End-to-end secured currency dispensing
View Patent ↗A managing computing device positioned in an ATM can receive a dispense request for an amount of currency and account information from a user. A controller of a currency dispenser can generate a first number. The first number, the dispense request, and the account information can be sent to a remote, host computing device that shares a secret key with the controller. The host device can generate a first message authentication code (MAC) based on at least one of the first number and the amount of currency and can send it to the controller. The controller can generate a second MAC based on at least one of the first number and the amount of currency, confirm identity between the first and second MACs, and control the currency dispenser to dispense the amount of currency to the user.
1. A method of dispensing currency from an automated transaction machine (ATM) comprising:
receiving, with a managing computing device positioned in the ATM, a dispense request and account information from a user, the dispense request including an amount of currency to be dispensed from a currency dispenser positioned in the ATM;
generating, with a controller of the currency dispenser, a first number and storing the first number in a memory communicating with the controller;
receiving the first number at a host computing device that is physically remote from the ATM;
receiving, at the host computing device, the dispense request and the account information;
generating, with the host computing device, a first message authentication code by applying a signing algorithm to at least one of the first number and the amount of currency to be dispensed, the signing algorithm based on a cryptographic key;
receiving, at the controller of the currency dispenser, at least the first message authentication code from the host computing device;
receiving, at the controller of the currency dispenser, the amount of currency to be dispensed;
retrieving, with the controller of the currency dispenser, from the memory, the first number;
generating, with the controller of the currency dispenser, a second message authentication code by applying the signing algorithm to at least one of the first number and the amount of currency to be dispensed, the first number retrieved during said retrieving;
confirming, with the controller of the currency dispenser, identity between the first message authentication code and the second message authentication code;
dispensing, with the currency dispenser by the controller, the amount of currency in response to at least said confirming;
generating, with the controller of the currency dispenser, a fifth message authentication code by applying the signing algorithm to at least the first number and the amount of currency dispensed during said dispensing;
transmitting, with the controller of the currency dispenser, the fifth message authentication code to the host computing device;
generating, with the host computing device, a sixth message authentication code by applying the signing algorithm to the first number and the amount of currency to be dispensed; and
confirming, with the host computing device, identity between the fifth message authentication code and the sixth message authentication code.
2. The method of claim 1 wherein said generating the first message authentication code with the host computing device is further defined as generating the first message authentication code by applying the signing algorithm to at least the amount of currency to be dispensed.
3. The method of claim 2 wherein:
said receiving the amount of currency to be dispensed at the controller of the currency dispenser is further defined as receiving the amount of currency to be dispensed at the controller of the currency dispenser from the managing computing device; and
said generating the second message authentication code with the controller of the currency dispenser is further defined as generating, with the controller of the currency dispenser, the second message authentication code by applying the signing algorithm to at least the first number retrieved during said retrieving as well as the amount of currency to be dispensed received from the managing computing device.
4. The method of claim 3 wherein said confirming identity with the controller of the currency dispenser is further defined as confirming, with the controller of the currency dispenser, identity between the first message authentication code and the second message authentication code to thereby confirm that the amount of currency to be dispensed associated with the first message authentication code received from the host computing device is identical to the amount of currency to be dispensed that was received from the managing computing device.
5. The method of claim 4 further comprising:
transmitting, with the controller of the currency dispenser, a confirmation message to the managing computing device, wherein the confirmation message communicates that the amount of currency to be dispensed associated with the first message authentication code is identical to the amount of currency to be dispensed that was received from the managing computing device, said transmitting occurring before said dispensing; and
transmitting, with the managing computing device, in response to said transmitting the confirmation message, a dispense command to the controller of the currency dispenser, said transmitting the dispense command occurring before said dispensing; and
wherein said dispensing is further defined as dispensing, with the currency dispenser, the amount of currency in response to said confirming as well as said transmitting the dispense command.
6. The method of claim 1 wherein said generating the first message authentication code with the host computing device is further defined as generating the first message authentication code by applying the signing algorithm to a composite of the first number and the amount of currency to be dispensed.
7. The method of claim 6 further comprising:
transmitting, with the host computing device, only the first message authentication code to either of the controller of the currency dispenser and the managing computing device in response to said receiving the dispense request, the host computing device not transmitting the first number, the amount of currency to be dispensed, nor the composite of the first number and the amount of currency to be dispensed to either of the controller of the currency dispenser and the managing computing device in response to said receiving the dispense request.
8. The method of claim 1 further comprising:
transmitting, with the host computing device, only the first message authentication code to either of the controller of the currency dispenser and the managing computing device in response to said receiving the dispense request.
9. The method of claim 1 further comprising:
generating, with the controller of the currency dispenser, a third message authentication code by applying the signing algorithm to at least the first number, said generating the third message authentication code occurring before said receiving the first number at the host computing device; and
transmitting, with the controller of the currency dispenser, the third message authentication code and the first number to the managing computing device before said receiving the first number at the host computing device; and
transmitting, with the managing computing device, the third message authentication code, the first number, the dispense request, and the account information to the host computing device.
10. The method of claim 9 further comprising:
generating, with the host computing device, a fourth message authentication code by applying the signing algorithm to at least the first number received by said transmitting the third message authentication code; and
confirming, with the host computing device, identity between the third message authentication code and the fourth message authentication code, wherein said generating the first message authentication code occurs at least partially in response to said confirming identity between the third message authentication code and the fourth message authentication code.
11. The method of claim 9 wherein said dispensing is further defined as:
dispensing, with the currency dispenser by the controller, the amount of currency in response to at least said confirming unless greater than a predetermined period of time elapsed between said transmitting, with the controller of the currency dispenser, the third message authentication code and said receiving, at the controller of the currency dispenser, at least the first message authentication code from the host computing device.
12. The method of claim 1 wherein said generating the first number occurs before said receiving the dispense request and the account information by the managing computing device and is not performed in response to said receiving the dispense request and the account information by the managing computing device.
13. The method of claim 12 further comprising:
transmitting, with the controller of the currency dispenser, the first number to the host computing device before said receiving the dispense request and the account information by the managing computing device.
14. The method of claim 1 wherein said generating the first message authentication code is further defined as generating, with the host computing device, the first message authentication code by applying the signing algorithm to both the first number and the amount of currency to be dispensed.
15. The method of claim 14 further comprising:
generating, with the host computing system, a dispense command to be executed by the controller of the currency dispenser to dispense the amount of currency; and
transmitting, with the host computing system, the dispense command to the controller of the currency dispenser.
16. The method of claim 15 wherein said generating the dispense command is further defined as generating the dispense command to include a plurality of fields and wherein a first of the plurality of fields contains the first message authentication code.
17. The method of claim 16 wherein said generating the dispense command is further defined as generating the dispense command to include unencrypted data in at leas some of the plurality of fields other than the first of the plurality of fields.
18. The method of claim 16 wherein said transmitting the dispense command is further defined as transmitting the dispense command to the controller of the currency dispenser in unencrypted format, whereby the controller of the currency dispenser can act on the dispense command upon receipt without initially decrypting.
19. The method of claim 1 wherein said dispensing is further defined as:
dispensing, with the currency dispenser by the controller, the amount of currency in response to at least said confirming unless less than a predetermined period of time elapsed since a previous dispensing.
20. A method of dispensing currency from an automated transaction machine (ATM) comprising:
receiving, with a managing computing device positioned in the ATM, a dispense request and account information from a user, the dispense request including an amount of currency to be dispensed from a currency dispenser positioned in the ATM;
generating, with a controller of the currency dispenser, a first number and storing the first number in a memory communicating with the controller;
receiving the first number at a host computing device that is physically remote from the ATM;
receiving, at the host computing device, the dispense request and the account information;
generating, with the host computing device, a first message authentication code by applying a signing algorithm to at least one of the first number and the amount of currency to be dispensed, the signing algorithm based on a cryptographic key;
receiving, at the controller of the currency dispenser, at least the first message authentication code from the host computing device;
receiving, at the controller of the currency dispenser, the amount of currency to be dispensed;
retrieving, with the controller of the currency dispenser, from the memory, the first number;
generating, with the controller of the currency dispenser, a second message authentication code by applying the signing algorithm to at least one of the first number and the amount of currency to be dispensed, the first number retrieved during said retrieving;
confirming, with the controller of the currency dispenser, identity between the first message authentication code and the second message authentication code;
dispensing, with the currency dispenser by the controller, the amount of currency in response to at least said confirming; and
wherein said dispensing the amount of currency is further defined as dispensing, with the currency dispenser, the amount of currency with the controller of the currency dispenser irresponsive to communications from the managing computing device.