FUEL DISPENSER USER INTERFACE SYSTEM ARCHITECTURE

• US 20160171253A1
• Filed: 02/22/2016
• Published: 06/16/2016
• Est. Priority Date: 11/29/2012
• Status: Active Grant

• Current Assignee: Gilbarco Italia SRL (Vontier Corp.)
• Original Assignee: Gilbarco SRL (Fortive Corp.), Gilbarco Incorporated (Vontier Corp.)
• Inventors: Williams, Rodger K., Carapelli, Giovanni
• Granted Patent: US 9,715,600 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors

Abstract

A vending machine can include a touch display and a touch controller operatively connected to the touch display and configured to transmit display data to the touch display and receive input data from a touchscreen function of the touch display. The vending machine also includes a secure device operatively connected to the touch display for securing the display by managing touch input information provided to one or more applications based on the input data received from the touchscreen functionality. The vending machine has a processor operatively connected to the secure device for communicating access requests for the touch display to the secure device from the one or more applications along with an indication of whether the one or more applications are signed by an authorized entity. The secure device manages the touch input information provided to the one or more applications further based at least in part on the indication.

Claims

1. A method for controlling access to a touch display, comprising:

receiving input data from a touch display, wherein the input data is associated with an application accessing the touch display;

determining whether the application is signed by an authorized entity; and

providing touch input information correlating to the input data to the application based at least in part on whether the application is signed by the authorized entity.

2. The method of claim 1, further comprising generating the touch input information by restricting the input data where the application is not signed by an authorized entity.

3. The method of claim 2, wherein the generating the touch input information comprises determining one of a fixed number of regions on the touch display correlating to the input data as the touch input information.

4. The method of claim 1, wherein the generating the touch input information comprises determining coordinate information correlating to the input data as the touch input information.

5. The method of claim 1, further comprising establishing a secure channel with a processor for communicating the input data thereto.

6. The method of claim 5, further comprising maintaining the secure channel at least in part by determining whether a consistent ping message is received from the processor.

7. The method of claim 6, further comprising disabling the touch display based at least in part on determining that the consistent ping message is not received from the processor over a period of time.

8. The method of claim 1, further comprising erasing at least a portion of a memory upon detecting removal of at least one cable to the processor or to the touch display.

9. The method of claim 1, wherein the determining whether the application is signed by an authorized entity comprises determining whether a secure channel is established with the application.

10. The method of claim 9, wherein the application obtains one or more encryption keys for encrypting communication as part of a verification process for the application, and wherein the application is signed with a manufacturer signature as part of the verification process.

11. The method of claim 9, further comprising encrypting a portion of the touch input information for communicating to the application over the secure channel.