WO2008092770A1

WO2008092770A1 - Electronic payment method and device

Info

Publication number: WO2008092770A1
Application number: PCT/EP2008/050663
Authority: WO
Inventors: Hischam Telib
Original assignee: Trium Gmbh
Priority date: 2007-01-30
Filing date: 2008-01-21
Publication date: 2008-08-07
Also published as: DE102007005427A1

Abstract

Disclosed is an electronic payment method using a mobile terminal that can read an RFID tag and comprising a POS which is provided with an RFID tag supplying at least one unique POS identification. Said method includes the following steps: - the mobile terminal reads the RFID tag in order to obtain the unique POS identification; the amount due is determined; the read data and the amount due are linked to credit card data; the mobile terminal transmits the linked data to an acquirer system via a wireless network; - the acquirer system electronically does the transaction; and - a positive confirmation is sent to the POS or an alternative device of the POS operator if the transaction was successful, or a negative confirmation is sent to the POS or an alternative device if the transaction failed.

Description

Applicant:

Hisham Telib

Oranienburger Strasse 270

13437 Berlin

Method and device for electronic payment

The invention relates to a method and a device for electronic payment, in particular the invention relates to an apparatus and a method for (mobile payment) mobile numbers.

Field of the invention:

Mobile payment or mobile payment or M-payment are payment transactions in which at least the debtor uses mobile electronic communication techniques for initiation, authorization or realization of the payment. These are usually PDAs, mobile phones, smartphones, laptops or similar.

Since about the mid-nineties, there are serious efforts to use the mobile phone for payment transactions.

Starting point was first the fact that the mobile phone due to its specific characteristics, the high

Spreading in the population and due to the

User behavior in dealing with it for the settlement of payment transactions is particularly suitable. In addition to the perspective of technology attractiveness emerged since the emergence mobile services (MC) from the late nineties the problem of billing the same.

When considering mobile payment methods, two basic tasks have to be distinguished: While within the MC a payment of a mobile offer, which is ideally perceived by the user as system inherent, is made, mobile payment outside the MC itself is in turn an MC application which provides payment functionality in different scenarios , In addition to mobile commerce, payment in (stationary) Internet, payment for machines of all kinds, payment to a person who acts as a dealer or service provider are always included

(For example, in the department store, the pizza delivery or taxi) and the transfer of a sum of money between end customers into consideration. In Germany, no mobile payment method has been implemented so far, there are standardization efforts within the framework of the National Round Table M-Payment.

An overview gives Mobile Payment: "A journey through existing procedures and standardization initiatives", Stamatis and the corresponding link: http: // www. ComSoc. org / livepubs / surveys / public / 2004 / oct / pdf / KAR NOUSKOS.pdf

A POS terminal is an online terminal for cashless payment at a point of sale. When the success of ATMs became apparent, the idea of replacing three cash handling operations with a single, cashless POS transaction came into play: cash withdrawals, cash payments and point-of-sale cash. The transfer of funds from the account of the buyer to the account of the sales operation should be automated. Accordingly, a POS payment is defined as a payment in which the payee has a POS terminal, the payment provider a corresponding card as

Payment medium, the authenticity of the cardholder

(cardholder verification) without disproportionately large

Effort and with relatively high security is detected (authentication) and the burden on the cardholder and the credit to the trading and service companies is automated.

Furthermore, the following points should be noted:

Acquiring is a banking term. Acquiring involves the acquisition of contractors willing to accept credit card payments. The acquiring bank is the bank that settles the card payments.

As a rule, five parties are involved in a card transaction:

1. the bank which issued a card to the cardholder, also called issuer or issuing bank,

2. the cardholder who pays for a product or service purchased by him / her the card, 3. the terminal or payment service provider (POS), who either receives the payments locally on the terminal or on the Internet via a virtual terminal and forwards them to the acquirer .

4. the contractor who accepts the payment of a product or service purchased from him by card,

5. The bank, which settles the card transactions of the contracting party, also known as acquirer or acquiring bank.

Issuing (card issuing) and acquiring

(Contractor Billing) are the two complementary sides of the card business.

Overview of the invention: Object of the present invention is a safe

To provide the ability to pay cashless, which is possible on a variety of mobile devices, using parts of an existing card infrastructure. Part of the invention is an RFID system (Radio Frequency Identification), which includes a transponder (also called RFID tag, smart tag, smart label, snoop chip, RFID chip, RFID tag or radio tag). This is connected to the POS. A reader with associated antenna (also called a reader) is included in the mobile terminal for reading the RFID information from the POS.

The data transmission between transponder and reader takes place by means of electromagnetic waves. At low frequencies, this happens inductively via a near field, at higher frequencies via an electromagnetic far field.

The object is achieved by a method and a device having the features of the independent claims, which use the components described above in an inventive manner.

According to the invention, an electronic payment is made by a mobile terminal that can read an RFID tag. Another component of the invention is a POS that is provided with an RFID tag that provides at least one unique POS identification. The purpose of the identification is that after the authorization, the correct POS can be informed that a payment has been made.

If a payment is to be made, the amount from the POS system is usually communicated to the POS system. The customer now normally has to provide his credit card, whose credit card data is then read in to complete the transaction. At this point, the present invention intervenes. In the preferred embodiment, the unique identification of the POS, the price and the

Transaction ID written on an RFID tag. This is done for each transaction. This information is then read in by the RFID reader of the mobile terminal and linked to a credit card identifier. Of course, it is conceivable that the price would be e.g. manually entered by the customer into the mobile terminal, but this is not the most elegant solution, but should still be covered by the invention. In the simplest version, it only requires the transmission of the identification of the POS system. However, the preferred version reads in the above-mentioned data.

The linked data is then sent over a wireless network through the mobile terminal to an acquirer system. The acquirer system performs an authorization electronically, and sends a positive acknowledgment to the POS or an alternative device (eg mobile phone, computer, ERP system) of the POS operator if the transaction was successful and a negative acknowledgment if the Authorization did not succeed.

In a further preferred embodiment, only a unique credit card identifier is stored on the mobile terminal and not the complete credit card data

(include name and number of the card). However, the credit card data can be determined by the unique identifier. A trust center system decrypts this association, sending the unique credit card identifier along with the unique identification of the POS and the price to be paid to the trust center system, which determines the card information based on the unique card identifier and then forwards it to the acquirer system. The trust center system also acquires the acquirer system

Information about the authorization of the electronic transaction and forwards it digitally to the POS or a device determined by the POS operator. The trust center system is thus arranged as a proxy between the POS and the acquirer system. In this selective approach, transactions that do not go through the mobile terminal are forwarded directly to the acquirer system.

The trust center system can manage one or more credit cards for a user of a mobile terminal, and in each case provide unique credit card identifications, which are stored on the mobile terminal and can be selected when making a payment. For this purpose, a program is initially loaded on the mobile terminal, on the one hand allows to select a credit card for the payment for which the credit card identifier is deposited, then allows to read the RFID tag provided by the POS, and then request a confirmation input for the price from the user , After submitting the confirmation by the user, the price, the credit card identifier and the unique identification of the POS and preferably the transaction ID are sent to the trust center system by the mobile terminal. The access and the data to the program are preferably carried out by a password.

In order to enable correct communication, additional POS identifications are stored in the trust center system, which are provided by the acquirer system in order to enable the communication between POS and trust center system, and to check the correctness of the data. To increase security, the card identification is changed after each transaction. In this case, a deterministic random number generator can be used which changes the information on both the mobile device and the trust center and is synchronized. Also, an encrypted new key can be transmitted after each transaction. The transmitted data is preferably encrypted and or provided with signatures.

The preferred embodiment is RFID-NFC chips used.

Other components of the invention, the POS system through the credit card payment is initiated, comprising a readable RFID tag, which provides a unique identifier for an electronic transaction with a Acquirersystem that is readable by a mobile ^"terminal to it, based an electronic This POS will change the day on each transaction by describing it with the price information of the transaction so that the price is automatically read in by the mobile terminal, and preferably additionally the transaction ID on the RFID tag for each transaction written so that the mobile terminal obtains this, and forwards it to the Acquirersystem.

The mobile phone with appropriate software is part of the invention, as described in the claims.

Description of the figures:

Fig. 1 shows the parties in card-based payment transactions according to the prior art; Fig. 2 shows the parties according to the invention; Fig. 3 shows the transmission of the identification data of

POS to the mobile terminal via an RFID chip; Fig. 4 shows the authorization request of the transaction via the trust center, which goes to the acquirer, who in turn forwards to the issuer, and then to the POS

Send confirmation of authorization; Fig. 5 shows the confirmation of the transaction; 6 shows the clearing,

Fig. 7 shows the settlement element with the payment from the issuer bank to the acquirer bank;

Fig. 8 shows the billing to the customer / user (debit) and the credit to the POS holder; Fig. 9 shows the first step of setting up the mobile

Terminal device; Fig. 10 shows the second step of the establishment of the mobile

terminal; Fig. 11 shows the third step of the establishment of the mobile

terminal;

Fig. 12 shows the fourth step of the device of the mobile terminal;

Fig. 13 shows the transmission paths within the present

Invention.

Detailed description of the embodiments:

The additional party in the payment transaction according to the invention is the trust center (FIG. 2). In this case, the virtual card accounts are deposited and stored by a card-issuing bank (issuer). Furthermore, a deposit and storage of POS and terminal ID (POS assignment characteristics) by the respective acquiring bank. A deposit and storage of the IMEI or RFID chip ID as a unique identifier for the mobile terminal of the end customer via issuer. So there is a Creation, delivery and authentication of the client

Key (mobile terminal)

The mobile phone is equipped with an RFID NFC chip for reading the POS information. Furthermore, it has a pre-installed application which stores the card keys and changes them according to a predetermined mode.

The POS is equipped with an RFID NFC chip, which transmits information to the POS. The POS information may consist of POS ID / Terminal ID / Price / if applicable Transaction ID, which are passed on to the mobile phone.

Figure 1 shows a known way in a card payment according to the prior art. The cardholder gives his credit card with the credit card details to the seller who has a POS or an internet portal. These will be forwarded to the bank / acquirer (VISA, MASTERCARD etc.) who will then ask the issuer of the card (issuer bank) where the account for the credit card is deposited whether there is sufficient liquidity. If so, authorization information is forwarded to the POS via the bank / acquirer. Then the card is debited to the bank / acquirer. Finally, the bank / Aqcuirer asks the bank / issuer for payment. During billing, the cardholder's account will be debited and a credit will be assigned to the POS holder.

FIG. 2 shows the embodiment according to the invention. Here, a trust center is centrally located, which has access to all components or communicates with them. The exact form of communication is described below. As already mentioned above, the POS has a unique identification, which is stored on an RFID tag. The mobile terminal has an RFID reader that reads the tag. In the preferred embodiment, for each transaction, the POS system may write the transaction ID, the price of the merchandise, and the POS identifiers to the RFID chip.

Thereafter, as shown in Figure 4, the data is sent along with the credit card ID to the trust center, which converts the identifier into credit card data, and then transmits it to the issuer via the bank / acquirer via the common credit card network for authorization there can. If the authorization was successful, the acquirer sends a confirmation to the POS.

The payment can then be made in FIG. 5, the trust center being arranged between the acquirer and the POS. The POS will then be notified that the transaction was successful so that the seller can deliver the goods.

FIG. 6 shows the clearing. In this case, all transactions carried out are passed on in one go to the trust center, in order to then carry out a load via the established network. In the subsequent settlement in FIG. 7, the acquirers are then sent the cash flows by the issuer of the card.

In the next step, billing is performed in FIG. 8, in which, on the one hand, the sums paid are assigned to the owner of the mobile device and his account is debited, and, on the other hand, the credit of the acquirer is assigned to the owner of the POS who has deposited an account number for his POS , FIG. 9 shows the device of the mobile terminal. Of the

User buys a mobile device with NFC chip or with a SIM card that has an NFC chip and software that can run on the mobile device. This software will be installed on the mobile device. Now he asks his house bank, the so-called Issuer, that he wants to make a mobile payment with his mobile phone. This process can be seen in FIG. In this case, the IMEI of the mobile terminal or a chip ID of the telephone chip are communicated as additional, unambiguous information. Then a virtual card account with the chip ID / EMEI is deposited with the trust center. This process is shown in FIG. 11. On the basis of this information, an access code is transmitted to the user so that he has access to his software. In addition, the access code for the software is communicated here on the mobile terminal, via which the credit card identifier can then be retrieved. Thus, according to Figure 12, the user is now able to perform a transaction.

Figure 13 shows the network connections and the type of network connection used for communication. Thus, GRPS or UMTS is additionally used in the mobile communication with SSL / HTTPs for encryption. The other communication media, which are preferably via a landline or the Internet, SSL / HTTPs are used.

The description of the preferred embodiments is not intended to limit the invention, it is only for the better understanding of the present invention. The scope of protection is to be determined by the appended claims in their broadest interpretation.

Claims

claims

A method of electronic payment by a mobile terminal that can read an RFID tag, further comprising a POS provided with an RFID tag that provides at least one unique POS identifier, comprising the steps of:

- Read the RFID tag by the mobile terminal to obtain the unique POS identification;

- determining the price to be paid;

- linking the read-out data and the prices to be paid with credit card information;

- Transmitting the linked data via a wireless network through the mobile terminal to

AcquirerSystem;

Authorization of the transaction by the acquirer system and

- Sending a positive acknowledgment to the POS or an alternative device of the POS operator, if the

Transaction was successful, or sending a negative acknowledgment to the POS or an alternative device if the transaction was unsuccessful.

2. The method according to the preceding claim, wherein a description of the RFID tag with the price to pay and the unique POS identification is carried out by the POS and a readout of the information by the mobile terminal.

3. The method of the preceding claim, wherein in addition a transaction ID is written to the RFID tag by the POS from the mobile terminal is read out.

The method of one or more of the preceding claims, wherein the mobile terminal has only a unique credit card identifier representing credit card information decryptable by a trust center system, the unique credit card identifier coupled with the unique identification of the POS and the price to be paid is sent to the trust center system, which determines the card information based on the unique card identifier and then forwards it to the Acquirersystem.

5. The method according to the preceding claim, wherein the trust center system receives the information about the authorization of the electronic transaction from the acquirer system and digitally forwards it to the POS or a device determined by the POS operator.

6. The method according to one or more of the preceding two claims, wherein the trust center system for a user of a mobile terminal manages one or more credit cards, and for each unique credit card identifiers provides that are stored on the mobile terminal and selectable in a payment.

7. The method according to the preceding claim, wherein a program is loaded on the mobile terminal, on the one hand allowed to select a credit card for the payment for which the credit card identifier is deposited, then allows to read the POS provided by the RFID tag, then a confirmation for the price of the user to request, after confirmation then the

Price, the credit card identifier and the unique identification of the POS and preferably the transaction ID is sent to the trust center system by the mobile terminal.

8. The method according to one or more of the preceding claims, wherein in the trust center system additionally a POS identification is stored, which is provided by the Acquirersystem to the

To enable communication between Pos and Acquirersystem.

9. The method according to one or more of the preceding claims, wherein trust center system as

Proxy acts for an Acquirersystem and transactions, which do not run over the mobile terminal, forwarded directly to the Acquirersystem.

10. The method according to one or more of the preceding claims, wherein the

Card identification is changed after each transaction.

11. The method according to the preceding claim, wherein a description of the RFID tag with the price to pay and the unique POS identification is carried out by the POS and a readout of the information by the mobile terminal.

12. The method according to one or more of the preceding claims, wherein the RFID tag is an RFID NFC chip.

13. POS system by which a credit card payment is initiated, comprising a readable RFID tag providing a unique identifier for an electronic transaction with an access control system readable by a mobile terminal to perform an electronic transaction based thereon.

14. The POS system of the preceding claim, wherein the RFID tag for each transaction with the

Price information of the transaction is described, so that the price is read in automatically by the mobile device.

15. The POS system of the preceding claim, wherein in addition the transaction ID is written to the RFID tag for each transaction so that the mobile terminal obtains it and forwards it to the acquirer system.

16. The POS system according to one or more of the preceding POS system claims, wherein there is a facility and connection to an acquirer system such that authorization of the transaction sent from the mobile terminal to the acquirer system via a wireless network is provided by the acquirer system sent to the POS system.

17. POS system according to one or more of the preceding POS system claims, wherein the RFID

Tag is an RFID NFC chip.

18. Mobile terminal characterized by a device and configuration, so that a part of the method according to one or more of the preceding method claims that are associated with the mobile terminal.

19. Mobile terminal comprising - an RFID reader;

a processing unit which, with the aid of a software application, is arranged to manage at least one credit card information which allows unambiguous access to credit card data and which controls the RFID reader such that one of them

RFID tag of a POS system a unique identifier of the POS system is read, and preferably also the price to then link this information read with the credit card information, and then wirelessly via a

Acquirer system to send.

20. The mobile terminal according to the preceding claim, wherein additionally the transaction ID is read from the RFID tag and associated with the further information before being sent to an acquirer system.

21. The mobile terminal according to one or more of the preceding terminal claims, wherein only a unique credit card identifier of a credit card is stored as credit card information and an assignment of the identifier to the credit card data is carried out on a trust center system, which then forwards this complete data to an Acquirersystem ,

22. The mobile terminal according to the preceding terminal claim, wherein the unique identifier is changed after each transaction.

23. The mobile terminal according to one or more of the preceding claims, wherein the access to the credit card information is secured by a password.