Abstract: An SST facilitates authentication of a user through an external service via a mobile device operated by the user. The SST also obtains independent verification of an access command sent from a server through a cryptographic peripheral module integrated into the SST before sending a command to grant authenticated access to the SST in response to the access command.

Abstract: A method of providing secure authentication of a service user at a self-service terminal is described. The method comprises: detecting attempted access by the service user to a restricted function on the self-service terminal; ascertaining if a removable storage device is in communication with the self-service terminal; in the event that a removable storage device is not in communication with the self-service terminal, denying access to the restricted function; in the event that a removable storage device is in communication with the self-service terminal, prompting the service user to enter login credentials. The method further comprises comparing the entered login credentials with access details stored on the removable storage device; denying access to the restricted function if the entered login credentials do not comply with the access details; permitting access to the restricted function if the login credentials do comply with the access details; and storing details relating to the access.

Abstract: An SST facilitates authentication of a user through an external service via a mobile device operated by the user. The SST also obtains independent verification of an access command sent from a server through a cryptographic peripheral module integrated into the SST before sending a command to grant authenticated access to the SST in response to the access command.

Abstract: A session transfer computer program is described. The program comprises: a credential management component arranged to store credentials used by a first device in a session; and a session transfer component arranged to send a request to a second device for transferring the session thereto.

Abstract: A method of providing secure authentication of a service user at a self-service terminal is described. The method comprises: detecting attempted access by the service user to a restricted function on the self-service terminal; ascertaining if a removable storage device is in communication with the self-service terminal; in the event that a removable storage device is not in communication with the self-service terminal, denying access to the restricted function; in the event that a removable storage device is in communication with the self-service terminal, prompting the service user to enter login credentials. The method further comprises comparing the entered login credentials with access details stored on the removable storage device; denying access to the restricted function if the entered login credentials do not comply with the access details; permitting access to the restricted function if the login credentials do comply with the access details; and storing details relating to the access.