Ncr Corporation

Ncr Atleos Corporation

Brian Steven Wotherspoon

Alexander William Whytock

Graham Flett

Niraj Gopal

A card reader of a terminal is cryptographically verified upon initialization, power up, connection, or start of day processing of the terminal. A cryptographic and signed token is provided from and verified by an Encrypted Personal Identification Number (PIN) pad (EPP) of the terminal. Each time the reader initializes, the token is verified by the EPP and a new token is generated and provided to the reader for use during a next initialization cycle of the reader. If the reader lacks a token when the EPP has record that is should have the token, the reader is not authorized to perform card transactions for the terminal. If a token provided by the reader during an initialization cycle is not verified, the reader is not authorized to perform card transactions for the terminal.

Card reader verification

An agent on a terminal send an instruction to firmware on a miscellaneous board of the terminal. The instruction includes a time period during which power to the terminal and peripherals of the terminal are to be powered off. The agent sends an instructions to a core of a motherboard of the terminal to perform shutdown operations in anticipation of the terminals and peripherals being powered off. In response to the instruction received, the firmware monitors the core for a state indicating that the core is shutdown, the firmware sets a timer to the time period, and causes power to be cut between the motherboard and a power supply unit of the terminal. When the timer expires, the firmware re-establishes power between the motherboard and the power supply unit causing the core to initiate the proper sequence of operations to start up the terminal and the peripherals.

Device power controller

A Basic Input/Output System (BIOS)/Unified Extensible Firmware Interface (UEFI) on a Self-Service Terminal (SST) loads ATM resources into volatile memory of the SST during a boot of the SST in a predefined order. Each time, during an SST boot, where the order is attempting to be changed; a credential is required to change the predefined order and the credential has to be authenticated before the predefined order is changed during the SST boot.

Basic input/output system (BIOS) and unified extensible firmware interface (UEFI) one-time boot

A Self-Service Terminal (SST) safe that includes a lock drive adapted and configured to i) operate inside the SST safe, ii) receive a wireless code sent from outside the SST safe, and iii) determine whether to lock or unlock the SST safe from inside the SST safe in response to the wireless code, and wherein the wireless code is cryptographically secured and authenticated prior to any unlock or lock operation.

Self-service terminal (SST) safe and methods of operating a lock for the SST safe

A Basic Input/Output System (BIOS)/Unified Extensible Firmware Interface (UEFI) on a Self-Service Terminal (SST) processes during a boot of the SST. When a new hard disk is detected as being present and an identifier for the new hard disk is missing from a whitelist, a signed hard disk identifier is verified from storage on the new hard disk. If the signed hard disk identifier is verified: the new hard disk is authenticated, the whitelist is updated to include the new hard disk identifier, a unique identifier for BIOS/UEFI and the new hard disk identifier are written to the storage of the new hard disk, and the boot process is permitted to continue for the SST.

Basic input/output system (BIOS)/unified extensible firmware interface (UEFI) hard drive authentication

One embodiment is in the form of a Self-Service Terminal (SST), such as an automated teller machine (ATM). The SST includes a peripheral device, such as a cash dispenser, and a security controller device including a memory device and a coupling to the peripheral device. The security controller device is operable to perform data processing activities including receiving peripheral device identifying data from the peripheral device and transmitting a public key (SC) of the security controller device to the peripheral device. The security controller may then decrypt a received peripheral device encryption key (Ki) according to SC, generate a first security controller encryption key (Ke), and generate a first message authentication code key and encrypt the first message authentication code key according to Keto obtain (Km)Ke. (Km)Kemay then be stored in the memory device and transmitted to the peripheral device.

Growing community of inventors

Fife, United Kingdom

Brian Steven Wotherspoon