# US 12,373,809 B2 · Systems and methods for reader device registration, use and management

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,373,809 B2
- Document ID: US12373809B2
- Status: Granted
- Kind: B2
- Application number: 18/914,532
- Filed: 2024-10-14
- Published: 2025-01-30
- Granted: 2025-07-29
- Earliest claimed: 2016-09-08
- Assignees: Stripe, Inc.
- Applicants: Stripe, Inc.
- Inventors: Jonathan Wall; Ross Favero; Eric Nelson Glass
- Web page: https://patentgrep.com/patent/US12373809B2

## CPC

- G06Q 20/20: Point-of-sale [POS] network systems
- G06Q 20/3576: {Multiple memory zones on card}
- G06Q 20/3829: {involving key management}
- G06Q 20/4012: {Verifying personal identification numbers [PIN]}
- G06Q 20/105: {involving programming of a portable memory device, e.g. IC cards, "electronic purses"}
- G06Q 20/34: using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

Embodiments of the invention include a method of performing a payment transaction comprising receiving transaction data by a PIN pad terminal from a point-of-sale terminal, and receiving tender from a customer, by the PIN pad terminal. Tender data and the transaction data are sent to a service gateway, by the PIN pad terminal. The service gateway collects metadata from the tender data and the transaction data. The tender data is sent by the PIN pad terminal to the point-of-sale terminal, which sends the tender data and the transaction data to a merchant gateway for approval or denial of the tender data. The tender data sent to the POS may be encrypted. The service gateway may provide customer and merchant analytics based on the metadata, as well as perform security/fraud checks, BIN management, PIN pad management. Systems are also disclosed.

## Claims

### Claim 1

A method of a PIN pad device performing a transaction with a payment card comprising an integrated circuit, the method comprising:
interacting, by the PIN pad device, with an integrated circuit on the payment card, wherein the interacting comprises reading the integrated circuit with a reader of the PIN pad device;
determining, by a processor of the PIN pad device, a card brand, a card issuer, or a combination thereof of the payment card;
retrieving, by the processor of the PIN pad device from a memory of the PIN pad device, a map of the integrated circuit based, at least in part, on the determined card brand, the card issuer, or the combination thereof, the map comprising one of a plurality of different maps each associated with a different card brand, card issuer, or combination of card brand and card issuer, and the map comprises locations of records that exist on integrated circuits associated with the card brand, card issuer, or combination of card brand and card issuer;
identifying, by the processor of the PIN pad device, one or more locations of records on the integrated circuit containing a card number, card information, or a combination thereof on the integrated circuit, from the map;
reading, with the reader of the PIN pad device, the one or more identified locations to acquire the card number, the card information, or the combination thereof; and
using the read card number, card information, or combination thereof to complete processing of the transaction.

### Claim 2 (depends on 1)

The method of claim 1, wherein the card information comprises one or more of:
a cardholder name, a card expiration date, a customer's PIN verification Key, a PIN verification value, a card verification value, a card verification code, and signed data.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
storing information related to two or more parties comprising: processing requirements of a gateway, a card brand, a card issuer, a merchant, a store, and the payment card;
assigning a relative priority to the two or more parties for which the information is stored; and
determining whether to perform card validation to validate the payment card based, at least in part, on stored validation information from the two or more parties, based on the priority assigned to each of the two or more parties.

### Claim 4 (depends on 3)

The method of claim 3, wherein, when it is determined not to perform card validation, the method further comprises:
issuing a command to the integrated circuit to generate an authorization cryptogram;
receiving the authorization cryptogram;
determining whether a full online transaction is to be performed by the PIN pad device; and
when the full online transaction is determined not to be performed, issuing a deferred authorization to the integrated circuit, indicating that the transaction is completed.

### Claim 5 (depends on 3)

The method of claim 3, wherein, when it is determined that card validation is to be performed, the method further comprises:
inferring public key parameters for the payment card based, at least in part, on the card information;
retrieving the inferred public key parameters; and
attempting to validate signed data using the retrieved public key parameters.

### Claim 6 (depends on 5)

The method of claim 5, wherein, when the attempt to validate the signed data is successful, the method further comprises:
issuing a command to the integrated circuit to generate an authorization cryptogram;
receiving the authorization cryptogram;
determining whether a full online transaction is to be performed by the PIN pad device; and
when the full online transaction is not to be performed by the PIN pad device, issuing a deferred authorization to the integrated circuit, indicating that the transaction is completed.

### Claim 7 (depends on 5)

The method of claim 5, wherein, when the attempt to validate the signed data is not successful, the method further comprises:
attempting to validate the signed data with all available secure key parameters; and
when the attempt to validate the signed data is successful, the method further comprises:
issuing a command to the integrated circuit to generate an authorization cryptogram;
receiving the authorization cryptogram;
determining whether a full online transaction is to be performed by the PIN pad device; and
when the full online transaction is not to be performed by the PIN pad device, issuing a deferred authorization to the integrated circuit, indicating that the transaction is completed.

### Claim 8 (depends on 3)

The method of claim 3, further comprising:
determining that card validation is not to be performed;
issuing a command to the integrated circuit to generate an authorization cryptogram;
receiving the authorization cryptogram;
determining that a full online transaction processing is to be performed by the PIN pad device based, at least in part, on transaction related information the stored information related to the two or more parties, based on the priority assigned to each of the two or more parties;
sending a received transaction total to a payment gateway, via a network, for approvals; and
receiving an issuer response including an approval or denial, a response cryptogram of an issuing bank, and issuer scripts; and
loading the issuer scripts on the integrated circuit to complete the transaction.

### Claim 9

A device for performing a transaction with a payment card comprising an integrated circuit, the device comprising:
a storage; and
a processor coupled with the storage to:
interact with an integrated circuit on the payment card, wherein the interacting comprises reading the integrated circuit with a reader of the device;
determine a card brand, a card issuer, or a combination thereof of the payment card;
retrieve, from the storage, a map of the integrated circuit based, at least in part, on the determined card brand, the card issuer, or the combination thereof, the map comprising one of a plurality of different maps each associated with a different card brand, card issuer, or combination of card brand and card issuer, and the map comprises locations of records that exist on integrated circuits associated with the card brand, card issuer, or combination of card brand and card issuer;
identify one or more locations of records on the integrated circuit containing a card number, card information, or a combination thereof on the integrated circuit, from the map;
read, using the reader, the one or more identified locations to acquire the card number, the card information, or the combination thereof; and
using the read card number, card information, or combination thereof to complete processing of the transaction.

### Claim 10 (depends on 9)

The device of claim 9, wherein the card information comprises one or more of:
a cardholder name, a card expiration date, a customer's PIN verification Key, a PIN verification value, a card verification value, a card verification code, and signed data.

### Claim 11 (depends on 9)

The device of claim 9, further comprising the processor configured to:
store information related to two or more parties comprising: processing requirements of a gateway, a card brand, a card issuer, a merchant, a store, and the payment card;
assign a relative priority to the two or more parties for which the information is stored; and
determine whether to perform card validation to validate the payment card based, at least in part, on stored validation information from the two or more parties, based on the priority assigned to each of the two or more parties.

### Claim 12 (depends on 11)

The device of claim 11, wherein, when it is determined not to perform card validation, the processor is further configured to:
issue a command to the integrated circuit to generate an authorization cryptogram;
receive the authorization cryptogram;
determine whether a full online transaction is to be performed; and
when the full online transaction is determined not to be performed, issuing a deferred authorization to the integrated circuit, indicating that the transaction is completed.

### Claim 13 (depends on 11)

The device of claim 11, wherein, when it is determined that card validation is to be performed, the processor is further configured to:
infer public key parameters for the payment card based, at least in part, on the card information;
retrieve the inferred public key parameters; and
attempt to validate signed data using the retrieved public key parameters.

### Claim 14 (depends on 13)

The device of claim 13, wherein, when the attempt to validate the signed data is successful, the processor is further configured to:
issue a command to the integrated circuit to generate an authorization cryptogram;
receive the authorization cryptogram;
determine whether a full online transaction is to be performed; and
when the full online transaction is not to be performed, issue a deferred authorization to the integrated circuit, indicating that the transaction is completed.

### Claim 15 (depends on 11)

The device of claim 11, wherein the processor is further configured to:
determine that card validation is not to be performed;
issue a command to the integrated circuit to generate an authorization cryptogram;
receive the authorization cryptogram;
determine that a full online transaction processing is to be performed based, at least in part, on transaction related information the stored information related to the two or more parties, based on the priority assigned to each of the two or more parties;
send a received transaction total to a payment gateway, via a network, for approvals; and
receive an issuer response including an approval or denial, a response cryptogram of an issuing bank, and issuer scripts; and
load the issuer scripts on the integrated circuit to complete the transaction.

### Claim 16

A non-transitory computer-readable medium comprising code that, when executed by a processor of a PIN pad device, causes the PIN pad device to perform operations, comprising:
interacting, by the PIN pad device, with an integrated circuit on the payment card, wherein the interacting comprises reading the integrated circuit with a reader of the PIN pad device;
determining, by a processor of the PIN pad device, a card brand, a card issuer, or a combination thereof of the payment card;
retrieving, by the processor of the PIN pad device from a memory of the PIN pad device, a map of the integrated circuit based, at least in part, on the determined card brand, the card issuer, or the combination thereof, the map comprising one of a plurality of different maps each associated with a different card brand, card issuer, or combination of card brand and card issuer, and the map comprises locations of records that exist on integrated circuits associated with the card brand, card issuer, or combination of card brand and card issuer;
identifying, by the processor of the PIN pad device, one or more locations of records on the integrated circuit containing a card number, card information, or a combination thereof on the integrated circuit, from the map;
reading, with the reader of the PIN pad device, the one or more identified locations to acquire the card number, the card information, or the combination thereof; and
using the read card number, card information, or combination thereof to complete processing of the transaction.