Clover Network, Inc.

Fiserv Incorporated

Brian Jeremiah Murray

Jacob Whitaker Abrams

Arvin Carl Robert Haywood

Bambi Tsui

Kamlesh Kudchadkar

John Daniel Beatty

Sam Niansheng Qiu

Narayanan Gopalakrishnan

Eric David Fuhs

Victor Pan

Siva Raja Sekhar Reddy Yeruva

Nicholas D Posner

Vincent Durieux

Nilendu Misra

Sameer Jayant Thatte

Seihee Chon

Systems and methods involving secure connections between security meshes are disclosed herein. One disclosed device includes a first security processor located within a first security mesh, a first casing having a connector and supporting the first security mesh and the applications processor, a second security processor located within a second security mesh, and a second casing connected to the first casing via the connector and supporting the second security mesh. The first security processor and second security processor are programmed to generate a unique pre-shared key independently on both the first security processor and the second security processor using an elliptic key exchange and establish a secure connection between the first security processor and the second security processor using the unique pre-shared key.

Point of sale device with secure connection between security meshes

Systems and methods for forming a verified secure wireless connection are disclosed. One system includes a first device with a first transceiver and a second device with a second transceiver. The second device does not include a display or any other means for providing high resolution visible light information. The system also includes a visible light signal source on the second device. The first and second devices store computer-readable instructions to initialize a secure wireless connection using the first transceiver and the second transceiver. The second device also stores computer-readable instructions to generate a visible light signal using the visible light source. The first device stores computer-readable instructions to verify the secure wireless connection using the visible light signal.

Visible light communication for verifying a secure wireless connection

Methods and systems related to distributing payment keys to multiple discrete devices in a point of sale (POS) system are disclosed. One method includes storing a payment key on a first discrete device for a POS system and a public key certificate on a second discrete device for the POS system. The method also includes communicatively connecting the first discrete device with the second discrete device using a wire, transmitting the public key certificate from the second discrete device to the first discrete device using the wire, and verifying the public key certificate on the first discrete device. The method also includes finalizing a secure connection between the first discrete device and the second discrete device over the wire using a transport layer secure (TLS) protocol after the public key certificate is verified.

Distributing payment keys among multiple discrete devices in a point of sale system

Systems and methods for provisioning secure terminals for secure transactions are disclosed herein. A disclosed method includes generating a key using a key generator element on a secure terminal and sending a key validation request for the key from the secure terminal to a provisioning device. The method also includes parsing the key validation request and generating a key validation for the key and a trusted time stamp on the provisioning device. The method also includes sending, from the provisioning device, the key validation and the trusted time stamp to the secure terminal. The method also includes setting a clock on the secure terminal using the trusted time stamp and storing the key validation at the secure terminal.

Unified secure device provisioning

Systems, and associated methods, involving both a trusted and an untrusted device where sensitive data or keys are shared between those devices are disclosed. A disclosed method includes storing a key in a secure memory on a first device, receiving sensitive data via a user interface on a second device, generating a set of white box encryption instructions based on the key using a white box encryption generator on the first device, generating a complete data representation of the set of white box encryption instructions using a secure processor on the first device, transmitting the complete data representation from the first device to the second device, and encrypting the sensitive data using the complete data representation on the second device. The complete data representation is not Turing complete and is not executable with respect to the second device.

POS system with white box encryption key sharing

Methods and systems related to the use of tokenization services in payment processing systems are disclosed. The methods and systems include token translation services, token maps used as the basis for customer data models, specific approaches for securing the token maps and associated data, and the efficient storage of the token maps and associated data to facilitate enhanced payments experiences and analytics. One method includes transmitting a tokenization request with an encrypted payment account number from a POS to a tokenization service, receiving a token from the tokenization service in response to the tokenization request, salting the token with data to produce a salted token, encrypting the salted token using a secure processor on the POS, mapping the encrypted salted token to the payment account number in a map, and storing the map and the encrypted salted token in a memory on the secure processor on the POS.

Token management for enhanced omni-channel payments experience and analytics

This disclosure includes biometrically secured networked devices with enhanced privacy protection. One system includes a first biometrically secured device having a first sensor, and a second biometrically secured device having a second sensor. The first device is programmed to: (i) obtain a first sample of a first biometric using the first sensor; (ii) generate a secret biometrically derived key using the first sample of the first biometric; (iii) encrypt a set of biometric data using the secret biometrically derived key; and (iv) transmit the set of encrypted biometric data to the second biometrically secured device. The second device is programmed to: (i) obtain a second sample of the first biometric using the second sensor; (ii) generate the secret biometrically derived key using the second sample of the first biometric; and (iii) decrypt the set of biometric data using the secret biometrically derived key.

Network of biometrically secure devices with enhanced privacy protection

Methods and systems related to provisioning a secure connection are disclosed. One disclosed method includes storing a device secret on a secure element in a first device, storing a mapping from the device secret to a device identifier of the first device on a cloud architecture, generating a pairing key using a first connection protocol key generator on the secure element and the device secret, and generating the pairing key using a second connection protocol key generator on the cloud architecture and the device secret. The method also includes transmitting the pairing key from the cloud architecture to a second device in response to receiving the device identifier, mutually authenticating the first and second device using the pairing key, and adding the secure connection to the inter-device connection using the pairing key as stored on the first device and as stored on the second device.

Growing community of inventors

Mountain View, CA, United States of America

Brian Jeremiah Murray