Automated banking machine that operates responsive to data bearing records

• US 8,052,049 B1
• Filed: 06/08/2010
• Issued: 11/08/2011
• Est. Priority Date: 12/26/2002
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Crews, Tim, McGinley, Joseph A., Konecny, Robert J., Crallie, Charles E., Edwards, Judith, Doland, Anne E.
• Primary Examiner(s): FRANKLIN, JAMARA ALZAIDA
• Application Number:
  US12/802,504
• Time in Patent Office: 518 Days
• Field of Search: 235/379, 713/184
• US Class Current: 235/379
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs

Abstract

An automated banking machine operates responsive to data read from data bearing records to cause financial transfers. The machine includes a card reader that operates to read card data from user cards. The card data corresponds to financial accounts. The automated banking machine includes a cash dispenser and the machine carries out transaction functions for consumers including dispensing cash. The automated banking machine may generate an operating system account password from separate portions of the password acquired from a portable storage device and a local data store.

Claims

1. Apparatus comprising:

an automated banking machine that operates responsive to data read from data bearing records to cause financial transactions, including;

a plurality of devices including;

a card reader operative to read card data on user cards corresponding to financial accounts;

a cash dispenser;

at least one computer in operative connection with the plurality of devices, wherein the at least one computer includes at least one data store and at least one communication device that is operative to communicate with at least one portable storage device placed in operative communication with the at least one communication device;

a housing, wherein the at least one computer and the plurality of devices are in operatively supported connection with the housing;

wherein the at least one computer is operatively configured to produce a decrypted at least one first portion of an operating system account password through communication with the portable storage device, wherein the at least one computer is operatively configured to access at least one second portion of the operating system account password from the data store in the automated banking machine;

wherein the at least one computer is operatively configured to generate the operating system account password responsive to the at least one first portion and the at least one second portion of the ATM account password;

wherein the at least one computer is operatively configured to log into the operating system login account of the at least one computer using the generated operating system account password.

2. The apparatus according to claim 1, wherein the at least one computer includes a trusted platform module (TPM) in operatively supported connection with the at least one computer inside the housing.

3. The apparatus according to claim 2, wherein the at least one computer is operatively configured to cause the TPM to decrypt the at least one first portion of the operating system account password.

4. The apparatus according to claim 3, wherein the TPM is compliant with a Trusted Computing Group TPM 1.2 Specification.

5. The apparatus according to claim 1, wherein in the operating system login account corresponds to an administrative account.

6. The apparatus according to claim 1, wherein the login account has sufficient privileges to enable a user to access at least one software component operative to service the cash dispenser.

7. The apparatus according to claim 1, wherein the communication device includes a USB port.

8. The apparatus according to claim 7, wherein the automated banking machine includes at least one input device in operative connection with the at least one computer, wherein the at least one computer is operatively configured to communicate a personal identification number (PIN) received through operation of the input device to a cryptographic token placed in operative connection with the USB port, in order to acquire access to the at least one first portion of the operating system account password from the cryptographic token.