Abstract: Methods and systems for providing an advanced hardware system for a self-service kiosk are disclosed herein. In specific embodiments of the invention, a payment interface device is provided. The device includes an integrated touch display, a means for receiving payment information, and a casing holding the integrated touch display and the means for receiving payment information. The device also includes an applications microprocessor and a secure microprocessor located within the casing. The applications microprocessor instantiates an operating system and stores instructions for execution by the operating system for operative communication with a peripheral bar code scanner and a peripheral display. The secure microprocessor stores instructions to encrypt payment information for the system and is in operative communication with the means for receiving payment information.

Abstract: A computer-implemented method for an extensible point-of-sale device is disclosed. The method includes registering a third-party application to be notified of a transaction change on the point-of-sale device. The method also includes displaying a user interface to a user during a purchase transaction on a display of the point-of-sale device using one of a register module and a payment module. The method also includes receiving the transaction change via the user interface of the point-of-sale device. The method also includes broadcasting the transaction change to a set of registered applications that includes the third-party application. The method also includes taking an action that modifies the purchase transaction using the third-party application in response to the broadcasting.

Abstract: Methods and systems for providing an advanced hardware system for a self-service kiosk are disclosed herein. In specific embodiments of the invention, a payment interface device is provided. The device includes an integrated touch display, a means for receiving payment information, and a casing holding the integrated touch display and the means for receiving payment information. The device also includes an applications microprocessor and a secure microprocessor located within the casing. The applications microprocessor instantiates an operating system and stores instructions for execution by the operating system for operative communication with a peripheral bar code scanner and a peripheral display. The secure microprocessor stores instructions to encrypt payment information for the system and is in operative communication with the means for receiving payment information.

Abstract: Systems and methods are provided for adjusting point of sale (POS) interfaces. In some embodiments, a POS device includes a display. The display is configured to present a user interface, the user interface having a first interface and a second interface. The first interface has a first set of functionalities that is prevented from being accessible in the second interface.

Abstract: This disclosure relates to systems with multiple NFC front ends and at least one shared controller. One disclosed system includes a first discrete device having a first near field communication (NFC) controller, a second discrete device having a second NFC controller, a communicative connection between the first discrete device and the second discrete device, and a system controller located on the first discrete device. The system controller is communicatively connected to the first NFC controller. The system controller is connected to the second NFC controller via the communicative connection. In specific approaches, the second discrete device can include a display which is also controlled by the system controller, and the system controller is NCI compliant and application aware. In specific approaches, the system controller can control the second NFC controller based on the content concurrently being provided to the display.

Abstract: Methods and systems are disclosed that provide enhanced flexibility to merchants in the configuration of POS systems. One disclosed system includes a payment interface device having a first display, a means for receiving payment information, and a first payment flow display service (PFDS). The system also includes a display device having a second display and a second PFDS. The system also includes a secure wireless connection formed by a first short-range wireless protocol (SRWP) module on the payment interface device and a second SRWP module on the display device. The first and second PFDSs conduct an exchange of messages over the secure wireless connection to execute a payment flow.

Abstract: Systems and methods for efficiently processing a transaction using a point of sale (POS) system and a URL which is provisioned to a purchaser in the transaction are disclosed. A purchase order input for a purchase order for the transaction can be received via a register application on the POS. A payment interface URL is generated and a payment interface for the purchase order is provided at a web page identified by the payment interface URL. Payment authorization is received for the purchase order, from a payment processor, in response to a payment interface input provided on the payment interface. A confirmation of the payment authorization is provided to the register application.

Abstract: An external biometric reader and verification device for providing access control to a computing device, and associated methods, are disclosed. The external reader can store and verify biometrics under the control of the computing device and send identity verification messages to the computing device. One disclosed device includes a biometric reader communicatively connected to an external secure microcontroller. The external secure microcontroller stores a set of biometric data and a signing key. The signing key can be injected by a device manufacturer in a controlled key injection room in a manufacturing facility and can be used to sign a certificate. An operating system of the computing device can be programmed to send a request for the certificate, receive the certificate, and predicate control of access to the operating system using the verification messages on verification of the certificate.

Abstract: Systems and methods are provided for adjusting point of sale (POS) interfaces. In some embodiments, a POS device includes a display. The display is configured to present a user interface, the user interface having a first interface and a second interface. The first interface has a first set of functionalities that is prevented from being accessible in the second interface.

Abstract: Systems, and associated methods, involving both a trusted and an untrusted device where sensitive data or keys are shared between those devices are disclosed. A disclosed method includes storing a key in a secure memory on a first device, receiving sensitive data via a user interface on a second device, generating a set of white box encryption instructions based on the key using a white box encryption generator on the first device, generating a complete data representation of the set of white box encryption instructions using a secure processor on the first device, transmitting the complete data representation from the first device to the second device, and encrypting the sensitive data using the complete data representation on the second device. The complete data representation is not Turing complete and is not executable with respect to the second device.

Abstract: Methods and systems related to the use of tokenization services in payment processing systems are disclosed. The methods and systems include token translation services, token maps used as the basis for customer data models, specific approaches for securing the token maps and associated data, and the efficient storage of the token maps and associated data to facilitate enhanced payments experiences and analytics. One method includes transmitting a tokenization request with an encrypted payment account number from a POS to a tokenization service, receiving a token from the tokenization service in response to the tokenization request, salting the token with data to produce a salted token, encrypting the salted token using a secure processor on the POS, mapping the encrypted salted token to the payment account number in a map, and storing the map and the encrypted salted token in a memory on the secure processor on the POS.

Abstract: Systems, and associated methods, involving both a trusted and an untrusted device where sensitive data or keys are shared between those devices are disclosed. A disclosed method includes storing a key in a secure memory on a first device, receiving sensitive data via a user interface on a second device, generating a set of white box encryption instructions based on the key using a white box encryption generator on the first device, generating a complete data representation of the set of white box encryption instructions using a secure processor on the first device, transmitting the complete data representation from the first device to the second device, and encrypting the sensitive data using the complete data representation on the second device. The complete data representation is not Turing complete and is not executable with respect to the second device.

Abstract: Methods and systems for providing an advanced hardware system for a self-service kiosk are disclosed herein. In specific embodiments of the invention, a payment interface device is provided. The device includes an integrated touch display, a means for receiving payment information, and a casing holding the integrated touch display and the means for receiving payment information. The device also includes an applications microprocessor and a secure microprocessor located within the casing. The applications microprocessor instantiates an operating system and stores instructions for execution by the operating system for operative communication with a peripheral bar code scanner and a peripheral display. The secure microprocessor stores instructions to encrypt payment information for the system and is in operative communication with the means for receiving payment information.

Abstract: An external biometric reader and verification device for providing access control to a computing device, and associated methods, are disclosed. The external reader can store and verify biometrics under the control of the computing device and send identity verification messages to the computing device. One disclosed device includes a biometric reader communicatively connected to an external secure microcontroller. The external secure microcontroller stores a set of biometric data and a signing key. The signing key can be injected by a device manufacturer in a controlled key injection room in a manufacturing facility and can be used to sign a certificate. An operating system of the computing device can be programmed to send a request for the certificate, receive the certificate, and predicate control of access to the operating system using the verification messages on verification of the certificate.

Abstract: Systems and methods for provisioning secure terminals for secure transactions are disclosed herein. A disclosed method includes generating a key using a key generator element on a secure terminal and sending a key validation request for the key from the secure terminal to a provisioning device. The method also includes parsing the key validation request and generating a key validation for the key and a trusted time stamp on the provisioning device. The method also includes sending, from the provisioning device, the key validation and the trusted time stamp to the secure terminal. The method also includes setting a clock on the secure terminal using the trusted time stamp and storing the key validation at the secure terminal.

Abstract: Systems and methods for provisioning secure terminals for secure transactions are disclosed herein. A disclosed method includes generating a key using a key generator element on a secure terminal and sending a key validation request for the key from the secure terminal to a provisioning device. The method also includes parsing the key validation request and generating a key validation for the key and a trusted time stamp on the provisioning device. The method also includes sending, from the provisioning device, the key validation and the trusted time stamp to the secure terminal. The method also includes setting a clock on the secure terminal using the trusted time stamp and storing the key validation at the secure terminal.

Abstract: Methods and systems for processing secure information are disclosed. One method includes receiving secure data from a user via an input device. The method also includes routing the secure data to a secure processor using a hardware multiplexer. The method also includes processing the secure data using the secure processor. The method also includes receiving non-secure data from the user via the input device. The method also includes routing the non-secure data to a second processor using the hardware multiplexer. The method also includes processing the non-secure data using the second processor. The method also includes altering a routing state of the hardware multiplexer using the secure processor. The routing state of the hardware multiplexer is only controlled by the secure processor.

Abstract: Methods and systems for providing an advanced hardware system for a self-service kiosk are disclosed herein. In specific embodiments of the invention, a payment interface device is provided. The device includes an integrated touch display, a means for receiving payment information, and a casing holding the integrated touch display and the means for receiving payment information. The device also includes an applications microprocessor and a secure microprocessor located within the casing. The applications microprocessor instantiates an operating system and stores instructions for execution by the operating system for operative communication with a peripheral bar code scanner and a peripheral display. The secure microprocessor stores instructions to encrypt payment information for the system and is in operative communication with the means for receiving payment information.