1. Scenario

A commercial bank plans to deploy a fleet of new "Smart ATMs" and self-service financial kiosks in shopping malls and convenience stores.

• Challenges:

  • Security: Financial transaction data requires the highest level of encryption and protection against tampering.

  • Connectivity: Installing dedicated wired leased lines in retail environments is slow and expensive.

  • Protocol Support: The ATMs use specific legacy financial protocols that need to be transmitted securely over IP networks.

2. Solution

The InHand IR302 Industrial Router is installed inside the ATM cabinet to serve as the secure communications gateway, utilizing its specific "Industry Application" features designed for financial services.

3. Implementation

• Financial Protocol Support (Smart ATM): The router is configured using the Smart ATM industry application feature. It is set to handle specific financial communication protocols (e.g., Standard 1/3 or Visa Framed Standard 3)
  . The "TLS Encryption" option is enabled to ensure the integrity of the data stream between the ATM and the bank's core system.

• Bank-Grade VPN Encryption: To further secure the data tunnel, an IPSec VPN is established
  . This creates an encrypted private tunnel over the public 4G/LTE network, ensuring that sensitive customer data cannot be intercepted during transmission.

• High Availability (Link Backup): The ATM requires 99.9% uptime. The IR302 is connected via a wired WAN connection (primary) provided by the venue, with a 4G LTE SIM card installed as backup
  . The Link Backup feature is enabled in "Hot Backup" mode, ensuring that if the wired connection is cut, the router instantly switches to cellular without dropping active transactions.

• Security against Intrusion: The Firewall is configured with strict "Device Access Control" rules
  . This filters traffic to prevent unauthorized access to the router's management interface from the local network, protecting the device from physical port tampering.

4. Benefits

• Compliance: Meets stringent financial security standards through built-in TLS encryption and specific ATM protocol support.

• Rapid Deployment: Allows ATMs to be deployed instantly using 4G networks without waiting for wired line installation.

• Transaction Reliability: Redundant link backup ensures customers can always withdraw cash, protecting the bank's reputation.