End user protection against ATM keypad overlay
Methods, systems, and computer program products for data entry device security are provided. Aspects include receiving an indication of a user presence at a data entry device, wherein the data entry device includes a surface with apertures, and wherein the apertures include a material with a reflection coefficient. A presence of a fraud device is determined by emitting, from beneath the surface, security light from a set of one or more emitters, wherein the security light has a security light luminous power. A reflection of the security light off the material is collected by a first set of one or more sensors, wherein the reflection has a reflection luminous power. A luminous power range is determined based on the security light luminous power and the reflection coefficient and based on the reflection luminous power being outside the luminous power range, security measures are engaged at the data entry device.
1. A computer-implemented method for data entry security, the method comprising:
receiving, by a processor, an indication of a presence of a user at a data entry device, wherein the data entry device includes a surface with one or more apertures, and
wherein the one or more apertures include a material with a reflection coefficient;
determining a presence of a fraud device overlaid on the data entry device by:
emitting, from beneath the surface, security light from a set of one or more emitters, wherein the security light has a security light luminous power;
collecting a reflection of the security light off the material by a first set of one or more sensors, wherein the reflection has a reflection luminous power;
determining a luminous power range based on the security light luminous power and the reflection coefficient; and
based at least in part on the reflection luminous power being outside the luminous power range, engaging one or more security measures at the data entry device.
2. The method of claim 1 , wherein the material includes a transmission coefficient and further comprising:
collecting ambient light by a second set of one or more sensors, wherein the ambient light passes through one or more apertures of the data entry device;
determining a total luminous power based at least in part on the ambient light and the reflection of the security light;
deriving a second luminous power range based on the ambient light and the reflection luminosity; and
based at least in part on the total luminosity being outside the second luminous power range, engaging one or more security measures at the data entry device.
3. The method of claim 1 further comprising: based at least in part on the reflection luminous power being within the luminous power range, allowing operation of the data entry device.
4. The method of claim 2 further comprising: based at least in part on the total luminous power being within the second luminous power range, allowing operation of the data entry device.
5. The method of claim 1 , wherein the determining the luminous power range includes determining a reflectance based at least in part on the security light and the reflection coefficient of the material.
6. The method of claim 1 , wherein the first set of one or more sensors is randomly selected.
7. The method of claim 2 , wherein the second set of one or more sensors is randomly selected.
8. The method of claim 1 , wherein the one or more security measures include repeating the determining of the fraud device overlaid on the data entry device.
9. The method of claim 2 , wherein the one or more security measures include repeating the determining of the fraud device overlaid on the data entry device.
10. The method of claim 1 , wherein the data entry device is associated with financial transactions.