Keyboard for secure data entry
A keyboard for secure data entry is provided. The keyboard comprises at least one or more of data entry buttons that can be depressed by a user. For each of the data entry buttons, a button actuator is provided that is movable upon the user depressing the respective data entry button and a primary capacitive sensor is provided that is arranged to determine movement of the button actuator of the respective data entry button by capacitance sampling. The button actuator is at least partly made from a conductive material. The button actuator is coupled to a defined electric potential at least during the capacitance sampling to shield the primary capacitive sensor from eavesdropping.
1. A keyboard for secure data entry, comprising at least
one or more of data entry buttons that can be depressed by a user; and
for each of the data entry buttons
a button actuator, movable upon the user depressing the respective data entry button; and
a primary capacitive sensor, arranged to determine movement of the button actuator of the respective data entry button by capacitance sampling; wherein
the button actuator is at least partly made from a conductive material; and
the button actuator is coupled to a defined electric potential at least during the capacitance sampling to shield the primary capacitive sensor from eavesdropping.
2. The keyboard of claim 1 , wherein the primary capacitive sensor is a mutual-capacitance sensor.
3. The keyboard of claim 1 , further comprising a shield removal detection circuit to determine tampering with one or more of the button actuators.
4. The keyboard of claim 3 , wherein the shield removal detection circuit is configured to erase data and/or suspend operation of the keyboard when tampering with one or more of the button actuators is determined.
5. The keyboard of claim 3 , wherein the shield removal detection circuit comprises, for each of the data entry buttons, a secondary capacitive sensor.
6. The keyboard of claim 5 , wherein the secondary capacitive sensor is arranged between the button actuator and the primary capacitive sensor.
7. The keyboard of claim 5 , wherein the secondary capacitive sensor is a self-capacitive sensor.
8. The keyboard of claim 1 , further comprising at least one printed circuit board, comprising one or more of the primary capacitive sensor and the secondary capacitive sensor.
9. The keyboard of claim 8 , wherein the primary capacitive sensor is arranged in an intermediate layer of the printed circuit board.
10. The keyboard of claim 1 , wherein the button actuator is dome-shaped.
11. The keyboard of claim 1 , wherein the button actuator is made from metal.
12. The keyboard of claim 1 , comprising multiple data entry buttons, arranged in a matrix.
13. The keyboard of claim 12 , wherein the multiple data entry buttons are arranged to form a numeric keypad.
14. The keyboard of claim 1 , further comprising a keyboard controller, configured to control at least the capacitance sampling of the primary capacitive sensor and to couple the button actuator to the defined electric potential at least during the capacitance sampling.
15. The keyboard of claim 1 , wherein the defined electric potential is ground.
16. A point-of-sale device comprising at least
a point-of-sale transaction processor;
one or more of data entry buttons that can be depressed by a user; and
for each of the data entry buttons
a button actuator, movable upon the user depressing the respective button; and
a primary capacitive sensor, arranged to determine movement of the button actuator of the respective data entry button by capacitance sampling; wherein
the button actuator is at least partly made from a conductive material; and
the button actuator is coupled to a defined electric potential at least during the capacitance sampling to shield the primary capacitive sensor from eavesdropping.
17. A method of secure data entry with a keyboard having one or more of data entry buttons that can be depressed by a user; and for each of the data entry buttons, a button actuator, movable upon the user depressing the respective data entry button and being at least partly made from a conductive material; and a primary capacitive sensor;
wherein the method comprises sampling of the primary capacitive sensor to determine movement of the button actuator; and
at least during the sampling, coupling the button actuator to a defined electric potential to shield the primary capacitive sensor from eavesdropping.
18. The method of claim 17 , wherein the keyboard is configured according to claim 1 .