System and method for updating a transactional device

• US 9,818,108 B2
• Filed: 12/10/2007
• Issued: 11/14/2017
• Est. Priority Date: 10/17/2006
• Status: Active Grant

• Current Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Original Assignee: Verifone, Inc. (Verifone Systems, Inc.)
• Inventors: von Mueller, Clay, Yale, Scott R., Hazel, Patrick K., Catinella, Paul
• Primary Examiner(s): Kabir, Jahangir
• Application Number:
  US11/953,280
• Publication Number:
  US 20090060199A1
• Time in Patent Office: 3,627 Days
• Field of Search: 713150, 713155, 713159, 713168, 713172, 380210, 380227, 380228, 380277, 380278, 705 35, 705 39, 705 40, 705 42, 705 44, 705 64- 79
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853

Abstract

Systems and methods for updating a transactional device having a reader is provided. In one embodiment, the method includes: reading data on a command token, wherein the data is stored in a memory device; identifying the token as a command token based on the data; generating transaction data that include an instruction based on the token data and a code identifying the instruction as a command data; and transmitting the transaction data to a remote device for command execution.

Claims

1. A method for updating a transactional device on a conventional bank card transaction processing network, comprising:

receiving an instruction at the transactional device from a command token to retrieve update information to update an operational encryption characteristic of the transactional device;

generating transaction data that includes the instruction and a code identifying the transaction data as a command request for causing the transactional device to be updated;

formatting the transaction data into formatted transaction data, wherein the formatted transaction data has the same format as bank card transaction data on a conventional bank card transaction processing network;

transmitting, with identification information of the transactional device, the formatted transaction data across the conventional bank card transaction processing network to a remote device for execution of the instruction, wherein the execution of the instruction results in obtaining the update information, implementing a configuration change in the remote device;

transmitting the update information to the transactional device, wherein the code is packaged in a field of the formatted transaction data;

receiving the update information at the transactional device; and

updating the operational encryption characteristic of the transactional device.

2. The method of claim 1, further comprising updating the transactional device according to the instruction upon receiving from the remote device a confirmation transmitted in response to the instruction.

3. The method of claim 2, further comprising:

generating a new encryption key based on the instruction; and

updating the transactional device with the new encryption key.

4. The method of claim 3, further comprising encrypting the new encryption key with a current encryption key in the command request.

5. The method of claim 3, wherein updating the transactional device with the new encryption key comprises setting the new encryption key as a default encryption key upon receiving the confirmation from the remote device.

6. The method of claim 1, wherein the transactional device comprises a card reader configured to read data from the command token, the command token is a magnetic stripe card, and the instruction is packaged in track two of the magnetic stripe card.

7. The method of claim 1, wherein the field of the formatted transaction data in which the code is packaged is a bank identification number field of the formatted transaction data.

8. The method of claim 1, wherein the identification information is encrypted with the new encryption key.

9. The method of claim 1, wherein the identification information comprises a serial number of the transactional device.

10. The method of claim 1, wherein the remote device identifies the formatted transaction data as command data by the code.

11. The method of claim 10, wherein the code identifying the formatted transaction data as command data is a predetermined bank identification number or a range of bank identification numbers.

12. The method of claim 10, wherein the command data comprises data that when executed causes a configuration change in a remote device.

13. A transactional system on a conventional bank card transaction processing network, comprising:

a remote server; and

a computing device, comprising at least one hardware processor, configured to;

communicate with the remote server;

receive an instruction at the computing device from a command token to retrieve update information to update an operational encryption characteristic of the computing device;

generate transaction data that includes the instruction and a code identifying the transaction data as a command request for causing the computing device to be updated;

format the transaction data into formatted transaction data such that the formatted transaction data has the same format as bank card transaction data on a conventional bank card transaction processing network;

transmit, with identification information of the transactional device, the formatted transaction data to a remote server for execution of the instruction, wherein execution of the instruction results in obtaining the update information, implementing a configuration change in the remote server;

transmit the update information to the computing device, wherein the code is packaged in a field of the formatted transaction data; and

receive the update information at the computing device for implementing the updating of the operational encryption characteristic of the computing device;

the remote server is configured to send a confirmation to the computing device in response to the instruction; and

the computing device is further configured to update according to the instruction in response to the confirmation.

14. The transactional system of claim 13, wherein the computing device includes a card reader configured to read data from the command token, the command token is a magnetic stripe card, and the instruction is packaged in a track two of the magnetic stripe card.

15. The transactional system of claim 13, wherein the computing device includes a card reader, and the computing device is configured to update the card reader according to the instruction in response to the confirmation.

16. The transactional system of claim 13, wherein the field of the formatted transaction data in which the code is packaged in a bank identification number field of the formatted transaction data.

17. The transactional system of claim 13, wherein the computing device is configured to generate a new encryption key based on the instruction, and to encrypt the new encryption key with a current encryption key as a data package in the formatted transaction data, and

wherein the remote server is configured to send the confirmation to the computing device after receiving the new encryption key, and wherein the computing device is configured to update by setting the new encryption key as a default key upon receiving the confirmation.

18. The transactional system of claim 13, wherein the remote server stores and associates the new encryption key with the identification information of the computing device.

19. The transactional system of claim 13, wherein the identification information is encrypted with the new encryption key.

20. The transactional system of claim 13, wherein the identification information comprises a serial number of the transactional device.

21. The transactional system of claim 13, wherein the computing device is configured to format the formatted transaction data in clear text format prior to transmission.

22. The transactional system of claim 13, wherein the new key comprises a plurality of encryption keys.

23. The transactional system of claim 13, wherein the command request comprises data that when executed causes a configuration change in a remote device.

24. A computer program product comprising a non-transitory computer useable medium having computer program code embodied therein for enabling a computing device to update a transactional device on a conventional bank card transaction processing network, the updating comprising:

receiving an instruction at the transactional device from a command token to retrieve update information to update an operational encryption characteristic of the transactional device;

generating transaction data that includes the instruction and a code identifying the transaction data as a command request for causing the transactional device to be updated;

formatting the transaction data into formatted transaction data, wherein the formatted transaction data has the same format as bank card transaction data on a conventional bank card transaction processing network;

transmitting, with identification information of the transactional device, the formatted transaction data across the conventional bank card transaction processing network to a remote device for execution of the instruction, wherein the execution of the instruction results in obtaining the update information, implementing a configuration change in the remote device;

transmitting the update information to the transactional device, wherein the code is packaged in a field of the formatted transaction data;

receiving the update information at the transactional device; and

updating the operational encryption characteristic of the transactional device.

25. The computer program product of claim 24, wherein the updating further comprises updating the transactional device according to the instruction upon receiving from the remote device a confirmation transmitted in response to the instruction.

26. The computer program product of claim 24, wherein the command request comprises data that when executed causes a configuration change in a remote device.