System and method for selective encryption of input data during a retail transaction

• US 20070033398A1
• Filed: 08/04/2005
• Published: 02/08/2007
• Est. Priority Date: 08/04/2005
• Status: Active Grant

• Current Assignee: Gilbarco Incorporated (Vontier Corp.)
• Original Assignee: Gilbarco Incorporated (Vontier Corp.)
• Inventors: Williams, Rodger, Robertson, Philip, Weston, Timothy
• Granted Patent: US 7,953,968 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: G07F 7/1075 PIN is checked remotely

Abstract

A retail environment having retail terminals with data entry point devices selectively encrypts input received by the data entry point devices and passes the encrypted data to a security module. The selective encryption is based on whether or not sensitive or confidential information, such as a personal identification number (PIN) associated with a debit card, is being input. To prevent hacking of the software of the retail terminal, content destined for display on the retail terminal is authenticated prior to display. In this manner, the retail terminal may be assured that confidential information is input only when desired, and thus may be encrypted only as needed.

Claims

1. A method of collecting information at a retail terminal, comprising:

determining whether content to be presented on a display of the retail terminal requests information;

if the content to be presented on the display requests information, determining whether the content requests sensitive information;

authenticating the content to be presented on the display;

presenting the content on the display if the content is authenticated; and

if the content requests sensitive information, encrypting data received from one or more data entry point devices for transmission to a location removed from the retail terminal.

2. The method of claim 1, further comprising, not encrypting data received from said one or more data entry point devices if the information requested is not sensitive information.

3. The method of claim 1, wherein determining whether content requests sensitive information comprises determining whether the content requests a personal identification number (PIN).

4. The method of claim 1, wherein collecting information at the retail terminal comprises collecting information at a fuel dispenser.

5. The method of claim 1, wherein authenticating the content comprises checking a digital signature.

6. The method of claim 1, further comprising disabling said one or more data entry point devices associated with the retail terminal when the content cannot be authenticated.

7. The method of claim 1, further comprising enabling said one or more data entry point devices associated with the retail terminal when the content is authenticated.

8. The method of claim 2, further comprising receiving the non-sensitive information at the one or more data entry point devices.

9. A fuel dispenser, comprising:

a user interface comprising one or more data entry point devices adapted to receive information from a user and a display; and

a control system adapted to;

determine whether content to be presented on the display of the fuel dispenser requests information;

if the content to be presented on the display requests information, determine whether the content requests sensitive information;

authenticate the content to be presented on the display;

present the content on the display if the content is authenticated; and

if the content requests sensitive information, encrypting data received from one or more data entry point devices for transmission to a location removed from the fuel dispenser.

10. The fuel dispenser of claim 9, wherein the control system is further adapted to present content on the display if the content is not authenticated and concurrently disable the one or more data entry point devices.

11. The fuel dispenser of claim 9, further comprising fuel delivery components and wherein the control system is further adapted to control delivery of fuel to the user through the fuel delivery components.

12. The fuel dispenser of claim 9, wherein the control system is adapted to not encrypt data received from the one or more data entry point devices if the information requested is not sensitive information.

13. The fuel dispenser of claim 9, wherein the control system is adapted to determine whether the content requests a personal identification number (PIN).

14. The fuel dispenser of claim 9, wherein the control system is adapted to check a digital signature when authenticating the content.

15. The fuel dispenser of claim 9, wherein the control system is adapted to disable the one or more data entry point devices when the content cannot be authenticated.

16. The fuel dispenser of claim 9, wherein the control system enables at least one of the one or more data entry point devices when the content is authenticated.

17. A fueling system comprising:

a site controller;

a security module;

a fuel dispenser comprising;

a user interface comprising one or more data entry point devices and a display;

a control system adapted to;

determine whether content requests sensitive information;

authenticate the content;

if the content is authenticated, present the content on the display such that the content prompts the user for sensitive information;

receive the sensitive information through the user interface; and

encrypt the sensitive information for transmission to the security module through the site controller.

18. The fueling system of claim 17, wherein other content prompts the user for non-sensitive information.

19. The fueling system of claim 18, wherein the control system does not encrypt the non-sensitive information.

20. The fueling system of claim 17, wherein the transmission of encrypted sensitive information from the fuel dispenser to the security module occurs using a local encryption scheme.

21. The fueling system of claim 20, wherein the security module decrypts the local encryption scheme and re-encrypts the sensitive information with a host encryption scheme for transmission to a host.