Abstract: An automated banking machine is operative to carry out financial transactions and includes a user interface. The user interface includes a card reader which is operative to read data on user cards which identify user's financial accounts. A fascia of the machine includes a keypad through which users input confidential data. Covers prevent unauthorized persons from viewing confidential inputs to the keypad. Alternatively, movable panels are movable to prevent unauthorized viewing of confidential inputs. Alternatively a keypad cover is selectively collapsible to prevent digit access. A visual indicator is operative to indicate to a user that keypad inputs are being encrypted. Disinfecting techniques may be used to disinfect manual contact surfaces of the machine.

Abstract: An automated banking machine (12, 200, 302) is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP (204) that is operative to remotely receive an encrypted terminal master key from a host system (210, 304). The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device (30) of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.

Abstract: A card activated cash dispensing automated banking machine is provided that is operative to send a message to a host banking system, which message includes data representative of a request to transfer an encrypted terminal master key from the host banking system to the automated banking machine. A processor in an encrypting pin pad (EPP) in the automated banking machine is operative to decrypt a received encrypted terminal master key using an asymmetric encryption algorithm with a first private asymmetric key previously stored in the EPP. The EPP is operative to store the terminal master key in the EPP for use with decrypting at least one further key received from the host banking system.

Abstract: A cash dispensing automated banking machine that operates in response to data read from user cards includes a cash dispenser, keypad, and a card reader. The card reader is operative to read data bearing records such as user cards that include financial account information. The machine may include an encrypting pin pad (EPP) that is operative to remotely receive an encrypted terminal master key from a host banking system. The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key using a public key of a certificate authority. The machine may further receive and authenticate a new public for a new certificate authority for use with authenticating further terminal master keys.

Abstract: An automated banking machine (10) is operative to carry out financial transactions and includes a user interface (15). The user interface includes a card reader (16) which is operative to read data on user cards which identify user's financial accounts. A fascia of the machine includes a keypad (404, 438, 458) through which users input confidential data. Covers (400, 422, 430) prevent unauthorized persons from viewing confidential inputs to the keypad. Alternatively, movable panels (462, 464) are movable to prevent unauthorized viewing of confidential inputs. Alternatively a keypad cover is selectively collapsible to prevent digit access. A visual indicator is operative to indicate to a user that keypad inputs are being encrypted. Disinfecting techniques may be used to disinfect manual contact surfaces of the machine.

Abstract: An automated banking machine (10) is operative to carry out financial transactions and includes a user interface (15). The user interface includes a card reader (16) which is operative to read data on user cards which identify user's financial accounts. A fascia of the machine includes a keypad (404, 438, 458) through which users input confidential data. Covers (400, 422, 430) prevent unauthorized persons from viewing confidential inputs to the keypad. Alternatively, movable panels (462, 464) are movable to prevent unauthorized viewing of confidential inputs. Alternatively a keypad cover is selectively collapsible to prevent digit access. A visual indicator is operative to indicate to a user that keypad inputs are being encrypted. Disinfecting techniques may be used to disinfect manual contact surfaces of the machine.

Abstract: An automated banking machine (10) is operative to carry out financial transactions and includes a user interface (15). The user interface includes a card reader (16) which is operative to read data on user cards which identify user's financial accounts. A fascia of the machine includes a keypad (404, 438, 458) through which users input confidential data. Covers (400, 422, 430) prevent unauthorized persons from viewing confidential inputs to the keypad. Alternatively, movable panels (462, 464) are movable to prevent unauthorized viewing of confidential inputs. Alternatively a keypad cover is selectively collapsible to prevent digit access. A visual indicator is operative to indicate to a user that keypad inputs are being encrypted. Disinfecting techniques may be used to disinfect manual contact surfaces of the machine.

Abstract: A card activated cash dispensing automated banking machine is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP that is operative to remotely receive an encrypted terminal master key from a host system. The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.

Abstract: An automated banking machine (12, 200, 302) is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP (204) that is operative to remotely receive an encrypted terminal master key from a host system (210, 304). The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device (30) of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.

Abstract: An automated banking machine (12, 200, 302) is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP (204) that is operative to remotely receive an encrypted terminal master key from a host system (210, 304). The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device (30) of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.

Abstract: A card activated cash dispensing automated banking machine (12, 200, 302) is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP (204) that is operative to remotely receive an encrypted terminal master key from a host system (210, 304). The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device (30) of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.

Abstract: An automated banking machine (12, 200, 302) is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP (204) that is operative to remotely receive an encrypted terminal master key from a host system (210, 304). The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device (30) of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.

Abstract: An automated banking machine (12, 200, 302) is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP (204) that is operative to remotely receive an encrypted terminal master key from a host system (210, 304). The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device (30) of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.

Abstract: An automated banking machine (12, 200, 302) is provided. The machine may be operative to install a terminal master key (TK) therein in response to at least one input from a single operator. The machine may include an EPP (204) that is operative to remotely receive an encrypted terminal master key from a host system (210, 304). The machine may authenticate and decrypt the terminal master key prior to accepting the terminal master key. The machine may further output through a display device (30) of the machine a one-way hash of at least one public key associated with the host system. The machine may continue with the installation of the terminal master key in response to an operator confirming that the one-way hash of the public key corresponds to a value independently known by the operator to correspond to the host system.