Card activated cash dispensing automated banking machine firmware authentication system

• US 7,988,039 B1
• Filed: 12/17/2007
• Issued: 08/02/2011
• Est. Priority Date: 12/26/2002
• Status: Active Grant

• Current Assignee: Diebold Nixdorf, Incorporated
• Original Assignee: Diebold Self-Service Systems (Diebold Nixdorf, Incorporated)
• Inventors: Lopez de Oliveira, Luiz Alexandre, Soares de Castro, Marcelo, Muschellack, Erich
• Primary Examiner(s): Le; Thien M.
• Assistant Examiner(s): VO, TUYEN KIM
• Application Number:
  US12/002,836
• Time in Patent Office: 1,324 Days
• Field of Search: 235/379, 235/380, 235/381, 235/382, 235/382.5, 705 39- 45, 902/8, 902/14, 902/25, 902/26
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/042 characterized in that the payment protocol involves at least one cheque
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/207 Surveillance aspects at ATMs

Abstract

A card activated cash dispensing automated banking machine is provided which is operative to authenticate firmware in at least one hardware device of the machine. The hardware device is operative to generate through operation of at least one processor in the at least one hardware device a firmware certificate responsive to the at least one measurement request message and the firmware content. The automated banking machine is operative to send a message from the automated banking machine to a host banking system responsive to the firmware certificate. The host banking machine may authenticate the message and send the automated banking machine an authorization message for performing a transaction function with the automated banking machine. Such a transaction function may include dispensing cash with a cash dispenser of the automated banking machine.

Claims

1. A card activated cash dispensing automated banking machine comprising:

at least one computer;

a plurality of hardware devices in operative connection with the at least one computer,

wherein the hardware devices include a card reader and a cash dispenser;

wherein at least one of the hardware devices includes at least one processor and a firmware content stored in the hardware device,

wherein the firmware content is operative to execute in the at least one processor of the at least one hardware device to cause the at least one hardware device to carry out at least one transaction function,

wherein the at least one of the processor of the at least one hardware device is operative responsive to at least one measurement request message received from the at least one computer, to generate a firmware certificate using the firmware content,

wherein the at least one computer is operative to cause the firmware certificate to be authenticated,

wherein responsive to authentication of the firmware certificate, the at least one computer is operative to cause the at least one hardware device to perform the at least one transaction function, wherein in performing the at least one transaction function, the at least one processor executes the firmware content.

2. The machine according to claim 1, wherein the at least one computer is operative to send a message to a host banking system responsive to the firmware certificate, wherein the least one computer is operative to receive an authorization message from the host banking system representing authentication of the firmware certificate.

3. The machine according to claim 1, wherein the at least one hardware device corresponds to the cash dispenser, wherein the at least one transaction function includes dispensing cash with the cash dispenser.

4. The machine according to claim 1, wherein the at least one computer is operative to authenticate the firmware certificate.

5. The machine according to claim 1, wherein the at least one hardware device includes a key stored therein, wherein the at least one processor in the at least one hardware device is operative to generate the firmware certificate using the key.

6. The machine according to claim 5, wherein the measurement request message includes an initial value, wherein the at least one processor in the at least one hardware device is operative to generate the firmware certificate using the key and the initial value.

7. The machine according to claim 6, wherein the at least one processor in the at least one hardware device is operative to generate the firmware content using a cryptographic algorithm that includes a one-way hash function.

8. The machine according to claim 6, wherein the at least one processor in the at least one hardware device is operative to generate the firmware content by encrypting the firmware content using a symmetrical encryption algorithm.

9. The machine according to claim 6, wherein the at least one processor in the at least one hardware device is operative to generate the firmware content by encrypting the firmware content using a symmetrical encryption algorithm in Cipher Block Chaining mode.

10. The machine according to claim 6, wherein the at least one processor in the at least one hardware device is operative to generate the firmware content by encrypting a one way hash of the firmware content with a symmetrical encryption algorithm and the key.

11. The machine according to claim 6, wherein the at least one processor in the at least one hardware device is operative to generate the firmware content by encrypting a combination of a one way hash of the firmware content and the initial value with a symmetrical encryption algorithm and the key.

12. The machine according to claim 6, wherein the firmware certificate corresponds to a message authentication code.

13. The machine according to claim 1, wherein the at least one hardware device corresponds to the card reader, wherein the at least one transaction function includes reading a card with the card reader.