Banking machine that operates responsive to data bearing records

• US 8,448,850 B1
• Filed: 07/20/2012
• Issued: 05/28/2013
• Est. Priority Date: 09/27/2000
• Status: Expired due to Fees

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Brausch, Thomas, Phillipi, Chris, Steinmetz, Richard A., Brunt, Richard P., Zahorec, Kenneth W.
• Primary Examiner(s): VO, TUYEN KIM
• Application Number:
  US13/554,338
• Time in Patent Office: 312 Days
• Field of Search: 235/379, 235/381, 235/383, 705 39- 45
• US Class Current: 235/379
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06Q 20/042 characterized in that the payment protocol involves at least one cheque
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs

Abstract

An automated banking machine operates to carry out financial transfers responsive to data read form data bearing records. The machine includes a card reader that operates to read data from user cards. The card data corresponds to financial accounts. The automated banking machine further includes a cash dispenser. The machine is operative to dispense cash to an authorized user based on identifying data including card data, and to cause a financial transfer from an account corresponding to card data through communication with at least one remote computer. The machine is operative to authorize the installation, use, and/or configuration of automated banking machine software applications and components.

Claims

1. A method carried out in connection with an apparatus including an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transfers,

wherein the automated banking machine includes a plurality of devices including:

at least one reader,

wherein the at least one reader is operative to read user data usable to identify a financial account, and

a cash dispenser,

wherein the cash dispenser is operative to dispense cash to authorized users of the automated banking machine,

wherein the apparatus includes at least one computer associated with the automated banking machine, wherein the at least one computer is operable to cause at least one of the devices in the automated banking machine to operate,

wherein the method comprises;

a) through operation of the at least one computer associated with the automated banking machine, receiving at least one digitally signed certificate that includes certificate data, wherein the at least one digitally signed certificate includes identification data associated with the automated banking machine;

b) through operation of the at least one computer associated with the automated banking machine, receiving through operation of one of the devices included in the automated banking machine, identification data;

c) through operation of the at least one computer associated with the automated banking machine, determining that the identification data included in the at least one digitally signed certificate received in (a) and the identification data received in (b) have a predetermined relationship;

d) responsive at least in part to the determination in (c), through operation of the at least one computer associated with the automated banking machine, enabling the automated banking machine to operate to carry out a financial transaction responsive at least in part to user data read through operation of the at least one reader device from a data bearing record.

2. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 1, wherein in (a) the at least one reader includes a card reader.

3. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 2, wherein in (b) the at least one of the devices includes a data store, wherein the data store includes the identification data stored therein.

4. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 3, wherein in (b) the identification data received from the at least one of the devices includes a serial number.

5. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 1, wherein the at least one digitally signed certificate includes at least one digital signature, wherein further comprising:

e) through operation of the at least one computer associated with the automated banking machine, authenticating the at least one digital signature,

wherein (d) is further carried out responsive at least in part to (e).

6. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 1, wherein in (a) the at least one computer receives the at least one digitally signed certificate from a server through a network.

7. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 1, wherein the at least one computer in (a) is operative to prevent the automated banking machine from carrying out the financial transaction in (d) responsive at least in part to the at least one computer determining that the identification data included in the at least one digitally signed certificate received in (a) and the identification data received in (b) do not have the predetermined relationship.

8. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 7, wherein the financial transaction that the at least one computer is operative to prevent from being carried out in (d) includes dispensing cash through operation of the cash dispenser.

9. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 1, wherein (d) includes the at least one computer configuring the automated banking machine responsive at least in part to the at least one digitally signed certificate.

10. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 9, wherein (d) includes the at least one computer configuring the automated banking machine responsive at least in part to data corresponding to at least one key included in the at least one digitally signed certificate.

11. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 9, wherein the at least one digitally signed certificate includes data corresponding to a plurality of sets of configuration rules, with each set corresponding to at least one of a plurality of automated banking machines, wherein (d) includes the at least one computer configuring the automated banking machine responsive at least in part to at least one of the sets of configuration rules that corresponds to the automated banking machine.

12. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 9, wherein the at least one digitally signed certificate corresponds to at least one software component authorized to be installed on the automated banking machine, wherein (d) includes the at least one computer installing the at least one software component on the automated banking machine responsive at least in part to the at least one digitally signed certificate.

13. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 12, wherein the at least one digitally signed certificate further includes an expiration parameter, wherein the at least one computer in (a) is operatively configured to prevent configuration of the at least one software component responsive to the expiration parameter.

14. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 13, wherein the at least one digitally signed certificate includes data corresponding to a terminal identification value, wherein (d) includes the at least one computer configuring the automated banking machine to associate the terminal identification value with the automated banking machine.

15. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 14, wherein the at least one computer in (a) is operative to prevent the automated banking machine from performing the financial transaction function in (d) responsive at least in part to the at least one computer determining that the terminal identification value associated with the automated banking machine has changed.

16. A method carried out in connection with an apparatus including an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transfers,

wherein the automated banking machine includes a plurality of devices including:

at least one reader,

wherein the at least one reader is operative to read user data usable to identify a financial account,

a cash dispenser,

wherein the cash dispenser is operative to dispense cash to authorized users of the automated banking machine, and

a keypad,

wherein the apparatus includes at least one processor associated with the automated banking machine, wherein the at least one processor is operable to cause at least one of the devices in the automated banking machine to operate,

wherein the method comprises;

a) through operation of the at least one processor associated with the automated banking machine, receiving at least one digitally signed certificate that includes certificate data, wherein the at least one digitally signed certificate includes identification data associated with the automated banking machine;

b) through operation of the at least one processor associated with the automated banking machine, receiving through operation of one of the devices included in the automated banking machine, identification data;

c) through operation of the at least one processor associated with the automated banking machine, determining that the identification data included in the at least one digitally signed certificate received in (a) and the identification data received in (b) have a predetermined relationship;

d) responsive at least in part to the determination in (c), through operation of the at least one processor associated with the automated banking machine, configuring the automated banking machine responsive at least in part to the at least one digitally signed certificate.

17. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 16, wherein (d) includes enabling the automated banking machine to operate to carry out a financial transaction, which financial transaction is carried out responsive at least in part to user data read through operation of the at least one reader device from a data bearing record.

18. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 16, wherein the keypad includes a serial number stored therein, wherein the identification data received in (b) includes the serial number stored in the keypad.

19. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 16, wherein the plurality of devices include a network device, wherein the network device includes a hardware ID stored therein, wherein the identification data received in (b) includes the hardware ID stored in the network device.

20. The method carried out in connection with the apparatus comprising the automated banking machine according to claim 16, wherein the plurality of devices include the at least one processor, wherein the at least one processor includes a data store including a hardware ID stored therein, wherein the identification data received in (b) includes the hardware ID stored in the at least one data store.