# US 2019/0319989 A1 · Systems and methods for point-to-point encryption compliance

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0319989 A1
- Document ID: US20190319989A1
- Status: Published application
- Kind: A1
- Application number: 15/982,434
- Filed: 2018-05-17
- Published: 2019-10-17
- Earliest claimed: 2018-04-13
- Assignees: VeriFone, Inc.
- Applicants: VeriFone, Inc.
- Inventors: Scott Raymond Yale; Joachim Vance
- Web page: https://patentgrep.com/patent/US20190319989A1

## CPC

- G06Q 20/20: Point-of-sale [POS] network systems
- H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)}
- G06F 21/602: {Providing cryptographic facilities or services}
- G06Q 20/204: {comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit}
- G06Q 20/34: using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q 20/3567: {Software being in the reader}
- G06Q 20/3821: {Electronic credentials}
- G06Q 20/385: {using an alias or single-use codes}
- G07F 7/088: {the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself}
- G07F 7/1016: {Devices or methods for securing the PIN and other transaction-data, e.g. by encryption (arrangements for secret communication, see H04L9/00)}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})

## Abstract

Systems and methods for point-to-point encryption compliance are disclosed. In one embodiment, in a point of interaction device comprising at least one computer processor, a method for point-to-point encryption compliance may include: (1) receiving card data from a card reading device; (2) determining an error with the card data; (3) generating substitute data by replacing at least a portion of the card data with substitute data; and (4) communicating the substitute data to a payment server. The card data may be received from a magnetic stripe reader, from an EMV card reader, or from a contactless card reader. The error may include comprises the card data not being compliant with ISO-7813.

## Claims

### Claim 1

A method for point-to-point encryption compliance, comprising:
in a point of interaction device comprising at least one computer processor:
receiving card data from a card reading device;
determining an error with the card data;
generating substitute data by replacing at least a portion of the card data with substitute data; and
communicating the substitute data to a payment server.

### Claim 2 (depends on 1)

The method of claim 1, wherein the card data is received from a magnetic stripe reader.

### Claim 3 (depends on 1)

The method of claim 1, wherein the card data is received from an EMV card reader.

### Claim 4 (depends on 1)

The method of claim 1, wherein the card data is received from a contactless card reader.

### Claim 5 (depends on 1)

The method of claim 1, wherein the error comprises the card data not being compliant with ISO-7813.

### Claim 6 (depends on 1)

The method of claim 1, wherein the substitute data comprises static data.

### Claim 7 (depends on 1)

The method of claim 1, wherein the substitute data comprises random data.

### Claim 8 (depends on 1)

The method of claim 1, wherein the substitute data comprises an indicator of the error.

### Claim 9 (depends on 1)

The method of claim 1, further comprising:
retrieving a security packet for the transaction; and
communicating the security packet and the substitute data to the authorization platform.

### Claim 10 (depends on 1)

The method of claim 1, wherein the point of interaction device is a point of sale device.

### Claim 11

A point of interaction device, comprising:
a card reading device; and
a cryptographic processor;
wherein:
the cryptographic processor receives card data from the card reading device;
the cryptographic processor determines an error with the card data; and
the cryptographic processor generates substitute data by replacing at least a portion of the card data with the substitute data.

### Claim 12 (depends on 11)

The point of interaction device of claim 11, wherein the point of interaction device communicates the substitute data to a payment server.

### Claim 13 (depends on 11)

The point of interaction device of claim 11, wherein the card data is received from a magnetic stripe reader.

### Claim 14 (depends on 11)

The point of interaction device of claim 11, wherein the card data is received from an EMV card reader.

### Claim 15 (depends on 11)

The point of interaction device of claim 11, wherein the card data is received from a contactless card reader.

### Claim 16 (depends on 11)

The point of interaction device of claim 11, wherein the error comprises the card data not being compliant with ISO-7813.

### Claim 17 (depends on 11)

The point of interaction device of claim 11, wherein the substitute data comprises static data.

### Claim 18 (depends on 11)

The point of interaction device of claim 11, wherein the substitute data comprises random data.

### Claim 19 (depends on 11)

The point of interaction device of claim 11, wherein the substitute data comprises an indicator of the error.

### Claim 20 (depends on 11)

The point of interaction device of claim 11, wherein the point of interaction device retrieves a security packet for the transaction and communicates the security packet and the substitute data to the authorization platform.
