Granted Patent B2

US 9,311,470 · App. 12/596,073 · Granted Apr 12, 2016

Abstract

Claims (65)

1. A system for authenticating a user at a money transaction device, comprising:

a non-transitory removable storage medium that comprises a first storage area in which identification data for identifying the removable storage medium is stored, wherein data of a digital certificate is stored in the first storage area or in a further storage area of the removable storage medium; and

a data processing system in the money transaction device that is operable to be connected via a data transfer connection to the removable storage medium, wherein:

the identification data and the data of the digital certificate are transferred from the removable storage medium to the data processing system,

the data processing system processes the identification data and the data of the digital certificate and selectively authenticates the user,

only in response to successful authentication of the user, the data processing system transfers first data from the data processing system to the removable storage medium, and

write and read access to the removable storage medium only being allowed when a valid certificate is stored on the removable storage medium, said certificate authenticating the user as having authorization to write to and read from the removable storage medium;

wherein:

the certificate specifies a public key of an asymmetric key pair of the user;

the data processing system encrypts the first data with the public key to create encrypted first data that can be decrypted with a corresponding private key of the asymmetric key pair; and

only in response to the successful authentication of the user, the data processing system transfers the encrypted first data to the removable storage medium.

2. The system according to claim 1 , wherein the data processing system:

identifies the user,

selectively authenticates the identified user, and

only in response to the successful authentication of the identified user, assigns rights to the identified user based on (i) an identity of the identified user or (ii) a user group to which the identified user belongs.

3. The system according to claim 2 , wherein the user is identified by entering a user name, by a serial number of the removable storage medium, or by the digital certificate.

4. The system according to claim 1 , wherein:

the digital certificate is an attribute certificate,

the identification data and/or a password are used as attributes that are linked to the certificate by a certificate authority, and

the attribute certificate refers to at least one of (i) the attributes and (ii) a further certificate.

5. The system according to claim 1 , wherein the data processing system checks validity and/or authenticity of the digital certificate.

6. The system according to claim 1 , wherein the identification data includes manufacturer identification data and a serial number information code, and wherein the manufacturer identification data and the serial number information code are attributes of the certificate.

7. The system according to claim 1 , wherein the money transaction device is a cash deposit machine, a cash dispensing machine, a cash recycling machine, an automatic cash system, and/or a cash register system.

8. The system according to claim 1 , wherein the certificate has a fixed validity such that the certificate becomes invalid with expiration of the fixed validity and is no longer accepted by the data processing system.

9. The system according to claim 1 , wherein:

the non-transitory removable storage medium is an external hard disk and/or an external flash memory,

the removable storage medium connects to the data processing system via a USB interface.

10. The system according to claim 1 , wherein, only in response to the successful authentication of the user, the data processing system allows the first data to be transferred from the removable storage medium to a further data processing system.

11. The system according to claim 1 , wherein the certificate is created during an initialization process.

12. The system according to claim 1 , wherein the certificate is created according to the X.509 standard.

13. The system according to claim 1 , wherein:

the identification data is stored by a manufacturer during production of the removable storage medium as read-only data in the first storage area of the removable storage medium, which cannot be modified, and

the further storage area of the removable storage medium is rewritable.

14. The system according to claim 1 , wherein the digital certificate authorizes the user for execution of at least one application program by the data processing system.

15. The system according to claim 1 , wherein the data processing system checks whether the user is authorized for activating a function provided by a program of the data processing system and, only after a successful check, the function is activated and/or executed by the data processing system.

16. The system according to claim 1 , wherein a registration authority processes a request for a certificate and checks the request, a process for certification being enabled given a positive check.

17. A method for authenticating a service technician at a money transaction device, the method comprising:

connecting a non-transitory removable storage medium of the service technician to a data processing system in the money transaction device, wherein

a first storage area of the removable storage medium stores identification data for identifying the removable storage medium,

the removable storage medium is a pluggable flash memory without a controller, and

data of a digital certificate is stored in the first storage area or in a further storage area of the removable storage medium;

reading the identification data and the data of the digital certificate from the storage area of the removable storage medium;

transferring the identification data and the data of the digital certificate via a data transfer connection to the data processing system;

in the data processing system, processing the identification data and the data of the digital certificate to authenticate the service technician;

only in response to successful authentication of the service technician:

transferring first data from the data processing system to the removable storage medium, and

transferring the first data from the removable storage medium to a further data processing system not located in the money transaction device; and

write and read accesses to the removable storage medium only being allowed when a valid certificate is stored on the removable storage medium, said certificate authenticating the user as having authorization to write to and read from the removable storage medium;

wherein:

the certificate specifies a public key of an asymmetric key pair of the user;

the data processing system encrypts the first data with the public key to create encrypted first data that can be decrypted with a corresponding private key of the asymmetric key pair; and

only in response to the successful authentication of the user, the data processing system transfers the encrypted first data to the removable storage medium.

18. The method according to claim 17 wherein the further data processing system is a laptop computer of the service technician; and wherein the removable storage medium contains service and application programs that can only be executed by the data processing machine upon successful authentication of the service technician.

19. The method according to claim 17 , wherein the money transaction device is a cash deposit machine, a cash dispensing machine, a cash recycling machine, an automatic cash system and/or a cash register system.

20. A system for authenticating a user at a money transaction device, the system comprising:

a non-transitory removable storage medium including identification data identifying the removable storage medium;

a digital certificate stored on the removable storage medium, the digital certificate specifies a public key of an asymmetric key pair of the user, and identifies the user as having authorization to write to, and read from, the removable storage medium using the money transaction device;

a data processing system of the money transaction device;

a data transfer connection of the money transaction device configured to connect the removable storage medium to the data processing system of the money transaction device;

wherein upon connection of the removable storage medium to the data transfer connection:

the identification data and the digital certificate are transferred to the data processing system;

the data processing system selectively authenticates the user based on the identification data and the digital certificate, and grants read and write access to the removable storage medium;

subsequent to authentication of the user of the removable storage device, the data processing system transfers first data from the data processing system to the removable storage medium;

the data processing system encrypts the first data with the public key specified by the certificate to create encrypted first data that can be decrypted with a corresponding private key of the asymmetric key pair; and

the data processing system transfers the encrypted first data to the removable storage medium.

Assignments (9)