Payment terminal operation method and system therefor

• US 10,558,964 B2
• Filed: 10/24/2016
• Issued: 02/11/2020
• Est. Priority Date: 10/28/2014
• Status: Active Grant

• Current Assignee: Poynt Co. (GoDaddy, Inc.)
• Original Assignee: Poynt Co. (GoDaddy, Inc.)
• Inventors: Bedier, Osama, Tanaka, Ray, Alavill, Praveen, Asar, Syed Fayez, Chau, Victor
• Primary Examiner(s): Yu, Ariel J
• Application Number:
  US15/332,540
• Publication Number:
  US 20170039550A1
• Time in Patent Office: 1,205 Days
• Field of Search: None
• CPC Class Codes: G06F 3/041 Digitisers, e.g. for touch screens or touch pads, characterised by the transducing means
• CPC Class Codes: G06F 3/1423 controlling a plurality of local displays, e.g. CRT and flat panel display
• CPC Class Codes: G06K 7/0004 Hybrid readers
• CPC Class Codes: G06Q 20/047 using payment protocols involving electronic receipts
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/209 Specified transaction journal output feature, e.g. printed receipt or voice output
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G07G 1/0009 Details of the software in the checkout register, electronic cash register [ECR] or point of sale terminal [POS]
• CPC Class Codes: G07G 1/0018 Constructional details, e.g. of drawer, printing means, input means
• CPC Class Codes: G07G 1/01 Details for indicating displaying information in general G09F, G09G

Abstract

A method of payment terminal operation, including: receiving a payment collection request for a payment from an application, generating a payment initiation request for the payment, sending the payment initiation request to a secure processing system, switching the secure processing system from operation in an unsecured mode to operation in a secured mode in response to receipt of the payment initiation request, facilitating payment information entry, and receiving a payment response notification, generated based on the payment information, at the main processor.

Claims

1. A method of payment terminal operation, the payment terminal including a secure processor connected to a main processor, the main processor distinct from the secure processor and including a transaction resource, the method comprising:

at the secure processor;

interpreting payment information based on inputs collected at the payment terminal;

encrypting the payment information with a set of encryption keys stored at the secure processor to generate secured payment information;

tagging the secured payment information with unsecured transaction-associated information to generate tagged secured payment information; and

transmitting the tagged secured payment information to the main processor;

at the main processor;

extracting the unsecured transaction-associated information from the tagged secured payment information, without decrypting the secured payment information;

transmitting the unsecured transaction-associated information to a remote system;

transmitting the secured payment information to a payment gateway;

receiving a payment response associated with the secured payment information from the payment gateway;

in response to receiving the payment response, updating the transaction resource with the unsecured transaction-associated information; and

exposing the unsecured transaction-associated information stored at the transaction resource to an application stored and executable by the main processor.

2. The method of claim 1, wherein the payment terminal comprises a housing retaining the main processor and the secure processor.

3. The method of claim 2, further comprising:

prior to interpreting the payment information at the secure processor;

displaying a display element on a display electrically connected to the main processor;

collecting the inputs at a secure input device electrically connected to the secure processor; and

receiving the inputs at the secure processor.

4. The method of claim 3, further comprising:

prior to displaying the display element, switching the secure processor from an unsecured mode to a secured mode, wherein displaying the display element, collecting the inputs, and transmitting the tagged secured payment information are performed in the secured mode; and

in response to receiving the payment response, switching the secure processor from the secured mode to the unsecured mode.

5. The method of claim 1, wherein the application is a third party application, the method further comprising:

prior to interpreting the payment information, downloading the third party application to the payment terminal, and wherein exposing the unsecured transaction-associated information comprises exposing the unsecured transaction-associated information to the third party application.

6. The method of claim 5, wherein exposing the unsecured transaction-associated information comprises:

receiving a request from the third party application for the unsecured transaction-associated information;

verifying the third party application with a public key certificate stored by the main processor; and

in response to successfully verifying the third party application, providing the unsecured transaction-associated information to the third party application.

7. The method of claim 5, wherein exposing the unsecured transaction-associated information comprises:

extracting a payment status from the payment response at the main processor;

storing the payment status in association with the unsecured transaction-associated information at the transaction resource; and

exposing the payment status and the unsecured transaction-associated information stored by the transaction resource to the application.

8. The method of claim 7,

wherein the unsecured transaction-associated information comprises order information;

wherein extracting the unsecured transaction-associated information comprises;

determining a product identifier and an order quantity from the order information, and

caching the product identifier and the order quantity;

wherein updating the transaction resource comprises, in response to the payment status indicating payment information verification, storing the cached product identifier and the order quantity at the transaction resource

wherein exposing the unsecured transaction-associated information to the third party application comprises;

providing the product identifier and the order quantity to the third party application.

9. The method of claim 5, further comprising:

updating the third party application with an update downloaded to the main processor;

in response to updating the third party application, prompting a merchant at the payment terminal to update a permission level for the third party application;

receiving an updated permission level for the third party application from the merchant; and

restricting the unsecured transaction-associated information provided to the third party application based on the updated permission level.

10. The method of claim 1, wherein transmitting the secured payment information from the main processor to the payment gateway comprises transmitting the tagged secured payment information from the main processor to the remote system, the method further comprising:

at the remote system;

transmitting the tagged secured payment information to the payment gateway;

receiving the payment response from the payment gateway;

storing the unsecured transaction-associated information in response to payment response receipt; and

at the main processor;

synchronizing records of the unsecured transaction-associated information between the remote server and the transaction resource through the communication module.

11. A method of payment terminal operation, the payment terminal including a housing retaining a secure processor connected to a main processor, the main processor distinct from the secure processor and including a transaction resource, comprising:

at the secure processor;

interpreting payment information based on inputs collected at the payment terminal; and

encrypting the payment information to generate secured payment information;

tagging the secured payment information with unsecured transaction-associated information to generate tagged secured payment information;

transmitting the tagged secured payment information to the main processor;

extracting, at a processing network comprising the main processor and a remote system, the unsecured transaction-associated information from the tagged secured payment information, without decrypting the secured payment information; and

transmitting the secured payment information to a payment gateway.

12. The method of claim 11, further comprising:

prior to interpreting the payment information at the secure processor, switching the secure processor from an unsecured mode to a secured mode;

while the secure processor is in the secured mode;

displaying a display element at a display electrically connected to the main processor; and

collecting the payment information at a secure input device electrically connected to the secure processor;

wherein the payment information is interpreted by the secure processor in the secured mode.

13. The method of claim 11, further comprising:

receiving a payment response at the processing network from the payment gateway, the payment response associated with the secured payment information;

in response to receiving the payment response, updating a transaction resource of the processing network with the unsecured transaction-associated information; and

exposing the unsecured transaction-associated information stored at the transaction resource to a first application of a set of third party applications, the first application stored and executable by the main processor.

14. The method of claim 13, wherein exposing the unsecured transaction-associated information is based on a first permission level, the method further comprising restricting the unsecured transaction-associated information provided to a second application of the set of third party applications based on a second permission level, the second application stored and executable by the main processor.

15. The method of claim 14, wherein the unsecured transaction-associated information comprises customer information, and wherein restricting the unsecured transaction-associated information comprises restricting provision of the customer information to the second application.

16. The method of claim 13, further comprising exposing the unsecured transaction-associated information to a second application of the set of third party applications, wherein the second application is stored and executable by a second payment terminal, wherein the first and the second payment terminals are associated with a same merchant identifier.

17. The method of claim 16, further comprising broadcasting a transaction notification from the remote system to the first and second applications, wherein exposing the unsecured transaction-associated information to the first and second applications, respectively, is in response to the first and second applications requesting the unsecured transaction-association information based on the transaction notification.

18. The method of claim 16, further comprising:

updating the transaction resource with secondary unsecured transaction-associated information describing a second order processed at the second payment terminal; and

exposing the secondary unsecured transaction-associated information to the first and second applications.

19. The method of claim 11, wherein transmitting the secured payment information to the payment gateway comprises:

transmitting the tagged secured payment information from the main processor to the remote system; and

transmitting the secured payment information from the remote server to the payment gateway;

wherein extracting the unsecured transaction-associated information comprises extracting the unsecured transaction-associated information at the remote system in response to receiving the tagged secured payment information at the remote system.

20. The method of claim 11, further comprising:

receiving a payment response at the remote system from the payment gateway, the payment response associated with the secured payment information;

extracting a payment status from the payment response at the remote system;

transmitting a payment response notification comprising the payment status from the remote system to the main processor over the processing network; and

storing the payment status in association with the unsecured transaction-association information at the transaction resource.