Detailed scenarios illustrating kiosk operation

Even though the kiosk only has a two-line, 20-character LCD display and a numeric keypad for input, it implements quite a few features illustrated in the following walk-throughs.

MVpic2 door open

User Authorization

  • Lights come on as user approaches kiosk (between dawn & dusk).
  • Display activates with welcome message and request to swipe credit card.
  • User swipes their own credit-card (Visa/MC/Discover), and enters self-assigned PIN on keypad followed by '#'.
  • Kiosk sends encrypted request to off-site server with the name on the user's credit-card, the last 4 digits on the card and the user's PIN
  • If the off-site server recognizes the user as a member, it responds with the current fuel price, the user's credit-card pre-authorization level, and the renewal fee if its time for the user to renew. Next: Credit card pre-approval.
  • If the user is not recognized, the server responds with a full or trial membership fee, and non-member fuel price. Next: New Membership.
  • If the user is recognized, but the SPN is not correct, the server responds with an "authentication failed" message. In this case, the kiosk displays an authentication failed/try again message, resets by erasing all credit-card and user records, and returns to the User Authorization scenario.

MV3-small door open

Credit Card Pre-approval

  • If the server determined that its time for the user to renew their membership, the display asks the user if they want to renew at this time for the indicated fee ('#' for yes, '*' for no).
  • If the user choses to renew, the renewal fee is added to the pre-authorization amount. A renewal sale is registered with the off-site server. The sale is not consolidated yet because there is no payment yet.
  • The pre-authorization amount is sent to the credit-card gateway ( for a credit-check via the kiosk's server. The amount is reserved on the credit-card, but is not charged to the account yet.
  • If the gateway approves the transaction, the server responds that the user is authenticated and can proceed to Fueling.
  • If the transaction is rejected, the user is asked to try a different credit card or lower the pre-authorization amount, or cancel the transaction.
  • Following the display prompts, the user can enter a lower pre-authorization amount or try a different credit card and try again. Canceling the transaction ('*' key) resets the kiosk, erasing all user and credit card records.


  • The kiosk will only enter this scenario for valid members (existing or new), with a pre-approved credit-card transaction.
  • Kiosk unlocks the electric strike and activates the pump relay, powering the fuel pump.
  • The kiosk displays the current gallon amount, the price per gallon, and the dollar total including any fees.
  • The user manually turns the pump on and begins fueling.
  • The kiosk registers that the pump is on, monitors the fuel meter, and updates the gallon and dollar amounts on the display.
  • If the dollar amount matches or exceeds the pre-authorized amount, the kiosk immediately inactivates the pump relay, cutting off power to the pump.
  • If no fueling occurs for a few minutes, or the latch sensor detects that the enclosure door was not opened, or the pump hasn't been turned on, the kiosk processes any existing fees with the credit card gateway, resets, and enters the idle state.
  • When finished fueling, the user turns off the pump and hangs up the nozzle.
  • The kiosk registers that the pump has been turned off, de-activates the pump relay, and sends the current dollar amount to the credit card gateway for approval.
  • The kiosk sends a fuel sale record to the off-site server. This sale is not yet consolidated pending credit card approval.
  • The server finalizes (captures) the transaction with the credit-card gateway, and uses it to consolidate pending sales.
    • The server uses dual-entry bookkeeping for sales and transactions, linking the two only once a sale is consolidated with an approved credit-card transaction.
    • This makes it easy to find unconsolidated sales, determine what went wrong, and pursue repayment with the member by other means.
    • A single credit card transaction can be used to consolidate several sales, including partially or completely unconsolidated sales from previous visits.
    • The results of sale consolidation are sent to the user by email as a receipt.
  • In case of gateway error, the kiosk makes several attempts to get approval for the transaction. If it has to give up without approval, it sends a gateway alarm to the off-site server, which results in an email to the appropriate administrator.
  • The kiosk resets by erasing all credit card and user records, and returns to an Idle state, ready for the next User Authorization.

New Membership

  • If the server could not find a membership for the user, the server can offer the user to purchase a full or trial membership.
    • The fees for each membership type are set in the server database.
    • If the server is configured to not offer on-the-spot-memberships, the kiosk will respond by resetting (erasing all credit card and user records) and re-entering the User Authorization scenario.
  • The user selects the membership type based on display prompts.
  • The user is asked to re-enter their PIN to confirm their agreement to the posted membership terms.
  • If the confirmation PIN matches the PIN entered previously, the kiosk prompts the user to enter a credit card fuel pre-approval limit.
  • The kiosk sends the fuel pre-approval amount along with membership fees to the credit card gateway via the kiosk's server.
  • If the gateway approves the transaction, the server registers the membership sale, and creates a new membership for the user.
  • The kiosk enters the Fueling scenario after getting a response from the server that membership registration completed successfully.
  • The new user can use the server to retrieve their transaction and establish their future login credentials on their own:
    • The user enters their name as it appears on their credit card, the last 4 digits of the credit card, their PIN, and a valid email address.
    • A temporary URL is sent to the email address, which gives the user temporary access to their account on-line, while confirming their email address.
    • The temporary URL allows the user to set a new password for accessing their account on-line.