SYSTEM AND METHOD FOR SELECTIVE ENCRYPTION OF INPUT DATA DURING A RETAIL TRANSACTION

• US 20110231648A1
• Filed: 05/27/2011
• Published: 09/22/2011
• Est. Priority Date: 08/04/2005
• Status: Active Grant

• Current Assignee: Gilbarco Incorporated (Vontier Corp.)
• Original Assignee: Gilbarco Incorporated (Vontier Corp.)
• Inventors: Williams, Rodger K., Robertson, Philip A., Weston, Timothy M.
• Granted Patent: US 10,109,142 B2
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: G07F 7/1075 PIN is checked remotely

Abstract

A retail environment having retail terminals with data entry point devices selectively encrypts input received by the data entry point devices and passes the encrypted data to a security module. The selective encryption is based on whether or not sensitive or confidential information, such as a personal identification number (PIN) associated with a debit card, is being input. To prevent hacking of the software of the retail terminal, content destined for display on the retail terminal is authenticated prior to display. In this manner, the retail terminal may be assured that confidential information is input only when desired, and thus may be encrypted only as needed.

Claims

1. A method of collecting information at a retail terminal having a display and at least one input device, the method comprising:

executing an application on the retail terminal, wherein the application comprises a flag and content to be presented on the display, wherein a value of the flag is representative of whether the content requests confidential information, and wherein the value of the flag is set prior to installation of the application on the retail terminal;

determining whether the content requests confidential information based on the value of the flag;

authenticating the content to be presented on the display;

presenting the content on the display if the content is authenticated; and

if the content requests confidential information, encrypting data received from the at least one input device for transmission to a location separate from the retail terminal.

2. The method of claim 1, further comprising, not encrypting data received from the at least one input device if the information requested is not confidential information.

3. The method of claim 1, wherein determining whether content requests confidential information comprises determining whether the content requests a personal identification number (PIN).

4. The method of claim 1, wherein collecting information at the retail terminal comprises collecting information at a fuel dispenser.

5. The method of claim 1, wherein authenticating the content comprises checking a digital signature.

6. The method of claim 1, further comprising disabling the at least one input device when the content cannot be authenticated.

7. The method of claim 1, further comprising enabling the at least one input device when the content is authenticated.

8. The method of claim 2, further comprising receiving the non-confidential information at the at least one input device.

9. A fuel dispenser, comprising:

a user interface comprising a display and one or more data entry point devices adapted to receive information from a user; and

a control system adapted to;

determine whether content to be presented on the display of the fuel dispenser requests confidential information;

authenticate the content to be presented on the display during execution of the content but before being displayed by comparing indicia associated with the content to a secure copy of the indicia;

present the content on the display if the content is authenticated; and

if the content requests confidential information, encrypt data received from one or more data entry point devices for transmission to a location separate from the fuel dispenser.

10. The fuel dispenser of claim 9, wherein the control system is further adapted to present content on the display if the content is not authenticated and concurrently disable the one or more data entry point devices.

11. The fuel dispenser of claim 9, further comprising at least one fuel delivery component and wherein the control system is further adapted to control a delivery of fuel to the user through the at least one fuel delivery component.

12. The fuel dispenser of claim 9, wherein the control system is adapted to not encrypt data received from the one or more data entry point devices if the information requested is not confidential information.

13. The fuel dispenser of claim 9, wherein the control system is adapted to determine whether the content requests a personal identification number (PIN).

14. The fuel dispenser of claim 9, wherein the indicia associated with the content comprises a digital signature.

15. The fuel dispenser of claim 9, wherein the control system is adapted to disable the one or more data entry point devices when the content cannot be authenticated.

16. The fuel dispenser of claim 9, wherein the control system enables at least one of the one or more data entry point devices when the content is authenticated.