Security system for remote cash dispensers

• US 4,234,932 A
• Filed: 09/05/1978
• Issued: 11/18/1980
• Est. Priority Date: 09/05/1978
• Status: Expired due to Term

• Current Assignee: Honeywell Information Systems, Inc. (Honeywell International Inc.)
• Original Assignee: Honeywell Information Systems, Inc. (Honeywell International Inc.)
• Inventors: Gorgens, Richard A.
• Primary Examiner(s): Malzahn, David H.
• Application Number:
  US05/939,504
• Time in Patent Office: 805 Days
• Field of Search: 364/900, 364/408, 235/379, 235/381, 235/382, 235/420, 340/149 A
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G07D 11/10 Mechanical details
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A banking system is provided which is comprised of a central computer, a customer accounts main memory, and plural remote transaction terminals in communication with the central computer. Each remote terminal includes a cash dispensing apparatus, a personal identification number (PIN) signal generator, a random number (RN) signal generator, a security device and a cash dispenser. The communication paths from the RN and PIN signal generators to the security device are wholly contained within the remote terminal and inaccessible to would-be thieves. The remote terminals also include data entry devices activated by a customer to provide a PIN number, a PIN OFFSET number bearing a predetermined relationship to both the PIN number and a customer information file (CIF) signal stored in main memory, and other banking information. In response to a customer-initiated operation, a remote terminal supplies bank transaction and customer identification information to the central computer. Upon receiving information from a remote terminal, the central computer searches the customer'"'"'s record in main memory for a CIF number associated with the customer'"'"'s account. The central computer thereafter forms a composite signal from the RN, CIF and PIN OFFSET signals which is applied to the security device of the remote terminal. The RN signal serves to conceal both the CIF and PIN OFFSET signals from an attempted interception during transmission from the central computer to the remote terminal. The security device includes a comparator for generating a DISPENSE signal when the PIN and RN signals bear a predetermined relationship to the composite signal. The cash dispenser includes a cash storage portion and a dispensing mechanism for issuing one or more cash units in response to a DISPENSE signal.

Claims

1. A security system for a remote transaction terminal of an automated banking system including a central computer with a main memory and a plurality of remote transaction terminals in electrical communication with said central computer, said remote transaction terminal having customer operated data entry means and a cash dispenser, which comprises:

(a) first generator means responsive to an electrical signal received from said data entry means for providing an identification signal representative of a customer personal identification number;

(b) second generator means responsive to a random number request signal received from said central computer for supplying a pseudo random number signal to said central computer; and

(c) comparator means in electrical communication with said first generator means and said second generator means by way of signal paths wholly contained within said remote transaction terminal, and in electrical communication with said central computer for issuing a cash dispense signal to said cash dispenser when a composite signal received from said central computer bears a predetermined relationship with said identification signal received from said first generator means and said random number signal received from said second generator means, said composite signal being formed by said central computer from a customer record signal stored in said main memory, from an offset signal supplied by said data entry means and bearing a predetermined relationship between said identification signal and said customer record signal, and from said random number signal.

2. An automated security system for a remote access terminal in electrical communication with a central computer including a main memory and a plurality of remote access terminals in electrical communication with said central computer, said remote access terminal having an access control means and a data entry means operable by a user desiring to gain access, which comprises:

(a) first generator means responsive to an electrical signal received from said data entry means for providing an identification signal representative of a user personal identification number;

(b) second generator means responsive to a random number request signal received from said central computer for supplying a pseudo random number signal to said central computer; and

(c) comparator means in electrical communication with said first generator means and said second generator means by way of signal paths wholly contained within said remote access terminal, and in electrical communication with said central computer for issuing an authorization signal to said access control means when a composite signal received from said central computer bears a predetermined relationship with said identification signal received from said first generator means and said random number signal received from said second generator means, said composite signal being formed by said central computer from a customer record signal stored in said main memory, from an offset signal supplied by said data entry means and bearing a predetermined relationship between said identification signal and said customer record signal, and from said random number signal.

3. A security system for controlling the access of a user at a remote station, which comprises:

(a) a central computer system including a central computer and a main memory located at a central station;

(b) a user operated data entry means located at said remote station;

(c) first generator means located at said remote station and responsive to an electrical signal received from said data entry means for providing an identification signal representative of a user personal identification number;

(d) second generator means located at said remote station and responsive to a random number request signal received from said central computer for supplying a pseudo random number signal to said central computer;

(e) control means located at said remote station for preventing said user from gaining unauthorized access; and

(f) comparator means in electrical communication with said first generator means and said second generator means by way of signal paths wholly contained within said remote station, and in electrical communication with said central computer for issuing an authorization signal to said control means when a composite signal received from said central computer bears a predetermined relationship with said identification signal received from said first generator means and said random number signal received from said second generator means, said composite signal being formed by said central computer from a user record signal stored in said main memory, from an offset signal supplied by said data entry means and bearing a predetermined relationship between said identification signal and said user record signal, and from said random number signal.

4. A security system for controlling the access of a user at a remote station, which comprises:

(a) a central computer system including a central computer and a main memory located at a central station;

(b) a user operated data entry means located at said remote station;

(c) first generator means located at said remote station and responsive to an electrical signal received from said data entry means for providing an identification signal representative of a user personal identification number;

(d) second generator means located at said remote station and responsive to a random number request signal received from said central computer for supplying a pseudo random number signal to said central computer;

(e) control means located at said remote station for preventing said user from gaining unauthorized access; and

(f) comparator means in electrical communication with said data entry means, said first generator means and said second generator means by way of signal paths wholly contained within said remote station, and in electrical communication with said central computer for issuing an authorization signal to said control means when a composite signal received from said central computer bears a predetermined relationship with said identification signal received from said first generator means, with said random number signal received from said second generator means, and with an offset signal supplied by said data entry means and exhibiting a predetermined relationship between said identification signal and a user record signal stored in said main memory, said composite signal being formed by said central computer from said user record signal and said random number signal.

5. A security system for a remote transaction terminal of an automated banking system including a central computer with a main memory and a plurality of remote transaction terminals in electrical communication with said central computer, said remote transaction terminal having customer operated data entry means and a cash dispenser, which comprises:

(a) first generator means responsive to an electrical signal received from said data entry means for providing an identification signal representative of a customer personal identification number;

(b) second generator means responsive to a random number request signal from said central computer for supplying a pseudo random number signal to said central computer; and

(c) comparator means in electrical communication with said first generator means, said data entry means and said second generator means by way of signal paths wholly contained within said remote transaction terminal, and in electrical communication with said central computer for issuing a cash dispense signal to said cash dispenser when a composite signal received from said central computer bears a predetermined relationship with said identification signal received from said first generator means, said random number signal received from said second generator means, and an offset signal received from said data entry means and exhibiting a predetermined relationship between said identification signal and a customer record signal stored in said main memory, said composite signal being formed by said central computer from said customer record signal and said random number signal.

6. An automated security system for a remote access terminal in electrical communication with a central computer including a main memory and a plurality of remote access terminals in electrical communication with said central computer, said remote access terminal having an access control means and a data entry means operable by a user desiring a gain access, which comprises:

(a) first generator means responsive to an electrical signal received from said data entry means for providing an identification signal representative of a user personal identification number;

(b) second generator means responsive to a random number request signal received from said central computer for supplying a pseudo random number signal to said central computer; and

(c) comparator means in electrical communication with said first generator means, said data entry means and said second generator means by way of signal paths wholly contained within said remote access terminal, and in electrical communication with said central computer for issuing an authorization signal to said access control means when a composite signal received from said control computer bears a predetermined relationship with said identification signal received from said first generator means, said random number signal received from said signal generator means, and an offset signal received from said data entry means and exhibiting a predetermined relationship between said identification signal and a customer record signal stored in said main memory, said composite signal being formed by said central computer from said customer record signal and said random number signal.