Password-protected physical transfer of password-protected devices
A method for password-protected physical transfer of password-protected devices including at a receiving location, generating at least one security file including an encrypted element generated using a one-way encryption function utilizing at least one secure code, transmitting the at least one security file to a shipping location at which the password-protected devices are located, at the shipping location, using at least one shipping location password, loading the at least one security file into at least one password-protected device, shipping the at least one password-protected device to the receiving location and at the receiving location, employing the at least one secure code to supply an input to the at least one password-protected device and employing the at least one security file to enable establishment of at least one receiving location password for the at least one password-protected device which replaces the at least one shipping location password.
1. A system for password-protected physical transfer of password-protected devices comprising:
a security file generator located at a receiving location and generating at least one security file including an encrypted element generated using a one-way encryption function utilizing at least one secure code;
a security file transmitter, transmitting said at least one security file to a shipping location at which at least one password-protected device is located prior to shipping;
a security file loader, located at said shipping location and using at least one shipping location password for loading said at least one security file into said at least one password-protected device, wherein said at least one password-protected device, having loaded therein said at least one security file, is shipped from said shipping location to said receiving location; and
a password generator located at said receiving location and employing said at least one secure code to supply an input to said at least one password-protected device and employing said at least one security file to enable establishment of at least one receiving location password for said at least one password-protected device, which at least one receiving location password replaces said at least one shipping location password.
2. A system for password-protected physical transfer of password-protected devices according to claim 1 and wherein said at least one security file utilizes plural secure codes held at said receiving location.
3. A system for password-protected physical transfer of password-protected devices according to claim 2 and wherein said security file is created by employing a one-way encryption function utilizing said plural secure codes.
4. A system for password-protected physical transfer of password-protected devices according to claim 3 and wherein said at least one security file is authenticated to confirm that the at least one security file was created at said receiving location and was not modified subsequently.
5. A system for password-protected physical transfer of password-protected devices according to claim 1 and wherein said at least one password-protected device is a point of sale (POS) terminal which is subject to stringent security requirements at all stages of manufacture and transfer to its operating location.
6. A system for password-protected physical transfer of password-protected devices according to claim 5 and wherein said security requirements are requirements established by the PCI Security Standards Council.
7. A system for password-protected physical transfer of password-protected devices according to claim 1 and wherein personnel at said shipping location, using said at least one shipping location password, perform security-sensitive operations on said at least one password-protected device and load said at least one security file onto said at least one password-protected device when said at least one-password-protected device is in a shipping location password protected (SLPP) state.
8. A system for password-protected physical transfer of password-protected devices according to claim 7 and wherein personnel at said shipping location, using said at least one shipping location password, load said at least one security file into said at least one password-protected device and cause said shipping location password to become expired whereby said at least one password-protected device is in a password-protected, password-inaccessible (PPPI) state, wherein it can no longer be accessed by using said shipping location password and cannot be accessed until said at least one receiving location password is implemented.
9. A system for password-protected physical transfer of password-protected devices according to claim 7 and wherein at said receiving location said at least one password-protected device compares a string created at said receiving location using said at least one secure code with said encrypted element, thereby to enable implementation of said at least one receiving location password.
10. A system for password-protected physical transfer of password-protected devices according to claim 9 and wherein personnel at said receiving location, using at least one receiving location password, perform security-sensitive operations on said at least one password-protected device when said at least one password-protected device is in a first receiving location password protected (FRLPP) state.
11. A system for password-protected physical transfer of password-protected devices according to claim 1 and wherein said at least one security file comprises a plurality of security files which are adapted to be accessed in a predetermined sequence.
12. A system for password-protected physical transfer of password-protected devices according to claim 11 and wherein personnel at said shipping location, using said at least one shipping location password, perform security-sensitive operations on said at least one password-protected device and load said plurality of security files onto said at least one password-protected device, when said at least one password-protected device is in a shipping location password protected (SLPP) state.
13. A system for password-protected physical transfer of password-protected devices according to claim 11 and wherein personnel at said shipping location, using said at least one shipping location password, load said plurality of security files into said at least one password-protected device and cause said shipping location password to become expired whereby said at least one password-protected device is in a password-protected, password-inaccessible (PPPI) state, wherein it can no longer be accessed by using said shipping location password and cannot be accessed until said at least one receiving location password is implemented.
14. A system for password-protected physical transfer of password-protected devices according to claim 13 and wherein at said receiving location said at least one password-protected device compares a string created at said receiving location using said at least one secure code with said encrypted element, thereby to enable implementation of said at least one receiving location password.
15. A system for password-protected physical transfer of password-protected devices according to claim 14 and wherein personnel at said receiving location, using at least one receiving location password, perform security-sensitive operations on said at least one password-protected device when said at least one password-protected device is in a first receiving location password protected (FRLPP) state.
16. A system for password-protected physical transfer of password-protected devices according to claim 15 and wherein personnel at a second receiving location, using at least one second receiving location password, perform security-sensitive operations on said at least one password-protected device when said at least one password-protected device is in a second receiving location password protected (SRLPP) state.