Password-protected physical transfer of password-protected devices
View Patent ↗A method for password-protected physical transfer of password-protected devices including at a receiving location, generating at least one security file including an encrypted element generated using a one-way encryption function utilizing at least one secure code, transmitting the at least one security file to a shipping location at which the password-protected devices are located, at the shipping location, using at least one shipping location password, loading the at least one security file into at least one password-protected device, shipping the at least one password-protected device to the receiving location and at the receiving location, employing the at least one secure code to supply an input to the at least one password-protected device and employing the at least one security file to enable establishment of at least one receiving location password for the at least one password-protected device which replaces the at least one shipping location password.
1. A method for password-protected physical transfer of password-protected devices comprising:
at a receiving location, generating at least one security file including an encrypted element generated using a one-way encryption function utilizing at least one secure code;
transmitting said at least one security file to a shipping location at which said password-protected devices are located;
at said shipping location, using at least one shipping location password, loading said at least one security file into at least one password-protected device;
shipping said at least one password-protected device having loaded therein said at least one security file from said shipping location to said receiving location; and
at said receiving location, employing said at least one secure code to supply an input to said at least one password-protected device and employing said at least one security file to enable establishment of at least one receiving location password for said at least one password-protected device which replaces said at least one shipping location password.
2. A method for password-protected physical transfer of password-protected devices according to claim 1 and wherein said at least one security file utilizes plural secure codes held at said receiving location.
3. A method for password-protected physical transfer of password-protected devices according to claim 2 and wherein said security file is created by employing a one-way encryption function utilizing said plural secure codes.
4. A method for password-protected physical transfer of password-protected devices according to claim 3 and wherein said security file is authenticated to confirm that the security file was created at said receiving location and was not modified subsequently.
5. A method for password-protected physical transfer of password-protected devices according to claim 1 and wherein said password-protected devices are point of sale (POS) terminals which are subject to stringent security requirements at all stages of their manufacture and transfer to their operating locations.
6. A method for password-protected physical transfer of password-protected devices according to claim 5 and wherein said security requirements are requirements established by the PCI Security Standards Council.
7. A method for password-protected physical transfer of password-protected devices according to claim 1 and wherein personnel at said shipping location, using said at least one shipping location password, perform security-sensitive operations on said at least one password-protected device and load said at least one security file onto said at least one password-protected device when said at least one password-protected device is in a shipping location password protected (SLPP) state.
8. A method for password-protected physical transfer of password-protected devices according to claim 7 and wherein personnel at said shipping location, using said at least one shipping location password, load said at least one security file into said at least one password-protected device and cause said shipping location password to become expired whereby said at least one password-protected device is in a password-protected, password-inaccessible (PPPI) state, wherein it can no longer be accessed by using said shipping location password and cannot be accessed until said at least one receiving location password is implemented.
9. A method for password-protected physical transfer of password-protected devices according to claim 7 and wherein at said receiving location said at least one password-protected device compares a string created at said receiving location using said at least one secure code with said encrypted element, thereby to enable implementation of said at least one receiving location password.
10. A method for password-protected physical transfer of password-protected devices according to claim 9 and wherein personnel at said receiving location, using at least one receiving location password, perform security-sensitive operations on said at least one password-protected device when said at least one password-protected device is in a first receiving location password protected (FRLPP) state.
11. A method for password-protected physical transfer of password-protected devices according to claim 1 and wherein said at least one security file comprises a plurality of security files which are adapted to be accessed in a predetermined sequence.
12. A method for password-protected physical transfer of password-protected devices according to claim 11 and wherein personnel at said shipping location, using said at least one shipping location password, perform security-sensitive operations on said at least one password-protected device and load said plurality of security files onto said at least one password-protected device, when said at least one password-protected device is in a shipping location password protected (SLPP) state.
13. A method for password-protected physical transfer of password-protected devices according to claim 11 and wherein personnel at said shipping location, using said at least one shipping location password, load said plurality of security files into said at least one password-protected device and cause said shipping location password to become expired whereby said at least one password-protected device is in a password-protected, password-inaccessible (PPPI) state, wherein it can no longer be accessed by using said shipping location password and cannot be accessed until said at least one receiving location password is implemented.
14. A method for password-protected physical transfer of password-protected devices according to claim 13 and wherein at said receiving location said at least one password-protected device compares a string created at said receiving location using said at least one secure code with said encrypted element, thereby to enable implementation of said at least one receiving location password.
15. A method for password-protected physical transfer of password-protected devices according to claim 14 and wherein personnel at said receiving location, using at least one receiving location password, perform security-sensitive operations on said at least one password-protected device when said at least one password-protected device is in a first receiving location password protected (FRLPP) state.
16. A method for password-protected physical transfer of password-protected devices according to claim 15 and wherein personnel at a second receiving location, using at least one second receiving location password, perform security-sensitive operations on said at least one password-protected device when said at least one password-protected device is in a second receiving location password protected (SRLPP) state.