Portable keying device and method

Abstract

A portable encryption key installation system is disclosed that includes a portable keying device for installing a data communications encryption key in an electronic terminal. The portable keying device securely reprograms the encryption key in the electronic terminal without having to remove the terminal from its shipping container or ship the electronic terminal offsite. Furthermore, the portable keying device securely reprograms the encryption key in the electronic terminal without having to dismantle the terminal, deactivate any anti-tampering features, or re-bond the terminal.

1 . An electronic terminal comprising:
 a secure memory for storing at least one encryption key;   a read only memory for storing an authorization code;   an RF transceiver; and   a programming voltage supply unit adapted to convert an RF signal received via the RF transceiver into a programming voltage to thereby enable the secure memory to store the at least one encryption key received via the RF transceiver responsive to receiving a first authorization code via the RF transceiver and matching the first authorization code to a second authorization code stored in the read only memory.   
     
     
         2 . The terminal of  claim 1 , wherein the terminal comprises a keypad, a signature pad, a card reader, a bar code reader, and/or a point-of-sale transaction terminal. 
     
     
         3 . The terminal of  claim 1 , wherein the terminal is in communication with a local area network. 
     
     
         4 . The terminal of  claim 1 , wherein the secure memory is implemented using a separate memory device. 
     
     
         5 . The terminal of  claim 1 , wherein the RF transceiver includes one or more proximity features comprising an RF signal power level, an RF signal angular directivity, and/or an RF signal polarity. 
     
     
         6 . The terminal of  claim 1 , wherein the programming voltage supply unit comprises a diode rectifying the RF signal to output a DC signal. 
     
     
         7 . The terminal of  claim 1 , wherein the terminal is configured to store the at least one encryption key received via the RF transceiver while not being connected to an external power supply. 
     
     
         8 . The terminal of  claim 1 , wherein the terminal is devoid of an internal battery. 
     
     
         9 . The terminal of  claim 1 , wherein the programming voltage supply unit comprises at least one capacitor and a voltage regulator. 
     
     
         10 . The terminal of  claim 1 , wherein the programming voltage supply unit comprises a voltage regulator and a switch electrically coupled to the voltage regulator, wherein the switch is controlled by a processor within the terminal. 
     
     
         11 . The terminal of  claim 1 , comprising an operating voltage supply unit adapted to convert an RF signal received via the RF transceiver into an operating voltage. 
     
     
         12 . A method for installing a data communications encryption key in an electronic terminal, the electronic terminal comprising a secure encryption key memory location for storing the at least one data communications encryption key, the method comprising:
 providing a portable keying device, whereby the portable keying device is physically separated from the electronic terminal;   performing a handshaking routine, whereby the keying device and the electronic terminal exchange handshaking messages;   transmitting an encryption key from the portable keying device to the electronic terminal; and   storing the encryption key transmitted from the portable keying device to the electronic terminal in the secure key memory location.   
     
     
         13 . The method of  claim 12 , wherein the keying device and the electronic terminal exchange handshaking messages by transmitting infrared signals having at least one predetermined transmission characteristics. 
     
     
         14 . The method of  claim 12 , wherein the keying device and the electronic terminal exchange handshaking messages by transmitting audio signals having at least one predetermined transmission characteristics. 
     
     
         15 . The method of  claim 14 , wherein the audio signals include DTMF signals. 
     
     
         16 . A method for installing a data communications encryption key in a terminal using a portable device, the method comprising:
 transmitting, with the portable device, a portable device authentication code;   receiving, with the portable device, a terminal authentication code from the terminal;   transmitting, with the portable device, an authorization code to the terminal;   receiving, with the portable device, a signal indicating that the transmitted authorization code matches an authorization code stored in the terminal;   transmitting, with the portable device, an installation message comprising an encryption key to the terminal.   
     
     
         17 . The method of  claim 16 , comprising receiving, with the portable device, the encryption key from the terminal. 
     
     
         18 . The method of  claim 16 , comprising:
 receiving, with the portable device, the encryption key from the terminal; and   comparing, with the portable device, the encryption key transmitted by the portable device to the terminal to the encryption key received from the terminal.   
     
     
         19 . The method of  claim 16 , comprising:
 receiving, with the portable device, the encryption key from the terminal;   comparing, with the portable device, the encryption key transmitted by the portable device to the terminal to the encryption key received from the terminal; and   if the encryption key transmitted by the portable device to the terminal matches the encryption key received from the terminal, transmitting, with the portable device, a signal indicating that the encryption key transmitted by the portable device to the terminal matches the encryption key received from the terminal to the terminal.   
     
     
         20 . The method of  claim 16 , comprising:
 receiving, with the portable device, the encryption key from the terminal;   comparing, with the portable device, the encryption key transmitted by the portable device to the terminal to the encryption key received from the terminal;   if the encryption key transmitted by the portable device to the terminal matches the encryption key received from the terminal, transmitting, with the portable device, a signal indicating that the encryption key transmitted by the portable device to the terminal matches the encryption key received from the terminal to the terminal; and   receiving, with the portable device, a signal from the terminal indicating that the terminal stored the encryption key into secure memory.