US 7,159,114 B1 · System and method of securely installing a terminal master key on an automated banking machine

Abstract

An automated banking machine (12, 200, 302) is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP (204) that is operative to remotely receive an encrypted terminal master key from a host system (210, 304). The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device (30) of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.

Claims43

Dependent claims

A method comprising:

a) receiving at least one first input with an automated banking machine that includes a cash dispenser, wherein the at least one first input corresponds to a command to initiate a transfer of a terminal master key to the automated banking machine;
b) sending from the automated banking machine at least one first message to a host system, wherein the at least one first message includes first data representative of a request to transfer the terminal master key to the automated banking machine;
c) receiving with the automated banking machine at least one second message from the host system, wherein the at least one second message includes an encrypted terminal master key;
d) validating the second message;
and
e) decrypting the terminal master key with a first private key of the automated banking machine.

3 more elements

An automated banking machine apparatus comprising:

an automated banking machine, wherein the automated banking machine is operative to communicate with a host system, wherein the automated banking machine is operative to receive from the host system:
a signed and encrypted terminal master key, an encrypted communication key, and at least one certificate of the host system, wherein the at least one certificate of the host system includes a verification public key of the host system wherein the automated banking machine includes:
at least one first processor;
and
an encrypting pin pad (EPP) in operative connection with at least one first processor, wherein the EPP includes:
at least one second processor;
a hardware interface in operative connection with the at least one second processor, wherein the at least one second processor is operative to communicate with at least the first processor through the hardware interface;
a memory in operative connection with the at least one second processor, wherein the memory includes at least one public key of a certificate authority (CA) and at least one decipherment private key of the EPP;
and
a keypad in operative connection with the at least one second processor, wherein the at least one second processor is operative to validate the certificate of the host system using the public key of the CA, wherein the at least one second processor is operative to validate the signed encrypted terminal master key using the verification public key of the host system, wherein the at least one second processor is operative to decrypt the signed encrypted terminal master key using the decipherment private key of the EPP, wherein the at least one second processor is operative to decrypt the encrypted communication key using the terminal master key, wherein the at least one second processor is operative to encrypt a personal identification number (PIN) inputted through the keypad using the communication key.

7 more elements

Dependencies are inferred from the claim text.

System and method of securely installing a terminal master key on an automated banking machine

Life of this patent

System and method of securely installing a terminal master key on an automated banking machine

Life of this patent

Abstract

Claims43