# US 7,607,576 B2 · Local zone security architecture for retail environments

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 7,607,576 B2
- Document ID: US7607576B2
- Status: Granted
- Kind: B2
- Application number: 11/064,526
- Filed: 2005-02-23
- Published: 2005-09-29
- Granted: 2009-10-27
- Earliest claimed: 2004-02-27
- Assignees: Gilbarco Inc.
- Inventors: Philip A. Robertson; Chris Whitley; Simon Huang Seng Siew; Timothy M. Weston; Victor C. Turner; Ken Ringeman; Greg K. Hampson; Tyrone Aiken; Giovanni Carapelli; Giorgio Carozzini
- Web page: https://patentgrep.com/patent/US7607576B2

## CPC

- G07F 7/1016: {Devices or methods for securing the PIN and other transaction-data, e.g. by encryption (arrangements for secret communication, see H04L9/00)}
- G06Q 20/3674: {involving authentication}
- G07F 7/10: together with a coded signal {, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data}
- G07F 7/1008: {Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system}
- G07F 7/1025: {Identification of user by a PIN code}
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR

## Abstract

A security architecture for a retail environment providing both on-line and off-line personal identification number (PIN) validation for a smart card transaction using a reduced number of secure access modules (SAMs). In one embodiment, the retail environment includes and security module and numerous fuel dispensers each including a controller and one or more PINpads and card readers. The security module includes one or more SAMs for off-line PIN validation. Each of the PINpads communicates with the security module, and the security module performs either on-line or off-line PIN validation for every PINpad in the retail environment. Accordingly, the security module uses one set of SAMs for off-line validation for every PINpad in the retail environment.

## Claims

### Claim 1

A validation system for customer transactions occurring in a retail environment, comprising:
a) a security module comprising at least one secure access module (SAM), each of the at least one SAMs operating to perform off-line validation of a customer's personal identification number (PIN) associated with a smart card; and
b) a plurality of customer terminals located apart from the security module, each of the plurality of customer terminals, comprising:
i) a controller communicatively coupled to the security module;
ii) a first card reader that reads data from the smart card and communicates the data to the controller; and
iii) a first PINpad that allows the customer to enter a PIN and communicates the PIN to the controller; wherein the controller communicates the PIN to the security module and the security module provides the PIN to the at least one SAM which performs an off-line validation of the PIN based on the data.

### Claim 2 (depends on 1)

The system of claim 1 wherein each of the plurality of customer terminals is a two-sided fuel dispenser and further comprises:
a) a second card reader that reads second data from a second smart card and communicates the second data to the controller; and
b) a second PINpad that allows a second user to enter a second PIN and communicates the second PIN to the controller;
wherein the controller further communicates the second PIN to the security module and the security module provides the second PIN to the at least one SAM which performs an off-line validation of the second PIN based on the second data.

### Claim 3 (depends on 1)

The system of claim 1 wherein the first PINpad encrypts the PIN using a first encryption key prior to transmitting the PIN to the controller.

### Claim 4 (depends on 3)

The system of claim 3 wherein the first encryption key is derived based on an exponential key exchange between the security module and the first PINpad.

### Claim 5 (depends on 3)

The system of claim 3 wherein the security module receives the PIN encrypted using the first encryption key from the controller and decrypts the PIN using the first encryption key.

### Claim 6 (depends on 3)

The system of claim 3 wherein the second PINpad encrypts the second PIN using a second encryption key prior to transmitting the second PIN to the controller.

### Claim 7 (depends on 6)

The system of claim 6 wherein the second encryption key is derived based on an exponential key exchange between the security module and the second PINpad.

### Claim 8 (depends on 6)

The system of claim 6 wherein the security module receives the second PIN encrypted using the second encryption key from the controller and decrypts the second PIN using the second encryption key.

### Claim 9 (depends on 6)

The system of claim 6 wherein communications between the first card reader and the controller are encrypted based on a third encryption key.

### Claim 10 (depends on 9)

The system of claim 9 wherein the third encryption key is derived based on an exponential key exchange between the controller and the first card reader.

### Claim 11 (depends on 9)

The system of claim 9 wherein communications between the second card reader and the controller are encrypted based on a fourth encryption key.

### Claim 12 (depends on 11)

The system of claim 11 wherein the fourth encryption key is derived based on an exponential key exchange between the controller and the second card reader.

### Claim 13 (depends on 11)

The system of claim 11 wherein communications between the first PINpad and the security module, the second PINpad and the security module, the first card reader and the controller, and the second card reader and the controller are encrypted based on the first, second, third, and fourth encryption keys, respectively, and one or more encryption algorithms selected from the group consisting of Rivest-Shamir-Adelman algorithm (RSA), the Diffie-Helman algorithm (DII), and the Data Encryption Standard (DES).

### Claim 14 (depends on 1)

The system of claim 1 wherein the security module further comprises at least one bank key, and when on-line validation of the PIN is desired, the security module further operates to encrypt the PIN based on a select one of the at least one bank keys and communicate the encrypted PIN to a corresponding host computer for on-line validation.

### Claim 15 (depends on 1)

The system of claim 1 further comprising a point-of-sale unit that establishes a communication path between the controller and the security module.

### Claim 16 (depends on 1)

The system of claim 1 wherein each of the plurality of customer terminals further comprises a display.

### Claim 17 (depends on 16)

The system of claim 16 wherein the controller further operates to logically control the display.

### Claim 18 (depends on 17)

The system of claim 17 wherein the controller further operates to logically control the display such that only pre-defined messages are displayed on the display when the first PINpad operates in a non-secure mode.

### Claim 19 (depends on 1)

The system of claim 1 wherein each of the plurality of customer terminals further comprises at least one component selected from the group consisting of a printer, an interrogator, a bar code reader, a cash acceptor, a proximity detector, and a coin acceptor and dispenser, wherein the controller further operates to control the at least one component.

### Claim 20 (depends on 1)

The system of claim 1 wherein the first PINpad, the first card reader, and the controller are modular components.

### Claim 21 (depends on 1)

The system of claim 1 wherein the first card reader further operates to read data from a magnetic stripe card.

### Claim 22

A two-sided fuel dispenser, comprising:
a controller including at least one secure access module (SAM), each of the at least one SAMs operating to perform off-line validation of a customer's personal identification number (PIN) associated with a smart card;
a first card reader that reads first data from a first smart card associated with a first customer and communicates the first data to the controller;
a first PINpad that allows the first customer to enter a first PIN and communicates the first PIN to the controller;
a second card reader that reads second data from a second smart card associated with a second customer and communicates the second data to the controller;
and a second PINpad that allows the second customer to enter a second PIN and communicates the second PIN to the controller;
wherein the controller receives the first and second PINs and provides the first and second PINs to the at least one SAM which performs an off-line validation for the first PIN based on the first data and an off-line validation for the second PIN based on the second data.

### Claim 23 (depends on 22)

The dispenser of claim 22 wherein the first PINpad encrypts the first PIN using a first encryption key prior to transmitting the first PIN to the controller.

### Claim 24 (depends on 23)

The dispenser of claim 23 wherein the first encryption key is derived based on an exponential key exchange between the controller and the first PINpad.

### Claim 25 (depends on 23)

The system of claim 23 wherein the controller receives the first PIN encrypted using the first encryption key from the first PINpad and decrypts the first PIN using the first encryption key.

### Claim 26 (depends on 23)

The dispenser of claim 23 wherein the second PINpad encrypts the second PIN using a second encryption key prior to transmitting the second PIN to the controller.

### Claim 27 (depends on 26)

The dispenser of claim 26 wherein the second encryption key is derived based on an exponential key exchange between the controller and the second PINpad.

### Claim 28 (depends on 26)

The system of claim 26 wherein the controller receives the second PIN encrypted using the second encryption key from the second PINpad and decrypts the second PIN using the second encryption key.

### Claim 29 (depends on 26)

The dispenser of claim 26 wherein communications between the first card reader and the controller are encrypted based on a third encryption key.

### Claim 30 (depends on 29)

The dispenser of claim 29 wherein the third encryption key is derived based on an exponential key exchange between the controller and the first card reader.

### Claim 31 (depends on 29)

The dispenser of claim 29 wherein communications between the second card reader and the controller are encrypted based on a fourth encryption key.

### Claim 32 (depends on 31)

The dispenser of claim 31 wherein the fourth encryption key is derived based on an exponential key exchange between the controller and the second card reader.

### Claim 33 (depends on 31)

The dispenser of claim 31 wherein communications between the first PINpad and the controller, the second PINpad and the controller, the first card reader and the controller, and the second card reader and the controller are encrypted based on the first, second, third, and fourth encryption keys, respectively, and one or more encryption algorithms selected from the group consisting of Rivest-Shamir-Adelman algorithm (RSA), the Diffie-Hellman algorithm (DH), and the Data Encryption Standard (DES).

### Claim 34 (depends on 22)

The dispenser of claim 22 wherein the controller further comprises at least one bank key, and when on-line validation of the PIN is desired, the controller further operates to encrypt the PIN based on a select one of the at least one bank keys and communicate the encrypted PIN to a corresponding host computer for on-line validation.

### Claim 35 (depends on 34)

The dispenser of claim 34 further comprising a point-of-sale unit communicatively coupled to the controller in each of the plurality of fuel dispensers and that establishes a communication path to the host computer.

### Claim 36 (depends on 22)

The dispenser of claim 22 wherein each of the plurality of fuel dispensers further comprises: a first display; a second display; and a second controller communicatively coupled to the controller and the first and second displays and providing information to each of the first and second displays to be displayed.

### Claim 37 (depends on 36)

The dispenser of claim 36 wherein the controller communicates with the second controller to logically control the first and second displays.

### Claim 38 (depends on 37)

The dispenser of claim 37 wherein the controller communicates with the second controller to logically control the first and second displays such that only pre-defined messages can be displayed on the first and second displays when a corresponding one of the first and second PlNpads operates in a non-secure mode.

### Claim 39 (depends on 36)

The dispenser of claim 36 wherein each of the plurality of fuel dispensers further comprises at least one pair of components selected from the group consisting of a first and second printer, a first and second interrogator, a first and second bar code reader, a first and second cash acceptor, a first and second proximity detector, and a first and second coin acceptor and dispenser, wherein the second controller further operates to control the at least one pair of components.

### Claim 40 (depends on 22)

The dispenser of claim 22 wherein the first and second PlNpads, the first and second card readers, and the controller are modular components.

### Claim 41 (depends on 22)

The dispenser of claim 22 wherein the first and second card readers further operates to read data from magnetic stripe cards.

### Claim 42

A method of validating customer transactions occurring in a retail environment, comprising:
a) communicatively coupling a controller in each of a plurality of customer terminals to a security module comprising at least one secure access module (SAM), each of the at least one SAMs operating to perform off-line validation of a customer's personal identification number (PIN) associated with a smart card;
b) reading data from the smart card at a first card reader;
c) communicating the data to the controller;
d) receiving the customer's PIN at a PINpad;
e) communicating the PIN to the controller;
f) communicating the PIN from the controller to the security module; and
g) providing the PIN to the at least one SAM which performs an off-line validation of the PIN based on the data.

### Claim 43 (depends on 42)

The method of claim 42 further comprising:
reading second data from a second smart card associated with a second customer at a second card reader;
communicating the second data to the controller;
receiving a second PIN from the second customer at a second PINpad;
communicating the second PIN to the controller;
communicating the second PIN from the controller to the security module; and
providing the second PIN to the at least one SAM which performs an off-line validation of the second PIN based on the second data.

### Claim 44 (depends on 43)

The method of claim 43 wherein the step of communicating the PIN to the controller comprising encrypting the PIN using a first encryption key prior to transmitting the PIN to the controller.

### Claim 45 (depends on 44)

The method of claim 44 further comprising generating the first encryption key based on an exponential key exchange between the security module and the first PINpad.

### Claim 46 (depends on 44)

The method of claim 44 wherein the step of providing the PIN to the at least one SAM comprises decrypting the PIN using the first encryption key.

### Claim 47 (depends on 44)

The method of claim 44 wherein the step of communicating the second PIN to the controller comprises encrypting the second PIN using a second encryption key prior to transmitting the second PIN to the controller.

### Claim 48 (depends on 47)

The method of claim 47 further comprising generating the second encryption key is derived based on an exponential key exchange between the security module and the second PINpad.

### Claim 49 (depends on 47)

The method of claim 47 wherein the step of providing the second PIN to the at least one SAM comprises decrypting the second PIN using the second encryption key.

### Claim 50 (depends on 47)

The method of claim 47 wherein the step of communicating the data to the controller comprises encrypting the data using a third encryption key prior to transmitting the data to the controller.

### Claim 51 (depends on 50)

The method of claim 50 further comprising generating the third encryption key based on an exponential key exchange between the controller and the first card reader.

### Claim 52 (depends on 43)

The method of claim 43 wherein the step of communicating the second data to the controller comprises encrypting the second data using a fourth encryption key.

### Claim 53 (depends on 52)

The method of claim 52 further comprising generating the fourth encryption key based on an exponential key exchange between the controller and the second card reader.

### Claim 54 (depends on 52)

The method of claim 52 wherein the steps of encrypting the PIN, encrypting the data, encrypting the second PIN, and encrypting the second data comprises encrypting the PIN, the data, the second PIN, and the second data based on the first, second, third, and fourth encryption keys, respectively, based one or more encryption algorithms selected from the group consisting of Rivest-Shamir-Adelman algorithm (RSA), the Diffie-Hellman algorithm (DH), and the Data Encryption Standard (DES).

### Claim 55 (depends on 42)

The method of claim 42 wherein when on-line validation of the PIN is desired, the method further comprises: encrypting the PIN in the security module based on a select one of at least one bank keys; and communicating the encrypted PIN to a corresponding host computer for on-line validation based on the data.

### Claim 56 (depends on 42)

The method of claim 42 further comprising establishing a communication path between the controller and the security module through a point-of-sale.

### Claim 57 (depends on 42)

The method of claim 42 further comprising control a display in the customer terminal such that only pre-defined messages are displayed on the display when the first PINpad operates in a non-secure mode.

### Claim 58

A method of validating customer transactions occurring at a two-sided fuel dispenser, comprising:
a) reading first data from a first smart card at a first card reader;
b) communicating the first data to a controller in the fuel dispenser, the controller comprising at least one secure access module (SAM), each of the at least one SAMs operating to perform off-line validation of a customer's personal identification number associated with a smart card;
c) receiving a first PIN associated with the first smart card at a first PINpad;
d) communicating the first PIN to the controller;
e) providing the first PIN to the at least one SAM which performs an off-line validation of the first PIN based on the first data;
f) reading second data from a second smart card at a second card reader;
g) communicating the second data to the controller;
h) receiving a second PIN associated with a second smart card at a second PINpad;
i) communicating the second PIN to the controller; and
j) providing the second PIN to the at least one SAM which performs an off-line validation of the second PIN based on the second data.

### Claim 59 (depends on 58)

The method of claim 58 wherein the step of communicating the first PIN to the controller comprising encrypting the first PIN using a first encryption key prior to transmitting the first PIN to the controller.

### Claim 60 (depends on 59)

The method of claim 59 further comprising generating the first encryption key based on an exponential key exchange between the controller and the first PINpad.

### Claim 61 (depends on 59)

The method of claim 59 wherein the step of providing the first PIN to the at least one SAM comprises decrypting the first PIN using the first encryption key.

### Claim 62 (depends on 59)

The method of claim 59 wherein the step of communicating the second PIN to the controller comprises encrypting the second PIN using a second encryption key prior to transmitting the second PIN to the controller.

### Claim 63 (depends on 62)

The method of claim 62 further comprising generating the second encryption key is derived based on an exponential key exchange between the controller and the second PINpad.

### Claim 64 (depends on 62)

The method of claim 62 wherein the step of providing the second PIN to the at least one SAM comprises decrypting the second PIN using the second encryption key.

### Claim 65 (depends on 62)

The method of claim 62 wherein the step of communicating the first data to the controller comprises encrypting the first data using a third encryption key prior to transmitting the first data to the controller.

### Claim 66 (depends on 65)

The method of claim 65 further comprising generating the third encryption key based on an exponential key exchange between the controller and the first card reader.

### Claim 67 (depends on 65)

The method of claim 65 wherein the step of communicating the second data to the controller comprises encrypting the second data using a fourth encryption key.

### Claim 68 (depends on 67)

The method of claim 67 further comprising generating the fourth encryption key based on an exponential key exchange between the controller and the second card reader.

### Claim 69 (depends on 58)

The method of claim 58 wherein the steps of encrypting the first PIN, encrypting the first data, encrypting the second PIN, and encrypting the second data comprises encrypting the first PIN, the first data, the second PIN, and the second data based on the first, second, third, and fourth encryption keys, respectively, based one or more encryption algorithms selected from the group consisting of Rivest-Shamir-Adelman algorithm (RSA), the Diffie-Heilman algorithm (DH), and the Data Encryption Standard (DES).

### Claim 70 (depends on 58)

The method of claim 58 wherein when on-line validation of the PIN is desired, the method further comprises:
encrypting the first and second PINs in the controller based on select ones of at least one bank key; and
communicating each of the encrypted first and second PINs to a corresponding host computer for on-line validation.

### Claim 71 (depends on 70)

The method of claim 70 further comprising establishing a communication path to the host computer via a point-of-sale unit communicatively coupled to the controller in each of the plurality of fuel dispensers.

### Claim 72 (depends on 58)

The method of claim 58 further comprising controlling a first display and a second display such that only pre-defined messages are displayed on the first and second displays when a corresponding one of the first and second PlNpads operates in a non-secure mode.