ZA200005846B

ZA200005846B - Method and device in a computer network.

Info

Publication number: ZA200005846B
Application number: ZA200005846A
Authority: ZA
Inventors: Kent Bogestam
Original assignee: Ehpt Sweden A B
Priority date: 1998-04-30
Filing date: 2000-10-19
Publication date: 2002-04-19
Also published as: EP1073983A2; NO20005468D0; IS5682A; CN1315021A; KR20010043117A; NO20005468L; WO1999057662A3; SE514332C2; BR9910076A; AU4402499A; IL139179A0; SE9801525L; SE9801525D0; WO1999057662A2; CA2329769A1; JP2002513973A

Description

! TT 1

Method and Device in a Computer Network . Technical Field

The present inventon relates to a method and a device for making pavments in a . 5 data network. and in particular for making payments through an Internet Protocol (TP) based network such as the Internet.

Description of Related Art :

Credit cards and other types of pay cards are being used to an increasing degree.

A credit card enabies its owner to make purchases and pay for them later, when an invoice is received. The cost per transaction is relauvely high using such cards.

Therefore, such cards are not suitable for wansactions involving small amounts of money.

For small amounts of money, a cash card may be used. An amount of money is stored in the card which may then be used to pay for small purchases. Since this card is equal to the amount of money stored 1n it, it is only feasible for small amounts of money. Often. there is a limit to the amount of money that can be stored in the card at any given nme. Losing the card means losing the corresponding amount of money, and no interest is given on the money stored in the card. Also, when the card is empty, it has to be reloaded with money in type of terminal which 1s only available in certain places. The cash card also cannot handle user-specific information such as discounts to which a user may be entitled.

This means that a person using these services must use a number of different cards. and pay in a number of different ways for different services.

Summary of the Invention } It is an object of the present invention to provide a method and an apparatus that - will allow all kinds of transactions involving payment.

This is achieved according to the invention by a charging method in a data network through which goods and/or services can be purchased, said method comprising the following steps: - providing a application program for each application, said application programs being located in nodes in the network; - specifying the cost for using each application program in terms of charging units; h - providing a transaction server in the network, said transaction server being adapted to receive and store information related to the use of each application program;

J providing an application program interface between each application program and the transaction server, said application program interface being adapte d to transfer information regarding the cost of each application. in terms of charging units, from the application program to the transaction server.

The object is also achieved in a device for enabling charging in a data network, said data network comprising at least one application program the use of which incurs costs for the user, said device comprising - memory means holding information about customers, and cost of using said ap- plication program; - means for receiving and storing information about the cost to be registered for a customer for a session in which the customer uses an application, said informa- tion being received in the form of charging units; - means for storing said information. - means for calculating the cost of said session in terms of a valid currency.

3 1

This method and device allow a connection to be setup for a period of time during which billing information may be transmitted several times at regular or regular intervals. In this way, the cost associated with the initial establishment of the con- nection, user authentication etc. does not occur every time a cost is to be registered.

This enables the registration of low costs without high surcharges being added. At the same time, very high costs can also be registered.

One charging unit may be transmitted for each time unit, the duration of a time unit being individually selectable for each type of service or item, or a number of charging units may be transmitted at one time for one particular service or item.

In this way the use of any program may be charged. It is also easy to change the price of using a program.

A contract may be specified for each transaction, said contract specifying parame- ters pertaining to the transaction, including identification of the buyer, seller and type of service or item being purchased, and price, and storing said contract in or in connection to the transaction server. The contract may also comprise a maximum price for the session, defined by the user.

The cost for each session is calculated in terms of a valid currency and information about the cost is transferred to a billing unit.

Brief Description of the Drawings

In the following the invention will be described in more detail, with reference to the drawings, in which:

Figure 1 is a schematic overview of the invention;

Figure 2 is a more detailed representation of the units comprised in the invention; : Figure 3 shows the signalling that takes place between the user and the components of the system,

Figure 5 is a flow charts of the steps taken to provide a service in the network.

[

Detailed Description of Embodiments cE Figure 1 is a schematic overview of the components of a system comprising a trans- oe * action server 1 according to the invention. The transaction server 1 is used to moni- ’ a 5 tor the use of the services and/or the purchases made. To the transaction server 1 a or © first 3 and a second 5 application are connected through a first 7 and a second 9

SE application program interface (API), respectively. The applications 3,5 may be con- - nected either directly to the transaction server 1 through the API, such as the first application 3, or through a data network 11. In a preferred embodiment, the Internet, may be used as the data networks 11. A database 13 1s found in or in connection to = the transaction server for storing user data and other information. The transaction - server 1 is also connected to one or more charging units 15 handling the actual

EE payments from clients. A number of customer terminals 17, 18 are also connected to : - the data network 11. Terminals 19 may also be connected directly to one or more applications 5. The customer terminals 17, 18, 19 may be private terminals found in : people’s homes such as personal computers or public terminals. A security unit 21 for handling the security of the transactions is also found in or in connection to the : transaction Server.

Any type of application 3, 5 may be connected to the transaction server 1. as will be discussed in more detail below.

From his/her private terminal 17 a customer can, for example order goods from a catalogue, make a call through the Internet telephony network, or retrieve informa- 235 tion or programs from the Internet 11. The public terminals may be used, for exam- ple, for making payments in a shop, a gas station or the like. The charging for these different types of applications will be described in more detail below.

The transaction server 1 and the units it comprises will be described in more detail in connection with Figure 2.

s :

The charging principle according to the invention involves a charge unit called a tick. The charge unit, or tick, may be chosen independently for each application as an appropriate value for the application. When a customer uses a service, the appli- } 5 cation program 3, 5 sends a number of ticks through the API 7, 9 to the transaction server 1. For some services, for example telephony, one tick may be sent for each time unit. The duration of the time unit may vary, for example at different times or for the type of call made. Typically, a shorter time unit will be used for long dis- tance calls than for local calls so that the ticks will be sent more often for long dis- tance calls. For other applications a number of ticks may be sent at one time. For example, if a customer orders an item from a catalogue, the value of the tick may be 10 pence. If the price of the item is 10 pounds, 100 ticks will then be sent from the application to the transaction server. To pay for power or water consumption, a number of ticks may be sent for each unit (watt, or volume of water).

One or more ticks may be sent to the transaction server when a customer starts an application, for example, if the customer is to pay for each time the application 1s used, or when the customer stops using an application.

The transaction server 1, or the database 13 holds information about the value of a tick for each application. The transaction server 1 or the database 13 may also hold other user information, for example if a customer is entitled to a discount when us- ing a particular application.

Figure 2 shows the units of the system according to a first embodiment of the sys- : tem in more detail. As before, a transaction server 101 is provided, comprising a transaction manager, a database 105, and one or more servers 107 connected to an

Internet service provider 109. The Internet service provider 109 provides the trans- action service to content providers (not shown). Of course, the service provider 109 may also be a content provider. The server 107 handles communication with the In-

ternet service provider 109, including retrieval of service programs, updating of the : billing system, or protocol translation services.

According to a preferred embodiment as much of the logic as possible is stored in the transaction manager 103, to make the handling of the application programs eas- - ier. For example, to keep the applications small and easy to manage, the charging : information is placed in the transaction manager 103 instead of in the application program itself. The transaction manager 103 also establishes the communication with the other units. : § The database 105 is used to store information about charging, vendors, customers, - etc. Each service has an entry in the database specifying the price of the service In terms of ticks, and the value of a tick for the service concerned. Customer informa- tion comprised in the database 105 may include, for example, information about any ) 15 discounts to which the customer is entitled, and a maximum amount that the cus- tomer is allowed to spend.

The transaction server 101 also comprises a payment manager 113. The payment manager 113 takes care of the communication with units handling the payment from the customers, represented by a billing unit 115 in Figure 2. Several such billing units 115 of different kinds, such as banks and/or a credit card companies may be included.

The transaction manager 103 is also connected to a first 117 and a second 119 ap- plication programs through a first 121 and a second 123 AP], respectively. As shown in Figure 1, the connection may be direct or through a data network. The procedure for providing an application program to the network will be discussed below.

-

The API can be linked to any application that requires charging. The API should not interfere with what is being charged or how much, but simply register ticks, as de- scribed above. The API may also be adapted to send a receipt back to the content providers that their service is being used.

A web browser 127 is available to the customers of the system for ordering services and goods provided through the Internet. The browser 127 may be connected to the billing unit 113, so that the browser can initiate advance payment if required.

The billing unit 115, the payment manager 113, the transaction manager 103 and the

Internet service provider 109 are connected to one or more certification authority 129. The certification authority 129 issues user identities and can therefore verify a particular user identity when required.

Figure 3 is an overview of the signalling that takes place between the customer and the units of the system according to a first embodiment of the invention. The cus- tomer and each of the units are represented by horizontal lines, between which ar- rows are drawn to represent the signalling. The units are: the application APPL, the

API an authentication module AUTH, the transaction server TS and the database

DB. The authentication module may be implemented as part of the API, but are shown here as a separate set of functions. In this way any available product for handling authentication functions may be used. The authentication module, and other security functions will be described in more detail below.

S31: A customer first initiates the start of an application. If an item is to be ordered, or a call is to be made, through the Internet, this is done, according to a pre- ferred embodiment, by opening an appropriate Internet site, or page, and order- ing a service in the way known in the art. If a payment is to be made, for ex- ample, in a store or at a gas station, this is done by the customer identifying himself/herself and beginning the purchase.

1 [a

S32: A signal is sent from the application to the API, comprising start information such as the application identity, information about the customer and a request for information about the cost per tick. oo

S33: The API sets up a session to the transaction server, for example according to ] the Secure Socket Layer (SSL) protocol. ) : S34: The transaction server requests information from the database, for example, information about the customer and about cost per tick the application.

S35: The database returns the requested information to the transaction server. $36: The transaction server returns status information about the session, including, for example, the cost per tick and a customer contract, which will be described in more detail below.

S37: The API requests an authentication of the customer. $38: The authentication module initiates a dialogue with the customer, including a h prompt for identification. The identification may be carried out in any way known in the art, as discussed in connection with the security functions. Other - information regarding the transaction may also be entered, such as type of service or goods desired, maximum cost, and so on.

S39: The user enters the above mentioned information, which is transferred to the - authentication module.

S40: The authentication module returns the signed user contract and a certificate verifying that the customer has been accepted, to the APL.

S41: The API sends the signed user contract and the certificate to the transaction

Server.

S42: The transaction server starts a session and sends information to the database : 25 for a given customer and application. :

S43: The transaction server verifies the status of the signed customer contract and the certificate and transmits a notification of acceptance to the APL

S44: The API forwards the notification of acceptance to the application.

The application starts. This may imply, for example, that a program ora i document is downloaded to the customer, that an order for an object from a catalogue is registered. } S45: The application transmits ticks to the API when required. The first tick may be transmitted when the application starts, or at a later stage. . 5 S46: The API forwards the ticks to the transaction server. $47: The transaction server inserts ticks for the session in question in the database.

This may be done once or several times at regular or irregular intervals. $45-S47 may be repeated an arbitrary number of times. $48: When the application is ended, a stop signal is sent from the application to the

APL

$49: A message, possibly with one or more ticks is transmitted from the API to the transaction Server.

S50: The stop, and the final ticks, are also registered in the database.

S51: The transaction server verifies to the API that the session has ended. $52: The API verifies to the application that the session has ended.

For some applications, for example when making a payment in a store, a number of ticks, corresponding to the amount to be paid, may be sent in one burst at the end of the transaction. For other applications, for example when tanking, a number of ticks may be sent for each litre of gas.

A confirmation is sent from the program manager to the API and from the API to the application.

In the above only signals relevant for illustrating the inventive idea have been in- cluded. Of course, other signals such as synchronization signals, may have to be transmitted at certain stages.

The user contract specifies the data that is to be valid for the transaction. The user identity and the application are specified. The cost is specified, for example, in terms of the cost of one tick and the time interval between the tucks, the cost per time period or the total cost. The user may also be allowed to specify a maximum cost. The user contract may be stored with the user and is always stored in or in connection to the transaction server. Other data, such as the method of identification of the user may be specified as well. In this way, any transaction can be verified at a ] later stage if necessary.

Figure 4 shows the signalling that takes place according to a second embodiment of the invention, in which all ticks are transmitted at one time to the database. For ex- : ample, when a web server is involved in the session. this may be more secure than having a connection for a longer period of time. The authentication and the negotia- tion of the contract may be carried out in the same way as in Figure 3 and are there- fore not shown in Figure 4. 862: The application sends a signal to the APL comprising information about the customer, about the application and about the number of ticks to be transmit- ted.

S63: The API forwards the application and customer information to the transaction

SErver.

S64: The transaction server returns status information about the session.

S65: The API sends a signed user contract, if applicable, customer data and a num- ber of ticks to the transaction server. :

S66: The transaction server stores information about the new session in the data- base.

S67: The transaction server sends application and customer information to the data- base.

S68: The transaction server stores the appropriate number of ticks in the database. $69: The transaction server ends the session in the database.

S70: The transaction server sends status information to the APL no

As mentioned above, the user authentication may be carried out in a number of dif- ferent ways, using passwords, smart cards, soft cards, voice recognition or in any ] other way known in the art. The security functions may be implemented as an inte- gral part of the APL but it may also be desirable to add the authentication functions , 5 as a separate package. In this way each content provider can choose authentication functions that fit the application in question. Of course the security functions may be omitted altogether, for example in a network to which the access is limited.

For security, information transmitted between the user and the application, and be- tween the units, is encrypted. This may be done using an appropriate prior art en- cryption method in dependence of the required security level. A common method for encryption of the information between the customer and the application is to use a private encryption key, specific to the customer, in combination with a public en- cryption key.

When the charging data has been stored in the database, they may be transferred to one of the billing units, which will make sure payment is received from the cus- tomer. This may be carried out in any way known in the art. For example, a cus- tomer may have an account, to which money is paid in advance, or the customer may be invoiced at fixed time intervals or when the amount to be charged reaches a certain limit.

Figure 3 is a flow chart of the steps needed to provide an application in the system.

Step S1: The application program is designed. The design of the application pro- gram is dependent of the type of application, as will be discussed below.

Step S2: The API is retrieved and linked to the application.

Step S3: The cost for using the application is specified and stored in the database.

The cost is specified in terms of a cost for each tick and 2 number of ticks per time unit or item.

Step S4: The program is made available in the network. This may mean. for exam- ple, storing it on a web server or delivering the program to customers for ) installation on their computers.

The design of the application program and of the API will depend on the type of . application. If goods are to be ordered from a catalogue, information about the items ) and their price should be provided to the customer, preferably in a web page, which should also enable the customer to submit information to the transaction server "through the APL This information should include customer identification, identifi- cation of the items to be purchased. Alternatively, the information about the items : may be provided in a printed catalogue, in which case the web site need only com- prise functions for submitting identification and specification of the desired items.

It is also possible, according to the invention to include payment for, for example electric power or water consumption. In this case, the consumption must be meas- } ured in some known way, and information about this transmitted to the transaction server. The information may be transmitted as a number of ticks when a certain amount has been consumed or at certain time intervals.

Claims

Claims

} 1. A charging method in a data network through which goods and/or services can be purchased said method comprising the following steps: . 5 - providing an application program (3, 5) for each application, said application programs being located in nodes in the network; - specifying the cost for using each application program in terms of charging units; - providing a transaction server (1; 101) in the network, said transaction server being adapted to receive and store information related to the use of each applica- tion program (3, 5); - providing an application program interface (7, 9) between each application pro- gram (3, 5) and the transaction server (1; 101), said application program interface (7,9 )being adapted to transfer information regarding the cost of each application, in terms of charging units, from the application program to the transaction server.
2. A method according to claim 1, characterized by transmitting one charging unit for each time unit, the duration of a time unit being individually selectable for each type of service or item
3. A method according to claim 1 or 2, characterized by transmitting a number of charging units for one particular service or item.
4. A method according to any one of claims 1-3, characterized by transmitting the value of a charging unit from the transaction server to the application at the start of a session.
5. A method according to any one of the preceding claims, characterized by speci- fying a contract for each transaction said contract specifying parameters pertaining to the transaction. including identification of the buyer, seller and type of service or item being purchased, and price, and storing said contract in or in connecton to the transaction Server,
6. A method according to any one of the preceding claims, characterized by allow- ing a customer to specify a maximum price for the use of an application. .
7. A method according to claim 6, characterized by including said maximum price in the contract.
8. A method according to any one of the preceding claims, characterized by the steps of - calculating the cost for each session in terms of a valid currency; : - transferring information about the cost to a billing unit (127).
9. A device (1; 101) for enabling charging in a data network, said data network comprising at least one application program (3, 5) the use of which incurs costs for the user, said device comprising - memory means (13; 105) holding information about customers, and cost of using said application program (3, 5); - means (103) for receiving and storing information about the cost to be registered for a customer for a session in which the customer uses an application, said in- formation being received in the form of charging units; - storage means (13; 105) for storing said informaticn. - means (103) for calculating the cost of said session in terms of a valid currency.
10. A device according to claim 9, characterized in that it comprises means (103) for negotiating a contract with a customer and storing the resulting contract in a da- tabase.
11. A device according to claim 9 or 10, characterized in that it comprises storage means (13; 105) for storing customer-specific information and means for adjusung i the price according to this information. e.g. give discounts.

} 5
12. A data network characterized in that it comprises: - at least one device (1; 101) according to any one of the claims 9-11; - an API (7, 9) for transferring information between an application program (5, 7) and said device (1; 101).