EP3369060A1

EP3369060A1 - Method and system for payment handling

Info

Publication number: EP3369060A1
Application number: EP16785170.8A
Authority: EP
Inventors: Johannes Rietschel
Original assignee: Qibixx AG
Current assignee: Qibixx AG
Priority date: 2015-10-29
Filing date: 2016-10-24
Publication date: 2018-09-05
Also published as: WO2017072067A1; BR112018008396A2; US20180336545A1

Abstract

The description relates to a method for simple and secure payment handling at a payment station of a vendor using a mobile device (MG) of a purchaser. In this case, the payment station has a terminal (T) designed for debit cards (D), and the terminal (T) is equipped with a card port, a display, an input apparatus and an interface to a payment institution (ZI). A debit card suitable for said terminal (T) and/or the terminal (T) is/are equipped with an element (QR, B) for wireless transmission of a piece of debit-card-specific identification information (ID) to the mobile device (MG). In this case, the payment handling has at least the following steps: transmission of the identification information to the mobile device (MG); transmission or input of the purchase sum into the terminal (T); connection of the debit card to the terminal (T) via the card port; transmission of purchase sum and identification information (ID) from the terminal (T) to a payment institution (ZI); transmission of payment sum and identification information (ID) from the payment institution (ZI) to a coordination entity (KI), unless the payment institution (ZI) is itself the coordination entity (KI); association of the identification information (ID) with the mobile device (MG) and transmission of the purchase sum to the mobile device (MG) for authorisation; in the absence of verification of the purchaser on the mobile device (MG), termination of the process, and in the event of verification of the purchaser on the mobile device (MG), transmission of the authorisation from the mobile device (MG) via the coordination entity (KI) to the payment institution (ZI) and prompting of debiting of an account of the purchaser in the amount of the purchase sum, including any fees due; transmission of confirmation of the payment from the payment institution (ZI) to the terminal (T).

Description

TITLE

METHOD AND SYSTEM FOR PAYMENT PROCESSING

TECHNICAL AREA

The present invention relates to a method and a device (system) for securely processing a payment, in particular largely using existing infrastructure and with the possibility of simple use.

STATE OF THE ART

Nowadays, payments are being made in cash in many countries only to a decreasing extent. Today, payments are increasingly being made using debit cards (credit cards, payment cards) which have a magnetic stripe and / or a chip for secure identification. In particular, in the processing of payments in the daily environment, the procedure is such that a terminal for the debit cards at the payment station is given, at this terminal or via an attached cash register, the seller enters the amount to be paid, the buyer pushes his debit card in the Terminal or it brings it close enough to the terminal that the card information can be passed to the terminal, then after or at the same time for displaying the amount on the terminal a PIN code via an input interface provided on the terminal (keyboard) entered by the buyer and authorized to debit the corresponding amount from the account associated with the debit card.

One of the problems with this worldwide payment method is the fact that users are forced to carry debit cards with corresponding renewal fees and brokerage fees, and it is also problematic that customers often have a large number of cards these days and are not given sufficient clarity is.

Accordingly, there are now also based on the mobile phone systems for payment. In this case, a credit balance or a direct connection to a payment institution and assignment to an account is managed on the mobile phone via an app, and the payment is handled via a wireless interface at the payment station. WLAN or Bluetooth can be used as interface, the payment is so easy and if appropriate algorithms are used also safe, and the user does not have to carry a purse anymore when he goes shopping, the mobile phone is with it anyway.

The problem with this method of payment is that at the paying stations additional infrastructure is required to ensure the communication between the mobile phone of the user and the corresponding database or infrastructure of the seller. While such systems are superior to debit-card based systems today, their enforcement in the market often fails precisely because of the extra infrastructure and lack of standardization.

This is where the present invention intervenes.

PRESENTATION OF THE INVENTION

It is accordingly an object of the present invention to provide an improved mobile payment method which requires as little additional hardware as possible and can be introduced without much effort and with only slight changes in user behavior.

The present invention accordingly provides a method according to claim 1, a system according to claim 12 and a debit card according to claims 13 or 14.

Specifically, the present invention relates to a method of payment processing at a pay station of a seller using a mobile device of a buyer, wherein the payment station has a terminal equipped for debit cards, and the terminal is usually provided with card port (insertion slot, proximity area), display, input device (numerical Keyboard, touch-sensitive display) and interface to a payment institution. In addition, a debit card and / or the terminal or other location associated with the terminal is provided with an element for wirelessly transmitting debit card-specific identification information to the mobile device. It may be an adhesive (for example, with QR code, barcode, etc.), the corresponding identification in and can also be made available on the display of the terminal or another display in the premises of the terminal, also it is possible to transmit the identification information wirelessly, for example via a low-energy Bluetooth connection.

The proposed payment transaction has at least the following steps, wherein the order of the first 4 steps (ID transmission, entry of purchase sum, triggering of mobile payment with debit card or input at the terminal, transfer and KI)) may be as indicated, the first step (ID transfer) but also after or during step 2 and / or step 3 and / or step 4):

Transmission of the identification information to the mobile device (MG) (this step may be active or passive by the provider of the identification information, for example also by reading a QR code, barcode, scannable identification code or the like with the mobile device (MG));

• transmission or input of the purchase sum into the terminal (T) and / or the mobile device (MG);

• connection of the debit card to the terminal (T) via the card port and / or triggering of a terminal-specific identifier via an input at the terminal;

• and now either:

o Transfer of purchase price and identification information (ID) from

Terminal (T) to a payment institution (ZI);

o Transfer of purchase price and identification information (ID) from the payment institution (ZI) to a coordination instance (KI), unless the payment institution (ZI) itself is the coordinating authority (KI);

o assignment of the identification information (ID) to the mobile device (MG) and transmission of the purchase sum to the mobile device (MG) for authorization; or (for example, if the card is a card recognizable by the terminal as being specifically recognizable, and the terminal on that basis is already able to route the data itself directly to the coordinating entity (KI), i.e. not via a payment institution (ZI))

o transfer of purchase price and identification information (ID) from the terminal directly to a coordination instance (KI),

in case of missing verification of the buyer on the mobile device (MG) abort the process and

• upon verification of the purchaser on the mobile device (MG) or change of the purchase sum by the purchaser on the mobile device (MG) transmission of the authorization from the mobile device (MG) via the coordination instance (AI) to the payment institution (ZI) or only to the coordination instance (AI) and causing the burden of an account of the buyer in the amount of the purchase amount including, if necessary applicable fees;

• Transmission of confirmation of payment from the payment institution (ZI) or the coordinating authority (KI) to the terminal (T).

The step mentioned above (triggering mobile payment) can either be triggered via the connection of the debit card, but it is also possible to trigger this step, for example, by means of a key input. The actual debit card is not absolutely necessary if there is an identifier stored in the terminal which, for example, contains the identifier of the debit card for identification at the control entity and / or at the payment institution or allows correlation with the identifier of the debit card at the corresponding locations. The terminal does not even need to use a debit card during the payment process. It is possible to present a debit card to the terminal one time after switching on or only at the beginning of a work shift and to deposit the corresponding information in the terminal, so that the person responsible for the terminal then activates the corresponding process via an input on the screen or on the keyboard to trigger the mobile payment. For safety's sake, a pincode or something similar can be provided for triggering.

In this way, mobile payment can also be implemented using existing hardware designed for the usual debit card-based purchasing processes, the only additional hardware that has to be made available is the actually unusual seller-specific debit card that is used in the terminal is introduced, and there must be correspondingly modified processes at the payment institution and at the coordination instance, or, if the card is a specially recognizable card by the terminal and the terminal on that basis the data itself directly to the coordination instance (KI) Routes can be implemented at the coordination instance to handle a transaction.

According to a first preferred embodiment of the present invention, the method is characterized in that the identification information is a code which can be read out via a camera of the mobile device, preferably a QR code, and / or one via a wireless interface, preferably via a Bluetooth interface, in particular preferably via a low-energy Bluetooth interface of the mobile device (MG) readable identification information. This information may be provided on the debit card or on the terminal, for example. If the debit card is equipped with a low-energy Bluetooth chip, which is supplied with the debit card in the card port of the terminal (T) and transmits the identification information to the mobile device via a short-range secure data transmission, can be a particularly simple and largely tamper-free for the buyer Information transmission.

More specifically, according to another preferred embodiment, the process has the following steps, unless otherwise specified in the following order:

1. transmission of the identification information to the mobile device, preferably by optical or Bluetooth transmission;

2. Transmission or input of the purchase sum in the terminal, preferably by entering the purchase amount via a keyboard on the terminal and connection of the debit card to the terminal via the card port, preferably by inserting into a card slot;

wherein steps 1 and 2 may also be performed simultaneously or in the reverse order;

and now either:

3 a. Transmission of purchase sum and identification information from the terminal to a payment institution using a secure data line;

4a. Transmission of purchase amount and identification information from the payment institution to a coordinating authority, unless the payment institution itself is the coordinating authority, again using a secure data line;

or (if, for example, the card is a card which can be identified as being specially recognizable by the terminal and the terminal is able to route the data itself directly to the coordination instance (KI) on this basis):

3b./4b. Transmission of purchase amount and identification information from the terminal to the coordination instance using a secure data line (steps 3b / 4b are thus merged in one step);

and then:

5. Assignment of the identification information to the mobile device in or by the coordination instance

6. Transmission of the purchase price to the mobile device for authorization; 7. Presentation of amount and authorization possibility on the mobile device via a corresponding software installed on the mobile device;

in the absence of verification of the buyer on the mobile device by manual input or voice input cancellation of the process and

upon authorization of the purchaser on the mobile device by manual entry or

voice input

8. Transmission of the authorization from the mobile device to the coordination instance;

9. Transmission of the authorization with assigned identification information to the payment institution (this step is only necessary if the coordination instance does not communicate directly with the terminal, ie if, for example, the card is not a specially recognizable card through the terminal and the terminal on that basis Already able to route data directly to the coordination instance (AI) itself);

10. transmission of the authorization, if appropriate with associated identification information, to the terminal;

11. Output of the authorization, preferably via a display and / or print-out, at the terminal.

The debiting of the account of the buyer can take place via the coordination instance and / or via the payment institution, wherein preferably the debiting of an account of the buyer at another payment institution takes place via the coordination instance.

The mobile device can be a tablet or a smartphone.

The terminal is preferably a conventional terminal for the

Handling of debit cards in the form of credit cards, bank cards, Maestro cards, particularly preferred for chip cards according to ISO / IEC 14443 and / or the ISO / IEC

7816th

The debit card is preferably a debit card associated with an account of the seller at the payment institution, which additionally carries the identification information, preferably in the form of a mobile-readable QR code or in the form of a Bluetooth low-energy chip.

If a beacon (Bluetooth low energy device) is used, then it is also possible to provide the identification information in a secure form. For example, it is then possible for the identification information to be encrypted information is also time dependent, for example, using a standard product as available from RSA Security Inc.

The identification information can, as stated, be provided via a beacon provided on the debit card, but it is also possible to provide one at the terminal. For example, powered via a USB interface to such a terminal, such a beacon must then not be integrated into the software of the terminal.

On the account of the seller kept at the payment institution, insofar as the communication does not proceed directly and only via the coordination instance which is assigned to the debit card, preferably no monetary transaction or only a temporary monetary transaction is carried out, but this account will only be used for those using existing ones Infrastructure-based communication between terminal and payment institution provided while the actual monetary transaction via the coordination instance and with reference to an account of the buyer and another account of the seller, both of which do not necessarily have to be conducted at the payment institution.

The communication between the terminal and the payment institution and / or the communication between the payment institution and the coordination instance and / or the communication between the coordination instance and the mobile device and / or the communication between the debit card and the terminal, and / or the communication between the payment institution and the terminal are preferably carried out in encrypted form.

The identification information stored on the debit card and read out either optically or via Bluetooth by the mobile device is preferably different identification information than the identification information exchanged between the debit card and the terminal, and / or between the terminal and the payment institution, and / or between payment institution and coordination instance, and / or between terminal and coordination instance, but the respectively specifically transmitted identification information is correlated or stored in databases that, preferably at any time, a unique association between the specific debit card used, the specific used at that moment Mobile device or its SIM card, and preferably also the current payment is possible. Furthermore, the present invention relates to a system preferably for carrying out a method as set forth above, characterized in that it

a terminal having a card port, a display, an input device and a preferably secure interface to a payment institution and / or a coordination instance,

a debit card having an element for wirelessly transmitting identification information to the mobile device, and a magnetic stripe and / or chip for debit card-specific information transmission to the terminal;

a payment institution and / or coordinator in communication with the terminal having an account associated with the debit card of the seller;

a co-ordinating body in communication with the payment institution, insofar as the communication does not take place directly between the co-ordination authority and the terminal; a portable mobile device of the buyer with an interface for receiving or reading the identification information from the debit card and an interface for communication with the coordination instance.

Furthermore, the present invention relates to a debit card, in particular for use in a method as described above, and in particular preferably in the context of a system, as also described above, with an element in the form of a QR code and / or a Bluetooth low energy component for wireless transmission of identification information to the mobile device, and with a magnetic strip and / or chip for debit card-specific information transmission to the terminal.

Furthermore, such a debit card can be characterized by the fact that besides a chip for debit card-specific information transfer to the terminal on the debit card a Bluetooth low-energy chip is arranged, which is energized by the terminal in interaction with the terminal and the short-range transmission the identification information is provided to the mobile device.

Further embodiments are given in the dependent claims.

BRIEF DESCRIPTION OF THE DRAWINGS

Preferred embodiments of the invention are described below with reference to FIG Drawings described are merely illustrative and not restrictive to interpret. In the drawings show:

Fig. 1 shows the various elements in the proposed payment system; and

Fig. 2 is a flowchart of a payment procedure in such

Payment system.

DESCRIPTION OF PREFERRED EMBODIMENTS

A system suitable for carrying out a payment method as described above is shown schematically in FIG.

It comprises a mobile device MR of a purchaser, typically a smartphone or a tablet, which is uniquely identified and connected, for example, via a SIM card to a telecommunications network and the Internet. It therefore has an interface which is suitable for establishing a secure connection to a coordination instance (see description below). It also has a processor and memory to run appropriate software (App) to control the payment process. Furthermore, the mobile device has a reading interface, for example camera or Bluetooth, which makes it possible to obtain information from the paying agent. Furthermore, the mobile device has an input option, typically a keyboard or a touch-sensitive display.

Furthermore, the system includes a debit card D, which leads the seller and which, unlike the usual payment transactions, just not held by the buyer. This debit card is in itself a standard debit card, a debit card is understood in the present context generally, ie also in connection with the general description, a card that allows access to an account at a payment institution or through a credit card company the burden respectively Invoicing prompted. Thus, the debit card is a bank card, a credit card or the like, also possible is a Maestro card or the like. The debit card has an information carrier (magnetic stripe and / or chip), which makes it possible, in or by approaching a terminal, to establish an association with an account maintained at a payment institution (or similar to a credit card institute). It is essentially a conventional debit card. In addition, this debit card has a more specific one Identification information that can be read by the mobile device of the buyer. It is either a barcode, or a QR code, or even a chip that can wirelessly transmit Bluetooth wireless information via the wireless identification information stored on the chip to the mobile device over a short distance. Alternatively, it is possible to provide this identification information, which ultimately allows correlation between the account associated with the debit card at the payment institution and the mobile device, on the terminal (for example, adhesive with QR code on the terminal), so that the card can remain in the slot of the terminal when the information is to be read from the mobile device.

Furthermore, the system comprises a per se conventional terminal T for the treatment of payment transactions with a debit card. In other words, around the usual local and retail localized terminal with a small numeric keypad as an input device, a small display and a card port, typically an entry slot for the debit card. It is precisely the great advantage of the proposed method that a conventional terminal can be used to carry out the method and no specific additional hardware has to be provided.

Furthermore, the system comprises a payment institution ZI which is associated with the debit card and which maintains an account of the seller of this debit card. This is another important difference to the conventional payment process, where the buyer's debit card is used in the terminal; in the context of the present procedure, the payment institution is only concerned with establishing a secure and direct connection to a coordinator KI, but not with it the actual monetary transaction to that payment institution.

Last but not least, the system comprises a coordination entity KI, which on the one hand ensures secure communication with the mobile device and, on the other hand, secure communication with the payment institution. Coordination instance and payment institution can in principle also coincide. The Coordinating Instance is ultimately the central processing station in this process because it provides the correlation between the debit card, terminal and payment institution transfers of purchase amount and debit card identification, respectively, and the seller's account (not used for the monetary transaction) and information about the buyer or his mobile device and account of the seller and account of the buyer. The Coordinator also initiates the actual monetary transaction, which may consist of either debiting a buyer's account and crediting it to a seller's account, or crediting it to a seller's account and debiting the buyer's credit on the mobile device or at the coordinating instance.

Alternatively, if the card is a card recognizable by the terminal as being specifically recognizable and the terminal is able to route the data itself directly to the coordinating entity on that basis, it is possible for the communication to be direct as shown by the dashed arrow in FIG , takes place between the terminal and the coordination instance and the coordination instance either holds and manages the accounts of the seller and the buyer or debits or credits accounts with payment institutions. In Fig. 2, steps 3 and 4 are then replaced by a single step of transferring amount and ID from terminal to KI (dashed arrow in Fig. 1). The amount and ID at KL and step 9 is unnecessary since the authorization is direct from the coordination instance to the terminal.

The method will be further explained with reference to the flowchart according to Figure 2, wherein the numbers of the individual boxes according to Figure 2 are each shown in the schematic representation in Figure 1 in circles, so that the process with the aid of both figures can be followed.

In a first step, the mobile device reads identification information from the debit card or possibly also from the terminal. This is achieved either by reading out a QR code via the camera of the mobile device or by establishing a connection between debit card and short-range mobile device via Bluetooth low energy and transmitting the identification information over a short range to the mobile device.

In the second step, which can also take place in parallel or even before the first step, the purchase amount is entered in the terminal or the purchase amount is transmitted via a terminal connected to the terminal on the terminal. The card is inserted into the terminal, if not already done, and the debit card-specific information, which allows an association with an account at a payment institution, is transmitted to the terminal, typically via an encrypted connection.

In step 3, the purchase amount and the identification information associated with the debit card is transmitted via the data line 1 to the payment institution. When the payment institution is not as usual, a debit card associated with the buyer's account queried, but it is in step 4, a corresponding information is assigned to this debit card at the payment institution, essentially just the purchase amount and an assignment to the seller sent to a coordinator. In the fifth step, the coordinating instance first looks up which mobile device has recently read out the information of the QR code associated with the debit card, which ideally happens without loss of time such that the app on the mobile device immediately after reading the information from the debit card this assignment is communicated to the coordination instance, and the assignment in a look-up table at the coordination instance at the time when the information comes from the payment institution is already ready. Thus, a clear correlation between the specific mobile device used (respectively its SIM card), the individual concrete payment process and the seller made.

In the next step, the coordinator will now transfer the payment amount to the mobile phone, typically via a secure internet connection.

In step 7, this information received by the app on the mobile phone is processed by displaying the purchase amount on the display and a prompt is issued to authorize this purchase amount. If necessary, the security can also be increased by a pin or something similar is demanded by this app in a first step. The authorization of the purchase amount may either result in the debit of the purchase amount on an account of the buyer, or it may simply be a reduction of a credit held on the mobile device and / or at the coordination instance.

If there is no verification or authorization by the user or buyer on the mobile device, the process is aborted. For example, it can be provided that if no authorization is received by the coordination instance within a certain period of time, the purchase process is automatically terminated.

If there is a verification or authorization by the buyer on the mobile phone, in the 8th step, this authorization is again transmitted to the coordinating authority. This causes either a direct debit of the account or a credit of the buyer and a credit note in an account of the seller, these Konti both may be conducted on the payment institution, but also at a may be conducted to other payment institution, or the charges will be made only if a completion feedback from the terminal after the step 11 described below has occurred.

In the 9th step, the authorization with the identification of the user account (of the seller) is transmitted to the payment institution.

In the 10th step, the authorization with the identification of the debit card (the seller) is transmitted to the terminal.

In the 11th step a payment confirmation will be shown on the display and / or a receipt printed on the display, if desired.

Is in the above step 8 is not directly charged, but should be for safety's sake, until the terminal was actually issued the confirmation, among other things, possibly also on the terminal between the process was canceled, this confirmation can in turn via the communication channels 1 and 2 transmitted to the coordinating authority, and this charged only after this confirmation has been received.

More specifically, this concept will now be presented in the sequel, essentially it is about to propose a concept, such as to restaurateurs or another dealer without cost and without additional hardware infrastructure can use a mobile payment platform.

The restaurateurs practically all have a mobile credit card reader with whom they can go to the table if a customer wants to pay by card. Other small dealers may have u.U. a fixed device. The waiter does not want to take a second device for mobile payment acceptance with the table, his private cell phone may not be used. How can a customer pay with mobile payment?

Solution (user view, non-technical):

- The merchant receives a "merchant chipcard" from the mobile payment provider when signing up, which does not have to be personalized and does not need an inscription.

- If the customer wants to pay with mobile payment, the waiter has the customer scan the back of the card (QR Code). Then the waiter enters the amount to be paid in the card terminal, and puts this "Mobile Payment" card in the existing card terminal., He may even enter the PIN if you can not turn off.

- Next, the customer in the mobile payment app ("wait for amount") receives the Amount and the request to confirm this.

- The customer gives - as with any "normal" card his OK, and the card terminal confirms the payment (booking OK) and prints a receipt for the waiter (customer has the booking in the course, does not need a receipt but could get one).

- The waiter removes the card from the terminal.

The process of payment is thus very simple, for the customer as easy as mobile payment with a merchant app (scan barcode), for the waiter as easy as a debit card transaction, whereby the device does not have to be given to the customer and the customer does not have a PIN must enter.

A possible technical realization may look like this:

The mobile payment provider as the coordinating authority requests a postal account from one payment institution per merchant. These "merchant accounts" are virtual accounts that will never have credit or real transactions, and can be generated en bloc "beforehand" as subaccounts by the mobile payment provider (e.g., 1000 accounts on "supply").

The payment institution has normal debit cards produced for these accounts with the normal manufacturer, and a random or sequential pairing code (QR) is applied to the cards on the back. This can also happen with an adhesive. The code can also be produced and supplied independently of the card on a simple laminated "dealer card".

An extension (a single WEB / service call) is installed at the payment institution in the module that checks the account balance of a debit transaction online. There will be a call for an "online fraud check" or "online risc change", which can be used for this.

This call is made ONLY for Mobile Payment Provider accounts (recognizable by the root number), instead of the normal risc / fraud call. If there is not such a call, you make it at the point where the credit on the account is checked.

The call returns a "OK" or "not OK" with a return code. Correspondingly, the "booking" is then completed positively or negatively on the payment institution backend, in a positive case, if possible, the amount should NOT be charged to the account (balance always remains 0) - but if that can not be changed, that is no problem, because you can balance at the end of the day again.

That's all that needs to be done on the payment institution page. Summarized once again: "Normal" account management at the payment institution, mobile payment provider as a coordinating authority simply has a subaccount under its master number at the payment institution per merchant, which must also not be assigned by name to the payment institution.The merchant does not see the account, it is a mobile payment Provider account.

There is a "normal" debit card for the account.

For debit postings to these accounts, instead of balance and risk management, a web / service call is used to decide whether to accept a booking yes / no. OPTIONAL: the amount will not be booked, also not in the "OK" case, but the booking will end as with "normal" bookings.

On the side of Mobile Payment Provider as coordination instance the following functionality can be made either in the backend (if resources exist) or also independently (cloud based "cash register software"):

The payment institution Service call calls a backend process. This gets in the service call the amount and the debit card / account number transmitted.

The account number or debit card number can be uniquely assigned to a merchant / merchant card. The associated pairing code can be searched by lookup (in the simplest case the debit card number is pairing code at the same time, but for security reasons it makes more sense to use a "different" code).

The backend process (as mentioned above, can be outside of the mobile payment provider / backend) makes a "start order" with the pairing code and asks for the amount via the "normal" mobile payment provider merchant interfaces.

Mobile Payment Provider as the coordinating entity recognizes the associated mobile of the customer via the pairing code, fetches the customer confirmation of the amount and confirms the booking to the web service. This terminates the payment institution service call with the appropriate return code.

In the mobile payment provider system, the booking is posted normally to the merchant account.

If the payment institution system has to charge the amount on the merchant / debit card (the booking has to be executed with the amount), then at the end of the day at reconciliation all bookings on the merchant account are added together with the merchant card and a corresponding credit transfer is transferred to the payment institution so that the Account is balanced again. The system has no additional risks for the payment institution or the mobile payment provider. It is based on the normal debit / payment card standard, can not be disabled. Terminal devices that accept debit cards from the payment institution or debit cards from another bank can support the system.

For the restaurateurs who cash in on the table and carry no mobile devices around, this proposed solution is the first choice to accept mobile payments instantly and without investments - even if the mobile payment transaction fees would be higher in this process.

Expansion options:

- One card per waiter (direct electronic allocation of sales to a waiter possible without "paper economy")

- A special "Merchant Card" with built-in Beacon (is activated by plugging in and can then be paired by the mobile as usual)

There are still many ways to expand this and possibly simplify it. The advantages remain:

- ANY installed credit card terminal with payment institution acceptance can immediately accept mobile payment if the operator / dealer orders a "merchant card" on mobile payment

- Use of existing legacy infrastructure without installation costs

- Very quickly implemented

- Very low cost for mobile payment providers

LIST OF REFERENCE NUMBERS

Communication path mobile device

between terminal and T terminal

Payment institution D debit card

Communication path MG Mobile device

between payment institution ZI payment institution and coordination instance KI coordination instance

Communication path QR Quick Response between B Beacon

Coordination instance and ID identification information

Claims

PATENT CLAIMS

1. Method for processing payments at a seller's payment station using a buyer's mobile device (MG),

wherein the payment station has a terminal (T) equipped for debit cards (D), and the terminal (T) is equipped with a card port, display, input device and interface to a payment institution (ZI),

wherein a debit card suitable for said terminal (T) and/or the terminal (T) is equipped with an element (QR, B) for wireless transmission of debit card-specific identification information (ID) to the mobile device (MG), and

whereby the payment processing comprises at least the following steps:

Transmission of identification information (ID) to the mobile device (MG);

Transmission or entry of the purchase amount into the terminal (T);

Connecting the debit card to the terminal (T) via the card port or triggering a terminal-specific identifier via an input at the terminal;

and then either:

Transmission of purchase amount and identification information (ID) from

Terminal (T) to a payment institution (ZI);

Transmission of the purchase amount and identification information (ID) from the payment institution (ZI) to a coordination authority (KI), unless the payment institution (ZI) itself provides the coordination authority (KI);

or:

Transmission of the purchase amount and identification information (ID) from the terminal directly to a coordination instance (KI),

and then

Assignment of the identification information (ID) to the mobile device (MG) and transmission of the purchase amount to the mobile device (MG) for authorization;

If the buyer is not verified on the mobile device (MG), the process will be aborted and

When the buyer is verified on the mobile device (MG), the authorization is transmitted from the mobile device (MG) via the coordination authority (KI) to the payment institution (ZI) and arrange for the buyer's account to be debited in the amount of the purchase amount, including any applicable fees, or directly to the coordination authority (KI) and initiate the debit of the buyer's account in the amount of the purchase amount, including any applicable fees;

Transmission of confirmation of payment from the payment institution (ZI) or from the coordination authority (KI) to the terminal (T).

2. The method according to claim 1, characterized in that the identification information (ID) is a code that can be read out via a camera of the mobile device (MG), preferably a QR code, and / or one via a wireless interface, preferably is identification information (ID) that can be read out via a Bluetooth interface, in particular preferably via a low-energy Bluetooth interface of the mobile device (MG), wherein the identification information (ID) can be provided in encrypted form, optionally in time-dependent and/or encrypted form. .

3. Method according to one of the preceding claims, characterized in that the identification information (ID) is provided via a Bluetooth low energy component, which can be arranged either on the card or on the terminal.

4. The method according to claim 2 or 3, characterized in that the debit card is equipped with a low-energy Bluetooth chip, which is energized when the debit card is coupled in the card port of the terminal (T) and the identification information is sent to the mobile device via a short-range secure data transmission transmitted.

5. Method according to one of the preceding claims, characterized in that the method comprises the following steps, unless otherwise specified, in the following order:

1. Transmission of the identification information to the mobile device (MG), preferably via optical or Bluetooth transmission;

2. Transmitting or entering the purchase amount into the terminal (T), preferably by entering the purchase amount using a keyboard on the terminal (T) and connecting the debit card to the terminal (T) via the card port, preferably by inserting it into a card slot;

wherein steps 1 and 2 can also be carried out simultaneously or in the reverse order;

and now either:

3 a. Transmission of the purchase amount and identification information (ID) from the terminal (T) to a payment institution (ZI) using a secure data line;

4b. Transmission of the purchase amount and identification information (ID) from the payment institution (ZI) to a coordination authority (KI), unless the payment institution (ZI) itself provides the coordination authority (KI), again using a secure data line;

or

3a/4b Transmission of purchase amount and identification information from the terminal to the coordination entity using a secure data line;

and then:

5. Assignment of the identification information (ID) to the mobile device (MG) in or by the coordination entity (KI)

6. Transmission of the purchase amount to the mobile device (MG) for authorization;

7. Display of the amount and authorization option on the mobile device (MG) using appropriate software installed on the mobile device; If the buyer is not verified on the mobile device (MG) by manual entry or voice input, the process is aborted and

when the buyer authorizes on the mobile device (MG) by manual entry or voice input

8. Transmission of authorization from the mobile device (MG) to the coordination authority (KI);

9. Transmission of the authorization with assigned identification information to the payment institution (ZI), unless communication takes place directly between the coordination entity (KI) and the terminal;

10. Transmission of the authorization, if necessary with assigned identification information, to the terminal (T);

11. Issue of the authorization, preferably via a display and/or a printout, on the terminal (T).

6. Method according to one of the preceding claims, characterized in that the buyer's account is debited via the coordination entity (KI) and/or via the payment institution (ZI), preferably the debit of the buyer's account at another payment institution via the Coordination instance (KI) takes place.

7. Method according to one of the preceding claims, characterized in that the mobile device is a tablet or a smartphone.

8. Method according to one of the preceding claims, characterized in that the terminal (T) is a conventional terminal for handling debit cards in the form of credit cards, bank cards, Maestro cards, particularly preferably for chip cards according to ISO/IEC 14443 and/or ISO/1EC 7816.

9. The method according to any one of the preceding claims, characterized in that the debit card is a debit card (D) assigned to an account of the seller at the payment institution (ZI) and / or the coordination entity (KI), which additionally contains the identification information, preferably in the form of a carries a QR code that can be read by the mobile device (MR) or in the form of a Bluetooth low-energy chip.

10. The method according to claim 9, characterized in that no transaction or only a temporary transaction is carried out on the seller's account maintained at the payment institution (ZI) and/or the coordination entity (KI), which is assigned to the debit card (D), but this account is only intended for communication between the terminal (T) and the payment institution (ZI) using existing infrastructure, while the actual Monetary transaction takes place via the coordination instance (KI) and with reference to an account of the buyer and another account of the seller, both of which do not necessarily have to be held at the payment institution (ZI).

11. Method according to one of the preceding claims, characterized in that the communication between the terminal (T) and the payment institution (ZI) and/or the communication between the payment institution (ZI) and the coordination entity (KI) and/or the communication between the coordination entity (KI) and mobile device (M) and/or the communication between the debit card (D) and the terminal (T) and/or the communication between the coordination entity (KI) and the terminal (T) takes place in encrypted form.

12. The method according to any one of the preceding claims, characterized in that the identification information (ID) stored on the debit card (D) and read either optically or via Bluetooth by the mobile device is different identification information than that which is used to identify and assign the process exchanged identification information between debit card and terminal, and/or between terminal and payment institution, and/or between payment institution and coordination entity and/or between terminal and coordination entity, but the specifically transmitted identification information is correlated or stored in databases in such a way that, preferably for each Time, a clear association between the specific debit card used (D), the specific mobile device used or its SIM card, and the payment currently made is possible.

13. System for carrying out a method according to one of the preceding claims, characterized in that it

a terminal (T) with a card port, a display, an input device and a preferably secure interface to a payment institution (ZI) and / or a coordination authority (KI),

a debit card (D) with an element (QR, B) for wireless transmission Identification information (ID) to the mobile device (MG), as well as with a magnetic strip and/or chip for transmitting debit card-specific information to the terminal;

if the communication does not take place directly between the terminal and the coordination entity (KI), a payment institution (ZI) in communication with the terminal with an account of the seller assigned to the debit card (D); and a coordination instance (KI) in communication with the payment institution (ZI);

a portable mobile device (MG) of the buyer with an interface for receiving or reading the identification information (ID) from the debit card and an interface for communicating with the coordination entity (KI).

14. Debit card (D), in particular for use in a method according to one of claims 1-12, with an element in the form of a QR code and / or a Bluetooth low energy component for wireless transmission of identification information (ID) to the mobile device (MG ), as well as with a magnetic strip and/or chip for transmitting debit card-specific information to the terminal.

15. Debit card (D) according to claim 14, characterized in that, in addition to a chip for transmitting debit card-specific information to the terminal, a Bluetooth low-energy chip is arranged on the debit card, which is powered by the terminal when it interacts with the terminal and which is intended for short-range transmission of identification information to the mobile device (MG).