WO2019190345A1

WO2019190345A1 - System for controlling a network of point of sale terminals

Info

Publication number: WO2019190345A1
Application number: PCT/RU2018/000210
Authority: WO
Inventors: Алексей Владимирович БРИК; Александр Анатольевич ГРИШУТИН; Станислав Владимирович ПЛАТОНОВ
Original assignee: Публичное Акционерное Общество "Сбербанк России"
Priority date: 2018-03-30
Filing date: 2018-03-30
Publication date: 2019-10-03
Also published as: RU2683613C1; EA201800181A1

Abstract

The present technical solution relates generally to the field of computer engineering, and particularly to systems for controlling a network of point of sale (POS) terminals. A system for controlling a POS terminal network comprises the following components: at least one POS terminal capable of exchanging data with at least one central server; at least one central server that includes a database and that is capable of storing a base set of parameters, a software distribution archive, and other categories of data for all registered POS terminal numbers; at least one POS terminal configuration module capable of connecting to the central server database and configuring POS terminal parameters; and at least one monitoring console capable of connecting to the central server for configuring and monitoring same and of tracking the transaction flow from the POS terminals. The technical result consists in allowing the centralized configuration of a fleet of POS terminals and in more efficiently loading configuration parameters, software updates, stop lists, and other kinds of information to POS terminals remotely.

Description

POS TERMINAL NETWORK MANAGEMENT SYSTEM

FIELD OF TECHNOLOGY

[001] This technical solution, in General, relates to the field of computer technology, and in particular to automated systems for managing a network of POS terminals.

BACKGROUND

[002] Currently, due to the constant increase in the number of POS terminals, financial institutions need to create systems designed for centralized configuration of POS terminals, control over the technical condition of the POS terminal network, and collect statistics on operations and load in order to obtain analytical reports.

[003] Typically, such systems are integrated into the POS terminal network of a financial institution and include POS terminals and pins with special software, as well as a monitoring server that stores all data about transactions and events. Moreover, to increase security in such systems, the transmission of information between the POS terminal and the server is carried out in encrypted form using the SSL protocol.

[004] Patent application WO2015163825A1 “System and method for managing wireless transactions on a POS terminal”, patent holder: Telecom Equipment Pte Ltd., publication date: 10.29.2015 is known from the prior art.

[005] This technical solution describes an innovative mechanism for interaction, mainly between a POS terminal and a mobile device. The invention focuses on payment through POS terminals using wireless devices, as well as on the data used for this, namely transactions and POS terminal identifiers.

[006] However, the application does not address the interaction between the POS terminal and server components (such as a POS server, an application server for a mobile device).

[007] Also known patent US7784684B2 "Wireless computer wallet for physical transactions of POS terminals", patent holder: Fujitsu Ltd., publication date: 08/31/2010. [008] This solution comprises the implementation of a POS terminal transaction authorization / verification mechanism using mobile wireless devices (mobile phones or communicators) of clients. In this case, a remotely located server is used to validate the client device (phone) and its personal pin code. The invention also focuses on security, which is modeled by a peculiar mechanism of message-agreements.

SUMMARY OF THE INVENTION

[009] The technical solution aims to eliminate the disadvantages inherent in existing solutions from the prior art.

[0010] The technical task set in this technical solution is to expand the communication capabilities of all types of POS terminals when connecting them to card service systems of a financial institution, as well as to create a centralized POS terminal settings management system with the possibility of monitoring.

[0011] The technical result manifested in solving the above problem is a developed tool for configuring POS terminals, implementing a mechanism for remotely loading configuration parameters, software updates, stop lists and other types of information in POS terminals.

[0012] An additional technical result achieved by solving the above problem is the prompt receipt of information about POS terminals, their equipment, configuration details and information on trade / bank checks with customer signatures.

[0013] Also achieved is the uploading to the POS terminal of the processing status in the form of a string to inform the cashiers.

[0014] This technical result is achieved through the implementation of a POS terminal network management system, which comprises at least one POS terminal configured to exchange data with at least one central server; at least one central server, including a database and configured to store a basic set of parameters, a distribution software archive for all registered numbers of POS terminals; at least one POS terminal configuration module configured to connect to a central server database and Configuring POS terminal parameters at least one monitoring console configured to connect to a central server for monitoring and monitoring data flows from POS terminals.

[0015] In some embodiments of the technical solution, the system further comprises a communication node configured to route traffic from different subnets.

[0016] In some embodiments of the technical solution, the central server generates an activation code for each POS terminal number.

[0017] In some embodiments of the technical solution, upon failure of the POS terminal, the registration number of the POS terminal is remotely loaded into a new physical device with a new serial number.

[0018] In some embodiments of the technical solution, the RSA public key cryptographic algorithm is used when transmitting data from the central server to the POS terminal.

[0019] In some embodiments of the technical solution, the configuration of each POS terminal is stored as a tlv file on a central server.

[0020] In some embodiments of the technical solution, the monitoring console is connected to the central server software via TCP / IP and / or Ethernet.

[0021] In some embodiments of the technical solution, when connecting the monitoring console to the central server software, the password of this software instance is specified, which is identical to the password that secures local access to the settings of the central server.

[0022] In some embodiments of the technical solution, when configuring the central server, a remote monitoring mode is set that is maintained in default state.

[0023] In some embodiments of the technical solution, the monitoring console reflects graphically the values of the monitoring parameters over the entire time interval of the central server.

BRIEF DESCRIPTION OF THE DRAWINGS [0024] The features and advantages of this technical solution will become apparent from the following detailed description of the invention and the accompanying drawings.

[0025] In FIG. 1 shows the architecture of an automated system for controlling a network of 5 POS terminals.

[0026] In FIG. Figure 2 shows an example of connecting the monitoring console to the central server of the system.

[0027] In FIG. Figure 3 shows an example of connecting the monitoring console to the central server of the system when the physically central server consists of several servers.

[0028] In FIG. Figure 4 shows an embodiment when N servers are connected in a chain, the first N-1 servers operating in transparent mode, and the last in remote monitoring mode.

[0029] In FIG. 5 shows an embodiment when, in the event of a break in the connection somewhere in the middle, the last of the remaining central servers in communication goes into remote monitoring mode.

DETAILED DESCRIPTION OF THE INVENTION

[0030] Below will be described the concepts and terms necessary for understanding 20 of this technical solution.

[0031] In this technical solution, a system is meant, including a computer system, a computer (electronic computer), CNC (numerical control), PLC (programmable logic controller), computerized control systems, and any other devices capable of 25 a given, well-defined sequence of operations (actions, instructions).

[0032] An instruction processing device is understood to mean an electronic unit or an integrated circuit (microprocessor) executing machine instructions (programs).

zo [0033] The command processing device reads and executes machine instructions (programs) from one or more data storage devices. Hard disk drives (HDD), flash memory, ROM (read only memory), solid state drives (SSD), optical drives can be used as storage devices. [0034] A program is a sequence of instructions for execution by a computer control device or an instruction processing device.

[0035] A POS terminal is an electronic software and hardware device for 5 accepting payment cards that can accept cards with a chip, magnetic stripe and contactless cards, as well as other devices having contactless pairing.

[0036] Shown in FIG. 1 is a block diagram of an automated system for managing a network of POS terminals, may be configured as follows and comprise the following components.

[0037] The system 100 comprises at least one POS terminal 110 configured to communicate with at least a central server 120 through a POS terminal configuration module 130.

[0038] The central server 120 stores a basic set of parameters, a distribution software archive 15, and other data categories for all registered POS terminal numbers 110.

[0039] In some embodiments, the central server 120 is one or more physical servers, or one or more virtual servers.

[0040] The central server 120 may be a conventional computer server 20. In an example embodiment of the present technical solution, the central server 120 may be a Dell ™ PowerEdge ™ server that uses the Microsoft ™ Windows Server ™ operating system. The central server 120 may also be implemented in the form of other types of network equipment, for example, inter alia, a router, switch, 25 gateway, base station, or a combination thereof. The central server 120 may be implemented on any suitable hardware and / or application software and / or system software, or a combination thereof. In some embodiments of the present technical solution, not limiting its scope, the functionality of the server 120 can be divided, and can be performed using several servers. An embodiment of a central server 120 is well known in the art. However, if a brief description is given, the central server 120 consists of a network data interface that is configured and configured to exchange data with the POS terminal configuration modules 130 and other devices, connected to a data network. Server 120 also includes at least one computer processor operably connected to a memory and to a network data interface. The processor of the central server 120 is structured and configured to perform a method of managing a network of POS terminals, as will be described in detail below.

[0041] In this technical solution, the POS terminal 110 may have a characteristic stable (established) design, which is known from the prior art. This design includes the following elements: a communication channel that connects the POS terminal 110 to the central server 120, a printer (printing device), an encryption key, a card reader (memory card reader, etc.) that reads data from cards of various formats, as well as a keyboard for entering a PIN code.

[0042] Also, the system 100 comprises at least one central server 120, including a database 120.1 and configured to store a basic set of parameters, a distribution archive of software, and other categories of data in a database 120.1 for all registered numbers of POS terminals 110.

[0043] Various types of databases can be used as database 120.1, namely, not limited to: hierarchical (IMS, TDMS, System 2000), network (Cerebrum, Cronospro, DBVist), relational (DB2, Informix, Microsoft SQL Server) , object-oriented (Jasmine, Versant, POET), object-relational (Oracle Database, PostgreSQL, FirstSQL / J), functional, etc.

[0044] In some embodiments, when configuring the system 100, the registration procedure of the POS terminals 110 is performed as follows.

[0045] An application for registration of the POS terminal 110 is sent to the central server 120 through the POS terminal configuration module 130, which indicates:

• name of the trade and service point of the financial institution, or the number of the cash withdrawal point,

• POS terminal installation address,

• the need for special modes of servicing cards - manual input, pre-authorization, etc.,

• model of the POS terminal and its PIN keyboard,

• commission percentage for third-party cards Visa, MasterCard, Maestro, • the number of installed POS-terminals in this structural unit, etc.

[0046] This data is recorded in the database 120.1, which stores registration data of the terminal equipment. When registration is successfully completed, additional details appear in the database 120.1 for each new POS terminal 110:

• POS terminal registration number (TerminallD),

• Merchant number,

• merchant category (MCC).

[0047] The central server 120 for each new POS terminal 110 creates an entry with its configuration (analogue of the TLV file) in the database 120.1. Tag-length-value (TLV, also “type-length-value”) is a widespread method for recording short data in computer files and telecommunication protocols.

[0048] In addition to the typical configuration, the central server 120 creates for each number of the POS terminal 110 an additional parameter: an activation code. In some embodiments, the activation code is obtained from an external system of a financial institution or is generated independently. It is generated randomly or based on any configuration data, data of the POS terminal, and is designed to provide the ability to replace equipment while saving the registration data of the POS terminal 110.

[0049] After that, the registration form of the POS terminal 110 is sent to the structural unit of the financial institution in which the POS terminal is installed. It indicates, for example, the following parameters:

• the name of the trade and service point of the financial institution, or the number of the cash withdrawal point, and the installation address of the POS terminal 110 (for verification with the application);

• registration number of the POS terminal 110;

• activation code to it.

[0050] Upon receipt of the registration form, the registration number of the POS terminal 110 and a set of communication options that the POS terminal 110 can use to communicate with the central server 120 are indicated. With reference to FIG. 1 in the example implementation of this technical solution, the data network is the Internet. In other embodiments of the present technical solution, the data network can be implemented differently - in the form of a global data network, local data network, private data network, etc. In a data network, data exchange occurs over various types of data lines, for example, over wireless lines (for example, Wireless Internet Fidelity or briefly WiFi®, Bluetooth®, etc.) and wired (connection based on a universal serial bus (USB ) or an Ethernet-based connection).

[0051] If the POS terminal 110 fails, it is necessary to remotely load the old logical settings of the POS terminal 110 (registration number) into a new physical device with a new serial number. To fulfill this requirement, in the registration database 120.1 of the central server 120, the configuration parameters are tied to the registration, and not to the serial number of the POS terminal 110.

[0052] When registering the POS terminal 110 on the central server 120, a set of tuning parameters is generated for it, including the registration number of this terminal. The “terminal serial number” field is left blank.

[0053] The values of the registration number and activation code thereto are entered into the registration form of the POS terminal 110 and sent to the server in the structural unit of the financial institution. The activation code is confidential information and should only be communicated to a bank specialist who configures the POS terminals. These parameters, together with a description of the communication options, must be entered into the POS terminal 110, after which he will be able to conduct a remote download and get a complete set of parameters, and the current version of the software.

[0054] In the remote download request, the POS terminal 110 transmits the following data to the central server 120:

• registration number;

• serial number (which does not match the serial number of the pinpad);

• activation code (may be empty).

[0055] The logic of the central server 120 is organized as follows: • find the record in the database 120.1 by the registration number of the POS-terminal 110;

• if the record is not found, then give the response code "Invalid terminal number" and disconnect;

• compare the serial number stored in the database 120.1 with the serial number sent in the request. If the numbers match, continue processing normally;

• if the numbers do not match (or if an empty number is recorded in database 120.1), then the activation code stored in database 120.1 is compared with the code sent in the request. If they do not match, or one of them is empty, then they give the response code "Invalid activation code" and break the connection. Otherwise, they record in the database 120.1 a new serial number obtained from the request.

[0056] During the initial remote boot of the POS terminal 110, its registration number and activation code are entered into the POS terminal. At this moment, the empty serial number of the POS terminal 110 is registered in the database 120.1, so it is impossible to conduct a remote download without entering the activation code.

[0057] After a successful initial download to database 120.1, the serial number of this POS terminal 110 will be recorded. Remote remote download can be performed without entering an activation code.

[0058] If it becomes necessary to transfer the POS terminal 110 to another structural unit of a financial institution, remote loading of the POS terminal 110 is carried out with the new registration number and activation code for it. As a result, the POS terminal receives a new registration number, and its serial number remains the same.

[0059] The activation code is not stored in the memory of the POS terminal 110. It is entered via the keyboard immediately before performing the "remote download" operation.

[0060] To ensure data integrity during transmission from the central server 120 to the POS terminal 110, a digital signature mechanism based on the RSA public key cryptographic algorithm can be used, which is based on the computational complexity of the large integer factorization problem [0061] The root node in the key hierarchy is the central server 120. During installation, it generates a key pair of length, for example, 1024 bits. The secret key is stored, for example, in the Windows Crypto API and can be downloaded in encrypted form for backup.

[0062] The public key of the central server 120 is included in the distribution kit of the POS terminals software. This key is no different from Visa and MasterCard public keys. It is assigned, for example, index 61 and in future versions it can be increased (62, 63, etc. to 7F).

[0063] When a server is installed at the structural unit level, it also generates its own key pair. Its public key must be sent via the secure data channel to the central server 120, where it will be signed by the key of the central server 120. The signed key is also returned by the secure data channel to the server of the structural unit and entered into its settings. There is no need to back up this key, because when you transfer to another server, the procedure for generating and signing the key can be repeated.

[0064] The remote boot procedure of the POS terminal 110 may begin by negotiating the key version of the central server 120. Since there may be several versions of the key of the central server 120, before starting the download, the POS terminal 110 and the central server 120 must determine which version of the key will be signed local host key. To do this, the POS terminal 110 sends the minimum and maximum versions of the keys that are currently available in the POS terminal 110 in the request. The central server 120 searches among the signatures it has for the maximum version falling within the specified range and offers the POS terminal 110 use. The POS terminal 110 once again checks that it has a key of this version, and if so, the key selection procedure is completed successfully. If the required key is not in the POS terminal (there was a “hole” in the version range), the POS terminal 110 sets the upper limit of the range by one less than the proposed version, and the procedure is repeated until the desired version is selected, or on the central server 120, signatures falling within the range of the POS terminal 110 will not end.

[0065] After the version of the central key is negotiated, the central server 120 sends its public key signed by its own to the POS terminal 110 public key with this version number. POS terminal 110 verifies the signature and, in case of failure, interrupts the exchange with the direction of the message “Public key certificate error”.

[0066] If the verification is successful, the POS terminal 110 will use the received key to verify the digital signature of the data received from the central server 120.

[0067] System 100, at least one POS terminal configuration module 130, configured to connect to a database 120.1 of the central server 120 and configure parameters of the POS terminals 110.

[0068] In some embodiments, the configuration of each POS terminal 110 is stored as a .tlv file on a central server 120 that can be opened and edited, for example, in a TlvEdt application. The configuration can be presented in the form of a tree, in the nodes of which the settings of the POS terminal 110 are located. Settings can be divided into parameters of 0-level, 1-level, 2-level, etc.

[0069] To start operation of the POS terminal, software and configuration are locally loaded into it. After registering the terminal on the central server 120 and in the database 120.1, as described above, the software and configurations can be downloaded remotely. The configurations of each POS terminal are stored in the central server database 120.1.

[0070] When registering the POS terminal 110 on the central server 120, a corresponding record is created and, based on the registration data received from the server of the structural unit, the configurations relevant to the POS terminal are formed (all settings, except for communication options).

[0071] In the configurator on the central server 120, it is also possible to add and delete the settings branches received from the settings modules of the POS terminals to the initial configuration, and these changes are saved as elements:

[0072] Also, the system 100 at least one monitoring console 140, configured to connect to a central server 120 to monitor it and track the flow of transactions from POS terminals 110.

[0073] In some embodiments, the monitoring console 140 is connected to the software of the central server 120 via TCP / IP or Ethernet, as shown in FIG. 2. In other implementations, the following RS232, IPX / SPX, X.25, MQ data transfer interfaces are used. At When connecting to the central server software, the password of this instance of the software is specified, which is identical to the password that protects local access to the settings of the central server 120.

[0074] In some embodiments, the monitoring console 140 and the central server 120 may be connected by data nodes.

[0075] The data transmission nodes can be telephone networks or telecommunication channels operating in accordance with other protocols of the physical, channel, network, transport, session, representative and / or application layers, or the elements of nodes in accordance with the methods and devices according to this invention.

[0076] In one embodiment, the telecommunications channel uses a physical layer protocol selected from the group consisting of V.92 (see ITU-T V.92), IRDA, USB, Firewire, EIA RS-232, EIA-422, EIA-423, RS-449, RS-485, DSL, ISDN, Ethernet (see IEEE 802.3 standards), SONET / SDH, GSM radio interface, Bluetooth, IEEE 802.1x Wi-Fi, Etherloop, MTP-1 (Message Transport Protocol), MTP-2, MTP-3.

[0077] In a preferred embodiment, the telecommunications channel uses a transport layer protocol selected from the group consisting of Ethernet and ISDN.

[0078] In one embodiment, the telecommunications channel uses a transport layer protocol selected from the group consisting of AEP (AppleTalk Echo Protocol), ATP (AppleTalk Transaction Protocol), CUDP (Cyclic UDP), DCCP (Datagram Congestion Control Protocol), FCIP (Fiber Channel over TCP / IP), FCP (Fiber Channel Protocol), IL (IL Protocol), iSCSI (Internet Small Computer System Interface), LCP (in PPP, Link Control Protocol), NBF (NetBIOS Frames protocol), NBP ( Name Binding Protocol), RTMP (Routing Table Maintenance Protocol), SCSI (Small Computer System Interface), SCTP (Stream Control Transmission Protocol), SPX (Sequenced Packet Exchange), SST (Structured Stream Transport), TCP (Transmission Control Protocol), UDP (User Datagram Protocol), UDP Lite, SCTP (Stream Control Transmission Protocol), RSVP (Resource Reservation Protocol).

[0079] In a preferred embodiment, the telecommunications channel uses a transport layer protocol selected from the group consisting of TCP and UDP. [0080] In one embodiment, the telecommunications channel uses a data link layer protocol selected from the group consisting of ATM (Asynchronous Transfer Mode), PPP (Point-to-Point Protocol, see, for example, IETF RFC 1661).

[0081] In one embodiment, the telecommunications channel uses a network layer protocol selected from the group consisting of X.25 (see, for example, a network layer protocol selected from the group consisting of X.25 (see, for example, ITU -T Recommendation X.25).

[0082] In one embodiment, the telecommunications channel uses a telecommunications protocol selected from the group consisting of SS / 7 (Signaling System # 7, see, for example, ITU-T Recommendation Q.700) and ISDN (Integrated Services Digital Network) , WiFi (see, for example, IEEE Standard 802.11).

[0083] In one embodiment, the telecommunication channel connecting the telephone network of the relying party and the telephone network of the relying party operates according to a standard selected from the group consisting of Ethernet, WiFi (see, for example, IEEE Standard 802.11) and Bluetooth (see e.g. IEEE Standard 802.15), ATM (Asynchronous Transfer Mode), SS / 7 (Signaling System # 7; see, for example, ITU-T Recommendation Q.700), X.25 (see, for example, ITU-T Recommendation X.25), WiMAX (Worldwide Interoperability for Microwave Access, CM., E.g. IEEE Standards 802.16-802.16e), SCCP (Signaling Connection Control Part), DUP (Data User Part), B-ISUP (B-ISDN User Part), ISUP (ISDN User Part), TUP (Telephone User Part), TCAP (Transaction Capabilitie s Application Part), SSCOP (Service-Specific Connection Oriented Protocol), H.323, SIP (Session Initial Protocol), BICC (Bearer Independent Call Control protocol), IS-41, IS-634, CAS, CS1, CS2, R2 , CAMEL (Customized Applications for Mobile network Enhanced Logic), INAP (Intelligent Network Application Part), MAP (Mobile Application Part).

[0084] In one embodiment, the telecommunications channel uses TCP / IP (Transmission Control Protocol / Internet Protocol, see IETF RFC 1122).

[0085] In one embodiment, the telecommunication channel connecting the telephone network of the relying party and the telephone network of the relying party uses one of the VoIP (Voice over Internet Protocol) protocols for transporting data. [0086] To connect the monitoring console 140 to the central server 120, the same TCP port and data format are used as for the external connected devices. This allows, by connecting to the monitoring console 140 to one central server 120 and issuing a special CONNECT command, connecting to another central server 120, etc., as shown in FIG. 3. Meanwhile, the communication method between the central servers 120 may be any of a number of software supported by the central server 120.

[0087] In some embodiments, the monitoring console 140 monitors not only the central server 120, but also any other servers in the network (including servers in the structural unit). If there is no direct access to the target server, then intermediate servers that serve as routers are used.

[0088] Each of the instances of the central server 120 in the chain must support the remote monitoring function, and for each of them a password is entered by the user to perform remote monitoring.

[0089] When the monitoring console 140 is connected to the next instance of the central server 120, the current central server 120 enters a transparent mode, transmitting messages through itself and not trying to interpret them. Thus, if physical N servers are connected in the chain, the first N-1 servers operate in transparent mode, and the last in remote monitoring mode, as shown in FIG. 4. In the transparent mode of operation, the router or the firewall does not carry out routing, but simply examine the MAC addresses on all its interfaces like a switch, and at the same time allow filtering traffic at the L2 level.

[0090] In the event of a disconnection somewhere in the middle, the last of the remaining central servers 120 in communication goes into remote monitoring mode, as shown in FIG. 5.

[0091] In some embodiments, when configuring the central server 120, a remote monitoring mode is set to be maintained in a default state, i.e. monitoring will be carried out in real time without stopping.

[0092] The monitoring console 140 may graphically display the values of the monitoring parameters over the entire time interval of the central server 120. In some embodiments, the remote monitoring console contains a window logs. It displays service information, the results of command execution, and some other data that can be displayed in real time. By the content and time of the log file, one can judge the operability of the central server 120 at a given time. If it works fine, then the messages “Host (xxx) connected”, “Host (xxx) disconnected” will regularly appear in the log file window.

[0093] In some embodiments, the monitoring console 140 allows monitoring of several central servers 120 at the same time, monitoring and storing the history of commands.

[0094] In some implementations, some important events are reported by sound notification.

[0095] Aspects of the present invention can also be implemented using a data processing device that is a computer from a system (or tools such as a central / graphics processor or microprocessor) that reads and executes a program recorded on a storage device to perform the functions of the above a variant (s) of the implementation of the system shown in FIG. 1. For this purpose, the software is downloaded to a computer, for example, through a network or from a recording medium of various types, serving as a storage device (for example, a computer-readable medium).

[0096] The data processing device may have additional features or functionality. For example, the data processing device may also include additional data storage devices (removable and non-removable), such as, for example, magnetic disks, optical disks or tape. Computer storage media may include volatile and non-volatile, removable and non-removable media implemented in any way or using any technology for storing information, such as machine-readable instructions, data structures, program modules or other data. A storage device, removable storage, and non-removable storage are examples of computer storage media. Computer storage media includes, but is not limited to, random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact ROM disk (CD-ROM), universal digital discs (DVDs) or other optical storage devices, magnetic tapes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and which can be accessed by a data processing device . Any such computer storage medium may be part of a POS terminal network management system. The data processing device may also include an input device (s), such as a keyboard, mouse, pen, voice input device, touch input device, and so on. An output device (a), such as a display, speakers, printer, and the like, may also be included in the system.

[0097] The data processing device comprises communication connections that allow the device to communicate with other computing devices, for example over a network. Networks include local area networks and wide area networks along with other large, scalable networks, including, but not limited to, corporate networks and extranets. Communication connection is an example of a communication environment. Typically, a communication medium can be implemented using computer-readable instructions, data structures, program modules or other data in a modulated information signal, such as a carrier wave, or in another transport mechanism, and includes any information delivery medium. The term "modulated information signal" means a signal, one or more of its characteristics are changed or set in such a way as to encode information in this signal. By way of example, but without limitation, communication media include wired media such as a wired network or a direct wired connection, and wireless media such as acoustic, radio frequency, infrared, and other wireless media. The term “machine-readable medium”, as used herein, includes both storage media and communication media. The process sequences described in this document may be performed using hardware, software, or a combination thereof. When processes are performed using software, the program in which the sequence of processes is recorded can be installed and can be executed in the memory of a computer built into specialized hardware the tool or program can be installed and can be run on a general purpose computer that can perform various processes.

[0098] For example, a program may be pre-recorded on a recording medium such as a hard disk or ROM (read-only memory). Alternatively, the program can be temporarily or permanently saved (recorded) on a removable recording medium such as a floppy disk, CD-ROM (compact disc, designed for playback only), MO (magneto-optical) disc, DVD (digital universal disc) , magnetic disk or semiconductor memory. Removable recording media may be distributed as so-called software sold through a retail network.

[0099] The program may be installed from the removable recording medium described above to a computer, or may be transmitted by cable from a download site to a computer, or may be transmitted to a computer via network data channels such as a LAN (local area network) or The Internet. The computer can receive the program transmitted in this way and can install it on a recording medium such as an internal hard drive.

[00100] In the above description, numerous details are set forth. However, it will be apparent to those skilled in the art from this description that the present invention can be practiced without these specific details. In some cases, well-known structures and devices are shown in block diagram form, and not in detail, so as not to complicate the description of the present invention.

[00101] Some parts of the description of preferred embodiments are presented in the form of algorithms and a symbolic representation of operations with data bits in computer memory. Such descriptions and representations of algorithms represent the means used by specialists in the field of data processing in order to most effectively transfer the essence of their work to other specialists in this field. In this document and in general, an algorithm is a self-consistent sequence of operations leading to the desired result. Operations require physical manipulations with physical quantities. Usually, although not necessarily, these quantities take the form of electrical or magnetic signals that can be stored, transmitted, combined, compared and subjected to other manipulations. It turned out that It is convenient to describe these signals in the form of bits, values, elements, symbols, members, digits, etc., for general use.

[00102] However, it should be borne in mind that all these and similar terms should be associated with the corresponding physical quantities, and that they are simply convenient labels that apply to these quantities. Unless otherwise specifically and explicitly indicated in the following discussion, it should be assumed that throughout the text such terms as “definition”, “calculation”, “calculation”, “calculation”, “receipt”, “establishment”, “change”, etc. .p., relate to the actions and processes of an electronic computing device that works with data and converts data. The data mentioned are presented in the form of physical (e.g., electronic) values in the registers and memory of the computing device, and can be converted into other data similarly represented in the form of physical quantities in the memory or registers of the computing device, or other similar storage, transmission or display devices information.

[00103] It should be understood that the above description is illustrative and not restrictive. Various other embodiments will become apparent to those skilled in the art after reading and understanding the above description. Therefore, the scope of disclosure should be determined with reference to the appended claims along with the full scope of equivalents to which such claims grant the right

Claims

FORMULA

1. A network management system for POS terminals, comprising:

• at least one POS terminal configured to exchange data with at least one central server;

• at least one central server, including a database and configured to store the main set of parameters, distribution archive of software, and other categories of data for all registered numbers of POS terminals;

• at least one POS terminal configuration module, configured to connect to a central server database and configure POS terminal parameters;

• at least one monitoring console, configured to connect to a central server for its configuration, monitoring and monitoring the flow of data from POS terminals.

2. The system according to claim 1, characterized in that it further comprises a communication node configured to route traffic from other subnets.

3. The system according to claim 1, characterized in that the central server creates an activation code for each POS terminal number.

4. The system according to claim 1, characterized in that when the POS terminal fails, the registration number of the POS terminal is remotely loaded into a new physical device with a new serial number.

5. The system according to claim 1, characterized in that when transmitting data from the central server to the POS terminal, an RSA public key cryptographic algorithm is used.

6. The system according to claim 1, characterized in that the configuration of each POS terminal is stored as a tlv file on a central server.

7. The system according to claim 1, characterized in that the monitoring console is connected to the central server software via TCP / IP and / or Ethernet.

8. The system according to claim 1, characterized in that when connecting the monitoring console to the central server software indicate the password for this instance of the software, which is identical to the password that protects local access to the settings of the central server.

9. The system according to claim 1, characterized in that when configuring the central server, a remote monitoring mode is established, which is maintained in default state.

10. The system according to claim 1, characterized in that the monitoring console reflects graphically the values of the monitoring parameters over the entire time interval of the central server.