Remote ATM BIOS Management via Active Management Technology
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for managing BIOS settings of automated teller machines (ATMs) are inefficient and lack centralized, secure, and automated solutions for remote configuration and scheduling, often requiring human intervention and lacking consistency across multiple devices.
Innovation Solution
A method and system utilizing an active management technology system with a serial-over-lan (SOL) connection to establish trust and configure BIOS settings remotely, including scheduling changes and disabling unnecessary features for enhanced security, allowing concurrent management of multiple ATMs through a database-accessible system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If BIOS settings are managed manually at each ATM location, then security can be maintained through direct control, but management efficiency decreases and human intervention is required
Solution Approach 1:
The system enables self-service remote management where the management server automatically configures and updates BIOS settings across multiple ATMs without requiring manual intervention at each location. The active management technology system allows the ATMs to receive and apply configuration changes autonomously, improving productivity while maintaining security through automated authentication and encryption protocols.
2Reliability
If BIOS settings are updated frequently to enhance security, then security posture improves, but system stability may be compromised and management complexity increases
Solution Approach 1:
The system implements preliminary action by pre-configuring BIOS security settings and update schedules through the active management technology system before deployment to multiple ATMs. Security policies, encryption keys, and configuration parameters are prepared in advance and stored in the management server, allowing consistent and secure updates to be pushed simultaneously across the network without requiring complex manual coordination at each location.
3Ease of operation
If remote management capabilities are enabled across the network, then centralized control is achieved, but security risks increase and trust establishment becomes more difficult
Solution Approach 1:
The patent introduces an intermediary active management technology system that mediates between the centralized management server and remote ATMs. This intermediary layer establishes trusted connections through serial-over-LAN protocols and implements authentication mechanisms, allowing centralized control to be exercised securely. The system acts as a trusted broker that verifies identities, encrypts communications, and manages access permissions, thereby enabling ease of operation without compromising security trust.
4Adaptability or versatility
If all active management technology features are enabled for comprehensive control, then management capability is enhanced, but system vulnerability increases and security exposure grows
Solution Approach 1:
The system applies local quality by selectively enabling and configuring only the specific active management technology features required for BIOS control at each ATM location. Rather than uniformly enabling all management capabilities across the network, the system tailors the activation of management functions based on local security requirements and operational needs. This selective approach enhances management capability where necessary while minimizing security vulnerability by keeping unnecessary features disabled.
Data Source
AI summary
A method for controlling at least one setting of a basic input output system (BIOS) of at least one automated transaction machine (ATM) can include provisioning features of an active management technology system of a first computing device associated with an ATM. The method can also include establishing an initial trust between the first computing device and a second computing device that is remote from the first computing device, over a serial-over-lan (SOL) connection that is a feature of the active management technology system. The method can also include configuring the setting of the BIOS of the first computing device and storing a schedule for changing the setting of the BIOS. The method can also include reconfiguring the setting of the BIOS in response to the schedule stored on the database over the SOL.