ES2430738A2 - mobile device, system and method for electronic payment - Google Patents

Abstract

The invention concerns a method for computerized electronic payment, comprising at least the following steps: (i) emitting a code containing the information necessary for performing a financial transaction between an emitter and a receiver of said code (ii) receiving by the receiver of the emitted code which contains the transaction data, such that the data contained in the emitted code are displayed for authorization thereof by the receiver (iii) connection to the finance body of the receiver, the financial transaction data being communicated such that the payment to the emitter can be made once the latter has given authorization and (iv) notifying, both of the receiver and of the emitter, that the payment has been made correctly, the purchasing process thus being terminated.

Description

 DESCRIPTION MOBILE DEVICE, SYSTEM AND METHOD FOR ELECTRONIC PAYMENT

The object of the present invention is a mobile device, a system, a method and a computer product for the electronic payment of goods and services based on the generation 5 and code reading, preferably of QR and / or NFC type.

State of the art

A QR code (quick response code) is a useful module for

10 store information in a dot matrix or a two-dimensional barcode created by the Japanese company Denso Wave and described, among other documents in European patent EP1383063. It is characterized by the three squares that are in the corners and that allow to detect the position of the code to the reader.

Although initially it was used to register spare parts in the area of manufacturing

15 vehicles, today QR codes are used for inventory management in a wide variety of industries. The inclusion of software that reads QR codes in mobile phones, has allowed new consumer-oriented uses, which are manifested in comforts such as stopping having to manually enter data into the phones. Addresses and URLs are becoming increasingly common in magazines and ads. The aggregate of

20 QR codes on business cards are also becoming common, greatly simplifying the task of introducing individual details of a new customer in the agenda of a mobile phone.

QR codes can also be read from PC, or tablet using devices

25 image capture, such as a webcam, a scanner or a camera, programs that read QR data and an Internet connection for web addresses.

The Japanese standard for QR codes (JIS X 0510) was published in January 1998 and its corresponding international ISO standard (ISO / IEC18004) was approved in June 2000.

On the other hand, NFC (Near field communication) codes are designed as a wireless communication technology, short range and high frequency that allows the exchange of data between devices. NFC standards cover communication protocols and data exchange formats, and are based on ISO 14443 (RFID, radio-frequency identification). NFC communicates by induction in a magnetic field, where two spiral antennas are placed within their respective nearby fields. It works in the band of 13.56 MHz, this does not apply any restrictions and does not require any license for its use.

The normal and extended use of credit cards implies a series of problems in their practical use. such as a serious privacy problem in credit card data, since when paying with card the data of the band or chip can be stolen to subsequently duplicate the card, make fraudulent use of the same, problems of demategnization of the card itself, and having to carry it on when you want to make any type of transaction. In addition to being able to read a credit card, a magnetic stripe reader device is necessary which is not always present in the store or point of sale.

Document US20130031009 describes an ad-hoc network to dispense cash in cases where you do not want to pay by card, providing the cash necessary for the commercial transaction. However, despite a technical problem similar to that described, the solution involves the deployment of an alternative network to those currently in existence (bank data networks), so that its practical use is practically impossible to materialize. In addition, it is an objective of the present invention to take advantage of current banking networks and not replace them.

Description of the invention

The object of the invention is a payment system based on the generation and reading of codes, mainly QR and / or NFC for its standardization and simplicity of use. In general, the system allows issuing and reading codes that define an economic transaction between the issuer (collection) and the reader (payer).

Thus, the system and method object of the invention comprises the issuance of a code, in a practical embodiment, a QR code containing the amount to be paid, and which can be made from a smartphone (Smartphone) and display it on the screen of the device and / or from a Web page and / or display it on paper, according to different practical embodiments of the invention.

The QR code that contains the amount and currency of the transaction is read by the payer (receiving user) by means of the computer product also object of the invention, where the data read from the transaction will appear for authorization by the user. Once the authorization has been formulated, the system notifies both the receiver and the issuer that the payment has been made correctly and will terminate the transaction. Logically, both sender and receiver must be users of the system of the invention.

In a practical embodiment of the invention the system comprises a history of all transactions made.

One of the most important features of the system is that payment must always be made through an Internet connection. However, the invention does not need permanent connectivity since it allows the generation of off-line codes, issuing a code with identification of this fact so that, when the connectivity is recovered, it will be paid and introduced into the system.

Thanks to the described invention it is possible to simplify payments between different platforms and payment methods, minimizing risks for users, since they do not have to give absolutely any data on each website or purchase. In addition, payments can be both online and offline, or between individuals who make the payment in the same way, allowing all transactions to be centralized on a single Web page, regardless of the use of cards, transfers, or any other payment methods .

Furthermore, by means of the system and method indicated, the present invention allows to solve all the privacy problems related to the data of the traditional means of payment.

Throughout the description and the claims the word quot; comprehequot; and its variants not

5 are intended to exclude other technical characteristics, additives, components or steps. For those skilled in the art, other objects, advantages and features of the invention will be derived partly from the description and partly from the practice of the invention. The following examples and drawings are provided by way of illustration, and are not intended to restrict the present invention. In addition, the present invention covers all possible

10 combinations of particular and preferred embodiments indicated herein.

Brief description of the figures

Next, a series of drawings that help

15 to better understand the invention and which expressly relate to an embodiment of said invention that is presented as a non-limiting example thereof.

FIG 1.- Shows a scheme of the portable electronic device that implements the present invention. 20 FIG 2.- Shows a scheme of a peer-to-peer communication between two devices such as those shown in figure 1. FIG 3.-Shows a scheme of a communication between a device like the one shown in figure 1 and a server Web.

25 Exposure of a detailed embodiment of the invention

The present invention is implemented in a portable electronic device 100 which can be any selected among computers, tablets and mobile phones or smartphones, although a preferred architecture for a mobile device is shown in Figure 1. In

In general, any programmable communications device can be configured as a device for the present invention.

Figure 1 illustrates a portable electronic device, in accordance with some embodiments of the invention. The portable electronic device 100 of the invention includes a memory 102, a memory controller 104, one or more processing units (CPU) 106, a peripheral interface 108, an RF circuit system 112, a circuit system 114 audio, a speaker 116, a microphone 118, an input / output (I / O) subsystem 120, a touch screen 126, other input or control devices 128 and an external port 148. These components communicate over one or more communication buses or signal lines 110. The device 100 may be any portable electronic device, including, but not limited to, a laptop, a tablet, a mobile phone, a media player, a personal digital assistant (PDA), or the like, including a combination of two or more of these articles. It should be appreciated that the device 100 is only an example of a portable electronic device 100 and that the device 100 may have more or less components than those shown or a different configuration of components. The different components shown in Figure 1 can be implemented

15 in hardware, software or in a combination of both, including one or more specific application integrated circuits and / or signal processing. Similarly, the screen 126 has been defined as touch, although the invention can also be implemented in devices with a standard screen.

20 Memory 102 may include high-speed random access memory and may also include non-volatile memory, such as one or more magnetic disk storage devices, flash memory devices or other non-volatile solid-state memory devices. In some embodiments, memory 102 may further include storage located remotely with respect to one or more processors 106, by

25 example a storage connected to a network that is accessed through the RF circuit system 112 or the external port 148 and a communications network (not shown) such as Internet, intranet (s), local area networks (LAN) ), extended local area networks (WLAN), storage area networks (SAN) and so on, or any of their appropriate combinations. Access to memory 102 by other components of the

Device 100, such as CPU 106 and peripheral interface 108, can be controlled by memory controller 104.

The peripheral interface 108 connects the device's input and output peripherals to the CPU 106 and to the memory 102. One or more processors 106 execute different software programs and / or instruction sets stored in the memory 102 to perform different functions of the device. 100 and for data processing.

In some embodiments, peripheral interface 108, CPU 106 and memory controller 104 may be implemented on a single chip, such as chip 111. In some other embodiments, they may be implemented on several chips.

The RF (radio frequency) 112 system receives and sends electromagnetic waves. The RF circuit system 112 converts electrical signals into electromagnetic waves and vice versa and communicates with communications networks and other communication devices through electromagnetic waves. The RF circuit system 112 may include a circuit system widely known to perform these functions, including but not limited to, an antenna system, an RF transceiver, one or more amplifiers, a tuner, one or more oscillators, a digital signal processor, a CODEC chipset, a subscriber identity module (SIM) card, a memory, etc. The RF circuit system 112 can communicate with networks, such as the Internet, also called World Wide Web (WWW), an Intranet and / or a wireless network, such as a cellular telephone network, a wireless local area network (LAN) and / or a metropolitan area network (MAN) and with other devices via wireless communication. Wireless communication can use any of a plurality of communications standards, protocols and technologies, including, but not limited to, the global system for mobile communications (GSM), the enhanced GSM data environment (EDGE), multiple access by Broadband code division (W-CDMA), multiple code division access (CDMA), time division multiple access (TDMA), Bluetooth, wireless access (Wi-Fi) (for example, IEEE 802.11a , IEEE 802.11b, IEEE 802.11g and / or IEEE 802.11n), voice over IP (VoIP) protocol, Wi-MAX, a protocol for email, instant messaging and / or short message service (SMS) or any other protocol of adequate communication, including communication protocols not yet developed on the date of presentation of this document.

The audio circuit system 114, the speaker 116 and the microphone 118 provide an audio interface between a user and the device 100. The audio circuit system 114 receives audio data from the peripheral interface 108, converts the data from audio in an electrical signal and transmits the electrical signal to the speaker 116. The speaker converts the electrical signal into audible sound waves for the human being. The audio circuit system 114 also receives electrical signals converted by the microphone 116 from sound waves. The audio circuit system 114 converts the electrical signal into audio data and transmits the audio data to the peripheral interface 108 for processing. Audio data can be retrieved and / or transmitted to memory 102 and / or RF circuit system 112 via peripheral interface 108. In some embodiments, the audio circuit system 114 also includes a headphone connection (not shown). The headphone connection provides an interface between the system 114 of audio circuits and detachable audio input / output peripherals, such as a head-only headphone or a headphone both output (headphones for one or both ears) and input (microphone ).

The I / O subsystem 120 provides the interface between the input / output peripherals of the device 100, such as the touch screen 126 and other input / control devices 128, and the peripheral interface 108. The I / O subsystem 120 includes a touch screen controller 122 and one or more input controllers 124 for other input or control devices. The input controller (s) 124 receives / sends (n) electrical signals from / to other input or control devices 128. The other input / control devices 128 may include physical buttons (e.g. push buttons, rocker buttons, etc.), dials, slide switches, and / or geographic location means 201, such as GPS or equivalent.

The touch screen 126 in this practical embodiment provides both an output interface and an input interface between the device and a user. The touch screen controller 122 receives / sends electrical signals from / to the touch screen 126. Touch screen 126 shows the visual output to the user. The visual output can include text, graphics, video and any of its combinations. Part or all of the visual output may correspond to user interface objects, the additional details of which are described later.

The touchscreen 126 also accepts user inputs based on the haptic contact

or touch The touch screen 126 forms a contact-sensitive surface that accepts user inputs. The touch screen 126 and the touch screen controller 122 (together with any of the associated modules and / or instruction sets of the memory 102) detects the contact (and any movement or loss of contact) on the touch screen 126 and converts the contact detected in interaction with the user interface objects, such as one or more programmable keys displayed on the touch screen. In an exemplary embodiment, a contact point between the touch screen 126 and the user corresponds to one or more fingers of the user. The touch screen 126 may use LCD technology (liquid crystal display) or LPD (light emitting polymer screen) technology, although other display technologies may be used in other embodiments. The touch screen 126 and the touch screen controller 122 can detect the contact and any movement or lack thereof using any of a plurality of contact sensitivity technologies, including, but not limited to, capacitive, resistive, infrared and of surface acoustic waves, as well as other arrangements of proximity sensors or other elements to determine one

or more points of contact with the touch screen 126.

The device 100 also includes a feeding system 130 for feeding the different components. The power system 130 may include a power management system, one or more power supplies (eg batteries, alternating current (AC)), a rechargeable system, a power failure detection circuit, a converter or inverter. energy, an indicator of the energy status (for example, a light emitting diode (LED)) and any other component associated with the generation, management and distribution of energy in portable devices.

In some embodiments, the software components include an operating system 132, a communication module 134 (or instruction set), a contact / motion module 138 (or instruction set), a graphic module 140 (or instruction set) , a module 144 (or instruction set) of the status of the user interface and one or more applications 146 (or instruction set).

The operating system 132 (e.g., Darwin, RTXC, LINUX, UNIX, OS X, WINDOWS, or an embedded operating system such as VxWorks), includes different software components and / or controllers to control and manage general system tasks ( for example, memory management, control of storage devices, energy management, etc.) and facilitates communication between different hardware and software components.

The communication module 134 facilitates communication with other devices through one or more external ports 148 and also includes different software components to manage the data received by the RF circuit system 112 and / or the external port 148. The external port 148 (for example, a universal serial bus (USB), FIREWIRE, etc.) is adapted to connect directly to other devices or indirectly through a network (for example, Internet, wireless LANs, etc.).

The contact / motion module 138 detects contact with the touch screen 126, together with the touch screen controller 122. The contact / motion module 138 includes different software components to perform different operations related to the detection of the contact with the touch screen 126, such as determining if the contact has occurred, determining if there is movement of the contact and tracking the movement through the touch screen, and determine if the contact has been interrupted (that is, if the contact has ceased). The determination of the movement of the contact point may include determining the speed (magnitude), the speed (magnitude and direction) and / or the acceleration (including magnitude and / or direction) of the contact point. In some embodiments, the touch / motion module 126 and the touch screen controller 122 also detect the contact on the touch pad.

The graphic module 140 includes different known software components for displaying and displaying graphics on the touch screen 126. Note that the term "graphics"; It includes any object that can be displayed to a user including, but not limited to, text, web pages, icons (such as user interface objects that include softkeys), digital images, videos, animations and the like.

In some embodiments, the graphic module 140 includes an optical intensity module 142. The optical intensity module 142 controls the optical intensity of graphic objects, such as user interface objects, shown on the touch screen 126. The control of the optical intensity may include the increase or decrease of the optical intensity of a graphic object. In some embodiments, the increase or decrease may follow predetermined functions.

The user interface status module 144 controls the status of the user interface of the device 100. The user interface status module 144 may include a lock module 150 and an unlock module 152. The blocking module detects the satisfaction of any one or more conditions for transitioning the device 100 to a locked state of the user interface and for making the transition of the device 100 to the locked state. The unlocking module detects the satisfaction of any one or more conditions for transitioning the device to an unlocked state of the user interface and for transitioning the device 100 to the unlocked state.

The application or applications 130 may (n) include any application installed on the device 100, including, but not limited to, a browser, an address book, a contact list, email, instant messaging, word processing, emulations of keyboard, graphic objects, JAVA applications, encryption, digital rights management, voice recognition, voice replication, ability to determine position (such as that provided by the global positioning system (GPS)), a music player (which plays recorded music stored in one or more files, such as MP3 or AAC files), etc.

In some embodiments, the device 100 may include one or more optional optical sensors (not shown), such as CMOS or CCD 200 image sensors, for use in imaging applications.

The device 100, in a practical non-limiting embodiment, incorporates a radio wave information exchange system (NFC).

In the embodiment shown in Figure 2, a peer-to-peer communication is established between two devices 100 as indicated. This communication is established in a series of steps, which are described below:

1) At least one user enters the program 20 configured to execute the invention

with your credentials, usually username and password.

to. In case you do not remember the password or username there is

a recovery process of them 20a. 2) The issuing user selects the option “create charges” 21. 3) The issuing user writes the amount and / or the concept (and selects the currency) that

you want to charge 22. When you accept the code is generated. At this time a request is made to a server with the user's data, the amount and the currency, which once validated, returns a unique QR identifier encrypted using an encryption algorithm.

to.

The encryption algorithm used is a hashing algorithm, so that when the information reaches the server, the chain is searched to analyze the match and retrieve the information.

b.

If the application is offline, the data is encrypted using a Rijndael algorithm, so that such data can be subsequently read by the receiver and entered into the server database.

4) The code generated by screen 23 appears and the application is waiting for the payment to be made:

to. If, after X seconds, no notification is received, a message will appear asking the user if they want to continue waiting 24.

b. If the payment is made, the system will detect it and notify the issuing user. 5) The receiving user selects the option to “pay” 25. 6) The scanning system will appear using the mobile camera and the receiving user

you must scan the code that the sending user has generated 26. 7) When scanning, the information in code 27 is decrypted using the “ZXing” library and another request is made to the system by passing the data found in the QR, these are validated against the database and information regarding that payment in the user's currency is returned.

8) If the receiving user confirms payment 28, the system detects the approval and using

5 Stored card data and / or bank account data, will be connected to the bank gateway to make the relevant payments and collections. If the bank returns the confirmation, they will be notified that the transaction was successful.

10 Figure 2 shows a second embodiment with a communication against a Web application, where

1) The Receiving user arrives at the payment process of the website and selects the appropriate option. The web makes a request to the server by passing the data of the amount, currency, order number and authentication information of the merchant, if this

15 request is valid, the corresponding code will appear on the screen.

2) The Receiver user enters the mobile device application with their credentials

30

3) The Receiving user selects the “pay” option 31.

4) The scanning system will appear using the mobile camera and the user Receiver 20 must scan the code that appeared on the screen 32.

5) When scanning, the information 33 of the code is decrypted using the “ZXing” library and another request is made to the system by passing the data found in QR, these are validated against the database and the information related to that is returned payment in the user's currency, where:

25 a. If the Receiving user confirms payment 34, the system detects the approval and using the stored card data and / or bank account data, it will be connected to the bank gateway to make the relevant payments and collections.

b. If the bank returns the confirmation, you will be notified that the transaction has been completed correctly and the website will detect it, a confirmation will be sent and the transaction will finally be validated.

The method of offline communication that is essentially identical to that shown in Figure 3, with the only caveat that the code is generated differently:

1.- When a Receiver reads this code and sends it to the system, it tries to retrieve the information. If it detects that it is an "offline" code, it tries to decrypt it by recovering the key of said trade. If the result of the decryption is correct, the code information is added to the system, as if “online” had been generated, and the normal flow is followed

10 of the process.

And it includes the stages of:

1) The merchant generates a code through its point of sale application including in this code the basic encrypted information of the merchant identifier, the amount, currency, date, description and order number. It can also arrive

15 to send extra data necessary for the service. This information is encrypted using a key that is only accessible by the merchant and the server system.

2) The Receiving user enters the application with their credentials 30.

3) The recipient is given a code with the amount 35 (mainly it will be the same invoice that will contain a code, an http address or an email containing

20 the code). 4) The Receiving user selects the “pay” option. 5) The scanning system will appear using the mobile camera and the Receiver user must scan the code that appeared on the screen or is on paper. 6) When scanning, the code information is decrypted using the “ZXing” library and

25 sends it to the system, it tries to retrieve the information. If it detects that it is an "offline" code, it tries to decrypt it by recovering the key of said trade. If the result of the decryption is correct, the code information is added to the system, as if it had been generated online, and the normal process flow is followed, where:

to. If the receiving user confirms the payment, the system detects the approval and using the stored card data and / or bank account data, it will be connected to the bank gateway to make the relevant payments and collections.

5 b. If the bank returns the confirmation, the notification will be sent via SMS or message "Push" the notification to the mobile or email account associated with the issuing user by way of confirmation.

The payment system must be made with an internet connection, since it depends on whether you can contact the bank and finalize the transaction.

The code generation system preferably needs internet connectivity, but it is not mandatory. In case you do not have a connection, a special code will be generated which, when read at the time of being paid, will be entered into the system.

Claims (1)

1 - Electronic payment method implemented by computer that includes, at least the stages of: (i) issuing a code that contains the information necessary to carry out an economic transaction between a sender and a receiver of said code; (ii) reception of the code issued and containing the transaction data by the recipient; in such a way that the data contained in the code issued for authorization by said receiver is shown; (iii) a stage of connection with the recipient's financial entity by communicating the data of the economic transaction for the payment to the issuer once the authorization has been formulated by said issuer; and (iv) notification, both to the recipient and to the issuer, that the payment has been made correctly, ending the purchase process. 2 - Method according to claim 1 wherein the code is a QR code. 3-Method according to any of claims 1 to 2 wherein the issuance and reception are performed on a mobile device, such that the issuer issues a code indicating the amount and currency thereof, the code generated on the screen appears of the sending device, sending a notification to the receiver and waiting for the authorization of the same; and where upon receipt of the code, once the receiver authorizes payment, the receiving device opens the camera of its mobile device for scanning the code shown on the sending device, showing the transaction data and enabling the selection of a means of payment for it. 4-Method according to any of claims 1 to 2 wherein the sender is a Web application and the receiver is a mobile device, such that the receiver receives the code issued through the Web application and where after enabling the camera from your mobile device, it scans the code shown in said Web application, showing the data of the transaction and enabling the selection of a means of payment for it. 5 - Method according to any one of claims 1 to 2 wherein the issuance of the code is performed in a document and the reception thereof is performed in a mobile device, such that the receiver receives the code issued in a document and where After enabling the camera of your mobile device, it scans the code shown in that document, showing the transaction data and enabling the selection of a payment method 5 for it. 6 - Portable electronic device comprising at least a screen, a camera, 10 one or more processors, one memory and one or more programs stored in said memory and configured for be executed by means of the processor (s) characterized in that said programs contain instructions configured to: 15 issue a code that contains the information necessary to carry out a transaction economic; receive a code issued and that contains the data of an economic transaction; show the data contained in the code issued for authorization by a Username; 20 establish a connection with a financial entity with the data contained in the code; and notify the user of the status of the transaction. 7 - Device according to claim 6 wherein it incorporates a system for exchanging information by means of radio waves (NFC). 8 - Device according to claim 6 wherein the code is a QR code. 9 - Device according to any of claims 6-8, wherein the 30 programs executed by the processor (s), during the execution of the code reception contain instructions for activating the camera. 10 - Device according to any of claims 6-9 wherein the program (s) executed by the processor (s), during the execution of the reception of the code contain instructions for selecting a payment method. 5 11 - Electronic payment system comprising at least one device according to any one of claims 6 to 10; Y a server that understands one or more processors; a memory that includes a database; Y 10 a Web application stored in said memory and configured to be executed by the processor (s) when it is accessed and characterized in that said programs contain instructions configured to issue a code containing the information necessary to perform an economic transaction. 12 12 - Computer program product with instructions configured for execution by one or more processors than when executed by the device according to any of claims 6-10 cause said device to carry out the method according to any of claims 1-5 .