System and methods to prevent unauthorized usage of card readers
AssigneeStripe, Inc.
InventorsHwai Sian Tsai, Chi Wah Lo
Life of this patent
Estimating the term…
Abstract
A contactless card reader comprises a contactless card reader front-end coupled to a processor. A communications module is coupled to the processor and a set of sensors is coupled to the processor. The set of sensors determines parameters related to the location, orientation and motion of the card reader. The processor receives the parameters from the set of sensors and utilizes the parameters and scenario configuration data to evaluate a rule. The result of the evaluation of the rule results in a limitation on the operation of the card reader. The communications module is configured to intermittently receive the scenario configuration data from external sources.
Claims20
A method of managing security of a card reader, comprising:
- detecting, by a receiver of a card reader, data that is generated by and transmitted from an external device, the card reader successfully authenticated before receiving the data;
- analyzing, by a processor of the card reader, the data to determine at least one first parameter related to one or more of a location and a motion of the card reader;
- evaluating, by the processor of the card reader, one or more rules based at least in part on the data to detect when the data fails to satisfy at least one of the one or more of the rules;
- triggering, by the processor, an event of the card reader when the data is detected to fail to satisfy at least one rule;
- and
- initiating, by the processor, an action associated with the triggered event comprising disabling, by the processor, operation of the card reader.
A card reader comprising:
- a receiver configured to detect data that is generated by and transmitted from an external device;
- and
- a processor, coupled with the receiver, configured to:
- analyze the data to determine at least one first parameter related to one or more of a location and a motion of the card reader,
- evaluate one or more rules based at least in part on the data to detect when the data fails to satisfy at least one of the one or more of the rules,
- trigger an event of the card reader when the data is detected to fail to satisfy at least one rule, and
- initiate an action associated with the triggered event comprising disabling, by the processor, operation of the card reader.
A non-transitory machine-readable storage medium having instructions stored thereon which when executed by a processor of a card reader, cause the card reader to perform operations for managing security of the card reader, the operations comprising:
- detecting, by a receiver of the card reader, data that is generated by and transmitted from an external device, the card reader successfully authenticated before receiving the data;
- analyzing, by the processor of the card reader, the data to determine at least one first parameter related to one or more of a location and a motion of the card reader;
- evaluating, by the processor of the card reader, one or more rules based at least in part on the data to detect when the data fails to satisfy at least one of the one or more of the rules;
- triggering, by the processor, an event of the card reader when the data is detected to fail to satisfy at least one rule;
- and
- initiating, by the processor, an action associated with the triggered event comprising disabling, by the processor, operation of the card reader.
Dependencies are inferred from the claim text.