METHOD AND SYSTEM FOR SECURING DATA FROM AN EXTERNAL NETWORK TO A POINT OF SALE DEVICE

• US 20100115600A1
• Filed: 11/05/2008
• Published: 05/06/2010
• Est. Priority Date: 11/05/2008
• Status: Abandoned Application

• Current Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Original Assignee: Appsware Wireless LLC (APPSware Holdings, Inc.)
• Inventors: Coppinger, Paul D.
• Application Number:
  US12/265,568
• Publication Number:
  US 20100115600A1
• Time in Patent Office: Days
• US Class Current: 726/11
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G07G 1/14 Systems including one or more distant stations co-operating with a central processing unit data transmission in general H04L; telemetry systems for selectively calling a substation from a main station H04Q9/00
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0272 Virtual private networks

Abstract

A data control system allows point of sale devices (125, 145) on a local area network (100) to receive data from the external network (160) if received from the external network (160) via a secure connection, but prevents point of sale devices from receiving data from the external network (160) if not received via a secure connection. The secure connection is, for example, a virtual private network connection. The data control system may allow the data to be sent to a point of sale device (125, 145) only if it is associated with a communication session initiated by the point of sale device (125, 145). The data control system may also allow the data to be sent to the point of sale device (125, 145) only if it is received from an authorized source on the external network (160).

Claims

1. A method, performed by a data control system, for securing data on a local area network in communication with an external network, the local area network having one or more point of sale devices and one or more non-point of sale devices, the method comprising the steps of:

(a) determining the data is from the external network;

(b) determining whether the data is received from the external network via a secure connection;

(c) determining the data is destined for a point of sale device;

(d) allowing the data to be sent to the point of sale device if the data is received from the external network via the secure connection; and

(e) preventing the data from being sent to the point of sale device if the data is not received via the secure connection.

2. The method of claim 1 wherein the secure connection is a virtual private network connection.

3. The method of claim 2 wherein step (d) comprises allowing the data to be sent to the point of sale device if the data is associated with a communication session initiated by the point of sale device and preventing the data from being sent to the point of sale device if the data is not associated with a communication session initiated by the point of sale device.

4. The method of claim 3 wherein step (d) comprises allowing the data from the external network to be sent to the point of sale device if the data is from an authorized source and preventing the data from being sent to the point of sale device if the data is not from the authorized source.

5. The method of claim 2 wherein step (d) comprises allowing the data from the external network to be sent to the point of sale device if the data is from an authorized source and preventing the data from being sent to the point of sale device if the data is not from the authorized source.

6. The method of claim 1 wherein step (d) comprises allowing the data to be sent to the point of sale device if the data is associated with a communication session initiated by the point of sale device and preventing the data from being sent to the point of sale device if the data is not associated with a communication session initiated by the point of sale device.

7. The method of claim 6 wherein step (d) comprises allowing the data from the external network to be sent to the point of sale device if the data is from an authorized source and preventing the data from being sent to the point of sale device if the data is not from the authorized source.

8. The method of claim 1 wherein step (d) comprises allowing the data from the external network to be sent to the point of sale device if the data is from an authorized source and preventing the data from being sent to the point of sale device if the data is not from the authorized source.

9. The method of claim 1 wherein the data control system comprises a router.

10. The method of claim 1 wherein the data control system comprises a router in communication with a secure host.

11. A data control system for securing data on a local area network in communication with an external network, the local area network having one or more point of sale devices and one or more non-point of sale devices, the data control system comprising:

means for determining the data is from the external network;

means for determining whether the data is received from the external network via a secure connection;

means for determining the data is destined for a point of sale device;

means for allowing the data to be sent to the point of sale device if the data is received from the external network via the secure connection; and

means for preventing the data from being sent to the point of sale device if the data is not received via the secure connection.

12. The data control system of claim 11 wherein the secure connection is a virtual private network connection.

13. The data control system of claim 12 wherein the means for allowing the data to be sent to the point of sale device comprises means for allowing the data to be sent to the point of sale device if the data is associated with a communication session initiated by the point of sale device and means for preventing the data from being sent to the point of sale device if the data is not associated with a communication session initiated by the point of sale device.

14. The data control system of claim 13 wherein the means for allowing the data to be sent to the point of sale device comprises means for allowing the data to be sent to the point of sale device if the data is from an authorized source and means for preventing the data from being sent to the point of sale device if the data is not from the authorized source.

15. The data control system of claim 12 wherein the means for allowing the data to be sent to the point of sale device comprises means for allowing the data to be sent to the point of sale device if the data is from an authorized source and means for preventing the data from being sent to the point of sale device if the data is not from the authorized source.

16. The data control system of claim 11 wherein the means for allowing the data to be sent to the point of sale device comprises means for allowing the data to be sent to the point of sale device if the data is associated with a communication session initiated by the point of sale device and means for preventing the data from being sent to the point of sale device if the data is not associated with a communication session initiated by the point of sale device.

17. The data control system of claim 16 wherein the means for allowing the data to be sent to the point of sale device comprises means for allowing the data to be sent to the point of sale device if the data is from an authorized source and means for preventing the data from being sent to the point of sale device if the data is not from the authorized source.

18. The data control system of claim 11 wherein the means for allowing the data to be sent to the point of sale device comprises means for allowing the data to be sent to the point of sale device if the data is from an authorized source and means for preventing the data from being sent to the point of sale device if the data is not from the authorized source.

19. The data control system of claim 11 wherein the data control system comprises a router.

20. The data control system of claim 11 wherein the data control system comprises a router in communication with a secure host.