The scope of UL 291 is directed at the construction and security of the ATM when operated as intended by an authorized customer. The ATM must provide a limited degree of protection against unauthorized removal of currency. The records of the transactions must be made in order that the customer may be debited for currency dispensed. A limited degree of protection is required against the removal or manipulation of the records.
At this time Triton has only two types of security containers or cabinets as most people call them. One is the Business Hours (BH) and the other is the 24-Hour Level-1 safe. Both must withstand attacks from someone trying to rob the currency or alter the records. Both have environmental requirements. And both have endurance requirements.
A Business Hours ATM is defined as an ATM that is available during business hours only. It must be under the observation of a responsible party. The money must be removed at the close of business. The metal of the Business Hours is not as thick as that of the Level-1. Business Hours security containers must withstand forceful attacks on the seams and door openings of the container. The attacker may use wires, lines, chisels, pry bars, and wrenches to try to gain entry or remove the currency. Attacks that are quite are allowed to take 5 minutes. Loud attacks are allowed to take 2 minutes.
24 Hours Service Level-1 containers are defined as those ATMs that are available for use anytime of day. The steel that the security container is constructed of should have a tensile strength of 50,000 psi. Entry from the customer access panel into the currency area of the 24 Hour should resist attacks for up to 30 minutes. Attacks to remove currency will be made using fishing, trapping, and forcing techniques. Tools may be wires, hooks, pry bars, hacksaw blades, and certain other tooling that may be concealed in clothing. Attacks on the other portions of the security container may be made using picks and portable electric tools such as drills and grinders. It shall resist attacks for up to 15 minutes. Most Triton containers to date have the security container portion of the ATM separated from the customer access panel area. Therefore, gaining access to the customer access area does not give entry into the security container.
Failure of attack for either model is defined similarly. With the exception of trapping, the removal of 10% of the currency is a failure. Exposing the currency so that it may be removed is a failure. If a test device can trap 3 or more dispenses without being detected or disturbing the transaction, it is considered a failure.
Humidity- 85% for 24 hours. The ATM must maintain records and maintain the security of the currency.
Transient testing- simulates a brown out. Must pass 500 simulated brown outs without lessening the security of the currency or the accuracy of the records. Rain Test for Outdoor ATMs- will have a simulated rainstorm on the exposed control panel for 1 hour. No failures are allowed.
Endurance test- must accurately maintain records and maintain security of the currency for 6000 successful dispensing transactions.
Variable Temperature Test- for Business Hours +13°C to +35°C. For 24 Hour Level –1 indoor units 0°C to +49°C. For Outdoor units the outside portion will be tested from -35°C to +66°C. The ATM may fail to dispense but it must maintain records and maintain the security of the currency.