System and methods to prevent unauthorized usage of card readers
A contactless card reader comprises a contactless card reader front-end coupled to a processor. A communications module is coupled to the processor and a set of sensors is coupled to the processor. The set of sensors determines parameters related to the location, orientation and motion of the card reader. The processor receives the parameters from the set of sensors and utilizes the parameters and scenario configuration data to evaluate a rule. The result of the evaluation of the rule results in a limitation on the operation of the card reader. The communications module is configured to intermittently receive the scenario configuration data from external sources.
1 . A method of managing security of a card reader, comprising:
detecting, by a receiver of a card reader, data that is generated by and transmitted from an external device, the card reader successfully authenticated before receiving the data;
analyzing, by a processor of the card reader, the data to determine at least one first parameter related to one or more of a location and a motion of the card reader;
evaluating, by the processor of the card reader, one or more rules based at least in part on the data to detect when the data fails to satisfy at least one of the one or more of the rules;
triggering, by the processor, an event of the card reader when the data is detected to fail to satisfy at least one rule; and
initiating, by the processor, an action associated with the triggered event comprising disabling, by the processor, operation of the card reader.
2 . The method of claim 1 , wherein the external device comprises a beacon transmitter having a fixed location, and the data is a wireless beacon transmission received by the card reader from the beacon transmitter.
3 . The method of claim 2 , wherein the method further comprises:
analyzing, by the processor of the card reader, the wireless beacon transmission to determine a distance of the card reader from the beacon transmitter; and
evaluating, by the processor of the card reader, the one or more rules based at least in part on the determined distance of the card reader from the beacon transmitter, comprising:
when the determined distance does not satisfy a threshold distance specified by one of the one or more rules, performing the triggering of the event, and
when the determined distance does satisfy each of one or more threshold distances specified by corresponding the one or more rules, not performing the triggering of the event.
4 . The method of claim 2 , wherein the beacon transmitter comprises a wireless fidelity router, a cellular communications network base station, or a dedicated transmitter device.
5 . The method of claim 2 , wherein a rule of the one or more rules defines at least an expected motion type associated with the card reader, wherein the expected motion type associated with the card reader comprises fixed or mobile, and evaluating the one or more rules based at least in part on the data comprises:
analyzing, by the processor of the card reader, two or more wireless beacon transmissions over a period of time to determine a current motion of the card reader from the two or more wireless beacon transmissions;
determining whether the current motion is indicative of a contrary type of motion of the card reader to the expected motion type associated with the card reader; and
when the contrary type of motion is determined, detecting a failure of at least one of the one or more of the rules and performing the triggering of the event.
6 . The method of claim 1 , wherein initiating the action associated with the event further comprises:
forcing, by the processor, the card reader to perform a re-authentication process to verify one or more of an identity of a user of the card reader, an identity of a merchant associated with the card reader, and a location of the card reader.
7 . The method of claim 1 , wherein initiating the action further comprises:
generating, by the processor, an alert message; and
transmitting, by the processor, the alert message to a user that monitors the card reader.
8 . The method of claim 1 , wherein the card reader further comprises one or more sensors that generate sensor data indicative of second parameters related to one or more of the location, an orientation, and the motion of the card reader, and the method further comprises:
evaluating, by the processor of the card reader, a rule of the one or more rules based at least in part on the data and the sensor data to detect when the rule fails to be satisfied.
9 . The method of claim 8 , wherein the rule comprises a maximum threshold distance from the external device, and one or more of an expected motion type of the card reader and an expected motion type associated with a location at which the card reader is located.
10 . The method of claim 8 , wherein the one or more sensors comprise one or more of a positioning sensor, an altimeter sensor, a compass sensor, and a gyroscope.
11 . A card reader comprising:
a receiver configured to detect data that is generated by and transmitted from an external device; and
a processor, coupled with the receiver, configured to:
analyze the data to determine at least one first parameter related to one or more of a location and a motion of the card reader,
evaluate one or more rules based at least in part on the data to detect when the data fails to satisfy at least one of the one or more of the rules,
trigger an event of the card reader when the data is detected to fail to satisfy at least one rule, and
initiate an action associated with the triggered event comprising disabling, by the processor, operation of the card reader.
12 . The card reader of claim 11 , wherein the external device comprises a beacon transmitter having a fixed location, and the data is a wireless beacon transmission received by the card reader from the beacon transmitter.
13 . The card reader of claim 12 , wherein the processor is further configured to:
analyze the wireless beacon transmission to determine a distance of the card reader from the beacon transmitter; and
evaluate the one or more rules based at least in part on the determined distance of the card reader from the beacon transmitter, comprising the processor further configured to:
when the determined distance does not satisfy a threshold distance specified by one of the one or more rules, perform the triggering of the event, and
when the determined distance does satisfy each of one or more threshold distances specified by corresponding the one or more rules, not perform the triggering of the event.
14 . The card reader of claim 12 , wherein the beacon transmitter comprises a wireless fidelity router, a cellular communications network base station, or a dedicated transmitter device.
15 . The card reader of claim 12 , wherein a rule of the one or more rules defines at least an expected motion type associated with the card reader, wherein the expected motion type associated with the card reader comprises fixed or mobile, and the processor configured to evaluate the one or more rules based at least in part on the data comprises the processor further configured to:
analyze two or more wireless beacon transmissions over a period of time to determine a current motion of the card reader from the two or more wireless beacon transmissions;
determine whether the current motion is indicative of a contrary type of motion of the card reader to the expected motion type associated with the card reader; and
when the contrary type of motion is determined, detect a failure of at least one of the one or more of the rules and performing the triggering of the event.
16 . A non-transitory machine-readable storage medium having instructions stored thereon which when executed by a processor of a card reader, cause the card reader to perform operations for managing security of the card reader, the operations comprising:
detecting, by a receiver of the card reader, data that is generated by and transmitted from an external device, the card reader successfully authenticated before receiving the data;
analyzing, by the processor of the card reader, the data to determine at least one first parameter related to one or more of a location and a motion of the card reader;
evaluating, by the processor of the card reader, one or more rules based at least in part on the data to detect when the data fails to satisfy at least one of the one or more of the rules;
triggering, by the processor, an event of the card reader when the data is detected to fail to satisfy at least one rule; and
initiating, by the processor, an action associated with the triggered event comprising disabling, by the processor, operation of the card reader.
17 . The non-transitory machine-readable storage medium of claim 16 , wherein the external device comprises a beacon transmitter having a fixed location, and the data is a wireless beacon transmission received by the card reader from the beacon transmitter.
18 . The non-transitory machine-readable storage medium of claim 17 , wherein the operations further comprise:
analyzing, by the processor of the card reader, the wireless beacon transmission to determine a distance of the card reader from the beacon transmitter; and
evaluating, by the processor of the card reader, the one or more rules based at least in part on the determined distance of the card reader from the beacon transmitter, comprising:
when the determined distance does not satisfy a threshold distance specified by one of the one or more rules, performing the triggering of the event, and
when the determined distance does satisfy each of one or more threshold distances specified by corresponding the one or more rules, not performing the triggering of the event.
19 . The non-transitory machine-readable storage medium of claim 17 , wherein the beacon transmitter comprises a wireless fidelity router, a cellular communications network base station, or a dedicated transmitter device.
20 . The non-transitory machine-readable storage medium of claim 17 , wherein a rule of the one or more rules defines at least an expected motion type associated with the card reader, wherein the expected motion type associated with the card reader comprises fixed or mobile, and the operations for evaluating the one or more rules based at least in part on the data further comprise:
analyzing, by the processor of the card reader, two or more wireless beacon transmissions over a period of time to determine a current motion of the card reader from the two or more wireless beacon transmissions;
determining whether the current motion is indicative of a contrary type of motion of the card reader to the expected motion type associated with the card reader; and
when the contrary type of motion is determined, detecting a failure of at least one of the one or more of the rules and performing the triggering of the event.