Multi-boot architecture for electronic interaction device

Patent metadata

Field	Value
Publication number	US-12288077-B2
Application number	US-202117209737-A
Country	US
Kind code	B2
Filing date	Mar 23, 2021
Priority date	Mar 23, 2021
Publication date	Apr 29, 2025
Grant date	Apr 29, 2025

Abstract

An electronic interaction device may include: a user interface configured to receive interaction requests by a user; a first data storage medium storing a first operating system; a second data storage medium storing a second operating system; a memory storing instructions; and a control unit including a processor. The control unit may be configured to: load the first operating system in response to the electronic interaction device being powered on; communicate with a remote server via a secure communications channel; transmit a status of the first operating system to the remote server via the secure communications channel; receive a boot instruction from the remote server via the secure communications channel; and in response to the boot instruction, load the second operating system.

First claim

What is claimed is:

1. An automated teller machine (ATM), comprising:
a user interface configured to receive interaction requests by a user;
a first data storage medium storing a first operating system, wherein the first data storage medium is encrypted such that decryption is required to access the first operating system;
a second data storage medium storing a second operating system;
a memory storing instructions; and
a control unit including a processor, wherein the control unit is operatively connected to the memory and configured to execute the instructions to carry out a plurality of operations, including:
booting the ATM to the first operating system in response to the ATM being powered on;
receiving an operating system image containing an updated operating system;
overwriting the second operating system on the second data storage medium with the updated operating system;
booting the ATM to the updated operating system in response to the overwriting;
determining an error status of the updated operating system, the error status being indicative of an error in the updated operating system;
transmitting a notification of the error status of the updated operating system to a remote server via a secure communications channel;
receiving a boot instruction from the remote server via the secure communications channel, wherein the boot instruction is transmitted in response to the notification of the error status; and
in response to the boot instruction, automatically decrypting the first data storage medium and booting the ATM to the first operating system instead of the updated operating system.

2. The ATM of claim 1 , wherein:
the first data storage medium is a first hard disk drive; and
the second data storage medium is a second hard disk drive distinct from the first hard disk drive.

3. The ATM of claim 1 , wherein:
the first data storage medium is a first partition of a hard disk drive; and
the second data storage medium is a second partition of the hard disk drive.

4. The ATM of claim 1 , wherein:
the first operating system and the second operating system are encrypted; and
the plurality of operations further include:
prior to booting to the first operating system, decrypting the first operating system; and
prior to booting to the updated operating system, decrypting the updated operating system.

5. The ATM of claim 4 , wherein the control unit further includes a secure cryptoprocessor, the secure cryptoprocessor being configured to:
perform the decrypting of the first operating system;
perform the decrypting of the updated operating system;
transmit a first verification of the first operating system to the remote server via the secure communications channel; and
transmit a second verification of the updated operating system to the remote server via the secure communications channel.

6. The ATM of claim 4 , wherein the control unit further includes a secondary processor, the secondary processor being configured to:
perform the receiving of the boot instruction; and
perform the booting to the updated operating system.

7. The ATM of claim 6 , wherein the secondary processor is further configured to:
perform the receiving of the boot instruction from the remote server via the secure communications channel.

8. The ATM of claim 7 , wherein the plurality of operations further include:
transmitting an alert to the remote server via the secure communications channel that is indicative of a malfunction of the updated operating system.

9. The ATM of claim 1 , wherein the first operating system is a modified version of the second operating system.

10. The ATM of claim 1 , wherein the plurality of operations further include:
after booting to the first operating system instead of the updated operating system, receiving a second boot instruction from the remote server via the secure communications channel; and
in response to the second boot instruction, booting to the updated operating system.

11. The ATM of claim 1 , wherein the plurality of operations further include:
after booting to the first operating system instead of the updated operating system, receiving a third operating system from the remote server via the secure communications channel; and
overwriting the updated operating system and storing the third operating system on the second data storage medium.

12. A computer-implemented method for managing an ATM, the method comprising:
booting, by the ATM, to a first operating system stored on a first data storage medium;
receiving, by the ATM, an operating system image containing an updated operating system;
overwriting, by the ATM, a second operating system on a second data storage medium with the updated operating system;
booting, by the ATM, to the updated operating system in response to the overwriting;
determining, by the ATM, an error status of the updated operating system, the error status being indicative of an error in the updated operating system;
transmitting a notification of the error status of the updated operating system to a remote server via a secure communications channel;
receiving, by the ATM, a boot instruction from the remote server via the secure communications channel, wherein the boot instruction is transmitted in response to the notification of the error status; and
in response to the boot instruction, automatically decrypting the first data storage medium and booting, by the ATM, to the first operating system instead of the updated operating system, wherein decryption is required to access the first operating system.

13. The method of claim 12 , further comprising:
prior to booting to the first operating system, decrypting the first operating system; and
prior to booting to the updated operating system, decrypting the updated operating system.

14. The method of claim 13 , wherein the ATM includes a processor and a secure cryptoprocessor; and
the secure cryptoprocessor is configured to:
perform the decrypting of the first operating system; and
perform the decrypting of the updated operating system.

15. The method of claim 12 , wherein the ATM includes a primary processor and a secondary processor;
the primary processor is configured to:
perform the booting to of the first operating system;
perform the booting to the updated operating system; and

the secondary processor is configured to:
perform the receiving the boot instruction from the remote server.

16. The method of claim 12 , wherein:
the first data storage medium is a first hard disk drive; and
the second data storage medium is a second hard disk drive distinct from the first hard disk drive.

17. The method of claim 12 , further comprising:
after booting to the first operating system instead of the updated operating system, receiving, by the ATM, a second boot instruction from the remote server via the secure communications channel; and
in response to the second boot instruction, booting, by the ATM, to the updated operating system.

18. The method of claim 12 , further comprising:
after booting to the first operating system instead of the updated operating system, determining, by the ATM, a second status of the first operating system;
transmitting the second status to the remote server via the secure communications channel;
receiving, by the ATM, a second boot instruction based on the second status from the remote server via the secure communications channel; and
in response to the second boot instruction, booting, by the ATM, to the updated operating system.

Assignees

• Capital One Services Llc

Inventors

• Medeiros Alexander
• Miller Mitchell
• Lacy Rex
• Littlejohn Michael
• Wurmfeld David

Classifications

• G06F21/572

  Secure firmware programming, e.g. of basic input output system [BIOS] · CPC title

• G06F9/4416

  Network booting; Remote initial program loading [RIPL] · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• H04L63/04

  for providing a confidential data exchange among entities communicating through data packet networks · CPC title

• G06F9/4408

  Boot device selection · CPC title