ITPR20120065A1 - NEW SECURE PAYMENT MECHANISM MOBILE / SECURE MOBILE PAY / SM-PAY - Google Patents

Description

This idea serves to make the use of credit cards and / or debit cards safer by exploiting the current possibilities provided by mobile devices; it involves the use of M-Pay (Mobile payment).

The system as a whole creates a new payment procedure that gives multiple possibilities for managing the activities necessary for carrying out the same, precisely for this reason it is not a new software, but a real machine that, as a whole, uses devices already widespread or that can be created ad hoc for the system itself.

The conceptual development of the payment project that can be made using any mobile device (cell phones, smartphones, tablets, notebooks, netbooks, etc.) will be explained below by points.

Hardware tools can be specifically designed to build the system in order to improve its security and usability.

The system allows the indirect use of credit cards, including prepaid cards and / or ATMs. In fact, it is understood that the person making the payment may not deliver the credit card and / or debit card or the data contained therein directly to the creditor, but pass the content to a third party who, thanks to a series of HW / SW tools and in a protected will take care of the transaction making it more secure.

The first phase consists in de-materializing the credit card and / or debit card within an application that contains all the data, including any certificates. The application can be installed on any mobile device or stored in the "payment service" system.

The balance processing system (cash desk, computer, mobile device, etc ... that is any device capable of processing a balance and managing it in the manner explained below), once the operations necessary to calculate the balance itself have been completed, will be able, thanks to an application, instruct a payment request at the Payment Service, identified by a unique transaction code (called CTU). Now the mobile device made known to the CTU, thanks to a passage of the data, will be able to interact with the payment service.

The passage of the CTU to the mobile device can take place in different ways: either thanks to the optical recognition of the CTU itself (ocr image of the number or the recognition of mono or multidimensional barcodes), or with the passage with wireless methods (bluetooth, wifi , etc.) or - less easily - by manually typing the code on the mobile device application.

The payment service now knows the credit total, recognizes access to the application installed on the mobile device and the payment request sent by the same. This allows the payment service to establish the transaction and to proceed with the certification of the successful transaction and with consequent information to the balance processing terminal.

Now let's move on to the possible security choices of the project.

The application installed on the mobile device may ask for a security pin and / or password to access the payment service.

The balance processing terminal is never made aware of the data relating to credit cards or debit cards used by customers. Sends a payment request that is authorized and indexed with an expert witness and subsequently, once the payment has been made, receives a confirmation message.

mobile device) to the payment service may be protected by an encrypted connection that shields any decoding by malicious people.

This mechanism certainly allows you to have a higher level of data protection than today's system with credit card payment (prepaid or not) and / or debit card as the management of information security can be calibrated at will by using and inserting more and / or additional encryption methods and access pins or passwords in the various steps of the system.

Claims (1)

Secure M-pay Claims This is an invention as it is a method of using hardware and software devices which, thanks to the conceptual development of the information management method, makes it possible to no longer pass personal payment data directly to the balance terminal. This invention allows payment by card (credit, debit card, eco ...), but without the direct use of the same, it acts as a substitute and is in all respects a revolutionary method of payment. This method can be used for online payments and also for payments at the balance terminals of the stores. It can be applied to countless structurally different software products. This is why it is a new payment system and thanks to the software developed it will be able to have a higher or lower level of security (management of cryptography, choice of certificates, choice of transmission means, eco ...) It is therefore not a software it is a new method payment management that can be used by different types and technologies Hardware and software, which in turn may be protected by Copyright, but in itself can only survive if protected by a patent. The hardware used for the system can be specifically designed to improve its performance and security. The strength lies in having a much more secure and flexible payment method than today's methods. Today, payments with cards (credit, prepaid ATMs, eco ...) are mainly of two types: either they are linked to the world of online purchases (or even simple online payments) or only to the world of the balance terminal, that is, for example, a supermarket checkout. with the use of card readers in general (Pos and even today's Rfid readers). This method can replace both of them. In addition to having greater security than previous payment methods, this system also allows a great usability of the same, given by the extreme diffusion of the necessary devices; in fact, the devices necessary for the system itself are now present in all homes and in all shops. It is therefore an applicable and easily usable technology. However, this does not negate the invention of specialized devices for the system itself in the future. For example, thanks to this method, it is possible to pay the bill at a supermarket with your smartphone without presenting any card (credit, debit card, eco ..) and without having to read and leave any of our cards. given. So by making a secure transaction, the cashier will have the payment confirmation that will give him the certainty of carrying out the same without processing any data, customer code. Today's methodologies are always and only linked to the reading of a code or a device (magnetic stripe or smart card integrated into the card itself) which identifies in some way the customer himself and his card (credit, debit card, eco ...) . With this new payment method the thing is reversed: it is the customer who, thanks to the reading of a code, which by convention I have called CTU (unique transaction code), proceeds to pay. This point which has been repeated several times characterizes him. For example, the reading of the code can be automated (as described in the description) with the reading of a bar code. This makes the payment method not only secure but also very fast. This payment method can also be used for online payments, in fact the site where the account is presented can behave like a normal balance terminal and propose the CTU on the screen also as a barcode for example and therefore allow the use of the device. mobile to complete the payment transaction, another example is the versatility of this new payment method which can be transversal. One of the peculiarities of the system is the fact that the data is transmitted from the balance terminal to the mobile terminal and not vice versa as in the methods developed and used today, the functioning of the system is guaranteed thanks to the data management service that deals with communicating with both of them.