CL2020003399A1 - Método para proteger un terminal de pago. - Google Patents

Método para proteger un terminal de pago.

Info

Publication number
CL2020003399A1
CL2020003399A1 CL2020003399A CL2020003399A CL2020003399A1 CL 2020003399 A1 CL2020003399 A1 CL 2020003399A1 CL 2020003399 A CL2020003399 A CL 2020003399A CL 2020003399 A CL2020003399 A CL 2020003399A CL 2020003399 A1 CL2020003399 A1 CL 2020003399A1
Authority
CL
Chile
Prior art keywords
counter
value
physical
payment terminal
unit
Prior art date
Application number
CL2020003399A
Other languages
English (en)
Inventor
Grégoire Mardinian
Sylvain Umdenstock
Matthieu Sligar
Original Assignee
Youtransactor
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Youtransactor filed Critical Youtransactor
Publication of CL2020003399A1 publication Critical patent/CL2020003399A1/es

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/86—Secure or tamper-resistant housings
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/552—Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/72—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in cryptographic circuits
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/20—Point-of-sale [POS] network systems
    • G06Q20/206—Point-of-sale [POS] network systems comprising security or operator identification provisions, e.g. password entry
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/0873—Details of the card reader
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1016—Devices or methods for securing the PIN and other transaction-data, e.g. by encryption
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/75—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by inhibiting the analysis of circuitry or operation
    • G06F21/755—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by inhibiting the analysis of circuitry or operation with measures against power attack
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2101—Auditing as a secondary aspect
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2135—Metering
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2143—Clearing memory, e.g. to prevent the data from being stolen
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Business, Economics & Management (AREA)
  • Software Systems (AREA)
  • Accounting & Taxation (AREA)
  • General Engineering & Computer Science (AREA)
  • Finance (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Signal Processing (AREA)
  • Mathematical Physics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Storage Device Security (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

La presente invención se refiere a un método para proteger un terminal de pago que <br /> comprende: - una clave de cifrado de datos; - un módulo de vigilancia que comprende un <br /> medio de medición de un parámetro físico; - una unidad de contador de un microcontrolador, <br /> estando subordinada la unidad de contador a un reloj para incrementar un valor de contador; <br /> dicho método comprende las siguientes etapas: - medición de un parámetro físico mediante <br /> el medio de medición del dispositivo de vigilancia; - comparación del valor medido con un <br /> valor umbral predeterminado, correspondiente a un ataque físico; - reinicio de la unidad de <br /> contador; y si se cumple una de las siguientes condiciones: - por lo menos un valor de los <br /> parámetros físicos es significativo de un ataque físico a dicho terminal; - el valor de contador <br /> es mayor que un valor umbral predefinido; el método también comprende una etapa de <br /> eliminar el acceso a la clave de cifrado.
CL2020003399A 2018-06-29 2020-12-28 Método para proteger un terminal de pago. CL2020003399A1 (es)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
FR1855990A FR3083412B1 (fr) 2018-06-29 2018-06-29 Procede de protection d'un terminal de paiement

Publications (1)

Publication Number Publication Date
CL2020003399A1 true CL2020003399A1 (es) 2021-05-14

Family

ID=64049337

Family Applications (1)

Application Number Title Priority Date Filing Date
CL2020003399A CL2020003399A1 (es) 2018-06-29 2020-12-28 Método para proteger un terminal de pago.

Country Status (9)

Country Link
US (1) US12058242B2 (es)
EP (1) EP3814959A1 (es)
BR (1) BR112020026769A2 (es)
CL (1) CL2020003399A1 (es)
CO (1) CO2021000053A2 (es)
FR (1) FR3083412B1 (es)
MX (1) MX2021000199A (es)
PE (1) PE20210993A1 (es)
WO (1) WO2020002677A1 (es)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11687468B2 (en) * 2020-07-02 2023-06-27 International Business Machines Corporation Method and apparatus for securing memory modules
CN113918622B (zh) * 2021-10-22 2022-04-19 南京理工大学 基于区块链的信息溯源方法及系统
CN118802345A (zh) * 2024-07-12 2024-10-18 百富计算机技术（深圳）有限公司 资源对换终端的安全检测方法、安全底座、装置及介质

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5533123A (en) * 1994-06-28 1996-07-02 National Semiconductor Corporation Programmable distributed personal security
FR2871905A1 (fr) * 2004-06-21 2005-12-23 Innova Card Sarl Dispositif de securisation d'un circuit electronique
US11132659B2 (en) * 2015-07-14 2021-09-28 Texas Instruments Incorporated Tamper detection
US9818004B1 (en) * 2016-08-31 2017-11-14 Square, Inc. Anti-tamper circuit with internal local oscillator
US10438190B2 (en) * 2017-07-18 2019-10-08 Square, Inc. Devices with on-board physically unclonable functions
US10410189B2 (en) * 2017-09-30 2019-09-10 Square, Inc. Scanning system with direct access to memory

Also Published As

Publication number Publication date
WO2020002677A1 (fr) 2020-01-02
FR3083412A1 (fr) 2020-01-03
PE20210993A1 (es) 2021-06-01
US20210281398A1 (en) 2021-09-09
CO2021000053A2 (es) 2021-04-19
US12058242B2 (en) 2024-08-06
EP3814959A1 (fr) 2021-05-05
MX2021000199A (es) 2021-06-08
FR3083412B1 (fr) 2021-09-24
BR112020026769A2 (pt) 2021-03-30

Similar Documents

Publication Publication Date Title
CO2021000053A2 (es) Método para proteger un terminal de pago
EP3561492A4 (en) RAM SPECTRUM DETECTION DEVICE AND DETECTION SECURITY MONITORING METHOD THEREOF
FR3026031B1 (fr) Dispositif de protection d&#39;un capteur optique
Döhler et al. Subspace-based fault detection robust to changes in the noise covariances
Chen et al. Existence and nonlinear stability of stationary solutions to the full compressible Navier–Stokes–Korteweg system
KR102051810B9 (ko) 통합 환경 감시 장치를 이용한 배터리 보호 방법 및 장치
EP3543884A4 (en) METHOD AND SYSTEM FOR PROTECTING SYSTEM PARTITION KEY DATA AND TERMINAL
EP3847647A4 (en) ROWHAMMER PROTECTION FOR A STORAGE DEVICE
RU2015134147A (ru) Профилирование выполнения кода
CL2014002526A1 (es) Metodo para detectar una cara, que comprende preprocesar una imagen, extraer las esquinas de la imagen preprocesada, obtener un componente conectado de las esquinas, extraer los centroides del componente, hacer coincidir los centroides con una plantilla, calcular una probabilidad de coincidencia de los centroides con la plantilla, identificar las regiones formadas por los centroides teniendo una probabilidad de coincidencia mayor o igual a un valor predeterminado; sistema; medio de almacenamiento
EP3052025A4 (en) OPTICAL SENSOR, OPTICAL TEST EQUIPMENT AND OPTICAL PROPERTY DETECTION PROCEDURE
FR3027006B1 (fr) Dispositif de protection d’un capteur optique
EP3682417A4 (en) VEHICLE MONITORING DEVICE
AR093966A1 (es) Sistemas y metodos de medicion de concentraciones de aditivos de fluidos para el manejo de fluidos de perforacion en tiempo real
BR112016007600A2 (pt) método para diagnosticar remotamente problemas de campo associados com um desarme de um dispositivo de proteção de circuito em um local de cliente, dispositivo de diagnóstico de proteção de circuito, sistema para diagnosticar remotamente problemas de campo associados com o desarme de dispositivo de proteção de circuito no local de cliente, dispositivo de diagnóstico e sistema para diagnosticar remotamente problemas de campo em um local de cliente
FR2986356B1 (fr) Dispositif de protection d&#39;un circuit integre contre des attaques en face arriere
DK3386164T3 (da) Kontekstafhængige regelbaserede alarmer til bedrageriovervågning
AR097714A1 (es) Sistemas y métodos para la medición de características del fluido de fondo de pozo en los fluidos de perforación
EP3040708A4 (en) DEVICE FOR MEASURING OPTICAL PROPERTIES AND METHOD FOR MEASURING OPTICAL PROPERTIES
EP3662308A4 (en) SIMULTANEOUS DISTRIBUTED MEASUREMENT MONITORING OVER MULTIPLE FIBERS
EP3775943C0 (en) A monitoring and protection device
EP3951120C0 (de) Schutztürüberwachungsmodul
LT3603352T (lt) Elektroninis apsaugos nuo įsilaužimo įrenginys
EP2995979A4 (en) FILTER AND MANUFACTURING METHOD THEREFOR AND DEVICE FOR MONITORING LASER WAVELENGTH
MX346403B (es) Metodo, dispositivo y terminal para proteger un programa de aplicacion.