Cash dispensing automated banking machine software authorization system and method

• US 7,234,636 B1
• Filed: 06/15/2006
• Issued: 06/26/2007
• Est. Priority Date: 09/27/2000
• Status: Expired due to Term

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Brausch, Thomas, Phillipi, Chris, Zahorec, Kenneth W., Brunt, Richard P., Steinmetz, Richard A.
• Primary Examiner(s): PAIK, STEVEN SANGYUL
• Application Number:
  US11/454,705
• Time in Patent Office: 376 Days
• Field of Search: 235/379, 235/380, 235/382, 705/41, 705/43
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network

Abstract

An automated banking machine is operative to authorize the installation, use, and/or configuration of ATM software applications and components. The machine may be provided with either an authorization key or a configuration certificate that is generated by a licensing authority. The machine is operative to authenticate the key or certificate prior to granting a user permission to install, run, and/or configure the software. The machine is operative to authenticate a configuration certificate by evaluating a digital signature associated with the configuration certificate. An authorization key may be authenticated by comparing it to a second authorization key generated responsive to inputted license information and one-way hash functions. The key or certificate may be associated with a plurality of configuration rules which specify the configuration software components and parameters for specific ATM software and hardware.

Claims

1. A cash dispensing automated banking machine comprising:

a housing;

a cash dispenser and at least one computer in supporting connection with the housing;

at least one input device, at least one output device, and at least one data store in operative connection with the at least one computer, wherein the at least one data store includes at least one secret key stored therein;

wherein the at least one computer is operative to generate at least one generated authorization key responsive to the at least one secret key stored in the at least one data store and responsive to at least one input corresponding to license information received through the at least one input device;

wherein the at least one computer is operative to enable at least one software component associated with the license information to execute in the at least one computer responsive to the at least one computer verifying that the at least one generated authorization key corresponds to the at least one inputted authorization key inputted through the at least one input device, wherein execution of the at least one software application enables the machine to carry out at least one transaction function.

2. The machine according to claim 1, wherein the at least one computer is operative to generate the at least one generated authorization key by processing the at least one secret key and the license information using at least one encryption algorithm.

3. The machine according to claim 2, wherein the encryption algorithm includes a DES MAC algorithm.

4. The machine according to claim 2, wherein the at least one software component includes the encryption algorithm and the at least one secret key.

5. The machine according to claim 1, wherein the license information includes an expiration date, wherein the at least one computer is operative to determine a current system date, wherein the at least one computer is operative to prevent at least one function of the at least one software component from carrying out at least one transaction function responsive to a determination by the at least one computer that the expiration date is earlier in time than the current system date.

6. The machine according to claim 1, wherein the at least one computer is operative to determine a first system date which corresponds to a current system date of the at least one computer, wherein the at least one computer is operative to determine a second system date which corresponds to a current system date after determining the first system date, wherein the at least one computer is operative to prevent the at least one function of the at least one software component from carrying out at least one transaction function responsive to a determination by the at least one computer that the second system date is earlier in time than the first system date.

7. The machine according to claim 1, wherein the license information includes data corresponding to a customer name.

8. The machine according to claim 1, wherein the license information includes data corresponding to a version number associated with the at least one software component.

9. The machine according to claim 1, wherein the license information includes data which identifies the at least one software component.

10. The machine according to claim 1, wherein the at least one computer is operative to enable the at least one software component associated with the license information to be installed on the automated banking machine responsive to the at least one computer verifying that the at least one generated authorization key corresponds to the at least one inputted authorization key inputted through the at least one input device.

11. The machine according to claim 1, wherein the at least one computer is operative to enable the at least one software component associated with the license information to continue executing in the at least one computer responsive to the at least one computer verifying that the at least one generated authorization key corresponds to the at least one inputted authorization key inputted through the at least one input device.

12. The machine according to claim 1, wherein the at least one computer is operative to store the license information in the at least one data store of the automated banking machine, wherein when starting the at least one software component, the at least one computer is operative to generate the at least one generated authorization key responsive to the at least one secret key stored in the at least one data store and responsive to the license information stored in the at least one data store.

13. The machine according to claim 1, and wherein the at least one computer is operative to prevent at least one function of the at least one software component associated with the license information from carrying out at least one transaction function responsive to the at least one computer determining that the at least one inputted authorization key does not correspond to the at least one generated authorization key.

14. The machine according to claim 1, wherein the at least one transaction function includes dispensing cash from the machine through operation of the cash dispenser.

15. The machine according to claim 1, wherein the at least one computer is operative to determine data corresponding to hardware identification data stored in a data store in connection with a hardware device of the automated banking machine, wherein the at least one computer is operative to generate the at least one generated authorization key responsive to the hardware identification data.

16. The machine according to claim 1, wherein the at least one computer is operative to determine data corresponding to software identification data stored in the at least one software component, wherein the at least one computer is operative to generate the at least one generated authorization key responsive to the software identification data.

17. The machine according to claim 16, wherein the software identification data includes information corresponding to a version of the at least one software component.