System and method for secure communication in a retail environment
This disclosure provides various embodiments of systems and methods for secure communications. In one aspect, the system includes a secure payment module (SPM) in a fuel dispenser and a point-of-sale (POS) system. The POS system stores a public key certificate uniquely identifying the SPM and is configured to dynamically generate a first session key. The POS system encrypts the first session key with a public key associated with the public key certificate, and transmits the encrypted first session key to the SPM. The SPM, which stores a private key associated with the public key certificate, is configured to receive and decrypt the first session key. The SPM is further configured to receive a set of magnetic card data from a card reader, encrypt the set of magnetic card data with the first session key, and transmit the encrypted set of magnetic card data to the POS system.
1. A system for secure communication in a fueling environment, comprising:
a first card reader configured to be disposed in a fuel dispenser;
a first secure payment module (SPM) configured to be disposed in the fuel dispenser, the first SPM being communicably coupled to the first card reader, the first SPM including at least one processor configured to receive data from the first card reader, the first SPM storing a first public key certificate uniquely identifying the first SPM, the first public key certificate issued by a trusted certificate authority system, and a first private key associated with the first public key certificate; and
a point-of-sale (POS) system, the POS system comprising at least one POS server storing a second public key certificate issued by the trusted certificate authority system, the POS system including at least one processor, wherein the at least one processor of the POS system is configured to:
retrieve the first public key certificate from the first SPM, wherein the first public key certificate contains a first public key associated with the first SPM;
verify an identity of the first SPM by authenticating the first public key certificate with the second public key certificate;
generate a random first session key; wherein generating the first session key comprises using, at least in part, pseudorandom POS system entropy data;
encrypt the first session key using, at least in part, the first public key; and
transmit the encrypted first session key to the first SPM;
wherein the at least one processor of the first SPM is configured to execute instructions stored at the first SPM, the instructions stored at the first SPM operable, when executed, to:
receive the encrypted first session key from the POS system;
decrypt the first session key using, at least in part, the first private key;
receive a first set of sensitive data from the first card reader;
encrypt the first set of sensitive data using, at least in part, the first session key; and
transmit the encrypted first set of sensitive data to the POS system.
2. A system for secure communication in a fueling environment, comprising:
a first card reader configured to be disposed in a fuel dispenser;
a first secure payment module (SPM) configured to be disposed in the fuel dispenser, the first SPM being communicably coupled to the first card reader, the first SPM including at least one processor configured to receive data from the first card reader, the first SPM storing a first public key certificate uniquely identifying the first SPM, the first public key certificate issued by a trusted certificate authority system, and a first private key associated with the first public key certificate; wherein a coupling between the first SPM and the first card reader is physically secured in a tamper-resistant enclosure; and
a point-of-sale (POS) system, the POS system comprising at least one POS server storing a second public key certificate issued by the trusted certificate authority system, the POS system including at least one processor, wherein the at least one processor of the POS system is configured to:
retrieve the first public key certificate from the first SPM, wherein the first public key certificate contains a first public key associated with the first SPM;
verify an identity of the first SPM by authenticating the first public key certificate with the second public key certificate;
generate a random first session key;
encrypt the first session key using, at least in part, the first public key; and
transmit the encrypted first session key to the first SPM;
wherein the at least one processor of the first SPM is configured to execute instructions stored at the first SPM, the instructions stored at the first SPM operable, when executed, to:
receive the encrypted first session key from the POS system;
decrypt the first session key using, at least in part, the first private key;
receive a first set of sensitive data from the first card reader;
encrypt the first set of sensitive data using, at least in part, the first session key; and
transmit the encrypted first set of sensitive data to the POS system.
3. A system for secure communication in a fueling environment, comprising:
a first card reader configured to be disposed in a fuel dispenser;
a first secure payment module (SPM) configured to be disposed in the fuel dispenser, the first SPM being communicably coupled to the first card reader, the first SPM including at least one processor configured to receive data from the first card reader, the first SPM storing a first public key certificate uniquely identifying the first SPM, the first public key certificate issued by a trusted certificate authority system, and a first private key associated with the first public key certificate; and
a point-of-sale (POS) system, the POS system comprising at least one POS server storing a second public key certificate issued by the trusted certificate authority system, the POS system including at least one processor, wherein the at least one processor of the POS system is configured to:
retrieve the first public key certificate from the first SPM, wherein the first public key certificate contains a first public key associated with the first SPM;
verify an identity of the first SPM by authenticating the first public key certificate with the second public key certificate;
generate a random first session key;
encrypt the first session key using, at least in part, the first public key; and
transmit the encrypted first session key to the first SPM;
wherein the at least one processor of the first SPM is configured to execute instructions stored at the first SPM, the instructions stored at the first SPM operable, when executed, to:
receive the encrypted first session key from the POS system;
decrypt the first session key using, at least in part, the first private key;
receive a first set of sensitive data from the first card reader;
encrypt the first set of sensitive data using, at least in part, the first session key; wherein the first SPM receives the encrypted first session key from the POS system and decrypts the first session key before the first SPM receives the first set of sensitive data from the first card reader; and
transmit the encrypted first set of sensitive data to the POS system.