US 12,288,077 B2
Multi-boot architecture for electronic interaction device
Alexander Medeiros, Arlington, VA (US); Mitchell Miller, Tysons, VA (US); Rex Lacy, Sterling, VA (US); Michael Littlejohn, Fairfax, VA (US); and David Wurmfeld, Fairfax, VA (US)
Assigned to Capital One Services, LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Mar. 23, 2021, as Appl. No. 17/209,737.
Prior Publication US 2022/0308891 A1, Sep. 29, 2022
Int. Cl. G06F 9/4401 (2018.01); G06F 21/57 (2013.01); G06F 21/60 (2013.01); H04L 9/40 (2022.01)
CPC G06F 9/441 (2013.01) [G06F 9/4408 (2013.01); G06F 9/4416 (2013.01); G06F 21/572 (2013.01); G06F 21/602 (2013.01); H04L 63/04 (2013.01)] 20 Claims
OG exemplary drawing
 
1. An automated teller machine (ATM), comprising:
a user interface configured to receive interaction requests by a user;
a first data storage medium storing a first operating system, wherein the first data storage medium is encrypted such that decryption is required to access the first operating system;
a second data storage medium storing a second operating system;
a memory storing instructions; and
a control unit including a processor, wherein the control unit is operatively connected to the memory and configured to execute the instructions to carry out a plurality of operations, including:
booting the ATM to the first operating system in response to the ATM being powered on;
receiving an operating system image containing an updated operating system;
overwriting the second operating system on the second data storage medium with the updated operating system;
booting the ATM to the updated operating system in response to the overwriting;
determining an error status of the updated operating system, the error status being indicative of an error in the updated operating system;
transmitting a notification of the error status of the updated operating system to a remote server via a secure communications channel;
receiving a boot instruction from the remote server via the secure communications channel, wherein the boot instruction is transmitted in response to the notification of the error status; and
in response to the boot instruction, automatically decrypting the first data storage medium and booting the ATM to the first operating system instead of the updated operating system.