Security validation of machine components

• US 20080067232A1
• Filed: 09/15/2006
• Published: 03/20/2008
• Est. Priority Date: 09/15/2006
• Status: Active Grant

• Current Assignee: NCR Atleos Corp.
• Original Assignee: NCR Corporation (NCR Voyix Corporation)
• Inventors: Whytock, Alexander W., Henderson, James, Neilan, Michael J.
• Granted Patent: US 7,575,160 B2
• Time in Patent Office: Days
• US Class Current: 235/379
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G07C 3/00 Registering or indicating the condition or the working of machines or other apparatus, other than vehicles
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/207 Surveillance aspects at ATMs
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method of validating machine components in a self-service terminal is disclosed which comprises providing at least one machine component with a machine readable identifier and reading identity data from the machine readable identifier using a processing unit. The identity data is compared with identity data stored in the memory of the processing unit to determine if the identity of a component has changed. If the identity has changed, the processing unit compares the identity data with source data to determine if the component is from a trusted source. In one embodiment, the self service terminal is an ATM and the components are an encrypting Personal Identification Number (PIN) pad, a cash dispenser unit and a card reader.

Claims

1. A method of validating machine components in a self-service terminal comprising:

providing at least one machine component with identity information in the form of a machine readable identifier;

reading identity data from the machine readable identifier;

comparing the identity data with stored identity data to determine if the identity of a component has changed; and

if the identity has changed, comparing the identity data with source data to determine if the component is from a trusted source.

2. A method according to claim 1 which is carried out on start-up of the terminal.

3. A method according to claim 1, which comprises replacing the stored identity data with the identity data from a new component if the identity has changed and the component has proven to be from a trusted source.

4. A method according to claim 1, which comprises the step of verifying security data before the stored identity data is replaced with changed identity data.

5. A Self-service terminal processing unit comprising a memory for storing identity data, a requesting means arranged to request identity data from components of the terminal and a comparing means arranged to compare identity data received by the requesting means with identity data stored in the memory to detect any changes in identity data.

6. A processing unit according to claim 5 wherein the memory of comprises component source data and the comparing means is arranged to compare changed identity data with the source data to determine if the component derives from a trusted source.

7. A processing unit according to claim 5, which further comprises a security means arranged to receive security data from a maintenance operator and use the security data to determine whether a maintenance operator is an authorized operator.

8. A processing unit according to claim 5, which is arranged to allow a terminal with which it is associated to operate only if the or each component is from a trusted source.

9. A Self-service terminal comprising a self-service terminal processing unit comprising a memory for storing identity data, a requesting means arranged to request identity data from components of the terminal and a comparing means arranged to compare identity data received by the requesting means with identity data stored in the memory to detect any changes in identity data, further comprising at least one of the following components with associated identity data:

an encrypting pin pad, a cash dispenser unit and a card reader, the terminal being arranged such that the identity data associated with the or each component can be read by the processing unit.

10. A self-service terminal according to claim 9 which comprises one of each of the components and the processing unit is arranged to determine whether each of the components is from a trusted source and to allow the terminal to operate only if all the components are from a trusted source.

11. A self-service terminal according to claim 9, in which the identity data associated with the or each component is provided on a chip.

12. A self-service terminal according to claim 9, which is an Automated Teller Machine.