A Guide to POS Mobile Connectivity & IoT SIM Cards

EPoS SIM Cards

Business Critical Connectivity

Point of Sale Mobile Connectivity, Android PoS SIM Cards, IoT SIM Cards & Multi-Network Systems

Point of Sale (POS) payment terminals and systems are commonly used devices in retail and hospitality for authorising and charging for electronic payments. They are used in mobile, fixed, attended, stand-alone or unattended environments. Often commercialised for a range of sectors and industrialised for vending machines, ticket machines and self-service kiosks. Terminals are subject to PCI DSS standards that are set by the card issuers (such as Visa and Mastercard) to ensure data security and payment integrity.

Some Electronic Point of Sale (EPoS) systems are connected to electronic cash registers (ECR) or sophisticated business management systems. EPoS systems can enable the complete running of the retail transaction process/system and be configured in a variety of forms or levels of sophistication. This can include secure cloud-based systems for extra services such as inventory management or real-time marketing. The terminals themselves can range from smart teller machines equipped with a range of accessories such as barcode scanners, thermal receipt printers, label printers, to bring your own device mobile terminals and smartphones (BYOD) that can be used as POS terminal product equipment with the right secure apps and connectivity solutions.

To enable authorisation, billing and data feeds/configuration, most forms of POS and EPoS systems are connected either directly or indirectly to a communications network. For example, this can be ubiquitous systems such as mobile networks including 2G/3G/4G/5G (using extra layers of security). While stationary or fixed-position payment terminals often rely of wired networks such as DSL, PSTN, TCP/IP or X.25, they also often utilise secure mobile as a back-up communication method (Fagerberg, 2021). Secure mobile is also often used as the primary communication method for fixed devices, as it removes the need and inconvenience of network cabling or the fallibility of a single landline connection (ibid).

Handheld POS terminals also often rely on short-range wireless connectivity solutions such as Wi-Fi or Bluetooth. Increasingly they incorporate mobile GSM to benefit from independence from unique site contexts or unsecure local networks and to provide maximum range flexibility (ibid). Systems are increasingly based upon Android devices and we are increasingly seeing Android PoS SIM cards that utilise eUICC technologies being deployed. Many being equipped with a QR code camera or bar code scanner.

Mobile Point of Sale Systems (mPoS) tend to be smaller and more portable devices that via a mobile app allow a smart phone or tablet to become a payment acceptance system and register. These are particularly popular will small business owners or those who are highly mobile and visiting clients in a range of locations.

SoftPOS systems are where a phone or tablet can be converted through a secure app to become a highly flexible mPoS terminal. The phone or tablet, however, must have Near Field Communication (NFC) functionality in-built, to permit user/issuers cards to be tapped directly on the phone/tablet. This removes the need for an intermediary bespoke MPoS device, which can help to reduce third-party integration problems. Some view this as a long-term replacement to some forms of mPoS devices and in certain types of use cases.

It is important to remember that for security and privacy, NFC communications are used for the communication between the issuer card and the accepting device in contactless settings. This means that communications are limited to a few centimetres and restricts the possibility of mis-payment.

What are the Reasons for the Rapid Adoption of Android PoS terminals, EPoS and mPoS Systems?

Contactless payments systems such as smart PoS terminals supply a convenient and trusted transaction medium for consumers in a complete range of settings. This is critical to their use as perceived usefulness and trust significantly influence a customer’s intention to use, particularly where biometrics are an authentication method for payment (Sulaiman & Almunawar, 2021).

Tapping a card or a contactless smartphone payment application clearly can provide high levels of convenience for consumers, users, retailers, and service providers. Their adoption was also accelerated, however, by widely held fears of virus transmission during the COVID-19 pandemic via touching shared surfaces (Fagerberg, 2021). Tap and go payment terminals replacing normalised PIN entry also due to feelings of increased security and privacy, providing a ‘cleaner’ and more personal, ‘seamless’ service process; therefore, positively informing consumer’s affective responses to the buying experience (Oloveze, et al., 2021). Trust and convenience are, therefore, paramount for both consumers and retailers who rely on these systems for their primary physical customer point of contact.

As a result, contactless payments are easily now the primary method of completing face to face or unattended transactions for goods, shopping, personal services or travel experiences. To facilitate this rapid demand, 80 million EPoS terminal units were shipped in 2020 and deliveries are expected to grow to 127 million units by 2025 (Fagerberg, 2021). Retail, Transportation and Hospitality applications are tending to lead growth and also influence the trajectory of new features (Grand View Research, 2022). According to Berg Insight, around 47% of terminals are now being shipped with wireless connectivity in-built, and this is likely to grow moving forward as more devices need extra security, resilience and the extra convenience of untethered mobility (Fagerberg, 2021).

Contactless and smart payment systems also create opportunities for creating new and disruptive service processes. As an example, in transportation, new ways of transacting customer journeys and their payment for them become possible. Tapping-in and out for time or distance-based services such as transport or logistics services become more painless, intuitive, and inherently flexible. Especially compared to pre-purchase highly cognitive consumer processing systems, which by their nature and complexity typically result in the formation of unnecessary and irritating queues. For example, an inconvenience which became normalised in ticketing and parking payment machines at the busiest locations or times of day.

EPoS systems also generate valuable location and time-based business data, which enables organisations to develop data analytics and processing systems to help optimise their business (Marques, et al., 2022). Creating valuable market intelligence and reliable, timely information for warning, analysing and predicting inventory flows, user flows and changing demands, with new layers of financial, spatial and temporal meaning (ibid).

It is also worth noting that many retailers place such a high value on convenient and seamless service delivery, that they will sometimes accept low-level payments off-line if authorisation channels become unavailable. This is to keep customer transactions flowing but are ultimately at the merchant’s own financial risk. Of course, transactions are cached and then communicated with their Merchant Services and authorised with the bank/issuer as soon as the service is resumed.

How do Point of Sale (POS) Terminals Attain a Seamless and Reliable Service?

A convenient, trusted, seamless and frustration-free service, requires a fully integrated service. EPoS devices are manufactured by large OEM manufacturers for a variety of clients, with the aim of configuration changes being relatively low-level and post manufacture. The firmware logic that manages and controls the hardware will also manage their communications. This is more fundamental to the processing of the device, than for example configuration changes that are available to the Payment Service Provider and any display branding.

System design is, therefore, key. How hardware is selected, and the level of due diligence paid towards the operation of firmware in a range of scenarios can make the difference between a haphazard system and a secure and resilient end to end service. In distributed systems, communications, secure protocols, API and end to end device encryption are clearly fundamental to a robust service. Methods of communication and their understanding of, however, can sometimes be side-tracked or assumed to be out of a service provider’s control. This can be a miscalculation, however, as the construction or utilisation of available and alternative forms of local and wide-area communications are determinable with transparent partners, which can also mean the difference between just focussing on more predictable hardware/device failures and ignoring more systemic problems or failures of poorly planned infrastructure or communications systems by virtue of their unexplainability or lack of quantifiability. This sort of due diligence, however, is fundamental to safety and life critical mobile communications services and are equally important when delivering business or financial critical communications systems.

Only then, by taking an integrated and end to end approach involving device manufacturers and communications experts/providers can devices be designed and configured to provide the highest levels of up-time, thus reducing both dissatisfaction and financial risk for retailers.

What Roles do IoT SIM Cards Play in EPoS Systems, Android Handheld PoS Terminals and Applications?

‘Contactless payments’ rightly imply wireless communications are central to the payment process. This is via a variety of mechanisms. For example, the communication between the payment device/smart phone uses NFC wireless communications in very close proximity to each other.

The handheld or static EPoS device or system, however, then needs to communicate upstream via fixed-line or wireless comms.

Micro business users may use a connected personal mobile phone and merchant approved app for these purposes, utilising their phone providers consumer SIM card or a local Wi-Fi connection which they manage.

Larger applications, however, will require a centrally managed, secure IoT SIM card, secure, IT managed on-premises Wi-Fi, or a secure fixed broadband connection.

For larger organisations, however, any Wi-Fi options need to provide a secure and manageable connection. If not correctly set up, a simple local configuration change could render payment devices unable to authenticate/bill or open to malicious or fraudulent interception. Positioning of Wi-Fi routers also needs to cover all required transaction spots in the building. This can be more of a problem for providers who lack the IT skills or control the premises in their entirety.

For these reasons, payment service providers are now using IoT SIM Cards as the primary or secondary forms of communications for many of their Point-of-Sale Devices. This is not only within the payment devices themselves, but increasingly as the back-haul mechanism for Wi-Fi routers.

Range problems are also overcome where payment terminals can be taken freely to consumer’s and are able to communicate whether the device is in range of Wi-Fi or not. It also means if there is a hardware or configuration problem with the Local Wi-Fi router, then the payment device can still communicate securely over the mobile connection.

This provides the best of both worlds in terms of reach, but also provides multiple forms of communication resilience. Enabling portable and static POS devices and systems to secure their critical connectivity and eliminate single points of failure.

For deployment simplicity and resilience, many payment service providers use preloaded IoT SIM Cards in their provisioned devices that are equipped at payment terminal factories. They, therefore, rely on secure multi-network mobile connectivity, providing geo-resilience in deployment and for a maximum combination of service up-time and deployment flexibility.

How do Multi-Network IoT SIM Cards Help Payment Systems Work More Securely and Reliably?

Multi-Network systems enable devices to communicate using any of the locally available mobile radio mast access networks. For example, in the UK, which would mean EE, Vodafone, O2 and 3; or a subset of these depending upon price and availability. This provides maximum geographic flexibility for national deployments and the ability to communicate using whichever local radio network is the strongest or most available in terms of data throughput. Normal consumer SIMs do not allow this and are fixed to one provider. This means that if a signal from a network provider is poor in a location or attenuated due to building conditions, or is suffering a local or national outage, then a device loaded with an IoT SIM card can hop to another network.

To work reliably, however, it is important to select payment devices that can intelligently select the most appropriate network for their needed type of communications and based upon network availability. Payment devices are manufactured with integrated modems which support a variety of GSM radio frequencies and protocols for certain types of mobile communications. If, for example, the device modem only supports 4G LTE communications and not 2G or 3G, but the strongest signal available is a 2G one, then the payment device if (as many are) configured in firmware to select the strongest signal (dBm) would therefore select the 2G [very low or no data] network, when a slightly lower strength 4G signal but higher data bandwidth network is available. It is not unknown for devices to hang onto these 2G networks as devices will usually only switch if the 2G network signal strength (dBm) drops below a  certain threshold. This can be particularly catastrophic as the device may never have cause to try another network. For multi-network IoT SIM cards to work effectively, it is therfore imperative that manufacturers configure their network selection processes in consultation with IoT SIM card providers and experts.

Dual-SIM Options?

Multi-network IoT SIM cards deliver significant resilience over single-network SIM card performance for EPoS payment systems. Dual discrete-pathway multi-network IoT SIM cards, however, can also be selected for an even more resilient option.

Multi-network SIM cards provide access to all radio access mobile networks locally available. The signalling pathways for all traffic over these networks must, however,   be authorised by a single IoT roaming agreement provider using their core infrastructure and Home Location Register (HLR). The highest quality systems are designed for high resilience, geo redundancy and are supported by sophisticated Network Operation Centres (NOC). Even the highest quality systems, however, can sometimes suffer temporary outages or suffer service degradation during pre-warned maintenance windows. If the core systems are interrupted for some reason (although rare), then data sessions cannot be authorised. Two SIM cards by two different and discrete IoT core infrastructure roaming providers, therefore, offers the potential for complete end to end and temporal resilience as it is highly unlikely that both network roaming provider’s core infrastructure would degrade at exactly the same time.

For the absolute maximum possible theoretical levels of resilience, two IoT Multi-Network SIM cards can be used as the primary/back up, independently or in conjunction with Wi-Fi or wired LAN communications. This, however, requires intelligent dual SIM support in the payment terminal hardware and intelligent dual SIM capability and network selection to be implemented within the payment device’s hardware and firmware. It may also require remote configuration for the client to select their preferred parameters. For example, implementing a Dual SIM approach means the hardware and firmware of the device must support and manage the utilisation of both SIM cards. In some cases, two SIM slots may be supported in the hardware, but this does not mean that the device manufacturer has implemented the firmware to support both. They may not have also implemented software that intelligently manages switching between the two SIM cards based upon fully thought through real life scenarios. Switching SIM cards unnecessarily, could create problems. For example, during a successful transaction.

Control of or influencing the hardware and firmware design of devices becomes imperative for both security and resilience. It is important for the payment device to not only make informed decisions in-session and between sessions, but also to ensure that the device is monitoring and selecting networks in-between transactions or during device down-times to ensure that the device is connected and ready for use as soon as it is needed for transactions. Any loss of a particular network would therefore be dealt with proactively and in advance of the service for the consumer and the retailer being interrupted. For example, implementing heartbeats can mean that any significant network problems can be dealt with proactively, but also based upon the surety of an appropriate number of retries before SIM switching. Having a sophisticated implementation also means that the data plans for each SIM card become more predictable and creates a more cost-effective cost plan environment for each.

Where a dual SIM hardware/firmware option does exist, it is important, therefore, to test the functionality based upon a number of live-use scenarios. As a guide, switching core networks can take anything from 15 seconds to well over a minute. It is, therefore, best to only switch SIM slots under known and controlled circumstances; i.e. when a catastrophic connection failure is detected and verified by the device.

Frequently Asked Questions: Unattended Terminals: (i.e. Smart Vending and Ticketing Machine SIM cards)

Do Smart Kiosks, Vending and Ticketing Machines Need IoT SIM Cards?

Smart kiosks and ticketing machines have revolutionized the way we access services and purchase tickets. With advancements in technology, these machines are now equipped with IoT capabilities, allowing them to connect to the internet and provide real-time data. One crucial component that enables this connectivity is the IoT SIM card. These SIM cards, specifically designed for IoT devices, allow smart kiosks and ticketing machines to communicate and transmit data securely. By integrating IoT SIM cards into these machines, businesses can ensure reliable connectivity, seamless operations, and enhanced customer experiences. Whether it’s purchasing tickets, obtaining information, or making payments, IoT SIM cards play a vital role in powering these smart machines and transforming the way we interact with them.

Do Smart Kiosk, Vending and Ticketing Machines Need IoT Routers to Communicate?

The integration of technology in various industries is becoming increasingly prevalent. One area where this is particularly evident is in the use of smart kiosks and ticketing machines. These advanced devices bring convenience and efficiency to businesses and customers alike. However, to ensure seamless connectivity and maximize their potential, the question arises – do these smart kiosks and ticketing machines also need IoT routers?

When it comes to smart kiosks and ticketing machines, reliable and secure internet connectivity is of utmost importance. IoT routers provide a robust and dedicated connection for groups of devices or those in poor mobile coverage locations, ensuring that these machines can operate smoothly, process transactions efficiently, and provide real-time updates. Moreover, with IoT capabilities, these devices can be remotely monitored and managed, reducing the need for physical maintenance and troubleshooting.

In addition to connectivity, IoT routers offer enhanced security measures. With the rise in cyber threats, businesses must protect their customer data and prevent unauthorized access. IoT routers provide advanced encryption protocols and firewall protection, safeguarding sensitive information and ensuring privacy. Moreover, these routers can also detect and mitigate potential security breaches, providing businesses and customers with peace of mind. In conclusion, smart kiosks and ticketing machines can greatly benefit from the integration of IoT routers.

These devices require a reliable and secure connection to deliver their full potential and ensure a seamless user experience. With enhanced connectivity and robust security measures, businesses can harness the power of smart technology to streamline operations and provide convenient services to their customers. As the digital landscape continues to evolve, embracing IoT connectivity in these devices is undoubtedly a wise investment for businesses looking to stay ahead in a highly competitive market.


Further Information on IoT, IoT Connectivity & IoT SIM Cards.

References

Alay, O., A. Lutu, R. G. & Peon-Quir, M., 2020. MONROE: Measuring Mobile Broadband Networks in Europe. s.l.:Simula Research Laboratory, IMDEA Networks, Celerway Communications, Karlstad University, Politecnico di Torino, Nextworks, Telenor Research.
Fagerberg, J., 2021. POS Terminals and Wireless M2M – Fifth Edition, s.l.: Berg Insight.
Fida, M. & Marina, M. K., 2018. Impact of Device Diversity on Crowdsourced Mobile Coverage Maps. Rome, 14th Grand View Research, 2022. Contactless Payment Market Size & Share Report, 2021-2028. [Online] Available at: https://www.grandviewresearch.com/industry-analysis/contactless-payments-market
International Conference on Network and Service Management (CNSM), pp. 348-352.
Jarvis, C., Midoglu, C., Lutu, A. & Alay, O., 2018. Visualizing Mobile Coverage from Repetitive Measurements on Defined Trajectories. Vienna, 2018 Network Traffic Measurement and Analysis Conference (TMA), pp. 1-6.
Koutroumpis, P. & Leiponen, A., 2016. Crowdsourcing mobile coverage. Telecommunications Policy, 40(6), pp. 532-544.
Marina, M., Radu, V. & Balampekos, K., 2015. Impact of indoor-outdoor context on crowdsourcing based mobile coverage analysis. s.l., Proceedings of the 5th Workshop on All Things Cellular: Operations, Applications and Challenges, pp. 45-50.
Marques, C., Guedes, A. & Bento, R., 2022. Tracking changes in tourism demand with point-of-sale data: The case of Portugal. Tourism and Hospitality Research, p. 14673584221075175.
Oloveze, A., Oteh, O., Nwosu, H. & Obasi, R., 2021. How user behaviour is moderated by affective commitment on point of sale terminal. Rajagiri Management Journal.
Perlman, L. & Wechsler, M., 2019. Mobile Coverage and its Impact on Digital Financial Services. s.l.:s.n.
Sen, S. et al., 2011. Can they hear me now? A case for a client-Assisted approach to monitoring wide-Area wireless networks. s.l., Proceedings of the 2011 ACM SIGCOMM conference on Internet measurement conf.
Sulaiman, S. & Almunawar, M., 2021. The adoption of biometric point-of-sale terminal for payments. Journal of Science and Technology Policy Management.
Zhang, P., Durresi, M. & Durresi, A., 2018. Mobile privacy protection enhanced with multi-access edge computing. s.l., 2018 IEEE 32nd International Conference on Advanced Information Networking and Applications (AINA). IEEE, pp. 724-731.