AUTOMATED TELLER MACHINE WITH AN ENCRYPTING CARD READER AND AN ENCRYPTING PIN PAD

• US 20140081874A1
• Filed: 09/24/2013
• Published: 03/20/2014
• Est. Priority Date: 02/25/2011
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: ENRIGHT, Jeffrey M., RAMACHANDRAN, Natarajan, DOUGLASS, Mark A., GRAEF, H. Thomas, IRUDAYAM, Sathish M., STEINBACH, Klaus, LEWIS, David N., CREWS, Tim, MA, Songtao, JENKINS, Randall W.
• Granted Patent: US 9,373,114 B2
• Time in Patent Office: Days
• US Class Current: 705/72
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/308 using the Internet of Things
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: G07F 19/202 Depositing operations within ATMs depositing in general G07D11/00
• CPC Class Codes: G07F 19/203 Dispensing operations within ATMs dispensing in general G07D11/00
• CPC Class Codes: G07F 19/205 Housing aspects of ATMs
• CPC Class Codes: G07F 19/2055 Anti-skimming aspects at ATMs
• CPC Class Codes: G07F 7/0873 Details of the card reader

Abstract

A banking system operates responsive to data read from data bearing records. The system includes an automated banking machine comprising a card reader. The card reader includes a movable read head that can read card data along a magnetic stripe of a card that was inserted long-edge first. The card reader includes a card entry gate. The gate is opened for a card that is determined to be properly oriented for data reading. The card reader can encrypt card data, including account data. The machine also includes a PIN keypad. The card reader can send encrypted card data to the keypad. The keypad can decipher the encrypted card data. The keypad can encrypt both deciphered card data and a received user PIN. The card data and the PIN are usable by the machine to authorize a user to carry out a financial transfer involving the account.

Claims

1. A non-transitory, tangible computer readable medium of instructions with computer readable instructions stored thereon for execution by a processor, and when executed operable to:

obtain data associated with a financial account encrypted by a first key;

decipher the data associated with the financial account encrypted by the first key;

obtain data representative of a personal identification number (PIN) associated with the financial account;

encrypt the data associated with the financial account and the PIN with a second key; and

transmit the data associated with the financial account and the PIN encrypted that were encrypted with the second key to a host computer.

2. The computer readable medium of claim 1, further operable to receive a request to dispense cash from the financial account;

and

transmit the request to dispense cash from the financial account to the host computer.

3. The computer readable medium set forth in claim 2, further operable to provide instructions to a cash dispenser to dispense cash responsive to obtaining authorization from the host computer to dispense cash.

4. The computer readable medium set forth in claim 1, wherein the data associated with a financial account encrypted with a first key is obtained from a card reader;

and

the instructions are further operable to compare data obtained from the card reader with card information stored in a data store.

5. The computer readable medium set forth in claim 4, wherein the card reader obtains the data associated with the financial account from a magnetic stripe of a card inserted into the card reader.

6. The computer readable medium set forth in claim 5, further operable to:

obtain data representative of encryption data used by the card reader to encrypt the data associated with the financial account; and

deciphering the data associated with the financial account employs the encryption data.

7. The computer readable medium set forth in claim 6, wherein the encryption data includes a random number.

8. The computer readable medium set forth in claim 7, wherein the instructions are further operable to:

generate the random number; and

communicate the random number to the card reader.

9. The computer readable medium set forth in claim 7, wherein the instructions are further operable to obtain the random number from the card reader.

10. The computer readable medium of claim set forth in claim 1, wherein the data associated with a financial account is determined from biometric data obtained from an associated user.

11. The computer readable medium of claim 1, wherein the first encryption key differs from the second encryption key.

12. A method, comprising:

obtaining data associated with a financial account encrypted by a first key;

decrypting data representative of a financial account number from the data associated with the financial account encrypted by the first key;

obtaining data representative of a personal identification number (PIN) associated with the financial account;

encrypting the data representative of the financial account and the PIN with a second key; and

transmitting the financial account number and the PIN that have been encrypted with the second key to a host computer.

13. The method of claim 12, further comprising:

receiving a request to dispense cash from the financial account; and

transmitting the request to dispense cash from the financial account to the host computer.

14. The method of claim 13, further comprising providing instructions to a cash dispenser to dispense cash responsive to obtaining authorization from the host computer to dispense cash.

15. The method of claim 12, wherein the data associated with a financial account encrypted with a first key is obtained from a card reader;

the method further comprises comparing data obtained from the card reader to be compared with card information stored in a data store.

16. The method of claim 15, wherein the card reader is operable to encrypt an account number using the first encryption key and encryption data;

and

wherein decrypting data representative of a financial account number from the data associated with the financial account encrypted by the first key employs the encryption data to decipher the account number encrypted by the card reader.

17. The method of claim 16, wherein the encryption data includes a random number.

18. The method of claim 17, further comprising:

generating the random number; and

communicating the random number to the card reader.

19. The method of claim 17, further comprising obtaining the random number from the card reader.

20. The method of claim 12, wherein the first encryption key differs from the second encryption key.