Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
  • H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q30/00—Commerce
  • G06Q30/02—Marketing; Price estimation or determination; Fundraising
  • G06Q30/0207—Discounts or incentives, e.g. coupons or rebates
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q30/00—Commerce
  • G06Q30/02—Marketing; Price estimation or determination; Fundraising
  • G06Q30/0241—Advertisements
  • G06Q30/0251—Targeted advertisements
  • G06Q30/0261—Targeted advertisements based on user location
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
  • H04L63/0407—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the identity of one or more communicating identities is hidden
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/08—Access security
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
  • H04W12/60—Context-dependent security
  • H04W12/69—Identity-dependent
  • H04W12/75—Temporary identity
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
  • H04W4/02—Services making use of location information
  • H04W4/025—Services making use of location information using location based information parameters

Definitions

• the subject of the invention is the secure management of the provision of a service delivered by a server of a service provider to a user of a mobile terminal.
• It relates more particularly to a method of securely linking a mobile terminal of a user and at least one server of a service provider via a platform.
• the recommendations can not be proposed before the checkout, when the customer is present in the store and makes purchases in the store since the customer is identified only by means of his loyalty card and this , only during checkout.
• a secure connection solution enabling a service provider to communicate with a particular customer in a personalized manner when the customer is present in the store, and to offer the customer at least one service ( product to buy, content to acquire etc, discounts, promotions, recommendations ...) likely to interest him, based for example on previous purchases made by means of a card such as a loyalty card or other.
• the present invention thus relates in a first aspect to a method of relating a mobile terminal of a user and at least one server of a service provider, the method comprising the following steps:
• the linking method relies in particular on storing an association between, on the one hand, a card identifier defined for a card assigned to the user, and, on the other hand, an alias datum associated with a user identifier by means of which a mobile terminal of the user is identified with the mobile network. This association makes it possible to link a user present in the store, carrying a card, and a user carrying a mobile terminal.
• the alias data is used to identify the user to the service provider. It is thus possible, from the stored data, to find the associated card identifier, as well as data on one or more transactions made using the card.
• the server of the service provider can therefore provide the user with at least one service likely to interest him and transmit these proposals via the communication link established on the basis of the alias data.
• the user can receive these proposals while he is in the store, even before his checkout, and this in a personalized way since the link with his card - and therefore his previous transactions made at the way of this map - is known.
• the user does not need to identify himself via his card beforehand, since his identification via the alias data is sufficient.
• the alias data is therefore used to establish a logical link between the card and the mobile terminal.
• the alias data is used to identify the user to the service provider when using the mobile terminal.
• the invention is applicable to many situations.
• the card in question is for example a physical or virtual or electronic card.
• the card is for example a loyalty card, a credit card, a promotion card or a credit card.
• the card identifier may be coded in a bar code, an electronic chip or a magnetic strip.
• the card identifier, present on or in the card, is readable by an appropriate reader.
• the card is typically used for checkout in a store to make payment and / or receive points or benefits in accordance with a loyalty program and / or to acquire a right of access to a service .
• a transaction to designate a data exchange and / or data processing carried out between the service provider and a user as part of the provision of a service.
• service for example a payment, a purchase of product (s) or service (s), a request for access to a service, a request for access to a content or consultation of such content, a sending of content , ordering products, requesting or sending information about a product or service, etc.
• service is thus to be interpreted broadly: the provision of a service by a service provider thus corresponds to a set of at least one operation performed between at least the service provider and a user. For example, the sale of a product, the provision of access to a service or content, the supply of content, the receipt or processing of an order, the implementation of a payment transaction, etc.
• the linking method comprises a step of receiving by the server of the service and storage provider in association with the card identifier of second data relating to a second transaction made between the user and the user. service provider via said communication link.
• data listing the various transactions made for a user is by means of his card, or by means of the mobile terminal upon connection to a service provider server can be registered in association and operated in a correlated manner by the service providers.
• the data relating to the operations or transactions carried out by a user during a connection of the mobile terminal to a service provider server can be memorized with those relating to the operations or transactions carried out by this user by means of his card.
• the user can choose to use his mobile terminal for online transactions or transactions, or to go to the store and present his card during checkout: all transactions or transactions he will perform as well can be taken into account without distinction as to the procedure.
• the method comprises a step of obtaining by the platform the alias data following an identification of the mobile terminal by a network entity of the mobile network on the basis of said user identifier.
• the mobile terminal is identified by means of the user identifier by the mobile network, that is to say by one of the network entities of the mobile network in charge of the identification of the mobile terminals which connects or is connected to this network mobile.
• the platform is designed to obtain this alias data, for example from one of these network entities.
• the alias data derived from a user identifier that can only be obtained by network entities responsible for the identification of mobile terminals, only an operator of this mobile network is aware of this alias data. It is therefore managed securely in the mobile network.
• the platform is directly integrated into the network infrastructure of the mobile network.
• the operations performed by the platform are secure.
• the alias data item used for the communication link between the mobile terminal and the service provider's server is a provider alias data item, stored for one or more service providers in association with a data item. alias operator, itself associated with the user identifier.
• the platform when it receives via said communication link a request from the mobile terminal, containing the operator alias data and intended for a server of a service provider, replaces the alias data.
• the operator alias data is never transmitted to an entity outside the network infrastructure of the mobile network.
• the alias data is therefore confidential.
• the platform has a list of at least one service, each service being associated with at least one geographic area of availability, the method further comprising the following steps:
• the linking step being performed for a server of a service provider selected from the one or more determined available services.
• the use of the geolocation information of the mobile terminal makes it easier to identify the service provider (s) in the stores from which the user is likely to be. Thus, if each service provider declares a geographic availability zone for each of its stores, the user can easily select from among the stores located in the neighborhood the one in which he is or the one in which he intends to actually go, even if the geolocation information of the mobile terminal has a limited precision as is the case for example of geolocation information produced by the mobile network.
• the method according to the first aspect comprises a step of transmitting to the mobile terminal of the user, following the correct entry of a USSD code ("Unstructured Supplementary Service Data” or "Additional Service for Unstructured Data”). ") By the user on his mobile terminal, a message allowing a connection of the mobile terminal to the platform.
• a USSD code Unstructured Supplementary Service Data
• Additional Service for Unstructured Data By the user on his mobile terminal, a message allowing a connection of the mobile terminal to the platform.
• obtaining information from the terminal location area can be triggered following the detection of a connection of the mobile terminal to the platform or by receiving a request message transmitted by the mobile terminal for obtain from the platform a list of available services.
• the user identifier may be an identifier associated with a user identification module of the mobile terminal.
• the platform can identify an available service selected for the connection by implementing the following steps:
• linking step may include the following steps implemented by the platform:
• the linking step can also include the transmission by the platform to a server of the selected service provider of an alphanumeric code entered by the user on his mobile terminal so that said server of the service provider delivers to the user a service associated with said alphanumeric code.
• the linking step may finally comprise at least one step implemented via the platform from a step of transmission to the mobile terminal of the user of electronic mail or text message from the server of the service provider. selected and / or a step of establishing voice communications with the mobile terminal of the user.
• the method according to the first aspect may furthermore comprise a step of making the user available via the platform of a personal page comprising personal information such as an e-mail address, said personal information being able to be updated by the user of the mobile terminal.
• the exchange of data between the platform and a service provider server can be securely performed via a virtual private network (VPN) established between the platform and the service provider server.
• VPN virtual private network
• the present invention relates to a computer program product comprising code instructions for executing a method according to the first aspect when this program is executed by a processor.
• the present invention relates in a third aspect to a server of a service provider comprising
• a first database for storing an identifier of a card assigned to the user by this service provider, in correspondence with an alias data item, associated with a user identifier by means of which the mobile terminal (1) is identified with the mobile network;
• a second database for storing, in association with the card identifier, first data relating to at least a first transaction made between the user and the service provider by means of the card;
• Figure 1 schematically illustrates hardware means for a possible implementation for the invention
• FIG. 2 schematically illustrates hardware means for a possible implementation for the invention according to which the communications use the HTTP protocol
• FIG. 3 is a diagram schematizing an exemplary implementation of a method of putting into relation according to an embodiment of the invention
• FIGS. 4a, 4b, 4c, 4d illustrate an example of access by a user of a mobile terminal to an available service with entry of a USSD code according to an implementation mode of the invention
• FIG. 5 illustrates an example of transmission of the alias and geographical coordinates of the mobile terminal to the platform
• FIG. 6 illustrates the principle of the "couponing" card according to one embodiment of the invention.
• an implementation for the invention relates to a method of connecting a mobile terminal 1 of a user and at least one server 3a, 3b, 3c ... of a service provider via a platform 2 adapted to be connected to a mobile network 4 managed by an operator.
• the mobile terminal 1 is capable of being connected to the mobile network 4 and comprises a secure element 5.
• a secure element 5 is able to store secure data in a memory, and may for example consist of a smart card comprising a connected microprocessor. by a data bus to a random access memory and a non-volatile rewritable memory such as a flash memory or an EEPROM memory and securely storing data and applications executable by said microprocessor in a non-volatile memory.
• the secure element is typically a SIM card (“Suscriber Identity Module”), often called “subscriber identification module”, referred to in this document as "user identification module”. "...
• the mobile terminal When connected to the mobile network, the mobile terminal is identified by the mobile network by means of at least one user identifier.
• This user identifier is an identifier associated with the secure element 5, for example the subscriber identifier (IMSI number, "International Mobile Subscriber Identity",) and / or the call number (MSISDN number, "Mobile Integrated Station” Digital Network Number Service ").
• IMSI number International Mobile Subscriber Identity
• MSISDN number Mobile Integrated Station Digital Network Number Service
• Such a user identifier is unique and also serves as an identifier of the user identification module.
• a user as a natural person, subscriber of a customer account with a mobile network operator (whether it is a customer account with or without subscription, with or without a prepaid account, etc. ) and,
• a user as a mobile terminal, connected to the mobile network, identified and distinguished from other mobile terminals connected by means of the user identification module housed in this terminal.
• the user a natural person, who has subscribed a customer account with a mobile network operator is recognized by means of such a user identifier as a priori user of the mobile terminal through the user identification module housed in the mobile terminal.
• mobile terminal used, regardless of the physical person actually using the mobile terminal and whatever mobile terminal in which is housed the user identification module.
• the method described below is implemented by the platform 2 and allows the secure delivery by a server of a service provider 3a, 3b, 3c to the mobile terminal 1 of a geolocated service.
• the platform 2 is placed as an intermediary between the mobile terminal 1 and the servers 3a, 3b, 3c to hide the real identity of the user of the mobile terminal, as a natural person. It is identified with servers 3a, 3b, 3c only by an alias, called here alias data.
• the correspondence between this alias data and the real identity of the user of the mobile terminal remains unknown to the servers 3a, 3b, 3c which never come into direct communication with the mobile terminal 1.
• the alias data can not be used in another context or by another entity of the network.
• the use of such alias data for the identification of the mobile terminal user by the service provider servers also avoids the user of the mobile terminal having to enter an identifier and a password. password to identify with the servers.
• the mobile terminal 1 of the user may consist of a mobile phone, a "smartphone", a tablet, a game console, a laptop, a PDA ("Personal Digital Assistant") or any other mobile terminal equipped with a mobile phone.
• secure element 5 and wireless communication means allowing it to access the mobile network 4.
• the mobile terminal 1 can be a mobile phone of any type, with or without a large screen, a GPS chip, means of tactile inputs.
• the mobile terminal 1 includes at least one software application, such as a browser, capable of displaying a webpage-like page such as an HTML or PHP page or more generally to establish a communication link with a remote server. Thus such a mobile terminal 1 is not necessarily a "smartphone".
• the mobile network 4 may consist of a mobile telephone network of GSM, GPRS, UMTS, LTE type ...
• the communications on this network can be secured, in particular by encryption of the exchanged data.
• the mobile phone network FIG. 1 is a mobile network of the GSM type which comprises network entities adapted to carry out identification of a mobile terminal on the basis of a user identifier.
• the mobile network comprises a base station (BTS) 6 connected to the mobile terminal 1 and at least one home location register (HLR) 7.
• the HLR consists of a central database the mobile network operator, comprising information relating to any user authorized to use this network and in particular its location in the network.
• the HLR contains in particular the following information characterizing the user himself: the IMSI ("International Mobile Subscriber Identity"), unique identifier of the user and which is also registered on the SIM card, the IMEl ("International Mobile Equipment Identity ”) defining the Mobile Station used, usually the user's mobile phone, the MSISDN indicating the international call number through which the user can be reached ... Generating the alias data
• the mobile network also comprises a processing module 8 making it possible to store and manage an alias data item in association with at least one user identifier, or even to generate this alias data item from at least one user identifier associated with the alias data item.
• secure element 5 such as the IMSI and / or the MSDISDN provided by the HLR 7.
• Such a processing module 8 can be included in a WISP 9 ("Wireless Internet
• This alias data can result from any transformation of this user identifier or user identifiers, for example a transformation by application of a hash function.
• the transformation function is chosen such that the alias data obtained by transformation is unique and permanent, thus allowing unambiguous identification by the platform 2 of the subscriber's physical person of the customer account and also of the mobile terminal of the user.
• This alias data is used as the unique identifier of the user of the mobile terminal 1 with the servers 3a, 3b, 3c of the service providers.
• the alias data can be generated at the time of production and / or configuration of the user identification module, or even during the first connection to the mobile network of the operator of a mobile terminal incorporating this module. user identification.
• the generated alias data is stored in association with a user identifier in an operator-specific database.
• the alias data is permanent and does not change during subsequent connections to the mobile network.
• the alias data thus serves as an anonymized identifier of the mobile terminal and / or the user of this mobile terminal and / or the subscriber identification module of this terminal.
• the user identifier is determined by a network entity of the mobile network and the data of alias is determined by the network entity of the mobile network which stores this operator alias data in association with the user identifier.
• the alias data is then transmitted to the platform for connection between a service provider server and a mobile terminal.
• the platform 2 is thus designed to obtain this alias data, when establishing a connection between the mobile terminal and the platform via the mobile network and to transmit this alias data to at least one of the servers 3a, 3b, 3c service providers.
• HTTP Hypertext Transfer Protocol
• the mobile terminal establishes a web connection for connecting the mobile terminal to the platform.
• a first HTTP request is sent by the terminal containing the URL ("Uniform Resource Locator") corresponding to the platform: http: // urlp /, where 'urlp' is the Web domain managed by the platform.
• This first HTTP request is received by WISP.
• the received URL is enriched by WISP by inserting the alias data ('aa') and location information 'xy'.
• the enriched URL is then for example in the form http: // urlp / aa / xy /.
• the platform receives the first HTTP request containing the enriched URL, and extracts the alias and location area information. The platform is thus not aware of the user identifier (s) used for the generation of the alias data.
• the platform will either send to the mobile terminal a list of available servers (if there is more than one server associated with the location area) by returning a list of possible URLs corresponding to the different servers, ie directly route the first HTTP request to the only available server.
• the platform When the platform directly routes the first HTTP request to the only available server, it adds the web domain 'url3a' managed by the available server and deletes the location field information from the URL beforehand: http: // urlp / url3a / aa /.
• url3a, url3b, url3c are the web domains managed by the servers 3a, 3b, 3c respectively.
• a second HTTP request is sent to the platform using one of these URLs. Again the WISP intercepts this HTTP request and inserts the alias data 'aa' and location information 'xy': http: // urlp / url3a / aa / xy for example. Then the platform routes the second HTTP request to the concerned server, after possibly removing the location area information from the URL: http: // urlp / url3a / aa /.
• the first alias datum is a permanent alias datum: this first alias datum is stored, as described above, in association with the user identifier by a network entity of the network mobile (the WISP for example);
• the second alias data, or alias data provider is a temporary alias data, modifiable at the request of the user or a service provider or the platform: this second alias data is stored in memory in association with the card identifier by a server of one or more service providers.
• the platform memorizes in association the operator alias data in association with one or more supplier alias data. For each provider alias data, the platform also stores an identification of the service provider (s) for which this supplier alias data is to be used.
• the provider alias data is unique to one or more service providers, the operator alias data is common to all service providers.
• the service provider servers are not aware of this operator alias data which is stored only by the platform and the network entity of the mobile network (the WISP).
• the user identifier is determined by a network entity of the mobile network and the operator alias data is determined by the network entity of the mobile network which stores this data. alias operator in association with the user identifier. The operator alias data is then transmitted to the platform for connection between a service provider server and a mobile terminal.
• the operator alias data is replaced by the platform by the provider alias data which is stored in association with a service provider identification. for which the connection is to be made.
• a first advantage of the double-alias solution lies in the fact that the operator alias data is never transmitted to a service provider server: it is known only to the platform 2 and the network entity that stores it. . The usurpation of this operator alias data is therefore much more difficult.
• a second advantage of the double-alias solution lies in the fact that the supplier alias data can be modified at any time, without impacting on the connection and the mechanism for exchanging data between the user and the service providers. service. This gives more flexibility on the service provider side to offer a possibility for the user to regain his anonymity. Indeed, by using a single alias data, the anonymity of the user does not really exist if the service provider has also memorized personal information (surname, first name, address, telephone, etc.) in association with the card identifier, as is often the case for loyalty cards (personalized and / or non-anonymous).
• the user for example has the possibility to request by connecting to the platform and / or the server of the service provider of:
• the alias data used during the steps of the linking process is
• the platform which serves as a communication medium between the mobile terminal of the user and a service provider server, therefore replaces the operator alias data with the provider alias data corresponding to the service provider concerned when it receives a request from the mobile terminal before transferring this request to the service provider's server.
• the data 'aa' coded in the URL transmitted to the server of the service provider http: // urlp / url3a / aa / xy will be the provider alias data and not the data. alias operator.
• the platform replaces the provider alias data with the operator alias data when it receives a request from a server of a service provider before transferring the request to the mobile terminal.
• the servers of the service providers 3a, 3b, 3c comprise a random access memory and storage means such as a rewritable non-volatile memory (flash memory or EEPROM memory) that can store at least one database and data processing means comprising a data processor for executing a computer program comprising program instructions for implementing the steps of the method of relating to a terminal.
• a rewritable non-volatile memory flash memory or EEPROM memory
• Said servers also include a communication interface for establishing a communication link with platform 2 and with a terminal via the platform, wired such as an Ethernet link, or wireless such as a Wifi or Bluetooth connection.
• Such servers may also be connected via USB, Ethernet, Firewire, eSata, etc. to an external storage device such as an external hard disk or networked hard disk ("NAS").
• NAS networked hard disk
• Such a server is dedicated to providing a service to a user through a mobile site intended to be displayed by the browser of the mobile terminal 1 of the user.
• Such an online service may be provided by the service provider on behalf of a physical establishment such as a store, a museum, an exhibition center, etc.
• the servers of the service providers 3a, 3b, 3c comprise or access a first database for storing, for the beneficiary users of a card, an identifier of a card assigned to the user by this service provider, in correspondence with an alias data associated with a user identifier by means of which the mobile terminal is identified by the operator of the mobile network.
• the servers of the service providers 3a, 3b, 3c comprise or access at least one second database for storing, in association with the card identifier, first data, called first transaction data, relating to one or more transactions. between the user and the service provider using the card.
• the transaction is for example a purchase of product with presentation of the card during the checkout.
• These first transaction data comprise, for example, a transaction amount, an identification of at least one product or service provided by the service provider to the user as part of the execution of these transactions. This may be for example data usually present on a receipt, invoice data, etc.
• These first data are also generated during the checkout of the user, at the time of payment, and transmitted to the second database for storage by the equipment (the cash register, in this case) that generates them.
• These first transaction data allow the service provider's server to make recommendations to the user about products that may be of interest to him and thus to accelerate and facilitate the identification by the user of interesting products.
• the storage of these first transaction data is carried out by the service provider server concerned before, after, or in parallel with any of the steps E0 to E4 during which a communication link is established, via the mobile network, by through the platform 2, between the mobile terminal of the user and the server of the service provider concerned to connect the user and the service provider.
• the servers of the service providers 3a, 3b, 3c are further configured to store in a database, for example in the second database, in association with the card identifier, second data, called second transaction data. , relating to one or more transactions made between the user and the service provider through an established communication link, via the mobile network, via the platform 2, between the mobile terminal of the user and the relevant service provider server.
• the second corresponding transaction data will be stored: product identification, transaction amount, promotion code etc.
• Step E4 Storage of these second transaction data is performed during step E4, following the establishment, via the mobile network, via the platform 2, of a communication link between the mobile terminal of the user and the relevant service provider server.
• each service provider server can thus exploit correlatively first stored transaction data for transactions made using the card and second transaction data stored for transactions made via the established communication link.
• the set of transaction data thus stored can be used to generate recommendations, that is to say information on at least one service offered to the user by the service provider.
• the servers of the service providers 3a, 3b, 3c may further comprise a third database for storing personal information about the user (surname, first name, address, telephone, etc.) in association with the card identifier which is assigned to this user.
• the different databases may or may not be hosted in a single physical device.
• the platform 2 may comprise a proxy server, storage means such as a rewritable non-volatile memory (flash memory or EEPROM memory) capable of storing at least one database and processing means comprising a processor.
• Said platform 2 can also include interface means, wired such as an Ethernet link, or wireless such as a Wifi or Bluetooth connection allowing it to connect on the one hand to said mobile network and other part of servers 3a, 3b, 3c ... service providers.
• Virtual private networks can be established between the platform 2 and each server 3a, 3b, 3c ... of a service provider.
• Such virtual private networks can be seen as an extension of local networks and help preserve the logical security that can be found within a local network. They actually correspond to a interconnection of local networks via a "tunnel" technique making it possible to secure transmitted data by implementing cryptographic algorithms.
• service providers can refuse any communication from a non-platform entity and are inaccessible to search engines and Internet robots, as well as hackers attempting to connect to it. The security of the data exchange between the platform and the servers of the service providers is thus greatly improved.
• the communications between the mobile terminal 1, the mobile network 4, the platform 2 and the servers of the service providers 3a, 3b, 3c use the http protocol.
• the material means corresponding to such an implementation of the invention are shown in FIG.
• the secure exchange process can be implemented in several phases: a registration phase of the servers of the service providers at the platform, a phase of connection of the mobile terminal to the platform, a phase of obtaining information relating to the mobile terminal, a phase of accessibility of the user to the available services and a phase of delivery to the mobile terminal of the mobile terminal. 'a service provided by a service provider.
• each service provider registers his server 3a, 3b, 3c on the platform 2 so that the geolocated services he proposes can be delivered by the latter to the mobile terminal.
• each service provider indicates a physical address characterizing the geographical location of his physical establishment in the vicinity of which he wants to provide a geolocated service.
• the physical address may correspond to the geographical center of a service activity without the service provider necessarily having a physical establishment at said address.
• the same service provider may register multiple geographically remote physical facilities or several geographically distant service activities.
• the service provider may also provide information such as a maximum distance of providing a service relative to the indicated geographical location, allowing the platform 2 to determine a geographical area of availability in which said service may be provided to a service provider.
• information such as a maximum distance of providing a service relative to the indicated geographical location, allowing the platform 2 to determine a geographical area of availability in which said service may be provided to a service provider.
• user of a mobile terminal 1 In the absence of provision of such information, a geographical area corresponding to a disk centered on the indicated geographical location and whose radius is a default value may be used.
• Such a geographical area may not exceed the territory covered by the mobile network operator 4.
• the platform 2 has a list of services for which service providers have registered a server, each service being associated at least one geographic area of availability.
• This data can be stored in the form of a database stored in the storage means of the platform or in a remote database accessible by the platform.
• each service provider can delimit the geographical area or zones in which it authorizes the user of a mobile terminal to receive a service.
• the service provider can then offer a service adapted to this geographical location.
• a geographical area may correspond to one or more location cells managed by the mobile network operator. The extent of the geographical area is thus variable and depends on the maximum range of the BTS of the cell or cells corresponding to the defined geographical area.
• a first step E1 the user of the mobile terminal 1 requests the connection thereof to the platform 2.
• the user enters for this on the browser of his mobile terminal 1 a network address such as an IP address or an http address to connect to the platform 2.
• This address can then be added as a favorite.
• a unique USSD code ("Unstructured Supplementary Service Data") 10, for example, # 100 # may have been defined to facilitate the connection of the mobile terminal 1 to the platform 2.
• the user can then enter the USSD code on the keyboard of his mobile terminal 1 and receive in response a message allowing him to connect to the platform such as an SMS message 12 in the body of which is the address of the platform 2.
• SMS may be replaced by any type of message processed by the operator of the mobile network 4, for example an MMS.
• the entered address is sent to the WISP 9 of the operator network.
• the WISP 9 only allows access of mobile terminals 1 recognized on the mobile network 4, that is to say for which a user identifier can be obtained, for example by interrogating the user identification module 5. Any attempt to connect by a terminal that does not have a user identification module, or tries to connect from other networks such as the Internet is denied by WISP.
• the WISP 9 transmits the connection request from the mobile terminal 1 to the platform 2, together with a location information of the mobile terminal 1 of the user and the alias data identifying the user of the mobile terminal 1.
• the WISP 9 can obtain this information by interrogating equipment of the mobile network of the operator such as the HLR 7 and the processing module 8. In the particular case of the embodiment with double alias, it is the data of operator alias which is transmitted during step E2 to platform 2.
• the WISP can provide an identifier of the mobile terminal: for example a user identifier contained in the user identification module of the mobile terminal requiring a connection to the platform 2.
• the platform does not need to interrogate the mobile terminal to obtain location information from the mobile terminal 1.
• the WISP 9 can also transmit the identifier of the mobile network operator 4 to the platform 2.
• This information can be transmitted to the platform 2 by the WISP (Wireless Internet Service Provider) of the mobile network 4 in the form of an url such as an http link, as illustrated in FIG.
• WISP Wireless Internet Service Provider
• this second step is triggered following the connection request from the mobile terminal 1 to the platform 2 during the first step E1.
• this second step may be triggered later by the mobile terminal 1 sending the platform 2 a request message to obtain a list of available services.
• a request message may for example be sent by the mobile terminal 1 after receiving a first service to determine what other services are available.
• the initial connection of the mobile terminal 1 to the platform 2 has already taken place for some time.
• the platform 2 determines, according to said location information obtained during the second step E2 and the list of services stored at the end of the step E0, the services, said services available. associated with at least one geographical area of availability in which the mobile terminal of the user is located. These available services are those to which the geographical location of the mobile terminal 1 will give it the right to access.
• the list of services is for example in the form of a list of referenced stores for the geographical area of availability determined.
• the platform 2 identifies that no service is available to the user, it refers to the mobile terminal 1 a page indicating that no service is available in the geographical area in which the user is located.
• platform 2 determines that only one service is available to the user, this service can be automatically chosen by platform 2 as the selected service that the user will access in the next step.
• the platform 2 determines that at least two services are available to the user, the latter transmits to the mobile terminal 1 a page with a list of available services 13 in the geographical area of the user.
• This list is advantageously ranked in ascending order of distance between the geographic location of the terminal mobile 1 and the geographical location of the physical establishment associated with the service as illustrated in FIG. 4c.
• platform 2 also returns a page with a list when it determines that only one service is available to the user.
• the platform can send these messages to the WISP along with the alias data used to identify the recipient of the message.
• a service is selected from the transmitted list.
• the user himself selects a service from the list displayed on the mobile terminal.
• a message identifying the service selected from the available services is then transmitted from the mobile terminal 1 to the WISP.
• the WISP retransmits this message to the platform after adding the information of the location area of the mobile terminal and the alias data identifying the user of the mobile terminal.
• This information can be transmitted by the WISP to the platform as a URL such as an http address.
• a rule for selecting a service is applied in order to automatically select a service.
• the selection rule is for example based on criteria such as: proximity between the geographical location of the mobile terminal connection zone and that associated with the service, order of preference defined between the services, novelty of the service, type of service (cinema , restaurant, supermarket, etc.) or others.
• it is platform 2 which identifies at least one service selected from the available services determined by applying a selection rule. A confirmation may be requested from the user.
• the platform 2 identifies the service provider FS1 concerned, able to provide the selected service.
• the platform 2 can then send to the mobile terminal 1 data relating to the service provider concerned FS1 and / or relating to one or more services offered by this service provider FS1. For example, the platform 2 can send to the mobile terminal 1 a web page type page. This page is then displayed by the browser of the mobile terminal 2 in order to deliver information to the user.
• the alias data used during step E3 is the operator alias data item.
• the platform 2 connects via a communication link, using the alias data of the mobile terminal 1 of the user, the terminal 1 and the provider's server. of the selected service 3a, 3b, 3c during the third step E3.
• This request includes the alias data of the mobile terminal 1 requesting the service.
• This alias data may be used to identify the user with the service provider during different data exchanges relating to a service or during successive accesses to a service without the service provider having to know the service provider. real identity of the user of the mobile terminal.
• the service provider does not know, in particular, the user identifier or the MSISDN number of the mobile terminal and has no means of directly contacting the mobile terminal, which enables the user of the mobile terminal not to be solicited against his will by such service providers.
• the alias data used in step E4 is the supplier alias data.
• Such a service request can be transmitted by the platform in the form of an url such as an http address including the alias data.
• Data relating to the service provider concerned FS1 and / or relating to one or more services offered by this service provider FS1 are then sent by the server of the service provider 3a, 3b, 3c to the platform 2.
• At least part of the Sent data can be customized for the user identified by the received alias data.
• This data comprises information on at least one service offered to the user by the service provider concerned FS, the service or services offered being determined based on the first transaction data stored in association with the card identifier corresponding to the data. alias used for the communication link.
• This information is, for example, recommendations for products that are based on previous product purchases for which the first transaction data has been stored.
• the platform 2 retransmits this data to the WISP of the operator's network which, knowing the correspondence between the alias data of the mobile terminal 1 and its user identifier, transmits to the mobile terminal 1 these same data.
• the data sent by the service provider to the platform 2 to the mobile terminal 1 advantageously consist of pages of the internet page type intended to be displayed by the browser of the mobile terminal 1.
• the commands that can be entered by the mobile terminal 1 as part of the access to the service are sent by the mobile terminal 1 to WISP.
• the latter retransmits them to the platform by replacing all the identity information of the mobile terminal 1 by the alias data generated by the processing module 8 for the mobile terminal 1.
• the platform then retransmits these commands with the data of alias to the service provider server.
• the user of the mobile terminal 1 can enter an alphanumeric code on his mobile terminal 1, for example in an entry field 14 of a page sent by a server of the service provider 3a, 3b, 3c, in order to require the delivery by this server of a service associated with this code, once it is retransmitted by the platform to the server of the service provider 3a, 3b, 3c.
• the filtering of the available services made by the platform according to the geographical location of the mobile terminal 1 during the third step E3 and the anonymization of the data communicated to the service provider through the use of the alias during the fourth step E4 allow the service provider to deliver to the user of the mobile terminal 1 a location-based service while ensuring the confidentiality of the identity of the user of the mobile terminal 1 and its geographical location since these data are never transmitted to the provider on duty. Moreover, since the data of the location area of the mobile terminal 1 is never transmitted outside the operator's equipment, no authorization to transmit this data must be requested from the user.
• the WISP adds to this request a location information of the mobile terminal and an alias data identifying the user of the mobile terminal before retransmitting this request to the platform, as in the third step E3.
• the platform 2 determines upon receipt of such a request if the geographical location of the mobile terminal 1 gives it the right to access the requested service, that is to say if its geographical location area is included in a zone geographical availability of the requested service.
• the fourth step E4 is performed to provide the requested service to the mobile terminal. Otherwise, the access to the service is denied to the mobile terminal 1 and the platform 2 sends him a page indicating this refusal of access and proposing a list of services available for its geographical area
• the platform 2 can also connect the server of the service provider 3a, 3b, 3c with the mobile terminal 1 of the user for the provision of service data other than pages of type Internet pages. It can transmit such service data accompanied by an alias data identifying their recipient to the WISP which, thanks to its knowledge of the correspondence between the alias data and the user identifier of the mobile terminal 1, can transmit data. such data to the mobile terminal 1 on behalf of a server of a service provider 3a, 3b, 3c.
• the mobile terminal can thus be sent messages of type SMS or MMS.
• exchanges of such data between a server of a service provider, the platform and the WISP can be done via the FTP protocol or the SNPP protocol for example.
• platform 2 may transfer a request to send an e-mail message such as an email on behalf of a service provider 3a, 3b, 3c along with the alias data to WISP which will take care of send the e-mail to recipient thanks to his knowledge of the correspondence between the alias data and the user identifier of the mobile terminal
• the platform 2 can also establish a voice communication between the mobile terminal 1 identified by a first alias data and a server of a service provider 3a, 3b, 3c or another mobile terminal identified by a second alias data, following a voice matching request issued by a server of a service provider. If the two alias data belong to a single operator, the platform transmits the voice matching request accompanied by the two alias data to the sole operator concerned who then sets up the voice communication between the caller. and the called. If the two alias data belong to two different operators, the platform transmits the call matching request of the called with its alias to the operator concerned, in return it returns to the platform a number of temporary call. The platform then transmits the second alias of the caller and the temporary call number to the second operator who is responsible for establishing the voice communication between the caller and the called party.
• the platform 2 can make available to the user a personal web page administration to which the user can connect from his mobile terminal 1 to verify personal information such as its email address (email), and to correct this information if necessary.
• the user can also specify on this page if he agrees to receive messages from service providers by SMS, email, or voice communication and can also specify a maximum number of messages that he accepts to receive by these biases over a given period, for example a week or a month.
• Such a web page is accessible from the mobile terminal 1 by connecting to the address of the public site of the platform.
• the WISP adds to the URL of this page the alias data identifying the user of the mobile terminal.
• the platform creates a personal administrative space linked to the alias data of the mobile terminal. During all subsequent connections, the platform will automatically access the user of the mobile terminal to this personal space without the user having to provide an identifier or a password.
• such a page is a web page accessible from any device connected to the Internet network.
• the user sends from his mobile terminal an SMS containing a particular keyword to a predefined number.
• the operator replaces the number of the sender with the alias of the mobile terminal.
• the platform Upon receipt of the SMS, the platform transmits an identification code to the mobile terminal identified by its alias. This code can be delivered to the mobile terminal in the form of an SMS according to the process described above. The user's entry of the identification code on the web page of the platform then allows him to access the administration area linked to his mobile terminal.
• Terminal moves while accessing a service
• the geographical location of the area of the mobile terminal 1 is determined a first time after the connection request of the mobile terminal to the platform 2 and when selecting a service from the available services. If the mobile terminal moves out of the geographical area associated with a set of services while data relating to one of these services is being delivered to it by a server of the service provider, the transmission of this data to the mobile terminal will be interrupted. .
• a request for refreshing the list of accessible services can be triggered from the mobile terminal, for example, at the request of the user of this mobile terminal or automatically by the platform which finds that a request has been issued by the mobile terminal located outside the zone localized service provider.
• an updated list of accessible services depending on the new location of the mobile terminal, will be transmitted to the mobile terminal to be displayed on the mobile terminal.
• the method can be used to offer the customer of a physical business sign a dematerialized loyalty program.
• the user of a mobile terminal 1 entering a store can then use his mobile terminal 1 to connect to the platform and request access to the service "loyalty program" store.
• the server 3a, 3b, 3c of the "loyalty program" service provider identifies the user of the mobile terminal 1 by his alias data and returns data to him, at least part of which may be constituted by personalized data for the user identified by the alias data used. For example, the user of the mobile terminal can thus access a page corresponding to his personal space and giving him access to various information such as his discount coupons, his personal promotions, his loyalty points etc.
• the service provider's server 3a, 3b, 3c can then provide the user a service specific to its location, for example specific to the store in which it is located if the store is part of a chain of stores, without having to know the real identity of the user of the mobile terminal since it is identified only by its alias data.
• the alias data is also permanent and invariable.
• a follow-up in time of the different connections made for a user with the servers 3a, 3b, 3c of the service providers can be carried out by these servers, for example to make recommendations to the user, according to the habits of the user and / or choices made by this user in the loading of pages, and therefore in the consultation of product offers and / or services.
• the data transmitted to the mobile terminal may be constituted by personalized data, generated specifically for the user identified by the alias data used during the connection, for example recommendations for products or services, promotions Customized based on previous purchases and quotations of previously purchased products, etc.
• the user of the mobile terminal 1 can easily associate a discount coupon to his loyalty account using his mobile terminal.
• a discount coupon Once connected to the server of the service provider corresponding to the store, it is sufficient for him to enter in a dedicated field of a service provider page an alphanumeric code corresponding to a discount coupon, for example the bar code promotion of a product, so that it is added to its loyalty account.
• the server can have a database associating at least two data among the identification code of at least one product, the identification code of a promotion on at least one product, the identification code of the loyalty card or a financial card of the user of the mobile terminal, the identification code of the card specific to the couponing of the user of the mobile terminal, the alias data of the mobile terminal.
• the user can enter with his mobile terminal an identification code displayed on his "couponing" card which is then transmitted and stored in the server database in association with the mobile terminal alias data.
• the user can advantageously claim the discount coupons recorded by presenting an identifier of his loyalty account, for example by presenting his "couponing" card or his loyalty card and scanning the bar code serving to identify his "couponing" card or his loyalty card.
• the server can then identify the mobile terminal using the alias data of the mobile terminal stored in correspondence with the identification code of its "couponing" or loyalty card, determine the set of promotions whose user benefits for all products whose barcode has been registered by entering an alphanumeric code corresponding or scanned and directly deduct all of these promotions from the amount to be paid by the user. This makes it possible to avoid the scan of each coupon, the verification of validity dates of such coupons and the archiving of these coupons. Coupon management is fully automated, which saves time on the cash register. This operation is also completely transparent for both the user and the cashier since only requiring the use of cards in the usual manner.
• the service provider's server for the merchant's account can offer the user access to a personal page displaying all the promotions of the user of the terminal. mobile. This page can be updated regularly allowing the removal of obsolete or already used promotions.
• the method can be used to provide the user with information relating to products on the shelves and consist, for example, of tips for encouraging associations of ideas, recipe ideas, games etc. All that is required is for the user to enter on the store page an alphanumeric code corresponding to a product so that the service provider's server sends him a page giving information on the product in question.
• the user can also receive this information via the platform by email (email) or text message (SMS) if he requires it.
• SMS and emails may include a code that the customer can use once in the store to obtain personalized information or promotions.
• the user can also use traditional means such as “flashcodes”, “QRcodes” or NFC ("Near Field Communication”) technology.
• a visitor may select available mobile services corresponding to the services provided by the show and its exhibitors. These services may include the indication of: the different schedules of the events held at the show and the possibility of registering, the list of restaurants and their menus and the possibility of making reservations, the plan of the show, from the list of exhibitors with a link on the mobile site of the exhibitor etc. If an exhibitor is interested in the user of the mobile terminal, the latter can connect to the site of this exhibitor and contact the various officials of the stand, know the agenda of the day etc. through the platform. At the request of the user, stand managers can also be contacted by establishing voice or SMS communication via the platform. The visitor will be able to contact the desired stand manager without having to provide his mobile terminal number and without knowing the number of the person he contacts.
• a visitor with a mobile terminal can be provided with useful information such as the museum map or a list of events of the day such as demonstrations.
• useful information such as the museum map or a list of events of the day such as demonstrations.
• the visitor can also enter in the museum page an alphanumeric code proposed next to an object to obtain additional information about the object such as photos, explanatory text and possibly an audio description.
• a hotel guest can contact the room service, the restaurant to know the menu of the day and make a reservation, or have promotions on the tourist activities of the region that have been negotiated by the hotel. He can use paid services by entering his room number or order a drink of his choice remotely by the pool without having to wait for the server.
• paid services are available inside and outside the hotel up to a certain distance from it, for example 50 km.

Landscapes

• Engineering & Computer Science (AREA)
• Business, Economics & Management (AREA)
• Computer Security & Cryptography (AREA)
• Strategic Management (AREA)
• Accounting & Taxation (AREA)
• Development Economics (AREA)
• Finance (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Game Theory and Decision Science (AREA)
• Physics & Mathematics (AREA)
• General Business, Economics & Management (AREA)
• General Physics & Mathematics (AREA)
• Theoretical Computer Science (AREA)
• Economics (AREA)
• Entrepreneurship & Innovation (AREA)
• Marketing (AREA)
• Computer Hardware Design (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Mobile Radio Communication Systems (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=52684357

Family Applications (1)

Country Status (4)

Families Citing this family (3)

Family Cites Families (33)

• 2014
  • 2014-11-14 FR FR1461010A patent/FR3028638A1/fr not_active Withdrawn
• 2015
  • 2015-11-04 WO PCT/FR2015/052979 patent/WO2016075390A1/fr active Application Filing
  • 2015-11-04 EP EP15808704.9A patent/EP3218861A1/de not_active Ceased
  • 2015-11-04 US US15/526,627 patent/US10992661B2/en active Active

Non-Patent Citations (2)

Also Published As

Similar Documents

Legal Events