Online or electronic security is a major issue in the industry. It seems a month does not go by without news of some major business having a security breach. Such breaches include government agencies, retail outlets, social media companies, and even major banks.
Whenever an enterprise believes that a secure fix to remedy a breach has been deployed, hackers quickly figure out a new way to breach their systems. In some cases, the breaches are not even within the systems of the enterprise; rather, the breaches can occur over network transmission lines that enter or exit the enterprise systems; the hackers use sniffing techniques to acquire copies of data packets being transmitted over the network lines and find a way to break any encryption being used (assuming encryption was being used).
Advances are being made to combat security issues. For example, in the retail industry where a retailer has to ensure the integrity of financial transactions at Point-Of-Sale (POS) terminals, Secure Input/Output (I/O) Modules (SIOMs) have been deployed within POS terminals. These SIOMs are physical modules integrated into the POS terminals. The SIOM is a gatekeeper that establishes and manages encrypted communications between endpoint devices that support secure communications. The SIOM acts as a traffic cop, enforcing security policies and routing messages across device controllers.
The SIOM and its associated processing are a localized system (within a POS terminal) connected to its endpoint devices over physical mediums, such as RS-232c serial ports, Universal Serial Bus (USB), FireWire, etc. A SIOM manages the security and policies for a single terminal and the integrated endpoint devices (peripherals) for that terminal.
However, many legacy POS terminals lack an integrated SIOM and deployment of a SIOM requires new hardware deployment. Moreover, if a retailer desires the security that a SIOM offers, then each of the retailer's POS terminals would have to have a SIOM installed thereon.
Therefore, there is a need for improved SIOM deployment and access that are independent of the current one-SIOM to one-terminal approach.
In various embodiments, techniques for providing a network-based Secure Input/Output (I/O) Module (SIOM) are presented. According to an embodiment, a method for providing a Local-Area-Network (LAN)-based SIOM access is provided.
Specifically, pairing requests are received from two separate peripherals over a LAN, and a unique secure session is established with each peripheral using a secure protocol.
The enterprise system includes an enterprise service database, enterprise provisioning services, system management services, an Intrusion Detection System (IDS), a Wide-Area Network (WAN) and a plurality of retail stores. Each retail store includes a Local-Area Network (LAN), a LAN-accessible server, and a plurality of Point-Of-Sale (POS) terminals (may also be kiosks, Automated Teller Machines (ATMs), Self-Service Terminals (SSTs) or combinations thereof).
Each terminal includes a plurality of peripheral devices, such as but not limited to: scanners, pin pads, encrypted pin pads, Magnetic Strip/Card Readers (MSRs), printers, keyboards, displays, touch-screen displays, value-media dispensers, and the like.
The LAN-accessible server includes a single SIOM for the retail store for which the server is deployed. That is, there is just one SIOM per store that services multiple terminals within that store and each of the plurality of peripheral devices within each terminal.
All data that flows through the enterprise system occurs via secure sessions using a secure protocol. That is, a secure protocol defines custom encryption (encryption algorithms, encryption keys, and encryption key sizes) for each secure session (designated by a single bi-directional arrow in the
Each SIOM (one per store) controls message passing to and from the independent peripheral devices of those peripheral devices' terminals within the store through a secure LAN session.
The enterprise database houses provisioning keys (for encryption, decryption, authentication, and the like), manifests (security rules, security policies, encryption algorithms/techniques, certificates, keys, security permissions, security roles, etc.), asset details (identifiers for devices, capabilities of devices, software resources, versioning information, etc.), transactions logs (for each retail store, for each terminal within a store, and for each peripheral device within each terminal), and other desired enterprise information desired to be collected and housed in the enterprise database.
The enterprise provisioning services are responsible for securely provisioning each SIOM of each store with a manifest from the enterprise database. This is achieved over the network using a secure encryption protocol over a secure session via the WAN connection. The manifest details how each per-store SIOM is to securely communicate with and monitor security for each of the terminals and associated peripheral devices that the per-store SIOM services. For example, one encryption algorithm and set of keys for data payload passing to and from a particular scanner of a particular store may use a completely different encryption algorithm and set of keys for data payload passing to and from a particular pin pad within the same terminal of the same store or a complete different encryption for a different scanner associated with a different terminal within the same store.
The LAN-based SIOM initiates a provisioning request for its manifests over secure sessions to the provisioning services. The provisioning services obtain the provisioning manifests from a hardware security module that is associated with the enterprise database and proceeds to provision the requesting LAN-based SIOM. Once provisioned, the peripherals re-establish their secure sessions with the requesting SIOM.
Each peripheral device, via its Secure Device Controller (SDC), establishes a one-to-one pairing (independent secure session) over the LAN with the LAN-based SIOM when each peripheral device is powered up. The request for pairing is securely transported over the LAN through a secure session to the store server where the LAN-based SIOM resides. Thus, a Man-In-The Middle (MITM) attack would be of no value to a hacker because the same level of security that is deployed with a per-terminal SIOM deployment is used with the LAN-based SIOM (utilizing the secure sessions managed by the secure protocol). This is so, even though peripheral-to-SIOM communication is a LAN-based communication and not a direct device-to-device communication over a direct physical connection between a SIOM and a peripheral device.
The LAN-based SIOM deployment depicted in the
In the configuration depicted in the
Again, (as was the case in the multi-tenant LAN-based SIOM approach), the SDC and LAN-based SIOM pairing requests are initiated by the peripheral devices on power up and all communication occurs via secure sessions over the LAN within a store.
However, in the
So, in the
The
The
The enterprise system provides a cloud-based SIOM configuration. The SDC for each peripheral makes a one-to-one secure session pairing request with its SIOM over the LAN and through the WAN. All communication is secured and transported over both the LAN and the WAN.
Moreover, every peripheral communicates through the enterprise SIOM service for pairing, which is optimized for extreme responsiveness and low latency.
As noticed in the
The
The above-discussed embodiments and other embodiments are now discussed with reference to the
In an embodiment, the LAN-based SIOM service is executed by the server depicted in the
At 210, the LAN-based SIOM service receiving pairing requests from two separate peripheral devices.
In an embodiment, the peripheral devices are one or more of: a scanner, a MSR, a value-media dispenser, a pin pad, an encrypted pin pad, a printer, keyboard, a camera, a display, and a touch-screen display.
In an embodiment, each peripheral device is a different type of peripheral from the other peripheral device.
According to an embodiment, at 211, the LAN-based SIOM service obtains each request from a device controller associated with each peripheral device when that device controller is powered up. So, the I/O controller for each peripheral requests a pairing to the LAN-based SIOM service when it is powered up. This permits I/O being directed to and from each peripheral device to be managed through the LAN-based SIOM service within the terminal for which each peripheral device is integrated.
In an embodiment, at 212, the LAN-based SIOM service identifies a separate and unique set of security attributes for each peripheral based on a peripheral identifier associated with each request. The LAN-based SIOM service is initially provisioned via one or more security manifests that defines each unique set of security attributes for securely communicating with each of the peripherals using a secure protocol (as discussed above with reference to the
In an embodiment, at 213, the LAN-based SIOM service identifies each request as having originated from a different terminal connected to the LAN. This is a multi-tenant network-based SIOM configuration as described above with reference to the
In an embodiment, at 214, the LAN-based SIOM service identifies each request as having originated from a single terminal connected to the LAN. This is a single-tenant network-based SIOM configuration as described above with reference to the
At 220, the LAN-based SIOM service establishes a unique secure session with each peripheral using a secure protocol.
According to an embodiment, at 221, using unique encryption for each secure session. That is, each secure session has one or more of: unique encryption algorithms, encryption keys, and encryption keys from that of the other secure session.
In an embodiment of 221 and at 222, the LAN-based SIOM service enforces unique security policy for each secure session. So, each secure session has a unique set of security rules that the LAN-based SIOM service enforces during each of the secure sessions.
In an embodiment, at 223, the LAN-based SIOM service receives event data from each peripheral device over that peripheral device's secure session. This can be forwarded from the LAN-based SIOM service to a centralized management server, such as the enterprise system discussed above with reference to the
In an embodiment of 223 and at 224, the LAN-based SIOM service sends notification data or command data to each peripheral over that peripheral's secure session. In an embodiment, the command data is an action that a peripheral device is directed to process that was sent downstream from the centralized management server.
In an embodiment, WAN-based SIOM service is executed on the server depicted in the
At 310, the WAN-based SIOM service receives a first pairing request from a first peripheral and a second pairing request from a second peripheral. It is noted that the requests do not have to be received at the same time; although in some cases they can be received simultaneously.
According to an embodiment, at 311, the WAN-based SIOM service obtains each pairing request when each peripheral is powered up.
In an embodiment, at 312, the WAN-based SIOM service identifies each pairing request as having originated from a single terminal. This is a configuration of the single-tenant network-based SIOM discussed above in the
In an embodiment, at 313, the WAN-based SIOM service identifies each pairing request as having originated from a unique terminal. This is a configuration of the multi-tenant network-based SIOM discussed above in the
In an embodiment, at 314, the WAN-based SIOM service identifies each pairing request as having originated from a unique terminal and each terminal associated with a unique LAN-processing environment over the WAN. This is a multi-store, cloud-based, and Security-as-a-Service configuration discussed above in the
At 320, the WAN-based SIOM service establishes a first secure session with the first peripheral and a second secure session with the second peripheral over the WAN. The timing of the establishment of the secure sessions can occur in any order and/or simultaneously. Moreover, the first secure session can be terminated or ended before the second secure session is established.
According to an embodiment, at 321, the WAN-based SIOM service routing each pairing request to a unique SIOM to establish each secure session based on one or more identifiers associated with reach pairing request. The identifiers can identify one or more of: a LAN processing environment for the single SIOM, the terminal from which both pairing requests originate, and each of the peripheral. This is a WAN-based single tenant situation as discussed in the
In an embodiment, at 322, the WAN-based SIOM service uses unique encryption and enforces unique secure rules for each of the secure sessions.
In an embodiment, the network-based SIOM system 400 implements, inter alia, the network-based SIOMs presented in the
In an embodiment, the network-based SIOM system 400 implements, inter alia, the method 200 of the
In an embodiment, the network-based SIOM system 400 implements, inter alia, the method 300 of the
The network-based SIOM system 400 includes a device 401 and a network-based SIOM 402.
In an embodiment, the device 401 is a WAN-accessible server.
In an embodiment, the device 401 is a LAN-accessible server.
The network-based SIOM 402 is configured and adapted to: execute on the device 401, pair with two or more separate peripheral devices over a network connection, and establish unique secure sessions with each peripheral device over the network.
In an embodiment, the peripheral devices are one or more of: scanners, cameras, printers, pin pads, encrypted pin pads, value-media dispensers, MSRs, keyboards, displays, and touch-screen displays.
In an embodiment, the terminal or terminals within which the peripheral devices are integrated include one or more of: POS devices, ATMs, kiosks, and SSTs.
According to an embodiment, the network-based SIOM 402 is further configured and adapted to provide the pairing and the establishment of the unique secure sessions over the network connection that is one of: a LAN connection and a WAN connection.
In an embodiment, the network-based SIOM 402 is further configured and adapted to provide the pairing and establishment as one of: a single-tenant service for a single terminal associated with both peripheral devices and a multi-tenant service for two or more terminals, each terminal associated with a unique one of the two or more peripheral devices.
The above description is illustrative, and not restrictive. Many other embodiments will be apparent to those of skill in the art upon reviewing the above description. The scope of embodiments should therefore be determined with reference to the appended claims, along with the full scope of equivalents to which such claims are entitled.
In the foregoing description of the embodiments, various features are grouped together in a single embodiment for the purpose of streamlining the disclosure. This method of disclosure is not to be interpreted as reflecting that the claimed embodiments have more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive subject matter lies in less than all features of a single disclosed embodiment. Thus the following claims are hereby incorporated into the Description of the Embodiments, with each claim standing on its own as a separate exemplary embodiment.
Number | Name | Date | Kind |
---|---|---|---|
6975727 | Vandergeest | Dec 2005 | B1 |
7121460 | Parsons | Oct 2006 | B1 |
20020099634 | Coutts | Jul 2002 | A1 |
20080320587 | Vauclair | Dec 2008 | A1 |
20090103726 | Ahmed | Apr 2009 | A1 |
20110138458 | Kumar | Jun 2011 | A1 |
20130171939 | Tian | Jul 2013 | A1 |
20140068248 | Kobres et al. | Mar 2014 | A1 |
Number | Date | Country |
---|---|---|
2704078 | Mar 2014 | EP |
2747370 | Jun 2014 | EP |
Entry |
---|
European Search Report dated Mar. 24, 2016 in co-pending European Patent Application No. 15190415.8. |
Number | Date | Country | |
---|---|---|---|
20160149952 A1 | May 2016 | US |