Terminal for paying bus fares: design and operation

Modern urban transport cannot be imagined without automated payment control systems. Bus fare payment terminal has become the central hub connecting passengers, carriers and municipal services into a single digital ecosystem. This device not only reads bank cards or QR codes, but also performs the functions of a validator, tachograph and navigation tracker, ensuring transparency of passenger flow.

Implementation of such systems requires technical personnel to have a deep understanding of the hardware and software. Driver-conductors and mechanics must know how to respond to failures, how to properly collect revenue, and how the terminal interacts with the on-board computer. Errors in setup or maintenance can lead to financial losses and fines from regulatory authorities.

In this article, we will analyze in detail the architecture of modern payment systems, consider popular equipment models and fault diagnosis algorithms. You will find out what is different Android validator from a classic controller, how communication with the GLONASS/GPS module is configured and what data encryption standards are used to protect transactions.

Architecture and functional blocks of a payment terminal

Structurally, any payment terminal is a complex computing complex enclosed in a vandal-proof housing. The basis is a motherboard with a processor that controls peripheral modules. The key element is the contactless card reader (NFC), operating at a frequency of 13.56 MHz. It is this module that ensures interaction with standard bank cards PayPass/PayWave and transport cards.

Most modern devices are equipped with cellular communication modules of 3G, 4G (LTE) or even NB-IoT standards for prompt data transfer to a central server (GPU ACS). This allows you to conduct transactions online or store them in local memory for later download. It's important to note that battery life depends on the capacity of the built-in battery, which must ensure operation of the device throughout the entire shift, even when the bus’s on-board power supply is turned off.

The user interface is usually represented by a touch screen or a set of buttons with LED indication. In more complex systems such as Micra 2203 or Atol 90F, a receipt printer is provided, although in public transport paper media are gradually being abandoned in favor of electronic receipts. All data is encrypted using PCI DSS compliant cryptographic security modules.

⚠️ Attention: It is strictly forbidden to open the terminal body in a depot without special equipment. Violation of the crypto-protection seals leads to irreversible blocking of the device and revocation of the payment processing license.

To ensure stable operation, the terminal is often integrated with other bus systems. Via ports RS-232 or RS-485 Data is exchanged with the tachograph and navigation unit. This allows you to link each payment to a specific GPS coordinate and time, which eliminates the possibility of fraud on the part of the crew. The terminal software is regularly updated over the air (OTA), receiving new tariff plans and lists of blocked cards.

Typology of equipment: from simple validators to cash registers

The public transport equipment market offers a wide range of solutions that vary in functionality and cost. The choice of a specific model depends on the city’s tariff policy and the requirements of the municipality. Conventionally, all devices can be divided into several categories, each of which has its own characteristics of operation and maintenance.

The first group consists of classical validators. These are devices with limited functionality, designed to read transport maps and QR codes. They are reliable, cheap to maintain, but often do not support full-fledged acquiring of bank cards without an additional module. An example would be simple models of the series Voyager or old versions Micra.

The second, most common group consists of universal terminals with support for fiscal drives. They run operating systems (most often Android or Linux) and are capable of performing the functions of a full-fledged cash register. Such devices, for example Atol 91F or Shtrikh-M, can print checks, accept cash (via a bill acceptor) and cards, and also work with mobile applications.

• 📱 Mobile POS terminals: compact Android-based devices used by conductors to walk around the cabin and manually sell tickets.
• 🚌 Stationary validators: are installed at the front door, operate from the on-board network, and are often integrated with turnstiles.
• 💳 Hybrid complexes: combine the functions of a validator, cash register, navigator and video recorder in a single body.

The third type is specialized controllers for “Free-fit” systems. They do not sell tickets, but only record the fact of a passenger’s entry and exit by reading the card upon entry and exit. Charging occurs automatically based on the distance traveled. Such systems require high network fault tolerance, since the loss of passenger exit data leads to blocking of his card or a maximum fine.

Installation process and initial configuration

Installing a payment terminal on a bus is a technically regulated process that requires a qualified electrician. The device must be rigidly fixed in a place accessible to passengers, but protected from vandalism. The standard reader installation height is 120–140 cm from the floor level. Connection to the on-board network is carried out through a fuse rated for a current of no more than 2A to avoid damage to the electronics during power surges.

After physical installation, the software configuration stage follows. Primary activation requires connecting to Wi-Fi or using the mobile Internet SIM card installed in the terminal. Through the administrator menu, access to which is protected by a PIN code, it is necessary to synchronize the time with a precise time server (NTP). Time desynchronization even for a few minutes can lead to banks refusing to process transactions.

An important step is to download the tariff plan and route schedule. The operator enters the route number, type of rolling stock and current tariff. In some systems, for example when using software Smart Card, requires loading encryption keys to work with transport cards. Without this step, the terminal will display an authorization error when trying to attach a card.

⚠️ Attention: Before starting your shift, be sure to check the charge level of the backup battery. If the indicator shows less than 20%, the device may turn off at the most inopportune moment, interrupting passenger service.

To diagnose the connection, the "Equipment Test" mode is often used. In this menu you can check the functionality of the reader, printer (if any), GSM module and sound emitter. A successful test is confirmed by corresponding sound signals and an entry in the system log file.

Operation: driver and conductor duty cycle

Daily work with the terminal begins with the “Opening a shift” procedure. The driver or conductor logs into the system by entering a personal ID or attaching a service card. The system records the start of working hours and the vehicle number. From this moment on, all ticket sales and validation operations are tied to a specific employee.

While moving, the terminal operates in automatic mode. When you present the card, a sound signal is heard, a green indicator lights up, and the screen displays the status of the operation (“Paid”, “Preferential”, “Refused”). If the terminal is equipped with a printer, the receipt is issued automatically; if not, the passenger can receive an electronic receipt via SMS or email. In case of controversial situations (double write-off, equipment failure), the employee must record the error code.

Particular attention should be paid to handling cash if the terminal supports a bill acceptor. Periodically, depending on how full the cassette is, it is necessary to collection. The procedure is carried out in a safe place (usually at the end of the route or in the park) and is accompanied by the printing of a Z-report or the generation of an electronic journal for withdrawal of proceeds.

Completion of work is formalized by the “Shift Closing” procedure. The terminal generates a final report on tickets sold, collected cash and the number of non-cash transactions. This data is packaged in an encrypted package and sent to the server. Only after receiving confirmation from the server, the shift is considered closed and the data is transferred to the accounting department.

Fault diagnosis and troubleshooting

Operating complex electronics under conditions of vibration, temperature changes and dust inevitably leads to failures. The most common problem is the interface freezing or not responding to touches. In this case, a soft reboot through the menu helps. System → Reboot or hardware reset (Reset button hidden in the case).

If the terminal stops reading cards, but the interface works, the problem may be with the NFC antenna. It is necessary to check the tightness of the antenna cable to the motherboard. A common cause is oxidation of contacts or damage to the cable due to vibration. For models with replaceable readers (for example, Ison 1203) it is possible to replace the reading module without replacing the entire device.

Software problems are often resolved by updating the firmware. However, interrupting the update process (for example, due to a low battery or loss of connection) can lead to the device becoming bricked, requiring the memory chips to be resoldered at a service center. Therefore, it is recommended to update the software only while parked with external power connected.

For in-depth diagnostics, many manufacturers provide PC utilities connected via a USB port. With their help, you can download detailed logs (event logs), which will help technical support engineers remotely determine the cause of the failure. Logs contain information about all attempts to read cards, communication errors and system events.

Data security and legal aspects

Payment terminals process citizens’ personal data and financial information, so strict requirements are imposed on their security. All transmitted data is encrypted using TLS/SSL protocols. The fiscal drive ensures the immutability and long-term storage of information about punched checks in accordance with the law (54-FZ in the Russian Federation).

Physical security is also critical. Devices are often equipped with tamper detection. If unauthorized access is attempted, the terminal is blocked, erases the encryption keys and sends an alarm signal to the dispatcher. This protects against the installation of skimmers - devices for copying card data.

Carriers are required to ensure the integrity of seals at terminals. The absence of a seal or its damage is equivalent to a violation of the rules for the provision of transport services and may entail large fines. Monitoring the condition of the seals is the responsibility of the mechanic releasing the line.

In case of loss of the terminal or theft of the bus, remote blocking makes the device useless for intruders. The server sends a command to erase sensitive data, after which the terminal turns into a “brick” without flashing it in an authorized center.

Development prospects: Face Pay and biometrics

Technologies do not stand still, and modern terminals are gradually acquiring new functions. One of the main trends is the introduction of biometric payment (Face Pay). Cameras with IR illumination and neuromodules allow you to pay for travel with your face, without using a card or phone. This requires significantly more powerful processors and communication channels to transmit the video stream or biometric hashes.

Another direction is deep integration with a smart city. Terminals of the future will not just write off money, but will analyze passenger flow in real time, predict occupancy and optimize service intervals. Data from the sensors will be used to plan the route network.

However, the introduction of new products faces the problem of compatibility with old rolling stock and the need to train personnel. The transition period, when both old validators and new biometric systems work on the same bus, creates an additional load on the IT infrastructure of transport enterprises.