Systems and methods for fuel dispenser security

• US 9,139,414 B2
• Filed: 11/18/2013
• Issued: 09/22/2015
• Est. Priority Date: 11/18/2013
• Status: Active Grant

• Current Assignee: Dover Fueling Solutions UK Ltd. (Dover Corporation)
• Original Assignee: Wayne Fueling Systems Sweden AB (Dover Corporation)
• Inventors: Bergqvist, Anders
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US14/082,278
• Publication Number:
  US 20150143124A1
• Time in Patent Office: 673 Days
• Field of Search: 713/171, 705/18, 73/13.4, 73/13.6
• US Class Current: 1/1
• CPC Class Codes: B67D 7/04 for transferring fuels, lubricants or mixed fuels and lubricants
• CPC Class Codes: B67D 7/085 Testing or calibrating apparatus therefore testing or calibrating apparatus for measuring volume flow in general G01F25/00
• CPC Class Codes: B67D 7/145 by wireless communication means, e.g. RF, transponders or the like
• CPC Class Codes: B67D 7/346 by reading a code
• CPC Class Codes: B67D 7/348 by interrogating an information transmitter, e.g. a transponder B67D7/145 takes precedence
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838

Abstract

Systems and methods for fuel dispenser security are disclosed herein. In some embodiments, a user seeking access to a protected function of the fuel dispenser is presented with a challenge that is encrypted using a secret key that is unique to the fuel dispenser. To access the secured function, the user must obtain a session password from a server which authenticates the user, decrypts the challenge using a counterpart of the secret key, determines whether the user is authorized to access the secured function, and returns the session password extracted from the challenge only when the user is authorized. The server can thus control access to certain fuel dispenser functions according to a set of user access privileges. The challenge can also include additional information which can be used by the fuel dispenser and/or by the server to store a log of access activity.

Claims

1. A fuel dispenser, comprising:

a flow meter configured to measure a quantity of fuel dispensed by the fuel dispenser; and

a computer processor coupled to a memory and configured to selectively prevent fuel from being dispensed through the flow meter;

wherein the computer processor is programmed to;

detect a change in calibration of the flow meter;

prevent fuel from being dispensed using the flow meter when a calibration change is detected until a verification function is performed;

generate a challenge that includes a session password;

encrypt the challenge using a secret key stored in the memory of the fuel dispenser;

provide the encrypted challenge to a user seeking to perform the verification function; and

allow the verification function to be performed only when a password matching the session password is received from the user.

2. The fuel dispenser of claim 1, wherein the user obtains the password matching the session password from a server that decrypts the encrypted challenge using a counterpart of the secret key after the server verifies that the user is authorized to perform the verification function.

3. The fuel dispenser of claim 1, wherein the processor is programmed to:

require receipt of a user identification that uniquely identifies the user before performing the verification function; and

store a log entry in the memory that indicates that the user performed the verification function.

4. The fuel dispenser of claim 3, wherein the challenge includes the user identification.

5. The fuel dispenser of claim 1, wherein the user can only obtain a password matching the session password from a server when the server determines that the user is authorized to perform the verification function in the geographical region in which the fueling station is physically located.

6. The fuel dispenser of claim 1, wherein the challenge includes a unique identifier that uniquely identifies the fuel dispenser.

7. A fuel dispenser, comprising:

a flow meter configured to measure a quantity of fuel dispensed by the fuel dispenser; and

a computer processor coupled to a memory and configured to selectively prevent fuel from being dispensed through the flow meter;

wherein the computer processor is programmed to;

prevent changes in calibration of the flow meter until a calibration function is performed;

generate a challenge that includes a session password;

encrypt the challenge using a secret key stored in the memory of the fuel dispenser;

provide the encrypted challenge to a user seeking to perform the calibration function; and

allow the calibration function to be performed only when a password matching the session password is received from the user.

8. The fuel dispenser of claim 7, wherein the user obtains the password matching the session password from a server that decrypts the encrypted challenge using a counterpart of the secret key after the server verifies that the user is authorized to perform the calibration function.

9. The fuel dispenser of claim 7, wherein the processor is programmed to:

require receipt of a user identification that uniquely identifies the user before performing the calibration function; and

store a log entry in the memory that indicates that the user performed the calibration function.

10. The fuel dispenser of claim 9, wherein the challenge includes the user identification.

11. The fuel dispenser of claim 7, wherein the user can only obtain a password matching the session password from a server when the server determines that the user is authorized to perform the calibration function in the geographical region in which the fuel dispenser is physically located.

12. The fuel dispenser of claim 7, wherein the challenge includes a unique identifier that uniquely identifies the fuel dispenser.

13. A security method for execution by a fuel dispenser having a flow meter configured to measure a quantity of fuel dispensed by the fuel dispenser and a computer processor coupled to a memory and configured to selectively prevent fuel from being dispensed through the flow meter, the method comprising using the processor to:

detect a change in calibration of the flow meter;

prevent fuel from being dispensed using the flow meter after a calibration change is detected until a verification function is performed;

generate a challenge that includes a session password;

encrypt the challenge using a secret key stored in the memory of the fuel dispenser;

provide the encrypted challenge to a user seeking to perform the verification function; and

allow the verification function to be performed only when a password matching the session password is received from the user.

14. The method of claim 13, wherein the method comprises using the processor to prevent fuel from being dispensed using the flow meter after a calibration change is detected only after a predetermined time elapses without a successful performance of the verification function.

15. The method of claim 13, wherein the user obtains the password matching the session password from a server that decrypts the encrypted challenge using a counterpart of the secret key after the server verifies that the user is authorized to perform the verification function.

16. The method of claim 13, further comprising using the processor to:

require receipt of a user identification that uniquely identifies the user before performing the verification function; and

store a log entry in the memory that indicates that the user performed the verification function.

17. The method of claim 16, wherein the challenge includes the user identification.

18. The method of claim 13, wherein the user can only obtain a password matching the session password from a server when the server determines that the user is authorized to perform the verification function in the geographical region in which the fuel dispenser is physically located.

19. The method of claim 13, wherein the challenge includes a unique identifier that uniquely identifies the fuel dispenser.