Method and system for securing data from an external network to a non point of sale device

• US 8,732,813 B2
• Filed: 11/05/2008
• Issued: 05/20/2014
• Est. Priority Date: 11/05/2008
• Status: Active Grant

• Current Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Original Assignee: Apriva, LLC (APPSware Holdings, Inc.)
• Inventors: Coppinger, Paul D.
• Primary Examiner(s): Lim, Krisna
• Application Number:
  US12/265,575
• Publication Number:
  US 20100115602A1
• Time in Patent Office: 2,022 Days
• Field of Search: 726/11, 726/12, 726/14, 705/64
• US Class Current: 726/11
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/08 Access security

Abstract

A data control system allows non-point of sale devices (135, 155) on the LAN to receive data from an external network (160) when established conditions are met. The data control system may allow the data to be sent to a non-point of sale device (135, 155) only if the data has not been received via a secure connection reserved for point of sale devices (125, 145). The secure connection is, for example, a virtual private network connection. The data control system may also allow the data to be sent to a non-point of sale device (135, 155) only if the data is associated with a communication session initiated by the non-point of sale device (135, 155). The data control system may also allow the data to be sent to the non-point of sale device (135, 155) only if it is not received from a restricted source. The restricted source may be, for example, a payment host (170), a secure host (180) or any unidentified source.

Claims

1. A method, performed by a data control system, for securing data on a local area network in communication with an external network, the local area network having one or more point of sale devices and one or more non-point of sale devices, the method comprising the steps of:

(a) determining the data is from the external network;

(b) determining whether the data received from the external network is destined for a non-point of sale device; and

(c) allowing the data to be sent if it is destined for a non-point of sale device.

2. The method of claim 1 wherein step (a) further comprises determining whether the data is received via a secure connection reserved for point of sale devices, and wherein step (c) comprises allowing the data to the sent to the non-point of sale device only if it is not received via the secure connection.

3. The method of claim 2 wherein the secure connection is a virtual private network connection.

4. The method of claim 1 wherein step (c) comprises allowing the data to be sent to the non-point of sale device if the data is associated with a communication session initiated by the non-point of sale device and preventing the data from being sent to the non-point of sale device if the data is not associated with a communication session initiated by the non-point of sale device.

5. The method of claim 1 wherein step (c) comprises allowing the data to be sent to the non-point of sale device if the data is not from a restricted source and preventing the data from being sent to the non-point of sale device if the data from the restricted source.

6. The method of claim 5 wherein the restricted source is a secure host on the external network.

7. The method of claim 5 wherein the restricted source is a payment host on the external network.

8. The method of claim 5 wherein the restricted source is an unidentified source on the external network.

9. The method of claim 5 wherein step (c) comprises allowing the data to be sent to the non-point of sale device if the data is associated with a communication session initiated by the non-point of sale device and preventing the data from being sent to the non-point of sale device if the data is not associated with a communication session initiated by the non-point of sale device.

10. The method of claim 1 wherein the data control system comprises a router.

11. A data control system for securing data on a local area network in communication with an external network, the local area network having one or more point of sale devices and one or more non-point of sale devices, the data control system comprising:

means for determining the data is from the external network;

means for determining whether the data received from the external network is destined for a non-point of sale device; and

means for allowing the data to be sent if it is destined for a non-point of sale device.

12. The method of claim 11 wherein the means for determining the data is from the external network further comprises means for determining whether the data is received via a secure connection reserved for point of sale devices, and wherein the means for allowing the data to be sent comprises means for allowing the data to be sent to the non-point of sale device only if it is not received via the secure connection.

13. The data control system of claim 12 wherein the secure connection is a virtual private network connection.

14. The data control system of claim 11 wherein the means for allowing the data to be sent comprises means for allowing the data to be sent to the non-point of sale device if the data is associated with a communication session initiated by the non-point of sale device and means for preventing the data from being sent to the non-point of sale device if the data is not associated with a communication session initiated by the non-point of sale device.

15. The data control system of claim 11 wherein the means for allowing the data to be sent comprises means for allowing the data to be sent to the non-point of sale device if the data is not from a restricted source and means for preventing the data from being sent to the non-point of sale device if the data from the restricted source.

16. The data control system of claim 15 wherein the restricted source is a secure host on the external network.

17. The data control system of claim 15 wherein the restricted source is a payment host on the external network.

18. The data control system of claim 15 wherein the restricted source is an unidentified source on the external network.

19. The data control system of claim 14 wherein the means for allowing the data to the sent comprises means for allowing the data to be sent to the non-point of sale device if the data is associated with a communication session initiated by the non-point of sale device and means for preventing the data from being sent to the non-point of sale device if the data is not associated with a communication session initiated by the non-point of sale device.

20. The data control system of claim 11 wherein the data control system comprises a router.

21. The data control system of claim 11 wherein the data control system comprises a router in communication with a secure host.