Secure Point of Sale Presentation of a Barcode at an Information Handling System Display

• US 20150052065A1
• Filed: 11/03/2014
• Published: 02/19/2015
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Schuckle, Richard W., Ancona, Rocco, Robison, Charles D.
• Granted Patent: US 9,280,770 B2
• Time in Patent Office: Days
• US Class Current: 705/71
• CPC Class Codes: G06K 19/06112 the marking being simulated using a light source, e.g. a barcode shown on a display or a laser beam with time-varying intensity profile
• CPC Class Codes: G06K 7/1447 extracting optical codes from image or text carrying said optical code
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: G06Q 20/3276 using a pictured code, e.g. barcode or QR-code, being read by the M-device
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/4015 using location information

Abstract

Unauthorized copying of a transaction barcode is prevented by including a sensed condition or other publicly-accessible data with the transaction barcode for use as a comparison with the publicly accessible data determined at a barcode reader. If the sensed condition included in the transaction barcode indicates that the transaction barcode was generated for a different transaction, then the barcode reader invalidates the transaction. For instance, if the barcode was generated too distant in time, position, or sequential transactions, then the barcode reader invalidates the transaction barcode as an unauthorized copy of a transaction barcode generated for a different transaction.

Claims

1-1. The method of claim 1 wherein sensing a condition at a point of sale location further comprises:

determining a location with a GPS receiver integrated in the portable information handling system; and

selecting a predetermined portion of the location as an encryption key to encrypt the account identifier.

5. The method of claim 5 wherein applying information read from the barcode further comprises:

reading a key embedded in the barcode; and

applying the key to encrypt the account identifier.

6. The method of claim 5 wherein applying information read from the barcode further comprises:

reading a network address embedded in the barcode;

retrieving a key from the network address;

applying the key to encrypt the account identifier; and

retrieving the key from the network address to the barcode reader to decrypt the account identifier.

9. A point of sale transaction system comprising:

a portable information handling system having a processor operable to execute instructions to process information, memory interfaced with the processor and operable to store the information and a display interfaced with the processor and operable to present the information as visual images;

a barcode generator stored in the memory and operable to execute on the processor to apply the information to generate a barcode for presentation at the display;

a sensor integrated in the portable information handling system and operable to sense publicly accessible information at a point of sale, the publicly accessible information unique to the point of sale;

a transaction engine stored in the memory and operable to execute on the processor to embed an account identifier and the publicly accessible information in a barcode generated by the barcode generator, the barcode presented at the display, the transaction engine encrypting at least the account identifier by using at least a portion of the publicly accessible information as an encryption key; and

a barcode reader separate from the mobile information handling system and operable to read the barcode from the display, extract the account identifier and apply the publicly accessible information to validate a point-of-sale transaction, the barcode reader decrypting the account identifier with the publicly accessible information used as a decryption key.

11. The point of sale transaction system of claim 10 wherein the publicly accessible information comprises a time at which the barcode generator generates the barcode, the barcode reader operable to invalidate use of the account identifier if the time at which the barcode generator generates the barcode is greater than a predetermined amount from a current time at the barcode reader.

12. The point of sale transaction system of claim 10 wherein the publicly accessible information comprises a time associated with generation of the barcode, the barcode generator operable to apply the time to encrypt the account identifier in the barcode, the barcode reader applying a time at which the barcode is read to decrypt the account identifier.

13. The point of sale transaction system of claim 10 wherein the publicly accessible information comprises a GPS position of the mobile information handling system at the generation of the barcode, the barcode reader operable to invalidate use of the account identifier if the position at which the barcode generator generates the barcode is greater than a predetermined distance from the position of the barcode reader.

14. The point of sale transaction system of claim 10 wherein the publicly accessible information comprises a GPS position associated with generation of the barcode, the barcode generator operable to apply the GPS position to encrypt the account identifier in the barcode, the barcode reader applying a GPS position at which the barcode is read to decrypt the account identifier.

15. The point of sale transaction system of claim 10 wherein the publicly accessible information comprises a most recent transaction associated with the account identifier at the generation of the barcode, the barcode reader operable to access the account identifier and to verify the most recent transaction to validate the point of sale transaction.

16. The point of sale transaction system of claim 10 wherein the portable information handling system comprises a mobile telephone.

17. A method for restricting use of a transaction barcode, the method comprising:

sensing a condition at a mobile telephone;

generating a transaction barcode at the mobile telephone, the transaction barcode including an account identifier and the sensed condition, the sensed condition used as an encryption key to encrypt the transaction barcode;

presenting the transaction barcode at a display of the mobile telephone;

reading the transaction barcode from the display of the mobile telephone with a barcode reader; and

invalidating the transaction if the sensed condition included in the bar code fails to match the sensed condition at the barcode reader.

18. The method of claim 17 wherein the sensed condition comprises a GPS position.

19. The method of claim 17 wherein the sensed condition comprises a time.

20. The method of claim 17 wherein the generating a transaction barcode at the mobile telephone, the transaction barcode including an account identifier and the sensed condition further comprises using a unique sensed condition as an encryption key to encrypt the transaction barcode.