Systems and methods for removing point of sale processing from PCI scope
The methods and systems described herein provide for processing payments via a mobile device at a retail location while relying solely on non-PCI Scope information at the retail location. A payment processing transaction may be initiated at a point of sale at a retail location, and a unique identifier provided by a mobile device may be used as payment information to facilitate the processing of a payment transaction. Authorizations of payment processing transactions are made by a remotely located server based, at least in part, on the unique identifier provided by the mobile device.
1. A method for processing payment transactions at retail locations, the method comprising:
initiating, by a computing device at a retail location, a payment card based payment transaction;
receiving, by the computing device at the retail location, a unique identifier for a customer wirelessly via a mobile device, wherein the unique identifier is not information stored on the payment card;
determining, by a remotely located payment processing server, that the payment card based payment transaction is authorized based at least in part on the unique identifier for the customer;
isolating, by the computing device at the retail location, a communication port of the computing device designated for communication with electronic devices at the retail location to secure the unique identifier for the customer; and
receiving, by the computing device at the retail location, an authorization for the payment card based payment transaction from the remotely located payment processing server,
the payment card based payment transaction processed without relying, at the retail location, on information stored on the payment card.
2. The method of claim 1 , further comprising:
determining, at the retail location, that the authorization for the payment card based payment transaction is associated with a particular point of sale lane of a plurality of point of sale lanes at the retail location.
3. The method of claim 2 , further comprising:
sending the authorization to the particular point of sale lane associated with the payment card based payment transaction.
4. The method of claim 1 , wherein the unique identifier for the customer is associated with a customer loyalty program.
5. The method of claim 4 , further comprising:
applying customer loyalty program information to the payment card based payment transaction based, at least in part, on the unique identifier for the customer.
6. A computing device for processing payments at retail locations, the computing device comprising:
at least one processor; and
a memory communicatively coupled to the at least one processor and storing computer-executable instructions, the computer-executable instructions, when executed by the at least one processor, cause the secured electronic device to:
initiate, at a retail location, a payment card based payment transaction;
receive a unique identifier for a customer wirelessly from a mobile device, the unique identifier for the customer is not information stored on the payment card;
isolate a communication port of the computing device designated for communication with electronic devices at the retail location to secure the unique identifier for the customer; and
receive an authorization for the payment card based payment transaction from a remotely located payment processing server, the authorization determined by said remotely located payment processing server based, at least in part, on the unique identifier for the customer,
the payment transaction processed without relying, at the retail location, on information stored on the payment card.
7. The computing device of claim 6 , wherein the authorization for the payment card based payment transaction is associated with a particular point of sale lane of a plurality of point of sale lanes at the retail location.
8. The computing device of claim 7 , wherein the authorization is sent to the particular point of sale lane associated with the payment card based payment transaction.
9. The computing device of claim 7 , wherein the unique identifier for the customer is associated with a customer loyalty program.
10. The method of claim 9 , wherein customer loyalty program information is applied to the payment card based payment transaction based, at least in part, on the unique identifier for the customer.
11. A non-transitory computer-readable storage medium with computer readable instructions stored thereon, the computer readable instructions, when executed by one or more computing devices, cause the one or more computing devices to perform a method for processing a payment transaction, the method comprising:
initiating, by a computing device at a retail location, a payment card based payment transaction;
receiving, by the computing device at the retail location, a unique identifier for a customer wirelessly via a mobile device, the unique identifier for the customer is not information stored on the payment card;
determining, by a remotely located payment processing server, that the payment card based payment transaction is authorized based at least in part on the unique identifier for the customer;
isolating, by the computing device at the retail location, a communication port of the computing device designated for communication with electronic devices at the retail location to secure the unique identifier for the customer; and
receiving, by the computing device at the retail location, an authorization for the payment card based payment transaction from the remotely located payment processing server,
the payment transaction processed without relying, at the retail location, on information stored on the payment card.
12. The non-transitory computer-readable storage medium of claim 11 , wherein the computer readable instructions, when executed by the one or more computing devices, further cause the one or more computing devices to perform a method further comprising:
determining, at the retail location, that the authorization for the payment card based payment transaction is associated with a particular point of sale lane of a plurality of point of sale lanes at the retail location.
13. The non-transitory computer-readable storage medium of claim 12 , wherein the computer readable instructions, when executed by the one or more computing devices, further cause the one or more computing devices to perform a method further comprising:
sending the authorization to the particular point of sale lane associated with the payment card based payment transaction.
14. The non-transitory computer-readable storage medium of claim 11 , wherein the unique identifier for the customer is associated with a customer loyalty program.
15. The non-transitory computer-readable storage medium of claim 11 , wherein the computer readable instructions, when executed by the one or more computing devices, further cause the one or more computing devices to perform a method further comprising:
applying customer loyalty program information to the payment card based payment transaction based, at least in part, on the unique identifier for the customer.