# US 12,182,803 B2 · Secure operations in an automatic teller machine

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,182,803 B2
- Document ID: US12182803B2
- Status: Granted
- Kind: B2
- Application number: 17/197,689
- Filed: 2021-03-10
- Published: 2022-09-15
- Granted: 2024-12-31
- Earliest claimed: 2021-03-10
- Assignees: Nautilus Hyosung America, Inc.
- Applicants: Nautilus Hyosung America, Inc.
- Inventors: William Edward Ward; Marc Alan Paust
- Web page: https://patentgrep.com/patent/US12182803B2

## CPC

- G06Q 20/38215: {Use of certificates or encrypted proofs of transaction rights}
- G07F 19/203: {Dispensing operations within ATMs (dispensing in general G07D11/00)}
- G06Q 20/1085: {involving automatic teller machines [ATMs]}
- G06Q 20/385: {using an alias or single-use codes}
- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G07F 19/206: {Software aspects at ATMs}
- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- H04L 9/3265: {using certificate chains, trees or paths; Hierarchical trust model}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

An automatic teller machine includes a controller and a cash dispenser unit. The controller is in electronic communication with dispense authorization parties. The controller is configured to generate a requested transaction in response to a manual entry of a requested cash value, and send a withdrawal request to a given dispense authorization party. The withdrawal request includes a unique nonce. The controller is configured to receive a withdrawal authorization from the given dispense authorization party. The withdrawal authorization includes a secure dispense token and a dispense nonce. The cash dispenser unit is configured to generate the unique nonce in response to the requested transaction, verify that the secure dispense token and the dispense nonce are valid, and dispense a currency matching the requested cash value in response to the secure dispense token and the dispense nonce being valid.

## Claims

### Claim 1

An automatic teller machine comprising:
a computer in electronic communication with a plurality of dispense authorization parties that are remote from the automatic teller machine, and the computer is configured to:
receive an activate token from a given dispense authorization party of the plurality of dispense authorization parties;
generate a requested transaction in response to a manual entry of a requested cash value;
send a withdrawal request to the given dispense authorization party, wherein the withdrawal request includes a unique nonce;
receive a withdrawal authorization from the given dispense authorization party, wherein the withdrawal authorization includes a secure dispense token, a dispense nonce and an authorized cash value; and
receive a deactivation token from the given dispense authorization party; and
a dispenser in electronic communication with the computer, and the dispenser is configured to:
transition from an inactive state to an enrollment state in response to an enrollment command;
accept the activate token from the computer while in the enrollment state and reject the activate token while in the inactive state;
allocate a given trust of a plurality of trusts to the given dispense authorization party in response to the acceptance of the activate token;
transition from the enrollment state to an active state in response to the allocation of the given trust;
generate the unique nonce in response to the requested transaction;
receive the withdrawal authorization from the computer;
verify that the secure dispense token and the dispense nonce in the withdraw authorization are valid based on both the given trust and by verifying that the secure dispense token includes a name of the given dispense authorization party on a list of trusted token issuer;
dispense a currency matching the requested authorized cash value in response to the secure dispense token and the dispense nonce being valid;
receive the deactivation token from the computer while in the active state; and
unbind the given dispense authorization party from the dispenser in response to the reception of the deactivation token.

### Claim 2 (depends on 1)

The automatic teller machine according to claim 1, wherein the dispenser is configured to reject the withdrawal authorization in response to finding invalid one or more of the secure dispense token and the dispense nonce.

### Claim 3 (depends on 1)

The automatic teller machine according to claim 1, wherein the dispenser verifies that the secure dispense token and the dispense nonce are valid by further verifying that the dispense nonce has been received a single time based on a list of historic nonce values that were previously utilized.

### Claim 4 (depends on 1)

The automatic teller machine according to claim 1, wherein the dispenser verifies that the secure dispense token and the dispense nonce are valid by further verifying that a dispense timestamp of the secure dispense token is within a predetermined time after the requested transaction is received.

### Claim 5 (depends on 1)

The automatic teller machine according to claim 1, wherein the dispenser verifies that the secure dispense token and the dispense nonce are valid by further verifying a chain of trust for a signing certificate of the secure dispense token is valid.

### Claim 6 (depends on 1)

The automatic teller machine according to claim 1, wherein the dispenser verifies that the secure dispense token and the dispense nonce are valid by further verifying that the dispense nonce matches the unique nonce.

### Claim 7 (depends on 1)

The automatic teller machine according to claim 1, wherein the dispenser verifies that the secure dispense token and the dispense nonce are valid by further verifying a digital signature of the secure dispense token is valid and properly created by information of the given dispense authorization party.

### Claim 8 (depends on 1)

The automatic teller machine according to claim 1, further comprising:
an electronics compartment that houses the computer;
a secure compartment that houses the dispenser and is physically inaccessible from the electronics compartment; and
a door attached to the secure compartment and configured to provide lockable access to the dispenser.

### Claim 9

A method for secure operations in an automatic teller machine, the method comprising:
transitioning a dispenser from an inactive state to an enrollment state in response to an enrollment command;
receiving, at a computer, an activate token from a given dispense authorization party of a plurality of dispense authorization parties, wherein the plurality of dispense authorization parties is remote from the automatic teller machine;
accepting, in the dispenser, the activate token while in the enrollment state and rejecting the activate token while in the inactive state;
allocating, in the dispenser, a given trust of a plurality of trusts to the given dispense authorization party in response to the acceptance of the activate token;
transitioning the dispenser from the enrollment state to an active state in response to the allocation of the given trust;
generating, in the computer, a requested transaction in response to a manual entry of a requested cash value;
generating, in the dispenser, a unique nonce in response to the requested transaction;
sending a withdrawal request from the computer to the given dispense authorization party, wherein the withdrawal request includes the unique nonce;
receiving, at the computer from the given dispense authorization party, a withdrawal authorization, wherein the withdrawal authorization includes a secure dispense token, a dispense nonce and an authorized cash value;
verifying, in the dispenser, that the secure dispense token and the dispense nonce in the withdraw authorization are valid based on both the given trust and that the secure dispense token includes a name of the given dispense authorization party on a list of trusted token issuers;
dispensing, from the dispenser, a currency that matches the authorized cash value in response to the secure dispense token and the dispense nonce being valid;
receiving, at the computer, a deactivation token from the given dispense authorization party;
receiving, at the dispenser, the deactivation token from the computer while in the active state; and
unbinding the given dispense authorization party from the dispenser in response to the receiving of the deactivation token.

### Claim 10 (depends on 9)

The method according to claim 9, wherein the verifying that the secure dispense token and the dispense nonce are valid further includes:
verifying that the dispense nonce has been received a single time based on a list of historic nonce values that were previously verified.

### Claim 11 (depends on 9)

The method according to claim 9, wherein the verifying that the secure dispense token and the dispense nonce are valid further includes:
verifying that a dispense timestamp of the secure dispense token is within a predetermined time after the requested transaction is received by the dispenser.

### Claim 12 (depends on 9)

The method according to claim 9, wherein the verifying that the secure dispense token and the dispense nonce are valid further includes:
verifying a chain of trust for a signing certificate of the secure dispense token is valid.

### Claim 13 (depends on 9)

The method according to claim 9, wherein the verifying that the secure dispense token and the dispense nonce are valid further includes:
verifying that the dispense nonce matches the unique nonce.

### Claim 14 (depends on 9)

The method according to claim 9, wherein the verifying that the secure dispense token and the dispense nonce are valid further includes:
verifying a digital signature of the secure dispense token is valid and properly created by information of the given dispense authorization party.

### Claim 15 (depends on 9)

The method according to claim 9, further comprising:
rejecting the withdrawal authorization in the dispenser in response to finding invalid one or more of the secure dispense token and the dispense nonce.

### Claim 16

An automatic teller machine comprising:
a computer in electronic communication with a plurality of dispense authorization parties that are remote from the automatic teller machine, and the computer is configured to:
receive an activate token from a given dispense authorization party of the plurality of dispense authorization parties;
generate a requested transaction in response to a manual entry of a requested cash value;
send a withdrawal request to the given dispense authorization party of the plurality of dispense authorization parties, wherein the withdrawal request includes a unique nonce;
receive a withdrawal authorization from the given dispense authorization party, wherein the withdrawal authorization includes a secure dispense token, a dispense nonce and an authorized cash value;
receive a deactivation token from the given dispense authorization party; and
a dispenser in electronic communication with the computer, and the dispenser is configured to:
transition from an inactive state to an enrollment state in response to reception of an enrollment command;
accept the activate token from the computer while in the enrollment state and reject the activate token while in the inactive state;
allocate a given trust of a plurality of trusts to the given dispense authorization party in response to the acceptance of the activate token;
transition from the enrollment state to an active state in response to the allocation of the given trust;
generate the unique nonce in response to the requested transaction;
receive the withdrawal authorization from the computer;
verify that the secure dispense token and the dispense nonce are valid based on both the given trust and that a dispense timestamp of the secure dispense token is within a predetermined time after the requested transaction is received; and
dispense a currency matching the authorized cash value in response to the secure dispense token and the dispense nonce being valid;
receive the deactivation token from the computer while in the active state; and
unbind the given dispense authorization party from the dispenser in response to the reception of the deactivation token.

### Claim 17 (depends on 16)

The automatic teller machine according to claim 16, wherein the dispenser verifies that the secure dispense token and the dispense nonce are valid by further verifying that the dispense nonce has been received a single time based on a list of historic nonce values that were previously utilized.

### Claim 18 (depends on 16)

The automatic teller machine according to claim 16, wherein the dispenser verifies that the secure dispense token and the dispense nonce are valid by further verifying a chain of trust for a signing certificate of the secure dispense token is valid.

### Claim 19 (depends on 16)

The automatic teller machine according to claim 16, wherein the dispenser verifies that the secure dispense token and the dispense nonce are valid by further verifying a digital signature of the secure dispense token is valid and properly created by information of the given dispense authorization party.

### Claim 20 (depends on 16)

The automatic teller machine according to claim 16 further comprising:
an electronics compartment that houses the computer;
a secure compartment that houses the dispenser and is physically inaccessible from the electronics compartment; and
a door attached to the secure compartment and configured to provide lockable access to the dispenser.