Logical validation of devices against fraud and tampering
AssigneeBlock, Inc.
InventorsJanek Klawe, Richard Neal Harris
Life of this patent
Estimating the term…
Abstract
Disclosed herein is a method and system to determine whether a payment terminal has been tampered with based on a comparison of attestation data received from the payment terminal, for example in an offline mode when an otherwise secure remote server cannot be reached. If the determination yields that the request has been approved, the terminal generates an attestation ticket having one or more validity conditions, wherein the validity conditions include expiration time that indicates the time after which the attestation ticket becomes invalid. The attestation ticket can be used as long as it is valid or until another trigger causes the ticket to be invalidated or regenerated.
Claims20
A system for evaluating security of a target device capable of performing secure operations, the system comprising:
- the target device configured to generate security data in response to one or more instructions;
- a remote scanning device configured to:
- generate the one or more instructions for evaluating the security of the target device;
- evaluate the security data while the target device has an active connection to the remote scanning device;
- and
- in response to evaluating the security data, determine to attest the target device, wherein attestation allows the target device to perform the secure operations;
- and
- a local scanning device or an application communicatively associated with the target device, the local scanning device or the application configured to:
- receive at least a subset of the one or more instructions from the remote scanning device;
- evaluate the security data while the target device is actively connected to the local scanning device and while the target device lacks the active connection with the remote scanning device;
- and
- in response to evaluating the security data, determine to attest the target device, wherein the attestation allows the target device to perform the secure operations.
A method for evaluating security of a target device capable of performing secure operations, the method comprising:
- generating, by a remote scanning device, one or more instructions for evaluating the security of the target device, wherein the one or more instructions cause the target device to generate security data in response to the one or more instructions;
- evaluating, by the remote scanning device, the security data while the target device has an active connection to the remote scanning device;
- in response to evaluating the security data, determine, by the remote scanning device, to attest the target device, wherein attestation allows the target device to perform the secure operations;
- receiving, by a local scanning device or an application communicatively associated with the target device, at least a subset of the one or more instructions from the remote scanning device;
- evaluating, by the local scanning device or the application, the security data while the target device is actively connected to the local scanning device;
- and
- in response to evaluating the security data, determining, by the local scanning device or the application, to attest the target device, wherein the attestation allows the target device to perform the secure operations,
- wherein the target device is a point-of-sale device configured to accept one or more Europay Mastercard Visa (EMV) payments through a payment application, the local scanning device is a payment reader, and the remote scanning device is a payment server hosting the payment application and storing data pertaining to the one or more EMV payments.
One or more non-transitory computer-readable media storing computer-readable instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
- generating, by a remote scanning device, one or more instructions for evaluating security of a target device, wherein the one or more instructions cause the target device to generate security data in response to the one or more instructions;
- evaluating, by the remote scanning device, the security data while the target device has an active connection to the remote scanning device;
- in response to evaluating the security data, determine, by the remote scanning device, to attest the target device, wherein attestation allows the target device to perform secure operations;
- receiving, by a local scanning device or an application communicatively associated with the target device, at least a subset of the one or more instructions from the remote scanning device;
- evaluating, by the local scanning device or the application, the security data while the target device is actively connected to the local scanning device;
- and
- in response to evaluating the security data, determining, by the local scanning device or the application, to attest the security of the target device for processing payment transactions in an offline mode, wherein the offline mode indicates a lack of direct or indirect connection between the target device and the remote scanning device, and wherein the attestation allows the target device to perform the secure operations.
Dependencies are inferred from the claim text.