US 11,694,178 B2Granted

Embedded card reader security

AssigneeBlock, Inc.

InventorsMurat Cat, Murtaza Munaim, Gokhan Aydeniz, Conrad Rushing

Life of this patent

Estimating the term…

Loading patent…

Abstract

Techniques described herein are directed to embedded card reader security. In an example, personal account number data read from a payment instrument may be temporally and/or spatially separated from personal identification number data utilized to complete a payment for products. Temporal separation may include removing the personal account number data from a merchant device prior to request personal identification number data. Spatial separation may include utilization of trusted execution environments, separated embedded card reader applications, intermediary applications, and/or trust routines, for example to enable different components of a merchant device, and/or components of other devices and systems to handle personal account number data and personal identification number data.

Claims20

Dependent claims

A method, comprising:

configuring a point of sale (POS) application installed on a mobile device to utilize an embedded card reader (ECR) of the mobile device;
configuring the POS application to utilize a touchscreen display of the mobile device;
configuring the POS application to:
receive, based at least in part on an interaction between the ECR and the mobile device, a personal account number (PAN) from the ECR;
send the PAN to a payment processing service that is remote from the mobile device;
and
receive an personal identification number (PIN) from the touchscreen display;
receiving, at the POS application and based at least in part on the interaction between the ECR and the mobile device, the PAN for a transaction;
sending the PAN to the payment processing service along with a default PIN associated with the payment processing service;
removing, by the POS application and based at least in part on sending the PAN and default PIN to the payment processing service, the PAN from the mobile device before requesting the PIN;
rendering, based at least in part on the PAN being removed from the mobile device, a PIN user interface;
receiving, at the POS application and utilizing the PIN user interface, the PIN;
and
completing the transaction based at least in part on receiving the PAN and the PIN.

11 more elements

A device, comprising:

one or more processors;
and
non-transitory computer-readable media storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
configuring a point of sale (POS) application installed on the device to utilize an embedded card reader (ECR) of the device;
configuring the POS application to utilize a touchscreen display of the mobile device;
receiving, at the POS application and based at least in part on an interaction between the ECR and the device, the PAN for a transaction;
sending the PAN to a payment processing service along with a default PIN associated with the payment processing service;
removing, by the POS application and based at least in part on sending the PAN and default PIN to the payment processing service, the PAN from the mobile device before requesting the PIN;
rendering, based at least in part on the PAN being removed from the mobile device, a PIN user interface;
receiving, at the POS application and utilizing the PIN user interface, the PIN;
and
completing the transaction based at least in part on receiving the PAN and the PIN.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/183,149Filed 23 Feb 2021
Published: US 2022/0270064 A125 Aug 2022
Granted: 4 Jul 2023
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06Q 20/20
Payment architectures: point-of-sale [POS] network systems
G06Q 20/206
Point-of-sale [POS] network systems: comprising security or operator identification provisions, e.g. password entry
G06Q 20/326
Using wireless devices: payment applications installed on the mobile devices
G06Q 20/4012
Transaction verification: verifying personal identification numbers [PIN]