Square, Inc.

Block, Inc.

Max Joseph Guise

Jeremy Wade

Afshin Rezayee

Yue Yang

Kamran Sharifi

Dino Dai Zovi

Jason Douglas Waddle

Malcolm Smith

Andrew John Leiserson

Isreal Blagdan

Bertram Leesti

Trent Weber

Bradley Ryan

John L Kelley

Todor Ristov

Jesse Lee Dorogusker

Bradley Hall

Thomas Templeton

Michael Wells White

Yenliang Chen

Oliver S C Quigley

Imran Sana Khan

Eric Monti

Sergei Mosends

Lindsey Grossman

Benjamin Michael Adida

Bradley T Hall

Rodion Steshenko

Dan Boneh

Nicholas Hebner

Nicholas Slaney

Jesse Posner

Ovidiu I Bota

Alexander Schoof

Jordan Mecom

Arvin Aminpour

Allison Moyer

Kirill Zhukov

Ryan Lanman

Daniel Wilson

Ovidiu Bota

Justin Williams

Shivaraman Ramachandran

David Robinson

Davis Gallinghouse

Malcolm R Smith

Oliver SC Quigley

A system for locally authenticating a transaction of digital financial assets, such as cryptocurrency. A first device may locally store financial assets in non- volatile memory of the first device. The first device may use the locally-stored financial assets to conduct a local transaction with a second device. The first device may generate a transaction settlement data token and exchange the token with the second device, wherein the transaction settlement data token includes information specific to the local transaction, a value associated with the local transaction, and encrypted personal information associated with the first device. After receiving a confirmation of transmission from the second device, the value associated with the local transaction may be debited from the locally-stored financial assets.

Systems and methods for managing cryptocurrency

In some examples, a computer system receives, via a network and from a software module executable on a mobile device coupled to a card reader, security information that includes first security information associated with the card reader and second security information that is based on content of the software module and/or a software environment of the software module. The computer system determines validity of the first security information associated with the card reader based at least on information previously stored in the card reader and also accessible to the computer system. The computer system also determines the validity of the second security information. Based on determining the first and second security information are valid, the computer system sends, to the mobile device, an indication that the computer system has validated the security information, prompting the software module and the card reader to establish a secure communication session with each other.

Establishment of a secure session between a card reader and a mobile device

Display screen or portion thereof with a graphical user interface

A transaction device can implement a monitoring system to detect for tamper attempts at a chip card interface. The monitoring system can establish a baseline when no chip card is present in the chip card interface, or in some embodiments, when it is known that an authentic chip card is present in the slot. During subsequent evaluations of the chip card interface by the monitoring system, a response received by the monitoring system that deviates from the baseline can indicate that a tamper attempt at the chip card interface may have occurred. If a tamper attempt is determined by the monitoring system, a remedial or corrective action can be taken.

Line-based chip card tamper detection

A wireless communication device such as a payment reader has a wireless communication interface and is able to establish wireless pairing with an interactive electronic device such as a merchant device running a point of sale application. In order to establish pairing, the wireless communication device accesses an identifier. The identifier is transmitted to the interactive electronic device via the wireless communication interface, and the interactive electronic device sends the identifier to a pairing server. The pairing server retrieves a passkey based on the identifier and sends the retrieved passkey to the interactive electronic device via a secure connection. The wireless communication device and the interactive electronic device establish wireless pairing based on the retrieved passkey.

Server-assisted pairing for wireless communications

An electronic device may include a printed circuit board having a physically unclonable function (PUF) source. The electronic device may also include processing circuitry positioned on the printed circuit board. The PUF source includes a plurality of traces and each trace includes a first portion and a second portion having an increased surface area relative to the first portion. The PUF source is responsive to an input from the processing circuitry to provide PUF data based on the impedance characteristics of the plurality of traces. The processing circuitry is further configured to process the PUF data from the PUF source to perform an operation within the device.

Device security with physically unclonable functions

A consumer terminal for a point-of-sale (POS) system used in performing a POS transaction between a merchant and a consumer. The consumer terminal includes a touch screen display having a touch panel, a secure processor in a physically secure area and a main processor in a non-secure area. The main processor is configured to display a series of screens to guide a consumer through the POS transaction. Upon receiving a request for secure data from the main processor, the secure processor instructs the main processor to exit pass-through mode and enter a secure touch mode. Upon a determination that the request for secure data is complete, the secure processor instructs the main processor to exit secure touch mode and return to pass-through mode.

Point-of-sale system having a secure touch mode

A payment terminal may include payment interfaces to receive payment information from payment devices. The payment interfaces can include an interface configured to receive a payment card. Monitoring components may monitor the payment interfaces. In addition, a detection signal can be provided while a payment card is communicatively coupled to its corresponding payment interface. The monitored information and the detection signal may be used by the payment terminal to determine whether a transaction is fraudulent or if a tamper attempt is ongoing, based on local test criteria. In addition, the monitored information and detection signal may be provided to a server, which may store the monitored information and detection signal, test for fraudulent transactions and tamper attempts based on server test criteria, and determine updates to the local test criteria.

Detecting for fraud and tampering at a payment terminal

Electronic storage device

In some examples, a mobile card reader includes a card interface to read information from a card, an interface to enable the mobile card reader to communicate with a mobile device, and a processor configured to send security related information of the mobile card reader to an application executing on the mobile device. The security related information may be for transmission by the mobile device to a remote server system. The mobile card reader may receive, from the application, an indication that the application has been validated by the remote server system based on validation of the security related information of the mobile card reader and security related information of the application. In response, the mobile card reader generates a secure session key with which to carry out encrypted communication between the application and the mobile card reader.

An electronic device, such as a payment reader, may include a physically unclonable function (PUF) source to generate a plurality of PUF values. The electronic device may also include circuitry to compare the plurality of PUF values from the PUF source to determine a degree of randomness of the at least one PUF source in generating the plurality of PUF values. The circuitry can then determine, based on the determined degree of randomness, whether to use the PUF values from the PUF source to perform a secure operation for the electronic device.

Techniques are described for securely updating a point-of-sale (POS) system that includes a merchant-facing device and a buyer-facing device. For instance, the merchant-facing device may execute first software that provides first POS functionality and the buyer-facing device may execute second software that provides second POS functionality. To update both devices, the merchant-facing device may receive a software update from a payment service via a network connection, and update the first software using the software update. The merchant-facing device can then cause, via a physical connection, the buyer-facing device to reboot in an update mode and send the software update to the buyer-facing device. In response, the buyer-facing device can update the second software using the software update and then reboot in a payments mode. In some instances, the buyer-facing device can then update a secure enclave on the buyer-facing device using the software update.

Securely updating software on connected electronic devices

A point-of-sale (POS) system used in performing a POS transaction between a merchant and a consumer. The POS system includes a display having a touch panel, a main processor and a memory device. The POS system also includes a secure enclave with a secure processor and a microcontroller. The main processor is configured to display a series of screens to guide a consumer through the POS transaction. The microcontroller provides the inputs from the touch panel to the main processor when the POS system is operated in a pass-through mode and provides the inputs from the touch panel to the secure processor when the POS system is operated in a secure touch mode.

A transaction chip can exchange information with a chip card during a payment transaction. The transaction chip can incorporate a processing unit, a memory device, a contact interface and power and communication circuitry. The transaction chip can acquire payment information from the chip card when the EMV chip of the chip card is interfaced with the power and communication circuitry of the transaction chip via the contact interface. The transaction chip can also process the acquired payment information and transmit the processed payment information to a point-of-sale application of a merchant device via a wireless

Transaction chip incorporating a contact interface

Growing community of inventors

San Francisco, CA, United States of America

Max Joseph Guise