Fuel Dispenser Touchscreen Security via Application Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Fuel dispensers face challenges in securely managing touchscreen display functionality, particularly in limiting access and input for unauthorized applications while ensuring the security and integrity of sensitive payment information handling.
Innovation Solution
A secure device controls the touchscreen display by filtering input events and managing access based on application authentication, providing varying levels of functionality to authorized and unauthorized applications, and employing anti-tampering measures to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the controller handles sensitive payment information, then payment processing functionality is enabled, but security requirements and manual offline certification processes are imposed
Solution Approach 1:
The system separates payment information handling into distinct secure components (PIN pad, card reader) that are physically or logically isolated from the main controller. This segmentation allows the controller to process payments without directly handling sensitive data, reducing security certification requirements while maintaining functionality.
Solution Approach 2:
A secure element or trusted platform module acts as an intermediary between the user's payment device and the fuel dispenser controller. This intermediary handles the cryptographic operations and sensitive data processing, allowing the controller to facilitate payments without directly managing sensitive information.
2Ease of operation
If touchscreen displays are used for user interaction, then ease of operation is improved, but functionality is limited due to regulatory restrictions
Solution Approach 1:
The touchscreen display provides different levels of access and functionality to different applications based on their authorization status. Authorized applications receive full touchscreen functionality while unauthorized applications are restricted, allowing the system to maintain ease of operation for legitimate users while limiting functionality for unauthorized access.
Solution Approach 2:
The touchscreen functionality is dynamically adjusted based on the application's authorization status and the context of use. The system can enable or disable specific touch regions, gestures, or input methods in real-time, providing full functionality when appropriate and restrictions when security concerns arise.
3Adaptability or versatility
If full touchscreen functionality is provided to all applications, then adaptability is improved, but security risks increase
Solution Approach 1:
The system continuously monitors application authorization status and touchscreen interaction patterns. Based on this feedback, it dynamically adjusts the level of touchscreen access granted to each application, enabling full functionality for authorized apps while automatically restricting access for unauthorized ones, thus balancing adaptability with security.
Solution Approach 2:
The system changes the operational parameters of the touchscreen display based on the application's authorization status. Authorized applications receive parameters that enable full functionality, while unauthorized applications receive modified parameters that limit access to specific regions or types of interactions, preventing unauthorized actions while maintaining system adaptability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for controlling access to a touch display, comprising: receiving input data from a touch display, wherein the input data is associated with an application accessing the touch display; determining whether the application is signed by an authorized entity; and providing touch input information correlating to the input data to the application based at least in part on whether the application is signed by the authorized entity.