Automated teller machine with an encrypting card reader and an encrypting pin pad

• US 9,373,114 B2
• Filed: 09/24/2013
• Issued: 06/21/2016
• Est. Priority Date: 02/25/2011
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Lewis, David N., Enright, Jeffery M., Ramachandran, Natarajan, Douglass, Mark A., Crews, Timothy, Ma, Songtao, Jenkins, Randall W., Graef, H. Thomas, Irudayam, Sathish M., Steinbach, Klaus
• Primary Examiner(s): VO, TUYEN KIM
• Application Number:
  US14/034,952
• Publication Number:
  US 20140081874A1
• Time in Patent Office: 1,001 Days
• Field of Search: 235379-383
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/308 using the Internet of Things
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: G07F 19/202 Depositing operations within ATMs depositing in general G07D11/00
• CPC Class Codes: G07F 19/203 Dispensing operations within ATMs dispensing in general G07D11/00
• CPC Class Codes: G07F 19/205 Housing aspects of ATMs
• CPC Class Codes: G07F 19/2055 Anti-skimming aspects at ATMs
• CPC Class Codes: G07F 7/0873 Details of the card reader

Abstract

A banking system operates responsive to data read from data bearing records. The system includes an automated banking machine comprising a card reader. The card reader includes a movable read head that can read card data along a magnetic stripe of a card that was inserted long-edge first. The card reader includes a card entry gate. The gate is opened for a card that is determined to be properly oriented for data reading. The card reader can encrypt card data, including account data. The machine also includes a PIN keypad. The card reader can send encrypted card data to the keypad. The keypad can decipher the encrypted card data. The keypad can encrypt both deciphered card data and a received user PIN. The card data and the PIN are usable by the machine to authorize a user to carry out a financial transfer involving the account.

Claims

1. A non-transitory, tangible computer readable medium of instructions with computer readable instructions stored thereon for execution by a processor, and when executed operable to:

obtain, by the processor, wherein the processor is an encrypting personal indentification number (PIN) pad processor, from a card reader, data associated with a financial account encrypted by a first key associated with the card reader;

decrypt, by the encrypting PIN pad processor, the data associated with the financial account encrypted by the first key;

obtain, by the encrypting PIN pad processor, data representative of a personal identification number (PIN) associated with the financial account from a keypad;

encrypt by the encrypting PIN pad processor, the decrypted data associated with the financial account and the PIN with a second key; and

transmit by the encrypting PIN pad processor, the data associated with the financial account and the PIN encrypted that were encrypted with the second key to a host computer.

2. The computer readable medium of claim 1, further operable to receive a request to dispense cash from the financial account;

and

transmit the request to dispense cash from the financial account to the host computer.

3. The computer readable medium set forth in claim 2, further operable to provide instructions to a cash dispenser to dispense cash responsive to obtaining authorization from the host computer to dispense cash.

4. The computer readable medium set forth in claim 1,

the instructions are further operable to compare data obtained from the card reader with card information stored in a data store.

5. The computer readable medium set forth in claim 4, wherein the card reader obtains the data associated with the financial account from a magnetic stripe of a card inserted into the card reader.

6. The computer readable medium set forth in claim 5, further operable to:

obtain data representative of encryption data used by the card reader to encrypt the data associated with the financial account; and

deciphering the data associated with the financial account employs the encryption data.

7. The computer readable medium set forth in claim 6, wherein the encryption data includes a random number.

8. The computer readable medium set forth in claim 7, wherein the instructions are further operable to:

generate the random number; and

communicate the random number to the card reader.

9. The computer readable medium set forth in claim 7, wherein the instructions are further operable to obtain the random number from the card reader.

10. The computer readable medium of claim set forth in claim 1, wherein the data associated with a financial account is determined from biometric data obtained from an associated user.

11. The computer readable medium of claim 1, wherein the first encryption key differs from the second encryption key.

12. A method, comprising:

obtaining by a processor of an encrypting personal identification number (PIN)pad data associated with a financial account from a card reader, that is encrypted by a first key associated with the card reader;

decrypting, by the processor of the encrypting PIN pad, data representative of a financial account number from the data associated with the financial account encrypted by the first key;

obtaining, by the processor of the encrypting PIN pad, data representative by a personal identification number (PIN) associated with the financial account from a keypad;

encrypting, by the processor of the encrypting PIN pad, the decrypted data representative of the financial account and the PIN with a second key; and

transmitting, by the processor of the encrypting PIN pad, the data representative of the financial account number and the PIN that have been encrypted with the second key to a host computer.

13. The method of claim 12, further comprising:

receiving a request to dispense cash from the financial account; and

transmitting the request to dispense cash from the financial account to the host computer.

14. The method of claim 13, further comprising providing instructions to a cash dispenser to dispense cash responsive to obtaining authorization from the host computer to dispense cash.

15. The method of claim 14, wherein the card reader is operable to encrypt an account number using the first encryption key and encryption data;

and

wherein the decrypting data representative of a financial account number from the data associated with the financial account encrypted by the first key employs the encryption data to decipher the account number encrypted by the card reader.

16. The method of claim 15, wherein the encryption data includes a random number.

17. The method of claim 16, further comprising:

generating the random number; and

communicating the random number to the card reader.

18. The method of claim 16, further comprising obtaining the random number from the card reader.

19. The method of claim 12, further comprising comparing data obtained from the card reader to be compared with card information stored in a data store.

20. The method of claim 12, wherein the first encryption key differs from the second encryption key.