System for inputting a pin block to a network

Patent metadata

Field	Value
Publication number	US-2021182856-A1
Application number	US-201917256366-A
Country	US
Kind code	A1
Filing date	May 20, 2019
Priority date	Jun 29, 2018
Publication date	Jun 17, 2021
Grant date	—

Abstract

A method for inputting pin blocks to a network can include receiving a first pin from a key pad with an encryption module, which is then encrypted to a first pin block with a network encryption key and transmitted to a first computing device that inputs the first pin block to a secure network. The encryption module can also receive a second pin block from a second computing device that is physically separate from the key pad. Prior to receiving the second pin block, the encryption module can transmit a certificate and a second certificate to the second computing device. The encryption module can decrypt the second pin block to a second pin and encrypt the second pin to a third pin block with the network encryption key, for inputting the third pin block to the secure network.

First claim

What is claimed is:

1 . A method for inputting pin blocks to a network, comprising:
placing a key pad in communication with an encryption module having one or more processors; receiving, at the encryption module, a first pin from the key pad; encrypting, at the encryption module, the first pin to a first pin block with a network encryption key; placing the encryption module in communication with a first computing device having one or more processors; transmitting, with the encryption module, the first pin block to the first computing device; inputting, with the first computing device, the first pin block to a secure network; receiving, at the encryption module, from a second computing device physically separate from the key pad, a request to transmit the second pin; receiving, at the encryption module, over a wireless link, a second pin block from the second computing device; transmitting, with the encryption module, prior to said receiving the second pin block from the second computing device, a certificate and a second certificate to the second computing device, the certificate including a first public encryption key, the first public encryption key different than the network encryption key and the second certificate being a public signature certificate including a first public signature key; decrypting, with the encryption module, the second pin block to a second pin; encrypting, with the encryption module, the second pin to a third pin block with the network encryption key; and inputting, with the first computing device, the third pin block to the secure network.

2 . The method of claim 1 further comprising:
generating, at the encryption module, a first encryption key pair including the first public encryption key and a first private encryption key, prior to said receiving the second pin block from the second computing device.

3 . The method of claim 2 wherein said generating is further defined as:
generating, at the encryption module, the first encryption key pair in response to said receiving the request to transmit the second pin.

4 . The method of claim 2 wherein said decrypting further comprises:
decrypting the second pin block to the second pin, at the encryption module after said receiving the second pin block, with the first private encryption key, the first private encryption key different than the network encryption key, said decrypting prior to said encrypting the second pin with the network encryption key.

5 . The method of claim 2 further comprising:
utilizing, at the encryption module, the first private encryption key only once.

6 . The method of claim 5 further comprising:
receiving, at the encryption module, from a third computing device physically separate from the key pad, a request to transmit a third pin, the third computing device different from the second computing device and the third pin different than the second pin;
generating, at the encryption module, a second encryption key pair including a second public encryption key and a second private encryption key, the second private encryption key different than the first private encryption key and the second public encryption key different than the first public encryption key;
transmitting, from the encryption module, the second public encryption key to the third computing device, the second public encryption key different than the network encryption key;
receiving, at the encryption module, over the wireless link, a fourth pin block from the third computing device;
decrypting the fourth pin block to the third pin, at the encryption module, with the second private encryption key, the second private encryption key different than the network encryption key;
encrypting, with the encryption module, the third pin to a fifth pin block with the network encryption key; and
inputting, with the first computing device, the fifth pin block to the secure network.

7 . The method of claim 1 wherein said transmitting the certificate and the second certificate is further defined as:
transmitting the certificate and the second certificate to the second computing device in response to said receiving the request to transmit the second pin.

8 . The method of claim 1 further comprising:
receiving, at the encryption module, a random number from the second computing device, said receiving the random number prior to said receiving the second pin block from the second computing device and after said transmitting the certificate having the first public encryption key.

9 . The method of claim 8 further comprising:
transmitting, with the encryption module, a message with the random number back to the second computing device.

10 . The method of claim 9 further comprising:
signing the message, with the encryption module, with a first private signature key, the first private signature key different than the network encryption key.

11 . The method of claim 10 further comprising:
verifying, with the second computing device, the signature of the message using the first public signature key of the public signature certificate.

12 . The method of claim 11 further comprising:
encrypting, with the second computing device, the second pin with the first public encryption key associated with the certificate.

13 . The method of claim 1 further comprising:
receiving, at a third computing device having one or more processors, a first input defining a pre-staged transaction and including details of an exchange of at least one physical article at the first computing device and an account associated with a user, the third computing device remote from the first computing device, the encryption module, and the second computing device;
storing, with the third computing device, the first input in a database;
receiving, at the third computing device, a second input including the account associated with the user and indicative of the second computing device positioned proximate to the encryption module;
retrieving, with the third computing device, the first input from the database in response to said receiving the second input; and
communicating, with the third computing device, at least part of the first input to the first computing device in response to said receiving the second input, said communicating prior to said receiving the second pin block from the second computing device.

14 . The method of claim 13 further comprising:
generating, at the encryption module, an encryption key pair including the first public encryption key and a first private encryption key, both of the first public encryption key and the first private encryption key distinct from the network encryption key, said generating prior to said receiving the second pin block from the second computing device and in response to said communicating at least part of the first input to the first computing device.

Assignees

• Diebold Nixdorf Inc

Inventors

• Kuchenski David William
• Harris Richard
• Konecny Anne

Classifications

• G06Q20/4012 Primary

  Verifying personal identification numbers [PIN] · CPC title

• G07F19/211

  Software architecture within ATMs or in relation to the ATM network · CPC title

• G06Q20/18

  involving self-service terminals [SST], vending machines, kiosks or multimedia terminals · CPC title

• G07F19/201

  Accessories of ATMs · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title