System and Method of Detecting Authorized Dismantlement of Transaction Machines

The present invention relates to firm banking terminals and more particularly to improvements to a security system for preventing illegal dismantlement of or damage to the body of a firm banking terminal.

At present firm banking terminals transmit and receive data such as a sum of money, a destination bank code, and an account number between enterprises or homes and a bank host computer through a public line network.

However, the terminal body of a firm banking terminal may be illegally dismantled, so that important data such as that mentioned above is exposed and an illegal operation performed. Therefore, a security system which prevents such illegal action is required.

In a conventional proposed researched security system, internal fuses for a ROM, in which programs and other data are stored, are fused away such that the terminal does not operate when the firm banking terminal is dismantled.

In the conventional security system of this type, the banking terminal becomes inoperable when a maintenance man dismantles the terminal for ordinary maintenance or when malfunctions occur. Therefore, a process for preventing the terminal from being made inoperable for maintenance and inspection is required.

It is an object of the present invention to provide a thigh security firm banking terminal which prevents internal data in the terminal from being exposed when dismantled, prevents the terminal from being made inoperable for ordinary maintenance and inspection, and is easy to maintain.

In order to achieve the above object, the present invention provides a firm banking terminal including a dismantlement detection means for outputting a detection signal when the terminal body is dismantled, a processor for stopping terminal operation upon detection of the detection signal, and memory means which stores authorization data permitting dismantlement. When a check indicates coincidence between data received from a keyboard and data on the authorized person, the processor invalidates the direction signal output by the dismantlement detection means allowing access to the terminal.

When an unauthorized person dismantles the terminal body, the dismantlement detection means sends a detection signal to the MPU microprocessor 11 to stop its operation to thereby prevent the illegal action. When an authorized person such as a maintenance man dismantles the terminal, the data on the authorized person stored in memory means in the firm banking terminal coincide with the data received through the keyboard, so that the processor invalidates the detection signal output by the dismantlement detection means. Therefore, the terminal may be serviced without interrupting normal operation of the system.

The firm banking terminal used herein includes a display, a keyboard, a communication control unit, a memory and a MPU (microprocessor) which controls those elements such that individuals or enterprises store data on bank deposits/savings, and pay and receive money from their bank accounts through telephone lines with a host computer which controls input/output of the data. The memory means includes not only the above-mentioned memories, but also externally connected memories such as IC cards, memory cards, and magnetic discs.

FIG. 1 is a block diagram of one embodiment of a farm banking terminal according to the present invention;

FIG. 2 shows the exterior structure of the terminal;

FIG. 3 shows a partially dismantled terminal; and

FIG. 4 shows one example of a method for detecting dismantlement.

One embodiment of the present invention will now be described in detail hereinafter with reference to the drawings.

FIG. 1 is a block diagram indicative of the structure of a firm banking terminal according to one embodiment of the present invention. FIG. 2 shows the exterior structure of this embodiment of the terminal. FIGS. 3 and 4 each illustrate the dismantlement of the terminal body.

As shown in FIG. 1, a firm banking terminal 1 is connected through a public line network 3 and a communication line 2 to a host computer 4. It includes a communication control unit 17 such as a modem which allows the terminal to communicate with network 3, a display 12 which displays operation information and figures, a keyboard 14 for inputting characters, signs or other information into the terminal, an IC card reader/writer 16 which reads/writes data upon inserting IC card 10 thereinto, a memory 13 including ROM, and RAM, a dismantlement monitor 15 which monitors the terminal, and a microprocessor (MPU) 11 which controls those elements. Each of the component parts are connected through a system bus 101, as shown. The IC card 10 stores identification data for authorizing dismantlement of the terminal without affecting operation of the system. For example, the IC card 10 stores data on identification such as the card issuing company or a password indicative of the card owner, the address and name of the owner, the effective interval of the card, error counts, and business identification data.

Terminal 1 receives services through communication with host computer 4, for example, provided in a bank through public line network 3. In this case, the communicated data is temporarily stored in memory 13.

When an unauthorized person illegally dismantles terminal 1, dismantlement detector 15 detects the dismantlement to deliver a detection signal to MPU 11. As shown in FIG. 4, the dismantlement detector 15 includes leads 21a, 21b, 21c, 21d and 21e. The leads are electrically connected and conductive when fastened by four screws 19 with lead 21(e) being grounded and lead 21a being connected through a resistor 22 to a DC power supply Vcc. Therefore, when all the screw holes 20 are filled with the corresponding screws, the voltage level at P is low while if any one of screws 19 is removed, the conductive state of the leads is interrupted, so that the voltage level at P becomes high. MPU 11 stops its operation when the voltage level at P becomes high thereby rendering the terminal 1 inoperable.

When an authorized person, such as a maintenance man, dismantles the terminal, he inserts the IC card 10 into IC card reader/writer 16 of terminal 1 and inputs authorization data through keyboard 14. At this time, MPU 11 reads the input data stored on the IC card through IC card reader/writer 16 to determine whether the input data coincides with authorization data stored in the internal memory and delivers to MPU 11 a response signal indicative of coincidence or non-coincidence. When the result indicates coincidence, MPU 11 interrupts a dismantlement detection signal which dismantlement monitor 15 delivers when the terminal 1 is dismantled.

If an unauthorized dismantlement occurs, the dismantlement monitor renders the MPU 11 inoperable. In order to make MPU 11 inoperable, for example, MPU 11 may be put in a sleeping state by terminating power to the MPU 11 or erasing the operating program. Especially, when the operating program stored in the memory is erased, illegal use of the terminal is prevented and security is improved even if the terminal is dismantled.

The above embodiment determines whether the data on the authorized person stored in the IC card coincides with the data received from the keyboard 14, and delivers a response signal indicative of coincidence or non-coincidence to the MPU in the terminal. In another embodiment, the data on the authorized person stored in the IC card may be delivered to the memory in the terminal to determine coincidence in the MPU in the terminal. Alternatively, arrangement may be such that the data on the authorized person is stored in an external memory such as a memory card or a magnetic disc cartridge in place of the IC card, such that the data on the authorized person is delivered from the external memory to the memory in the firm banking terminal and that coincidence or non-incidence is determined by the MPU in the terminal. Preferably, the IC card is used to determine coincidence or non-coincidence in the MPU in the IC card in order to maintain the secrecy of the authorization data. Checking data on the authorized person includes scramble checking.

While the terminal dismantlement monitor using the screws is shown in FIGS. 3 and 4, other measures may be used to detect the dismantlement of the terminal.

When an unauthorized person dismantles the terminal body of this embodiment, the processor stops its operation to prevent an illegal act. In contrast, when an authorized person dismantles the terminal, the data on the authorized person stored in the IC card coincides with the data received through the keyboard and IC card to cause the processor to invalidate the detection signal output by the dismantlement detector, so that the terminal is protected from being made inoperable and hence from being illegally dismantled. Thus, manipulation of data or the like is avoided.