SYSTEM AND METHOD FOR UPDATING A TRANSACTIONAL DEVICE

• US 20090060199A1
• Filed: 12/10/2007
• Published: 03/05/2009
• Est. Priority Date: 10/17/2006
• Status: Active Grant

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: Hazel, Patrick K., von Mueller, Clay, Catinella, Paul, Yale, Scott R.
• Granted Patent: US 9,818,108 B2
• Time in Patent Office: Days
• US Class Current: 380/278
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Systems and methods for updating a transactional device having a reader is provided. In one embodiment, the method includes: reading data on a command token, wherein the data is stored in a memory device; identifying the token as a command token based on the data; generating transaction data that include an instruction based on the token data and a code identifying the instruction as a command data; and transmitting the transaction data to a remote device for command execution.

Claims

1. A method for updating a transactional device having a reader comprising:

reading data on a command token, wherein the data is stored in a memory device;

identifying the token as a command token based on the data;

generating transaction data that include an instruction based on the token data and a code identifying the instruction as a command data; and

transmitting the transaction data to a remote device for command execution.

2. The method of claim 1, further comprising updating the transactional device in response to an instruction received from the remote device.

3. The method of claim 1, wherein the token is a magnetic stripe card and the instruction is packaged in a track two of the transaction data.

4. The method of claim 1, wherein the code is obtained from the command token.

5. The method of claim 1, wherein the code is packaged in a bank identification number field of the transaction data.

6. The method of claim 1, further comprising:

generating a new encryption key based on the data read from the token; and

updating the transactional device with the new encryption key.

7. The method of claim 6, further comprising:

encrypting the new encryption key with a current encryption key in the transaction data.

8. The method of claim 6, wherein the new encryption key is set as a default encryption key upon receiving a confirmation from the remote device.

9. The method of claim 1, further comprising transmitting an identification information of the transactional device along with the transaction data.

10. The method of claim 9, wherein the identification information is encrypted with the new encryption key.

11. The method of claim 9, wherein the identification information comprises a serial number of the transactional device.

12. The method of claim 1, further comprising formatting the transaction data as a conventional data format.

13. A transactional system comprising:

a remote server;

a computing device configured to communicate with the remote server; and

a card reader configured to read data from a command token, to generate transaction data that include an instruction based on the token data and a code identifying the instruction as a command data, and to transmit the transaction data to a remote server, wherein the remote server is configured to send a confirmation to the computing device in response to the transaction data, and wherein the computing device is configured to send an instruction to the card reader in response to the confirmation.

14. The method of claim 13, wherein the token is a magnetic stripe card and the instruction is packaged in a track two of the transaction data.

15. The method of claim 13, wherein the identification code is obtained from the command token.

16. The method of claim 13, wherein the identification code is packaged in a bank identification number field of the transaction data.

17. The transactional system of claim 13, wherein the card reader is configured to generate a new encryption key based on the data read from the command token, to encrypt the new encryption key with a current encryption key as a data package in the transaction data, and to transmit an identification information of the card reader to the remote server, and

wherein the remote server is configured to send a confirmation to the computing device after receiving the new encryption key, and wherein the computing device is configured to send an instruction to the card reader to set the new encryption key as a default key.

18. The transactional system of claim 13, wherein the remote server stores and associates the new encryption key with the identification information of the card reader.

19. The transactional system of claim 13, wherein the identification information is encrypted with the new encryption key.

20. The transactional system of claim 13, wherein the identification information comprises a serial number of the transactional device.

21. The transactional system of claim 13, wherein the card reader is configured to format the transaction data as a clear text format prior to transmission.

22. The transactional system of claim 13, wherein the card reader is configured to format the transaction data as a conventional data format.

23. The transactional system of claim 13, wherein the new key comprises a plurality of encryption keys.

24. A system for changing an encryption key of a device in legacy networks, comprising the steps:

a reader configured to read data from a magnetic stripe data card;

a key generator configured to generate a new key based on data from the magnetic stripe card;

a coder configured to encrypt the new key using a default key;

a gateway application configured to reformat the encrypted data to a legacy data format before forwarding the reformatted data to a legacy server;

a computer configured to accept the legacy server'"'"'s transaction reply and to instruct the coder to set the new key as the default key for future transactions.

25. A computer program product comprising a computer useable medium having computer program code embodied therein for enabling a computing device to update a transactional device having a reader, the updating comprising:

reading data on a command token, wherein the data is stored in a memory device;

identifying the token as a command token based on the data;

generating transaction data that include an instruction based on the token data and a code identifying the instruction as a command data; and

transmitting the transaction data to a remote device for command execution.