Pos Kiosk Hardware

CUSTOM POS
KIOSK &
RETAIL HARDWARE

PCI PTS POI tamper-resistant payment terminal hardware with mesh tamper circuit, volatile key erasure, and environmental attack detection; EMV Level 1 contact and contactless NFC antenna to EMVCo Book D specifications; EMV Level 2 dual contact and contactless kernel for Mastercard PayPass, Visa payWave, Amex ExpressPay, and Discover D-PAS; DUKPT ANSI X9.24 key management with HSM key injection; QSR and food service self-ordering kiosk electronics; MDB vending machine controller; PCAP touchscreen integration; EN 301 549 accessible kiosk hardware; barcode imaging scanner characterised for real retail conditions; digital signage and retail media player with proof-of-play logging; GDPR-compliant on-device audience analytics; MDM-managed kiosk fleet deployment.

PCI PTS
POI Device Hardware Approval — Tamper Mesh on Inner PCB Layers, Volatile Key Erasure in Under 100ms, Independent Environmental Attack Detection, and Anti-Probing Potting on Secure Element Zone
EMV L1/L2
Dual Contact and Contactless Kernel Certification — Mastercard PayPass, Visa payWave, Amex ExpressPay, and Discover D-PAS Acceptance from Single Hardware Platform with DUKPT Key Management
99.7%
Kiosk Transaction Connectivity Uptime Across 340-Location QSR Deployment — MDM Remote Management, Dual Wi-Fi and LTE Failover, and OTA Update Without Field Engineer Visit
CHALLENGE

The Engineering Problem

POS and Kiosk Hardware Fails at the PCI PTS Laboratory, the EMV Level 2 Test Suite, the Real-World Scanner Performance, or the Fleet Management Cost — Often All Four Simultaneously

PCI PTS approval requires a design where every component is evaluated by a PCI SSC laboratory for resistance to physical, logical, and environmental attacks — a payment terminal without tamper mesh, volatile key erasure on tamper detection, anti-probing design, and environmental attack detection will not receive PCI PTS approval, and without PCI PTS approval no payment acquirer will allow the device to process card transactions. The EMV Level 2 kernel adds another layer: TVR (Transaction Verification Results) bitmap handling is the most common source of Level 2 certification failures, and discovering TVR handling failures at the test laboratory after production commit requires firmware fixes affecting both contact and contactless kernel paths — a remediation cycle measured in weeks. A self-service kiosk that fails EN 301 549 accessibility audit because the touchscreen reach height exceeds 915mm, or because no audio output is provided for the payment flow, may be legally non-deployable in public-facing environments in the EU and UK.

Three waves are driving demand for genuinely engineered POS and kiosk hardware. The contactless and mobile payment acceleration creates demand for terminals integrating NFC contactless reader, NFC antenna design, and EMV contactless kernel certification without the compromises of retrofit contactless additions to legacy contact-only terminal designs. The self-service and labour automation wave in QSR, grocery, and hospitality creates demand for kiosk hardware achieving the throughput, reliability, and uptime high-volume retail requires across a multi-year deployment at hundreds or thousands of locations — with scanner performance characterised for real retail conditions, not laboratory test environments. The retail media wave as retail networks monetise customer-facing screen time through programmatic advertising creates demand for kiosk hardware with on-device anonymous audience analytics that satisfies GDPR and CCPA without cloud-connected facial recognition requiring Article 9 explicit consent from every shopper who passes the screen.

Ankh designs POS and kiosk hardware from the payment security classification and compliance certification requirement outward — starting with the PCI PTS device class, the EMV certification scope, the accessibility compliance framework, the peripheral integration requirements, and the fleet management architecture that sustains the hardware across a 5-7 year retail deployment — working backward through tamper-resistant hardware design, EMV kernel firmware, peripheral interface electronics, and MDM-managed software stack. Retail technology companies, payment terminal hardware companies, QSR and hospitality technology vendors, self-service kiosk companies, vending technology companies, ticketing vendors, healthcare technology companies, banking kiosk companies, and retail media companies all need a custom POS and kiosk electronics engineering partner with genuine payment security engineering and retail domain depth.

08
What's Inside

POS, Kiosk & Retail Hardware Categories We Build

From PCI PTS-approved payment terminals with tamper mesh and volatile key erasure to QSR self-ordering kiosks with EN 301 549 accessibility compliance to MDB vending machine controllers to GDPR-compliant retail media players with on-device audience analytics — every retail technology category, every payment compliance standard, every customer experience application.

01

Custom POS Payment Terminal Electronics

02

Self-Service Kiosk & Self-Ordering Systems

03

Vending & Unattended Retail Electronics

04

Digital Signage & Retail Media Network Electronics

05

Ticketing, Transit & Access Control Kiosks

06

Healthcare & Patient Check-In Technology

07

Smart Shelf & Electronic Shelf Label Electronics

08

Loyalty, Customer Engagement & Queue Management

Engineering capabilities
Engineering Capabilities
POS, Kiosk & Retail Hardware Engineering Capabilities

Payment Security & PCI Architecture

PCI PTS POI device hardware with tamper-detection mesh on inner PCB layers at sub-0.5mm track pitch covering secure element, PIN entry, and card reader zones — physical PCB penetration breaks the mesh circuit and triggers the tamper response; volatile key erasure electronics clearing all cryptographic key material within 100ms using an independent backup battery discharge circuit that shorts the volatile memory supply rail without software intervention; environmental attack detection monitoring temperature, supply voltage, and clock frequency using a dedicated independent microcontroller that cannot be disabled by an attack on the payment application processor; anti-probing potting for oscilloscope and logic probe exclusion from the secure element zone; PCI P2PE secure card reader with hardware AES encryption of magnetic stripe track data before any host software access to cleartext cardholder data; PCI HSM interface for DUKPT initial key injection, PIN block formation, and remote key loading.

EMV & Payment Certification

EMV Level 1 contact card reader electrical interface to EMVCo Book 1 and ISO 7816-3 including supply voltage levels, ATR timing parameters, and T=0/T=1 activation sequence compliance; EMV Level 1 contactless NFC antenna RF tuning to EMVCo Book D — coupling efficiency validated with network analyser against the EMVCo certification card range before PCB layout finalisation; EMV Level 2 contact kernel firmware including application selection, cardholder verification, offline data authentication with SDA/DDA/CDA, and TVR bitmap handling validated across the complete EMVCo test case suite; EMV Level 2 contactless kernel for Mastercard PayPass, Visa payWave, Amex ExpressPay, and Discover D-PAS; DUKPT ANSI X9.24 Part 1 TDEA and Part 3 AES-based key derivation; TR-31 ANSI X9.143 key block format; ISO 8583 acquirer host message formatting with TLS 1.3.

Barcode & Item Recognition

1D laser scan module signal conditioning and decode firmware for EAN-13, UPC-A, Code 128, Code 39, ITF-14, and Interleaved 2-of-5 retail symbologies; 2D CMOS imaging scanner for QR code, Data Matrix, Aztec, PDF417, and GS1 composite for mobile loyalty, boarding pass, prescription, and mobile payment QR scanning; omnidirectional presentation scanner characterised for hands-free grocery checkout at 30 items per minute across the full product mix; scanner performance characterisation methodology covering code quality degradation, presentation angle variation (0° to 60°), substrate reflectance (high-gloss label to cracked phone screen), and ambient illumination — scan success rate validated for real deployment conditions, not perpendicular laboratory test cards; RFID UHF 860-960MHz for cashierless retail and inventory management; NFC HF 13.56MHz for transit smart card, loyalty, and mobile credential.

Touchscreen & Display Electronics

PCAP touchscreen controller electronics for 7-inch through 65-inch kiosk display integration with 10-point multi-touch gesture recognition and 5ms touch latency characterisation; anti-glare, oleophobic-coating-compatible, and anti-vandal 4mm toughened glass overlay for high-traffic public kiosk applications; force touch haptic feedback actuator electronics for tactile interaction confirmation in high-ambient-noise QSR environments; sunlight-readable display driver electronics at 1000-nit peak brightness for outdoor ticketing, parking, and transit kiosk deployment; commercial display driver electronics rated for 18-hour continuous retail operation; multi-display synchronisation electronics at sub-frame timing for video wall installations; EN 301 549 accessibility electronics with audio screen reader for payment flow navigation, high-contrast mode, and large text mode; privacy screen integration for PIN entry shielding in open kiosk environments.

Peripheral Integration & Connectivity

Thermal receipt printer interface via USB, Ethernet, RS-232, and Bluetooth with paper-out, near-paper, and fault status monitoring for MDM health reporting; cash drawer driver with 24V solenoid drive and open/closed position monitoring for loss prevention audit; MDB IEC 62137 9-bit frame format master controller for vending coin acceptor, bill validator, and cashless payment device at up to 2.5kHz polling rate; weight scale RS-232 and USB interface with tare and gross weight data acquisition for grocery self-checkout verification; MSR module signal conditioning for ISO 7811 Track 1, 2, and 3 reading; ID document and passport scanner with MRZ OCR extraction; biometric fingerprint scanner USB interface; external EPP (Encrypting PIN Pad) interface for kiosk payment pedestal separation.

Kiosk Enclosure & Accessibility

IP54 and IP65 rated kiosk electronics for outdoor and semi-outdoor deployment including unattended ticketing, parking payment, and transit kiosks exposed to rain, dust, and temperature variation; anti-vandal stainless steel panel and polycarbonate overlay for unsupervised high-footfall environments; ADA reach range compliance with touchscreen centre within 915mm to 1220mm height and operable controls within 381mm to 1219mm for forward wheelchair reach; EN 301 549 audio output electronics with adjustable volume for payment guidance and transaction confirmation in variable noise environments; thermal management electronics for sealed enclosure achieving below 55°C internal at 40°C ambient without forced air or external filter ingress risk; UPS battery backup with configurable hold-time from 30 seconds to 15 minutes; anti-condensation heater control for cold climate outdoor deployment.

Remote Management & Fleet Operations

MDM kiosk agent for Android and Windows fleet remote configuration, application deployment, and software update policy management — eliminating field engineer site visit cost for software updates (£300 per terminal per visit at industry standard rate for a 500-terminal network equals £150,000 per release without MDM versus zero field cost with OTA delivery); peripheral health monitoring telemetry reporting printer paper level, scanner error codes, payment terminal fault codes, and display backlight hours to operations dashboard with fault-specific alerting for technician dispatch with the correct replacement part; remote reboot and power cycle electronics for unattended kiosk recovery from application freeze; OTA firmware update with staged canary rollout and automatic rollback on error rate threshold breach; dual Wi-Fi and cellular LTE automatic failover for transaction connectivity uptime management; CMS content player for digital signage and menu board real-time update from central platform.

Retail Analytics & Media Electronics

Anonymous audience analytics camera electronics using on-device AI inference for age band and gender demographic classification without biometric data capture — GDPR Article 9 compliant by design: all inference on-device, no face image transmitted or stored, only aggregate impression count and demographic attributes reported, satisfying legitimate interests legal basis with documented DPIA without requiring per-customer explicit consent; proof-of-play logging with ISO 8601 timestamp, content identifier, duration, and physical location metadata for CPM billing verification and advertising audit; people counting and customer flow analytics using overhead depth camera for footfall measurement without face recognition; dwell time and product category engagement analytics from customer proximity and touch interaction detection; DOOH DSP API integration for programmatic advertising player electronics with impression reporting.

Chipsets & Platforms

Platforms, ICs & Standards

Tested silicon and proven stacks — no experimental platform dependencies.

STM32H7
High-performance kiosk controller — hardware AES-256 for payment data encryption, multi-peripheral USB host management for receipt printer, cash drawer, scanner, and payment terminal simultaneous operation; FMC external memory for display frame buffer; dual CM7/CM4 core for real-time peripheral management alongside UI application processing
STM32H5 (TrustZone)
Payment secure element emulation and CDE isolation — PSA Certified Level 2, TrustZone isolation between payment kernel and application processor zones, hardware AES-128/256 for DUKPT key derivation and PIN block formation; primary platform for integrated POS cardholder data environment design
STM32G4
Precision payment security electronics — hardware AES-256 and TRNG for DUKPT key management, 12-bit ADC for environmental attack detection voltage and temperature monitoring, deterministic interrupt response for tamper mesh sense circuit with sub-100ms key erasure guarantee
Qualcomm Snapdragon (Android POS)
Android AOSP-based POS and kiosk application platform — Neural Processing Engine for on-device audience analytics inference, high-performance UI rendering for QSR self-ordering menu, Android Keystore for software-defined payment application key management, LTE modem for cellular connectivity
Raspberry Pi CM4
Android kiosk and digital signage media player — HDMI 4K output with hardware H.265 decode for 4K content without CPU decode overhead, compute module form factor for OEM kiosk integration, dual-band Wi-Fi and Gigabit Ethernet, MDM agent framework for fleet management
ESP32-S3
Retail IoT endpoints — ESL gateway, queue sensor, customer flow analytics node, smart shelf weight sensor aggregation, and vending telemetry connectivity; hardware AES and RSA for encrypted retail IoT data transport; dual-core Xtensa LX7 for concurrent Wi-Fi communication and local sensor processing
ARM Cortex-A (Embedded Linux )
Full-featured kiosk controller and media player — multi-threaded kiosk application server, hardware H.265 video decode for 4K signage, Yocto Linux production image with custom device layer, SWUpdate or RAUC OTA for MDM-managed fleet firmware updates
ARM Cortex-M (FreeRTOS / Bare Metal)
Real-time payment peripheral controller — deterministic ISR for tamper mesh sense circuit and sub-100ms key erasure; MDB bus master polling controller; cash drawer and receipt printer driver; FreeRTOS task scheduling for concurrent peripheral management with guaranteed response timing
Android AOSP (Kiosk Mode)
Android-based self-service kiosk platform with single-app kiosk mode lockdown, MDM policy enforcement, and Android payment library integration; Play Protect-compatible payment application signing for PCI DSS mobile payment acceptance (MPoC) architecture
FreeRTOS / Bare Metal C
Payment security zone firmware — deterministic timing for tamper detection ISR, DUKPT key derivation, and EMV Level 1 physical layer; bare metal critical section for volatile memory erasure with guaranteed sub-100ms response independent of RTOS scheduler and application software state
Embedded Linux
Production kiosk gateway platform — MDM agent, OTA update service, CMS content player, audience analytics AI runtime, proof-of-play logging service, and peripheral driver stack in single Yocto-managed production image with A/B partition OTA rollback capability
EMV L1 · EMV L2 · EMVCo Book D
Payment card interface standards — EMVCo Book 1 physical interface, Book D NFC antenna and RF specifications, Book 2/3 contact and contactless kernel specifications; accredited EMVCo Level 2 test laboratory certification engagement for contact and contactless dual kernel
PCI PTS · PCI P2PE · PCI DSS
Payment security compliance — PCI PTS POI device hardware approval, PCI P2PE secure card reader hardware architecture, PCI DSS cardholder data environment design; PCI SSC laboratory submission documentation, attack scenario response evidence, and tamper mesh routing documentation
MDB IEC 62137 · DEX/UCS EVA DTS 202
Vending peripheral interface standards — MDB 9-bit RS-485 frame format master controller for coin acceptor, bill validator, and cashless payment device polling at 2.5kHz maximum rate; DEX/UCS audit telemetry protocol for vending inventory and transaction data collection
EN 301 549 · ADA · WCAG 2.1 AA
Accessible kiosk compliance — EN 301 549 ICT accessibility for EU public kiosk deployment, ADA reach range (915mm-1220mm touchscreen height), WCAG 2.1 AA for interactive kiosk digital content; audio output, high-contrast mode, and large text mode electronics
SPECS
Payment Security

Payment Terminal, PCI Security & EMV Certification Electronics

PCI PTS POI. Tamper Mesh <0.5mm Pitch. Volatile Key Erasure <100ms. EMV L1 L2. DUKPT ANSI X9.24. P2PE Secure Card Reader. TR-31 ANSI X9.143. ISO 8583. TLS 1.3. TVR Bitmap Handling. NFC EMVCo Book D.

Payment card fraud costs the global payments industry over USD 33 billion annually, and PCI PTS approval requires that every hardware device reading payment card data does so in an environment where neither cardholder data nor PIN can be captured by a physical or logical attack. A payment terminal must be designed as a security system first and a payment device second — a trace routed 0.5mm too close to the secure element enables a probe attack; a volatile key memory circuit without an independent battery enables a cold-boot attack; an NFC antenna with 3dB lower coupling efficiency than EMVCo Book D specifications drives customer abandonment during peak trading. Ankh designs PCI PTS POI payment terminal hardware from the security architecture outward: tamper mesh PCB routing on inner layers at sub-0.5mm track pitch; independent volatile SRAM key memory with 72-hour battery backup and hardware erasure achieving sub-100ms key erasure on tamper without software path dependency; dedicated environmental attack detection microcontroller independent of the payment application processor; EMV Level 1 contact card reader to ISO 7816-3; NFC antenna RF-tuned to EMVCo Book D Level 1 with coupling efficiency characterised before PCB layout finalisation; EMV Level 2 dual kernel with TVR bitmap handling validated against the complete EMVCo test case suite; DUKPT ANSI X9.24 Part 1 TDEA and Part 3 AES key derivation; PCI P2PE secure card reader with AES-128 hardware encryption of magnetic stripe track data; TR-31 key block format; ISO 8583 with TLS 1.3.

Technical Specifications
PCI PTS
POI Device Hardware Approval — Tamper Mesh, Volatile Key Erasure, Environmental Attack Detection, and Anti-Probing Design Evaluated by PCI SSC Accredited Laboratory
<100ms
Volatile Key Erasure Response — Independent Battery Backup Circuit Shorting Volatile Memory Supply Rail on Tamper Detection Without Software Intervention or Application Processor Involvement
28 weeks
First Schematic to PCI PTS Approval and Acquirer Certification — Including EMV Level 1 NFC Antenna Tuning, EMV Level 2 TVR Test Case Suite Certification, and ISO 8583 Acquirer Integration
SPECS
Self-Service Kiosk

Self-Service Kiosk, QSR & Unattended Retail Electronics

PCAP Touchscreen. Integrated Payment Terminal. EN 301 549 915mm. ADA Reach Range. MDB IEC 62137. DEX/UCS. Smart Locker RFID. MDM OTA No Site Visit. Dual LTE Wi-Fi. UPS Battery. Sealed Thermal Management. 99.7% Uptime.

Labour cost pressure creates demand for kiosk hardware achieving greater than 99% operational uptime across 18-hours-per-day commercial deployment without the maintenance access manned checkout provides — receipt printer, barcode scanner, payment terminal, and display must all be remotely monitored with fault alerting specific enough for a technician to arrive with the correct replacement part without a preliminary diagnostic visit. For vending machine electronics, the MDB IEC 62137 standard is the specific engineering challenge: the RS-485 9-bit frame format bus at 9600 baud with mode bit distinguishing address from data frames, the 2.5kHz maximum polling rate for peripheral device detection, and the cashless payment device MDB protocol extension handling Begin Session, End Session, Vend Request, Vend Approved, and Vend Denied transaction states are all protocol-level requirements that a generic serial interface cannot substitute — and DEX/UCS EVA DTS 202 audit telemetry adds a second application layer that must be implemented without interfering with the MDB peripheral polling cycle. Ankh designs self-service kiosk electronics across every retail category: QSR self-ordering with 27-inch PCAP touchscreen at 1000-nit brightness and anti-vandal tempered glass, integrated PCI PTS-approved payment pedestal with contactless NFC and contact EMV, EN 301 549 audio guidance and 915mm touchscreen centre height, omnidirectional barcode scanner characterised in QSR ambient conditions, MDM agent with OTA scheduling and printer paper monitoring, dual Wi-Fi and LTE failover, UPS battery backup, and sealed enclosure thermal management below 55°C internal at 40°C ambient.

Technical Specifications
99.7%
Kiosk Transaction Connectivity Uptime Across 340-Location QSR Deployment — Dual Wi-Fi and LTE Automatic Failover in Under 30 Seconds, MDM-Managed Monitoring
4.2 min
Average Order-to-Payment Time at QSR Lunch Peak — Versus 6.8-Minute Staffed Equivalent at Identical Location, Order Complexity, and Peak Trading Period Conditions
+23%
Average Order Value Uplift From Digital Self-Ordering Upsell Versus Staffed Order Equivalent Across 340-Location Deployment Over 12-Month Measurement Period
SPECS
Retail Media & Analytics

Digital Signage, Retail Media & Smart Retail Analytics Electronics

4K H.265 Hardware Decode. Proof-of-Play ISO 8601 Logging. On-Device AI Inference. GDPR Legitimate Interests. DOOH DSP API. Overhead Depth Camera. People Counting. Dwell Time Analytics. CMS Integration. Daypart Scheduling.

A retail media network endpoint must simultaneously deliver content from a CMS, ingest a programmatic advertising schedule from a DSP, measure audience impressions using on-device anonymous face detection, log proof-of-play with timestamp and duration metadata, and report impression analytics without transmitting face images or biometric data that would require GDPR Article 9 explicit consent from every shopper who passes the screen. The GDPR architecture that makes retail media analytics legally compliant is the distinction between processing biometric data (special category data under Article 9) and processing anonymous aggregate audience statistics from on-device inference where the face image is never stored, transmitted, or used as a biometric identifier. Ankh engineers retail media, digital signage, and smart retail analytics electronics: hardware H.265/H.264 decode for 4K content at 60fps; multi-display synchronisation at sub-frame timing for video wall installations; daypart scheduling; remote CMS integration; proof-of-play logging with ISO 8601 timestamp, content identifier, duration, and location metadata; on-device anonymous audience analytics using depth or monocular camera — all inference on-device, no face image transmitted or stored; DOOH DSP API integration with CPM billing audit trail; overhead depth camera for people counting, zone dwell time, and queue length analytics.

Technical Specifications
GDPR Art. 9
Compliant Audience Analytics Architecture — On-Device Inference, No Face Image Stored or Transmitted, Aggregate Impression Count Under Legitimate Interests Basis with Documented DPIA
4K 60fps
Hardware H.265/H.264 Video Decode for Digital Signage and Menu Board Without CPU Decode Overhead — Commercial Display Lifetime Rating for 18-Hour Retail Operation
Proof-of-Play
ISO 8601 Timestamp, Content Identifier, Duration, and Location Metadata Per Impression — Auditable CPM Billing Record for Retail Media Network Advertising Verification
Why Ankh Innovations
Why Ankh
WHY

Why Retail Technology Companies Choose Ankh

01

PCI PTS Security Architecture as a Hardware Design Discipline, Not a Compliance Checklist

A payment terminal designed without PCI PTS as a first-order constraint will fail PCI PTS approval. The tamper mesh circuit must route on inner PCB layers at sub-0.5mm track pitch covering every security-sensitive component zone, with mesh track density sufficient to prevent probe insertion between adjacent tracks. The volatile key memory must be powered by a backup battery independent of the main supply, with a discharge circuit that shorts the supply rail within 100ms of tamper detection without any software intervention from a potentially compromised application processor. The environmental attack detection must use a dedicated microcontroller independent of the payment application processor, so an attack on the application processor cannot disable the detection. Ankh designs payment terminal hardware with PCI PTS as the first schematic constraint — tamper architecture, secure element placement, volatile memory backup circuit, and anti-probing potting area are all defined before a single component is selected for any other function.

02

EMV Level 2 Kernel Certification From the EMVCo Test Case Suite, Not the Specification Document

An EMV Level 2 kernel that correctly implements EMV Book 2 will not necessarily pass the EMVCo Level 2 certification test suite, because the test cases include specific error handling and exception conditions whose pass/fail interpretation is established by the test laboratory's application of normative text to specific test vectors. TVR (Transaction Verification Results) bitmap handling is the most common source of Level 2 certification failures — a kernel handling TVR correctly in the approval path but incorrectly in the declined transaction exception path will pass most test cases and fail a specific subset discovered only when the complete suite runs in sequence. Discovering TVR handling failures at the test laboratory after hardware production commit requires firmware fixes affecting both contact and contactless kernel paths — a remediation cycle measured in weeks, not days. Ankh engages EMVCo test laboratory before kernel firmware architecture is committed, so test case coverage informs kernel design before a line of firmware is written.

03

Peripheral Integration Characterised for Retail Throughput, Not Laboratory Performance

A QR code scanner reading a test QR code from a printed card at perpendicular presentation in 30-lux controlled lighting achieves a scan response time that satisfies an integration test in a development environment. The same scanner reading a QR code from a cracked phone screen at 45° under overhead fluorescent lighting in a QSR determines whether the self-service kiosk is faster than the staffed queue — or slower. One QSR deployment study found 2D imager scan success rate on cracked phone screens at 45° presentation in QSR ambient lighting was 12% lower than performance on printed test cards at perpendicular presentation in laboratory conditions — a performance gap visible only when scanner integration is characterised across the actual distribution of code quality, presentation angle, substrate reflectance, and ambient illumination. Ankh characterises scanner integration across the full real-world performance distribution, not the best-case laboratory scenario, before peripheral integration is signed off.

04

Fleet Management MDM Architecture Built Into Hardware From Day One

A kiosk network of 500 terminals where software updates require a field engineer visit per terminal costs approximately £150,000 per software release — and a QSR network managing a menu board update before a product launch needs all 500 terminals updated within a four-hour overnight window, making field deployment logistically impossible for time-critical updates. A network where all software updates, peripheral firmware upgrades, and payment terminal kernel updates deploy over the air via MDM costs nothing per release beyond the platform subscription — and menu board updates propagate to all 500 terminals in under four hours overnight with staged canary rollout and automatic rollback on error threshold breach. Ankh designs kiosk electronics with MDM management architecture, OTA update paths for every firmware component, remote diagnostic telemetry for peripheral health monitoring with fault-specific alerting, and graceful degraded-mode operation during connectivity loss as first-order system requirements — because the five-year operational cost of a 500-terminal kiosk network is dominated by field engineering cost, not hardware unit cost.

POS, Kiosk & Retail Hardware Engineering Results
Case study
Payment Terminal

Integrated POS Payment Terminal for a Payment Technology Company

The Challenge

A payment technology company targeting independent retail and hospitality needed an integrated countertop POS terminal achieving PCI PTS POI approval with tamper mesh, volatile key erasure, and environmental attack detection; EMV Level 1 contact and NFC contactless to EMVCo Book D; EMV Level 2 dual kernel for Mastercard PayPass, Visa payWave, Amex ExpressPay, and Discover D-PAS; DUKPT ANSI X9.24 key management — all from a first-submission PCI SSC laboratory approval without remediation.

The Solution

PCI PTS POI hardware with tamper detection mesh at sub-0.5mm pitch on inner PCB layers; volatile key memory with 72-hour backup battery and sub-100ms AES key erasure; environmental attack detection with dedicated independent microcontroller monitoring temperature, VCC, and clock frequency; EMV Level 1 contact reader to ISO 7816-3; NFC antenna tuned to EMVCo Book D Level 1 with -6dB coupling margin; EMV Level 2 dual contact and contactless kernel; DUKPT ANSI X9.24 with HSM key injection; 2D CMOS scanner for QR loyalty; TLS 1.3 acquirer connectivity with ISO 8583; Android AOSP with MDM agent.

Results
  • PCI PTS POI approval at first laboratory submission without remediation — pre-submission tamper mesh pitch validation and environmental attack detection circuit review identified no non-conformances at PCI SSC laboratory
  • 28 weeks first schematic to PCI PTS approval and acquirer certification — including EMV Level 1 NFC antenna tuning, EMV Level 2 dual kernel test case certification, and ISO 8583 acquirer integration test
  • EMV Level 2 certification without TVR bitmap remediation — full test case suite engagement before kernel firmware architecture commit identified TVR handling edge cases in offline data authentication path before initial kernel development
  • NFC antenna RF tuning achieved -6dB coupling margin across full Visa and Mastercard certification card range — validated with network analyser before PCB layout finalisation, zero contactless card-read failures at EMV Level 1 certification
Case study
QSR Kiosk

QSR Self-Ordering Kiosk for a Fast Casual Restaurant Technology Company

The Challenge

A fast casual restaurant technology company deploying across 340 locations needed kiosk electronics achieving 99%+ transaction connectivity uptime, EN 301 549 accessibility compliance, integrated PCI PTS-approved payment with NFC and contact EMV, omnidirectional barcode scanning in QSR ambient conditions, and MDM-managed OTA updates without field engineer site visits — with order-to-payment time competitive with staffed checkout.

The Solution

27-inch PCAP touchscreen at 1000-nit brightness with anti-vandal tempered glass; integrated PCI PTS-approved payment pedestal with contactless NFC, contact EMV, and magnetic stripe; EN 301 549 audio guidance and 915mm touchscreen centre height; omnidirectional barcode scanner characterised for QSR ambient lighting; kitchen display system Ethernet interface; MDM agent with printer paper monitoring and OTA scheduling; dual Wi-Fi and LTE failover; UPS battery backup; sealed enclosure thermal management at 55°C maximum internal at 40°C ambient; GDPR-compliant on-device age band impression counting.

Results
  • 99.7% transaction connectivity uptime across 340 locations in the first 12 months — dual Wi-Fi and LTE automatic failover in under 30 seconds, MDM-managed connectivity monitoring and alerting
  • 4.2-minute average order-to-payment time at QSR lunch peak versus 6.8-minute staffed equivalent — parallel menu rendering, pre-staged payment terminal initialisation, and optimised KMS order confirmation path
  • 23% average order value uplift from digital upsell versus staffed equivalent across same 340 locations over 12-month measurement period
  • All 340 terminals updated with new menu content in under 4 hours overnight via MDM staged OTA rollout with automatic rollback — zero field engineer site visits required for software updates in 12 months of operation

Building POS, kiosk, or retail hardware? Let's close the transaction.

PCI PTS tamper architecture designed as a first-order PCB layout constraint — tamper mesh routing, volatile key erasure circuit, and environmental attack detection all defined before any general-purpose electronics are routed. EMV Level 2 kernel certification from the EMVCo test case suite rather than the specification document — TVR bitmap handling and offline data authentication edge cases validated before firmware architecture is committed, not discovered during laboratory certification. Full-stack delivery from PCI PTS-approved payment security hardware through EN 301 549-accessible kiosk peripheral integration through MDM-managed fleet deployment with OTA update for every firmware component including receipt printer firmware and payment terminal kernel.

Quote Your Retail Hardware Project