CN101727715B

CN101727715B - Mobile payment card industry pos terminal

Info

Publication number: CN101727715B
Application number: CN2009101436394A
Authority: CN
Inventors: 吴晓东; 张捷; 黄金
Original assignee: TIANYU COMMUNICATION GROUP CO Ltd
Current assignee: Tianyu Communication Group Co., Ltd.
Priority date: 2008-10-27
Filing date: 2009-05-27
Publication date: 2012-05-23
Anticipated expiration: 2029-05-27
Also published as: CN101727715A; WO2010050678A3; KR20100047097A; WO2010050678A2; KR101021264B1

Abstract

The present invention relates to a mobile PCI POS terminal. The mobile PCI POS terminal of the present invention comprises the following components: a mobile POS terminal main body which comprises a scanner module, a printer module, a main display module, a wireless modem module, a main control module with a memory, and a power module with a battery; a separable PIN entry device (PED) unit which is coupled to the mobile POS terminal main body through a communication connector, is accommodated in a separable housing, comprises a smart card reader and a magnetic card reader, a keypad module, a PED display, and a PED controller, and is connected with the mobile POS terminal main body through the communication connector; and a PCI security device which is only equipped in the separable PED unit, wherein the PCI security device forbids the PED unit when the separable housing is detached or invaded.

Description

Mobile payment card industry pos terminal

Technical field

Described technology relates generally to terminal, a kind of mobile payment card capable (PCI) point of sale (POS); More particularly; Relate to a kind of like this mobile PC I POS terminal; It has removable PIN (PIN) input device (PED), only to this PED Using P CI safety standard, and can when satisfying the PCI safety standard, reduce production cost thus.

Background technology

The application requires its full content to be herein incorporated to quote mode as proof in the right of priority of the Korean Utility Model Application No.20-2008-0014223 of submission on October 27th, 2008.

The system that information when point of sale (POS) system is meant the sale of a point is managed.This POS system is made amendment to the total amount of this product when reading the bar code that is attached to product, and carries out the sales transactions that comprises credit inquiry with online seller.

In this POS system, the POS terminal is used for collecting and recorded information.For example, desk-top POS terminal can be used for department store, supermarket and retail shop, can be used under the mobile environment such as logistics company and move the POS terminal.

Fig. 1 is the conventional block diagram that moves the POS terminal of illustration.In Fig. 1, the conventional POS terminal of moving comprises: barcode scanner module 1 is used to scan and receive the bar code information of product; Printer module 2 is used for export credit card receipt or management information; Display module 3 is used for showing (manipulation) information of manipulation and menu information; Control module 4 is controlled each module based on being stored in the mobile POS TCP in the storer 5 and is communicated with long-range principal computer; Radio modem module 6, it carries out radio communication with remote host computer under the control of control module 4; Card reader module 8, the credit card payment that it is controlled with process user intellignet card fetch 9 and magnetic strip reader (MSR) card reader 10 under the control of control module 4; Keysheet module 11, it is used to receive to moving the operation information controlled at the POS terminal and the PIN (PIN) of credit card user; Power module 12, it provides the electric power of battery 13; And PCI control module 14, it is used for management and respectively shields and sustain contacting to satisfy the PCI safety standard that moves the POS terminal and when remove housing, to stop the function at mobile POS terminal between (tamper) terminal and the housing.

As stated, the conventional POS terminal of moving receives product information through scanner module 1, processing and utilizing the credit card payment or the cash settlement of card reader module 8, and utilize printer module 2 to send receipt.This marketing information sends to long-range principal computer through radio modem module 6, and POS system is handled clearing.Under the situation of processed offline, this marketing information is by interim storage and when the POS terminal is connected to POS system, handle this marketing information after a while.

Move the POS terminal and be configured to PIN input device (PED); This PIN input device comprises Keysheet module 11 and the card reader module 9 that is used to handle credit card payment, and wherein this Keysheet module 11 is used to receive the price amount information and has utilized card reader 9 to carry out the required PIN of credit card payment.The crime of (hacking) and spurious may appear hardware is distorted here.

In order to prevent this crime, the mobile POS demanding terminal that ground such as Europe adopt is guaranteed the safety of PED according to the PCI standard.The PCI safety standard requires a kind of safety feature, makes when the housing that moves the POS terminal is opened or on attempting the internal circuit of PED or chip pin, applies external impact or when contacting, mobile POS terminal is disabled automatically.

In the PCI safety feature; Form fine and close conductive pattern; And parts that may be under attack are covered by flexible PCI safety diaphragm, wherein, and when the PCI safety feature receives external attack; This flexibility PCI safety diaphragm has damaged conductive pattern or has contacted with conductive pattern, has prevented the attack of carrying out through housing thus.In addition, on the substrate that has used conductive pattern, be formed with tamper (tamper), and in housing, be equipped with and be used for the contact that contacts with tamper.Therefore, when owing to having removed housing and make that the tamper contact is separated with tamper, tamper senses this separation.Damage (attack that receives) or the tamper contact that PCI control module 14 senses the PCI conductive pattern and the conductive pattern of PCI safety diaphragm or with separate (with separating of housing) of tamper, and forbidding control module 4 and all functions.

Conventional mobile POS terminal is an integrative-structure, and in this integrative-structure, each module of Fig. 1 is inserted also and is installed in the housing.Therefore, be installed in the conventional PCI safety feature that moves in the POS terminal and covered all modules that are installed in the housing.Only there is the PED that comprises Keysheet module 11 (being used to input password (PIN)) to need the PCI safety feature, but is installed in all module tops owing to integrative-structure makes this PCI safety feature to use credit card.

Because safety feature must be installed in top, whole mobile POS terminal, so the cost of conventional PCI safety feature is high, and is difficult to install safety feature.In addition, even need place under repair perhaps to break down with the irrelevant parts of PCI safety standard, also cannot open housing, therefore it being replaced need be expensive excessively.

Summary of the invention

As stated, the technical barrier at conventional mobile sale point (POS) terminal is: all modules top that is installed in this terminal owing to payment card industry (PCI) safety feature makes inconvenience and cost higher.

A kind of illustrative embodiments aims to provide a kind of mobile PC I POS terminal; It has removable PIN (PIN) input device (PED) of having used the PCI safety standard; Only with the PCI safety feature be applied to PED with reduce to make with installation process in cost and technical barrier, boost productivity thus.

A kind of illustrative embodiments also is intended to CPU (CPU) and shows that the display of price amount information is installed among the PED; An application configuration is stoped for communicating by letter between the CPU of the input controller through this fuselage and PED during password and stops the display of mobile POS terminal fuselage and the input and output of touch keyboard provisionally; Make the user only can utilize the keyboard of PED to input password; And after credit card payment goes through, make mobile POS terminal turn back to its virgin state, therefore improved the PCI security function.

The purpose of this illustrative embodiments is mobile PC I POS terminal configuration to having fuselage and removable PED, and only the PCI safety feature is installed among the PED.

In one embodiment, a kind of mobile PC I POS is provided the terminal.This mobile PC I POS terminal comprises: move POS terminal case unit, it comprises scanner module, printer module, main display module, radio modem module, the power module that has the main control module of storer and have battery; Removable PIN (PIN) input device (PED) unit; It is coupled to said mobile POS terminal case unit through communications connector; Said removable PED unit is installed in the removable housing; Said removable PED unit comprises card reader module, Keysheet module, PED display and PED controller, and said removable PED unit is connected with said mobile POS terminal fuselage through communications connector; And only be installed in the PCI safety feature in the said removable PED unit, when dismounting or when invading said removable housing, said PCI safety feature is forbidden said PED unit.

Said main display module comprises touch keyboard integratedly; And when receiving when being used to ratify the password of credit card payment; Said main display module and said touch keyboard are stopped provisionally, and when the credit card payment approval was accomplished, said main display module and said touch keyboard were resumed.

This PCI safety feature comprises: conductive rubber; It is configured to last printed circuit board (pcb) and following printed circuit board are connected with conductor so that the said PCB of going up was detected with said following separating of PCB, and said upward PCB and said PCB down have at least one parts of said removable PED unit; Be formed at a plurality of tampers on each among said PCB of going up and the said PCB down; Safety diaphragm; This safety diaphragm is installed to be and covers said PCB of going up and the said exposed surface of PCB down when the open installation of said tamper, and the conductive pattern that said safety diaphragm has the densification between two insulation courses detects with the damage to said conductive pattern; Be arranged on the tamper contact rubber blanket of the upper shell below of said PED, said tamper contact rubber blanket have when said upper shell is combined be formed at said on tamper on the PCB tamper contact that contacts and conduct electricity; Following tamper contact, it is attached to from the end of the outstanding boss of the lower house of said PED and contacts and conduct electricity with tamper on being formed at said PCB down; And the PCI control module, it is configured to the conduction of said conductive rubber, said tamper and said safety diaphragm is detected, and is configured to when the conduction mistake occurring, utilize the PCI security function to forbid the function at said mobile POS terminal.

It is in order to introduce the selection to the notion of the reduced form that further describes in the detailed description hereinafter that general introduction to summary of the invention is provided.The general introduction of summary of the invention neither is intended to identify the key feature or the essential feature of theme required for protection, also is not intended to confirm with opposing scope auxiliary of theme required for protection.

Description of drawings

Fig. 1 is the block diagram at the conventional mobile sale point (POS) of illustration terminal.

Fig. 2 is the block diagram of illustration according to the terminal, mobile payment card industry (PCI) point of sale (POS) of an illustrative embodiments.

Fig. 3 is the sectional view of illustration according to the PCI safety feature of removable PIN (PIN) input device (PED) of an illustrative embodiments.

Fig. 4 is the picture of illustration according to the mobile PC I POS terminal of an illustrative embodiments.

Fig. 5 is an illustration according to the picture of the mobile PC I POS terminal of an illustrative embodiments and the removable PED unit that separates with this mobile PC I POS terminal.

Embodiment

Describing more all sidedly with reference to the accompanying drawings should technology, in these accompanying drawings illustration illustrative embodiments that should technology.Yet, this technology can by many multi-form realize and should not be interpreted as be limited to here the illustrative embodiments of setting forth.But it is should technology in order to make those of ordinary skills implement fully and to put into practice that these illustrative embodiments are provided.

Term used herein can be understood as follows.

Should be appreciated that first, second waits and describes various elements although utilize term here, these elements should not receive the restriction of these terms.These terms are only used for an element and another element region are separated.For example, first element can be called second element, and similarly, second element can be called first element.

Term " and/or " comprise any combination and all combinations of the project that one or more lists relatedly.For example, " first project, second project and/or the 3rd project " is meant at least one in first project, second project and the 3rd project, promptly respectively comprises all combinations of first, second and the 3rd project of first project, second project and the 3rd project.

Should be appreciated that when an element was known as " connection " or " coupling " to another element, it can directly connect or be coupled to other element or can have intermediary element.Comparatively speaking, when being known as, an element " when being directly connected " or " directly coupled " to another element, do not have intermediary element.Other word that is used to describe the relation between the element for example " between " should make an explanation in a similar manner to " direct neighbor " to " directly " and " adjacent ".

When using herein, singulative " " (" a ", " an ") and " being somebody's turn to do " are intended to also comprise plural form, only if in context, clearly illustrated that opposite implication.Further should be appreciated that; The term that here uses " comprises " that (" comprises ", " comprising ") and/or " comprising " (" includes " and/or " including ") indicated and has described characteristic, integral body, step, operation, element and/or parts, do not exist or adds one or more other characteristic, integral body, step, operation, element, parts and/or their combination but do not get rid of.

Each step described herein can be carried out according to the order different with the order of clearly describing.In other words, can be according to said same sequence, side by side perhaps according to each step of reverse order execution.

Only if definition is arranged in addition, the meaning of all terms that here use and the same meaning of those skilled in the art's common sense.As defined these terms in general dictionary should be interpreted as have with association area in the identical meaning of contextual meaning and should not be interpreted as and have desirable or too formal meaning, only if clearly definition is arranged in this manual.

Fig. 2 is the block diagram of illustration according to the terminal, mobile payment card industry (PCI) point of sale (POS) of an illustrative embodiments, and Fig. 3 is the sectional view of illustration according to the PCI safety feature of removable PIN (PIN) input device (PED) of an illustrative embodiments.Fig. 4 is the picture of illustration according to the mobile PC I POS terminal of an illustrative embodiments, the picture of Fig. 5 removable PED unit that to be illustration separate according to the mobile PC I POS terminal of an illustrative embodiments and with this mobile PC I POS terminal.

With reference to Fig. 2, move the POS terminal and have mobile POS terminal case unit 100 and removable PIN (PIN) input device (PED) unit 200.The PCI safety feature of describing among Fig. 3 only is installed in the removable PED unit 200.

Move POS terminal case unit 100 and comprise scanner module 110, printer module 120, main display module 130, radio modem module 160, the power module 180 that has the main control module 140 of storer 150 and battery 181 is installed.

Removable PED unit 200 comprises card reader module 210, Keysheet module 260, PED display 250 and PED controller 240.Removable PED unit 200 is installed in the removable housing and through communications connector 271 and is connected with mobile POS terminal case unit 100.Card reader module 210 comprises intellignet card fetch 220 and magnetic strip reader (MSR) card reader 230.

Main display module 130 can comprise touch keyboard 131 integratedly.Move POS terminal case unit 100 and comprise the communication unit 170 and connector 171 that communicates with removable PED unit 200 in addition, and removable PED unit 200 also comprises the communication unit 270 and connector 271 that communicates with mobile POS terminal case unit 100 in

addition.Communication unit

170 and 270 can be corresponding to serial communication module.

Fig. 3 is the sectional view of illustration according to the PCI safety feature in the removable PED unit of an illustrative embodiments.

The PCI safety feature comprises conductive rubber 303, a plurality of tamper 342, safety diaphragm 330, rubber blanket 340 and a plurality of tamper contact 322 down.Conductive rubber 303 is connected with last printed circuit board (pcb) 301 and following PCB 302, and the parts of each module of removable PED unit 200 are installed on last PCB 301 and following PCB 302, and when last PCB 301 opened with following PCB in 302 minutes, cuts off electric power.Tamper 342 is the conductive patterns that are formed on the outside surface of PCB 301 and following PCB 302.Safety diaphragm 330 has covered the outside surface except that the dome switch 312 of tamper 342 and keyboard among last PCB 301 and the following PCB 302, and has the conductive pattern that is formed on two densifications between the insulation course.Rubber blanket 340 has covered the upper surface of the keyboard dome switch 312 that is positioned on the PCB 301; And have a plurality of tampers contact 341, these tamper contacts 341 by upper shell 310 press be formed at PCB 301 on each tamper 342 contact and conduct electricity through tamper 342.Following tamper contact 322 is attached to from the end of the outstanding boss 321 of lower house 320 (this lower house 320 has covered the bottom of removable PED unit 200 with corresponding with upper shell 310), and this time tamper contact 322 contacts to conduct electricity through tamper 342 with tamper 342 on being formed at down PCB 302.PCI control module 280 is configured to the conduction situation of conductive rubber 303, safety diaphragm 330 and tamper 342 on last PCB 301 and the following PCB 302 is kept watch on; To the destruction of safety diaphragm,

PCB

301 and 302 separate and housing 310 and 320 separate and detect, and forbid the function of removable PED unit 200.

In lower house 320, be formed with hook combiner 306 and screw combiner 307, wherein, hook combiner 306 combines with the hook 101 that is installed in the housing that moves POS terminal case unit 100.Hook combiner 306 and screw combiner 307 are not opened to the inside of lower house 320 but are closed.In other words, screw combiner 307 (screw can from outside and this screw combiner 307 screw-threaded engagement of lower house 320) does not open to the inside of lower house 320 but cuts out.Hook 101 is installed in and moves in the POS terminal case unit 100, and is inserted in the hook combiner 306 and with it and combines.Here, hook combiner 306 cuts out towards the inside of lower house 320.This structure is intended to utilize the space between screw combiner 307 and the hook combiner 306 to prevent the attack that trial is carried out from the outside.

In this illustrative embodiments; The main control module 140 that moves POS terminal case unit 100 and PED controller 240 are connected with 271 with 270 connector 171 through communication unit 170 and communicate, and card information from card reader module 210 to 140 transmission of main control module that import through of PED controller 240 and the password imported through Keysheet module 260 are to settle accounts approval.

Here, main control module 140 control PED displays are to show the price amount information of clearing.When passing through to select credit card payment as means of settlement and from card reader module 210 input card information; The message of main control module 140 output request input passwords; Close the backlight of main display module 130 so that screen deepening (shade); And stop the touch keyboard input, get into the function park mode thus.

When 200 inputs are during passwords from removable PED unit, through radio modem module 160 execute card ratification process, perhaps POS terminal self is carried out this process and is not used radio modem module 160.When approval was accomplished, the function of main display module 130 and touch keyboard 131 was resumed.

In other words, the price amount information is presented on the PED display 250, and only in the Keysheet module 260 of removable PED unit 200, can input the password of credit card payment.After the clearing approval was accomplished, the function of the screen of main display module 130 and touch keyboard 131 was resumed.

In this illustrative embodiments; The mobile POS terminal case unit 100 that moves the POS terminal disposes with removable PED unit 200 separatedly, so that removable PED unit 200 can be attached to mobile POS terminal case unit 100 and can separate with mobile POS terminal case unit 100.In addition, move POS terminal case unit 100 and removable PED unit 200 and be connected, and the PCI safety feature only is installed in the removable PED unit 200 through communications connector.Here; Removable PED unit 200 comprises card reader module 210, Keysheet module 260, PED display 250 and PED controller 240; And removable PED unit 200 through

communication unit

170 and 270 and the main control module 140 of mobile POS terminal case unit 100 communicate, make it possible to thus separately.

In the PCI safety feature in being installed in removable PED unit 200, a plurality of PCB 301 are connected by means of conductive rubber 303 with 302.Therefore, as PCB 301 with when opening in 302 minutes, PCI control module 280 detects conductive rubber 303 and breaks off and connecting.

PCB

301 and 302 upper surface and lower surface are covered by safety diaphragm 330.When attacking through

housing

310 or 320, the conductive pattern in the safety diaphragm 330 is damaged, and PCI control module 280 detects this damage.In addition, when upper shell 310 and housing were opened in 320 minutes, tamper 342 separated with 322 with tamper contact 341 and breaks off and being connected, and PCI control module 280 detects this disconnection connection.In other words, there are the circuit that conducts electricity through conductive rubber 303, the circuit that conducts electricity through tamper 342 and the circuit that conducts electricity through the conductive pattern between two insulation courses that are formed at safety diaphragm 330.Therefore, when any one disconnection in these conducting channels connected, PCI control module 280 was ended the function of (suspend) PED controllers 240 with forbidding PED controller 240.

When the upper shell 310 of for example opening removable PED unit 200 or housing 320, perhaps destroying safety diaphragm 330, PCI control module 280 forbiddings move the POS terminal and satisfy the PCI standard thus.

Because the PCI safety feature only is installed in the removable PED unit 200, so compare with being installed in conventional moving in the POS terminal, the PCI safety feature can be installed in the smaller area territory.Therefore, can reduce the indivedual costs (component cost) and the installation cost of PCI safety feature.The precision and the difficulty that in addition, can reduce the time of manufacture process and can reduce manufacture process.

In addition; When being installed in the scanner module 110 that moves in the POS terminal case unit 100, printer module 120, main display module 130, main control module 140, radio modem module 160 etc. and breaking down, can repair and irrelevant them with the PCI security function.Similarly, when removable PED unit 200 is in error condition or according to PCI safety and when disabled, can be separately separately and replace subsequently or repair with removable PED unit 200.Thereby, help safeguarding.

Mobile POS terminal according to illustrative embodiments has mobile POS terminal case unit and removable PED unit and only is installed in the PCI safety feature in this removable PED unit.Therefore, can satisfy the PCI safety standard with low cost.In addition, when the PCI safety feature in the removable PED unit is worked, can removable PED unit separately also be repaired subsequently or replace separately.When these modules of fuselage break down, can have nothing to do with the PCI safety feature to these module places under repair, therefore can reduce maintenance cost.In addition, even move POS terminal case unit, also can continue to use mobile POS terminal case unit through utilizing subsequent use PED unit to replace removable PED unit by PCI safety feature forbidding.

Foregoing is exemplary have been described the disclosure and to be not to limit it.Although described a plurality of embodiment of the present disclosure, one of ordinary skill in the art will readily recognize that substantially not breaking away from novel religion of the present disclosure states under the situation with advantage, can have multiple modification in these embodiments.Therefore, be intended to all such modifications are included in as in the scope of the present disclosure that is limited in claims.Therefore, should be appreciated that foregoing is not to be to be interpreted as to be limited to disclosed specific implementations to illustration of the present disclosure, and is intended to the modification to disclosed embodiment and other embodiments is included in the scope of appended claims.The disclosure is limited appended claims, and the equivalent of these claims is included in claims.

Claims

1. POS terminal, a mobile payment card industry PCI point of sale, it comprises:

Be installed in the mobile POS terminal case unit in the body shell, this moves the power module that POS terminal fuselage unit pack is drawn together scanner module, printer module, main display module, radio modem module, had the main control module of storer and have battery;

Removable PIN PIN input device PED unit; It is coupled to said mobile POS terminal case unit through communications connector; Said removable PED unit is installed in the removable housing, and said removable PED unit comprises card reader module, Keysheet module, PED display and PED controller and is connected with said mobile POS terminal fuselage through communications connector; And

Only be installed in the PCI safety feature in the said removable PED unit, when dismounting or when invading said removable housing, said PCI safety feature is forbidden said PED unit; Wherein, said PCI safety feature further comprises:

Conductive rubber; It is configured to last printing board PCB and following printing board PCB are connected with conductor so that the said PCB of going up was detected with said following separating of PCB, and said upward PCB and said PCB down have at least one parts of said removable PIN PED unit;

Be formed at a plurality of tampers on each among said PCB of going up and the said PCB down; Said tamper is the conductive pattern that is formed on the said outside surface of going up PCB and said PCB down;

Safety diaphragm; When the open installation of said tamper; This safety diaphragm is installed to be and covers said PCB of going up and the said exposed surface of PCB down, and the conductive pattern that said safety diaphragm has the densification between two insulation courses detects with the damage to said conductive pattern;

Be arranged on the tamper contact rubber blanket of the upper shell below of said removable PIN PED unit, said tamper contact rubber blanket have when said upper shell is combined be formed at said on tamper on the PCB tamper contact that contacts and conduct electricity;

Following tamper contact, it is attached to from the end of the outstanding boss of the lower house of said removable PIN PED unit and contacts and conduct electricity with tamper on being formed at said PCB down; And

The PCI control module, it is configured to the conduction of said conductive rubber, said tamper and said safety diaphragm is detected, and is configured to when the conduction mistake occurring, utilize the PCI security function to forbid the function at said mobile PC I POS terminal.

2. POS terminal, mobile payment card industry PCI as claimed in claim 1 point of sale; Wherein, Said main display module comprises touch keyboard integratedly, and when receiving password with the approval credit card payment, said main display module and said touch keyboard are stopped provisionally; And when the credit card payment approval was accomplished, said main display module and said touch keyboard were resumed.