Payment terminal operation method and system therefor

• US 9,721,242 B2
• Filed: 10/28/2014
• Issued: 08/01/2017
• Est. Priority Date: 10/28/2014
• Status: Active Grant

• Current Assignee: Poynt Co. (GoDaddy, Inc.)
• Original Assignee: Poynt Co. (GoDaddy, Inc.)
• Inventors: Alavill, Praveen, Asar, Syed Fayez, Bedier, Osama, Tanaka, Ray, Chau, Victor
• Primary Examiner(s): YU, ARIEL J
• Application Number:
  US14/526,112
• Publication Number:
  US 20160117659A1
• Time in Patent Office: 1,008 Days
• Field of Search: None
• CPC Class Codes: G06F 3/041 Digitisers, e.g. for touch screens or touch pads, characterised by the transducing means
• CPC Class Codes: G06F 3/1423 controlling a plurality of local displays, e.g. CRT and flat panel display
• CPC Class Codes: G06K 7/0004 Hybrid readers
• CPC Class Codes: G06Q 20/047 using payment protocols involving electronic receipts
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/209 Specified transaction journal output feature, e.g. printed receipt or voice output
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G07G 1/0009 Details of the software in the checkout register, electronic cash register [ECR] or point of sale terminal [POS]
• CPC Class Codes: G07G 1/0018 Constructional details, e.g. of drawer, printing means, input means
• CPC Class Codes: G07G 1/01 Details for indicating displaying information in general G09F, G09G

Abstract

A method of payment terminal operation, including: receiving a payment collection request for a payment from an application, generating a payment initiation request for the payment, sending the payment initiation request to a secure processing system, switching the secure processing system from operation in an unsecured mode to operation in a secured mode in response to receipt of the payment initiation request, facilitating payment information entry, and receiving a payment response notification, generated based on the payment information, at the main processor.

Claims

1. A method of payment terminal operation, the method comprising:

receiving a payment collection request from an application at a main processor connected to a secure display corresponding to a secure input device;

generating a payment initiation request in response to receipt of the payment collection request by the main processor;

sending the payment initiation request from the main processor to a secure processor separate and distinct from the main processor, wherein the payment terminal comprises the main processor, the secure processor, and a housing retaining the main processor and the secure processor;

switching the secure processor from operation in an unsecured mode to operation in a secured mode in response to receipt of the payment initiation request, wherein the secure processor forwards input coordinates received from a secure input processor to the main processor in the unsecured mode and ceases input coordinate forwarding in the secured mode;

receiving payment instrument data by the secure processor from payment hardware;

selecting a display element from a fixed set of predetermined display elements based on the payment instrument data by the secure processor;

sending a request to display the selected display element on the secure display from the secure processor to the main processor;

receiving, at the secure processor, input coordinates generated by the secure input processor based on input signals from the secure input device within a predetermined time duration after sending the request; and

interpreting the input coordinates based on a coordinate map associated with the display element by the secure processor, independent of display elements concurrently displayed on the secure display during receipt of the input signals.

2. The method of claim 1, wherein interpreting the input coordinates comprises determining a set of alphanumeric outputs corresponding to the input coordinates based on the coordinate map.

3. The method of claim 1, further comprising categorizing the payment instrument data by the secure processor.

4. The method of claim 3, wherein selecting the display element comprises selecting a display element corresponding to the payment instrument data category.

5. The method of claim 4, wherein the payment instrument data is categorized as payment information from an integrated circuit chip, wherein a PIN pad is selected as the display element.

6. The method of claim 3, wherein categorizing the payment instrument data comprises determining whether the payment instrument data satisfies a first set of conditions, wherein the first set of conditions comprise a set of patterns, wherein determining whether the payment instrument data satisfies a first set of conditions comprises determining whether the payment instrument data matches the set of patterns.

7. The method of claim 3, further comprising encrypting the payment instrument data with a set of encryption keys in response to payment instrument data categorization as a first payment instrument data category by the secure processor, and sending the payment instrument data, unsecured, to the main processor from the secure processor in response to payment instrument data categorization as a second payment instrument data category.

8. The method of claim 7, further comprising sending the secured payment instrument data to a remote system from the main processor in response to secured payment instrument data receipt from the secure processor.

9. The method of claim 8, further comprising, by the remote system:

extracting transaction information from the secured payment instrument data;

storing the transaction information;

sending the secured payment instrument data to a payment entity;

receiving a payment response from the payment entity;

extracting response information from the payment response;

storing the response information in association with the transaction information; and

sending a payment notification to the application based on the payment response.

10. The method of claim 9, wherein sending the payment notification to the application comprises broadcasting the payment notification to a set of applications associated with a merchant identifier from the remote system, wherein the merchant identifier is associated with a payment terminal identifier uniquely identifying the payment terminal.

11. The method of claim 1, further comprising exchanging encryption keys stored by the secure processor, comprising:

receiving a packet comprising a set of replacement encryption keys at the main processor from a remote hardware security module associated with a payment entity;

verifying the packet with a public key certificate stored by the main processor at the main processor;

sending the packet to the secure processor in response to packet verification;

decrypting the packet with a first set of encryption keys stored by the secure processor at the secure processor; and

replacing the first set of encryption keys with the set of replacement encryption keys.

12. The method of claim 1, wherein receiving payment instrument data comprises receiving an optical measurement from an optical sensor at the secure processor and extracting payment instrument data from the optical measurement.

13. The method of claim 1, further comprising displaying the display element at the secure display by the main processor in response to receipt of the request, wherein the display element comprises a fixed layout corresponding to the coordinate map.

14. The method of claim 1, wherein the secure input device comprises a touchscreen comprising a broad face extending over the secure display, wherein the input signals comprise touch signals and the input coordinates comprise touch coordinates.

15. The method of claim 1, wherein the input coordinates are interpreted into a set of alphanumeric outputs and the payment instrument data is received from a payment instrument, the method further comprising verifying payment with the payment instrument.

16. The method of claim 1, further comprising:

switching the secure processor from operation in the secured mode to operation in the unsecured mode in response to payment termination;

displaying a second display element at the secure display by the main processor;

receiving, at the secure processor operating in the unsecured mode, secondary input coordinates generated by the secure input processor based on input signals from the secure input device;

forwarding the secondary input coordinates from the secure processor to the main processor; and

interpreting the secondary input coordinates, by the main processor, based on a secondary coordinate map associated with the second display element.