Block, Inc.

Square, Inc.

Todor Ristov

Imran Sana Khan

Isreal Blagdan

Evan Doyle

Elise Hurwitz

Sara Sanchez-Llorens

Arnaud Ponchon

Christine Lin

Max Joseph Guise

John L Kelley

Eric Monti

Rodion Steshenko

Nicholas Hebner

Davis Gallinghouse

Imran Khan

Techniques are described for securely updating a point-of-sale (POS) system that includes a merchant-facing device and a buyer-facing device. For instance, the merchant-facing device may execute first software that provides first POS functionality and the buyer-facing device may execute second software that provides second POS functionality. To update both devices, the merchant-facing device may receive a software update from a payment service via a network connection, and update the first software using the software update. The merchant-facing device can then cause, via a physical connection, the buyer-facing device to reboot in an update mode and send the software update to the buyer-facing device. In response, the buyer-facing device can update the second software using the software update and then reboot in a payments mode. In some instances, the buyer-facing device can then update a secure enclave on the buyer-facing device using the software update.

Securely updating software on connected electronic devices

Techniques for conducting transaction(s) between a merchant and customer(s) via a multi-device point-of-sale (POS) system is described. The multi-device POS system can include a customer-facing device having a first processor for processing first instructions for presenting a customer user interface (UI) on a display of the customer-facing device. The customer-facing device can include a payment reader that is accessible by the one or more customers. Further, the multi-device POS system can include a first merchant-facing device having a second processor for processing second instructions for presenting a first merchant UI, which can enable the merchant to perform a first action associated with a first transaction of the one or more transactions. The first merchant-facing device can be coupled to the customer-facing device. The multi-device POS system can further include an application, which can be stored on the customer-facing device, a second merchant-facing device, or a personal device, for presenting a second merchant UI enabling the merchant to perform a second action.

Multi-device point-of-sale system having multiple merchant-facing devices

Temporarily provisioning functionality to a personal device in a multi-device point-of-sale (POS) system is described. In an example, a presence of a personal device operated by, or on behalf of, a merchant can be determined to be within a range of a POS system of a merchant. The POS system can include a merchant-facing device and a customer-facing device that is coupled to the merchant-facing device. Functionality can be provisioned to the personal device that (i) configures the personal device to present a merchant user interface (UI) via a display of the personal device to enable the merchant to interact with one or more customers and (ii) enables the personal device to interact with at least one of the merchant-facing device or the customer-facing device. Responsive to determining an occurrence of an event, the functionality can be de-provisioned from the personal device.

Temporarily provisioning functionality in a multi-device point-of-sale system

Techniques associated with a dual state merchant-facing device are described herein. A point-of-sale system can comprise multiple devices, such as a customer-facing device and a merchant-facing device that is coupled to the customer-facing device and can operate in a first state or a second state. In at least one example, the merchant-facing device operating in the first state can present a graphical user interface (GUI) on a display. The merchant-facing device can transition from the first state to the second state, the second state enabling the merchant-facing device to perform at least one additional functionality that is not available to the merchant-facing device in the first state, and can update the GUI based at least in part on the at least one additional functionality.

Multi-state merchant-facing device

Temporarily provisioning functionality to a personal device in a multi-device point-of-sale (POS) system is described. In an example, a personal device can be determined to be within a range of a POS system of a merchant. The POS system can include a merchant-facing device and a customer-facing device that is coupled to the merchant-facing device. Functionality can be provisioned to the personal device that (i) configures the personal device to present a customer user interface (UI) via a display of the personal device to enable a customer operating the personal device to interact with the merchant and (ii) enables the personal device to interact with at least one of the merchant-facing device or the customer-facing device. Responsive to determining an occurrence of an event, the functionality can be de-provisioned from the personal device.

Techniques for conducting transaction(s) between a merchant and customer(s) via a. multi-device point-of-sale system are described. The multi-device POS system can include a merchant-facing device having a first processor for processing first instructions for presenting a merchant user interface (UI) on a display of the merchant-facing device. Further, the multi-device POS system can include a first customer-facing device having a second processor for processing second instructions for presenting a first customer UI. The first customer UI can enable a first customer to perform a first action associated with a first transaction. The first customer-facing device can have been coupled to the merchant-facing device at a first time. Further, the multi-device POS system can include an application, which can be stored on the merchant-facing device, a second customer-facing device, or a personal device, for presenting a second customer UI enabling performance of a second action.

Multi-device point-of-sale system having multiple customer-facing devices

Techniques for securely updating a point-of-sale (POS) system that includes a merchant-facing device and a buyer-facing device are described. For instance, the merchant-facing device may execute first software that provides first POS functionality and the buyer-facing device may execute second software that provides second POS functionality. To update both devices, the merchant-facing device may receive a software update from a payment service via a network connection, and update the first software using the software update. The merchant-facing device can then cause, via a physical connection, the buyer-facing device to reboot in an update mode and send the software update to the buyer-facing device. In response, the buyer-facing device can update the second software using the software update and then reboot in a payments mode. In some instances, the buyer-facing device can then update a secure enclave on the buyer-facing device using the software update.

Techniques for implementing policy-based anti-rollback techniques on a computing device are described herein. As an example, a remote service may provide the computing device with a boot policy which indicates, for each boot stage of a software bootloader process, what software versions are permitted to execute. Prior to providing the computing device with the boot policy, the remote service may sign the boot policy with a private key, and include of an identifier corresponding to the computing device. At each boot stage of the bootloader process, components of the computing device may verify, using a public key, that the boot policy was signed with the private key, and that the boot policy corresponds to the computing device. After verification, the components may analyze the boot policy to determine whether each boot stage is permitted to execute a software version and boot to the next boot stage.

Update policy-based anti-rollback techniques

Techniques associated with a multi-functionality customer-facing device are described herein. A point-of-sale system can comprise multiple devices, such as a customer-facing device and a merchant-facing device that is coupled to the customer-facing device. The customer-facing device is capable of operating in a first state or a second state. In at least one example, the customer-facing device can present a graphical user interface (GUI) on a display. The customer-facing device can transition from the first state to the second state. The second state can enable the customer-facing device to perform at least one additional functionality that is not available to the customer-facing device in the first state. The customer-facing device can receive, while in the second state, an input via the GUI and can send to the merchant-facing device, an indication of the input.

Growing community of inventors

San Bruno, CA, United States of America

Todor Ristov