Automated banking machine that operates responsive to data bearing records

• US 7,967,193 B1
• Filed: 04/27/2010
• Issued: 06/28/2011
• Est. Priority Date: 12/26/2002
• Status: Expired due to Fees

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: McGinley, Joseph A., Konecny, Robert J., Crallie, Charles E., Edwards, Judith, Doland, Anne E., Crews, Tim
• Primary Examiner(s): Franklin; Jamara A
• Application Number:
  US12/799,567
• Time in Patent Office: 427 Days
• Field of Search: 235/379
• US Class Current: 235/379
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs

Abstract

An automated banking machine operates responsive to data read from data bearing records to cause financial transfers. The machine includes a card reader that operates to read card data from user cards. The card data corresponds to financial accounts. The automated banking machine includes a cash dispenser and the machine carries out transaction functions for consumers including dispensing cash. The automated banking machine may comprise a trusted platform module in a computer of the machine. The trusted platform module may also be used to establish secure communication between components of the machine such as the card reader.

Claims

1. Apparatus comprising:

an automated banking machine that operates responsive to data read from data bearing records to cause financial transactions to be carried out, including;

a plurality of devices including;

a card reader operative to read card data on user cards corresponding to financial accounts;

a cash dispenser;

at least one computer in operative connection with the plurality of devices;

a housing, wherein the at least one computer and the plurality of devices are in operative connection with the housing;

wherein the at least one computer includes a trusted platform module (TPM) in operative connection with the at least one computer inside the housing, wherein the at least one computer is operatively configured to use the TPM to establish encrypted communications between the at least one computer and at least one of the devices, wherein the at least one computer and the at least one device are operatively configured to communicate encrypted operational data between the at least one computer and the at least one device, which operational data is used by at least one of the at least one computer and the at least one device to carry out at least a portion of a financial transaction at the automated banking machine.

2. The apparatus according to claim 1, wherein the plurality of devices include a depository mechanism and an encrypting pin pad (EPP), wherein the at least one device includes at least one of the cash dispenser, the card reader, the depository mechanism, and the EPP.

3. The apparatus according to claim 1, wherein the at least one computer is operatively configured to use the TPM to encrypt at least one key to form encrypted key data, wherein the at least one computer is operative to send the encrypted key data to the at least one device, wherein the at least one device includes at least one processor, wherein the at least one processor in the at least one device is operatively configured to decrypt the at least one key from the encrypted key data, wherein the at least one computer and the at least one processor in the at least one device are operatively configured to cause the operational data to be at least one of encrypted and decrypted using the key.

4. The apparatus according to claim 3, wherein at least one of the TPM and the at least one computer is operatively configured to encrypt the operational data using the at least one key and is operatively configured to send the encrypted operational data to the at least one device, wherein the at least one processor in the at least one device is operatively configured to decrypt the operational data using the at least one key, wherein the at least one processor is operatively configured to cause the at least one device to carry out at least one transaction function responsive to the operational data.

5. The apparatus according to claim 4, wherein the at least one device includes the cash dispenser, wherein the at least one transaction function includes dispensing cash responsive to the operational data.

6. The apparatus according to claim 5, wherein the operational data specifies an amount of cash to dispense.

7. The apparatus according to claim 3, wherein the at least one device is operative to provide the operational data, wherein the at least one processor in the device is operatively configured to encrypt the operational data using the at least one key and to send the encrypted operational data to the at least one computer.

8. The apparatus according to claim 7, wherein at least one of the TPM and the at least one computer is operatively configured to decrypt the operational data using the at least one key.

9. The apparatus according to claim 8, wherein the at least one computer is operatively configured to send a message to a host banking system responsive to the operational data.

10. The apparatus according to claim 9, wherein the at least one device includes the card reader, wherein the operational data includes card data read from a user card.

11. The apparatus according to claim 8, wherein the at least one device includes the cash dispenser.

12. The apparatus according to claim 7, wherein the plurality of devices includes an encrypting pin pad (EPP), wherein the at least one device comprises the EPP, wherein the EPP includes at least one data store, wherein the at least one data store includes the at least one key and at least one further key stored therein, where the EPP is operative to receive an input of a personal identification number (PIN), wherein the EPP includes the at least one processor, wherein the at least one processor in the EPP is operatively configured to generate encrypted PIN data by encrypting the inputted PIN with the further key, wherein the at least one processor in the EPP is operatively configured to generate encrypted operational data by encrypting the encrypted PIN data with the at least one key, wherein the at least one processor in the EPP is operatively configured to cause the encrypted operational data to be communicated to the at least one computer, wherein at least one of the TPM and the at least one computer is operatively configured to decrypt the encrypted operational data using the at least one key to uncover the encrypted PIN data, wherein the at least one computer is operatively configured to send the encrypted PIN data to a host banking system, wherein the at least one computer is operatively configured to communicate with the host banking system to receive an authorization to dispense cash.

13. The apparatus according to claim 1, wherein the TPM is compliant with a Trusted Computing Group TPM 1.2 Specification.