# US 10,769,597 B2 · Data processing method and device, and POS transaction system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,769,597 B2 - Document ID: US10769597B2 - Status: Granted - Kind: B2 - Application number: 15/876,782 - Filed: 2018-01-22 - Published: 2018-05-24 - Granted: 2020-09-08 - Earliest claimed: 2015-07-22 - Assignees: Tendyron Corporation - Applicants: Tendyron Corporation - Inventors: Dongsheng Li - Web page: https://patentgrep.com/patent/US10769597B2 ## CPC - G06Q 20/04: Payment circuits - G06F 8/61: Installation - G06Q 20/20: Point-of-sale [POS] network systems - G06Q 20/204: {comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit} - G06Q 20/341: {Active cards, i.e. cards including their own processing means, e.g. including an IC or chip} - G06Q 20/401: {Transaction verification} - G07G 1/14: Systems including one or more distant stations co-operating with a central processing unit - H04L 9/3247: {involving digital signatures} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G07G: REGISTERING THE RECEIPT OF CASH, VALUABLES, OR TOKENS - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A data processing method and device, and a POS transaction system are provided. The method includes the following. Card information pre-stored in a chip card transacting with the POS terminal is read. The card information includes information of a program set for processing transaction data of the chip card. One or more transaction programs matching with a current transaction are acquired in the program set according to the card information. The one or more transaction programs run to calculate and transmit transaction data of the current transaction. ## Claims ### Claim 1 A data processing method, applied to a POS terminal, comprising: reading card information pre-stored in a chip card transacting with the POS terminal, wherein the card information comprises information of a program set for processing transaction data of the chip card, the program set at least comprises one or more transaction programs, each of the one or more transaction programs is configured to implement one or more businesses supported by the chip card; acquiring one or more transaction programs matching with a current transaction in the program set according to the card information, which comprises: inquiring whether the one or more transaction programs have been installed according to the card information; if yes, reading the one or more transaction programs installed; and if no, sending a download request of the one or more transaction programs to a POS management server communicatively connected to the POS terminal, receiving an installation package returned by the POS management server in response to the download request, and installing the one or more transaction programs by using the installation package, which comprises: verifying a digital signature included in the installation package; decrypting the installation package to obtain an installation data plaintext after the digital signature is verified successfully; verifying a data format of the installation dta plaintext, and installing the one or more transaction programs by using the installation data plaintext verified successfully; and running the one or more transaction programs to calculate and transmit transaction data of the current transaction. ### Claim 2 (depends on 1) The method according to claim 1, further comprising: outputting an error prompt message in a case that the digital signature is verified unsuccessfully or the data format of the installation data plaintext is verified unsuccessfully. ### Claim 3 (depends on 1) The method according to claim 1, wherein decrypting the installation package comprises: opening a digital envelope of the installation package to obtain a key ciphertext and an information ciphertext; decrypting the key ciphertext comprised in the installation package with a pre-stored privacy key to obtain a session key plaintext, wherein the key ciphertext is encrypted with a public key corresponding to the pre-stored privacy key by the POS management server; and decrypting the information ciphertext comprised in the installation package with the session key plaintext to obtain the installation data plaintext. ### Claim 4 A data processing device, applied to a POS terminal, comprising: a memory having computer-executable instructions stored thereon; and a processor, which is configured to execute the instructions to: read card information pre-stored in a chip card transacting with the POS terminal, wherein the card information comprises information of a program set for processing transaction data of the chip card, the program set at least comprises one or more transaction programs, each of the one or more transaction programs is configured to implement one or more businesses supported by the chip card; acquire one or more transaction programs matching with a current transaction in the program set according to the card information; and run the one or more transaction programs to calculate and transmit transaction data of the current transaction; wherein the processor is further configured to: inquire whether the one or more transaction programs have been installed according to the card information; read the one or more transaction programs installed when it is inquired by the inquiring submodule thata the one or more transaction programs have been installed; when it is inquired by the inquiring submodule that the one or more transaction programs have not been installed, send a download request of the one or more transaction programs to a POS management server communicatively connected to the POS terminal, and receive an installation package returned by the POS management server in response to the download request; and install the one or more transaction programs by using the installation package, which comprises: verifying a digital signature include in the installation package; decrypting the installation package to obtain an installation data plaintext after the digital signature is verified successfully; and verifying a data format of the installation data plaintext, and intalling the one or more transaction programs by using the installation data plaintext verified successfully. ### Claim 5 (depends on 4) The device according to claim 4, wherein the processor is further configured execute the instructions to: output an error prompt message in a case that the digital signature is verified unsuccessfully or the data format of the installation data plaintext is verified unsuccessfully. ### Claim 6 (depends on 4) The device according to claim 4, wherein the processor is further configured execute the instructions to: open a digital envelope of the installation package to obtain a key ciphertext and an information ciphertext; decrypt the key ciphertext comprised in the installation package with a pre-stored privacy key to obtain a session key plaintext, wherein the key ciphertext is encrypted with a public key corresponding to the pre-stored privacy key by the POS management server; and decrypt the information ciphertext comprised in the installation package with the session key plaintext to obtain the installation data plaintext. ### Claim 7 (depends on 4) The device according to claim 4, wherein the processor is further configured to execute the instructions to: send an authentication request to a POS management server communicatively connected to the POS terminal, and to set the POS terminal to a transaction allowable state after a response message indicating a success authentication sent by the POS management server is received. ### Claim 8 (depends on 4) The device according to claim 4, wherein the processor is further configured to execute instructions to: receive transaction information from an interactive interface of the POS terminal; transmit the transaction information to the chip card, and to acquire a verification value of the transaction information verified by the chip card; generate the transaction data according to a format arranged by the one or more transaction programs, wherein the transaction data at least comprises: the verification value, the transaction information and an identifier of the POS terminal; transmit the transaction data to the POS management server, such that the transaction data is transmitted by the POS management server to a target transaction background server corresponding to the transaction data, and to receive an authorization response message from the target transaction background server in response to the transaction data and forwarded by the POS management server; and send the authorization response message to the chip card, such that the chip card verifies a transaction result according to the authorization response message. ### Claim 9 (depends on 8) The device according to claim 8, wherein the processor is further configured to execute instructions to: determine whether the current transaction is completed according to a response of the chip card to the authorization response message, and to transmit result data indicating whether the current transaction is completed to the POS management server, such that the POS management server sends a report to the target transaction background server when it is determined that the transaction is completed according to the result data. ### Claim 10 A data processing device, for processing card-swiping transaction data, comprising: a memory having computer-executable instructions stored thereon; and a processor, which is configured by the instructions to implement at least one of: acquire transaction data uploaded by a POS terminal, wherein the transaction data corresponds to a chip card transacting with the POS terminal, card information pre-stored in the chip card comprises information of a program set for processing the transaction data, the program set at least comprises one or more transaction programs, each of the oine or more transaction programs is configured to implement one or more businesses supported by the chip card; determine a target transaction background server corresponding to the transaction data; transmit the transaction data to the target transaction background server, such that an authorization operation is performed on the transaction data by the target transaction background server; and receive an authorization response message of the target transaction background server in response to the transaction data and forward the authorization response message of the target transaction background server in response to the transaction data to the POS terminal; wherein the processor is further configured to: receive a download request of one or more transaction programs send by the POS terminal, to determine the one or more transaction programs from a pre-stored program set according to the download request, to encrypt the one or more transaction programs to generate an installation package in response to the download request, and to send the installation package to the POS terminal, such that the POS terminal: verifies a digital signature included in the installation package, decrypts the installation package to obtain an installation data plaintext after the digital signature is verified successfully, verifies a data format of the installation data plaintext, and installs the one or more transaction programs by using the installation data plaintext verified successfully. ### Claim 11 (depends on 10) The device according to claim 10, wherein the processor is further configured to execute the instructions to: receive an authentication request sent by the POS terminal, and to establish a secure transmission path with the POS terminal according to the authentication request. ### Claim 12 (depends on 11) The device according to claim 11, wherein the processor is further configured to execute the instructions to: acquire authentication information of the POS terminal comprised in the authentication request; verify the authentication information of the POS terminal; return a feedback message indicating a success authentication to the POS terminal if the authentication information of the POS terminal is verified successfully; and calculate a pair of session keys for a security transmission with the POS terminal, for transmitting data with the POS terminal. ### Claim 13 (depends on 10) The device according to claim 10, wherein the processor is further configured to execute the instructions to: receive result data, sent by the POS terminal, indicating whether a current transaction is completed; and to send a report to the target transaction background server for a settlement when it is determined that the current transaction is completed according to the result data, such that the target transaction background server completes the settlement. ### Claim 14 (depends on 10) The device according to claim 10, wherein the processor is further configured to execute the instructions to determine the target transaction background server corresponding to the transaction data by acts of: acquiring an identifier, uploaded by the POS terminal, of the one or more transaction programs for processing the current transaction; and selecting the target transaction background server corresponding to the transaction data according to the identifier of the one or more transaction programs. ### Claim 15 A non-transitory computer-readable medium comprising a computer program including instructions stored thereon, which when the instructions of the computer program is executed by a processor of a POS terminal, the processor is configured to configures the POS terminal to perform a data processing method comprising acts of: reading card information pre-stored in a chip card transacting with the POS terminal, wherein the card information comprises information of a program set for processing transaction data of the chip card, the program set at least comprises one or more transaction programs, each of the one or more transation programs is configured to implement one or more businesses supported by the chip card; acquiring one or more transaction programs matching with a current transaction in the program set according to the card information, which comprises: inquiring whether the one or more transaction programs have been installed according to the card information; if yes, reading the one or more transaction programs installed; and if no, sending a download request of the one or more transaction programs to a POS management server communicatively connected to the POS terminal, receiving an installation package returned by the POS management server in response to the download request, and installing the one or more transaction programs by using the installation package, which comprises: verifying a digital signature included in the installation package; decrypting the installation package to obtain an installaition data plaintext after the digital signature is verified successfully; and verifying a data format of the installation data plaintext, and installing the one or more transaction programs by using the installation data plaintext verified successfully; and running the one or more transaction programs to calculate and transmit transaction data of the current transaction.