ATM Media Dispensing Control with Token-Based Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for controlling automated teller machines (ATMs) are vulnerable to fraudulent actions, such as unauthorized access to customer bank accounts or cash due to unsecured control of media dispensing by the user interface component.
Innovation Solution
Implementing a security boundary within the ATM by using a business application component to control the media device driver, separating it from the user interface component, ensuring only authorized access to physical media dispensing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the user interface component controls the media device driver to dispense physical media, then the ease of operation is improved, but the security is worsened due to vulnerability to fraudulent actions
Solution Approach 1:
The system is divided into distinct components with separate security boundaries: the user interface component (UIC) handles user interactions, the business application component (BAC) processes validation logic, and the media device driver (MDD) controls physical media dispensing. This segmentation ensures that no single component has excessive privileges, thereby improving security while maintaining operational ease through clear division of responsibilities.
Solution Approach 2:
The business application component acts as an intermediary between the user interface component and the media device driver. It receives service requests from the UIC, performs validation by transmitting and receiving messages, and only authorizes media dispensing after successful validation. This intermediary layer prevents direct control of the MDD by the UIC, blocking fraudulent actions while preserving legitimate operations.
2Adaptability or versatility
If the user interface component has full control to execute all teller machine tasks, then the versatility is improved, but the security is worsened due to potential hacking or interference
Solution Approach 1:
The system divides functionality into specialized components: the user interface component handles user interactions and displays, the business application component manages validation and authorization logic, and the media device driver controls physical media dispensing. Each component has defined capability parameters that limit its scope, ensuring versatility through specialization while improving security by preventing any single component from having excessive control.
Solution Approach 2:
Each component is assigned specific local qualities or capabilities: the UIC has capabilities for user interaction but not for media dispensing, the BAC has validation capabilities but not direct hardware control, and the MDD has media dispensing capability but requires authorization. This local quality assignment ensures that each component performs its specific function effectively while the overall system maintains security through distributed, limited privileges.
3Reliability
If a security boundary separates the user interface component from the business application component, then the security is improved, but the device complexity is worsened
Solution Approach 1:
The system implements segmentation by dividing the ATM into distinct functional components (UIC, BAC, MDD) with defined interfaces and security boundaries. While this increases structural complexity, it enables modular design where each component can be independently developed, tested, and maintained. The security benefits outweigh the complexity increase because the modular structure actually simplifies security verification and fault isolation.
Solution Approach 2:
The business application component serves multiple functions: it validates service requests, authorizes media dispensing, and coordinates communication between the UIC and MDD. By consolidating these validation and authorization functions in a single multi-functional component, the system reduces overall complexity compared to having separate components for each function, while still maintaining the necessary security boundaries.
Data Source
AI summary
A user interface component receives a service request from a user and transmits a service request message to a business application component. The business application component transmits an authorisation request message to a media authorisation component. The media authorisation component generates a token based on the authorisation request message and transmits a search message to a controller. The controller transmits the search message to a plurality of backend components. The controller transmits a response message from the backend components to the media authorisation component. The media authorisation component determines whether the token is valid based on the response message. The media authorisation component transmits a validation message to the business application component. Based on the service request message and the validation message, the business application component transmits a control message to a media device driver to control the media device driver to dispense physical media from a teller machine.