Secure Remote POS Connection via Temporary Wireless Network
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
POS systems become unusable when hardware/network/power failures occur, rendering them inaccessible to backend application services, and existing solutions do not provide a secure alternate connection over public internet.
Innovation Solution
A mobile internet connection device establishes a temporary local wireless network, allowing the terminal device to connect to a remote server via a VPN tunnel using certificate-based trust negotiation, ensuring secure access to remote services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a terminal device connects to backend application services over a private network (LAN/WAN), then security is maintained and access is reliable, but the system becomes unusable when hardware/network/power failures occur
Solution Approach 1:
A mobile computing device serves as an intermediary between the terminal device and the remote server. It establishes a temporary local wireless network and provides a sharable connection to the public internet, enabling the terminal device to access backend services through this intermediate connection when private networks are unavailable
Solution Approach 2:
The system dynamically switches between private network connection and public internet connection based on availability. The terminal device can adaptively select connection paths, transitioning from the preferred private network to the alternative public internet connection when failures occur, ensuring continuous operation
2Adaptability or versatility
If a terminal device establishes an alternate connection to remote services over the public internet, then continued operation is enabled, but security is compromised due to inherent insecurity of public internet
Solution Approach 1:
Certificate-based authentication is performed in advance before establishing the connection. The terminal device and remote server exchange and verify digital certificates beforehand, pre-establishing trust relationships that protect subsequent communications over the insecure public internet
Solution Approach 2:
The mobile computing device acts as a secure intermediary that establishes a VPN tunnel or encrypted connection between the terminal device and remote server. This intermediate layer provides security protocols and encryption, protecting data transmission even though it traverses the public internet
3Object-affected harmful factors
If certificate-based trust negotiation is used to establish secure connection, then security is maintained, but connection establishment time increases
Solution Approach 1:
Digital certificates are pre-configured and cached on both the terminal device and remote server before actual connection is needed. When connection is required, the devices perform rapid certificate verification using pre-loaded public keys, significantly reducing authentication time compared to real-time certificate issuance and verification
Data Source
AI summary
In some implementations, a computer system for providing a terminal device with a secure remote service connection can include the terminal device, an internet connection device, and a remote server. A temporary local wireless network and a sharable internet connection can be established by the internet connection device, and connection information can be output for the temporary local wireless network. The terminal device can detect the connection information and can connect to the temporary local wireless network. A secure connection can be established between the terminal device and the remote server. After establishing the secure connection, the remote server can receive operator credentials from the terminal device, and can transmit an access token to the terminal device. The terminal device can transmit a request to access a terminal device service hosted by the remote server, and the remote server can execute application code for the terminal device service.