Automated banking machine system and method

• US 8,090,663 B1
• Filed: 09/14/2006
• Issued: 01/03/2012
• Est. Priority Date: 04/23/2001
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Incorporated (Diebold Nixdorf, Incorporated)
• Inventors: Zajkowski, Timothy, Doland, Anne, Smith, Mark D.
• Primary Examiner(s): Augustin, Evens J
• Application Number:
  US11/521,665
• Time in Patent Office: 1,937 Days
• Field of Search: 705/35, 705/44, 705/66, 705/70
• US Class Current: 705/70
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

An automated banking machine (12, 200, 302) is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP (204) that is operative to remotely receive an encrypted terminal master key from a host system (210, 304). The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device (30) of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.

Claims

1. At least one article of computer readable media

including non-transitory computer executable instructions operative to cause at least one processor of a host system to cause the host system to carry out a method comprising:

a) through operation of the at least one processor, communicating with a plurality of cash dispensing automated teller machines (ATMs),

b) through operation of the at least one processor, authorizing banking transactions carried out through operation of the ATMs,

c) through operation of the at least one processor, receiving from an ATM from among the plurality of ATMs, data representative of a public key associated with the ATM,

d) through operation of the at least one processor, causing first encrypted data to be generated using the public key associated with the ATM and at least one asymmetric cryptography algorithm,

wherein the first encrypted data includes data corresponding to a first key,

e) through operation of the at least one processor, causing to be sent to the ATM, at least one message including data corresponding to the first encrypted data,

f) through operation of the at least one processor, causing second encrypted data to be generated using the first key and at least one symmetric cryptography algorithm,

wherein the second encrypted data includes data corresponding to a second key,

g) through operation of the at least one processor, causing to be sent to the ATM, at least one message including data corresponding to the second encrypted data,

h) through operation of the at least one processor, receiving from the ATM, at least one message including data corresponding to third encrypted data encrypted using the second key,

i) responsive at least in part to the data corresponding to the third encrypted data, through operation of the at least one processor, causing a determination to be made as to whether a banking transaction is authorized, and

j) through operation of the at least one processor, causing to be sent to the ATM, at least one message including data corresponding to the determination as to whether the banking transaction is authorized.

2. The at least one article according to claim 1, wherein in (h) the third encrypted data includes data corresponding to a personal identification number (PIN) associated with a financial account.

3. The at least one article according to claim 2, further comprising through operation of the at least one processor, causing the third encrypted data to be decrypted using the second key.

4. The at least one article according to claim 1, further comprising:

through operation of the at least one processor, receiving from the ATM, at least one message including data corresponding to a request to authorize a dispense of cash,

through operation of the at least one processor, causing a determination to be made as to whether the dispense of cash is authorized, and

through operation of the at least one processor, causing to be sent to the ATM, at least one message including data corresponding to the determination as to whether the dispense of cash is authorized.

5. The at least on article according to claim 1, further comprising:

through operation of the at least one processor, causing to be sent to each of the plurality of ATMs, data representative of a public key associated with the host system, and

through operation of the at least one processor, receiving a respective public key associated with each respective ATM.

6. The at least one article according to claim 1, further comprising:

k) through operation of the at least one processor, receiving from the ATM, at least one message including data representative of a request to transfer the first key to the ATM, and

l) through operation of the at least one processor responsive at least in part to the data representative of the request, causing to be sent to the ATM, the at least one message in (e) including data corresponding to the first encrypted data.

7. The at least one article according to claim 6, wherein in (k) the at least one message including data representative of a request to transfer the first key to the ATM corresponds to an unsolicited status message, wherein in (e) the at least one message including data corresponding to the first encrypted data corresponds to a write command message.

8. The at least one article according to claim 1, further comprising

k) through operation of the at least one processor, receiving from the ATM, at least one message including data representative of an acknowledgment that the first key has been accepted by the ATM.

9. The at least one article according to claim 8, wherein in (k) the at least one message including data representative of the acknowledgment corresponds to a solicited status message.

10. The at least one article according to claim 8, further comprising:

l) through operation of the at least one processor, generating a random number, wherein in (e) the at least one message including data corresponding to the first encrypted data further includes the random number, wherein in (k) the at least one message including data representative of an acknowledgment further includes a further number, and

m) through operation of the at least one processor, determining that the random number corresponds to the further number.

11. The at least one article according to claim 8, wherein in (e) the at least one message including data corresponding to the first encrypted data further includes host identity data, wherein in (k) the at least one message including data representative of an acknowledgment further includes data corresponding to further identity data, further comprising through operation of the at least one processor, determining that the host identity data corresponds to the second further identity data.

12. The at least one article according to claim 8, further comprising:

l) through operation of the at least one processor, receiving from the ATM, at least one message including data representative of a request to transfer the first key to the ATM, and

m) through operation of the at least one processor responsive at least in part to the data representative of the request in (l), causing to be sent to the ATM, the at least one message in (e) including data corresponding to the first encrypted data.

13. The at least one article according to claim 12, wherein in (l) the at least one message including data representative of the request, further includes data corresponding to a random number, wherein in (k) the at least one message including data representative of the acknowledgment further includes a further number, further comprising through operation of the at least one processor, determining that the random number corresponds to the further number.

14. The at least one article according to claim 1, further comprising:

k) through operation of the at least one processor, causing to be sent to the ATM, at least one message including data representative of a command operative to cause the ATM to send at least one message including data representative of a request to transfer the first key to the ATM, l) through operation of the at least one processor, receiving from the ATM, the at least one message including data representative of the request, and

m) through operation of the at least one processor responsive at least in part to the data representative of the request in (l), causing to be sent to the ATM, the at least one message in (e) including data corresponding to the first encrypted data.

15. The at least one article according to claim 14, wherein in (k) the at least one message including data representative of the command, corresponds to an operational command message, wherein in (l) the at least one message including data representative of the request corresponds to a solicited status message.

16. The at least one article according to claim 1, wherein in (d) the first key corresponds to a terminal master key, wherein in (f) the second key corresponds to a communication key.

17. The at least one article according to claim 1, wherein in (d) the asymmetric cryptography algorithm includes an RSA algorithm, wherein in (f) the symmetric cryptography algorithm includes at least one of a Single-DES encryption algorithm and a double-length Triple-DES encryption algorithm.

18. The at least one article according to claim 1, further comprising

k) through operation of the at least one processor, receiving from the ATM, at least one message including data representative of a random number, wherein the at least one message in (e) including data corresponding to the first encrypted data further includes the random number.

19. The at least one article according to claim 18, further comprising

l) through operation of the at least one processor, generating a digital signature of the data corresponding to the first encrypted data and the further random number, wherein in (e) the at least one message including data corresponding to the first encrypted data and the random number further includes the digital signature.

20. The at least one article according to claim 19, further comprising

m) through operation of the at least one processor, receiving from the ATM, at least one message including data representative of an acknowledgment that the first key has been accepted by the ATM.

21. The at least one article according to claim 20, further comprising through operation of the at least one processor, determining validity of data included in the at least one message in (m) including data representative of the acknowledgment.

22. The at least one article according to claim 1, wherein each ATM includes a cash dispenser, further comprising through operation of the at least one processor, selectively authorizing the ATMs to carry out banking transactions including dispensing of cash through operation of the cash dispensers in the ATMs.

23. At least one article of computer readable media

including non-transitory computer executable instructions operative to cause at least one, processor of a host system to cause the host system to carry out a method comprising:

a) through operation of the at least one processor, communicating with a plurality of cash dispensing automated teller machines (ATMs), wherein each of the ATMs includes a cash dispenser and an encrypting pin pad (EPP),

b) through operation of the at least one processor, using public key cryptography to securely transfer a respective key encrypting key to each respective EPP,

c) through operation of the at least one processor, using each respective key encrypting key with a symmetric cryptography algorithm to securely communicate a respective personal identification number (PIN) encrypting key to each respective EPP,

d) through operation of the at least one processor, receiving from each respective EPP respective PIN data encrypted with the respective PIN encrypting key associated with each respective EPP,

e) through operation of the at least one processor, decrypting the respective PIN data received from each respective EPP using the respective PIN encrypting key associated with each respective EPP,

f) through operation of the at least one processor, using the respective PIN data received from each respective EPP to make a respective determination as to whether a respective cash dispense transaction is authorized to be carried out by each respective ATM that includes the respective EPP from which the respective PIN data was received,

g) through operation of the at least one processor, causing the host system to communicate a respective message to each respective ATM responsive at least in part to each respective determination, whereby the cash dispensers of each ATM are operated by each ATM responsive at least in part to the respective determinations communicated by the host system.

24. The at least one article according to claim 23, wherein in (b) each key encrypting key corresponds to a terminal master key, and wherein in (c) each PIN encrypting key corresponds to a communication key.

25. The at least one article according to claim 23, and further comprising:

(h) prior to (b), through operation of the at least one processor, receiving a respective communication from each respective EPP,

wherein in (b) the at least one processor causes the respective key encrypting key to be communicated to each respective EPP responsive at least in part to the respective communication.

26. The at least one article according to claim 25, wherein in (h) a respective random number is included in each respective communication from each respective EPP to which a respective key encrypting key is communicated in (b).

27. The at least one article according to claim 26, wherein (b) includes the at least one processor operating to cause the respective random number received from the respective EPP in (h) to be communicated back to the respective EPP, when communicating each respective key encrypting key to each respective EPP.

28. At least one article of computer readable media including non-transitory computer executable instructions operative to cause at least one processor to carry out a method comprising:

through operation of the at least one processor, communicating with a plurality of cash dispensing automated teller machines (ATMs),

through operation of the at least one processor, authorizing banking transactions carried out through operation of the ATMs,

through operation of the at least one processor, receiving from an ATM from among the plurality of ATMs, data representative of a public key associated with the ATM,

through operation of the at least one processor, causing first encrypted data to be generated using the public key associated with the ATM and at least one asymmetric cryptography algorithm, wherein the first encrypted data includes data corresponding to a first key,

through operation of the at least one processor, causing to be sent to the ATM, at least one message including data corresponding to the first encrypted data,

through operation of the at least one processor, causing second encrypted data to be generated using the first key and at least one symmetric cryptography algorithm, wherein the second encrypted data includes data corresponding to a second key,

through operation of the at least one processor, causing to be sent to the ATM, at least one message including data corresponding to the second encrypted data,

through operation of the at least one processor, receiving from the ATM, at least one message including data corresponding to third encrypted data encrypted using the second key,

responsive at least in part to the data corresponding to the third encrypted data, through operation of the at least one processor, causing a determination to be made as to whether a banking transaction is authorized, and

through operation of the at least one processor, causing to be sent to the ATM, at least one message including data corresponding to the determination as to whether the banking transaction is authorized.

29. At least one article of computer readable media including non-transitory computer executable instructions operative to cause at least one processor to carry out a method comprising:

through operation of the at least one processor, communicating with a plurality of cash dispensing automated teller machines (ATMs) that each include a cash dispenser and an encrypting pin pad (EPP),

through operation of the at least one processor, using public key cryptography to securely transfer a respective key encrypting key to each respective EPP,

through operation of the at least one processor, using each respective key encrypting key with a symmetric cryptography algorithm to securely transfer a respective personal identification number (PIN) encrypting key to each respective EPP,

through operation of the at least one processor, receiving from each respective EPP respective PIN data encrypted with the respective PIN encrypting key associated with each respective EPP,

through operation of the at least one processor, decrypting the respective PIN data received from each respective EPP using the respective PIN encrypting key associated with each respective EPP,

through operation of the at least one processor, using the respective PIN data received from each respective EPP to make a respective determination as to whether a respective cash dispense transaction is authorized to be carried out by each respective ATM that includes the respective EPP from which the respective PIN data was received,

through operation of the at least one processor, causing a respective message to be sent to each respective ATM responsive at least in part to each respective determination.