FR2831361A1 - Secure transmission of electronic transaction information between the parties involved by creation of encrypted physical electronic transaction tokens containing relevant information, which are used via a service provider - Google Patents

Abstract

Method for secure exchange of data in service or product transactions involving a user, a supplier and a service provider. The user supplies an encrypted token to a supplier containing personal information necessary for carrying out a chosen transaction. The supplier sends the token to a service provider who is able to decrypt and validate it. The user generates the encrypted token using an electronic device. An Independent claim is made for a device enabling the secure exchange of transaction information by allowing a user to select information contained in the device relevant to the transaction and to generate an encrypted electronic token from the given information. The tokens can be created using a PC, PDA or mobile phone and an appropriate read-write device.

Description

<Desc / Clms Page number 1>

COMPUTER TOKEN
The present invention relates to a computer token.

More specifically, the present invention relates to a computer token making it possible to confidentially transmit personal information.

 In parallel with the development of the use of the Internet as a tool for the transaction of services and products, the protection of confidential information is becoming a major concern for users. Indeed, it is common practice, whether to access a service or to buy a product on the Internet, that the user must fill out an online form and provide a certain amount of personal information, such as that: e-mail address, postal address, debit or credit card number, telephone number, social security number and other similar personal information.

 It often happens that once entered online in order to obtain a service or to make a purchase, this information is distributed in databases, essentially without the user having any control over this distribution. Thus, for example, the user sees himself appearing on promotional or other distribution lists, without his knowledge. More worryingly, confidential information may thus be available on the Internet, exposed to the risk of hacking and susceptible to unauthorized use.

 Typically, the steps in the transaction process for services or products on the Internet are as follows:

<Desc / Clms Page number 2>

 the seller asks the user to enter certain personal information, then saves it in a local database for later use. When the time is right, the seller can find this information in this database and transmit it to a service provider, for example a parcel delivery company or a banking institution. The latter, in turn, then uses the personal information in order to perform the required service, then destroys this personal information.

 Such a way of carrying out electronic transactions has the advantage that the seller asks the user for the information he needs only once, during the first transaction. Thereafter, the user does not have to provide this information again for each new transaction. However, in doing so, the user has no control over the use of this data, once the seller has acquired it.

 This method of transactions consisting in supplying personal, even confidential, information to a seller on the Internet, losing all control over its dissemination, is not without worrying many potential users. A method allowing the secure exchange of information on the Internet would go a long way in reassuring and convincing these worried users.

 Thus, a method, by which the seller would be able to use only once the information he needs to perform the transaction desired by the user, and which guarantees the user control of the personal information concerning him on the network, would strengthen the development of electronic transactions.

<Desc / Clms Page number 3>

 An object of the present invention is therefore to present a computer token making it possible to confidentially transmit personal information of the user.

 According to the invention, there is presented a method for the secure exchange of information during a transaction involving a user, a seller and a service provider, characterized in that it comprises the following steps: creation by the user an encrypted electronic token containing information necessary for the transaction, this information being selected from a set of information concerning the user; transmission of the electronic token to the service provider; and decryption and validation of the electronic token by the service provider.

 Also, according to the invention, an electronic device is provided allowing the secure exchange of information during a transaction, characterized in that the electronic device allows a user to select, from a set of information contained in the electronic device, information necessary for the transaction and generate an encrypted electronic token containing the information and intended for a service provider in order to carry out the transaction.

 As will be apparent to those skilled in the art, in the present description and in the appended claims, the term "user" designates an individual carrying out a transaction with a seller, for the purpose of buying a product or obtaining a service. Similarly, the term "seller" refers to the entity that offers

<Desc / Clms Page number 4>

 services or products on a website and the expression "service provider" means the entity which performs the service at the request of the seller so as to respond to the user's request; depending on the type of service or product desired by the user, it may be an electronic mail server, a mail service, or a payment gateway, for example. The term "internet" should be understood as having a definition encompassing all types of computer networks, including telephone or other telecommunications networks.

 Other features and advantages of the present invention will become clear in the following description, relating to preferred, non-limiting embodiments, and made with reference to the appended figures.

FIG. 1 represents a functional diagram illustrating the general steps of a secure exchange of information according to a preferred embodiment of the present invention;
Figure 2 represents a functional diagram illustrating the stages of the purchase of a product and the payment of this one by credit card;
Figure 3 represents a functional diagram illustrating the stages of the purchase of a product and the transport of this one;
Figure 4 represents a functional diagram illustrating the stages of the secure transmission of the electronic mail address;
Figure 5 represents a functional diagram illustrating the stages of the secure transmission of a telephone number;

<Desc / Clms Page number 5>

Figure 6 shows an electronic device allowing the generation of an electronic token according to a first alternative embodiment of the present invention;
Figure 7 shows an electronic device allowing the generation of an electronic token according to a second alternative embodiment of the present invention; and
Figure 8 shows an electronic device allowing the generation of an electronic token according to a third alternative embodiment of the present invention.

 A preferred embodiment of the present invention will now be described by way of illustration only.

 Figure 1 illustrates the general concept of the present invention for the secure transfer of user personal information. As understood in this document, an electronic transaction generally involves a user, a seller and a service provider.

 In a first step 10, the user contacts a seller, for example through the latter's website, in order to buy a product or obtain a service offered by the seller.

 Solicited by the user, the seller requests personal information, selected from a list of possible information, depending on the type of product or service desired by the user (step 12). The list of possible information may include, for example, the address, telephone number, card number of

<Desc / Clms Page number 6>

 credit, bank account number, social security number and email address.

 The user, by means of an electronic device which previously contains the personal information of the user or which can receive it directly from the user, selects and saves the personal information required in an electronic token (step 14). The electronic token is encrypted, and contains, in addition to the information requested by the seller in order to proceed with the transaction, conditions of use of this information, as described later. The token may also contain integrity mechanisms preventing a third party from modifying the latter and non-duplication mechanisms, such as a unique identity, for example.

 In step 16, the user transmits to the seller not the personal information themselves, but the electronic token that he has just created to measure for the purposes of the desired transaction. It should be noted that this personal information is not directly accessible by the seller since it is encrypted.

 In step 18, the seller provides a service provider, selected according to the user's request, with the electronic token accompanied by a description of the desired transaction.

 Upon receiving the token and the description of the desired transaction, the service provider decrypts and validates the token and then extracts the data necessary for the described transaction (step 20).

 Once validation is complete, the service provider can optionally send a transaction confirmation to

<Desc / Clms Page number 7>

 the user and the seller (step 22). He is then ready to perform the requested service.

 It should be noted that in the general scenario presented above, the seller has no access to the user's personal information. This is advantageous for the user since he can thus determine which service provider deserves his trust. Indeed, the user's personal information can only be decrypted by service providers chosen by the user.

 As an example of application of the present invention, the steps of purchasing a product and paying for it by credit card are illustrated in Figure 2.

 In this particular case, the transaction involves a user, a seller, a service provider, which in this case is a bank or a credit authorization server, as will be described below.

 In step 110, the user contacts the seller in order to buy a product, specifying that he wishes to pay by credit card.

 The seller, in step 112, then asks the user for personal information, in particular his credit card number.

 The user, by means of an electronic device, creates an encrypted electronic token comprising his credit card number, as well as the conditions of use of this number (step 114). For example, a condition of use may relate to the maximum creditable amount and the number of times the token may be

<Desc / Clms Page number 8>

 used. It should be noted that the conditions of use may be modified by the user when the token is created or may be generic to the type of token and the type of information contained therein.

 In the next step (step 116), the user transmits the encrypted electronic token thus created to the seller.

 The seller then transmits it, accompanied by a description of the desired transaction, to the bank issuing the user's credit card (step 118), this bank being the service provider for this type of transaction.

 The bank decrypts and validates the electronic token then extracts the data necessary for the transaction, contained in the token (step 120). The token, for example, is only validated if the amount of the transaction does not exceed the limit predetermined by the token and if the user is indeed the holder of the credit card.

Of course, other conditions of use could be integrated into the token and validated by the bank. For example, the seller's name could be written in the token.

 When the validation is carried out, the issuing bank transmits a transaction confirmation to the user and to the seller (step 122) and can make the payment to the seller while debiting the amount from the user's account.

 It should be noted that the service provider may be other than the bank issuing the credit card used by the user.

If applicable, the service provider validates and decrypts the token and, if the token proves to be valid, requests the payment authorization from the issuing bank. For example, a server

<Desc / Clms Page number 9>

 Credit authorization could be used to validate the token information.

 A second example of application of the present invention will now be described in relation to Figure 3. This example involves the transfer of the user's address for the purpose of receiving a package from the seller.

 The user contacts a seller in order to buy a product (step 210). There follows an exchange between the user and the seller according to the steps presented in Figure 2 to make the payment for the product (step 212).

 During the transaction, the seller asks the user for personal data, including the delivery address of the product (step 214).

 The user, via an electronic device, creates an encrypted electronic token comprising his address as well as the conditions of use of this address (step 216). For example, a condition relating to the maximum amount of delivery charges and an indication that the token may only be used by the seller in question may be contained in the token.

 The encrypted electronic token thus created is transmitted to the seller (step 218). The seller forwards the latter, accompanied by a description of the desired transaction, to a delivery service (step 220). The delivery service decrypts and validates the electronic token, then extracts the data necessary for the transaction (step 222). Thus, for example, the token can only be validated if the amount of the delivery does not exceed the limit predetermined by the token.

<Desc / Clms Page number 10>

 When the validation is carried out, the delivery service transmits a transaction confirmation to the user and to the seller (step 224) and can perform the requested service, i. e., delivery.

 It should be noted that several variations of the method presented above can be envisaged.

 For example, in step 46, instead of transmitting the electronic token to the delivery service, the seller can transmit an encoded token in the form of a bar code printed on a label placed on the package. The validation and decryption of the information concerning the address of the user can thus be carried out directly by a delivery person ensuring the transport of the product, using an adequate electronic device. The delivery person could therefore know the delivery address without it being directly printed on the package.

 Another variation to the method illustrated in Figure 3 would be to transmit the electronic token directly to the delivery service, without compromising by the seller. In this case, the seller would transmit relevant information to the delivery service so as to allow the link between the package and the token. In this way, the seller is never in possession of the electronic token, which makes the transaction even more secure for the user.

 It should be noted that the information relating to the payment of the product and the information relating to the delivery thereof to the user could be contained in the same electronic token transmitted to the seller (step 218). If this is the case, the same token could be transmitted to the two service providers (bank and delivery service) who could only decrypt the portion of the token

<Desc / Clms Page number 11>

 being necessary to them. Alternatively, a third party, which would be trusted by the user and the seller, could be used to decrypt this entire token and transmit the information they need to the bank and the delivery service.

 With more specific reference to Figure 4, the steps of a transaction involving the secure exchange of the user's email address will be described.

 The user interacts with a seller in order to obtain a service (step 310). In this particular case, the transaction consists of sending information from the seller to the user, by electronic means, therefore essentially in the form of electronic messages addressed to the user's email address.

 This is followed by an exchange between the user and the seller as presented in Figure 2 to pay for the service (step 312).

 The seller asks the user for personal data (step 314). In this example, this personal data includes the email address to which the requested information should be sent.

 The user, via an electronic device, creates an encrypted electronic token comprising his electronic mail address as well as the conditions of use of this address (step 316). A condition of use can be, for example, that the token can only be used by the seller in question. The encrypted electronic token thus created is transmitted to the seller in step 318.

<Desc / Clms Page number 12>

 The seller then transmits the electronic token, accompanied by the requested information, to an electronic mail transmission service (step 320).

 The electronic mail transmission service decrypts and validates the electronic token, then extracts the data necessary for the transaction (step 322). Thus, the token is only validated, for example, if the seller is authorized to use the token.

 When the validation is carried out, the electronic mail transmission service can route the requested information to the electronic mail address contained in the token (step 324), and transmit a transaction confirmation to the user and to the seller.

 Again, several variations of the method in Figure 4 can be considered. For example, sending the token to the email transmission service and sending the information to be sent to the user could be done in two separate steps.

 A final example is described with reference to Figure 5.

This example consists of a transaction involving the secure exchange of the user's telephone number.

 The user contacts a seller (step 410).

The seller asks the user for personal data, including his telephone number (step 412).

 In step 414, the user, via an electronic device, creates an encrypted electronic token comprising his telephone number and the conditions of use of this number. The

<Desc / Clms Page number 13>

 Conditions of use may include, for example, the identification of the seller authorized to use the token as well as the number of possible uses of the token. The token can take the form of a digital code which can be entered directly on a conventional telephone. The encrypted electronic token thus created is transmitted to the seller in step 416.

 The seller, in step 418, dials the number corresponding to the token on his telephone, thereby connecting to a call center.

 The call center decrypts and validates the electronic token, then extracts the telephone number (step 420). The token is only validated, for example, if the seller is authorized to use the token, and if the maximum number of uses is not exceeded.

 When the validation is carried out, the call center can dial the user's telephone number and put the seller in contact with the user (step 422).

 As previously mentioned, the token generated by the user by means of the electronic device contains the information necessary for the desired transaction, such as the credit card number, e-mail address, name and password of user, etc. It is possible to add to it, for example, an expiration condition which makes it usable only a predetermined number of times. This type of condition is encoded using the electronic device. A possible method can be of the card identification type> <counter>, where card identification> constitutes a unique identification of the device in the system, and <counter>

<Desc / Clms Page number 14>

 represents an internal counter. Similarly, the token may contain a condition such as expiration date, maximum amount debited, etc., all conditions that must be met for the token to be validated by the service provider.

 Referring now to Figures 6 to 8, three variants of an electronic device allowing the generation of an electronic token as described above will be presented.

 FIG. 6 illustrates a conventional computer 500 comprising a monitor 502, a keyboard 504 and a central processing unit 506. The computer 500 is also provided with a smart card reader 508 which can receive a conventional smart card 510.

 The 510 smart card contains all of the user's personal information, for example, email address, postal address, debit or credit card number, bank account number, number phone, and other similar personal information.

 When the 510 card is inserted into the reader 508, the user can ask the 510 card to generate an electronic token containing some of the personal information contained in the 510 card. Since the 510 smart card includes an electronic chip allowing him to perform mathematical operations, encryption of personal information can be performed directly on the 510 card.

 When the token is generated by the 510 card, it can then be transmitted by the Internet (see arrow 512) to the seller in the form of an electronic signal. 1 \ should be noted that

<Desc / CRUD Page number 15>

 other methods, as discussed above, could be used to transfer the token from the user to the seller.

 An advantage of using a system as illustrated in Figure 6 is to allow the generation and transfer of the electronic token while the user visits the seller's website, for example.

 Figure 7 illustrates a PDA (Personal Digital Assistant) 600 with a wireless connection (see arrow 602) and a smart card reader (not shown) that can accept a smart card 604.

 The use of the electronic device constituted by the PDA 600 and the smart card 604 is very similar to the use described above. Again, the wireless link 602 allows the transfer of the electronic token generated directly by the smart card 604.

 Finally, Figure 8 illustrates a cell phone 700 conventionally provided with a smart card 702 and two-way communication with a telephone exchange.

 The conventional smart card 702 of the telephone 700 has been modified to contain the personal information of the user as described above. The card 702 can therefore, at the request of the user, generate an electronic token and transmit it by conventional cellular communication to the seller or the service provider.

 It should be noted that the use of a smart card in the electronic device is not necessary, for example, personal information could be contained directly in

<Desc / Clms Page number 16>

 computer 500 of Figure 6 and encrypted on request by software from this computer.

 The electronic device creates an encrypted token.

The encryption can be performed, for example, by means of an asymmetric encryption algorithm which uses a public key of the service provider, a key which is previously registered in the electronic device. Encryption guarantees the confidentiality of information.

 The service provider's validation procedure for the token generally involves several actions. First, the service provider must decrypt the token. In the case of an asymmetric algorithm encryption, clearing is performed using a private key from the service provider. In a second step, the service provider verifies that the conditions of use contained in the token are met.

 Of course, other encryption systems, such as a symmetric key algorithm, can also be used.

 It goes without saying that the present invention has been described purely by way of indication and that it can receive several other arrangements and variants without however exceeding the scope of the present invention as defined by the claims which follow.

Claims (26)

1. Method for the secure exchange of information during a transaction involving a user, a seller and a service provider, characterized in that it comprises the following steps: creation by the user of an encrypted electronic token containing information necessary for the transaction, this information being selected from a set of information concerning the user; transmission of the electronic token to the service provider; and decryption and validation of the electronic token by the service provider.  2. Method according to claim 1, characterized in that said step of creating an encrypted electronic token is carried out by means of an electronic device containing a set of information concerning the user.  3. Method according to claim 1, characterized in that said step of creating an encrypted electronic token uses an encryption algorithm selected from a group including asymmetric encryption and symmetric encryption.  4. Method according to claim 1, characterized in that said step of creating an electronic token comprises the inclusion of at least one condition of use. <Desc / Clms Page number 18>  5. Method according to claim 4, characterized in that said step of creating an electronic token comprises the inclusion of an expiration date of the electronic token.  7. Method according to claim 1, characterized in that said step of creating an electronic token comprises the inclusion of the identification of the seller authorized to use the electronic token.  8. Method according to claim 1, characterized in that said step of transmitting the electronic token to the service provider, comprises the intermediate step of transmitting the electronic token to the seller.  9. Method according to claim 1, characterized in that said step of transmitting the electronic token to the service provider, comprises the intermediate step of including a description of the transaction desired by the user.  10. Method according to claim 1, characterized in that said step of transmitting the electronic token to the service provider comprises the following intermediate steps: transmission of the electronic token to a seller; and inclusion by the seller of a description of the transaction desired by the user.  11. Method according to claim 1, characterized in that said step of decrypting the electronic token by the service provider uses an asymmetric decryption algorithm.  12. Method according to claim 1, characterized in that said validation of the electronic token by the supplier of <Desc / Clms Page number 19>  services requires that any conditions of use contained in the electronic token be satisfied.  13. Method according to claim 1, characterized in that it comprises a step of confirming the transaction to the user and to the seller.  14. Method according to claim 1, characterized in that said transaction involves at least one service.  15. Method according to claim 1, characterized in that said transaction involves at least one product.  16. Method according to claim 1, characterized in that said electronic token has the form of a bar code on a package.  17. Method according to claim 1, characterized in that said electronic token has the form of a telephone number.  18. The method of claim 1, characterized in that said electronic token has the form of an electronic signal.  19. Electronic device allowing the secure exchange of information during a transaction, characterized in that said electronic device allows a user to select, from a set of information contained in said electronic device, information necessary for said transaction and generate an encrypted electronic token containing said information and intended for a service provider in order to carry out said transaction.  20. Device according to claim 19, characterized in that said electronic token contains the identification of a seller <Desc / Clms Page number 20>  authorized, intermediary between said user and said service provider.  21. Device according to claim 19, characterized in that it contains a set of personal information concerning said user.  22. Device according to claim 21, characterized in that it allows the selection, among said set of information which it contains, and the encryption of said information necessary for said transaction.  23. Device according to claim 19, characterized in that it allows the encryption of said information necessary for said transaction by means of an asymmetric algorithm.  24. Device according to claim 19, characterized in that said device is a smart card.  25. Device according to claim 24, characterized in that said smart card can be inserted in the smart card reader of a computer.  26. Device according to claim 24, characterized in that said smart card can be inserted into the smart card reader of a PDA.  27. Device according to claim 24, characterized in that said smart card can be inserted in the smart card reader of a cellular telephone.