APPARATUS AND RELATED METHOD FOR DEVICE COMMUNICATION MANAGEMENT FOR TRANSMISSION OF SENSITIVE DATA
An apparatus and related method are provided for managing of peripheral devices and communication of sensitive data, such as, payment transactions in a manner that satisfies security concerns while minimizing maintenance of sensitive data by point-of-sale providers, which can be achieved by reducing or eliminating direct connections from internal networks to workstations and devices, and using a dedicated secure communications link for updates and processing of all sensitive data. In this manner, the system and related method reduces risk of system compromise and maintenance overhead.
1 . A device communication management (DCM) apparatus, comprising:
a first communication port in operative communication with a workstation;
a second communication port in operative communication with a peripheral device;
a network communication port in operative communication with a remote server;
a controller in operative communication with the first communication port, the second communication port, and the network communication port; and
a non-transitory storage medium in operative communication with the controller and containing a set of instructions, the set of instructions causing the controller to perform the following:
receive an electronic transaction request through any of the first communication port, second communication port, or network communication port;
in response to receiving the electronic transaction request, format a data capture request;
transmit the data capture request through the second communication port;
receive transaction data through the second communication port;
isolate the transaction data within the non-transitory storage medium such that the transaction data is inaccessible through the first communication port;
encrypt a transaction processing request in which the transaction processing request is based on the received data;
transmit the encrypted transaction processing request through the network communication port;
receive a reply to the transaction processing request; and
transmit a processing status message through the first communication port and/or the second communication port.
2 . The DCM apparatus as defined in claim 1 , further comprising a housing that retains the first communication port, the second communication port, the network communication port, the controller, and the non-transitory storage medium.
3 . (canceled)
4 . The DCM apparatus as defined in claim 1 , wherein the non-transitory storage medium containing a second set of instructions, the second set of instructions causing the controller perform the following:
receive an update file through the network communication port from a remote server;
in response to receiving the update file, format an update message for either the peripheral device or the workstation;
transmit the update message to the workstation through the first communication port or to the peripheral device through the second communication port;
receive an acknowledgement from the workstation through either the first communication port or from the peripheral device through the second communication port;
format and encrypt a confirmation message;
transmit the encrypted confirmation message through the network communication port to the remote server; and
receive an acknowledgement response through the network communication port from the remote server.
5 . The DCM apparatus as defined in claim 4 , wherein the second set of instructions require that the update message contains an executable code file and/or configuration data, prior to formatting the update message or transmitting the update message.
6 . The DCM apparatus as defined in claim 4 , wherein the second set of instructions require that the update file is encrypted, from which the update message contains data for authentication.
7 . A method of managing device communications for payment transaction, comprising:
receiving an electronic transaction request through a first communication port of a device communication management (DCM) apparatus;
in response to receiving the electronic transaction request, formatting a transaction data capture request;
transmitting the transaction data capture request through a second communication port of the DCM apparatus;
receiving transaction data through the second communication port;
isolating the transaction data such that the transaction data is inaccessible through the first communication port;
encrypting a transaction authorization request based on the transaction data;
transmitting the encrypted transaction authorization request through a network communication port of the DCM apparatus; and
in response to receiving a reply to the transaction authorization request, transmitting a transaction status message through the first communication port.
8 . The method as defined in claim 7 , wherein the transaction data capture request is transmitted to the point-of-sale device through the second communication port.
9 . The method as defined in claim 7 , wherein the transaction data is received from a peripheral device through the second communication port.
10 . The method as defined in claim 7 , wherein:
the first communication port is in operative communication with a workstation;
the second communication port is in operative communication with a peripheral device; and
the network communication port is in operative communication with a remote server.
11 . The method as defined in claim 7 , further-comprising:
receiving an update file through the network communication port from a remote server;
in response to receiving the update file, formatting an update message for a workstation or peripheral device communicatively connected either through the first communication port or the second communication port;
transmitting the update message to the workstation or peripheral device through either the first communication port or the second communication port, to which the workstation or peripheral device is connected;
receiving an acknowledgement from the workstation or peripheral device through either the first communication port or the second communication port, to which the workstation or peripheral device is connected;
formatting and encrypting a confirmation message;
transmitting the encrypted confirmation message through the network communication port to the remote server; and
receive an acknowledgement response through the network communication port from the remote server.
12 . The method as defined in claim 11 , wherein the update message must contain an executable code file and/or configuration data, prior to formatting the update message or transmitting the update message.
13 - 17 . (canceled)