Card activated cash dispensing automated banking machine
View Patent ↗An automated banking machine operates to cause financial transfers responsive to data read from data bearing records. The automated banking machine includes a card reader operative to read card data from user cards corresponding to financial accounts. The automated banking machine may include a display and a printer to produce records of financial transactions carried out with the machine. The automated banking machine is operative to authenticate firmware in at least one hardware component of the machine prior to causing the at least one hardware component to carry out a transaction function.
1. Apparatus comprising:
an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transfers, including
a plurality of hardware components,
wherein the plurality of hardware components include a card reader operative to read card data on user cards corresponding to financial accounts,
wherein at least one of the hardware components includes at least one processor and stored firmware content stored in the hardware component,
wherein the firmware content is operative to execute in the at least one processor of the at least one hardware component to cause the at least one hardware component to carry out at least one transaction function,
wherein the at least one of the processor of the at least one hardware component is operative to receive at least one measurement request message,
wherein the at least one of the processor of the at least one hardware component is operative responsive at least in part to the measurement request message to use at least a portion of the firmware content to generate a firmware certificate; and
at least one computer,
wherein the at least one computer is operative to receive the firmware certificate from the at least one hardware component,
wherein the at least one computer is operative to cause the firmware certificate to be authenticated,
wherein responsive at least in part to authentication of the firmware certificate, the at least one computer is operative to cause the at least one hardware component to perform the at least one transaction function, which includes execution of at least a portion of the firmware content by the at least one processor.
2. The apparatus according to claim 1 , wherein the at least one computer is operative to cause the measurement request message to be sent to the at least one hardware component.
3. The apparatus according to claim 2 , wherein the at least one computer is operative to cause a message to be sent to a host banking system, which causes the firmware certificate to be authenticated, wherein the least one computer is operative to receive an authorization message from the host banking system responsive at least in part to authentication of the firmware certificate.
4. The apparatus according to claim 2 , wherein the at least one hardware component corresponds to the card reader, wherein the at least one transaction function includes reading a card with the card reader.
5. The apparatus according to claim 2 , wherein the plurality of hardware components includes a cash dispenser, wherein the at least one hardware component corresponds to the cash dispenser, wherein the at least one transaction function includes dispensing cash with the cash dispenser.
6. The apparatus according to claim 2 , wherein the at least one computer is operative to authenticate the firmware certificate.
7. The apparatus according to claim 2 , wherein the at least one hardware component includes a key stored therein, wherein the at least one processor in the at least one hardware component is operative to use the key to generate the firmware certificate.
8. The apparatus according to claim 6 , wherein the measurement request message includes an initial value, wherein the at least one processor in the at least one hardware component is operative to use the key and the initial value to generate the firmware certificate.
9. The apparatus according to claim 8 , wherein the at least one processor in the at least one hardware component is operative to use a one-way hash function algorithm to generate the firmware certificate.
10. The apparatus according to claim 8 , wherein the at least one processor in the at least one hardware component is operative to use a symmetrical encryption algorithm to encrypt the firmware content to generate the firmware certificate.
11. The apparatus according to claim 10 , wherein the at least one processor in the at least one hardware component is operative to use a symmetrical encryption algorithm in Cipher Block Chaining mode to encrypt the firmware content to generate the firmware certificate.
12. The apparatus according to claim 10 , wherein the at least one processor in the at least one hardware component is operative to use a Cipher-Feedback Mode (CFB) MAC algorithm to encrypt the firmware content to generate the firmware certificate.
13. The apparatus according to claim 8 , wherein the at least one processor in the at least one hardware component is operative to encrypt a one way hash of the firmware content with a symmetrical encryption algorithm and the key to generate the firmware certificate.
14. The apparatus according to claim 8 , wherein the at least one processor in the at least one hardware component is operative to use a symmetrical encryption algorithm and the key to encrypt a combination of a one-way hash of the firmware content and the initial value to generate the firmware certificate.
15. The apparatus according to claim 8 , wherein the at least computer is operative to cause different certificate request messages to be sent at different respective times to the at least one hardware component, wherein each different certificate request message includes a different initial value.
16. The apparatus according to claim 6 , wherein the at least one computer is operative to determine an authorized value, wherein the at least one computer is operative to authenticate the firmware certificate responsive at least in part to a determination carried out by the at least one computer that the firmware certificate and the authorized value have a predetermined relationship.
17. The apparatus according to claim 16 , wherein the at least one computer is operative to prevent the at least one hardware component from carrying out the at least one transaction function responsive at least in part to the at least one computer determining that the firmware certificate and the authorized value do not have the predetermined relationship.
18. Apparatus comprising:
an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transfers, including
a plurality of hardware components,
wherein the plurality of hardware components include a card reader operative to read card data on user cards corresponding to financial accounts,
wherein at least one of the hardware components includes at least one processor,
wherein the at least one hardware component includes firmware content and at least one stored key,
wherein the firmware content is operative to execute in the at least one processor of the at least one hardware component to cause the at least one hardware component to carry out at least one transaction function,
wherein the at least one processor of the at least one hardware component is operative to receive data from at least one computer,
wherein the at least one of the processor of the at least one hardware component is operative to use at least a portion of the firmware content and at least a portion of the received data, and the at least one key to generate a firmware certificate; and
wherein the at least one of the processor of the at least one hardware component is operative to communicate the firmware certificate to the at least one computer.
19. The apparatus according to claim 18 , wherein the at least one of the processor of the at least one hardware component is operative to use a symmetrical encryption algorithm and the at least one key to encrypt at least a portion of the firmware content and at least a portion of the received data to generate the firmware certificate.
20. The apparatus according to claim 19 , further comprising the at least one computer, wherein the at least one computer is operative to determine an authorized value, wherein the at least one computer is operative to authenticate the firmware certificate responsive at least in part to a determination carried out by the at least one computer that the firmware certificate and the authorized value have a predetermined relationship, wherein responsive at least in part to authentication of the firmware certificate, the at least one computer is operative to cause the at least one hardware component to carry out the at least one transaction function.