FR2681457A1 - System and process for managing payment (debit) cards containing secret information - Google Patents

Abstract

The invention relates to a system and a process for managing magnetic or electronic payment cards containing secret information. The system comprises a payment card (10) held by the user of the system, a portable terminal (20) and a fixed payment terminal (22). The portable terminal (20) enables the holder of the card to enter in situ his confidential code which is stored temporarily after the service provider has entered the amount of the provision. The portable terminal (20) is next coupled to the payment terminal (22) so as to transfer the confidential code thereto.

Description

System and method for managing payment cards comprising secret information.

 The present invention relates to a system and method for managing payment cards comprising secret information identifying the holder of the card.

 The use of payment cards to obtain a certain number of services or to pay a certain number of services has developed considerably. Payment cards can be magnetic or electronic.

Most often, payment cards are effectively provided with secret information identifying the holder which makes it possible to ensure during a payment made by the holder using his card that the latter is the legitimate Cardholder. In fact, the provider of the service has a payment terminal which makes it possible, on the one hand, to read the secret number stored in the card and, on the other hand, to enter the secret identification number at the using a keyboard or similar information input device. This introduction is of course carried out by the wearer. The payment terminal compares the two items of information and authorizes payment or the provision of the service only if there is a correspondence between the two items of information.

 Of course, in the case of an electronic memory card, the payment terminal includes an electronic card reader and in the case of magnetic stripe cards, the terminal simply includes a magnetic read / write head.

 In a certain number of cases, the reader is mixed, which enables him to treat the two types of cards indifferently or even to process cards comprising these two recording modes.

 Most often, payment cards also have information on their body such as a serial number and the name of the card holder which are embossed on the card body.

 In many cases, the secret number or secret information stored in the card is not used to provide a service. Either the supplier of the service uses a purely mechanical validator who is content to print on a specific sheet the information embossed on the card at the same time as the amount of the service, or the card is actually read by a sales terminal and the identification number is compared to the number stored in a blacklist of opposition cards. Only security therefore aims, in the latter case, to ensure that the card in question has not been the subject of an opposition measure. There is no check to ensure that the card holder is the legitimate owner.

 There are many reasons why verification of the identification number often does not take place before the service is provided. In some cases, it is simply the fact that the service provider does not wish to acquire a payment terminal. In other cases, these are the specific circumstances of provision of services which do not lend themselves to the introduction by the card holder of his identification number in the payment terminal. This circumstance is encountered in particular, but not exclusively, in the case of restaurants or similar service providers in which the user, that is to say the customer, is at a table when he must pay the corresponding bill. to the service received. However, the payment terminal will be at the cash desk or another similar place in the restaurant. For the quality of the service provided and the discretion desired, it is difficult to ask the consumer to come to the cash register to enter their confidential number in the payment terminal.

It follows that, for this type of service, we are content with a possible check against a black list and that the secret identification number of the carrier is not verified.

 An object of the present invention is to provide a system and a method for managing payment cards which effectively allow the verification of the secret identification information of the card holder even though he is in the first place, for example at the table of a restaurant, while the payment terminal or the like is in a second place for example at the cash desk of the restaurant.

 To achieve this goal, the payment card management system comprising secret identification information, according to the invention, is characterized in that it comprises: a portable terminal comprising storage means, input means for information accessible from the outside to enter the memory means at least said secret information and means for transmitting to the outside a signal representative of said secret information stored in response to a control member; and a fixed terminal comprising means for reading the secret information stored in the card, receiver means for receiving the signal emitted by the portable terminal when the latter is arranged in spatial relationship with the fixed terminal and in response to actuation of the control unit, means for comparing the secret information read in the card and the information contained in the transmitted and received signal, and means for preparing transaction authorization information as a function of the results of the comparison .

 The invention also relates to a method of managing payment cards comprising secret identification information, characterized in that it comprises the following steps: firstly, the card holder enters the memory circuit of a portable terminal secret identification information and gives his card to an operator, in a second place, the operator introduces the card into a fixed terminal so that the latter reads the secret information contained in the card and the operator arranges the portable terminal in spatial relationship with the fixed terminal and controls the latter so that it emits a signal representative of the information entered in the portable terminal, whereby the fixed terminal receives said signal and performs the comparison between the information corresponding to the signal received and the information read from the card and authorizes a transaction based on the results of said comparison.

 It is understood that thanks to the invention, the card holder can enter into the portable terminal and in a completely confidential manner his secret identification information at the location where he is for example at the table where he is installed. The operator, that is to say for example, the restaurant server, transports the card and the portable terminal to the location of the fixed terminal, that is to say the point of sale terminal, and introduces the consumer card in the fixed terminal and orders the transfer from the mobile terminal to the fixed terminal of the information which has been previously entered by the consumer, that is to say by the card holder. The point of sale terminal then performs the comparison as is conventional with such a device. It is understood that according to the invention, the portable terminal replaces the introduction by the card holder of his confidential code, that is to say secret information.

 Preferably, the portable terminal also comprises means for entering into its memory means amount information corresponding to the transaction to be carried out and display means for making the corresponding amount and the signal emitted by the portable terminal appear legibly. additionally includes the amount information.

 We understand that thus the transaction presents for the card holder maximum security since it is himself who can verify that the amount introduced in his presence by the operator is correct before he introduces his own password.

 Other characteristics and advantages of the invention will appear more clearly on reading the following description of a preferred embodiment of the invention given by way of non-limiting example.

The description refers to the appended figures in which
- Figure 1 is a simplified diagram showing the different elements of the card management system
- Figure 2 is a longitudinal sectional view of the portable terminal along line II-II of Figure 1
- Figure 3 is a diagram showing the main circuits of the portable terminal; and,
- Figure 4 is a diagram showing the main circuits of the fixed terminal.

 Referring first to Figure 1, we will describe the entire payment card management system.

 In Figure 1, there is shown a payment card 10 of the electronic memory type. This card comprises a plastic body 12, an electronic module 14 constituted in particular by a memory and by processing circuits, the electronic module also comprising external areas of electrical contacts 16. However, as already indicated, would not depart from the invention if the payment card was of the magnetic stripe type or else of a mixed type comprising both an electronic module and a magnetic stripe. The management system proper comprises on the one hand, a portable terminal 20 and a fixed terminal 22 of the electronic payment terminal type.

 The portable terminal 20 is for example of the calculator type. I1 comprises a housing 24, the front face 24a of which are mounted a display device 26 for example of the liquid crystal type and an alphanumeric keyboard 28. The keyboard 28 is completed by a control key 30. The portable terminal 22 also includes , for example in its wall 24b, a light emitting diode 32 emitting for example in the infrared range.

 If we now consider the fixed terminal 22, it is presented in a well known manner and will therefore not be described in detail. The box 34 of the payment terminal comprises on the one hand an electronic memory card reader 36, an alphanumeric keyboard 38 and a display device for example of the liquid crystal type 40. The box of the terminal also comprises, for example on its lateral face 41a, an infrared radiation receiver 42 constituted for example by a photo-transistor. The payment terminal box obviously also includes electronic circuits, the main parts of which will be described later. It is simply enough to note that the card reader 36 comprises on the one hand, a card insertion corridor 36a and a connector 36b for establishing an electrical connection between the circuits of the payment terminal and the electronic module 14 of the card 10 via the latter's external contacts 16.

 As is well known when the card 10 is inserted into the guide passage 36a, the connector 36b is in electrical contact with the external areas 16 of the card.

 In addition, a connection 44 has been shown diagrammatically between the whole of the fixed terminal or payment terminal and databases or a management center capable of being linked to the circuits of the terminal for example for managing black lists. payment cards.

 From the summary description of the various elements of the payment card management system made in connection with FIG. 1, the mode of use of the system according to the invention can be explained. In the following description, we will consider the case of a card holder who wants to pay, using it, a restaurant bill with the use of secret information or confidential code of the card holder.

It goes without saying, however, that more generally, we could consider the case of a card holder located in a place A who would like to make the payment for a service, the control of this payment being made in a second place B.

 The card holder receives a portable terminal 20 when he wants to make his payment. The operator, that is to say the restaurant server, uses the keyboard 28 to identify the operation. for example the table number. This number appears on the display device 26. Then the portable terminal 20 requests to enter the amount of the transaction, that is to say, in the example considered, the amount of the restaurant bill. When this operation is carried out, the corresponding amount appears on the display device 26. The customer, that is to say the card holder, can verify the accuracy of this amount. In the next phase, the portable terminal 20 requests the introduction of the confidential code. At this stage of use, it is of course the card holder who enters, using the keyboard 28, his confidential number. Finally, the portable terminal 20 displays on its display device 26 that all of the preliminary operations have been completed.

 In the next step, the operator, equipped on the one hand with the portable terminal 20 with the information he already has and on the other hand with the customer's card 10, goes to place B where the terminal is located fixed 22. I1 introduces the card 10 into the reader 36. The operations in the terminal 22 take place normally until the display device 40 indicates that the secret identification number must be entered. At this stage of the operations, the operator arranges the portable terminal 20 in such a way that the emitting diode 32 is substantially opposite the photodetector 42 of the fixed terminal 22. The operator then presses the control button 30 of the portable terminal 20 .

This results in the emission of a signal, for example by infrared beam, comprising the information identifying the operation, the amount of the transaction and secret information of the card holder. This information is received by the fixed terminal 22 and decoded. The fixed terminal 22 then performs the comparison between the secret information read directly from the memory 14 of the card 10 and the secret information transmitted via the infrared signal. If there is a match, the transaction operation is performed and the display device 40 displays "successful transmission". This return signal to the card 10 and to the portable terminal 20 causes all of the information contained in the memory to be erased. If, on the contrary, after a first attempt, the display device 40 indicates that the test is unsuccessful, the operator can repeat the operation for a predetermined limited time. If the transfer of information does not succeed during this time, all of the information stored in the portable terminal 20 is erased and the operations must be resumed at their start.

 It is understood that a very important element in ensuring the security of the payment card processing system which has just been described is that it is impossible to have access in particular to the secret identification information which is temporarily stored. in the portable terminal 20. FIG. 2 shows an exemplary embodiment of the terminal allowing this function to be implemented. The housing 24 of the portable terminal defines, by an intermediate partition 50, an upper compartment 52 comprising all of the electronic circuits and a lower compartment 54 in which a battery or other accumulator 56 can be fitted, the latter compartment 54 being closed by a hatch 58. The upper compartment 52 is made in a sealed manner, that is to say that the upper partition 5Q in which are mounted in particular the display device 26 and the keyboard 28 is fixed in sealed manner on the flange of the housing. Inside the upper compartment 52, there is for example a printed circuit 60 on which are made a number of electrical connections not shown. This printed circuit supports electronic circuits 62 and a break-in detector 64. The break-in detector 64 is for example a component sensitive to the composition of the gas mixture occupying the upper compartment 52. In the event of an attempted break-in which would cause the rupture of the seal of the compartment 52, the resulting introduction of air is detected by the component 64 and causes the destruction of the electronic circuits and, in particular, of the memory circuit as will be explained in the following description Of course, other burglar-proof systems can be used.

 Preferably, the housing 24 of the portable terminal further comprises a housing 66 which allows the porting of the payment card 10 in order to avoid, during the operations described above, confusion between the portable terminal 20 which contains the information relating to a card and the card 10 associated with it.

 Referring now more particularly to FIG. 3, the main circuits of the portable terminal 20 will be described. The latter comprises a microprocessor 70 capable of managing all of the functions of the portable terminal. The microprocessor is connected to a ROM memory 72 containing the various programs executed by the portable terminal. The microprocessor 70 is also connected to the control of a power supply circuit 74 to control the operation of the light-emitting diode 32 in order to emit the signal, for example infrared, developed from information entered in the portable terminal. The microprocessor 70 is also connected to the input keyboard 28 and to the control member or control button 30 by means of a known type of decoder 76.

Thus, the information entered using the keyboard 28 is received by the microprocessor 70. The microprocessor 70 is also associated with a RAM type data memory referenced 78 as well as with a control circuit 80 of the display device at liquid crystals 26. Finally, a timer circuit 82 is also connected to the microprocessor and is triggered, for example, by actuation of the control button 30.

 The operation of these different circuits is clear. After the information has been entered, typically the table identification number, the amount of the note and the secret identification information number, the microprocessor 70, from a program stored in the memory 72, converts this information to using an algorithm to first store them in memory 78. The information stored in memory 78 will be destocked when the operator presses the control button 30. This information is then converted by the microprocessor 70 into control signals applied to the control circuit 74 which control the light emitting diode 32 so that it emits the infrared signal corresponding to the information entered.

 As already explained, when the portable terminal receives the acknowledgment information from the terminal, that is to say the information telling it that the transfer has been correctly carried out, the microprocessor controls the erasure of the information stored in the memory 78. Similarly, if the portable terminal has not received an acknowledgment signal after a time, for example equal to 10 minutes defined by the timing circuit 82, the microprocessor 70 commands again erasure of information.

 Referring now to Figure 4, we will describe the main circuits of the fixed terminal that is to say the payment terminal. This type of terminal being well known, it will be described that the essential parts and in particular those which are specific to the payment card management system according to the invention.

 The fixed terminal comprises a microprocessor 90 which manages all of the functions of the terminal 22. The microprocessor 90 is associated with a program memory of the ROM type 92 and with a working memory 94 of the RAM type. The microprocessor 90 also controls the display device 40 via the control circuit 96. The microprocessor 90 is also connected to the read and write control circuit 98, connected to the connector 36b of the electronic memory card reader 36. Finally, the microprocessor 90 receives on its input 90a the signals received by the infrared detector 42 via to a conversion circuit 100.

The microprocessor 90 therefore receives, on its input 90a, the information corresponding to the infrared signal emitted by the light-emitting diode 32 of the portable terminal 20.

 The operation of the fixed terminal is as follows.

When the card is inserted into the reader 36, the microprocessor 90 activates the control circuit 98 to carry out the conventional operations of an electronic memory card reader and in particular to read the balance still available in the card as well as the secret number d carrier identification. This number is temporarily stored in the working RAM memory.

In parallel, the microprocessor 90 receives on its input 90e, in particular the amount information and the secret identification information deduced from the infrared signal received by the photodetector 42. The microprocessor 90 then implements a comparison algorithm stored in the memory of program 92.

The microprocessor compares the secret identification information received on the inputs 90a and 90b If there is a correspondence between these two pieces of information, the microprocessor deduces therefrom that the card holder is indeed the legitimate holder.

He then ensures that the balance still available in the card is less than the amount of the transaction if, however, the type of payment card considered contains the balance information still available. In the case of a card not containing this information, the microprocessor 90 will be content to carry out the comparison of the secret information.

 It is also possible to provide for the microprocessor 90 to control the implementation of a link, for example of the TRANSPAC type, between the fixed terminal 22 and external databases containing in particular the list of payment cards struck with opposition.

 It also goes without saying that the transfer of information between the two terminals could be carried out by a signal other than an infrared signal. This transfer could also be achieved by establishing a temporary wired link between the two terminals.

Claims (6)

1. Payment card management system (10) comprising secret identification information, characterized in that it comprises  - a portable terminal (20) comprising storage means (78), information input means (28) accessible from the outside to enter the memory means said secret information and means (32) for transmitting to outside a signal representative of said secret information stored in response to the actuation of a control member (30) and  - a fixed terminal (22) comprising means (36) for reading the secret information stored in the card (10) of the reception means (42) for receiving said signal transmitted by said portable terminal when the latter is arranged in relation spatial with said fixed terminal and in response to actuation of said control member (30); means (90) for comparing said secret information read from the card and the continuous information in said signal; and, means (90) for transmitting transaction authorization information based on the results of said comparison. 2. System according to claim 1, characterized in that said portable terminal (20) further comprises means (28) for entering into said memory means (78) amount information corresponding to a transaction and display means ( 26) to make the corresponding amount appear legibly, and in that said transmitted signal also includes the amount information. 3. System according to any one of claims 1 and 2, characterized in that said portable terminal (20) comprises a housing (24) and in that said portable terminal is provided with means for destroying memory means (78) in response to an attempted break-in against the compartment of the housing (52) containing said memory means. 4. System according to any one of claims 1 to 3, characterized in that said portable terminal (20) comprises means (66) for transporting the card (10) at the same time as said portable terminal. 5. Method for managing payment cards comprising secret identification information known to the card holder, characterized in that it comprises the following steps in the first place (A), the card holder enters the means memory (78) of a portable terminal (20) the secret identification information, and gives his card (10) to an operator in a second place (B), the operator inserts the card into a fixed terminal (22 ) for the latter to read the secret information contained in the card, the operator arranges the portable terminal (20) in spatial relationship with the fixed terminal (22) and controls the latter (30) so that it transmits a signal representative of the information entered in the portable terminal; whereby the fixed terminal receives said signal and performs the comparison between the information corresponding to said signal and the information read from the card and authorizes a transaction according to the results of said comparison. 6. Method according to claim 5, characterized in that before the holder enters the secret information in the portable terminal (20), there is introduced into it rising information, which appears in a readable form for the card holder, and in that said amount information is contained in said signal.