GB2461975A

GB2461975A - A method of and apparatus for operating machines using a personal interface

Info

Publication number: GB2461975A
Application number: GB0911599A
Authority: GB
Inventors: Andrew Robin Searle
Original assignee: COMPLICITY Ltd
Current assignee: COMPLICITY Ltd
Priority date: 2008-07-18
Filing date: 2009-07-06
Publication date: 2010-01-27
Also published as: GB0900249D0; GB201008072D0; GB2468607A; GB0911599D0; GB0813252D0

Abstract

A method of performing a transaction with a machine 3 that does not have a user interface comprises: establishing a session via a user device 2 having a user interface with a computer 1 arranged to control operation of the machine 3, and providing details of a transaction that a user wishes to undertake, wherein if the transaction is approved the computer 1 sends an authorisation to the machine 3 to perform the transaction. The authorisation 6, 7 may be provided via the user device 2 or directly (8, Fig 2) from the computer 1 to the machine 3. The user device 2 is preferably a mobile telephone, PDA, or the like and communication with the computer 1 may be via a telecommunication network. The machine 3 is preferably an automatic teller machine (ATM), a vending machine, a ticket dispenser or a POS machine and may communicate with the user device 2 using near field communication methods, possibly radio-frequency. Shared secret (one-time codes) or challenge/response techniques may be used to provide additional security to the communications. Also disclosed is an ATM without a display and/or keypad.

Description

A METHOD OF AND APPARATUS FOR OPERATING MACHINES

AND A PERSONAL MOBILE INTERFACE

FIELD OF THE iNVENTION

The present invention relates to a method and apparatus which eliminates the need for a dedicated user interface on products in common use.

BACKGROUThD OF THE INVENTION Automatic teller machines have become common place. Their deployment is becoming more widespread, and a reduction in costs to provide such machines would facilitate their further deployment.

Authentication to automatic teller machines has been discussed in DE102004057377 which describes a number of ways in which mobile devices with a transponder may be used for electronic banking. These types of system make up a classification of access means referred to variously as Near Field Communications (NFC) or Mobile Contactless Payments. Thus a mobile phone enabled with a transponder as described in DE102004057377 can be used as an alternative method of access to an existing ATM machine in place of a credit or debit card.

SUMMARY OF THE INVENTION

According to a first aspect of the present invention there is provided a method of performing a transaction with a machine that does not have a user interface, the method comprising: establishing a session via a user device having a user interface with a computer arranged to control operation of the machine, and providing details of a transaction that a user wishes to undertake, wherein if the transaction is approved the computer sends an authorisation to the machine to perform the transaction.

It is thus possible to provide a means by which machines or other devices which are in common use, such as Automatic Teller Machines (ATM's), may be accessed by a users own device, for example a mobile phone. By providing the means by which the user may access the machine or device there is an opportunity to eliminate the user interface on the machine or device thereby reducing cost and improving security and the user experience.

Mobile phones, PDA's etc may be being used in a variety of ways to access financial transactions in accordance with the present invention.

ATM's are an integral part of modem life enabling easy access to cash. In particular, over the last ten years low cost versions of ATM machines have been deployed into locations where transaction volumes are low and payback is not sufficient to justify a more expensive device. A further reduction in capital cost would open up more potential locations. In addition the footprint of the ATM is important since these types of location are often in retail space where the value per square foot is an important financial consideration. Finally the security and infrastructure costs of the ATM are an important driver when assessing viability of a potential location for an ATM.

The inventor has realised that the factors which have an impact upon viability can be improved by eliminating the user interface from the ATM and enabling the user to access the services provided via their own device such as a mobile phone or PDA etc. An exemplary embodiment of the invention comprises an ATM which consists of a module which is capable of dispensing cash, and a means of communicating electronically either directly with a users mobile device or via a communication network such as the internet. The ATM has no user interface, i.e. no keypad or screen.

Preferably to access the services of the ATM the user seeks authentication directly from the issuing bank. This can be done directly from the user's mobile device to the bank.

The method of communication is largely irrelevant and may be via the GSM/GPRS network or via a WiFi hotspot for example. Altematively the user's mobile device may be used to seek authorisation from the bank via a local electronic connection, such as near field communication (NFC) to the ATM and from there to the bank via a wide area network.

Having successfully authenticated the user and his mobile device the user provides details of the transaction he requires (for example withdraw �50 cash) directly from his mobile device to the bank. If the transaction is authorised by the bank, the bank issues authority/instructions to the ATM to dispense the cash. The authority/instruction may be sent directly to the ATM via a network to which the ATM is connected, or it may be sent to the user's mobile device which is fitted with means to communicate locally with the ATM via for example Bluetooth or other form of transponder (NFC). In the later case the bank advantageously sends a shared secret, such as, for example, a one time code to the mobile device which is passed onto the ATM to authorise the withdrawal.

In either case the bank needs to be aware of which ATM the user is at, and therefore which ATM needs to dispense the cash. This may be done in a number of ways. For example the ATM may be identified by establishing the geographical location of the user and comparing that to the known location of the estate of ATM's. Alternatively the ATM may have a transponder or similar whose unique identity can be picked up by the mobile device and transmitted to the bank along with the request for banking services.

Alternatively the ATM may have a 2D or 3D barcode or similar which can be read by the mobile device and can establish the identity of the ATM. Alternatively, where the ATM is connected to the bank the ATM may obtain the unique identity of the mobile device and transmit this to the bank.

Whilst it may be that the user authenticates and requests services from the bank as described it may well be that the user has an electronic cash balance stored on the mobile device and this is used to authorise the dispensing of cash from the ATM.

The advantages of this invention are: * the costs savings of removing the user interface and associated hardware and software from the ATM; * better user experience, since the user's mobile device can be in the user's language which can be advantageous when using services abroad. In addition the layout and sequence of actions required to complete the transaction are consistent for the user no matter which type of ATM or bank is being accessed.

Where the user has a disability then the user's mobile device can be modified to meet their requirements without trying to provide a variety of disabled access means on each ATM; * the majority of the computing power and electrical power requirements of an ATM are associated with the user interface. By eliminating these requirements it becomes feasible to make the ATM battery powered so reducing infrastructure requirements; * at present most ATM's store the cash horizontally so as to efficiently use up the footprint determined by the equipment required for the user interface. With the removal of the user interface the cash could be stored vertically so reducing the required footprint. Alternatively the ATM could sit on a shelf allowing other goods to be positioned above and below the ATM. Either way the selling space taken up by the ATM is dramatically reduced; * with the removal of the user interface and associated equipment it becomes feasible to replace the whole ATM rather than only the cash cassette as a means of cash replenishment. This is particularly the case when security is provided by degradation devices rather than armouring as in the case of, for example, EP1499787. This ability to replace the whole machine as a method of replenishment improves the security of the system as well as simplifiying service and maintenance; * where the authority to dispense cash is by use of a bank issued one time code and a localised connection between the ATM and the users mobile device there is no need for a wide area communication linkage to the ATM. This again reduces cost and infrastructure requirement.

According to a second aspect of the present invention there is provided a machine operable to perform a transaction in accordance with the method as claimed in any of the claims ito 21.

According to a third aspect of the present invention there is provided an automatic teller machine having a mechanism for dispensing money, but not including at least one of a key board and a display.

The application of the invention has been described with reference to an ATM by way of example. The invention has similar benefits for other devices to which a user may need to interface including, but not limited to, Point of Sale machines, ticket dispensing machines, vending machines, bank deposit accepters etc or other devices, machines or systems.

Likewise we have used a mobile phone as an example of a users input device. Other devices that maybe used include PDA's, Netbook computers, and devices specially developed for the purpose.

BRIEF DESCRTPTION OF THE DRAWINGS

The invention will now be described by way of example with reference to the accompanying drawings in which: Figure 1 is a schematic drawing of one example of the system in which there is no wide area network available to the ATM or other device.

Figure 2 is a schematic drawing of one example of the system in which the ATM or other device is connected to a wide area network in common with the bank computer system.

DESCRTPTION OF PREFERRED EMBODIMENTS OF THE iNVENTION Figure 1 discloses an embodiment of the invention which comprises a bank's computer system 1, capable of authenticating users and authorising the withdrawal of cash. A mobile device 2, such as a smart phone, is capable of communicating with the bank's computer system 1 via a wide area network such a the GSM mobile phone network.

The mobile device 2 is also capable of communicating with an ATM 3 via a local electronic communication channel such as Bluetooth. The ATM 3 sends a message 4 containing a unique identity number to the mobile device 2. The mobile device 2 sends a message 5 to the bank's computer 1 containing authentication data, the unique identification number received from the ATM and details of the transaction requested (e.g. withdraw �50). This information is assessed by the bank computer system 1 and if approved a message 6 is sent to the mobile device 2 which contains a one time code, optionally incorporating the amount to be dispensed. The mobile device 2 sends a message 7 containing this information to the ATM 3. If the one time code is correct then the ATM 3 dispenses the requested cash.

Figure 2 shows a similar arrangement, and like reference numerals have been used for like parts. The arrangement comprises a bank's computer system 1, capable of authenticating users and authorising the withdrawal of cash. A mobile device 2 is capable of communicating with the bank's computer system 1 via a wide area network such a the GSM mobile phone network. The mobile device 2 is also capable of communicating with an ATM 3 via a local electronic communication channel such as Bluetooth. The ATM 3 is also capable of communicating with the banks computer system 1 via a wide area network such as the internet. The ATM 3 sends a message 4 containing a unique identity number to the mobile device 2. The mobile device 2 sends a message 5 to the bank's computer 1 containing authentication data, the unique identification number received from the ATM and details of the transaction requested (e.g. withdraw �50). This information is assessed by the bank computer system 1 and if approved a secure message 8 is sent to the ATM 3 authorising the dispensing of the cash.

In both of the above descriptions the messaging sequence has been simplified. For example the message 5 sent by the mobile device 2 to the bank 1 may actually comprise a number of messages. Likewise a single message between two devices often comprise a number of two way transmissions to verify and authenticate the transmission etc. A suitable means of authentication, as described in application GBO8 13252.4 involves the use of a modifier. The invention described therein provides an access control system for controlling access to a place, item or service, the access control system comprising a first device operable in response to a first code to permit access to a place, an item or a service, and where the first code changes as the first device is operated; an access database arranged such that a user can interrogate the access database to obtain a valid first code to operate the first device; a modifier database associating modifier operations with users; and a user interface such that a user can communicate with the access database to request the first code, and where the access database interrogates the modifier database to obtain the user's modifier operation, and applies an inverse of the modifier operation to the first code, and then transmits the first code to the user.

This earlier application, from which priority is claimed, also discusses using a mobile phone to pre-authorise a transaction of a specific ATM.

The bank then sends an authorisation code and amount to the ATM. An identical or associated code is sent to the user. When the user presents this code to the ATM his account is debited.

Claims

CLAIMS1. A method of performing a transaction with a machine that does not have a user interface, the method comprising: establishing a session via a user device having a user interface with a computer arranged to control operation of the machine, and providing details of a transaction that a user wishes to undertake, wherein if the transaction is approved the computer sends an authorisation to the machine to perform the transaction.
2. A method as claimed in claim 1, in which the user devices establishes communications with the computer via a communication link not involving the machine.
3. A method as claimed in claim 2, in which the user device establishes communication via a telecommunications network.
4. A method as claimed in claim 3, in which the telecommunications network comprises one of a mobile telephone network, a mobile data service, a mobile internet connection, and a local wireless connection to an internet service.
5. A method as claimed in claim 1, in which the user device establishes communication with the computer via the machine.
6. A method as claimed in any one of the preceding claims, in which the machine includes a wireless connection for establishing communication with the user device.
7. A method as claimed in claim 6, in which wireless communication is a nearfield communication link.
8. A method as claimed in any of the preceding claims, in which the machine has a communications link to the computer, and the computer can communicate instructions to the machine via the communications link.
9. A method as claimed in any of claims 1 to 4, 6 when not dependent on claim 5 and 7, in which the machine does not have a link to the computer, and an authorisation from the computer is sent to the machine via the user device.
10. A method as claimed in claim 9, in which the computer and the machine have a plurality of shared secrets, and the computer sends one of the secrets with the authorisation.
11. A method as claimed in claim 10, in which the secrets are one time codes.
12. A method as claimed in claim 10 or 11, in which the machine compares the version of the shared secret sent from the computer with its own version of the shared secret and performs the instructed transaction if they match.
13. A method as claimed in any of the preceding claims, in which the device displays or transmits a device identity, and the identity information is used by the computer to send the authorisation to the correct device.
14. A method as claimed in any of the preceding claims, in which the machine is an automatic teller machine.
15. A method as claimed in any of claims 1 to 13, in which the machine is a point of sale machine, a ticked dispensing machine, a vending machine or a deposit accepting machine.
16. A method as claimed in any of the preceding claims, in which the user device is a mobile telephone.
17. A method as claimed in any of claims 1 to 15, in which the user device is a computing device.
18. A method as claimed in claim 17, in which the computing device is a portable computing device, a PDA, a note book, a smart phone or a dedicated portable interface.
19. A method as claimed in any of the preceding claims, in which the step of establishing a session with the computer comprises a challenge and response to authenticate the identity of a user.
20. A method as claimed in claim 19, in which the challenge and response includes use of a user modifier.
21. A method as claimed in any of claims 1 to 18, in which the step of establishing a user session involves a user presenting one or more of a user name, user token, password, PIN or a shared secret to the computer to establish the user's identity.
22. A machine operable to perform a transaction in accordance with the method as claimed in any of the claims 1 to 21.
23. An automatic teller machine having a mechanism for dispensing money, but not including at least one of a key board and a display.
24. An automatic teller machine as claimed in claim 23, in which the ATM is arranged to receive an authorisation from a bank computer to dispense money.
25. An automatic teller machine as claimed in claim 24, in which the authorisation includes an indication of the amount to be dispensed.
26. An automatic teller machine as claimed in claims 23 to 25, further including memory storing a plurality of secrets shared with the bank computer, and a secret is transmitted from the bank computer to the automatic teller machine to allow the automatic teller machine to assess the authenticity of the authorisation.
27. An automatic teller machine as claimed in any of claims 23 to 26, further including one of a Bluetooth, WiFi and near field communications device.
28. An automatic teller machine as claimed in any of claims 23 to 27 further comprising a device identity means such that the automatic teller machine can be identified to the bank computer by a user.
29. An automatic teller machine as claimed in any of claims 23 to 28 operated in accordance with the method of any of claims 1 to 21.
30. A bank computer system adapted to operate in accordance with the method of any of claims ito 21.