EP1866859A2 - Herstellung sicherer daten für kundenloyalitätsprogramme - Google Patents

Herstellung sicherer daten für kundenloyalitätsprogramme

Info

Publication number
EP1866859A2
EP1866859A2 EP06726214A EP06726214A EP1866859A2 EP 1866859 A2 EP1866859 A2 EP 1866859A2 EP 06726214 A EP06726214 A EP 06726214A EP 06726214 A EP06726214 A EP 06726214A EP 1866859 A2 EP1866859 A2 EP 1866859A2
Authority
EP
European Patent Office
Prior art keywords
transaction
merchant
customer
loyalty
group
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP06726214A
Other languages
English (en)
French (fr)
Inventor
Benjamin Morin
Sébastien CANARD
Fabrice Clerc
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Orange SA
Original Assignee
France Telecom SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by France Telecom SA filed Critical France Telecom SA
Publication of EP1866859A2 publication Critical patent/EP1866859A2/de
Withdrawn legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/08Payment architectures
    • G06Q20/12Payment architectures specially adapted for electronic shopping systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/08Payment architectures
    • G06Q20/20Point-of-sale [POS] network systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/341Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3823Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/389Keeping log of transactions for guaranteeing non-repudiation of a transaction
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/409Device specific authentication in transaction processing
    • G06Q20/4093Monitoring of device authentication
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F7/00Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Definitions

  • the invention relates to the field of securing computer data, and relates in particular to the field of electronic and computer equipment for customer loyalty with at least one group of at least one trader.
  • merchants To retain their customers, merchants often use media capable of recording the transactions made with their customers, for the benefit of benefits.
  • the amount and nature of the benefits depend on the loyalty strategy adopted by the merchants and may be a function of a number of transactions, a cumulative amount of expenses, etc.
  • loyalty systems have in common a mechanism capable of recording all or part of the data related to customer transactions at a merchant.
  • This data includes for example the price of each item, the total amount of the transaction, the number of items, the reference of each item, etc. These data are used to calculate a benefit offered to a customer.
  • the media or loyalty cards used to record the data are more or less elaborate, ranging from a simple card buffered by the merchant to each transaction, to magnetic cards.
  • the transaction data can be stored at the merchant or on the customer's support
  • the loyalty card is used to identify customers.
  • the security of the loyalty system (in particular the protection against fraud) is guaranteed by the security of the underlying storage medium used by the merchant (for example a computer database).
  • this approach has several disadvantages. First, security does not protect customers from dishonest merchants, who could for example remove transactions in order not to give their customers the benefits they deserve. In addition, it does not allow customers to know at any time the status of their loyalty points. Finally, this approach requires the merchant to implement a loyalty infrastructure that can be complex.
  • the patent FR2810760 proposes a computer system for customer loyalty comprising a plurality of terminals for merchant equipment, and a plurality of loyalty cards for customers.
  • the terminals include a memory for registering a loyalty program and recording means for recording data corresponding to a commercial transaction in the memory of the loyalty card.
  • US66549912 provides a file structure for storing transactions on any type of loyalty card (laptop, smart card, etc.). Only the confidentiality of transactions is evoked and implemented using passwords stored directly on the card by the merchant. Transactions are therefore only accessible by the latter.
  • the document FR2804228 does not propose a secure scheme of a loyalty card, but only a method of displaying the information contained on a loyalty card to enable a customer to know the status of his privileges at the merchants.
  • the invention therefore relates to a method for recording data relating to a transaction by a merchant's terminal on a portable device for customer loyalty with at least one group of at least one merchant, said transaction being recorded by the merchant's terminal on the portable device, according to the following steps, implemented in any order:
  • the method according to the invention allows a customer to use the same portable fidelity device securely and universally in several merchants belonging to at least one group.
  • the first registration ensures that only the customer has access to all transactions and the second registration ensures that only merchants belonging to the same group can decipher the client's transactions with a partner.
  • the method comprises a signature of said transaction with a private electronic signature key associated with said merchant.
  • Said first record is decryptable by means of a decryption key of the client, and said second record is decryptable by means of said encryption key associated with said group to which said merchant belongs.
  • said data relating to the transaction comprise one or more information items selected from the set of the following information:
  • a customer identifier to prevent a third party from enjoying the benefits illegitimately, - an identifier of the group of merchants to guarantee the universality of loyalty,
  • a product identifier for organizing loyalty operations based on particular products.
  • the portable loyalty device can be used as a reliable electronic estimate or receipt in addition to its use as a loyalty card.
  • data relating to transactions recorded on the portable loyalty device are provided as input to a specific loyalty program which after its execution returns information about the benefits granted to the customer for these transactions.
  • the invention also relates to a computer system for recording data relating to a transaction by a merchant's terminal on a portable device for the distribution of a clientele to at least one group of at least one merchant, the terminal the merchant being intended to record the data of said transaction on storage means of the portable device, via a first communication channel according to a data structure comprising:
  • the system according to the invention is a vectorization system having a universal character and comprises security properties.
  • said data structure comprises a signature of said transaction with a private electronic signature key associated with said merchant.
  • the system has authenticity properties for merchants and customers.
  • the system comprises a device accessed by the terminal of said merchant via a second communication channel, said device storing an identifier of said merchant and its public and private keys of electronic signatures.
  • the system further includes a storage medium connected to the terminal via a third communication channel and storing encryption keys shared by members of the group to which the merchant belongs.
  • the encryption keys can be shared in a simple and secure manner between several merchants belonging to the same group.
  • system may include a key distributor distributing said encryption keys via a fourth communication channel.
  • encryption keys can be distributed confidentially and centrally to all merchants.
  • the system may also include a server for recording the transaction and / or encrypted coordinates of the client, said server being connected to the terminal via a fifth communication channel.
  • the system may also include a loyalty program distributor connected to the terminal via a sixth communication channel and intended to distribute the loyalty programs.
  • loyalty programs can be distributed uniformly and centrally to each group of merchants according to the loyalty strategy adopted by each group.
  • the invention also relates to a portable loyalty device for a loyalty computer system according to the above characteristics and comprising a cryptographic calculation means and a storage means for storing the data relating to said transaction.
  • the portable fidelity device gives the loyalty system a great simplicity of deployment for both the customer and the merchant.
  • the device also includes a read-only memory storing a client identifier and public and private encryption keys of the client and the storage means further includes personal data of the client stored in an encrypted manner with the public encryption key associated with the client so that access to this personal data is subject to the authorization of the said customer by means of a personal identification number.
  • the identifier and the public and private encryption keys of the client are stored in a simple, secure and non-modifiable manner and the personal data of the client are protected.
  • the device can be used as a loyalty card, an electronic quote, or a receipt according to a marking information included in the transaction.
  • the loyalty device guarantees the authenticity and non-repudiation of a commercial proposition and a reliable receipt.
  • the invention also relates to a terminal for recording data relating to a transaction on a portable device for customer loyalty with at least one group of at least one merchant, characterized in that said registration is carried out according to a data structure comprising:
  • said data structure comprises a signature of said transaction with a private electronic signature key associated with said merchant.
  • the invention also relates to a computer program downloadable from a communication network and / or stored on a computer readable medium and / or executable by a microprocessor, characterized in that it comprises program code instructions for the performing the steps of the recording method according to at least one of the above features when executed on a computer or a microprocessor.
  • FIG. 1 illustrates a very schematic example of a loyalty system comprising a terminal and a portable loyalty device, according to the invention
  • FIG. 2 illustrates the loyalty system of FIG. 1 further comprising key and loyalty program distributors and a server.
  • FIG. 1 illustrates a very schematic example of a computer system for recording data relating to a transaction by a merchant's terminal on a portable loyalty or customer loyalty device with a customer.
  • the loyalty system is valid for a plurality of groups and each group is defined by a particular partnership between several merchants.
  • a partnership is a loyalty operation organized by a group of merchants, which consists in giving customers the benefit of benefits valid for all the merchants of this group.
  • Such a partnership may for example exist between a hairdresser and a seller of beauty products.
  • the invention also naturally takes into account the case where merchants are part of the same commercial brand. This allows a customer to benefit from its advantages at several different merchants who belong to the same commercial brand.
  • a merchant can be a member of different distinct groups, and moreover, a group can be reduced to a single merchant.
  • the loyalty computer system comprises a plurality of electronic terminals 1 intended to equip merchants and a plurality of portable loyalty devices 3 intended for customers.
  • the electronic terminal 1 of a merchant belonging to said at least one group includes a memory 5 for the recording of at least one loyalty program P1, P2 and means 7 for reading, writing and processing to execute the programs Pl, P2 of loyalty.
  • a loyalty program (or loyalty program) is a computer program that delivers information relating to a benefit granted to the customer based on the transactions made by the customer with the merchant.
  • the loyalty program implements a loyalty strategy specific to the merchant or group of merchants, according to a set of rules defining the conditions for benefiting from the benefits, their nature and their amount (for example 5% of purchase on the merchant or merchant group). all of the last ten purchases, or a gift given after five purchases, etc.).
  • a loyalty strategy is a function of several parameters, such as the number of transactions, the cumulative amount of transactions, or a period of validity of transactions.
  • a terminal 1 is capable of executing several loyalty programs Pl, P2, for example, so that a merchant participating in several different partnerships can choose the loyalty strategy that is appropriate for a given transaction.
  • the portable fidelity device 3 interacts with the merchant's terminal 1 via a first communication channel Ll which can be electrical, magnetic, optical, radio, infrared, or other.
  • Data relating to each transaction is recorded according to a secure data structure comprising a first encrypted record of the transaction, a second encrypted record of the transaction, and advantageously a signature of the transaction.
  • the first record corresponds to the transaction encrypted with a public encryption key C1 of the client
  • the second record corresponds to the transaction encrypted with a symmetric encryption key Ml associated with the group to which the merchant belongs
  • the signature of the transaction is carried out with a private electronic signature key M2 associated with the merchant.
  • the first record can be decrypted by means of a private decryption key C2 of the client, the second record is decryptable by means of the symmetric encryption key M1, and the signature is verifiable by means of a corresponding public key M3. to the private key of electronic signature M2.
  • the encryption of the transaction with the key Cl ensures that only the customer has access to all of his transactions, which he can decipher at using his secret key C2.
  • the transaction coding with the Ml key ensures that only merchants belonging to the same group can decrypt the customer's transactions with a partner (and only those transactions).
  • signing the transaction guarantees the authenticity of the transaction, that is, a dishonest customer can not forge a dummy transaction.
  • the transaction can be considered as a / 7-tuple that may include a merchant identifier (or group of merchants as part of a partnership), a customer identifier, a transaction identifier, a product identifier, a amount of the transaction, a date of the transaction, and a marker.
  • the identity of the merchant uniquely identifies the merchant (or group of merchants) and thus guarantees the universality of the portable 3 fidelity device.
  • the customer identifier uniquely identifies the owner of the portable loyalty device 3.
  • the presence of the customer's identity in each transaction prevents a customer from fraudulently transferring its benefits to a third party.
  • the identity of the customer in each transaction recorded on the portable device 3 must be the same as that of the owner of this portable device 3. This correspondence can be verified by the merchant when providing a benefit to a customer.
  • the function of the transaction identifier is to prevent a customer from forging fake purchases by duplicating transaction records.
  • the transactions recorded on the portable fidelity device 3 must at least differ by their transaction identifier so that a fraud can be characterized by the existence of two identical transactions.
  • the transaction identifier may be a value assigned by the merchant terminal 1 at the time of the transaction. This value can for example be managed by a counter incremented with each transaction (depending on the client's identity or not).
  • the transaction identifier may be replaced by a number of units of the same product.
  • a fraud would be characterized by the existence of multiple transactions of the same product, at the same time.
  • the transaction identifier allows the non-cumulation of the benefits already granted to the customer.
  • the product or service identifier is used to organize product-related marketing operations. This may be the number on bar codes, for example, or a descriptive string. It should be noted that the presence of the identity of the goods does not render the presence of the amount superfluous. Indeed, the amount of a commodity can change over time. Moreover, if the amount of the transactions was based solely on the identity of the goods, the merchants would be forced to possess a complex infrastructure recording the history of the evolution of the price of each commodity.
  • the function of the marker is to indicate the transactions that have been used by a customer to gain benefits. Its presence in the transactions prevents a customer from modifying his transactions in order to benefit illegitimately several times.
  • the marker can also be used to mark transactions that are quotes (that is, not yet billed) and canceled transactions.
  • the portable loyalty device 3 can be used as a reliable electronic estimate or a reliable receipt in addition to its use as a loyalty card.
  • the portable loyalty device 3 comprises a cryptographic calculation means 11 and a memory means (for example a read-only memory 13) for storing in a non-random manner.
  • the storage means 9 may also include personal data of the owner of the portable device 3 loyalty which are encrypted using its public key Cl. Access to these data is thus subject to the authorization of the customer, for example via a personal identification number (PIN).
  • PIN personal identification number
  • the portable fidelity device 3 may be a smart card, a mobile phone, a personal assistant, or any other equipment comprising a cryptographic calculation means and a storage means.
  • the terminal 1 in the case where the portable fidelity device 3 is a smart card, the terminal 1 must be provided with a card reader. However, in the case where the portable device 3 fidelity is a mobile phone, the terminal 1 may for example be equipped with a Bluetooth type device to communicate with this portable device 3.
  • the chip of the portable device 3 of fidelity comprises a means of protection (physical or logical) granting the client only a right of reading on the storage means 9 of transactions and prohibiting the merchant to delete data contained in this storage means 9 of transactions.
  • the client can not modify the data entered on the transaction storage means 9 if each of these data is numbered (a data being a new transaction or a consumed advantage) and if the Merchant keeps in memory, for each customer, the number of the last data entered.
  • another particular implementation of the invention consists in having the client sign, by means of an electronic signature key, each of the transactions entered by the merchant, thus preventing the merchant from deleting data from the merchant. fraudulent way.
  • the loyalty system comprises an integrated circuit device 15 (for example a smart card) to which the terminal 1 of a merchant accesses via a second communication channel L2 (fllear, optical, radio, infrared, magnetic, etc.).
  • This integrated circuit device 15 is intended to store in a secure and non-modifiable manner the public and private keys of electronic signatures M2, M3 of the merchant as well as the identifier of the merchant (or group of merchants).
  • the loyalty system comprises a secure storage medium 17 connected to the merchant's terminal 1 via a third secure communication channel L3 and storing the symmetrical encryption keys M1 shared by the groups to which the merchant belongs.
  • FIG. 2 shows that the loyalty system may further comprise a key distributor 19 distributing the symmetric encryption keys M1 via a fourth communication channel L4. According to this modality, the distribution of the encryption keys in the case of partnerships or signs is provided by this trusted key distributor 19 via any secure communication channel.
  • the electronic terminal 1 of one of the members of a merchant group comprises a production means (not shown) intended to generate a symmetric encryption key M1 and then to transmit it securely to the other members of the partnership.
  • a production means not shown
  • Another possibility would be a joint and secure calculation of the symmetric encryption key M1 by all members of the merchant group.
  • a server 21 responsible for recording the transactions and possibly the coordinates of the customers. These coordinates that come from the client are communicated in an encrypted manner and their access is subject to the agreement of the customer, via a PIN code. Customer contact information can be used for marketing research purposes or customized advertising campaigns.
  • the loyalty system comprises a distributor 23 of programs P1, P2, P3 connected to the terminal 1 via a sixth communication channel L6 and for distributing the loyalty programs that are loaded into the memory of the terminal 1.
  • a distributor 23 of programs P1, P2, P3 connected to the terminal 1 via a sixth communication channel L6 and for distributing the loyalty programs that are loaded into the memory of the terminal 1.
  • the loyalty programs Pl, P2, P3 are executed at each transaction, at the request of a customer wishing to benefit from its advantages, or at the initiative of the merchant.
  • the merchant executes a loyalty program loaded in his terminal 1.
  • the valid transactions recorded on the portable device 3 fidelity are provided as input to the program specific that after its execution returns information about the benefits granted to the customer for those transactions.
  • the loyalty program obtains the transactions made from the merchant or one of its partners by decrypting the recordings stored on the portable device 3 by means of the merchant's symmetrical encryption key Ml. Then, the loyalty program verifies the authenticity of the transactions using the M3 merchant's public electronic signature key. After verification, the loyalty program selects valid transactions, that is, those that have not been marked as already used to provide a benefit to the customer. Valid transactions for which the customer wants a benefit are provided as input parameters to the program that implements the branding strategy and in return gives the amount of the benefit. The new transactions are encrypted, signed and recorded on the portable fidelity device 3 and, where appropriate, the antecedent transactions used to benefit from the advantage are marked, encrypted and signed.
  • the merchant terminal then verifies the authenticity of the transactions using the merchant's M3 signature public key, using a signature verification protocol.
  • the next step for Terminal 1 is to select "eligible" transactions to calculate the benefit, in this case expenditures of less than one year that have not already been used to benefit. Once this transaction list is extracted, the terminal 1 calculates 20% of the sum of the expenses.
  • the new purchase is recorded on the portable device 3 loyalty, signed and encrypted.
  • transactions are stored in two versions.
  • a version corresponds to the transaction encrypted with the client's public key to enable him to consult all his purchases.
  • the other version corresponds to the transaction encrypted with an encryption key chosen by the merchant (his or shared with partners of the same group).
  • the customer can view all the transactions that are recorded on the portable device 3 of fidelity.
  • a customer can see the benefits he can enjoy before going to a merchant.
  • the customer may have a display terminal for accessing and displaying the transactions recorded on his portable loyalty device 3.
  • the portable loyalty device 3 decrypts the transactions previously encrypted with the client's public key and sends them back to the display terminal. , who displays them.
  • the portable device 3 fidelity In the case where the portable device 3 fidelity is implemented using a mobile phone, the latter can also act as a terminal. In the case where the portable fidelity device 3 is a smart card, a dedicated display terminal is required. It can be a device connected to a personal assistant or a personal computer, or even a card reader with a screen.
  • the customer comes to a first merchant.
  • the merchant signs and encrypts a business proposal (a transaction) for a specific item or service.
  • This article or service is marked as not yet billed, so that a customer does not pass a quote fraudulently for a transaction.
  • the quote is finally saved on the device 3 loyalty notebook.
  • the customer can prove the authenticity of the offer at a competing merchant. To do this, the customer consults the offer made by the first merchant using his display terminal and presents it to the second merchant.
  • the electronic quote guarantees merchants the authenticity of competing commercial proposals made to customers in the event of negotiation and to customers, the non-repudiation of a commercial proposal made by a merchant.
  • the customer presents his portable device 3 to the merchant to whom he wishes, for example, to bring back an article.
  • the merchant's terminal 1 accesses the transactions recorded on the customer's portable device 3 of loyalty.
  • the merchant is sure of the authenticity of these purchases, since he signed them during the transaction. If the merchant accepts the return of the item, the transaction is marked as canceled.
  • the electronic sales receipt guarantees the merchants the authenticity of their own identity in the transactions recorded on the portable device 3 and the customers the non repudiation of a purchase by a merchant in bad faith.
  • the present invention provides a method, system and universal loyalty device for implementing any loyalty strategy.
  • the use of portable customer-owned loyalty devices makes deployment easy for both the customer and the merchant. Merchants only need a terminal capable of reading transactions stored on the customer's device that can take the form of, for example, a smart card, mobile phone, or other mobile security device .
  • the portable fidelity device can also be used as a receipt or as a quote.
  • any transaction has security properties
  • the steps of the recording method according to the invention can be performed by code instructions of a computer program when it is executed on a computer or a microprocessor.
  • This computer program can be downloaded from a communication network and / or stored on a computer readable medium.
EP06726214A 2005-03-03 2006-03-02 Herstellung sicherer daten für kundenloyalitätsprogramme Withdrawn EP1866859A2 (de)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FR0502144 2005-03-03
PCT/FR2006/050190 WO2006092539A2 (fr) 2005-03-03 2006-03-02 Securisation de donnees pour programmes de fidelisation de clientele

Publications (1)

Publication Number Publication Date
EP1866859A2 true EP1866859A2 (de) 2007-12-19

Family

ID=34954881

Family Applications (1)

Application Number Title Priority Date Filing Date
EP06726214A Withdrawn EP1866859A2 (de) 2005-03-03 2006-03-02 Herstellung sicherer daten für kundenloyalitätsprogramme

Country Status (3)

Country Link
US (1) US20090012900A1 (de)
EP (1) EP1866859A2 (de)
WO (1) WO2006092539A2 (de)

Families Citing this family (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8756306B1 (en) * 2007-06-29 2014-06-17 Verizon Patent And Licensing Inc. Dashboard interface group identifier
CN101170407B (zh) * 2007-12-03 2011-01-12 北京深思洛克软件技术股份有限公司 一种安全地生成密钥对和传送公钥或证书申请文件的方法
FI121829B (fi) * 2009-06-18 2011-04-29 Pekka Aarne Rehtijaervi Räätälöidyn sovelluksen tuottaminen käyttäjän päätelaitteelle
FI20106335A0 (fi) 2010-12-17 2010-12-17 Pocketsoft Oy Räätälöidyn sovelluksen tuottaminen käyttäjän päätelaitteelle
FI20106336A0 (fi) 2010-12-17 2010-12-17 Pocketsoft Oy Räätälöidyn sovelluksen tuottaminen käyttäjän päätelaitteelle
KR101639548B1 (ko) * 2013-04-28 2016-07-13 텐센트 테크놀로지(센젠) 컴퍼니 리미티드 객체 처리 시스템 및 방법
US10783508B1 (en) 2014-12-16 2020-09-22 Square, Inc. Processing multiple point-of-sale transactions
US20160225000A1 (en) * 2015-02-02 2016-08-04 At&T Intellectual Property I, L.P. Consent valuation
US10607200B2 (en) * 2015-12-28 2020-03-31 Square, Inc. Point of sale system having a customer terminal and a merchant terminal
US10504092B2 (en) 2016-06-21 2019-12-10 Square, Inc. Transaction interface control
US10783509B2 (en) 2017-09-29 2020-09-22 Square, Inc. Message sizing and serialization optimization

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6738749B1 (en) * 1998-09-09 2004-05-18 Ncr Corporation Methods and apparatus for creating and storing secure customer receipts on smart cards
US20010011247A1 (en) 1998-10-02 2001-08-02 O'flaherty Kenneth W. Privacy-enabled loyalty card system and method
FR2804228B1 (fr) 2000-01-20 2003-10-31 Welcome Real Time Dispositif et procede de traitement et d'affichage d'informations codees stockees dans une carte a puce
FR2810760B1 (fr) 2000-06-26 2007-12-07 Loy Lty Soft Systeme et procede informatique pour la fidelisation d'une clientele
GB2365264B (en) 2000-07-25 2004-09-29 Vodafone Ltd Telecommunication systems and methods
FR2812424A1 (fr) 2000-07-28 2002-02-01 Everbee Wireless Ltd Procede et systeme pour effectuer des transactions securisees de biens et de services au moyen d'un telephone mobile via un reseau de communication cellulaire
US20030059049A1 (en) 2001-09-24 2003-03-27 Mihm Thomas J. Method and apparatus for secure mobile transaction
US7083090B2 (en) * 2002-08-09 2006-08-01 Patrick Zuili Remote portable and universal smartcard authentication and authorization device
GB2397678A (en) 2003-01-23 2004-07-28 Sema Uk Ltd A secure terminal for use with a smart card based loyalty scheme

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO2006092539A2 *

Also Published As

Publication number Publication date
WO2006092539A2 (fr) 2006-09-08
WO2006092539A3 (fr) 2006-11-30
US20090012900A1 (en) 2009-01-08

Similar Documents

Publication Publication Date Title
EP1866859A2 (de) Herstellung sicherer daten für kundenloyalitätsprogramme
US11694207B2 (en) Securing an exchange item associated with fraud
CN106570757B (zh) 一种基于区块链的众筹方法、装置及系统
AU2005255441B2 (en) Using multiple pins for redemption through multiple distribution channels
EP0671712B1 (de) Verfahren und Vorrichtung zum Authentifizieren eines Datanträgers, bestimmt zum Zulassen einer Transaktion oder des Zuganges zu einer Dienstleistung oder zu einem Ort; und entsprechender Datenträger
US20150046337A1 (en) Offline virtual currency transaction
US20060255126A1 (en) Stored value card validation
KR20040058176A (ko) 식별 정보 발행 시스템
EP3701462B1 (de) Verfahren und system zur sicheren registrierung von kryptographischen schlüsseln auf einem physikalischen medium für kryptographische schlüssel und physikalisches medium
US11710122B2 (en) Using a nested random number-based security ecosystem for block chains for electronic cash tokens and other embodiments
WO2018154082A1 (fr) Système et procédé de traitement d'une transaction bancaire
CA2398317A1 (fr) Systeme et procede de securisation des transmissions d'informations
Habib et al. Case study of Bitcoin and Its Halal dimension
EP1164529A1 (de) System und verfahren zur ausgabe von kupons
JP2004171039A (ja) 識別情報発行システム、装置及び方法、プログラム、並びに記録媒体
FR3025915A1 (fr) Procedes et dispositifs de gestion de transactions composites
US20220414667A1 (en) Dynamically sharing an exchange item
EP2824625B1 (de) Methode zur Ausführung einer Transaktion, Endgerät und entsprechendes Computerprogramm
FR3054055A1 (fr) Procede de traitement d'au moins une donnee de moyen de paiement, terminal de paiement et programme d'ordinateur correspondant
BE1013467A3 (fr) Utilisation cooperative de numeros d'identification pour des transactions de clients.
WO2013000966A1 (fr) Procede de transaction dematerialisee
Kamel et al. The impact of the role of the government of Egypt on electronic commerce development and growth
Leahey Tax, Technology and Privacy: The Coming Collision
TW202416233A (zh) 商品的非同質化代幣交易系統
WO2002046984A1 (fr) Procede securise de transaction entre un acheteur et un vendeur

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20070925

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR

DAX Request for extension of the european patent (deleted)
17Q First examination report despatched

Effective date: 20090529

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20111001