Techniques for processing pin-inclusive transactions in connection with an electronic device
View Patent ↗Certain exemplary embodiments relate to techniques for processing PIN-inclusive transactions in connection with an electronic device or terminal, e.g., where PIN code encryption keys are not necessarily stored on the electronic device or terminal, and/or where payment instrument data is maintained in a separate system from PIN code data at least until certain elements are combined in a highly secure system for submission to an electronic funds transfer network. One or more separate or physically separated systems may be used in this regard, e.g., taking advantage of more prevalent computer networks such as the Internet. Similarly, the ability to provide less expensive terminals or electronic devices at a point-of-sale, point-of-purchase, etc., may be advantageous. The interchange rate is not necessarily driven up in certain example instances.
1. A system for securely processing payments, comprising:
first and second separate and/or physically separated computer systems, each of the first and second computer systems being configured to electronically communicate with an electronic device used in processing a PIN-related debit transaction, the transaction having an associated transaction identifier and the electronic device having an associated device identifier;
wherein the first computer system is configured to at least:
receive encrypted payment instrument information from the electronic device for the transaction,
decrypt the received encrypted payment instrument information;
electronically transmit to the second computer system the decrypted payment instrument information, the identifier of the electronic device, and the transaction identifier, and
electronically instruct, the electronic device to request a PIN scrambling key from the second computer system; and
wherein the second computer system is configured to at least:
generate and transmit, to the electronic device a PIN scrambling key in response to a request being received at the second computer system from the electronic device,
receive a scrambled PIN code from the electronic device
descramble and encrypt the received scrambled PIN code, and
electronically transmit to an electronic fund transfer network the payment instrument information received from the first computer system and the descrambled and encrypted PIN code.
2. The system of claim 1 , wherein the first and second computer systems are separate form one another.
3. The system of claim 1 , further comprising at least one firewall physically separating the first and second computer systems.
4. The system of claim 1 , wherein the encrypted payment instrument information is received at the first computer system from the electronic device over the Internet.
5. The system of claim 1 , wherein the first computer system is further configured to determine that a payment instrument associated with the payment instrument information is a debit instrument for which a PIN code is required.
6. The system of claim 1 , wherein the second computer system is further configured to send a message from the electronic fund transfer network to the electronic device using the second computer system, the message confirming acceptance of payment.
7. The system of claim 6 , wherein the second computer system is further configured to send a message from the electronic fund transfer network to the electronic device using the second computer system by way of the first computer system.
8. The system of claim 1 , wherein the first computer system is further configured to mask at least some of the payment instrument information.
9. The system of claim 8 , wherein the first computer system is further configured to mask at least some of the payment instrument information by deleting at least some payment instrument information prior to its transmission to the second computer system.
10. A method for securely processing payments in connection with first and second separate and/or physically separated computer systems, each of the first and second computer systems including at least one respective computer processor and being configured to electronically communicate with an electronic device used in processing a PIN-related debit transaction, the transaction having an associated transaction identifier and the electronic device having an associated device identifier, the method comprising:
at the first computer system:
receiving encrypted payment instrument information from the electronic device for the transaction;
decrypting the received encrypted payment instrument information;
electronically transmitting to the second computer system the decrypted payment instrument information, the identifier of the electronic device, and the transaction identifier; and
electronically instructing, the electronic device to request a PIN scrambling key from the second computer system; and
at the second computer system:
generating and transmitting, to the electronic device a PIN scrambling key in response to a request being received at the second computer system from the electronic device;
receiving a scrambled PIN code from the electronic device
descrambling and encrypting the received scrambled PIN code; and
electronically transmitting to an electronic fund transfer network the payment instrument information received from the first computer system and the descrambled and encrypted PIN code.
11. The method of claim 10 , wherein at least one firewall physically separates the first and second computer systems.
12. The method of claim 10 , further comprising at the first computer system, receiving the encrypted payment instrument information from the electronic device over the Internet.
13. The method of claim 10 , further comprising determining, at the first computer system, that a payment instrument associated with the payment instrument information is a debit instrument for which a PIN code is required.
14. The method of claim 10 , further comprising relaying, through the second computer system, a message from the electronic fund transfer network to the electronic device using the second computer system, the message confirming acceptance of payment.
15. The method of claim 10 , wherein unencrypted payment instrument information and unencrypted PIN code information is not stored together on any of the first computer system, second computer system, or electronic device.
16. The method of claim 10 , wherein secure processing of the PIN-related debit transaction via the first and second computer systems does not drive up the interchange rate.