Classifications

• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q30/00—Commerce
  • G06Q30/06—Buying, selling or leasing transactions
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/04—Payment circuits
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/08—Payment architectures
  • G06Q20/12—Payment architectures specially adapted for electronic shopping systems
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/38—Payment protocols; Details thereof
  • G06Q20/42—Confirmation, e.g. check or permission by the legal debtor of payment
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/38—Payment protocols; Details thereof
  • G06Q20/42—Confirmation, e.g. check or permission by the legal debtor of payment
  • G06Q20/425—Confirmation, e.g. check or permission by the legal debtor of payment using two different networks, one for transaction and one for security confirmation

Definitions

• the invention relates to a method for confirming a transaction, a computer program product that can be loaded into the internal memory of a digital computer, a computer program product that into the internal memory of a chip card, a chip module and / or a transmission and
• Receiving device is loadable, a chip card or a chip module, a transmitting and receiving device and a computer system according to the preamble of the respective independent claim.
• a wide variety of goods can be purchased online today. Before making a purchase, the customer accesses the pages of interest on the Internet using his PC and puts together a virtual shopping cart. After the customer has put together his shopping cart, he is usually asked to enter his relevant credit card data in an "online form" and to transmit it to the retailer at the end of the purchase or the completion of the transaction. Even if this is done in an encrypted manner, it cannot always be guaranteed that the
• a service provider becomes active for transactions.
• the service provider In order to use the service provider's service, it is necessary that both the dealer and the customer register with the service provider.
• the retailer provides his reference account and his address and the customer his account details, his mobile phone number and his address. If the customer has put together a shopping cart for such a registered dealer, the service provider calls the registered customer's mobile phone, transmits the purchase price by voice announcement and asks the customer by entering his secret, personal, stored with the service provider Identification number to confirm the purchase. If the customer enters the appropriate identification number, he will be informed of this by a corresponding voice announcement and the purchase will be confirmed. The purchase price is debited from the customer's account by the service provider via direct debit and transferred to the merchant's account minus a commission.
• the object of the invention is in particular to provide a flexible and secure method for carrying out a transaction, a computer program product and devices for carrying out the method.
• a transaction is to be understood in particular as the cashless payment for a product or service.
• a transaction in the sense of the invention is not limited to this.
• a transaction can, for example, also involve the cashless transfer of an amount of money from an account, a credit store or the like. insist on a different account, a different credit store or the like.
• Receiving device such as in particular a mobile radio terminal.
• An essential aspect of the invention is to use a telephone and / or data network to create a largely bug-proof and non-manipulable data connection via a corresponding data transmission link or a corresponding data channel between a transmitting and receiving device and a service provider for confirming a transaction, the data exchange takes place largely in real time, for example as in a telephone call.
• the telephone and / or data network is preferably a mobile radio network and the transmitting and receiving device is a mobile radio terminal, a mobile telephone and / or an organizer (PDA).
• the personal identification information can be, for example, a sequence of digits or an alphanumeric string, such as a password or the like.
• Data transmission path or the data channel is formed by an unstructured supplementary services data channel, such as in particular a GSM, GPRS or UMTS mobile radio network.
• the data transmission link or the data transmission service can be formed by the IS-41 Feature Control Service (FCS) data channel, such as, in particular, a D-AMPS, CDMA or TDMA (mobile radio) network.
• FCS Feature Control Service
• the confirmation and / or identification information is preferably transmitted via such a channel from the transmitting and receiving device of the user to the transmitting and receiving device of the transaction partner, in particular a service provider.
• the Unstructured Supplementary Services Data (USSD) service is a service to transmit information or instructions over a GSM network.
• USSD shows some similarities with the Short Message Service (SMS), since both use the signal path of the GSM network.
• SMS Short Message Service
• USSD is not a service in which the data is saved and transmitted with a time delay. Rather, the USSD service or USSD service is such that a data connection is established and the mobile radio connection remains in existence until the user, an application program or a timer breaks the connection.
• USSD text messages can be up to 182 characters long.
• USSD is defined in the documents GSM 02.90 (USSD level 1) and GSM 03.90 (USSD level 2) of the GSM standard. USSD stage 1 provides that the interactions from the
• Mobile terminal are caused.
• USSD stage 2 it is provided that interactions based on USSD can also be initiated by the remote station of the mobile radio terminal.
• the IS-41 Feature Control Service corresponds approximately to the GSM USSD service and is defined in the IS-53-A standard. So-called “feature codes” are used to implement the Standards in IS-41 networks, such as in particular in D-AMPS, CDMA or TDMA networks.
• feature codes are used to use, modify or deactivate a subscribed IS-41 service.
• Feature codes are specified in the TIA / EIA IS-52-A and 53 -A and begin - like USSD - with a "*", followed by the actual service and also end with a "#" character.
• the latest versions can be found in the ANSI / TIA / EIA or ANSI / TIA / EIA-664 documents (each from 1996).
• a major advantage is that the response time for interactive applications with USSD or FCS is significantly shorter than with SMS due to a direct data connection between the mobile terminal and the remote station.
• the response time today with USSD or FCS is about seven times faster than with SMS, so that data can be transmitted which, for example compared to SMS, takes place largely in real time. Since the reaction time is significantly shorter than when using SMS, it can be assumed that the acceptance for using the method according to the invention can be significantly increased compared to an implementation of the method according to the invention using SMS. It goes without saying that the method according to the invention can also be carried out successfully using SMS, albeit more slowly.
• the transmission of USSD or FCS data it is not necessary for the user of a mobile radio terminal to call up the USSD or FCS service beforehand using a special menu. Rather, the command to send USSD or FCS data as well as the data to be transmitted can be used with conventional ones Mobile terminal devices can be entered directly via the keyboard of the mobile radio terminal.
• the command for transmitting USSD or FCS data and / or the personal identification information to the transaction partner such as in particular a service provider, for authorizing a transaction and its USSD or FCS selection parameter in the by the PIN can be provided of the mobile phone terminal or the SIM card (in GSM networks) protected phone book.
• the transaction partner such as in particular a service provider
• the authorization or confirmation of a transaction can be carried out in a simple manner. Possibly. it may be necessary to enter the current transaction information via the keyboard of the mobile radio terminal or to send it back to the transaction partner after receiving it as part of the confirmation of the transaction.
• the transmitting and receiving device such as in particular a mobile transmitting and receiving device, preferably a mobile radio terminal, uses the channel of the mobile radio network used for the transmission of voice data to exchange data for "browsing" on the Internet and Unstructured Supplementary Services data channel or the FCS channel used in parallel for the transmission of data related to the confirmation of a transaction.
• a mobile transmitting and receiving device uses the channel of the mobile radio network used for the transmission of voice data to exchange data for "browsing" on the Internet and Unstructured Supplementary Services data channel or the FCS channel used in parallel for the transmission of data related to the confirmation of a transaction.
• the confirmation of the transaction can proceed completely in the background in the manner described, without the user having to interrupt "surfing" on the Internet in order to carry out the transaction. Rather, it is possible for the user to be able to see the display of his mobile terminal and the virtual shopping cart even while the transaction is being confirmed.
• the user is preferably shown the successful confirmation of a transaction after he has entered or released the correct identification information in a window of the “web browser”.
• the user of the mobile radio terminal is thus able to make an “online purchase”, in particular one "Internet purchase” and its confirmation can be carried out in a safe and fast manner solely by providing an appropriate mobile radio terminal
• the transmitting and receiving device or the mobile radio terminal is preferably a GPRS, UMTS, WAP or CDMA -Sending and receiving device for operation in a corresponding mobile radio network.
• Receiving device of the service provider is provided in a preferred embodiment of the invention to store the corresponding telephone number or USSD or FCS short code of the service provider in a non-volatile memory of the mobile radio terminal and / or in the chip card or the chip module, in particular a SIM card or a SIM module.
• the connection to the service provider can then be established, for example, via a keyboard input of the speed dial or menu-guided. In this way, a data connection can be established in a simple and quick manner via the unstructured supplementary services data channel or FCS channel with the transaction partner for the described confirmation of the transaction.
• Transaction is initiated by the service provider via the Unstructured Supplementary Services data channel or FCS channel. After the connection has been established, this is preferably transmitted to the user in an acoustic and / or visible manner from the user's transmitting and receiving device
• the establishment of the connection and / or the request for the transmission of a transaction confirmation, identification information and / or specific transaction information may also be carried out by the “web browser” on the display of the mobile radio terminal.
• the user of the transmitting and receiving device is responsible for establishing the data connection the sending and receiving device of the service provider to confirm the transaction via the unstructured supplementary services data channel or FCS channel, z. B. after a request from the transaction partner, such as the dealer or service provider concerned.
• 1 shows the sequence of an inventive method for authorizing a transaction using the example of an Internet purchase.
• step 1 it is assumed that the customer, using a computer or PC via an Internet connection, fills the virtual shopping basket according to his wish, which is the specific transaction indicated transaction number in the "web browser" on the screen of the customer's computer and the customer has informed the dealer via the Internet connection that he wants to pay for the goods in his shopping cart through a service provider.
• the dealer then transmits the second step 2
• Transaction data such as the total amount and the
• Transaction number of the purchase to the service provider selected by the customer, preferably by secure means (e.g. via
• the service provider (USSD level 2 ⁇ or the customer (USSD level 1) preferably establishes a mobile radio connection between the two via the USSD or FCS service, and the service provider transmits the transaction data via the USSD or FCS service to the
• the USSD or FCS service can be, for example, the USSD or FCS service of a GSM, GPRS, UMTS, CDMA or TDMA network.
• the transaction data transmitted from the service provider to the customer's mobile terminal via the USSD or FCS service are shown on the display of the customer's mobile terminal in a fourth step. 4 and the customer is shown on the display to enter his service provider.
• PIN requested Alternatively, the PIN request can be omitted and only a confirmation can be requested. This can, for example, in "Do you want to confirm? (Yes / No) "exist, ie the customer is only asked whether he wants to confirm the transaction or not.
• the confirmation can take place, for example, by pressing one or more keys or by corresponding voice input.
• the customer enters his service provider PIN in a fifth step 5 via the keyboard of the mobile radio terminal or initiates the release of a service provider stored in the telephone book of the mobile radio terminal or the SIM card of the mobile radio terminal.
• PIN CODE The service provider PIN and • the one stored in the SIM card of the mobile terminal are shown below
• the service provider performs a PIN comparison in a sixth step 6 between the PIN stored at the service provider and that of the customer's mobile terminal via the USSD or FCS service or USSD or FCS data channel transmitted PIN.
• the service provider transmits via the USSD or FCS service that the transaction has been correctly confirmed or authorized, which is what the customer has on the Display of his mobile terminal is shown. Possibly. the USSD or FCS data connection is then interrupted.
• the PIN comparison is performed only a few times, e.g. B. is carried out three times by the service provider for the customer concerned.
• the customer is identified by the service provider on the basis of the mobile telephone number transmitted during the data transmission via the USSD or FCS data channel and stored in the SIM module in a non-manipulable manner and on the basis of the customer data assigned to the mobile telephone number.
• the USSD or FCS data connection is then interrupted by the service provider and, preferably, the account with the service provider is at least temporarily blocked in order to prevent a third party from gaining access to the has blocked the mobile phone, has tried to find out the PIN with improper intent.
• a mobile radio terminal which has a SIM card or a SIM module with a so-called SIM
• Application Toolkit has.
• an application program is then stored according to the invention, which transmits the data transmitted by the service provider via the USSD or FCS service and / or the data entered by the user of the mobile radio terminal in a graphically appealing form, e.g. B. in the form of a menu on the display of the mobile terminal for display.

Landscapes

• Business, Economics & Management (AREA)
• Accounting & Taxation (AREA)
• Engineering & Computer Science (AREA)
• General Physics & Mathematics (AREA)
• Physics & Mathematics (AREA)
• General Business, Economics & Management (AREA)
• Strategic Management (AREA)
• Finance (AREA)
• Theoretical Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Development Economics (AREA)
• Economics (AREA)
• Marketing (AREA)
• Mobile Radio Communication Systems (AREA)

Applications Claiming Priority (3)

Publications (1)

Family

ID=7650777

Family Applications (1)

Country Status (4)

Families Citing this family (7)

Family Cites Families (7)

• 2000
  • 2000-07-31 DE DE2000137175 patent/DE10037175A1/de not_active Ceased
• 2001
  • 2001-06-26 AU AU2001278363A patent/AU2001278363A1/en not_active Abandoned
  • 2001-06-26 WO PCT/DE2001/002303 patent/WO2002011086A2/de not_active Application Discontinuation
  • 2001-06-26 EP EP01956278A patent/EP1410351A2/de not_active Withdrawn

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events