Automated banking machine that operates responsive to data bearing records
View Patent ↗An automated banking machine operates responsive to data read from data bearing records to cause financial transfers. The machine includes a card reader that operates to read card data from user cards. The card data corresponds to financial accounts. The automated banking machine includes a cash dispenser and the machine carries out transaction functions for consumers including dispensing cash. The automated banking machine uses a trusted platform module to measure and authenticate components in the machine prior to dispensing cash.
1. Apparatus comprising:
an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transactions to be carried out, including:
a plurality of devices including:
a card reader operative to read card data on user cards corresponding to financial accounts;
a cash dispenser;
at least one computer in operative connection with the plurality of devices;
a housing, wherein the at least one computer and the plurality of devices are in operatively supported connection with the housing;
wherein the at least one computer includes a trusted platform module (TPM) in operative connection with the at least one computer inside the housing,
at least one software component operative to execute in the at least one computer, wherein the at least one computer is operative responsive to the at least one software component to cause the cash dispenser to dispense cash, wherein the at least one computer is operatively configured to use the TPM to produce at least one digitally signed measurement for the at least one software component executing in the at least one computer, wherein the at least one computer is operatively configured to cause the digitally signed measurement to be validated with respect to at least one reference measurement of the at least one software component prior to enabling the cash dispenser to dispense cash.
2. The apparatus according to claim 1 , wherein the cash dispenser includes at least one processor and a data store, wherein the at least one data store includes the at least one reference measurement stored therein, wherein the at least one digitally signed measurement includes a digital signature and at least one measurement, wherein prior to allowing the cash dispenser to dispense cash, the at least one processor of the cash dispenser is operatively configured to authenticate the digital signature using a public key associated with the TPM and verify that the at least one measurement included in the at least one digitally signed measurement corresponds to the at least one reference measurement stored in the at least one data store.
3. The apparatus according to claim 2 , wherein at least one computer is operatively configured to use the TPM to generate at least one hash for the at least one software component, wherein the at least one processor is operatively configured to send at least one random number to the at least one computer, wherein the at least one computer is operatively configured to cause the TPM to cryptographically sign a combination of the at least one hash and the at least one random number to form the at least one digitally signed measurement, wherein the at least one digitally signed measurement includes the digital signature, the at least one hash, and the at least one random number, wherein prior to allowing the cash dispenser to dispense cash, the at least one processor in the cash dispenser is operatively configured to verify that the at least one random number sent to the least one computer corresponds to the at least one random number included in the digitally signed measurement.
4. The apparatus according to claim 2 , wherein the at least one software component comprises a plurality of software applications executing in the at least one computer.
5. The apparatus according to claim 2 , further comprising a chest and at least one input device, wherein the chest includes a door, wherein at least portions of the cash dispenser are mounted within the chest, wherein the at least one input device is mounted within the chest and is only accessible to a user when the chest door is in an open position, wherein the at least one processor is operatively configured to store the at least one reference measurement in the at least one data store of the cash dispenser responsive to an input received through operation of the input device by the user.
6. The apparatus according to claim 5 , wherein the at least one computer is operatively configured to use the TPM to generate the at least one reference measurement for the at least one software component, wherein the at least one computer is operatively configured to send the at least one reference measurement to the cash dispenser.
7. The apparatus according to claim 5 , wherein the at least one computer is operatively configured to access the at least one reference measurement for the at least one software component from a remote server, wherein the at least one computer is operatively configured to send the at least one reference measurement to the cash dispenser.
8. The apparatus according to claim 5 , wherein the computer includes at least one data store, further comprising a setup application, wherein the setup application is operative to cause the at least one computer to install the at least one software component and the at least one reference measurement in the at least one data store, wherein the at least one computer is operatively configured to send the at least one reference measurement to the cash dispenser.
9. The apparatus according to claim 2 , wherein the at least one reference measurement is cryptographically signed, wherein the at least one processor of the cash dispenser is operatively configured to authenticate the at least one reference measurement.
10. The apparatus according to claim 1 , wherein the at least one computer is operatively configured to send a public key associated with the TPM to the cash dispenser, wherein the at least one processor of the cash dispenser is operatively configured to authenticate the at least one digitally signed measurement using the public key.
11. The apparatus according to claim 10 , wherein the at least one computer is operatively configured to send a digital certificate to the cash dispenser, which digital certificate includes the public key associated with the TPM, wherein the at least one processor is operatively configured to authenticate the digital certificate using a public key of a certificate authority stored in the at least one data store of the cash dispenser.
12. The apparatus according to claim 1 , wherein the at least one processor in the cash dispenser is operatively configured to determine that at least one second digitally signed measurement received from the at least one computer is not valid, wherein responsive to determining that the at least one second digitally signed measurement is not valid, the at least one processor is operatively configured to send a fault message to the at least one computer.
13. The apparatus according to claim 1 , wherein the at least one processor in the cash dispenser is operatively configured to send a challenge message to the at least one computer, wherein the at least one computer is operatively configured to send the at least one digitally signed measurement to the cash dispenser, responsive to the challenge message.
14. The apparatus according to claim 1 , wherein the TPM is compliant with a Trusted Computing Group TPM 1.2 Specification.
15. Apparatus comprising:
an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transfers, wherein the automated banking machine includes a plurality of devices including:
a card reader operative to read card data on user cards corresponding to financial accounts; and
a cash dispenser;
at least one computer in operative connection with the plurality of devices,
wherein the at least one computer includes a trusted platform module (TPM) in operative connection with the at least one computer,
wherein the at least one computer includes at least one software component that is operative to execute in the at least one computer to cause the cash dispenser to dispense cash,
wherein the at least one computer is operatively configured to use the TPM to produce at least one measurement based at least in part on data representative of the at least one software component,
wherein the at least one computer is operatively configured to cause the at least one measurement to be validated, prior to enabling the at least one software component to cause the cash dispenser to dispense cash.
16. The apparatus according to claim 15 , wherein at least one computer is operatively configured to cause at least one hash to be produced responsive at least in part to the data representative of the at least one software component, which hash corresponds to the at least one measurement, wherein the at least one computer is operatively configured to cause the TPM to cryptographically sign the at least one hash to form at least one digitally signed measurement.
17. The apparatus according to claim 16 , wherein the cash dispenser includes at least one processor, wherein the at least one computer is operatively configured to send the at least one digitally signed measurement to the at least one processor of the cash dispenser.
18. The apparatus according to claim 17 , wherein the at least one computer is operatively configured to send a public key associated with the TPM to the cash dispenser, wherein the at least one processor of the cash dispenser is operatively configured to authenticate the at least one digitally signed measurement using the public key.
19. The apparatus according to claim 18 , wherein the automated banking machine includes a chest and at least one input device, wherein the chest includes a door, wherein at least portions of the cash dispenser are mounted within the chest, wherein the at least one input device is mounted within the chest and is only accessible to a user when the chest door is in an open position, wherein the at least one processor is operatively configured to cause the at least one processor to use the at least one measurement to validate at least one further measurement of the at least one software component, responsive at least in part to an input received through operation of the input device by the user.
20. The apparatus according to claim 19 , wherein the at least one processor of the cash dispenser is operatively configured to validate the at least one further measurement prior to permitting the cash dispenser to dispense cash in response to communications received from the at least one software component.