Patent Application

App. No. 14/807,138

Abstract

Claims (53)

1 . An apparatus, comprising:

a contactless interface;

a second interface; and

a processor coupled with the contactless interface and the second interface;

wherein the processor is operable to receive data representative of a personal identification number (“PIN”) encrypted by a first key via the contactless interface;

wherein the processor is operable to decrypt the data representative of the PIN with a first decryption key;

wherein the processor is operable to encrypt the data representative of the PIN with a second encryption key; and

wherein the data representative of the PIN encrypted by the second key is transmitted on the second interface.

2 . The apparatus set forth in claim 1 , wherein the contactless interface is a near field communication interface.

3 . The apparatus set forth in claim 1 , wherein the contactless interface is a WIFI interface.

4 . The apparatus set forth in claim 1 , wherein the contactless interface is a BLUETOOTH interface.

5 . The apparatus set forth in claim 1 , wherein the first encryption key is a session key established with a device in data communication with the contactless interface.

6 . The apparatus set forth in claim 5 , wherein the first decryption key is the session key.

7 . The apparatus set forth in claim 5 , wherein the first decryption key is a private key corresponding to the session key.

8 . The apparatus set forth in claim 5 , wherein the processor is operable to receive a challenge from the device in data communication with the contactless interface;

wherein the processor is operable to respond to the challenge, the response to the challenge is signed by a public key associated with the contactless interface; and

wherein the processor is operable to send the signed challenge to the device associated with the contactless interface via the contactless interface.

9 . The apparatus set forth in claim 8 , wherein the processor is operable to generate a second challenge;

wherein the processor is operable to send the second challenge to the device in data communication with the contactless interface via the contactless interface;

wherein the processor is operable to receive a response to the second challenge via the contactless interface; and

wherein the processor is operable to verify the challenge with a public key associated with the device in data communication with the contactless interface.

10 . The apparatus set forth in claim 1 , wherein the processor is operable to detect a device in data communication with the contactless interface; and

wherein a customer present event is sent to a controller in data communication with the second interface responsive to detecting the device in data communication with the contactless interface.

11 . The apparatus set forth in claim 1 , further comprising the processor is operable to receive a PIN block request from a controller in data communication with the second interface.

12 . The apparatus set forth in claim 11 , wherein data representative of the PIN encrypted by the second key is sent in a PIN block to the controller in response to the PIN block request.

13 . The apparatus set forth in claim 12 , wherein the PIN block further comprises data representative of a personal account number.

14 . A tangible, non-transitory computer readable medium of execution with instructions for execution by a processor encoded thereon, and when executed operable to:

detect a contactless device in data communication with a contactless interface;

send a customer present event to a controller coupled with a second interface;

receive a personal identification number (“PIN”) block request from the controller;

receive a challenge from the contactless device via the contactless interface;

send a response to the challenge signed with a public key associated with the contactless device to the contactless device;

receive data representative of a session key;

receive data representative of a PIN from the contactless device;

receive data representative of a personal account number (“PAN”) from the contactless device;

decrypt the data representative of the session key;

decrypt the data representative of the PIN;

decrypt the data representative of the PAN;

send a response to the PIN block request, the response to the PIN block request comprises the data representative of the PIN and data representative of a PAN encrypted by a key established with the controller;

receive data representative of a transaction encrypted by the session key;

decrypt the data representative of a transaction;

encrypt the data representative of a transaction with the key established with the controller ; and

forward the data representative of the transaction encrypted by the key established with the controller to the controller.

15 . The computer readable medium of claim 14 , wherein the contactless interface is a near field communication interface.

16 . The computer readable medium of claim 14 , wherein the response to the PIN block request further comprises data representative of a transaction.

17 . The computer readable medium of claim 14 , wherein the instructions are further operable to send a challenge to the contactless device.

18 . The computer readable medium of claim 17 , wherein the instructions are further operable to receive a response to the challenge from the contactless device.

19 . The computer readable medium of claim 17 , wherein the instructions are further operable to validate the response to the challenge from the contactless device.

20 . A method, comprising:

receiving a personal identification number (PIN) via a contactless interface;

decrypting the PIN with a first key;

encrypting the PIN with a second key; and

forwarding the PIN encrypted with the second key onto a second interface.

Assignments (11)