System and method of securely installing a terminal master key on an automated banking machine
View Patent ↗An automated banking machine ( 12, 200, 302 ) is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP ( 204 ) that is operative to remotely receive an encrypted terminal master key from a host system ( 210, 304 ). The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device ( 30 ) of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.
1. A method comprising:
a) receiving at least one first input with an automated banking machine that includes a cash dispenser, wherein the at least one first input corresponds to a command to initiate a transfer of a terminal master key to the automated banking machine;
b) sending from the automated banking machine at least one first message to a host system, wherein the at least one first message includes first data representative of a request to transfer the terminal master key to the automated banking machine;
c) receiving with the automated banking machine at least one second message from the host system, wherein the at least one second message includes an encrypted terminal master key;
d) validating the second message; and
e) decrypting the terminal master key with a first private key of the automated banking machine.
2. The method according to claim 1 , wherein in step (d) the second message is validated using a first public key of the host system, and wherein prior to step (d) further comprising:
f) receiving with the automated banking machine, the first public key of the host system from the host system.
3. The method according to claim 2 , wherein in step (a) the at least one first input is received from a single operator through at least one input device of the machine, and wherein further comprising:
g) calculating a one-way hash of the first public key of the host system;
h) outputting through a display device of the automated banking machine the one-way hash; and
i) receiving at least one second input through the at least one input device of the automated banking machine that corresponds to a command to accept the first public key of the host system.
4. The method according to claim 2 , wherein in step (f) the first public key of the host system is included in a certificate of the host system, wherein further comprising:
g) validating the certificate of the host system using a public key associated with a certificate authority (CA).
5. The method according to claim 4 , and further comprising:
h) generating at least one third message, wherein the at least one third message includes second data;
i) signing the second data with a second private key of the automated banking machine; and
j) sending with the automated banking machine the at least one third message to the host system.
6. The method according to claim 5 , and further comprising:
k) sending through operation of the automated banking machine at least two certificates of the automated banking machine to the host system, wherein a first of the at least two certificates includes a first public key of the automated banking machine that corresponds to the first private key of the automated banking machine, wherein a second of the at least two certificates includes a second public key of the automated banking machine that corresponds to the second private key of the automated banking machine.
7. The method according to claim 5 , wherein prior to step (h) further comprising
k) receiving with the automated banking machine from the host system a second public key of the host system; and
l) encrypting the terminal master key with the second public key of the host system; and
wherein in step (h), the second data includes at least a portion of the terminal master key encrypted with the second public key of the host system.
8. The method according to claim 7 , wherein in step (c) the second message includes an encrypted first information, wherein step (e) includes decrypting the first information, wherein step (l) includes encrypting both the terminal master key and the first information with the second public key of the host system, wherein in step (h) the second data includes the terminal master key and the first information encrypted with the public key of the host system.
9. The method according to claim 5 , wherein in step (c) the second message includes an identity data for the host system, wherein in step (h) the second data includes the identity data.
10. The method according to claim 9 , wherein in step (c) the identity data is encrypted in the second message, wherein step (e) includes decrypting the identity data, wherein in step (h) the second data includes the decrypted identity data information.
11. The method according to claim 10 , wherein in step (c) the second message includes a random number associated with the host system, wherein in step (h) the second data includes the random number.
12. The method according to claim 6 , wherein prior to step (k) further comprising:
l) converting the certificates to a 7-bit ASCII format.
13. The method according to claim 1 , wherein prior to step (b) further comprising:
f) generating a first random number; and
wherein in step (b) the first message includes the first random number, wherein step (c) the second message includes a second number, wherein step (d) includes verifying that the first random number corresponds to the second number received in the second message.
14. The method according to claim 1 , wherein in step (a) the at least one first input corresponds to at least one third message received from the host system by the automated banking machine.
15. The method according to claim 14 , wherein in step (a) the third message corresponds to a Diebold 91X operational command message, wherein in step (b) the first message corresponds to a Diebold 91X solicited status message.
16. The method according to claim 1 , wherein in step (b) the first message corresponds to a Diebold 91X Unsolicited Status Message, wherein in step (c) the second message corresponds to a Diebold 91X Write Command Message.
17. The method according to claim 1 , wherein steps (d) and (e) are performed with an encrypting pin pad (EPP) of the automated banking machine.
18. The method according to claim 17 , further comprising:
f) determining that the terminal master key is a double-length key; and
g) switching in the EPP a current encryption algorithm from a Single-DES encryption algorithm to a double-length Triple-DES encryption algorithm.
19. The method according to claim 17 , further comprising:
f) determining that the terminal master key is a single-length key; and
g) switching in the EPP a current encryption algorithm from a double-length Triple-DES encryption algorithm to a Single-DES encryption algorithm.
20. The method according to claim 17 , further comprising:
f) receiving at least one third message from the host system;
g) decrypting the at least one third message to uncover a communication key using the terminal master key;
h) receiving the input of a personal identification number (PIN) through operation of the EPP of the automated banking machine;
i) encrypting with the EPP the PIN using the communication key; and
j) sending with the automated banking machine at least one fourth message to the host system, wherein the at least one fourth message includes the encrypted PIN.
21. The method according to claim 20 , wherein in step (i) the PIN is encrypted using a double-length key Triple-DES encryption algorithm, wherein in step (e) the terminal master key is decrypted using an RSA algorithm.
22. The method according to claim 20 , further comprising:
k) dispensing cash with the cash dispenser of the automated banking machine.
23. Computer readable media bearing instructions which are operative to cause at least one computer in the automated banking machine to cause the automated banking machine to carry out the method steps recited in claim 1 .
24. An automated banking machine apparatus comprising:
an automated banking machine, wherein the automated banking machine is operative to communicate with a host system, wherein the automated banking machine is operative to receive from the host system: a signed and encrypted terminal master key, an encrypted communication key, and at least one certificate of the host system, wherein the at least one certificate of the host system includes a verification public key of the host system wherein the automated banking machine includes:
at least one first processor; and
an encrypting pin pad (EPP) in operative connection with at least one first processor, wherein the EPP includes:
at least one second processor;
a hardware interface in operative connection with the at least one second processor, wherein the at least one second processor is operative to communicate with at least the first processor through the hardware interface;
a memory in operative connection with the at least one second processor, wherein the memory includes at least one public key of a certificate authority (CA) and at least one decipherment private key of the EPP; and
a keypad in operative connection with the at least one second processor, wherein the at least one second processor is operative to validate the certificate of the host system using the public key of the CA, wherein the at least one second processor is operative to validate the signed encrypted terminal master key using the verification public key of the host system, wherein the at least one second processor is operative to decrypt the signed encrypted terminal master key using the decipherment private key of the EPP, wherein the at least one second processor is operative to decrypt the encrypted communication key using the terminal master key, wherein the at least one second processor is operative to encrypt a personal identification number (PIN) inputted through the keypad using the communication key.
25. The machine according to claim 24 , wherein the automated banking machine includes:
at least one input device in operative connection with the at least one first processor;
a cash dispenser in operative connection with the at least one first processor, wherein the at least one first processor is operative to cause the cash dispenser to dispense currency responsive to at least one first input received through the at least one input device.
26. The machine according to claim 25 , wherein the automated banking machine further includes:
at least one output device in operative connection with the at least one first processor, wherein the at least one first processor is operative to output through the at least one output device a one-way hash of the verification public key of the host system, wherein the at least one first processor is operative to inform the at least one second processor that the one-way hash of the verification public key of the host system has been verified by an operator responsive to at least one second input received through the at least one input device that is representative of a confirmation that the public key of the certificate of the host system is valid.
27. The machine according to claim 25 , wherein the at least one second processor is operative to encrypt the PIN using a double-length key Triple-DES algorithm.
28. The machine according to claim 25 , wherein the at least one second processor is operative to decrypt the signed terminal master key, validate the signed terminal master key, and validate the certificate of the host system using RSA algorithms.
29. The machine according to claim 24 , wherein the at least one second processor is operative to generate the at least one decipherment private key of the EPP and at least one encipherment public key of the EPP.
30. The machine according to claim 29 , wherein the at least one second processor is operative to generate at least one signature private key of the EPP and at least one verification public key of the EPP, wherein the at least one second processor is operative to sign messages being sent to the host system using the at least one signature private key of the EPP.
31. The machine according to claim 30 , wherein the at least one second processor is operative to receive through the hardware interface, a primary encipherment/decipherment certificate of the EPP and a secondary encipherment/decipherment certificate of the EPP, wherein both the primary encipherment/decipherment certificate of the EPP and the secondary encipherment/decipherment certificate of the EPP include the at least one encipherment public key of the EPP, wherein the at least one second processor is operative to receive through the hardware interface both a primary signature/verification certificate of the EPP and a secondary signature/verification certificate of the EPP, wherein both the primary signature/verification certificate of the EPP and the secondary signature/verification certificate of the EPP include the at least one verification public key of the EPP.
32. The machine according to claim 24 , wherein the at least one second processor is operative to switch from using a Single-DES algorithm to a double-length Triple-DES algorithm for encrypting inputted PINs responsive to determining that the terminal master key received from the host system is a double-length key.
33. A method for improving the encryption capabilities of an automated banking machine that is operative to configure the machine with a terminal master key through the manual operations of a two-person team, wherein a first person must manually input a first value into the machine and a second person must manually input a second value into the machine, and wherein the machine constructs the terminal master key using both the first and second values, the method comprising:
a) disengaging an existing encrypting pin pad (EPP) from the automated banking machine, wherein the existing EPP is operative to receive at least a portion of a terminal master key constructed from two separate values manually inputted into the machine through at least one input device of the machine; and
b) installing an alternate EPP in the automated banking machine, wherein the alternate EPP is operative to receive an encrypted terminal master key from a host system.
34. The method according to claim 33 , wherein the alternate EPP installed in step (b) includes at least one first certificate stored therein.
35. The method according to claim 34 , wherein the alternate EPP installed in step (b) is operative to decrypt the terminal master key using a private key stored in the EPP.
36. The method according to claim 35 , wherein the alternate EPP installed in step (b) is operative to send the at least one first certificate to the host system.
37. The method according to claim 36 , wherein the alternate EPP installed in step (b) is operative to receive at least one second certificate from the host system.
38. The method according to claim 37 , wherein the alternate EPP installed in step (b) is operative to authenticate the terminal master key using a public key associated with the at least one second certificate.
39. The method according to claim 38 , wherein the alternate EPP installed in step (b) is operative to authenticate the at least one second certificate using a public key associated with a certificate authority (CA), wherein the public key associated with the CA is stored in the EPP.
40. The method according to claim 36 , wherein the alternate EPP installed in step (b) is operative to digitally sign a message using a private key associated with a public key in the at least one first certificate and is further operative to send the signed message to the host system.
41. The method according to claim 36 , wherein the alternate EPP installed in step (b) is operative to replace the at least one first certificate with at least one second certificate received from the host system.
42. The method according to claim 34 , wherein the alternate EPP installed in step (b) is operative to generate at least one public key and private RSA key pair.
43. A method of modifying an automated banking machine including a cash dispenser, which automated banking machine is operative to receive at least one encryption key used in the encryption of messages sent from the machine, and wherein the machine is adapted to receive the at least one encryption key through at least one manual input device on the machine, the method comprising:
a) disengaging an existing encryption key holding device from the machine, which existing encryption key holding device is adapted to hold the at least one encryption key received through the at least one manual input device; and
b) installing an encrypting pin pad on the machine, wherein the encrypting pin pad is adapted to hold at least one remotely delivered encryption key received by the machine from a remote host system.