Systems and methods for removing point of sale processing from PCI scope

摘要

The methods and systems described herein provide for processing payments at a retail location whose infrastructure has been significantly removed from PCI scope. A request for processing payments may be sent from a point of sale lane to a back office server in communication with a credit card terminal. A user may use the credit card terminal to enter in secure payment information which is securely transmitted to a remote authorization service for authorization. Through this method, the credit card terminal and sensitive payment information may be securely isolated from the remaining infrastructure at the retail location.

主权项

1. A method for processing payments, the method comprising:
receiving, at a retail location, a request to process a payment transaction; determining that the request is associated with one of a plurality of credit card terminals at a retail location, wherein said determined credit card terminal utilizes a single isolated port for communication with other equipment at the retail location; receiving, by the determined credit card terminal, secure payment information; encrypting, by the determined credit card terminal, secure payment information; sending, by the determined credit card terminal, the encrypted secure payment information to a remotely located server for authorization; receiving, by the determined credit card terminal, a first authorization for the requested payment transaction from a remotely located server; and receiving, by an electronic cash register at the retail location that is associated with the determined credit card terminal, a second authorization for the requested payment transaction from the determined credit card terminal which does not include secure payment information, wherein said second authorization is communicated via said isolated port.