PIN ENCRYPTION DEVICE SECURITY

• US 20080288403A1
• Filed: 05/18/2007
• Published: 11/20/2008
• Est. Priority Date: 05/18/2007
• Status: Abandoned Application

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: von Mueller, Clay
• Application Number:
  US11/750,511
• Publication Number:
  US 20080288403A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

An apparatus and method for securing transaction data, includes reading token data from a token using a read apparatus and encrypting the token data at the read apparatus, sending the encrypted token data to a security module over a communication link, and verifying the integrity of the communication link based on encrypted token data. The apparatus and method can further include receiving authentication data for the token and encrypting the authentication data within the security module, and combining the encrypted token data and encrypted authentication data into a transaction data stream. In various embodiments, a detection apparatus with plurality of read structures (for example, read gaps), can be used to provide additional information in verifying the integrity of the communication link comprises determining whether the read structures are detecting token data with a spatially diversity in accordance with a geometry of the read structures.

Claims

1. A method for securing transaction data, comprising:

reading token data from a token using a read apparatus and encrypting the token data at the read apparatus;

sending the encrypted token data to a security module over a communication link; and

verifying the integrity of the communication link based on encrypted token data.

2. The method of claim 1, further comprising the steps of:

receiving authentication data for the token and encrypting the authentication data within the security module; and

combining the encrypted token data and encrypted authentication data into a transaction data stream.

3. The method of claim 1, wherein the step of reading token data comprises the step of detecting token data at a plurality of read structures, and the step of verifying the integrity of the communication link comprises determining whether the read structures are detecting token data with a spatially diversity in accordance with a geometry of the read structures.

4. The method of claim 1, wherein the step of reading token data comprises the step of detecting token data at a plurality of read structures, and the step of verifying the integrity of the communication link comprises detecting distances between transitions based on distances between the read structures.

5. The method of claim 1, wherein the step of reading token data comprises the step of detecting token data at a plurality of read structures, and the step of verifying the integrity of the communication link comprises determining whether the first gap detects data different from that detected by the second gap at a given read time.

6. The method of claim 1, wherein the step of reading token data comprises the step of detecting token data at a plurality of read structures, and the step of verifying the integrity of the communication link comprises determining whether, over a predetermined time period, the first and second gaps are sensing the same transitions at substantially the same time to verify the integrity of the link.

7. The method of claim 1, further comprising the step of generating an alert if the integrity of the link is determined to be compromised.

8. A transaction terminal, comprising:

a token data encryption module configured to encrypt data read from a token at the terminal;

a communication link coupled to the encryption module and a verification module coupled to the communication link and configured to verify the integrity of the communication link.

9. The transaction terminal of claim 8, further comprising

a user interface configured to accept authentication data for the token and an authentication data encryption module coupled to the interface;

and

a data packaging module coupled to the authentication data encryption module and to the communication link and configured to package the encrypted authentication data and the encrypted token data into transaction data.

10. The transaction terminal of claim 8, further comprising a secure module enclosing the authentication encryption module.

11. The terminal of claim 8, wherein the data capture device is a multi-gap magnetic read head.

12. The terminal of claim 8, wherein the data capture device comprises multiple read structures.

13. The terminal of claim 12, wherein the verification module is further configured to determine whether the read structures are detecting token data with a spatially diversity in accordance with a geometry of the read structures.

14. The terminal of claim 12, wherein the verification module is further configured to detect distances between transitions based on distances between the read structures.

15. The terminal of claim 12, wherein the verification module is further configured to determine whether the first gap detects data different from that detected by the second gap at a given read time.

16. The terminal of claim 12, wherein the verification module is further configured to determine whether, over a predetermined time period, the first and second gaps sense the same transitions at substantially the same time to verify the integrity of the link.

17. A computer program product having a computer program embodied in a computer readable medium adapted to verify the integrity of token data read at a transaction terminal, the computer program comprising machine readable code adapted to cause a processing device to:

read token data from a token using a read apparatus and encrypting the token data at the read apparatus;

send the encrypted token data to a security module over a communication link; and

verify the integrity of the communication link based on encrypted token data.

18. The computer program product of claim 17, further comprising machine readable code adapted to cause a processing device to:

receive authentication data for the token and encrypting the authentication data within the security module; and

combine the encrypted token data and encrypted authentication data into a transaction data stream.

19. The computer program product of claim 17, wherein the machine readable code adapted to cause a processing device to read token data comprises machine readable code adapted to cause a processing device to detect token data at a plurality of read structures, and the machine readable code adapted to cause a processing device to verify the integrity of the communication link comprises machine readable code adapted to cause a processing device to determine whether the read structures are detecting token data with a spatially diversity in accordance with a geometry of the read structures.

20. The computer program product of claim 17, wherein the machine readable code adapted to cause a processing device to read token data comprises machine readable code adapted to cause a processing device to detect token data at a plurality of read structures, and the machine readable code adapted to cause a processing device to verify the integrity of the communication link comprises machine readable code adapted to cause a processing device to detect distances between transitions based on distances between the read structures.

21. The computer program product of claim 17, wherein the machine readable code adapted to cause a processing device to read token data comprises machine readable code adapted to cause a processing device to detect token data at a plurality of read structures, and the machine readable code adapted to cause a processing device to verify the integrity of the communication link comprises machine readable code adapted to cause a processing device to determine whether the first gap detects data different from that detected by the second gap at a given read time.

22. The computer program product of claim 17, wherein the machine readable code adapted to cause a processing device to read token data comprises machine readable code adapted to cause a processing device to detect token data at a plurality of read structures, and the machine readable code adapted to cause a processing device to verify the integrity of the communication link comprises machine readable code adapted to cause a processing device to determine whether, over a predetermined time period, the first and second gaps are sensing the same transitions at substantially the same time to verify the integrity of the link.

23. The computer program product of claim 17, wherein the machine readable code further comprises machine readable code adapted to cause a processing device to generate an alert if the integrity of the link is determined to be compromised.