# US 10,185,956 B2 · Secure payment card transactions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,185,956 B2
- Document ID: US10185956B2
- Status: Granted
- Kind: B2
- Application number: 15/801,716
- Filed: 2017-11-02
- Published: 2018-10-25
- Granted: 2019-01-22
- Earliest claimed: 2007-05-17
- Assignees: Shift4 Corporation
- Applicants: Shift4 Corporation
- Inventors: John David Oder, II; John David Oder; Kevin James Cronic; Steven Mark Sommers; Dennis William Warner
- Web page: https://patentgrep.com/patent/US10185956B2

## CPC

- G06Q 20/401: {Transaction verification}
- G06Q 20/20: Point-of-sale [POS] network systems
- G06Q 20/202: {Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR}
- G06Q 20/3278: {RFID or NFC payments by means of M-devices}
- G06Q 20/34: using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q 20/382: {insuring higher security of transaction}
- G06Q 20/3821: {Electronic credentials}
- G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q 20/409: {Device specific authentication in transaction processing}
- G06Q 40/00: Finance; Insurance; Tax strategies; Processing of corporate or income taxes
- G07F 7/088: {the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself}
- G06Q 2220/00: Business processing using cryptography
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})

## Abstract

Payment card transactions at a point of sale (POS) are secured in certain embodiments by intercepting, with a POS security layer installed on a POS terminal, payment data from the POS terminal, transmitting the payment data from the POS security layer to a server security application installed on a POS server, and providing false payment data from the POS security layer to a POS terminal application installed on the POS terminal. The false payment data in various embodiments is processed as if it were the payment data, such that the POS terminal transmits an authorization request to the POS server using the false payment data. In addition, the authorization request may be transmitted from the POS server to a payment gateway.

## Claims

### Claim 1

An encryption system comprising:
first electronic circuitry programmed to execute instructions of a first application; and
second electronic circuitry programmed to execute instructions of a second application,
wherein the first application is configured to:
obtain payment data associated with a payment instrument in response to the payment instrument being read by a payment instrument reader, by intercepting the payment data and thereby preventing the payment data from being sent to a third application;
encrypt the payment data to obtain encrypted payment data; and
provide the encrypted payment data to the second application at the second electronic circuitry;
wherein the second application is configured to:
receive the encrypted payment data;
decrypt the encrypted payment data to obtain the payment data;
create replacement data formatted to be processed as a substitute for at least a portion of the payment data;
discard the payment data; and
provide the replacement data to the first application at the first electronic circuitry; and
wherein the first application is further configured to provide the replacement data to the third application as a substitute for at least a portion of the payment data to enable the third application to request a transaction authorization based at least in part on the replacement data.

### Claim 2 (depends on 1)

The encryption system of claim 1, wherein the payment instrument comprises a wireless device.

### Claim 3 (depends on 1)

The encryption system of claim 1, wherein the payment instrument comprises a radio frequency identification (RFID) enabled device.

### Claim 4 (depends on 1)

The encryption system of claim 1, wherein the second application is further configured to re-encrypt the payment data prior to discarding the payment data, and wherein discarding the payment data comprises discarding the decrypted payment data.

### Claim 5 (depends on 4)

The encryption system of claim 4, wherein the second application is further configured to re-encrypt the payment data by creating a first version of the encrypted payment data that is decryptable only at a gateway server and a second version of the encrypted data that is decryptable by at least one of the first electronic circuitry or the second electronic circuitry.

### Claim 6 (depends on 1)

The encryption system of claim 1, wherein a first portion of the replacement data comprises false data and a second portion of the replacement data comprises a second portion of the payment data.

### Claim 7 (depends on 1)

The encryption system of claim 1, wherein the encrypted payment data is decryptable by the second application, and wherein the first application is further configured to encrypt the payment data to obtain a second encrypted payment data that is not decryptable by the second application.

### Claim 8 (depends on 1)

The encryption system of claim 1, wherein the second application is further configured to combine the replacement data with the encrypted payment data to obtain combined payment data and to provide the combined payment data to a gateway server.

### Claim 9 (depends on 1)

The encryption system of claim 1, wherein the second application is further configured to combine the replacement data with a second encrypted payment data that is decryptable only at a gateway server to obtain combined payment data and to provide the combined payment data to the gateway server.

### Claim 10

An encryption method comprising:
under control of electronic circuitry programmed to execute instructions of a first application:
obtaining payment data associated with a payment instrument in response to the payment instrument being read by a payment instrument reader, by intercepting the payment data and thereby preventing the payment data from being sent to a third application;
encrypting the payment data to obtain encrypted payment data;
providing the encrypted payment data to a second application at second electronic circuitry;
receiving, from the second electronic circuitry, replacement data formatted to be processed as a substitute for at least a portion of the payment data; and
providing the replacement data to the third application as a substitute for at least a portion of the payment data to enable the third application to request a transaction authorization based at least in part on the replacement data.

### Claim 11 (depends on 10)

The encryption method of claim 10, wherein the payment instrument comprises a wireless device.

### Claim 12 (depends on 10)

The encryption method of claim 10, wherein the payment instrument comprises a radio frequency identification (RFID) enabled device.

### Claim 13 (depends on 10)

The encryption method of claim 10, wherein the encrypted payment data is decryptable by the second application.

### Claim 14 (depends on 13)

The encryption method of claim 13, further comprising encrypting the payment data to obtain a second encrypted payment data that is not decryptable by the second application.

### Claim 15 (depends on 10)

The encryption method of claim 10, wherein the second electronic circuitry comprises a point of sale server.

### Claim 16 (depends on 10)

The encryption method of claim 10, wherein the second electronic circuitry comprises a gateway.

### Claim 17

An encryption method comprising:
under control of electronic circuitry programmed to execute instructions of a first application:
obtaining encrypted payment data associated with a payment instrument in response to the payment instrument being read by a payment instrument reader;
decrypting the encrypted payment data to obtain the payment data;
creating replacement data formatted to be processed as a substitute for at least a portion of the payment data;
discarding the payment data; and
providing the replacement data to a second application at a second electronic circuitry enabling the second application to provide the replacement data to a third application as a substitute for at least a portion of the payment data to enable the third application to request a transaction authorization based at least in part on the replacement data.

### Claim 18 (depends on 17)

The encryption method of claim 17, wherein the payment instrument comprises a wireless device.

### Claim 19 (depends on 17)

The encryption method of claim 17, wherein the payment instrument comprises a radio frequency identification (RFID) enabled device.

### Claim 20 (depends on 17)

The encryption method of claim 17, wherein the electronic circuitry comprises a point of sale server.