IMPLEMENTING SECURE, ANONYMOUS CUSTOMER INFORMATION EXCHANGE IN ONE OR MORE VENDING MACHINES THROUGH TOKENIZED CUSTOMER IDENTIFIERS GENERATED USING A ONE-WAY HASH FUNCTION

• US 20120130536A1
• Filed: 11/18/2011
• Published: 05/24/2012
• Est. Priority Date: 11/18/2010
• Status: Abandoned Application

• Current Assignee: Crane Merchandising Systems Incorporated (Crane Company)
• Original Assignee: Crane Merchandising Systems Incorporated (Crane Company)
• Inventors: Canter, James M., Godwin, Bryan W.
• Application Number:
  US13/300,044
• Publication Number:
  US 20120130536A1
• Time in Patent Office: Days
• US Class Current: 700/237
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G07F 9/026 for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty

Abstract

A unique, anonymous, tokenized customer identifier is derived by a one-way hash function from a credit/debit account number each time a customer provides the same credit/debit card information at a vending machine. The customer identifier thus repeatedly generated at each of the vending machines is then used to track the customer'"'"'s purchase history and preferences for customer-focused programs, such as a loyalty rewards program. The customer need not carry a separate token bearing the customer identifier, but instead can automatically participate in the customer-focused programs as part of paying for a purchase. The customer may optionally remain anonymous in each program.

Claims

1. A method of providing anonymous customer identification at a vending machine, comprising:

obtaining a payment account number from a customer at the vending machine as part of a vend transaction;

generating a unique, tokenized customer identifier from the payment account number within the vending machine using a one-way hash function;

transmitting the customer identifier from the vending machine to a remote server;

receiving at the vending machine a response associated with the customer identifier from the remote server; and

completing the vend transaction at the vending machine based on the received response.

2. The method of claim 1, wherein the remote server is a remote rewards server and the response is an indication of accumulated rewards points associated with the customer identifier in a reward program.

3. The method of claim 1, wherein the response is associated with a promotion or a survey and is customized for the customer based on the customer identifier.

4. The method of claim 1, wherein the customer identifier is transmitted from the vending machine to the remote server separately from any transmission of payment information from the vending machine to a payment server, and wherein no personally identifying information regarding the customer is transmitted from the vending machine to the remote server in connection with the vend transaction.

5. The method of claim 1, wherein the customer identifier is generated and transmitted by the vending machine without requiring the customer to present a token separate from a token containing the payment account number.

6. The method of claim 1, further comprising:

upon completing the vend transaction at the vending machine, transmitting information regarding the transaction from the vending machine to the remote server in association with the customer identifier, the information including one or more of an identification of a vended product and a price paid, if any, by the customer for the vended product.

7. The method of claim 1, wherein the vending machine is configured to use a plurality of different one-way hash functions, the method further comprising:

dynamically selecting a particular one-way hash function based on a requirement associated with the remote server.

8. A system configured to provide anonymous customer identification at a vending machine, the system comprising:

a first interface within the vending machine configured to receive payment account number from a payment token presented at the vending machine;

a second interface within the vending machine configured to communicate with a remote server; and

a controller communicably coupled to the first and second interfaces, the controller configured to;

obtain a payment account number from a customer via the first interface as part of a vend transaction;

generate a unique, tokenized customer identifier from the payment account number using a one-way hash function;

transmit the customer identifier via the second interface to the remote server;

receive a response associated with the customer identifier from the remote server; and

complete the vend transaction based on the received response.

9. The system of claim 8, wherein the remote server is a remote rewards server and the response is an indication of accumulated rewards points associated with the customer identifier in a reward program.

10. The system of claim 8, wherein the response is associated with a promotion or a survey and is customized for the customer based on the customer identifier.

11. The system of claim 8, wherein the controller transmits the customer identifier to the remote server separately from any transmission of payment information from the controller to a payment server, and wherein no personally identifying information regarding the customer is transmitted from the controller to the remote server in connection with the vend transaction.

12. The system of claim 8, wherein the controller generates and transmits the customer identifier without requiring the customer to present a token separate from a token containing the payment account number.

13. The system of claim 8, the controller is further configured to transmit, upon completion of the vend transaction at the vending machine, information regarding the transaction to the remote server in association with the customer identifier, the information including one or more of an identification of a vended product and a price paid, if any, by the customer for the vended product.

14. The system of claim 8, wherein the controller is capable of using a plurality of different one-way hash functions, and is configured to dynamically select a particular one-way hash function based on a requirement associated with the remote server.

15. A vending machine including the system of claim 8, the vending machine further comprising:

a vending machine controller configured to control the vend transaction; and

a payment device configured to read the payment account number from a card, token, or electronic device associated with the customer.

16. A vending machine system comprising:

at least one vending machine configured to communicate with a remote server, the at least one vending machine comprising;

a payment device configured to read a payment account number from a card, token, or electronic device associated with a customer; and

a controller configured to;

obtain a payment account number from a customer at the vending machine as part of a vend transaction;

generate a unique, tokenized customer identifier from the payment account number using a one-way hash function;

transmit the customer identifier to the remote server;

receive a response associated with the customer identifier from the remote server; and

complete the vend transaction based on the received response.

17. The vending machine system of claim 16, wherein the remote server is a remote rewards server and the response is an indication of accumulated rewards points associated with the customer identifier in a reward program.

18. The vending machine system of claim 16, wherein the response is associated with a promotion or a survey and is customized for the customer based on the customer identifier.

19. The vending machine system of claim 16, wherein the controller transmits the customer identifier to the remote server separately from any transmission of payment information to a payment server, and wherein no personally identifying information regarding the customer is transmitted from the controller to the remote server in connection with the vend transaction.

20. The vending machine system of claim 16, wherein the controller generates and transmits the customer identifier without requiring the customer to present a token separate from a token containing the payment account number.