Secure Web-Prompt Processing on POS Devices

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current point of sale (POS) devices face challenges in securely processing web prompts, as they are restricted from dynamic content updates for promotional or branding purposes without compromising security, making it costly and logistically difficult for merchants to maintain secure PIN entry processes.

Innovation Solution

A system comprising a proxy server, web browser, and a real-time user input limiting trusted computing base module that analyzes web pages for trustworthiness and enforces the 'three hot-zone' rule to prevent unauthorized input on non-trusted web pages, allowing only secure input on trusted pages, thereby protecting sensitive information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If POS devices allow dynamic web content updates for promotional or branding purposes, then content adaptability is improved, but security reliability deteriorates due to potential exposure to malicious web pages

Engineering Contradiction:

Improvecontent adaptabilityVSAvoidsecurity reliability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a proxy server as an intermediary between the POS device and the internet. The proxy server filters web pages before they reach the POS device, allowing dynamic content updates while blocking malicious content. This mediator enables content adaptability without compromising security reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary analysis of web pages through the proxy server before they are displayed on the POS device. By pre-screening content for security threats and trustworthiness, the system allows dynamic content updates while preventing security compromises in advance.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If POS devices restrict web page access to static signed content, then security reliability is improved, but content adaptability deteriorates making it costly and logistically difficult to update promotional content

Engineering Contradiction:

Improvesecurity reliabilityVSAvoidcontent adaptability

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The proxy server acts as an intermediary that enables dynamic content updates without requiring the POS device itself to be modified or re-signed. This mediator provides content adaptability while the POS device maintains its security integrity.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system separates the content delivery function from the POS device by using a proxy server. The POS device remains static and secure, while the proxy server handles dynamic content updates, allowing content adaptability without compromising device security.

Inventive Principle:

Principle #1Segmentation

3Adaptability or versatility

If POS devices allow unrestricted internet access for web browsing, then content adaptability is improved, but vulnerability to phishing and unauthorized PIN entry increases

Engineering Contradiction:

Improveweb browsing capabilityVSAvoidphishing vulnerability

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The proxy server serves as a security intermediary that filters web pages before they reach the POS device. It blocks phishing sites and malicious content while allowing legitimate web browsing, thus enabling web browsing capability without increasing phishing vulnerability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system applies preliminary anti-action by blocking malicious web pages before they can affect the POS device. The proxy server pre-identifies and prevents access to phishing sites and unauthorized content, countering potential harm before it occurs.

Inventive Principle:

Principle #9Preliminary anti-action

4Reliability

If merchants manually update secure PIN entry prompts on each POS device, then security control is improved, but operational efficiency deteriorates making updates costly and logistically difficult

Engineering Contradiction:

Improvesecurity controlVSAvoidupdate efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The proxy server acts as an intermediary that centralizes content management. Merchants can update web content centrally on the proxy server, and updates are automatically distributed to multiple POS devices, improving update efficiency while maintaining security control through the proxy's filtering capabilities.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The proxy server provides universal content management for multiple POS devices simultaneously. A single content update on the proxy server serves all connected POS devices, eliminating the need for manual updates at each device and significantly improving operational efficiency.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS9208489B2System for secure web-prompt processing on point sale devices

Publication Date: 2015.12.08 VERIFONE INC

AI summary

A point of sale system including at least one proxy server having an internet connection, a web browser operative to download web pages from the internet via the proxy server, and a real time user input limiting trusted computing base module communicating with the web browser and being operative to limit user input to the web pages in real time.