Detecting for fraud and tampering at a payment terminal

Patent metadata

Field	Value
Publication number	US-12106307-B2
Application number	US-202217827466-A
Country	US
Kind code	B2
Filing date	May 27, 2022
Priority date	Feb 12, 2016
Publication date	Oct 1, 2024
Grant date	Oct 1, 2024

Abstract

A payment terminal may include payment interfaces to receive payment information from payment devices. The payment interfaces can include an interface configured to receive a payment card. Monitoring components may monitor the payment interfaces. In addition, a detection signal can be provided while a payment card is communicatively coupled to its corresponding payment interface. The monitored information and the detection signal may be used by the payment terminal to determine whether a transaction is fraudulent or if a tamper attempt is ongoing, based on local test criteria. In addition, the monitored information and detection signal may be provided to a server, which may store the monitored information and detection signal, test for fraudulent transactions and tamper attempts based on server test criteria, and determine updates to the local test criteria.

First claim

What is claimed is:

1. A payment terminal, comprising:
a payment interface configured to interface with a payment device, wherein the payment interface comprises an interface configured to receive a payment card;
a monitoring component coupled to the interface and configured to provide a monitoring signal;
a detection interface configured to provide a detection signal while the payment card is communicatively coupled to the interface;
a processing unit configured to receive the monitoring signal from the monitoring component and determine electrical characteristics of the payment interface based on the monitoring signal, and wherein the processing unit is configured to take a first corrective action based on a comparison of the electrical characteristics of the payment interface and the detection signal to local test criteria; and
a communication interface, wherein the processing unit is configured to generate a server request message including information on the electrical characteristics of the payment interface and the detection signal, transmit the server request message to a payment server via the communication interface, receive a server response message from the payment server via the communication interface, and determine whether to take a second corrective action based on the server response message, wherein the server response message is based on analysis of the information in the server request message.

2. The payment terminal of claim 1 , wherein the interface is a contact interface configured to receive a chip card.

3. The payment terminal of claim 2 , wherein the contact interface includes an input/output line and the monitoring component is coupled to the input/output line.

4. The payment terminal of claim 2 , wherein the detection interface is configured to provide the detection signal while the chip card is inserted at the contact interface.

5. The payment terminal of claim 4 , wherein the detection signal includes information about the inserted chip card.

6. The payment terminal of claim 1 , wherein the processing unit is configured to abort a transaction or query the payment device as the first corrective action, and to remove power from one or more components of the payment terminal, disable one or more components of the payment terminal, or employ countermeasures at the payment terminal as the second corrective action.

7. The payment terminal of claim 1 , further comprising:
a power supply; and
a power supply monitoring component configured to monitor the power supply to provide a monitored power signal, wherein the processing unit is further configured to determine whether to take the first corrective action based on a comparison of the monitored power signal to the local test criteria, and wherein the server request message is based on the detection signal, the electrical characteristics of the payment interface, and monitored power signal.

8. The payment terminal of claim 1 , wherein the processing unit is configured to receive an update message via the communication interface and update the local test criteria based on the update message.

9. A method for processing payment transactions at a payment terminal, the method comprising:
providing, from a monitoring component, a monitoring signal relating to a payment interface of the payment terminal, wherein the payment interface comprises a interface configured to receive a payment card and wherein the monitoring component is coupled to the interface;
providing, from a detection interface of the payment terminal, a detection signal while the payment card is communicatively coupled to the interface;
determining, at a processing unit of the payment terminal, electrical characteristics of the payment interface based on the monitoring signal;
determining, at the processing unit, whether to take a first corrective action based on a comparison of the electrical characteristics of the payment interface and the detection signal to local test criteria;
generating, at the processing unit, a server request message including information on the electrical characteristics of the payment interface and the detection signal;
transmitting the server request message from the processing unit to a payment server via the communication interface;
receiving a server response message at the processing unit from the payment server via the communication interface;
determining, at the processing unit, whether to take a second corrective action based on the server response message, wherein the server response message is based on analysis of the information in the server request message; and
invoking one or more of the first corrective action or the second corrective action.

10. The method of claim 9 , wherein the interface is a contact interface configured to receive a chip card and wherein providing the monitoring signal comprises providing the monitoring signal from the contact interface.

11. The method of claim 10 , wherein the contact interface includes an input/output line and the monitoring component is coupled to the input/output line, and wherein providing the monitoring signal comprises providing the monitoring signal from the input/output line.

12. The method of claim 10 , wherein providing the detection signal comprises providing the detection signal while the chip card is inserted at the contact interface.

13. The method of claim 12 , wherein the detection signal includes information about the inserted chip card.

14. The method of claim 9 , wherein the first corrective action comprises one or more of aborting a transaction and querying the payment device, and wherein the second corrective action comprises one or more of removing power from one or more components of the payment terminal, disabling one or more components of the payment terminal, and employing countermeasures at the payment terminal.

15. The method of claim 9 , further comprising providing, from a power supply monitoring component of the payment terminal, a monitored power signal for a power supply of the payment terminal, wherein determining whether to take the first corrective action further comprises determining whether to take the first corrective action based on a comparison the local test criteria to the monitored power signal, and wherein generating the server request message comprises generating the server request message based on the detection signal, the electrical characteristics of the payment interface, and the monitored power signal.

16. The method of claim 9 , further comprising:
receiving, at the processing unit, an update message via the communication interface; and
updating the local test criteria based on the update message.

17. A payment server, comprising:
a communication interface, wherein the communication interface is configured to receive a server request message associated with a current payment transaction, and wherein the server request message comprises electrical characteristics of a payment terminal and a detection signal provided by a detection interface of the payment terminal;
a transaction database comprising records, for the payment terminal and a plurality of additional payment terminals, of previous electrical characteristics from previous payment transactions and previous detection signals from the previous payment transactions; and
a processing element configured to extract the received electrical characteristics and detection signal from the server request message and store the electrical characteristics and detection signal in the transaction database, wherein the payment server is further configured to

Assignees

• Block Inc

Inventors

• Guise Max
• Leiserson Andrew John
• Zovi Dino Dai

Classifications

• G06Q20/204

  comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• G06Q20/341

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title