Abstract: A network gateway includes a network interface and a computer processing unit. The network interface is configured to interface the network gateway with a first computer network. The computer processing unit is in communication with the network interface and is configured to receive from a network device, via the first computer network, a payload request that includes a first credential. The network device is configured to receive the first credential from a hardware token that is interfaced with the network device. The computer processing unit is configured to verify that, before the network device received the first credential from the hardware token, the first credential was associated with the network device in a database. The computer processing unit is configured to download a payload to the network device via the first computer network, after the verification.

Abstract: A network gateway includes a gateway authenticator, a first network interface for interfacing the network gateway with a first computer network, and a second network interface for interfacing the network gateway with a second computer network that is distinct from the first computer network. The gateway authenticator receives from a pin-pad terminal, via the first computer network, an activation credential request that includes a first administrator credential. The pin-pad terminal receives the first administrator credential from a hardware token that is interfaced with the pin-pad terminal.

Abstract: A method of remotely configuring a point-of-sale device that is configured with resident executable program code involves the resident executable program code transmitting a framework update request to a computer server. The resident executable program code imposes a security requirement prohibiting unauthorized change of the resident executable program code. The resident executable program code also defines an operational framework of at least one allowed mode of operation for the point-of-sale device. The framework update request includes a credential. In accordance with a validity of the credential, the point-of-sale device receives a framework update payload in response to the framework update request, and installs the framework update payload into the point-of-sale device. The resident executable program code together with the framework update payload define an updated version of the operational framework. The updated version of the operational framework maintains the imposed security requirement.

Abstract: A method of downloading an electronic product to a pin-pad terminal involves the pin-pad terminal transmitting to a network gateway a transaction proposal for an electronic product from a network device, and receiving from the network gateway a transaction proposal response generated by the network gateway in response to the transaction proposal. The transaction proposal response includes a transaction pointer associated with the electronic product. The pin-pad terminal electronically directly transmits to an electronic cash register coupled to the pin-pad terminal an indication of a payment amount for the electronic product. The pin-pad terminal receives from the electronic cash register confirmation of entry of the electronic product in an electronic shopping basket maintained by the electronic cash register, and transmits the transaction pointer to the network device via the network gateway. The pin-pad terminal receives the electronic product from the network device via the network gateway.

Abstract: A network gateway includes a gateway authenticator, a first network interface for interfacing the network gateway with a first computer network, and a second network interface for interfacing the network gateway with a second computer network that is distinct from the first computer network. The gateway authenticator receives from a pin-pad terminal, via the first computer network, an activation credential request that includes a first administrator credential. The pin-pad terminal receives the first administrator credential from a hardware token that is interfaced with the pin-pad terminal.

Abstract: A method of downloading an electronic product to a pin-pad terminal involves the terminal transmitting to a network gateway a transaction proposal for an electronic product from a network device, and receiving from the gateway a transaction proposal response generated by the gateway in response to the transaction proposal. The transaction proposal response includes a transaction pointer associated with the electronic product. An electronic cash register receives an indication of a proposed payment amount for the electronic product. The pin-pad terminal receives from the electronic cash register confirmation of entry of the electronic product in an electronic shopping basket maintained by the electronic cash register. The terminal validates the confirmation of entry of the electronic product from a comparison with the transaction proposal response, and transmits the transaction pointer to the network device via the gateway. The terminal receives the electronic product from the network device via the gateway.

Abstract: A method of downloading an electronic product to a pin-pad terminal involves the pin-pad terminal transmitting to a network gateway a transaction proposal for an electronic product from a network device, and receiving from the network gateway a transaction proposal response generated by the network gateway in response to the transaction proposal. The transaction proposal response includes a transaction pointer associated with the electronic product. The pin-pad terminal electronically directly transmits to an electronic cash register coupled to the pin-pad terminal an indication of a payment amount for the electronic product. The pin-pad terminal receives from the electronic cash register confirmation of entry of the electronic product in an electronic shopping basket maintained by the electronic cash register, and transmits the transaction pointer to the network device via the network gateway. The pin-pad terminal receives the electronic product from the network device via the network gateway.

Abstract: A method of downloading an electronic product to a pin-pad terminal involves the terminal transmitting to a network gateway a transaction proposal for an electronic product from a network device, and receiving from the gateway a transaction proposal response generated by the gateway in response to the transaction proposal. The transaction proposal response includes a transaction pointer associated with the electronic product. An electronic cash register receives an indication of a proposed payment amount for the electronic product. The pin-pad terminal receives from the electronic cash register confirmation of entry of the electronic product in an electronic shopping basket maintained by the electronic cash register. The terminal validates the confirmation of entry of the electronic product from a comparison with the transaction proposal response, and transmits the transaction pointer to the network device via the gateway. The terminal receives the electronic product from the network device via the gateway.

Abstract: The present invention provides a system and method for providing a closed or secure network on another closed or secure network. The system enables linking at least one acquirer network operating a closed network to at least one operator by a central server. The acquirer network includes one or more terminals and optionally an acquirer server. The central server is linked to the acquirer network and to the operator. The central server is configurable to communicate with at least a subset of the one or more terminals, and also with the operator, and to establish one or more serve; communication links between the operator and the one or more terminals. The central server acts as a trusted intermediary between the acquirer network and the operator for enabling the operator to communicate with the one or more terminals via the closed acquirer network.

Abstract: A method of remotely configuring a point-of-sale device that is configured with resident executable program code involves the resident executable program code transmitting a framework update request to a computer server. The resident executable program code imposes a security requirement prohibiting unauthorized change of the resident executable program code. The resident executable program code also defines an operational framework of at least one allowed mode of operation for the point-of-sale device. The framework update request includes a credential. In accordance with a validity of the credential, the point-of-sale device receives a framework update payload in response to the framework update request, and installs the framework update payload into the point-of-sale device. The resident executable program code together with the framework update payload define an updated version of the operational framework. The updated version of the operational framework maintains the imposed security requirement.

Abstract: The present invention provides a system and method for providing a closed or secure network on another closed or secure network. The system enables linking at least one acquirer network operating a closed network to at least one operator by a central server. The acquirer network includes one or more terminals and optionally an acquirer server. The central server is linked to the acquirer network and to the operator. The central server is configurable to communicate with at least a subset of the one or more terminals, and also with the operator, and to establish one or more serve; communication links between the operator and the one or more terminals. The central server acts as a trusted intermediary between the acquirer network and the operator for enabling the operator to communicate with the one or more terminals via the closed acquirer network.

Abstract: The present invention provides a system and method for providing a closed or secure network” on another closed or secure network. The system enables linking at least one acquirer network operating a closed network to at least one operator by a central server. The acquirer network includes one or more terminals and optionally an acquirer server. The central server is linked to the acquirer network and to the operator. The central server is configurable to communicate with at least a subset of the one or more terminals, and also with the operator, and to establish one or more serve; communication links between the operator and the one or more terminals. The central server acts as a trusted intermediary between the acquirer network and the operator for enabling the operator to communicate with the one or more terminals via the closed acquirer network.