Automated banking machine configuration system and method

• US 6,672,505 B1
• Filed: 09/21/2001
• Issued: 01/06/2004
• Est. Priority Date: 09/27/2000
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Incorporated (Diebold Nixdorf, Incorporated)
• Inventors: Zahorec, Kenneth W., Brunt, Richard P., Steinmetz, Richard A.
• Primary Examiner(s): Lee, Michael G.
• Assistant Examiner(s): PAIK, STEVE S
• Application Number:
  US09/957,982
• Time in Patent Office: 837 Days
• Field of Search: 235/379, 235/380, 235/382, 235/375, 705/43, 705/35, 705/41, 705/44
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network

Abstract

An automated banking machine (10, 70, 146) is operative to enable a plurality of authorized software components (80) to be selectively configured. The machine may be provided with either an authorization key (46, 72) or a configuration certificate (48, 150, 160) that is generated by a licensing authority (30, 62, 140). The machine is operative to authenticate the key or certificate prior to granting a user permission to configure the machine. The machine is operative to authenticate a configuration certificate by evaluating a digital signature (154, 190) associated with the configuration certificate. An authorization key may be authenticated by comparing it to a second authorization key generated responsive to a plurality of configuration parameters and one-way hash functions (92, 94). The key or certificate may be associated with a plurality of configuration rules (84, 152) which specify the configuration software components and parameters for specific ATM software and hardware.

Claims

1. A method for configuring an automated banking machine comprising:

a) receiving through operation of the banking machine at least one first authorization value;

b) calculating through operation of the banking machine at least one second authorization value responsive to a plurality of configuration parameters associated with the banking machine;

c) determining through operation of the banking machine that the at least one first authorization value corresponds to the at least one second authorization value; and

d) enabling configuration of software on the banking machine responsive to the determination in step (c).

2. The method according to claim 1, further comprising:

e) configuring the banking machine responsive to the configuration parameters.

3. The method according to claim 2, wherein in step (b) the configuration parameters are indicative of which of a plurality of software components are authorized to be installed on the banking machine.

4. The method according to claim 2, wherein step (b) includes obtaining at least one of the configuration parameters from a hardware device in the banking machine.

5. The method according to claim 2, wherein step (b) includes obtaining at least. one configuration parameter which comprises a unique identification value associated with a processor in the banking machine.

6. The method according to claim 2, wherein in step (b) the configuration parameters include a terminal identification number and an expiration parameter.

7. The method according to claim 1 wherein in step (a) the at least one first authorization value is received by the banking machine responsive to the banking machine contacting an authorizing entity.

8. The method according to claim 7, further comprising operating the banking machine so as to periodically contact the authorizing entity to receive at least one authorization value, wherein the banking machine ceases operation responsive to not receiving at least one authorization value.

9. A method for configuring an automated banking machine comprising:

a) receiving through operation of the banking machine at least one first authorization value;

b) calculating through operation of the banking machine at least one second authorization value responsive to a plurality of configuration parameters associated with the banking machine, wherein the configuration parameters include a terminal identification number and an expiration parameter;

c) determining through operation of the banking machine that the at least one first authorization value corresponds to the at least one second authorization value;

d) enabling configuration of software on the banking machine responsive to the determination in step (c);

e) configuring the banking machine responsive to the configuration parameters;

f) determining through operation of the banking machine responsive to the expiration parameter that configuration of software on the banking machine is not authorized; and

g) preventing configuration of software on the banking machine responsive to the determination in step (f).

10. A method for configuring an automated banking machine comprising:

a) receiving through operation of the banking machine at least one first authorization value;

b) calculating through operation of the banking machine at least one second authorization value responsive to a plurality of configuration parameters associated with the banking machine, wherein the at least one second authorization value is calculated responsive to at least one one-way hash function;

c) determining through operation of the banking machine that the at least one first authorization value corresponds to the at least one second authorization value;

d) enabling configuration of software on the banking machine responsive to the determination in step (c); and

e) configuring the banking machine responsive to the configuration parameters.

11. The method according to claim 10, wherein in step (b) the at least one second authorization value is calculated responsive to at least one secret value.

12. Computer readable media bearing instructions which are operative to cause a computer in an automated banking machine to carry out the method steps of:

a) receiving through operation of the banking machine at least one first authorization value;

b) calculating through operation of the banking machine at least one second authorization value responsive to a plurality of configuration parameters associated with the banking machine;

c) determining through operation of the banking machine that the at least one first authorization value corresponds to the at least one second authorization value; and

d) enabling configuration of software on the banking machine responsive to the determination in step (c).

13. A method for configuring an automated banking machine comprising:

a) receiving a configuration certificate through operation of the banking machine;

b) authenticating at least one digital signature associated with the certificate through operation of the banking machine;

c) enabling configuration of software on the banking machine responsive to the certificate and authentication of the at least one digital signature in step (b).

14. The method according to claim 13, wherein in step (a) the certificate includes the digital signature, wherein in step (b) the digital signature is authenticated responsive to a public key of a licensing authority.

15. The method according to claim 13, wherein in step (a) the certificate corresponds to at least one software component authorized to be installed on the banking machine, and further comprising installing the at least one software component on the banking machine.

16. The method according to claim 13, wherein in step (a) the certificate includes a plurality of sets of configuration rules each set corresponding to at least one of a plurality of automated banking machines, and wherein in step (c) the banking machine is enabled to be configured responsive to at least one set.

17. The method according to claim 13, wherein the certificate further includes an expiration parameter, and further comprising:

d) determining through operation of the banking machine responsive to the expiration parameter that configuration of the software on the machine is not authorized; and

e) preventing configuration of software on the banking machine responsive to the determination in step (d).

18. The method according to claim 13, wherein in step (a) the certificate includes an identification value unique to the banking machine.

19. The method according to claim 18, further comprising prior to step (c):

determining through operation of the banking machine that the identification value corresponds to a hardware embedded identification value in the banking machine.

20. The method according to claim 13, wherein in step (a) the certificate includes a terminal identification value, wherein step (c) includes associating the machine with the terminal identification value.

21. A method for configuring an automated banking machine comprising:

a) receiving a configuration certificate through operation of the banking machine, wherein the certificate includes a terminal identification value;

b) authenticating at least one digital signature associated with the certificate through operation of the banking machine;

c) enabling configuration of software on the banking machine responsive to the certificate and authentication of the at least one digital signature in step (b), including associating the machine with the terminal identification value;

d) determining that the terminal identification value has changed; and

e) preventing the machine from performing at least one transaction function responsive to the determination in step (d).

22. A method for configuring an automated banking machine comprising:

a) receiving a configuration certificate through operation of the banking machine, including retrieving the certificate from a licensing authority;

b) authenticating at least one digital signature associated with the certificate through operation of the banking machine;

c) enabling configuration of software on the banking machine responsive to the certificate and authentication of the at least one digital signature in step (b).

23. A method for configuring an automated banking machine comprising:

a) receiving a configuration certificate through operation of the banking machine including receiving the certificate from a server in operative connection with the banking machine;

b) authenticating at least one digital signature associated with the certificate through operation of the banking machine;

c) enabling configuration of software on the banking machine responsive to the certificate and authentication of the at least one digital signature in step (b).

24. Computer readable media bearing instructions which are operative to cause a computer in an automated banking machine to carry out the method steps of:

a) receiving a configuration certificate through operation of the banking machine;

b) authenticating at least one digital signature associated with the certificate through operation of the banking machine;

c) enabling configuration of software on the banking machine responsive to the certificate and authentication of the at least one digital signature in step (b).

25. A method for configuring an automated banking machine comprising:

a) providing a plurality of configuration parameters for the automated banking machine;

b) generating an authorization key responsive to the configuration parameters, at least one one-way hash function, and at least one secret number; and

c) enabling the authorization key to be used for configuring software on the automated banking machine.

26. A method for configuring an automated banking machine comprising:

a) providing a plurality of configuration parameters for the automated banking machine;

b) generating a configuration certificate that includes the configuration parameters;

c) digitally signing the certificate with a private key of a licensing authority; and

d) enabling configuration of software on the automated banking machine responsive to the configuration certificate.

27. A method for configuring an automated banking machine comprising:

a) providing a plurality of configuration parameters for configuring software on the automated banking machine;

b) storing the parameters in a database in association with a terminal identification value associated with the machine; and

c) enabling the banking machine to access the parameters stored in the database remotely through a network.

28. A method for configuring an automated banking machine comprising:

a) receiving a certificate through operation of the banking machine, wherein the certificate includes at least one hardware identification value;

b) authenticating at least one digital signature associated with the certificate through operation of the banking machine;

c) verifying through operation of the banking machine that the at least one hardware identification value in the certificate corresponds to a hardware identification value stored in at least one hardware device of the banking machine; and

d) modifying the configuration of the banking machine responsive to the certificate.

29. The method according to claim 28, wherein step (a) includes retrieving the certificate from a licensing authority.

30. The method according to claim 28, wherein step (a) includes receiving the certificate from a server in operative connection with the banking machine.

31. The method according to claim 28, wherein in step (a) the at least one hardware identification value corresponds to a serial number of the at least one hardware device.

32. A method for configuring an automated banking machine comprising:

a) pre-loading a hard drive of the banking machine with a plurality of software components, wherein at least one of the software components is disabled;

b) receiving a configuration certificate through operation of the banking machine;

c) authenticating at least one digital signature associated with the certificate through operation of the banking machine; and

d) enabling the at least one disabled software component to operate in the banking machine responsive to the certificate.