Valuable media handling device with security processor
A valuable media handling device is presented having two security processors. A top box for an escrow module of the valuable media handling device includes a master security processor. The master security processor is connected to a slave security processed located within a safe of the valuable media handling device via an internal bus connection. The master security processor controls and validates operations and modules of the valuable media handling device and the slave security processor controls and validates operations that access the safe for depositing or dispensing valuable media from the safe.
1. A method, comprising:
controlling and validating, by a first security processor located in a top box outside a safe of a valuable media handling device, modules of and operations being processed on the valuable media handling device, wherein controlling further includes receiving the operations over a Universal Serial Bus (USB) connection between the first security processor and a processing core of a platform that processes transaction applications on a Self-Service Terminal (SST);
wherein controlling and validating further includes:
interacting, by the first security processor, with a validation module located inside the top box along with the first security processor via a wired Ethernet connection between the first security processor and the validation module for performing cryptographic security processing on the modules and the operations;
controlling, by the first security processor, media validation operations being performed and validated on the valuable media handling device for valuable media being transported within the valuable media handling device;
communicating, by the first security processor over an internal bus connection, with a second security processor located in the safe of the valuable media handling device when a transaction operation being processed on the valuable media handling device requests access to the safe for depositing the valuable media into or dispensing the valuable media from the safe, wherein the only connection between the first security processor and the second security processor is the internal bus connection, and wherein the only connection accessible to the second security processor is the internal bus connection to the first security processor; and
processing, by the second security processor of the valuable media handling device, media cassette access operations and controlling, by the second secure processor, access to currency cassettes of the valuable media handling device when dispensing the valuable media from a currency cassette or when depositing the valuable media into the currency cassette of the valuable media handling device;
wherein the valuable media handling device is a peripheral device integrated into the SST, wherein the valuable media handling device is a depository.
2. The method of claim 1 , wherein controlling and validating further includes operating the first security processor as a master security processor for the valuable media handling device and operating the second security processor as a slave security processor for the valuable media handling device.
3. The method of claim 1 , wherein controlling and validating further includes, processing, by the first security processor, dynamic and real time encryption and decryption when validating the modules and operations.
4. The method of claim 1 , wherein communicating further includes, processing, by the second security processor, dynamic and real time encrypting and decryption when validating a dispense command to dispense the valuable media from the safe and when validating a deposit command to deposit the valuable media into the safe.
5. The method of claim 1 further comprising, erasing, by the first security processor, cryptographic keys from storage and memory when a Printed Circuit Board (PCB) mesh is broken based on a signal from a tamper responsive circuit.