FR2814261A1 - TRUST VALUE ELECTRONIC TICKET, ELECTRONIC COMMERCE PAYMENT PAYMENT PROTOCOL, AND CORRESPONDING SERVER SYSTEM - Google Patents

Abstract

The invention relates to an electronic note of fiduciary value comprising at least one field (NU) representative of a unique number representative of a monetary counter value (CVM) established in a monetary unit of account (UMC). The unique NU number is based on the monetary value of the electronic ticket. Application of electronic commerce by anonymous exchange of electronic tickets.

Description

ELECTRONIC TICKET OF TRUST VALUE. PROTOCOL OF

  PAYMENT FOR PURCHASES BY ELECTRONIC COMMERCE AND SYSTEM

CORRESPONDING SERVER.

  The invention relates to an electronic note of fiduciary value, a payment protocol for purchases by electronic commerce, by means of one or more of these.

  tickets, and a corresponding server system.

  The recent advent of electronic commerce suggests prospects for a very significant development in the volume of transactions carried out by

  e-commerce in the near future.

  An obstacle to such a development seems to lie in the lack of flexibility, at least apparent, in the payment of transactions on the products or services offered. Currently, payment for the above transactions is made almost exclusively by

  through the bank card system.

  A bank card is generally a microprocessor card, also known as a smart card, to which are assigned, in addition to a confidential four-digit access code, a card number, generally comprising a set of digits, 16 digits most

often.

  The card number is, of course, associated with a bank account open in the name of the holder, this bank account can also be the subject of deposits or withdrawals by the holder, regardless of use.

from the menu.

  The confidential access code allows the card holder, whether or not a bank account holder, to carry out any cash withdrawal operation from, in particular, bank terminals designated by ATM cash dispenser terminals. In the recent past, the holder of the card, and of the bank account, was in addition able to settle directly any purchase of products or service by simple mention on the document of purchase-sale of the number of bank card and affixing of his handwritten personal signature, the holder's bank account being debited

  the amount of the transaction based on this document.

  Such a practice tends to disappear under the impulse of the advent of electronic commerce due to the material impossibility of realizing the affixing of the personal handwritten signature on a

purchase-sale document.

  Under the pressure of the attractiveness of electronic commerce, the procedures for the electronic signature of documents, in particular purchase-sale documents, are not yet fully accepted by national legislation or considered too cumbersome for the majority of transactions, an electronic commerce transaction settlement practice has developed, which consists of the card holder, buyer, communicating to the seller his

Bank card.

  By express agreement between the seller and the buyer, and of course the banking organizations managing the bank accounts of the buyer and the seller, the communication of the bank card number of the buyer to the seller constitutes authorization to the latter of setting recovery of the transaction amount from

  the buyer's bank account manager.

  However, such a practice has a major drawback inherent in human nature. The interception of the credit card number by unscrupulous third parties, during the communication of this number to the seller, allows them to honor any fictitious transaction, to the detriment of the holder of the

  bank card and the bank account associated with it.

  While in many cases the seller's honesty and integrity cannot be suspected, certain unscrupulous sellers may however be tempted to use the credit card number provided for purposes other than the mere payment of the transaction made . Finally, even apart from any fraudulent use, the very lawful possession by a seller of a certain number of bank card numbers of customers with a view to or having served for carrying out transactions exposes the latter to risks of piracy by

intrusion on the seller's site.

  The risks of fraudulent use of a bank card number, direct link with the bank account of the card holder, network communication are therefore real and significant, even in the presence of a

secure communication.

  The present invention aims to remedy the aforementioned drawbacks by the implementation of an electronic payment means in which any reference and any communication of place to the bank account of the owner of

this payment method is deleted.

  Consequently, another object of the present invention is the implementation of an electronic note of fiduciary value comprising the attributes substantially

  comparable to that of a paper money bill.

  Another object of the present invention is also the implementation of an electronic note of fiduciary value having a level of confidence

  comparable or better than that of a paper ticket-

  change. Another object of the present invention is, therefore, the implementation of a payment protocol for purchases of products or services by electronic commerce by exchange of electronic tickets in accordance with the object of the present invention, in l absence of any reference or any link to the identity of the buyer or to a bank account of which the latter is the holder. Another object of the present invention is, also, the implementation of a server managing transactions carried out by means of electronic tickets conforming to the object of the present invention, this server, placed under the authority of any entity d authorized issue, allowing the implementation of the purchase payment protocol, object of the invention, according to a procedure substantially equivalent to that of simple

  exchange of paper money notes.

  Another object of the present invention is, finally, the implementation of a network access terminal, wide area network and / or local area network, allowing the implementation of the payment protocol for purchases of products or services by electronic commerce by exchange of electronic tickets in accordance with the subject of the present invention. The electronic banknote of fiduciary value, object of the present invention, is remarkable in that it comprises at least one field representative of a unique number representative of a monetary equivalent established in a monetary unit of account by an entity.

resignation.

  The server system managing transactions carried out by means of electronic banknotes of fiduciary value, object of the present invention, these transactions being carried out between a buyer and a seller, is remarkable in that it comprises at least one module for storing a set of accredited sellers, empowered to conclude one or more transactions by means of these electronic tickets, a module for memorizing lists of electronic tickets issued valid respectively invalid, for a period of emptiness, a module for controlling and authenticating access to this server system of any seller accredited for the purpose of collecting electronic banknotes of fiduciary value exchanged during at least one transaction, a module for verifying the validity of the unique number of each electronic ticket exchanged at from at least a list of valid issued electronic tickets and an n module otification to the accredited seller of a transaction validation message between the seller and any buyer allowing the seller to send a transaction validation message, upon positive verification of the validity of the unique number of each valuable electronic ticket

trustee exchanged.

  The payment protocol for purchases of products or services by electronic commerce between a client terminal and a seller terminal for products or services, this client terminal being the holder of electronic banknotes of fiduciary value distributed by a specific server organization, issuing entity and memorized in this client terminal, in accordance with the object of the present invention, this seller terminal being managed and controlled by an approved seller with this specific server organization, is remarkable in that, when conducting an agreement purchase / sale of products or services for a determined price, this protocol consists at least of transmitting, as payment for the transaction from the client terminal to the seller terminal, a set of electronic tickets whose sum of face value covers the purchase price determined, to transmit from the seller terminal to the specific server organization this set of electronic tickets supporting this t ransaction for authentication, and, on successful authentication procedure, with each electronic ticket of this set of electronic tickets supporting this transaction being recognized the facial value assigned to it, to transmit from the specific server organization to the seller terminal a message of payment validation, to invalidate at least, at the level of this specific server organization, any electronic ticket of this set of electronic tickets supporting this transaction during a period of emptiness, and, on an unsuccessful authentication procedure, to transmit the server organization specific to this seller terminal, a payment confirmation message and non-validation of

the transaction.

  The electronic banknote of fiduciary value, the server system managing transactions carried out by means of these electronic banknotes and the payment protocol for purchases of products or services by corresponding electronic commerce, objects of the present invention, find application in any transaction of online transaction by electronic commerce such as, in particular, payment of a transfer price fixed by contract, purchase of mass market items, subscription

subscriptions or others.

  They will be better understood by reading the

  description and observation of the drawings below in

  which: FIG. 1a represents, by way of illustration, an electronic note of fiduciary value, in accordance with the object of the present invention, produced in the form of an electronic message; - Figures lb and lc show, by way of illustration, various alternative embodiments of the electronic note of fiduciary value, object of the invention as shown in Figure la; FIG. 2a represents, by way of illustration, a specific embodiment of an electronic ticket in accordance with the subject of the present invention in which the field relating to a single number representative of a monetary counter value consists of a encrypted value of any length, as a function of the unique number representing this monetary equivalent value and other fields of this same electronic ticket and / or of external variables; - Figure 2b shows, by way of illustration, another specific embodiment of an electronic ticket in accordance with the subject of the invention in which the field

  relating to a single number representative of a counter

  monetary value, consists of an electronic signature value of fixed length, this signature value being established from this unique number and from a plurality of other fields of this same electronic ticket and / or external variables; - Figure 2c shows, by way of illustration, a procedure for obtaining the encrypted value of any length of the electronic ticket shown in Figure 2a by encryption from a secret key; FIG. 2d represents, by way of illustration, an operating mode allowing the issuing entity to operate on any electronic ticket of its choice, as represented in FIG. 2a, a non-repudiation authentication operation thanks to a decryption operation using the secret key used during encryption; - Figure 2e shows, by way of illustration, an operating mode allowing the obtaining of the signature value of fixed length of the electronic ticket represented in Figure 2b by signature from a signature key; - FIG. 2f represents, by way of illustration, an operating mode allowing the issuing entity to operate on any electronic ticket of its choice, as shown in FIG. 2b, an authentication and non-repudiation operation thanks to a decryption operation from a signature verification key, distinct from the signature key; - Figure 3a shows, by way of illustration, a block diagram relating to a server managing transactions carried out by means of electronic tickets in accordance with the object of the present invention; - Figure 3b shows, by way of illustration, a functional flowchart of the manager server object of the invention as shown in Figure 3a; - Figure 4a shows, by way of illustration, a flowchart relating to a payment protocol for purchases of products or services by electronic commerce between a client terminal and a seller terminal, in accordance with the object of the present invention; - Figure 4b shows, by way of illustration, an alternative implementation of the payment protocol object of the present invention of Figure 4a in which a security measure consisting in temporarily inhibiting the subsequent use of electronic tickets, following a first use is introduced; - Figure 4c shows, purely by way of illustration, an alternative implementation of the payment protocol object of the present invention in which a security measure is introduced, following the receipt by the client terminal of an acknowledgment message of receipt of validation of the transaction, via the seller terminal, all electronic tickets, support of the transaction, being erased in this client terminal; - Figure 4d shows, by way of illustration, an example of a specific implementation of the introduction, by the issuing entity, at the level of the managing server, of a timeout for one or more electronic tickets, media of a transaction, this emptiness period consisting of an invalidation simply internal to the server of the electronic ticket (s), during their period of validity, in the absence of collection of this or these electronic tickets by their holder, this deadline on the contrary, consisting of an internal invalidation at the server level and external to this server of this or these electronic tickets during a period of emptiness much greater than the period of validity of this or these electronic tickets; - Figure 5 shows, by way of illustration, a non-limiting variant of implementation of the protocol, object of the invention in which a procedure for

change is introduced.

  A more detailed description of a ticket

  electronic of fiduciary value in accordance with the object of the present invention will now be given in conjunction with

Figures la, lc, 2a to 2f.

  In general, it is indicated that the electronic note of fiduciary value, object of the present invention, is implemented in the form of a message or an electronic file intended for an exchange between terminals and / or server and, more specifically, II in the context of a transaction between a client terminal, denoted TC, and a seller terminal which may, where appropriate,

  be constituted by a server, noted TV.

  Referring to Figure la, it is indicated that according to a particularly remarkable aspect of the electronic ticket, object of the present invention, it comprises, at least, a field representative of a unique number. This unique number itself being representative of a monetary equivalent established in a unit

  account money by an issuing entity.

  In FIG. 1 a, the field representing the unique number is denoted NU. It can be associated with a monetary counter value field, denoted CVM and with a unit field.

account money, noted UMC.

  With regard to the concept of issuing entity, it is indicated that in the context of implementation of electronic banknotes of fiduciary value, of the server system managing transactions carried out by means of electronic notes of fiduciary value and of the protocol payment for purchases of products or services by electronic commerce between a client terminal and a seller terminal for products or services, in accordance with the subject of the present invention, concerns any organization, any commercial and / or financial company authorized by the authorities of '' a sovereign State or a group of sovereign States to issue and distribute electronic tickets conforming to electronic tickets, objects

of the present invention.

  In general, it is indicated that the NU field, representative of a unique number, is advantageously

  consisting of a set of alphanumeric characters.

  The number of alphanumeric characters in this set of alphanumeric characters can advantageously be a function of the monetary equivalent CVM attributed to

corresponding NU unique numbers.

  In an example of specific implementation without limitation and for a monetary unit of account such as the French franc, a note whose monetary equivalent, that is to say the face value, is established at F comprises a unique number NU comprising twelve alphanumeric characters, a ticket with face value FF can advantageously include a unique number comprising 15 alphanumeric characters and an electronic ticket with face value 500 F can advantageously include a unique number NU comprising 18

alphanumeric characters.

  Of course, the electronic ticket, object of the present invention can be provided with different auxiliary fields which will be explained later in

the description.

  In a nonlimiting embodiment as shown in FIG. 1a or 1b, the electronic ticket which is the subject of the present invention can be implemented from a unique NU number constituted by a set of alphanumeric characters comprising at least a determined number of digits (a digit indicates a number or a letter) depending on the monetary equivalent attributed to the unique monetary number. These digits being representative of a unique number linked to the counter value

aforementioned monetary.

  In addition, a determined number of alphanumeric characters less than the number of digits can be provided. One or more alphanumeric characters being

inserted between two digits.

  In FIG. 1a, an electronic ticket with a monetary value CVM equal to 50 has been shown for a monetary unit of account UMC expressed by a code such as the code BF for French francs for example. The unique NU number consisting of a series of alphanumeric characters: 8, 9A, 254, lB6, P44 by

example.

  In these conditions, a 50 F banknote for example is represented by a series of twelve characters plus one or more auxiliary fields specifying the monetary unit of account, i.e. the currency, as well as

  will be described later in the description.

  Under these conditions, the unique NU number formed by the twelve alphanumeric characters is composed of nine digits and three letters. The three letters or alphanumeric characters being chosen from the twenty-six letters of the European alphabet or, where appropriate, the 256 ASCII characters for example. Alphanumeric characters can be randomly placed at random positions between two digits

  successive of the determined number depending on the counter

  monetary value assigned to the unique number.

  The aforementioned nine digits already provide a billion possibilities in choosing a specific unique number assigned to the corresponding monetary equivalent. Alphanumeric characters allow for 17,576 different combinations and, due to the random location of the aforementioned characters between two successive digits, a factor of 1,320 additional combinations is thus obtained due to the placement of the aforementioned alphanumeric characters in the series of

aforementioned digits.

  For the coding of a first CVM monetary equivalent of 50 F for example, we thus have a number of possibilities corresponding: to 1,000,000,000 x 17,576 alphanumeric characters x 1,320 positions for these characters, i.e. 23,200 320 billion combinations of encryption

different.

  If it is therefore assumed that the issuing entity validates only one combination out of the twenty-three million, it is then possible, for the latter, to put 50,000,000,000 French francs into circulation in the form of currency virtual in electronic tickets by means of 50 F notes. It is understood that any other monetary unit of account UMC can be used according to the authorization received by the national authorities or

  authorities controlling the issue of fiduciary securities.

  To find the right combination, a counterfeiter must not only be able to try 23 million combinations on average for a banknote of face value F but, moreover, satisfy the criterion of strict control, authentication and non-repudiation of banknotes imposed by the issuing entity and in particular by any server, manager of transactions carried out by means of electronic tickets, objects of the present invention within the framework of a specific protocol, which will be described later in the

description.

  In FIG. 1b, different embodiments of electronic tickets have been represented in accordance with the object of the present invention for different values, monetary counter-values and therefore facial values of these electronic tickets. The first example of an electronic ticket represented in FIG. 1b repeats the example given in FIG. 1a for a note of face value 50 F. The second example of an electronic ticket represented in FIG. 1b corresponding to that of an electronic ticket of face value 100 F. for example. In this

  case, and for the face value ie the counter

  monetary value CVM is equal to 100 F. the unique number NU can comprise 15 alphanumeric characters, that is to say 12 digits and 03 alphanumeric characters for example. In Figure 1b in the second example, the unique number NU is written:

585 / 46A / 222 / R48 / W12.

  Under these conditions, one thousand billion combinations are available due to the existence of 12 digits, this number of combinations being multiplied by 263 = 17,576 combinations for the 03 alphanumeric characters and further multiplied by 15 x 14 x 13 = 2,730 combinations for the random position of the alphanumeric characters between the aforementioned digits, i.e. a total of 47,982

480 times a trillion.

  Under these conditions, the issuing entity therefore has the possibility of issuing in monetary unit of account 47,982,480 times one trillion X 100 monetary units of account, i.e. French francs in the example shown in the second example of Figure lb. Thus, the issuing entity can choose a valid digit corresponding to the unique number NU represented in the second example of FIG. 1b from which the issuing entity could emit 100,000,000,000,000 (one hundred thousand billion) units UMC account money, i.e. francs in the example used. A counterfeiter, on the other hand, must make 47,000,000 combinations to

  find the matching combination.

  In the third example of FIG. 1b, a number of 15 digits has been represented for a 500 F banknote to which 03 alphanumeric characters are added. By way of example in imitation, the third example in FIG. 1b includes a unique number NU represented by:

T52 / 562/789 / GH1 / 459/770.

  Under these conditions, there are for the issuing entity 1 million billion combinations in numbers x 263 = 17,576 alphanumeric characters placed indifferently or in fact 18 x 17 x 16 = 4,896 different placement combinations for a total number of combinations of 86,052,096 different combinations

of 1,000,000 billion.

  To ensure the one-to-one correspondence between a ticket and the face value or monetary counter value which is associated with its unique number, the issuing entity has, for example, a random choice algorithm between one of the aforementioned combinations and the face value allocated to the selected combination ensures the one-to-one correspondence between one of the combinations, depending on the determined number of digits, the number of alphanumeric characters and the relative position of these with respect to the digits and the face value or monetary counter value

attributed to this combination.

  The aforementioned algorithm is preferably a non-linear algorithm which, thanks to a draw

  random, ensures bi-

aforementioned unequivocal.

  Under these conditions, the table below indicates the issuing capacities for the issuing entity expressed for each face value, ie each CVM monetary equivalent in number of maximum notes that can be issued for a number of alphanumeric characters. in parentheses and in available virtual money supply as shown below:

  CVM NUMBER OF TICKETS MONEY MASS

  MAXIMUM VIRTUAL FACIAL VALUE MAXIMUM VIRTUAL PRC / F

  (12) 23,200 320 50,000,000,000 1/23 million UMC billion UMC (15) 47,982 480 100,000,000,000,000 1/47 million UMC x 1,000 billion UMC (18) 500 86,052,096 500,000,000,000,000 1/86 million UMC x 1 million UMC billion In the above table, the face value of each virtual ticket is expressed in monetary unit of UMC account. It is the same for the virtual money supply likely to be put into circulation by the issuing entity, this monetary unit of account being likely, of course, to be issued and to correspond to any monetary unit of account such that the franc, the

  dollar, euro or other monetary unit of legal account.

  In addition, in the aforementioned table, the last column represents the probability of discovery of the combination for a counterfeiter for example, taking into account the indications given in connection with FIGS. La and lb

  This probability is noted Prc / f.

  On the invoice lc, an electronic ticket of fiduciary value is shown in accordance with the object of the present invention comprising, of course, the fields described above in connection with FIGS. 1a and 1b but also at least one auxiliary field denoted EE, representative of the issuing entity, this field being noted EE and being deemed to correspond to an identification code of a bank or any company authorized to play the role of an issuing entity, as well as a field auxiliary

  representative of the host country of this issuing entity. In the case of FIG. 1c, the nonlimiting example corresponds to a

  bank in France, BNP, the country being

France, noted FR.

  Finally, as shown in FIG. 1c, the electronic banknote of fiduciary value, which is the subject of the present invention may, in a particularly advantageous manner, also have an auxiliary field representative of the period of validity of the abovementioned electronic ticket. This field is denoted DV in FIG. 1c. It can include a value of date of issue of the electronic ticket by the issuing entity, value denoted X and a value Y of date of end of the validity of the electronic ticket considered. The values X and Y can be expressed in a classic way in years YY, month MM, day

  DD, hour HH, minute mn and second ss.

  According to an advantageous characteristic of each electronic ticket which is the subject of the present invention, the period of validity of these can be varied by

  function of the face value, i.e. the counter

  CVM monetary value allocated to each of these.

  Thus, * for banknotes of low face value, that is to say less than 50 monetary units of account, for example 50 F, the period of validity DV can be established at two months for example; * for electronic tickets with an average face value between 50 and 500 monetary units of account, the validity period DV can be established at one month; * for electronic tickets with face value greater than 500 F, UMC, the validity period DV may

  be reduced to 3 days for example.

  We understand, in particular, that the short duration allocated to electronic tickets with the highest face value makes it possible to reduce the risk of interception and decoding of the unique numbers associated with each of them during the transmission of these over the network. by unscrupulous users within a reasonable time, while the longer period of validity allocated to the lower value electronic tickets allows them to be used during this period for exchange purposes in a manner very similar to paper money, as will be described later

in the description.

  In general, it is indicated that the electronic tickets, objects of the present invention, are intended to be used by any user who has regularly acquired them from the issuing entity under conditions which will be explained.

  later in the description.

  As such, and in a nonlimiting manner, it is indicated that each electronic ticket in addition to the unique number NU, may advantageously include, in plain text, the face value of the ticket or monetary equivalent value CVM, the corresponding monetary unit of account UMC, the issuing entity EE and, of course, the host country of the entity

for example.

  However, and in order to no longer secure the ticket as such, that is to say the unique NU number, but any transaction carried out using a ticket or a set of electronic tickets, objects of the present invention, any information that is to say any field of the electronic ticket, object of the invention other than the previously mentioned fields containing information in clear, can advantageously consist of an encrypted value or a signature value not accessible to the authorized user and therefore to the third party, in order to ensure

  better transaction security.

  For this purpose, as shown in FIG. 2a, the field representing the unique number can advantageously be constituted by a value encrypted from a plurality of variables of the electronic ticket comprising at least the unique number NU, the issuing entity EE, the face value, i.e. the monetary counter value CVM of the note as well as, for example, the monetary unit of

UMC account.

  It is understood in particular that under these conditions, the unique number field when it is represented by an encrypted value is designated by CNU

to designate this value.

  As shown in FIG. 2a, it is indicated that the field relating to the encrypted unique number CNU can represent a variable length, that is to say not constant for each successive electronic ticket as a function of the encryption process used by the issuing entity. . On the contrary, as shown in FIG. 2b, the field relating to the encrypted unique number CNU can have a fixed length, that is to say constant, regardless of the type of ticket issued when a specific encryption process by electronic signature is used. starting from a hash function for example is implemented as will be described later in the

description.

  In addition, in FIG. 2b, it is indicated that the face value of the ticket can be constituted by a dedicated value, this dedicated value 550.09 monetary units of account having been established at the request of a user, that is to say a client terminal TC, by the sending entity to carry out a particular transaction whose amount corresponds exactly to the

dedicated value mentioned above.

  Under these conditions, it is understood that the electronic ticket object of the present invention has a degree of security and authenticity comparable to that of a certified bank check for the amount corresponding to the value of the aforementioned tickets. It is obviously understood that the certification of the value of the tickets, and of course of the electronic ticket carrying the corresponding face value, is given by the entity

  of emission under the conditions which will be described below

  after in conjunction with Figures 2c, 2d and 2e, 2f.

  In general, it is indicated that the establishment of an encrypted unique number value CNU of variable length can, for example, be obtained from encryption process from a secret key denoted KS by the technique of disposable mask by

  example or a steganography technique.

  For this purpose, as shown in FIG. 2c, a step CH1 is carried out in a concatenation of the fields of useful number NU, of issuing entity EE, of monetary equivalent value CVM, of monetary unit of account

  UMC to obtain a string noted $.

  Concatenation means either the simple concatenation of the aforementioned fields, or a so-called scrambled concatenation according to a specific algorithm for mixing the

  consecutive characters of each field.

  In addition and in a nonlimiting manner, to the values of the fields of the aforementioned electronic ticket can be added at least one field external to this such as for example the electronic address of the creditor terminal, ie of the seller terminal TV in the example. of transactions

  previously mentioned in the description, this

  address being noted ATV for example.

  It is understood in particular that the introduction of an external value field such as the address of the seller terminal ATV makes it possible to diversify the length of the field of the useful number encrypted CNU, this therefore not being of constant length as a function the length of the aforementioned seller terminal address. In addition, the introduction of such an address during the execution of a transaction makes it possible, on the one hand, to justify the possession of the ticket by the creditor terminal, that is to say the seller terminal and by the recipient that is to say by the authorized seller following a validation of the aforementioned transaction and, on the other hand, to ensure a secure exchange of the same electronic ticket during successive transactions by simple replacement in the plurality of variables of the seller terminal email address i.e.

  creditor terminal receiving this electronic ticket.

  The character string $ thus obtained is then subjected to a step CH2 to an encryption operation from the secret key AS. This operation is noted:

C = CKs ($) = CNU.

  In the previous relation CKS ($) designates the encryption operation of the dollar character string and C designates the encrypted value thus obtained and

  corresponding to the value of the CNU field.

  The aforementioned operations allow the issuing entity to ensure authentication and non-repudiation operations on any ticket that this

last judge required.

  Under these conditions, upon receipt of a ticket comprising a CNU encrypted unique number field and when this field has been obtained from encryption by means of a secret key KS, these operations, as shown in FIG. 2d, may consist in decrypting the CNU field, this operation being noted: DKS (CNU) $ and making it possible to restore the unencrypted character string obtained by the concatenation operation previously mentioned in connection with FIG. 2c. The decryption operation DCH1 is then followed by an operation for reading the dollar character string, operation denoted DCH2, this read operation making it possible to restore, either by direct reading when the concatenation has been carried out as a direct concatenation, or after descrambling and reading when the concatenation has been preceded by a scrambling operation, to restore the candidate fields NQ *, EE *, CVM *, UMC * and ATV *. These candidate fields being fields obtained from by the operation of

  decryption performed in step DCH1.

  The sending entity then proceeds in a step DCH3 to compare the equality of each candidate field NQ *, EE *, CVM *, UMC * with the original fields not

  encrypted NU, EE, CVM, UMC respectively.

  On positive response to all of the equality comparison operations carried out in step DCH3, the electronic ticket is authenticated and not repudiated by

  the sending entity in step DCH5.

  On the contrary, on negative response to one of the equality comparisons carried out in step DCH3, the electronic ticket is invalidated in step DCH4 by the entity

resignation.

  Figures 2e and 2f relate to comparable signature calculation operations to constitute a CNU encrypted unique number field of fixed length such

as shown in Figure 2b.

  To obtain a unique number field corresponding to a signature value of fixed or constant length regardless of the ticket, such an operation can be carried out by calculating a signature value from a hash function H as well as represented

in figure 2e.

  The values of the fields of useful numbers NU, issuing entity EE, monetary equivalent CVM, monetary unit of account UMC and, where appropriate, values external to electronic tickets such as the address of the terminal seller ATV and, for example, a random variable VA may be subject to concatenation under the conditions as above

  mentioned in the description in a step CH3, for

  get a character string denoted $$.

  The aforementioned concatenation step can be followed by calculation via a hash function of a hash value of fixed normalized length, this operation being noted:

H $$ N $.

  The character string of normalized length N $ is then submitted for signature using a private key KpR from an algorithm such as the RSA algorithm for example. This operation is noted:

+ SKPR (N $)

  to get the signed value, i.e. the CNU field

fixed length.

  In the previous relation, 8 denotes the signature value actually obtained and SKPR denotes the signature operation from the RSA algorithm.

  above and the KPR private key.

  To carry out the authentication and non-repudiation operations of an electronic ticket, the issuing entity is then able to proceed as well as

shown in Figure 2f.

  The issuing entity has the CNU encrypted useful number field corresponding to the signature value

above fixed length.

  It is then able, in a step DCH6, to carry out a verification of the aforementioned signature from a signature verification key denoted KPU, this key constituting an asymmetric key vis-à-vis the signature calculation key KPR. The verification operation is performed using the RSA algorithm for example and is noted: OKPU (CNU) = OKPU (SKPR {N Dollar}) This operation allows you to obtain the fields

  NU *, EE *, CVM *, UMC *, ATV * and of course VA * candidates.

  The DCH6 operation is then followed by a verification operation by equality comparison of the aforementioned candidate fields NU *, EE *, CVM *, UMC * and VA * for example as well as, if necessary, of the candidate field ATV * to the original field values NU, EE, CVM, if applicable,

VA and ATV.

  On negative response to one of the equality comparisons of the BCH7 test, the sending entity invalidates in step DCH8. On the contrary, upon positive response to all the equality comparisons of step DCH7, the issuing entity proceeds to an authentication to a non-repudiation of the electronic ticket considered at

step DCH9.

  A more detailed description of a system

  server manager of transactions carried out by means of electronic banknotes of fiduciary value, in accordance with the object of the present invention, will now be described

  in conjunction with Figures 3a and 3b.

  In general, it is indicated that the transactions taken into account take place between a buyer and a seller, these transactions being carried out from a client client terminal noted TC and a seller terminal noted TV, this seller terminal can of course consist in a server ensuring the

  adequate e-commerce operations.

  As shown in FIG. 3a, the server system comprises a storage module denoted HDD1 of a set of accredited sellers authorized to conclude one or more transactions by means of the electronic notes of fiduciary value described above.

in the description.

  In general, it is indicated that the HDD1 storage module advantageously consists of an autonomous hard disk making it possible to store all of the accredited sellers in the form of a list or, if necessary, a table, the list or the table being constituted by entities or variables corresponding to the name of the seller, to the electronic address of his terminal and to an access code of accreditation of the seller with the server system managing electronic tickets as shown in figure 1 per

example.

  In addition, the server system, object of the invention comprises a module denoted HDD2 for memorizing lists of electronic banknotes of fiduciary value issued valid.

  respectively invalid during a period of emptiness.

  In a simplified embodiment, the HDD2 module for storing the lists of aforementioned electronic tickets consists of an independent hard disk making it possible to store these lists in the form of separate lists comprising at least the number of the ticket considered in a directory of valid tickets issued

  respectively a directory of invalid tickets issued.

  It will of course be understood that the production of the HDD1 and HDD2 modules in the form of an independent hard disk makes it possible to apply particularly draconian access security conditions with regard to the HDD2 module for memorizing lists of valid and respectively invalid electronic tickets. These particularly severe access conditions may, if necessary, not be applied as strictly to the storage module HDD1. The corresponding access control processes which may correspond to conventional access control processes will not be described in

  detail in the description for this reason.

  In addition, as shown in FIG. 3a, the server system which is the subject of the present invention comprises a module 1 for controlling and authenticating access to the server system of any accredited seller for the purpose of either authentication authentication transactions and in particular authentication of the payment made by means of one or more electronic tickets previously

  described in the description, either for recovery

  electronic banknotes of fiduciary value exchanged at

during this transaction.

  A simple authentication protocol can consist, on access of an accredited seller presenting his

  access code, by comparing this access code with

  screw of the reference access code stored in the HDD1 module. Of course, the conditions for implementing the access control protocol corresponding to usual conditions taking into account the security rules

  imposed will not be described in the description for this

  reason. The server system which is the subject of the present invention also includes a module 2 for verifying the validity of the unique number of each electronic ticket NU of fiduciary value exchanged from at least one list of valid and invalid electronic tickets of fiduciary value. This verification module 2 can consist of a software module type module allowing verification according to the comparison test DCH3 represented in FIG. 2d or DCH7 represented in FIG. 2f, depending on the type of encryption or calculation of signature value. used. When the electronic tickets put into circulation do not include an encrypted unique number field, the unique clear number being only transmitted, the operation performed by the module 2 for checking the validity of the unique number of each electronic ticket comes down to the equality comparison of candidate fields received in clear, vis-à-vis the reference fields read on

the HDD2 memory module.

  Finally, the server system comprises a module 3 for notifying the accredited seller, that is to say the seller TV terminal, of a transaction validation message between the seller and any buyer. This module 3 allows the seller to send a transaction validation message upon positive verification of the validity of the unique number of each electronic note of fiduciary value exchanged, as explained.

earlier in the description.

  The module 2 for verifying the unique number can, as shown in FIG. 3a, also be accompanied by a module 4 for counting the number of errors in verifying the validity of the unique number of each electronic note of fiduciary value exchanged, as well as a module 5 for comparing the number of errors in verifying the validity of the unique number with a threshold value. In FIG. 3a, the modules 4 and 5 for counting the number of errors and for comparing the number of errors with a threshold value are represented by the same element

  so as not to overload the drawing unnecessarily.

  Regarding the aforementioned threshold value, this can be contained and stored on the module

HDD2.

  In a particular embodiment, the comparison module 4.5 makes it possible to control the notification module 3 and allows the sending of a transaction invalidation message to the accredited seller when the number of verification errors is greater than or equal at

  the threshold value Vseuil considered.

  The operating mode of the server represented in FIG. 3a will now be described in conjunction with FIG. 3b. The issuing entity which ensures the management and control of the transaction management server system carried out by means of electronic tickets, in accordance with the object of the present invention, controls via this server two main tasks: that consisting to validate the unique numbers presented and that consisting in carrying out banking operations

corresponding.

  Each seller wishing to offer the method of payment, subject of the present invention, by means of the corresponding electronic tickets, must first fill out an affiliation file and thus obtain an accreditation number or code as mentioned.

earlier in the description.

  This accreditation code allows him to identify himself at each connection for request for validation of a transaction, that is to say for a payment, and, if necessary, for request for collection of any

corresponding virtual ticket.

  In FIG. 3b, the numerical references designate operations carried out by the corresponding number modules in FIG. 3a. From a BEGINNING step, the, corresponding to a waiting position at a step lb of the access control module 1, the aforementioned access control module 1 communicates the accreditation number and operates in one step lc an access control check by reading the list of LVA accredited sellers stored on the HDD1 module. The access control module 1 makes it possible, of course, to verify the adequacy between the accreditation code presented and the IP address for example as well as the various identifiers of the Internet network when the latter is used. In case of difficulty, it is possible to make this number or accreditation code variable and thus provide the accredited seller with a diskette containing an unreadable program allowing to provide a different code for each access according to the date, time or all other parameter. Access control module ensures verification, correspondence between all parameters

from the TV vendor terminal.

  In the event that the accreditation code is not valid in step lc, access is refused and the server is

returned to the START position.

  If, on the contrary, access is accepted, the access control module 1 communicates the unique numbers of the electronic tickets to module 2 of

* verification of the unique NU number.

  The server actually has the exact list of valid electronic tickets and therefore knows whether a single number is valid or not. This operation carried out in step 2a in FIG. 3b can correspond to

  that already mentioned in the description in connection with

Figures 2d and 2f.

  If in step 2a the unique electronic ticket number is valid, then the module 2 transmits an execution order to the validation message notification module 3 which in step 3a sends a transaction validity message by the intermediary of the connection of the server to the wide area network for example, the server returning to the start position in order to allow, if necessary, to credit the seller's account and to invalidate the corresponding unique number for a period of emptiness, as well as it will be described later in the

  description. If, on the contrary, the number unique to the step

  2a is not recognized as valid, the module 2 initiates a command to the module 4 for counting comparison of the number of errors, which, in operation 4a when three successive errors are detected for example, ensures disconnection and the invalidation of the accreditation as well as, if necessary, the storage of the references of the

  seller in a list of identified fraudsters.

  In such a case, the seller must establish a recovery connection which makes it possible to check that the identity of this requester has not been usurped by an unauthorized person and that these errors come from

  then of a customer of this seller, customer identified or not.

  The seller must then disconnect from his client, identify him before disconnection and, of course, communicate this identification to the server system.

  manager shown in Figure 3a.

  The implementation of the identification and control procedure on a number of successive errors then re-accreditation of the seller eliminates all

risk of significant fraud.

  A specific payment protocol for the purchase of products or services by electronic commerce between a client terminal TC, a vendor terminal TV of products or services and, of course, the server S, manager of transactions carried out using electronic tickets of fiduciary value, in accordance with the object of the present invention, will now be described in conjunction with the

Figures 4a to 4b.

  In general, it is indicated that the client terminal TC is the holder of electronic banknotes of fiduciary value as described previously in the

description.

  These electronic tickets can be distributed by a specific server or, if necessary, by any means as will be described later in the

  description. Of course, the specific server and the

  distribution bodies for these electronic tickets are controlled by the issuing entity. Tickets

  electronics are stored in the TC client terminal.

  The TV vendor terminal is managed and controlled by an approved vendor, who has been assigned an accreditation number or code allowing the latter access to the managing server, as described above and under the conditions described in connection with the figure. 3a and the

Figure 3b.

  We thus find ourselves in a starting situation denoted ST in FIG. 4a relating the server S,

  the client terminal TC, the vendor terminal TV.

  This ST starting situation corresponds to that

  in which, when conducting a purchase agreement-

  sale of products or services for a determined purchase price PA, the customer has established a set of electronic tickets, each Bi ticket having a face value or monetary equivalent CVMi, the customer having chosen in their tickets a set of noted tickets [Bi] ik + P of which

  the sum of the face value covers the purchase price PA.

  Following the purchase-sale agreement between the client terminal and the seller terminal, the payment protocol, object of the invention, consists of at least one step A to be transmitted, as transaction payment, from the client terminal TC at the seller TV terminal, a set of electronic tickets, the aforementioned set [B] i = k + P including the] i = kprctdotl

  sum of the face value covers the purchase price PA.

  This operation in step A is noted transmission of: i = k + p i] i; + :::> CVMi = PA i = k The aforementioned step A is then followed by a step B consisting in transmitting, from the vendor terminal TV to the specific server organization S, the set of electronic tickets, medium of the transaction for authentication. This operation is carried out in step B by means of a substep B1 which is followed by a substep B2 of authentication of the unique number NUi * candidate for the unique reference number NUi stored in the HDD2 module, as mentioned in connection with Figure 3a. This operation is performed

for all Bi tickets.

  On successful authentication procedure in sub-step B2, this authentication procedure being represented in a simplified way by the relation: ViNUi * = NUi, for each ticket of the set of electronic tickets, medium of the transaction being recognized the face value which is assigned to it, step B is then followed by a step C consisting in transmitting from the specific server organization S to the seller terminal TV a message of

payment validation noted MVP_V.

  The above-mentioned step C is then advantageously followed by a step D consisting in invalidating at least at the specific server S any electronic ticket Bi of the set of electronic tickets, support of the transaction, during a specific emptiness period. It is understood in particular that the invalidation of the electronic tickets of the set of electronic tickets, support of the transaction, during this emptiness period, which can be taken equal to one, two or three years, makes it possible in fact not to reuse the unique number assigned to each of the tickets during this period, so as not to redistribute the corresponding codes of the unique numbers during the aforementioned emptiness period. This makes it possible to reduce the vulnerability of electronic tickets, objects of the present invention, to attacks by

  nuisance fraudsters on the network.

  On a negative response to the tests in sub-step B2, the authentication of the single number not being successful, the payment protocol, object of the invention consists of a step J to be transmitted, from the specific server organization S to the terminal TV seller, a message noted MIVP of payment invalidation and non validation of the transaction. FIG. 4b represents an alternative implementation of the protocol, object of the present invention such as

shown in Figure 4a.

  In the aforementioned variant, following step A consisting in transmitting as a transaction payment a set of electronic tickets, support of the transaction, the set [Bi] i = k + P this step being] i = kcet tp an represented in the effective step Ai of FIG. 4b, the protocol object of the invention in this embodiment consists, in a substep A2, of inhibiting, at least temporarily at the level of the client terminal TC, the use by this customer terminal for any electronic ticket belonging to the ticket set

  electronic support for this transaction.

  This temporary inhibition can advantageously be maintained at least until the invalidation, at least at the level of the specific server S of any electronic ticket of this set of electronic tickets during the period of emptiness on procedure

successful authentication.

  It is understood in particular that the temporary inhibition sub-step A2 thus makes it possible to eliminate any risk of successive multiple use of electronic tickets comprising the same unique number for separate transactions, whether this successive use is fraudulent on the part of the user of the TC client terminal or fortuitous. This temporary inhibition can then make it possible to strengthen the security of third parties in the conduct of transactions vis-à-vis a transaction already

  performed by the client terminal TC.

  By way of nonlimiting example, it is indicated that the operation carried out in sub-step A2 of temporary inhibition may consist in the client terminal TC of causing the memorization of any electronic ticket used for a specific transaction in a list or in an archived file, the read access of which is made conditional on authorization from the server via the vendor terminal, for example, as well

  that it will be described later in the description.

  In addition, as also shown in FIG. 4, the protocol which is the subject of the present invention may consist of step C consisting in transmitting from the specific server organization S to the approved selling terminal TV a payment validation message, to further carry out an operation E of transmitting from the approved selling terminal TV to the client terminal TC a message of acknowledgment of payment of transaction, then, on receipt of the message of acknowledgment of payment by the client terminal TC, to delete in the customer terminal TC each electronic ticket from the set of electronic tickets noted [Bj] ik + P object or medium of the transaction. It is understood in particular that the abovementioned erasure step F can be carried out on the list of electronic tickets subject to temporary inhibition and stored in a specific file as mentioned.

earlier in the description.

  Finally, as shown in FIG. 4a, the protocol which is the subject of the present invention may consist, following step C, transmission of the specific server member S to the vendor terminal TV of a payment validation message, to carry out, in addition, on the initiative of the approved seller, user of the seller terminal, a step G consisting in transmitting from the seller terminal to the specific server organization S a request for accreditation of a bank account noted REQ_AC_CB, bank account in the name of authorized seller for an amount corresponding to the amount of the transaction. In Figure 4a, due to the completion of step G conditional on the seller's initiative, the link between

  step C and step G is shown in phantom.

  Upon acceptance of the REQACCB accreditation request, step G is then followed by a step H of return of an acknowledgment of receipt and validation of the request to the approved TV seller terminal, the acknowledgment of

reception being noted MACKV.

  Step H is then followed by a step I consisting in erasing, at the level of the approved seller terminal TV, any electronic ticket from this set of electronic tickets] = k + p, the set [B] ikp, support of the transaction, and having been the subject of a collection. A specific, non-limiting mode of implementation of the allocation of emptying time to one of the electronic tickets by the specific server organization S in accordance with the payment protocol, object of the present invention, will now be described in conjunction with

Figure 4d.

  This specific management mode takes into account a starting situation ST in which the server S has been notified of all the electronic tickets, support of a transaction, the set [Bi] kP and o a message from] i = ketounmsaed payment validation MVPV was transmitted in step C

to the vendor terminal TV.

  Consequently, FIG. 4d represents a nonlimiting embodiment of step D of FIG. 4a. This mode of implementation takes into account the existence or non-existence of a bank account accreditation request on the initiative of the vendor terminal in step G. For this purpose, the server S performs a step of verification Dl consisting in verifying the existence of a request for accreditation REQAC_CB of the bank account on the initiative of the seller. On a positive response to the verification step D1, a step D4 is carried out by the server consisting in carrying out an internal and external invalidation of any set of tickets, support of a transaction, the set [B] ii = kP, l internal invalidation consisting in the server in allocating a DVIDi emptying time to each Bi ticket much greater than the validity period DVIDi of each of the corresponding Bi tickets. The DVIDi emptiness period can correspond to the duration of two or three years

  mentioned previously in the description.

  With regard to the external invalidation of each of the aforementioned Bi banknotes, it is indicated that this invalidation is carried out following step C and in parallel with the internal invalidation carried out in step B, and in particular in the substep. D4 above via steps E and F in the client terminal, as well as of course in step I in the seller terminal TC, as described previously in the

  description in conjunction with Figure 4a.

  On the contrary, on a negative response to the verification step D1, a step D2 of internal invalidation alone of all the electronic tickets, support of the transaction the whole [Bik + is performed in the] i = k etefcuedn server S , this step D2 being able to consist in the server in memorizing the list of tickets constituting this set of tickets in a specific directory to which is allocated a duration of emptiness DVIDi corresponding to the duration of validity of each of the tickets

DVIDi at most.

  The operation carried out in sub-step B2 then allows the server, in the absence of a request for accreditation of a bank account in the name of the seller, to ensure the exchange of electronic tickets between different sellers or, if necessary, between sellers and third parties during the validity period DVi allocated to each Bi ticket. It will of course be understood that this exchange step can be carried out independently of the server S during the aforementioned period of validity in step D3, each holder of a ticket whose validity period is then displayed being able to continue the exchange during this period of validity or, if necessary, proceed to a request for accreditation of a bank account according to steps G, H, I described previously in

Figure 4a.

  To carry out such an accreditation request, the unidentified third party can register with the server or any server authorized to carry out an accreditation.

  bank account in the name of the third-party user.

  A more detailed description of a mode of

  preferential non-limiting implementation of the payment protocol for the purchase of products or services by electronic commerce, object of the present invention, will now be given in connection with FIG. 5. The above-mentioned embodiment allows, for a sum of the facial value transmitted higher than the purchase price PA, sum intended to effect payment of the purchase price, to introduce a change-over procedure in

monetary unit of account.

  The introduction of such a procedure appears

  particularly remarkable due to the fact that this

  this then makes it possible to approximate in a almost perfect manner the payment protocol, object of the present invention, in the context of electronic commerce, to that of a conventional payment by exchange of paper money between the

seller and buyer.

  With reference to FIG. 5 above, the change-over procedure can be implemented after

step A of FIG. 4a.

  Under these conditions, as shown in FIG. 5, the protocol which is the subject of the present invention consists at least, in a step B'I1), of transmitting, from the vendor terminal TV to the specific server organization S, the set [ Bi] ikP virtual tickets, transaction support, as well as, of course, the value of the purchase price PA for authentication. The above-mentioned step B'l is then followed by the authentication step B'2, which can be identical to step B2 in FIG. 4, to constitute step B 'similar to step B of the Figure 4a above. In addition, and in a nonlimiting manner, it is indicated that the authentication step B'2 can comprise, in addition to checking the equality of the candidate fields NUi * and the fields of origin NUi for each of the index tickets i, the verification of the superiority of the sum of the face value of all the tickets transmitted

  Bi, transaction support at purchase price PA.

  Step B ', on successful authentication procedure and on each ticket of the set of electronic tickets, support of the transaction, being recognized the facial value assigned to it, is followed by a step C' consisting in transmitting , from the specific server organization system S to the vendor terminal TV, the payment validation message MVP_V as well as a subset of electronic tickets, a set noted [SBi] i + n whose sum of the face value covers the difference between the sum of transmitted face value and the PA price. It is understood, of course, that each note of the subset of electronic tickets is established in the same monetary unit of account as that of the tickets of the set of electronic tickets transmitted, support of the transaction and that, in this way, the currency can be returned in the corresponding monetary unit of account. The concept of electronic ticket subset, the sum of the face value of which covers the difference between the sum of the transmitted face value and the purchase price, means any subset of electronic tickets in the class of electronic tickets previously defined in the

  description for banknotes of different face value

previously described.

  Step C 'is then followed by a step E'l consisting in transmitting, from the vendor terminal TV to the client terminal TC, the subset of electronic tickets in the form of money returned and noted [SBai i = m + n We indicate in a nonlimiting manner that the transmission from the vendor terminal TV to the client terminal TC of the subset of electronic tickets in the form of returned money [SBJ] i = m + n can be carried out, as shown in FIG. 5, simultaneously with the

  transmission of the payment validation message MVPT_C.

  Preferably, each note of the subset of returned currency notes can also be assigned, as an auxiliary variable, the address of the client terminal TC in a manner similar to the embodiment already described.

  previously in the description for the transaction

customer terminal, seller terminal.

  In addition, as shown in FIG. 5, the step consisting in transmitting from the vendor terminal TV to the client terminal TC the subset of electronic tickets in the form of returned money, represented in step E'l of FIG. 5, may be followed by an erasure step, denoted E'2, in the vendor terminal TV of each electronic ticket of the subset of electronic tickets in the form of returned money [SB] ii = mn. In FIG. 5, in a nonlimiting manner, the steps E'l and E'2 are deemed to define a step E ', which appears as a step improved with respect to the step E of FIG. 4a. Step E ′ is then followed by step F of FIG. 4a consisting of an erasure of all the electronic tickets, support of the transaction [Bi] i = k + p Ji = k

in the TC client terminal.

  Different indications will now be given with regard to the mode of acquisition by any client provided with a client terminal TC of electronic tickets allowing the latter to implement

  the protocol which is the subject of the present invention.

  With regard to the acquisition of virtual tickets, this acquisition by the aforementioned customer can be carried out for example in three different ways: ò in any trade, the virtual tickets being able to appear in the form of plastic cards comprising at least one registration of '' one or more virtual tickets. Preferably, the zone for recording the aforementioned virtual tickets can be constituted by an erasable zone, which allows the customer considered to introduce, for example, virtual tickets into his client terminal TC, the first introduction ensuring the erasure of the zone d above-mentioned recording on the plasticized card by

example.

  ò The aforementioned customer can also buy virtual banknotes of fiduciary value conforming to the object of the present invention in a ATM

  automatic ticket machine, designated ATM machine.

  Under these conditions, the customer introduces for example a bank card, of the smart card type, into the slot of the ATM machine, chooses to purchase electronic tickets of fiduciary value. The ATM machine connects to the specific server and performs the request to transfer virtual tickets to the customer's bank card. When the virtual tickets are acquired by the latter, an automatic debit from the bank card account of the corresponding amount is made and a ticket or invoice corresponding to the transaction is issued to the customer. It is understood in particular that the edition of this ticket amounts to printing the receipt of the current withdrawal issued during transactions from bank cards. Of course, and as in the case of paper money, the customer, buyer of virtual tickets, owner of these tickets, is responsible, not only for the use of these virtual tickets, but also for their reproduction and any contribution to the reproduction of these tickets, in the same way as

in the case of paper tickets.

  * The customer can also buy tickets on the Internet by connection to the specific server site S, the transaction can also be carried out from

  a bank card reader terminal for example.

  The virtual tickets are then directly downloaded to its client terminal TC, a specific management program that can be implemented on the client terminal

TC cited above.

  Virtual tickets and the purchase payment protocol, objects of the present invention, make it possible, unlike the current electronic payment system by bank card, to make purchase payments very close to making purchase payments from paper money for the following reasons: * first, the holder of virtual tickets is the holder of these tickets under the same conditions as the holder of paper money notes; * the exchange of virtual tickets between users is carried out in a similar way to the exchange of paper money tickets, any exchange being carried out completely anonymously for the customer and for any successive customer, only the recipient, say that the seller can, if necessary, appear as the holder of the tickets he owns, which of course does not add any information on the transaction carried out; * the loss or substitution, fraudulent or not, of an electronic note of fiduciary value results in the loss or substitution of the face value in the corresponding monetary unit of account as in the case of a paper currency note; * the security of virtual electronic tickets can be made greater than that of paper money tickets due, on the one hand, to the existence of a specific coding between the unique number representing a particular monetary counter value, and, on the other hand, the protection of such coding by an encryption process, which of course makes all the more delicate any attempt to pierce and reproduce the whole; any attempt appears all the more illusory as the IT resources necessary for their implementation represent an investment without commensurate measurement with the value of the virtual ticket, object

of the attack.

Claims (19)

  1. Electronic banknote of fiduciary value, characterized in that it comprises at least one field representative of a single number representative of a monetary counter value, established in a monetary unit of account, by an issuing entity, said unique number coded according to a combination of characters according to the monetary equivalent presenting a probability of   discovery of said combination linked to this counter monetary value.   2. Ticket according to claim 1, characterized in that the field representative of a unique number consists of a set of alphanumeric characters, the number of alphanumeric characters of this set of alphanumeric characters being a function of said   monetary equivalent attributed to said unique number.   3. Ticket according to claim 2, characterized in that said set of alphanumeric characters comprises at least: - a determined number of digits as a function of said monetary counter value attributed to said unique number, said digits being representative of a unique number linked to said monetary equivalent; - a determined number of alphanumeric characters, less than the number of digits, at least one character   alphanumeric being inserted between two digits.   4. Ticket according to claim 3, characterized in that said alphanumeric characters are inserted at locations of random position between two digits successive.   5. Ticket according to one of claims   previous, characterized in that it further comprises an auxiliary field representative of the entity   country and the country looking forward to this issuing entity.   6. Ticket according to one of claims   above, characterized in that it further comprises an auxiliary field representative of the duration of validity of said ticket.   7. Ticket according to one of claims   previous, characterized in that said ticket further comprises an auxiliary field representative of the value facial of said ticket.   8. Ticket according to one of claims   above, characterized in that the field representative of said unique number consists of a value encrypted from a plurality of variables comprising at least said unique number, the issuing entity, the face value and the monetary unit of account , which allows, from a decryption operation, to perform any authentication operation and non-repudiation of said   ticket by said issuing entity.   9. Ticket according to one of claims 1 to 8,   characterized in that said face value of the ticket is a dedicated value, established at the request of a user by said issuing entity.   10. Ticket according to one of claims 8 or 9,   characterized in that said plurality of variables further comprises the electronic address of the creditor terminal, recipient of this electronic ticket in execution of a transaction, which makes it possible, on the one hand, to justify the possession of said ticket by this terminal creditor and this recipient following a validation of this transaction, and, on the other hand, to ensure a secure exchange of the same electronic ticket during successive transactions by simple replacement in said plurality of variables of the electronic address of the   creditor terminal receiving this electronic ticket.   11. Server system managing transactions carried out using electronic value tickets   trustee according to claims 1 to 10, between a   buyer and seller, characterized in that it comprises at least: - means for storing a set of accredited sellers, authorized to conclude one or more transactions by means of said electronic banknotes of fiduciary value; means for memorizing lists of electronic banknotes of fiduciary value issued which are valid or respectively invalid, during a period of emptiness; - means of controlling and authenticating access to said server system of any accredited seller with a view to an operation for collecting electronic banknotes of fiduciary value exchanged during at least one transaction; - means of verifying the validity of the unique number of each electronic note of fiduciary value exchanged from at least one list of electronic notes of electronic fiduciary value issued valid; means of notification to said accredited seller of a transaction validation message between said seller and any buyer, allowing the sending to said seller of a transaction validation message upon positive verification of the validity of the unique number of each ticket electronic of trust value exchanged. 12. System according to claim 11, characterized in that it further comprises: - means for counting the number of errors in checking the validity of the unique number of each electronic note of fiduciary value exchanged; means for comparing the number of errors in verifying the validity of said unique number with a threshold value, said comparison means controlling said notification means and allowing the sending of a transaction invalidation message to said accredited seller when this number of verification errors is greater than or equal to said threshold value. 13. Payment protocol for purchases of products or services by electronic commerce between a customer terminal and a terminal selling products or services, the customer terminal being the holder of electronic tickets   of fiduciary value according to one of claims 1 to   , distributed by a specific server organization, issuing entity, and stored in this client terminal, the seller terminal being managed and controlled by an approved seller with said specific server organization, characterized in that, when conducting an agreement purchase / sale of products or services for a determined price, this protocol consists at least: a) in transmitting as payment transaction from the customer terminal to the selling terminal a set of electronic tickets whose sum of face value covers the determined purchase price; b) to transmit from said seller terminal to said specific server organization said set of electronic tickets supporting said transaction for authentication by checking the validity of the unique number of these electronic tickets, and, on successful authentication procedure, to each electronic ticket of this set of electronic tickets supporting said transaction being recognized the facial value assigned to it, c) to transmit from said specific server organization to said seller terminal a payment validation message, d) to invalidate at least, at said specific server organization, any electronic ticket in this set of electronic tickets supporting this transaction for a period of emptiness, and, on an unsuccessful authentication procedure, e) to transmit from said specific server body to said seller terminal a payment confirmation message   and non validation of the transaction.   14. Protocol according to claim 13, characterized in that, following step a) consisting in transmitting as a transaction payment a set   of electronic tickets transaction support, this   this consists of inhibiting, at least temporarily, at said client terminal, the use by this client terminal of any electronic ticket belonging to this set of electronic tickets supporting this transaction, said temporary inhibition being maintained at least until invalidation, at least at the level of said specific server, of any electronic ticket of this set of electronic tickets during the emptiness period on successful authentication procedure.   15. Protocol according to claims 13 and 14,   characterized in that, following step c) consisting of transmitting from said specific server organization to said approved seller terminal a payment validation message, this further consists of: - transmitting from said approved seller terminal to said client terminal a message of transaction acknowledgment of receipt, and, on receipt of said payment acknowledgment message by said client terminal, - to delete in said client terminal each electronic ticket from this set of electronic tickets subject of the transaction.   16. Protocol according to one of claims 13 to   15, characterized in that, following step c) consisting in transmitting from said specific server body to said seller terminal a payment validation message, this further consists, on the initiative of the approved seller user of said seller terminal: - to transmit from said seller terminal to said specific server organization a request for accreditation of a bank account in the name of said approved seller for an amount corresponding to the payment of said transaction, and, upon acceptance of said request and return of an acknowledgment of receipt and validation of said request to said approved seller terminal, - to delete, at the approved seller terminal, any electronic ticket from this set of electronic tickets subject of the transaction having subject to recovery.   17. Protocol according to one of claims 13 to   16, characterized in that, for a sum of the transmitted face value greater than said purchase price, the latter also comprises a procedure for returning change in monetary unit of account.   18. Protocol according to claim 17, characterized in that, following step a) of transmission as transaction payment of said sum of transmitted face value, said change-over procedure consists of at least: b ') at transmit from said seller terminal to said specific server organization said set of electronic tickets supporting said transaction and said purchase price for authentication, and, on successful authentication procedure, to each electronic ticket of this set of electronic tickets supporting said transaction being recognized the facial value assigned to it; c ') to transmit from said specific server organization to said seller terminal a payment validation message and a subset of electronic tickets whose sum of the face value covers the difference between said sum of transmitted face value and said purchase price, and e'l) to transmit from said vendor terminal to said client terminal said sub-set of tickets   electronic money.   19. Protocol according to claim 18, characterized in that in the step consisting in transmitting from said seller terminal to the client terminal said subset of electronic tickets in the form of returned money is associated a step of erasing, in said seller terminal, of each electronic ticket of said subset of electronic tickets in respect of returned money.