Classifications

• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/08—Payment architectures
  • G06Q20/20—Point-of-sale [POS] network systems
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
  • G06Q20/326—Payment applications installed on the mobile devices
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/04—Payment circuits
  • G06Q20/042—Payment circuits characterized in that the payment protocol involves at least one cheque
  • G06Q20/0425—Payment circuits characterized in that the payment protocol involves at least one cheque the cheque being electronic only
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/08—Payment architectures
  • G06Q20/18—Payment architectures involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/22—Payment schemes or models
  • G06Q20/223—Payment schemes or models based on the use of peer-to-peer networks
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
  • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
  • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
  • G06Q20/3227—Aspects of commerce using mobile devices [M-devices] using secure elements embedded in M-devices

Definitions

• This invention relates to an Inter-operable Multi-operator, Multi-bank, Multi-merchant Mobile Payment System.
• This invention makes the mobile phone, a debit/credit instrument for payment as well as an instrument to carry out payment terminal functions.
• the debit/credit card(s) on the mobile phone could be used to carry out payment transactions with another mobile phone, a regular Point-of-Sale terminal, an ATM, a Vending Machine or Internet.
• the existing financial transaction systems involve use of physical currency, debit and credit cards based on Magnetic Stripe technology.
• the Magnetic Stripe debit/credit card based transactions are inherently prone to security violations given to the fact that Magnetic Stripes can be easily read and duplicated.
• the existing smartcard based transaction systems are secure, but mandate use of an expensive Point-of-Sale Terminal to carry out a financial transaction, be it a stored value transaction or an online/offline debit/credit transaction.
• the secure and more reliable alternative lies in use of a mobile phone, which offers computational capabilities and guarantees security with cryptographic support in the phone/SIM operating system.
• Europay Mastercard Visa (EMV) and Common Electronic Purse Scheme (CEPS) standards provide means for development of interoperabe payment scheme.
• A.Little. World is implementing a new interoperable payment brand in India and abroad known as mCheque.
• mCheque platform provides a secure all-purpose debit/credit payment system on mobile phones.
• the proposed solution enables the consumer (hereby referred to as 'payer' or 'customer') to carry out financial transactions from his/her Mobile Phone with debit/credit cards configured on the Mobile Phone and helps the merchant (hereby referred to as 'payee' or 'merchant') to use a hosted Nirtual Terminal service, while the mobile phone of the merchant is used as the payment terminal.
• the payer can use the debit/credit card(s) configured on the Mobile Phone to engage in a payment transaction with the payee application on the regular Point-of-Sale Terminal, Vending Machine, Internet or ATM.
• PKI Public Key Infrastructure
• Mobile Phones will have the capability of a universally usable digital ID (to be issued as an X.509 certificate by a Certification Authority) for digitally signing transactions for non-repudiation.
• RSA is the preferred standard for security implementation for PKI applications of mCheque.
• the application download and personalization of the mobile phone can be done both over-the-counter (OTC) and over-the-air (OTA).
• OTC over-the-counter
• OTA over-the-air
• the complete application functionality for the customer's payment card will be provided on the phone.
• the application functionality for the merchant's terminal will be provided at the back-end as a Nirtual Terminal, with the phone used for confirmation of the transaction (transaction receipt).
• the ready availability of communications network; the display screen; and the large memory on the phone to store and view transaction records helps enhance the Bank's product value for the customer and makes this the most user friendly and versatile payment instrument the customer will ever use.
• the mobile phone can be used both as a credit and debit cards at the same time multiple debit/credit accounts from different banks can be configured on the same mobile phone without any security compromise. A single PIN for all accounts will simplify banking and payment for the customer.
• US Patent No. 6,612,488 describes a method of payment using credit cards using a portable communication terminal such as a cellular phone. However, this method does not avoid the use of the credit card or debit card.
• the portable communication terminal is used to only identify the purchaser to avoid fraudulent use of the cards.
• US Patent No. 6, 678, 664 issued to CheckFree Corporation suggests cashless transactions, e.g. purchases of goods and services without making cash payments at the time of purchase, by transmitting, preferably from a point of purchase, information identifying the purchaser of a product without identifying a payment account for the purchaser, the point of purchase being, for example, a register within a retail store or a server at an internet site.
• the primary object of the present invention is to provide an inter-operable, multi- operator, multi-bank, multi-merchant, mobile payment method and system.
• a regular mobile phone is used as a bank-account linked debit/credit payment instrument to pay any merchant with a regular mobile phone, without customisation of phone hardware.
• the merchant does not need a regular payment terminal.
• the merchant terminal can be a regular Point-of-Sale terminal, vending machine, Internet or ATM.
• a regular mobile phone as an EMN-based payment instrument linked to a debit or credit account in a Bank, to pay any merchant who has a mobile phone or an on-line EMN capable terminal.
• the merchant does not need a regular payment terminal.
• EMN security is fully implemented for this product.
• the ready availability of a communications network; the display screen on the mobile; and the large memory on the phone to store and view transaction records helps enhance the product value for the customer and makes this the most user friendly and versatile payment instrument the customer will ever use.
• the mobile phone can be used both as a credit and debit cards at the same time. Multiple debit/credit accounts from different banks can be configured on the same mobile phone without any security compromise. A single PIN for all accounts will simplify banking and payment for the customer.
• SIM Subscriber Identification Chip
• R-UIM Subscriber Identification Chip module
• the application is developed without need to customize either the phone hardware or software.
• the only change is made to the SIM/R-UIM software through the use of the SIM Application Toolkit or a script using existing SIM/R- UIM browsing environment.
• the application is developed on the phone. As a result, nearly the entire base of mobile phones can be used as cards and terminals without extra investment required in cards or terminals.
• the payment application for debit/credit card on payer's mobile phone and the merchant terminal on payee's mobile phone use security mechanisms prescribed by EMN.
• the application download and personalization of the mobile phone will be done both over-the-counter (OTC) and over-the-air (OTA).
• OTC over-the-counter
• OTA over-the-air
• the complete application functionality for the customer's payment card will be provided on the phone.
• the application functionality for the merchant's terminal will be provided at the back-end, with the phone or a connected PoS terminal being used for confirmation of the transaction (transaction receipt).
• the EMN handler solution will be used to provide an effective intermediary solution to banks that have not yet upgraded their back-end infrastructure to EMV. This applies both to the debit/credit card issuance, transaction authorization and merchant acquiring systems of the bank.
• the transactions will be cleared and settled domestically through the inter-bank switch for domestic transactions or an international settlement agency for cross-border transactions.
• Security Key management will be provided by the scheme operator or the domestic banking regulator for both Symmetric Keys based on 3-DES or AES and Asymmetric Keys based on RSA.
• Funds flow is handled entirely through the banking system, using proven EMV security with the added layer of GSM/CDMA security for secure communications.
• the mCheque Platform in its true sense Of 'Interoperability' is intended to support existing systems and technologies used by mobile operators, mobile phones, transaction systems and banks.
• i Providing printed payment receipt using a mobile phone, wherever possible without making any change on the mobile phone hardware using an external receipt printer.
• j Payment over Internet using debit/credit card on mobile phone.
• k ATM cash-withdrawal using bank card on mobile phone. 1. Person-to-person transfer of payment or funds transfer using mobile phone both domestic and international.
• m Use of Public Key Infrastructure on mobile phones for transactions requiring non- repudiation.
• n Maintaining and managing loyalty pools and coupons on mobile phone.
• This invention thus provides a multi-bank interoperable payment system using mobile phone as debit/credit card which comprises the steps of: (i) establishing connectivity with multiple mobile operators, issuing banks and acquiring banks participating in the "interoperable mCheque system" and inter-bank clearing 8c settlement systems, both domestic and international, via the mCheque back-end system/issuance system; (ii) establishing a link with mutual authentication and trust using standard security mechanism between mCheque issuance system, participating bank and the mobile operator.
• a third party Certification Authority can provide certificates to establish mutual authentication and trust between different systems.
• (iii) providing transaction security which is dependent on the bank's security domain defined on the mobile phone.
• the mobile network is used as a transport and the system does not necessarily depend on the security provided by the mobile network to guarantee transaction security. However, the security provided by the mobile network is treated as a complementary measure.
• Application Provisioning Step-1 loading of payment application containing the basic menus, transaction logic, application security keys and application configuration data; on the target mobile phone of payer/payee using the over-the-air system of the mobile operator;
• Application Provisioning ' Step-2 loading of a conventional Track-2 data provided by the participating bank with EMV security keys and risk management parameters on the target mobile phone of payer using the over-the-air system of the mobile operator;
• Application Provisioning Step-3 (optional): loading of a digital certificate on the target mobile phone of payer/payee using the over- the-air system of the mobile operator requiring non-repudiation; and (vii) establishing a link between the PIN number allotted to the customer and a common mCheque PIN.
• the system takes care of post-issuance activities including blocking/unblocking of debit/credit card, creation/deletion of debit/credit cards, update loyalty pool, loyalty redemption, offering of loyalty coupons, blocking/vmblocking/resetting of PIN, key version control, application version control, restoration of debit/credit accounts and loyalty details for a lost/stolen mobile phone.
• Fig. 1 illustrates the mCheque transaction flow
• Fig. 2 illustrates the mCheque transaction system
• Fig. 3 illustrates the mCheque Card Issuance/Merchant Configuration System
• Fig.4 illustrates the mCheque Digital Certificate System.
• Fig. 1 The use of mobile phone as a debit or credit card involves the following five steps, which is illustrated in Fig. 1.
• Payee Mobile sends a message through mobile network to mCheque back-end with Payer Mobile Number, Transaction Amount and a Random Number.
• mCheque back-end sends a message through mobile network to Payer Mobile with Random Number, Request for Payment and Merchant Details.
• Payer Mobile sends a message to mCheque back-end through mobile network with EMV Cryptogram.
• mCheque back-end through mobile network sends a message to Payee Mobile with Transaction Receipt .
• mCheque back-end through mobile network sends a message to Payer Mobile with Transaction Receipt .
• VTAS mCheque Virtual Terminal Application Server
• Customer Mobile Phone receives the message-2 and displays a confirmation message consisting of Merchant Name, Transaction Amount and Merchant Id. Up on confirmation by the customer, a PIN entry is requested. 2. Up on successful PIN entry, the Customer Mobile Phone generates an Application Request Cryptogram (ARQC) as per EMV specifications using the Card Risk Management Parameters, Random Number, Card Master Key (of the key index assigned for the application in the card security domain). 3. Customer Mobile Phone sends the transaction data with the ARQC to mCheque VTAS.
• ARQC Application Request Cryptogram
• Message-4 Transaction Receipt Message Terminating on Merchant 1.
• mCheque VTAS sends the transaction online for authorization of funds 2.
• mCheque VTAS After receiving transaction authorization from the Issuing Bank of the Debit/Credit Card on Customer's Mobile Phone, mCheque VTAS sends a Payment Receipt to the Merchant. 3.
• mCheque VTAS After confirmation of Receipt delivery, mCheque VTAS issues a Transaction Certificate to the online authorization system of Issuing Bank (denoting completion of transaction) .
• Message-5 Transaction Receipt Message Terminating on Customer Mobile Phone 1.
• mCheque VTAS sends a Payment Receipt to the Customer Mobile Phone.
• the present invention provides a transaction system (refer Fig. 2 and 3) which comprises of an unique mCheque virtual terminal capable of handling communications from mobile phones of the payer and payee and also ensure security of the transaction, said server having means for customer database and merchant data base, means for providing hardware security, means for storing the digital certificates and application software for life cycle management of payer/payee application.
• the process of obtaining a Digital certificate is illustrated in Fig. 4.
• the mobile phone of the user or purchaser through the personalization system of mCheque issuance system will send in the necessary request to the certification authority and after processing the request, the certification authority will forward the required certificate through to the personalization system of mCheque issuance system back to the mobile phone of the payer/payee.
• VTAS Nirtual Terminal Application Server
• VTAS is a secure cluster of virtual EMV terminals, security systems, loyalty systems, bank/operator interfaces running on a High- Availability platform. All mCheque messages originating from the merchant as well as the customer mobile are routed to the VTAS Server. VTAS spawns one instance of Virtual Terminal Application per Merchant Terminal registered in the mCheque system. USAT Interpreter: Application Gateway to interpret and perform application codec (encoding/decoding) functions for data flow between VTAS and Mobile phone. EMV Handler:
• the mCheque EMV Handler performs secure authorization of BMV Application Request Cryptogram (ARQC) generated by the chip card EMV application (debit/credit card) on the customer's mobile phone and generates an EMV Application Response Cryptogram (ARPC).
• ARQC BMV Application Request Cryptogram
• the EMV Handler filters EMV specific data from the financial transaction message and the transaction is sent to the Issuing Bank for funds authorization as if it were a regular magnetic stripe transaction authorization request.
• the EMV Handler therefore provides an effective intermediary Issuing and Acquiring solution for Banks to work with chip cards based on EMV security without having to upgrade their back-end systems to EMV. In case an Issuing Bank is capable of handing EMV transactions directly, the transactions will be directly passed through for authorization by the Bank's EMV Switch.
• the EMV handler system uses a Hardware Security Module compliant to FIPS-140-2 and PKCS#11 standards to carry, out all security operations.
• Remote Personalization System The mCheque Remote Personalization System provides secure personalization of EMV based secure Debit/Credit cards, Loyalty Pools, Coupons on Mobile phone of mobile phones Over-the-Air (OTA).
• the Remote Personalization System also uses the OTA bridge for personalization as well as application updates (such as update of EMV risk parameters). Multiple accounts can be handled on a single Mobile phone by this system.
• the remote personalization system uses a Hardware Security Module to carry out security operations.
• OTA Bridge The mCheque Remote Personalization System provides secure personalization of EMV based secure Debit/Credit cards, Loyalty Pools, Coupons on Mobile phone of mobile phones Over-the-Air (OTA).
• the Remote Personalization System also uses the OTA bridge for personalization as well as application updates (such as update of EMV risk parameters). Multiple accounts can be handled on a single Mobile phone by this system.
• the remote personalization system uses a Hardware Security Module to carry out security operations.
• the mCheque USSD-IP Gateway provides exchange of Unstructured Supplementary Service Data (USSD) messages between the Mobile Station and the IP-based backend of mCheque Payment Platform.
• the mCheque USSD-IP Gateway is co-located with the Master Switching Centre (MSC) of the Mobile Operator through an SS7 (Signaling System 7) link.
• MSC Master Switching Centre
• Host system to switch financial transactions between Switches of participating banks in ISO 8583/XML formats. This system is also used to log the clearing data provided as input to the central Clearing and Settlement Host.
• This system is used process the data that passes through the Transaction Switch to create logs for daily reconciliation to be performed either through a Clearing and Settlements Bank or an automated system.
• the Clearing and Settlement Institution will be given summaries for net settlements between participating Banks and each participating bank will be given detailed logs of all transactions performed by its customers.
• Management Information System of mCheque Payment Platform includes reporting, logging and audit trail of transactional and operational data for all participating entities in the system, including merchants, customers, issuing banks, acquiring banks, mobile operators and personalization system.
• ATM Module :
• PKI based non-repudiable digital-ID and signatures on mobile phone Ideal for all kind of Government payments and transactions. Secure and convenient payment for Internet purchases (unique new method with highest level of security and convenience). ⁇ Instant, anywhere, anytime payment of utility bills; insurance premiums; mobile phone bills; pre-paid top-ups. Payment to vending machines (snacks, beverages, etc.). Cash withdrawal at ATM machines with subscription based access to large number of ATMs in arrangement with banks. ⁇ Loyalty points-pool-on-mobile phone for accumulating rewards from different merchants. Instant over-the-counter redemption.
• the applications are developed without need to customize either the mobile phone hardware. As a result, the entire base of mobile phones available can be used as debit/credit cards and payment terminals without any significant extra investment.

Landscapes

• Business, Economics & Management (AREA)
• Engineering & Computer Science (AREA)
• Accounting & Taxation (AREA)
• Strategic Management (AREA)
• Physics & Mathematics (AREA)
• General Business, Economics & Management (AREA)
• General Physics & Mathematics (AREA)
• Theoretical Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Finance (AREA)
• Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
• Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=34976031

Family Applications (1)

Country Status (2)

Families Citing this family (44)

Family Cites Families (6)

• 2005
  • 2005-02-04 WO PCT/IN2005/000038 patent/WO2005086593A2/en active Application Filing
  • 2005-02-04 EP EP05747247A patent/EP1828998A2/de not_active Withdrawn

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events