Security Controller Key Management for ATM Malware Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Self-service terminals (SSTs) like ATMs have inadequate internal communication security, making them vulnerable to malware that can impersonate the PC application or platform, leading to unauthorized actions such as cash dispensing or voucher printing.
Innovation Solution
A system and method involving a security controller that manages encryption keys and Message Authentication Codes (MACs) to authenticate and secure communications between the PC core and peripheral devices, ensuring that only authorized commands are executed by verifying the host authorization and using pre-staged MAC keys for secure transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If internal SST communications have very little authentication and security, then the system is simpler and easier to operate, but the system becomes vulnerable to malware and unauthorized actions
Solution Approach 1:
The patent implements preliminary action by pre-distributing unique encryption keys to each peripheral device before they are compromised or infected with malware. This advance key distribution ensures that even if malware infiltrates the system later, it cannot impersonate legitimate devices because the cryptographic authentication credentials were already established through secure out-of-band channels during manufacturing or initial setup
Solution Approach 2:
The patent introduces an intermediary component - a security module or trusted platform module - that manages the distribution and verification of cryptographic keys between the PC core and peripheral devices. This intermediary acts as a mediator that establishes secure communication channels without requiring complex authentication protocols at every interaction point, thus improving security while maintaining operational simplicity
2Object-affected harmful factors
If malware impersonates the SST PC application or platform, then unauthorized actions can be performed, but implementing strong authentication increases system complexity
Solution Approach 1:
The patent applies self-service by enabling peripheral devices to autonomously verify the authenticity of commands received from the PC core using pre-stored encryption keys. Each device independently performs cryptographic verification without requiring external authentication services, thereby protecting against malware impersonation while avoiding the complexity of centralized authentication infrastructure
Solution Approach 2:
The system performs preliminary authentication setup by pre-loading encryption keys into peripheral devices through secure physical or out-of-band channels during manufacturing. This advance preparation ensures that when the device operates, it can independently verify command authenticity without requiring complex real-time authentication mechanisms, thus preventing malware impersonation with minimal operational complexity
Data Source
Figure 1
Figure 2
Figure 3
AI summary
One embodiment is in the form of a Self-Service Terminal (102), such as an automated teller machine (ATM). The terminal (102) includes a peripheral device (112), such as a cash dispenser, and a security controller device (106 or 108) including a memory device and a coupling to the peripheral device (113). The security controller device (106 or 108) is operable to perform data processing activities including receiving peripheral device identifying data from the peripheral device (112) and transmitting a public key (SCpk) of the security controller device (106 or 108) to the peripheral device (112). The security controller (106 or 108) may then decrypt a received peripheral device encryption key (Ki) according to SCpk, generate a first security controller encryption key (Ke1), and generate a first message authentication code key and encrypt the first message authentication code key according to Ke1 to obtain (Km1)Ke1. (Km1)Ke1 may then be stored in the memory device and transmitted to the peripheral device (112).