POINT OF SALE (POS) PERSONAL IDENTIFICATION NUMBER (PIN) SECURITY
    3.
    发明申请
    POINT OF SALE (POS) PERSONAL IDENTIFICATION NUMBER (PIN) SECURITY 审中-公开
    销售点(POS)个人识别号码(PIN)安全

    公开(公告)号:US20140351145A1

    公开(公告)日:2014-11-27

    申请号:US14455130

    申请日:2014-08-08

    Applicant: EBAY INC.

    Inventor: Attaullah Baig

    Abstract: A key is securely injected into a POS PIN pad processor in its usual operating environment. In response to entry of a personal identification number (PIN) into a PIN pad, the processor puts the PIN into a PIN block; puts additional random data into the PIN block; and encrypts the entire PIN block using asymmetric cryptography with a public key derived from the injected key residing in the PIN pad processor. The corresponding private key may be held securely and secretly by an acquirer processor for decrypting the PIN block to retrieve the PIN. The encrypted random data defends the PIN against dictionary attacks. Time stamp data and constant data encrypted with the PIN block enables a defense of the PIN against replay attacks and tampering. The method may also include accepting the PIN from a mobile phone in communication with the processor.

    Abstract translation: 在其通常的操作环境中,密钥可靠地注入POS PIN垫处理器。 响应于将个人识别号码(PIN)输入到PIN垫中,处理器将PIN放入PIN块中; 将额外的随机数据放入PIN块; 并且使用具有从驻留在PIN贴片处理器中的注入键导出的公开密钥的非对称加密来加密整个PIN块。 相应的私钥可以被获取者处理器安全地和秘密地保存,用于解密PIN块以检索PIN。 加密的随机数据保护PIN免受字典攻击。 使用PIN块加密的时间戳数据和常量数据可以防止PIN对重放攻击和篡改。 该方法还可以包括从与处理器通信的移动电话接受PIN。

    Systems and methods for secure debit payment
    4.
    发明授权
    Systems and methods for secure debit payment 有权
    用于安全付款的系统和方法

    公开(公告)号:US08862509B2

    公开(公告)日:2014-10-14

    申请号:US12118643

    申请日:2008-05-09

    Abstract: A method for generating a personal identification number (PIN) debit child product for use in performing a debit payment transaction with a merchant entity. A payment processing platform receives a user selection of a financial institution made via a merchant payment page and directs the user to authenticate a user identity with the financial institution. The payment processing platform receives a user selection of a core account held with the financial institution, such that the core account provides financial backing for the PIN debit child product. The PIN debit child product is generated that includes a child card number and a virtual PIN associated with the core account. Advantageously, the method provides the ability to make PIN debit transaction on the Internet.

    Abstract translation: 一种用于生成用于与商家实体进行借记支付交易的个人识别号码(PIN)借项子产品的方法。 支付处理平台通过商业支付页面接收对金融机构的用户选择,并指导用户向金融机构认证用户身份。 支付处理平台接收与金融机构持有的核心账户的用户选择,使得核心账户为PIN借记子产品提供财务支持。 生成PIN借记子产品,其包括与核心帐户相关联的子卡号和虚拟PIN。 有利地,该方法提供在因特网上进行PIN借记交易的能力。

    Automated tanning system
    5.
    发明授权
    Automated tanning system 有权
    自动晒黑系统

    公开(公告)号:US08812357B2

    公开(公告)日:2014-08-19

    申请号:US12432445

    申请日:2009-04-29

    Applicant: Tracy Hughes

    Inventor: Tracy Hughes

    Abstract: A self-service tanning system and method allows salon owners to offer tanning customization in order to meet the personal needs of various customers and to meet the various FDA regulations associated with each state. The present invention allows salon owners to customize each tanning customer session to prevent over exposure for new patrons, while allowing patrons who are already tanning to tan at a more progressive rate. In addition to tanning customization, the present invention offers built-in safety features, payment options, and networkability.

    Abstract translation: 自助鞣制系统和方法允许沙龙业主提供晒黑定制,以满足各种客户的个人需求,并满足与每个州相关的各种FDA规定。 本发明允许沙龙所有者定制每个鞣制客户会话,以防止新客户的过度曝光,同时允许正在晒黑的顾客以更渐进的速度晒黑。 除了晒黑定制之外,本发明还提供了内置的安全特征,支付选项和可网络性。

    Personal identification number security enhancement
    6.
    发明授权
    Personal identification number security enhancement 失效
    个人识别号码安全增强

    公开(公告)号:US08639938B2

    公开(公告)日:2014-01-28

    申请号:US13099509

    申请日:2011-05-03

    Abstract: A system for enhancing security of a personal identification number is configned for performing a method that includes receiving, from a first entity having an input permission, a first data structure into a HSM, wherein the first data structure maps a first many-to-one mapping between a first and a second PIN numeral system. The method also includes determining whether the content of the first data structure is valid, storing the first data structure in the HSM if the first data structure is valid and marking the stored first data structure as inactive. The method further includes activating the first data structure if a second data structure is input into the HSM by a second entity having an activation permission, wherein the first entity is different from the second entity, the first data structure is identical to the second data structure. The method additionally includes converting from the first to the second PIN numeral system responsive to the activated first data structure.

    Abstract translation: 用于增强个人识别号码的安全性的系统用于执行包括从具有输入许可的第一实体接收第一数据结构到HSM的方法,其中所述第一数据结构映射第一多对一 第一和第二PIN数字系统之间的映射。 该方法还包括确定第一数据结构的内容是否有效,如果第一数据结构有效并将所存储的第一数据结构标记为不活动,则将第一数据结构存储在HSM中。 该方法还包括:如果第二数据结构由具有激活许可的第二实体输入到HSM中,则激活第一数据结构,其中第一实体与第二实体不同,第一数据结构与第二数据结构相同 。 该方法还包括响应于激活的第一数据结构从第一PIN数字系统转换为第二PIN数字系统。

    STAND-ALONE SECURE PIN ENTRY DEVICE FOR ENABLING EMV CARD TRANSACTIONS WITH SEPARATE CARD READER
    8.
    发明申请
    STAND-ALONE SECURE PIN ENTRY DEVICE FOR ENABLING EMV CARD TRANSACTIONS WITH SEPARATE CARD READER 有权
    独立读卡器启动EMV卡交易的独立安全引脚输入设备

    公开(公告)号:US20130144792A1

    公开(公告)日:2013-06-06

    申请号:US13808997

    申请日:2011-07-08

    Abstract: A method of conducting secure electronic payments to a payment acquirer using a credit card payment unit, comprising of a smart card, a portable card reader device, a mobile phone, a stand-alone PIN entry device and a payment server. The method is based on eliminating the unsecure keyboard in a mobile phone used for entering personal identification information, and instead use a separate secure PIN entry device which fulfils the EMV Level specification. Since all sensitive payment information, communicated to the payment server from the card reader and the PIN entry device, is encrypted using unique encryption keys an unsecure mobile phone may be used for relaying the communication between the card reader device and the PIN entry device to and from the payment server.

    Abstract translation: 一种使用信用卡支付单元向付款获取方执行安全电子支付的方法,包括智能卡,便携式读卡器装置,移动电话,独立PIN输入装置和支付服务器。 该方法基于消除用于输入个人识别信息的移动电话中的不安全键盘,而是使用满足EMV级别规范的单独的安全PIN输入设备。 由于从读卡器和PIN输入装置传送给支付服务器的所有敏感支付信息都使用唯一的加密密钥加密,所以可以使用不安全的移动电话将读卡器设备和PIN输入设备之间的通信中继到 从付款服务器。

    Automated banking machine with noncontact reading of card data
    9.
    发明授权
    Automated banking machine with noncontact reading of card data 有权
    自动银行机器,非接触式读卡数据

    公开(公告)号:US08245914B1

    公开(公告)日:2012-08-21

    申请号:US13066404

    申请日:2011-04-14

    Abstract: An automated banking machine operates responsive to data read from data bearing records. The data corresponds to user card data received from a cell phone. The machine generates and displays a random number correlated with a time period. The machine user inputs the displayed random number into their phone. A software application in the phone encrypts the selected card data along with the inputted random number. The phone then displays a bar code image containing the encrypted data. The machine includes a bar code reader to read the displayed image. The machine can decrypt the random number and the card data from the read image. The random number is used to verify the current banking transaction session. The process replaces physical insertion of a card yet allows secure input of card data.

    Abstract translation: 自动银行业务机构响应于从数据记录中读取的数据。 数据对应于从手机接收的用户卡数据。 机器生成并显示与时间段相关的随机数。 机器用户将显示的随机数输入他们的手机。 电话中的软件应用程序与输入的随机数一起加密所选择的卡片数据。 然后,手机显示包含加密数据的条形码图像。 该机器包括读取显示图像的条形码阅读器。 机器可以从读取的图像中解密随机数和卡数据。 随机数用于验证当前银行交易会话。 该过程取代了卡的物理插入,但允许卡数据的安全输入。

Patent Agency Ranking