Fuel dispenser user interface system architecture

• US 9,715,600 B2
• Filed: 02/22/2016
• Issued: 07/25/2017
• Est. Priority Date: 11/29/2012
• Status: Active Grant

• Current Assignee: Gilbarco Italia SRL (Vontier Corp.)
• Original Assignee: Gilbarco SRL (Fortive Corp.), Gilbarco Incorporated (Vontier Corp.)
• Inventors: Williams, Rodger K., Carapelli, Giovanni
• Primary Examiner(s): To, Baotran N
• Application Number:
  US15/049,750
• Publication Number:
  US 20160171253A1
• Time in Patent Office: 519 Days
• Field of Search: 726 2
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors

Abstract

A vending machine can include a touch display and a touch controller operatively connected to the touch display and configured to transmit display data to the touch display and receive input data from a touchscreen function of the touch display. The vending machine also includes a secure device operatively connected to the touch display for securing the display by managing touch input information provided to one or more applications based on the input data received from the touchscreen functionality. The vending machine has a processor operatively connected to the secure device for communicating access requests for the touch display to the secure device from the one or more applications along with an indication of whether the one or more applications are signed by an authorized entity. The secure device manages the touch input information provided to the one or more applications further based at least in part on the indication.

Claims

1. A method for controlling access to a touch display, comprising:

receiving input data from a touch display, wherein the input data is associated with an application accessing the touch display;

determining whether the application is signed by an authorized entity based at least in part on determining whether a secure channel is established with the application via an encryption key pair wherein the application has one key of the encryption key pair and another key of the encryption key pair is stored at a secure device that controls the touch display, wherein the one key is previously provided as part of an application verification process; and

providing touch input information correlating to the input data to the application based at least in part on whether the application is signed by the authorized entity.

2. The method of claim 1, further comprising generating the touch input information by restricting the input data where the application is not signed by an authorized entity.

3. The method of claim 2, wherein the generating the touch input information comprises determining one of a fixed number of regions on the touch display correlating to the input data as the touch input information.

4. The method of claim 2, wherein the generating the touch input information comprises determining coordinate information correlating to the input data as the touch input information.

5. The method of claim 1, wherein the secure channel communicates the input data to a processor.

6. The method of claim 5, further comprising maintaining the secure channel at least in part by determining whether a consistent ping message is received from the processor.

7. The method of claim 6, further comprising disabling the touch display based at least in part on determining that the consistent ping message is not received from the processor over a period of time.

8. The method of claim 6, further comprising erasing at least a portion of a memory upon detecting removal of at least one cable to the processor or to the touch display.

9. The method of claim 1, further comprising encrypting a portion of the touch input information for communicating to the application over the secure channel.