Securing personal identification number (PIN) entry on a transaction terminal
A Personal Identification Number (PIN) pad includes a secure processor and is operated in two modes: 1) a secure mode during which key data associated with depressed keys are encrypted by the secure processor and provided to a transaction manager that executes on a processor of a transaction terminal in encrypted format, and 2) a non-secure mode during which key data associated with depressed keys are not encrypted and are received by the transaction manager in a clear format. The transaction manager activates the secure mode based on transaction processing for a transaction at the terminal. When secure mode is activated, the secure processor causes one or more integrated lights/speakers of the PIN pad and/or of other integrated peripherals of the terminal to illuminate or play a sound, providing an indication to a user that key entry is secure and safe for entry on the PIN pad during the transaction.
1. A method, comprising:
responsive to transaction processing of a transaction, placing a keypad into a secure mode of operation during which pressed keys of the keypad are encrypted by a secure processor of the keypad; and
causing by the secure processor one or more visual or audio effects that provide an indication for safe entry of any user-pressed keys on the keypad during the secure mode of operation, wherein causing further includes:
providing, the secure processor, an encrypted code that is specific to the transaction to one or more integrated peripheral devices of a transaction terminal that is processing the transaction, at least one integrated peripheral decrypts the encrypted code, validates a decrypted code against the transaction, and responsive thereto illuminates a light integrated into a housing and fascia of that integrated peripheral.
2. The method of claim 1 , wherein placing further includes sending, by executable instructions that execute from a non-transitory computer-readable medium on a second processor of a transaction terminal, an instruction to the keypad to activate the secure processor on the keypad for the secure mode of operation.
3. The method of claim 1 further comprising, processing the executable instructions within a web browser of the transaction terminal and providing a transaction interface to a user through the web browser for conducting the transaction.
4. The method of claim 1 , wherein causing further includes illuminating, by the secure processor of the keypad, a light integrated into a housing of the keypad and in a fascia of the housing.
5. The method of claim 4 , wherein illuminating further includes keeping the light illuminated until the secure processor is deactivated during the transaction.
6. The method of claim 1 , wherein causing further includes, playing, by the secure processor of the keypad, an audible sound over a speaker integrated into a housing of the keypad.
7. The method of claim 6 , wherein playing further includes repeating the playing for the audible sound over the speaker until the secure processor is deactivated during the transaction.
8. The method of claim 1 , wherein providing further include broadcasting, by executable instructions that execute on a processor of the transaction terminal from a non-transitory medium, the encrypted code to the one or more integrated peripherals when received from the secure processor.
9. The method of claim 1 , wherein causing further includes illuminating, by the secure processor, a light controlled by firmware executed by the secure processor on the keypad as a first visual effect during the secure mode of operation.
10. A method, comprising:
responsive to transaction processing of a transaction, placing a keypad into a secure mode of operation during which pressed keys of the keypad are encrypted by a secure processor of the keypad; and
causing by the secure processor one or more visual or audio effects that provide an indication for safe entry of any user-pressed keys on the keypad during the secure mode of operation, wherein causing further includes:
providing, by the secure processor, a code to a transaction terminal that processes the transaction, wherein the transaction terminal sends the code to an integrated peripheral and the integrated peripheral in response to validating the code illuminates a second light controlled by firmware executed on a processor of that integrated peripheral as a second visual effect during the secure mode of operation.
11. The method of claim 10 , wherein causing further includes maintaining the visual or the audio effects until the transaction processing indicates a non-secure mode of operation for the keypad for which the secure processor is deactivated.
12. A method, comprising:
sending, by a first set of executable instructions that execute on a first processor from a non-transitory computer-readable storage medium of a transaction terminal, a secure mode instruction to an encrypted Personal Identification Number (PIN) pad;
activating, by the PIN pad, a secure processor on the encrypted PIN pad for a secure mode of operation with the transaction terminal;
maintaining, by the secure processor, illumination of a light that is integrated into a housing and fascia of the encrypted PIN pad while the secure processor remains activated in the secure mode of operation; and
playing, by the secure processor, an audible sound over a speaker that is integrated into the housing and the fascia of the encrypted PIN pad while the secure processor remains activated in the secure mode of operation.
13. The method of claim 12 further comprising:
sending, by the secure processor, encrypted key data representing encrypted key values for keys pressed during the secure mode of operation to the executable instructions for a transaction being conducted on the transaction terminal; and
deactivating, by the secure processor, the light.
14. The method of claim 13 further comprising:
deactivating, by the encrypted PIN pad the secure processor; and
processing, by the executable instructions, the transaction on the transaction terminal in a non-secure mode of operation.
15. The method of claim 14 further comprising, receiving, by the executable instructions unencrypted key values from the encrypted PIN pad for other keys pressed during the transaction during the non-secure mode of operation.
16. The method of claim 12 , wherein sending further includes interacting, by the executable instructions, with a browser-based interface being executed on first processor within a browser and interacting, by the executable instructions with an encrypted PIN pad peripheral interface for the encrypted PIN pad.
17. A transaction terminal, comprising:
an encrypted Personal Identification Number (PIN) pad that includes a secure processor;
a non-secure processor configured to execute executable instructions from a non-transitory computer-readable storage medium;
at least one light integrated into a housing and fascia of the encrypted PIN pad and controlled by the secure processor;
the executable instructions when executed by the non-secure processor configured to perform processing to:
activate the secure processor for a secure mode of operation during a transaction on the transaction terminal;
process the transaction; and
deactivate the secure processor for the secure mode of operation; and
the secure processor when activated by the executable instructions for the secure mode of operation configured to:
maintain illumination of the at least one light while the secure processor remains activated in the secure mode of operation;
encrypt key values for keys pressed as encrypted key data;
provide the encrypted key data to the executable instructions as a portion of transaction input for the transaction;
play an audible sound over a speaker that is integrated into the housing and the fascia of the encrypted PIN pad while the secure processor remains activated in the secure mode of operation; and
turn off the at least one light after the encrypted key data is provided to the executable instructions.
18. The system of claim 17 , wherein the transaction terminal is one of: a Self-Service Terminal (SST), an Automated Teller Machine (ATM), a kiosk, and a Point-Of-Sale (POS) terminal.