# US 8,543,461 B2 · Systems and methods for removing point of sale processing from PCI scope > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,543,461 B2 - Document ID: US8543461B2 - Status: Granted - Kind: B2 - Application number: 13/485,490 - Filed: 2012-05-31 - Published: 2013-05-23 - Granted: 2013-09-24 - Earliest claimed: 2011-11-22 - Assignees: Aurus Inc. - Applicants: Rahul Mutha - Inventors: Rahul Mutha - Web page: https://patentgrep.com/patent/US8543461B2 ## CPC - G06Q 20/40975: {using encryption therefor} - G06Q 20/20: Point-of-sale [POS] network systems - G06Q 20/204: {comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit} - G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists - G06Q 30/06: Buying, selling or leasing transactions - G06Q 40/02: Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) - G06Q 2220/10: Usage protection of distributed data files - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract The methods and systems described herein provide for processing payments at a retail location whose infrastructure has been significantly removed from PCI scope. A request for processing payments may be sent from a point of sale lane to a back office server in communication with a credit card terminal. A user may use the credit card terminal to enter in secure payment information which is securely transmitted to a remote authorization service for authorization. Through this method, the credit card terminal and sensitive payment information may be securely isolated from the remaining infrastructure at the retail location. ## Claims ### Claim 1 A method for processing payments, the method comprising: Receiving, at a retail location, a request to process a payment transaction; determining that the request is associated with one of a plurality of credit card terminals at the retail location; receiving, by the determined credit card terminal, secure payment information; sending, by the determined credit card terminal, secure payment information to a remotely located server for authorization; receiving, by the determined credit card terminal, an authorization from a remotely located server, and receiving, at the retail location, an authorization from the determined credit card terminal which does not include secure payment information. ### Claim 2 (depends on 1) The method of claim 1, further comprising the additional step of sending a request to the determined credit card terminal to initiate receipt of secure payment information. ### Claim 3 (depends on 1) The method of claim 1, wherein the request to process a payment is received from one of a plurality of point of sale lanes at a retail location. ### Claim 4 (depends on 1) The method of claim 1, wherein the request to process a payment is received from one of a plurality of electronic cash registers at a retail location. ### Claim 5 (depends on 1) The method of claim 1, wherein secure payment information is sent to a remotely located server for authorization over a virtual private network. ### Claim 6 (depends on 1) The method of claim 1, further comprising the additional steps of: determining that one of a plurality of point of sale lanes at a retail location is associated with the authorization; and sending the authorization to the determined point of sale lane. ### Claim 7 (depends on 1) The method of claim 1, further comprising the additional steps of: determining that one of a plurality of electronic cash registers at a retail location is associated with the authorization; and sending the authorization to the determined electronic cash register. ### Claim 8 (depends on 1) The method of claim 1, wherein secure payment information is sent to a remotely located server through a firewall. ### Claim 9 (depends on 1) The method of claim 1, wherein said determining step is performed at a back office server at a retail location. ### Claim 10 (depends on 9) The method of claim 9, wherein said server operates in listening mode awaiting a request. ### Claim 11 (depends on 1) The method of claim 1, wherein said determining step is performed by relying, at least in part, on a ticket associated with the request. ### Claim 12 (depends on 1) The method of claim 1, wherein said determining step is performed by relying, at least in part, on a table listing the associations of credit card terminals. ### Claim 13 (depends on 1) The method of claim 1, further comprising the additional step of storing non-PCI scope transaction information in a database. ### Claim 14 (depends on 1) The method of claim 1, further comprising the additional steps of: determining, based at least in part on payment information, that a customer belongs to a loyalty program; and applying loyalty program information to a requested transaction. ### Claim 15 (depends on 14) The method of claim 14, wherein said determining step is performed at a remotely located server in communication with the retail location by using at least one of Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols. ### Claim 16 (depends on 14) The method of claim 14, further comprising the step of determining, based at least in part on payment information, a token for the customer. ### Claim 17 (depends on 1) The method of claim 1, further comprising the additional step of storing receipt information for the payment transaction. ### Claim 18 A system for processing payments, the system comprising: at least one processing unit communicatively coupled to a memory unit capable of storing processor-executable instructions, wherein upon execution of the processor-executable instructions, the at least one processing unit: receives, at a retail location, a request to process a payment transaction, determines that the request is associated with one of a plurality of credit card terminals at the retail location; and receives, at the retail location, an authorization from the determined credit card terminal which does not include secure payment information; and a determined credit card terminal comprising at least one processing unit communicatively coupled to a memory unit capable of storing processor-executable instructions, wherein upon execution of the processor-executable instructions, the at least one processing unit: instructions, wherein upon execution of the processor-executable instructions, the at least one processing unit: receives secure payment information, sends secure payment information to a remotely located server for authorization, and receives an authorization from a remotely located server. ### Claim 19 A computer-readable storage medium encoded with computer-readable instructions that, as a result of being executed by a computing device, controls the computing device to perform a method for processing payments, the method comprising: Receiving, at a retail location, a request to process a payment transaction; determining that the request is associated with one of a plurality of credit card terminals at the retail location; receiving, by the determined credit card terminal, secure payment information; sending, by the determined credit card terminal, secure payment information to a remotely located server for authorization; receiving, by the determined credit card terminal, an authorization from a remotely located server, receiving, at the retail location, an authorization from the determined credit card terminal which does not include secure payment information.