Wincor Nixdorf International Gmbh

Diebold Nixdorf, Incorporated

Diebold Nixdorf Systems Gmbh

Volker Krummel

Michael Nolte

Oliver Dietz

Matthias Runowski

Johannes Bloemer

Carsten Von Der Lippe

Bernd Redecker

Gennadij Liske

Sascha Oberhellmann

Ann Konecny

Peter Gunther

Peter Guenther

Peter GÜNTHER

According to one exemplary embodiment, a hardware security module is described, having a receiver, which is configured to receive instructions for performing cryptographic operations, and a control device, which is configured to take an instruction load of the hardware security module as a basis for deciding whether one or more instructions should be relocated and, if one or more instructions should be relocated, to determine another hardware security module for relocating the one or more instructions, to authenticate the other hardware security module and to request the execution of the one or more instructions by the other hardware security module.

Hardware security module

A managing computing device positioned in an ATM can receive a dispense request for an amount of currency and account information from a user. A controller of a currency dispenser can generate a first number. The first number, the dispense request, and the account information can be sent to a remote, host computing device that shares a secret key with the controller. The host device can generate a first message authentication code (MAC) based on at least one of the first number and the amount of currency and can send it to the controller. The controller can generate a second MAC based on at least one of the first number and the amount of currency, confirm identity between the first and second MACs, and control the currency dispenser to dispense the amount of currency to the user.

End-to-end secured currency dispensing

A method for authorizing an action on a self-service system, in which a user is authorized, by using an authorization server, to carry out an action on a self-service system is provided. The user is equipped with a token for his/her identification.

Method and arrangement for authorizing an action on a self-service system

A method is provided for controlling access to the BIOS/(U)EFI or for controlling sub-functions of the BIOS of a self-service machine. The password of the BIOS is calculated via a deterministic algorithm incorporating code-generating information that changes over time. The method includes displaying code-generating information that changes over time on a screen of the self-service machine during access to the BIOS of the self-service machine. The method proceeds by inputting the code-generating information in a program on a second computer that also has the deterministic algorithm for calculating the password for the BIOS, and calculating and displaying the password on the second computer. The method then includes inputting the password on the self-service machine and checking the password by the deterministic algorithm to allow access to the BIOS if the password is correct.

PC protection by means of BIOS/(U)EFI expansions

Method for checking the consistency of control software of a controller of a self-service automat having a trustworthy domain () that is located inside the self-service automat, comprising these steps:

Method and process for PIN entry in a consistent software stack in cash machines

An apparatus () for handling bills and/or coins has a control unit () that detects a peripheral device connected to the control unit (), generates a data encryption key (DEK), reads from the peripheral device identification information (W) that denotes the peripheral device, generates a key encryption key (KEK) based the read identification information (W), stores an encrypted data encryption key (VDEK) generated by encrypting the data encryption key (DEK) using the key encryption key (KEK) in a memory area of a hard disk (), and ascertains the data encryption key (DEK) by decrypting the encrypted data encryption key (VDEK) using the key encryption key (KEK). The control unit () encrypts useful data to be stored on the hard disk () in encrypted form using the data encryption key (DEK) or decrypts useful data stored on the hard disk in encrypted form using the data encryption key (DEK).

Apparatus for handling bills and/or coins, and method for initializing and operating such an apparatus

A method to defend effectively against cold-boot attacks includes checking state data stored in a state memory to which the system software has access. At least two of the state data items are checked () to determine deviations from parameters that are defined for a normal state of the computer. If deviations from the parameters are determined for at least two of the checked state data items, at least subareas of the main memory are cleared or overwritten (); otherwise, the main memory is not cleared or overwritten (); then, the system startup of the computer is carried out by means of the configured system software ().

Method for defending against cold-boot attacks on a computer in a self-service terminal

Method to secure the communication of components within self-service automats that are linked to each other by a bus system, having a transmitter and a receiver, characterized in that data are exchanged as tupels (C,A,R,N,Z) on the transport layer of the bus system where

System and method for secure communication of components inside self-service automats

Security token for the authentication of access to a self-service terminal, comprising an interface for a connection to the self-service terminal, comprising authentication information, characterized by a second interface that allows a connection of a memory stick the contents of which are made available to the self-service terminal, wherein access to the memory stick is dependent on the authentication information.

Protection of safety token against malware

The invention relates to a device and a method for authenticating components of an self-service automatic teller machine, wherein the components comprise unambiguous identification information that can be exchanged among the components, wherein an authentication of the components and/or the information exchanged between the components is carried out by the encryption and/or signature of the information on basis of identity based encryption (IBE) that uses the identification information of the components.

Method and device for authenticating components within an automatic teller machine

Method to secure the communication of components within self-service automats that are linked to each other by a bus system, having a transmitter and a receiver, characterized in that data are exchanged as tuples (C, A, R, N, Z) on the transport layer of the bus system where

Growing community of inventors

Paderborn, Germany

Volker Krummel