KR20100120932A - Automatic teller machine - Google Patents

Abstract

An interface unit for receiving financial data through a pin pad, a key generation unit for generating an encryption key in association with the input of the financial data, a data encryption unit for encrypting the financial data using the generated encryption key, and A data transmission unit for transmitting encrypted financial data from the pin pad to a control equipment (CE) unit, and an encryption key generated by the key generation unit, and sharing the encrypted financial data transmitted to the CE unit with the sharing unit. Disclosed is a financial automated device including a data demodulation unit for demodulating using an encrypted key and sending the data to an external server.

Description

Financial Automation Equipment {AUTOMATIC TELLER MACHINE}

Embodiments of the present invention relate to an automated teller machine.

With respect to traditional financial transactions that have been carried out in direct contact with the clerks at financial institutions, the emergence of Automatic Teller Machines (ATMs) has revolutionized in many ways. The customer's waiting time has been significantly reduced, and even after the financial institution is closed, the customer can benefit from financial transactions whenever they want. Not only the customers, but also the financial institution's processing time is reduced, and the workforce is reduced due to the reduction of manpower and cost.

The automated teller machine basically provides many financial tasks performed by financial institutions such as banks and village safes. The user can perform a desired financial transaction in a short time by simply operating a financial automated device installed in a bank without using a bank clerk in bank transfer, balance inquiry, deposit withdrawal, and bank account arrangement. These advantages of the automated teller machine have led to a rapid increase in the number of customers, the number of installations, and the places of installation of the automated teller machine, making it easy to find it today.

However, a skimming crime that steals card information from a customer's card recently inserted into the card insertion slot of an automated teller machine or steals financial data such as a customer's password entered through a pin pad provided in the automated teller machine. Is increasing. As a result, customers are reluctant to use the card using the automated teller machine in anxiety about when the card theft will occur, and in fact, many problems occur, such as an increase in damage to the card theft.

1 is a diagram illustrating an example of transmitting financial data input through a pin pad to a CE unit in a conventional automated teller machine.

The automated teller machine shown in FIG. 1 uses a pin pad (EPP-Pinpad) to enhance security for various financial data input from a customer. However, when trading the automated teller machine using the domestic card of the customer, there is a problem that is not safe from the risk of the skimming crime described above.

In other words, while financial data such as a customer's password input through the pin pad is transmitted to the CE unit through the serial communication 100 without being encrypted, it is still exposed to a skimming risk in the connection section 200 between the pin pad and the CE unit. It is becoming.

Accordingly, one embodiment of the present invention is to propose a method that can ensure the security of financial transactions by encrypting the financial data input through the pin pad.

One embodiment of the present invention provides a banking automation device that reduces the risk of skimming in the banking device itself through encryption of financial data exchanged between the pin pad and the CE unit provided in the banking device.

In addition, an embodiment of the present invention provides a financial automation device that can ensure the safety of financial transactions through the encryption of the financial data input through the pin pad.

In addition, an embodiment of the present invention provides a financial automation device to ensure that the financial data transmitted in the connection section between the pin pad and the CE unit is not exposed to the risk of skimming crime.

In addition, an embodiment of the present invention provides a financial automation device capable of encrypting financial data input through a pin pad and transmitting it to the CE unit without using a separate encryption device by using the encryption function of the EPP-Pinpad.

According to an aspect of the present invention, an automatic teller machine includes an interface unit for receiving financial data through a pin pad, a key generator for generating an encryption key in association with the input of the financial data, and the generated encryption key. A data encryption unit for encrypting the financial data, a data transmission unit for transmitting the encrypted financial data from the pin pad to the CE unit, and an encryption key generated by the key generation unit, and transmitted to the CE unit. And a data demodulator for demodulating the encrypted financial data using the shared encryption key and sending the encrypted financial data to an external server.

According to an embodiment of the present invention, through the encryption operation for the financial data exchanged between the pin pad and the CE unit provided in the automated teller machine, it is possible to reduce the risk of skimming in the automated teller machine itself.

In addition, according to an embodiment of the present invention, through the encryption of the financial data input through the pin pad, it is possible to ensure the safety of financial transactions.

In addition, according to an embodiment of the present invention, the financial data transmitted in the connection section between the pin pad and the CE unit can be prevented from being exposed to the risk of skimming crime.

In addition, according to an embodiment of the present invention, by using the encryption function of the EPP type pin pad, it is possible to encrypt the financial data input through the pin pad to be transmitted to the CE unit without using a separate encryption equipment.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, the present invention is not limited or limited by the embodiments. Like reference numerals in the drawings denote like elements.

The automated teller machine according to an embodiment of the present invention, as well as automated cash dispensers, complex automated devices that provide various financial services such as cash dispensers (CD), banks, insurance, credit cards, etc. It is broadly interpreted as a concept that includes a series of unmanned automated devices such as a kiosk that provides various additional services such as utility billing, ticket issuance, and point accumulation.

2 is a diagram showing the structure of the automatic teller machine.

The automated teller machine 200 includes an operation terminal 210, a banknote 220, a bankbook 230, and a card reader 240.

The operation terminal unit 210 receives a menu selection and operation for a financial transaction from a customer, and provides various financial services or additional services to the customer through a GUI screen. Here, the operation terminal unit 210 may include a pin pad for receiving a password from a customer.

Banknotes and withdrawals 220 of the bill counts and stores the bill, and the bankbook 230 reads the bankbook and performs the bankbook cleaning task.

The card reader 240 reads a card according to a customer's financial transaction card input and performs card related tasks. The card reader 240 may read not only a financial transaction card but also an accumulation card or ID card for other business.

In addition, the automatic teller machine 200 is a CE unit (or control unit) for controlling the overall operation, a communication unit for connecting to an external server, a memory for storing a variety of data, and a printing module for printing on the account book or specification table, etc. It may further include.

3 is a diagram showing the configuration of the automatic teller machine according to an embodiment of the present invention.

The automatic teller machine 300 according to an embodiment of the present invention includes an interface unit 310, a key generation unit 320, a data encryption unit 330, a data transmission unit 340, and a data demodulation unit 350. It can be configured to include.

The interface unit 310 receives financial data through a pin pad.

The financial data may be various data associated with financial transactions. For example, the financial data may include a customer's password, a customer's social security number, a customer's account number, a customer's account number to be remitted, a customer's card number, and the like.

In addition, the automated teller machine 300 according to an embodiment of the present invention may include an EPP type pin pad. That is, the automated teller machine 300 can easily encrypt financial data such as a PIN input from a customer through the EPP type pin pad.

Here, the EPP type pin pad is a type of DES pin pad module. In addition, the DES pin pad module includes a bus type pin pad mounted on an input / output slot and a serial type pin pad connected to a communication port of a system. Can be.

The DES pin pad module is an encryption device coupled to encrypt a data input to a keypad for inputting a password in a financial terminal requiring security. Recently, an encryption pin pad module adopting a Data Encryption Standard (DES) algorithm has been widely used. . The DES pin pad module is a module for handling encryption or key processing of a customer's password, and includes a number button for inputting a password, a plurality of menu buttons for performing various functions, and an SRAM in which an encryption key is stored. Equipped. The SRAM is installed inside the device so that arbitrary operation is not possible from the outside, but the upper surface of the number button and menu button is exposed so that the customer can easily operate it.

The key generation unit 320 functions to generate an encryption key in conjunction with the input of the financial data.

For example, the key generation unit 320 may generate the encryption key based on at least one of an input time of the financial data, a CD shipping code, or a device code.

For example, the input time of the financial data may include the date and time of the password input time from the customer through the pin pad as 14 bytes, and the CD shipment code may include the financial automation device 300 in the manufacturing plant. The shipping code may include 10 bytes, and the device code may include 4 bytes of a unique code of the automated teller machine 300.

In addition, the key generation unit 320 generates a master key and a working key, respectively, in association with the input of the financial data, and encrypts the generated working key with the generated master key. You can create an encryption key.

That is, the key generation unit 320 may generate the master key based on the input time of the financial data and the CD shipping code, and generate the working key based on the input time of the financial data and the device code. have.

For example, the key generation unit 320 is 32 bytes including "CD shipment code (10 bytes), random (8 bytes), and the input time of the financial data (14 bytes)" in conjunction with the input of the financial data. You can create a master key.

For example, the key generation unit 320 is linked to the input of the financial data, and includes 32 bytes including "device code (4 bytes), random (14 bytes), and the input time of the financial data (14 bytes)". You can create a working key.

The key generation unit 320 may generate the encryption key to be used for encrypting the financial data by encrypting the generated working key with the generated master key.

As such, the key generation unit 320 may generate an encryption key unique to the automated teller machine 300 using the input time of the financial data, the CD shipment code, and the device code as argument values. .

In addition, when the second financial data is input through the pin pad after the encryption key is generated, the key generation unit 320 updates the generated encryption key in consideration of the input time of the second financial data. can do. Alternatively, the key generation unit 320 may change the generated encryption key at a set cycle.

As such, the key generation unit 320 may continuously change the encryption key by adjusting the input time of the financial data whenever the financial data is input through the pin pad.

The data encryption unit 330 encrypts the financial data using the generated encryption key, and the data transmission unit 340 transmits the encrypted financial data from the pin pad to the CE unit.

For example, the data encryption unit 330 may encrypt the input financial data using the generated encryption key using Triple DES, and the data transmission unit 340 may use the serial communication to transmit the encrypted data. The encrypted financial data may be transmitted to the CE unit.

That is, the data encryption unit 330 encrypts the financial data input from the customer with the generated encryption key, so that the encrypted finance from the pin pad to the CE unit through the serial communication in the data transmission unit 340. You can reliably prepare for the skimming risks that can occur during data transfer.

For reference, the CE unit is a unit that controls the overall operation of the automated teller machine 300, and communicates with an external server associated with a financial transaction to process the financial transaction requested by the customer.

The data demodulation unit 350 shares an encryption key generated by the key generation unit 320, demodulates the encrypted financial data transmitted to the CE unit using the shared encryption key, and external server. It transmits to.

That is, the data demodulation unit 350 may share the encryption key as soon as the encryption key is generated by the key generation unit 320, and share the financial data encrypted using the Triple DES. By demodulating using an encryption key, financial data (for example, a customer's password) input from the customer can be easily obtained.

In addition, the data demodulation unit 350 may transmit the obtained financial data to an external server associated with the financial transaction through a network so that the financial transaction requested by the customer may be performed.

Therefore, according to an embodiment of the present invention, through the encryption operation for the financial data exchanged between the pin pad and the CE unit provided in the automated teller machine, it is possible to reduce the risk of skimming in the automated teller machine itself.

In addition, according to an embodiment of the present invention, through the encryption of the financial data input through the pin pad, it is possible to ensure the safety of financial transactions.

In addition, according to an embodiment of the present invention, the financial data transmitted in the connection section between the pin pad and the CE unit can be prevented from being exposed to the risk of skimming crime.

In addition, according to an embodiment of the present invention, by using the encryption function of the EPP-Pinpad, it is possible to encrypt the financial data input through the pinpad to be transmitted to the CE unit without using a separate encryption equipment.

Hereinafter, a method of operating the automated teller machine 300 according to an embodiment of the present invention. In addition, in the following description of FIG. 4, FIG. 4 will be described with reference to FIG. 3.

4 is a flowchart illustrating a procedure of a method for operating an automated teller machine according to an embodiment of the present invention.

According to an embodiment of the present invention, the automated teller machine 300 receives financial data from a customer through a pin pad (step 401), and generates a working key in the ACSII format in association with the input of the financial data; Step 402), the generated working key is converted into a hexadecimal working key (step 403).

For example, the key generation unit 320 is linked to the input of the financial data, and includes 32 bytes including "device code (4 bytes), random (14 bytes), and the input time of the financial data (14 bytes)". A working key can be generated and the generated working key can be converted to an 8 byte hexadecimal number.

In addition, the automatic teller machine 300 according to an embodiment of the present invention generates an ACSII-type master key in association with the input of the financial data (step 404), and converts the generated master key into a hexadecimal master key. (Step 405).

For example, the key generation unit 320 is 32 bytes including "CD shipment code (10 bytes), random (8 bytes), and the input time of the financial data (14 bytes)" in conjunction with the input of the financial data. You can create a master key and convert the generated master key to 8 bytes of hexadecimal.

In addition, the automatic teller machine 300 according to an embodiment of the present invention encrypts the working key generated in the step 403 with the master key generated in the step 405 (step 406), which is used to encrypt the financial data. Generate an encryption key (step 407).

The key generation unit 320 may generate the encryption key to be used to encrypt the financial data by encrypting a working key with a master key.

As such, the key generation unit 320 may generate an encryption key unique to the automated teller machine 300 using the input time of the financial data, the CD shipment code, and the device code as argument values. .

In addition, when the second financial data is input through the pin pad after the encryption key is generated, the key generation unit 320 updates the generated encryption key in consideration of the input time of the second financial data. can do. Alternatively, the key generation unit 320 may change the generated encryption key at a set cycle.

As such, the key generation unit 320 may continuously change the encryption key by adjusting the input time of the financial data whenever the financial data is input through the pin pad.

In addition, the automated teller machine 300 according to an embodiment of the present invention Triple DES encryption of the financial data using the encryption key generated in step 407, and the encrypted financial data from the pin pad to the CE unit. Transmit (step 408).

The data encryption unit 330 encrypts the financial data input from the customer with the generated encryption key, thereby transmitting the encrypted financial data from the pin pad to the CE unit through serial communication in the data transmission unit 340. You can reliably prepare for skimming hazards that may occur along the way.

In addition, the automated teller machine 300 according to an embodiment of the present invention demodulates the encrypted financial data transmitted to the CE unit using the shared encryption key (DENCRYPTION) (step 409), demodulation. A result value is generated (step 410), and the demodulated result value is converted into an ASCII format to obtain financial data input from the customer in step 401 (step 411).

The data demodulation unit 350 may share the encryption key as soon as the encryption key is generated by the key generation unit 320, and share the financial data encrypted using the Triple DES with the shared encryption key. By demodulating using, it is possible to easily obtain the financial data (for example, the customer's password) input from the customer.

In addition, the data demodulation unit 350 may transmit the obtained financial data to an external server associated with the financial transaction through a network so that the financial transaction requested by the customer may be performed.

Therefore, according to an embodiment of the present invention, by using the encryption function of the EPP-Pinpad, without using a separate encryption equipment, by encrypting the financial data input through the pin pad to the CE unit, the pin pad and CE unit The financial data transmitted in the connection section between them is not exposed to the risk of skimming crime, thereby ensuring the safety of financial transactions.

Further, embodiments of the present invention include a computer readable medium having program instructions for performing various computer implemented operations. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the media may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic disks, such as floppy disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like.

As described above, the present invention has been described by specific embodiments such as specific components and the like. For those skilled in the art to which the present invention pertains, various modifications and variations are possible. Therefore, the spirit of the present invention should not be construed as being limited to the described embodiments, and all of the equivalents or equivalents of the claims, as well as the following claims, are included in the scope of the present invention.

1 is a diagram illustrating an example of transmitting financial data input through a pin pad to a CE unit in a conventional automated teller machine.

2 is a diagram showing the structure of the automatic teller machine.

3 is a diagram showing the configuration of the automatic teller machine according to an embodiment of the present invention.

4 is a flowchart illustrating a procedure of a method for operating an automated teller machine according to an embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

300: financial automation equipment

310: interface unit

320: key generation unit

330: data encryption unit

340: data transmission unit

350: data demodulator

Claims (5)

An interface unit for receiving financial data through a pin pad; A key generation unit generating an encryption key in association with the input of the financial data; A data encryption unit encrypting the financial data using the generated encryption key; A data transmission unit for transmitting the encrypted financial data from the pin pad to a control equipment (CE) unit; And A data demodulation unit for sharing the encryption key generated by the key generation unit, demodulating the encrypted financial data transmitted to the CE unit using the shared encryption key, and sending it to an external server; Automatic financial equipment comprising a. The method of claim 1, The key generation unit, And generate the encryption key based on at least one of an input time of the financial data, a CD shipment code, and a device code. The method of claim 1, The key generation unit, A financial automation device for changing the generated encryption key when the next financial data is input. The method of claim 1, The key generation unit, And a master key and a working key, respectively, linked to the input of the financial data, and encrypting the generated working key with the generated master key to generate the encryption key. The method of claim 1, The data transmission unit, The automated teller machine transmits the encrypted financial data from the pin pad to the CE unit using serial communication.

Images