Centralized Access Control for ATM Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for controlling access to processing devices like ATMs are insecure due to reliance on portable access tokens, which can be tampered with or lost, and lack centralized management of access permissions, making it difficult to enforce strict security protocols for maintenance and updates.
Innovation Solution
A method and system that utilize access tokens with machine-readable identities, where access permissions are either stored on the token or remotely in a secure database, requiring validation of both token identity and password, with an additional check for authorized access time periods, allowing access levels to be determined and enforced centrally, enhancing security by reducing reliance on portable tokens and enabling centralized management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access permissions are stored on portable access tokens, then access control is enabled, but security is compromised due to token tampering or loss
Solution Approach 1:
A centralized server acts as an intermediary between the access token and the processing device. The server validates access tokens and determines access permission levels remotely, eliminating the need to store sensitive permission data on portable tokens. This mediator approach maintains access control functionality while removing the security vulnerability of storing permissions on tamperable portable media.
Solution Approach 2:
Instead of storing access permissions on portable access tokens, the system uses a centralized database on the server to store and manage access permission information. The server creates and manages digital copies of access credentials, allowing validation without relying on physical tokens that can be lost or tampered with. This enables the system to verify access rights centrally while maintaining the convenience of token-based authentication.
2Reliability
If access permissions are managed centrally via remote database, then security is improved, but system complexity increases
Solution Approach 1:
The centralized server performs multiple functions: it validates access tokens, determines access permission levels, manages the access permission database, and communicates with multiple processing devices. This multi-functional approach consolidates what would otherwise require separate systems for each function, reducing overall system complexity while maintaining centralized security management.
Solution Approach 2:
The system implements a feedback loop where the server validates access tokens and returns access permission levels to processing devices. This automated feedback mechanism eliminates the need for complex manual permission management and reduces system complexity by using standardized validation and response protocols between the server and processing devices.
3Adaptability or versatility
If multiple access levels are supported, then access control flexibility is improved, but validation complexity increases
Solution Approach 1:
The system segments access permissions into distinct permission levels stored in a centralized database. Each access token is validated against these segmented permission levels, allowing the server to determine the appropriate access level without requiring complex validation logic in each processing device. This segmentation approach maintains flexibility while reducing validation complexity.
Solution Approach 2:
The centralized server acts as an intermediary that handles the complexity of multi-level access validation. Instead of each processing device implementing complex validation logic for multiple access levels, the server centralizes this functionality, simplifying the processing devices while maintaining flexible multi-level access control through centralized permission management.
Data Source
AI summary
The invention relates to a method of controlling access to a processing device using an access token with a machine readable identity. The method comprises reading the identity of the access token at the location of the processing device and querying a database comprising valid identities of access tokens, wherein each identity is associated with an access permission level. If the identity is a valid identity, the method further comprises determining the associated level of access and allowing a level of access to the processing device according to the associated access permission level. In some embodiments, the processing device is an Automated Teller Machine (ATM).