FI122518B - Variable payment in service number - Google Patents

Description

Variable payment in service number

Background of the Invention

The invention relates to payment by telephone.

Your phone, especially your mobile phone, can take advantage of numerous utility and entertainment services and purchase products that will be billed to your phone bill. The mobile phone is quite suited to pay as it is a device that is almost always available and with you. Telephone and telephone billing are, in a way, a form of payment similar to a credit card: purchases are made into debt and the bill is paid off in arrears. It is most useful if the service or product can be delivered immediately to the customer via an automated or a network. For example, there are vending machines that made it possible to purchase products (e.g. a soft drink vending machine) or services (eg a car washing machine) by telephone or SMS. A phone call or SMS can be used to purchase various content and information services, such as ringtones, logos and icons, games played on a mat-15 handset, etc. FI114425 presents a solution where, for example, train or bus tickets can be paid for with a mobile phone. FI112716 discloses the use of a mobile phone to pay parking fees.

The telephone call required for payment must be made to the service number for the service or product with fixed billing. In practice, the service number 20 of the service is implemented as an intelligent network service. The service number is reserved by your mobile operator and all related settings and changes are made through your operator.

FM 15355 describes a method for real-time identification and authentication of a protected system. The method can also be used for centralized billing for, for example, paid websites, services, or devices. For example, a user can purchase a new operator ™ logo and a ringtone on his mobile phone by browsing for products or services, selecting what he wants, and launching a trading function. Similarly, users can select a product or service and launch a merchandising function in the sales car 30 maat. The web server issues an authentication request to the authentication server, indicating the cost, or price, associated with the user's choice. The authentication server retrieves from its available number space a suitable telephone number with a correct call rate corresponding to the price of the product or service, and provided a disposable identifier. The challenge thus created is returned to the web server or automata, which then presents it to the user. When a user dials a telephone number on his / her telephone and enters a possible 2 identification code, payment has been made (in the telephone bill). The authentication server notifies you of the payment to the vending machine that distributes the purchased service or product.

BRIEF DESCRIPTION OF THE INVENTION The object of the invention is to provide a more technically flexible apparatus for telephone payments. The object of the invention is achieved by an apparatus characterized by what is stated in the independent claim. Preferred embodiments of the invention are claimed in the dependent claims.

In accordance with preferred embodiments of the invention, service or product payment calls are made to the service number (s) of an authentication and access control unit shared by multiple protected systems. One or more service numbers are variable-rate, allowing you to receive calls for different prices for services or products at the same service number. The authentication and access control unit 15 determines the cost of each call per call based on the caller's telephone number (A-number) and / or information provided by the caller and forwards the determined call cost to the caller's telephone operator. This allows you to make a variable rate or free service call regardless of your phone number and carrier. Call charging can be defined differently for each secure system utilizing the 20 authentication and access control units and even differently for each call or transaction. The definition may, for example, occur at each service request made by a secure system and / or be predefined. The apparatus according to the invention can be utilized, for example, when purchasing goods / services from a self-service vending machine. Each product or service may have different prices, prices may change (for example, when a user selects different ^ features for a product or service), prices may be different for different users or groups of users, etc.

CM

v The hardware can also make, for example, a cm identification call required by a secure system, free of charge to the user, for example, a | 30 the use threshold for employer services is lowered. In known solutions, a call has only one price per service number, and it is slow and expensive to provide such a service, requiring a large number space and / or settings to be changed over the telephone network (intelligent network).

o w Using a shared authentication and access control unit 35 provides a simple, low-cost, reliable way to receive service calls. Different secure systems 3 can centrally use the same authentication and access control service and even the same service numbers. A system that needs a payment service only needs to communicate with the authentication and access control unit to request and arrange the payment service as desired. The payment service can be arranged very flexibly, for example, without any smart network configuration, even for a small group and for a short time.

In some embodiments of the invention, the authentication and access control unit is adapted to set a reduced call charge or a free call from predetermined numbers to calls to a service number 10 and / or to calls where the caller provides predetermined information. Such a free or cheaper call may be, for example, an authentication call required by a secure system. The information provided by the caller may include, for example, a service identifier, a product identifier, an automated identifier, a person identifier and / or a community identifier or the like. The authentication and access control unit 15 can obtain predetermined telephone numbers and / or information from a secure system used to determine the cost of a call over a network connection. Price information may come from the secure system separately for each call.

BRIEF DESCRIPTION OF THE DRAWINGS The invention will now be further described in connection with preferred embodiments, with reference to the accompanying drawings, in which:

Figure 1 is a schematic block diagram of a payment system according to some exemplary embodiments of the invention,

Figure 2 shows an example of a payment transaction according to an embodiment of the invention in connection with a telephone service, Figure 3 shows an example of a payment transaction in accordance with an embodiment of the invention at a vending machine, and V Figure 4 shows an example

CM

transaction with the web server.

CC

DETAILED DESCRIPTION OF THE INVENTION 05c In the example of Figure 1, an authentication and access control service or device

LO

§ Office 1 for data network (s) 4, data connections, or directly to a plurality of protected systems 5, 6 and 9, each of which provides any service requiring authentication and / or authentication or any other type of authentication. 35 The protected system 5 or 6 may be, for example, an Internet server (web server) 4 which provides the user (e.g., via computer 10 or mobile terminal) with access to the company's intranet site through a browser connection over the Internet via a public data network. Secure system 5 or 6 may be a paid content server or online sales system, security system 5, 6 or 9 may also be, for example, a vending machine, a payment machine or a service machine where payment can be made by mobile phone, or a building security or access control system . The protected system 5, 6 or 9 may also be a government service or a service requiring online payment, such as e-commerce. The protected system may also be a paid telephone service, such as a telephone inquiry service, Help Desk, etc. It should be noted that although only three protected systems 5, 6 and 9 are shown in Figure 1, an unlimited number of different protected systems may be connected to the identification system.

In the example, the authentication and access control service 1 may include a user management tool for the services, as well as specified authentication and payment methods. These can either be implemented directly by the authentication service 1 (e.g., username / password) or utilized by a third party authentication service. For example, bank online services allow users to be identified by bank codes provided by banks (eg Tupas method). Sa-20 can also use the certificate issued by the population register (eg HST). Customer identification services use these authentication and payment services through a single interface.

In the example, the authentication and access control service 1 may be connected to a telephone network 2, such as a PSTN / ISDN / PLMN, by a plurality of telephone connections and / or via a VoIP (Voice-over-Internet Protocol) interface (H.323) or SIP (Session Initiation Protocol) interface. . VolP / SIP interfaces can be provided, for example, by connecting the authentication and access control service 1 to the telephone network cv ^ 2 via the VoIP gateway 3. The VolP gateway 3 converts ^ PSTN / ISDN calls into IP calls (SIP or H.323) and vice versa while retaining ^ 30 ISDN functionality such as signaling. H.323 is a true ITU-T standard multimedia communication over packet networks (IP calls). SIP is a proto σ> colony for establishing IP calls. Supported signaling may include, for example, Advice of Charge (AOC) signaling. Of course, VoIP calls are transmitted over IP connections, so that the connections between blocks 1,3 and 9 are IP connections, for example over data network 4. An example of a VolP gateway is SmartNode 4557, manufactured by Patton Electronics Co.

5

The identification may be based on a challenge-response authentication sequence using a call. When a user of a secure service attempts to access content or services that require authentication, the user is provided with an authentication challenge in accordance with the invention, to which the user must respond in an acceptable manner in order to pass a security check. The protected system sends 1 authentication request to the authentication and access control equipment. Authentication occurs, for example, when a user dials a particular telephone number, i.e., makes a call to that number from his terminal and authentication apparatus 1 verifies this event and sends a response to the secure system. In addition, the user terminal 7 or 8 may be any communication device that enables a call from the user to the identification apparatus 1 or vice versa. Typically, the communication means is a separate telephone device, such as a mobile station (e.g., GSM) or a PSTN telephone.

An example of this type of authentication and access control service 15 is MPollux CallSign from Fujitsu Services Oy. Another example of a suitable apparatus is described in Fl patent 115355.

In accordance with preferred embodiments of the invention, service or product payment calls are made to the service number (s) of an authentication and access control unit 20 1 of this type shared with multiple protected systems. One or more service numbers are variable-rate, allowing you to receive calls for different services or products at the same service number. The authentication and access control unit 1 determines the cost of each call on a call-by-call basis (A-number) and / or information provided by caller 7 or 8, and forwards the determined call price via a telephone network to the telephone operator who charges the call.

CM

^ The call center technology and its signaling protocols enable the transmission of pulse information to an open call. Advice of Charge ^ 30 (AOC), Payout Address or Price Notification, is an additional ISDN service that allows a subscriber paying for a call to receive usage-based billing information at the end of a call (AOC-E), during a call (AOC-D), or during call setup. during 00 £ 3 (AOC-S). For example, in the GSM system, the payment indication can be made using the o AOC-I service. The AOC may report the charge information as the charge pulse rate or ^ 35 direct price information. In ISDN signaling, AOC-D can be transmitted, for example, in an ISDN-Facility message, and AOC-E can be transmitted, for example, in ISDN-6.

Release message with the Facility Info element. In the SIP protocol, the AOC can be placed in a dedicated SIP header (SIP header). This SIP AOC header may be sent, for example, in a SIP-Info message when a session is established, or in a SIP-BYE message when a session is being terminated. In preferred embodiments of the invention, the authentication and access control unit 1 utilizes an Advice of Charge (AOC) charge assignment or the like to transmit call cost information to the telephone operator who charges the call.

The operation of the arrangement according to exemplary embodiments is illustrated by the following 10 examples, with reference to Figure 2. In Figures 1 and 2, like reference numerals refer to the same units or functions. Figure 1 bills a variable rate service call to a telephone service, such as a telephone inquiry or customer service.

User 7.8 makes a call to a service number (B number) that has been communicated to him in some suitable way (step 21). The call is transmitted through the VolP gateway 3 to the authentication and access control unit 1 (step 22) The authentication and access control unit 1 identifies the caller's telephone number entering the service number. In its simplest form, no additional information is conveyed in the call and the call need not even be connected, as the identification and access control unit 20 can identify the subscriber number from an incoming call without signaling (e.g. using CLIP, Calling Line Identification Presentation SIP support). For example, the authentication and access control unit 1 may determine the cost of a call according to the caller's telephone number, for example, by comparing the caller's telephone number to a pre-stored number register. In some embodiments, the call is connected and other information, such as a PIN, is required of the caller in addition to the call. Other information required

(M

^ may contain other data in addition to or in addition to the PIN code. Such data may be, for example, biometric data such as real-time audio for voice print identification, or a fingerprint scan result. This | the additional information may also be a telephone service selection, for example in the case 05 where there are several telephone services from the same service number. For example, a business customer service may have a free sales service but no paid customer support or help desk. After determining the call cost, the identification and access control unit 1 can send the call cost information (e.g., AOC) directly to the operator of the telephone network 2 or via the VolP gateway 3 (step 23). This can occur during the call setup phase, during the call, or at the end of the call. The authentication and access control unit 1 also routes the call to that telephone service 9 directly or via the VoIP gateway 3 (steps 24 and 25). The telephone bill is charged by the telephone operator on the telephone bill.

As in the example of Figure 2, the telephone service 9 may be replaced by an automated or equivalent apparatus from which the user may purchase services or products. On the same principle as above for the telephone service, the authentication and access control unit 1 may identify at least the telephone number of the caller, determine the cost of the call, inform the telephone operator of the cost of the call and route the call to the ATM and the like.

The operation of the arrangement according to the exemplary embodiments will now be described, by way of another example, with reference to Figure 3. In Figures 1,2 and 3, like reference numerals refer to the same units or functions. In Figure 3, a variable-price purchase of an automaton is weaved.

The user 7.8 makes a call to a service number (B number) from the dispatcher 35, for example, through the interface of the dispenser or in any other suitable way (step 31). The call is routed through the VoIP gateway 3 to the authentication and access control unit 1 (step 32). The authentication and access control unit 1 identifies the caller's telephone number entering the service number. In its simplest form, no additional information is conveyed in the call and the call need not even be connected, since the identification and access control unit 1 can identify the subscriber number from an incoming call without signaling (using, for example, CLIP, H.323 or SIP support). For example, the authentication and access control unit 1 may determine the cost of a call 5 based on the caller's telephone number, e.g.

C \ J

^ numbers in a pre-stored number register. In some embodiments, the T call is connected and other information, such as a PIN, is required from the caller in addition to the call. Other required information may include a PIN | or other data. Such data may be, for example, biometric data, such as real-time audio for voice print identification, or a fingerprint scan result. This additional information may also be an identification code of the product, service and / or vending machine, for example, in the case of ™ 35, where several products, services and / or machines are included in the same service number. After determining the call cost, the authentication and access control unit 1 can send the call cost information (e.g., AOC) to the operator of the telephone network 2 directly or via the VolP gateway 3 (step 33). This can occur during the call setup phase, during the call, or at the end of the call. The authentication and access control unit 1 also informs the machine 35 (step 34) of the payment being made, which distributes the purchased service or product. Your telephone bill will be charged by your telephone operator. Call charging can be defined differently for each secure system utilizing the authentication and access control unit to collect the charge, and even different for each call or transaction. For example, the determination may be made for each service request made by the protected system for each call separately and / or be predefined. The service request or predefinition is illustrated by arrow 30 in Figure 3. The definition may include, for example, predetermined telephone numbers and / or information such as a service identifier, a product identifier, an automated identifier, a person identifier and / or a community identifier or the like.

The operation of the arrangement according to exemplary embodiments will now be described by way of a third example with reference to Figure 4. In Figures 1, 2, 3 and 4, like reference numerals refer to the same units or functions. Figure 4 bills a variable price purchase or service made on a web server.

20 Assume that the protected system 6 is a web server or similar application server. The user communicates with the server 6 via his / her computer 10 browser program over the Internet connection (step 40). The user's choice or request for connection to the server 6 causes the server to provide the user with a telephone number to call to pay for the service or product, and any additional information the user must provide in connection with the call. Preferably, the server 6 can send a request 5 to the authentication and access control unit 1 to receive and verify the payment (step 41). The request preferably includes the user's telephone number and any additional information such as the identifier and / or price information. This identifier may be, for example, an identifier code for a product, service, and / or secure system, for example, in a case where the same service | The issue number includes a number of products, services and / or protected systems. Alternatively, the authentication and access control unit 1 provides the server 6 with at least $ 00 of information to be displayed to the user. User 7.8 makes a call to the server sleep number (step 41). The call is routed through the VoIP gateway 3 to the authentication and access control unit 1 (step 42). The authentication and access control unit 1 identifies the caller's telephone number entering the service number, 9 determines the cost of the call to the operator of the telephone network 2 (step 43), for example, by one of the methods described above. The authentication and access control unit 1 also informs the server 6 (step 44) of the payment, which distributes the purchased service or product. The voice-5 liner will charge the call on the phone bill.

It will be obvious to a person skilled in the art that as technology advances, the basic idea of the invention can be implemented in many different ways. The invention and its embodiments are thus not limited to the examples described above, but may vary within the scope of the claims.

10 δ

(M

(M

(M

(M

X

I do not

CL

O) 00 00 m σ> o o

(M

Claims (10)

Device for paying a service or product, which device is coupled to receive a call, wherein the caller dials a telephone to a service number for charging the product or service in the caller's telephone bill, characterized in that: the device comprises an identification and access monitoring unit (1) which is in the use of multiple protected systems (5,6,9,10) and connected to a telephone system (2), the identification and access monitoring unit (1) is arranged to receive the same service number payment calls with different prices relating to services or products and determine the call price specific to the caller on the basis of the caller's telephone number and / or information provided by the caller and communicate the price of the call via the telephone network (2) to the caller's telephone operator, and to identify and identify the caller. the access monitoring unit (1) is arranged to first receive a call, determine the price of the call, and then di direct the call to a protected system (5,6,9,10). Device according to claim 1, characterized in that the identification and access monitoring unit (1) is arranged to send the price of the call in an Advice of Charge message. 3. Device according to claim 1 or 2, characterized in that the identification and access monitoring unit (1) is arranged to determine a reduced price for the call or a free call from predetermined numbers for calls which dialed the service number. 4. Device according to claim 1, 2 or 3, characterized in that the identification and access monitoring unit (1) is arranged to set a reduced price for the call or a free call for calls made to the service number, i. which the caller provides predetermined information, cvi 5. Device according to claim 3 or 4, characterized in that the CM x 30 received call is an identification call required by the protected * system (5,6,9,10). Section 6. Device according to any of claims 1-5, characterized in that said information contains an identifier for the service, an identifier for the product, an automatic identifier, a person identifier and / or a community identifier or equivalent identifier. . 13 Device according to any of claims 1-6, characterized in that the identification and access monitoring unit (1) is arranged to receive predetermined telephone numbers to be used in determining the price of the call and / or from the protected system (5,6,9, 10) over a network connection (4). Device according to any of claims 1-7, characterized in that the identification and access monitoring unit (1) has several service numbers with varying prices. Device according to any one of claims 1-8, characterized in that the identification and access monitoring unit (1) is arranged to receive a call and possibly direct the call via a VoIP gateway (3). Device according to any one of claims 1-9, characterized in that the protected systems (5,6,9,10) comprise one or more of the following: telephone service, vending machine, payment machine, toll-paid service system, toll-free content server, network sales systems, access control systems, identification systems. δ cv in C \ l CM CM X cc CL CD 00 CO LO CD O O CM