POS Payment Key Distribution via TLS and Local Certificates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In electronic payment systems, secure communication between multiple discrete devices in a Point of Sale (POS) system is challenging due to the need for secure key distribution without relying on pre-programmed shared secrets or continuous internet connections, while minimizing transaction latency and allowing for flexible device combinations.
Innovation Solution
A method for sharing payment keys among multiple discrete devices in a POS system using a stored payment key on one device and a public key certificate and corresponding private key on another, establishing a secure connection via Transport Layer Security (TLS) protocol, allowing devices to authenticate and distribute keys without prior pairing or internet connection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If secure key distribution is implemented without pre-programmed shared secrets, then device flexibility and adaptability are improved, but security complexity increases
Solution Approach 1:
The patent introduces a payment key distribution mechanism that acts as an intermediary between discrete devices. Instead of requiring pre-programmed shared secrets or direct device pairing, the system uses a centralized key distribution approach where payment keys are distributed to multiple discrete devices through a secure channel. This intermediary mechanism enables flexible device combinations while maintaining security without requiring complex peer-to-peer authentication protocols between each device pair.
2Reliability
If additional encryption layers are added for inter-system communication, then security is improved, but transaction latency increases
Solution Approach 1:
The patent applies preliminary action by distributing payment keys to discrete devices before they are needed for transactions. The key distribution occurs in advance through a secure provisioning process, so that when transactions occur, the devices already possess the necessary encryption keys. This eliminates the need for real-time key exchange or additional encryption layer setup during transactions, thereby maintaining security while minimizing transaction latency.
3Reliability
If continuous internet connection is required for key distribution, then security management is improved, but system availability and ease of operation deteriorate
Solution Approach 1:
The patent implements local quality by enabling discrete devices to store and use payment keys locally after initial distribution. Once keys are provisioned to the devices, they can operate independently without requiring continuous internet connectivity. The system is designed so that security management occurs locally at the device level rather than requiring constant remote verification, thereby maintaining security management capabilities while ensuring system availability even when internet connection is interrupted.
Data Source
AI summary
Methods and systems related to distributing payment keys to multiple discrete devices in a point of sale (POS) system are disclosed. One method includes storing a payment key on a first discrete device for a POS system and a public key certificate on a second discrete device for the POS system. The method also includes communicatively connecting the first discrete device with the second discrete device using a wire, transmitting the public key certificate from the second discrete device to the first discrete device using the wire, and verifying the public key certificate on the first discrete device. The method also includes finalizing a secure connection between the first discrete device and the second discrete device over the wire using a transport layer secure (TLS) protocol after the public key certificate is verified.


