Granted Patent B2

US 9,224,144 · App. 14/590,525 · Granted Dec 29, 2015

Abstract

Claims (50)

1. An apparatus, comprising:

an input device associated with an automated banking machine, the input device comprising a first processor and the automated banking machine comprising a second processor;

the first processor is operable to employ asymmetric encryption cryptography to obtain a terminal master key from the second processor;

the first processor is operable to employ a symmetric encryption cryptography algorithm using the terminal master key to obtain a communication key from the second processor;

the first processor is operable to receive data representative of the personal identification number for authorizing a financial transaction with a financial account;

the first processor is operable to encrypt the data representative of the personal identification number with the communication key to enable the second processor to determine whether a financial transaction with the financial account is authorized based on the data representative of the personal identification number.

2. The apparatus set forth in claim 1 , the automated banking machine further comprising a cash dispenser;

wherein the financial transaction comprises data representative of an amount of cash; and

wherein the second processor is operable to enable the cash dispenser to dispense the amount of cash responsive to determining the financial transaction is authorized.

3. The apparatus set forth in claim 1 , wherein the input device comprises a keypad; and

wherein an input representative of the personal identification number is received via the keypad.

4. The apparatus set forth in claim 1 , the automated banking machine further comprising a card reader that is communicatively coupled with the second processor;

wherein the second processor is operable to obtain the data representative of the financial account based on data received from the card reader.

5. The apparatus set forth in claim 1 , wherein the first processor is operable to cause data representative of a random number to be sent to the second processor; and

wherein the first processor is operable to receive the random number with the terminal master key.

6. The apparatus set forth in claim 1 , wherein the second processor is operable to sign the terminal master key with a digital signature.

7. The apparatus set forth in claim 1 , wherein the first processor is operable to cause an acknowledgement to be sent to the second processor indicating that the communication key has been successfully transferred.

8. The apparatus set forth in claim 1 , wherein the second processor is located remotely from the input device, the automated banking machine further comprising a third processor located locally to the input device, wherein the third processor is communicatively coupled with the first processor and the second processor.

9. The apparatus set forth in claim 8 , wherein the third processor sends a signal to the second processor indicating that the financial transaction is authorized.

10. The apparatus set forth in claim 1 , wherein the second processor is located remotely from the input device; and,

wherein the second processor is communicatively coupled with a plurality of input devices at a plurality of locations.

11. The apparatus set forth in claim 10 , wherein the second processor establishes a plurality of communication keys corresponding to the plurality of input devices; and

wherein the second processor employs a communication key corresponding to a selected one of the plurality of input devices for communicating with the selected one of the plurality of input devices.

12. The apparatus set forth in claim 10 , wherein the second processor establishes a plurality of terminal master keys corresponding to the plurality of input devices; and

wherein the second processor employs a terminal master key corresponding to a selected one of the plurality of input devices to provision the selected one of the plurality of input devices with a communication key.

13. A non-transitory, tangible computer readable medium of instructions comprising instructions for execution by a processor, and when executed operable to:

employ asymmetric encryption to obtain a terminal master key from a second processor associated with an automated banking machine;

employ the terminal master key with a symmetric encryption cryptography algorithm to obtain a communication key from the second processor;

obtain data representative of a financial account;

receive data representative of a personal identification number for authorizing a financial transaction with the financial account from an input device;

encrypt the data representative of the personal identification number with the communication key;

receive from the input device data representative of a request for a financial transaction associated with a financial account associated with the data representative of the personal identification number; and

cause the request or the financial transaction to be forwarded to the automated banking machine.

14. The computer readable medium of instructions set forth in claim 13 , wherein the financial transaction comprises data representative of an amount of cash; and

wherein the second processor is operable to signal a cash dispenser to dispense the amount of cash responsive to authorizing the financial transaction based on the personal identification number received from the input device.

15. The computer readable medium of instructions set forth in claim 13 , wherein the input device comprises a keypad; and

wherein the data representative of the personal identification number is received via the keypad.

16. The computer readable medium of instructions set forth in claim 13 , the processor is further operable to receive data from a card reader; and

wherein the second processor is further operable to obtain the data representative of the financial account based on data received from the card reader.

17. The computer readable medium of instructions set forth in claim 13 , wherein the instructions are further operable to cause data representative of a random number to be sent to the second processor; and

wherein the instructions are operable to receive the random number with the terminal master key.

18. The computer readable medium of instructions set forth in claim 13 , wherein the i terminal master key is signed with a digital signature.

19. A method, comprising:

obtaining a terminal master key using asymmetric encryption from a processor associated with an automated banking machine;

obtaining a communication key employing the terminal master key using a symmetric encryption cryptography algorithm from the processor;

obtaining data representative of a financial account;

causing the data representative of a personal identification number to be sent to the processor, wherein the data representative of the personal identification number is encrypted with the communication key.

20. The method set forth in claim 19 , further comprising:

receiving from an input device data representative of a request for a financial transaction associated with a financial account associated with the data representative of the personal identification number; and

cause the request or the financial transaction to be forwarded to the automated banking machine.

Assignments (21)