Security Controller Key Management for ATM Malware Protection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Self-service terminals (SSTs) like ATMs have inadequate internal communication security, making them vulnerable to malware that can impersonate the PC application or platform, leading to unauthorized actions such as cash dispensing or voucher printing.

Innovation Solution

A system and method involving a security controller that manages encryption keys and Message Authentication Codes (MACs) to authenticate and secure communications between the PC core and peripheral devices, ensuring that only authorized commands are executed by verifying the host authorization and using pre-staged MAC keys for secure transactions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If internal SST communications have very little authentication and security, then the system is simpler and easier to operate, but the system becomes vulnerable to malware and unauthorized actions

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication mechanism
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by pre-distributing unique encryption keys to each peripheral device before they are compromised or infected with malware. This advance key distribution ensures that even if malware infiltrates the system later, it cannot impersonate legitimate devices because the cryptographic authentication credentials were already established through secure out-of-band channels during manufacturing or initial setup

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary component - a security module or trusted platform module - that manages the distribution and verification of cryptographic keys between the PC core and peripheral devices. This intermediary acts as a mediator that establishes secure communication channels without requiring complex authentication protocols at every interaction point, thus improving security while maintaining operational simplicity

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If malware impersonates the SST PC application or platform, then unauthorized actions can be performed, but implementing strong authentication increases system complexity

Engineering Contradiction:
Improvemalware protectionVSAvoidsecurity controller
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent applies self-service by enabling peripheral devices to autonomously verify the authenticity of commands received from the PC core using pre-stored encryption keys. Each device independently performs cryptographic verification without requiring external authentication services, thereby protecting against malware impersonation while avoiding the complexity of centralized authentication infrastructure

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system performs preliminary authentication setup by pre-loading encryption keys into peripheral devices through secure physical or out-of-band channels during manufacturing. This advance preparation ensures that when the device operates, it can independently verify command authenticity without requiring complex real-time authentication mechanisms, thus preventing malware impersonation with minimal operational complexity

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3051476B1Authority trusted secure system component
Publication Date: 2022.03.30 NCR VOYIX CORP
  • EP3051476B1 patent drawingFigure 1
  • EP3051476B1 patent drawingFigure 2
  • EP3051476B1 patent drawingFigure 3

AI summary

One embodiment is in the form of a Self-Service Terminal (102), such as an automated teller machine (ATM). The terminal (102) includes a peripheral device (112), such as a cash dispenser, and a security controller device (106 or 108) including a memory device and a coupling to the peripheral device (113). The security controller device (106 or 108) is operable to perform data processing activities including receiving peripheral device identifying data from the peripheral device (112) and transmitting a public key (SCpk) of the security controller device (106 or 108) to the peripheral device (112). The security controller (106 or 108) may then decrypt a received peripheral device encryption key (Ki) according to SCpk, generate a first security controller encryption key (Ke1), and generate a first message authentication code key and encrypt the first message authentication code key according to Ke1 to obtain (Km1)Ke1. (Km1)Ke1 may then be stored in the memory device and transmitted to the peripheral device (112).