Security apparatus and system for retail environments

• US 5,448,638 A
• Filed: 05/13/1994
• Issued: 09/05/1995
• Est. Priority Date: 02/28/1991
• Status: Expired due to Term

• Current Assignee: Gilbarco Incorporated (Vontier Corp.)
• Original Assignee: Gilbarco Incorporated (Vontier Corp.)
• Inventors: Payne, Edward A., Johnson, William S., Boschker, Donald A., Phipps, Benita W.
• Primary Examiner(s): Cain, David C.
• Application Number:
  US08/243,639
• Time in Patent Office: 480 Days
• Field of Search: 364/479, 364/465, 340/825.35, 340/825.34, 380/23, 380/25, 380/3
• US Class Current: 705/72
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 50/06 Energy or water supply
• CPC Class Codes: G07F 13/025 wherein the volume is determined during delivery
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A gasoline service station includes gasoline dispensers and a PIN pad including keypads for receiving personal identification numbers and assembled into a network for securely communicating personal identification numbers from the PIN pads and dispensers to a host computer over unsecured data lines. The PIN pads and dispensers each include means for encryption and outputting of personal identification numbers. A security module includes means for decryption of data associated with each PIN pad and dispenser in a process for the respective PIN pads and dispensers and means for encryption of data associated with the host computer in a process which is different from its decryption of data associated with the PIN pads and dispensers. A site controller, which is not secure from unauthorized signal detection, has means for directing encrypted data received from the PIN pads and the dispensers to the security module and from the security module to the dispensers or the host computer as needed for properly directing encrypted data to a desired destination.

Claims

1. A fuel service station comprising fuel dispensers and a PIN pad including keypads for receiving personal identification numbers and assembled into a network for securely communicating personal identification numbers from the PIN pad and fuel dispensers to a host computer over unsecured data lines, said PIN pad and fuel dispensers each including means for encryption of personal identification numbers and outputting encrypted personal identification numbers,

a security module including means for decryption of data associated with each of said PIN pad and fuel dispensers in a process at least unique to the respective fuel dispensers and means for encryption of data associated with the host computer in a process which is different from its decryption of data associated with said PIN pad and fuel dispensers and means for outputting encrypted data,

a site controller communicatively connected to the host computer, said dispensers, said PIN pad and said security module and which is not secure from unauthorized signal detection and having means for directing encrypted data received from said PIN pad and said fuel dispensers to said security module and from said security module to said fuel dispensers or the host computer as needed for properly directing encrypted data to a desired destination,

said means for encrypting in said PIN pad, fuel dispensers and said security module encrypting data in a manner which is infeasible to decrypt without possession of a decryption key,

wherein said security module and only the security module includes means for receiving a cryptographic key associated with the host computer usable with the host for the encryption and decryption of data or further working keys used for the encryption and decryption of data,

wherein said means for encryption in said security module encrypts with keys associated with said fuel dispensers, which keys are unrelated to the cryptographic key associated with the host, and said security module and said PIN pad and fuel dispensers may cooperatively change their respective keys in response to the passage of time or in response to the occurrence of an event,

wherein at least one of said means for encryption encrypts with a process selected from the group consisting of the Rivest-Shamir-Adelman algorithm (RSA), the Diffie-Hellman algorithm (DH), the Data Encryption Standard using a unique key per transaction (DES/UKPT), the Data Encryption Standard using a Master key/Session key (DES/MKSK), and more than one of RSA, DH and DES/UKPT and DES/MKSK.

2. A fuel service station as claimed in claim 1 wherein said security module and said PIN pad and fuel dispensers include means for receiving pre-injected cryptographic keys or values from which cryptographic keys may by obtained, such that the security module has a key unique to each fuel dispenser and a key for said PIN pad and usable with the respective PIN pad and fuel dispensers for the encryption and decryption of data or further working keys used for the encryption and decryption of data.

3. A fuel service station as claimed in claim 1 wherein said security module and said fuel dispensers include means for the generation of cryptographic keys unique to each fuel dispenser using exponential key exchange, the keys being usable between said security module and the respective ones of said fuel dispensers for the encryption and decryption of data or further working keys used for the encryption and decryption of data.

4. A fuel service station as claimed in claim 1 wherein

there are a plurality of PIN pads,

said security module and certain of said PIN pads and fuel dispensers include means for receiving pre-injected cryptographic keys such that the security module has a key unique to at least each said fuel dispenser and usable with the respective PIN pads and fuel dispensers for the encryption and decryption of data or further working keys used for the encryption and decryption of data, and

said security module and others of said PIN pads and fuel dispensers include means for the generation of cryptographic keys unique to each fuel dispenser using exponential key exchange, the keys being usable between said security module and the respective ones of said other PIN pads and fuel dispensers for the encryption and decryption of data or further working keys used for the encryption and decryption of data.

5. A fuel service station as claimed in claim 1 wherein said site controller is adapted to communicate with a plurality of host computers and said security module is configured to encrypt data using different keys for the various host computers.

6. A method of operating a gasoline service station comprising the steps of

inserting a card belonging to a cardholder into a card reader to derive data,

entering a PIN into a keypad in an enclosure,

encrypting the PIN in the enclosure using a first encryption key,

transmitting the encrypted PIN to a security module,

de-encrypting the PIN in the security module and re-encrypting the PIN using a second encryption key,

transmitting the re-encrypted PIN and data read from the card to a remote host computer,

transmitting authorization of a gasoline sale to the holder of the card from the remote host computer to a gasoline dispenser at the service station.