Secure point of sale presentation of a barcode at an information handling system display
Unauthorized copying of a transaction barcode is prevented by including a sensed condition or other publicly-accessible data with the transaction barcode for use as a comparison with the publicly accessible data determined at a barcode reader. If the sensed condition included in the transaction barcode indicates that the transaction barcode was generated for a different transaction, then the barcode reader invalidates the transaction. For instance, if the barcode was generated too distant in time, position, or sequential transactions, then the barcode reader invalidates the transaction barcode as an unauthorized copy of a transaction barcode generated for a different transaction.
1. A method for performing a point-of-sale transaction, the method comprising:
determining a publicly accessible data at a point-of-sale location;
applying the publicly accessible data to encrypt an account identifier in a barcode;
presenting the bar code at a display;
reading barcode from the display with a barcode reader at the point-of-sale location;
decrypting the barcode with the publicly accessible data at the point-of-sale location; and
applying the account number from the barcode to perform the point-of-sale transaction;
wherein determining a publicly accessible data at a point of sale location further comprises:
determining a location with a GPS; and
selecting a predetermined portion of the location as an encryption key to encrypt the account identifier.
2. A method for performing a point-of-sale transaction, the method comprising:
determining a publicly accessible data at a point-of-sale location;
applying the publicly accessible data to encrypt an account identifier in a barcode;
presenting the bar code at a display;
reading barcode from the display with a barcode reader at the point-of-sale location;
decrypting the barcode with the publicly accessible data at the point-of-sale location; and
applying the account number from the barcode to perform the point-of-sale transaction;
wherein determining a publicly accessible data at a point of sale location further comprises:
determining a time from a publicly accessible time source; and
selecting a predetermined portion of the time as an encryption key to encrypt the account identifier.
3. A point of sale transaction system comprising:
a portable information handling system having a processor operable to execute instructions to process information, memory interfaced with the processor and operable to store the information and a display interfaced with the processor and operable to present the information as visual images;
a barcode generator stored in the memory and operable to execute on the processor to apply the information to generate a barcode for presentation at the display;
a transaction engine stored in the memory and operable to execute on the processor to embed an account identifier and predetermined publicly accessible information in a barcode generated by the barcode generator, the barcode presented at the display, the transaction engine encrypting at least the account identifier by using at least a portion of the publicly accessible information as an encryption key; and
a barcode reader separate from the mobile information handling system and operable to read the barcode from the display, extract the account identifier and apply predetermined publicly accessible information to validate a point-of-sale transaction, the barcode reader decrypting the account identifier with the publicly accessible information used as a decryption key;
wherein the predetermined publicly accessible information comprises a time associated with generation of the barcode, the barcode generator operable to apply the time to encrypt the account identifier in the barcode, the barcode reader applying a time at which the barcode is read to decrypt the account identifier.
4. A point of sale transaction system comprising:
a portable information handling system having a processor operable to execute instructions to process information, memory interfaced with the processor and operable to store the information and a display interfaced with the processor and operable to present the information as visual images;
a barcode generator stored in the memory and operable to execute on the processor to apply the information to generate a barcode for presentation at the display;
a transaction engine stored in the memory and operable to execute on the processor to embed an account identifier and predetermined publicly accessible information in a barcode generated by the barcode generator, the barcode presented at the display, the transaction engine encrypting at least the account identifier by using at least a portion of the publicly accessible information as an encryption key; and
a barcode reader separate from the mobile information handling system and operable to read the barcode from the display, extract the account identifier and apply predetermined publicly accessible information to validate a point-of-sale transaction, the barcode reader decrypting the account identifier with the publicly accessible information used as a decryption key;
wherein the predetermined publicly accessible information comprises a GPS position associated with generation of the barcode, the barcode generator operable to apply the GPS position to encrypt the account identifier in the barcode, the barcode reader applying a GPS position at which the barcode is read to decrypt the account identifier.
5. A method for restricting use of a transaction barcode, the method comprising:
sensing a condition at a mobile telephone, the sensed condition comprising a GPS position;
generating a transaction barcode at the mobile telephone, the transaction barcode including an account identifier and the sensed condition, the sensed condition used as an encryption key to encrypt the transaction barcode;
presenting the transaction barcode at a display of the mobile telephone;
reading the transaction barcode from the display of the mobile telephone with a barcode reader;
sensing the condition at the barcode reader; and
invalidating the transaction if the sensed condition included in the bar code fails to match the sensed condition at the barcode reader.
6. A method for restricting use of a transaction barcode, the method comprising:
sensing a condition at a mobile telephone, the sensed condition comprising a time;
generating a transaction barcode at the mobile telephone, the transaction barcode including an account identifier and the sensed condition, the sensed condition used as an encryption key to encrypt the transaction barcode;
presenting the transaction barcode at a display of the mobile telephone;
reading the transaction barcode from the display of the mobile telephone with a barcode reader;
sensing the condition at the barcode reader; and
invalidating the transaction if the sensed condition included in the bar code fails to match the sensed condition at the barcode reader.