Transparently securing transactional data

• US 7,740,173 B2
• Filed: 12/17/2007
• Issued: 06/22/2010
• Est. Priority Date: 09/07/2004
• Status: Active Grant

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Semtek Innovative Solutions Incorporated (Verifone Systems, Inc.)
• Inventors: Mos, Bob, Mos, Robert J., Von Mueller, Clay
• Primary Examiner(s): Labaze; Edwyn
• Application Number:
  US11/958,327
• Publication Number:
  US 20080223932A1
• Time in Patent Office: 918 Days
• Field of Search: 235/449, 235/382.5, 235/380, 235/493, 235/439, 235/487, 235/375
• US Class Current: 235/449
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06K 7/082 using inductive or magnetic sensors
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07F 19/206 Software aspects at ATMs
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: G07F 7/0873 Details of the card reader
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 : Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 : Wireless
• CPC Class Codes: H04L 9/0891 : Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps

Abstract

A secure magnetic stripe card stripe reader (MSR) module and software system capable of encrypting the magnetic stripe data to CPI, SDP and CISP standards for use in point of sale (POS) and other applications requiring data security using non secure networks and computing devices. Additionally, when incorporated within an attachment for conventional personal digital assistant (PDA) or cell phone or stationary terminal, provides encrypted data from the magnetic head assembly providing compliance with Federal Information Processing Standards Publication Series FIPS 140 covering security and tampering standards. Moreover, this module and software system includes the capability of providing secure POS transactions to legacy transaction processing systems and POS terminals transparently to the existing infrastructure. Furthermore, this module and software system includes the capability of transparently providing detection of fraudulently copied magnetic stripe cards.

Claims

1. A card stripe read head, comprising:

a housing;

a detector with a portion thereof encapsulated within the housing, the detector configured to detect magnetic card data and generate a first signal-representing the card data; and

an encryption engine encapsulated within the housing and in communicative contact with the detector, the encryption engine configured to encrypt a portion of the card data of the first signal and generate a second signal that includes the encrypted card data, wherein first and second signals have a same data format and wherein the portion of the card data encrypted comprises a subset of a personal account number on a track of the magnetic card and the second signal further comprises an unencrypted second subset of the personal account number.

2. The card stripe read head of claim 1, wherein the data format of the second signal is in a same format as an output signal of a conventional card stripe read head.

3. The card stripe read head of claim 1, wherein the data format of the second signal is in a format readable by a processor in a non-encrypting card swipe terminal.

4. The card stripe read head of claim 1, wherein the data format of the second signal comprises encrypted and unencrypted card data in a same data layout as unencrypted card data on a data track of the magnetic card.

5. The card stripe read head of claim 1, wherein the second signal comprises a format readable by legacy point of sale equipment.

6. The card stripe read head of claim 1, wherein the encryption engine comprises software, hardware or a combination thereof.

7. The card stripe read head of claim 1, wherein the detector and the encryption engine are encased in epoxy.

8. The card stripe read head of claim 1, further comprising interface output pins, wherein the encryption engine outputs the encrypted signal to the interface output pins.

9. A method for securing card data on a magnetic stripe card using a read head, comprising:

detecting a plurality of transitions on a stripe of a card proximate to the read head;

generating within the read head a signal representing the transitions;

encrypting a portion of the signal within the read head; and

formatting the encrypted signal in a same format as the signal generated by the read head;

wherein the portion of the signal encrypted comprises a subset of a personal account number on a track of the magnetic stripe card and the formatted encrypted signal comprises encrypted and unencrypted personal account number data of the magnetic stripe card.

10. A card stripe read apparatus, comprising:

a housing;

a detector with a portion thereof encapsulated within the housing, the detector configured to detect magnetic card data and generate a first signal representing the card data; and

an encryption engine encapsulated within the housing and in communicative contact with the detector, the encryption engine configured to encrypt a portion of the card data and to generate a second signal including the encrypted card data, wherein the first and second signal have same format;

wherein the second signal contains a serial number along with the card data.

11. A card stripe read apparatus, comprising:

a housing;

a detector with a portion thereof encapsulated within the housing, the detector configured to detect magnetic card data and generate a first signal representing the card data;

an encryption engine encapsulated within the housing and in communicative contact with the detector, the encryption engine configured to encrypt a portion of the card data and to generate a second signal including the encrypted card data, wherein the first and second signal have same format; and

a serial number stored within the housing.

12. A method for encrypting data for transmission on an unsecured public network, comprising the steps of:

a) acquiring magnetic stripe card track data using a magnetic stripe card reader head;

b) selecting a portion of the acquired card track data;

c) encrypting the selected portion within the magnetic stripe card reader head;

d) assembling an encrypted data package by replacing the selected portion of the acquired card track data with the encrypted data; and

e) outputting the encrypted data package into an unsecured POS device for the purpose of completing a financial transaction;

whereby the system maintains message format compatibility with the original magnetic stripe card data infrastructure system.

13. The method of claim 12, further comprising:

adding unique identifier to the encrypted data.

14. The method of claim 12, wherein the magnetic stripe data consists of financial transaction data as specified in ISO/IEC 7813:

2001(E);

whereby the system maintains message format compatibility with legacy credit card payment infrastructure system, and does not adversely effect legacy POS equipment used to process transactions.

16. The method of claim 12, wherein the selected portion of the acquired card track data that is encrypted comprises a subset of a personal account number of the magnetic stripe card track data.

15. A card stripe read apparatus, comprising:

a housing;

a detector with a portion thereof encapsulated within the housing, the detector configured to detect magnetic card data and generate a first signal representing the card data; and

an encryption engine encapsulated within the housing and in communicative contact with the detector, the encryption engine configured to encrypt a portion of the card data and to generate a second signal including the encrypted card data, wherein the first and second signal have same format, wherein the second signal contains a serial number along with the card data.