ITMI20001389A1 - PROCEDURE AND SYSTEM FOR ACCREDITING A SERVICE OR PRODUCT, AND PROCESSOR PROGRAM PRODUCT FOR EDUCATING A SPEAKER SYSTEM - Google Patents

Description

DESCRIPTION of the industrial invention entitled:

"PROCEDURE AND SYSTEM FOR ACCREDITING A SERVICE OR PRODUCT, AND COMPUTER PROGRAM PRODUCT FOR INSTRUCTING A COMPUTER SYSTEM TO ACCREDIT A SERVICE OR PRODUCT"

DESCRIPTION

BACKGROUND OF THE INVENTION

FIELD OF THE INVENTION

The present invention generally relates to systems for issuing to consumers documents bearing witness to rights or titles in a retail store. More specifically, the invention relates to systems for issuing promotional documents or certificates of the type which require a unique personal identification number (PIN) to be transmitted to a customer receiving the item.

BACKGROUND DISCUSSION PINs are printed or encoded on certificates of value issued to customers and subject to authorization for various products and services. Each certificate must be fraud resistant and must be secure against duplication. Having random but valid unique numbers requires creating and storing the numbers in databases or on pre-printed certificates. The management of these databases or certificates becomes expensive and prone to fraud. The PIN generation field is discussed in detail in US Patent 5 892 827.

A marketing technique that has found increasing popularity is the distribution, at the point of sale, of a free product or service as an incentive to purchase other products or services.

Typical market programs offer between 5 and 10 minutes of long distance service as incentives to purchase the sponsoring company's product, as potential rewards for participating in a market setting, or as rewards offered under a buyer loyalty program frequent of the retail store, or simply as a product to purchase. With respect to the commercialization or "marketing" of long distance telephone service, two processes or methods are generally employed. A proceeding involves registering the consumer or customer and issuing or issuing a telephone "credit card" for which an account is established and to which certain dollar amounts of telephone service, based on shares or purchases, are subsequently credited. of the consumer. Another process or method is to issue telephone "debit cards" to each consumer who meets the requirements of the particular market program. These debit cards are usually pre-authorized in denominations of 5 or 10 minutes. The issuance of a debit card does not establish an account, but rather is authorized for the specified amount of telephone service and therefore becomes useless after the telephone time is up. With both procedures, the consumer is usually required to form a "free" number and provide a personal identification number (PIN) in order to activate the free service. This PIN must be randomly generated before the phone credit / debit card is issued so that valid usage verification can be established before granting the free service.

With each of the processes described above, there is a requirement that the consumer be issued a physical card (similar to a consumer credit card). Manufacturing and dispensing of these cards represent a significant cost and, therefore, can in many circumstances be cost prohibitive. In addition, there are inherent security concerns in the manufacture and delivery of the cards as someone other than the desired user could easily convert them for their own use (especially in the case of the debit card, as the PIN is usually pre-printed on the card itself. ). Another limitation of current phone card sales or marketing processes is the fact that the account and / or PIN must be generated before a card is issued, which can result in a time delay from the time the consumer accepts the offer when the telephone service will be available (particularly with reference to the credit card procedure). This limitation may also lead to card exhaustion or excess stocks based on consumer demand (especially with respect to the credit card method or process).

Regardless of whether a certificate or voucher is presented to a consumer as an incentive to purchase selected products or simply in response to a request to purchase the service provided by the certificate, the difficulties described above have inhibited a safe and efficient distribution of these. certificates. The following paragraphs discuss the issues that are specifically applicable to the distribution of pre-paid service certificates, such as pre-paid calling cards or long-distance telephone.

Problems initially occur in the manufacturing stage. Cards are typically pre-printed with dollar value or time in minutes, in pre-set amounts, although the consumer may prefer to have a different value or time. Furthermore, the pre-printed cards have the further limitation that they contain fixed important information, such as that of a "toll-free" number starting with "800" to access the service. Access numbers can become overloaded and cause inconvenient delays for the user, and new access numbers may need to be added to meet demand, but there is no convenient way to update this information on a pre-printed card. Similarly, each pre-printed card has a PIN (Personal Identification Number) which must be used to activate the card, i.e. to prepare it for use. Pre-printing PINs on the card exposes the value of the card to anonymous and usually untraceable theft. Once the card has been printed, its value can be stolen without physically taking possession of the card itself. The theft can take place at any time from print source to retail. It will be apparent that the forwarding of these "live" cards through a feeding and distribution process is likely to be plagued with security risks. Special handling increases the cost and difficulties of marketing or marketing, and selling remote value cards. Naive consumers can buy cards that are either "empty" or out of stock or used by others bought illegally. Marketing and selling tamper-resistant cards increases the cost and effort of any person. So-called "live" cards or cards with protected PINs must be treated as if they were an item that almost corresponded to cash, through the process of distribution and retail. When a delivery of cards is made to a store, if they are not kept locked up and protected or in the cash drawer, then they can be easily stolen, lost or misplaced. The cards themselves are extremely small and can be easily hidden from unscrupulous employees or unscrupulous buyers. Therefore, the suppliers and retailers of these cards are exposed to an extremely large financial risk in handling the cards. If the value is illegally stolen or removed from a card, then it is not possible for the retailer to accept the corresponding return amount or return it to the supplier.

One solution is to deal "dead" or "dead" cards instead of "live" or "live" cards. A dead card is a card that has a PIN that must be activated by the retailer before distribution to the consumer. Activating pre-set PINs is extremely expensive, time consuming and prone to errors. The distribution of dead cards with PINs that require activation is therefore inconvenient and still susceptible to theft and abuse as some card providers pre-print and assign PINs in a uniform, predictable or unsecured manner. Dishonest people can dial access numbers and enter PINs until they successfully log into the service, or they can search for a multiple PIN configuration, and then resell the PIN and login numbers to different users. Another potential problem is that some PIN sequences are deliberately short, for the convenience of the user. This creates a dangerous situation, as a computer expert or vendor can more easily discover and decipher short PINs that are not encrypted.

Another proposed solution to the security problem is to employ scratch-resistant or scratch-resistant removable liners and removable tape cover elements on the PINs. This has limited effect, as "live" and valuable cards can still be stolen and used anonymously by dishonest people, anywhere in the supply chain.

Systems have been proposed where prepaid cards are sold without a PIN. The PIN is activated or associated with the card after a request has been made to a central processor issuing or issuing a PIN. In some systems of this type, PINs can be downloaded in a batch, and then held until a card is purchased, at which time a PIN is associated with the pre-printed portion of the card. The main limitation of this process is that a call must be made to the central processor to issue a PIN. This slows down the transaction and, in a retail environment, slows down the cashier operations while the processor is called and the PIN is released. In addition, a dishonest or careless cashier could sell or give away the value of the PINs.

Some pre-paid calling cards are sold or traded in closed-locked plastic containers placed in a display rack in the store. The cashier selling these cards typically scans a barcode on the display itself, and a PIN is obtained by making a request or call to the vendor or service provider. This barcoding activation process cannot prevent fraud or abuse by others as barcodes can be duplicated and used on more than one card. A thief could steal one or more cards and buy one to get the valid lotto code, thus activating the stolen cards as well.

It will be understood from the foregoing that known techniques for distributing certificates or cards redeemable for a service of value all present practical difficulties which make the certificates or cards both inconvenient for the consumer and vulnerable to fraud or theft. Thus there is a need for a new solution to distribute these certificates or cards in a convenient way without compromising the security of the valuable services that are obtained through the use of the cards. The present invention satisfies this need, as will be briefly described in the following summary of the invention.

Although the invention is described mainly with reference to the provision of free long distance telephone service, it must be borne in mind that the principles of the invention are also applicable to providing any remuneration, at the point of sale, where the subsequent verification of the right to remuneration can be realized without the need for a pre-established list of valid authorization codes. SUMMARY OF THE INVENTION

The invention provides a computer implementable system and method for ensuring the security and validity of pseudo-randomly numbered authorization codes, typically printed on certificates or stored in machine readable memory on user cards, including first algorithmic means on a first processor for generating an authorization code in response to the request, and second algorithmic means on a second processor for determining whether a code provided by a user is an authorization code that would be generated by said first algorithmic means. The transmission of the second algorithmic means to the second processor eliminates the requirement of transmitting actual generated codes from the processor providing the authorization code to the processor determining whether the code presented by a user is an authorized code.

The algorithm transmitted by the first computer, such as a computer in a retail store that functions to monitor transactions at so-called "point of sale (POS)" terminals or at points of sale and kiosks in a store, the second processor can either be the same algorithm used by the first processor, or the transmitted algorithm can be modified in such a way that it functions by receiving a user code and determining whether the user code is a code that it may have been generated by the algorithm employed in the first store. In other words, the processor code defining the algorithm transmitted to the second processor may not have the ability to print or view codes, thus preventing a user of the second processor from fraudulently obtaining and validating authorization codes. Rather, the processor code defining the algorithm transmitted to the second processor can only have the ability to determine whether a code entered into the second processor is valid in the sense that the code entered into it is a code that could be generated by the algorithm executed on the second processor. first processor.

Preferably, the authorization code contains a date indicating the date on which it was generated. Preferably, the product or service is a telecommunications service credit. The product or service can be a discount for another product or service. Typically, but not necessarily, the product or service is a product or service that is not provided by the retail store where the user receives the authorization code. The authorization code can include digits or digits associated with the store where the authorization code was generated. Preferably, the authorization code generation algorithm generates a code only once.

Briefly, and in general terms, the method of the invention comprises the steps of detecting the occurrence of an event that has been preselected to trigger the generation of an authorization code for distribution to a customer of a retail store; generate a certificate or card storing the authorization code in a human or machine readable form, the authorization codes generated in an apparently random sequence by means of a pseudo-random code generator algorithm to avoid deciphering the algorithm; receiving a code from a user at a second computer; employing an algorithm to determine whether the code received by the user is code that would be generated by the algorithm and, if so, to determine to provide the associated product or service, which is associated with the code, to the user. If a determination is made to provide the associated product or service to the user, then the provider of the product or service provides the product or service to the user.

BRIEF DESCRIPTION OF THE DRAWINGS

A more complete evaluation of the invention and many of the consequent advantages thereof will be readily obtained as it is better understood with reference to the following detailed description when considered in conjunction with the accompanying drawings, in which:

Figure 1 is a diagram of an embodiment of a new computer system according to the invention;

Figure 2 is a flow diagram of the process of a consumer receiving an authorization code for the system of Figure 1; and Figure 3 is a flowchart of the process for validating the authorization code for the system of Figure 1.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

In the drawings, like reference numerals indicate identical or corresponding parts throughout the various views, and Figure 1 illustrates a first computer 1 connected to a POS terminal 2 and a kiosk 3 of a store 6. The POS terminal 2 includes means for enter transaction data and provide pricing information for the transaction of a sale with a customer or consumer. POS terminals are well known in the field. POS terminal 2 may include automatic means for identifying product codes and user identification, such as a barcode scanner (for scanning product identification barcodes on item-products and product identification barcodes). on user identification cards), a magnetic stripe reader to scan magnetic media containing a user identification number (such as a bank or credit card), a MICR reader-encoder to read MICR codes on checks for obtain authorization for checks and to obtain user identification. The POS terminal also includes means for writing an authorization code in either human-readable or machine-readable form.

The shop 6 may also include a so-called "kiosk" 3. For the purposes of the present invention, a kiosk is a terminal of a computer system including means for the customer to make a payment (e.g. with cash or a credit card). or a unique identification associated with the customer, and means for writing an authorization code in either human-readable or machine-readable form.

The POS terminal 2 and the kiosk 3 of the shop 6 are each connected through a communication line with the first computer 1. The communication line can pass through network connections or other intermediary means. For example, there may be a computer of a shop controller interposed in the communication line between the first computer 1 and the POS terminal 2 and the kiosk 3. However, it is to be understood that the first computer may be a computer of a unit. control or shop controller.

The first processor 1 is connected via a communication line to a second processor 4. There may be intermediate devices interposed along the communication line connecting the first processor 1 and the second processor 4, provided that the first processor 1 can communicate with the second processor 4.

The second computer 4 is in communication with a user device 5. The user device 5 can be a wired telephone, a wireless telephone, or another computer. The user device 5 can be any device allowing a user to transmit data signals conveying an authorization code to the second processor 4.

In Figure 2, in step 10, the consumer carries out actions which determine a request signal transmitted by the POS terminal 2 or by the kiosk 3 to the first processor 1 signaling the generation of an authorization code. The action by the consumer can be the purchase of an item at the POS terminal or kiosk entitling the user to an authorization code for a product, service or discount on a product or service, it being able to be an explicit request by the consumer to purchase an authorization code attributing to the user or consumer the right to receive the product or service, it being able to be based on the customer's previous purchase history recorded in a database associated with the first processor 1, or, on the other hand, it could be based on a promotional campaign in which an authorization code is provided to each consumer either at the POS terminal 2 or at the kiosk 3. In step 11, the first processor 1 generates an authorization code. In step 12, the first processor 1 transmits the generated code to the POS terminal or kiosk. In step 13, the POS terminal or kiosk records the authorization code in a recordable medium. In the preferred embodiment, the medium or card and the code is in human readable digits or digits, such as letters and numbers, and the printed document includes a telephone number to call to obtain the authorized product or service.

In Figure 3, in step 14, the second processing system 4 receives the code entered in the user device 5. In step 21, the second processing system 4 executes an algorithm which determines whether the code it has received is one that could have been generated by the authorization code algorithm.

In the preferred embodiment, the product or service associated with the authorization code is prepaid telecommunications time. In the preferred embodiment, if the second processing system 4 determines that the code it received from the user device 5 is a code that could have been generated by the authorization code algorithm, then it requests the user device 5 a telephone number to which prepaid telecommunication time is credited, receives a telephone number from the user's device 5, and credits the account for that telephone number. Optionally, the second processing system 4 can also provide a telephone number to be called to the user device 5 and instruct the consumer to dial the number to call as a pre-condition for the use of the credit obtained from the authorization code. Preferably, the second processing system stores authorization numbers received from a user device and does not re-authorize any of these numbers.

Claims (24)

CLAIMS 1. Procedure for accrediting a service or product, including the steps of: transmitting code defining an algorithm from a first computer to a second computer, said algorithm being provided for generating authorization codes; receiving, at the first processor, a signal from a terminal in a retail store indicating a credit security for a product or service; employing said algorithm in said first processor to generate an authorization code for said security in response to receiving said signal; generating a certificate containing said authorization code in said terminal; receiving a user code from a user in said second computer; And employing said algorithm in said second processor to determine if said user code is an authorization code in order to determine whether to provide said product or service to said user. 2. A method according to claim 1, wherein said authorization code contains a date on which said signal was received at said first processor. Method according to claim 1 or 2, wherein said product or service is a credit for telecommunications services. The method according to claim 1 or 2, wherein said product or service is a discount or another product or service. 5. A method according to claim 1, wherein said product or service is not provided by said retail store. 6. Procedure for accrediting a service or product, including the steps of: transmitting code defining a second algorithm to a second processor, said algorithm being provided for determining whether a user code is an authorization code generated by a first algorithm; receiving at a first computer, a signal from a terminal in a retail store indicating a credit security for a product or service; employing code defining said first algorithm in said first processor to generate an authorization code for said security in response to receiving said signal; generating a certificate containing said authorization code at said terminal; receiving a user code from a user at said second processor; And using said second algorithm in said second computer to determine if said user code is an authorization code generated by said first algorithm to determine whether to provide said product or service to said user. 7. A method according to claim 6, wherein said authorization code contains a date on which said signal was received at said first processor. 8. A method according to claim 6, wherein said product or service is a credit for telecommunications services. A method according to claim 6, wherein said product or service is a discount on another product or service. 10. A method according to claim 6, wherein said product or service is not provided by said retail store. 11. System for accrediting a product or service, including: means for transmitting code defining an algorithm from a first processor to a second processor, said algorithm being provided for generating authorization codes; means for receiving at the first processor a signal from a terminal in a retail store indicating a credit security for a product or service; means for employing said algorithm in said first processor to generate an authorization code for said security in response to the reception of said signal; means for generating a certificate containing said authorization code at said terminal; means for receiving a user code from a user at said second processor; And means for employing said algorithm in said second processor to determine if said user code is an authorization code in order to determine whether to provide said product or service to said user. 12. A system according to claim 11, wherein said authorization code contains a date on which said signal was received at said first processor. 13. A system according to claim 11, wherein said product or service is a credit for telecommunications services. A system according to claim 11, wherein said product or service is a discount on another product or service. A system according to claim 11, wherein said product or service is not provided by said retail store. 16. System for accrediting a service or product, including: means for transmitting code defining a second algorithm from a second processor, said algorithm being provided for determining whether a user code is an authorization code generated by a first algorithm; means for receiving at a first processor a signal from a terminal in a retail store indicating a credit security for a product or service; means for employing a code defining said first algorithm in said first processor to generate an authorization code for said security in response to the reception of said signal; means for generating a certificate containing said authorization code at said terminal; means for receiving a user code from a user at said second processor; And means for using said second algorithm in said second computer to determine if said user code is an authorization code generated by said first algorithm to determine whether to provide said product or service to said user. System according to claim 16, wherein said authorization code contains a date on which said signal was received at said first processor. 18. A system according to claim 16, wherein said product or service is a credit for telecommunications services. A system according to claim 16, wherein said product or service is a discount on another product or service. 20. A system according to claim 16, wherein said product or service is not provided by said retail store. 21. Computer program product for instructing a computer system to credit a service or product, comprising programming the computer system to provide the steps of: transmitting code defining a second algorithm to a second processor, said algorithm being provided for determining whether a user code is an authorization code generated by a first algorithm; receiving at a first computer, a signal from a terminal in a retail store indicating a credit security for a product or service; employing code defining said first algorithm in said first processor to generate an authorization code for said security in response to receiving said signal; generating a certificate containing said authorization code at said terminal; receiving a user code from a user at said second processor; and using said second algorithm in said second computer to determine if said user code is an authorization code generated by said first algorithm in order to determine whether to provide said product or service to said user. 22. Computer program comprising computer programming code means adapted to perform the steps according to claim 1 or claim 6 when such program is executed on a computer. 23. Process according to claim 1 or claim 6 substantially as described above with reference to the accompanying drawings and illustrated therein. System according to claim 1 or claim 6 substantially as previously described with reference to the accompanying drawings and illustrated therein.