Automated Banking Machine Desktop Switching Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Automated banking machines face security vulnerabilities due to publicly known key combinations like Ctrl-ALT-Del, allowing unauthorized access to internal functions, and unexpected software component terminations exposing non-consumer applications.
Innovation Solution
The implementation of an automated banking machine with configurable desktop environments and a desktop switching application that restricts access to maintenance functions, requiring authorized user accounts and secure key sequences, and hides consumer desktop elements upon termination to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a standard key sequence like Ctrl-ALT-Del is used for shutting down the machine, then the ease of operation is improved, but the security is worsened because unauthorized users can compromise the system
Solution Approach 1:
The patent changes the key sequence parameter from a fixed standard sequence (Ctrl-ALT-Del) to a configurable sequence that varies based on user account type. Consumer accounts have a different sequence than maintenance accounts, preventing unauthorized access while maintaining ease of use for authorized users.
Solution Approach 2:
The key sequence is made dynamic rather than static. The system automatically determines which key sequence to use based on the logged-in user's account type, allowing the same interface to adapt to different security requirements without manual configuration.
2Ease of operation
If the workspace is completely covered by terminal software components, then the ease of operation is improved, but the security is worsened because portions of the workspace become visible when components terminate unexpectedly
Solution Approach 1:
The patent applies preliminary anti-action by preemptively hiding the workspace before unauthorized access can occur. When a terminal software component terminates unexpectedly, the system immediately conceals the workspace portion that would otherwise be visible, preventing unauthorized users from accessing internal functions.
Solution Approach 2:
The patent converts the harmful effect of unexpected component termination into a beneficial security feature. The workspace hiding mechanism that activates during errors also prevents unauthorized access during normal operation, turning a potential vulnerability into a security enhancement.
3Ease of operation
If consumer users can access the full alphanumeric keyboard, then the ease of operation is improved, but the security is worsened because employees can use publicly known key combinations to compromise the system
Solution Approach 1:
The patent applies local quality by providing different keyboard access rights to different user groups. Consumer users have access to a limited keypad for transactions, while maintenance users have access to the full alphanumeric keyboard for system administration, preventing unauthorized access while maintaining ease of use for authorized functions.
Solution Approach 2:
The keyboard access is segmented into different functional zones. The consumer interface uses a simplified keypad for transaction input, while the maintenance interface provides a full keyboard for system operations, separating consumer and employee functions to prevent misuse.
Data Source
AI summary
An automated banking machine (10, 30) includes a computer (32) that is operative to output a plurality of desktop environments through a display device (44) of the machine. The desktop environments may include a consumer desktop (54) and a maintenance desktop (58). The consumer desktop is generally empty of visual desktop elements such that when consumer user interface applications (40) are not producing visible outputs, only a background (55) portion of the consumer desktop is viewable. The maintenance desktop includes selectable desktop elements which are configured to conveniently launch terminal maintenance and configuration applications. The machine further includes input devices (46) such as a keyboard (52) and/or a switch device (50). A desktop switching application (36) is operative in the computer. The desktop switching application is operative responsive to specific input signals from the input devices to switch the current desktop between the consumer and maintenance desktops.