Protection of Safety Token Against Malware

• US 20130179940A1
• Filed: 12/07/2012
• Published: 07/11/2013
• Est. Priority Date: 12/08/2011
• Status: Active Grant

• Current Assignee: Diebold Nixdorf Systems GmbH (Diebold Nixdorf, Incorporated)
• Original Assignee: Wincor Nixdorf International GmbH (Diebold Nixdorf, Incorporated)
• Inventors: Krummel, Volker
• Granted Patent: US 9,117,096 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 12/14 Protection against unauthorised use of memory or access to memory
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G07F 19/209 Monitoring, auditing or diagnose of functioning of ATMs

Abstract

Security token for the authentication of access to a self-service terminal, comprising an interface for a connection to the self-service terminal, comprising authentication information, characterized by a second interface that allows a connection of a memory stick the contents of which are made available to the self-service terminal, wherein access to the memory stick is dependent on the authentication information.

Claims

1. A security token for the authentication of access to a self-service terminal, comprising an interface for a connection to the self-service terminal, comprising authentication information, including a second interface that allows a memory stick to be connected the contents of which are made available to the self-service terminal, where access to the memory stick is a function of the authentication information.

2. The security token according to claim 1 wherein the interfaces are USB/Universal Serial Bus.

3. The security token according to claim 2, wherein the second interface provides a USB hub to which a USB memory stick can be attached.

4. The security token according to claim 1, wherein access is controlled in such a way that the interface to the USB memory stick is released for reading and/or writing only when reading and/or writing authentication information is provided for this process.

5. The security token according to claim 4, wherein the reading and/or writing authentication information is obtained by a challenge-response procedure with a server connected over a network or the user, and/or using digital signals and/or biometric procedures.

6. The security token according to claim 1, wherein a control mechanism is configured in such a manner that the data are forwarded to the memory stick only if their signature agrees with the authentication information in order to effectively prevent the reading and/or storage of data and in particular of files from insecure sources.

7. The security token according to claim 1, wherein the data are encrypted and/or decrypted when reading/or writing using the authentication information.