Postal services kiosk having payment card security
View Patent ↗An apparatus for facilitating payment using a payment card includes a computerized sales transaction device structured to determine a monetary amount for a sale, and a secure card activated terminal (CAT) device in electronic communication with the computerized sales transaction device. The computerized sales transaction device sends the monetary amount to the secure CAT device. The secure CAT device is structured to: (i) obtain sensitive payment card information from the card, (ii) automatically request in a secure, encrypted manner authorization for the sale using the monetary amount and the sensitive payment card information, (iii) receive in a secure, encrypted manner authorization approval for the sale, and (iv) in response to receiving the authorization approval, send purchase authorization approval information to the computerized sales transaction device. The computerized sales transaction device never receives the sensitive payment card information.
1. An apparatus for facilitating payment for goods or services using a payment card, comprising:
a computerized sales transaction device structured to determine a monetary amount for a sale of goods or services, the computerized sales transaction device not meeting Payment Card Industry Data Security Standards requirements relating to security of payment card information; and
a secure card activated terminal device in electronic communication with the computerized sales transaction device, the secure card activated terminal device meeting Payment Card Industry Data Security Standards requirements relating to security of payment card information;
wherein the computerized sales transaction device is structured to electronically send the monetary amount for the sale to the secure card activated terminal device, wherein the secure card activated terminal device is structured to: (i) securely read sensitive payment card information from the payment card, (ii) responsive to receiving the determined monetary amount and the read sensitive payment card information, automatically request in a secure manner authorization for the sale from a third party using the determined monetary amount and the obtained sensitive payment card information, (iii) receive in a secure manner authorization approval for the sale from the third party, and (iv) in response to receiving the authorization approval, electronically send purchase authorization approval information to the computerized sales transaction device, and wherein the computerized sales transaction device never receives the sensitive payment card information.
2. The apparatus according to claim 1 , wherein the sensitive payment card information includes a full account number, a cardholder name and a card expiration date associated with the payment card.
3. The apparatus according to claim 1 , wherein the payment card is a credit card or a debit card.
4. The apparatus according to claim 1 , wherein the computerized sales transaction device is a vending kiosk.
5. The apparatus according to claim 4 , wherein the vending kiosk is a postal kiosk.
6. The apparatus according to claim 1 , wherein the computerized sales transaction device is a POS terminal.
7. The apparatus according to claim 1 , wherein the purchase authorization approval information includes an authorization number for the sale.
8. The apparatus according to claim 7 , wherein the purchase authorization approval information further includes a last four digits of a full account number associated with the payment card.
9. A method of facilitating payment for goods or services using a payment card, comprising:
determining a monetary amount for a sale of goods or services in a first device, the first device not meeting Payment Card Industry Data Security Standards requirements relating to security of payment card information;
electronically sending the monetary amount for the sale to a secure card activated terminal device coupled to the first device, the secure card activated terminal device meeting Payment Card Industry Data Security Standards requirements relating to security of payment card information;
securely reading, by the secure card activated terminal device, sensitive payment card information from the payment card;
responsive to receiving the determined monetary amount and the read sensitive payment card information, automatically requesting by the secure card activated terminal device in a secure manner authorization for the sale from a third party using the determined monetary amount and the read sensitive payment card information;
receiving in the secure card activated terminal device in a secure manner authorization approval for the sale from the third party; and
in response to receiving the authorization approval, electronically send purchase authorization approval information from the secure card activated terminal device to the first device, wherein the first device never receives the sensitive payment card information.
10. The method according to claim 9 , wherein the sensitive payment card information includes a full account number, a cardholder name and a card expiration date associated with the payment card.
11. The method according to claim 9 , wherein the payment card is a credit card or a debit card.
12. The method according to claim 9 , wherein the first device is a vending kiosk.
13. The method according to claim 12 , wherein the vending kiosk is a postal kiosk.
14. The method according to claim 9 , wherein the first device is a POS terminal.
15. The method according to claim 9 , wherein the purchase authorization approval information includes an authorization number for the sale.
16. The method according to claim 15 , wherein the purchase authorization approval information further includes a last four digits of a full account number associated with the payment card.