Why this environment matters
Modern automated teller machines depend on complex software, external data and remote administration. Here, the system dispenses cash and supports account transactions through a publicly accessible banking endpoint. If trust is misplaced, malware, physical tampering or compromised maintenance software can enable jackpotting, skimming and credential theft. NØNOS could narrow the trusted computing base and give each function only the resources required for its defined job.
The security challenge
The practical concern is that malware, physical tampering or compromised maintenance software can enable jackpotting, skimming and credential theft. These platforms concentrate identity, connectivity, keys, transactions and multi-tenant workloads. A single privileged compromise can propagate quickly or create irreversible financial effects. The attack surface may include remote support, software updates, removable media, third-party libraries, public input or misused operator credentials. The security design therefore needs containment as well as prevention.
How the capsule model could help
The proposed deployment pattern is to isolate card, PIN, cash dispenser, bank network and service functions with signed components and tightly controlled hardware capabilities. NØNOS would use attested execution and a signed software supply chain as the trust foundation, then apply ephemeral privileged sessions and scoped key and network access around higher-risk functions. Logs or proofs could record which approved capsule performed a privileged action without retaining unnecessary user data.
Deployment requirements
Deployment would still require secure hardware, key governance, independent approvals, monitoring, resilience engineering and compliance controls. NØNOS can narrow software trust but cannot remove business or market risk.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- ATM OEMs choosing terminal execution platforms
- Banks procuring supported self-service banking terminals
- Independent ATM operators selecting maintained hardware and service stacks
Industry examples: Diebold Nixdorf, NCR Atleos. These are research prospects, not represented as NONOS customers, partners or endorsers.