Merchant transaction mirroring for personal point of sale (ppos) for card present e-commerce and in vehicle transaction

Abstract

It is desirable for a merchant to not store customer PCI (Payment Card Industry) data in the merchant’s system, because this would reduce cost and risk to the merchant. But the merchant still wants access to the customer primary account number (PAN) and other PCI data elements for customer authentication, customer relationship management, etc. Therefore, this specification discloses systems and methods that allow a pPOS (personal Point of Sale) device to create a mirror of the original transaction and provide that to the merchant. Then the merchant would still have access to the customer PAN and other PCI data elements, but there are no PCI or payment data in the mirror transaction, so cost and risk are reduced for the merchant.

What is claimed is: 
     
         1 . A device, including a microcontroller or computer, for providing a personal point of sale (pPOS), the device comprising:
 a reader, the reader configured to read a payment and/or identity instrument, wherein the reader is further configured for filtering transaction data, wherein filtering includes identifying payment data elements and/or customer identification data elements in a transaction;   a secure microcontroller function (MCF) as part of a microcontroller or computer,
 wherein the secure MCF is configured to communicate with a reader interface for creating a merchant mirror transaction from the payment data elements and/or customer identification data elements, wherein creating includes using data encoding functions to provide encoded data, corresponding to at least some of the customer identification data elements, in response to the payment data elements and/or customer identification data elements, 
 wherein the secure MCF is further configured for validating the merchant mirror transaction, wherein validating includes authenticating data elements in the merchant mirror transaction; 
   a secure element, the secure element configured to store and process payment and identification application; and   separate communication interfaces to provide separate respective communication paths for communications external to the device for providing a pPOS, the separate communication interfaces including:
 a first communication interface to provide the merchant mirror transaction to the merchant in a communication path with a merchant, and 
 a second communication interface to provide to the merchant acquirer encrypted transaction data including payment data used to pay for the merchant transaction, via a communication path for sharing the encoded data with a merchant acquirer, wherein the merchant mirror transaction is a set of data that includes shopping cart identification data or other data which is to identify the merchant transaction and that does not include information to identify the payment data used to pay for the merchant transaction. 
   
     
     
         2 . The device of  claim 1  further comprising:
 a second microcontroller function (MCF),
 wherein the secure MCF and/or the second MCF is configured for formatting and transmitting encrypted transaction data to the merchant acquirer, 
 wherein the secure MCF and/or the second MCF is further configured for transmitting the merchant mirror transaction to the merchant. 
 
 
     
     
         3 . The device of  claim 1  further comprising one or more of the following:
 a local sensor switch, the local sensor switch configured to initiate and/or terminate a transaction, wherein the local sensor switch transmits local sensor data to the secure element; and 
 an external data sensor switch, wherein the external data sensor switch transmits external sensor data to the secure element. 
 
     
     
         4 . The device of  claim 2 , further including providing a third separate communication interface to provide a communication path, wherein the secure MCF and/or the second MCF is further configured to synchronize merchant mirror transaction data elements and the merchant mirror transaction to the original transaction, and wherein the third separate communication interface is to communicate data, external to the device, corresponding to the synchronized merchant mirror transaction data elements and the merchant mirror transaction. 
     
     
         5 . A device for providing a personal point of sale (pPOS), the device comprising:
 a reader, the reader configured to read a payment and/or identity instrument,
 wherein the reader is further configured for filtering transaction data, wherein filtering includes identifying payment data elements and/or customer identification data elements in a transaction, 
 wherein the reader is further configured for creating a merchant mirror transaction from the payment data elements and/or customer identification data elements, wherein creating includes using data encoding functions to provide encoded data corresponding to at least some of the customer identification data elements; 
   a secure microcontroller function (MCF) as part of a microcontroller or computer,
 wherein the secure MCF is configured for validating the merchant mirror transaction, wherein validating includes authenticating data elements in the merchant mirror transaction; 
   a secure element, the secure element configured to store and process payment and identification application; and   separate communication interfaces to provide separate respective communication paths for communications external to the device for providing a pPOS, the separate communication interfaces including
 a first communication interface to provide the merchant mirror transactiona communication path with a merchant, and 
 a second communication interface to provide a communication path for sharing the encoded data with a merchant acquirer; 
   wherein the merchant mirror transaction is a set of data that includes shopping cart identification data or other data which is to identify the merchant transaction and that does not include information to identify payment data used to pay for the merchant transaction.   
     
     
         6 . The device of  claim 5  further comprising:
 a second microcontroller function (MCF),
 wherein the secure MCF and/or the second MCF is configured for formatting and transmitting encrypted transaction data to the merchant acquirer, 
 wherein the secure MCF and/or the second MCF is further configured for transmitting the merchant mirror transaction to the merchant. 
 
 
     
     
         7 . A personal point of sale (pPOS) device comprising:
 a reader configured to:
 receive transaction data corresponding to a merchant transaction, wherein the transaction data includes electronic payment data elements and customer identification data elements; 
 filter the transaction data to identify the payment data elements and customer identification data elements; 
 create a merchant mirror transaction from the payment and customer identification data elements using data encoding functions to encode, as part of the merchant mirror transaction, at least some of the customer identification data elements; and 
 encrypt the transaction data to provide encrypted transaction data; a first microcontroller function (MCF) coupled to the reader, the first MCF configured to: 
 validate the merchant mirror transaction by authenticating data elements in the merchant mirror transaction; and 
   a second MCF coupled to the first MCF, the second MCF configured to:
 format the encrypted transaction data to provide formatted encrypted transaction data; 
 transmit, in a first communication, the formatted encrypted transaction data to a merchant acquirer; and 
 transmit, in a second communication, the merchant mirror transaction to a merchant, wherein the merchant mirror transaction is a set of data that identifies the merchant transaction without identifying the payment data used in the merchant transaction. 
   
     
     
         8 . The pPOS device of  claim 7 , wherein the data encoding functions include one or more of: translating, mapping, masking, and randomizing the payment and/or customer identification data elements. 
     
     
         9 . The pPOS device of  claim 8 , further comprising:
 a secure element coupled to the reader;   a local sensor switch configured to transmit local sensor data to the reader via the secure element; and   an external data sensor switch configured to transmit external sensor data to the reader via the secure element.   
     
     
         10 . The pPOS device of  claim 9 , wherein the reader is further configured to:
 use the local sensor data and the external sensor data to seed a data element initialization array or modeling function for each type of data element to be translated, mapped, masked, and randomized.   
     
     
         11 . The pPOS device of  claim 9 , wherein the data encoding functions further comprise encryption, and wherein the reader is further configured to:
 use the local sensor data and the external sensor data to seed a random salt value for a specific encryption key for specific data element encryptions.   
     
     
         12 . The pPOS device of  claim 8 , wherein translating includes using different terms for a data element. 
     
     
         13 . The pPOS device of  claim 8 , wherein mapping includes establishing a one-to-one relationship between a data element with a value and/or a function. 
     
     
         14 . The pPOS device of  claim 8 , wherein masking includes substituting part of a data element. 
     
     
         15 . The pPOS device of  claim 7 , wherein, to filter the transaction data to identify the payment data elements, the reader is configured to:
 use a data pattern matching technique to determine the payment data elements,   use heuristic rules technique to determine the payment data elements, or   use a artificial intelligence neural net technique to determine the payment data elements.   
     
     
         16 . The pPOS device of  claim 15 , wherein the payment data elements include one or more of: credit card number, credit card data, debit account number, debit account data, close loop stored value number, coupon encoded data element, voucher encoded data element, rebate encoded data element, or digital currency data elements. 
     
     
         17 . The pPOS device of  claim 7 , wherein, to filter the transaction data to identify the customer identification data elements, the reader is configured to:
 use a data pattern matching technique to identify the customer identification data elements,   use heuristic rules technique to identify the customer identification data elements, or   use an artificial intelligence neural net technique to identify the customer identification data elements.   
     
     
         18 . The pPOS device of  claim 16 , where the customer identification data elements include one or more of: name, address, city, state, zip code, email, government or state or local ID (identification) number, driver license data elements, or passport data elements. 
     
     
         19 . The pPOS device of  claim 7 , wherein the second MCF is configured to:
 synchronize merchant mirror transaction data elements and the merchant mirror transaction to the original merchant transaction.