Kungani Isofthiwe Yohlelo Lokwethembeka Yehluleka Ku-Hardware ye-POS Ekhiyiwe?

Uhlelo lokwethembeka luyahluleka ku-terminal ye-POS ngesizathu esisodwa ngaphezu kwanoma yisiphi esinye: ihadiwe ayizange yakhelwe ukuvumela isofthiwe yangaphandle ukuthi ingene. Abathengisi bathenga ipulatifomu yokwethembeka, basayine inkontileka, babhajethise ukuqaliswa - bese bethola uhlelo lokusebenza lwe-terminal, i-SDK, noma isitifiketi sokukhokha sivimba ngokuphelele ukuhlanganiswa. Lokhu akuyona inkinga yesofthiwe. Kuyinkinga yokwakhiwa kwehadiwe, futhi kuvela cishe njalo lapho umthengisi ezama ukubopha uhlelo lwe-pos olunemisebenzi yohlelo lokwethembeka ku-terminal eyaklanywa njengethuluzi lokukhokha elivaliwe kunokuba idivayisi yekhompyutha evulekile.
Ngaphambi kokuhlola noma yiliphi ipulatifomu, kuyasiza ukuxazulula inkinga Umbuzo oyisisekelo wokuthi yini i-POS terminal engayenza nengeke iyenze ngedatha yemivuzo — ngoba impendulo incike ngokuphelele kuhadiwe engaphansi kwayo, hhayi ohlwini lwezici zesofthiwe yokwethembeka.
Lesi sihloko sichaza izizathu ezithile zobuchwepheshe zokuthi izinhlelo ze-pos ezihlanganisiwe zokuthembeka ziyahluleka yini kwihadiwe evaliwe, ukuthi "i-locked-down" isho ukuthini ngempela ezingeni le-OS kanye nesitifiketi, nokuthi uhlu lokuhlola lubukeka kanjani kubathengisi abadinga uhlelo lwe-pos lokuthembeka kwamakhasimende olusebenza ngempela ekukhiqizeni.

1. Kusho ukuthini ngempela ukuthi "i-Locked-Down POS Hardware"

Ihadiwe ye-POS ekhiyiwe iyi-terminal lapho umenzi ekhawulela khona ukuthi yiziphi izinhlelo zokusebenza ezingasebenza, yiziphi izinsiza zesistimu lezo zinhlelo zokusebenza ezingazifinyelela, noma kokubili. Lokhu kuyindlela yokuklama ehlosiwe, hhayi iphutha. Ama-terminal endabuko akhona ngekhadi - amayunithi e-countertop akhelwe ngokuyinhloko ukuthengiselana kwe-EMV ne-PIN - aqinisekiswe yizindinganiso ze-PCI PTS POI eziphatha yonke idivayisi njengendawo eyodwa yokukhokha ethembekile. Ukwengeza uhlelo lokusebenza lokwethembeka kuleyo ndawo ngokomlando kwakusho ukwengeza indlela yekhodi engaqinisekisiwe eduze kwedatha yomnikazi wekhadi, okungavunyelwe yimikhiqizo yokukhokha kanye nabathengi.
Izici ezintathu zehadiwe zichaza i-terminal ekhiyiwe:

• ● Isistimu yokusebenza evaliwe noma enemikhawulo eminingi engenazo i-app store futhi engenandlela yokulayisha eceleni.
• ● Ayikho i-SDK eshicilelwe, noma i-SDK ekhawulelwe ekufomethweni kwamarisidi kanye nezingcingo eziyisisekelo ze-peripheral.
• ● Imodeli ye-firmware yohlelo lokusebenza olulodwa, lapho uhlelo lokusebenza lokukhokha luwukuphela kohlelo lokusebenza olusetshenziswa yidivayisi.

Azikho kulezi zici ezingalungile ngokwemvelo. Amatheminali anikezelwe amakhadi avela kubathengisi bakudala aklanywe ngale ndlela ngqo ukuze kuncishiswe ububanzi bokuhlolwa kwe-PCI DSS. Inkinga ivela kuphela lapho umthengisi elindele ukuthi leso theminali esifanayo sisebenzise i-pos nge-module yohlelo lokuthembeka, ukuvumelanisa kwe-CRM, noma uhlelo lokusebenza lokumaketha - amakhono ihadiwe engakaze iqinisekiswe noma yakhelwe ukusekela.

2. Kungani Isofthiwe Yokwethembeka Iphuka Kuma-Architecture E-Closed POS

Ukuhlanganiswa kokwethembeka kuyahluleka kuzakhiwo ezivaliwe ngenxa yezizathu ezintathu zobuchwepheshe eziphindaphindayo: imithetho ye-sandboxing ivimbela ukufinyelela kwedatha, ukufakwa kwama-SDK ayimfihlo, kanye nemijikelezo yokuvuselelwa kwe-firmware yokuvimba ukukhishwa kwezici.

2.1 Imithetho ye-PCI PTS Sandboxing Ikhawulela Ukufinyelela Idatha Yenkampani Yesithathu

Inguqulo 7.0 ye-PCI PTS POI, eshicilelwe yi-PCI Security Standards Council, manje ivumela izinhlelo zokusebenza zezinkampani zangaphandle njengezinhlelo zokusebenza ze-app-store ukuthi zisebenze kumadivayisi e-POI aqinisekisiwe. Kodwa indinganiso idinga ukuthi lezo zinhlelo zokusebenza zibe ihlukaniswe ngokuphephile nemisebenzi yokukhokha ebucayi futhi iqinisekiswe kusetshenziswa izilawuli ze-cryptographic. Imfuneko entsha kuhlobo olufanayo ivimba izinhlelo zokusebenza zenkampani yangaphandle ekufundeni idatha ye-PAN noma ye-PIN ecacile ngisho noma uhlelo lokusebenza lukuhlu olugunyaziwe olugunyaziwe. Ku-injini yokwethembeka, lokhu kubaluleke ngqo: noma iyiphi iphethini yokuhlanganisa ecabanga ukuthi uhlelo lokusebenza lokwethembeka lungafunda inani lokuthengiselana, ithokheni yekhadi, noma isihlonzi sekhasimende ngqo enkambisweni yokukhokha ayihambisani nedivayisi eqinisekisiwe ye-v7.0. Uhlelo lokusebenza lokuthembeka kufanele luthole leyo datha ngesiteshi esivunyelwe, esihlukanisiwe - futhi kuma-terminal amaningi akhiyiwe, awekho isiteshi esinjalo.

2.2 Ama-SDK Anelungelo Lobunikazi Avimba Ukufakwa Kohlelo Lokusebenza Lobuqotho Bomdabu

Ipulatifomu yokwethembeka idinga ukubhalisa amakhasimende, ibheke izilinganiso zamaphuzu, isebenzise ukuhlengwa, futhi iphrinte noma ibonise imivuzo endaweni yokuthengisa. Isenzo ngasinye salezo zidinga i-SDK hook. Ama-terminal ane-OS evaliwe, eyimfihlo yomthengisi ngokuvamile aveza noma iyiphi yalezi zingwegwe kubathuthukisi bangaphandle - umthengisi wokwethembeka ushiywa ehlanganisa nge-webhook yesango lokukhokha ngemuva kokuthi ukuthengiselana sekuvaliwe, osekwephuze kakhulu ukusebenzisa isaphulelo sesikhathi sangempela noma ukuqala umvuzo osesikhathini. Lena iphethini eyodwa yokwehluleka evame kakhulu ebikwe abathengisi abasuka kuma-terminal e-countertop amadala baye ekusetshenzisweni kohlelo lokuthembeka lwe-pos: ukuhlanganiswa "kusebenza" njengokuvumelanisa ngemuva kokuthengiselana, kodwa akukwazi ukwenza lutho endaweni yokusebenzisana ngokwako.

2.3 Imijikelezo Yokuvuselelwa Kwe-Firmware Ibulala Ukukhishwa Kwesici Sokuthembeka

Ngisho nalapho i-terminal ekhiyiwe iveza i-SDK elinganiselwe, i-firmware kumadivayisi okukhokha enhloso eyodwa ivame ukubuyekezwa ngesheduli ehamba kancane, eqhutshwa yisitifiketi, njengoba ushintsho ngalunye lwe-firmware lungabangela ukuqinisekiswa kabusha kwe-PCI. Umthengisi wokuthembeka ofuna ukuthumela umthetho omusha wokuhlenga, ukugeleza okusha kokubhalisa, noma izinga elisha lemivuzo kufanele alinde umjikelezo wokukhishwa komthengisi wehadiwe - hhayi owakhe. Ku-terminal ye-POS ye-Android evulekile, uhlelo lokusebenza lokuthembeka lubuyekeza ngokuzimela ngephakheji yalo yohlelo lokusebenza, ngaphandle kokuthembela ku-firmware ye-terminal nhlobo.

3. Izindleko Zangempela Zokuhlanganiswa Kokwethembeka Okuhlulekile

Izindleko eziqondile zokuhlanganiswa okuhlulekile ziwukukhishwa okumisiwe noma okubuyiselwe emuva, kodwa izindleko ezinkulu ziyindlela ehlakaniphile: abathengisi baqhubeka nokuthenga isofthiwe yokwethembeka ngesivinini esikhulayo kuyilapho ukuhambisana kwehadiwe kuhlala kuyinto ecatshangelwa kamuva. Imakethe yokuphathwa kokwethembeka yomhlaba wonke ifinyelele ku-$17.38 billion ngo-2026, futhi kulindeleke ukuthi ikhule ngesilinganiso sonyaka esihlanganisiwe esingaphezu kuka-14% kuze kube ngu-2034. Idola ngalinye elichithwa epulatifomu yokwethembeka elingakwazi ukusebenza ngempela kwihadiwe yokukhokha liyidola elichithwa kabili - kanye kusofthiwe, futhi ekuvuseleleni ihadiwe okwakufanele kwenzeke kuqala.
Kukhona nezindleko zokuthobela imithetho. Izinhlelo zokwethembeka ziqoqa futhi zicubungule idatha yamakhasimende yomuntu siqu — amagama, izinombolo zocingo, umlando wokuthenga, ngezinye izikhathi idatha yokubhalisa ye-biometric yezinhlelo zokuthepha ukuze zihlonze. Ngaphansi koMthethonqubo we-EU 2016/679 (GDPR), ukuthi ukucubungula kudinga isisekelo esisemthethweni esibhalwe phansi kanye nokugeleza kwemvume ehambisanayo ekubhalisweni. Ukuhlanganiswa kokwethembeka okuphoqelelwe ngesisombululo esingekho emthethweni - i-terminal ephukile, i-APK engasekelwa eceleni, ibhuloho lokuklwebha isikrini - kwenza kube nzima kakhulu ukukhiqiza lawo madokhumenti okuthobela umthetho ngesikhathi sokuhlolwa, ngoba indlela yedatha ngokwayo ayizange iklanyelwe ukubuyekezwa.

4. Yeka ukuthi ukwakheka kwe-POS okuvulekile, okulungele ukwethembeka kubukeka kanjani

Isakhiwo esisekela ukwethembeka sinokwethenjelwa sabelana ngezici ezintathu: i-SDK evulekile, ukusatshalaliswa kwesofthiwe ezingeni lesitolo sohlelo lokusebenza, kanye nezici zobunikazi behadiwe ezidlula ukuswayipha ikhadi.

4.1 Vula i-SDK kanye nokufinyelela kwe-API

Amatheminali e-POS asekelwe ku-Android ane-SDK eshicilelwe avumela umthengisi wokwethembeka ukuthi akhe ngqo ngokumelene nama-API aqoshiwe ephrinta, iskena, isibonisi esibhekene namakhasimende, kanye ne-kernel yokukhokha — ngaphandle kokulinda umenzi wehadiwe ngesici ngasinye esisha. Lena imodeli efanayo yesikhulumi esivulekile eyethulwe yi-Square's Terminal API yehadiwe yayo, futhi manje sekuyindlela ejwayelekile kubakhiqizi abaningi be-POS be-Android abathengisa ezindaweni zokuthengisa zabathengisi abaningi kunezindawo zokuthengisa ezivaliwe zohlelo lokusebenza olulodwa. Abathengisi bathola ihadiwe ngqo kusuka kusisekelo sokunikezela — kufaka phakathi Indawo ye-B2B yabakhiqizi be-terminal ye-POS yaseShayina — kufanele iphathe ukuvuleka kwe-SDK njengesihlungi sokuthenga, hhayi umcabango oxoxwa ngawo ngemuva kokusayinwa kwenkontileka.

4.2 Isitifiketi se-GMS kanye nokuhambisana kwe-App Store

Isitifiketi se-Google Mobile Services (GMS) sivumela i-terminal ukuthi isebenzise amaphakheji ohlelo lokusebenza lwe-Android ajwayelekile nge-Play Store noma isitolo sohlelo lokusebenza esilawulwayo esifanayo, esikhundleni sokukhawulela idivayisi kwisofthiwe ehlanganiswe ne-firmware. I-terminal eqinisekiswe yi-GMS ingafaka uhlelo lokusebenza lokwethembeka ngendlela efanayo ifoni efaka ngayo noma yiluphi olunye uhlelo lokusebenza: ngokuzimela, ohlelweni lokukhishwa komthengisi, ngaphandle komjikelezo wokuqinisekiswa kabusha kwezinga le-firmware.

4.3 Ukubhaliswa Kokwethembeka Kwebhayomethrikhi

Isethi encane kodwa ekhulayo yama-terminals yandisa amakhadi okugcina okuhlonza ukwethembeka kanye nezinombolo zocingo zibe ukubhaliswa kwe-biometric. Ukuqashelwa kwemithambo yesundu kuyisibonelo esisodwa esivele sisekusetshenzisweni kwezentengiselwano — I-ZCS uphakathi kwabakhiqizi be-Android POS okwamanje abathumela amatheminali asebenzisa imithambo yesundu nge-SDK evulekile, okuvumela ipulatifomu yokwethembeka ukuthi ibhalise iphethini yemithambo yesundu yekhasimende njengesihlonzi esihlukile lapho ukhokha kunokudinga ukubhekwa kwekhadi, uhlelo lokusebenza, noma inombolo yocingo. Lolu hlobo lwesici sobunikazi bezinga lehadiwe lusetshenziswa kuphela yipulatifomu yokwethembeka lapho i-SDK yetheminali ikuveza njenge-API ebhaliwe - okuyisidingo sokwakhiwa okuvulekile esichazwe ngenhla, hhayi isici esiyingqayizivele kunoma yiluphi uhlobo lomkhiqizo.

5. Uhlu Lokuhlola Lokuhlola: Ingabe I-POS Terminal Yakho Ikulungele Ukwethembeka?

Ngaphambi kokusayina inkontileka yesofthiwe yokwethembeka, qinisekisa okulandelayo ohlangothini lwetheminali:

• ● I-terminal ithunyelwa ne-SDK eshicilelwe, eqoshiwe — hhayi nje i-webhook yesango lokukhokha.
• ● Itheminali iqinisekiswe yi-GMS futhi isekela ukufakwa nokuvuselelwa kohlelo lokusebenza okuzimele.
• ● Umenzi angaqinisekisa ukuhambisana kwe-PCI PTS POI kwanoma yiluphi uhlelo lokusebenza lwe-sandboxing lwenkampani yangaphandle, oluhambisana nezidingo zokuhlukaniswa kunguqulo yamanje ye-PTS POI.
• ● Umthengisi wokwethembeka angaqamba igama lomthengisi obukhoma osebenzisa imodeli yetheminali eqondile, hhayi nje uhlobo lwetheminali.
• ● I-cadence yokukhishwa kwe-firmware yomthengisi wehadiwe ibhaliwe futhi ayivimbeli izibuyekezo ezizimele zezinga lohlelo lokusebenza ezivela kumthengisi wokuthembeka.

Izindlela zokukhetha i-terminal — ukuvuleka kwe-OS, ububanzi besitifiketi, ukujula kwe-SDK — zihlanganiswe ngokuningiliziwe ku uhlaka lwethu oluphelele lokukhetha ipulatifomu ye-Android POS, ehamba ngendlela efanayo yokuhlola ngale kwamacala okusetshenziswa kokwethembeka kuphela.

6. Imibuzo Ebuzwa Njalo

Umbuzo 1: Ingabe noma iyiphi i-POS terminal ingaqhuba uhlelo lokwethembeka?

Cha. I-terminal idinga i-SDK evulekile, ukusatshalaliswa kwesofthiwe ezingeni le-app-store, kanye ne-sandboxing ehambisana ne-PCI PTS yezinhlelo zokusebenza zezinkampani zangaphandle. Ama-terminal avaliwe, anohlelo lokusebenza olulodwa avimbela noma avimba ngokuphelele isofthiwe yokwethembeka, kungakhathaliseki ukuthi ipulatifomu yomthengisi wokuthembeka isekela ini ephepheni.
Umbuzo 2: Yini eyenza i-POS terminal "ikhiyiwe"?

Itheminali ekhiyiwe ivimbela izinhlelo zokusebenza ezingafakeka, ayivezi i-SDK yomphakathi, futhi isebenzisa i-firmware eyakhelwe kuhlelo lokusebenza olulodwa lokukhokha. Lezi zici zinciphisa ububanzi bokuhlolwa kwe-PCI kodwa futhi zivimba izinhlelo zokusebenza zokuthembeka, ukuvumelanisa kwe-CRM, kanye nokunye ukuhlanganiswa kwezinkampani zangaphandle ngokuklama.
Umbuzo 3: Ingabe ukuthobela i-PCI kuvimbela izinhlelo zokusebenza zokwethembeka ekusebenzeni kuhadiwe ye-POS?

Akuyona ngokuzenzakalelayo. I-PCI PTS POI v7.0 ivumela izinhlelo zokusebenza zezinkampani zangaphandle, kufaka phakathi izinhlelo zokusebenza zokuthembeka, uma nje zibekwe eceleni kude nedatha yokukhokha yombhalo ocacile kanye ne-PIN. Ukuthobela imithetho kudinga ukuhlukaniswa, hhayi ukuhlukaniswa, futhi ukwakheka kwetheminali kunquma ukuthi lokho kuhlukaniswa kungenzeka yini ngokobuchwepheshe.
Umbuzo 4: Uyini umehluko phakathi kokuvumelanisa ukwethembeka ngemva kokuthengiselana kanye nokuhlanganiswa kwesikhathi sangempela?

Ukuvumelanisa kwangemva kokuthengiselana kusebenzisa imivuzo ngemva kokuvalwa kokuthengisa, nge-webhook yesango lokukhokha. Ukuhlanganiswa kwesikhathi sangempela kusebenzisa imivuzo ngesikhathi sokukhokha, nge-SDK hook. Ama-terminal akhiyiwe ngokuvamile asekela kuphela eyokuqala, okuvimbela izaphulelo kanye nokuhlengwa okungaphakathi kweseshini.
Umbuzo 5: Ingabe ukuhlonza nge-biometric, njengomthambo wesundu, kungasetshenziswa ekubhaliseni ukwethembeka?

Yebo, kuma-terminal lapho umenzi eveza khona ukubanjwa kwe-biometric nge-SDK eqoshiwe. I-palm vein kanye nezihlonzi ze-biometric ezifanayo zivumela ipulatifomu yokwethembeka ukuthi ibone ikhasimende elibuyayo ngaphandle kwekhadi, inombolo yocingo, noma ukubhekwa kohlelo lokusebenza, uma nje ukwakheka kwehadiwe kusekela ukufinyelela komuntu wesithathu kulolo datha.