Automated banking machine that operates responsive to data bearing records

• US 8,123,123 B1
• Filed: 06/08/2010
• Issued: 02/28/2012
• Est. Priority Date: 12/26/2002
• Status: Expired due to Term

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Doland, Anne E., McGinley, Joseph A., Konecny, Robert J., Crallie, Charles E., Edwards, Judith, Crews, Tim
• Primary Examiner(s): FRANKLIN, JAMARA ALZAIDA
• Application Number:
  US12/802,496
• Time in Patent Office: 630 Days
• Field of Search: 235/379, 705 50- 79
• US Class Current: 235/379
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs

Abstract

An automated banking machine operates responsive to data read from data bearing records to cause financial transfers. The machine includes a card reader that operates to read card data from user cards. The card data corresponds to financial accounts. The automated banking machine includes a cash dispenser and the machine carries out transaction functions for consumers including dispensing cash. The automated banking machine is operative to use an encrypting pin pad to produce screen data usable to generate a visual output on a display screen.

Claims

1. Apparatus comprising:

an automated banking machine that operates responsive to data read from data bearing records to cause financial transactions, including;

a plurality of devices including;

a card reader operative to read card data on user cards corresponding to financial accounts;

a cash dispenser;

at least one display device;

an encrypting pin pad (EPP), wherein the EPP includes at least one processor and a keypad, wherein the processor is operative to encrypt a personal identification number received through operation of the keypad;

at least one computer in operative connection with the plurality of devices;

a housing, wherein the at least one computer and the plurality of devices are in operatively supported connection with the housing;

wherein the at least one computer is operatively configured to receive encrypted screen data from a host banking system, wherein the at least one computer is operatively configured to cause the at least one processor of the EPP to decrypt the screen data, wherein the at least one computer is operatively configured to cause the at least one display device to produce a visual output corresponding at least in part to at least a portion of the decrypted screen data.

2. The apparatus according to claim 1, wherein the at least one computer includes a data store and a trusted platform module (TPM) in operative connection with the at least one computer in the housing, wherein after the screen data is decrypted by the at least one processor of the EPP, the at least one computer is operatively configured to use the TPM to encrypt the screen data and store the encrypted screen data in the at least one data store, wherein the at least one computer is operatively configured to use the TPM to decrypt the portion of the screen data stored in the data store, wherein the at least one computer is operatively to cause the at least one display device to output a visual user interface responsive at least in part to the portion of the screen data decrypted through use of the TPM.

3. The apparatus according to claim 2, wherein the at least one display device includes at least one processor, wherein the at least one processor in the at least one display device is operative to generate the visual user interface responsive at least in part to the portion of the screen data decrypted through use of the TPM.

4. The apparatus according to claim 3, wherein the TPM is compliant with a Trusted Computing Group TPM 1.2 Specification.

5. The apparatus according to claim 4, wherein the at least one markup language document includes XML.

6. The apparatus according to claim 1, wherein the screen data includes at least one markup language document.

7. The apparatus according to claim 1, wherein the at least one markup language document includes HTML.

8. The apparatus according to claim 1, wherein the screen data includes at least one image file.

9. The apparatus according to claim 1, wherein the screen data includes at least one sound file.

10. The apparatus according to claim 1, wherein the automated banking machine includes at least one sound output device, wherein the at least one computer is operatively configured to cause the at least one sound output device to produce an audible sound corresponding to at least a portion of the screen data.

11. The apparatus according to claim 1, wherein the screen data received from the host banking system is digitally signed, wherein the at least one computer is operatively configured to cause the digitally signed screen data to be authenticated prior to use of the decrypted screen data by the at least one computer to cause the at least one display device to produce the output corresponding at least in part to the portion of the decrypted screen data.

12. The apparatus according to claim 1, further comprising the host banking system, wherein the host banking system is operatively configured to send encrypted screen data to a plurality of automated banking machines.

13. The apparatus according to claim 1, wherein the EPP includes a data store that includes a communication key stored therein, wherein the EPP is operative to use the communication key to both encrypt the PIN and to decrypt the encrypted screen data.

14. Apparatus comprising:

an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transactions, wherein the automated banking machine includes a plurality of devices including;

a card reader operative to read card data on user cards corresponding to financial accounts,

at least one display, and

an encrypting pin pad (EPP), wherein the EPP includes at least one processor and a keypad, wherein the processor is operative to encrypt a personal identification number (PIN) received through operation of the keypad; and

at least one computer operative to communicate with the plurality of devices, wherein the at least one computer is operatively configured to receive encrypted screen data from a host banking system, wherein the at least one computer is operatively configured to cause the at least one processor of the EPP to decrypt the screen data, wherein the at least one computer is operatively configured to cause the at least one display to produce a visual output that includes indicia corresponding at least in part to at least a portion of the decrypted screen data.

15. The apparatus according to claim 14, wherein the decrypted screen data includes at least one of at least one image file, at least one sound file, and at least one markup language document.

16. The apparatus according to claim 14, wherein the at least one computer is operatively configured to cause the at least one processor of the EPP to authenticate a digital signature associated with the screen data received from the host banking system.

17. The apparatus according to claim 14, wherein the EPP includes a data store that includes a communication key stored therein, wherein the EPP is operative to use the communication key to both encrypt the PIN and to decrypt the encrypted screen data.