Self-service terminal (SST) safe and methods of operating a lock for the SST safe
A Self-Service Terminal (SST) safe that includes a lock drive adapted and configured to i) operate inside the SST safe, ii) receive a wireless code sent from outside the SST safe, and iii) determine whether to lock or unlock the SST safe from inside the SST safe in response to the wireless code, and wherein the wireless code is cryptographically secured and authenticated prior to any unlock or lock operation.
1. A method, comprising:
obtaining, by a Self-Service Terminal (SST) safe, an encrypted master key over a network connection;
providing, by the SST safe, the encrypted master key to a secure micro controller within the SST safe for decrypting the master key with a private key of the SST safe maintained within the secure micro controller;
receiving, completely within the SST safe, a code and a user identifier;
verifying, completely within the SST safe, the code by the secure micro controller processing the code and comparing against the decrypted master key;
determining completely within the SST safe whether to automatically and electronically unlock or lock the SST safe from an inside of SST safe based on two-factor authentication that includes at least a portion of the code and the user identifier; and
providing access to the SST when the SST safe is unlocked through a safe door having a handle, wherein the safe door is devoid of any holes for affixing the handle to the safe door.
2. The method of claim 1 , wherein receiving further includes obtaining the code over a wired signal sent from an SST controller external to the SST safe.
3. The method of claim 1 , wherein receiving further includes obtaining the code over a short-range wireless signal sent from a wireless device in proximity to an SST to which the SST safe is integrated within.
4. The method of claim 1 , wherein verifying further includes supplying the code to the secure micro controller located within the SST safe to perform cryptographic operations on the code and to compare against the decrypted master key, and obtaining a result from the secure micro controller indicating whether the at least a portion of the code is verified.
5. The method of claim 4 , wherein obtaining the result further includes obtaining a valid unlock command and a valid re-lock command with the result.
6. The method of claim 1 further comprising one of:
automatically and electronically unlocking the safe door of the SST safe from inside the safe in response to the at least a portion of the code and the user identifier; and
automatically and electronically locking the safe door from inside the safe in response to the at least a portion of the code and the user identifier.
7. A method, comprising:
cryptographically communicating initial key information to a Self-Service Terminal (SST) safe over a network connection by providing an encrypted master key over the network connection that is encrypted with a public key of the SST safe; and
dynamically supplying transactional cryptographic keys to authenticated requestors, each transaction cryptographic key unique to a unique transaction for operating the SST safe made by a unique requestor, and the SST safe can independently reproduce each transactional cryptographic key by processing the initial key information from completely within an inside of the SST safe and utilizing a decrypted version of the encrypted master key that is decrypted with a private key of the SST safe, wherein the private key remains in a secure micro controller within the SST safe, wherein the SST safe processes two-factor authentication for each transaction cryptographic key, completely within the inside of the SST safe, to determine whether to lock or unlock the SST safe from within an inside of the SST safe based on a specific transaction cryptographic key and a requestor identifier for a specific requestor, and wherein the SST safe is opened through a safe door that includes a handle and the safe door is devoid of any holes for affixing the handle to the safe door.
8. The method of claim 7 , wherein cryptographically communication further includes wirelessly communicating with a lock drive of the SST safe to supply the initial key information.
9. The method of claim 7 , wherein cryptographically communication further includes communicating the initial key information to an SST controller of an SST to which the SST safe is integrated within, the SST controller relaying the initial key information to the SST safe, and wherein the initial key information is encrypted and cannot be decrypted by the SST controller.
10. The method of claim 7 , wherein dynamically supplying further includes using verified identifiers associated with the requestors as at least a portion of the transactional cryptographic keys.