Abstract: The present invention involves the dynamic modification of network connection parameters based on signal conditions, and specifically, based on signal Quality of Service (QoS) measurements. Specifically, the disclosed systems and methods enable a remote communications terminal to best ensure a reliable wireless connection to a transaction-processing gateway in order to send and receive data packets relating to merchant transactions. The communications terminal is configurable, allowing a user to define threshold values that serve as triggering events for modifying and/or implementing a change to policies governing network connection attempts.

Abstract: The present invention relates generally to a smart card device that is configured to facilitate wireless network access and credential verification. Specifically, the device is configured to meet the physical and electrical specification for commercially available mobile devices utilizing a standard Subscriber Identity Module (SIM) for network access. The device combines the features of the SIM with Common Access Card or Personal Identity Verification card features to allow a network subscriber to invoke secure payment transactions over a carrier's network. The system includes data storage for maintaining a plurality of network and transaction instrument profiles and a profile gateway for receiving transaction information from a payment gateway, sending an authorization request to a user's mobile device, receiving a transaction authorization from the mobile device, and sending transaction information to a payment gateway to finalize the payment transaction.

Abstract: A communication system includes a development sector for registering a plurality of wireless devices, a business sector for controlling utilization of an application program and for receiving application data, a service sector for deploying the application program and for providing the application data to the business sector in accordance with communication with at least one wireless device of the plurality; and a mobile sector comprising the plurality of wireless devices, each device for receiving the application program deployed by the service sector, executing the application program in response to the business sector, and communicating with the service sector to support provision of the application data to the business sector. The wireless device, such as a cell phone, personal digital assistant, or palm top computer may include an auxiliary device such as a bar code scanner, a magnetic stripe card reader, or a printer.

Abstract: A communication system includes a development sector for registering a plurality of wireless devices, a business sector for controlling utilization of an application program and for receiving application data, a service sector for deploying the application program and for providing the application data to the business sector in accordance with communication with at least one wireless device of the plurality; and a mobile sector comprising the plurality of wireless devices, each device for receiving the application program deployed by the service sector, executing the application program in response to the business sector, and communicating with the service sector to support provision of the application data to the business sector. The wireless device, such as a cell phone, personal digital assistant, or palm top computer may include an auxiliary device such as a bar code scanner, a magnetic stripe card reader, or a printer.

Abstract: A trusted code base is provided on a removable system module that is inserted in a mobile payment device 130. The trusted code base obtains a password from a customer for processing a payment transaction and encrypts the password using a public key. Access to the trusted code base by unauthorized processes is prevented to protect the password while unencrypted. The mobile payment device 130 transmits the encrypted password over a network 140 to a transaction host 160. The transaction host 160 decrypts the encrypted password and applies the decrypted password to process the payment transaction.

Abstract: A mobile payment device 130 provides a trusted code base which obtains a password from a customer for processing a payment transaction and encrypts the password using a public key. Access to the trusted code base by unauthorized processes is prevented to protect the password while unencrypted. The mobile payment device 130 transmits the encrypted password over a network 140 to a transaction host 160. The transaction host 160 decrypts the encrypted password and applies the decrypted password to process the payment transaction.

Abstract: A data control system for a local area network (100) prevents non-point of sale devices (135,155) from sending data to point of sale devices (125,145) on the local area network (100) but allows non-point of sale devices (135,155) to send data to other non-point of sale devices (135,155) on the local area network. The data control system may define a non-point of sale network (130,150) within the local area network (100) and determine the data is from the non-point of sale network (130,150) if the data is associated with a service set identifier or a port corresponding to the non-point of sale network (130,150). The data control system may also prevent wireless non-point of sale devices (135) from sending data to wired non-point of sale devices (155) and prevent wired non-point of sale devices (155) from sending data to wireless non-point of sale devices (135).

Abstract: A data control system allows non-point of sale devices (135, 155) on the LAN to receive data from an external network (160) when established conditions are met. The data control system may allow the data to be sent to a non-point of sale device (135, 155) only if the data has not been received via a secure connection reserved for point of sale devices (125, 145). The secure connection is, for example, a virtual private network connection. The data control system may also allow the data to be sent to a non-point of sale device (135, 155) only if the data is associated with a communication session initiated by the non-point of sale device (135, 155). The data control system may also allow the data to be sent to the non-point of sale device (135, 155) only if it is not received from a restricted source. The restricted source may be, for example, a payment host (170), a secure host (180) or any unidentified source.

Abstract: A data control system defines within a local area network (100) a point of sale network (120,140) which includes point of sale devices (125,145) but excludes non-point of sale devices (135,155). The data control system is implemented by a router (110) working in combination with a secure host (180) on an external network (160) to which the router is connected. The point of sale devices (125,145) may include wireless devices (125) which communicate wirelessly with the router (110) such as via a Wi-Fi connection and may also include wired devices (145) connected by wire to the router such as via an Ethernet connection. Similarly, the non-point of sale devices may be wireless devices (135) or wired devices (155). The data control system may additionally define a non-point of sale network (130,150) which includes the non-point of sale devices (135,155). The point of sale network (120,140) and the non-point of sale network (130,150) may each be defined as a virtual local area network.

Abstract: A data control system allows point of sale devices (125, 145) on a local area network (100) to receive data from the external network (160) if received from the external network (160) via a secure connection, but prevents point of sale devices from receiving data from the external network (160) if not received via a secure connection. The secure connection is, for example, a virtual private network connection. The data control system may allow the data to be sent to a point of sale device (125, 145) only if it is associated with a communication session initiated by the point of sale device (125, 145). The data control system may also allow the data to be sent to the point of sale device (125, 145) only if it is received from an authorized source on the external network (160).

Abstract: A data control system allows point of sale devices (125, 145) to send data to an external network (160) via a secure connection but prevents the point of sale devices (125, 145) from sending data to the external network (160) other than via the secure connection. The secure connection is, for example, a virtual private network connection. The data control system may allow only devices on a white list of approved point of sale devices to send data to the external network (160). The data control system may also allow the point of sale devices (125, 145) to send data only to an authorized destination on the external network (160).

Abstract: A data control system prevents non-point of sale devices (135, 155) from sending data over an external network (160) via a secure connection reserved for point of sale devices (125, 145), but allows non-point of sale devices (135, 155) to send data over the external network (160) other than via the secure connection. The secure connection is, for example, a virtual private network connection. The data control system may allow the data from non-point of sale devices (135, 155) to be sent only if it is not destined for a restricted destination. The restricted destination may be, for example, a payment host (170) or secure host (180) on the external network (160).

Abstract: A data control system for a local area network (100) prevents point of sale devices (125,145) from sending data to non-point of sale devices (135,155) but allows point of sale devices (125,145) to send data to other point of sale devices (125,145) on the local area network (100). The data control system may, define a point of sale network within the local area network. The data control system may define a point of sale network (120,140) within the local area network (100) and determine the data is from the point of sale network (120,140) if the data is associated with a service set identifier corresponding to a wireless point of sale network (120) or a port corresponding to a wired point of sale network (140). The data control system may also allow data to be sent to a point of sale device (125,145) only if it is represented on a white list of approved point of sale devices (125,145).

Abstract: A mobile payment device 130 obtains a password from a customer for processing a payment transaction. The mobile payment device 130 encrypts the password using a public key. The mobile payment device 130 transmits the public key encrypted password via a network 140 to a cryptographic conversion host 150 which decrypts it using a private key corresponding to the public key. The cryptographic conversion host 150 re-encrypts the decrypted password with a secret key and provides the secret key encrypted password to a transaction host 160. The transaction host 160 decrypts the secret key encrypted password using an identical secret key and applies the decrypted password to process the payment transaction.

Abstract: A communication system includes a development sector for registering a plurality of wireless devices, a business sector for controlling utilization of an application program and for receiving application data, a service sector for deploying the application program and for providing the application data to the business sector in accordance with communication with at least one wireless device of the plurality; and a mobile sector comprising the plurality of wireless devices, each device for receiving the application program deployed by the service sector, executing the application program in response to the business sector, and communicating with the service sector to support provision of the application data to the business sector. The wireless device, such as a cell phone, personal digital assistant, or palm top computer may include an auxiliary device such as a bar code scanner, a magnetic stripe card reader, or a printer.

Abstract: A communication system includes a development sector for registering a plurality of wireless devices, a business sector for controlling utilization of an application program and for receiving application data, a service sector for deploying the application program and for providing the application data to the business sector in accordance with communication with at least one wireless device of the plurality; and a mobile sector comprising the plurality of wireless devices, each device for receiving the application program deployed by the service sector, executing the application program in response to the business sector, and communicating with the service sector to support provision of the application data to the business sector. The wireless device, such as a cell phone, personal digital assistant, or palm top computer may include an auxiliary device such as a bar code scanner, a magnetic stripe card reader, or a printer.

Abstract: A communication system includes a development sector for registering a plurality of wireless devices, a business sector for controlling utilization of an application program and for receiving application data, a service sector for deploying the application program and for providing the application data to the business sector in accordance with communication with at least one wireless device of the plurality; and a mobile sector comprising the plurality of wireless devices, each device for receiving the application program deployed by the service sector, executing the application program in response to the business sector, and communicating with the service sector to support provision of the application data to the business sector. The wireless device, such as a cell phone, personal digital assistant, or palm top computer may include an auxiliary device such as a bar code scanner, a magnetic stripe card reader, or a printer.

Abstract: A communication system includes a development sector for registering a plurality of wireless devices, a business sector for controlling utilization of an application program and for receiving application data, a service sector for deploying the application program and for providing the application data to the business sector in accordance with communication with at least one wireless device of the plurality; and a mobile sector comprising the plurality of wireless devices, each device for receiving the application program deployed by the service sector, executing the application program in response to the business sector, and communicating with the service sector to support provision of the application data to the business sector. The wireless device, such as a cell phone, personal digital assistant, or palm top computer may include an auxiliary device such as a bar code scanner, a magnetic stripe card reader, or a printer.

Abstract: A communication system includes a development sector for registering a plurality of wireless devices, a business sector for controlling utilization of an application program and for receiving application data, a service sector for deploying the application program and for providing the application data to the business sector in accordance with communication with at least one wireless device of the plurality; and a mobile sector comprising the plurality of wireless devices, each device for receiving the application program deployed by the service sector, executing the application program in response to the business sector, and communicating with the service sector to support provision of the application data to the business sector. The wireless device, such as a cell phone, personal digital assistant, or palm top computer may include an auxiliary device such as a bar code scanner, a magnetic stripe card reader, or a printer.

Abstract: A communication system includes a development sector for registering a plurality of wireless devices, a business sector for controlling utilization of an application program and for receiving application data, a service sector for deploying the application program and for providing the application data to the business sector in accordance with communication with at least one wireless device of the plurality; and a mobile sector comprising the plurality of wireless devices, each device for receiving the application program deployed by the service sector, executing the application program in response to the business sector, and communicating with the service sector to support provision of the application data to the business sector. The wireless device, such as a cell phone, personal digital assistant, or palm top computer may include an auxiliary device such as a bar code scanner, a magnetic stripe card reader, or a printer.