Local zone security architecture for retail environments

A two-sided fuel dispenser, comprising:

• a controller including at least one secure access module (SAM), each of the at least one SAMs operating to perform off-line validation of a customer's personal identification number (PIN) associated with a smart card;
• a first card reader that reads first data from a first smart card associated with a first customer and communicates the first data to the controller;
• a first PINpad that allows the first customer to enter a first PIN and communicates the first PIN to the controller;
• a second card reader that reads second data from a second smart card associated with a second customer and communicates the second data to the controller;
• and a second PINpad that allows the second customer to enter a second PIN and communicates the second PIN to the controller;
• wherein the controller receives the first and second PINs and provides the first and second PINs to the at least one SAM which performs an off-line validation for the first PIN based on the first data and an off-line validation for the second PIN based on the second data.

A method of validating customer transactions occurring in a retail environment, comprising:

• a) communicatively coupling a controller in each of a plurality of customer terminals to a security module comprising at least one secure access module (SAM), each of the at least one SAMs operating to perform off-line validation of a customer's personal identification number (PIN) associated with a smart card;
• b) reading data from the smart card at a first card reader;
• c) communicating the data to the controller;
• d) receiving the customer's PIN at a PINpad;
• e) communicating the PIN to the controller;
• f) communicating the PIN from the controller to the security module;
• and
• g) providing the PIN to the at least one SAM which performs an off-line validation of the PIN based on the data.

A method of validating customer transactions occurring at a two-sided fuel dispenser, comprising:

• a) reading first data from a first smart card at a first card reader;
• b) communicating the first data to a controller in the fuel dispenser, the controller comprising at least one secure access module (SAM), each of the at least one SAMs operating to perform off-line validation of a customer's personal identification number associated with a smart card;
• c) receiving a first PIN associated with the first smart card at a first PINpad;
• d) communicating the first PIN to the controller;
• e) providing the first PIN to the at least one SAM which performs an off-line validation of the first PIN based on the first data;
• f) reading second data from a second smart card at a second card reader;
• g) communicating the second data to the controller;
• h) receiving a second PIN associated with a second smart card at a second PINpad;
• i) communicating the second PIN to the controller;
• and
• j) providing the second PIN to the at least one SAM which performs an off-line validation of the second PIN based on the second data.