Apparatus and method for verifying components of an ATM

• US 8,100,323 B1
• Filed: 05/31/2006
• Issued: 01/24/2012
• Est. Priority Date: 12/26/2002
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Crews, Tim, Edwards, Judith, McGinley, Joseph A., Crallie, Charles E., Doland, Anne E., Konecny, Robert
• Primary Examiner(s): FRANKLIN, JAMARA ALZAIDA
• Application Number:
  US11/421,120
• Time in Patent Office: 2,064 Days
• Field of Search: 235/379
• US Class Current: 235/379
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs

Abstract

An automated banking machine is provided which may comprise a trusted platform (TP) including a trusted platform module (TPM) in a computer of the machine. Through use of the TP, the machine may perform cryptographic functions for use in enabling the machine to perform transaction functions for users. The machine may be operative to use the TP to securely store secret keys, or other critical information in sealed storage on a data store of the machine. The TP may also be used to measure, attest, and verify transaction function devices, hardware devices, firmware, software, and/or other components of the machine prior to enabling the machine to function in an enabled mode. The TP may also be used to establish secure communication between components of the machine. The TP may also be used to perform key transfers between the machine and a host banking system.

Claims

1. A cash dispensing automated teller machine (ATM) comprising:

a housing;

a plurality of components including;

at least one computer operatively supported in the housing, wherein the at least one computer includes a trusted platform module (TPM); and

a cash dispenser operatively supported in the housing and in operative connection with the at least one computer;

wherein the at least one computer is operative to use the TPM to determine whether at least one of the components of the ATM has a current configuration that corresponds to a previously measured configuration of the at least one of the components, wherein the at least one computer is operative to cause the cash dispenser to dispense cash responsive at least in part to a determination by the at least one computer with the TPM that the current configuration corresponds to the previously measured configuration of the at least one of the components.

2. The ATM according to claim 1, wherein the at least one of the components includes a Basic Input-Output System (BIOS) of the at least one computer.

3. The ATM according to claim 1, wherein the at least one of the components includes at least one software component.

4. The ATM according to claim 3, wherein the at least one software component is operative in the at least one computer to cause the cash dispenser to dispense cash.

5. The ATM according to claim 3, wherein the at least one software component includes at least a portion of an operating system of the at least one computer.

6. The ATM according to claim 3, wherein the at least one computer is operative to cause a current hash to be generated based at least in part on data representative of the at least one software component, wherein the at least one computer is operative to determine that the current hash has a predetermined relationship with respect to a prior hash generated based at least in part on data representative of the at least one software component in order to determine that the current configuration corresponds to the previously measured configuration.

7. The ATM according to claim 6, wherein the at least one computer is operative to cause the prior hash to be stored in the ATM.

8. The ATM according to claim 3, wherein the at least one computer is operative to use the TPM to decrypt the at least one software component.

9. The ATM according to claim 1, wherein the at least one of the components includes a hardware device in operative connection with the at least one computer.

10. The ATM according to claim 1, wherein the at least one computer is operative to prevent the ATM from changing to a state capable of dispensing cash through operation of the cash dispenser responsive at least in part to a determination by the at least one computer with the TPM that the current configuration does not correspond to the previously measured configuration of the at least one of the components.

11. The ATM according to claim 1, wherein the TPM is mounted inside the housing of the ATM, wherein the at least one computer is operative to use the TPM to determine that the at least one of the components which corresponds to at least one of:

at least one software component that executes in the at least one computer; and

at least one hardware device mounted in the housing, which at least one hardware device includes a processor that is operative to communicate with the at least one computer,

has not been altered from the previously measured configuration.

12. A method of operating a cash dispensing automated teller machine (ATM) that includes a housing and a plurality of components including:

at least one computer operatively supported in the housing, wherein the at least one computer includes a trusted platform module (TPM); and

a cash dispenser operatively supported in the housing and in operative connection with the at least one computer, the method comprising;

a) through operation of the at least one computer, using the TPM to determine that at least one of the components of the ATM has a current configuration that corresponds to a previously measured configuration of the at least one of the components;

b) through operation of the at least one computer responsive at least in part to the determination in (a), causing the cash dispenser in the ATM to dispense cash.

13. The method according to claim 12, wherein in (a) the at least one of the components includes at least one of a Basic Input-Output System (BIOS) and an Extensible Firmware Interface (EFI) of the at least one computer.

14. The method according to claim 12, wherein in (a) the at least one of the components includes at least one software component.

15. The method according to claim 14, wherein (b) includes through operation of the at least one software component in at least one computer of the ATM, causing the cash dispenser to dispense cash.

16. The method according to claim 14, wherein in (a) the at least one software component includes at least a portion of an operating system of the at least one computer.

17. The method according to claim 14, wherein (a) includes:

c) generating a current hash based at least in part on data representative of the at least one software component and determining that the current hash has a predetermined relationship with respect to a prior hash generated based at least in part on data representative of the at least one software component.

18. The method according to claim 17, further comprising:

d) prior to (a), generating the prior hash based at least in part on the data representative of the at least one software component;

e) prior to (a), storing the prior hash in the ATM.

19. The method according to claim 14, further comprising:

through operation of the TPM, decrypting the at least one software component.

20. The method according to claim 12, wherein in (a) the at least one of the components includes a hardware device in operative connection with the at least one computer.

21. The method according to claim 12, further comprising:

c) through operation of the at least one computer, using the TPM to determine that the at least one of the components has a configuration that does not correspond to the previously measured configuration;

d) responsive to (c), preventing the ATM from changing to a state capable of dispensing cash through operation of the cash dispenser.

22. The method according to claim 12, wherein in (a) the TPM is at least substantially compliant with at least one Trusted Computing Group TPM 1.2 Specification.

23. The method according to claim 12, wherein the TPM is mounted inside the housing of the ATM, wherein the at least one of the components in (a) includes at least one of:

at least one software component that executes in the at least one computer; and

at least one hardware device mounted in the housing, which at least one hardware device includes a processor that is operative to communicate with the at least one computer.