Automated banking machine that operates responsive to data bearing records

• US 7,971,783 B1
• Filed: 04/09/2010
• Issued: 07/05/2011
• Est. Priority Date: 12/26/2002
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Crews, Tim, McGinley, Joseph A., Konecny, Robert J., Crallie, Charles E., Edwards, Judith, Doland, Anne E.
• Primary Examiner(s): FRANKLIN, JAMARA ALZAIDA
• Application Number:
  US12/798,693
• Time in Patent Office: 452 Days
• Field of Search: 235/379
• US Class Current: 235/379
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs

Abstract

An automated banking machine operates responsive to data read from data bearing records to cause financial transfers. The machine includes a card reader that operates to read card data from user cards. The card data corresponds to financial accounts. The automated banking machine includes a cash dispenser and the machine carries out transaction functions for consumers including dispensing cash. The automated banking machine may generate a password for the machine responsive to randomly generated data.

Claims

1. An apparatus comprising:

an automated banking machine that operates responsive to data read from data bearing records to cause financial transactions, including;

a plurality of transaction function devices, the transaction function devices including;

a cash dispenser;

a card reader operative to read data on user cards corresponding to financial accounts;

at least one computer including a data store, wherein the at least one computer is in operative connection with each of the transaction function devices;

a housing, wherein the at least one computer and each of the transaction function devices are in operatively supported connection with the housing;

wherein the at least one computer includes a trusted platform module (TPM) in operatively supported connection with the at least one computer inside the housing, wherein the at least one data store includes stored therein at least one digital certificate, wherein the at least one digital certificate comprises a public key, wherein the at least one computer is operatively configured to cause the TPM to be used to securely store a private key associated with the public key, wherein the at least one computer is operatively configured to establish a secure communication session between the at least one computer and a remote server through use of the TPM, the digital certificate, and the private key.

2. The apparatus according to claim 1, wherein the remote server comprises a host banking system, wherein the at least one computer is operatively configured to receive through use of the secure communication session at least one message indicative of an authorization to dispense cash, wherein the at least one computer is operatively configured to cause the cash dispenser to dispense cash responsive to the at least one message.

3. The apparatus according to claim 2, wherein the at least one computer includes at least one software component operatively programmed to access the TPM to cause the private key to be used in establishing the secure communication session.

4. The apparatus according to claim 1, wherein the at least one computer is operatively configured to cause the TPM to generate the public key and private key, wherein the at least one computer is operatively configured to cause the digital certificate to be created.

5. The apparatus according to claim 4, wherein the at least one computer is operatively configured to generate a certificate request message, wherein the at least one computer is operatively configured to communicate the certificate request message to a certificate authority that is operative to generate the digital certificate.

6. The method according to claim 1, wherein the TPM is at least substantially compliant with a Trusted Computing Group TPM 1.2 Specification.

7. A method carried out in connection with an automated banking machine that operates to cause financial transfers responsive to data read from data bearing records, comprising:

a) through operation of at least one computer in an automated banking machine that reads card data corresponding to financial accounts from user cards with a card reader, causing a trusted platform module (TPM) included in the at least one computer to be used to securely store a private key in the automated banking machine, wherein the automated banking machine includes a housing, wherein the automated banking machine includes a plurality of transaction function devices in operative connection with the at least one computer, wherein the transaction function devices include a cash dispenser and the card reader, wherein the at least one computer and each of the transaction function devices are in operatively supported connection with the housing, wherein the at least one computer includes the TPM in operatively supported connection with the at least one computer inside the housing, wherein the computer includes at least one data store;

b) through operation of the at least one computer, causing a digital certificate to be stored in the at least one data store, wherein the digital certificate includes a public key that corresponds to the private key securely stored by the TPM in (a); and

c) through operation of the at least one computer, establishing a secure communication session between the at least one computer and a remote server through use of the TPM, the digital certificate, and the private key.

8. The method according to claim 7, wherein the remote server comprises a host banking system, further comprising:

d) through operation of the at least one computer, receiving through the secure communication session, at least one message indicative of an authorization to dispense cash through operation of the cash dispenser; and

e) responsive to the at least one message, dispensing cash through operation of the cash dispenser.

9. The method according to claim 8, further comprising:

through operation of at least one software component operating in the at least one computer, accessing the TPM to cause the private key to be used in establishing the secure communication session.

10. The method according to claim 7, further comprising:

d) prior to (a), through operation of the at least one computer, causing the TPM to generate the public key and private key; and

e) through operation of the at least one computer, causing the digital certificate to be created.

11. The method according to claim 10, wherein (e) includes:

through operation of the at least one computer, generating a certificate request message; and

through operation of the at least one computer, communicating the certificate request message to a certificate authority that is operative to generate the digital certificate.

12. The method according to claim 7, wherein in (a) the TPM is at least substantially compliant with a Trusted Computing Group TPM 1.2 Specification.