Abstract: Techniques are described for securely updating a point-of-sale (POS) system that includes a merchant-facing device and a buyer-facing device. For instance, the merchant-facing device may execute first software that provides first POS functionality and the buyer-facing device may execute second software that provides second POS functionality. To update both devices, the merchant-facing device may receive a software update from a payment service via a network connection, and update the first software using the software update. The merchant-facing device can then cause, via a physical connection, the buyer-facing device to reboot in an update mode and send the software update to the buyer-facing device. In response, the buyer-facing device can update the second software using the software update and then reboot in a payments mode. In some instances, the buyer-facing device can then update a secure enclave on the buyer-facing device using the software update.

Abstract: Techniques for conducting transaction(s) between a merchant and customer(s) via a multi-device point-of-sale (POS) system is described. The multi-device POS system may include a merchant-facing device and a plurality of customer-facing devices. A merchant application executing on the merchant-facing device may determine an attribute of a customer based on data received during a pending transaction. The merchant application may determine accommodation capabilities of individual customer-facing devices of the plurality of customer-facing devices. The merchant application may select a customer-facing device for the customer to use in the transaction based on the attribute of the customer and the accommodation capabilities of the individual customer-facing devices. The merchant application may generate a user interface directing the customer to the selected customer-facing device.

Abstract: Techniques for conducting transaction(s) between a merchant and customer(s) via a multi-device point-of-sale (POS) system is described. The multi-device POS system can include a customer-facing device having a first processor for processing first instructions for presenting a customer user interface (UI) on a display of the customer-facing device. The customer-facing device can include a payment reader that is accessible by the one or more customers. Further, the multi-device POS system can include a first merchant-facing device having a second processor for processing second instructions for presenting a first merchant UI, which can enable the merchant to perform a first action associated with a first transaction of the one or more transactions. The first merchant-facing device can be coupled to the customer-facing device.

Abstract: Temporarily provisioning functionality to a personal device in a multi-device point-of-sale (POS) system is described. In an example, a presence of a personal device operated by, or on behalf of, a merchant can be determined to be within a range of a POS system of a merchant. The POS system can include a merchant-facing device and a customer-facing device that is coupled to the merchant-facing device. Functionality can be provisioned to the personal device that (i) configures the personal device to present a merchant user interface (UI) via a display of the personal device to enable the merchant to interact with one or more customers and (ii) enables the personal device to interact with at least one of the merchant-facing device or the customer-facing device. Responsive to determining an occurrence of an event, the functionality can be de-provisioned from the personal device.

Abstract: Techniques associated with a dual state merchant-facing device are described herein. A point-of-sale system can comprise multiple devices, such as a customer-facing device and a merchant-facing device that is coupled to the customer-facing device and can operate in a first state or a second state. In at least one example, the merchant-facing device operating in the first state can present a graphical user interface (GUI) on a display. The merchant-facing device can transition from the first state to the second state, the second state enabling the merchant-facing device to perform at least one additional functionality that is not available to the merchant-facing device in the first state, and can update the GUI based at least in part on the at least one additional functionality.

Abstract: Temporarily provisioning functionality to a personal device in a multi-device point-of-sale (POS) system is described. In an example, a personal device can be determined to be within a range of a POS system of a merchant. The POS system can include a merchant-facing device and a customer-facing device that is coupled to the merchant-facing device. Functionality can be provisioned to the personal device that (i) configures the personal device to present a customer user interface (UI) via a display of the personal device to enable a customer operating the personal device to interact with the merchant and (ii) enables the personal device to interact with at least one of the merchant-facing device or the customer-facing device. Responsive to determining an occurrence of an event, the functionality can be de-provisioned from the personal device.

Abstract: This disclosure describes, in part, techniques for securely updating a point-of-sale (POS) system that includes a merchant-facing device and a buyer-facing device. For instance, the merchant-facing device may execute first software that provides first POS functionality and the buyer-facing device may execute second software that provides second POS functionality. To update both devices, the merchant-facing device may receive a software update from a payment service via a network connection, and update the first software using the software update. The merchant-facing device can then cause, via a physical connection, the buyer-facing device to reboot in an update mode and send the software update to the buyer-facing device. In response, the buyer-facing device can update the second software using the software update and then reboot in a payments mode. In some instances, the buyer-facing device can then update a secure enclave on the buyer-facing device using the software update.

Abstract: Techniques for conducting transaction(s) between a merchant and customer(s) via a. multi-device point-of-sale system are described. The multi-device POS system can include a merchant-facing device having a first processor for processing first instructions for presenting a merchant user interface (UI) on a display of the merchant-facing device. Further, the multi-device POS system can include a first customer-facing device having a second processor for processing second instructions for presenting a first customer UI. The first customer UI can enable a first customer to perform a first action associated with a first transaction. The first customer-facing device can have been coupled to the merchant-facing device at a first time. Further, the multi-device POS system can include an application, which can be stored on the merchant-facing device, a second customer-facing device, or a personal device, for presenting a second customer UI enabling performance of a second action.

Abstract: Techniques for securely updating a point-of-sale (POS) system that includes a merchant-facing device and a buyer-facing device are described. For instance, the merchant-facing device may execute first software that provides first POS functionality and the buyer-facing device may execute second software that provides second POS functionality. To update both devices, the merchant-facing device may receive a software update from a payment service via a network connection, and update the first software using the software update. The merchant-facing device can then cause, via a physical connection, the buyer-facing device to reboot in an update mode and send the software update to the buyer-facing device. In response, the buyer-facing device can update the second software using the software update and then reboot in a payments mode. In some instances, the buyer-facing device can then update a secure enclave on the buyer-facing device using the software update.

Abstract: Techniques for implementing policy-based anti-rollback techniques on a computing device are described herein. As an example, a remote service may provide the computing device with a boot policy which indicates, for each boot stage of a software bootloader process, what software versions are permitted to execute. Prior to providing the computing device with the boot policy, the remote service may sign the boot policy with a private key, and include of an identifier corresponding to the computing device. At each boot stage of the bootloader process, components of the computing device may verify, using a public key, that the boot policy was signed with the private key, and that the boot policy corresponds to the computing device. After verification, the components may analyze the boot policy to determine whether each boot stage is permitted to execute a software version and boot to the next boot stage.

Abstract: Techniques associated with a multi-functionality customer-facing device are described herein. A point-of-sale system can comprise multiple devices, such as a customer-facing device and a merchant-facing device that is coupled to the customer-facing device. The customer-facing device is capable of operating in a first state or a second state. In at least one example, the customer-facing device can present a graphical user interface (GUI) on a display. The customer-facing device can transition from the first state to the second state. The second state can enable the customer-facing device to perform at least one additional functionality that is not available to the customer-facing device in the first state. The customer-facing device can receive, while in the second state, an input via the GUI and can send to the merchant-facing device, an indication of the input.

Abstract: Temporarily provisioning functionality to a personal device in a multi-device point-of-sale (POS) system is described. In an example, a presence of a personal device operated by, or on behalf of, a merchant can be determined to be within a range of a POS system of a merchant. The POS system can include a merchant-facing device and a customer-facing device that is coupled to the merchant-facing device. Functionality can be provisioned to the personal device that (i) configures the personal device to present a merchant user interface (UI) via a display of the personal device to enable the merchant to interact with one or more customers and (ii) enables the personal device to interact with at least one of the merchant-facing device or the customer-facing device. Responsive to determining an occurrence of an event, the functionality can be de-provisioned from the personal device.

Abstract: Techniques associated with a dual state merchant-facing device are described herein. A point-of-sale system can comprise multiple devices, such as a customer-facing device and a merchant-facing device that is coupled to the customer-facing device and can operate in a first state or a second state. In at least one example, the merchant-facing device operating in the first state can present a graphical user interface (GUI) on a display. The merchant-facing device can transition from the first state to the second state, the second state enabling the merchant-facing device to perform at least one additional functionality that is not available to the merchant-facing device in the first state, and can update the GUI based at least in part on the at least one additional functionality.

Abstract: Temporarily provisioning functionality to a personal device in a multi-device point-of-sale (POS) system is described. In an example, a personal device can be determined to be within a range of a POS system of a merchant. The POS system can include a merchant-facing device and a customer-facing device that is coupled to the merchant-facing device. Functionality can be provisioned to the personal device that (i) configures the personal device to present a customer user interface (UI) via a display of the personal device to enable a customer operating the personal device to interact with the merchant and (ii) enables the personal device to interact with at least one of the merchant-facing device or the customer-facing device. Responsive to determining an occurrence of an event, the functionality can be de-provisioned from the personal device.

Abstract: Techniques for conducting transaction(s) between a merchant and customer(s) via a multi-device point-of-sale (POS) system is described. The multi-device POS system can include a customer-facing device having a first processor for processing first instructions for presenting a customer user interface (UI) on a display of the customer-facing device. The customer-facing device can include a payment reader that is accessible by the one or more customers. Further, the multi-device POS system can include a first merchant-facing device having a second processor for processing second instructions for presenting a first merchant UI, which can enable the merchant to perform a first action associated with a first transaction of the one or more transactions. The first merchant-facing device can be coupled to the customer-facing device.

Abstract: Techniques for conducting transaction(s) between a merchant and customer(s) via a. multi-device point-of-sale system are described. The multi-device POS system can include a merchant-facing device having a first processor for processing first instructions for presenting a merchant user interface (UI) on a display of the merchant-facing device. Further, the multi-device POS system can include a first customer-facing device having a second processor for processing second instructions for presenting a first customer UI. The first customer UI can enable a first customer to perform a first action associated with a first transaction. The first customer-facing device can have been coupled to the merchant-facing device at a first time. Further, the multi-device POS system can include an application, which can be stored on the merchant-facing device, a second customer-facing device, or a personal device, for presenting a second customer UI enabling performance of a second action.

Abstract: Techniques associated with a multi-functionality customer-facing device are described herein. A point-of-sale system can comprise multiple devices, such as a customer-facing device and a merchant-facing device that is coupled to the customer-facing device. The customer-facing device is capable of operating in a first state or a second state. In at least one example, the customer-facing device can present a graphical user interface (GUI) on a display. The customer-facing device can transition from the first state to the second state. The second state can enable the customer-facing device to perform at least one additional functionality that is not available to the customer-facing device in the first state. The customer-facing device can receive, while in the second state, an input via the GUI and can send to the merchant-facing device, an indication of the input.

Abstract: This disclosure describes, in part, techniques for securely updating a point-of-sale (POS) system that includes a merchant-facing device and a buyer-facing device. For instance, the merchant-facing device may execute first software that provides first POS functionality and the buyer-facing device may execute second software that provides second POS functionality. To update both devices, the merchant-facing device may receive a software update from a payment service via a network connection, and update the first software using the software update. The merchant-facing device can then cause, via a physical connection, the buyer-facing device to reboot in an update mode and send the software update to the buyer-facing device. In response, the buyer-facing device can update the second software using the software update and then reboot in a payments mode. In some instances, the buyer-facing device can then update a secure enclave on the buyer-facing device using the software update.

Abstract: A method for providing authentication credentials to a server over a communications network includes initiating communication with a server over a communications network. The communication is to be established using a secure connection. A message is received from the server over the communications network as well as a request for a digital certificate associated with a first user account accessible to the server. An encrypted private key is decrypted in a secure hardware module to obtain a decrypted private key. The decrypted private key is associated with the first user account. The message received from the server is passed to the secure hardware module. The message is digitally signed in the secure hardware module using the decrypted private key. The digital certificate and the digitally signed message are sent to the server over the communication network.