ES2533227B2 - Method and electronic telepayment system - Google Patents

Abstract

Electronic telepayment method and system. # The present invention relates to an electronic telepayment method and system for making a payment between a buyer and a seller that comprises receiving, on an electronic device of the buyer, seller identification information, data seller's bank and payment identification information; connect an external memory module to the electronic device with encryption parameters previously assigned to the buyer; authenticate the buyer through a PIN code; encrypt the information received in the electronic device, according to the encryption parameters; send a message with the encrypted information to a payment module through a telecommunications network; decrypt the message received in the payment module; and make the payment, according to the information contained in the decrypted message, from the payment module to a payment module associated with the seller.

Description

   Method and electronic telepayment system

Object of the invention

The present invention relates in general to the technical field of electronic commerce methods and systems and more specifically to a secure electronic web payment methods and system for making payments between a buyer and seller, such as in a purchase through intemet or In a commercial establishment.

Background of the Invention

Currently, it is very common [...] that purchase transactions through intertemet are paid through telepayment methods and systems. One of the possibilities is to purchase a prepaid card from a bank before the purchase operation and enter the information requested by the seller through the seller's interface. This often motivates a strong distrust of buyers because they usually do not know the interface used (which implies that they do not know what data they should provide) and that they do not know to which entity they are providing such data.

In addition, depending on the website, the way to request the data is futile and the same data is not always requested and often the only thing that the buyer of a web store knows, is the data that appears on its website and nothing more.

It is a reality that scams caused by data theft provided through the internet make users not feel safe with current electronic payment methods, which is a serious problem, since it is essential for a method of tetepago, not only that it is safe, but that it is perceived as safe by the user.

Additionally, many of the electronic telepayment methods existing in the state of the art are adapted for use in the portable devices of the users, mainly mobile phone, and although they reinforce security with personal keys, this is not a definitive protection against cases of loss or theft. The greatest risk may

Consider the cloning of the devices, as it allows cybercriminals to duplicate the system and copy keys without the owner having any knowledge. In this way, the cybercriminal does not intercept the content of the payment made by the holder, but allows him to make payments subsequently supplanting his identity.

s

Therefore, the state of the art needs new solutions in electronic telepayment methods that provide the user with the necessary security both to make their payments, as well as to the loss, donation or fraudulent use of their electronic devices.

10

Description of the invention

fifteen

The present invention solves the aforementioned problems by means of a method and an electronic telepayment system that provides the user with the necessary security both for making their payments, and for the loss, cloning or fraudulent use of their electronic devices. The electronic telepayment method for making a payment between a buyer user and a seller user comprises the following steps:

20 2S 30

a) b) e) d) e) f) g) receive, on an electronic device of the buyer user, information comprising at least identification information of the selling user, banking information of the selling user and payment identification information; connect an external memory module to the electronic device, where the external memory module contains encryption parameters previously assigned to the buyer user; receive, on the electronic device, a unique identification PIN code from the buyer user; encrypt, in the electronic device, the information received in step a) together with the identification PIN code received in step e) according to the encryption parameters of the external memory module connected in step b); send a message containing the information encrypted in step d), from the electronic device of the buyer user, to a payment module, through a wireless telecommunications network; decrypt the message received in the payment module; make the payment, according to the information contained in the decrypted message, from the payment module to a payment module associated with the selling user.

Advantageously, the seller is perfectly identified as a result of step a), since in order to be able to collect he has to give all his bank details, since the payment is made by entering the amount in his Collection Entity (bank, cashier, etc.) and in your account, which is a guarantee for the buyer.

Additionally, the present invention may comprise, once payment has been made from the payment module to the payment module, the steps of:

-

send a second message containing payment information received, from the payment module to an electronic device of the selling user;

-

Once the payment by the seller user has been verified, send a third message confirming the payment, from the electronic device of the seller user to the payment module;

-

once the third message confirming the payment has been received in the payment module, send a fourth message confirming the payment, from the payment module to the payment module;

-

Once the fourth message confirming the payment has been received in the payment module, send a fifth message confirming the payment from the payment module to the electronic device of the buyer user.

The present invention contemplates that, making the payment according to the information contained in the decrypted message, from the payment module to a payment module associated with the selling user, also comprises verifying that the identW'K PIN number : The unique message of the decrypted message corresponds to the unique identification PIN number of the buyer user, which has been previously stored in the payment module.

The present invention contemplates the possibility that, making the payment according to the information contained in the decrypted message from the payment module to a payment module associated with the selling user, it also comprises verifying that the identification of the identification of the selling user and The bank information of the seller user corresponds to a seller user previously registered in said collection module.

The encryption parameters of the buyer user are unique and the encryption of the information of each payment uses different encryption parameters.

s

According to an embodiment of the invention, it is contemplated to store in the payment module the encryption parameters assigned to the usual buyer. Thus, the decryption of the message received in the payment module can be performed according to the encryption parameters assigned to the buyer user stored in the payment module.

10

The present invention may further comprise an interface previously installed in the electronic device, where the information received in the electronic device of the buyer user is entered by the buyer user through said interface.

fifteen

The encryption parameters may include, according to one of the embodiments of the invention, at least some encryption start parameters, an encryption key and some key texts for encryption.

20 25 30

A second aspect of the present invention relates to an electronic telepayment system for making a payment between a buying user and a selling user comprising: an electronic device configured to receive information that at least comprises identification information of the selling user, banking information of the selling user and payment identification information; receive a unique identification PIN code from the buyer user; encrypt the information received according to encryption parameters provided by an external memory module connectable to the electronic device; and send a message, containing the encrypted information, to a payment module through a telecommunications network; an external memory module and connectable to the electronic device, which contains the encryption parameters;

a payment module configured to receive a message sent from the device

electronic, decrypt the message received and make the payment, according to the

information contained in the decrypted message, to a payment module associated with the selling user;

payment module configured to receive payments sent from the payment module.

The payment module, according to one of the embodiments of the present invention,

It is also configured to, once the received message has been decrypted, verify that the unique identification PIN number of the buyer user, included in the decrypted message, corresponds to the unique identification PIN number of the buyer user, which has previously been stored in the module payment.

The present invention, according to a particular embodiment, comprises that:

-

the charging module is also configured to send a second message that

Contains payment information received by the payment module to an electronic device of! seller user; and for, once received a third message that

Confirm the payment sent from the electronic device of the seller user in response to the second message, send a fourth message confirming the payment to the

payment module;

-

The electronic device of the seller user is configured to, once the payment by the seller user has been verified, send the third message confirming the

payment to the payment module;

-

The payment module is also configured to, once the fourth message that confines e! payment, send a fifth message that confines e! payment to

Eledronic device of the buyer user.

The external memory module and connectable to the electronic device, which contains the encryption parameters, is, according to a particular embodiment of the invention, a

USB type memory read only.

The electronic device of the buyer and / or seller user is, according to a particular embodiment of the present invention, a mobile phone, a tablet or a

computer.

the present invention advantageously causes, through the technical characteristics

disclosed, the effects of giving security and confidence to the buyer (the one who pays) and giving comprehensive security to the entire payment system (it is safe in the identification of the buyer;

is immune to the loss, theft or fraudulent use of the devices that are part

of the payment system; is immune to cloning and hacking data). In addition, this

The invention has many other advantages such as, for example, preventing scams through fraudulent web pages (which supplant another authentic one) because the present invention does not give "payment authorization," but instead executes a "payment order" and if Payment order data and the account holder do not match, payment is not produced.

If they steal, lose our mobile phone or hack us, a third party cannot make

any payment, since it lacks the TaE / USB where the necessary encryption parameters and the PIN code (personal identification number) are stored.

1. In the event that we are robbed or lost the mobile phone and the Tatal eUSB,

nothing happens either, since a third party lacks the PIN code and cannot obtain

This data of the mobile phone or of the Card / USB, because that data does not appear in said media.

2. If they hack and duplicate a payment order, they cannot do anything either, since the payment module of our Payment Entity will not accept two payment orders

same.

3.

If they clone the mobile phone, they will be able to make calls and operate on the Internet as well as the phone, but they will not be able to make payments when they lack the TAUSAUS1USB and ignore the PIN (even if they have and know the encryption program).

Four.

Even in the event that the employee of a store is in collusion with an organization of criminals and at the time they clone the mobile phone and hack us a payment order, the employee sends a copy of all the purchase data for the purpose to decipher the key, neither in this case would it help; because each payment order is perfectly individualized and the encryption parameters cannot be reused, which are stored in the external memory module and vary in each memory module assigned to a buyer, so there are no two Cards / US memories with equal content.

S

Other additional advantages of the present invention are that the entire payment operation is carried out within a buyer's own circuit, since, the Buyer connects only with his Payment Entity and through his own telecommunication network, instead of delivering Your payment information to the Seller.

10

The memory module with the encryption keys is also not inserted in any device other than the buyer (as it would be with a credit rate), which never leaves the power of the Comparator.

15 20

The present invention also speeds up the payment at specific times, in the Eyelets, a single person could perfectly attend the simultaneous payment of several people. Or also in those mass events, in which it is necessary to attend multiple payments in a very short time and there are no appropriate communication infrastructures. The present invention only needs coverage by a wireless telecommunications network and a central box with Internet connection and multiple monitors in which users can make their payments simultaneously. In addition, this system allows better control of all payments.

Description of the drawings

25

To complement the description that is being made and in order to help a better understanding of the features of the invention, according to a preferred example of practical implementation thereof, a set of drawings is attached as an integral part of said description. In an illustrative and non-limiting manner, the following has been represented:

Figure 1 shows a block diagram that shows the operation of the invention.

30

Figure 2 describes, according to an encrypted information and the payment module. embodiment of the invention, the relationship between the

Detailed description of the invention

The present invention contemplates the security of electronic payment systems under three

aspects:

1. The security of economic transfer (which is determined by security

5 of the number system).

2. The security that the system gives the buyer, from the point of view of the buyer himself; that is, the confidence and security that the buyer feels operating with

These payment systems.

3. System security against loss, theft, cloning or fraudulent use of the

10 payment system.

As for the security of economic transfer. "The payment systems offered by the state of the art are sufficiently secure (they are based on highly encrypted systems

insurance); therefore, this is not the focus of the present invention, but in relation to

Two other aspects ('"buyer security" and ~ security in the event of possible fraudulent use of the system "), is where the present invention concentrates its main features.

The present invention proposes an interface that is the basis of this payment system, since

20 the main feature of the present invention is focused on changing the prominence in

a purchase, from the seller (as it works according to the state of the art), to the buyer. The payment operation takes place according to the interface of the present invention, developed on

an electronic device of the buyer user, be it his mobile phone, tablet, personal computer or other similar device. As for the security against loss,

25 donadón or any other fraudulent use of the payment system, the present invention develops an encryption system that on the one hand diversifies the sources and, on the other, individualizes the encryption for each user and operation.

Figure 1 shows the method of operation of the present invention according to a

30 particular realization, where assuming that, a buyer user who decides to buy a thing or service, to make the payment is connected through intemet (by computer,

mobile phone or electronic device with similar functions) and used as a system of

payment of the present invention, comprises:

1. Buyer (1) opens the interface of the present invention, complies with the Morden de

payment "and send this payment order (5) to your" Payment Entity · (2).

2.

The Payment Entity (2) verifies the payment order and issues the payment (6) to the "Collection Entity" (3).

3.

The Collection Entity (3), communicates the payment (7) to the Seller (4).

Four.

The Seller (4), upon receipt of the payment statement (7), if he admits said statement, confirms the purchase (8).

5.

The Collection Entity (3), upon receipt of the confirmation of the sale (8), enters the payment amount into the account that the Seller has and acknowledges receipt of the payment (9) to the Payment Entity (2).

6.

The Payment Entity (2), upon receipt of the payment acknowledgment (9), communicates the payment (10) to the Buyer (1).

7.

The Buyer (1), receives the payment acknowledgment (10) -which confines the purchase-End.

By printing the payment order with the payment acknowledgment, the ticket or invoice is obtained.

The Buyer therefore, regardless of what he buys and who he buys, at the time

If you pay, the payment order is always sent to your "Payment Entity".

Figure 1 shows that the Buyer (1), to pay, only contact his

"Payment Entity" (2), so that the Buyer, at the time of payment, always executes the

same guidelines, regardless of who the Seller is.

This fact gives the buyer a lot of security. knows perfectly what you have to do and

It's always the same.

The Buyer, at the time of payment, does not have to give any data or reference of his payment data, already has his Payment Entity; it is sufficient that you identify your Payment Entity unequivocally and issue the payment order. Buyer contact

only with your Payment Entity, to send the payment order; being the Entity of

Payment, which is responsible for executing the payment.

5 The Purchaser, using the present invention, executes a payment order ";

while with other systems, what is executed in a collection authorization, "because the

Buyer what it does is provide a series of data (data belonging to the Buyer),

so that the Seller can collect this information.

10 On the other hand, when the Buyer executes a "payment order", it is the Seller who has to provide all his data (the Seller is fully identified) and what the

Buyer, is to order your Payment Entity (bank, box, etc.) to enter the payment in the

Collection Entity (bank, cashier) and in a certain account of which the Seller is the owner. Comparing this amount of action, with a payment in the classical mercantile world, one would say that the "payment order" is equivalent to a barred registered Mcheque "(this check can only be cashed by the holder of the check and entered into his bank ).

In addition, according to the preferred embodiment of the invention, the sources for encryption

information is diversified to increase security against fraudulent use of

20 system by third parties (theft, loss, hacking, cloning, etc.).

To make the figure, or encryption, different sources are required, which in itself does not increase the security of the figure, but the purpose of using different sources, is the security of the payment system against loss, theft, donation or use device fraudulent

25 of the system.

The sources of figures can be, for example:

• A computer, mobile phone, tablet or electronic device with similar functions,

Where is the encryption program.

30 • A memory task or memory use, where the encryption parameters are.

• The buyer, who knows the PIN code.

Any numbering program can be used by the present invention as long as it meets three conditions:

1. That the encryption program is on the computer or mobile phone.

2. That the encryption program, in order for it to encrypt, needs the encryption parameters of an external memory module such as a user or a user.

3. And for the figure to be valid, you need a unique identification code, such as a

PIN code (Personal Identification Number, in Spanish: Personal Identification Number).

For the figure to be valid, we need the correct PIN code. The PIN is encrypted, so

although the PIN is incorrect, the encryption is generated the same, but the Payment Entity will not give it

by valid.

The external memory module, used to provide the electronic device with

Encryption parameters can be, according to different embodiments of the invention, a memory card or a memory uses. Preferably, a memory of the type used is chosen because it is considered to be much better suited to the needs of the present invention.

(The USB sticks have a large data storage capacity and are easily connectable to the computer, mobile phone, tablets, etc .;). These memories come

with all the preset information and it is not possible to expand, modify or vary data

some, since they are "read-only." The contents of the USB Card according to the present invention are the encryption parameters.

As for the unique identification code or PIN code, it does not appear in the memory (Card or

USB), neither on the computer, nor on the mobile phone; The PIN is only known to the buyer and the payment module. The purpose of the PIN is to confirm that, who buys and pays is the

buyer and avoid fraudulent use by third parties. According to one of the embodiments of the invention, the PIN code consists of an alphanumeric code with a minimum of 7 characters, although it is the buyer who determines the number of characters he deems appropriate.

Therefore, following an example of operation of a particular embodiment, the diversification of sources of the present invention operate as follows:

A, -The person who wishes to make a payment, opens the interface of the "Ste" electronic telepayment system of the present invention using an electronic device,

B.-Then enter the payment order.

and it is here, in this phase where the method and encryption system of source diversification is applied,

To make the payment order, all data is provided by the Seller, and once made,

It is sent to the payment module.

Now, if the payment order is sent as it is made, that is, without encryption, anyone could have access to the identification data and, consequently, give

Payment orders supplanting the identity of the buyer, So, to avoid this, you are

Encryption of payment order data. which has rather an identification function,

that of pnvacity,

and, -The encryption of the payment order according to a specific reauzación of the invention, fulfills the following steps:

1. Once the payment order data is completed, an icon is displayed by the interface of the Mcontinuar electronic device ".

2, The message of the electronic device shows a message requiring you to enter an external memory, for example, "enter Card / USS-,

3, When entering the Card / USB in the electronic device, the device screen

electronic displays a message that requires you to enter a PIN code from

unique identification of the usual buyer, for example: -click PIN code ". Once the PIN code is received, the electronic device encrypts the information based on the encryption parameters stored on the Card / USB and, when the encryption is finished, the

electronic device display shows a message authorizing the removal of the

3 () memona module connected, for example: "Remove Card / USB".

4. When removing the Ta ~ elalUSB, the electronic device screen offers an option to send the encrypted message with the payment order and the PIN code to the payment module

to make the payment, for example the inteñaz can be configured to show a simple button that recites "send".

s 5. The message sent. which is the payment order, it is received by the Payment module, where it is decrypted automatically and, if everything is correct, it is considered valid.

If the payment module receives two equal payment orders, the second one is not valid. Every

encryption, it uses its own encryption key and different from the others and it can only be used once. Therefore, there cannot be two equal ciphers, although the content of the

Text to be encrypted is identical. The 'own encryption key of each encryption', is independent and distinct from the 'text encryption key', which means that each encryption employs

Simultaneously two different encryption keys.

15 Tiers to the diversification of sources and the individualization of encryption, the present invention guarantees the security for payments to the buyer even in cases of theft of his electronic device, loss or fraudulent use. Induso in the assumption

hypothetical that a third party can decipher the keys of a payment order, also in

this assumption would be of no use to you, since each payment order, being perfectly individualized, does not allow you to reuse the parameters of one encryption for another

post encryption

Figure 2 describes, according to an embodiment of the invention, the relationship between the

encrypted information and the payment module, where the diversification of sources is evidenced, what

25 which implies that no module has all the information:

o The Comparator (1) issues a payment order (5) to the payment module (2) of your Payment Entity.

o The payment order (5) is received directly in an "encryption module" (2-A) of the payment module (2) of the Payment Entity.

o In the 'encryption module' (2-A), there are the encryption / decryption programs and the

The first thing that is done is to determine if the identification of the Buyer is operative.

If it is operational, it continues with the process and for this it begins to collect from the different modules the data that is needed to decipher the payment order and

can be considered valid:

o It contacts the ~ encryption data module "(2-8) and asks for the encryption keys of the Tate / USB of the buyer user, previously stored.

5 o Contact the "PIN code module" (2-C) and ask for the PIN of the

Buyer user card / user, previously stored.

o It contacts the "key text modules", there are 3 modules (2-D, 2-E and 2F) and asks for the key texts of the buyer's USB / USB T, previously stored.

10 o If the decrypted text is valid, it communicates to the 'payment module' (2-G) the payment order and this last department (2-G) is the one that gives the payment (6) to the payment module collection (3) of the Collection Entity.

o The Collection Entity communicates the payment (7) to the Seller (4).

Different types of encryption can be used satisfactorily in the present invention, as long as they allow each encryption to be individualized and meet the above criteria to diversify the sources. The following are, by way of example, two types of encryption that are used in different particular reinforcements of the invention: "encryption by value of the characters ~ and" encryption by mixing of characters in one ".

To explain these two types of encryption in a clear and practical way, instead of showing the

Encryption of a complete payment order will be used only a couple of words, since the process is the same.

o Case study: A typical case of buying by inteme !, is to buy a book; and that book 25 must be paid to the Seller: "Librerla ABC"; in the two cases that are detailed to

Then, only the name of the Seller will be encrypted: "Libreea ABe" (for simplicity of explanation, it is not case sensitive).

o In the encryption methods that allow the figure to be individualized, it is necessary to give the

individualization data of encryption. In the two cases of encryption that are detailed,

30 require two data to individualize the figure: Start text and Start character.

~ Start text: in the cases shown, for example the start paragraph is the

320.

•

By saying: "the starting paragraph is 320", it means that the paragraph that serves as a reference for the beginning of the figure is 320

•

The opening paragraph (in this specific case, 320), once used

as a starting paragraph, it can no longer be used as a starting paragraph; hence, the figure is peñrectly individualized.

• For security reasons, each TaE etaJUSB must contain a minimum number of paragraphs and each paragraph must contain a minimum number of characters and a maximum number.

the> -Start character: in the cases shown, for example the start character 10 is 753.

•

By saying: "the starting character is 753," it means that, beginning to count the characters in paragraph 320, the figure begins at character 753 and continues with the following characters.

•

If each paragraph has, for example, enter 70 and 230 characters, even

15 assuming paragraphs 320,321, 322 and 323 have the maximum characters (i.e. 230). the beginning of the figure begins in character 123 of paragraph 323, in this way no one can identify the

Dave texts.

o For both cases it is assumed that the character 753 and following are: 20 · casaxy32xbf532zap3hxf h.074axzrpo st ..: (key text).

o Lastly. It is noteworthy here that, in the two cases set forth by way of example, the "key texts" are those that allow individualizing the figure. From the "Dave texts" comes the "encryption key of each encryption" (the "Dave text-varies in each encryption and is not repeated).

Starting with the first case, corresponding to an encryption value of the characters,

once the assumptions have been raised, the one encrypted by the value of

characters, is based on giving each character a value and this value replaces the character (by

example :, the "a" has a value "1-, k> which means that" a "is replaced by a" 1-); now 30 well, a mere substitution of a character for a value is not enough to guarantee the

encryption (it would be easily decrypted). Therefore, in the "character value encryption", the

characters to be encrypted, other characters are added (these characters that are \ \ aden, is what

which are called "key texts" and are found on the JUSB Card), running between

both characters, a series of mathematical operations (since the characters have been replaced by values), whose result is encryption.

In this practical case, for simplicity, the characters are assigned a correlative value of

U1-al ~ 38 "according to the following table that relates the encryption key to the value of the

characters for this example:

Abedefgh characters I jk I mn ft or P qr Assessment 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 Characters S t U vw X and ZO 1 2 3 4 5 6 7 8 9 Rating 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38

10

However, the values may be other (for example: the "a" a value of "536", the "b" a value of "189", the "c · a value of" 725 ", etc.)

lS 20

Next, the encryption program, before starting to encrypt, the first thing it does is count the number of characters that the text to be encrypted has. In this specific case, the text "ABe Library · contains 12 characters, also counting the spaces between words as a character. So, considering that the text to be encrypted has 12 characters, the number program selects from the texts that they are in the JUSB Card, triple the characters and divide them into 3 groups of 12 characters. Following the assumption set out above, the result is: "casaxy32xbf5", "32zap3hxf hs" and "074axzrpo sto.

25

Each character has, therefore, a value and in this specific case, the value is determined in the relation of values, as shown in the previous table. According to this relationship of values, the text to be encrypted "ABe Library · has the following values: 12, 09, 02, 19, 05, 19, 09.01, 28.01, 02.03.

17

Text to be encrypted l I b r e r I • A B e Character value 12 9 2 19 5 19 9 1 28 1 2 3

and to encrypt the text, in this case, the following operations are carried out to prevent a third person from deciphering the value of the characters even if they have full knowledge of the content of the payment order:

To the quoted values of "ABC Library" .. ..: 12, 09, 02, 19.05, 19, 09, 01, 28, 01, 02, 03 add the values of "casaxy32xbfS": 03, 01, 20, 01, 25, 26, 32, 31, 25, 02, 06, 34 Y of "32zap3hxf hs" ......................... ...: 32,31, 27,01,17,32,08, 2S, 06, 28, 08,20 And the values of "0748lCZrpo sr: 29, 36, 33, 01, 25, 27, 19, are subtracted 17, 16,28, 20, 21

10 The result is the following values: 18, 05, 16, 20, 22, SO, 30, 40, 43.03, -04, 36

Text to be encrypted

l I b r and r I • TO B and

Character Value

12 9 2 19 5 19 9 one 28 one 2 3

Key text -group 12

and to s to x Y 3 2 x b F 5

Character value (add)

3 one twenty one 25 26 32 31 25 2 6 3. 4

Key text -group 22

3 2 z • P 3 h x F h s

Character value (add)

32 31 27 one 17 32 8 25 6 28 8 twenty

Key text -group 32

OR 7 4 • x z r p or S t

Character value (subtract)

29 36 33 one 25 27 19 17 16 28 twenty twenty-one

Encrypted text (result operations) Jls 1 5

16 120 122 50J 30 40 43 1 3 -4 36

15 To decrypt the encryption, the reverse process must be done:

To the encrypted values received ......: 18, OS, 16, 20, 22, SO, 30.40, 43.03, -04.36; "casaxy32xbfS" values are subtracted: 03, 01, 20, 01, 2S, 26, 32, 31, 2S, 02, 06, 34; the values of "32zap3hxf hs" are subtracted: 32, 31, 27, 01, 17, 32, 08, 25, 06, 28, 08, 20; the values of "074axzrpo sr: 29, 36, 33, 01,25, 27, 19, 17, 16, 28, 20, 21 are added.

20 The result of these operations is: 12.09.02.19, OS, 19.09.01.28, 01, 02.03. If we pass the values to characters, it comes out: ABC Library.

Encrypted text to decrypt 118 5

16 20 122 fifty 30 14043 1 3 -4 J36

Key text -group 12 Character value (subtract)

and to s to x Y 3 2 x b F 5

3

one twenty one 25 26 32 31 25 2 6 3. 4

Key text -group 22

3 2 z to p 3 h x F h s

Character value (subtract)

32 31 27 one 17 32 8 25 6 28 8 twenty

Key text -group 32

OR 7 4 to x z r p or s t

Character value (add)

29 36 33 one 25 27 19 17 16 28 twenty twenty-one

Result operations

12 9 2 19 5 19 9 one 28 one 2 3

Substitution of values by characters

L I b r and r I • TO B and

Therefore, the cffrado key, in this specific example is determined as follows: the "a" is worth 1; the Mb "is worth 2; the Me" is worth 3; etc. On the other hand, the key to each encryption is given by 5 the key texts; thus, in this concrete example they are: "casaxy32xbf532zap3hxf hs074axzrpo st '. Therefore, in the hypothetical assumption that an offender managed to decipher the" encryption key and the key to a specific encryption of a payment order, that would not allow subsequently, no valid encryption, because to make a valid subsequent encryption, in addition to the encryption key (which you already know), a new key is required

10 proper for that subsequent encryption that requires any payment order and this is the own code of cffrado, it is made up of the key texts found in the TaUStalUSB.

As for the second example case, the encryption by mixing of characters in one, is based on the substitution of two characters by one (for this reason this type of figure is called 15 Mcifrado by mixing of characters in one); this implies, that the text to be encrypted is mixed or combined with other text and from this mix, a third text appears; However, taking into account that there is a possibility that the data to be encrypted are fraudulently known, in order to prevent anyone from deciphering any of the number codes, this operation is carried out twice. Mezda texts are the "Dave texts" found in the

20 Ta ~ etalUSB.

In the practical case shown as an example, the combination or mixture of characters is done following the pattern of the following diagram, although it may have different

combinations, therefore the variety of diagrams is very wide; which gives great security to the system:

abed • 1 • hi) k I 1 "" ñ opq, stuvwx V, O 1 2 3 4 5 6 7 8 9 aed • 1 • hik I In n ñ opq, stuvw xlv, O 1 2 3 4 5 6 7 8 9 abb 1 • hik I "ñ opqrstuvx V, 012 3 4 5 6 7 8 9 abede 1j k I" "or $ t · U and 'l'oA le • O 1 2 ~ 4 5 6 7 8, 9' . b 'ed • 111 h di "n ñ opq, stuvw xIv z O 1 2 3 4 5 6 7 8 9 abed • 1 • hi Ij k I • q, stuv: lflxyz O 1 2 3 4 5 6 7 8 9 abed • 1 8 hi) k I n ñ op 1 • • 01234 5 6 7 8 9 IÍ. b e d • 1 • h IIj kll "" ño, r, 's t u v l. O 1 2 3 4 5 6 7 8 9 a bcd • 1 • hik I 1 "" ñ 01010 rstuv wx V, h 1 2 3 4 5 6 7 8 9 abed • 1 • hik I 1 "" ñ or D q, S t UVXV, O i S 45 "678 SI • b, ed e'fl. ¡, 11) k I n '1 \ o,, $ t U vi. X ~ 0, 1 2 6 7 8 9 abed • 1 ghik I 1 "" ñ o P •, stuv wx V, 012 3 4 5 kabede 1 • hik I "" ñ 01 D q, stuv W) (v ZO 1 2 3 456789 I, h í 1) kl n ñ orst 'jj v wx, ti 1 2 345 6 7 8 9 • b'C' d. · ll. 1 "olpl. , stuvwx Iv z O 1 2 3 4 5 6 7 8 9 abede 1 B h ¡k I 1 "" ñ "v W) (and ZO 1 234 S 6 7 8 9 abe of the • hik I" ñ o P q, stu ñ: 5 6.] 8: 9 • dell.hi i) kll. ñ o 01. r, b e "s t u v ') 1 V i, or í t; 3 4 o • h i Ij k I" ñ o p q r s t u v l. xv, O 1 2 3 4 5 6 7 8 9 abed • 1 p, stuvwx V, 012 3 4 5 6 7 8 9 abede 1 • hijk I "ñ o P • q 2 3 '4 S 6 7 S; 9 • be el • Lo, ¡, I II k I mn iI oo, s' tuv ~ y 'z'. Ó 1 rlj kllnnñopq, stuvwxyz 012 3 4 5 678 9 abede 1 • hiswx V, O 1 2 3 4 5 678 9 abede 1 • hik I "ñ opqrstuvb '' c, e .f I ~ h 111 JI. "ñ 01 .., .v '6 7t 9, • dk, sru, v • O 1' 2 3 4 S 8 upqrstuv wx V • O 1 2 3 4 5 6 7 8 9 abed • 1 • hi; k I 1 "n ñ ov 7 8 9 abed • 1 • hi; k I 1 "" ñ o P., S t u vi. x V, O 1 2 3 4 5 6 l. "s_ tuvxy • 012 3 .. S 6 7 8 9 • bed • 1 h 11, k I: n, ft 'oh • (xbede 1 hi 1; k II n" ñ o P., stuvwx, O 1 2 3 4 5 6 7 8 9 help wx y, 012 34567 8 9 • bed • 1 • hi; k I n ñ oq, st Z,. Fh I, k 1,1 "" ñ ~ II ;; r • tuvw ~ IY , '• O 1 234 5 6 7, 8 9 • be, d, O 1 2 3 4 5 678 9 abed • 1 • hik I "ñ opi Q, st U vllll X and O ñ opqrstuvwxz O 1 2 3 4 5 6 7 8 9 abede 1 • h, jk I 1 "" 1, ki '. Olpl. <X lv z O 1 2' 3 '4' S 6 7 bea • 'f l. H' 1 1), "ñ rstu • 's 9 • 2 of 11. h I k I 1 "" ñ o., stuvwxyz O 1 2 3 4 5 678 9 abe 3 4 S 6 7 8 9 abed • 1 • hik I "I'i opqrstuv wx • O 123,, 4 z O 1, 2 3 4 56789 • bed • fh 111 'k 11 ":" ñ o pi ,. r' s! 'T' .U .H 'x S t UVW xyz O 123 4 5 678 9 • bcd ef • hi I ik II nn ñ opq, s 6 n ñ opqrstu vllll X y • O 1 2 3 4 S 678 9 abed • 1 ghik I 1 "7 Iln n ñ 0: .1. , s t u 'v 1'; '; XLv • O 1., 2 3 4 Sti 7 8 9 • bedef ", h;, IJ¡ 8 O 1 2 3 4 S 6 7 8 9 • bed • 1 • hijk I 1" n ñ o ••, S tuv 1 Yo XY • 9 8 9 • be del • hi Ij k I 1 "" ñ op, stuvwx, O 1 2 3 4 5 6 7

The encryption program installed in the electronic device, before starting the encryption, the first thing it does is count the number of characters that make up the text to be encrypted (in this case in particular, as already said, there are 12 characters) Taking into account that the text to be encrypted has 12 characters, the encryption program selects from the

key texts (which are on the Card / USB), double the characters and divide them into 2 groups

12 characters Following the assumptions raised at the beginning of the case studies, the

Result is as follows: "casaxy32xbfS" and "32zap3hxf hs ·.

To encrypt the text, keep in mind that the text "ABe Library ·, corresponds to the

rows and the characters of the text "casaxy32xbfS", correspond to the oolumns. TO

Then proceed with the following operations:

1. First we place ourselves in row "r of the diagram shown above (this" r, is

oorresponds with the letter "L" of Library) and then in the oolum oc: (this "c ·, is oorrespond with the letter" c "of" casaxy32xbfS ") and where oonfluyen the row oon la

column is the letter "j";

2. Continuing with the next character, we are located in row ~ i "(this ~ i ·, corresponds to the first ~ j" of Library) and then in column ~ a · (this -a ", it

oorresponds with first "a 'of" casaxy32xbfS') and where the row oonfludes oon la

column is the number ~ 3-;

3. And so on. The result is: "j3xjdqx4mdkd"

Row

l i b r and r i • TO B and Text to be encrypted

Column

and • s • x Y 3 2 x b F 5 Key text (first group)

Outcome

I 3 x I d 6 x 4 m d k d What happens to be row in the next phase

Then, the same operation is performed with this result of -j3xjdqx4mdkd-and with the key text "32zap3hxf hs ·, where the result ~ j3xjdqx4mdkd" corresponds to the rows and the characters of the key text "32zap3hxf hs" correspond to the columns:

o First we place ourselves in the row and the diagram (this and, corresponds to the

first "j 'of" j3xjdqx4mdkd ") and then in oolumna" 3 "(this" 3 ", corresponds to the first" 3 "of" 32zap3hxf hs') and where the row oonfludes oon the oolumna is a space "[ space] ";

o We continue with the process and we are in row "3" (this "3n, corresponds

with "3" of "j3xjdqx4mdkd") and then in column "2 '(this" 2 ", corresponds

oon the "2-de" 32zap3hxf hs ") and where the row meets the column is the letter

5 o And so on. The result is: • x 60WiHbh3 ".

First combination result Row IJ

3 x d

x 4

m

d

k d

J

Column

to p

h x f

h

s

Key text (second group)

Encrypted message received by the Result module

3 2

z

x

w

I I

h

Payment of the Payment Entity

6 O t

b

10 Decryption is done following the reverse process. The text to be encrypted along with the key text

they produce the c, therefore, knowing e! key text and e! ~ rado, you can meet the

Encrypted text: ABC library. To decipher the text, it is taken into account that it begins with the

second group of key texts ("32zap3hxf hs"), which occupies the columns, since e! reverse process goes from end to beginning; and you start with the columns, because to ~ rar

15 starts with the rows. And the encrypted text received "x 60Wi1tbh3", is the key character of the column. The following operations are performed:

1. First we place ourselves in column ~ 3 · of the diagram (this ~ 3 ~, corresponds to

the first "3" of "32zap3hxf hs") and then in the column we look for e! key character 20 "[a space) '(this" [space] ", corresponds to the first" space "character of the received text, which is the payment order:" x 6Owikbh3'), of! so to

what height of the column we are, we see what row letter corresponds to it, which in this case is the Mf ';

2. We continue with the process and place ourselves in column w2 "(this w2", it

25 corresponds to e! "2 'of" 32zap3hxf hs') and then in the column we look for the key character ") ((this Y, corresponds to" x 'of "x 60wi1tbh3'), of!

so to what aHura of the column we are, we see which letter of row corresponds to it, which in this case is the "3";

3. And so on. The resukado is: 'j3xjdqx4mdkd'.

Column 3 2 z a p 3 h x f h s Key text (second group) Key-Encrypted message received by Column Entity x 6 O w; I t b h 3 Payment

Result j

3 x j d that x 4 m d k d row letter (which becomes the key-column in the next phase)

Then, the same operation is done with this resonated from "j3xjdqx4mdkd" and with the first group of key text "casaxy32xbfS-, taking into account that the first group of 5 key text" casaxy32xbfS ", corresponds to the columns and the result" j3xjdqx4mdkd ", becomes the key character of the column. The following operations are performed:

1, First we are in column "c" of the diagram (this "rf ', corresponds to the" c "of" casaxy32xbfS ") and then in the column we look for the key character" j "(this" j ", it corresponds to the first "J" of "j3xjdqx4mdkd"), thus determined to

10 what height of the column we are, we see which row letter corresponds to it, which in this case is the ~ I ·; ft

2. We continue with the process and place ourselves in the column (this "a-, corresponds to the first" a "of" casaxy32xbfS ") and then in the column we look for the key character" 3 "(this" 3 ", it corresponds to the "3" of

15 "j3xjdqx4mdkd"), determined as to what anura of the column we are, we see which row letter corresponds to it, which in this case is the "í-;

3. And so on. The result is: "ABe Library".

Column

and to s to x Y 3 2 x b F 5 Key text (first group)

Key-Column

j 3 x j d 6 x 4 m d k d Result of the first decryption phase

Outcome

L I b r and r I to TO B and What is encrypted text?

20 EMBODIMENT OF THE INVENTION:

The best way to explain the embodiment of the invention is through a complete case study according to one of the embodiments of the invention:

PREVIOUS NOTES,

A.-The Buyer, in order to use this payment system, has previously had to contact what he called his "Payment Entity" (ie: bank, cashier, bank entity

30 cards, etc.) and request this form of payment. This entails:

a) That the Buyer must have an economic amount in his Payment Entity

(account, payment card, or any other type of economic deposit available) and

of which payments are made.

b) That the Payment Entity give the Buyer all the necessary data to be able to

operate with the Ste.

B. "The Seller, in order to use this payment system, has previously had to

contact what I call Your "Collection Entity ~ (ie: bank, cashier, entity of

cards, etc.) and request this form of payment. This entails:

a) That the Seller has to have in its Collection Entity an account in which the economic amount of the sale can be entered.

b) That the Collection Entity give the Seller all the necessary information to

Contact between them safely.

C.-For the Ste to be operational, it is necessary that both the "Payment Entity". as the

"Enlity of Collection", admit this form of payment / collection.

D. "We start from the basis that, the person who decides to pay with Ste, to make the payment

It is connected via intemet (by computer, mobile phone, tablet, or any other device with similar functions).

E.- The practical case presented below comprises two purchase cases: a) The

purchase of a book made from home, through the computer; and b) Payment of the filling of a fuel tank, through the mobile phone.

PRACTICAL CASE.

0.- Preliminary step.

• An assumption: If we want to buy a book, before buying the book, the first thing is to enter the corresponding web page, select the book and press "buy" and

press as payment method · Ste "(remember, this payment system has to be admitted by both parties, Buyer and Seller).

• Another assumption: If what we want is to pay the amount of the filling of the deposit of

Gasoline from the car at a service station, when paying, we have to

say in cash that we pay with Ste (the same as when we pay by payment card).

1.- First step (vertilluf81):

The buyer (ref. 1) opens the Sle interface, completes the "payment order" and sends this

5 order of ~ (ref. 5) to your "Payment Entity" (ref. 2).

• When opening the Ste inteñaz, the first thing to complete is "the payment order". I call 'payment order', to the statement sent by the buyer to his Payment Entity, so that the Payment Entity, pays the Seller the amount of the purchase.

"payment order", contains the following information: 10 or Buyer Identification Data,

o Identification and bank details of the Seller and

o Purchase data (ticket type or invoice type).

• In the payment order:

o The only data that consists of the buyer, are those of identification, because

15 all other data, already have your Payment Entity.

o However, all identification and bank details must be recorded.

of the Seller, in order to be able to make the economic income in Your account.

o The purchase data must also be included in the payment order; is

that is, those data that identify the purchase and its amount. 20 • Apart from the above, the payment order can be of two types: "ticket" or "invoice".

o The "ticket ~" modality would contain the essential purchase data (as well as the ticket given to us in a physical store).

o The "invoice" mode would contain the purchase data required

any invoice 25 • Payment order data is filled in automatically.

o In relation to the Buyer, there is no problem (keep in mind, that the payment order is made by the Buyer on your computer or mobile phone).

o In relation to the Seller's data and purchase data, it provides them

the seller. Here, you must distinguish between · computer "and" 1 mobile phone ".

30 • If the computer is operated from home, the Seller's data and the purchase data are received via intemel.

• If it is operated through the mobile phone, the data can be

Provide the seller by bluetooth or by the computer screen and be read on the mobile phone (logically, so that our phone can read this data from the screen, the data will have to

be in a language that you can read, for example: barcode,

QR-Code, etc.).

• What the buyer has to do is only verify that the data received is correct (like any ticket or invoice, in a

physical store).

o Completed the payment order and verified that it is correct, we click on the

"continue" icon:

o A message appears on the screen saying: "enter Ta ~ etaJUSB ·. Enter the Ta ~ etalUSB.

o When entering the Card / USB, a message appears on the screen saying: "write

PIN code ". We put the PIN code and press · continue".

o By pressing ~ continue ". The computer encrypts the information and when it is available. a warning appears on the screen:" Remove JUSB Card. "We remove the Card / USB.

o When removing the Card / USB, a new icon appears: -send "and press

~ send "[Note.-While the Card / US is not removed, the" send1 icon does not appear.

o The message sent, which is the payment order (see figure 1, ret. 5), receives it

Our Payment Entity.

2.-Second step (see figure 1): The Payment Entity (ref. 2), verifies the payment order and issues the payment (ref. 6) to the

"Collection Entity" (re '. 3).

o The Payment Entity automatically deciphers the payment order (ref. 5).

o If the payment order is correct, the Payment Entity makes the payment (ref. 6) to the Seller's Collection Entity, for its entry into the seller's account.

o This payment is being a bank transfer. It is noteworthy here the following:

•

The Collection Entity will not accept any payment if the identification and bank details of the Seller that appear in the payment do not match those of the Collection Entity itself.

•

In addition, the payment must have the identification data of the ticket or invoice [Note.-In bank transfers. this data of

identification of the ticket / invoice, would fit perfectly in the "concept" section].

• For the purposes of this inteñaz Ste, the only one of interest here, is the existence of the communication between the Payment Entity and the Collection Entity, to the elect of the

payment / collection (this communication is part of the interface); but it is not part of the interface, nor is it the object of this work, the way in which both entities are related.

3.-Third step (see figure 1): The Collection Entity (ref. 3), communicates the payment (ret 7) to the Seller (ret 4).

• This payment statement (ref. 7), so that Jo can identify the Seller, has to contain at least:

o The reference of the ticket or invoice that individualizes it and prevents the existence of two equal tickets or invoices.

o The amount.

o Regarding the communication standard between the Collection Entity and the Seller, nothing

I must say, because any form of secure communication is valid. The only thing that interests here, because it is part of the interface, is the existence of this communication (and not the way they communicate, which is not part of the interface).

20 4.-Fourth step (see figure 1): The Seller (ref. 4), upon receiving the payment statement (ref. 7), if he admits said

statement, confirm the purchase (ref. 8J

o The Seller (rel. 4), upon receipt of the payment notice (rel. 7), automatically

verifies the authenticity of the sale (that is, confirms the amount and that this corresponds to the sale made) and if everything is correct, it is considered valid

statement and confirm the sale (rel.S).

o This is a guarantee for the Seller.

o It may happen that the Seller (rel. 4) receives the payment notice (rel. 7) and at

verify the authenticity of the sale, this is not recorded or is not correct; Well, 30 in this case and automatically rejects the payment statement.

o The Collection Entity (rel. 3), automatically rejects the payment.

o The Payment Entity (rel. 2), automatically informs the Buyer that the payment order was rejected (invalid).

5.-Fifth step (see figure 1): The Collection Entity (ref. 3), upon receiving the confirmation of the sale (ref.B), enter the payment amount in the account that has the Ven_r and acknowledges receipt of the payment (ref. 9) to the Payment Entity (ref. 2).

8.-Sixth step (see figure 1): The Payment Entity (ref. 2), upon receipt of the payment acknowledgment (ref. 9), communicates the payment (ref. 10) to the Buyer (ref. 1).

7.-Seventh step (see figure 1): The Buyer (ref. 1), receives the payment acknowledgment (ref. 10) -which confirms the purchase-. End.

15 • And if we print our payment order with the payment acknowledgment, it serves as a ticket or invoice.

o With this system. Seller does not have to issue a ticket or invoice.

Claims (7)

1.-Method of electronic telepayment to make a payment between a buyer user and a seller user that comprises the following steps: a) receive, in an electronic device of the buyer user, information comprising at least identification information of the seller user, information bank of the usual seller and payment identification information; b) connect an external memory module to the electronic device, where the external memory module contains certain parameters previously assigned to the buyer user; e) receive, on the electronic device, a unique identification PIN code of the buyer user; d) ~ rar, in the electronic device, the information received in step a) together with the identification PIN code received in step e) according to the parameters of the external memory module connected in step b) ; e) send a message containing the information encrypted in step d), from the electronic device of the buyer user, to a payment module, through a telecommunications network; f) download the message received in the payment module; g) make the payment, according to the information contained in the message of Qrado, from the payment module to a payment module associated with the selling user. 2.-Method according to claim 1 where, once payment has been made from the payment module to the payment module, also includes the steps of:

-

send a second message containing payment information received, from the payment module to an electronic device of the selling user;

-

Once verified and paid by the seller user, send a third message that

confirm the payment, from the electronic device of the seller user to the module payment;

-

Once the third message confirming the payment has been received in the payment module, send a fourth message confirming the payment, from the payment module to the module

of payment;

-

Once the fourth message confirming the payment has been received in the payment module, send a fifth message confirming the payment from the payment module to the electronic device of the buyer user.

S

3. Method according to any of the preceding claims where to make the payment according to the information contained in the decrypted message, from the payment module to a payment module associated with the selling user, also comprises verifying that the PIN number Unique identification of the decrypted message corresponds to the unique identification PIN number of the buyer user, which has been previously stored in the payment module.

10

4.-Method according to any of the preceding claims where, to make the payment according to the information contained in the message decrypted from the payment module to a payment module associated with the selling user, also comprises verifying that the information of Identification of the seller user and the bank information of the seller user correspond to a seller user previously registered in said collection module.

fifteen

5. Method according to any of the preceding claims where the encryption parameters of the buyer user are unique and the encryption of the information of each payment uses different encryption parameters.

6. Method according to any of the preceding claims which further comprises storing in the payment module the encryption parameters assigned to the buyer user.

twenty

7. Method according to claim 6 wherein the decryption of the message received in the payment module is performed according to the encryption parameters assigned to the buyer user stored in the payment module.

8. Method according to any of the preceding claims wherein the information received in the electronic device of the buyer user is entered by the buyer user through an interface previously installed in the electronic device.

25

9. Method according to any of the preceding claims, wherein the encryption parameters comprise at least some encryption start parameters, an encryption key and some key texts for encryption.

30

10.-Electronic telepayment system to make a payment between a buyer user and a seller user comprising: an electronic device configured to receive information comprising at least, identification information of the selling user, bank information of the selling user and identification information of payment; receive a PIN code from

unique identification of the buyer user; encrypt the information received according to encryption parameters provided by an external memory module connectable to the electronic device; and send a message, containing the encrypted information, to a payment module through a telecommunications network; an external memory module and connectable to the electronic device, which contains the encryption parameters; a payment module configured to receive a message sent from the eledronic device, decrypt the received message and make the payment, according to the information contained in the decrypted message, to a charging module associated with the selling user; payment module configured to receive payments sent from the payment module. 11. System according to claim 10 wherein, once the received message has been decrypted, the payment module is further configured to verify that the unique identification PIN number of the buyer user, included in the decrypted message, corresponds to the PIN number Unique identification of the buyer user, which has been previously stored in the payment module. 12. · System according to any of claims 10.11 where:

-

The payment module is also configured to send a second message containing payment information received by the payment module to an electronic device of the selling user; and for, once a third message has been received confirming the payment set from the seller's electronic device in response to the second message, send a fourth message confirming the payment to the payment module;

-

the electronic device of the selling user is configured to, once the payment by the selling user has been verified, send the third message confirming the payment to the payment module;

-

The payment module is also configured to, once the fourth message confirming the payment is received, send a fifth message confirming the payment to the electronic device of the buyer user.

13. System according to any of claims 10-12, wherein the external memory module and connectable to the electronic device, which contains the encryption parameters, is a read-only use memory. 14. System according to any of the preceding claims 10-13, wherein the electronic device of the buyer and / or seller user is a mobile phone, tablet, computer or any other electronic device with similar functions.