Ncr Corporation

Ncr Corportation

Colin Herkes

Michael James Neilan

Anthony Edward Roper

Charles Harrow

Avril Kidd

Jamie D Cramb

Jamie Cramb

An SST facilitates authentication of a user through an external service via a mobile device operated by the user. The SST also obtains independent verification of an access command sent from a server through a cryptographic peripheral module integrated into the SST before sending a command to grant authenticated access to the SST in response to the access command.

Authenticated self-service terminal (SST) access

Two-factor authentication is processed on a transaction terminal before access is provided to a secure resource of the transaction terminal. A first factor authentication is performed to authenticate an identifier and a credential of a user. A unique challenge is sent, in response to a successful first factor authentication, to a secure device interfaced to the transaction terminal. A one-time unique signed response is received from the secure device in response to the unique challenge and a user action that depresses a button on the secure device. The one-time unique signed response is compared against what is expected from the secure device. When the comparison is successful, a user identity for the user is set, a security role is set for the user identity, and the user is granted access to the secure resource with the set security role.

Terminal authenticated access

A method of providing secure authentication of a service user at a self-service terminal is described. The method comprises: detecting attempted access by the service user to a restricted function on the self-service terminal; ascertaining if a removable storage device is in communication with the self-service terminal; in the event that a removable storage device is not in communication with the self-service terminal, denying access to the restricted function; in the event that a removable storage device is in communication with the self-service terminal, prompting the service user to enter login credentials. The method further comprises comparing the entered login credentials with access details stored on the removable storage device; denying access to the restricted function if the entered login credentials do not comply with the access details; permitting access to the restricted function if the login credentials do comply with the access details; and storing details relating to the access.

Secure authentication at a self-service terminal

A software framework comprises at least one software tool and at least one parameter associated with each tool. The framework is arranged to (i) allow the selection of at least one software tool from a plurality of tools, (ii) allow the selection of at least one parameter from a parameter set, (iii) associate the parameter with a selected tool, and (iv) associate the selected tools and parameters together in a scheme such that they can be executed as a batch.

Growing community of inventors

Fife, United Kingdom

Colin Herkes