Patent Application
20150278785
Self-service terminals (SSTs), such as automated teller machines (ATMs) or the like, can be controlled remotely using a host that downloads a transaction flow to the SST. For example, NCR Corporation (trade mark) uses a proprietary message interface to allow a host to control an ATM. This proprietary message interface is called NCR Direct Connect (NDC). Other proprietary message interfaces are also available that enable a remote host to control an ATM and it will be appreciated that the embodiments described herein are not limited to use with the NDC interface. SSTs that are controlled remotely by a host (rather than by an application executing on the SST) are referred to herein as “state-driven SSTs.” As used herein, “state-driven SSTs” do not include any SST that uses a local application that is programmed with its own transaction flow. State-driven SSTs receive a transaction flow in the form of tables (including state, screen, and parameter information) downloaded from a remote host.
The proprietary message interfaces typically operate based on one or more tables of states and screens. When an ATM boots up, it receives the download of any state and screen information from a control application executing on the remote host, e.g., the information, an update for existing information or no information is received by the terminal because the remote hosts decides that no update is necessary. The ATM can then offer transactions to a customer. This is achieved by displaying one or more screens showing options and information and by allowing a user to indicate one or more selections by interacting with a user interface such as by pressing a button or a region of a touchscreen. Once the ATM has gathered the details from the customer (such as card data, PIN data, transaction data, and the like), it then sends a transaction request to the remotely-located control application and receives a response. This response instructs the ATM to perform certain actions, such as dispensing a requested amount of currency notes if the transaction is authorized, or presenting a screen to the customer informing the customer that the transaction has not been approved, in the event that the transaction is declined.
Each ATM stores a state table, which typically comprises the state number, state type, parameters, configuration data, screen numbers, and next state information. In general, where a screen is present it is displayed when the state is entered, the ATM performs the action specified by the state type, and the transaction flow moves to the specified next state. Where a plurality of screens is defined for the same state, then each screen may be displayed in sequence prior to the ATM advancing to the next state.
NDC transaction flow comprises a sequence of NDC States. A number of these NDC States can no longer be functionally extended due to the inability to add new parameters due to their original fixed definition. However, such states cannot be fully re-defined due to the impact on the NDC Host systems.
In various embodiments, methods and a system for providing self-configuration of Self-Service Terminals (SST) are presented.
According to an embodiment, a state table having flexible parameter states for extending functions of operational states is downloaded to the SST. A state to be extended is selected. A parameter state from the downloaded state table is executed to provide additional functionality to the selected state.
The techniques, methods, and system presented herein and below for a SST according to an embodiment can be implemented in whole or in part in one, all, or some combination of the components shown with the architecture 100. The techniques and methods are programmed as executable instructions in memory and/or non-transitory computer-readable storage media and processed on one or more processors associated with the various components.
The discussion of the architecture 100 is within the context of a banking facility for banking transactions that may be made in person and at Automated Teller Machines (ATMs). It is noted that the architecture 100 is also applicable to any enterprise providing SSTs and in-person customer assistance. Thus, the description that follows below is but one embodiment and it is not intended to limit embodiments to financial transactions at financial facilities.
The example architecture 100 includes a bank branch 110, an Automated Teller Machine (ATM) 120, a branch server 140, and an external financial system 150. The bank branch 110 includes the Automated Teller Machine (ATM) 120 operated by customers, and a branch server 140.
The ATM 120 includes an application 122 and a dispenser 130. The dispenser 130 includes a secure microprocessor 131. The ATM 120 is presented in greatly simplified form and is used to illustrate those portions of components modified for purposes of providing configuration processes via the configuration server 170. The application 122 includes an Application Programming Interface (API) for interacting with the dispenser 130 and the local bank server 140. The application 122 also includes a forward-facing Graphical User Interface (GUI and not shown in the
The bank server 140 communicates with the ATM 120, which includes an application 122, an assistance interface 124, a transaction interface 126, a dispenser 130, and a secure processor 131. The bank branch 110 includes areas for customers to access the ATMs 120 to perform self-service financial transactions with an external financial system 150 utilizing the transaction interface 126 of the ATM 120. The bank branch 110 also includes teller stations for customers to walkup and to perform in-person transactions with tellers.
An ATM 120 relies on a great deal of security to protect the consumer and a bank. As a result, the network accessibility to the ATM 120 is very restrictive. In fact, often the enterprise that services the ATM 120 has very limited network access to the ATM 120. One network connection that banks have found acceptable is a local bank server 140 that resides at the bank branch 110 and acts as a transaction proxy between the network connection of the ATM 120 and a financial backend system 150. It is noted that a customer at the bank branch 110 may utilize the bank's ATM 120 but conduct a financial transaction associated with a different bank, such that gateways are used to select the proper external financial system 150 that services the financial transaction. The local bank server 140 (for security reasons) may not see some details of the financial transaction, such as Personal Identification Numbers (PINs) which appear on the local server 140 as encrypted information. However, actions (transaction type, etc.) taken, customer information (customer name, etc.), transaction details (ATM number, etc.) are visible to local bank server 140.
During a transaction by a customer at the ATM 120 (while at the bank branch 110), the customer initiates the transaction (such as by swiping a bank card), which activates the transaction interface 126. A session is created with the external financial system 150. Some data (as discussed above) is decrypted or capable of being decrypted (based on security policies). Each user is authenticated to the local bank server 140 and a wireless secure (encrypted protocols, such as Wired Equivalent Policy (WEP)) communication session with the local bank server 140 is established.
An Application Programming Interface (API) provides automated two-way communication by providing communication with customers at the ATMs 120 by passing communications via an API. The interaction of the components is now discussed with an example to provide NDC flexible state parameter extension for an ATM 120. It is noted that other scenarios are possible without departing from the beneficial teachings provided herein. According to an embodiment, the ATM 120 may read a state table
The ATM 120 is then ready to provide secure end-to-end device authentication between an approving entity (local bank server 140 or external financial system 150) through to the dispenser 130 using extended NDC states. An example situation now follows for illustration.
The controller 201 comprises a Basic Input Output System (BIOS) 210 stored in non-volatile memory, a microprocessor 211, main memory 212, storage 213 in the form of a magnetic disk drive, and a display controller 214 in the form of a graphics card for controlling the customer display module 202 and any operator panel (not shown) that is present.
When the ATM is powered up, the main memory 212 is loaded with an ATM runtime platform 220 (which functions, inter alia, as a monitoring component) and a local application 221, both of which are stored on the magnetic disk drive 213.
The ATM runtime platform 220 includes: (i) components from an operating system (in this embodiment, Windows XP (trade mark), available from Microsoft Corporation (trade mark)), and (ii) proprietary components. Other components such as the use of Windows 7 or the like could of course be utilized.
The local application 221 (i) presents a sequence of screens on the ATM display module 202 to a customer at the ATM, (ii) collates information from the customer via the ATM modules 202, 203a to 203n and the runtime platform 220 (for example, customer account information from a customer's ATM card, transaction request, transaction amount, and the like), (iii) transmits a transaction request to a remote authorization server (not shown), and (iv) instructs modules within the ATM 200, in response to commands received from the remote authorization server to fulfil the transaction request.
The local application 221 includes a message interface component 225, and a screen control component 226. The local application 221 also stores a state information table 230 (populated with data downloaded from a remote host), including a plurality of screen dictionaries 240a, 240b . . . 240n. To provide extended states for additional functionality to limited NDC states, a state table 270 is used to supply additional parameters 272 to existing limited NCR Direct Connect (NDC) states in support of the need of new and/or additional functionality. Accordingly, more functionality may be introduced to a legacy environment, which is difficult to change otherwise. As opposed to using local registry or Extensible Markup Language (XML) files, the NDC flexible state parameters may be added to the NDC download.
The message interface component 225 implements the message interface such as the NCR Direct Connect (NDC) message interface or the like and enables the ATM 200 to communicate with a control application (not shown) executing on a remote authorization server (not shown).
The screen control component 226 communicates with the runtime platform 220 to receive status information. This status information includes customer selections at the ATM 200, the state of modules 203 within the ATM 200, events occurring within the modules 203 of the ATM 200, and the like.
As shown in more detail in
The state information table 230 comprises details of one or more states used in a state transition flow with each state including one or more details such as the state number, state type, parameters, configuration data, screen numbers, next state information, and screen data. Although referred to herein as a state information table 230, this table 230 actually comprises a series of linked tables (for example, a card read table, a PIN entry table, a cash accept table, and the like), or a table with further tables nested therein. There are typically one or more table entries for each state type, plus other associated tables. This state information may be stored on a particular data structure.
To extend functionality of some states, a state table having additional parameters supplied by the Flexible Parameters State to existing states. This is applicable to the state that immediately executes after (the extended state), i.e., the one in the next state number parameter below. The state parameters provide a general additional extension state and also some more specific parameters, for ease of use.
The fifth table entry 350 has a size of 3 bytes 352, is the Timer 0 Override 354 and is the value of a cardholder response 356 to be used in the execution of the extended state in seconds. The sixth table entry 360 has a size of 3 bytes 362, is the Timer 1 Override 364 and is the value of cardholder timeout response 366 to be used in the execution of the extended state in seconds. The seventh table entry 370 has a size of 3 bytes 372, is the Cancel FDK Mask 374, wherein a FDK Mask for a Cancel FDK is to be added to the extended state 376. The eighth table entry 380 has a size of 3 bytes 382, is the Enter FDK Mask 384, wherein the FDK Mask for an Enter FDK is to be added to the extended state 386. The ninth table entry 390 has a size of 3 bytes 392, is Reserved 394, wherein it is reserved for future use 396.
Thus, according to an embodiment, existing states with a fixed definition may be extended with new parameters and hence new functionality. The central transaction processing system (host) does not need to be changed. The addition of flexible parameters state to a host download is not a host change for most hosts; in any case, advanced NCR Direct Connect (ANDC) allows adding such states locally.
The above detailed description includes references to the accompanying drawings, which form a part of the detailed description. The drawings show, by way of illustration, specific embodiments that may be practiced. These embodiments are also referred to herein as “examples.” Such examples may include elements in addition to those shown or described. However, also contemplated are examples that include the elements shown or described. Moreover, also contemplate are examples using any combination or permutation of those elements shown or described (or one or more aspects thereof), either with respect to a particular example (or one or more aspects thereof), or with respect to other examples (or one or more aspects thereof) shown or described herein.
Publications, patents, and patent documents referred to in this document are incorporated by reference herein in their entirety, as though individually incorporated by reference. In the event of inconsistent usages between this document and those documents so incorporated by reference, the usage in the incorporated reference(s) are supplementary to that of this document; for irreconcilable inconsistencies, the usage in this document controls.
In this document, the terms “a” or “an” are used, as is common in patent documents, to include one or more than one, independent of any other instances or usages of “at least one” or “one or more.” In this document, the term “or” is used to refer to a nonexclusive or, such that “A or B” includes “A but not B,” “B but not A,” and “A and B,” unless otherwise indicated. In the appended claims, the terms “including” and “in which” are used as the plain-English equivalents of the respective terms “comprising” and “wherein.” Also, in the following claims, the terms “including” and “comprising” are open-ended, that is, a system, device, article, or process that includes elements in addition to those listed after such a term in a claim are still deemed to fall within the scope of that claim. Moreover, in the following claims, the terms “first,” “second,” and “third,” etc. are used merely as labels, and are not intended to suggest a numerical order for their objects.
The above description is intended to be illustrative, and not restrictive. For example, the above-described examples (or one or more aspects thereof) may be used in combination with others. Other embodiments may be used, such as by one of ordinary skill in the art upon reviewing the above description. The Abstract is to allow the reader to quickly ascertain the nature of the technical disclosure, for example, to comply with 37 C.F.R. §1.72(b) in the United States of America. It is submitted with the understanding that it will not be used to interpret or limit the scope or meaning of the claims. Also, in the above Detailed Description, various features may be grouped together to streamline the disclosure. However, the claims may not set forth features disclosed herein because embodiments may include a subset of said features. Further, embodiments may include fewer features than those disclosed in a particular example. Thus, the following claims are hereby incorporated into the Detailed Description, with a claim standing on its own as a separate embodiment. The scope of the embodiments disclosed herein is to be determined with reference to the appended claims, along with the full scope of equivalents to which such claims are entitled.
