Square, Inc.

Block, Inc.

Qualcomm Incorporated

Securekey Technologies Inc.

Sqaure, Inc.

Malcolm Smith

Afshin Rezayee

Yue Yang

Jeremy Wade

Max Joseph Guise

Kshitiz Vadera

Kamran Sharifi

Kevin Ka Wai Ng

Michael Wells White

Andrew John Leiserson

Sergei Mosends

Jesse Wilson

Murat Cat

Gokhan Aydeniz

William Hardy

Mark Philip Zagrodney

Shawn Zurbrigg

Yasser Zabuair

Lev Kusman

Bruce Bell

Troy Jacob Ronda

Andre Michel Boysen

Haipeng Yan

Andrew Bridges

Edouard Karam

Ovidiu I Bota

Mark Phillip Zagrodney

Mikhael Khaymov

Siu Kong

Richard Wong

Ovidiu Bota

A transaction device can implement a monitoring system to detect for tamper attempts at a chip card interface. The monitoring system can establish a baseline when no chip card is present in the chip card interface, or in some embodiments, when it is known that an authentic chip card is present in the slot. During subsequent evaluations of the chip card interface by the monitoring system, a response received by the monitoring system that deviates from the baseline can indicate that a tamper attempt at the chip card interface may have occurred. If a tamper attempt is determined by the monitoring system, a remedial or corrective action can be taken.

Line-based chip card tamper detection

A wireless communication device such as a payment reader has a wireless communication interface and is able to establish wireless pairing with an interactive electronic device such as a merchant device running a point of sale application. In order to establish pairing, the wireless communication device accesses an identifier. The identifier is transmitted to the interactive electronic device via the wireless communication interface, and the interactive electronic device sends the identifier to a pairing server. The pairing server retrieves a passkey based on the identifier and sends the retrieved passkey to the interactive electronic device via a secure connection. The wireless communication device and the interactive electronic device establish wireless pairing based on the retrieved passkey.

Server-assisted pairing for wireless communications

A device may run an application having information with multiple accounts associated with processing of transactions. The application may provide account information that is used to process the transactions. At the same time, a background application may operate on the device. The background application may be compatible with a second device, and when within range of the second device, may communicate background messages relevant to the transaction. The transaction may then be processed based on the account information and the background messages.

Multi-source transaction processing

A provisioning system is provided for terminals such as point of sale terminals. An interface device interfaces with a smart card and a provisioning server, providing initialization keys and security codes that are stored on the smart card. At a terminal, an initialization key from the smart card may be provided to the terminal if a correct security code is entered at the terminal. The terminal may then provide a terminal authorization package to the smart card. The terminal authorization package is stored on the smart card. At the interface device, the terminal authorization package is provided to the provisioning server. The terminal may then securely communicate transactions with an issuer server.

Systems and methods for provisioning point of sale terminals

A transaction chip can exchange information with a chip card during a payment transaction. The transaction chip can incorporate a processing unit, a memory device, a contact interface and power and communication circuitry. The transaction chip can acquire payment information from the chip card when the EMV chip of the chip card is interfaced with the power and communication circuitry of the transaction chip via the contact interface. The transaction chip can also process the acquired payment information and transmit the processed payment information to a point-of-sale application of a merchant device via a wireless

Transaction chip incorporating a contact interface

In some examples, a system and method for pairing a payment object reader with a point-of-sale (POS) terminal is described herein. The payment object reader includes one or more light indicators configured to display information in an optical pattern of one or more colors, brightness, lightness, and intensities, wherein the light indicators display a first optical pattern representative of an operational status of the payment object reader in a first mode, and a second optical pattern representative of a pairing code in a second mode. A display control component, executed by a processor, is configured to control the light indicators in accordance with the pairing code to generate the second optical pattern, the second optical pattern when shared with the POS terminal enables pairing between the payment object reader and the POS terminal. When paired, the payment object reader allows the POS terminal to accept payments from a customer.

Pairing a payment object reader with a point-of-sale terminal

An electronic device may include circuitry and an anti-tamper device having a physical characteristic that changes in response to a tamper attempt. The circuitry is configured to determine physically unclonable function (PUF) data based on the physical characteristic and to perform at least one secure operation based on the PUF data. The circuitry is further configured to detect the tamper attempt based a change to the physical characteristic and to perform at least one action in response to detection of the tamper attempt for protecting the electronic device from the tamper attempt.

Devices with on-board physically unclonable functions

A payment processing device can implement a monitoring system to detect for tamper attempts at a chip card interface. The monitoring system can establish a baseline when no chip card is present in the chip card interface, or in some embodiments, when it is known that an authentic chip cardis present in the slot. During subsequent evaluations of the chip card interface by the monitoring system, a response received by the monitoring system that deviates from the baseline can indicate that a tamper attempt at the chip card interface may have occurred. If a tamper attempt is determined by the monitoring system, a remedial or corrective action can be taken.

A wireless communication device such as a payment reader has a wireless communication interface and is able to establish wireless pairing with an interactive electronic device such as a merchant device running a point of sale application. In order to establish pairing, the wireless communication device accesses a passkey and encrypts the passkey. The encrypted passkey is transmitted to the interactive electronic device via the wireless communication interface, and the interactive electronic device sends the encrypted passkey to a pairing server. The pairing server decrypts the encrypted passkey and sends the decrypted passkey back to the interactive electronic device via a secure connection. The wireless communication device and the interactive electronic device establish wireless pairing based on the passkey and the decrypted passkey.

A point of sale system has a display for receiving touch inputs, a controller to receive the touch inputs from the display, and a secure controller to receive touch input data from the controller. The system also has a card interface module and a contactless interface module to provide encrypted data to the secure controller. The secure controller can operate in either a secure mode or a non-secure mode. When a non-secure mode is engaged, the secure controller provides the touch input data to a processor. When a secure mode is engaged, the secure controller blocks at least a portion of the touch input data from the processor.

Point of sale system with secure and unsecure modes

A transaction device includes circuitry that provides a power supply to a processor of the transaction device. Attackers may attempt to glitch the processor power supply in a manner that causes processor to operate incorrectly such as by skipping instructions. A monitoring circuit may be coupled to the processor power supply circuitry to identify conditions that are indicative of a glitch attempt. Glitch attempts may be stored in a memory and reported to the processor to induce the execution of counter-measures.

Processor power supply glitch detection

An electronic device may include a printed circuit board having a physically unclonable function (PUF) source. The electronic device may also include an integrated circuit (IC) chip positioned on the printed circuit board, and the first PUF source may be embedded in or formed on the printed circuit board external to the IC chip. The IC chip has processing circuitry that is configured to determine PUF data based on the PUF source. The processing circuitry is further configured to determine a cryptographic key or authentication token based on the PUF data and to perform at least one secure operation using the cryptographic key or authentication token.

Growing community of inventors

Toronto, Canada

Malcolm Smith