Patent 25 / ATM Round-Trip Routing
01 / 11 US12051050B2
↑↓ navigate  ·  all patents →
Siten Sanghvi  ·  Granted Jul 30, 2024

ATM Round-Trip Routing

The round-trip extension of the ATM offline relay: after the phone carries offline transaction data to the server and uploads it, the server sends a receipt back to the phone — which then returns to the ATM and delivers the confirmation. The ATM marks the batch as completed, deletes its pending queue, and the phone deletes both the batch and the receipt. Full lifecycle, closed loop.

US12051050B2Patent
Oct 3, 2022Filed
22 monthsTime to grant
20 Claims / 2 independentScope
6 InventorsTeam
SCROLL TO EXPLORE
Visual patent explainer
02 / The Problem

The phone relay gets data to the server — but the ATM never finds out. It keeps the batch in its queue indefinitely.

Patent 23 (US12299655B2) solves the outbound problem: getting offline transaction data from an ATM to the central server via phone relay when the ATM has no internet. But that solution is one-directional — data flows ATM → phone → server. The ATM keeps its copy of the batch in the pending queue until it can confirm server receipt. Without a feedback path, the ATM can't know the batch was processed, can't mark it complete, and can't safely clear its local storage.

No Feedback PathIn a one-way relay, the ATM sends data out but receives no confirmation of server receipt — it can't distinguish "processed successfully" from "still pending" from "upload failed"
Indefinite Queue GrowthWithout confirmation, the ATM must retain every pending batch in its local storage indefinitely — the queue grows with every offline transaction until direct connectivity is restored
Duplicate Risk on ReconnectWhen direct connectivity returns, the ATM uploads its retained batches — potentially duplicating data already uploaded via phone relay — requiring deduplication logic at the server
03 / The Invention

After uploading, the phone picks up a server receipt and carries it back to the ATM — closing the loop.

The server receives the batch file and generates a data packet containing: the batch file identifier, a timestamp of when the batch was transmitted, and a processing status for each transaction in the batch. The phone stores this data packet. When the phone is later detected within range of the ATM again, it transmits the data packet to the ATM via short-range wireless.

The ATM receives the data packet, uses the batch file identifier + device identifier to locate the corresponding pending batch in its local data repository, marks it as "completed," removes it from the pending queue, and deletes its local copy. The phone deletes both the batch file and the data packet. Full lifecycle complete — no residual data on the phone.

04 / Round-Trip Flow

ATM → phone → server → phone → ATM. Five legs. Complete data lifecycle.

The round-trip architecture has five distinct legs. Claim 1 covers the full sequence from the mobile device's perspective — from receiving the communication request from the ATM through deleting the batch and data packet after final confirmation. Claim 16 covers the same sequence as an apparatus claim for the mobile device hardware.

The encryption requirement (Claim 17) is worth noting: the batch file transmitted to the mobile device is an encrypted batch file. The customer whose phone is carrying the data cannot view any transaction data in transit — the batch is opaque to the carrier device.

Round-Trip Data Flow — US12051050B2
1
ATM → Phone (outbound) — encrypted batch file (transaction data + batch ID + device ID) transferred via short-range wireless
2
Phone stores batch — retains encrypted batch until cellular/Wi-Fi connectivity established
3
Phone → Server (upload) — transmits batch file to central server when connectivity available
4
Server → Phone (receipt) — server sends data packet: batch ID + timestamp + processing status per transaction
5
Phone → ATM (return trip) — when ATM detected within range, phone transmits data packet via short-range wireless
6
ATM marks completed — locates batch by ID, marks as completed, removes from queue, deletes local copy. Phone deletes batch + data packet.
05 / The Data Packet

The server's receipt carries three fields — batch ID, timestamp, and per-transaction processing status.

The data packet the server sends back is precisely defined in Claim 1: batch file identifier (so the ATM can locate the right pending batch), a timestamp of transmission to the server (audit trail), and a status for the processing of each transaction within the batch (success, failure, queued, or duplicate-detected).

Claim 15 extends the status field: it can include execution status, storage status, account update status, or a duplicate-detection flag. The duplicate flag is particularly important — if the ATM reconnected and uploaded the batch directly (while the phone was still carrying it), the server can set the flag in the data packet, and the ATM knows the batch was processed via its own connection, not via the phone relay.

Data Packet Contents — US12051050B2

Batch File Identifier

Unique ID assigned when the ATM compiled the batch. Used by the ATM to locate the correct entry in its local data repository and mark it as completed.

Transmission Timestamp

When the phone transmitted the batch to the server. Creates a verifiable audit trail — ATM knows exactly when the server received its offline data.

Per-Transaction Status

Processing outcome for each transaction in the batch: executed, stored, account updated, or duplicate flag. ATM can identify any failed transactions for retry.

Duplicate Detection Flag

If ATM had already uploaded the batch directly, server sets a duplicate flag in the data packet — ATM sees this on the return trip and knows processing is complete via direct path.

06 / Journey Simulator

Single phone, split-batch return, storage check, and partial reconnect — all handled.

Select a scenario below to trace the full round-trip data path from ATM to server and back.

Round-Trip Scenarios
07 / Multi-Phone Lifecycle

Split-batch extends to the return trip — each phone handles its own portion independently.

When the batch was split across two phones (Claim 9's storage-check path), the round-trip lifecycle also splits. Each phone independently: uploads its portion to the server, receives its own data packet (scoped to its portion of the batch), and independently returns to the ATM to deliver its portion of the confirmation. The ATM marks both portions complete, deletes both from the queue.

Claim 9 adds the storage pre-check on the inbound path: before receiving the batch file, the phone checks whether it has sufficient storage. If not, it deletes the file and notifies the ATM of how much storage is available — enabling the ATM to calculate the right split before the transfer begins. This pre-negotiation prevents a failed transfer mid-batch.

Multi-Phone Round-Trip — US12051050B2

Storage Pre-Check

Before transfer, phone reports available storage to ATM. ATM splits batch based on capacity, not trial-and-error — ensuring each phone gets a portion it can hold.

Independent Outbound Trips

Each phone uploads its portion independently. Server receives two separate partial batches, each tagged with unique batch IDs and device IDs.

Independent Return Trips

Each phone receives a data packet scoped to its own batch portion. Returns to ATM independently — may arrive at different times.

Sequential Completion

ATM marks each portion complete as it arrives. Only after both data packets have been delivered does the ATM consider the full offline batch closed.

08 / Applications

Closed-loop confirmation for any store-and-carry data relay architecture.

The round-trip architecture closes a key gap in any system that uses mobile devices as temporary data carriers between offline nodes and central servers. The outbound trip (Patent 23) gets data to the server. The return trip (this patent) provides the audit trail: the ATM knows exactly when each transaction was processed, and customers' data is deleted from carrier phones once the loop is closed.

Use Cases — US12051050B2
Express
Disaster Recovery — Full Lifecycle Hurricane-zone ATM processes offline withdrawals. Customer's phone relays batch to server. Server processes, sends receipt to phone. Customer walks back past ATM two days later — phone auto-detects ATM within Bluetooth range and delivers the receipt. ATM closes its pending queue, deletes local batch copy.
Express
Encrypted In-Transit Privacy The batch file stored on the customer's phone (Claim 17) is encrypted — the carrier customer cannot view any transaction data in transit. Privacy is maintained even though the data physically resides on a third party's device during the relay period.
Express
Storage-Aware Batch Negotiation ATM detects customer phone has only 1GB free while batch is 3GB. Phone reports capacity. ATM splits: 1GB to first phone, 2GB sought from second phone. Both upload independently. Both return receipts. ATM tracks two partial completions until both confirm.
Inferred
Store-and-Carry IoT Audit Trail Any store-and-carry relay architecture — point-of-sale terminals, smart meters, field sensors — gains a verifiable audit trail: the origin device knows exactly when each data element was processed, and the carrier device is cleared of data after delivery confirmation.
09 / Citations

Forward Citations

No forward citations found as of this check. US12051050B2 was granted July 2024 — citation data is still accumulating for this recently-issued patent. Verify the current list on Google Patents.

Forward citation check: Jun 22, 2026 · Static fetch; Google Patents citations are JS-rendered
Forward Citations — US12051050B2
No citations available yet Granted Jul 2024 — citation index still populating Check Google Patents for the current forward citation list.
10 / ATM Trilogy

Three patents. This one closes the loop that Patent 23 opens.

US12299655B2 (Patent 23) defines the outbound relay: phone carries batch from ATM to server. This patent (US12051050B2) adds the return trip: phone carries server receipt back to ATM. US12020224B2 (Patent 26) addresses a different dimension: how the ATM decides whether to approve offline transactions in the first place, using customer location history as an eligibility signal.

The trilogy covers the three core problems of offline ATM operation: data transport (P23), confirmation feedback (P25), and transaction eligibility (P26). Same inventor team, same short-range wireless infrastructure, same secure bank app framework — three patents that compose into a complete offline ATM architecture.

ATM Edge Resilience Trilogy — Where P25 Fits

Patent 23 · Outbound Relay

Defines the outbound path: phone carries batch from ATM to server. Batch tagging, storage check, split-batch, deduplication at server. Patent 25 builds on top of this.

Patent 25 · This Patent — Return Trip

Adds the return path: server receipt travels back to ATM via the same phone relay. Closes the lifecycle loop — ATM clears queue, phone deletes data. Full closed-loop confirmation.

Patent 26 · Eligibility Gating

Different problem: should the ATM approve this offline transaction at all? Uses customer's location history to detect anomalous usage patterns and block high-risk offline requests.

Shared Infrastructure

All three: same short-range wireless (BT/NFC/ZigBee/LiFi), secure bank app, pre-registration model, central server reconciliation. Three patent layers on one architecture.

11 / Timeline

Patent Lifecycle

Oct 3, 2022
Filed
Application filed — B2 patent
18 months
Apr 4, 2024
Published
Pre-grant publication US20240112164A1
4 months
Jul 30, 2024
Granted
US12051050B2 granted — 22 months from filing
~18 years
Jan 11, 2043
Expires
Adjusted expiration with Patent Term Adjustment
End / Patent 25