Automated banking machine that operates responsive to data bearing records

• US 7,922,080 B1
• Filed: 04/09/2010
• Issued: 04/12/2011
• Est. Priority Date: 12/26/2002
• Status: Expired due to Fees

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Crews, Tim, McGinley, Joseph A., Konecny, Robert J., Crallie, Charles E., Edwards, Judith, Doland, Anne E.
• Primary Examiner(s): Franklin; Jamara A
• Application Number:
  US12/798,688
• Time in Patent Office: 368 Days
• Field of Search: 235/379
• US Class Current: 235/379
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs

Abstract

An automated banking machine operates responsive to data read from data bearing records to cause financial transfers. The machine includes a card reader that operates to read card data from user cards. The card data corresponds to financial accounts. The automated banking machine includes a cash dispenser and the machine carries out transaction functions for consumers including dispensing cash. The automated banking machine may generate a password for the machine responsive to randomly generated data.

Claims

1. A method carried out in connection with an automated banking machine that operates to cause financial transfers responsive to data read from data bearing records, comprising:

a) through operation of at least one computer in the automated banking machine, generating an account password responsive to randomly generated data, wherein the automated banking machine includes a card reader and a cash dispenser in operative connection with the at least one computer, wherein the automated banking machine reads card data corresponding to financial accounts from user cards with the card reader, wherein the automated banking machine includes an operating system operating in the at least one computer, wherein the operating system includes an operating system login account with sufficient permission to execute at least one software component operative to at least one of configure and service the automated banking machine;

b) through operation of the at least one computer, setting a password for the operating system login account of the at least one computer to the account password generated in (a);

c) through operation of the at least one computer, authenticating a user using a portable storage device placed in operative connection with the automated banking machine;

d) responsive to authentication of the user in (c), enabling the user through operation of the at least one computer to operate the at least one software component to at least one of configure and service the automated banking machine while logged into the operating system login account with the account password set in (b).

2. The method according to claim 1, wherein in (a) the operating system login account corresponds to an administrative operating system login account, further comprising:

e) subsequent to (b) through operation of the at least one computer, logging into the administrative operating system login account using the account password generated in (a).

3. The method according to claim 2, wherein the automated banking machine includes at least one transaction function device, wherein in (a) the login account has sufficient privileges to enable a user to access at least one software component operative to cause the at least one transaction function device of the automated banking machine to operate.

4. The method according to claim 3, wherein in (a) the at least one transaction function device includes at least one of the cash dispenser, a depository, and an encrypting pin pad.

5. The method according to claim 4, wherein in (c) the portable storage device comprises a USB flash memory storage device.

6. The method according to claim 5, wherein in (c) the portable storage device comprises a cryptographic token device.

7. The method according to claim 6, wherein (c) includes:

f) through operation of at least one processor included in the cryptographic token device, communicating a digital certificate associated with the cryptographic token device to the at least one computer;

g) through operation of the at least one computer, verifying the digital certificate received in (f) using a public key associated with a trusted certificate authority which signed the certificate associated with the cryptographic token device.

8. The method according to claim 7, wherein the automated banking machine includes at least one input device in operative connection with the at least one computer, wherein (c) includes:

h) through operation of the at least one input device, receiving an input of a personal identification number (PIN);

i) through operation of the at least one computer, communicating the PIN to the cryptographic token device;

j) through operation of at least one processor in the cryptographic token device, authenticating the PIN.

9. The method according to claim 8, wherein (c) includes:

k) through operation of at least one computer, generating a random number;

l) through operation of at least one computer, communicating the random number to the cryptographic token device;

m) through operation of the at least processor in the cryptographic token device, digitally signing data including the random number received in (l) with a private key;

n) through operation of the at least processor in the cryptographic token device, communicating the digitally signed data to the at least one computer;

o) through operation of the at least one computer, verifying the digitally signed data using a public key included in the certificate of the cryptographic token device communicated in (e);

p) through operation of the at least one computer, verifying that the random number included in the digitally signed data corresponds to the random number communicated in (l).

10. The method according to claim 1, wherein the automated banking machine includes at least one output device, wherein (d) includes:

through operation of the at least one computer, causing the output device to visually display user interface service screens that provide the user with information for performing maintenance operations with the automated banking machine.

11. At least one article of computer readable media bearing computer executable instructions operative to cause at least one computer in an automated banking machine that operates to cause financial transfers responsive to data read from data bearing records, to cause the automated banking machine to carry out a method comprising:

a) through operation of the at least one computer in the automated banking machine, generating an account password responsive to randomly generated data, wherein the automated banking machine includes a card reader and a cash dispenser in operative connection with the at least one computer, wherein the automated banking machine reads card data corresponding to financial accounts from user cards with the card reader, wherein the automated banking machine includes an operating system operating in the at least one computer, wherein the operating system includes an operating system login account with sufficient permission to execute at least one software component operative to at least one of configure and service the automated banking machine;

b) through operation of the at least one computer, setting a password for the operating system login account of the at least one computer to the account password generated in (a);

c) through operation of the at least one computer, authenticating a user using a portable storage device placed in operative connection with the automated banking machine;

d) responsive to authentication of the user in (c), enabling the user through operation of the at least one computer to operate the at least one software component to at least one of configure and service the automated banking machine while logged into the operating system login account with the account password set in (b).