System and method for point-to-point encryption with adjunct terminal

• US 8,346,671 B2
• Filed: 04/01/2010
• Issued: 01/01/2013
• Est. Priority Date: 04/01/2010
• Status: Active Grant

• Current Assignee: Merchant-Link LLC (Shift4 Payments, Inc.)
• Original Assignee: Merchant-Link LLC (Shift4 Payments, Inc.)
• Inventors: Zloth, Susan, Lane, Daniel, Smyth, Benjamin
• Primary Examiner(s): Reagan, James A
• Assistant Examiner(s): CHEUNG, CALVIN K
• Application Number:
  US12/752,806
• Publication Number:
  US 20110246372A1
• Time in Patent Office: 1,006 Days
• Field of Search: 705/64, 705/67, 705/75, 705/14.38, 902/2, 902/22, 902/25, 902/27, 902/40
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/3567 Software being in the reader
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: G07F 7/1091 Use of an encrypted form of the PIN
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

A system for point-to-point encryption is provided. A card reader system reads unencrypted card data stored on a magnetic stripe of a card and encrypts the card data, the card reader system being contained in a first housing. A point of sale device coupled to the card reader system and contained in a second housing separate from the first housing has a user interface for obtaining a transaction amount. A transaction request system transmits the transaction amount and the encrypted card data to an authorization gateway, wherein the unencrypted card data is prevented from being processed by the point of sale device.

Claims

1. A system for point-to-point encryption comprising:

a card reader system

for reading unencrypted card data stored on a magnetic stripe of a card and

for encrypting the card data using a network key,

the card reader system being contained in a first housing;

a point of sale device coupled to the card reader system,

the point of sale device being contained in a second housing separate from the first housing,

the point of sale device having a user interface for obtaining a transaction amount;

a transaction request system coupled to the card reader system for transmitting the transaction amount and the encrypted card data to an authorization gateway,

wherein the unencrypted card data is prevented from being processed by the point of sale device; and

an authorization gateway that comprises;

a token generation system

for receiving an unencrypted token request and the encrypted card data and

for decrypting the encrypted card data; and

a transaction authorization system

for transmitting the decrypted card data to a card-issuing bank with an authorization request and

for receiving an authorization response;

wherein the token generation system generates a token based on the authorization response,

wherein the card reader system comprises a token request system for compiling the encrypted card data into a token request for transmission to the authorization gateway,

wherein the token request is unencrypted.

2. The system of claim 1 wherein the point of sale device comprises a token handling system for receiving the token from the authorization gateway, associating the token with transaction data and storing the token and the associated transaction data in a local memory.

3. The system of claim 1 wherein the point of sale device comprises a transaction permission system for receiving the token from the authorization gateway, associating the token with transaction data and transmitting the token and the associated transaction data to the authorization gateway.

4. The system of claim 1 wherein the point of sale device is only coupled to the card reader system through the authorization gateway.

5. The system of claim 1 wherein the point of sale device is only coupled to the card reader system through a data port of the point of sale device.

6. The system of claim 1 wherein the card reader system is coupled to the authorization gateway, and data from the point of sale device is only transmitted to the authorization gateway by passing through the card reader system.

7. The system of claim 1 wherein the transaction request system is for transmitting the transaction amount and the encrypted card data to an authorization gateway without decrypting the encrypted card data.

8. The system of claim 1 wherein the transaction request system is for encrypting the transaction amount and the encrypted card data for transmission to an authorization gateway without decrypting the encrypted card data.

9. A method for point-to-point encryption comprising:

reading unencrypted card data stored on a magnetic stripe of a card at a card reader system contained in a first housing;

encrypting the card data at the card reader system using a network key;

obtaining a transaction amount from a point of sale device contained in a second housing separate from the first housing;

transmitting the transaction amount and the encrypted card data to an authorization gateway without decrypting the encrypted card data prior to transmission;

preventing the unencrypted card data from being processed by the point of sale device;

compiling the encrypted card data into a token request with unencrypted token request data for transmission to the authorization gateway at the card reader system;

receiving the token request and the encrypted card data at the authorization gateway;

decrypting the encrypted card data;

transmitting the decrypted card data to a card-issuing bank with an authorization request;

receiving an authorization response; and

generating a token based on the authorization response.

10. The method of claim 9 comprising:

receiving the token from the authorization gateway;

associating the token with transaction data; and

storing the token and the associated transaction data in a local memory.

11. The method of claim 9 comprising:

receiving the token from the authorization gateway;

associating the token with transaction data; and

transmitting the token and the associated transaction data to the authorization gateway.

12. The method of claim 9 comprising coupling the point of sale device to the authorization gateway only through the card reader system.

13. The method of claim 9 comprising coupling the point of sale device to the card reader system only through a data port of the point of sale device.

14. The method of claim 9 wherein data from the point of sale device is only transmitted to the authorization gateway by passing through the card reader system.

15. A method for point-to-point encryption comprising:

reading unencrypted card data stored on a magnetic stripe of a card at a card reader system;

encrypting the card data at the card reader system using a network key;

obtaining a transaction amount from a point of sale device;

transmitting the transaction amount and the encrypted card data to an authorization gateway without decrypting the encrypted card data;

compiling the encrypted card data into a token request with unencrypted token request data for transmission to the authorization gateway at the card reader system;

receiving the token request and the encrypted card data at the authorization gateway;

decrypting the encrypted card data;

transmitting the decrypted card data to a card-issuing bank with an authorization request;

receiving an authorization response; and

generating a token based on the authorization response.

16. The method of claim 15 comprising compiling the encrypted card data into the token request for transmission to the authorization gateway at the card reader system.