Multi-use near field communication front end on a point of sale system
Methods and systems related to near field communication (NFC) front ends for point of sale terminals are disclosed. One point of sale system includes an applications microprocessor programmed to: (i) instantiate an operating system for the point of sale system and (ii) generate a set of data packets. The system also includes a discrete microcontroller communicatively coupled with the applications microprocessor and programmed to: (i) selectively operate in an unsecure mode and a secure mode; and (ii) filter, when operating in the unsecure mode, the set of data packets received from the applications microprocessor using a filter and a whitelist for the filter. The system also includes a near field communication front end communicatively coupled to the discrete microcontroller and an antenna, for transmitting a near field communication signal based on information from the set of data packets via the antenna.
1. A point of sale device that selectively operates in an unsecure mode of operation and a secure mode of operation, the point of sale device comprising:
an applications microprocessor programmed to generate a set of data packets;
a secure microprocessor communicatively coupled with the applications microprocessor and configured to instantiate a filter, the secure microprocessor covered by a tamper mesh, wherein the filter is configured to (i) filter the set of data packets from the applications microprocessor when operating in the unsecure mode, such that data packets identified as related to payment device communications are prevented from reaching a near field communication front end of the point of sale device, and (ii) allow a subset of the data packets filtered by the filter to pass through based on a whitelist for the filter, wherein the subset of data packets were filtered by the filter in a false-positive filtering event; and
the near field communication front end communicatively coupled with (i) the secure microprocessor, and (ii) an antenna of the point of sale device for transmitting a near field communication signal via the antenna, wherein the near field communication signal is based on information from the subset of data packets,
wherein the unsecure mode is to communicate with a device having non-payment related information and the secure mode is to communicate with a device having payment related information.
2. The point of sale device of claim 1 , wherein the whitelist is based, at least in part, on a first list of ISO/IEC 7816 registered application identifier suffixes and wherein the filter is based, at least in part, on a second list of ISO/IEC 7816 registered application identifier prefixes.
3. The point of sale device of claim 1 , wherein the applications microprocessor selectively instantiates a first software stack for a first near field communication protocol and a second software stack for a second near field communication protocol.
4. The point of sale device of claim 3 , wherein the first near field communication protocol is a tag read/write protocol, and wherein the second near field communication protocol is a payment processing protocol.
5. The point of sale device of claim 1 , wherein the near field communication front end is programmed to digitize an incoming near field communications signal received on the antenna to produce a digitized near field communication signal, wherein the digitized near field communication signal is processed by the secure microprocessor in the secure mode, and wherein the secure microprocessor passes the digitized near field communication signal through to the applications microprocessor in the unsecure mode.
6. The point of sale device of claim 1 , wherein packets from the set of data packets generated by the applications microprocessor that are not filtered are delivered to the near field communication front end to allow the near field communication front end to produce the near field communication signal based on the information in the packets, and wherein packets from the set of data packets generated by the applications microprocessor that are filtered are not delivered to the near field communication front end for generation of the near field communication signal.
7. The point of sale device of claim 1 , wherein the near field communication front end is communicatively coupled with the secure microprocessor via a trace on a printed circuit board, wherein the applications microprocessor and the secure microprocessor are discrete devices on the printed circuit board.
8. A method for operating a point of sale device, the method comprising:
switching the point of sale device between an unsecure mode and a secure mode, wherein the unsecure mode is to communicate with a device having non-payment related information and the secure mode is to communicate with a device having payment related information;
generating a set of data packets using an applications microprocessor of the point of sale device;
filtering the set of data packets using a filter when operating in the unsecure mode such that data packets identified as related to payment device communications are prevented from reaching a near field communication front end of the point of sale device, wherein a secure microprocessor of the point of sale device communicatively coupled with the applications microprocessor of the point of sale device is configured to instantiate the filter, the secure microprocessor covered by a tamper mesh, and wherein the filter is configured to allow a subset of data packets filtered by the filter to pass through based on a whitelist for the filter when operating in the unsecure mode, wherein the subset of data packets were filtered by the filter in a false-positive filtering event;
generating a near field communication signal using a near field communication front end of the point of sale device coupled with (i) the secure microprocessor and (ii) an antenna of the point of sale device; and
transmitting the near field communication signal using the antenna, wherein the near field communication signal is based on information from the subset of data packets.
9. The method of claim 8 , wherein the whitelist is based, at least in part, on a first list of ISO/IEC 7816 registered application identifier suffixes, and wherein the filter is based, at least in part, on a second list of ISO/IEC 7816 registered application identifier prefixes.
10. The method of claim 8 , wherein the applications microprocessor selectively instantiates a first software stack for a first near field communication protocol and a second software stack for a second near field communication protocol.
11. The method of claim 10 , wherein the first near field communication protocol is a tag read/write protocol, and wherein the second near field communication protocol is a payment processing protocol.
12. The method of claim 8 , wherein the near field communication front end is programmed to digitize an incoming near field communications signal received on the antenna to produce a digitized near field communication signal, wherein the digitized near field communication signal is processed by the secure microprocessor in the secure mode, and wherein the secure microprocessor passes the digitized near field communication signal through to the applications microprocessor in the unsecure mode.
13. The method of claim 8 , wherein packets from the set of data packets generated by the applications microprocessor that are not filtered are delivered to the near field communication front end to allow the near field communication front end to produce the near field communication signal based on the information in the packets, and wherein packets from the set of data packets generated by the applications microprocessor that are filtered are not delivered to the near field communication front end for generation of the near field communication signal.
14. The method of claim 8 , wherein the near field communication front end is communicatively coupled with the secure microprocessor via a trace on a printed circuit board, wherein the applications microprocessor and the secure microprocessor are discrete devices on the printed circuit board.
15. A non-transitory computer-readable media comprising computer-readable instructions stored thereon that when executed by one or more processors of a point of sale device that selectively operates in an unsecure mode and a secure mode causes the one or more processors to:
generate a set of data packets using an applications microprocessor of the point of sale device;
filter the set of data packets using a filter when operating in the unsecure mode such that data packets identified as related to payment device communications are prevented from reaching a near field communication front end of the point of sale device, wherein a secure microprocessor of the point of sale device communicatively coupled with the applications microprocessor is configured to instantiate the filter, the secure microprocessor covered by a tamper mesh, and wherein the filter is configured to allow a subset of data packets filtered by the filter to pass through based on a whitelist for the filter, wherein the subset of data packets were filtered by the filter in a false-positive filtering event;
generate a near field communication signal using a near field communication front end coupled with (i) the secure microprocessor and (ii) an antenna of the point of sale device; and
transmit the near field communication signal using the antenna, wherein the near field communication signal is based on information from the subset of data packets,
wherein the unsecure mode is to communicate with a device having non-payment related information and the secure mode is to communicate with a device having payment related information.
16. The non-transitory computer-readable media of claim 15 , wherein the whitelist is based, at least in part, on a first list of ISO/IEC 7816 registered application identifier suffixes, and wherein the filter is based, at least in part, on a second list of ISO/IEC 7816 registered application identifier prefixes.
17. The non-transitory computer-readable media of claim 15 , wherein the applications microprocessor selectively instantiates a first software stack for a first near field communication protocol and a second software stack for a second near field communication protocol.
18. The non-transitory computer-readable media of claim 17 , wherein the first near field communication protocol is a tag read/write protocol, and wherein the second near field communication protocol is a payment processing protocol.
19. The non-transitory computer-readable media of claim 15 , wherein the near field communication front end is programmed to digitize an incoming near field communications signal received on the antenna to produce a digitized near field communication signal, wherein the digitized near field communication signal is processed by the secure microprocessor in the secure mode, and wherein the secure microprocessor passes the digitized near field communication signal through to the applications microprocessor in the unsecure mode.
20. The non-transitory computer-readable media of claim 15 , wherein packets from the set of data packets generated by the applications microprocessor that are not filtered are delivered to the near field communication front end to allow the near field communication front end to produce the near field communication signal based on the information in the packets, and wherein packets from the set of data packets generated by the applications microprocessor that are filtered are not delivered to the near field communication front end for generation of the near field communication signal.
21. The non-transitory computer-readable media of claim 15 , wherein the near field communication front end is communicatively coupled with the secure microprocessor via a trace on a printed circuit board, wherein the applications microprocessor and the secure microprocessor are discrete devices on the printed circuit board.