Automated teller machine with an encrypting card reader and an encrypting pin pad

• US 10,068,231 B2
• Filed: 02/06/2017
• Issued: 09/04/2018
• Est. Priority Date: 02/25/2011
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Nixdorf, Incorporated
• Inventors: Lewis, David N., Steinbach, Klaus A., Enright, Jeffery M., Ramachandran, Natarajan, Douglass, Mark A., Crews, Timothy, Ma, Songtao, Jenkins, Randall W., Graef, H. Thomas, Irudayam, Sathish M.
• Primary Examiner(s): Vo, Tuyen K
• Application Number:
  US15/425,334
• Publication Number:
  US 20170154334A1
• Time in Patent Office: 575 Days
• Field of Search: 235379, 2353825
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/308 using the Internet of Things
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G07F 19/202 Depositing operations within ATMs depositing in general G07D11/00
• CPC Class Codes: G07F 19/203 Dispensing operations within ATMs dispensing in general G07D11/00
• CPC Class Codes: G07F 19/205 Housing aspects of ATMs
• CPC Class Codes: G07F 19/2055 Anti-skimming aspects at ATMs
• CPC Class Codes: G07F 7/0873 Details of the card reader

Abstract

A banking system operates responsive to data read from data bearing records. The system includes an automated banking machine comprising a card reader. The card reader includes a movable read head that can read card data along a magnetic stripe of a card that was inserted long-edge first. The card reader includes a card entry gate. The gate is opened for a card that is determined to be properly oriented for data reading. The card reader can encrypt card data, including account data. The machine also includes a PIN keypad. The card reader can send encrypted card data to the keypad. The keypad can decipher the encrypted card data. The keypad can encrypt both deciphered card data and a received user PIN. The card data and the PIN are usable by the machine to authorize a user to carry out a financial transfer involving the account.

Claims

1. A tangible, non-transitory computer readable medium of instructions having instructions encoded thereon for execution by processor, and when executed operable to:

receive data from an encrypting reader that is operable to receive data representative of an account provided by a device associated with the user, wherein the data received from the encrypting reader comprises the data representative of an account encrypted by a key associated with the encrypting reader;

decrypt the data representative of the account;

obtain data representative of a personal identification number (PIN);

encrypt the data representative of the account with a key associated with a host computer;

encrypt the data representative of the PIN with the key associated with the host computer;

send the data representative of the account encrypted by the key associated with the host computer to the host computer;

send the data representative of the PIN encrypted by the key associated with the host computer to the host computer;

receive data representative of a notification for a transaction function device from a remote computer;

decrypt the data representative of a notification for the transaction function device from the remote computer;

encrypt the data representative of a notification with a key associated with the transaction function device; and

send the data representation of a notification encrypted with the key associated with the transaction function device to the transaction function device.

2. The tangible, non-transitory computer readable medium set forth in claim 1, wherein the wherein the transaction function device is a cash dispenser.

3. The tangible, non-transitory computer readable medium set forth in claim 1, wherein the wherein the transaction function device is a cash acceptor.

4. The tangible, non-transitory computer readable medium set forth in claim 1, wherein the wherein the transaction function device is a check acceptor.

5. The tangible, non-transitory computer readable medium set forth in claim 1, the instructions are further operable to:

receive data representative of a message for a remote computer encrypted by the key associated with the transaction function device;

decrypt the data representative of the message for the remote computer;

encrypt the data representative of the message for the remote computer with the key associated with the remote computer; and

send the data representative of the message for the remote computer encrypted with the key associated with the remote computer to the remote computer.

6. The tangible, non-transitory computer readable medium set forth in claim 1, wherein the encrypting reader is an encrypting card reader;

and

wherein the encrypting card reader is operable to obtain account data from a magnetic stripe located on a card inserted by a user.

7. The tangible, non-transitory computer readable medium et forth in claim 1, wherein the encrypting reader is an encrypting card reader;

and

wherein the encrypting card read is operable to obtain account data from a chip located on a card inserted by a user.

8. The tangible, non-transitory computer readable medium set forth in claim 1, the instructions are further operable to:

store a plurality of encryption keys in a memory located within a secure housing; and

destroy the plurality of encryption keys responsive to receiving a signal from a sensor mesh indicating tampering of the secure housing.

9. The tangible, non-transitory computer readable medium set forth in claim 1, the instructions are further operable to receive the data representative of the PIN wirelessly.

10. The tangible, non-transitory computer readable medium set forth in claim 9, the instructions are further operable to receive the data representative of the PIN via a near field connection (NFC) interface.

11. The tangible, non-transitory computer readable medium set forth in claim 9, the instructions are further operable to receive the data representative of the PIN via a radio frequency identification (RFID) tag.

12. The tangible, non-transitory computer readable medium set forth in claim 1, wherein the encrypting reader is operable to receive the data representative of an account wirelessly.

13. The tangible, non-transitory computer readable medium set forth in claim 12, wherein the encrypting reader receives the data representative of the account via a near field connection (NFC) interface.

14. The tangible, non-transitory computer readable medium set forth in claim 12, wherein the encrypting reader receives the data representative of the account via a BLUETOOTH interface.

15. The tangible, non-transitory computer readable medium set forth in claim 1, wherein the instructions are further operable to exchange public keys with the encrypting reader.

16. The tangible, non-transitory computer readable medium set forth in claim 1, wherein the instructions are operable to exchange public keys with the transaction function device.

17. A method, comprising:

receiving by a processor associated with an encrypting personal identification number pad (EPP) data from an encrypting reader that is operable to receive data representative of an account provided by a device associated with the user, wherein the data received from the encrypting reader comprises the data representative of an account encrypted by a key associated with the encrypting reader;

decrypting by the processor associated with the EPP the data representative of the account;

obtaining by the processor associated with the EPP data representative of a personal identification number (PIN);

encrypting by the processor associated with the EPP the data representative of the account with a key associated with a host computer;

encrypting by the processor associated with the EPP the data representative of the PIN with the key associated with the host computer;

sending by the processor associated with the EPP the data representative of the account encrypted by the key associated with the host computer to the host computer;

sending by the processor associated with the EPP the data representative of the PIN encrypted by the key associated with the host computer to the host computer;

receiving by the processor associated with the EPP data representative of a notification for a transaction function device from a remote computer;

decrypting by the processor associated with the EPP the data representative of a notification for the transaction function device from the remote computer;

encrypting by the processor associated with the EPP the data representative of a notification with a key associated with the transaction function device; and

sending by the processor associated with the EPP the data representation of a notification encrypted with the key associated with the transaction function device to the transaction function device.

18. The method set forth in claim 17, wherein the wherein the transaction function device is a cash dispenser.

19. The method set forth in claim 17, wherein the wherein the transaction function device is a cash acceptor.

20. The method set forth in claim 17, wherein the wherein the transaction function device is a check acceptor.

21. The method set forth in claim 17,

receiving by the processor associated with the EPP data representative of a message for a remote computer encrypted by the key associated with the transaction function device;

decrypting by the processor associated with the EPP the data representative of the message for the remote computer;

encrypting by the processor associated with the EPP the data representative of the message for the remote computer with a key associated with the remote computer; and

sending by the processor associated with the EPP the data representative of the message for the remote computer encrypted with the key associated with the remote computer to the remote computer.

22. The method set forth in claim 17, wherein the encrypting reader is an encrypting card reader;

and

wherein the encrypting card reader is operable to obtain account data from a magnetic stripe located on a card inserted by a user.

23. The method set forth in claim 17, wherein the encrypting reader is an encrypting card reader;

and

wherein the encrypting card read is operable to obtain account data from a chip located on a card inserted by a user.

24. The method set forth in claim 17, the method further comprises:

storing a plurality of encryption keys in a memory located within a secure housing; and

destroying the plurality of encryption keys by the processor associated with the EPP responsive to receiving a signal from the sensor mesh indicating tampering of the secure housing.

25. The method set forth in claim 17, wherein the EPP is operable to receive the data representative of the PIN wirelessly.

26. The method set forth in claim 25, wherein the EPP receives the data representative of the PIN via a near field connection (NFC) interface.

27. The method set forth in claim 25, wherein the EPP receives the data representative of the PIN via a radio frequency identification (RFID) tag.

28. The method set forth in claim 17, wherein the encrypting reader is operable to receive the data representative of an account wirelessly.

29. The method set forth in claim 28, wherein the encrypting reader receives the data representative of the account via a near field connection (NFC) interface.

30. The method set forth in claim 28, wherein the encrypting reader receives the data representative of the account via a BLUETOOTH interface.

31. The method set forth in claim 17, Further comprising exchanging public keys by the processor associated with the EPP with the encrypting reader.

32. The method set forth in claim 17, further comprising exchanging public keys by the processor associated with the EPP with the transaction function device.