Systems and methods for point-to-point encryption compliance

Patent metadata

Field	Value
Publication number	US-2019319989-A1
Application number	US-201815982434-A
Country	US
Kind code	A1
Filing date	May 17, 2018
Priority date	Apr 13, 2018
Publication date	Oct 17, 2019
Grant date	—

Abstract

Systems and methods for point-to-point encryption compliance are disclosed. In one embodiment, in a point of interaction device comprising at least one computer processor, a method for point-to-point encryption compliance may include: (1) receiving card data from a card reading device; (2) determining an error with the card data; (3) generating substitute data by replacing at least a portion of the card data with substitute data; and (4) communicating the substitute data to a payment server. The card data may be received from a magnetic stripe reader, from an EMV card reader, or from a contactless card reader. The error may include comprises the card data not being compliant with ISO-7813.

First claim

What is claimed is:

1 . A method for point-to-point encryption compliance, comprising:
in a point of interaction device comprising at least one computer processor:
receiving card data from a card reading device;
determining an error with the card data;
generating substitute data by replacing at least a portion of the card data with substitute data; and
communicating the substitute data to a payment server.

2 . The method of claim 1 , wherein the card data is received from a magnetic stripe reader.

3 . The method of claim 1 , wherein the card data is received from an EMV card reader.

4 . The method of claim 1 , wherein the card data is received from a contactless card reader.

5 . The method of claim 1 , wherein the error comprises the card data not being compliant with ISO-7813.

6 . The method of claim 1 , wherein the substitute data comprises static data.

7 . The method of claim 1 , wherein the substitute data comprises random data.

8 . The method of claim 1 , wherein the substitute data comprises an indicator of the error.

9 . The method of claim 1 , further comprising:
retrieving a security packet for the transaction; and communicating the security packet and the substitute data to the authorization platform.

10 . The method of claim 1 , wherein the point of interaction device is a point of sale device.

11 . A point of interaction device, comprising:
a card reading device; and a cryptographic processor; wherein:
the cryptographic processor receives card data from the card reading device;
the cryptographic processor determines an error with the card data; and
the cryptographic processor generates substitute data by replacing at least a portion of the card data with the substitute data.

12 . The point of interaction device of claim 11 , wherein the point of interaction device communicates the substitute data to a payment server.

13 . The point of interaction device of claim 11 , wherein the card data is received from a magnetic stripe reader.

14 . The point of interaction device of claim 11 , wherein the card data is received from an EMV card reader.

15 . The point of interaction device of claim 11 , wherein the card data is received from a contactless card reader.

16 . The point of interaction device of claim 11 , wherein the error comprises the card data not being compliant with ISO-7813.

17 . The point of interaction device of claim 11 , wherein the substitute data comprises static data.

18 . The point of interaction device of claim 11 , wherein the substitute data comprises random data.

19 . The point of interaction device of claim 11 , wherein the substitute data comprises an indicator of the error.

20 . The point of interaction device of claim 11 , wherein the point of interaction device retrieves a security packet for the transaction and communicates the security packet and the substitute data to the authorization platform.

Assignees

• Verifone Inc

Inventors

• Yale Scott Raymond
• Vance Joachim

Classifications

• G06Q20/356

  Aspects of software for card payments · CPC title

• G06Q20/3823

  combining multiple encryption tools for a transaction · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• G06Q20/385

  using an alias or single-use codes · CPC title

• G06Q20/3567

  Software being in the reader · CPC title