Automated banking machine configuration system and method

• US 7,577,615 B1
• Filed: 08/27/2003
• Issued: 08/18/2009
• Est. Priority Date: 09/27/2000
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Incorporated (Diebold Nixdorf, Incorporated)
• Inventors: Zahorec, Kenneth W., Brunt, Richard P., Steinmetz, Richard A.
• Primary Examiner(s): Hamilton; Lalita M
• Application Number:
  US10/648,936
• Time in Patent Office: 2,183 Days
• Field of Search: 705/35, 705 39- 40, 705/41, 705/43, 705/44
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network

Abstract

An automated banking machine (10, 70, 146) is operative to enable a plurality of authorized software components (80) to be selectively configured. The machine may be provided with either an authorization key (46, 72) or a configuration certificate (48, 150, 160) that is generated by a licensing authority (30, 62, 140). The machine is operative to authenticate the key or certificate prior to granting a user permission to configure the machine. The machine is operative to authenticate a configuration certificate by evaluating a digital signature (154, 190) associated with the configuration certificate. An authorization key may be authenticated by comparing it to a second authorization key generated responsive to a plurality of configuration parameters and one-way hash functions (92, 94). The key or certificate may be associated with a plurality of configuration rules (84, 152) which specify the configuration software components and parameters for specific ATM software and hardware.

Claims

1. A method for configuring a cash dispensing automated teller machine (ATM) comprising:

a) receiving at least one digitally signed certificate through operation of the ATM, wherein the ATM includes a cash dispenser and at least one processor, wherein the at least one certificate includes at least one serial number;

b) verifying through operation of the at least one processor that the at least one serial number included in the at least one certificate corresponds to at least one serial number associated with at least one hardware device of the ATM;

c) responsive to (b), configuring the ATM through operation of the at least one processor responsive to the at least one digital certificate.

2. The method according to claim 1, wherein the at least one certificate includes at least one digital signature;

and further comprising;

d) prior to (c) authenticating the at least one digital signature through operation of the at least one processor;

wherein (c) is carried out responsive to (b) and (d).

3. The method according to claim 2, wherein (a) includes receiving the at least one certificate from a server in operative connection with the ATM through a network.

4. The method according to claim 3, wherein the at least one hardware device corresponds to at least one of a keypad, a card reader, the cash dispenser, a printer, a depositor, a CPU, and a network device.

5. The method according to claim 3, wherein prior to (c) the ATM is not enabled to perform at least one transaction function involving the operation of the at least one hardware device, wherein in (c) configuring the ATM includes enabling the ATM to perform the at least one transaction function involving the operation of the at least one hardware device.

6. The method according to claim 5, wherein in (c) the at least one transaction function includes dispensing cash, wherein further comprising:

e) dispensing cash from the ATM through operation of the cash dispenser.

7. The method according to claim 3, wherein (c) includes configuring the ATM responsive to at least one key provided in the at least one certificate.

8. A method for configuring an automated banking machine comprising:

a) receiving a certificate through operation of the automated banking machine, wherein the certificate includes a digital signature;

b) authenticating at least one digital signature associated with the certificate through operation of the automated banking machine responsive to a public key of a licensing authority; and

c) configuring the automated banking machine responsive to the certificate and authentication of the at least one digital signature in (b), including installing at least one software component on the automated banking machine.

9. A method for configuring an automated banking machine comprising:

a) receiving a certificate through operation of the automated banking machine, wherein the certificate includes a plurality of sets of configuration rules, each set corresponding to at least one of a plurality of automated banking machines;

b) authenticating at least one digital signature associated with the certificate through operation of the automated banking machine; and

c) configuring the automated banking machine responsive to at least one set of configuration rules included in the certificate and authentication of the at least one digital signature in (b).

10. A method for configuring an automated banking machine comprising:

a) receiving a certificate through operation of the automated banking machine, wherein the certificate includes an expiration parameter;

b) authenticating at least one digital signature associated with the certificate through operation of the automated banking machine;

c) configuring the automated banking machine responsive to the certificate and authentication of the at least one digital signature in (b);

d) determining through operation of the automated banking machine responsive to the expiration parameter that configuration of the software on the automated banking machine is not authorized; and

e) preventing configuration of software on the automated banking machine responsive to the determination in (d).

11. A method for configuring an automated banking machine comprising:

a) receiving a certificate through operation of the automated banking machine, wherein the certificate includes an identification value unique to the automated banking machine;

b) authenticating at least one digital signature associated with the certificate through operation of the automated banking machine; and

c) configuring the automated banking machine responsive to the certificate and authentication of the at least one digital signature in (b).

13. The method according to claim 11, further comprising prior to (c):

determining through operation of the banking machine that the identification value corresponds to a hardware embedded identification value in the banking machine.

12. A method for configuring an automated banking machine comprising:

a) receiving a certificate through operation of the automated banking machine, wherein the certificate includes a terminal identification value;

b) authenticating at least one digital signature associated with the certificate through operation of the automated banking machine; and

c) configuring the automated banking machine responsive to the certificate and authentication of the at least one digital signature in (b), including associating the automated banking machine with the terminal identification value.

14. The method according to claim 12, further comprising:

d) determining that the terminal identification value has changed; and

e) preventing the machine from performing at least one transaction function responsive to the determination in (d).