Classifications

• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07F—COIN-FREED OR LIKE APPARATUS
  • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
  • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
  • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
  • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/08—Payment architectures
  • G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
  • G06Q20/108—Remote banking, e.g. home banking
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/355—Personalisation of cards for use
  • G06Q20/3552—Downloading or loading of personalisation data
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/38—Payment protocols; Details thereof
  • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/38—Payment protocols; Details thereof
  • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
  • G06Q20/401—Transaction verification
  • G06Q20/4014—Identity check for transactions
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/38—Payment protocols; Details thereof
  • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
  • G06Q20/401—Transaction verification
  • G06Q20/4014—Identity check for transactions
  • G06Q20/40145—Biometric identity checks
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/20—Individual registration on entry or exit involving the use of a pass
  • G07C9/22—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder
  • G07C9/25—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder using biometric data, e.g. fingerprints, iris scans or voice recognition
  • G07C9/257—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder using biometric data, e.g. fingerprints, iris scans or voice recognition electronically

Definitions

• the present invention relates to portable transaction devices, and more particularly to a system and method for renewing identification data on a portable transaction device.
• DTP Portable transaction devices
• the DTP such as 1 smart cards, credit cards, debit cards, electronic wallets or similar devices
• this card has identification data which are linked to it in the form of a card number which includes a certain number of digits. An expiration date and also usually associated with a credit card. Other data may also be included on the card, for example the name of the card holder.
• the credit card number represents the card identification data, to the extent that the card number represents the data which is used for identification purposes of the card holder's account in the financial institution that issued the card, for example the credit company in the case of a credit card.
• identification data are therefore used to apply monetary transactions carried out using the credit card to the account associated with the credit card.
• the card number is printed or stamped directly on the card material, for example using a press which will deform the card made of plastic so that the card numbers are embossed on the surface Map.
• the identification data of the card number cannot be changed in any way, except by replacing the card with a new card with a new number.
• such identification data which cannot be modified on the card will be identified by the expression "permanent identification data”.
• a credit card can be used for example on the phone, by verbally transmitting to a product or service provider the number and expiration date of the credit card. Sales of products or services from person to person can also occur during which the permanent identification data will be indicated to the supplier of product or service. Sales by means of a computer connected to a network such as the Internet can also be carried out, during which the identification data are transmitted by this computer network.
• the credit card itself is not necessarily required, and the sale of the product or service may occur if the permanent identification data of the card are known and if the account associated with the card is valid .
• a third party may become aware of the permanent identification data of a card during any use of this card: for example, if this data is transmitted by telephone, then the service provider's agent may keep the identification data of the card for subsequent fraudulent use; if this data is transmitted over the Internet, a computer system could allow a third party to intercept the transmission of the data for subsequent fraudulent use; or if these data are transmitted in a conventional manner via an interface machine located at a product or service supplier, it often happens that the permanent identification data of the card appear on the copy of the receipt which is kept by the product or service supplier, and a person having access to these receipts could then keep the permanent identification data of the card for the purpose of subsequent fraudulent use.
• this DTP is charged with a certain amount of money by means of an appropriate interface machine, and this amount of money is subsequently considered to be housed in the electronic wallet itself. -even.
• the amount of money associated with the transaction is transferred, using another appropriate interface machine, from the electronic wallet to a receiving account of the product or service provider .
• the permanent identification data associated with it is useful when loading money into the electronic wallet. Indeed, one must then have access to an account number of a financial company, and permanent identification data recorded in the electronic wallet are used to link the electronic wallet to the account of the holder of the electronic wallet in the financial company. It would therefore be possible for a third party to gain fraudulent access to the account of a person who holds an electronic wallet if another electronic wallet is programmed using the permanent identification data of the other person's electronic wallet for allow access to that other person's account.
• the present invention relates to a method for renewing first identification data identifying and being associated with an account hosted at a financial institution, said first identification data being recorded on a DTP and said financial institution, said method comprising the following: following steps:
• the present invention also relates to a method for renewing first identification data identifying and being associated with an account hosted at a financial institution, within the framework of a transaction for the purchase of a product or service from a supplier of a product or service by means of a DTP, said first identification data being recorded on said DTP and on said financial institution hosting said account, said method comprising the following steps:
• said first identification data are communicated from said DTP to an interface terminal of said product or service supplier, where transaction data are accessible; b) said transaction data and said first identification data are communicated from said terminal of said product or service supplier to said financial institution; c) said financial institution locates said account using said first identification data and applies said transaction data to said account; d) said financial institution generates and records second identification data; e) said financial institution associates said second identification data with said account in place of said first identification data for the purposes of subsequent identification of said account by means of said second identification data; f) said financial institution communicates said second identification data to said interface terminal of said product or service supplier; g) said interface terminal of said product or service supplier transfers said second identification data to said DTP; and h) said DTP stores said second identification data in place of said first identification data.
• step (a) said first identification data are communicated from said DTP to said terminal of the product or service provider by means of an automated communication link, and in that in step (g ), said second identification data are communicated from said interface terminal of the product or service supplier to said DTP by means of said automated communication link.
• said financial institution is provided with a terminal capable of communicating with said interface terminal of the product or service supplier, and in that in step (b), said identification data and said transaction data are communicated from said point of sale terminal to said terminal of said financial institution by means of an automated communication link, and in that in step (f), said second identification data are communicated from said terminal of said financial institution to said terminal of said product supplier or service using said automated communication link.
• step (d) said second identification data generated are unique at any given time.
• step (d) said second identification data generated are unique and are never reused.
• said method is performed automatically each time said DTP communicates with an interface terminal of a product or service supplier.
• said method further comprises the following steps after step (h):
• step (e) said DTP generates a message confirming receipt of said second identification data; j) said DTP communicates to said interface terminal of said product or service supplier said message confirming receipt of said second identification data; and k) said interface terminal of said product or service supplier communicates to said financial institution said message confirming receipt of said second identification data; said method being characterized in that step (e) is performed only after step
• each set of identification data identifying and being associated with a corresponding separate account, said method being applicable for the independent renewal of each set of first data d 'identification according to steps (a) to (h).
• the invention also relates to a method for renewing first identification data identifying and being associated with an account hosted at a financial institution, within the framework of a transaction for the purchase of a product or service from a supplier. of product or service by means of a DTP held by a holder of said DTP, said first identification data being recorded on said DTP and at said financial institution hosting said account, said method comprising the following steps: a) said first data identification are communicated from said DTP to said holder of said DTP; b) said first identification data are communicated from said holder of said DTP to said product or service supplier, where transaction data are accessible; c) said transaction data and said first identification data are communicated from said product or service supplier to said financial institution; d) said financial institution locates said account using said first identification data and applies said transaction data to said account; e) said financial institution generates and records second identification data and generates a transaction code associated with said second identification data; f) said financial institution associates said second identification data with said account in place of said first identification data for the
• step (a) said first identification data are communicated from said DTP to said holder of said DTP by interface means provided on said DTP.
• step (a) said first identification data are communicated from said DTP to said holder of said DTP by a display screen provided on said DTP.
• step (b) said first identification data are communicated verbally from said holder of said DTP to said product or service supplier, and in step (h) said transaction code is communicated verbally from said supplier of product or service to said holder of said DTP.
• the holder of the DTP and said product or service supplier are provided with respective terminals capable of communicating with each other, in that in step (b) said first identification data are communicated by means of an automated communication link from said holder of said DTP to said product or service supplier, and in that in step (h) said transaction code is communicated from said product or service supplier to said holder of said DTP by means of said automated communication link.
• said product or service supplier and said financial institution are provided with respective terminals capable of communicating with each other, and in that in step (c), said first identification data are communicated to the by means of an automated communication link from said product or service supplier to said financial institution, and in that in step (g), said transaction code is communicated from said financial institution to said product or service supplier at by means of said automated communication link.
• step (e) said second identification data generated are unique at any given time.
• step (e) said second identification data generated are unique and are never reused.
• the present invention also relates to a method for renewing first identification data identifying and being associated with an account hosted at a financial institution, within the framework of a transaction which consists in uploading to a DTP transaction data for the register there, said first identification data being recorded on said DTP and on said financial institution hosting said account, said method comprising the following steps: a) said first identification data are communicated from said DTP to an interface machine, a transaction request being accessible on said interface machine; b) said transaction request and said first identification data are communicated from said interface machine to said financial institution; c) said financial institution locates said account using said first identification data and applies said transaction request to said account, generating transaction data; d) said financial institution generates and records second identification data; e) said financial institution associates said second identification data with said account in place of said first identification data for the purposes of subsequent identification of said account by means of said second identification data; f) said financial institution communicates said second identification data and said transaction data to said interface machine; g) said interface machine transfers said second identification data and said transaction data
• step (d) said second identification data generated are unique at any given time.
• step (d) said second identification data generated are unique and are never reused.
• the present invention also relates to a system enabling transactions to be carried out comprising: a financial institution hosting an account; a DTP comprising: - an electronic chip having a memory device on which information can be read and written; a communication device capable of establishing temporary communication with said financial institution; and interface means allowing access to information recorded on said electronic chip; and dynamic identification data identifying said account and associated with said account, said dynamic identification data being recorded on said electronic chip of said DTP and in said financial institution and being able to be renewed both on said electronic chip of said DTP and in said Financial institution.
• the present invention also relates to a system making it possible to carry out transactions comprising:
• a financial institution hosting an account an interface terminal capable of communicating with said financial institution and comprising a first communication device; a DTP comprising: - an electronic chip having a memory device on which information can be read and written; a second communication device capable of establishing temporary communication with said first communication device of said interface terminal; and interface means allowing access to information recorded on said electronic chip; and dynamic identification data identifying said account and associated with said account, said dynamic identification data being recorded on said electronic chip of said DTP and in said financial institution and being able to be renewed both on said electronic chip of said DTP and in said Financial institution.
• the present invention also relates to a system for renewing first identification data identifying and being associated with an account hosted at a financial institution, said first identification data being recorded on a DTP and said financial institution, said system comprising : a) means for communicating to said financial institution said first identification data; b) means for generating second identification data which are recorded at said financial institution and on said DTP, in place of said first identification data; and c) means for associating said second identification data with said account of said financial institution for the purpose of subsequent identification of said account by means of said second identification data.
• the present invention also relates to a system for renewing first identification data identifying and being associated with an account hosted at a financial institution, within the framework of a transaction for the purchase of a product or service from a supplier of a product or service by means of a DTP, said first identification data being recorded on said DTP and on said financial institution hosting said account, said system comprising: a) means so that said first identification data are communicated from said DTP to an interface terminal of said product or service supplier, where transaction data are accessible; b) means so that said transaction data and said first identification data are communicated from said terminal of said product or service supplier to said financial institution; c) means for said financial institution to locate said account by means of said first identification data and to apply said transaction data to said account; d) means for said financial institution to generate and record second identification data; e) means for said financial institution to associate said second identification data with said account in place of said first identification data for the purposes of subsequent identification of said account by means of said second identification data; f) means for said financial institution to communicate said second identification data
• the present invention also relates to a system for renewing first identification data identifying and being associated with an account hosted at a financial institution, within the framework of a transaction for the purchase of a product or service from a supplier of a product or service by means of a DTP held by a holder of said DTP, said first identification data being recorded on said DTP and on said financial institution hosting said account, said system comprising: a) means so that said first identification data are communicated from said DTP to said holder of said DTP; b) means for said first identification data to be communicated from said holder of said DTP to said product or service supplier, where transaction data are accessible; c) means so that said transaction data and said first identification data are communicated from said product or service supplier to said financial institution; d) means for said financial institution to locate said account by means of said first identification data and to apply said transaction data to said account; e) means for said financial institution to generate and record second identification data and generate a transaction code associated with said second identification data; f) means for said financial institution to associate
• the present invention also relates to a system for renewing first identification data identifying and being associated with an account hosted at a financial institution, within the framework of a transaction which consists in uploading to a DTP transaction data for the recording therein, said first identification data being recorded on said DTP and in said financial institution hosting said account, said system comprising: a) means for said first identification data to be communicated from said DTP to an interface machine, a transaction request being accessible on said interface machine; b) means so that said transaction request and said first identification data are communicated from said interface machine to said financial institution; c) means for said financial institution to locate said account using said first identification data and to apply said transaction request to said account, generating transaction data; d) means for said financial institution to generate and record second identification data; e) means for said financial institution to associate said second identification data with said account in place of said first identification data for the purposes of subsequent identification of said account by means of said second identification data; f) means for said financial institution to communicate said second identification data and said transaction data to said interface machine; g
• the present invention also relates to a DTP comprising an electronic chip, interface means connected to said electronic chip, a communication device connected to said electronic chip to allow said DTP to communicate with an interface machine provided with a complementary communication device, said electronic chip comprising at least one memory device which can be read and on which information can be recorded, said memory device including at least identification data identifying and associated with an account hosted in a financial institution, said identification data being renewable!
• the present invention also relates to a method for renewing identification data identifying and being associated with an account hosted at a financial institution, said identification data being recorded on a DTP and with said financial institution, said method including the step of renewing the identification data which comprises the following sub-steps: a) erasing said identification data on said DTP and at said financial institution; b) generate new identification data; c) register said new identification data both on said DTP and at said financial institution; and d) associating said new identification data with said account hosted at said financial institution for the purposes of subsequent identification of said account by means of said new identification data; said renewal step being accomplished each time a determined condition is met.
• the method is carried out within the framework of transactions, and is characterized in that said determined condition is that a transaction is completed.
• the method is carried out in the context of transactions, and is characterized in that said DTP communicates temporarily with said financial institution via an interface machine when a transaction must be completed, and in that that said condition determined is that a communication be established between said DTP and said financial institution through said interface machine.
• FIG. 1 schematically illustrates a system for carrying out a transaction by means of a DTP having dynamic identification data
• FIGS. 2a and 2b schematically and sequentially illustrate the flow of information within a system like the one shown in Figure 1;
• FIGS. 3a and 3b schematically and sequentially illustrate the flow of information within a system for carrying out a transaction by means of a DTP having dynamic identification data, and where the DTP does not enter into communication with an interface machine
• FIGS. 4a and 4b schematically and sequentially illustrate the flow of information inside a system for carrying out a transaction by means of a DTP having dynamic identification data, and where the transaction consists in downloading data from DTP transaction
• FIGS. 5a and 5b schematically and sequentially illustrate the flow of information inside a system for carrying out a transaction by means of a DTP having dynamic identification data, and where the transaction is carried out using a DTP previously loaded with transaction data.
• FIG. 1 shows a system 20 for carrying out a transaction by means of a DTP having dynamic identification data.
• the system 20 comprises a DTP 22 which comprises an electronic chip 24 connected to a display screen 26, a keyboard 28 and a communication device 30.
• the electronic chip 24 comprises at least one memory device which can be read and on which one can record data. Identification data are recorded in the memory unit of the chip 24. These identification data can be a number comprising a series of digits, or alternatively any other form of data which can be used to identify an account associated with DTP in a financial institution 32.
• the DTP 22 can be a debit card, a credit card, an electronic wallet, or any other portable transaction device comprising identification data associated with an account at a financial institution.
• the DTP 22 can establish communication with a point of sale interface terminal 34 of a product or service supplier. This communication is established by means of the communication device 30 which is located on the DTP 22 and by means of a second communication device 36 which is located on the interface terminal of the point of sale 34.
• the communication devices 30, 36 are complementary to each other, and make it possible to establish a temporary communication between the DTP 22 and the interface terminal of the point of sale 34 for information exchange.
• the communication devices 30, 36 can be, for example, optical transceiver assemblies which make it possible to exchange data via infrared waves; or radio transmitter-receiver assemblies; or any other suitable transceiver assembly for exchanging data, with or without direct contact between the DTP 22 and the point of sale interface terminal 34.
• the point of sale terminal 34 can establish communication with the terminal of the financial institution 32 by other known means with or without wires, for example by means of a computer network such as the Internet. This communication can be established on an ad hoc basis, if necessary, or can remain active permanently.
• the identification data which is recorded in the chip 24 can be displayed on the display screen 26 either permanently, or only when required by the holder of the DTP when the latter controls the DTP by the keyboard 28 display identification data. Thus, the holder of the DTP can visually verify his identification data at any time. Other data can also be recorded on the chip 24 and displayed on the screen 26, for example the expiration date of the DTP if it has one, the name of the holder of the DTP, etc. As mentioned, at least the identification data can be replaced and modified.
• FIGS. 2a and 2b schematically illustrate the sequence of information exchange between the DTP 22, the point of sale interface terminal 34 of a product or service supplier, and the terminal of a financial institution 32, and more particularly how the identification data of DTP 22 can be renewed as part of a transaction for the purchase of a product or service, according to a first embodiment of the invention.
• the identification data identifies and is associated with an account hosted at the financial institution 32.
• transaction data are communicated to the interface terminal of the point of sale 34.
• This transaction data can be, for example, the price of the product or service you want to buy.
• This transaction data can be communicated to the interface terminal of the point of sale 34 in any known acceptable manner, for example by means of a computer link of the interface terminal with an electronic cash register (not illustrated), or even to the by means of a keyboard (not illustrated) provided on the interface terminal 34 which makes it possible to punch transaction data on this keyboard in order to communicate them to the interface terminal 34.
• the identification data of the DTP 22 are transmitted from the DTP 22 to the interface terminal of the point of sale 34. Then, this data identification are transmitted from the point of sale interface terminal 34 to the terminal of the financial institution 32, as well as the transaction data.
• the terminal of the financial institution can thus, in a conventional manner, apply transaction data to the account of the holder of DTP 22 in an appropriate manner, for example debiting the account for the amount of the product or service purchased.
• the account of the holder of DTP 22 is located thanks to the identification data which are associated with this account, as it is also known to do.
• the terminal of the financial institution 32 generates new identification data.
• These new identification data are recorded by the terminal of the financial institution 32, and are associated with the account of the holder of DTP 22, replacing the old identification data.
• the old identification data which has just been used to locate the account of the holder of DTP 22 in order to apply the transaction data to it - these old identification data, therefore, are erased and replaced by newly generated identification data, and these new identification data are associated with the account of the holder of DTP 22 so that this account may in future be identified only with the aid of this new data identification.
• the new identification data Once the new identification data has been created and associated with the account of the holder of the DTP 22, it is transmitted to the interface terminal of the point of sale 34, with the confirmation that the transaction is accepted. Although this confirmation message is not necessary, it is usual to send it to confirm that the transaction data have indeed been applied to the account of the DTP holder 22.
• the point of sale interface terminal 34 transmits to its turn the new identification data to the DTP 22, which saves them on its chip 24 in replacement of the old identification data. Therefore, the old identification data is deleted from DTP 22, and only the new identification data remains there. Subsequently, the DTP identification data 22 which is displayed on the screen 26 will be the new identification data, which has been transmitted by the terminal of the financial institution 32 via the interface terminal of the point 34.
• the terminal of the financial institution 32 can carry out the usual verifications concerning the validity of the account of the holder of the DTP 22 and concerning the conditions required for the transaction, according to the transaction data transmitted by the terminal of point of sale interface 34, be approved. For example, if it is an account linked to a credit card, the terminal of the financial institution will in particular check whether the associated credit limit to the account of the holder of DTP 22 will not be exceeded if the transaction is applied to this account. It goes without saying that the transaction confirmation message will only be transmitted if the transaction is actually approved by the terminal of the financial institution 32 according to the conditions associated with the account of the DTP holder 22.
• the advantage of having such dynamic identification data on the DTP 22 is that it becomes very difficult, if not impossible, to fraudulently apply a transaction to the account of the holder of the DTP 22 hosted at the financial institution 32 by unauthorized use of DTP 22 identification data which would have been obtained by a third party through the transmission of these identification data as part of a transaction, and without the knowledge of the holder of DTP 22. Indeed, if a third party becomes aware of another person's DTP 22 identification data and this information is obtained because the identification data are transmitted as part of a transaction carried out by the holder of DTP 22, once this transaction is completed, the identification data are already replaced by new identification data, and the account of the holder of DTP 22 can no longer be accessed using the old identification data.
• Figures 3a and 3b show a second embodiment of the invention, whereby the DTP 22 'need not be in communication with a point of sale interface terminal for the transaction to be completed and for new identification data be generated and associated with the account of the holder of the DTP 22 'hosted at a financial institution 42.
• This is desirable for carrying out transactions when a point of sale interface terminal is not available, for example if the transaction is carried out over the telephone, or via a computer network such as the Internet using a computer which does not have an appropriate interface machine allowing the DTP to communicate with the computer.
• This communication can be in any suitable form, for example by telephone or by means of an automated communication link such as via the Internet via a computer.
• Transaction data associated with that product or service for example the price of the product or service, is communicated to the product or service provider 40, as appropriate.
• the product or service supplier 40 can, for its part, communicate with the financial institution 42 according to known means. This communication can for example be made verbally by telephone with an agent of the financial institution 42, or even by means of a point of sale terminal (not illustrated) which can enter into communication with a payment terminal. the financial institution (not shown) via a computer network such as the Internet.
• the supplier of product or service 40 can therefore be represented by a person or by a machine such as a computer; or by a combination of the two, where a person would receive communications from the DTP holder and transmit the appropriate information to a terminal of the financial institution using a terminal of the product or service provider.
• the DTP 22 ' first communicates, by means of its display screen, the identification data of the DTP 22' to the holder of DTP 38.
• the holder of DTP 38 then transmits these identification data to the product or service supplier 40 by means of communication which connects them to each other.
• the product or service provider 40 transmits the identification data to the financial institution 42, as well as the transaction data, the latter being for example the price of the product or service that the holder of the DTP 38 want to buy.
• the financial institution 42 generates new identification data. These new identification data are recorded by the financial institution 42, and are associated with the account of the holder of the DTP 22 ', in replacement of the old identification data, which therefore become obsolete and which, from this moment, do not can no longer be used to access the account of the 22 'DTP holder.
• the financial institution 42 also generates a transaction code which is transmitted, as well as a transaction confirmation message, to the product supplier 40.
• This transaction code can be, for example, a sequence of numbers or letters, or any other data in acceptable form.
• the transaction code must then be transmitted from the product supplier 40 to the holder of DTP 38, who communicates this transaction code to DTP 22 ', for example by punching it on the keyboard 28 of DTP 22'.
• the latter using a software pre-installed in its chip 24 according to the present embodiment of the invention, will generate new identification data and record them in replacement of the old identification data, which therefore disappear completely from the memory of the DTP 22 '.
• the software provided in the DTP chip 22 ' is intended to generate the same identification data as that generated by the financial institution 42 for the same transaction code.
• the identification data of the DTP 22 'then being the same as that associated with the account of the holder of the DTP 22' at the financial institution 42.
• the financial institution 42 generates both a transaction code and news identification data, but either the transaction code or identification data is imposed by the choice of the other.
• Suitable software can also be used to associate a transaction code with identification data. For example, if the transaction code and the identification data are all numerical values, an arithmetic calculation can be applied to one of the two values to obtain the second, for example to generate an identification number from 'a transaction code. The same arithmetic calculation being carried out on the transaction code both at the financial institution (eg on a financial institution terminal) and in the chip of the DTP 22 ', it is understood that the new number identification associated with the account of the holder of DTP 22 'will be the same at financial institution 42 and on DTP 22'.
• the identification data can therefore be changed on the DTP without the latter being in communication with any interface machine.
• a transaction similar to that illustrated in Figures 2a and 2b could be accomplished by transmitting to the DTP a transaction code rather than identification data, as indicated above.
• the transmission of a transaction code is not reserved for the exclusive situation where the DTP cannot be put in communication with a point of sale interface terminal by means of '' an automated communication link, such as an interface machine that can communicate electronically with the DTP.
• a transaction code would be issued by the terminal of the financial institution and transmitted sequentially to the terminal of the point of sale and to the DTP, the DTP then generating new identification data. as indicated above based on the transaction code received.
• This last embodiment has the advantage of avoiding that the identification data is intercepted during their transmission between the terminal of the financial institution and the DTP, for example by means of a computer. Only the transaction code is sent and transmitted to the DTP, this transaction code allowing the DTP to generate new identification data.
• FIGS. 4a and 4b show another embodiment of the invention, in which the DTP 22 "can enter into communication with an interface machine 44 which in turn can communicate with the terminal of a financial institution 46.
• the DTP 22 can be loaded with certain transaction data, for example a certain amount of electronic money.
• a example of a known form of DTP that can be charged with an amount of electronic money is the electronic wallet, in which one can transfer an amount of money from an account of a financial institution.
• electro money means that money is only transferred in the form of data.
• the interface machine 44 can be, for example, example, an ATM, a computer with a communication device 36, or any other machine capable of communicating with the DTP 22 ".
• the interface machine can be used by the holder of the DTP 22" to indicate his transaction request, for example a request for a monetary withdrawal from his account to load this amount of money on the DTP 22 ".
• the transaction request can be indicated directly on the DTP 22", this transaction request being then transmitted initially to the interface machine 44 with the identification data.
• the interface machine 44 subsequently transmits the identification data, accompanied by the transaction request, to the terminal of the financial institution 46.
• the terminal of the financial institution 46 then applies the transaction request to the account associated with the identification data, for example by debiting the user's account for the amount of money requested, and generates new identification data which are associated with the account of the DTP 22 "holder. These new identification data are recorded in place of the old identification data which have been used to apply the required transaction, and the old identification data therefore become obsolete and can no longer be used from this moment to access the account of the holder of the DTP 22 ".
• the new identification data, as well as transaction data which may for example be the amount of electronic money debited, are then transmitted from the terminal of the financial institution 46 to the interface machine 44, then to the DTP. 22 "where transaction data is applied (for example the amount of money is loaded on chip 24 of the DTP 22").
• transaction data for example the amount of money is loaded on chip 24 of the DTP 22"
• the new identification data is recorded on the chip 24 in place of the old identification data, which is erased.
• FIGS 5a and 5b show how the DTP 22 "of Figures 4a and 4b, which can be for example an electronic wallet, when loaded with transaction data, which can be for example an amount of money, can be used to accomplish a transaction such as the purchase of a product or service, its identification data being simultaneously renewed.
• the supplier of the product or service is provided with a point of sale interface terminal 48 which can communicate with DTP 22 "and also with the terminal of financial institution 50 which hosts the account associated with the holder of DTP 22".
• FIG. 5a shows that the identification data are first transmitted from the DTP 22 "to the point of sale interface terminal 48, as well as the transaction data which can be for example the amount of electronic money which is 22 "DTP paid for the purchase of the product or service.
• the point of sale interface terminal 48 in turn transmits the identification data to the terminal of the financial institution 50, and routes the transaction data downloaded from the card to an appropriate account of the product or service provider 52.
• This account 52 can be located on an electronic wallet, in another financial institution, or in some appropriate and conventional place.
• the financial institution 50 locates the account of the holder of the DTP 22 "using the identification data, generates new identification data, registers and associates them with the account of the holder of the DTP 22", erasing the old data Identification.
• the new identification data is then transmitted to the DTP 22 "via the interface terminal of the point of sale 48, and this data is recorded on the chip 24 of the DTP 22" instead old identification data.
• a transaction confirmation message can also come from a manager (for example a person or a terminal) of the product or service provider account 52, indicating that the transaction data has been received in the account.
• the identification data of the DTP 22 " are renewed during the transfer of the transaction data (for example money), without however the terminal of the financial institution 50 being involved. directly in the transaction as such, which rather involves the DTP 22 ", the product or service provider's account 52 and the point of sale interface terminal 48. Indeed, the only information exchanged between the point of sale interface terminal 48 and the financial institution terminal 50 are the DTP 22 "identification data.
• the terminal of the financial institution or the financial institution can wait to receive a confirmation of receipt message. new identification data from the DTP before applying the new identification data to the account of the DTP holder hosted at the financial institution. This will prevent the DTP holder's account from seeing the associated identification data as having been renewed, while the DTP retains the old identification data, which would effectively prevent the DTP holder from carrying out subsequent transactions using its DTP. This last situation could arise for example if a communication problem occurs after the transmission of the new identification data by the terminal of the financial institution but before the reception of these new identification data by the DTP, this communication problem preventing the DTP from receiving new credentials.
• DTP digital data
• security means to prevent unauthorized use of DTP can be used, for example a personal identification code which must be stamped on the DTP keyboard before it can be used, or even the detection of a biometric parameter by an appropriate detector provided on the DTP, such as a fingerprint detector or an eye retina scanner.
• DTP has been illustrated and described so far as being provided with a keyboard and a display screen
• other means of interface between the DTP and its holder are also contemplated.
• provision may be made for a transmitter and receiver of sound waves, as well as voice recognition software located on the chip of the DTP, which would allow the holder of the DTP to communicate verbally with his DTP.
• a Braille interface could be provided on the DTP to indicate to the holder the information that the latter is seeking. The latter two methods have the advantage of allowing visually impaired people to transact using DTP.
• the interface means allowing access to the information located in the DTP chip are separate from the DTP itself.
• the DTP can also combine in a single device all the characteristics of the DTPs of the embodiments described in the present patent application.
• a single DTP could be used to carry out transactions for the purchase of a product or service where the holder's account is hosted at the financial institution and is directly debited via a point of sale interface terminal such as illustrated in FIGS. 2a and 2b, or via the intervention of the holder of the DTP as illustrated in FIGS. 3a and 3b; or where the account of holder is hosted on the DTP itself as illustrated in Figures 5a and 5b; or finally where the holder's account is hosted at the financial institution and is debited via an interface machine, to load the DTP with transaction data as illustrated in FIGS. 4a and 4b.
• DTP could access at least two different accounts, namely that located at the financial institution of the holder of the DTP and that located on the DTP itself which is represented by the digitized form of money loaded on DTP, and therefore software located on the electronic chip 24 of the DTP must allow its holder to choose which account he wishes to access, this choice being accomplished through the interface means of the DTP, for example the keyboard 28 and the display screen 26.
• DTP can be used to access more than one account located in one or more financial institutions. Again, software located on chip 24 of the DTP must allow its holder to choose which account he wishes to access via appropriate interface means. The same dynamic identification data or respective dynamic identification data can be associated with each account.
• DTP dynamic credentials may also be combined with permanent credentials.
• the DTP is a credit chip card
• the same credit company could issue DTPs having a first portion of identification data in the form of a few digits identifying the credit company, this first portion never being modified and therefore representing permanent identification data.
• a second part of the identification data could be dynamic identification data, and the combination of the two dynamic and permanent portions would form the identification data of the DTP.
• the DTP identification data can be renewed without a transaction taking place, for example if the DTP holder has reason to believe that the identification data of his DTP have become known by others and wishes, as a preventive measure, to renew their account identification data.
• the holder of the DTP could, via an appropriate interface machine, for example an ATM or any other appropriate public or private interface machine, renew the identification data of his account and record the new identification data on its DTP by a method similar to one of the methods illustrated in Figures 2a, 2b; 3a, 3b; 4a, 4b; or 5a, 5b, with the difference that no transaction takes place.
• the only transfer of information which would then take place would be linked to the identification data, and also to the transaction code in the case of the embodiment of FIGS. 3a, 3b.
• the identification data of a DTP can be renewed when one or more conditions are met, whether for each transaction made through an interface machine, each time that '' A DTP is responsible for transaction data, whenever any communication (verbal or automated) can be established between the DTP and the financial institution, on request only, each time that a determined time interval s 'has elapsed, each time a specified number of transactions has been carried out, etc.
• the identification data associated with an account are unique at any given time.
• the identification data associated with an account are unique and are never reused as is.
• the electronic chip provided on the DTP stores in memory the transactions which are carried out, up to a maximum number of transactions which can be determined for example according to the capacity of the memory of the electronic chip.
• the identification data can be a code allowing access to the holder of the DTP beyond a portal provided with a security device which requires that valid identification data be provided to him. provided so that access beyond the portal is allowed.
• the financial institution would in fact be the institution that manages the identification numbers. It is therefore understood that the expression “financial institution” in this document is not limited to an institution managing monetary accounts, but rather to an institution that manages any accounts, for example identification data accounts serving as access codes. It can thus be seen that despite the fact that the present invention is applicable to monetary transactions, it is in no way intended to be limited to such applications.

Landscapes

• Business, Economics & Management (AREA)
• Engineering & Computer Science (AREA)
• Accounting & Taxation (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• General Business, Economics & Management (AREA)
• Theoretical Computer Science (AREA)
• Finance (AREA)
• Strategic Management (AREA)
• Computer Security & Cryptography (AREA)
• Microelectronics & Electronic Packaging (AREA)
• Computer Networks & Wireless Communication (AREA)
• Human Computer Interaction (AREA)
• Development Economics (AREA)
• Economics (AREA)
• Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Applications Claiming Priority (3)

Publications (1)

Family

ID=23055255

Family Applications (1)

Country Status (8)

Families Citing this family (2)

Family Cites Families (99)

• 2001
  • 2001-05-28 CN CNA018230458A patent/CN1537301A/zh active Pending
  • 2001-05-28 AU AU2001258694A patent/AU2001258694A1/en not_active Abandoned
  • 2001-05-28 EP EP01932017A patent/EP1371036A2/de not_active Withdrawn
  • 2001-05-28 BR BR0116911-4A patent/BR0116911A/pt not_active IP Right Cessation
  • 2001-05-28 MX MXPA03007778A patent/MXPA03007778A/es unknown
  • 2001-05-28 WO PCT/IB2001/000940 patent/WO2002075674A2/fr not_active Application Discontinuation
  • 2001-05-28 CA CA002434192A patent/CA2434192A1/fr not_active Abandoned
• 2003
  • 2003-08-29 US US10/652,363 patent/US20040059675A1/en not_active Abandoned

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events