Security apparatus and system for retail environments

• US 5,384,850 A
• Filed: 11/23/1992
• Issued: 01/24/1995
• Est. Priority Date: 02/28/1991
• Status: Expired due to Term

• Current Assignee: Gilbarco Incorporated (Vontier Corp.)
• Original Assignee: Gilbarco Incorporated (Vontier Corp.)
• Inventors: Phipps, Benita W., Payne, Edward A., Johnson, William S., Boschker, Donald A.
• Primary Examiner(s): Cain, David C.
• Application Number:
  US07/980,503
• Time in Patent Office: 792 Days
• Field of Search: 380/52
• US Class Current: 380/52
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 50/06 Energy or water supply
• CPC Class Codes: G07F 13/025 wherein the volume is determined during delivery
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A gasoline service station includes gasoline dispensers and a PIN pad including keypads for receiving personal identification numbers and assembled into a network for securely communicating personal identification numbers from the PIN pads and dispensers to a host computer over unsecured data lines. The PIN pads and dispensers each include means for encryption and outputting of personal identification numbers. A security module includes means for decryption of data associated with each PIN pad and dispenser in a process for the respective PIN pads and dispensers and means for encryption of data associated with the host computer in a process which is different from its decryption of data associated with the PIN pads and dispensers. A site controller, which is not secure from unauthorized signal detection, has means for directing encrypted data received from the PIN pads and the dispensers to the security module and from the security module to the dispensers or the host computer as needed for properly directing encrypted data to a desired destination.

Claims

1. A security module for storing sensitive data in electronic form in a memory comprising

an enclosure for an electronic circuit including said memory and data input leads to supply the sensitive data to the memory and to allow selective outputting of data from memory,

a barrier within said enclosure and enclosing said memory and electrically connected with said memory such that a penetration of said barrier electrically induces said memory to lose the data stored therein, said barrier being scored to induce the breaking of said electrical connection upon a manipulation of said barrier.

2. A security module as claimed in claim 1 wherein said electronic circuit includes encryption circuitry to encrypt data outputted from said memory.

3. A security module as claimed in claim 2 wherein said memory is a CMOS random access memory and said circuit includes a battery to supply power to said CMOS random access memory.

4. A security module as claimed in claim 3 wherein said circuit includes a conductor extending continuously in a tortuous path over substantially all of said barrier and in a circuit so that a break in said conductor will induce said memory to lose the data stored in said memory and so that a penetration of said barrier will be likely to break said conductor.

5. A security module as claimed in claim 4 wherein said conductor is in a circuit with a continuity detector which causes a voltage reversal on said CMOS random access memory to cause said memory to lose the data stored therein when a discontinuity in said conductor is detected.

6. A security module as claimed in claim 1 wherein said enclosure includes a access cover and said circuit includes a switch actuated by said access cover and in a circuit such that upon deactuation of said switch by movement of said access cover to deactuate said switch, said memory is induced to lose data stored therein.

7. A security module as claimed in claim 6 wherein said enclosure is made of stainless steel.

8. A security module as claimed in claim 1 wherein said enclosure has an interior and said barrier substantially entirely surrounds said memory and adheres to said interior of said enclosure.

11. A security module as claimed in claim 1 further comprising a battery to supply power to said memory and a battery voltage detector to detect a low voltage in said battery and a circuit to induce the memory to lose the data stored therein when a low voltage is sensed.

13. A security module as claimed in claim 11 wherein said memory is a CMOS random access memory and said battery supplies power to said CMOS random access memory.

16. A security module as claimed in claim 11 wherein said enclosure includes a access cover and said circuit includes a switch actuated by said access cover and in a circuit such that upon deactuation of said switch by movement of said access cover to deactuate said switch, said memory is induced to lose data stored therein.

17. A security module as claimed in claim 16 wherein said enclosure is made of stainless steel.

9. A security module for storing sensitive data in electronic form and a memory comprising

an enclosure for an electronic circuit including said memory and data input leads to supply the sensitive data to Said memory and to allow selective outputting of data from said memory,

a barrier within said enclosure and enclosing said memory and electrically connected with said memory such that a penetration of said barrier electrically induces said memory to lose the data stored therein, said barrier being scored to induce the breaking of said electrical connection upon a manipulation of said barrier, and

a battery in said circuit and a switch actuable from outside said enclosure to supply power from said battery to said circuit.

10. A security module as claimed in claim 9 wherein said enclosure includes an interior and a access cover and a member is movable in said access cover toward the interior of said enclosure to actuate said switch, such that movement of said access cover away from said interior deactuates said switch and removes power to said circuit.

12. A security module for storing sensitive data in electronic form and a memory comprising

an enclosure for an electronic circuit including said memory and data input leads to supply the sensitive data to said memory and to allow selective outputting of data from said memory,

a barrier within said enclosure and enclosing said memory and electrically connected with said memory such that a penetration of said barrier electrically induces said memory to lose the data stored therein, said barrier being scored to induce the breaking of said electrical connection upon a manipulation of said barrier, and

wherein said circuit includes a connector protruding from said enclosure and a thin conductor extends behind said connector and in a circuit so that a break in said conductor will induce said memory to lose the data stored in said memory.

14. A security module for storing sensitive data in electronic form and a memory comprising

an enclosure for an electronic circuit including said memory and data input leads to supply the sensitive data to said memory and to allow selective outputting of data from said memory,

a battery to supply power to said memory and a battery voltage detector to detect a low voltage in said battery and a circuit to induce the memory to lose the data stored therein when a low voltage is sensed, and

wherein said circuit includes a connector protruding from said enclosure and a thin conductor extends behind said connector and in a circuit so that a break in said conductor will induce said memory to lose the data-stored in said memory.

15. A security module as claimed in claim 14 wherein said conductor is in a circuit with a continuity detector which causes a voltage reversal on said CMOS random access memory to cause said memory to lose the data stored therein when a discontinuity in said conductor is detected.

18. A security module for storing sensitive data in electronic form in a memory comprising

an enclosure for an electronic circuit including said memory and data input leads to supply the sensitive data to the memory and to allow selective outputting of data from memory,

said circuit including a connector protruding from said enclosure and a thin conductor extending behind said connector and in a circuit so that a break in said conductor will induce said memory to lose the data stored in said memory.

19. A security module as claimed in claim 18 wherein said conductor is in a circuit with a continuity detector which causes a voltage reversal on said memory to cause said memory to lose the data stored therein when a discontinuity in said conductor is detected.

20. A security module for storing sensitive data in electronic form in a memory comprising:

an enclosure for an electronic circuit including said memory and data input leads to supply the sensitive data to said memory and to allow selective outputting of data from said memory,

a flexible, integral barrier within said enclosure and substantially entirely surrounding said memory and electrically connected with said memory such that a penetration of said barrier electrically induces said memory to lose the data stored therein, said barrier being scored to induce the breaking of said electrical connection upon a manipulation of said barrier.