FR2814836A1 - On line payment via network for performing transaction between customer and merchant by excluding information exchange between server and merchant terminal that may intervene during transaction with customer - Google Patents

On line payment via network for performing transaction between customer and merchant by excluding information exchange between server and merchant terminal that may intervene during transaction with customer Download PDF

Info

Publication number
FR2814836A1
FR2814836A1 FR0106895A FR0106895A FR2814836A1 FR 2814836 A1 FR2814836 A1 FR 2814836A1 FR 0106895 A FR0106895 A FR 0106895A FR 0106895 A FR0106895 A FR 0106895A FR 2814836 A1 FR2814836 A1 FR 2814836A1
Authority
FR
France
Prior art keywords
merchant
server
customer
identifier
signed
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
FR0106895A
Other languages
French (fr)
Inventor
Ahmed Serhrouchni
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
GROUPE ECOLES TELECOMM
Original Assignee
GROUPE ECOLES TELECOMM
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from FR0012676A external-priority patent/FR2814835B1/en
Application filed by GROUPE ECOLES TELECOMM filed Critical GROUPE ECOLES TELECOMM
Priority to FR0106895A priority Critical patent/FR2814836A1/en
Publication of FR2814836A1 publication Critical patent/FR2814836A1/en
Withdrawn legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
    • G06Q20/023—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP] the neutral party being a clearing house
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/04—Payment circuits
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/12—Payment architectures specially adapted for electronic shopping systems
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/22—Payment schemes or models
    • G06Q20/28—Pre-payment schemes, e.g. "pay before"
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3825—Use of electronic signatures
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/403—Solvency checks
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/403—Solvency checks
    • G06Q20/4037—Remote solvency checks
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/06—Buying, selling or leasing transactions

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • Strategic Management (AREA)
  • Theoretical Computer Science (AREA)
  • Finance (AREA)
  • Computer Security & Cryptography (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

A balance verification stage is used for an account of a prepaid card. A payment server (300) performs a debit of the account and a transmission to a customer terminal (100) of a data file signed with a digital signature. There is no exchange of information between the server and a merchant terminal (200) that may intervene during the transaction with the customer.

Description

<Desc/Clms Page number 1> <Desc / Clms Page number 1>

PROCEDE DE PAIEMENT EN LIGNE La présente invention concerne le domaine du paiement en ligne, et en particulier du paiement sur Internet.  The present invention relates to the field of online payment, and in particular of payment on the Internet.

Le principe général du paiement en ligne est connu.  The general principle of online payment is known.

Il consiste en un échange de fichiers numériques entre un marchand, d'un client et d'un tiers de paiement, chacun étant équipé d'un terminal informatique. Les différents équipements informatiques communiquent entre eux par un réseau informatique. Les solutions de paiement en ligne doivent présenter un haut degré de sécurité pour limiter les risques de fraude, mais aussi une architecture évitant l'augmentation inopinée des flux informatiques. It consists of an exchange of digital files between a merchant, a customer and a third party for payment, each equipped with a computer terminal. The various IT equipment communicate with each other via a computer network. Online payment solutions must have a high degree of security to limit the risk of fraud, but also an architecture avoiding the unexpected increase in IT flows.

La présente invention concerne selon son acception la plus générale un procédé de paiement en ligne par un échange de fichiers numériques sur un réseau informatique ou de télécommunication, comportant une étape de transmission par un terminal informatique client à un serveur de paiement d'un fichier numérique contenant au moins un identifiant d'une carte prépayée ou d'une carte de paiement (crédit ou débit) ou tout identifiant du client relatif à un compte bancaire ou non bancaire et un identifiant unique d'une commande, ledit identifiant étant par ailleurs enregistrée dans une mémoire d'un terminal informatique marchand , caractérisé en ce qu'il comporte une étape additionnelle de vérification du solde du compte correspondant à l'identifiant de la carte prépayée, une étape de décrémentation dudit compte et une étape de transmission au terminal du client d'un fichier correspondant au fichier numérique reçu, signé avec une signature numérique du serveur de paiement, le procédé étant caractérisé en outre par le fait qu'aucun échange d'information entre le serveur et le terminal marchand n'intervient pendant la transaction avec le client.  The present invention relates, in its most general sense, to an online payment method by exchanging digital files over a computer or telecommunications network, comprising a step of transmission by a client computer terminal to a payment server for a digital file. containing at least one identifier of a prepaid card or of a payment card (credit or debit) or any identifier of the client relating to a bank or non-bank account and a unique identifier for an order, said identifier being moreover recorded in a memory of a merchant computer terminal, characterized in that it includes an additional step of checking the account balance corresponding to the identifier of the prepaid card, a step of decrementing said account and a step of transmitting to the terminal of the client of a file corresponding to the digital file received, signed with a digital signature of payment server, the method being further characterized by the fact that no exchange of information between the server and the merchant terminal takes place during the transaction with the customer.

Il comporte une étape préalable de transmission par le terminal marchand d'un fichier numérique de préférence  It includes a preliminary step of transmission by the merchant terminal of a digital file preferably

<Desc/Clms Page number 2><Desc / Clms Page number 2>

signé avec une signature numérique du marchand, ledit fichier contenant un identifiant unique d'une commande effectuée par le client.  signed with a digital signature of the merchant, said file containing a unique identifier of an order made by the customer.

Selon une variante avantageuse, le serveur mémorise le fichier transmis par le client et le conserve en mémoire même en cas d'interruption de la communication avec le client.  According to an advantageous variant, the server memorizes the file transmitted by the client and keeps it in memory even in the event of interruption of the communication with the client.

Selon un mode de réalisation préféré, le procédé comporte une étape de vérification de l'état de la transaction précédente en cas de rétablissement de la communication après une interruption.  According to a preferred embodiment, the method includes a step of verifying the state of the previous transaction in the event of re-establishment of the communication after an interruption.

Avantageusement, il comporte une étape ultérieure de compensation par transmission par le marchand au serveur de paiement des bons de commandes signés par ce dernier qui lui ont été communiqués par les clients, et de crédit du compte du marchand par le serveur en cas de comparaison positive des bons de commandes transmis par le marchand, et des bons de commande enregistrés dans la mémoire du serveur.  Advantageously, it comprises a subsequent step of compensation by transmission by the merchant to the payment server of the purchase orders signed by the latter which have been communicated to him by the customers, and of crediting the merchant's account by the server in the event of a positive comparison. purchase orders transmitted by the merchant, and purchase orders saved in the memory of the server.

De préférence, l'échange de fichiers numériques entre le terminal client et le serveur est réalisé dans le cadre d'une session sécurisé [de type SSL].  Preferably, the exchange of digital files between the client terminal and the server is carried out within the framework of a secure session [of the SSL type].

Selon une variante, le bon de commande initial est signé par le marchand à l'aide d'une clé publique transmise dans un certificat électronique délivré par une autorité de certification.  According to a variant, the initial order form is signed by the merchant using a public key transmitted in an electronic certificate issued by a certification authority.

La présente invention sera mieux comprise à la lecture de la description d'un exemple non limitatif de réalisation qui suit, se référant au dessin annexé où : - la figure 1 représente le schéma des échanges de données.  The present invention will be better understood on reading the description of a nonlimiting exemplary embodiment which follows, referring to the attached drawing in which: - Figure 1 shows the diagram of data exchanges.

Le client est équipé d'un équipement informatique (100) constitué par exemple par un ordinateur muni de moyens de communication pour la connexion à un réseau informatique, par exemple Internet, ou par un terminal tel qu'un téléphone cellulaire communiquant par un réseau de télécommunication.  The client is equipped with a computer equipment (100) constituted for example by a computer provided with communication means for the connection to a computer network, for example Internet, or by a terminal such as a cellular telephone communicating by a network of telecommunication.

<Desc/Clms Page number 3> <Desc / Clms Page number 3>

Le marchand est une désignation simplifiée pour un serveur de commerce électronique (200).  The merchant is a simplified designation for an e-commerce server (200).

Le client conçoit son panier (1) chez le marchand au moment du choix du mode de paiement par carte prépayée, ou par une carte bancaire (de crédit ou de débit), ou par un compte identifiant le client. Pour cela, il établit un lien sécurisé de type SSL1 (cette liaison SSL1 n'est pas obligatoire, elle peut notamment dépendre du montant). Au cours de cette session, il envoie un fichier numérique comportant les identifiants des biens qu'il souhaite commander.  The customer designs his basket (1) at the merchant when choosing the method of payment by prepaid card, or by a bank card (credit or debit), or by an account identifying the customer. For this, it establishes a secure link of type SSL1 (this SSL1 link is not compulsory, it can notably depend on the amount). During this session, he sends a digital file containing the identifiers of the goods he wishes to order.

Le marchand retourne (2) au client un bon de commande signé par lui-même sur cette même liaison (SSL, si elle a été ouverte précédemment). Ce bon de commande contient une référence unique et est stocké dans une mémoire (10) par le marchand pour être traité lors du paiement.  The merchant returns (2) to the customer an order form signed by himself on this same link (SSL, if it has been opened previously). This purchase order contains a unique reference and is stored in a memory (10) by the merchant to be processed during payment.

Si le client accepte ce bon de commande, il engage un processus de paiement, consistant à transmettre le bon de commande signé par le marchand à un serveur de paiement auprès duquel il possède un compte, notamment un compte prépayé.  If the customer accepts this order form, he initiates a payment process, consisting in transmitting the order form signed by the merchant to a payment server with which he has an account, in particular a prepaid account.

Le client transmet (3) au serveur de paiement le bon de commande signé par le marchand accompagné des identifiants de sa/ses carte prépayée, ou d'identifiant d'une carte de paiement bancaire (crédit ou débit), ou par un identifiabt d'un compte du client sur une liaison sécurisée de type SSL2.  The customer transmits (3) to the payment server the purchase order signed by the merchant accompanied by the identifiers of his / her prepaid card, or the identifier of a bank payment card (credit or debit), or by an identifi '' a client account on a secure link type SSL2.

Ce bon de commande est constitué par un fichier numérique comportant une séquence constituant une signature calculée par un moyen de cryptologie, notamment une fonction cryptographique calculée à partir de la clé du marchand et de l'identifiant unique de la commande.  This order form consists of a digital file comprising a sequence constituting a signature calculated by a means of cryptology, in particular a cryptographic function calculated from the merchant key and the unique identifier of the order.

Le Serveur de paiement (300) vérifie le crédit sur la/les carte prépayée (s) transmise (s) par le client et la/les débite. Il transmet (4) alors au client le bon de commande signé par lui même (le serveur de paiement). Le serveur de  The Payment Server (300) checks the credit on the prepaid card (s) transmitted by the customer and debits it. He then transmits (4) to the customer the purchase order signed by himself (the payment server). The server

<Desc/Clms Page number 4><Desc / Clms Page number 4>

paiement par ailleurs sauvegarde ce bon de commande signé dans une mémoire permanente (11), par le marchand et lui même pour une future compensation du marchand.  payment also saves this purchase order signed in a permanent memory (11), by the merchant and himself for future compensation of the merchant.

Les bons de commande signé par le marchand et serveur de paiement sont archivés par le serveur de paiement, ceci permet entre autres au client en cas de rupture de sa connexion de demander au serveur de paiement le dernier bon de commande ou même l'état des achats relatifs à une carte, il faut que le client soit en possession de la carte dite).  The purchase orders signed by the merchant and payment server are archived by the payment server, this allows among other things to the customer in the event of a break in his connection to ask the payment server for the latest purchase order or even the status of purchases relating to a card, the customer must be in possession of the so-called card).

Le bon de commande signé par le serveur de paiement est équivalent comme un bon d'achat mais ciblé vers un marchand donné (en relation avec le bon de commande).  The purchase order signed by the payment server is equivalent like a purchase order but targeted towards a given merchant (in relation to the order form).

Le client transmet (5) le bon de commande signé par le marchand et le serveur de paiement au marchand par la liaison SSL1 (si elle a été ouverte précédemment). Lors de cet échange le client peut éventuellement demander (6) une facture au marchand.  The customer transmits (5) the order form signed by the merchant and the payment server to the merchant via the SSL1 link (if it was previously opened). During this exchange, the customer may possibly request (6) an invoice from the merchant.

Le marchand vérifie que ce bon de commande n'a pas été traité et vérifie la signature du serveur de paiement et déclenche la délivrance de la marchandise au client. Ce bon de commande est considéré alors comme traité (ceci évite une réutilisation de ce bon de commande par le client et protège ainsi le commerçant). Le marchand stocke ce bon de commande signé par le serveur de paiement pour une future compensation.  The merchant verifies that this purchase order has not been processed and verifies the signature of the payment server and triggers the delivery of the goods to the customer. This purchase order is then considered to be processed (this avoids re-use of this purchase order by the customer and thus protects the merchant). The merchant stores this purchase order signed by the payment server for future compensation.

Le paiement du marchand par le serveur est réalisé postérieurement par compensation selon le système SET par exemple, il suffit que le marchand présente les bons de commande signé par ledit serveur de paiement. The payment of the merchant by the server is carried out subsequently by compensation according to the SET system for example, it suffices that the merchant presents the purchase orders signed by said payment server.

Dans cette solution les marchands pour signer sont en possession d'une double clé privé/public. Leur clé publique sont diffusés dans un certificat, ce certificat n'étant pas obligatoirement signé par le serveur de paiement. Il peut être signé par l'autorité de certification choisie par le marchand (soulignant ici que la plupart des marchands sont dotés de  In this solution, merchants to sign are in possession of a double private / public key. Their public key is published in a certificate, this certificate not necessarily being signed by the payment server. It can be signed by the certification authority chosen by the merchant (emphasizing here that most merchants have

<Desc/Clms Page number 5><Desc / Clms Page number 5>

certificats, avec cette approche on facilite grandement la mise en oeuvre de cette solution de paiement).  certificates, this approach greatly facilitates the implementation of this payment solution).

En particulier, il n'est pas nécessaire que le marchand soit en possession d'un certificat délivré par le serveur de paiement. On évite ainsi que le marchand soit obligé de changer ses installations, notamment redéployer un nouveau certificat voir changer d'autorité de certification.  In particular, the merchant does not need to be in possession of a certificate issued by the payment server. This prevents the merchant from having to change his installations, in particular redeploying a new certificate or even changing the certification authority.

Dans l'invention, il n'y a pas de liaison directe ente le serveur de paiement et le marchand. Cette liaison n'est pas nécessaire, il suffit que le serveur de paiement signe le bon de commande délivré par le marchand, pour que ce dernier autorise l'achat. Les échanges entre serveur de paiement et marchand sont totalement inutiles il apporte en aucune manière plus de sécurité, leur seul bénéfice et d'alourdir la charge du marchand et du serveur de paiement et offrent une qualité de service au client en termes de temps de réponse prohibitif. In the invention, there is no direct link between the payment server and the merchant. This connection is not necessary, it suffices that the payment server signs the order form issued by the merchant, for the latter to authorize the purchase. The exchanges between payment server and merchant are totally useless it brings in no way more security, their only benefit and increase the load of the merchant and the payment server and offer a quality of service to the customer in terms of response time prohibitive.

Claims (7)

REVENDICATIONS 1-Procédé de paiement en ligne par un échange de fichiers numériques sur un réseau informatique ou de télécommunication, comportant une étape de transmission par un terminal informatique client à un serveur de paiement d'un fichier numérique contenant au moins un identifiant d'une carte prépayée ou un identifiant d'une carte de paiement banciaire (crédit ou débit), ou par une identifiant d'un compte du client et un identifiant unique d'une commande, ledit identifiant étant par ailleurs enregistrée dans une mémoire d'un terminal informatique marchand , caractérisé en ce qu'il comporte une étape additionnelle de vérification du solde du compte correspondant à l'identifiant de la carte prépayée, une étape de décrémentation dudit compte et une étape de transmission au terminal du client d'un fichier correspondant au fichier numérique reçu, signé avec une signature numérique du serveur de paiement, le procédé étant caractérisé en outre par le fait qu'aucun échange d'information entre le serveur et le terminal marchand n'intervient pendant la transaction avec le client.  1-Method of online payment by an exchange of digital files on a computer or telecommunications network, comprising a step of transmission by a client computer terminal to a payment server of a digital file containing at least one identifier of a card prepaid or an identifier of a bank card (credit or debit), or by an identifier of a customer account and a unique identifier of an order, said identifier being moreover recorded in a memory of a computer terminal merchant, characterized in that it comprises an additional step of checking the account balance corresponding to the identifier of the prepaid card, a step of decrementing said account and a step of transmitting to the client terminal of a file corresponding to the file digital receipt, signed with a digital signature from the payment server, the method being further characterized by the fact that no exchange of information between the server and the merchant terminal takes place during the transaction with the customer. 2-Procédé de paiement en ligne selon la revendication 1, caractérisé en ce qu'il comporte une étape  2-online payment method according to claim 1, characterized in that it comprises a step
Figure img00060003
Figure img00060003
 préalable de transmission par le terminal marchand d'un fichier numérique signé avec une signature numérique du marchand, ledit fichier contenant un identifiant unique d'une commande effectuée par le client.  prior to transmission by the merchant terminal of a digital file signed with a digital signature of the merchant, said file containing a unique identifier of an order made by the customer. 3-Procédé de paiement en ligne selon l'une quelconque des revendications précédentes, caractérisé en ce que le serveur mémorise le fichier transmis par le client et le conserve en mémoire même en cas d'interruption de la communication avec le client.  3-Method of online payment according to any one of the preceding claims, characterized in that the server memorizes the file transmitted by the client and keeps it in memory even in the event of interruption of the communication with the client. <Desc/Clms Page number 7> <Desc / Clms Page number 7> 4-Procédé de paiement en ligne selon la revendication précédente, caractérisé en ce qu'il comporte une étape de vérification de l'état de la transaction précédente en cas de rétablissement de la communication après une interruption.  4-Method of online payment according to the preceding claim, characterized in that it comprises a step of verifying the state of the previous transaction in the event of re-establishment of the communication after an interruption. 5-Procédé de paiement en ligne selon l'une quelconque des revendications précédentes, caractérisé en ce qu'il comporte une étape ultérieure de compensation par transmission par le marchand au serveur des bons de commandes signés qui lui ont été communiqués par les clients, et de crédit du compte du marchand par le serveur en cas de comparaison positive des bons de commandes transmis par le marchand, et des bons de commande enregistrés dans la mémoire du serveur.  5-Method of online payment according to any one of the preceding claims, characterized in that it comprises a subsequent step of compensation by transmission by the merchant to the server of the signed order forms which have been communicated to him by the customers, and credit of the merchant account by the server in the event of a positive comparison of the purchase orders transmitted by the merchant, and of the purchase orders saved in the memory of the server. 6-Procédé de paiement en ligne selon l'une quelconque des revendications précédentes, caractérisé en ce que l'échange de fichiers numériques entre le terminal client et le serveur est réalisé dans le cadre d'une session sécurisé [de type SSL].  6-Method of online payment according to any one of the preceding claims, characterized in that the exchange of digital files between the client terminal and the server is carried out as part of a secure session [SSL type]. 7-Procédé de paiement en ligne selon l'une quelconque des revendications précédentes, caractérisé en ce que le bon de commande initial est signé par le marchand à l'aide d'une clé public transmis dans un certificat électronique délivré par une autorité de certification différente du serveur de paiement. 7-Method of online payment according to any one of the preceding claims, characterized in that the initial order form is signed by the merchant using a public key transmitted in an electronic certificate issued by a certification authority different from the payment server.
FR0106895A 2000-10-04 2001-05-25 On line payment via network for performing transaction between customer and merchant by excluding information exchange between server and merchant terminal that may intervene during transaction with customer Withdrawn FR2814836A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
FR0106895A FR2814836A1 (en) 2000-10-04 2001-05-25 On line payment via network for performing transaction between customer and merchant by excluding information exchange between server and merchant terminal that may intervene during transaction with customer

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FR0012676A FR2814835B1 (en) 2000-10-04 2000-10-04 ONLINE PAYMENT PROCESS
FR0106895A FR2814836A1 (en) 2000-10-04 2001-05-25 On line payment via network for performing transaction between customer and merchant by excluding information exchange between server and merchant terminal that may intervene during transaction with customer

Publications (1)

Publication Number Publication Date
FR2814836A1 true FR2814836A1 (en) 2002-04-05

Family

ID=26212664

Family Applications (1)

Application Number Title Priority Date Filing Date
FR0106895A Withdrawn FR2814836A1 (en) 2000-10-04 2001-05-25 On line payment via network for performing transaction between customer and merchant by excluding information exchange between server and merchant terminal that may intervene during transaction with customer

Country Status (1)

Country Link
FR (1) FR2814836A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111105224A (en) * 2019-11-13 2020-05-05 泰康保险集团股份有限公司 Payment feedback information processing method and device, electronic equipment and storage medium

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR2733068A1 (en) * 1995-04-14 1996-10-18 G C Tech ELECTRONIC PAYMENT METHOD FOR PERFORMING TRANSACTIONS RELATED TO THE PURCHASE OF GOODS ON A COMPUTER NETWORK
US5677955A (en) * 1995-04-07 1997-10-14 Financial Services Technology Consortium Electronic funds transfer instruments
US5724424A (en) * 1993-12-16 1998-03-03 Open Market, Inc. Digital active advertising
EP0921487A2 (en) * 1997-12-08 1999-06-09 Nippon Telegraph and Telephone Corporation Method and system for billing on the internet
WO1999028842A1 (en) * 1997-11-28 1999-06-10 International Business Machines Corporation Processing extended transactions in a client-server system
US6029150A (en) * 1996-10-04 2000-02-22 Certco, Llc Payment and transactions in electronic commerce system

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5724424A (en) * 1993-12-16 1998-03-03 Open Market, Inc. Digital active advertising
US5677955A (en) * 1995-04-07 1997-10-14 Financial Services Technology Consortium Electronic funds transfer instruments
FR2733068A1 (en) * 1995-04-14 1996-10-18 G C Tech ELECTRONIC PAYMENT METHOD FOR PERFORMING TRANSACTIONS RELATED TO THE PURCHASE OF GOODS ON A COMPUTER NETWORK
US6029150A (en) * 1996-10-04 2000-02-22 Certco, Llc Payment and transactions in electronic commerce system
WO1999028842A1 (en) * 1997-11-28 1999-06-10 International Business Machines Corporation Processing extended transactions in a client-server system
EP0921487A2 (en) * 1997-12-08 1999-06-09 Nippon Telegraph and Telephone Corporation Method and system for billing on the internet

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
ME L ET AL: "LE COMMERCE ELECTRONIQUE: UN ETAT DE L'ART", ANNALES DES TELECOMMUNICATIONS - ANNALS OF TELECOMMUNICATIONS,CH,PRE SSES POLYTECHNIQUES ET UNIVERSITAIRES ROMANDES, LAUSANNE, vol. 53, no. 9/10, 1 September 1998 (1998-09-01), pages 361 - 376, XP000791619, ISSN: 0003-4347 *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111105224A (en) * 2019-11-13 2020-05-05 泰康保险集团股份有限公司 Payment feedback information processing method and device, electronic equipment and storage medium

Similar Documents

Publication Publication Date Title
EP1153376B1 (en) Telepayment method and system for implementing said method
EP0820620B1 (en) Electronic payment method for purchase-related transactions over a computer network
EP1256911A1 (en) Securization method for a payment from a client to a merchant, associated location server and system
FR2820853A1 (en) TELEPAYING METHOD AND SYSTEM
WO2001043092A1 (en) Method and system for managing a secure transaction over a communications network
FR2814836A1 (en) On line payment via network for performing transaction between customer and merchant by excluding information exchange between server and merchant terminal that may intervene during transaction with customer
FR2814835A1 (en) Method of on-line payment arranged between customer and merchant using finance server has balance verification stage of corresponding account for prepaid card and decrement stage for debit customer account
EP1490851A1 (en) Method and system of securing a credit card payment
WO2002029742A1 (en) Secure internet paying agent with mobile telephone validation
EP1978479A1 (en) Dynamic cryptogram
EP1535253A1 (en) Method and system for the secure transmission of a confidential code through a telecommunication network
FR2807247A1 (en) PAYMENT SYSTEM FOR NOT DISCLOSING BANKING INFORMATION ON THE PUBLIC AND QUASI-PUBLIC NETWORK
EP2800072A2 (en) Method for issuing SIM mobile telephone cards with prepaid or postpaid subscription by an automaton
EP1301910B1 (en) Method for making secure a transaction via a telecommunication network, and system therefor
EP1430456B1 (en) Electronic payment system that is used to purchase goods or services offered by a merchant server and the method used in one such system
WO2003007251A1 (en) Payment guarantee method for electronic commerce, particularly by mobile telephone, and the system for implementing same
FR2951000A1 (en) Method for secure identification of e.g. expiration date of bank card over Internet, during on-line payment process, involves entering secondary identification unit obtained via telephonic call to key, on identification page
EP1076886A1 (en) Method for carrying out a secure transaction using a smart card via a telecommunication network
FR2869702A1 (en) Pre-paid or post paid telephonic service accessing method for e.g. telephone, involves utilizing memory key comprising universal serial bus connection as information storage media for authentication of user account
FR2867585A1 (en) Client terminal e.g. mobile telephone, and payment receiving server transacting method, involves transmitting authentication parameters to virtual card server which then calculates number of card and transmits it to recharging server
EP1344196A1 (en) Payment method and system and telecommunication equipment used in said system
FR2819127A1 (en) Securing of commercial transactions in shops, etc. where a purchaser uses a credit or banker&#39;s card by use of a customer&#39;s mobile phone to provide transaction confirmation and thus reduce fraud
FR2828966A1 (en) Secure communication of identification data for a limited use Internet transaction payment card, splits data into distinct packets and transmits each packet over distinct networks
EP1079348A2 (en) Online payment method
FR2905783A1 (en) Fund depositing method for online fund deposit company, involves selecting safe identified by codes on interface, during fund deposit, and storing fund by transfer from bank account or by bank card payment

Legal Events

Date Code Title Description
ST Notification of lapse

Effective date: 20110131