Device, system, and method for card skimming protection
A card reader's motorized transport is controlled by firmware of the reader so as to control a distance that any card can be pulled into the reader during a transaction on a host device. The distance is sufficient enough to allow an embedded chip on the card to be read by a chip read interface but is insufficient to be read by a magnetic read interface. Furthermore, the entire length of the card is prevented from completely passing over the magnetic read interface during the transaction such that any skimmer placed within the reader is physically unable to read the magnetic card information from the magnetic strip of the card. In an embodiment, the firmware is configured to permit only chips from the cards to be read for transactions or configured to turn off chip only reading by permitting both chip reads and magnetic strip reads for each transaction.
1. A card reader, comprising:
a shutter;
a motorized card transport;
a magnetic read interface;
a chip read interface;
a processor;
a non-transitory computer-readable storage medium comprising firmware executable instructions; and
the firmware executable instructions when executed by the processor from the non-transitory computer-readable storage medium cause the processor to perform operations comprising:
detecting a card presented at the shutter;
identifying a mode of operation for the card reader; and
when the mode of operation corresponds to a skimmer protection mode of operation:
controlling the motorized card transport to draw a leading edge of the card within the card reader to a distance sufficient to be read by the chip read interface but insufficient to be read by the magnetic read interface.
2. The card reader of claim 1 further comprising, one or more sensors situated within the card reader adjacent to the location associated with the shutter.
3. The card reader of claim 1 , wherein the firmware executable instructions associated with the detecting further cause the processor to perform additional operations comprising:
preventing the motorized card transport from allowing the leading edge of the card to be manually forced into the card reader by user operating a host device and performing a transaction at the host device.
4. The card reader of claim 1 , wherein the firmware executable instructions associated with the identifying further cause the processor to perform additional operations comprising:
receiving a setting associated with the mode of operation from a device driver of a host device.
5. The card reader of claim 1 , firmware executable instructions associated with the controlling further cause the processor to perform additional operations comprising:
preventing the motorized card transport from allowing the leading edge of the card to be manually forced into the card reader beyond the distance by user operating a host device and performing a transaction at the host device.
6. The card reader of claim 1 , wherein the firmware executable instructions when executed by the processor from the non-transitory computer-readable storage medium further cause the processor to perform additional operations comprising:
when the mode of operation does not correspond to the skimmer protection mode of operation:
controlling the motorized card transport to draw the leading edge of the card within the card reader to a second distance sufficient to be read by the magnetic read interface with a portion of the trailing edge of the card fully inserted into the card reader and with the trailing edge passing over the magnetic read interface.
7. The card reader of claim 6 , wherein the firmware executable instructions associated with the controlling further cause the processor to perform additional operations comprising:
after the trailing edge passes over the magnetic read interface:
controlling the motorized card transport to draw the leading edge of the card away from the magnetic read interface to a position aligned to the chip read interface.
8. The card reader of claim 1 , wherein the firmware executable instructions when executed by the processor from the non-transitory computer-readable storage medium further cause the processor to perform additional operations comprising:
identifying an instruction or an event to shut down the card reader; and
disabling the card reader with the shutter remaining closed.
9. The card reader of claim 1 , wherein the firmware executable instructions when executed by the processor from the non-transitory computer-readable storage medium further cause the processor to perform additional operations comprising:
identifying an instruction or an event to shut down confiscate the card; and
controlling the motorized transport to urge the card onto a second transport or into a bin associated with the card reader or associated with a host device performing a transaction with the card.
10. A system, comprising:
a transaction terminal;
a card reader;
the transaction terminal comprises a terminal processor and a terminal non-transitory computer-readable storage medium;
the terminal non-transitory computer-readable storage medium comprises executable instructions;
the executable instructions when executed by the terminal processor from the terminal non-transitory computer-readable storage medium cause the terminal processor to perform first operations comprising:
presenting a skimmer protection mode of operation within an administrative interface to a user; and
providing a selected skimmer protection option provided by the user from the administrative interface to firmware executable instructions of the card reader;
the card reader comprises a processor and a non-transitory computer-readable storage medium;
the non-transitory computer-readable storage medium comprises the firmware executable instructions;
the firmware executable instructions when executed by the processor from the non-transitory computer-readable storage medium cause the processor to perform second operations comprising:
storing the selected skimmer protection option in a setting;
detecting a card presented to a shutter of the card reader during a transaction being performed on the transaction terminal; and
based on the setting being the skimmer protection option:
controlling a motorized card transport of the card reader to draw a leading edge of the card within the card reader to a distance sufficient to be read by a chip read interface of the card reader but insufficient to be read by a magnetic read interface of the card reader.
11. The system of claim 10 , wherein the transaction terminal is an Automated Teller Machine (ATM), a Self-Service Terminal (SST), a Point-Of-Sale (POS) terminal, or a kiosk.
12. The system of claim 10 , wherein the executable instructions associated with the presenting are performed by a user-level application that processes within an Operating System (OS) of the transaction terminal.
13. The system of claim 10 , wherein the executable instructions associated with the providing are performed by a device driver of the card reader that is controlled by the OS, wherein the device driver translates the selected skimmer protection option into an instruction recognized by the firmware executable instructions associated with changing a value for the setting.
14. The system of claim 10 , wherein the executable instructions when executed by the terminal processor from the terminal non-transitory computer-readable storage medium further cause the terminal processor to perform additional operations comprising:
identifying the administrative interface that the user has deselected the skimmer protection option; and
providing a deselected skimmer protection option to the firmware executable instructions of the card reader.
15. The system of claim 14 , wherein the firmware executable instructions when executed by the processor from the non-transitory computer-readable storage medium further cause the processor to perform third operations comprising:
storing the deselected skimmer protection option in the setting;
detecting a second card presented to the shutter of the card reader during a second transaction being performed on the transaction terminal; and
based on the setting being the deselected skimmer protection option:
controlling the motorized card transport to draw the leading edge of the second card within the card reader to a second distance sufficient to be read by the magnetic read interface with a portion of the trailing edge of the second card fully inserted into the card reader and with the trailing edge passing over the magnetic read interface.
16. The system of claim 15 , wherein the firmware executable instructions associated with the controlling when the setting is the deselected skimmer protection option further cause the processor to perform additional operations comprising:
controlling the motorized card transport to draw the leading edge of the second card away from the magnetic read interface to a position aligned to the chip read interface of the card reader.
17. A method, comprising:
detecting, by a card reader of a host device, a card presented to a shutter during a transaction being performed by the host device;
inspecting, by the card reader, a mode of operation setting;
based on the mode of operation setting being a skimmer protection mode of operation:
controlling, by the card reader, a motorized card transport of the card reader to draw a leading edge of the card within the card reader to a distance sufficient to be read by a chip read interface of the card reader but insufficient to be read by a magnetic read interface of the card reader.
18. The method of claim 17 , wherein based on the mode of operation setting not being the skimmer protection mode of operation:
controlling, by the card reader, the motorized card transport to draw the leading edge of the card within the card reader to a second distance sufficient to be read by the magnetic read interface with a portion of the trailing edge of the card fully inserted into the card reader and with the trailing edge passing over the magnetic read interface.
19. The method of claim 18 , wherein based on the mode of operation setting not being the skimmer protection mode of operation:
controlling, by the card reader, the motorized card transport to draw the leading edge of the card away from the magnetic read interface to a position aligned to the chip read interface of the card reader.
20. The method of claim 17 , wherein inspecting further includes:
receiving a change in a value for the mode of operation setting from a device driver of the host device, and
storing the value in the mode of operation setting.