WO2000017791A1

WO2000017791A1 - Method and apparatus for authenticating vending machine sales data

Info

Publication number: WO2000017791A1
Application number: PCT/US1999/018426
Authority: WO
Inventors: Daniel E. Tedesco; James A. Jorasch
Original assignee: Walker Digital, Llc
Priority date: 1998-09-18
Filing date: 1999-08-12
Publication date: 2000-03-30
Also published as: AU6129499A

Abstract

A method and apparatus is disclosed that documents the authentication of sales data generated at an automatic sales machine. In operation, the apparatus accumulates sales data. The apparatus also encodes the sales data, thereby deriving encoded sales data (618). The apparatus further outputs the encoded sales data to a user (622). A method and apparatus for authenticating the documented sales data is also disclosed.

Description

WO 00/17791 PCTtUS99tl8426

METHOD AND APPARATUS FOR AUTHENTICATING VENDING

MACHINE SALES DATA

Cross-Reference to Related Corresponding Applications

This is a continuation-in-part of commonly owned, co-pending U.S. Patent Application Serial No. 08/677,544 entitled "REMOTE AUDITING OF COMPUTER

GENERATED OUTCOMES AND AUTHENTICATED BILLING AND ACCESS

CONTROL SYSTEM USING CRYPTOGRAPHIC AND OTHER PROTOCOLS" filed 8/8/96, which is a continuation-in-part of U.S. patent application Ser. No. 08/561,668 of the same title, now U.S. Patent No. 5,768,382; and is further a continuation-in-part of commonly owned, co-pending U.S. application Serial No. 08/628,920 entitled "METHOD AND SYSTEM FOR SECURE MEASUREMENT

CERTIFICATION" filed 4/8/96, the entirety of each incorporated by reference herein.

Background of the Invention

Field of the Invention

The present invention relates generally to vending machines. More particularly, the present invention relates to a method and apparatus for authenticating operational

data of a vending machine. Description of the Related Art

Modern vending machines are employed to store and dispense a vast array of

merchandise in response to a customer request and appropriate payment. Such

merchandise includes drinks, candy, frozen deserts, snacks, video tapes and children's toys. Many entrepreneurs are attracted to the basic concept of selling products using a vending machine due to the significant advantages attributed to vending machines over traditional merchandising, such as 24-hour convenience, lower labor costs, and non- traditional locations.

In order to enable an automated vending machine to operate profitably, many operators place vending machines in high-traffic areas, such as office parks and retail stores. Real estate owners often lease space to vending machine operators in exchange for a flat rental fee or a portion of either the revenue or profit periodically earned from

any associated machines. The typical profit-sharing arrangement is intended to

compensate the real estate owner for, among other things, the floor space utilized, utilities and the additional burdens placed on the real estate owner, such as handling customer complaints. Similar profit-sharing agreements are often employed between

vending machine operators and product distributors.

Because of an operator's exclusive control over and access to a vending machine, a party to a profit-sharing agreement, such as a real estate owner or a product distributor, must rely on the vending machine operator to truthfully and accurately report revenues and profits. Interested parties, such as real estate owners and product

distributors, presently have no way of verifying that the operator is truthfully and

accurately reporting a machine's profits or revenues.

Another trust-based relationship in the vending machine industry is the relationship between vending machine operating companies that own and manage a number of vending machines and their employees who manage the localized areas in which the operating company has a presence, commonly referred to as "route

managers." Route managers are primarily responsible for re-stocking machines with inventory and collecting the money earned by the machines on their route. There is presently no reliable way to verify that a route manager has returned all the revenues generated by the vending machines for which he is responsible.

Prior art attempts to solve the problems associated with these trust-based relationships include location masking schemes, hand-held data collection units and remote reporting systems. One prior art method attempted to verify revenues by masking the location associated with each collection bag. By masking the locations

associated with each collection bag, the operating company's cash room personnel who count collections have no idea which bags are assigned to which locations. Because

only management knows the location assignments, cash room fraud is reduced and easier to detect. This method, however, only protects an operating company against cash room fraud, and fails to address fraud and mistakes made by route managers.

Further, this method fails to protect real estate owners and product distributors against

fraud by vending machine operators.

Another attempt to overcome the deficiencies of the prior art is disclosed in U.S. Patent Number 5,257, 179 to DeMar, entitled "AUDIT AND PRICING SYSTEM FOR

COIN-OPERATED GAMES." DeMar discloses a tamper-resistant system for recording the occurrence of various events, such as the number of games played, the

insertion of coins, operating of the coin door, collection of money from the coin box, resetting of the system clock and various game statistics. In order to verify the accuracy of sales data reported by an operator of a coin-operated device employing the invention

of DeMar, an interested party must have access to or control over the coin-operated

device. Since many interested parties may not exercise such control, the requirement of control is a significant deficiency of the prior art. Further, the DeMar invention requires a considerable time investment (e.g. traveling to the site of the coin-operated machine) by the interested party to verify the accuracy of any reported sales data.

Other prior art devices rely on increased accessibility to vending machine sales

data through new electronic communications protocols and through hand-held data collection devices. New communication protocols enable the remote monitoring and access to vending machines sales data. For example, operators use cellular technology to monitor changes in inventory. Even power lines have been used to monitor vending

machine sales data, as illustrated in U.S. Pat. No. 5,452,344 to Larson, entitled

"COMMUNICATION OVER POWER LINES." Hand-held data devices have been employed by operators to download sales data from vending machines during the restocking process. The downloaded data is stored for subsequent evaluation. The

downloaded sales data may include "product turns" and "out of orders." Examples of such devices include the AUDITPRO 2000, manufactured by Hamilton Mfg. Corp. of Holland, Ohio, and those commonly manufactured by CompuVend of Bridge City, LA. Yet another example is illustrated in U.S. Pat. No. 5,442,568 to Ostendorf, entitled "VENDING MACHINE AUDIT MONITORING SYSTEM."

Downloaded sales data may be accessed and analyzed using specialized accounting software, such as the accounting software developed by Vendmaster

Software Systems of Scottsdale, AZ. The Vendmaster software produces reports on sales data including analyses of profitability, expenses, optimal restocking schedules

and collection schedules.

Devices that download sales data, however, ultimately fail to eliminate the need for, and associated problems with, a trusted party. Such devices still require an operator to correctly perform the downloads, without manipulating or falsifying the downloaded

data.

Accordingly, the aforementioned relationships in the vending industry presently

suffer because the reported sales data of vending machines is not trustworthy. If trust could be established, and sales data could be verified, interested parties would be less hesitant to start, continue or develop relationships with vending machine operators.

Consequently, a need therefore exists for a method and apparatus that addresses the

deficiencies of the prior art. Specifically, a need exists for a vending method and apparatus that enables sales data to be authenticated without requiring access to or control over a vending machine.

Summary of the Invention

An object of the present invention is to provide a vending machine which outputs documented sales data associated with the vending machine and securely outputs the documented sales data to an operator for reporting to an interested party, such as a real estate owner or product distributor, thereby enabling the interested party

to authenticate that the operator is truthfully and accurately reporting the sales data.

An advantage of the present invention is that it enables a vending machine operator to automatically produce trustworthy sales data associated with a vending machine. A related advantage of the present invention is that it enables an interested party to rely on sales data submitted by a vending machine operator.

A feature of the present invention is that the interested party authenticating the

documented sales data performs the process off-line, without the need to access or control the remote vending machine. According to the present invention, a method and apparatus are disclosed for documenting sales information generated at an off-line automatic sales machine. The method includes the step of measuring a parameter indicative of the sales information.

The method further includes the step of encoding at least the parameter indicative the sales information to derive a encoded sales data. The encoded sales data is output to an operator for verifying by an interested party.

The above objects, features and advantages, as well as others, are readily apparent from the detailed description when taken in connection with the accompanying

drawings.

Brief Description of the Drawings

A more complete appreciation of the invention and many of the attendant

advantages thereof may be readily obtained by reference to the following detailed description when considered with the accompanying drawings, wherein: Figure 1 is a schematic block diagram illustrating the components of a vending machine according to one embodiment of the present invention;

Figure 2 is a schematic block diagram illustrating the components of a vending

machine according to a second embodiment of the present invention;

Figure 3 is a schematic block diagram illustrating the components of a third party server according to the present invention;

Figure 4 is a schematic block diagram illustrating a system for authenticating

documented sales data;

Figure 5 is a table showing components of an exemplary encoded information

table; Figure 6 is a flowchart illustrating a first computer-implemented process enabling a operator to document sales data;

Figure 7 is a flowchart illustrating an alternate computer-implemented process enabling a operator to document sales data; and

Figure 8' is a flowchart illustrating a computer- implemented processes enabling a third party to authenticate documented sales data.

Detailed Description

By enabling a route manager or vending machine operator to document sales

data relating to a vending machine, the route manager or vending machine operator can provide trustworthy sales data to an interested party, such as a real estate owner, a vending machine leasee, a product distributor or a taxing authority, such as the Internal Revenue Service. The documented sales data may be authenticated by the interested

party to verify that the provided sales data is accurate. Consequently, the method and apparatus of the present invention eliminate the need for trust by an interested party, thereby strengthening relationships within the vending machine industry that previously

required trust.

The present invention is directed to a method and apparatus for producing

documented sales data that may be reliably authenticated. The present invention is further directed to a method and apparatus for authenticating documented sales data.

The present invention ensures that the documented sales data may not be altered or

falsified by encoding at least a portion of the sales data.

Apparatus Architecture The apparatus architecture of the present invention will now be discussed with reference to Figures 1-4. Figures 1 and 2 illustrate the components of two exemplary vending machines 100 and 200, respectively, which include the features of the present

invention. Although specific exemplary vending machines 100 and 200 are referred to throughout the detailed description, the present invention is directed to any automatic

sales machine that allows payment to be exchanged for goods or services, including traditional vending machines, slot machines, automated teller machines ("ATMs"),

information kiosks and pay telephones. Payment can be presented through a variety of

media including, but not limited to, coins, bills and other currencies, magnetic stripe cards and smart cards (whether pre-paid or linked to an account), and identification codes.

Referring to Figure 1, vending machine 100 includes a processor 110 for

controlling the operation of vending machine 100. Processor 110 may be any one of many well known processing units commonly used in an automated sales device, for

example a Pentium class CPU manufactured by Intel Corp. Processor 110 communicates with conventional elements of vending machine 100, such as random access memory ("RAM") 114, read-only memory ("ROM") 116 and clock 118.

Processor 110 further communicates with storage device 112 which stores

encoding protocol table 130, encoded information table 500, inventory table 134, transaction table 136 and program 138. Encoding protocol table 130 stores data describing the algorithms for the encoding of sales data, and may include private keys, public keys and encoding instructions as necessary. Inventory table 134 stores data

describing the inventory of vending machine 100. Inventory table 134 may include data identifying products and describing quantities, prices, and other commonly tracked inventory data. Transaction table 136 stores data describing the transactions processed by vending machine 100. Transaction table 136 may include transaction dates, times, amounts and quantities, as well as other commonly tracked transaction or accounting data. A portion of the sales data documented by the present invention may be stored in

transaction table 136.

Storage device 112 comprises an appropriate combination of magnetic and

optical memory, such as disk drive memory, and semiconductor memory such as random access memory and read only memory. In addition to the program instructions

and data shown in Figure 1, storage device 112 may store appropriate operating system

and control software (not shown), functional to operate vending machine 100 in the

manner described below.

As shown, vending machine 100 also includes an input/output device 122 for receiving input from a customer indicating a product selection. Input/output device 122

may also be used for receiving input from an operator during stocking or maintenance of vending machine 100. Input/output device 122 preferably includes a set of alphanumeric keys for providing input to vending machine 100. Alternatively, input/output device 122 could include a selector dial, a set of buttons associated with a

respective set of item dispensers, or any other conventional input device commonly

employed by a vending machine. Further, vending machine 100 may include more than one input/output device 122. For example, vending machine 100 may include an exterior input/output device 122 for receiving customer input and an interior input

device (not shown) for receiving operator input. In the illustrated embodiment, input/output device 122 provides the dual functionality of receiving input data from

both operators and customers. Input/output device 122 is also used to output information to a customer or operator. Input/output device may include a liquid crystal display ("LCD"), light-emitting diode ("LED") display or any other audio/visual output mechanism known by one skilled in the art.

Vending machine 100 also includes a conventional product dispenser 140 and a payment processing device 120. Payment processing device 120 may include several

mechanisms for receiving payment and dispensing change, including a coin acceptor, bill validator, magnetic stripe reader and change dispenser. Payment processing device

120 may include conventional devices such as Mars models AE-2400, MC5000,

TRC200 or CoinCo model 9300-L. According to the present invention, a route manager or vending machine operator services vending machine 100. The servicing may include re-stocking products, removing currency stored by payment processing device 120, and other routine maintenance tasks. During the servicing, processor 110 executes program 138 to perform a sales documentation process resulting in encoded sales data being output

to the operator. The sales documentation process may be triggered by the opening of a door (not shown) of vending machine 100, a request received from the operator via input/output device 122, a sensor (not shown) of payment processing device 120, the sale of a product or any other sales or servicing event. In addition, the sales

documentation process may be executed at regular, pre-determined intervals or substantially continuously. In order to provide security, the sales documentation process should be executed prior to allowing an operator to remove cash and coin from payment processing device 120. Of course, this may require payment processing device 120 to include a locking device which may be controlled by processor 110. The sales data that is documented may include any data that describes the operation of vending machine 100 over a specific period of time. For example, the sales data may include a quantity of goods or services sold, an amount of currency collected, inventory identification information such as bar codes or serial numbers and

machine identification information. The sales data may include other information, such as the number of times the door has been opened, a re-stocking date, an operator identifier, an apparatus identifier, accumulated totals or a diagnostic test result or a

secure perimeter test result.

The sales data is encoded to discourage any material alteration of the encoded

sales data, and to enable detection of such alteration. The code may be generated by encrypting a specific sales figure or by "hashing" sales data corresponding to a previous period, such as total revenue collected, total profits realized, as well as product

identification information.

After generating the encoded sales data, vending machine 100 outputs the encoded sales data to the operator via input/output device 122. The operator presents the encoded sales data to an interested party along with the actual sales data, enabling the interested party to verify that the sales data provided by the operator is accurate.

The process steps of the sales documentation process are more fully described with

reference to Figure 5. Referring now to Figure 2, vending machine 200 is illustrated containing many of the same elements as vending machine 100. Elements that are common to both vending machine 100 and vending machine 200 are referred to in Figures 1 and 2 using

like reference numerals. In addition to elements common to vending machine 100, vending machine 200 includes a secure encoding module 204 for performing the encoding steps of the present invention. Although secure encoding module 204 is shown as being integrated with vending machine 200, secure encoding module 204 may be embodied as an add-on module for retrofitting conventional vending machines. Vending machine 200 further includes inventory management apparatus 150 for performing inventory management steps according to an alternate method of the present

invention. Inventory management apparatus 150 is preferably a controller for monitoring and controlling access to inventory. In embodiments in which vending machine 200 is an ATM, inventory management apparatus 150 is a controller for securely counting and dispensing currency to an operator.

As shown, secure encoding module 204 includes processor 210, RAM 214,

ROM 216, clock 218 and communication port 220. Communication port 220 enables communication between secure encoding module 204 and processor 110 of vending machine 200. Secure encoding module 204 further includes storage device 212 storing

encoding protocol table 130, encoded information table 500 and documenting program 234. The elements of secure encoding module 204 are preferably encased in secure perimeter 202. Secure perimeter 202 is a substantially secure housing or casing that serves to prevent unauthorized access or tampering. In one embodiment, encoding

module 204 is encased within a steel frame with only a small hole through which a wire

may be passed for communication between communication port 220 and processor 110. In another embodiment, encoding module 204 is completely chip-based, with all of the chips covered in an epoxy or resin which is allowed to harden. In such an embodiment, attempts to remove a chip will result in damage substantial enough that it may not be

replaced after tampering. Vending machine 200 operates in accordance with an alternate method of the present invention. As in the preferred embodiment, a predetermined event triggers the processing of sales data. Processor 210 executes documenting program 234 to perform

the process. Unlike the preferred embodiment, the sales data includes data supplied by inventory management apparatus 150. For example, in the case where vending machine

200 is an automated teller machine ("ATM"), the operator may withdraw a specified amount of currency. In that example, inventory management apparatus 150 would count the currency to be removed from the ATM and supply the data to processor 210 for use in the sales data documenting process. The process steps of an alternate sales

documentation process are more fully described with reference to Figure 6.

Referring now to Figure 3, there is illustrated a trusted third party server 300 for authenticating documented sales data. The components of server 300 include processor 310, communication port 312, RAM 314, ROM 316, clock 318 and storage device 320. Communication port 312 is operatively connected to processor 310 for transmitting and

receiving data over network 340. Clock 318 is operatively connected to processor 310 for maintaining and providing a chronographic measurement, such as time and date. In the preferred embodiment, communication port 312 may be a modem employing a

dual-tone modulated frequency ("DTMF") transceiver (not shown) to receive input

from a user over network 340. Alternatively, communication port 312 may interface processor 310 to a smart card reader, a hand-held data collection device or an I/O device controllable by a human operator.

Storage device 320 is operatively connected to processor 310 providing storage

for and access to process instructions and data. Storage device 320 stores decoding protocol table 330 and authenticating program 332, including instructions for implementing the authenticating process steps of the present invention. Storage device 320 is preferably a conventional disk drive employing magnetic media, a CD-ROM drive, optical disk drive, RAM drive or any other conventional storage device as would be deemed appropriate by one of ordinary skill in the art. Referring now to Figure 4, there is illustrated an exemplary system for

documenting and authenticating documented sales data. The exemplary system includes vending machine 200 for producing a code representing sales data by

employing inventory management apparatus 150 and secure encoding module 204. Secure encoding module 204 generates the code by encoding sales data received from

inventory management apparatus 150. Although the exemplary system is shown to include vending machine 200, vending machine 100 may be substituted for vending machine 200. The exemplary system further includes a user device 430 connected to a trusted third party server 300 via network 340.

In operation, an operator 410 performs routine maintenance on vending machine

200 and, for example, withdraws at least a portion of the currency collected by vending machine 200. During the routine maintenance, operator 410 indicates a request to withdraw the currency using input/output device 122 (see Figure 2) causing inventory

management apparatus 150 to count and dispense the currency, and causing secure

encoding module 204 to generate encoded sales data based on the amount withdrawn. Vending machine 200 outputs the encoded sales data via input/output device 122.

In the simplest embodiment, the encoded sales data will be an encoded version of the actual sales data, but in preferred embodiments, it may include an operator

identifier (e.g., a personal identification number ("PIN") or biometric data), a device identifier, a facility identifier or other pertinent information such as a timestamp. Common types of encryption which may be employed by the present invention are described in "Applied Cryptography, 2nd Edition" by Bruce Schneier, 1996.

Operator 410 or input/output device 122 may record the encoded sales data for

reporting to authenticating user 420. Authenticating user 420, employing a user device 430, such as a touch-tone telephone or personal computer, provides the encoded sales data and the plain text sales data to trusted third party server 300 via network 340.

Server 300 decodes the encoded sales data and compares the decoded sales data to the plain text sales data. In this way, server 300 determines whether the documented sales data is accurate and communicates the results of the authentication process to

authenticating user 420 via user device 430. It is important to note that the method of

the present invention is an off-line process that enables an interested party, authenticating user 420 in Figure 4, to authenticate sales data provided by operator 410. It should further be noted that the present invention enables authenticating user 420 to

authenticate the sales data without requiring access to or control over vending machine

200.

Data Table

Referring now to Figure 5, the contents of an exemplary encoded information table 500 are illustrated, in a tabular format. Encoded information table 500 provides a

log detailing the sales data output by vending machine 200. Each record of encoded information table 500 corresponds to sales data output to an operator, and includes an operator identifier 510, a timestamp 512, non-encoded sales data 514 and encoded sales

data 516. Operator identifier field 510 stores data identifying an operator of vending machine 200. Timestamp field 512 stores data identifying the date and time the associated record was stored. Sales data field 514 stores data representing the plain text

version of sales information output to the operator. Encoded sales data field 516 stores data representing an encoded version of the information stored in sales data field 514.

The contents of encoded sales data field 516 shown in Figure 5 are merely illustrative, and may be generated based on any well-known cryptographic protocol.

The exemplary encoded information table 500 includes two records. Record

520 represents sales data output on 6/8/98 at 3:15 pm. The sales data was output to an

operator having operator identifier "70592." The sales data indicates that $305.75 was received by vending machine 200 between the dates of 6/1/98 and 6/8/98. An encoded version of the sales data ("AE1X92") is stored in encoded sales data field 516. Record 530 represents sales data output on 6/15/98 at 2:58 pm. The sales data was output to the operator having operator identifier "70592," and indicates that $295.15 was received

by vending machine 200 between the dates of 6/8/98 and 6/15/98. An encoded version of the sales data ("5B76GM") is stored in encoded sales data field 516.

Apparatus Operation

Having thus described the architecture and components of the present invention,

the operation of vending machine 100, vending machine 200 and trusted third party server 300 will now be described in greater detail with reference to Figures 6-8, and

continuing reference to Figures 1-5.

Referring now to Figure 6, a flowchart is presented illustrating the process steps

of the sales documentation process implemented by vending machine 100. At block 610, vending machine 100 accumulates and stores sales data. The accumulation of sales data may be accomplished in any number of conventional ways. In the preferred embodiment, the accumulated sales data is stored in transaction table 136.

An operator request for the sales data is received by vending machine 100 at

block 612. The^equest may be manually entered by the operator, or it may be automatically generated based on the activity of the operator. For example, the opening of the door of vending machine 100 may trigger execution of the sales documentation process. At blocks 614 and 616, respectively, vending machine 100 retrieves the

requested sales data from transaction table 136, and retrieves encoding instructions

from encoding protocol table 130.

Vending machine 100 encodes the retrieved sales data at block 618. The sales data may be encoded according to any of a number of cryptographic protocols. In one embodiment, vending machine 100 may generate encoded sales data using a stored

symmetric cryptographic key in conjunction with a cryptographic algorithm. The

algorithm encrypts the data using the key, generating an encrypted code that is not decipherable by an operator. Accordingly, the operator may present the code along with plain text sales data to an interested party. The interested party can either decipher the

information themselves or use a trusted third party by applying the same symmetric

cryptographic key. In another embodiment, vending machine 100 may encode the retrieved sales data using public key cryptography. In this case, vending machine 100 would store a

private key, preferably in a database, chip or firmware protected by a secure perimeter. Vending machine 100 would encrypt the sales data with the private key to generate a

code that is not decipherable by an operator. As above, the interested party can then decipher the information either themselves or through a trusted third party. This time, however, they code would be deciphered using a commonly known public key.

Although the preferred cryptographic embodiments provide strong security

against the encoded data being decoded, the invention may be practiced with other algorithms (sudh as simple ciphers and transpositional protocols) which serve to prevent casual fraud. In addition to a hash algorithm, for example, a checksum protocol

could be used.

At block 620, the encoded sales data is stored in encoded information table 500

along with the plain text sales data, an operator identifier and a timestamp. The encoded sales data, and optionally the plain text sales data is output to the operator via input output device 122, as shown at block 622.

It should be noted that encoding process may be embodied to employ well- known digital signature techniques as an alternative to traditionally encoding the sales

data. In such an alternate embodiment, the plain text sales data may be digitally signed and output in place of the encoded sales data. By utilizing digitally signed plain text sales data, any tampering could be detected.

Referring now to Figure 7, a flowchart is presented illustrating the process steps

of an alternate sales documentation process implemented by vending machine 200. The

process is particularly well suited for implementation using an ATM. At block 710, vending machine 200 receives a request from an operator to withdraw currency. The request preferably includes an amount to withdraw. At block 712, vending machine 200 totals the currency to be withdrawn, and dispenses the currency at block 714.

At blocks 716 and 717, respectively, vending machine 200 retrieves the system

time from clock 218 and retrieves encoding instructions from encoding protocol table 130. Vending machine 200 encodes the amount of total currency withdrawn and system time at block 718. The encoded sales data is stored in encoded information table 500 along with the plain text sales data, an operator identifier and a timestamp at block 720. The encoded sales data, and optionally the plain text sales data is output to

the operator via input/output device 122, as shown at block 722.

Referring now to Figure 8, a flowchart is presented illustrating the computer implemented process steps of a documented sales authentication process implemented using authenticating program 332. At block 810, third party server 300 receives a

request to authenticate documented sales via communication port 312. The request includes encoded information provided by an interested party and preferably further includes the plain text version of the encoded sales data. Preferably, the request is transmitted by the interested party via an interactive voice-response unit ("IVRU").

At blocks 812 and 814, respectively, third party server 300 retrieves decoding

instructions from decoding protocol table 330 and executes the decoding instructions, thereby decoding the sales data. Third party server 300 determines if the decoded sales data matches the plain text sales data at block 816, and outputs the result of the determination via communication port 312 at block 818.

The disclosed method and apparatus for documenting and authenticating sales data may be applied to a number of industrial and commercial applications to support trust-based relationships. When embodied in accordance with a vending machine, sales data can be certified for location owners, machine lessors, product manufacturers, vending machine operating companies and the like. The sales data that can be certified

may include the vended dollar volume, the total profitability of the machine, the quantity of transactions, the demand rates for individual products, the sales quantity of

an individual product, or the like.

When embodied in accordance with a slot machine or video poker device, the

present invention documents and authenticates sales data for casino managers and

regulatory authbrities. In such an embodiment, sales data could include the odds the machine offered to players, the profitability of the machine or the total dollar volume transacted.

When embodied in accordance with an off-line POS terminal, the encoded sales

data could be used to further authenticate that a cashier has accurately reported and provided the proper amount of cash to the retail manager.

When embodied in an ATM, the invention can document and authenticate the amount of fees generated by the machine to location owners, such as convenience store owners. Convenience store operators reportedly earn approximately 60% of the fees generated from ATM machines at their stores. Using the present invention, a

convenience store owner and/or manager may now verify that the bank that services an ATM installed in a convenience store is accurately reporting the amount of fees

generated by the machine.

Banks may employ the present invention to ensure that ATM maintenance personnel report the correct amounts, in the right denominations, and even with the right serial numbers on the bills. The present invention enables the ATM to monitor the amounts, denominations and/or serial numbers via the bill validator/acceptor, and to

generate encoded "pick-up" data. In fact, the authentication enabled by the present invention would allow a bank to outsource pick-up responsibilities to location owners, such as convenience store owners, because the information pertaining to the cash to be picked up can be authenticated.

While the best mode for carrying out the invention has been described in detail,

those familiar with the art to which the invention relates will recognize various alternative designs and embodiments for practicing the invention. These alternative embodiments are within the scope of the present invention. Accordingly, the scope of the present invention embodies the scope of the claims appended hereto.

Claims

We claim:

1. A method for documenting sales information generated at an automatic sales

machine, the method including the steps of: accumulating sales data; encoding the sales data to derive encoded sales data; and outputting the encoded sales data to an operator.

2. The method of claim 1 further including the step of receiving a request to output

the encoded sales data.

3. The method of claim 1 further including the step of determining that a sale has

been completed, and wherein the step of outputting is performed in response to the step

of determining.

4. The method of claim 3 wherein the step of encoding is performed in response to

the step of determining.

5. The method of claim 4 wherein the step of accumulating is performed in

response to the step of determining.

6. The method of claim 1 wherein the step of accumulating includes the step of counting at least a portion of currency received from sales completed at the automatic

sales machine.

7. The method of claim 6 wherein the step of accumulating further includes the

step of dispensing the counted currency.

8. The method of claim 1 wherein the step of encoding includes encrypting based on a symmetric cryptographic key.

9. The method of claim 1 wherein the step of encoding includes encrypting based on a public key and private key.

10. The method of claim 1 wherein the step of encoding includes applying a digital signature to the sales data to derive encoded sales data.

11. A method for documenting an amount of currency dispensed at an automatic sales machine, the method including the steps of: receiving a request to dispense currency; counting at least a portion of currency received from sales completed at the

automatic sales machine to determine an amount of dispensed currency; dispensing currency equal in value to the amount of dispensed currency; encrypting at amount of dispensed currency to derive an encoded currency value; and

outputting the encrypted currency value to an operator.

12. A method for authenticating documented sales information generated at an sales machine, the method including the steps of: receiving encoded sales data;

decoding the encoded sales data to derive decoded sales data; and verifying the authenticity of the decoded sales data.

13. A method for authenticating a documented amount of sales completed by an automatic sales machine, the method including the steps of:

receiving encrypted sales data;

decrypting the encrypted sales data to derive a decrypted sales data indicative of an amount of sales completed by the automatic sales machine; and verifying the authenticity of the decrypted sales data.

14. An automatic sales machine for documenting sales information, the automatic sales machine comprising:

a processor; a memory connected to said processor storing a program to control the operation

of said processor; the processor operative with the program in the memory to: accumulate sales data; encode the sales data to derive encoded sales data; and

output the encoded sales data to an operator

15. The automatic sales machine of claim 14 wherein the processor is further operative with the program in the memory to receive a request to output the encoded

sales data.

16. The automatic sales machine of claim 14 wherein the processor is further operative with the program in the memory to determine that a sale has been completed, and output the encoded sales data after determining that the sale has been completed.

17. The automatic sales machine of claim 16 wherein the processor is further

operative with the program in the memory to encode the sales data after determining that the sale has been completed.

18. The automatic sales machine of claim 17 wherein the processor is further operative with the program in the memory to accumulate the sales data after determining that the sale has been completed.

19. The automatic sales machine of claim 14 wherein the processor is further

operative with the program in the memory to count at least a portion of currency

received from sales completed at the automatic sales machine.

20. The automatic sales machine of claim 19 wherein the processor is further

operative with the program in the memory to dispense the counted currency.

21. The automatic sales machine of claim 19 wherein the processor is further operative with the program in the memory to encrypt the sales data based on a symmetric cryptographic key to derive the encoded sales data.

22. The automatic sales machine of claim 19 wherein the processor is further operative with the program in the memory to encrypt the sales data based on a public key and private key to derive the encoded sales data.

23. The automatic sales machine of claim 19 wherein the processor is further operative with the program in the memory to apply a digital signature to the sales data

to derive encoded sales data.

24. An automatic sales machine for documenting sales information, the automatic

sales machine comprising: a processor; a memory connected to said processor storing a program to control the operation

of said processor; the processor operative with the program in the memory to: receive a request to dispense currency; count at least a portion of currency received from sales completed at the automatic sales machine to determine an amount of dispensed currency;

dispense currency equal in value to the amount of dispensed currency;

encrypt at amount of dispensed currency to derive an encoded currency value; and output the encrypted currency value to an operator.

25. An apparatus for authenticating documented sales information, the apparatus

comprising: a processor; a memory connected to said processor storing a program to control the operation of said processor;

the processor operative with the program in the memory to:

receive encoded sales data; decode the encoded sales data to derive a decoded sales data; and verify the authenticity of the decoded sales data.

26. An apparatus for authenticating documented sales information, the apparatus

comprising: a processor; a memory connected to said processor storing a program to control the operation

of said processor;

the processor operative with the program in the memory to: receive encrypted sales data; decrypt the encrypted sales data to derive a decrypted sales data indicative of an amount of sales completed by the automatic sales machine; and

verify the authenticity of the decrypted sales data.

27. An automatic sales machine for documenting sales information, the automatic sales machine comprising: means for accumulating sales data;

means for encoding the sales data to derive encoded sales data; and meansTer outputting the encoded sales data to an operator.

28. An automatic sales machine for documenting sales information, the automatic

sales machine comprising: means for receiving a request to dispense currency; means for counting at least a portion of currency received from sales completed at the automatic sales machine to determine an amount of dispensed currency; means for dispensing currency equal in value to the amount of dispensed

currency; means for encrypting at amount of dispensed currency to derive an encoded

currency value; and means for outputting the encrypted currency value to an operator.

29. An apparatus for authenticating documented sales information generated at an automatic sales machine, the apparatus comprising: means for receiving encoded sales data; means for decoding the encoded sales data to derive a decoded sales data; and

means for verifying the authenticity of the decoded sales data.

30. An apparatus for authenticating documented sales information generated at an automatic sales machine, the apparatus comprising: means for receiving encrypted sales data;

means for decrypting the encrypted sales data to derive a decrypted sales data indicative of art amount of sales completed by the automatic sales machine; and means for verifying the authenticity of the decrypted sales data.

31. A computer-readable storage medium encoded with processing instructions for implementing a method for documenting sales information generated at an automatic sales machine, the processing instructions for directing a computer to perform the steps

of: accumulating sales data; encoding the sales data to derive encoded sales data; and outputting the encoded sales data to an operator.

32. A computer-readable storage medium encoded with processing instructions for

implementing a method for documenting sales information generated at an automatic

sales machine, the processing instructions for directing a computer to perform the steps of: receiving a request to dispense currency; counting at least a portion of currency received from sales completed at the

automatic sales machine to determine an amount of dispensed currency; dispensing currency equal in value to the amount of dispensed currency; encrypting at amount of dispensed currency to derive an encoded currency value; and outputting the encrypted currency value to an operator.

33. A computer-readable storage medium encoded with processing instructions for implementing a method for authenticating documented sales information generated at an automatic sales machine, the processing instructions for directing a computer to

perform the steps of: receiving encoded sales data; decoding the encoded sales data to derive a decoded sales data; and verifying the authenticity of the decoded sales data.

34. A computer-readable storage medium encoded with processing instructions for implementing a method for authenticating documented sales information generated at an automatic sales machine, the processing instructions for directing a computer to

perform the steps of: receiving encrypted sales data;