Patent Application

App. No. 12/265,534

Abstract

Claims (34)

1 . A method, performed by a data control system, for securing data on a local area network having one or more point of sale devices and one or more non-point of sale devices, the method comprising the steps of:

(a) determining the data is from a first non-point of sale device on the local area network;

(b) preventing the data from the first non-point of sale device from being sent to a point of sale device on the local area network; and

(c) allowing the data from the first non-point of sale device to be sent to a second non-point of sale device on the local area network.

2 . The method of claim 1 , further comprising the step of defining within the local area network a non-point of sale network, and wherein step (a) comprises determining that the data is from a device on the non-point of sale network.

3 . The method of claim 2 , wherein step (a) comprises determining that the data is associated with a service set identifier corresponding to the non-point of sale network.

4 . The method of claim 2 , wherein step (a) comprises determining that the data is associated with a port corresponding to the non-point of sale network.

5 . The method of claim 1 , further comprising the step of defining within the local area network a point of sale network, and wherein step (b) comprises determining that the data is destined for a device on the point of sale network and preventing the data from being sent to the device on the point of sale network.

6 . The method of claim 1 , further comprising the step of defining within the local area network a non-point of sale network, and wherein step (c) comprises determining that the data is destined for a device on the non-point of sale network.

7 . The method of claim 1 , wherein step (c) comprises the steps of:

(c1) allowing the data to be sent from a wireless non-point of sale device to a second wireless non-point of sale device; and

(c2) preventing the data from being sent from a wireless non-point of sale device to a wired non-point of sale device.

8 . The method of claim 1 , wherein step (c) comprises the steps of:

(c1) allowing the data to be sent from a wired non-point of sale device to a second wired non-point of sale device; and

(c2) preventing the data from being sent from a wired non-point of sale device to a wireless non-point of sale device.

9 . The method of claim 1 , wherein the data control system comprises a router.

10 . The method of claim 1 , wherein the data control system comprises a router in communication with a secure host.

11 . A data control system for securing data on a local area network having one or more point of sale devices and one or more non-point of sale devices, the method comprising:

means for determining the data is from a first non-point of sale device on the local area network;

means for preventing the data from the first non-point of sale device from being sent to a point of sale device; and

means for allowing the data from the first non-point of sale device to be sent to a second non-point of sale device on the local area network.

12 . The data control system of claim 11 , further comprising means for defining within the local area network a non-point of sale network, and wherein the means for determining the data is from a first non-point of sale device comprises means for determining that the data is from a device on the non-point of sale network.

13 . The data control system of claim 12 wherein the means for determining the data is from a first non-point of sale device comprises means for determining that the data is associated with a service set identifier corresponding to the non-point of sale network.

14 . The data control system of claim 12 wherein the means for determining the data is from a first non-point of sale device comprises means for determining that the data is associated with a port corresponding to the non-point of sale network.

15 . The data control system of claim 11 , further comprising means for defining within the local area network a point of sale network, and wherein the means for preventing the data from the first non-point of sale device from being sent to the point of sale device comprises means for determining that the data is destined for a device on the point of sale network and preventing the data from being sent to the device on the point of sale network.

16 . The data control system of claim 11 , further comprising means for defining within the local area network a non-point of sale network, and wherein the means for allowing the data from the first non-point of sale device to be sent to the second non-point of sale device on the local area network comprises means for determining that the data is destined for a device on the non-point of sale network.

17 . The data control system of claim 11 , wherein the means for allowing the data from the first non-point of sale device to be sent to the second non-point of sale device on the local area network comprises:

means for allowing the data to be sent from a wireless non-point of sale device to a second wireless non-point of sale device; and

means for preventing the data from being sent from a wireless non-point of sale device to a wired non-point of sale device.

18 . The data control system of claim 11 , wherein the means for allowing the data from the first non-point of sale device to be sent to the second non-point of sale device on the local area network comprises:

means for allowing the data to be sent from a wired non-point of sale device to a second wired non-point of sale device; and

means for preventing the data from being sent from a wired non-point of sale device to a wireless non-point of sale device.

19 . The data control system of claim 11 , wherein the data control system comprises a router.

20 . The data control system of claim 11 , wherein the data control system comprises a router in communication with a secure host.

Assignments (14)