Granted Patent B1

US 8,474,698 · App. 13/335,062 · Granted Jul 2, 2013

Abstract

Claims (29)

1. Apparatus comprising:

an automated banking machine that operates responsive at least in part to data read from data bearing records to cause financial transfers, wherein the automated banking machine includes a plurality of hardware devices including:

a card reader operative to read card data from user cards, wherein the card data corresponds to financial accounts;

a cash dispenser;

an encrypting PIN pad (EPP); and

at least one storage device;

at least one computer processor in operative communication with the card reader, the cash dispenser, the encrypting PIN pad, and the at least one storage device, wherein the at least one computer processor is operative to cause:

a computer determination to be made that card data read from a card corresponds to a financial account concerning which financial transfers are authorized to be conducted through machine operation; and

at least one financial transfer at least one of to the financial account, from the financial account, or any combination thereof, responsive at least in part to the determination;

a trusted platform module (TPM) in operative connection with the at least one computer processor,

wherein the at least one computer processor is operative to use the TPM to encrypt secret data, wherein the at least one computer processor is operative to cause the secret data to be decrypted by the TPM responsive at least in part to a determination that an at least one predetermined component stored in the automated banking machine remains unaltered, wherein the decrypted secret data is usable by at least one of the hardware devices to enable at least one of the hardware devices to facilitate financial transfers with the automated banking machine.

2. The apparatus according to claim 1 , wherein the at least one computer processor is operative to cause the TPM to encrypt the secret data in at least one sealed storage, wherein the sealed storage includes an encrypted file stored on the at least one storage device.

3. The apparatus according to claim 2 , wherein the at least one hardware device that is operative responsive at least in part to the secret data, includes the at least one storage device, wherein the secret data includes an authentication key.

4. The apparatus according to claim 3 , wherein the at least one storage device includes at least one storage device processor, wherein the at least one storage device includes at least one unsecured area and at least one secured area, wherein the at least one storage device processor is operative to use the authentication key to unlock the at least one secured area to enable the at least one computer processor to access information included in the at least one secured area, wherein the at least one storage device processor is operative to enable the at least one computer processor to access the information included in the at least one unsecured area when the at least one secured area is locked and prevented by the at least one storage device processor from being accessed by the at least one computer processor.

5. The apparatus according to claim 4 , further comprising at least one bootloader software component stored on the at least one unsecured area, wherein the automated banking machine is operative to cause the at least one bootloader software component to execute in the at least one computer processor, wherein the at least one bootloader software component is operative to cause the TPM to decrypt the authentication key from the at least one sealed storage, wherein the at least one bootloader software component is operative to cause the authentication key decrypted by the TPM to be sent to the at least one storage device processor to cause the at least one secured area to be unlocked.

6. The apparatus according to claim 5 , wherein the at least one secured area includes a plurality of encrypted operating system software components and a plurality of encrypted automated banking machine software components, wherein the at least one storage device processor is operative to decrypt the operating system software components and the automated banking machine software components included in the at least one secured area using a symmetrical key responsive at least in part to the at least one secured area being unlocked.

7. The apparatus according to claim 6 , wherein the at least one bootloader software component is operative to cause at least a portion of the operating system software components to be validated, and is operative to cause the at least one computer processor to initiate booting of at least one of the operating system software components by the at least one computer processor.

8. The apparatus according to claim 7 , wherein the TPM includes a plurality of platform configuration registers (PCRs), wherein the computer processor is operatively configured to cause at least one of the PCRs to be extended with a measurement of the at least one predetermined component, wherein the at least one bootloader software component is operative to cause the TPM to decrypt the authentication key from, the at least one sealed storage responsive at least in part to data stored in the at least one PCR, which data matches data previously stored in the at least one PCR when the at least one sealed storage was generated.

9. The apparatus according to claim 8 , wherein the at least one predetermined component includes at least one of a BIOS, an extensible firmware interface (EFI), a unified EFI (UEFI), or any combination thereof.

10. The apparatus according to claim 9 , wherein the at least one predetermined component corresponds to a plurality of predetermined components, wherein the computer processor is operatively configured to cause the at least one PCR to be extended with respective measurements of each of the respective predetermined components, wherein the at least one bootloader software component is operative to cause the TPM to decrypt the authentication key from the at least one sealed storage responsive at least in part to data stored in the at least one PCR with respect to the plurality of predetermined components, which data matches data previously stored in the at least one PCR when the at least one sealed storage was generated, wherein the predetermined components include the at least one bootloader software component.

11. The apparatus according to claim 10 , further comprising at least one policy file included in the at least one secured area, wherein the at least one policy file includes a list of software components to validate, wherein the at least one bootloader software component is operative to cause at least one of the portion of the operating system software components, a portion of the automated banking machine software components, or any combination thereof to be validated responsive at least in part to the at least one policy file.

12. The apparatus according to claim 11 , wherein the at least one bootloader software component is operative to validate the at least one policy file.

13. The apparatus according to claim 10 , wherein the at least one bootloader software component includes a boot manager software component, wherein the automated banking machine includes at least one display device and at least one input device, wherein the boot manager software component is operative to cause the computer processor to cause the at least one display device to output a user interface, wherein the user interface includes a plurality of user selectable options selectable via inputs through the at least one input device, wherein the user selectable options correspond to a plurality of respective functions of the at least one bootloader software component that are operative to configure the at least one storage device.

14. The apparatus according to claim 13 , wherein the predetermined components include the boot manager software component.

15. The apparatus according to claim 14 , wherein the automated banking machine includes at least one port in operative connection with the at least one computer processor, wherein the boot manager software component is operative to output a message that prompts a user to input a password through operation of the at least one input device, wherein responsive at least in part to at least one token device in operative connection with the at least one port and an input of the password through operation of the at least one input device, the boot manager software component is operative to cause the at least one computer processor to cause the at least one display device to output the user interface.

16. The apparatus according to claim 15 , wherein the plurality of user selectable options include at least one function of the at least one bootloader software component that is operative to cause the at least one computer processor to at least one of backup information, restore information, or any combination thereof to the at least one secured area of the at least one storage device.

17. The apparatus according to claim 15 , wherein the at least one token device includes a further authentication key, wherein the boot manager software component is operative responsive at least in part to the at least one token device in operative connection with the at least one port and the further authentication key to cause the at least one computer processor to cause the at least one display device to output a user selectable option associated with pairing the at least one storage device to the at least one computer processor, wherein the at least one bootloader software component is operative to cause the at least one computer processor to use the TPM to generate the at least one sealed storage responsive at least in part to selection of the user selectable option associated with pairing the at least one storage device to the at least one computer processor.

18. The apparatus according to claim 17 , wherein the boot manager software component is operative to cause the computer processor to cause the at least one display device to output challenge data, wherein the boot manager software component is operative to output a message through the display device that prompts a user to input response data through operation of the at least one input device, wherein the at least one boot manager software component is operative responsive at least in part to the challenge data and the response data to generate a further authentication key that is usable to be communicated to the at least one storage to device to cause the at least one storage device to unlock the at least one secured area.

19. The apparatus according to claim 15 , further comprising a bootloader restoration software component, wherein the bootloader restoration software component is operative to cause the at least one computer processor to write at least a portion of the at least one bootloader software component on a master boot record of the at least one storage device.

Assignments (24)