Automated banking machine firmware flow control
Described in example embodiments herein are techniques for implementing an automated banking machine such as an ATM. An example embodiments, tracks the flow of a note through an ATM. Another embodiment corrects errors detected during a note flow. Some embodiments are in the form of security protocols for communications or other communication protocols, or techniques for monitoring devices operating in the ATM. Yet another example embodiment is directed to security of a currency cassette. Still yet another embodiment is directed to detecting tampering of the ATM's gate and/or shuttle. Yet still another embodiment determines if notes in a shuttle were delivered.
1. An apparatus, comprising:
a core module processor; and
a memory that stores executable instructions that when executed by the core module processor, cause the core module processor to perform operations comprising:
communicating with a cassette that hold sheets, wherein the cassette comprises a cassette module having a processor;
generating a hash of a command identifier and payload data;
selecting a group of a predefined number of bytes from the hash of the command identifier and payload data as the message authentication code, wherein the group of predefined bytes is a subset of the hash of the command identifier and payload data;
generating a checksum from the command identifier, payload data, and the message authentication code;
creating a data packet that comprises the command identifier, the payload data, the message authentication code, and the checksum; and
sending the data packet to the cassette; and
wherein the selected group of the predefined number of bytes selected from the hash of the command identifier and payload data as the message authentication code varies by packet; and
wherein a second selected group of the predefined number of bytes selected from a second hash for a subsequent packet is different.
2. The apparatus set forth in claim 1 , wherein the number of predefined bytes is four bytes and the hash is twenty bytes.
3. The apparatus set forth in claim 1 , the hash further comprises a nonce.
4. The apparatus set forth in claim 1 , further comprising:
the cassette module processor receiving the data packet;
the cassette module processor generating a hash of a command identifier and payload data of the received data packet;
the cassette processor selecting a group of a predefined number of bytes from the hash of the command identifier and payload data of the received data packet as a message authentication code for the received data packet, wherein the group of predefined bytes is a subset of the hash of the command identifier and payload data of the received data packet;
the cassette processor generating a checksum from the command identifier, payload data, and the message authentication code of the received data packet; and
the cassette processor authenticates the data packet by verifying the checksum and the message authentication code of the received data packet.