Automated bank transaction security system

• US 4,390,968 A
• Filed: 12/30/1980
• Issued: 06/28/1983
• Est. Priority Date: 12/30/1980
• Status: Expired due to Fees

• Current Assignee: Honeywell Information Systems, Inc. (Honeywell International Inc.)
• Original Assignee: Honeywell Information Systems, Inc. (Honeywell International Inc.)
• Inventors: Hennessy, Richard E., Frymire, Roger, Coovert, Cary
• Primary Examiner(s): Malzahn, David H.
• Application Number:
  US06/221,674
• Time in Patent Office: 910 Days
• Field of Search: 364/408, 364/900, 364/200, 235/379
• US Class Current: 705/72
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/201 Accessories of ATMs
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A banking system is disclosed which comprises a central computer system in electrical communication with remote automated teller machines, wherein the architecture of the banking system is such that the likelihood of a security penetration is substantially decreased whether the automated teller machine operates in an on-line or in an off-line mode.

Claims

1. An automated banking system, including a central computer system located at a central site, which comprises:

(a) plural data entry means located at a like plurality of remote sites and responsive to customer initiated action for providing binary information signals representative of a personal identification number (PIN), an account number (ACCN), a bank identification number (BIN), a number having a predetermined relationship with said PIN (PIN OFFSET

     1), transaction data descriptive of a desired banking transaction, and transaction limits;

(b) plural automated teller machines each located at any one of said remote sites and receiving said PIN, ACCN, BIN, PIN OFFSET 1, transaction data and transaction limits from an adjacent one of said plural data entry means for performing the following operations by way of signal paths wholly contained within said plural automated teller machines;

(1) validating said ACCN against resident binary customer account number codes,

(2) generating a first transaction identification number (TRAN

     1), a transaction request (TREQ), a second transaction identification number as a function of TRAN 1 (TRAN 2'"'"'), and a number which is a function of PIN, BIN and ACCN (PIN OFFSET

     2).

(3) comparing TRAN 2'"'"' and a third transaction number which is a function of TRAN 1 (TRAN

     2),

(4) if TRAN 2 and TRAN 2'"'"' are equivalent, comparing PIN OFFSET 1 and PIN OFFSET 2, and

(5) if PIN OFFSET 1 and PIN OFFSET 2 are equivalent, dispensing transaction items to said customer and receiving transaction items from said customer in accordance with said transaction data; and

(c) plural controller means in electrical communication with said central computer system during on-line operations and in electrical communication with different pluralities of said plural automated teller machines during both on-line and off-line operations, and receiving TREQ, ACCN, TRAN 1 and said transaction limits from said plural automated teller machines for transfer to said central computer system during on-line operations, and for validating TREQ against said transaction limits and resident customer account information during off-line operations, and for generating TRAN 2 for transfer to a requesting one of said plural automated teller machines in the event TREQ is valid.

2. An automated banking system including a central computer system located at a central site which comprises:

(a) data entry means located at a remote site and responsive to customer initiated action for providing binary information signals representative of a personal identification number (PIN), an account number (ACCN), a bank identification number (BIN), a number having a predetermined relationship with said PIN (PIN OFFSET

     1), transaction data descriptive of the banking transaction desired, and transaction limits;

(b) first controller means located at said remote site and receiving said PIN, ACCN, BIN, PIN OFFSET 1, transaction data and transaction limits from said data entry means for performing the following operations;

(1) validating said ACCN against binary customer account number codes resident in said first controller means,

(2) generating a first transaction identification number (TRAN

     1), and a transaction request (TREQ),

(3) comparing a second transaction number which is a function of TRAN 1 (TRAN

     2) and a third transaction number which is a function of TRAN 1 (TRAN 2'"'"'),

(4) if TRAN 2 and TRAN 2'"'"' are equivalent, comparing PIN OFFSET 1 and a number which is a function of PIN, BIN and ACCN (PIN OFFSET

     2), and

(5) if PIN OFFSET 1 and PIN OFFSET 2 are equivalent, issuing transaction control signals for exchanging transaction items with a customer;

(c) second controller means located at said remote site and receiving PIN, BIN, ACCN, and TRAN 1 from said first controller means, and generating therefrom PIN OFFSET 2 and TRAN 2'"'"' for transfer to said first controller means, and responsive to said transaction control signals for dispensing transaction items to said customer and receiving transaction items from said customer in accordance with said transaction data; and

(d) third controller means located at said central site and receiving TREQ, ACCN, TRAN1 and transaction limits from said first controller means for transfer to said central computer system, and receiving an authorization signal from said central computer system in the event TREQ does not exceed either said transaction limits or an account balance of said customer for generating TRAN 2 for transfer to said first controller means.

3. An automated banking system as set forth in claim 2, further comprising:

(a) first logic switch means located at said central site and in electrical communication with said third controller means for providing dynamically selectable parameters used in the generation of TRAN 2; and

(b) second logic switch means located at said remote site and in electrical communication with said second controller means for providing dynamically selectable parameters used in the generation of TRAN 2'"'"' and PIN OFFSET 2, and in the setting of limits on the cash flow to customers.

4. An automated banking system including a central computer system located at a central site which comprises:

(a) data entry means located at a first remote site and responsive to customer initiated action for providing binary information signals representative of a personal identification number (PIN), an account number (ACCN), a bank identification number (BIN), a number having a predetermined relationship with said PIN (PIN OFFSET

     1), transaction data descriptive of the desired banking transaction, and transaction limits;

(b) first controller means located at said first remote site and receiving said PIN, ACCN, BIN, PIN OFFSET 1, transaction data and transaction limits from said data entry means for performing the following operations;

(1) validating said ACCN against binary customer account number codes resident in said first controller means,

(2) generating a first transaction identification number (TRAN

     1), and a transaction request (TREQ),

(3) comparing a second transaction number which is a function of TRAN 1 (TRAN

     2) and a third transaction number which is a function of TRAN 1 (TRAN 2'"'"'),

(4) if TRAN 2 and TRAN 2'"'"' are equivalent, comparing PIN OFFSET 1 and a number which is a function of PIN, BIN and ACCN (PIN OFFSET

     2), and

(5) if PIN OFFSET 1 and PIN OFFSET 2 are equivalent, issuing transaction control signals for exchanging transaction items with a customer;

(c) second controller means located at said first remote site and receiving PIN, BIN, ACCN, and TRAN 1 from said first controller means, and generating therefrom PIN OFFSET 2 and TRAN 2'"'"' for transfer to said first controller means, and responsive to said transaction control signals for dispensing transaction items to said customer and receiving transaction items from said customer in accordance with said transaction data; and

(d) third controller means located at a second remote site and receiving TREQ, ACCN, TRAN 1 and said transaction limits from said first controller means for transfer to said central computer system, and receiving an authorization signal from said central computer system in the event TREQ does not exceed either said transaction limits or an account balance of said customer for generating TRAN 2 for transfer to said first controller means.

5. An automated banking system as set forth in claim 4, further comprising:

(a) first logic switch means located at said central site and in electrical communication with said central computer for providing dynamically selectable parameters for use by said central computer in encrypting said authorization signal;

(b) second logic switch means located at said second remote site and in electrical communication with said third controller means for providing dynamically selectable parameters used in the generation of TRAN 2;

(c) memory means located at said second remote site and in electrical communication with said third controller means for recording bank transactions and providing customer account information during off-line operations in which said third controller means receives TREQ, ACCN, TRAN 1 and said transaction limits, provides said authorization signal and generates said TRAN 2; and

(d) third logic switch means located at said first remote site and in electrical communication with said second controller means for providing dynamically selectable parameters used in the generation of TRAN 2'"'"' and PIN OFFSET 2, and in the setting of limits on the cash flow to customers.