Systems and methods for secure normative intermediation of payments processing peripherals
Systems and methods for secure virtualized intermediated configuration and control of payment processing peripheral devices, as may be embodied in a SNIPP system, are provided. Such systems and methods enable the request of purchaser payment information from payment processing peripheral device(s) on behalf of a POS system and the aggregation and association of that purchaser payment information with a corresponding purchase transaction received from the POS system. The purchase transaction and the payment transaction are aggregated and thereby associated; and the resulting aggregated payment transaction is submitted to an electronic payments processing facility that responds with a confirmation indicating ‘acceptance’ or ‘denial’ of the payment transaction. The confirmation is relayed to the POS system and possibly to the payment processing peripheral device(s) such that it may be displayed to the purchaser and/or an attendant.
1. In a point of sale (POS) terminal system comprising at least one POS processor, at least one payment processing peripheral device, and at least one secure POS processor, a method for secure configuration and control of payment processing peripheral devices, the method comprising:
identifying, by the at least one secure POS processor, the POS terminal system;
identifying, by the at least one secure POS processor, the at least one payment processing peripheral device associated with the POS terminal system;
receiving, by the at least one secure POS processor, a purchase transaction from the at least one POS processor via a first local communication channel, the purchase transaction including description of one or more transaction items selected by a user;
receiving, by the at least one secure POS processor, a security request from the at least one POS processor;
initiating, subsequent to receiving the security request, a restart of the at least one payment processing peripheral device, wherein the initiating the restart comprises:
transitioning the at least one payment processing peripheral device to a predetermined state; and
clearing, while the at least one payment processing peripheral device is in the predetermined state, any outstanding security requests;
requesting, by the at least one secure POS processor in response to the security request from the at least one POS processor and subsequent to the restart of the at least one payment processing peripheral device, at least one purchaser payment information from the at least one payment processing peripheral device on behalf of the POS terminal system, wherein the at least one purchaser payment information received from the at least one payment processing peripheral device is encrypted by the at least one payment processing peripheral device independent of and transparent to the at least one POS processor;
receiving, by the at least one secure POS processor, the at least one purchaser payment information from the at least one payment processing peripheral device via a second local communication channel, the second local communication channel being isolated from the first local communication channel and providing a tunneling network connection between the at least one secure POS processor and the at least one payment processing peripheral device;
aggregating and associating, by the at least one secure POS processor, the purchase transaction received from the at least one POS processor via the first local communication channel with the corresponding at least one purchaser payment information received from the at least one payment processing peripheral device via the second local communication channel that is isolated from the first local communication channel;
submitting, by the at least one secure POS processor, aggregated payment transaction including the purchase transaction and the at least one purchaser payment information to an electronic payment processing facility;
receiving, by the at least one secure POS processor, a confirmation response from the electronic payment processing facility reflecting approval or declination of the aggregated payment transaction;
relaying, by the at least one secure POS processor, the confirmation response to the at least one payment processing peripheral device; and
relaying, by the at least one secure POS processor, the confirmation response to the at least one POS processor.
2. The method of claim 1 , wherein the security request is received prior to receiving the corresponding purchase transaction from the at least one POS processor.
3. The method of claim 1 , wherein the security request is received via a virtualized interface, and conveys identification of the at least one payment processing peripheral device from which to request the at least one purchaser payment information on behalf of the POS terminal system.
4. The method of claim 3 , wherein the virtualized interface is normative such that normative virtualization supports a plurality of payment processing peripheral devices with dissimilar direct interfaces.
5. The method of claim 4 , wherein the virtualized interface mimics at least in part the direct interface of a payment processing peripheral device.
6. The method of claim 5 , wherein the mimicking virtualized interface is normative such that normative mimicking virtualization supports a plurality of payment processing peripheral devices having dissimilar direct interfaces.
7. The method of claim 1 , wherein the at least one purchaser payment information received from the at least one payment processing peripheral device is encrypted at the point of sale by an intermediate encrypting entity independent of and transparent to the at least one POS processor.
8. The method of claim 1 , wherein the encrypted at least one purchaser payment information received from the at least one payment processing peripheral device is decrypted.
9. The method of claim 1 , wherein the POS terminal system is part of a distributed enhanced payment (DEP) processing system.
10. The method of claim 1 , wherein a timer is operated in association with the requesting from the at least one payment processing peripheral device the at least one purchaser payment information, wherein a time-out of the timer prior to receiving the at least one purchaser payment information results in one of:
retrying the requesting from the at least one payment processing peripheral device the at least one purchaser payment information; and
ceasing the requesting from the at least one payment processing peripheral device the at least one purchaser payment information.
11. The method of claim 7 , wherein the intermediate-encrypted at least one purchaser payment information received from the at least one payment processing peripheral device is decrypted.
12. In a point of sale (POS) terminal system comprising at least one POS processor, at least one payment processing peripheral device, and at least one secure POS processor, a method for secure configuration and control of payment processing peripheral devices, the method comprising:
identifying, by the at least one secure POS processor, the POS terminal system;
identifying, by the at least one secure POS processor, the at least one payment processing peripheral device associated with the POS terminal system;
receiving, by the at least one secure POS processor, a purchase transaction from the at least one POS processor via a first local communication channel, wherein the purchase transaction is inferred to be a security request from the at least one POS processor;
initiating, subsequent to receiving the security request, a restart of the at least one payment processing peripheral device, wherein the initiating the restart comprises:
transitioning the at least one payment processing peripheral device to a predetermined state; and
clearing, while the at least one payment processing peripheral device is in the predetermined state, any outstanding security requests;
requesting, by the at least one secure POS processor in response to the inferred security request from the at least one POS processor and subsequent to the restart of the at least one payment processing peripheral device, the at least one purchaser payment information from the at least one payment processing peripheral device on behalf of the POS terminal system, wherein the at least one purchaser payment information received from the at least one payment processing peripheral device is encrypted by the at least one payment processing peripheral device independent of and transparent to the at least one POS processor;
receiving, by the at least one secure POS processor, the at least one purchaser payment information from the at least one payment processing peripheral device via a second local communication channel, the second local communication channel being isolated from the first local communication channel and providing a tunneling network connection between the at least one secure POS processor and the at least one payment processing peripheral device;
aggregating and associating, by the at least one secure POS processor, the purchase transaction received from the at least one POS processor via the first local communication channel with the corresponding at least one purchaser payment information received from the at least one payment processing peripheral device via the second local communication channel that is isolated from the first local communication channel;
submitting, by the at least one secure POS processor, aggregated payment transaction including the purchase transaction and the at least one purchaser payment information to an electronic payment processing facility;
receiving, by the at least one secure POS processor, a confirmation response from the electronic payment processing facility reflecting approval or declination of the aggregated payment transaction;
relaying, by the at least one secure POS processor, the confirmation response to the at least one payment processing peripheral device; and
relaying, by the at least one secure POS processor, the confirmation response to the at least one POS processor.
13. The method of claim 12 , wherein the purchase transaction including the inferred security request from the at least one POS processor is received via virtualized interface, and conveys identification of the at least one payment processing peripheral device from which to request the at least one purchaser payment information on behalf of the POS terminal system.
14. The method of claim 13 , wherein the virtualized interface is normative such that normative virtualization supports a plurality of payment processing peripheral devices with dissimilar direct interfaces.
15. The method of claim 14 , wherein the virtualized interface mimics at least in part the direct interface of a payment processing peripheral device.
16. The method of claim 15 , wherein the mimicking virtualized interface is normative such that normative mimicking virtualization supports a plurality of payment processing peripheral devices with dissimilar direct interfaces.
17. The method of claim 12 , wherein the purchaser payment information received from the at least one payment processing peripheral device is encrypted at the point of sale by an intermediate encrypting entity independent of and transparent to the at least one POS processor.
18. The method of claim 12 , wherein the encrypted at least one purchaser payment information received from the at least one payment processing peripheral device is decrypted.
19. The method of claim 12 , wherein the POS terminal system is part of a distributed enhanced payment (DEP) processing system.
20. The method of claim 12 , wherein a timer is operated in association with the requesting from the at least one payment processing peripheral device the at least one purchaser payment information, wherein a time-out of the timer prior to receiving the at least one purchaser payment information results in one of:
retrying the requesting from the at least one payment processing peripheral device the at least one purchaser payment information; and
ceasing the requesting from the at least one payment processing peripheral device the at least one purchaser payment information.
21. The method of claim 17 , wherein the intermediate-encrypted at least one purchaser payment information received from the at least one payment processing peripheral device is decrypted.