Card activated automated banking machine system and method

• US 8,146,801 B1
• Filed: 01/10/2008
• Issued: 04/03/2012
• Est. Priority Date: 12/20/2005
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Magee, Paul D., Block, James, Bayonnet, Anne, Motz, Ray, Steinbach, Klaus, Hartman, Joe, Crews, Tim, Barker, David A., Nelson, Donald S., Lute, Richard C.
• Primary Examiner(s): WALSH, DANIEL I
• Application Number:
  US12/008,348
• Time in Patent Office: 1,545 Days
• Field of Search: 235/375, 235/379, 235/380, 235/487, 705/43, 705/64, 705/73, 705/16, 705/44, 902/8, 902/20, 902/21
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/201 Accessories of ATMs
• CPC Class Codes: G07F 19/205 Housing aspects of ATMs

Abstract

A card actuated automated banking machine (10) is operative to carry out financial transactions responsive to data included on user cards. The machine includes a user interface (15) including a display (24). The user interface includes a card reader (16) which is operative to read data on user cards which identify at least one of user and a user'"'"'s financial accounts. A fascia of the machine includes a keypad (404, 438, 458) through which users input confidential data. Covers (400, 422, 430) prevent unauthorized persons from viewing confidential inputs to the keypad. Authorization signals assure that the display is operating in a manner that provides appropriate user instructions. A visual indicator is operative to indicate to a user that keypad inputs are being encrypted.

Claims

1. A method comprising:

(a) determining through operation of at least one processor in an automated banking machine,

wherein the machine includes

at least one data reader operable to read user data usable to identify a financial account,

a display, and

a cash dispenser,

wherein the machine is operable to carry out a transaction involving a financial account that corresponds to user data read by the at least one data reader,

responsive to operative communication of at least one authorization signal between the at least one processor and the display,

wherein the at least one authorization signal includes

a first authorization signal communicated by the at least one processor to the display, and

a second authorization signal communicated from the display to the at least one processor,

wherein at least a portion of one of the first authorization signal and the second authorization signal, is a function of at least a portion of a serial number associated with at least one of the at least one processor and the display,

that at least one of the display and the at least one processor is an authorized component authorized to operate in the automated banking machine;

(b) responsive to the determination in (a), causing the automated banking machine to carry out at least one transaction function responsive to operation of the at least one processor,

wherein the at least one transaction function includes providing at least one visible output through the display.

2. The method according to claim 1 wherein in (b) the at least one visible output includes an output prompting a machine user to input a personal identification number (PEN).

3. The method according to claim 1 wherein in (a) at least a portion of the second authorization signal is a function of the first authorization signal.

4. A method comprising:

(a) determining through operation of at least one processor in an automated banking machine,

wherein the machine includes

at least one data reader operable to read user data usable to identify a financial account,

a display, and

a cash dispenser,

wherein the machine is operable to carry out a transaction involving a financial account that corresponds to user data read by the at least one data reader,

responsive to operative communication of at least one authorization signal between the at least one processor and the display,

wherein the at least one authorization signal includes

a first authorization signal communicated by the at least one processor to the display, and

a second authorization signal communicated from the display to the at least one processor,

wherein at least a portion of one of the first authorization signal and the second authorization signal, is a function of a current time determined through operation of the at least one processor,

that at least one of the display and the at least one processor is an authorized component authorized to operate in the automated banking machine;

(b) responsive to the determination in (a), causing the automated banking machine to carry out at least one transaction function responsive to operation of the at least one processor,

wherein the at least one transaction function includes providing at least one visible output through the display.

5. The method according to claim 4 wherein in (b) the at least one visible output includes an output prompting a machine user to input a personal identification number (PIN).

6. The method according to claim 4 wherein in (a) at least a portion of the second authorization signal is a function of the first authorization signal.

7. A method comprising:

(a) determining through operation of at least one processor in an automated banking machine,

wherein the machine includes

at least one data reader operable to read user data usable to identify a financial account,

a display, and

a cash dispenser,

wherein the machine is operable to carry out a transaction involving a financial account that corresponds to user data read by the at least one data reader,

responsive to operative communication of at least one authorization signal between the at least one processor and the display,

wherein the at least one authorization signal includes

a first authorization signal communicated by the at least one processor to the display, and

a second authorization signal communicated from the display to the at least one processor,

wherein one of

at least a portion of the first authorization signal is encrypted using a first private key associated with the at least one processor,

and

at least a portion of the second authorization signal is encrypted using a second private key associated with the display,

that at least one of the display and the at least one processor is an authorized component authorized to operate in the automated banking machine;

(b) responsive to the determination in (a), causing the automated banking machine to carry out at least one transaction function responsive to operation of the at least one processor,

wherein the at least one transaction function includes providing at least one visible output through the display.

8. The method according to claim 7 wherein in (a) the first authorization signal is decrypted through operation of circuitry associated with the display using a first public key associated with the first private key.

9. The method according to claim 8 wherein in (a) the second authorization signal is decrypted through operation of the at least one processor using a second public key associated with the second private key.

10. The method according to claim 9 wherein in (a) at least a portion of the second authorization signal is a function of the first authorization signal.

11. The method according to claim 10 and further comprising:

(c) determining that one of the at least one processor and the display is not a component authorized to operate in the automated banking machine;

(d) responsive to the determination in (c), ceasing to provide at least one output through the display.

12. The method according to claim 11 and further comprising:

(e) responsive to determination in (c) sending at least one message from the automated banking machine to a computer remote from the automated banking machine.

13. The method according to claim 12 and further comprising:

(f) determining through operation of character recognition software in the at least one processor that the display is providing an output prompting the user to input a PIN.

14. The method according to claim 13 and further comprising:

(g) covering at least one key of a keypad with a flexible cover, wherein at least one key of the keypad is no longer digit accessible, responsive to operation of the at least one processor.

15. The method according to claim 7 wherein in (b) the at least one visible output includes an output prompting a machine user to input a personal identification number (PIN).

16. The method according to claim 7 wherein in (a) at least a portion of the second authorization signal is a function of the first authorization signal.

17. A method comprising:

(a) operating a display processor associated with a display of an automated banking machine

which comprises a plurality of transaction function components including at least one data reader operable to read user data usable to identify a financial account, and

which is operable to carry out a user transaction involving a financial account that corresponds to user data read by the at least one data reader;

to send independent of user input to the display, at least one machine processor authentication signal;

(b) determining through operation of the display processor,

responsive at least in part to (a),

whether received first signals provided by a first processor, were provided by an authorized processor of the machine; and

(c) responsive at least in part to the determination in (b), operating the display processor to either;

(ci) cause the display to produce during a user transaction with the machine, visual outputs that correspond to received visual output signals provided by the first processor, responsive to a positive determination in (b);

or

(cii) cause the display not to produce visual outputs that correspond to received visual output signals provided by the first processor, responsive to a negative determination in (b).

18. The method according to claim 17 and further comprising:

(d) operating the display processor to receive the first signals provided by the first processor;

wherein in (a) at least a portion the at least one machine processor authentication signal is encrypted using an encryption key associated with the display, and

wherein (b) includes determining whether the first signals received in (d) are encrypted using an encryption key associated with an authorized processor of the machine.

19. The method according to claim 17 wherein (a) occurs during a user transaction with the machine.

20. The method according to claim 17 wherein (cii) further includes operating the display processor to cause at least one message to be sent to a computer remotely located from the machine, wherein the at least one message indicates a possible fraud condition involving the display.

21. A method comprising:

(a) operating at least one processor associated with an automated banking machine

which comprises a plurality of transaction function components including a display and at least one data reader operable to read user data usable to identify a financial account, and

which is operable to carry out a user transaction involving a financial account that corresponds to user data read by the at least one data reader;

to determine whether the at least one processor received during a user transaction session with the machine, at least one display authentication signal

sent by the display independent of user input to the display,

which verifies the display as a component authorized to perform at least one transaction function in carrying out a user transaction with the machine during the user transaction session; and

(b) subsequent to (a), operating the at least one processor to either;

(bi) continue the user transaction, responsive to a positive determination in (a),

wherein continuing the transaction includes providing at least one visible output through the display;

or

(bii) discontinue the user transaction, responsive to a negative determination in (a), and

cause at least one message to be sent to a computer remotely located from the automated banking machine, wherein the at least one message indicates a potential condition involving the display.

22. The method according to claim 21 whether the machine includes a cash dispenser, wherein the user transaction comprises a cash withdrawal transaction, wherein (a) results in a positive determination, and wherein in (bi) the at least one visible output prompts a machine user to provide personal data to the machine.