Systems and methods for provisioning point of sale terminals

Patent metadata

Field	Value
Publication number	US-11301840-B1
Application number	US-201514752672-A
Country	US
Kind code	B1
Filing date	Jun 26, 2015
Priority date	Mar 30, 2015
Publication date	Apr 12, 2022
Grant date	Apr 12, 2022

Abstract

A provisioning system is provided for terminals such as point of sale terminals. An interface device interfaces with a smart card and a provisioning server, providing initialization keys and security codes that are stored on the smart card. At a terminal, an initialization key from the smart card may be provided to the terminal if a correct security code is entered at the terminal. The terminal may then provide a terminal authorization package to the smart card. The terminal authorization package is stored on the smart card. At the interface device, the terminal authorization package is provided to the provisioning server. The terminal may then securely communicate transactions with an issuer server.

First claim

We claim:

1. A terminal comprising:
a card reader that interfaces with a smart card storing an initialization key;
a memory; and
a processor that performs the steps of:
receiving the initialization key from the smart card,
storing the initialization key in the memory,
receiving a provisioning request from the smart card,
obtaining a cryptographic key, wherein the obtaining of the cryptographic key comprises at least one of: (a) accessing, from a memory, the cryptographic key or (b) generating the cryptographic key;
obtaining a unique identifier associated with the terminal, wherein the obtaining of the unique identifier comprises at least one of: (a) accessing, from a memory, the unique identifier or (b) generating the unique identifier;
generating a terminal authorization package in response to the received provisioning request from the smart card, wherein the terminal authorization package is generated based on at least one of the cryptographic key or the unique identifier,
transmitting the terminal authorization package to the smart card,
authenticating communications with an issuer server based on the at least one of the cryptographic key or the unique identifier, and

processing transactions based on the communications with the issuer server.

2. The terminal claim of 1 , further comprising an input device that provides one or more security codes to the processor,
wherein the processor performs the step of transmitting the one or more security codes to the smart card.

3. The terminal of claim 2 , wherein the one or more security codes comprise a plurality of security codes.

4. The terminal of claim 2 , wherein the one or more security codes comprise one or more PIN codes.

5. The terminal of claim 1 , wherein the initialization key comprises a master public key.

6. A system for provisioning a point of sale terminal such that the point of sale terminal can securely process transactions, the system comprising:
an device comprising:
a card reader; and
a processor that performs the steps of:
interfacing with a smart card via the card reader, and
establishing a first secure communication channel between the smart card and a provisioning server, wherein an initialization key is transmitted from the provisioning server to the smart card via the first secure communication channel; and

a terminal, the terminal being a point of sale terminal, wherein the terminal comprises:
a card reader;
a memory; and
a processor that performs the steps of:
interfacing with the smart card via the card reader,
receiving the initialization key from the smart card,
storing the initialization key in the memory,
receiving a provisioning request from the smart card,
generating a terminal authorization package in response to the received provisioning request from the smart card, wherein the terminal authorization package contains initialization information identifying the terminal,
transmitting the terminal authorization package to the smart card,
authenticating communications with one or more remote servers based on the initialization information, wherein the initialization information includes at least one of a cryptographic key or a unique identifier, and

processing transactions based on the communications with the one or more remote servers; and

wherein the processor of the initialization device further performs the steps interfacing with the smart card via the card reader, and
establishing a second secure communication channel between the smart card and
the provisioning server, wherein the terminal authorization package is transmitted from the smart card to the provisioning server via the second secure communication channel, the terminal authorization package having been signed by the smart card.

Assignees

• Block Inc

Inventors

• Smith Malcolm
• Vadera Kshitiz
• Rezayee Afshin

Classifications

• G07F7/0873

  Details of the card reader · CPC title

• G06Q20/409

  Device specific authentication in transaction processing · CPC title

• G06Q20/3567

  Software being in the reader · CPC title

• G06Q20/204 Primary

  comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit · CPC title

• G06Q20/352

  Contactless payments by cards · CPC title