# US 2021/0173902 A1 · Terminal hardware configuration system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0173902 A1
- Document ID: US20210173902A1
- Status: Published application
- Kind: A1
- Application number: 17/052,334
- Filed: 2019-05-09
- Published: 2021-06-10
- Earliest claimed: 2018-05-09
- Assignees: Stripe, Inc.
- Applicants: BBPOS Limited
- Inventors: Hwai Sian Tsai; Chi Wah Lo
- Web page: https://patentgrep.com/patent/US20210173902A1

## CPC

- G06F 21/12: Protecting executable software
- G06F 21/121: {Restricting unauthorised execution of programs}
- G06F 8/61: Installation
- G06F 21/44: Program or device authentication
- G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
- G06Q 20/20: Point-of-sale [POS] network systems
- G06F 21/1062: {Editing}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

What is disclosed is a method for installing and running an application for a terminal comprising uploading an application to an application store; downloading, by a terminal, said application from said application store, wherein said terminal is connected to said application store by a network; and authorizing, by a TMS coupled to said terminal and said application store via said network, said terminal to install and run said downloaded application.

## Claims

### Claim 1

A system to install and run an application for a terminal, said system comprising:
an application store; and
a terminal management server (TMS);
wherein said TMS, application store and terminal are coupled to each other via a network;
wherein a vendor uploads an application to said application store, and said terminal downloads said application via said network; and
wherein after said downloading by said terminal, said TMS authorizes said terminal to install and run said downloaded application.

### Claim 2 (depends on 1)

The system of claim 1, wherein after said application is downloaded by said terminal, said TMS authenticates said application.

### Claim 3 (depends on 2)

The system of claim 2, wherein prior to said upload, said vendor encrypts one or more portions of said application; and
wherein said terminal obtains a decryption key from said TMS to decrypt said encrypted one or more portions after said authentication and authorization.

### Claim 4 (depends on 3)

The system of claim 3, wherein said encryption is operative to prevent exposure of said one or more portions of said application outside a trusted environment.

### Claim 5 (depends on 3)

The system of claim 3, wherein said encryption is operative to prevent the application from performing critical or sensitive operations in unauthorized platforms.

### Claim 6 (depends on 3)

The system of claim 3, wherein said encryption is operative to prevent the application from performing critical or sensitive operations in unauthorized platforms.

### Claim 7

A system to install and run an application for a terminal, said system comprising:
an application store; and
a terminal management server (TMS);
wherein said TMS, application store and terminal are coupled to each other via a network;
wherein a vendor uploads an application to said app store, and said terminal downloads said application via said network;
wherein said downloaded application is classified into one of a plurality of classes, each of said plurality of classes corresponding to an app class sandbox; and
said classification performed based on level of authorization and type of application.

### Claim 8 (depends on 7)

The system of claim 7, wherein classification is based on at least one of:
an attribute field within said application;
a signing key associated with said application; and
information from a TMS when said application is being authenticated.

### Claim 9 (depends on 7)

The system of claim 7, wherein at least one of said plurality of classes contains applications which are not related to payments.

### Claim 10 (depends on 7)

The system of claim 7, wherein a first of said plurality of classes contains applications which are unauthorized and are not related to payments, wherein a first class is associated with an app class sandbox having restrictions on a user entering one or more pieces of sensitive information.

### Claim 11 (depends on 10)

The system of claim 10, wherein one or more warning techniques are associated with said first class;
wherein said one or more warning techniques operating independently of said applications contained within said first class; and
wherein said one or more warning techniques are used to warn the user not to enter said one or more pieces of sensitive information.

### Claim 12 (depends on 7)

The system of claim 7, wherein said classification is performed after said downloading.

### Claim 13

(canceled)

### Claim 14

A method for installing and running an application for a terminal comprising:
uploading an application to an application store;
downloading, by a terminal, said application from said application store, wherein said terminal is connected to said application store by a network; and
authorizing, by a TMS coupled to said terminal and said application store via said network, said terminal to install and run said downloaded application.

### Claim 15 (depends on 14)

The method of claim 14, further comprising authenticating, by said TMS, said application after said downloading.

### Claim 16 (depends on 15)

The method of claim 15, further comprising:
encrypting, by a vendor prior to said uploading, one or more portions of said application; and
obtaining a decryption key from said TMS to decrypt said encrypted one or more portions after said authenticating and authorizing.

### Claim 17 (depends on 16)

The method of claim 16, wherein said encrypting is operative to prevent exposure of said one or more portions of said application outside a trusted environment.

### Claim at position 18

18-23. (canceled)