PAY AT PUMP ENCRYPTION DEVICE

• US 20110231318A1
• Filed: 05/26/2011
• Published: 09/22/2011
• Est. Priority Date: 10/31/2006
• Status: Active Grant

• Current Assignee: NCR Voyix Corporation
• Original Assignee: NCR Corporation (NCR Voyix Corporation)
• Inventors: Fortuna, James, Hervey, James, Finley, Michael C.
• Granted Patent: US 10,733,586 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 13/025 wherein the volume is determined during delivery
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Embodiments of the present invention are drawn to systems and methods for securing information using cryptographically keyed units. Specifically, in one embodiment of the present invention, a system is provided for securing information that uses two cryptographically keyed units to encrypt information flowing between a fuel pump device and a remote device. Thus, even if the information is intercepted, it could not be used to perpetrate fraud.

Claims

1-46. -46. (canceled)

47. A system, comprising:

a first cryptographically keyed unit (“

CKU”

) comprising a first processor configured to receive consumer information from a fuel pump device over a first connection, the first processor further configured to encrypt the consumer information, wherein encryption of the first authentication module yields encrypted consumer information; and

a second CKU comprising a second processor configured to receive the encrypted consumer information from the first CKU over a second connection that is unsecured and to decrypt the encrypted consumer information, wherein decryption of the encrypted consumer information yields output information.

48. The system of claim 47, wherein the first connection and the second connection each use at least one of a current loop, RS485, RS422, RS232, or LON®

communications protocol.

49. The system of claim 48, further comprising a fuel pump housing that contains the fuel pump device and the first CKU.

50. The system of claim 47, further comprising a remote device that receives the consumer information from the second CKU.

51. The system of claim 50, wherein the remote device is at least one of another CKU, a point-of-sale terminal, a fuel pump device, or a site controller.

52. The system of claim 49, wherein the first CKU further comprises a memory.

53. The system of claim 47, wherein the output information comprises at least one of consumer payment information or consumer identify information.

54. The system of claim 47, further comprising one or more tamper sensors coupled to the first CKU, wherein triggering of at least one sensor of the one or more tamper sensors causes one or more fuel pump devices to cease operation.

55. The system of claim 54, wherein a sensor is at least one of an open door sensor, motion sensor, echo-cavitation sensor, or light sensor.

56. The system of claim 54, wherein the memory retains a log comprising information from at least one of the one or more sensors.

57. The system of claim 47, wherein the first processor and the second processor utilize one of a symmetric encryption algorithm or an asymmetric encryption algorithm.

58. The system of claim 47, wherein the first processor and the second processor each utilizes a secure authentication module.

59. The system of claim 47, further comprising an enclosure that contains the first CKU, wherein the enclosure is located within the fuel pump housing.

60. The system of claim 47, wherein the fuel pump device is at least one of a fuel dispenser, pay-at-pump terminal, fuel controller, electronic payment controller, magnetic card reader, bar code reader, biometric reader, radio frequency reader, or smartcard reader.

61. A method, comprising:

receiving, by first processor, data indicative of consumer information over a first connection, the data comprising data indicative of at least one of consumer payment information or consumer identity information;

encrypting, by a first cryptographically keyed unit (“

CKU”

) comprising the first processor, the data indicative of the consumer information, wherein the encrypting step yields encrypted consumer information; and

transmitting, by the first CKU, the encrypted consumer information to a second CKU over a second connection that is unsecured.

62. The method of claim 61, further comprising:

receiving, by the second CKU comprising a second processor, the encrypted consumer information; and

decrypting, by the second processor, the encrypted consumer information, wherein the decrypting step yields output consumer information.

63. The method of claim 62, further comprising:

transmitting, by the second CKU, the output consumer information to a remote device.

64. A computer-readable storage medium encoded with computer-executable instructions comprising:

first computer-executable instructions that, in response to execution, cause a first processor of a cryptographically keyed unit (“

CKU”

) to receive data indicative of consumer information over a first connection, the data comprising data indicative of at least one of consumer payment information or consumer identity information;

second computer-executable instructions that, in response to execution, cause the first processor of the CKU to encrypt the data indicative of the consumer information and, in response, yield encrypted consumer information; and

third computer-executable instructions that, in response to execution, cause the first processor of the CKU to transmit the encrypted consumer information to a second CKU over a second connection that is unsecured.

65. The computer-readable storage medium of claim 64, the computer-executable instructions further comprising:

fourth computer-executable instructions that, in response to execution, cause the first processor of the CKU to monitor data indicative of tampering of at least one of a fuel pump device that supplies the data indicative of consumer information, an enclosure coupled to the fuel pump and that contains the CKU, or a housing that contains the fuel pump device and the CKU.

66. The computer-readable storage medium of claim 65, the computer-executable instructions further comprising:

fifth computer-executable instructions that, in response to execution, cause the first processor to disable the fuel pump device in response to the monitoring step yielding data indicative of tampering of one or more of the fuel pump device, the enclosure coupled to the fuel pump, or the housing.

67. The computer-readable storage medium of claim 66, the computer-executable instructions further comprising:

sixth computer-executable instructions that, in response to execution, cause a second processor of a second CKU to receive the encrypted consumer information; and

seventh computer-executable instructions that, in response to execution, cause the second processor of the second CKU to decrypt the encrypted consumer information, wherein the decrypting step yields output consumer information.