Banking machine that operates responsive to data bearing records

• US 8,225,990 B1
• Filed: 02/07/2011
• Issued: 07/24/2012
• Est. Priority Date: 09/27/2000
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Brausch, Thomas, Phillipi, Chris, Steinmetz, Richard A., Brunt, Richard P., Zahorec, Kenneth W.
• Primary Examiner(s): VO, TUYEN KIM
• Application Number:
  US12/931,654
• Time in Patent Office: 533 Days
• Field of Search: 235/379, 235/381, 705 39- 45, 602/8, 602/14, 602/18, 902/8, 902/14, 902/18, 902/12
• US Class Current: 235/379
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06Q 20/042 characterized in that the payment protocol involves at least one cheque
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs

Abstract

An automated banking machine operates to carry out financial transfers responsive to data read form data bearing records. The machine includes a card reader that operates to read data from user cards. The card data corresponds to financial accounts. The automated banking machine further includes a cash dispenser. The machine is operative to dispense cash to an authorized user based on identifying data including card data, and to cause a financial transfer from an account corresponding to card data through communication with at least one remote computer. The machine is operative to authorize the installation, use, and/or configuration of automated banking machine software applications and components.

Claims

1. An automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transactions, comprising:

a plurality of devices including;

a card reader operative to read card data on user cards corresponding to financial accounts;

a cash dispenser; and

a key pad,

wherein at least one of the devices includes a data store, wherein the data store includes hardware identification data (ID) stored therein;

at least one processor in operative connection with the at least one device that includes the hardware ID stored in the data store, wherein the at least one processor is operative to receive at least one digitally signed certificate that includes certificate data, wherein the at least one processor is operative to determine that at least one portion of the certificate data included in the at least one certificate and the hardware ID stored in the data store of the at least one device have a predetermined relationship, wherein responsive at least in part to the determination, the at least one processor is operative to configure the automated banking machine responsive at least in part to the at least one certificate.

2. The machine according to claim 1, wherein the at least one certificate includes at least one digital signature, wherein the at least one processor is operative to authenticate the at least one digital signature prior to configuring the automated banking machine responsive at least in part to the at least one certificate.

3. The machine according to claim 2, wherein the at least one processor is operative to receive the at least one certificate from a server in operative connection with the automated banking machine through a network.

4. The machine according to claim 2, wherein the hardware ID stored in the at least one device includes a serial number.

5. The machine according to claim 2, wherein the at least one processor is operative to prevent the automated banking machine from carrying out at least one transaction function responsive at least in part to the at least one processor determining that the at least one portion of the certificate data included in the at least one certificate and the hardware ID stored in the data store of the at least one device do not have the predetermined relationship.

6. The machine according to claim 5, wherein the at least one transaction function that the at least one processor is operative to prevent from being carried out includes dispensing cash through operation of the cash dispenser.

7. The machine according to claim 2, wherein the at least one processor is operative to configure the automated banking machine responsive at least in part to data corresponding to at least one key included in the certificate data of the at least one certificate.

8. The machine according to claim 2, wherein the certificate data of the at least one certificate includes data corresponding to a plurality of sets of configuration rules, with each set corresponding to at least one of a plurality of automated banking machines, wherein the at least one processor is operative to configure the automated banking machine responsive at least in part to at least one of the sets of configuration rules that corresponds to the automated banking machine.

9. The machine according to claim 2, wherein the at least one certificate corresponds to at least one software component authorized to be installed on the automated banking machine, wherein the at least one processor is operative to install the at least one software component on the automated banking machine responsive at least in part to the at least one certificate.

10. The machine according to claim 2, wherein the certificate data of the at least one certificate includes data corresponding to a terminal identification value, wherein the at least one processor is operative to configure the automated banking machine to associate the terminal identification value with the automated banking machine.

11. The machine according to claim 10, wherein the at least one processor is operative to prevent the automated banking machine from performing at least one transaction function responsive at least in part to the at least one processor determining that the terminal identification value associated with the automated banking machine has changed.

12. The machine according to claim 1, wherein the at least one portion of the certificate data included in the at least one certificate includes a hardware ID, wherein responsive at least in part to a determination that the hardware ID included in the certificate data corresponds to the hardware ID stored in the data store of the at least one device, the at least one processor is operative to configure the automated banking machine responsive at least in part to the at least one certificate.

13. An automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transactions, comprising:

a plurality of devices including;

a card reader operative to read card data on user cards corresponding to financial accounts;

a cash dispenser; and

a key pad,

wherein at least one of the devices includes a serial number stored therein;

at least one processor in operative connection with the at least one device that includes the serial number stored therein, wherein the at least one processor is operatively programmed to configure the automated banking machine responsive at least in part to at least one digitally signed certificate, in response at least in part to the at least one processor determining that at least one portion of the at least one certificate and the serial number stored in the at least one device have a predetermined relationship.

14. The machine according to claim 13, wherein the at least one processor is operatively programmed to prevent the automated banking machine from carrying out at least one transaction function responsive at least in part to the at least one processor determining that the at least one portion of the at least one certificate and the serial number stored in the at least one device do not have the predetermined relationship.

15. The machine according to claim 14, wherein the at least one transaction function that the at least one processor is operatively programmed to prevent from being carried out includes dispensing cash through operation of the cash dispenser.

16. The machine according to claim 13, wherein the at least one processor is operatively programmed to configure the automated banking machine responsive at least in part to data corresponding to at least one key included in the at least one certificate.

17. The machine according to claim 13, wherein the at least one portion of the at least one certificate includes a serial number, wherein the at least one processor is operatively programmed to configure the automated banking machine responsive at least in part to the at least one digitally signed certificate, in response at least in part to the at least one processor determining that the serial number included in the at least one certificate corresponds to the serial number stored in the at least one device.

18. An automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transactions, comprising:

a plurality of devices including;

a card reader operative to read card data on user cards corresponding to financial accounts;

a cash dispenser; and

a key pad,

wherein at least one of the devices includes a data store, wherein the data store includes hardware identification data (ID) stored therein;

at least one processor in operative connection with the at least one device that includes the hardware ID stored in the data store,

wherein the at least one processor is operative to receive at least one digitally signed certificate that includes certificate data,

wherein the certificate data of the at least one certificate further includes data corresponding to an expiration parameter,

wherein the at least one certificate corresponds to at least one software component authorized to be installed on the automated banking machine,

wherein the at least one certificate includes at least one digital signature, wherein the at least one processor is operative to authenticate the at least one digital signature,

wherein the at least one processor is operative to determine that at least one portion of the certificate data included in the at least one certificate and the hardware ID stored in the data store of the at least one device have a predetermined relationship,

wherein responsive at least in part to the determination, the at least one processor is operative to configure the automated banking machine with an install of the at least one software component on the automated banking machine responsive at least in part to the at least one certificate,

wherein the at least one processor is operative to prevent configuration of the at least one software component responsive at least in part to the expiration parameter.

19. The machine according to claim 18, wherein the at least one portion of the certificate data included in the at least one certificate includes a hardware ID, wherein responsive at least in part to a determination that the hardware ID included in the certificate data corresponds to the hardware ID stored in the data store of the at least one device, the at least one processor is operative to configure the automated banking machine with the installation of the at least one software component on the automated banking machine responsive at least in part to the at least one certificate.

20. Apparatus comprising:

an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transactions, wherein the automated banking machine includes a plurality of devices including;

a card reader operable to read card data on user cards corresponding to financial accounts; and

a keypad,

wherein at least one of the devices includes a data store, wherein the data store includes a hardware ID (identification data) stored therein; and

at least one processor, wherein the at least one processor is operable to receive at least one digitally signed certificate that includes certificate data, wherein the at least one processor is operable to determine that a portion of the certificate data included in the at least one certificate and the hardware ID stored in the data store of the at least one device have a predetermined relationship, wherein responsive at least in part to the determination, the at least one processor is operable to configure the automated banking machine responsive at least in part to the at least one certificate.

21. The apparatus according to claim 20, wherein the keypad includes a hardware ID stored therein, wherein the at least one processor is operable to determine that the portion of the certificate data included in the at least one certificate and the hardware ID included in the keypad have the predetermined relationship.

22. The apparatus according to claim 20, wherein the plurality of devices include a network device, wherein the network device includes a hardware ID stored therein, wherein the at least one processor is operable to determine that the portion of the certificate data included in the at least one certificate and the hardware ID included in the network device have the predetermined relationship.

23. The apparatus according to claim 20, wherein the plurality of devices include the at least one processor, wherein the at least one processor includes a hardware ID stored therein, wherein the at least one processor is operable to determine that the portion of the certificate data included in the at least one certificate and the hardware ID included in the at least one processor have the predetermined relationship.

24. The apparatus according to claim 20, wherein the portion of the certificate data included in the at least one certificate includes a hardware ID, wherein responsive at least in part to a determination that the hardware ID included in the at least one certificate corresponds to the hardware ID stored in the data store of the at least one device, the at least one processor is operable to configure the automated banking machine responsive at least in part to the at least one certificate.