical scanner <NUM> and/or <NUM> can be configured to capture and read indicia in the form of microprint. An Access-IS model ADR100 is one examples of an optical scanner that can be utilized in one or more embodiments of the present disclosure.

The exemplary optical scanner <NUM> and <NUM> are be configured to capture images of holograms defined on a card. One or more embodiments of the present disclosure can include a plurality of radiations sources that are engage in alternating pattern to reveal a hologram on a card. For example, in <FIG>, optical scanners 54b, 55b are directed at opposite sides of a card 82b. Light emitting diodes (LEDs) 59b, 61b, 63b, 65b can be energized to project light on the card 82b. The LED 59b can be energized (emanating light in solid line) while the LED 61b is not energized and the optical scanner 54b can capture a first image. Next, LED 61b can be energized while the LED 59b is deenergized and the optical scanner 54b can capture a second image. Confirmation that the card is legitimate can then be determined by analysis of the first and second images. Similarly, The LED 63b can be energized while the LED 65b is not energized and the optical scanner 55b can capture a first image. Next, LED 65b can be energized while the LED 63b is deenergized and the optical scanner 54b can capture a second image.

A moveable radiation source or multiple radiation sources are included and operated in cooperation with the exemplary optical scanner <NUM> and/or <NUM> to capture an image of the card in order to enhance security. For example, in <FIG>, optical scanners 54c, 55c are directed at opposite sides of a card 82c. Light emitting diodes (LEDs) 59c and 63c can be energized to project light on the card 82c. The exemplary LEDs 59c and 63c are moveable to direct radiation at the card 82c from first and second positions. The exemplary LEDs 59c, 63c are shown in solid line in the first position in <FIG> and in dash line in the second position. In one or more other embodiments, the optical scanner <NUM> and/or <NUM> may be configured to move to capture different images of holographic indicia.

<FIG> is a flow diagram of an exemplary method executed by an ATM, such as ATM <NUM>, according to one or more implementations of the present disclosure. The method starts at <NUM>. At <NUM>, the ATM <NUM> receives a bank card, such as through the intake <NUM> of the card module <NUM>. The computing device <NUM> controls the conveyor members <NUM>, <NUM>, <NUM> to move the card along the path <NUM> past the card reader <NUM>. At <NUM>, the card reader <NUM> reads the data on the magnetic strip on the back of the card as the card moves along the path <NUM>. If the card has a chip, <NUM> can also include reading data from the chip with the card reader <NUM>. At <NUM>, the ATM <NUM> dispenses the card back to the user. At <NUM>, the computing device <NUM> can control the display <NUM> to request the user to input the user's driving license in the card module <NUM>. At <NUM>, the ATM <NUM> receives the user's driving license in the card module <NUM>. The computing device <NUM> controls the conveyor members <NUM>, <NUM>, <NUM> to move the driving license along the path <NUM> to the field of vision of the optical scanners <NUM>, <NUM>. At <NUM>, the optical scanner <NUM> captures an image of the front of the driving license when the driving license is in the field of vision of the optical scanner <NUM>. If the license is submitted "upside down," the image can be captured by the optical scanner <NUM> at <NUM>. While not displayed in the flow diagram, the ATM <NUM> can eject the driving license after <NUM>. At <NUM>, the ATM <NUM> requests and receives the personal identification number (PIN) of the user. The request can be presented on the display <NUM> and the PIN can be received through the EPP (<NUM> and <NUM>). At <NUM>, the computing device <NUM> transmits the data read by the card reader(s) <NUM> and/or <NUM>, the image captured by the optical scanner(s) <NUM> and/or <NUM>, and the PIN to the server <NUM> for authentication of the user and permission to complete the transaction requested by the user. The illustrated process ends at <NUM>, but the actual interaction with the user could end with the completion of a transaction or the rejection of the proposed transaction, such as a dispensation of bank notes or the intake of a bank check for example.

<FIG> is a front view of an exemplary bank card <NUM>. The exemplary bank card <NUM> displays various indicia. Indicia <NUM> is the name of the issuer of the card. Indicia <NUM> is an account number. Indicia <NUM> is the card holder's name. Indicia <NUM> is the date of expiration of the bank card. The exemplary bank card <NUM> also includes an integrated circuit or chip <NUM>, storing information. The exemplary bank card <NUM> also includes indicia <NUM> in the form a QR code. The exemplary bank card <NUM> also includes a magnetic strip on the back, which is therefore not visible. The exemplary bank card <NUM> also includes a holographic indicia <NUM>.

<FIG> is a flow diagram of a second exemplary method that can be executed by an ATM such as ATM <NUM> according to one or more implementations of the present disclosure. The flow diagram of the second exemplary method can be executed with the exemplary bank card <NUM>. The method starts at 62a. At 64a, the ATM <NUM> receives the bank card <NUM>, such as through the intake <NUM> of the card module <NUM>. The computing device <NUM> controls the conveyor members <NUM>, <NUM>, <NUM> to move the card along the path <NUM> past the card reader <NUM>. At 66a, the card reader <NUM> reads the data on the magnetic strip on the back of the card as the card moves along the path <NUM>. If the card has a chip, 66a can also include reading data from the chip with the card reader <NUM>. The computing device <NUM> can continue to control the conveyor members <NUM>, <NUM>, <NUM> to move the bank card <NUM> along the path <NUM> to the field of vision of the optical scanner <NUM>. At 74a, the optical scanner <NUM> captures an image of the front of the bank card <NUM> when the bank card <NUM> is in the field of vision of the optical scanner <NUM>. The optical scanner <NUM> can be positioned in particular to capture an image of the QR code <NUM>. If the license is submitted "upside down," the image can be captured by the optical scanner <NUM> at <NUM>. At 76a, the ATM <NUM> requests and receives the personal identification number (PIN) of the user. The request can be presented on the display <NUM> and the PIN can be received through the EPP (<NUM> and <NUM>). At 78a, the computing device <NUM> transmits the data read by the card reader(s) <NUM> and/or <NUM>, the image(s) captured by the optical scanner(s) <NUM> and/or <NUM>, and the PIN to the server <NUM> for authentication of the user and permission to complete the transaction requested by the user. The illustrated process ends at 80a, but the actual interaction with the user could end with the completion of a transaction or the rejection of the proposed transaction, such as a dispensation of bank notes or the intake of a bank check for example.

Claim 1:
A self-service terminal (<NUM>, 10a) comprising:
a computing device (<NUM>) having one or more processors;
a display (<NUM>) in communication with said computing device (<NUM>) wherein indicia displayed by said display (<NUM>) are controlled by said computing device (<NUM>);
a transceiver (<NUM>) in communication with said computing device (<NUM>) wherein said computing device (<NUM>) can transmit data remotely through said transceiver (<NUM>) and can receive data through said transceiver (<NUM>);
a card module (<NUM>) having an intake configured to receive a card (82b, 82c) and defining a path (<NUM>, 50a) of movement for the card (82b, 82c), said card module (<NUM>) also including:
first and second optical scanners (<NUM>, 54a, 54b, 54c, <NUM>, 55a, 55b, 55c) positioned on opposite sides of said path (<NUM>, 50a) to respectively capture images of holograms from opposite sides of the card (82b, 82c), and
at least one card reader (<NUM>, 52a, <NUM>) configured to read one of a chip (<NUM>) embedded in the card (82b, 82c) and a magnetic strip of the card (82b, 82c); and
at least one radiation source (59c) positioned on a first side of said path (<NUM>, 50a) with said first optical scanner (54c), said at least one radiation source (59c) configured to emit light on a card in said card path (<NUM>, 50a) and said first optical scanner (54c) configured to capture an image of a hologram defined on the card to which light from said at least one radiation source (59c) is directed,
characterized by said at least one radiation source (59c) being moveable relative to said path (<NUM>, 50a) and to said first optical scanner (54c).