Login| Sign Up| Help| Contact|

Patent Searching and Data


Title:
METHODS, SYSTEMS AND APPARATUS FOR ELECTRONIC FINANCIAL TRANSACTIONS
Document Type and Number:
WIPO Patent Application WO/2010/004317
Kind Code:
A1
Abstract:
A PIN-entry device (PED) stand (27) includes a data interface whereby the stand may be connected to an EFT card payment system (10) for transmitting and/or receiving data to and/or from the EFT card payment system independently of a PED (18) mounted on the stand. The stand further includes any one or more of the following, in communication with the data interface: a data input device such as a contactless card reader ( 36) or a biometric devicefor receiving information for processing a card transaction and/or for management of the payment system; at least one further data interface whereby the stand may be connected to a peripheral device; a secure memory device for storing a secret key for use in an authentication system. Software of the EFT card payment system drivesa display (24) of a PED (18) installed on the PED (27) stand and connected to the payment system (10) in order to display information relating to functions associated with the data input device, further data interface and/or peripheral device connected thereto, and/or secure memory device of the PED stand.

Inventors:
KNOX GARRY (GB)
STEWART MARK (GB)
Application Number:
PCT/GB2009/050786
Publication Date:
January 14, 2010
Filing Date:
July 03, 2009
Export Citation:
Click for automatic bibliography generation   Help
Assignee:
TAILWIND SOLUTIONS LTD (GB)
KNOX GARRY (GB)
STEWART MARK (GB)
International Classes:
G07F19/00; G06K7/00; G06Q20/00; G06Q40/00; G07G1/00
Foreign References:
US20070241184A12007-10-18
US20050242176A12005-11-03
US6053412A2000-04-25
US20060208066A12006-09-21
Other References:
ANONYMOUS: "Bar Code Cradle", INTERNET ARTICLE, October 2003 (2003-10-01), pages 1 - 3, XP002544086, Retrieved from the Internet [retrieved on 20090901]
Attorney, Agent or Firm:
MURGITROYD & COMPANY (165-169 Scotland Street, Glasgow Strathclyde G5 8PL, GB)
Download PDF:
Claims:
CLAIMS

1. A PED stand including a first data interface whereby the stand may be connected to an EFT card payment system for transmitting and/or receiving data to and/or from the EFT card payment system independently of a PED mounted on the stand in use, the stand further including any one or more of the following, in communication with said first data interface for the purpose of communicating data to and/or from the EFT card payment system: A. a data input device adapted to receive information required for the processing of a card transaction and/or for the management of the EFT card payment system;

B. at least one further data interface whereby the stand may be connected to at least one peripheral device; C. a secure memory device for storing a secret key for use in an authentication system.

2. A PED stand according to claim 1 , wherein the data input device comprises at least one of: - a contactless card reader; a biometric device.

3. A PED stand according to claim 1 or claim 2, wherein the data input device includes a transceiver, sensor or transducer element for receiving input information.

4. A PED stand according to any preceding claim, wherein said first data interface and/or any one or more of said elements A, B and C comprise one or more modules detachably mounted to the remainder of the PED stand.

5. A detachably mountable module comprising said first data interface and/or any one or more of said elements A, B and C, configured to be detachably mounted to the remainder of the PED stand of any preceding claim.

6. An EFT card payment system adapted for use with a PED stand according to any preceding claim, the EFT card payment system being adapted to be connected to a PED installed on the PED stand, for the purpose of processing card transactions via the PED, and to be connected to the first data interface of the PED stand.

7. An EFT card payment system according to claim 6, wherein software of the EFT card payment system is adapted to drive and/or otherwise communicate with the or each data input device, further data interface and/or peripheral device connected thereto, and/or secure memory device of the PED stand.

8. An EFT card payment system according to claim 6 or claim 7, wherein software of the EFT card payment system is adapted to drive a display of a PED installed on the PED stand and connected to the EFT card payment system in order to display information relating to functions associated with the or each data input device, further data interface and/or peripheral device connected thereto, and/or secure memory device of the PED stand.

9. An EFT card payment system according to claim 8, wherein the data input device is a contactless card reader, and the software of the EFT card payment system is adapted to communicate with a contactless payment card presented to the reader for the purpose of processing contactless card transactions.

10. A point of sale system comprising an EFT card payment system in accordance with any one of claims 6 to 9, a PED stand in accordance with any of claim 1 to 5 connected to the EFT card payment system via said first data interface, and a PED installed on the PED stand and connected to the EFT card payment system.

11. A method of operating a point of sale system according to claim 10, wherein software of the EFT card payment system drives a display of a PED installed on the PED stand and connected to the EFT card payment system in order to display information relating to functions associated with the or each data input device, further data interface and/or peripheral device connected thereto, and/or secure memory device of the PED stand.

12. One or more computer program products for implementing the method of claim 11.

Description:
METHODS, SYSTEMS AND APPARATUS FOR ELECTRONIC FINANCIAL TRANSACTIONS

FIELD OF THE INVENTION

The present invention relates to the field of electronic financial transactions (EFT). More particularly, it is concerned with methods, systems and apparatus whereby existing EFT systems may be adapted to accommodate developments such as new technologies and/or functionality at minimum expense and with minimum impact on the point of sale environment. Such developments include the use of contactless card technology.

BACKGROUND TO THE INVENTION

The first EFT systems employed credit cards with relevant data encoded on magnetic stripes ("magstripes"), together with EFTPOS (EFT point-of- sale) terminals or EPOS (electronic point-of-sale) systems, such terminals and systems being equipped with card readers for reading the magstripe data and telecoms functions for communicating with host systems operated by or on behalf of banks and other "acquirers", to authorise transactions and/or initiate transfers of funds from customer accounts to merchant accounts.

EFT card types now include debit as well as credit cards. More recently, "magstripe" cards have begun to be replaced by "smart cards" (also known as IC cards or chip cards) with embedded microprocessors, which communicate with EFTPOS terminals and EPOS systems via contact with a suitable read head. Smart cards also enabled Chip & PIN technology, whereby user identity is verified by entry of a personal identity number (PIN) rather than by visual inspection of a signature. PIN entry devices (PEDs, or "PIN pads"), generally comprising a card reader, keypad and visual display, have become ubiquitous wherever Chip & PIN EFT systems are employed. In pay-at-counter environments, a PED is commonly mounted on a stand or pedestal on the counter and connected to an EFTPOS terminal or EPOS system.

The banking/EFT industry is now in the process of introducing

"contactless" EFT technology, using a new generation of smart card whereby card details stored on an embedded microprocessor may be transmitted via a wireless connection to the payment processing device or system. In many cases, the 'contactless card' will also support existing magstripe and smart card methods of transferring card details. The wireless connection employed is typically RFID induction technology. The current standard for contactless smart card communications is ISO/IEC 14443, dated 2001 , which allows for communications at distances up to 10 cm, which may be referred to as "proximity" communication. Other standards supporting communication at greater distances are known but are not suitable for transaction processing owing to security issues. The proximity scheme has been successfully used for payment transactions in the transport sector, for example the Oyster card operated by Transport for London.

The perceived benefit of contactless EFT is extremely fast processing of transactions. If the technology is implemented correctly, payment should be completed in less than a second through a 'tap and go' action. The user need not even take their card out of their wallet as the reader will be able to pick up the data from the card even while it is inside. In order to benefit from the speed that contactless cards can provide, it is necessary to process these transactions without the need for identifying the cardholder. Cardholder identification is usually done by entering a PIN or signing at a traditional Point of Sale or by using some password based mechanism for online transactions. Clearly, this means that transactions involving contactless cards are less secure. Therefore the industry (in the UK) has set an upper limit of £10 per transaction at the present time.

Consumers generally prefer cash to traditional card payment schemes for low value transactions because of its convenience. However, traditional card payment schemes tend to be preferred for higher value transactions as they offer more protection and security. The speed of contactless card transactions makes them even more convenient than cash as it is at least as fast in all cases and much faster where a cash transaction would have required change to be given.

The implementation of contactless card technology requires Point of Sale systems to be upgraded to include contactless technology. The obvious upgrade solutions presented by the vendors of existing, Chip & PIN capable PEDs and by the vendors of contactless card reading technology are to replace existing PEDs with new devices incorporating integrated contactless card readers or to provide a separate, standalone contactless card reader that is connected to an existing EFTPOS/EPOS system independently of an existing PED, and that operates independently of the existing PED. Card scheme rules for contactless card transactions will require, in certain circumstances, that a full Chip and PIN transaction rather than a contactless transaction is performed. With current methods and apparatus, this will require the standalone contactless reader to include a sounder and display to indicate that the contactless transaction is declined and that a Chip & PIN transaction should be performed.

Fig. 1 of the accompanying drawings is a block diagram illustrating a typical EPOS-type EFT card payment system as used by larger retailers. The EPOS system 10 is a PC based client device that has interfaces to in- store stock management and customer applications as well external interfaces to bank payment systems. The software of the EPOS system 10 includes a number of applications relating to the functions of the system, among which is a payment application 12 which deals with card transactions, and which includes a processing and logic layer 14 and a PIN pad driver 16.

The PIN pad (or PED) 18 is a device that can read data from Chip & PIN cards via a smart card reader 20, can accept numeric data entry on its keypad 22 and can display messages such as the transaction amount and other prompts required to guide a customer through the Chip & PIN process by means of its display 24. The PIN pad's embedded software includes an application layer/EMV kernel 26, conforming to the EMV standard for interoperation of IC cards and IC capable POS terminals and ATM's, for authenticating credit and debit card payments.

The PIN pad 18 sits on a stand 27, typically comprising a plastic or metal plinth 28 attached to a pole 30 via an adaptor 32. The pole 30 is bracketed to the counter or check out. This optimises the PIN pad's position from an operational perspective. Some PIN pad poles also allow the PIN pad to be swivelled along horizontal and vertical planes to increase its usability for the customer. For the purposes of the present description, the term "stand" in relation to a PED/PIN pad refers broadly to a device or assembly that is used to support a PED at a point of sale. A PED stand will comprise or include a platform, plinth or shoe that physically supports the PED (the PED is normally secured to the platform) and has a forward facing edge or periphery that faces the customer in normal use of the PED. The stand may also include a pole and/or adaptor etc. as just described that supports the platform or plinth.

Transaction processes as described herein are for the purposes of illustration only by reference to standard transaction flows for simple sales transactions. It will be appreciated that various exception conditions - e.g. invalid card, wrong PIN, card declined - would require more complex logic flows to be implemented. These detailed processes are largely dictated by the applicable standards, will be well understood by persons skilled in the art, and will not be described in detail.

When the EPOS system 10 is ready to process a payment, it calls the payment application 12 to obtain payment. The processing and logic layer 14 would be responsible for determining which payment method is being used and, in the case of a card payment, would instruct the PIN pad driver 16 to validate a payment card through the standard Chip & PIN process.

On receiving an instruction from the PIN pad driver 16, the application layer / EMV kernel 26 on the PIN pad 18 would instruct the display 24 to display the transaction amount and invite the cardholder to insert their card. At this point the application layer / EMV kernel 26 would begin reading input on the smart card reader 20. When a valid card is inserted by the cardholder, the application layer / EMV kernel 26 will send a further message to the display 24 inviting the cardholder to enter their PIN and begin reading input on the keypad 22.

Once the PIN has been entered, the application layer / EMV kernel 26 would send this PIN to the card via the smart card reader 20 for validation. Assuming the PIN is valid, the application layer / EMV kernel 26 would instruct the display 24 to indicate the PIN had been accepted and for the card to be removed. The application layer / EMV kernel 26 would then send a PIN validated message back to the PIN pad driver 16.

On receiving a validation message back from the PIN pad driver 16, the processing and logic layer 14 would process the card details and return control back to the EPOS 10 reporting whether or not payment had been successfully processed.

Fig. 2 is a block diagram illustrating a contactless solution for an EPOS- based system similar to that of Fig. 1 , including the same EPOS and PED elements 10 to 26, and a similar PED stand (not illustrated), and using a standalone contactless unit 34, which includes a control layer 36, display 38 and contactless card reader 40. The contactless unit 32 is connected to the EPOS 10 in parallel with the PIN pad 18, and the EPOS payment application 12 is modified to include a contactless card driver 16A in addition to the PIN pad driver 16.

The processing and logic layer 14 would have to be altered to enable card payment by the standalone contactless card unit 34 to be initiated and processed. Now, when the EPOS 10 is ready to process a payment, and when the transaction amount is below the permissible threshold for contactless card payment, the processing and logic layer 14 would also instruct the contactless card reader driver 16A to validate a contactless card as well as initiating a Chip & PIN transaction as described above.

On receiving an instruction from the contactless card reader driver 16A, the control layer 36 on the contactless card unit 34 would instruct the display 38 to display the transaction amount and invite the cardholder to present their card. At this point the control layer 36 would begin reading input on the contactless card reader 40.

When a valid card is presented by the cardholder, the control layer 36 will send a further message to the display 38 indicating the transaction has been approved and send a validation message back to the contactless card reader driver 16A.

On receiving a validation message the contactless card reader driver 16A will pass the card details on to the processing and logic layer 14 to complete the transaction.

This solution is expensive because the standalone contactless card reader requires its own plastic casing, display etc. Secondly, it adds a further device to the point of sale which not only increases the footprint of the card processing equipment but presents the user with a separate point of interaction resulting in increased scope for confusion.

Fig. 3 is a block diagram illustrating a contactless solution for an EPOS- based system similar to that of Fig. 1 , using a new PIN pad unit 42 that includes an integrated contactless card reader 44. The EMV kernel 26 of the PIN pad would be modified to support the contactless functionality, as would the PIN pad driver 16 of the EPOS 10. There would be no need to make any changes to the EPOS software in this case as any additional functionality would be handled by the PED and be invisible to the EPOS.

The new PIN pad 42 would provide an on board contactless card reader 44 and, through adaptation of the application layer / EMV kernel 26, it would provide all the additional logic and functionality implemented on the EPOS as described in with reference to Fig. 2, to support contactless card payment.

This solution avoids the footprint issue and potential confusion associated with an additional standalone contactless unit, but it is a far worse option from a cost perspective as it requires a full swap out of existing PED equipment for a more expensive model. It also forces the retailer to accept the preferred technology and contactless card processing implementation of the PINpad vendor, causing the retailer to become increasingly reliant on a single vendor from both a technology and operational perspective.

It will be understood that while the systems illustrated in Figs. 1 -3 include an EPOS system 10, the PIN pads 18, 42 and standalone contactless unit 34 could equally be connected to any other type of EFT card payment system, particularly an EFTPOS terminal with its own payment application and suitably adapted card reader drivers, rather than to an EPOS system. For the purposes of the present description, the term "EFT card payment system" refers to an EPOS system, EFTPOS terminal or the like that processes card data etc. and communicates with a remote host system for the purpose of processing electronic card transactions. Contactless payment solutions are also being developed for use in territories which have not yet embraced Chip & PIN technology; i.e. where magstripe swiping remains the primary method of card reading. For example, VIVOtech, Inc. produce a range of contactless card readers, including their VIVOpay 4500 reader (US-D515574), which may be configured as a standalone card reader, and may be mounted on an EFTPOS terminal by means of an adaptor bracket (US-D527039). The VIVOpay 4500 device does not include any kind of display (other than four individual LEDs that illuminate to indicate the status of the reader and of payment transactions as required by applicable industry standards). In normal use, it is connected electronically to an EFTPOS terminal (whether or not the device is physically mounted on the terminal) by an RS232 interface, and simply acts as a contactless alternative to the existing magstripe reader of the terminal. While contactless readers such as the VIVOpay 4500 may be used with Chip & PIN systems, their use is logically identical to the solution illustrated in Fig 3, the difference being the on board contactless reader 44 is replaced with an external Contactless reader.

The present invention arises from the recognition that neither of the contactless payment solutions described above with reference to Figs. 2 and 3 satisfies the business needs of all merchants that are potential users of the technology, who will require a solution that is both cost effective and that minimises the footprint of devices deployed at the Point of Sale (the more counter space that is taken up by equipment, the less that is available for merchandising, marketing and operating space).

The invention also addresses issues that arise from the further recognition that problems similar to those that follow from the introduction of contactless card technology will also follow from further technology developments that may be anticipated in the EFT field. Such developments may include the use of biometric devices (e.g. fingerprint readers, iris scanners) for verifying the identities of cardholders and/or retail staff (the latter allowing the owner of the equipment to validate installation, reboot, reconfiguration or redeployment of card payment equipment). Any requirement for additional devices associated with card transactions at the point of sale raises the same issues as with contactless technology: the requirement for existing equipment to be replaced with new equipment incorporating the new devices or existing equipment to be augmented with additional devices.

A further issue is that the increasing prevalence of Internet Protocol (IP) communications as a means of transporting financial transaction data increases the risk of the transaction as IP is an inherently open transportation medium. This implies a need to ensure that any device involved in a card transaction is an authentic, trusted device. This is typically based on some form of security system based on secret keys.

SUMMARY OF THE INVENTION

In its several aspects, the present invention addresses the various problems and issues discussed above.

In accordance with several aspects of the invention, there is provided a PED stand including a first data interface whereby the stand may be connected to an EFT card payment system for transmitting and/or receiving data to and/or from the EFT card payment system independently of a PED mounted on the stand in use, the stand further including any one or more of the following, in communication with said first data interface for the purpose of communicating data to and/or from the EFT card payment system:

A. a data input device adapted to receive information required for the processing of a card transaction and/or for the management of the EFT card payment system;

B. at least one further data interface whereby the stand may be connected to at least one peripheral device;

C. a secure memory device for storing a secret key for use in an authentication system.

In preferred embodiments of the invention, the data input device comprises at least one of: a contactless card reader; a biometric device.

In further preferred embodiments, the data input device includes a transceiver, sensor or transducer element for receiving input information.

Preferably, said element is located in a forward facing part of the stand.

More preferably, said element is located in a forwards projecting lip portion of the stand that extends from beneath a front portion of a PED when installed on the stand.

In other embodiments, said first data interface and/or any one or more of said elements A, B and C comprise one or more modules detachably mounted to the remainder of the PED stand. The invention further encompasses a detachably mountable module comprising said first data interface and/or any one or more of said elements A, B and C, configured to be detachably mounted to the remainder of the PED stand. Where the data input device is a contactless card reader, the contactless card reader preferably includes a transceiver element, such as a RFID antenna, for wirelessly exchanging signals with a cooperating contactless payment card. The contactless card reader included in the PED stand preferably also includes a chipset to control the transceiver, to interpret data captured by the transceiver and to format data sent through the transceiver. Software to drive the chipset may be included in the reader device or may be incorporated into the EFT card payment system to which the PED stand is to be connected.

In accordance with a further aspect of the invention, there is provided an EFT card payment system adapted for use with a PED stand according to any one of the foregoing aspects of the invention. The EFT card payment system is adapted to be connected to a PED installed on the PED stand, for the purpose of processing card transactions via the PED, and to be connected to the first data interface of the PED stand.

Preferably, the software of the EFT card payment system is adapted to drive and/or otherwise communicate with the or each data input device, further data interface and/or peripheral device connected thereto, and/or secure memory device of the PED stand.

Preferably also, the software of the EFT card payment system is further adapted to drive a display of a PED installed on the PED stand and connected to the EFT card payment system in order to display information relating to functions associated with the or each data input device, further data interface and/or peripheral device connected thereto, and/or secure memory device of the PED stand. Where the data input device is a contactless card reader, the software of the EFT card payment system is adapted to communicate with a contactless payment card presented to the reader for the purpose of processing contactless card transactions.

The invention also encompasses a point of sale system comprising an EFT card payment system in accordance with the further aspect of the invention, a PED stand in accordance with any of the preceding aspects of the invention, connected to the EFT card payment system via said first data interface, and a PED installed on the PED stand and connected to the EFT card payment system.

In accordance with still another aspect of the invention, there is provided a method of operating a point of sale system that comprises an EFT card payment system in accordance with the further aspect of the invention, a PED stand in accordance with any of the preceding several aspects of the invention, connected to the EFT card payment system via said first data interface, and a PED installed on the PED stand and connected to the EFT card payment system, wherein software of the EFT card payment system drives a display of a PED installed on the PED stand and connected to the EFT card payment system in order to display information relating to functions associated with the or each data input device, further data interface and/or peripheral device connected thereto, and/or secure memory device of the PED stand.

The invention further encompasses computer program products for implementing the above method in an EFT card payment system.

DESCRIPTION OF THE PREFERRED EMBODIMENTS OF THE INVENTION Embodiments of the invention will now be described, by way of example only, with reference to the accompanying drawings in which:

Fig. 4 is a block diagram illustrating a first embodiment of an EPOS system incorporating features and functionality in accordance with various aspects of the invention.

Fig. 5 is a perspective view of an exemplary embodiment of a PED stand in accordance with the present invention.

Figs. 6A to 6G are perspective, exploded, plan and sectional views of a further exemplary embodiment of a PED stand/contactless card module in accordance with the present invention.

Referring now to the drawings, embodiments of the invention in its various aspects will now be described, with particular reference to contactless card payment systems. The described embodiments refer particularly to implementation using EPOS systems. However, as discussed above, the invention is equally applicable to EFTPOS terminals or other card payment systems.

In order to enable the implementation of contactless card payments at least cost and with least impact on the point of sale environment, the present inventors determined that a preferred solution should only involve additional technology that is absolutely necessary to provide the required upgrade of pre-existing point of sale systems. It was further determined that the solution should only affect the parts of the card processing system that are unavoidably affected, or the least expensive parts of it. The inventors further determined, that since there is already a display on the existing PIN pad/PED of a pre-existing system, the only additional items absolutely required to implement contactless card processing are:

Application software to transfer contactless card transaction data to bank systems

A contactless card reader that comprises:

An antenna or equivalent to provide a wireless interface for contactless cards.

A chipset to control the antenna and to interpret data captured by the antenna and to format data sent through it

Software to drive the chipset.

Since the pre-existing EPOS system provides the interface to the bank systems, it is unavoidable that the EPOS software has to be modified in order to transfer contactless card transaction data. Given this, it is sensible to ensure that all software changes that are required be implemented on the EPOS system.

Unfortunately, it is not practically possible to also integrate the contactless card reader (antenna and chipset) with the EPOS hardware as it would not be readily accessible to the customer. However, it does mean that the card reader itself would only require the most basic level of intelligence.

The only other active device that could accommodate the chipset and antenna is the PIN pad. Although this would easily allow the display on the PIN pad to be used for processing contactless card transactions it does mean that the PIN pad would have to be swapped out and replaced with a PIN pad with that technology integrated (as illustrated in Fig. 3, described above). Unfortunately this approach effectively requires the retailer to repurchase all the smart card processing equipment he already has and therefore does not provide a satisfactory solution in terms of cost.

The present inventors have recognised that, although it is presently a totally passive piece of equipment, the PIN pad (PED) stand, and most suitably the plinth of the stand, could be modified to house a basic chipset and antenna for reading contactless cards.

If a contactless card reader housed in a PED stand were to be connected to the EPOS, the EPOS would not only be able to drive the contactless card reading technology, it would be able to use the display on the PIN pad to guide the customer through the contactless card transaction process.

The design of existing plinths means that it would be possible in some cases to simply remove part of the PIN pad stand and replace it with the new version. Where this is not possible, an entirely new PIN pad stand would be required to be deployed. Either way, the only additional expense to the retailer beyond what he absolutely needs for implementing contactless card technology is for a few inexpensive stand components.

The additional benefits of this approach include:

It is completely independent of PIN pad vendor It is adaptable for different point of sale configurations and PINpad types

It provides a minimum technology footprint for the retailer It provides a single point of interaction for the cardholder.

An embodiment of an EFT card payment system in accordance with the invention is illustrated in Fig. 4. The system of Fig. 4 is similar to that of Fig. 1 as described above, with the following differences. The payment application 12 is modified to include both the PIN pad driver 16, that is connected to the PIN pad 18 and a contactless card module driver 16A. The PED stand 27 incorporates a contactless card reader module 48, which is built into or mounted to the plinth 46 and includes a contactless card reader 40, which typically comprises an antenna and chipset as described above, and a control layer 36. The plinth 46 (and/or the contactless card module 48) also incorporates a data interface (not illustrated), which is in communication with the card reader control layer 36 and by means of which the PED stand/card reader may be connected to the contactless card module driver 16A of the EPOS system 10. The PIN pad driver 16 is further adapted to allow the display 24 to be used to display information related to contactless card transactions, in addition to its normal display functions as part of the PIN pad.

As with the standalone solution of Fig. 2, modification is required in the processing and logic layer 14 of the EPPOS 10 to support the initiation and processing of a contactless card payment.

However, unlike the solution of Fig. 2, the additional hardware that is required to effect a contactless card payment transaction is limited to basic card reading technology. Thus the contactless card module 48 added here comprises the same control layer 36 and contactless card reader 40 as in Fig. 2 but does not include a further display.

Consequently the contactless card module driver 16A which requires to be added to the EPOS 10 is only required to manage the reading of card data. The further implication is that the processing and logic layer 14 therefore requires to route any messages that would be required to be displayed for contactless transactions to the display 24 on the PIN pad 18 via the PIN pad driver 16.

This requires the processing and logic layer 14 to treat the PIN pad 18 and contactless card module 48 as a 'managed pair' in the context of contactless payment transactions, as the use of the contactless card module 48 must be prompted by the display 24 of the PED 18 and the result of activity on the contactless card module 48 must be reported on the display 24.

The details of the processes involved in contactless card transactions and the technical specifications for contactless card readers are determined by applicable local and/or international industry standards and, as such, are well known to those skilled in the art and need not be repeated here.

Fig. 5 illustrates one physical embodiment of the invention, showing the plinth 46, pole 30, and PINpad 18 with keypad 22 and display 24. The PINpad 18 includes a generally horizontal surface portion 50 extending beyond the PINpad 18 toward the user, the surface portion 50 typically having a graphic indicating that the user should bring the card into proximity with this part. In this example, the contactless card module is fully integrated into the plinth 46, with at least the antenna portion of the contactless card reader being housed beneath the surface portion 50, and including any indicator lights 51 or the like as may be required by applicable standards. Figs. 6A to 6G illustrate an alternative embodiment. As seen in Fig. 6A, a contactless card module 60 is provided as an optional add-on to a PED stand 62 which is adapted to accept mounting of the module 60. Different mounting options may be provided by the PED stand 62 to enable the module 60 to be mounted at the best position to avoid interfering with the smart card reader of the PED 64. In this example, the smart card reader slot 66 of the PED 64 is at the bottom/front of the PED, and the contactless reader module is therefore mounted to the top/rear of the plinth. If the smart card reader of the PED was at its top/rear, the module 60 might typically be mounted to the bottom/front of the plinth. Fig. 6B is a view of the stand 62 with the module 60 and PED 64 removed.

Figs. 6C, 6D, 6E, 6F and 6G are perspective, exploded, plan and transverse and longitudinal sectional views of the contactless card reader module 60. A base portion 68 of the module includes a tongue 70 with screw-holes whereby the module 60 may be mounted to a cooperating/complementary part of the stand. Different configurations of the module 60 and/or the stand 62 may be provided to provide different mounting arrangements suitable for particular models of PED. The base portion further houses the electronic components of the contactless card reader, which in this example comprise a first antenna and indicator PCB assembly 72, second and third PCB assemblies 74 and 76, and light guides 78 for indicator LEDs on the first PCB 72. In this example, the third PCB assembly 76 is located in a bottom part of the base portion 68 and includes a data interface, such as a USB port, which is aligned with a suitable aperture 80 (Fig. 6G) in the base portion 68, whereby the contactless card reader may be connected to an EPOS system 10 as in Fig. 4 (the PED 64 being connected to the EPOS system via its own data interface). A cover portion 82 fits onto the top of the base portion 68 to enclose the electronic components, and is provided with apertures or windows 84, or may be formed from transparent or translucent material, such that the indicator lights are visible to a user when illuminated.

The incorporation of a contactless card reader into a PED stand, which hitherto has been a completely passive mechanical device, means that the PED stand becomes an active component of a point of sale payment system. The present invention encompasses additional uses of a PED stand that is provided with a data interface for communicating with an EFT payment system. As the PED stand would be connected to the EPOS system (most likely by a USB link) it can be considered a remote extension of the EPOS, enabling further technology to be incorporated in a neat and well positioned package.

Instead of, or in addition to, a contactless card reader, the PED stand may incorporate some other data input device adapted to receive information required for the processing of a card transaction and/or for the management of the EFT card payment system. One example of such a device would be a biometric reader such as a fingerprint scanner.

It is quite likely that biometrics will become a requirement for processing some card payments in the future. Further, there is a practical use for such a reader today in that it would allow the owner of the equipment to validate its installation, reboot, reconfiguration or redeployment. This would provide all parties involved in the card payment chain with the confidence of knowing that the device is installed in a trusted location.

In addition to the data interface by which the PED stand is connected to the EPOS system, it may be provided with at least one further data interface whereby the stand may be connected to at least one peripheral device. Many EPOS Systems have few spare ports to enable new devices to be deployed at the point of sale. The addition of a USB hub on the PED stand would allow several new ports to be deployed at the point of sale under the control of the EPOS and, taking advantage of the PED stand's positioning and its in built cable routing, would allow new point of sale devices to be conveniently and easily deployed.

Further, the PED stand may accommodate a secure memory device for storing a secret key for use in an authentication system. Historically, when PINpads have been shipped to territories requiring a high degree of security, a secret key called a seed key or a transport key is loaded prior to shipment. This key is separately disclosed to the receiving party so that a mutual authentication can be implemented as soon as the PIN pad connects to the network. By providing some secure memory in the PED stand, a similar procedure can be followed, thereby providing an authentication mechanism for the PED stand and any further device connected to it.

Generally, for the possibilities described above (including contactless card readers, biometric devices etc.), the data input device includes a transceiver, sensor or transducer element for receiving input information. Such devices may integrated into the stand, as in the example of Fig. 5, or provided as optional, modular add-ons, as in the example of Fig. 6. Depending on the nature of the device and the particular model of PED, this element may be located in a forward facing part of the stand, such as in a forwards projecting lip portion of the stand (typically a part of the plinth) that extends from beneath a front portion of a PED when installed on the stand. The precise configuration of the stand and the preferred location of the input element may depend on the configuration of the PED (e.g. whether its own contact card reader is top-loading or front-loading).

In general, the EFT card payment system is adapted to be connected to a PED installed on the PED stand, for the purpose of processing card transactions via the PED, and to be connected to the first data interface of the PED stand, and the software of the EFT card payment system is adapted to drive and/or otherwise communicate with the or each data input device, further data interface and/or peripheral device connected thereto, and/or a secure memory device of the PED stand. As in the case of the contactless card reader, the software of the EFT card payment system may further be adapted to drive the display of a PED installed on the PED stand and connected to the EFT card payment system in order to display information relating to functions associated with the or each data input device, further data interface and/or peripheral device connected thereto, and/or secure memory device of the PED stand.

The PED stand of the present invention thus provides the basis for a point of sale system comprising a suitably adapted EFT card payment system, a PED stand having any or all of the features and functions described herein and connected to the EFT card payment system via its first data interface, and a PED installed on the PED stand and connected to the EFT card payment system.

In operation of such a system, the software of the EFT card payment system drives a display of a PED installed on the PED stand and connected to the EFT card payment system, so as to display information relating to functions associated with whatever data input devices, further data interface and/or peripheral device connected thereto, and/or secure memory device may be incorporated into the PED stand. It will be understood from the above description that the present invention effectively changes the PED stand from a passive to an active device which interacts with other elements of the electronic payment system. Moreover, the prior art relies on the EPOS performing the contactless transaction in cooperation with a single slave device, either a standalone contactless card reader or a PED with an integrated contactless reader. In the present invention, in contrast, the EPOS works in conjunction with two slave devices to perform the contactless transaction.

Improvements and modifications may be incorporated without departing from the scope of the invention as disclosed herein.