Secure point of sale terminal and associated methods

Patent metadata

Field	Value
Publication number	US-9704355-B2
Application number	US-201514877909-A
Country	US
Kind code	B2
Filing date	Oct 7, 2015
Priority date	Oct 29, 2014
Publication date	Jul 11, 2017
Grant date	Jul 11, 2017

Abstract

Methods and systems for processing secure information are disclosed. One method includes receiving secure data from a user via an input device. The method also includes routing the secure data to a secure processor using a hardware multiplexer. The method also includes processing the secure data using the secure processor. The method also includes receiving non-secure data from the user via the input device. The method also includes routing the non-secure data to a second processor using the hardware multiplexer. The method also includes processing the non-secure data using the second processor. The method also includes altering a routing state of the hardware multiplexer using the secure processor. The routing state of the hardware multiplexer is only controlled by the secure processor.

First claim

What is claimed is:

1. A device comprising:
an input device with an input device user data connection to an input device controller;
a multiplexer with a multiplexer control input port, a multiplexer data input port communicatively coupled to the input device controller, a first data output port, and a second data output port;
a secure processor with: (i) a control output port communicatively coupled to the multiplexer control input port; and (ii) a secure processor data input port communicatively coupled to the first data output port;
a tamper sensor processing circuit integrated on the same integrated circuit as the secure processor;
a second processor with a second processor data input port communicatively coupled to the second data output port;
a first memory: (i) associated with operation of the secure processor; (ii) storing a first injected digital public-key certificate; and (iii) integrated on a single integrated circuit with the secure processor; and
a second memory: (i) associated with operation of the second processor; and (ii) storing a second injected digital public-key certificate;
wherein the first injected digital public-key certificate and the second injected digital public-key certificate define a bonded pair of certificates forming a persistent identity for the secure processor and the second processor;
the first memory comprising processor executable instructions which when executed by the secure processor cause the secure processor to:
authenticate the secure processor and the second processor to a server by sending the first injected digital public-key certificate and the second injected digital public-key certificate to the server; and
obtain financial encryption keys from the server based on the authentication of the bonded pair of certificates;
wherein the tamper sensor processing circuit clears the first memory if tampering is detected;
wherein the input device controller and second processor are not on the same integrated circuit as the secure processor;
wherein the multiplexer is configurable between a first state and a second state;
wherein the multiplexer data input port is communicatively coupled to the first data output port through the multiplexer when a current state of the multiplexer is the first state;
wherein the multiplexer data input port is communicatively coupled to the second data output port through the multiplexer when the current state of the multiplexer is the second state;
wherein the current state of the multiplexer is exclusively controlled by the secure processor via the control output port;
wherein the secure processor and the multiplexer are located on the single integrated circuit;
wherein the multiplexer is a block of circuitry on the single integrated circuit; and wherein the control output port and the multiplexer control input port are connected via interconnects in the single integrated circuit.

2. The device of claim 1 , wherein:
the input device is a touch screen display;
the device is a point of sale terminal; and
the touch screen display instantiates a virtual keypad for a user.

3. The device of claim 2 , further comprising:
a display signal connection line between the second processor and the touch screen display; and
an inter-processor communication line between the secure processor and the second processor;
wherein the inter-processor communication line and the display signal connection line provide a channel for the secure processor to control the touch screen display.

4. The device of claim 1 , wherein the second processor cannot address the first memory.

5. The device of claim 4 , further comprising:
an inter-processor line between the secure processor and the second processor; and an encryption module instantiated by the secure processor and the first memory; wherein the encryption module encrypts a quantum of data received from the input device to create an encrypted quantum of data; and
wherein the inter-processor line carries the encrypted quantum of data from the secure processor to the second processor.

6. The device of claim 1 , wherein:
the device operates in a secure mode and a non-secure mode;
the multiplexer operates in the first state when the device is in the secure mode;
the multiplexer operates in the second state when the device is in the non-secure mode;
and
a state machine that describes the input device controller does not require information regarding whether the device is operating in the secure mode or the non-secure mode.

7. The device of claim 1 , further comprising:
an inter-processor line between the secure processor and the second processor; wherein the second processor can only affect the current state of the multiplexer indirectly via the inter-processor line and the secure processor.

8. The device of claim 7 , further comprising:
a second input device with a second input device user data connection; wherein the secure processor includes a second data input port; and wherein the secure processor is communicatively coupled with the second input device user data connection via the second data input port and not via the multiplexer.

9. The device of claim 1 , wherein:
the secure processor and the second processor are independent microcontrollers.

10. A method comprising:
receiving secure data from a user via an input device and an input device controller;
routing the secure data to a secure processor using a hardware multiplexer;
processing the secure data using the secure processor and a first memory to produce encrypted secure data, wherein the first memory stores a first injected digital public-key certificate;
receiving non-secure data from the user via the input device; routing the non-secure data to a second processor using the hardware multiplexer;
processing the non-secure data using the second processor and a second memory,

wherein the second memory stores a second injected digital public-key certificate
wherein the first injected digital public-key certificate and the second injected digital public-key certificate define a bonded pair of certificates forming a persistent identity for the secure processor and the second processor;
authenticating the secure processor and the second processor to a server by sending the first injected digital public-key certificate and the second injected digital public-key certificate to the server;
obtaining financial encryption keys remotely from the server based on the authentication of the bonded pair of certificates;
altering a routing state of the hardware multiplexer using the secure processor;
transferring the encrypted secure data from the secure processor to the non-secure processor using an inter-processor line; and
clearing the first memory if a tamper is detected by a tamper circuit;
wherein the routing state of the hardware multiplexer is only controlled by the secure processor;
wherein the secure processor and the multiplexer are located on a single integrated circuit;
wherein the second processor is located on a second integrated circuit;
wherein the input device controller is not located on the single integrated circuit; wherein the hardware multiplexer is a block of circuitry on the single integrated circuit;
wherein the secure processor controls the multiplexer via interconnects in the single integrated circuit; and
wherein the first memory and tamper circuit are located on the single integrated circuit.

11. The method of claim 10 , further comprising: instantiating a virtual keypad for the user on a touch screen display; wherein the input device is the touch screen display; and
wherein the secure data is a personal identification number entered via the vi

Assignees

• Clover Network Inc

Inventors

• Beatty John Daniel
• Mishra Abhinayak

Classifications

• G07G1/14

  Systems including one or more distant stations co-operating with a central processing unit · CPC title

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06Q20/202

  Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR · CPC title

• G06Q20/204

  comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit · CPC title

• G06Q20/3823

  combining multiple encryption tools for a transaction · CPC title