Banking machine that operates responsive to data bearing records

• US 8,608,057 B1
• Filed: 02/27/2012
• Issued: 12/17/2013
• Est. Priority Date: 12/26/2002
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Crews, Tim, Edwards, Judith, Konecny, Robert, Crallie, Charles E., Konecny, Anne E, McGinley, Joseph A.
• Primary Examiner(s): FRANKLIN, JAMARA ALZAIDA
• Application Number:
  US13/405,643
• Time in Patent Office: 659 Days
• Field of Search: 235/379, 705/64
• US Class Current: 235/379
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/206 Software aspects at ATMs
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network

Abstract

An automated banking machine operates responsive to data read from data bearing records to cause financial transfers. The machine includes a card reader that operates to read card data from user cards. The card data corresponds to financial accounts. The automated banking machine includes a cash dispenser and the machine carries out transaction functions for consumers including dispensing cash. The automated banking machine is operatively configured to securely receive card data from a card reader.

Claims

1. Apparatus comprising:

an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transfers, wherein the automated banking machine includes a plurality of hardware devices including;

a card reader operative to read card data from user cards, wherein the card data corresponds to financial accounts;

a cash dispenser;

an encrypting PIN pad (EPP); and

at least one computer processor in operative communication with the card reader, the cash dispenser, and the encrypting PIN pad, wherein the at least one computer processor is operative to cause;

a computer determination to be made that card data read from a user card corresponds to a financial account concerning which financial transfers are authorized to be conducted through machine operation; and

a financial transfer at least one of to the financial account, from the financial account, or any combination thereof responsive at least in part to the determination;

a trusted platform module (TPM) in operative connection with the at least one computer processor,

wherein the at least one computer processor is operative to use the TPM to establish secure communications between the at least one computer processor and at least one of the hardware devices.

2. The apparatus according to claim 1, wherein the at least one computer processor is operative to use the TPM to establish secure communications between the at least one computer processor and the card reader.

3. The apparatus according to claim 2, wherein the at least one card reader is operative to securely communicate to the at least one computer processor, card data read from the user card through operation of the card reader.

4. The apparatus according to claim 3, wherein the at least one card reader is operative to communicate encrypted card data to the at least one computer processor.

5. The apparatus according to claim 4, wherein the card data that is encrypted and communicated to the at least one computer processor includes an account number read from a user card.

6. The apparatus according to claim 5 wherein the card reader is operative to generate the encrypted card data responsive at least in part to at least one key.

7. The apparatus according to claim 6 wherein the card reader is operative to generate the encrypted card data responsive at least in part to at least one symmetrical session key.

8. The apparatus according to claim 7, wherein the at least one computer processor is operative to securely communicate the at least one session key to the card reader.

9. The apparatus according to claim 8, wherein at least one of the TPM, and the at least one computer processor, or any combination thereof is operatively configured to cause the encrypted card data to be decrypted using the at least one session key.

10. The apparatus according to claim 8, wherein the at least one computer is operatively configured to send a message to a host banking system responsive at least in part to the encrypted card data received from the at least one card reader.

11. The apparatus according to claim 8, wherein the at least one computer processor is operative to use the established secure communications to cause at least one command to be communicated to the card reader, which at least one command causes the card reader to operate.

12. The apparatus according to claim 11, wherein the card reader is operative to use the established secure communications to cause at least one status message to be communicated to the computer processor regarding the operation of the card reader.

13. The apparatus according to claim 8, wherein the at least one computer processor and the card reader are operative to carry out a key transport mechanism protocol which provides unilateral key transport of the session key to the card reader.

14. Apparatus comprising:

an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transfers, wherein the automated banking machine includes a plurality of hardware devices including;

a card reader operative to read card data from user cards, wherein the card data corresponds to financial accounts; and

at least one device operative to at least one of dispense cash, accept cash, or any combination thereof;

at least one computer processor in operative communication with the card reader and the at least one device operative to at least one of dispense cash, accept cash, or a combination thereof, wherein the at least one computer processor is operative to cause;

a computer determination to be made that card data read from a user card corresponds to a financial account concerning which financial transfers are authorized to be conducted through machine operation; and

a financial transfer at least one of to the financial account, from the financial account, or any combination thereof responsive at least in part to the determination;

a trusted platform module (TPM) in operative connection with the at least one computer processor,

wherein the at least one computer processor is operative to use the TPM to securely receive card data read from a user card through operation of the card reader.

15. The apparatus according to claim 14, wherein the card data securely received by the at least one computer processor includes a financial account number read from a user card through operation of the card reader.