Automated teller machine with an encrypting card reader and an encrypting pin pad

• US 10,515,364 B2
• Filed: 07/13/2018
• Issued: 12/24/2019
• Est. Priority Date: 02/25/2011
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Nixdorf, Incorporated
• Inventors: Lewis, David, Ramachandran, Natarajan, Douglass, Mark A., Crews, Timothy, Ma, Songtao, Jenkins, Randall W., Graef, H. Thomas, Irudayam, Sathish M., Steinbach, Klaus, Enright, Jeffery
• Primary Examiner(s): Vo, Tuyen K
• Application Number:
  US16/034,399
• Publication Number:
  US 20190213593A1
• Time in Patent Office: 529 Days
• Field of Search: 235379
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/308 using the Internet of Things
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: G07F 19/202 Depositing operations within ATMs depositing in general G07D11/00
• CPC Class Codes: G07F 19/203 Dispensing operations within ATMs dispensing in general G07D11/00
• CPC Class Codes: G07F 19/205 Housing aspects of ATMs
• CPC Class Codes: G07F 19/2055 Anti-skimming aspects at ATMs
• CPC Class Codes: G07F 7/0873 Details of the card reader

Abstract

A banking system operates responsive to data read from data bearing records. The system includes an automated banking machine comprising a card reader. The card reader includes a movable read head that can read card data along a magnetic stripe of a card that was inserted long-edge first. The card reader includes a card entry gate. The gate is opened for a card that is determined to be properly oriented for data reading. The card reader can encrypt card data, including account data. The machine also includes a PIN keypad. The card reader can send encrypted card data to the keypad. The keypad can decipher the encrypted card data. The keypad can encrypt both deciphered card data and a received user PIN. The card data and the PIN are usable by the machine to authorize a user to carry out a financial transfer involving the account.

Claims

1. An apparatus comprising:

an automated banking machine processor;

an encrypting pin pad (EPP), wherein the EPP is operable to receive a personal identification number (PIN) inputted through the EPP, wherein the EPP includes a first processor;

a user input device operable to obtain data representative of a user that is associated with a financial account, wherein the user input device includes a second processor that is operable to encrypt the data representative of a user associated with a financial account obtained by the user input device;

wherein the at first processor is operable to encrypt the PIN received by the EPP, wherein the second processor is operable to receive the PIN encrypted by the first processor;

wherein the second processor is operable to decipher the PIN data encrypted by the first processor;

wherein the second processor is operable to encrypt deciphered PIN data;

wherein the automated banking machine processor is operable to cause at least one message to be sent to a transaction host system,

wherein the at least one message includes both the deciphered PIN data encrypted by the second processor, and data representative of a user associated with a financial account encrypted by the second processor.

2. The apparatus set forth in claim 1, wherein the user input device obtains the data representative of a user associated with a financial account wirelessly.

3. The apparatus set forth in claim 1, wherein the user input device is an encrypting card reader.

4. The apparatus set forth in claim 3, wherein the card reader includes a card entry opening, wherein the card entry opening is sized to receive a card inserted long-edge first into the card reader, wherein the card reader includes a movable magnetic read head operable to read card data from a magnetic stripe of a card inserted long-edge first into the card reader, wherein during reading of the card data from the magnetic stripe of the card inserted long-edge first into the card reader, the movable magnetic read head moves in a direction substantially parallel to the magnetic stripe.

5. The apparatus set forth in claim 3, wherein the EPP is operable to use a first encryption key to encrypt the PIN and the card reader is operable to encrypt read data representative of a user associated with a financial account and the deciphered PIN data using a second encryption key, wherein the second encryption key differs from the first encryption key.

6. The apparatus according to claim 5, wherein the card reader is operable to generate random numbers, wherein the EPP is operable to encrypt the PIN data using the first encryption key and a random number generated by the card reader.

7. A method, comprising:

receiving by a first processor associated with an encrypting pin pad (EPP), a personal identification number (PIN) inputted through the EPP;

receiving by a second processor associated with a user input device data representative of a user that is associated with a financial account;

encrypting, by the first processor, the PIN received by the EPP;

receiving, by the second processor, the PIN encrypted by the first processor;

deciphering, by the second processor, the PIN data encrypted by the first processor;

encrypting the data representative of a user associated with a financial account by the second processor

encrypting the deciphered PIN data by the second processor;

causing, by the second processor, a message to be sent to a transaction host system,

wherein the message includes both the deciphered PIN data encrypted by the second processor, and data representative of a user associated with a financial account encrypted by the second processor.

8. The method set forth in claim 7, wherein the user input device obtains the data representative of a user associated with a financial account wirelessly.

9. The method set forth in claim 7, wherein the user input device is an encrypting card reader operable to read card data to obtain the data representative of a user associated with a financial account.

10. The method set forth in claim 9, wherein the card reader includes a card entry opening, wherein the card entry opening is sized to receive a card inserted long-edge first into the card reader, wherein the card reader includes a movable magnetic read head operable to read card data from a magnetic stripe of a card inserted long-edge first into the card reader, wherein during reading of the card data from the magnetic stripe of the card inserted long-edge first into the card reader, the movable magnetic read head moves in a direction substantially parallel to the magnetic stripe.

11. The method set forth in claim 9, wherein the EPP is operable to use a first encryption key to encrypt the PIN and the card reader is operable to encrypt read card and the deciphered PIN data using a second encryption key, wherein the second encryption key differs from the first encryption key.

12. The method according to claim 11, wherein the card reader is operable to generate random numbers, wherein the EPP is operable to encrypt the PIN data using the first encryption key and a random number generated by the card reader.

13. A tangible, non-transitory computer readable medium of instructions having instructions encoded thereon for execution by a processor, and when executed operable to:

receive from an encrypting pin pad (EPP), an encrypted a personal identification number (PIN) inputted through the EPP;

receive a from a user input device data representative of a user that is associated with a financial account;

decipher the encrypted PIN data received from the EPP;

encrypt and data representative of a user associated with a financial account;

encrypt the deciphered PIN data;

cause a message to be sent to a transaction host system;

wherein the message includes both the deciphered PIN data encrypted by the processor, and data representative of a user associated with a financial account encrypted by the processor.

14. The computer readable medium set forth in claim 13, wherein the user input device obtains the data representative of a user associated with a financial account wirelessly.

15. The computer readable medium set forth in claim 13, wherein the user input device is an encrypting card reader operable to read card data to obtain the data representative of a user associated with a financial account.

16. The computer readable medium set forth in claim 15, wherein the card reader includes a card entry opening, wherein the card entry opening is sized to receive a card inserted long-edge first into the card reader, wherein the card reader includes a movable magnetic read head operable to read card data from a magnetic stripe of a card inserted long-edge first into the card reader, wherein during reading of the card data from the magnetic stripe of the card inserted long-edge first into the card reader, the movable magnetic read head moves in a direction substantially parallel to the magnetic stripe.

17. The computer readable medium set forth in claim 15, wherein the encrypted PIN data received from the EPP is encrypted with a first encryption key to encrypt and the deciphered PIN data is encrypted using a second encryption key, wherein the second encryption key differs from the first encryption key.

18. The computer readable medium according to claim 17, further comprising instructions operable to generate random numbers, wherein the EPP is operable to encrypt the PIN data using the first encryption key and a random number generated by the processor executing the instructions operable to generate random numbers.