Secure payment card transactions

• US 7,841,523 B2
• Filed: 05/17/2007
• Issued: 11/30/2010
• Est. Priority Date: 05/17/2007
• Status: Active Grant

• Current Assignee: Shift4 Corporation (Shift4 Payments, Inc.)
• Original Assignee: Shift4 Corporation (Shift4 Payments, Inc.)
• Inventors: Sommers, Steven Mark, Oder, John David II, Warner, Dennis William, Cronic, Kevin James, Oder, John David
• Primary Examiner(s): Kim; Ahshik
• Application Number:
  US11/750,184
• Publication Number:
  US 20080283591A1
• Time in Patent Office: 1,293 Days
• Field of Search: 235/383, 235/380, 705/64, 705/70
• US Class Current: 235/383
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/088 the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself

Abstract

Payment card transactions at a point of sale (POS) are secured in certain embodiments by intercepting, with a POS security layer installed on a POS terminal, payment data from the POS terminal, transmitting the payment data from the POS security layer to a server security application installed on a POS server, and providing false payment data from the POS security layer to a POS terminal application installed on the POS terminal. The false payment data in various embodiments is processed as if it were the payment data, such that the POS terminal transmits an authorization request to the POS server using the false payment data. In addition, the authorization request may be transmitted from the POS server to a payment gateway.

Claims

1. A method of adding security to a point-of-sale (POS) system that comprises a POS terminal which communicates over a network with a POS server, the POS terminal including a payment card reader and having a POS terminal application installed thereon, the POS server having a POS server application installed thereon which communicates with the POS terminal application over a non-secure channel to process payment card transactions, the method comprising:

installing a POS security layer on the POS terminal, the POS security layer configured to at least (a) intercept actual card data received from the payment card reader when a user initiates a payment card transaction, (b) pass false card data to the POS terminal application for use in place of the actual card data, such that the false card data is transmitted over the non-secure channel to the POS server in place of the actual card data, and (c) transmit the actual card data to the POS server over a secure channel; and

installing a server security application on the POS server, the server security application configured to receive the actual card data from the POS security layer over the secure channel and to use the false card data to process the payment card transaction.

2. The method of claim 1, wherein the false card data includes a false payment card number.

3. The method of claim 1, wherein the server security application is configured to generate at least a portion of the false card data.

4. The method of claim 1, wherein the POS security layer is configured to generate at least a portion of the false card data.

5. The method of claim 1, wherein the server security application is configured to generate the false card data such that the false card data is in a card-swipe compatible format but does not correspond to a valid payment card account.

6. The method of claim 4, wherein at least a portion of the false card data is re-used as a token for an additional payment card transaction.

7. The method of claim 1, wherein the actual card data is obtained from a card swipe.

8. The method of claim 1, wherein the actual card data is manually entered.

9. A method for securing payment card transactions at a point of sale (POS), the method comprising:

intercepting, with a POS security layer installed on a POS terminal, payment data from the POS terminal, the payment data comprising actual card data from a payment card;

transmitting the payment data from the POS security layer to a server security application installed on a POS server;

providing false payment data from the POS security layer to a POS terminal application installed on the POS terminal, the false payment data configured to be processed as if it were the payment data, such that the POS terminal is configured to transmit a first authorization request to the POS server using the false payment data; and

transmitting a second authorization request from the POS server to a remote server, the second authorization request comprising at least the payment data.

10. The method of claim 9, further comprising generating the false payment data with the server security application.

11. The method of claim 9, wherein transmitting the payment data from the POS security layer to the server security application further comprises transmitting the payment data over a secure channel.

12. The method of claim 9, further comprising encrypting the payment data with the POS security layer.

13. The method of claim 12, further comprising encrypting two versions of the payment data with the POS security layer, wherein one version of encrypted card data is not decryptable at the POS server and the other version of encrypted card data is decryptable at the POS server.

14. The method of claim 13, further comprising encrypting a personal identification number (PIN) of the payment card using the payment data.

15. The method of claim 13, further comprising destroying the version of encrypted card data that is decryptable at the POS server.

16. The method of claim 13, further comprising destroying the version that is decryptable at the POS server after a time-out period.

17. The method of claim 9, further comprising generating the false payment data using an algorithm that substantially guarantees that the false payment data does not represent valid payment data.

18. The method of claim 9, wherein intercepting payment data on a POS terminal comprises accessing an input buffer on the POS terminal.

19. The method of claim 9, wherein the second authorization request further comprises the false payment data.

20. The method of claim 9, wherein the POS security layer is further configured to display a substitute payment screen configured to enable a cardholder to provide at least a portion of the payment data to the POS security layer.

21. The method of claim 9, wherein the POS security layer is capable of being invoked directly by a user action.

22. The method of claim 21, wherein the user action comprises a hotkey press or manual key card input.

23. The method of claim 9, wherein the POS security layer is capable of being invoked indirectly by entry of the payment data into the POS terminal.

24. The method of claim 9, wherein the POS security layer is capable of being invoked programmatically.

25. The method of claim 9, wherein the payment data further comprises at least one of a personal identification number (PIN), a signature, biometric data, an expiration date, a cardholder name, a card security code, or a dynamic security code.

26. The method of claim 9, wherein the remote server is a payment gateway.

27. The method of claim 9, wherein at least a portion of the false payment data is derived from a range of card numbers regarded as invalid by one or more card associations.

28. A method for securing payment card transactions at a point of sale (POS), the method comprising:

intercepting payment data from a POS terminal, the payment data comprising actual card data from a payment card;

transmitting the actual card data from the POS terminal to a gateway security application installed on a gateway server;

receiving, at the POS terminal, false card data, the false card data configured to be processed in place of the actual card data; and

providing the false card data to the POS terminal, such that the POS terminal is configured to transmit an authorization request comprising the false card data.

29. The method of claim 28, wherein the gateway security application provides the false card data to the POS terminal.

30. The method of claim 28, further comprising receiving the authorization request at the gateway server from a POS server in communication with the POS terminal.

31. The method of claim 30, further comprising transmitting a second authorization request from the gateway server to a card processor, the second authorization request comprising at least the actual card data.

32. The method of claim 31, further comprising receiving, at the gateway server, a response to the second authorization request from the card processor.

33. The method of claim 32, further comprising transmitting the response from the gateway server to the POS server.

34. The method of claim 33, further comprising returning at least a portion of the false card data to the POS server as a token for an additional payment transaction.

35. A payment card processing system for securing payment card transactions at a point of sale (POS), the system comprising:

a POS terminal comprising a host computer and a card entry device, the host computer having a POS terminal application installed thereon;

a POS server in communication with the POS terminal over a network, the POS server having a POS server application installed thereon that communicates with the POS terminal application to process payment card transactions,

a POS security layer installed on the host computer of the POS terminal, the POS security layer configured to at least (a) intercept actual card data received from the card entry device when a user initiates a payment card transaction, (b) pass false card data to the POS terminal application for use in place of the actual card data, such that the false card data is transmitted to the POS server in place of the actual card data, and (c) transmit the actual card data to the POS server; and

a server security application installed on the POS server, the server security application in communication with the POS security layer over the secure channel, the server security application configured to receive the actual card data from the POS security layer over the secure channel and to use the false card data to process the payment card transaction.

36. The payment card processing system of claim 35, wherein the server security application is further configured to generate the false data using an algorithm that substantially guarantees that the false data does not represent valid card data.

37. The payment card processing system of claim 35, wherein the POS security layer is further configured to intercept the payment data by accessing an input buffer on the POS terminal.

38. The payment card processing system of claim 35, wherein the server security application is further configured to transmit an authorization request to a gateway, the authorization request comprising the false card data and the actual card data.

39. The payment card processing system of claim 35, wherein the POS server application is configured to store the false card data in a transaction database.

40. The payment card processing system of claim 35, wherein the POS server application is configured to store the false card data in a database as log data.

41. The payment card processing system of claim 40, wherein no complete actual payment data is stored at the POS terminal or the POS server.

42. The payment card processing system of claim 35, wherein the POS security layer is further configured to transmit the actual card data over a secure channel to the POS server.