Memory card reader

1 FIELD OF INVENTION

p0001The present invention relates to the field of the protection of memory card reading devices. Such memory card reading devices are used in many devices such as payment terminals, authentication or identification devices or content reading devices.

p0002The present invention relates more particularly to securing such memory card reading devices so that it is not possible to capture or monitor signals that are exchanged between a memory card in the device and a secure processor that processes data from the memory card.

2 PRIOR ART

p0003Devices that incorporate memory card reading devices, such as POS terminals, include many security devices and implement many methods to ensure that the devices are used for the purpose for which they were intended and comply with the safety standards that are imposed by the certification bodies.

p0004For example, in the field of payment terminals for smart cards, manufacturers are obliged to comply with since 1 January 2008, the PCI PED 2.0 (Payment Card Industry Pin Entry Device).

p0005This new standard is safe including secure terminal input keyboard protecting the PIN entry, and block the terminal in case of intrusion (fraudulent or accidental).

p0006Is depicted in conjunction with the <figref idrefs="f0001">figure 1</figref>A payment terminal. Due to its constitution such a payment terminal (10) has generally:<ul><li>a keyboard (11) on its upper face;</li><li>a memory card connector (12) sometimes placed under the keyboard and for introducing the card and talk with her. This memory card connector (12) is attached, usually by soldering to a printed circuit (13).</li></ul>

p0007To protect the terminal it has sometimes been considered interesting to combine the safety of these two bodies. A first protection is to bring a protective mesh circuit memory card connector around it and connect this lattice circuit electrically to the PCB via solder that are not accessible without removing the keyboard. Now the key itself is protected from fraudulent removal by the presence of false keys which detect the withdrawal thereof. Therefore, a simple protection (for example with a mesh circuit on one side of a flexible printed circuit), provided it is connected at points inaccessible by a fraudulent person may be sufficient to protect the four faces of the five connector memory card (CAM).

p0008The latest face for the introduction of the customer card can of course not be closed. It remains, in this case, an angle of attack to the fraudster to reach the contact points (pins) of the connector, including the contact points which handle the input signals / output (called I / O) .

p0009Indeed, the share of memory card connector its location on the PCB defines three areas:<ul><li>a connection with main area of ​​the memory card that reads the information on the card;</li><li>a connection zone which is embedded in the memory card connector;</li><li>an intermediate zone in which the contact points are connected to the printed circuit.</li></ul>

p0010It was necessary to guard against fraudulent access to these contact points. Indeed, it is quite possible to imagine connect, at these contact points, a monitoring device that could be used to record signals that transiteraient between the processor and the chip card. Such registration could lead to obtaining sensitive data. We must therefore protect these contact points at the intermediate zone by a system that does not interfere with the functionality of the memory card connector.

p0011Such security is achieved using several hardware and software technologies.

p0012At the hardware level, some manufacturers have incorporated a cache directly at the memory card connector. According to manufacturers, this cache is fixed or removable. When is removable cover is pivoted to permit maintenance of the appliance well set him off (the pivot allows it to be "sensitive" to trigger a security procedure when wanting access ). The unit remains serviceable entitled (loss of sensitive information such as banking information). however this is an expensive solution that requires activation operation. When mounted fixed on the memory card connector or when the cache is an integral part of the memory card connector, it is generally not possible to intervene on the memory card connector to perform maintenance of 'apparatus. You should replace the entire memory card connector. In addition, these connectors require an additional step to enable protection (mechanical operation).

p0013In addition, in the solutions of the prior art, the covers are generally constituted by a plastic part or resistant material and a conductive member such as a copper wire. Or the manufacture of such a cache, which is not longer than a few millimeters, by integrating both non-conductive elements and conductive elements is complex.

p0014It was therefore necessary to find a simple and inexpensive protection solution and allow to achieve maintenance of the device without making it unusable. "Continued on page 3A"

3 SUMMARY OF THE INVENTION

p0015The invention does not have the drawbacks of the prior art. Indeed, the invention relates to a memory card reader, comprising a printed circuit on which is mounted a memory card connector, said connector

p0016The document " <i>ITT MFG ENTERPRISES</i> "(<patcit id="pcit0001" dnum="FR2875036"><text>FR 2875036</text></patcit>) March 10, 2006 relates to a memory card connector comprising an anti-intrusion device (page 1, line 5 to 10) which is in the form of a metal cage (isolated) surrounding a specific connector to protect ( 22, 38). According to this document, the memory card connector comprises at least one signal contact blade (22a) and a ground contact plate and having at least one metal plate (42, 50) of protection that extends opposite to a portion vis-a-vis of the first signal contact blade and is electrically connected to a ground contact blade. memory card having a slot for introducing a memory card and a set of contact points for an exchange of data between said memory card and a processor mounted on said printed circuit.

p0017According to the invention, said circuit further carries an anti-intrusion device formed and positioned so that said anti-intrusion device prevents access from the outside of said reader, at least a connecting portion between the least one of said contact points of said set of contact points and said printed circuit.

p0018Thus, it is not possible to access the connector pins to obtain fraudulently, signals that pass between the memory card and processor. Indeed, where the devices of the prior art proposed solutions of masking the pins directly on the memory card connectors, for example by providing a plastic cover, the invention proposes a solution based on setting directly on the printed circuit, an anti-intrusion device specifically adapted to the cache function of the contact points of the chip card connector. The invention thus provides a simple solution to implement and inexpensive since it is sufficient to mount and attach the anti-intrusion device to the suitable place. This operation can even be performed after the mounting of the memory card connector, for example by using a transfer method of components on printed circuit boards in process unleaded.

p0019According to a particular embodiment of the invention, said anti-intrusion device has substantially the shape of a rectangular parallelepiped comprising, in its upper side a projection obstructing access to said contact points by the above said device Anti-intrusion. The anti-intrusion device is, according to the invention, made using printed circuit fabrication techniques.

p0020According to a particular embodiment of the invention, said anti-intrusion device comprises at least one three-dimensional conductive circuit and at least two contact elements of said driver circuit with a connection pad of said anti-intrusion device on said printed circuit;

p0021Thus, the anti-intrusion device is inviolable because a break of it causes a short circuit in the grid that includes, triggering action at the level of the security processor

p0022In a particular embodiment of the invention, the circuit includes an area for receiving said anti-intrusion device which comprises an even number of pads of said anti-intrusion device.

p0023Thus, during an operation of Microfixation, such as welding, said anti-intrusion device on said circuit, the wetting forces are evenly between said intrusion device and said circuit board so that said CMS does not undergo floating (movement, move) when setting.

p0024According to a particular characteristic of the invention, said lands comprise at least two separate parts a space at the attachment of said anti-intrusion device on said printed circuit, an air discharge which results from said binding.

p0025The invention also relates to a PIN entry device.

p0026According to the invention, such a device includes a memory card reader as described above.

p0027The invention further relates to an anti-intrusion device, particularly for memory card reader. According to the invention, such a device comprises several superposed printed circuit layers and interconnected by means of buried vias and in that it is in the form of an electronic component adapted to be electrically connected to a circuit printed on which it is mounted.

p0028According to another aspect, the invention relates to a method for securing an electronic component mounted on a printed circuit. According to the invention, such a method comprises a step of tombstone, together with said electronic component to be secured, an anti-intrusion device comprising a plurality of printed circuit layers superposed and interconnected using buried vias that can be connected electrically to a printed circuit on which it is mounted.

4 LIST OF FIGURES

p0029Other features and advantages of the invention will become apparent from reading the following description of a preferred embodiment given as a simple illustrative and not exhaustive, and the accompanying drawings, wherein:<ul><li>the <figref idrefs="f0001">figure 1</figref>, Already discussed, presents an overview of a payment terminal with integrated memory card reader;</li><li>the <figref idrefs="f0001">2</figref> illustrates a memory card reader of the invention;</li><li>the <figref idrefs="f0002">3</figref> described anti-intrusion device according to the invention;</li><li>the <figref idrefs="f0002">4</figref> discloses a printed circuit comprising fixing areas according to the invention;</li><li>the <figref idrefs="f0003">5</figref> discloses a fixing zone of the invention.</li></ul>

5 DETAILED DESCRIPTION OF THE INVENTION

5.1

Reminder of the invention

p0030The invention proposes to protect the frontal contact points of the memory card connector by adding, on the PCB, an anti-intrusion device. As the anti-intrusion device is mounted on the PCB, not on the memory card connector, it is easier to mount. In addition, it is easier to build an anti-intrusion device which is directly mounted on the circuit board than to build an anti-intrusion device that must be integrated into the memory card connector itself.

p0031According to the invention, the anti-intrusion device is an electronic component surface mounted (SMD). Thus, the intrusion detection device can be mounted on the printed circuit, together with the other components in the same manufacturing step as the other components (the order of WCS is defined in the design of the unit) .

p0032In one embodiment of the invention, it is contemplated that the anti-intrusion device of the invention may be shaped to receive, therein, an electronic circuit to be protected, thus forming a protective enclosure to the interior of which can be a sensitive electronic circuit that is to be protected. Thus, the anti-intrusion device of the invention can be used not only to protect the contact points, such as contact input / output points, but also printed circuit boards in their entirety, thereby preventing any attempt monitoring, for example, a processor located within the device.

p0033According to the invention, the anti-intrusion device comprises several superposed printed circuit layers and interconnected by means of buried vias and in that it is in the form of an electronic component. Such a device can be in any form. The shape of the device can be adapted depending on the component or the printed circuit to be protected.

p0034According to the invention there is provided a protecting an electronic component mounted on a printed circuit by performing a step of tombstone, together with the electronic component to be secured, an anti-intrusion device. When the anti-intrusion device forms a protective enclosure, the joint layring step ensures that it is not possible to alter the electronic component to secure.

p0035Subsequently, we present one embodiment of a memory card reader device according to the invention. It is clear however that the invention is not limited to this particular application, but can also be implemented in many other electronic circuit protection contexts and more generally in all cases where the characteristics listed thereafter are interesting .

5.2

Description of an embodiment

p0036We present in this embodiment, a memory card reader according to the invention in which an anti-intrusion device was mounted on the printed circuit to prevent access to the contact points, including the contact point said " IO "(English for" input / output ").

p0037As illustrated in <figref idrefs="f0001">2</figref>The memory card connector (12) is mounted on the printed circuit (13). The memory card connector has a slot (12.1) in which the card can be inserted. The memory card connector also includes a set of contacts (12.2) for connection of the card, when the latter is inserted, with a device processor.

p0038These contacts (12.2) have a slight bulge (12.3) at the connection point with the card in the memory card connector. Contacts are then shaped so that they extend towards the circuit board (13). They join thereto by an intermediate zone in which the contact points (12.4) are connected to the printed circuit (13).

p0039The anti-intrusion device (14) is mounted so that it prevents access to at least some contact points, including contact "IO".

p0040To guard access to the contact points by the upper face of the anti-intrusion device (14), the latter can advantageously comprise a protuberance of obstruction (14.1), which is an element whose width or length respectively greater than the width or length of the body of the anti-intrusion device and which serves to mask the contact points (12.4) of the memory card connector, as shown in <figref idrefs="f0002">3</figref>.

p0041Thus, it is not possible to move the contact elements (such as thin electrical son or thin conductive films) to the contact elements of the memory card connector to spy on signals exchanged between the card memory and processor.

p0042To guard the drilling of the anti-intrusion device for achieving the contact points, the anti-intrusion device comprises at least one three-dimensional conductive circuit and at least two elements to the contact of the three-dimensional conductive circuit with a pad the anti-intrusion device on the circuit board. Specifically, the anti-intrusion device is called lattice since the conductive circuit in it performs a three-dimensional grid volume of the anti-intrusion device.

p0043Such a grid is produced according to the invention, positioning them one above the other several layers printed circuit according to conventional technology to form an anti-intrusion device whose volume can protect access points contact.

p0044To allow tracks membranes come into contact and thereby form a real three-dimensional circuit, buried vias are made between two successive layers. For memory, a via is a plated through hole which is intended to electrically connect various layers of the PCB.

p0045Thus it has a three-dimensional electrical circuit whose architecture is such that it is not possible to drill without causing a short circuit and cause, according to the invention an active device protection, namely for example a final erase memories containing sensitive information, that these memories are located on the device itself or on the card that is inserted.

p0046Once formed, the anti-intrusion device may also be further covered with a membrane and thus provide a surface-mounted component which integrates itself a surface mounted component.

p0047According to the invention, and as illustrated in <figref idrefs="f0002">4</figref>, The anti-intrusion device 14 is mounted on the circuit board 13. To do this, the circuit board has, as usual, ranges (13.1 to 13.6) which allow contacting of the conductor circuits or the device burglar with the circuit or circuits of the PCB. However, according to the invention, the printed circuit has, in the mounting area of ​​the anti-intrusion device, an even number of contacting pads, the pads being arranged symmetrically along an imaginary axis positioning ( 13.7).

p0048Indeed, the inventors have noticed that when fixing the surface mounted components on the circuit board, a lateral force is exerted at the surface mounted component causing it to rotate. The inventors have discovered that a variable which determines the component of the degree of rotation surface mounted once fixed relative to the mounting position of the same component is the number of fixing areas and their positions relative to each other . Thus, the inventors have discovered that once mounted, during the action of the fixing agent, component tends to adopt a symmetrical position with respect to the fixing areas.

p0049Or in the context of the invention, it is important that the position in which the anti-intrusion device is fixed regardless of the position in which the anti-intrusion device is mounted. While once fixed, the anti-intrusion device is tilted even just a few degrees relative to its mounting position, the protective action can be reduced or completely canceled.

p0050The inventors have had the idea of ​​placing an even number of mounting pads for the anti-intrusion device, these beaches are distributed symmetrically along a positioning axis. Thus, the forces acting upon fixing are on all the beaches and the component is fixed in the same position as that in which it was mounted.

p0051Following testing, the inventors have also noticed that the fixing phase of the anti-intrusion device on the printed circuit could lead to the tiny air pockets forming in the weld. But such bags are not acceptable under the protection of the contact points. Indeed, if an air pocket is formed in the solder, it might be possible to introduce a tiny electrode, by drilling, without a short circuit is achieved, and consequently without the device security procedures are in place. Furthermore, these air pockets are very detrimental to the mechanical strength, and may even create false welds.

p0052Thus, according to the invention in relation to <figref idrefs="f0003">5</figref>, The reception ranges (13.1 to 13.6) were separated by a gap (13.8) does not comprise copper. Hence, the free space on the beach to receive the air that comes from attachment and provide an entirely free solder air pocket. guard tracks are also positioned around each weld 13.1 to 13.6. These guard tracks can prevent a short circuit contact points by performing a side attack. These guard tracks have the shape of a rectangle which surrounds the receiving ranges and which are electrically connected to the secure processor so that the latter can detect a short circuit.