CN103548047A

CN103548047A - Terminal authenticity verification

Info

Publication number: CN103548047A
Application number: CN201180068848.2A
Authority: CN
Inventors: 拉尔斯·奥洛夫·康恩葛尔迪
Original assignee: Individual
Current assignee: Individual
Priority date: 2010-12-30
Filing date: 2011-12-30
Publication date: 2014-01-29
Also published as: WO2012090074A3; WO2012090074A2; EP2695121A2; SG194001A1

Abstract

Methods and systems for improving non-bank payment solutions through terminal authenticity verification. One group of improvements uses the secure payment capabilities of the above architecture to implement a bill payment system. Electronic payments from consumers who are not bank customers are now completely secure. A variety of methods are discussed to include non-banking consumers in this payment system. Another group of improvements uses the secure payment capabilities of the above architecture to implement a payroll system which allows non-banking or unbankable employees (or contractors or vendors) to receive electronic payment, and to easily reroute portions of their payments electronically to various destinations. The secure transaction capabilities of the above architecture make this possible.

Description

Terminal authenticity verification

cross reference

The application requires the rights and interests of U.S. Provisional Application 61/428,245 and 61/428,244, and the full content of these applications is incorporated to herein in this mode by reference.

The application also requires U.S. Patent application 2011-0066512, and 61/171,235,61/171,246,61/171,239 and 61/171,244 right of priority, and the full content of these applications is incorporated to herein in this mode by reference.

Technical field

The present invention relates to payment system, relate in particular to the verification method of terminal authenticity.

Note, viewpoint discussed below may reflect some that obtain from the present invention " see ", yet and does not mean that these viewpoints just belong to prior art.

Accompanying drawing explanation

Describe in conjunction with the following drawings the present invention, these accompanying drawings have been shown important example embodiment of the present invention, and its mode is by reference incorporated to instructions, wherein:

Fig. 1 has illustrated to carry out a kind of method of terminal authenticity verification;

Fig. 2 has shown the example of the transaction that an exemplary embodiment of use payment system of the present invention is carried out;

Fig. 3 has shown the exemplary embodiment that off-line credit is implemented;

Fig. 4 has shown an example of the simplification printout being produced by terminal;

Fig. 5 has shown an exemplary embodiment from the terminal interaction of buyer's angle;

Fig. 6 has shown from selling an exemplary embodiment of the terminal interaction of square degree;

Fig. 7 has shown an exemplary interactive embodiment who has for the terminal of bill management and payment object;

Fig. 8 has shown an example data collection embodiment for bill management.

Embodiment

In conjunction with following preferred embodiment (by way of example mode and non-limited way), various instruction of the present invention will be described.The application has described several inventions, and following statement all can not be as limitation of the present invention as claim.

The application discloses being disclosed in improvement, correction and the alternative of the basic security card transaction (SCT) in US 2011-0066512 Al for example.

safety card transaction system and framework

The literature has been described safety card transaction framework, and it provides safer transaction on the equipment of a kind of point of sale (POS).

This framework ultimate principle is behind: supposition POS terminal is broken, and people still can conclude the business as far as possible safely.

This and current PCI-DSS and EMV canonical form shine in pairs: in the latter, dropped into extensive work, so that POS terminal is very safe, thereby the complicacy of POS itself and design difficulty have increased.

By supposition terminal with towards other link of the chain of processing enter, from hardware or software level, be broken, people readily recognize that, cardholder data as much as possible, foundation and encryption request need to be shifted out as much as possible from terminal, move into card itself.

By above measure, a terminal being broken can not cause damage on a large scale, and the card being broken only can affect single holder.

Under the situation of the SCT method of describing in the document, people are utilizing safety method to attempt the traditional network method of renovation, but are creating the new method that adapts to business model.In transaction, can not relate in many ways, not need the exterior gateway of track transactions, there is no the processing outside self network.Transaction only oneself is processed by us.

information flow during transaction

Routine information stream is conventionally as follows:

Trade company's input type of transaction and quantity

Insert client intelligent card

By PIN code, open client intelligent card

Terminal helps trade company and client intelligent card to negotiate session encryption key

Terminal obtains the ID of trade company encrypting from trade company's smart card

The opaque message block of terminal transmits information, this message block also comprises among others Termination ID, the encryption ID of trade company and arrives the transaction code of client intelligent card

Client intelligent card obtains personal account number (PAN) from self

Client intelligent card is used its RSA private key, whole these is encrypted in a piece of news, and this message is passed to terminal.Described message need to have the non-encrypted head with card reference number, thereby data center can come its encryption with the RSA PKI that belongs to this card

Terminal sends a message to data center, to process.

On card, also can carry out some additional functions:

client's card---change PIN code

This function is self-explantory.It allows user to change the PIN code of card.

client's card---regulate off-line credit value

This implements preferably as one group of function upgrading for the treatment of off-line credit.

Off-line credit, for when terminal and the temporary transient off-line of processing enter, allows to buy some commodity at a low price.

Described terminal will be accepted transaction, and the transaction of encryption will be stored in to the super large memory block of trade company's smart card.After terminal is reached the standard grade again, send all these pending transaction, to process.

No matter when off-line trading occurs, and the credit value on client's card all will reduce, and therefore, carry out unlimited off-line trading, and this is impossible.

The table of Fig. 3 has been shown the concept that some are important.

Be stuck in while using in normal presence, the off-line amount that processing enter receives during off-line will be for adjusting credit value next time.

Note that this is different from the stored value card on card.Stored value card means conventionally, and a sum of money must produce in advance from customer account, therefore reduced account balance.Stored value card also means for the non-situation of makeing mistakes, even and if this is different from for when processing enter or communication connection is temporary transient still can carry out the credit function that client trading creates while interrupting.

As in all standings, have the risk of being in arrears with.But by maintenance, adjust credit line, and reduce to pay limit when account balance is lower than the credit of card when online transaction, can make risk keep as far as possible controlled.

trade company's card---super large storage and retrieval

This is a kind of function that allows terminal opaque message block of storage information on trade company's card.It is for two objects:

The encryption transaction of carrying out during storage terminal off-line

Storage sends to trade company, for survey and the out of Memory of follow-up use

This category information is stored on trade company's smart card, is better than in the file system that is stored in terminal self, even if this is because after changing terminal, information can not lost yet.

terminal authenticity verification

This method has solved the problem producing when terminal/device is attempted to distort.

The present invention recognizes user, and equipment (for example, EDC terminal, ATM, information kiosk terminal or similar devices) is real, and the third party who does not have counterfeiting equipment or attempt to collect users personal data replaces.

By the picture that whether checking correctly Shows Picture (or still image of selecting when card is personalized) on equipment or user oneself selects, user can determine that equipment is not replicated machine and replaces.Before user keys in any information to equipment, just show this picture.

Depend on actual performance, picture can remain in Ka Nei or equipment.

Image can be to be suitable for the true real picture that shows on the equipment with low resolution monochrome display, can be maybe one group of Freehandhand-drawing several picture, or the image that utilizes algorithm to produce from data decryption.

Also may store a plurality of images with various resolution and/or color space, to adapt to the performance of current device display.

method 1:

1) by user smart card interventional instrument;

2) equipment obtains image (utilizing the public Partial encryption of Public Key Infrastructure (PKI) key);

3) the private key Partial encryption image of equipment utilization PKI key (armamentarium is shared);

4) equipment shows image on its display.

method 2:

1) by user smart card interventional instrument;

2) equipment obtains reference number (utilizing the public Partial encryption of Public Key Infrastructure key);

3) the private key Partial encryption number of equipment utilization PKI key (armamentarium is shared).This number is the index of institute's memory image array in equipment;

4) equipment shows image on its display.

e bill payment system and method that can compatible non-banking consumer

One group of improvement is to realize bill payment system by the secure payment performance of above-mentioned framework.It guarantees non-banking client's consumer's E-Payment completely.The whole bag of tricks has been discussed, has been comprised the non-banking consumer in this non-payment system.

Upper in nowadays the world (traditional world), most of solutions, service and new method are all the schemes about our habitual mode and content, or the improvement to it.

" identical thinking content while utilizing with a kind of method of establishment, can not solve me problem " (Alberta einstein).

In 2010, e bill paid the expectation really exceeded people (Europe), and this shows, the conventional process from the whole costliness that Creates an Invoice, send, collect money, and the ledger of the indispensable part of enterprise customer---and all will be with no paper at all.

Under most situations, the quantity of related each side (go-between) has increased, and this is because processing enter is converted to e bill by bill file, sends it to ，Er bank of bank assist process record and gathering.

Or as described in the US Patent No. 2010/0042537A1 of another innovation, system can be integrated into another link in chain, to the single and payer of making out a bill, provide service, assisting users obtains the preferential of timely payment.

Till " traditional world " should be understood to so far (2010), the method that people do things and manage.

Build existing scheme, (bankable) client who accepts to serve bank, this class client has bank account, can surf the Net, and this class client right-hand pyramidal yellow top of consumer in figure represents, and this represents only 20% consumer of the whole world.

For " consumer ”He“ company ", the two shares an important aspect,, it must be all bank client, can receive e bill and carry out electronic type payment, interface and the equipment by use with the channel that is subject to bank's assistance, described channel for example has the Internet of Web bank's facility, utilize mobile phone, by mobile scheme, obtain service, and undertaken alternately by high-end devices, and utilizing the application on unstructured supplementary service data (USSD) or equipment, an example is the communication network that uses global system for mobile communications (GSM).

Other channel that obtains this class service can be that integrated speech is replied (IVR) scheme, wherein user dials number after number, proof identity, subsequently by different instruction techniques, what guidance system will do, an example is by using the phone of Dual Tone Multifrequency signal, its use keyboard or only figure disc, or by only using simply his/her sound.

A kind ofly process whole event chain so that the system of client's Pay Bill that non-banking is accepted, emerging market normally, but be not limited to is bill, notice, request, prompting or the hand-written instruction of main inapplicable printing, wherein system is applicable to non-bank, or by existing demand to process or process other mechanism of payment value or the mode that tissue adopts through a kind of better mode.

, it can become a part for hyundai electronics society, and without the system of access the Internet or bank account, and still can stably carry out mutual and process every Day Trading.

, its processing: notifying, verify, remind, feeding back, changing the date responds or take action, pay or settle accounts and related data is returned to client and service provider, or obtains related data from client and service provider.

Save global trees and forest---embodiment in such a way: do not make paper using send bill, notice, statement or those " routinely " send/to the file of any other type of client.

Various embodiment of the present invention will process the storage of the electronic material relevant to transaction, therefore, user can obtain these materials at any time simply and effectively online, and when needed, also any record can be replicated in other medium, for example paper, electronic format, file or at this other constantly available any form.

Various embodiment of the present invention can be used as the total solution of typical charging and/or management system and operates, or the service providing as service provider, or the client who accepts to non-banking provides the entity of solution and operates.

Various embodiment of the present invention can directly or through service provider, the reporting system/service of other any type that can use by Short Message Service (SMS) or client, carrys out authentication of users, and described service can be different different because of place.

Various embodiment of the present invention can process off-line and online transaction when needed simultaneously, and when suitably implementing as the application program in customer equipment, come processing section or all transaction.

Various embodiment of the present invention can have preset time checking notice be sent out simultaneously and be shown to client, or be visual feature to client.

Various embodiment of the present invention also can be integrated in network or EDC/EFT or POS terminal, multi-functional many service terminals or ecommerce machine (eBM) terminal or miscellaneous equipment cluster, for example information screen or information kiosk (kiosks) or miscellaneous equipment, these equipment can show or print the details of notice or request, and these can comprise any following medium with user interactions.

Various embodiment of the present invention also can be integrated into maybe and this Terminal Type can be used together with identification code, stored value card, intelligent chip or any other intelligent apparatus be preferably equipped with and, thereby after showing to user or printing notice, can identify user (consumer), and confirm that user is the correct user of this identification code.

Various embodiment of the present invention also can be integrated in this Terminal Type, thereby when user can use the card of his/her card, stored value card, the card of transferring accounts, credit card or other type or identification code, notice is using the message appearance as printing receipt form.

Various embodiment of the present invention can also be such mode be integrated in this Terminal Type, wherein notice/request can imply or ask response, or client may ask or inform the single or client that makes out a bill by directly key in response on used terminal.

Various embodiment of the present invention also can be used in bill payment and gathering, its provide when client be identified or keyed in bill identification number, while being account or client's number, in this embodiment, bill will pay at special time, client can key in substituting payment data, and formulates schedule for when partly or entirely paying this bill.If applicable, and provide as online immediate service, dispatching system or service provider or processing enter can directly respond at any time, to accept this class request, or state reception or have agreed to these funds.

Various embodiment of the present invention also can be integrated into and use the disposable PIN code of OTP() feature, in any form, wherein, the USSD on equipment, for example mobile phone or other application can be linked up in the 3rd checking level, to strengthen level of security.

Various embodiment of the present invention can be integrated with terminal, with when having identified after user by identification code, card, living things feature recognition data or other any method that this uses constantly or technology, will show or print bill, request or form.For example, if terminal is printer, as shown in Figure 4, it will be called the printout of simplification, and it can or be replaced and use with " full printout " combination of further describing in following table.

the collection of billing datathis first step can be used as its example for the treatment of E-consumer bill of explanation (and being not limited to).Wherein can carry out report data by following listed mode:

1.1 by having the consumer's of online terminal access service broker

1.2 by having the consumer's of off-line terminal access service broker

1.3 by having the consumer's of paper & pen access service broker, keys in data after getting back to office

1.4 report in service broker office by client

1.5 report in any SCT terminal by client

1.6 report through the Internet by client

1.7 report by mobile phone/SMS/USSD by client

1.8 by on-line intelligence flowmeter

1.9 report at information kiosk by client

1.10 or other any equipment or medium, it can comprise the medium of some types that client brings from its position, and described medium can be read at suitable service point, and data can be transmitted in more shielded environment.

new bill noticenew bill notice is and can be used as a kind of prompting, wherein have in the recent period by the bill occurring or event (pay, settle accounts, pay by instalments), owing to lacking basic tool, such as electronic calendar, PC, notebook computer and high-end mobile phone or iPad etc., main target crowd can not enjoy this topic type.Depend on the mechanism presenting the bill, this function can be used different media to arrive consumer, by short message, Email, information kiosk etc.

2.1 pass through SMS (short message service)

2.2 by being printed on the message on any receipt in SCT terminal

2.3 by beating the direct message of view in any other printout of system/terminal, described system/terminal can be accessed same equipment, include but not limited to ATM and print receipt, or it can be conventional cashier's machine printout, as long as system connects and utilized same service." message " of these types or " prompting " can appear on screen, and next-door neighbour has pre-seted cashier's machine system or the POS terminal of information sharing and Presentation Function.

obtaining of bill

3.1 send Email as plain text or PDF

3.2 obtain online as plain text or PDF

3.3 by any SCT terminal, or any other used the terminal/printable equipment of this service to print

3.4 serve and check on mobile phone as USSD

3.5 are printed in information kiosk

3.6 paying times checked/print in service broker, and with compact form, be preferably printed on receipt paper, what wherein print is core

4 date of expiry were adjustedwith the similar request results notice of step 2

Attention: make if paid early, client may receive " paying sky counts " (payday-points), thereby can pay following bill evening, and does not increase expense.

Date of expiry on 4.1 any other terminal/printable equipment of asking to postpone SCT terminals or use this service

Service broker's date of expiry is postponed in 4.2 requests

4.3 requests are incited somebody to action at the date of maturity or the setting date pays automatically---and pre-authorization pays

5 pay collection

5.1 in cash in any SCT terminal or utilize on any other terminal/printable equipment of this service and pay

5.2 use SCT are stuck in any SCT terminal or utilize on any other terminal/printable equipment of this service and pay

5.3 by using any mobile device, using SMS or USSD or other any user interface applicatory, and the instruction of deducting payment from the account of any type, pay, in this embodiment, the pre-paid of so-called stored value card account also can be deducted from disposable cash card

5.4 pay by the as above pre-authorization instruction of 4.3 indications

6 promptings that exceed the time limit

6.1 any methods as described in above step 2 and step 3.1,3.2,3.3,3.4,3.5

7 service terminals

Various embodiments of the present invention can be depending on the user's group designing for it, can dispose in such a way, thereby when client (user) just confirms oneself with card or other medium, display or medium can imply or printout can imply, have one or more bills that will pay, or one or more form to be processed or request.When claiming " display " at this, any media or the medium that refer to and can send signal, to client, show described content, it also comprises for blind person or has the crowd's of particular demands technology.

This new method can solve the problem of using too much paper part when processing subscription, charges for water and electricity bill or other any paper using part communication, notice and request, as paid in this example for planned or delivery service.

This new method is also brought a kind of brand-new mode, and non-banking is accepted and bank unacceptable emerging market consumer (client) nowadays makes full use of electronic bill and pays and settle accounts, and without bank account or internet or assist the mobile phone of similar scheme.

Step described below is sketched the contours of with no paper e bill and the payment system that is formed for non-banking acceptance and the unacceptable consumer of bank, but be not limited to " only ", processes bill payment.

Described system can be used for other any event chain, and in these event chains, " routine " substituted by the with no paper of new method of the present invention or few paper scheme by record, the request of paper part mode.

A ultimate solution designing for everyone in better mode! PayRoll Cards(wage card), for more safely processing wage, for small amount payment and remittance---the online salary management scheme of ultimate simplification, utilize unique empowerment management scheme to improve corporate efficiency.

Time management and work attendance solution, wherein workman can be from shop, its pay sheet of any SCT POS end print or the attendance record of campsite or office.

At agreement deployment phase, the multi-functional POS terminal of SCT is by the company that is provided freely to those and will processes and distribute to workman wage card.

By ViA, initiated, the first scheme that total (All In One) is provided to company, workman and government, has covered workman's demand and the demand of wage being remitted back to the external labor service of family in the world.Everyone affords!

wage service architecture, system and method that the consumer who allows non-banking to accept carries out electronic transaction

Another group is improved and is carried out payment system by the secure payment performance of above-mentioned framework, it allows the employee (or contractor or supplier) that non-banking is accepted or bank does not accept to receive electronic cash, and easily the portions of electronics of its payment is converged to other destination.The Secure Transaction performance of above-mentioned framework makes this possibility that becomes.

combination is suitable for comprising:

wage card (PayRoll Card): SCT card, preferably issue PayRoll card (enabling the smart card of PIN code), to guarantee that workman can easily obtain wage, and without extract cash from ATM.Workman can use its SCT card to carry out the transaction of minimum number, and in any place, comprise and in workman hostel, find SCT POS terminal.

This framework also provides the online salary management to small-sized and medium-sized enterprise (and large enterprises).(the Batch & Upload) solution of can utilizing a kind of batch of simplification to upload, manages normative document, to process thousands of employees' wage.

the wage mandate & support of paying the bill

Make company control a new authorization function for the service of its wage and internal authorization matrix, and utilize SMS to notify, nowadays can be in two-stage or more in multi-stage authentication level, carry out wage mandate and distribute.

Suppose that company will make a salesman prepare and key in all on-line record, make another higher level manager's approval or sign the online wage record of typing.

Nowadays, this assistance has not existed, and SCT, by making instruction always co-pending, notes down and ratify wage until second people verified, has solved this problem.

Addressable its SCT accounts information of the window banging personnel of workman & government (Workers & Government Window Workers), and manage its account details by the Internet or in the information kiosk for preparing in the future, or pass through mobile phone, or by indication SCT mechanism assists, assist workman to adjust or upgrade any information.

Government can monitor SCT scheme like a cork, and wherein, government can see that wage pays on time, and can obtain required report within the rule formulated at government and guide.

In addition, SCT keeper can also provide statistics widely, and former government can not get these.

the multi-functional POS terminal of SCT

Nowadays the multi-functional POS terminal of SCT can be seen in workman hostel and small-sized trade company, and workman spends the time after work there, and can use there SCT card rather than cash.

In addition, they can also print payment receipt, attendance report, inquiry into balance, remittance receipt or other any required service from any SCT POS terminal.

time management and work attendance option A MP.AMp.Amp service

Researched and developed time management and work attendance scheme, for the small-sized trade company for having a small amount of employee, this trade company has one or more SCT POS terminals in its shop/office.

Each employee (salesman) has its oneself SCT card, and it inserts SCT POS terminal by this card; Each salesman is registered as in work subsequently.

If left with any reason, this event is by accurate recording, and when calculating wage, this event comes in handy.

electronic meal (eMeal) solution in dining room, workman hostel

ViA eMeal scheme is a kind of advanced method of exempting meal coupon, and therefore it save money, and makes whole process faster, more economical effectively, has also simplified the required operation of workman.

Due to the frequency of using, we advise using an independent meal card, for example simple plastic clip based on bar code.

Advantageously, the parts in each embodiment of this system comprise following combination and time combination:

The multi-functional POS terminal of SCT

Through the online wage solution of POS &

Work attendance time management system

Time singles print and report

Pay sheet

Micro-statement-account

Remittance state

Card activates

Change PIN code

Upgrade and verify SMS number

Wage calculates Q4

Mobile phone is supplemented with money

Public utilities is paid the fees

The cash inflow of highest level/card/moon

The highest monthly cash outflow of 4 times of AED100/ of highest level

Bill statement pays trade company

Card to card transaction

Charitable donation

Donation receipt & follows the trail of

Remittance is gone home

Petty cash is delivered function

According to some, but need not be whole disclosed embodiments, provide: a kind of for implementing the method for safe value transaction, comprising: allow user that the first smart card is engaged with terminal; Carry out preliminary Tripwire step, the mutual contribution data part of wherein said the first smart card and described terminal, to be mutually created in the image showing to user on display, described display connects at least a portion of described terminal; And if described user selects to continue after checking described image, allow described the first card start to carry out via described terminal, with the secure data exchange of the second smart card; Wherein, described safe exchanges data relates to the exchange of value.

fixed case and variation

As the skilled person will recognize, the new ideas that the present invention describes can be revised, and different with various application, and correspondingly, the scope of authorisation body is not subject to the restriction of particular exemplary instruction given herein.It is intended to comprise whole this alternative, fixed case and variation, and these all fall within the scope of the appended claims.

For example, STS Technology On Data Encryption can combine with technology of the present invention.Secure Transaction string (Secure Transaction String, STS) concept is described to some extent in US2007-0033149, and its full content is incorporated to by reference at this.This security architecture alleviated that current network ZhongPOS exchange relates in many ways between share the problem of too much information.In transaction, to obtaining in the way of credit card issuer mandate, related to several gateways, processed & fraud detection center.By cutting apart the data that will be sent to several, each piece is used independent secret key encryption, can reduce the possible point of attack in the amount of shared information and chain.For example, the first link in chain need be known enough card numbers, to derive, where all the other information is sent to, and described all the other information are encrypted other key that can not obtain by the first link.If this chain is broken, or vary from a rule storage whole this locality do not encrypt transaction, still encrypt other piece.

Another kind of possibility is that card can be the contactless device that uses any wave point, for example radio frequency identification (RFID) or near-field communication (NFC).

Another kind of possibility is that " card " do not need to have credit card or that familiar form factor of smart card.On the contrary, its to be also configured to be " data key " or falling decoration or ring or other etc.

In instructions of the present invention, not having content to be read as is that the concrete element of hint, step or function are the fundamentals that must be included within the scope of claim, and scope of the present invention is only received the restriction of claim.In addition, do not have claim to be intended to call the 6th section of the 112nd article of 35 USC, unless statement " referring to " (means for) heel has participle.

Claim should be understood comprehensively as far as possible, there is no that main body is recalled wittingly, an implication reduction or abandon.

Claims

1. a method of carrying out safe value transaction, comprising:

Allow user that the first smart card is engaged with terminal;

Carry out preliminary Tripwire step, the mutual contribution data part of wherein said the first smart card and described terminal, mutually to produce the image showing to user on display, described display is connected with at least some parts of described terminal; And

If described user selects to continue after watching described image, allow described the first card start to carry out via described terminal, with the secure data exchange of the second smart card;

Wherein, described safe exchanges data relates to exchange of value.

2. method according to claim 1, is characterized in that: described exchange relates to the payment funding with reference to specific bank network.