EP1371032A2 - Verfahren und system für erneuerung von identifikationsdaten in einer tragbaren transaktionseinrichtung - Google Patents

Verfahren und system für erneuerung von identifikationsdaten in einer tragbaren transaktionseinrichtung

Info

Publication number
EP1371032A2
EP1371032A2 EP02702617A EP02702617A EP1371032A2 EP 1371032 A2 EP1371032 A2 EP 1371032A2 EP 02702617 A EP02702617 A EP 02702617A EP 02702617 A EP02702617 A EP 02702617A EP 1371032 A2 EP1371032 A2 EP 1371032A2
Authority
EP
European Patent Office
Prior art keywords
dip
edi
transaction
valid
active
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP02702617A
Other languages
English (en)
French (fr)
Inventor
Joel Gaillard
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
G Holdings Ltd
Original Assignee
G Holdings Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from PCT/IB2001/000940 external-priority patent/WO2002075674A2/fr
Application filed by G Holdings Ltd filed Critical G Holdings Ltd
Publication of EP1371032A2 publication Critical patent/EP1371032A2/de
Withdrawn legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F7/00Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/341Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/355Personalisation of cards for use
    • G06Q20/3552Downloading or loading of personalisation data
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • G06Q20/4014Identity check for transactions
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • G06Q20/4014Identity check for transactions
    • G06Q20/40145Biometric identity checks
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00Individual registration on entry or exit
    • G07C9/20Individual registration on entry or exit involving the use of a pass
    • G07C9/22Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder
    • G07C9/25Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder using biometric data, e.g. fingerprints, iris scans or voice recognition
    • G07C9/257Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder using biometric data, e.g. fingerprints, iris scans or voice recognition electronically

Definitions

  • the present invention relates to portable identification devices, and more particularly to a system and method for renewing identification data on a portable identification device.
  • Portable identification devices such as smart cards, credit cards, debit cards, electronic wallets, encrypted access keys, or the like are well known and widely used. If we take the example of the DIP that is the credit card, this card includes identification data in the form of a card number which includes a certain number of digits. An expiration date and also usually associated to a credit card. Other data may also be included on the card, for example the name of the card holder. However, the credit card number
  • the card number represents the data which is used for identification purposes of the account of the card holder in the financial institution which issued the card, by example the credit company in the case of a credit card.
  • These identification data are therefore used to apply financial transactions carried out using the credit card to the account associated with the credit card.
  • the card number is printed or stamped directly on the card material, for example by means of a press which will deform the card made of plastic so that the card number is embossed on the surface Map.
  • the identification data of the card number cannot be changed in any way, except by replacing the card with a new card with a new number.
  • identification data which cannot be modified on the DIP will be identified by the expression "permanent identification data”.
  • a credit card can be used to purchase a product or service by telephone, by verbally transmitting to a product or service provider the number and expiration date of the credit card. Sales of products or services from person to person can also occur during which the permanent identification data will be indicated to the supplier of product or service. Sales through a computer connected to a network such as the Internet can also be made, during which the identification data are transmitted by this computer network. In all these cases, the credit card itself is not
  • the sale of the product or service can occur if the permanent identification data of the card are known and if the account associated with this identification data is valid. If a third party becomes aware of the permanent identification data of another person's credit card, then that third party could carry out a transaction based on this knowledge, the debit linked to the transaction then being applied to the account of the card holder without his authorization.
  • a third party may become aware of the permanent identification data of a card when using this card: for example, if this data is transmitted by telephone, then the service provider's agent may keep the data of permanent identification of the card for subsequent fraudulent use; if this data is transmitted over the Internet, a computer system could allow a third party to intercept the transmission of data for subsequent fraudulent use; or if these data are transmitted in a conventional manner via an interface machine located at a product or service supplier, it often happens that the permanent identification data of the card appear on the copy of the receipt which is kept by the product or service supplier, and a person having access to these receipts could then keep the permanent identification data of the card for the purpose of subsequent fraudulent use.
  • this DIP is charged with a certain amount of money by means of an appropriate interface machine, and this amount of money is subsequently considered to be housed in the electronic wallet itself. -even.
  • the amount of money associated with the transaction is transferred to the another suitable interface machine, from the electronic wallet to a receiving account of the product or service provider.
  • the permanent identification data associated with it is useful in particular when loading money into the electronic wallet. Indeed, one must then have access to an account number of a financial company, and permanent identification data recorded in the electronic wallet are used to link the electronic wallet to the account of the holder of the electronic wallet in the financial company. It would therefore be possible for a third party to gain fraudulent access to the account of a person who holds an electronic wallet if another electronic wallet is programmed using the permanent identification data of the other person's electronic wallet for allow access to that other person's account.
  • the DIP can also be an encoded access key which allows access to the bearer of the DIP beyond any portal, real or virtual.
  • This access key is provided with identification data that identifies the DIP, and when access beyond a portal is desired, the identification data is verified and access is granted if the identification are valid.
  • the present invention relates to a method for the renewal of an active identification data element (EDI) on a portable identification device (DIP), said DIP having at least a first EDI having initial states active and valid. on said DIP and a second EDI with initial states inactive and valid on said DIP, said first and second EDI being saved at a transaction institution and having a valid initial state at said transaction institution, all EDI having a valid state at said transaction institution making it possible to identify and apply data from transaction to an account associated with said DIP and located
  • EDI active identification data element
  • said EDI having an active state on said DIP being used to complete a transaction, said method comprising the following steps:
  • the states of said first EDI are changed from valid to invalid and from active to inactive on said DIP; b) the state of said second EDI is changed from inactive to active on said DIP; and c) the state of said first EDI is changed from valid to invalid at said transaction institution.
  • the present invention also relates to a method for the renewal of an EDI on a DIP within the framework of an electronic transaction which is carried out by means of said DIP, said DIP being associated with an account located at a transaction institution, said transaction institution comprising a bank of valid EDIs identifying said account, said DIP also comprising said bank of valid EDIs, said method comprising the following steps:
  • an EDI called an active EDI among said valid EDIs of said DIP is transmitted to said transaction institution; b) identifying said transaction institution with said account associated with said DIP by identifying said valid EDI with said transaction institution corresponding to said active EDI; c) applying transaction data representative of said transaction to said account associated with said DIP; d) the state of said active EDI of said DIP and of said EDI corresponding to said active EDI at said transaction institution is changed from valid to invalid, so that this EDI can no longer be used to identify said account corresponding to said DIP.
  • said active EDI will be renewed on said DIP when one or more of the following conditions are met:
  • said active EDI was transmitted by said DIP; - a transaction has been completed using said active EDI, and a transaction confirmation message has been issued by said transaction institution to said DIP; a certain period of time has passed since the transmission of the active IDE; - a predetermined number of transactions have been completed; and the renewal of the active EDI was manually controlled by said DIP.
  • said bank of valid EDIs can be bailed out on said DIP and at said transaction institution.
  • said DIP also has permanent identification data in addition to said EDI.
  • the EDIs which have become invalid are kept in memory on said DIP and at said transaction institution, for future reference, as well as the transaction data which have been applied to said account associated with said DIP thanks to each EDI which has become invalid.
  • a single DIP can be used to identify a first and a second separate account.
  • each of said first and second accounts are located in separate financial institutions.
  • said bank of valid EDIs on said DIP is divided into first and second portions making it possible to identify said first and second accounts, respectively.
  • the present invention also relates to a system for the renewal of an active EDI on a DIP, said DIP having at least a first EDI having initial states active and valid on said DIP and a second EDI having initial states inactive and valid on said DIP DIP, said first and second EDI being saved in a resident memory of a transaction institution and having a valid initial state at said transaction institution, all EDI having a valid state at said transaction institution making it possible to identify and make applying transaction data to an account associated with said DIP and located in said resident memory of said transaction institution, said EDI having an active state on said DIP being used to complete a transaction, said system comprising:
  • the present invention also relates to a system for the renewal of an EDI on a DIP within the framework of an electronic transaction which is carried out by means of said DIP, said DIP being associated with an account located at a transaction institution, said transaction institution comprising a bank of valid EDI identifying said account, said DIP also comprising said bank of valid EDI, said system comprising:
  • the invention also relates to a DIP comprising:
  • an electronic chip having a microprocessor and a memory device for reading and writing; - a communication device connected to said electronic chip and making it possible to send and receive data; a user interface connected to said electronic chip; and an EDI bank recorded on said memory device and comprising at least two valid EDIs making it possible to identify an account located in a transaction institution.
  • the invention also relates to a method for renewing an active EDI on a DIP, said DIP having at least a first EDI having active and valid initial states and a second EDI having initial states inactive and valid, all EDIs having a valid state on said DIP being intended to identify and have transaction data applied to an account associated with said DIP which is not located on said DIP, said EDI having an active state on said DIP being used to accomplish a transaction, said method comprising the following steps:
  • the present invention also relates to a system for the renewal of an active EDI on a DIP, said DIP having at least a first EDI having initial states active and valid and a second EDI having initial states inactive and valid, all EDI having a valid state on said DIP being intended to identify and apply electronic transaction data to an account associated with said DIP which is not located on said DIP, said EDI having an active state on said DIP being used to accomplish a transaction, said system comprising:
  • FIG. 1 schematically illustrates a portable transaction device according to the present invention, as well as its communication link with an interface terminal; and FIGS. 2a and 2b schematically and sequentially show the transfer of information and the state of the identification data elements in a portable transaction system according to the present invention
  • FIG. 1 shows a portable identification device (DIP) 10 which can be a smart card such as a credit card and / or a debit card, an electronic wallet, an access key provided with data encoded or unencoded access, or any other suitable portable identification device enabling an account and / or holder associated with this PID 10 to be identified.
  • An account associated with PID 10 may be an account located in an electronic memory resident of an institution financial, or more generally an account located in an institution responsible for verifying the identity of the holder of PID 10, in order to allow or refuse that an electronic transaction alters or not parameters of said electronic account according to predetermined conditions.
  • the transaction can be a financial transaction or not.
  • a transaction may simply be a right to enter beyond any portal, as detailed below.
  • the institution responsible for carrying out such a verification of the identity of the holder of DIP 10 will be called, in the present specification, the transaction institution.
  • the DIP 10 comprises an electronic chip 12 connected to an appropriate user interface, for example a display screen 14 and a keyboard 16.
  • the chip 12 comprises a microprocessor and a memory memory unit for reading and writing.
  • the writing of data to the memory member of the chip 12 is preferably governed by predetermined security conditions.
  • the memory member of the chip 12 is a read-only memory member.
  • the DIP 10 includes a communication device 18 connected to the chip 12 and allowing the DIP 10 to communicate information to an interface terminal 20 having a complementary communication device 22.
  • the communication device 18 can be an electromagnetic transmitter, in particular of infrared waves or radio waves carrying data, while the communication device 22 can be a receiver of infrared waves or radio waves carrying data.
  • the communication devices 18 and 22 can be any type of communication devices with or without contact allowing the DIP 10 to communicate temporarily with the interface terminal 20 and to transmit data to the interface terminal 20. According to one embodiment advantageous of the invention, the communication devices 18, 22 also allow the information to be communicated in the opposite direction, that is to say from the interface terminal 20 to the DIP 10.
  • the DIP 10 is used in a transaction system as illustrated in Figures 2a and 2b.
  • the DIP 10 can communicate information to an interface terminal 20, the latter being capable of communicating with a transaction institution 24 so as to exchange information with it.
  • the interface terminal 20 can be a point of sale interface terminal or a portable interface machine integrated into a cell phone
  • the transaction institution 24 can be a financial institution such as a bank.
  • DIP 10 has a bank of identification data elements
  • EDI identification data elements
  • All EDI on the DIP 10 have a state that is either active or inactive, and also that is either valid or invalid.
  • the active state of an EDI means that this EDI will be the next to be used during a transaction made using DIP 10. Thus, only one active EDI exists on a DIP 10 at any given time, and all the others EDI have an inactive state.
  • the valid status of an EDI on DIP 10 means that this EDI, which is associated with the corresponding account of the transaction institution, identifies it so as to allow a transaction to affect one or more parameters of this account. by means of DIP 10. Thus, one can in turn use all valid EDIs as active EDI to identify the account associated with DIP 10.
  • the different EDIs can be displayed on the display screen 14 according to their respective states.
  • DIP 10 has a number of IDEs that have a valid state, namely (EDI) i, (EDI) i + 1, (EDI) i + 2, etc.
  • the single EDI which has an active condition, namely (EDI) i, is highlighted by the arrow in Figure 2a.
  • the transaction institution 24 also has an EDI bank 28 which includes a number of EDIs which are the same as those found on the DIP 10, namely (EDI) i, (EDI) i + l, (EDI) i + 2, etc. At any given time, all EDIs that have a valid state in DIP 10 also have a valid state at transaction institution 24. All EDIs that have a valid state transaction institution 24 are associated with an account corresponding to DIP 10 and identify this account.
  • FIGS. 2a and 2b sequentially illustrate an exemplary embodiment of the present invention in the context of a transaction which it is desired to accomplish by means of the DIP 10 and with a transaction institution 24.
  • the interface terminal 20 is provided with transaction data as appropriate.
  • the transaction data can be, for example, the price of the good or service to be purchased, and the way of transmitting this transaction data can then be a computerized cash register (not shown) which communicates electronically with the interface terminal 20 to provide this transaction data, or the interface terminal 20 may itself be provided with a keyboard (not shown) allowing the entry of transaction data.
  • a communication link is established between the DIP 10 and the interface terminal 20 appropriately, and the (EDI) i which has a valid and active state on the DIP 10 is transmitted from the DIP 10 to the interface terminal 20.
  • the (EDI) i and the transaction data are then transmitted to the transaction institution 24, where the account associated with the DIP 10 is identified and located using the (EDI) i . If the EDI which is provided by the interface terminal 20 to the transaction institution 24 has a valid state to the transaction institution 24, which is the case of the (EDI) i in the example illustrated FIG. 2a, then the transaction data will modify one or more parameters of the account associated with the DIP 10 and identified by means of the (EDI) i.
  • the transaction data is the price of a good or service that the holder of PID 10 wishes to buy
  • an amount corresponding to this price is debited from the account of the transaction institution 24 which is associated with PID 10
  • This amount of money will then be transmitted to the seller of the product or service by the transaction institution 24 as it is known to do so.
  • a transaction confirmation message will be generated and sent by the transaction institution 24 to the interface terminal 20, to conclude the transaction. It is understood that this transaction confirmation message will only be sent to the interface terminal 20 if predetermined conditions of the transaction institution are respected, where applicable, for example if the monetary value of the transaction is less than the credit available in the account associated with the DIP 10. According to one embodiment of the invention, the transaction confirmation message can also be routed from the interface terminal to DIP 10.
  • the state of the (EDI) i which was used to identify the account associated with DIP 10 will be changed from valid to invalid at transaction institution 24. Since only EDI valid can be used to identify and allow transaction data to assign parameters to the account associated with DIP 10, the (EDI) i which is now invalid can no longer be used to identify or allow transaction data d 'be applied to the account associated with DIP 10, as suggested by the fact that the (EDI) i is put in square brackets in Figure 2b.
  • the DIP 10 will also modify the state of the (EDI) i so that it becomes invalid and inactive on the DIP 10, and will modify the state of the next valid EDI among the bank of EDI 26 on the DIP 10, namely the (EDI) i + l, so that it becomes active.
  • the next EDI that will be used by DIP 10 to identify and apply transaction data to the account associated with DIP 10 will be the (EDI) i + l. Since the (EDI) i + 1 is always valid at the transaction institution 24, this new EDI can therefore be used successfully as long as the other conditions specific to the transaction institution 24 are met, for example that the credit limit is observed, in the case of a credit institution. We can thus consider that the EDI has been renewed on the DIP 10.
  • the active EDI can be renewed, from (EDI) i to (EDI) i + 1, when one or more predetermined conditions, which are programmed on the chip 12, are respected.
  • the active EDI can be renewed on DIP 10 when one or more of the following conditions are met: the active EDI was transmitted by the DIP 10; a transaction has been completed.
  • an active EDI on the DIP 10 which becomes inactive also automatically becomes invalid. This prevents an EDI from being used twice, and is thus recognized as a valid EDI by the transaction institution.
  • an EDI valid at financial institution 24 will see its state become invalid only under the same conditions which would modify the state of this same EDI from valid to invalid on the DIP 10, and vice versa .
  • an EDI automatically becomes invalid on DIP 10 as a result of a single use to complete a transaction as an active EDI, then that same EDI would automatically become invalid at transaction institution 24 after a transaction was completed in the account associated with the IDE which was used to identify the account associated with DIP 10.
  • each EDI is used only once and automatically becomes invalid after this single use, so as to prevent fraud based on knowledge of the identification data of the DIP 10.
  • all the EDIs on the DIP 10 are downloaded onto the chip 12 by the transaction institution 24 in an appropriate manner, before the DIP 10 is returned to its owner.
  • DIP 10 could then request that a new DIP 10 be given to it by the transaction institution 24. It is envisaged, according to this embodiment, that a warning message is sent by the DIP 10, for example by means of the 'display screen
  • a new bank of valid EDIs could be downloaded to the same DIP 10, in replacement of the invalid EDIs, by means of an appropriate interface machine, and as long as the communication device 18 of the DIP 10 allows reception data in addition to data transmission.
  • the communication device 18 of the DIP 10 allows information to be downloaded to the chip 12 by means of an appropriate interface machine, for example the interface terminal 20; and the DIP 10 has a small maximum number of EDIs in memory on its chip 12.
  • the DIP 10 has a small maximum number of EDIs in memory on its chip 12.
  • a signal sent automatically by the transaction institution and / or by DIP 10 itself could trigger the reload of the EDI bank of DIP 10 and the EDI bank of transaction institution 24 associated with the account of DIP 10.
  • the DIP 10 has permanent identification data in addition to the temporary EDIs which are used in combination with the EDIs to identify the account of the DIP 10, without however making it possible to apply transaction data to it.
  • this permanent identification data could be printed on the card in addition to being saved on the chip 12, and could allow the owner of the IDE to obtain various information concerning his account at the transaction institution, for example the remaining amount of credit usable in the case of an account housed at a credit institution.
  • the only permanent identification data would not allow a transaction to be applied to the account associated with DIP 10.
  • the DIP 10 does not include an integrated user interface 14, 16. According to another embodiment of the invention, the DIP 10 does not include an integrated user interface 14, 16, but the DIP 10 could be put into communication with an external user interface which is separate from the DIP 10, for example a portable interface machine such as an interface machine integrated into a cellular telephone.
  • a portable interface machine such as an interface machine integrated into a cellular telephone.
  • the obsolete EDIs that is to say those which have become invalid, are kept in memory on the DIP 10 and in databases of the transaction institution 24, for future reference, as well as the transaction data that was applied to the account associated with DIP 10 through each obsolete EDI, although these obsolete EDI could not be used for identify or apply transaction data to the DIP 10 account.
  • a single DIP 10 can be used to access more than one account located in one or more transaction institutions.
  • the DIP 10 could have one or more lists of EDIs used to identify the different accounts associated with the DIP 10: either that a single list would be used to access several different accounts, or then each list of a group lists would be used to access an account corresponding to this list, each account therefore having a separate list associated with it.
  • the expression "transaction institution” is taken in the broad sense.
  • the transaction which is carried out can be a financial one or not.
  • the financial institution can be a credit company, a bank, an institution managing access codes allowing access to areas protected by portals requiring an access key, etc.
  • the account which will be affected by a transaction is not managed by the same institution as that which manages the questions related to the verification of an EDI for the purposes of authorization of a transaction : we could thus have a first EDI verification institution and a second account management institution separate from the verification institution.
  • the term "transaction institution” should be understood to include the verification institution and the account management institution, even if these two institutions are in fact separate.
  • the EDIs located in the EDI bank 28 at the transaction institution 24 are not decked out with an active / inactive state, but only from a valid / invalid state. This allows the holder of DIP 10 to carry out transactions which may not be immediately transmitted to the transaction institution, for example offline financial transactions where the seller of product or service takes note of the active EDI of DIP 10 , but does not contact the financial institution immediately to report that the transaction has taken place.
  • any valid EDI at the financial institution could then be used to identify the account associated with DIP 10 and apply transaction data to it, several sequential transactions could be carried out by the holder of DIP 10 with a series of valid EDIs without the information concerning these transactions being immediately transmitted to the transaction institution. Subsequently, when the different transactions are presented to the transaction institution to assign one or more parameters of the account associated with DIP 10, in order or out of order, these will be accepted since presented in association with EDI valid.
  • only the active IDE in the IDE list can be used to identify an account and make it apply transaction data.
  • transaction institution 24 would need to assign an active / inactive state to each EDI in the EDI list 28 located at transaction institution 24, in addition to a valid / invalid state.
  • the IDE which has an active state at transaction institution 24 would initially be the same as that which has an active state on DIP 10, and would then be renewed under the same conditions as the active IDE on DIP 10 Alternatively, only a small number of valid EDIs would be considered active at the transaction institution 24.
  • all the EDIs valid on the DIP 10 are saved on the memory of the DIP 10, and all the EDIs which become invalid are in fact erased from the memory of the DIP 10. Similarly, all the EDIs valid at transaction institution 24 are saved in memory, and all EDIs that become invalid are actually deleted from the memory of transaction institution 24.
  • the active EDI can be chosen at random from the EDI valid at the time the transaction is carried out, or a specific order can be followed, in which case the active EDI is not necessarily affixed with a specific condition in the memory of chip 12 of DIP 10; but it is understood that an EDI is considered active when it is transmitted by DIP 10 for the purpose of identifying the account corresponding to DIP 10.
  • any form of securing of the transactions for example by coding or encryption of the data exchanged, and or any form of securing the use of the DIP 10, for example by adding on the DIP 10 a biometric reader which will compare biometric data read with prerecorded biometric data representative of a biometric parameter of the holder of the DIP 10.
  • a biometric reader could be provided on the DIP 10, and each use of the DIP 10 should be validated beforehand by the reading by this fingerprint reader of the fingerprint of the holder of the DIP 10.
EP02702617A 2001-03-16 2002-03-05 Verfahren und system für erneuerung von identifikationsdaten in einer tragbaren transaktionseinrichtung Withdrawn EP1371032A2 (de)

Applications Claiming Priority (7)

Application Number Priority Date Filing Date Title
US27611901P 2001-03-16 2001-03-16
US276119P 2001-03-16
WOPCT/IB01/00940 2001-05-28
PCT/IB2001/000940 WO2002075674A2 (fr) 2001-03-16 2001-05-28 Systeme et methode de renouvellement de donnees d'identification sur un dispositif de transaction portatif
US29444801P 2001-05-30 2001-05-30
US294448P 2001-05-30
PCT/IB2002/000652 WO2002075675A2 (fr) 2001-03-16 2002-03-05 Système et méthode de renouvellement de données d'identification sur un dispositif d'identification portatif

Publications (1)

Publication Number Publication Date
EP1371032A2 true EP1371032A2 (de) 2003-12-17

Family

ID=26957785

Family Applications (1)

Application Number Title Priority Date Filing Date
EP02702617A Withdrawn EP1371032A2 (de) 2001-03-16 2002-03-05 Verfahren und system für erneuerung von identifikationsdaten in einer tragbaren transaktionseinrichtung

Country Status (8)

Country Link
US (1) US20040035924A1 (de)
EP (1) EP1371032A2 (de)
CN (1) CN1527991A (de)
AU (1) AU2002236137A1 (de)
BR (1) BR0207533A (de)
CA (1) CA2434196A1 (de)
MX (1) MXPA03007781A (de)
WO (1) WO2002075675A2 (de)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7992792B2 (en) * 2006-12-18 2011-08-09 Fundamo (Proprietary) Limited Portable payment device
EP3729385B1 (de) * 2017-12-20 2022-06-22 Inventio AG Zugangskontrollsystem mit funk-authentifizierung und kennworterfassung

Family Cites Families (30)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4658147A (en) * 1985-04-03 1987-04-14 Baird Corporation Remote optically readable system and method
JPS62179994A (ja) * 1986-02-04 1987-08-07 カシオ計算機株式会社 電子カ−ド
US4916296A (en) * 1987-10-29 1990-04-10 Jerry R. Iggulden Light modulating smart card
EP0435438B1 (de) * 1989-12-28 1998-03-04 Gunze Limited Eingabesystem mit berührungsempfindlicher Widerstandsfilmtafel
JP2822624B2 (ja) * 1990-07-03 1998-11-11 三菱電機株式会社 非接触icカード
IL96764A (en) * 1990-12-23 1994-07-31 Zuta Marc Smart card integrated in a wristwatch and having logic unit controlling the automatic identification process and the data transfer
US5317137A (en) * 1992-02-24 1994-05-31 Comproducts Inc. Magnetic debit card reader fraudulent use prevention
US5268963A (en) * 1992-06-09 1993-12-07 Audio Digital Imaging Inc. System for encoding personalized identification for storage on memory storage devices
GB2278085B (en) * 1993-05-21 1997-06-04 Motorola Inc Signal coupler
US5880769A (en) * 1994-01-19 1999-03-09 Smarttv Co. Interactive smart card system for integrating the provision of remote and local services
JP3571383B2 (ja) * 1994-10-19 2004-09-29 株式会社日立製作所 Icカード、icカードリードライト装置及び電子財布システム
JP3343771B2 (ja) * 1995-03-13 2002-11-11 株式会社東芝 電子決済装置、および、電子決済判定方法
US5689100A (en) * 1995-03-21 1997-11-18 Martiz, Inc. Debit card system and method for implementing incentive award program
JPH0962882A (ja) * 1995-08-30 1997-03-07 Matsushita Electric Ind Co Ltd チケット発行、利用システム
EP0775990A3 (de) * 1995-11-21 2000-08-23 Hitachi, Ltd. Chipkartenterminal für automatisierte Transaktionen und dafür gebrauchte Chipkarte
US5777903A (en) * 1996-01-22 1998-07-07 Motorola, Inc. Solar cell powered smart card with integrated display and interface keypad
US5777305A (en) * 1996-01-24 1998-07-07 Incomm Package assembly and method for activating prepaid debit cards
CA2197930A1 (en) * 1996-02-29 1997-08-29 Masayuki Ohki Electronic wallet and method for operating the same
US6178409B1 (en) * 1996-06-17 2001-01-23 Verifone, Inc. System, method and article of manufacture for multiple-entry point virtual point of sale architecture
US5770843A (en) * 1996-07-02 1998-06-23 Ncr Corporation Access card for multiple accounts
US5867795A (en) * 1996-08-23 1999-02-02 Motorola, Inc. Portable electronic device with transceiver and visual image display
JPH1079733A (ja) * 1996-09-03 1998-03-24 Kokusai Denshin Denwa Co Ltd <Kdd> Icカードを用いた認証方法及び認証システム
US5789733A (en) * 1996-09-20 1998-08-04 Motorola, Inc. Smart card with contactless optical interface
US5913203A (en) * 1996-10-03 1999-06-15 Jaesent Inc. System and method for pseudo cash transactions
JPH10143570A (ja) * 1996-11-15 1998-05-29 Susumu Miyake 信用供与カードの個人情報の電子的受渡方法、及びそのためのミニicカード、アダプタカード、端末アダプタ、伝票発行機、携帯端末
US6070794A (en) * 1997-04-18 2000-06-06 Fujitsu Limited Card unit processing apparatus
US6636833B1 (en) * 1998-03-25 2003-10-21 Obis Patents Ltd. Credit card system and method
US6108789A (en) * 1998-05-05 2000-08-22 Liberate Technologies Mechanism for users with internet service provider smart cards to roam among geographically disparate authorized network computer client devices without mediation of a central authority
US6473500B1 (en) * 1998-10-28 2002-10-29 Mastercard International Incorporated System and method for using a prepaid card
EP1028401A3 (de) * 1999-02-12 2003-06-25 Citibank, N.A. Verfahren und System zum Durchführen einer Bankkartentransaktion

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO02075675A2 *

Also Published As

Publication number Publication date
CN1527991A (zh) 2004-09-08
BR0207533A (pt) 2004-03-09
US20040035924A1 (en) 2004-02-26
MXPA03007781A (es) 2003-12-08
AU2002236137A1 (en) 2002-10-03
WO2002075675A3 (fr) 2003-02-13
CA2434196A1 (fr) 2002-09-26
WO2002075675A2 (fr) 2002-09-26

Similar Documents

Publication Publication Date Title
EP0818763B1 (de) Verfahren zum Kontrollieren von unabhängigen gesicherten Transaktionen mit einer einzigen physischen Vorrichtung
CA2407549C (fr) Systeme de transaction avec dispositif personnel portatif d&#39;identification et de controle de transaction
CN1965328A (zh) 使用多个pin来通过多个分发渠道进行兑换
EP3533014A2 (de) Verfahren und system zum automatischen empfangen und/oder senden von informationen im zusammenhang mit transaktionen
WO2018154082A1 (fr) Système et procédé de traitement d&#39;une transaction bancaire
EP1164529A1 (de) System und verfahren zur ausgabe von kupons
FR3025915A1 (fr) Procedes et dispositifs de gestion de transactions composites
EP1371032A2 (de) Verfahren und system für erneuerung von identifikationsdaten in einer tragbaren transaktionseinrichtung
EP1323140B1 (de) Verfahren zum liefern von identifikationsdaten einer bezahlkarte an einen anwender
FR2750273A1 (fr) Procede de rechargement de cartes prepayees virtuelles
FR2754082A1 (fr) Systeme et procede de fidelisation d&#39;une clientele, et terminal correspondant
EP1354288B1 (de) Verfahren mit elektronischen bankdaten zur durchführung sicherer transaktionen
EP2724305B1 (de) Verfahren für dematerialisierte transaktionen
EP2800072A2 (de) Verfahren zur Ausgabe über einen Automaten von Mobiltelefonkarten (SIM-Karten) mit Prepaid- oder Postpaid-Abonnement
WO2002075674A2 (fr) Systeme et methode de renouvellement de donnees d&#39;identification sur un dispositif de transaction portatif
EP1198789B1 (de) Gesichertes bezahlungssystem zur auswahl eines beliebigen betrages
EP1048011A1 (de) Verfahren zur durchführung finanzieller transaktionen, dazugehöriges system und elektronische geldbörse
EP0979495B1 (de) Verfahren zum beglaubugen einer gesamtsumme in einem leser
KR20020057776A (ko) 온라인 복권판매 시스템
FR2828966A1 (fr) Procede pour communiquer de facon securisee des donnees d&#39;identification d&#39;une carte de paiement
FR2806185A1 (fr) Procede securise de transaction entre un acheteur et un vendeur
FR2806192A1 (fr) Procede et moyen de paiement sur internet
BE1014305A7 (fr) Carte de paiement universelle prepayee, dotee d&#39;un pouvoir d&#39;achat determine a l&#39;avance, munie d&#39;un code unique masque, destinee a effectuer des achats, des paiements et/ou des transferts de fonds a distance, via tout moyen de telecommunication.
BE899285A (fr) Dispositif portatif pour la memorisation et le transfert de donnees.
FR2806191A1 (fr) Procede et moyen de paiement sur internet

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20030905

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE TR

AX Request for extension of the european patent

Extension state: AL LT LV MK RO SI

17Q First examination report despatched

Effective date: 20040202

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20051001