Patent ID: 8375203
Filing Date: 2013-02-12
Classification: G06Q,H04L

Abstract:
1. A method of securely transferring a master key from a host to a remote automated banking machine (“ATM”), wherein said host comprises a certificate signed by a certificate authority comprising a public key for said host, and said ATM comprises a first certificate signed by the certificate authority comprising a first public key for said ATM, and wherein each of said host and ATM comprise the public key of said certificate authority, said method comprising: (a) storing in the ATM a value representing an identifier of a host with which the ATM is authorized to communicate, and over a network, including a non-secure network, (b) receiving a communication from a remote host comprising an identifier of the remote host; (c) comparing the remote host's identifier with the authorized host's identifier, and if the identifiers do not match, halting communication with the remote host; (d) if the remote host's identifier matches the authorized host's identifier, then accepting the host's certificate and sending to the host the ATM's first certificate; (e) receiving from the host encrypted data comprising a master key encrypted using the first public key of the ATM; and (f) decrypting said encrypted data, including said master key, using a first secret key of the ATM corresponding to ATM's first public key.