Touchless payments at point-of-sale terminals
In some implementations, a method of providing contactless payments at a point of sale terminal includes: causing a point-of-sale terminal processing a transaction to display a machine-readable code, the machine-readable code encoding a web address; receiving a request from a device that scanned the machine-readable code, the request received at the web address; in response to receiving the request, causing the device that scanned the machine-readable code to output an interface that includes a prompt for input required to complete the transaction; receiving a response to the prompt; and sending an indication of the response to the prompt to the point-of-sale terminal to allow for completion of the transaction based on the response at the point-of-sale terminal through use of a physical token at the point-of-sale terminal.
1. A server comprising:
a communications module;
a processor coupled with the communications module; and
a memory coupled to the processor and storing processor-executable instructions which, when executed by the processor, configure the server to:
receive, from a point-of-sale terminal processing a transaction, an indication of an amount of the transaction;
determine, based on the amount of the transaction, that touchless payment is available; and
in response to determining that touchless payment is available, enable use of a customer device for obtaining input of an optional amount to be added to the transaction to be processed using a physical token at the point-of-sale terminal by causing the point-of-sale terminal to display a machine-readable code.
2. The server of claim 1 , wherein the machine-readable code encodes a web address.
3. The server of claim 2 , wherein the machine-readable code encodes the amount of a transaction.
4. The server of claim 2 , wherein the machine-readable code encodes a transaction identifier.
5. The server of claim 2 , wherein the machine-readable code encodes a hash and a digital signature used for verification.
6. The server of claim 5 , wherein the machine-readable code further encodes random data used to verify that a replay attack has not occurred.
7. The server of claim 1 , wherein the instructions further configure the server to:
receive, from a point-of-sale terminal processing a further transaction, a further indication of an amount of the further transaction;
determine, based on the amount of the further transaction, that touchless payment is not available; and
in response to determining that touchless payment is not available, disable use of a customer device for obtaining input of an optional amount to be added to the further transaction.
8. The server of claim 7 , wherein disabling use of the customer device for obtaining input of the optional amount to be added to the further transaction includes preventing the point-of-sale terminal from displaying a machine readable code that encodes a web address.
9. The server of claim 1 , wherein the physical token includes one or more of: a payment card and a mobile device having a representation of a payment card stored thereon.
10. The server of claim 1 , wherein the instructions further configure the server to:
receive, from the point-of-sale terminal, a request for the input and wherein the server sends an indication of the input to the point-of-sale terminal in response to receiving the request for the input.
11. A method comprising:
receiving, from a point-of-sale terminal processing a transaction, an indication of an amount of the transaction;
determining, based on the amount of the transaction, that touchless payment is available; and
in response to determining that touchless payment is available, enable use of a customer device for obtaining input of an optional amount to be added to the transaction to be processed using a physical token at the point-of-sale terminal by causing the point-of-sale terminal to display a machine-readable code.
12. The method of claim 11 , wherein the machine-readable code encodes a web address.
13. The method of claim 12 , wherein the machine-readable code encodes the amount of the transaction.
14. The method of claim 12 , wherein the machine-readable code encodes a transaction identifier.
15. The method of claim 12 , wherein the machine-readable code encodes a hash and a digital signature used for verification.
16. The method of claim 15 , wherein the machine-readable code further encodes random data used to verify that a replay attack has not occurred.
17. Method of claim 12 , further comprising:
receiving, from a point-of-sale terminal processing a further transaction, a further indication of an amount of the further transaction;
determining, based on the amount of the further transaction, that touchless payment is not available; and
in response to determining that touchless payment is not available, disable use of a customer device for obtaining input of an optional amount to be added to the further transaction.
18. The method of claim 17 , wherein disabling use of the customer device for obtaining input of the optional amount to be added to the further transaction includes preventing the point-of-sale terminal from displaying a machine readable code that encodes a web address.
19. The method of claim 12 , wherein the physical token includes one or more of: a payment card and a mobile device having a representation of a payment card stored thereon.
20. A non-transitory computer-readable storage medium comprising processor-executable instructions which, when executed, configure a processor to:
receive, from a point-of-sale terminal processing a transaction, an indication of an amount of the transaction;
determine, based on the amount of the transaction, that touchless payment is available; and
in response to determining that touchless payment is available, enable use of a customer device for obtaining input of an optional amount to be added to the transaction to be processed using a physical token at the point-of-sale terminal by causing the point-of-sale terminal to display a machine-readable code.