POS Payment Key Distribution via TLS and Local Certificates

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In electronic payment systems, secure communication between multiple discrete devices in a Point of Sale (POS) system is challenging due to the need for secure key distribution without relying on pre-programmed shared secrets or continuous internet connections, while minimizing transaction latency and allowing for flexible device combinations.

Innovation Solution

A method for sharing payment keys among multiple discrete devices in a POS system using a stored payment key on one device and a public key certificate and corresponding private key on another, establishing a secure connection via Transport Layer Security (TLS) protocol, allowing devices to authenticate and distribute keys without prior pairing or internet connection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If secure key distribution is implemented without pre-programmed shared secrets, then device flexibility and adaptability are improved, but security complexity increases

Engineering Contradiction:
Improvedevice flexibilityVSAvoidsecurity complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a payment key distribution mechanism that acts as an intermediary between discrete devices. Instead of requiring pre-programmed shared secrets or direct device pairing, the system uses a centralized key distribution approach where payment keys are distributed to multiple discrete devices through a secure channel. This intermediary mechanism enables flexible device combinations while maintaining security without requiring complex peer-to-peer authentication protocols between each device pair.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If additional encryption layers are added for inter-system communication, then security is improved, but transaction latency increases

Engineering Contradiction:
ImprovesecurityVSAvoidtransaction latency
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by distributing payment keys to discrete devices before they are needed for transactions. The key distribution occurs in advance through a secure provisioning process, so that when transactions occur, the devices already possess the necessary encryption keys. This eliminates the need for real-time key exchange or additional encryption layer setup during transactions, thereby maintaining security while minimizing transaction latency.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If continuous internet connection is required for key distribution, then security management is improved, but system availability and ease of operation deteriorate

Engineering Contradiction:
Improvesecurity managementVSAvoidsystem availability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements local quality by enabling discrete devices to store and use payment keys locally after initial distribution. Once keys are provisioned to the devices, they can operate independently without requiring continuous internet connectivity. The system is designed so that security management occurs locally at the device level rather than requiring constant remote verification, thereby maintaining security management capabilities while ensuring system availability even when internet connection is interrupted.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS11868999B2Distributing payment keys among multiple discrete devices in a point of sale system
Publication Date: 2024.01.09 CLOVER NETWORK INC
  • US11868999B2 patent drawing
  • US11868999B2 patent drawing
  • US11868999B2 patent drawing

AI summary

Methods and systems related to distributing payment keys to multiple discrete devices in a point of sale (POS) system are disclosed. One method includes storing a payment key on a first discrete device for a POS system and a public key certificate on a second discrete device for the POS system. The method also includes communicatively connecting the first discrete device with the second discrete device using a wire, transmitting the public key certificate from the second discrete device to the first discrete device using the wire, and verifying the public key certificate on the first discrete device. The method also includes finalizing a secure connection between the first discrete device and the second discrete device over the wire using a transport layer secure (TLS) protocol after the public key certificate is verified.