Transparently securing transactional data
A secure magnetic stripe card stripe reader (MSR) module and software system capable of encrypting the magnetic stripe data to CPI, SDP and CISP standards for use in point of sale (POS) and other applications requiring data security using non secure networks and computing devices. Additionally, when incorporated within an attachment for conventional personal digital assistant (PDA) or cell phone or stationary terminal, provides encrypted data from the magnetic head assembly providing compliance with Federal Information Processing Standards Publication Series FIPS 140 covering security and tampering standards. Moreover, this module and software system includes the capability of providing secure POS transactions to legacy transaction processing systems and POS terminals transparently to the existing infrastructure. Furthermore, this module and software system includes the capability of transparently providing detection of fraudulently copied magnetic stripe cards.
1. A card stripe reader, comprising:
a housing;
a detector with a portion thereof encapsulated within the housing, the detector configured to detect magnetic card data and generate a first signal representing the card data; and
an encryption engine disposed outside the housing and in communicative contact with the detector, the encryption engine configured to encrypt a portion of the card data of the first signal and to generate a second signal that includes the encrypted card data, wherein the first and second signals have a same data format and the second signal includes a serial number along with the card data.
2. The card stripe reader of claim 1 , wherein the data format of the second signal further comprises card data in a same data layout as card data on a data track of the magnetic card.
3. The card stripe reader of claim 1 , wherein the portion of the card data is all or less than all the card data of a track of the magnetic card.
4. The card stripe reader of claim 1 , wherein the data format of the second signal is in a same format as an output signal of conventional POS card stripe read data.
5. The card stripe reader of claim 1 , wherein the format of the second signal is in a format readable by a processor in a non-encrypting card swipe terminal.
6. A card stripe reader, comprising:
a housing;
a detector with a portion thereof encapsulated within the housing, the detector configured to detect magnetic card data and generate a first signal representing the card data; and
an encryption engine disposed outside the housing and in communicative contact with the detector, the encryption engine configured to encrypt a portion of the card data of the first signal and to generate a second signal that includes the encrypted card data, wherein the first and second signals have a same data format and the second signal is formatted to include clear and encrypted data in card track format.
7. The method of claim 6 , wherein the portion of the card data is all or less than all the card data of a track of the magnetic card.
8. The method of claim 6 , wherein the second signal further includes a serial number along with the card data.
9. A terminal for reading a token used to in financial transactions, comprising:
a detector with at least a portion thereof encapsulated within a housing within the terminal, the detector configured to read token data from the token and to generate a signal representing the token data;
an encryption engine communicatively coupled to the detector and disposed outside the housing, the encryption engine configured to encrypt a portion of the token data in the signal and to generate a second signal including the encrypted token data, wherein the second signal has a same format as the signal generated by the detector; and
a communication module communicatively coupled to the encryption engine and disposed within the housing, the communication module configured to transmit the second signal to a transaction processing network for the financial transaction.
10. A terminal for reading a token used to in financial transactions, comprising:
a detector with at least a portion thereof encapsulated within a housing within the terminal, the detector configured to read token data from the token and to generate a signal representing the token data; and
an encryption engine communicatively coupled to the detector and disposed outside the housing, the encryption engine configured to encrypt a portion of the token data in the signal and to generate a second signal including the encrypted token data, wherein the second signal has a same format as the signal generated by the detector and the second signal comprises a serial number included with the encrypted token data.
11. A method for encrypting data for transmission on an unsecured public network, comprising the steps of:
a) acquiring magnetic stripe card track data using an magnetic stripe card reader;
b) selecting a portion of the acquired card track data;
c) encrypting the selected portion;
d) assembling an encrypted data package by replacing the selected portion of the acquired card track data with the encrypted data; and
e) outputting the encrypted data package into an unsecured POS device for the purpose of completing a financial transaction;
whereby the system maintains message format compatibility with the original magnetic stripe card data infrastructure system.
12. The method of claim 11 , further comprising: adding unique identifier to the encrypted data.
13. The method of claim 11 , wherein the magnetic stripe data consists of financial transaction data as specified in ISO/IEC 7813:2001(E): whereby the system maintains message format compatibility with legacy credit card payment infrastructure system, and does not adversely effect legacy POS equipment used to process transactions.
14. The method of claim 11 , wherein the acquired card track data includes a serial number along with the card data.
15. The method of claim 11 , wherein the acquired card track data is formatted to include clear and encrypted data in card track format.