End user protection against ATM keypad overlay
Methods, systems, and computer program products for data entry device security are provided. Aspects include receiving an indication of a user presence at a data entry device, wherein the data entry device includes a surface with apertures, and wherein the apertures include a material with a reflection coefficient. A presence of a fraud device is determined by emitting, from beneath the surface, security light from a set of one or more emitters, wherein the security light has a security light luminous power. A reflection of the security light off the material is collected by a first set of one or more sensors, wherein the reflection has a reflection luminous power. A luminous power range is determined based on the security light luminous power and the reflection coefficient and based on the reflection luminous power being outside the luminous power range, security measures are engaged at the data entry device.
1. A system for overlay security, the system comprising:
a memory;
a transaction processing terminal having a data entry device that is communicatively coupled to a processor and the memory, wherein the processor is configured to:
receive an indication of a presence of a user at a data entry device, wherein the data entry device includes a surface with one or more apertures, and
wherein the one or more apertures include a material with a reflection coefficient;
determine a presence of a fraud device overlaid on the data entry device by:
emitting, from beneath the surface, security light from a set of one or more emitters, wherein the security light has a security light luminous power;
collecting a reflection of the security light off the material by a first set of one or more sensors, wherein the reflection has a reflection luminous power;
determining a luminous power range based on the security light luminous power and the reflection coefficient; and
based at least in part on the reflection luminous power being outside the luminous power range, engaging one or more security measures at the data entry device.
2. The system of claim 1 , wherein the processor is further configured to:
collect ambient light by a second set of one or more sensors, wherein the ambient light passes through one or more apertures of the data entry device;
determine a total luminous power based at least in part on the ambient light and the reflection of the security light;
derive a second luminous power range based on the ambient light and the reflection luminosity;
based at least in part on the total luminosity being outside the second luminous power range, engage one or more security measures at the data entry device.
3. The system of claim 1 , wherein the processor is further configured to:
based at least in part on the reflection luminous power being within the luminous power range, allow operation of the data entry device.
4. The system of claim 2 , wherein the processor is further configured to:
based at least in part on the total luminous power being within the second luminous power range, allow operation of the data entry device.
5. The system of claim 1 , wherein the determining the luminous power range includes determining a reflectance based at least in part on the security light and the reflection coefficient of the material.
6. A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform a method comprising:
receiving, by a processor, an indication of a presence of a user at a data entry device, wherein the data entry device includes a surface with one or more apertures, and
wherein the one or more apertures include a material with a reflection coefficient;
determining a presence of a fraud device overlaid on the data entry device by:
emitting, from beneath the surface, security light from a set of one or more emitters, wherein the security light has a security light luminous power;
collecting a reflection of the security light off the material by a first set of one or more sensors, wherein the reflection has a reflection luminous power;
determining a luminous power range based on the security light luminous power and the reflection coefficient; and
based at least in part on the reflection luminous power being outside the luminous power range, engaging one or more security measures at the data entry device.
7. The computer program product of claim 6 , wherein the material includes a transmission coefficient and further comprising:
collecting ambient light by a second set of one or more sensors, wherein the ambient light passes through one or more apertures of the data entry device;
determining a total luminous power based at least in part on the ambient light and the reflection of the security light;
deriving a second luminous power range based on the ambient light and the reflection luminosity; and
based at least in part on the total luminosity being outside the second luminous power range, engaging one or more security measures at the data entry device.
8. The computer program product of claim 6 further comprising: based at least in part on the reflection luminous power being within the luminous power range, allowing operation of the data entry device.
9. The computer program product of claim 7 further comprising: based at least in part on the total luminous power being within the second luminous power range, allowing operation of the data entry device.
10. The computer program product of claim 6 , wherein the determining the luminous power range includes determining a reflectance based at least in part on the security light and the reflection coefficient of the material.