Secure operations in an automatic teller machine

A method for secure operations in an automatic teller machine, the method comprising:

• transitioning a dispenser from an inactive state to an enrollment state in response to an enrollment command;
• receiving, at a computer, an activate token from a given dispense authorization party of a plurality of dispense authorization parties, wherein the plurality of dispense authorization parties is remote from the automatic teller machine;
• accepting, in the dispenser, the activate token while in the enrollment state and rejecting the activate token while in the inactive state;
• allocating, in the dispenser, a given trust of a plurality of trusts to the given dispense authorization party in response to the acceptance of the activate token;
• transitioning the dispenser from the enrollment state to an active state in response to the allocation of the given trust;
• generating, in the computer, a requested transaction in response to a manual entry of a requested cash value;
• generating, in the dispenser, a unique nonce in response to the requested transaction;
• sending a withdrawal request from the computer to the given dispense authorization party, wherein the withdrawal request includes the unique nonce;
• receiving, at the computer from the given dispense authorization party, a withdrawal authorization, wherein the withdrawal authorization includes a secure dispense token, a dispense nonce and an authorized cash value;
• verifying, in the dispenser, that the secure dispense token and the dispense nonce in the withdraw authorization are valid based on both the given trust and that the secure dispense token includes a name of the given dispense authorization party on a list of trusted token issuers;
• dispensing, from the dispenser, a currency that matches the authorized cash value in response to the secure dispense token and the dispense nonce being valid;
• receiving, at the computer, a deactivation token from the given dispense authorization party;
• receiving, at the dispenser, the deactivation token from the computer while in the active state;
• and
• unbinding the given dispense authorization party from the dispenser in response to the receiving of the deactivation token.

An automatic teller machine comprising:

• a computer in electronic communication with a plurality of dispense authorization parties that are remote from the automatic teller machine, and the computer is configured to:
• receive an activate token from a given dispense authorization party of the plurality of dispense authorization parties;
• generate a requested transaction in response to a manual entry of a requested cash value;
• send a withdrawal request to the given dispense authorization party of the plurality of dispense authorization parties, wherein the withdrawal request includes a unique nonce;
• receive a withdrawal authorization from the given dispense authorization party, wherein the withdrawal authorization includes a secure dispense token, a dispense nonce and an authorized cash value;
• receive a deactivation token from the given dispense authorization party;
• and
• a dispenser in electronic communication with the computer, and the dispenser is configured to:
• transition from an inactive state to an enrollment state in response to reception of an enrollment command;
• accept the activate token from the computer while in the enrollment state and reject the activate token while in the inactive state;
• allocate a given trust of a plurality of trusts to the given dispense authorization party in response to the acceptance of the activate token;
• transition from the enrollment state to an active state in response to the allocation of the given trust;
• generate the unique nonce in response to the requested transaction;
• receive the withdrawal authorization from the computer;
• verify that the secure dispense token and the dispense nonce are valid based on both the given trust and that a dispense timestamp of the secure dispense token is within a predetermined time after the requested transaction is received;
• and
• dispense a currency matching the authorized cash value in response to the secure dispense token and the dispense nonce being valid;
• receive the deactivation token from the computer while in the active state;
• and
• unbind the given dispense authorization party from the dispenser in response to the reception of the deactivation token.