Technical Field

The present application relates to an automated teller machine (ATM), to a shutter for an ATM and to a sensor for a shutter of an ATM.

Background to the Invention

Automated teller machines (ATMs) offer customers of financial institutions such as banks convenient access to funds in their accounts, allowing the customers to withdraw money in the form of bank notes from their accounts automatically, without having to interact with a bank teller or cashier.

A typical ATM includes a safe or vault in which bank notes to be dispensed are stored and a dispensing outlet through which bank notes are dispensed. A delivery mechanism is also housed within the safe, and is operative to deliver bank notes from the safe to the dispensing outlet on request from a customer. The dispensing outlet is normally closed by a moveable shutter, which moves into an open position when bank notes are to be dispensed.

As ATMs typically contain a large amount of cash in the form of bank notes, they are frequently targeted by criminals. To deter would-be thieves from attempting to steal from ATMs it has become commonplace for the cash within the ATM to be protected by a spoiling system which is triggered on detection of an attack on the safe (e.g. an unauthorised attempt to open the safe) and dispenses a spoiling agent onto the bank notes stored in the safe to render them unusable and thus worthless.

Typically cash is stored in the safe in one or more cassettes, to facilitate replenishment of the ATM, and to improve security of the cash in transit and in situ within the safe. In such arrangements, the spoiling system may be provided in the safe of the ATM, or may be provided in the cash cassettes to provide protection for the cash in transit as well as in situ in the ATM.

The dispensing outlet typically provides the only means of accessing the safe from the customer-facing exterior of the ATM, and as such has become the target of attacks by would-be thieves seeking to access the cash stored in the safe. In one common form of attack the shutter is breached using a power tool such as a drill, or forced open using a crowbar or the like, exposing part or all of the dispensing outlet. Explosive gas is then pumped into the safe through the exposed dispensing outlet and ignited, causing the safe to explode, permitting access to its contents. In a variant on this form of attack, solid explosives may be forced into the interior of the safe and detonated, again causing the safe to explode and permitting access to its contents. It will be appreciated that attacks of this nature are extremely costly and disruptive, as the damage caused by the explosion typically destroys not only the ATM but also part or all of the building in which the ATM is installed, giving rise to costly and disruptive rebuilding work.

In response to the threat of such attacks, some ATMs are now fitted with gas suppression systems, which include sensors to detect explosive gas that may be introduced into the safe or the interior of the ATM. On detection of explosive gas the gas suppression system releases a neutralising gas, which alters the composition of the explosive gas, rendering it ineffective. However, such systems may be triggered accidentally by harmless gases or other substances that are present in the environment around the ATM, but which are not intended for use in attacking the ATM. Additionally, gas suppression systems of the type described above offer no protection against solid explosives.

The applicant's earlier UK patent application no. GB2495792 discusses a system for detecting an attack on the shutter of an ATM and triggering a spoiling system in response to the detection of such an attack. The system disclosed in GB2495792 relies upon a sensor that is integral with or attached to the shutter and has a wired connection to a security system of the ATM. This arrangement may suffer disadvantages, in that it the wired connection between the sensor and the security system may make installation, servicing and maintenance of the sensor undesirably difficult. Additionally, even though strain-relieving means are provided in the system of GB2495792, the wired connection may still be vulnerable to breakage, causing failure of the system.

Accordingly, a need exists in the art for an improved system for deterring attacks on ATM machines.

Summary of Invention

According to a first aspect of the present invention there is provided an automated teller machine (ATM) comprising: a storage area for storing bank notes to be dispensed, an outlet through which the bank notes are dispensed; and a wireless communications receiver, wherein: the ATM is provided with a sensor system and a wireless communications transmitter for communicating with the wireless communications receiver of the ATM; and the wireless communications transmitter is configured to transmit a signal to the wireless communications receiver on detection by the sensor system of unauthorised interference with the ATM.

The sensor system and wireless communications transmitter of the ATM of the present invention provide a deterrent to attacks targeting the ATM, as the sensor system is able to detect such attacks (or other unauthorised interference with the ATM) and take appropriate action. The use of a wireless communications transmitter facilitates the installation, maintenance and repair of the sensor system, as there are no wired connections between the sensor system and the ATM. This lack of any wired connections also obviates any risk of failure or false detection caused by wired connections between the sensor system and the ATM becoming disconnected or otherwise failing. Additionally, the wireless communications transmitter can be used to transmit information from the ATM to external devices.

The ATM may further comprise a spoiling system for dispensing a spoiling agent.

The ATM may further comprise a shutter that is moveable between a closed position in which it closes the outlet and an open position in which access to the outlet is permitted, wherein the shutter is provided with the sensor system and wireless communications transmitter.

Providing the sensor system and the wireless communications transmitter to the shutter in this way acts as a deterrent to attacks which target the shutter, as the sensor system is able to detect such attacks (or other unauthorised interference with the shutter) and take appropriate action.

The wireless communications transmitter may be configured to operate in accordance with any convenient wireless communications protocol, for example a wireless communications protocol selected from the group comprising: Bluetooth®; Bluetooth® Smart; WiFi®; RFID; and Near Field Communications.

The sensor system may comprise an accelerometer.

The wireless communications transmitter may be configured to transmit a signal to cause the spoiling system to be triggered if the accelerometer detects movement indicative of unauthorised interference with the shutter of the ATM.

Additionally or alternatively, the sensor system may comprise an electrically conductive track which is configured to break in the event of an attack on the shutter of the ATM. The electrically conductive track may be provided on a substrate that is attachable to the shutter of the ATM.

The substrate may have a thickness of between 0.4mm and 0.8mm, for example.

The substrate may be flexible. For example, the substrate may be of polyamide or polyester.

The substrate may be provided with one or more zones of weakness. For example, the one or more zones of weakness may be formed by one or more holes in the substrate.

The wireless communications transmitter may be configured to transmit a signal to cause the spoiling system to be triggered if the electrically conductive track is broken.

The sensor may comprise a plurality of different electrically conductive tracks which are configured to break in the event of an attack on the shutter of the ATM, and the wireless communications transmitter may be configured to transmit a signal to cause the spoiling system to be triggered if one or more of the plurality of electrically conductive tracks is broken. Alternatively, the wireless communications transmitter may be configured to transmit a signal to cause the spoiling system to be triggered only if all of the plurality of different electrically conductive tracks are broken.

The storage area may comprise a safe of the ATM.

The storage area may additionally or alternatively comprise a cash cassette received in the ATM.

According to a second aspect of the invention there is provided a sensor system for attachment to a shutter of an ATM for detecting tampering with the shutter, the sensor system comprising: a sensor; and a wireless communications transmitter, wherein the wireless communications transmitter is configured to transmit a signal in the event that the sensor detects unauthorised interference with the shutter.

The sensor system of the second aspect may be fitted at the manufacturing stage of an ATM, or may be retro-fitted to existing ATMs, to provide the benefits and advantages associated with the ATM of the first aspect.

The sensor system may comprise an accelerometer.

The wireless communications transmitter may be configured to transmit a signal if the accelerometer detects movement indicative of unauthorised interference with the shutter.

The sensor system may additionally or alternatively comprise a sensor of the kind having a conductive track, as described in the preceding paragraphs.

According to a third aspect of the invention, there is provided a shutter for an ATM, the shutter comprising a sensor system according to the second aspect.

The shutter of the third aspect may be fitted at the manufacturing stage of an ATM, or may be retro-fitted to existing ATMs, to provide the benefits and advantages associated with the ATM of the first aspect.

Brief Description of the Drawings

Embodiments of the invention will now be described, strictly by way of example only, with reference to the accompanying drawings, of which:

Figure 1 is a schematic representation of an automated teller machine (ATM); Figure 2 is a schematic view from one side, showing part of an ATM with a shutter in a closed position, closing a dispensing outlet;

Figure 3 is a schematic representation showing the part of the ATM shown in Figure 1, with the shutter in an open position such that the dispensing outlet is open; and

Figure 4 is a schematic illustration of a sensor system for detecting an attack on or other interference with a shutter of an ATM;

Figure 5 is a schematic illustration of an exemplary sensor for use in the sensor system of Figure 4;

Figure 6 is a schematic representation showing a sensor system attached to a shutter of an ATM;

Figure 7 is a schematic representation showing a sensor system attached to a shutter of an ATM using an alternative attachment method; and

Figure 8 is a schematic representation showing an alternative sensor for use in the sensor system of Figure 4.

Description of the Embodiments

Referring first to Figure 1, an ATM is shown generally at 10, and has a screen 12 for providing instructions or other information to a user of the ATM 10 and a slot 14 for receiving a user's ATM card. A keyboard 16 is provided to permit a user to interact with the ATM 10 to request services such as cash dispensing, balance enquiries and the like. Cash is dispensed by the ATM 10 through a dispensing outlet 18. A shutter may be provided to permit or deny access to the dispensing outlet 18, as will be described in more detail below. The ATM 10 includes a storage area such as a safe 20 in which cash to be dispensed to customers is stored. The ATM 10 is associated with a spoiling system which is configured to dispense a spoiling agent to spoil or degrade the bank notes in the event of an attack or other unauthorised attempt to gain access to the bank notes, as will be described in more detail below.

In the example illustrated in Figure 1 , the safe 20 includes a plurality of cash cassettes 22 containing the cash. It is to be appreciated that the cash cassettes 22 need not be received in the safe 20; indeed, where cash cassettes 22 are used, the safe 20 may not be necessary. The use of the cash cassettes 22 in this way facilitates replenishment of the ATM 10, as an empty (or partially empty) cash cassette 22 may simply be removed from the safe 20 of the ATM 10 and replaced with a full cash cassette 22.

Each cash cassette 22 is provided with a spoiling system 24, which is configured to be activated if an attack on the cash cassette 22 is detected, to dispense a spoiling agent such as ink, dye or an adhesive onto the contents of the cash cassette 22, thereby spoiling the bank notes stored in the cash cassette to render them unusable and therefore worthless. The cash cassettes 22 may also interface with a security system of the ATM 10 which includes one or more sensors to detect interference or tampering with the ATM 10, such that the spoiling systems 24 of the cash cassettes 22 are triggered in the event of an attack on the ATM 10. Additionally or alternatively, the safe 20 (where provided) may itself be provided with a spoiling system 24 that can be activated on detection of an attack on the ATM 10, the safe 20, or one or more of the cash cassettes 22, to dispense a spoiling agent into an interior of the safe 20.

The operation of the ATM 10 is controlled by a processor 26, which is connected to a wireless communications device 28 which operates under a suitable wireless communications protocol such as Bluetooth®, Bluetooth® Smart (also referred to as Bluetooth® low-energy) WiFi®, RFID, Near Field Communications (NFC) or the like. The wireless communications device 28 permits the processor 26 to receive communications from a wireless communications transmitter of a sensor system associated with the shutter of the ATM 10, as will be described in more detail below.

The processor 26 may be connected to the safe 20 by a physical connection (e.g. a wired connection), and the safe 20 may in turn have a physical connection with each of the cash cassettes 22 installed in the safe 20 (e.g. by an arrangement of cooperating connectors on the cash cassettes 22 and the safe 20) to facilitate communication between the processor 26 and the spoiling systems 24 of the cash cassettes 22 and/or of the safe 20, to permit actuation of the spoiling systems 24 when an attack on the shutter 34 is detected. Alternatively or additionally, the wireless device 28 may have transmit capabilities as well as receive capabilities (i.e. the wireless device 28 may be a wireless transceiver operating under a suitable wireless communications protocol such as Bluetooth®, Bluetooth® Smart (also referred to as Bluetooth® low-energy) WiFi®, RFID, Near Field Communications (NFC) or the like), and the safe 20 and/or the cash cassettes 22 may each be provided with a compatible wireless receive or transceiver device, to facilitate wireless communication between the processor 26 and the spoiling systems 24 of the cash cassettes 22 and/or the safe 20, to permit actuation of the spoiling systems 24 when an attack on the shutter 34 is detected.

Turning now to Figures 2 and 3, part of the automated teller machine (ATM) 10 is shown generally at 30. The ATM 10 includes wall sections 32 having an opening which defines the dispensing outlet 18 through which bank notes may be dispensed by the ATM 10. The ATM 10 further includes a shutter 34 which is moveable between the closed position shown in Figure 2, in which the shutter 34 closes the dispensing outlet 18, and the open position shown in Figure 3, in which the dispensing outlet 18 is open, as the shutter 34 is moved away from the opening.

In the example illustrated in Figures 2 and 3, the shutter 34 is pivotally mounted and rotates around a pivot point 36 to move between the closed position of Figure 2 and the open position of Figure 3. However, it is to be appreciated that the present invention is equally applicable to other types of shutter, such as roller shutters or shutters that move linearly between open and closed positions.

The shutter 34 is moved between the open and closed positions by means of an electric motor such as a stepper motor, which is controlled by a processor of the ATM 10. The electric motor also acts as a locking mechanism for the shutter 34 in its closed position, by preventing forced rotation of the shutter 34 around the pivot point 36. Thus, the shutter 34 can only be moved between its open and closed positions when the processor of the ATM issues a command to the motor to move the shutter 34.

As discussed above, ATMs may be vulnerable to attacks in which the shutter 34 is breached by a tool such as a drill, hammer, crowbar or the like, and explosives in gaseous or solid form are inserted into the interior of the ATM through the exposed dispensing outlet, as known ATM security systems are typically only configured to detect attacks on the casing of the ATM, the safe or the cash cassettes contained within the safe, rather than attacks which target the shutter.

To deter such attacks or other unauthorised interference with the shutter 34 of the ATM 10, the shutter 34 is provided with a sensor system which communicates wirelessly with the security system of the ATM 10 by means of a wireless communications transmitter operating in accordance with a suitable wireless communications protocol such as Bluetooth®, Bluetooth® Smart (also referred to as Bluetooth® low-energy) WiFi®, RFID, Near Field Communications (NFC) or the like. The sensor system is configured to transmit a signal to trigger the spoiling system 24 of the safe 20 and/or cash cassettes 22 in the event of that unauthorised interference such as an attack on the shutter 34 is detected. In this way, the spoiling systems 24 of the cash cassettes 22 and/or the safe 20 can be activated before the safe 20 is breached by the explosion caused by the explosives, such that even if the bank notes contained in the safe 10 can be recovered by the thieves, they have already been spoiled by the spoiling agent of the spoiling system 24, and are thus unusable and worthless.

Figure 4 is a schematic illustration of a sensor system for detecting an attack on or other interference with the shutter 34. The sensor system is shown generally at 70, and in this example includes a substrate 72 on which is mounted a battery 74, a sensor 76 which is configured to detect an attack on the shutter 34, a processing unit 78 and a wireless communications device 80. The sensor system 70 may also include one or more additional sensors such as an accelerometer 82.

The battery 74, which may be a removable and replaceable battery such as a button cell, or may alternatively be non-replaceable, e.g. a battery printed directly on the substrate, powers the sensor 76, the processing unit 78, the wireless communications device 80 and, if provided, the accelerometer 82.

The sensor 76 is configured to detect an attack on the shutter 34 and to output a signal to the processing unit 78 on detection of an attack. The sensor 76 may be of any suitable type, and examples of suitable sensors are described below with reference to Figures 5 and 8.

The processing unit 78 is configured to transmit a signal to the wireless device 80 on receiving a signal from the sensor 76 indicating that an attack on the shutter has been detected. If an accelerometer 82 is provided, the processing unit may also be configured to receive signals from the accelerometer 82. The processing unit 78 may process the signals received from the accelerometer 82 and transmit appropriate signals on to the wireless communications transmitter 80, or may alternatively simply pass the "raw" signals received from the accelerometer 82 to the wireless communications device 80. In certain configurations, for example where a simple sensor 76 is used and the accelerometer 82 is not present, the processing unit 78 may not be required. In this case, the processing unit 78 may be omitted, and the sensor 76 may output a signal indicating that an attack on the shutter 74 has been detected directly to the wireless communications device 80.

The wireless communications device 80 has transmit capabilities, and is configured to transmit a signal wirelessly to the wireless communications device 28 of the ATM 10 on reception of a signal indicating that an attack on the shutter 34 has been detected. The wireless communication device 80 need not be mounted on the substrate 72, but may instead be mounted elsewhere, for example on an inner surface of the shutter 34. However, mounting the wireless communication device 80 on the substrate 72 facilitates installation of the sensor system 70 on new ATM shutters 34 and retrofitting of the sensor system 70 on shutters 34 of existing ATMs.

The accelerometer 82, where provided, facilitates a range of additional functionality. As indicated above, the shutter 34 is moved between open and closed positions by means of an electric motor such as a stepper motor. This motor is typically also used to indicate the status (open/closed) of the shutter 34. The accelerometer 82 can be used to detect movement of the shutter 34, and thus can be used to provide a secondary indication of the status (open/closed) of the shutter 34 by reporting any detected movement of the shutter 34 to the processor 26 of the ATM 10, via the processor 78 and wireless communications device 80 of the shutter 34. This secondary indication of the shutter status 34 can be used in a number of ways by the processor 26 of the ATM 10, for example to confirm that the shutter 34 has moved to the open position in response to a legitimate request prior to initiating a process for picking and dispensing bank notes.

The accelerometer 82 can also be used to detect or confirm the detection of an attack on or other unauthorised interference with the shutter 34. Typically an attack on the shutter 34 using a tool such as a drill, hammer or crowbar will induce shock and vibration in the shutter 34. Such shock and vibration may be detected by the accelerometer 82, which may then provide a signal to the processor 78. The processor 78 may then pass the "raw" signal on to the wireless communications device 80 for onward transmission to the wireless communications device 28 of the ATM 10. The wireless communications device 28 of the ATM 10 in turn transmits the "raw" signal received from the accelerometer 82 on to the processor 26 of the ATM 10, which processes the signal, for example to determine whether an attack on the shutter 34 is actually taking place, or to confirm a signal received from the sensor 76 indicating that an attack on the shutter 34 is taking place. The processor 26 can then take appropriate action, such as issuing a signal to cause the spoiling systems 24 to be activated.

Alternatively, the processor 78 of the sensor system 70 may perform processing operations on the "raw" signal received from the accelerometer 82, for example to determine whether an attack on the shutter 34 is actually taking place, or to confirm a signal received from the sensor 76 indicating that an attack on the shutter 34 is taking place. A processed signal may then be transmitted to the wireless communications device 80 of the sensor system 70 for onward transmission to the processor 26 of the ATM 10, via the wireless communications device 28 of the ATM 10. On receiving this processed signal, the processor 26 of the ATM 10 can take appropriate action, such as issuing a signal to cause the spoiling systems 24 to be activated.

In the case where the processor 78 is omitted from the sensor system 70, the accelerometer 82 may transmit the "raw" signal to the wireless communications device 80 of the sensor system for onward transmission to the processor 26 of the ATM 10, via the wireless communications device 28 of the ATM 10.

Turning now to Figure 5, an example of a sensor that is suitable for use the sensor 76 of the sensor system 70 is shown generally at 40. The sensor 40 comprises a stiff substrate 42 on which, in this example, first and second electrically conductive tracks 44, 46 are etched, printed or otherwise provided. In other examples, more than two electrically conductive tracks may be provided on the surface of the substrate 42. The substrate 42 may be of FR4 glass reinforced epoxy laminate, commonly used for printed circuit boards (PCBs), for example, and may have a thickness of between 0.4 and 0.8 mm. Such a thickness allows the substrate 42 to bend or flex slightly to conform to any curvature of the inner surface of the shutter 34 when installed. The substrate 42 may be, for example, the substrate 72 of the sensor system 70.

The first and second electrically conductive tracks 44, 46 are provided over a major portion of the surface of the substrate 42, such that if the substrate 42 is broken, holed or otherwise damaged one or both of the electrically conductive tracks 44, 46 will be broken. Ends of the first electrically conductive track 44 is connected to terminals 48, 50 by means of which the first electrically conductive track can be connected to the security system of the ATM 10. Similarly, ends of the second electrically conductive track 46 are connected to terminals 52, 54 by means of which the second electrically conductive track can be connected to the security system of the ATM 10. The sensor 40 may be provided with interface electronics 56 to interface to the processor 78 or the wireless communications device 80, and/or to filter any noise that may be introduced by cables 60 connecting the sensor 40 to the processor 78 or the wireless communications device 80.

In use of the sensor 40, an electric current is passed through an input end of each of the first and second electrically conductive tracks 44, 46, the current at an output end of each of the first and second electrically conductive tracks 44, 46 is detected. Typically the processor 78 of the sensor system 70 is configured to perform these actions, though where the processor 78 is not provided these actions may be performed by the wireless communications device 80. If no current is detected at the output end of either or both of the first and second electrically conductive tracks 44, 46, the electrically conductive track for which no current is received may be broken, indicating an attack on the shutter 34 of the ATM 10. Thus, if no current is detected at the output end of one or both of the first and second electrically conductive tracks 44, 46, a signal may be transmitted by the wireless communications device 80 to the wireless communications device 28 of the ATM 10, to trigger the spoiling system 24, to spoil the contents of the safe 20 and/or cash cassettes 22. To increase the likelihood of a mechanical attack on the shutter 34 breaking the first and second electrically conductive tracks 44, 46, the substrate 42 of the sensor 44 may be provided with zones of weakness 58. For example, the substrate 42 may be have lines scored into its surface, to reduce the thickness of the surface at the zones of weakness 58. Alternatively, lines of holes may be drilled through the substrate 42 to form the zones of weakness 58.

It will be appreciated that false detection of attacks on the shutter 34 is highly undesirable. Thus, to prevent false activation in the event that one of the first and second electrically conductive tracks 44, 46 is broken or fails for a reason other than an attack on the shutter 34, the processor 78 or wireless communications device 80 may be configured to cause the spoiling system 24 of the ATM 10 to be triggered only if no current is detected at the output end of both the first electrically conductive track 44 and the second electrically conductive track 46.

Similarly, where there are more than two electrically conductive tracks, the processor 78 or wireless communications device 80 may be configured to cause the security system of the ATM 10 to trigger the spoiling system 24 of the ATM if no current is detected at the output end of any one of the plurality of electrically conductive tracks. Alternatively, to reduce the risk of false activation of the spoiling system, the processor 78 or wireless communications device 80 may be configured to cause the security system of the ATM 10 to trigger the spoiling system 24 of the ATM 10 only if no current is detected at the output end of all of the plurality of electrically conductive tracks

The sensor system 70 may be attached to the inner surface of the shutter 34 in a variety of ways. For example, an industrial double sided adhesive tape 90 may be used to attach the sensor 40 to the inner surface of the shutter 34, as illustrated in Figure 6. Alternatively, a conventional self-tapping screw 92 may be used to attach the sensor 40 to the inner surface of the shutter 34, as illustrated in Figure 7. Figure 8 is a schematic illustration of an alternative form of sensor that is suitable for use as the sensor 74 of the sensor system 70 described above. The sensor is shown generally at 80 in Figure 7, and has many of the same features and elements as the sensor 40 illustrated in Figure 5. Thus the same reference numerals have been used in Figure 7 to denote the elements shown in Figure 5.

The sensor 80 has a flexible substrate 82, which is made of a flexible material such as polyester or polyamide. A flexible material such as polyamide, which has a low tear strength compared to a flexible material such as polyester, may be preferred in some applications, as such a material tears more easily, and therefore is more likely to tear in the event of an attack on a shutter to which the sensor 80 is attached. The flexible substrate 82 may be the substrate 72 of the sensor system 70, for example.

As with the sensor 40 illustrated in Figure 5, the sensor 80 has first and second electrically conductive tracks 44, 46 through which a current is passed by the security system of the ATM 10. The processor 78 or wireless communications device 80 (where no processor 78 is provided) detects the current at output ends of the first and second electrically conductive tracks 44, 46, and the wireless communications device 80 transmits a signal to the wireless communication device 28 of the ATM 10 to trigger the spoiling system 24 in the event that no current is detected in one or both of the electrically conductive tracks 44, 46, indicating that one or both of the electrically conductive tracks 44, 46 is broken, which in turn is indicative of a breach of the shutter 34 due to a mechanical attack on the shutter 34.

Where a more robust material than polyamide is required, for example where a longer service life of the sensor 80 is required, the flexible substrate may be made of a material such as polyester. To ensure that the substrate 82 and the electrically conductive tracks 44, 46 break in the event of an attack on the shutter 34, zones of weakness 58 may be provided in the substrate 82, in the form of lines of holes drilled in the substrate 82 during manufacture of the substrate 82, in a similar manner as described above for the substrate 42. In this way, the substrate 82 may be provided with the required flexibility and durability, yet the electrically conductive tracks 44, 46 will still break in the event of an attack on the shutter 34.

For mechanical robustness the interface circuitry 56 and cables 60 may be mounted on a printed circuit board (PCB) 84 of FR4 or a similar material, with the flexible substrate 82 being soldered directly to the PCB 84. The flexible substrate 82 and the PCB 84 may be attached to the inner surface of the shutter 34 using industrial double sided adhesive tape, as illustrated in Figure 7.

In an alternative embodiment, the first and second electrically conductive tracks 44, 46 may be printed or etched directly onto the inner surface of the shutter 34, with the interface circuitry 56 and cables 60 being attached to the first and second electrically conductive tracks 44, 46 by appropriate means, such as flexible cable, e.g. ribbon cable. In this case, the inner surface of the shutter 34 may need to be coated or painted in an electrically insulating material prior to the printing or etching of the first and second electrically conductive tracks 44, 46 onto the inner surface of the shutter 34. In this case, the battery 74, processor 78, wireless communications device 80 and accelerometer 82 may be individually mounted in a suitable location within the ATM 10, for example on an inner surface of the shutter 34, or may be provided as a separate module for mounting on the inner surface of the shutter 34 or in another suitable location within the ATM 10.

The wireless communication device 80 of the sensor system 70 has been described above as operating principally as a transmitting device for transmitting information provided by the sensors of the sensor system 70 (i.e. the sensor 76 and the accelerometer 82). However, the wireless communication device 80 may also have receive functionality, such that it is able to receive information such as operating status data of the ATM 10 from the wireless communications device 28 of the ATM 10. In this way, an external device may communicate with the ATM 10 by means of the wireless communications device 80 of the sensor system 70. In other words, the wireless communications device 80 of the sensor system 70 may be used to facilitate bidirectional communication between the ATM 10 and a suitably equipped external device.

This functionality can be used for a number of purposes. For example, status and diagnostic information may be gathered from the ATM 10 without the need for a wired connection between the ATM 10 and an external device. Additionally, the ATM 10 could communicate directly with devices such as cash cassettes 22 or cash in transit containers located externally of the ATM 10 to automate security procedures such as unlocking of the ATM 10 and/or the safe 20 during the process of replenishing the ATM 10. It will be understood that where the wireless communications device 80 is used for external communications of this type, appropriate security measures such as encryption, authentication and the like will need to be taking to safeguard the ATM 10 and any cash cassettes 22 or cash in transit containers located externally of the ATM 10.

The ATM 10 may be provided with further sensors or sensor systems to detect attacks or other unauthorised interference with the ATM. These sensors or sensor systems may each be provided with a wireless communications transmitter operating in accordance with a suitable wireless communications protocol such as Bluetooth®, Bluetooth® Smart (also referred to as Bluetooth® low-energy) WiFi®, RFID, Near Field Communications (NFC) or the like. The additional sensors or sensor systems are configured to transmit a signal to trigger the spoiling system 24 of the safe 20 and/or cash cassettes 22 in the event of that unauthorised interference such as an attack on the ATM 10 is detected.

The sensors or sensor systems may take a variety of forms. For example, one or more "anti-cut" sensors may be provided in or associated with the walls of the ATM 10, and equipped with a wireless communications transmitter, such that in the event of an attempt to breach a wall of the ATM 10, a signal can be transmitted by the wireless communications transmitter associated with the anti-cut sensor to trigger the spoiling system 24 of the safe 20 and/or cash cassettes 22. Additionally or alternatively, one or more temperature sensors may be provided, again equipped with a wireless communications transmitter such that in the event of attack on the ATM 10 based on extremes of temperature, a signal can be transmitted by the wireless communications transmitter associated with the anti-cut sensor to trigger the spoiling system 24 of the safe 20 and/or cash cassettes 22. Additionally or alternatively, one or more accelerometers may be provided, again equipped with a wireless communications transmitter, such that in the event of attack on the ATM 10 which uses shock or movement of the ATM 10, a signal can be transmitted by the wireless communications transmitter associated with the anti-cut sensor to trigger the spoiling system 24 of the safe 20 and/or cash cassettes 22.

Where such sensors or sensor systems are provided, these may be sufficient to detect attacks which target the shutter 34, and so where such sensors or sensor systems are provided in the ATM 10, a separate sensor system 70 as described above may not be required, and thus may be omitted from the shutter 34.