Triton Systems of Delaware, LLC

X2 US/Canada/Australia Anti-Skim Software Release Notes Affected products RL5000, FT5000, ARGO 7, ARGO 12 December 7, 2016 Version 1.4

Triton Systems of Delaware, LLC 21405 B Street Long Beach, MS 39560 USA PHONE: (228) 868-1317 FAX: (228) 868-0437

X2 US/Canada/Australia Anti-Skim Software Release Notes Triton Systems Page 1 of 7 December 7, 2016

INTRODUCTION......................................................................................................................... 3 PLATFORMS AFFECTED ......................................................................................................... 3 HARDWARE SUPPORT .................................................................................................................. 3 SOFTWARE REQUIREMENTS ......................................................................................................... 3 DESCRIPTION OF CHANGES ................................................................................................. 3 ANTI-SKIM CARD READER .......................................................................................................... 3 CONFIGURING THE ANTI-SKIM CARD READER ............................................................................ 4 SKIMMER DETECTION .................................................................................................................. 5 CARD READER DIAGNOSTICS ....................................................................................................... 6 CARD DATA ENCRYPTION ............................................................................................................ 7 SKIMMER JAMMING ..................................................................................................................... 7 CARD READER LATCHING ............................................................................................................ 7 REVISION HISTORY ................................................................................................................. 7

X2 US/Canada/Australia Anti-Skim Software Release Notes Triton Systems Page 2 of 7 December 7, 2016

Introduction This document describes new functionality for the 4.0 software release for RL5000, FT5000, ARGO 12 and ARGO 7 CE6 ATMs to support the Anti-Skimming card reader. The differences described are from version 4.0.

Platforms Affected This release is for the following families:  RL5000/FT5000/ARGO 7/ARGO 12 X2 CE6 (US/Canada/Australia)

Hardware Support The following is a list of hardware supported by this software:  Main Board: Triton X2 CE6 Main Board  Display: 10.4” VGA, 7” WVGA Touch Screen, 12” SVGA  Card Reader: Sankyo ICM33B Dip Reader, Sankyo 330 (ARGO 12), Sankyo ICT3K7 (ARGO 12)  EPP: T9  Dispenser: SDD, MiniMech, NMD50, NMD100, HCDU, SCDU  Security Module: SN-01.01.001 (RL/FT), SM-01.01.011 (ARGO 7/12)  Printer: Seiko 60mm, 80mm USB Printer  Modem: Triton USB Modem, TDL Gateway Modem

Software Requirements The following load files are included with this release:  t-fs-xcse-4.0.0.36.tr6 – RL5000/FT5000 US/Australia Full load file  t-fs-xcae-4.0.0.36.tr6 – RL5000/FT50000 Canada Full load file  t-fs-wtcs-4.0.0.35.tr6 – ARGO 7 US/Aus/Can Full load file  t-fs-scsf-4.0.0.37.tr6 – ARGO 12 US/Aus/Can Full load file Install on top of CE6 4.0 software.

Description of Changes Anti-Skim Card Reader This software release contains support for the Sankyo ICM33B Anti-Skim card reader. The card reader will show up in the configuration summary as: Card Reader Type: Sankyo ICM33B Anti-Skim

At startup, the LED on the front of the card reader will turn solid green to indicate the reader is operational. The LED should remain on unless there is a problem with the card reader. X2 US/Canada/Australia Anti-Skim Software Release Notes Triton Systems Page 3 of 7 December 7, 2016

Configuring the Anti-Skim Card Reader The card reader will be calibrated in the factory for ATMs shipped with the Anti-Skim card reader. Installing or replacing a card reader in an existing ATM will require the reader to be calibrated after installing into the ATM. Please use the following process to calibrate the reader: -

Go to Management Functions > Main Menu > Terminal Configuration > More Options > More Options > Anti-Skim Press “ENTER” on the keypad to apply the current settings Note that the card reader LED may turn off and back on during this process When the calibration completes, and “Successfully configured anti-skim properties” is displayed, press ENTER to return to the More Options 2 menu To ensure all settings are applied, power down the ATM from Main Menu > System Parameters > Shut Down Terminal Turn power off and back on and then allow the ATM to remain at the welcome screen for at least 3 minutes to confirm the ATM does not detect a skimmer

Note that the default settings in the Anti-Skim parameters dialog should be sufficient in most cases. However, the following values may be modified for both the temperature corrected method and the differential voltage method: -

Metal present time to trigger skimmer detection, range is either 0 or within range 60 to 9999 seconds. Metal absent time to clear skimmer detection, range is 1 to 9999 seconds. Sensed voltage differential to trigger metal detection, range is 1 to 999 mV for temperature corrected, 0 to 999 mV for differential voltage. Sensed voltage differential to trigger metal detection warning, range is 1 to 999 mV for temperature corrected, 0 to 999 mV for differential voltage. (Lower voltage, precedes actual detection, unused but supported for possible future use. Cannot be greater than detection voltage)

When changing any of the above values, it is recommended to follow the process above to ensure new settings are applied. Here are the default values for these settings: Parameter Temperature Corrected Metal Present Time Temperature Corrected Metal Absent Time Temperature Corrected Detection Voltage Temperature Corrected Warning Voltage Differential Voltage Metal Present Time Differential Voltage Metal Absent Time Differential Voltage Detection Voltage Differential Voltage Warning Voltage

Default Value 0180 0010 150 110 0180 0010 050 020

Also, when the terminal's parameters are restored to defaults or are restored from an external storage device, the restored values are automatically loaded into the card reader. X2 US/Canada/Australia Anti-Skim Software Release Notes Triton Systems Page 4 of 7 December 7, 2016

Note that Triton Connect can also be used to configure the Anti-Skim parameters. This requires Triton Connect version 6.0 SP5 or later.

Skimmer Detection At the welcome screen, when the ATM detects a skimmer, the ATM treats this as an error condition. In this case, the ATM will do the following: - Go out of service and display the error code 196 on screen - Log the event in the ATM's journal - Advise Triton Connect of the error (if configured to do so) Once the ATM determines that the skimmer is no longer detected, the ATM will automatically recover without operator intervention. The ATM will: - Go back in service - Display the regular welcome screen - Log the event in the ATM's journal - Advise Triton Connect that the error has been cleared (if configured to do so) While the ATM is in the state where a skimmer is detected, selecting to "Show Error Details" in Management Functions will display the text: "Card reader status: Skimmer detected". When a skimmer is detected, the event is logged in the journal, showing error code 196 and that a skimmer was detected. 7/31/2015 5:35:12 PM Terminal out of service, code=196 7/31/2015 5:35:12 PM Error Detail: Card reader status: Skimmer detected When the skimmer is no longer detected, the clearing of the error is logged in the journal. 7/31/2015 5:40:18 PM Reset Terminal Error Note that if the skimmer is detected while the user is in Management Functions, the error 196 is not reported until exiting Management Functions.

X2 US/Canada/Australia Anti-Skim Software Release Notes Triton Systems Page 5 of 7 December 7, 2016

Card Reader Diagnostics The card reader status report shown in Management Functions and in the Configuration Summary will show the following information: Card Reader Type: Sankyo ICM33B Anti-Skim Device ID: NIDEC SANKYO CORPORATION Firmware Ver: 4974-01B 4975-01K 4924-01B 4962-01A 4963-01B 4977-01C 4978-01G 1C8DFD Serial Num: A6030217 Metal Detector: Present Jamming Coil: Present Temperature Corrected Metal Present Time: 180 sec Metal Absent Time: 10 sec Detection Voltage: 150 mV Warning Voltage: 110 mV Differential Voltage Metal Present Time: 180 sec Metal Absent Time: 10 sec Detection Voltage: 50 mV Warning Voltage: 20 mV

A new test has also been added in Management Functions > Main Menu > Diagnostics > Card Reader > Test Anti-Skim. If metal is detected, the text "Metal detected" is displayed. If metal is not detected, the text "Metal not detected" is displayed. The voltage X is displayed as "Voltage: X mV". X is up to 4 digits, leading zeros not shown. The temperature X is displayed as "Temperature: X °C". X is a plus/minus sign, 2 digits, a decimal point, and 1 digit. Example: Test Anti-Skim Metal detected Voltage: 926 mV Temperature: +24.2 °C If metal is detected for long enough, the card reader treats it as a skimmer, and no further values can be obtained. Just the text "Skimmer detected" is displayed.

X2 US/Canada/Australia Anti-Skim Software Release Notes Triton Systems Page 6 of 7 December 7, 2016

Card Data Encryption The Anti-Skim card reader also helps defend against a skimmer eavesdropping on the serial interface between the ATM mainboard and the card reader by encrypting the magnetic stripe and EMV data.

Skimmer Jamming The Anti-Skim card reader additionally provides a feature to make it more difficult for a skimmer to read a card in the event the skimmer is not detected by the card reader. When the card reader is reading a magnetic strip card, the reader simultaneously emits a magnetic field which disrupts a skimmer’s read.

Card Reader Latching Currently the Anti-Skim card reader cannot be configured to disable latching. Note that the option in Management Functions can still be toggled and the journal will note latching enabled/disabled, but the card reader itself will always attempt to latch during a transaction with EMV enabled.

Revision History Date August 18, 2016 August 29, 2016 September 1, 2016 October 27, 2016 December 7, 2016

Version 1.0 1.1 1.2 1.3 1.4

Description of Change Initial version Added ARGO 7 Added base software for field upgrades Added ARGO 12 Minor edits

X2 US/Canada/Australia Anti-Skim Software Release Notes Triton Systems Page 7 of 7 December 7, 2016