Payment processing system
The described payment processing system enables the implementation of a product purchase reward scheme. The system consists of an EFTPOS terminal, an optical scanner connected to the terminal, and a reward scheme server accessible through a wide area network. The EFTPOS terminal includes a memory device storing product data with IDs and prices, a scanning controller to determine the price from scanned IDs, a digital display with a user interface to show scanned products, a card reader and payment controller for financial transactions, and a server interface controller to transmit transaction data to the server. The reward scheme server contains a database with multiple reward rules associated with product IDs. A rule controller retrieves matching rules, determines reward amounts and provider IDs, and instructs the payment controller to initiate financial transactions accordingly.
1 . A payment processing system for implementing a product purchase reward payment, the system comprising:
an EFTPOS terminal;
an optical scanner in operable communication with the EFTPOS terminal using a scanning controller, wherein the EFTPOS terminal comprises:
a firewall configured to implement data protection;
an encryption module configured to encrypt cardholder data and encrypt transmission of cardholder data to a reward scheme server;
a memory device preprogrammed with product data comprising product IDs stored in relation to respective product prices, wherein the EFTPOS terminal is configured to store the product data locally in the memory device and use the scanning controller to ascertain the product price from a product ID scanned by the optical scanner using the locally stored product data, and wherein the firewall and encryption module are integrated within the EFTPOS terminal to secure both the locally stored product data and the transmission of transaction data to the reward scheme server;
a digital display and a user interface controller configured to display a plurality of scanned products on the digital display and wherein the EFTPOS terminal is configured to calculate a total amount of the plurality of scanned products;
a card reader and payment controller configured to read a PAN from a card for initiating a financial transaction for the total amount, wherein the payment controller is configured to generate and store a hash of the PAN using a one-way hashing algorithm, wherein the EFTPOS terminal is a PCI compliant standalone device, and wherein the one-way hashing algorithm avoids storage of the PAN by the reward scheme server, thereby maintaining PCI compliance of the EFTPOS terminal; and
a server interface controller configured to transmit transaction data to a reward scheme server, the transaction data comprising product IDs of the scanned products; and
a reward scheme server in operable communication with the EFTPOS terminal across a wide area network, wherein the reward scheme server comprises:
a database comprising a plurality of reward rules, each associated with an associated product ID;
a rule controller configured to:
retrieve at least one rule matching a product ID;
determine a reward amount associated with the rule;
determine a provider ID associated with the rule;
cause a payment controller to initiate at least one financial transaction according to the provider ID and the reward amount; and
store a transaction log comprising a transaction ID of the financial transaction and a hash of the PAN generated using the one-way hashing algorithm; and
a refund controller configured to:
receive the transaction ID from the EFTPOS terminal;
select the transaction from the transaction log using the transaction ID;
receive a further PAN obtained by the EFTPOS terminal from a payment card;
generate a further hash of the further PAN using the one-way hashing algorithm;
compare the hash stored in the transaction log and the further hash; and
upon the hash and the further hash matching, cause the payment controller to initiate at least one reversal financial transaction according to the reward amount using the further PAN.
2 . The system as claimed in claim 1 , wherein the EFTPOS terminal is PCI compliant.
3 . The system as claimed in claim 2 , wherein the EFTPOS terminal is configured to perform at least one of:
password protection;
access restriction to and encryption of cardholder data;
transmission encryption of cardholder data to the reward scheme server; and
creation of access logs.
4 . The system as claimed in claim 1 , wherein the transaction data further comprises other data, wherein at least one of the rules is associated with a criterion and wherein the rule controller is configured to further determine whether the other data fulfils the criterion.
5 . The system as claimed in claim 4 , wherein the other data comprises a merchant ID.
6 . The system as claimed in claim 4 , wherein the other data comprises a location and wherein the criterion specifies a region.
7 . The system as claimed in claim 4 , wherein the other data comprises a product price and wherein the criterion is a price threshold.
8 . The system as claimed in claim 4 , wherein the criterion is a time-of-day criterion.
9 . The system as claimed in claim 1 , wherein more than one rule is associated with a product ID.
10 . The system as claimed in claim 1 , wherein:
the EFTPOS terminal is configured to transmit the PAN to the reward program server with the transaction data;
the payment controller is further configured to store the PAN in the transaction log against the transaction ID; and
the refund controller is configured to select the PAN from the transaction log using the transaction ID.
11 . The system as claimed in claim 1 , wherein the EFTPOS terminal is configured to display options to either:
refund the transaction amount wherein the refund controller causes the payment controller to initiate a reversal financial transaction according to the transaction amount using the PAN; or
refund a partial transaction amount wherein the EFTPOS terminal transmits the partial transaction amount to the server and the refund controller causes the payment controller to initiate a reversal financial transaction according to the partial transaction amount using the PAN.
12 . The system as claimed in claim 1 , wherein the EFTPOS terminal is configured to display options to either:
refund the reward amount only wherein the refund controller causes the payment controller to initiate the at least one reversal financial transaction according to the reward amount using the PAN; or
refund a transaction amount and the reward amount wherein:
the refund controller determines the transaction amount using the transaction log and causes the payment controller to initiate a reversal financial transaction according to the transaction amount using the PAN; and
the refund controller causes the payment controller to initiate a reversal financial transaction according to the reward amount using the PAN.
13 . The system as claimed in claim 1 , wherein the payment controller is further configured to store a plurality of product IDs in the transaction log against the transaction ID.
14 . The system as claimed in claim 13 , wherein the EFTPOS terminal is configured to display an option to refund all products wherein the refund controller is configured to select the plurality of product IDs using the transaction ID, and, for each product ID, cause the payment controller to initiate a reversal financial transaction according to any reward amount associated with each product ID.
15 . The system as claimed in claim 14 , wherein the refund controller is further configured to cause the payment controller to initiate a reversal financial transaction according to a total transaction amount of the products.
16 . The system as claimed in claim 13 , wherein the EFTPOS terminal is configured to display an option to refund a subset of products and to transmit selected product IDs of the subset of products to the server, wherein the refund controller is configured to select a subset of product IDs using the selected product IDs, and, for each product ID, cause the payment controller to initiate a reversal financial transaction according to any reward amount associated with each product ID.
17 . The system as claimed in claim 16 , wherein the refund controller is further configured to cause the payment controller to initiate a reversal financial transaction according to a total transaction amount of the subset of the products.
18 . The system as claimed in claim 10 , wherein a product ID is transmitted from the EFTPOS terminal to the server and wherein the refund controller is configured to verify the product ID against the transaction log.