JP2002525766A - Method of managing electronic transactions by chip card, terminal and chip card implementing this method - Google Patents

Abstract

The present invention relates to a method for managing electronic transactions using a customer card with a microprocessor chip and a reading terminal capable of interacting with said card, wherein the reading terminal comprises the card. Sends a signal indicating the transaction amount to the card, and the card compares this amount to a transaction amount threshold, and if the amount is greater than the threshold value, commands the owner verification procedure. The present invention provides that when this amount is less than the threshold value, the chip card compares the value of the counter, called the total amount of the small value counter, with a certain threshold value and compares the value of the counter by the value of the transaction amount. Incrementing and authenticating the card holder are commanded by the card based on the result of this comparison.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

【Technical field】

The present invention relates to electronic transactions performed by chip cards. The present invention proposes a method for managing such electronic transactions, and a terminal and a chip card for implementing the method.

[0002]

[Background Art]

Conventionally, during a transaction using a chip card, it is the reading terminal that inserts the chip card that manages the procedure for authenticating the card and its holder and the procedure for verifying the transaction.

In particular, the terminal of the reading terminal device requires the card holder on a daily basis to input a password for authentication to the terminal. Further, when the transaction amount exceeds a certain threshold value (limit amount), the reading terminal can determine to refer to an external authentication center.

However, in the future, it is desired that an extremely high-speed electronic transaction can be executed within a very short time (for example, within 100 ms), and the owner's authentication cannot be perceived.

[0005] Today, high-speed electronic transactions are made possible by so-called "electronic wallet" systems. An electronic wallet is a device that includes a memory that stores a value corresponding to a total amount that is decremented immediately when a transaction is performed by the wallet.

[0006] However, electronic wallets have drawbacks. The problem is that electronic wallets do not guarantee the same level of transaction security as bank cards. Specifically, in the case of an electronic wallet, the electronic wallet may register a debit even though transactions at the reading terminal level are not considered.

[0007]

SUMMARY OF THE INVENTION

It is an object of the present invention to enable electronic transactions to be performed as quickly as an electronic wallet, while providing the same security as currently available protocols for transactions with bank cards. Is to propose a management method.

[0008] A solution according to the invention is a method of managing an electronic transaction by means of a bank card (chip card) in the form of a microprocessor chip and a reading terminal capable of interacting with said card, wherein said reading terminal comprises: Sending a signal to the card indicating the transaction amount, the card comparing the amount to a transaction amount threshold, and invoking the owner verification procedure when the amount exceeds the threshold. When the amount is less than the threshold value, the chip card compares the value of a counter (counter), called the total amount of the small amount counter, with a certain threshold value, and compares the value of the counter with the value of the transaction amount. Incrementing the value and, based on the result of the comparison, a procedure for authenticating the cardholder is triggered by the card.

[0009] Thus, the cardholder, along with his bank card, is similar to the electronic wallet service in terms of the usability of the holder, but uses the existing infrastructure for the bank card, thus providing a more secure service. Can be enjoyed.

[0010] Further, the elimination of the conventional function of reloading money from a card further enhances the usability of the card. This method advantageously complements the various features described below, either alone or according to all technically possible combinations thereof.

When the value of the transaction amount is smaller than the transaction amount threshold, the value of the counter is replaced by the incremented value. Based on the result of the comparison, if the card does not trigger the cardholder authentication procedure, the value of the small counter is replaced by the incremented value.

When the verification of the cardholder's identification code has been completed, the card first increments the sum of the small counter and the second counter by the value of the transaction, and then increments the incremented sum by a certain amount. Comparing with a threshold, based on the result of the comparison, triggering an inquiry to an authentication center by the reading terminal, and when authentication is performed by the center, the card resets the two counters to zero; The value of the counter of 2 is replaced with the value of the incremented total value, and if the card decides not to request the reading terminal to inquire the authentication center based on the result of the comparison, the counter value of the small-amount counter becomes zero. Reset.

The increments performed by the chip card are forward increments. The increment performed by the chip card is a negative increment; The invention also relates to a microprocessor chip card for use in carrying out electronic transactions, characterized in that it comprises means for implementing the method described above.

Advantageously, the chip card comprises memory means for storing one or more threshold and / or counter values and comparison means. The invention also relates to a terminal for reading a microprocessor chip card for use in carrying out electronic transactions, characterized in that it comprises means for implementing the method described above. .

[0015] Other features and advantages of the invention will be more apparent from the following description of some embodiments of the invention. This description is purely illustrative and not restrictive. Accordingly, this description should be read in connection with the accompanying drawings, in which:

Each of the steps of the management method shown in FIGS. 1 and 2
Performed during electronic transactions performed by the card. The chip card contains a microprocessor programmed to implement the protocols corresponding to these various steps and various values (transaction amount, counter values, ROM, EPROM, EEPROM or RAM memory in which the maximum amount is stored.

The reading terminal is programmed to perform the same process,
The card and the terminal include means for enabling them to interact with each other, these means possibly of any kind (bus <transmission line> using connection tracks of the chip card, RF <high frequency > Exchange via transmission / reception).

In FIG. 1, the steps performed by the chip card are shown in blocks marked C. These steps are performed by the reading terminal shown in the block marked L.

The transaction starts with the initialization of the chip card triggered by the reading terminal (step 1). In response, the card reads the identification (ID) and sends it to the terminal (step 2).

Next, the reading terminal requests the operator (trader) to input the transaction amount M (step 3). The reading terminal sends this amount M to the card. The card performs test 4 on the value of the amount M.

If this amount M is smaller than the maximum limit VP1, the card is counted by the counter COMPT.
Is incremented by the value of the amount M (step 5). The card then compares the value of this counter COMPT with another threshold value VP2, which may be different from the threshold value VP1 (step 6).

If the counter COMPT is smaller than VP2, the microprocessor of the card calculates the signature ST of the transaction (step 7) and sends it to the reading terminal, which when the reader verifies this, the transaction amount And record the details of the transaction (steps 8 and 9).

Conversely, if the value of the counter COMPT is greater than VP2, the card requests the reading terminal to present the personal identification number (code) of the holder (step 10).

The holder enters the password (step 11). The PIN is sent to the card by the reading terminal and the card verifies it (
Step 12).

After verification, the microprocessor of the card resumes processing and calculates the transaction signature ST (step 7). Between the verification step 12 and the calculation step 7, the counter COMPT is reset to zero. Thus, the counter COMPT is reset to zero each time the verification of the secret PIN passes (step 20).

When the amount M is larger than the threshold value VP1 (when the response of the test 4 is “yes”)
Also, the PIN of the holder is required by card. In this case, the password input by the holder is verified, and the amount M is set to the counter COM.
Not counted in PT.

The steps of a conventional bank card transaction are performed. Optionally, or in a variant, a configuration is possible in which the card can request that the reading terminal be connected to the banking system to obtain a transaction authorization from the banking system.

With the transaction authorization, the reading terminal can send a command to the card to re-update the maximum limits VP1 and VP2 based on the information provided by the banking system.

As will be appreciated, in the embodiment described immediately above with respect to FIG. 1, the payment card aggregates the amount of transactions below a certain threshold on an internal counter COMPT, and the amount M is equal to this amount. Only when the threshold is exceeded, or when the aggregated value of previous transactions is greater than a predetermined threshold, the card requires authentication of the holder.

As a variant, it is verified in step 6 that the value of the counter COMPT exceeds the threshold value VP2, and the counter COMPT is reset to zero only if the entered password is recognized as correct by the card. Configurations are also possible.

In this case, even if it is verified in step 4 that the amount M exceeds the threshold value VP1, the counter COMPT is not reset to zero. The amount M is smaller than the threshold value VP1, and in step 6, the counter COMPT is set to VP.
The counter COMPT is reset to zero only if it is verified that it exceeds 2, and the verified password is correct.

Thus, the counter COMPT indicates that, on the one hand, the small sum reaches the threshold VP2,
And on the other hand, it is reset to zero only when the holder is authenticated by his PIN.

As a further variant, the card can be used to make incremental payments, for example in the case of a call from a payphone. In this case, an incremental loop is added between steps 7 and 3, where the signature ST is incremented at the end of the call, based on the total amount ($ M), and $ M is reset to zero in the card upon completion of identification step 2. You.

Therefore, at the end of the call, only a single transfer command ST including the total charge is held, and the user pays immediately upon charging based on the duration of the call. Another alternative embodiment is shown in FIG.

This second variant consists in managing a second counter CPT2 in the card, which accumulates the tally performed on the first small counter CPT1. When the value of the counter CPT2 reaches the second maximum amount VP2 already registered in the card defined by the bank, the card requests a verification of the calculated certificate by an authentication center.

The procedure will be described below. The card adds the transaction amount M to the value read from CPT1. When the total amount of CPT1 + M reaches the maximum limit (in test 13), the card requests a check of the holder's secret PIN (steps 10, 11, and 12).

If the secret PIN is correct, the card changes the value read from CPT2 to CPT1
Add the value of + M. The new value obtained is compared with the threshold value VP2 (test 14).

When the total amount of CPT1 + M + CPT2 reaches the maximum limit VP2, the card requests a certificate check (step 15), which is calculated by the authentication center to which the terminal of the reading terminal L is queried. Is performed (step 16).

If the certificate is correct, the card resets counters CPT1 and CPT2 to zero (step 17), and then calculates and delivers the signature of the transaction (step 7 et seq.).

If the certificate is incorrect, the card does not hand over the transaction signature and leaves the values of counters CPT1 and CPT2 unchanged. If the total amount of CPT1 + M + CPT2 does not reach the maximum value VP2, the card resets counter CPT1 to zero and updates counter CPT2 by replacing its previous value with CPT2 + CPT1 + M (step 18). Next, the card calculates and delivers the signature of the transaction (steps 7, 8).
And 9).

If the secret PIN is incorrect, Card C does not hand over the transaction signature and leaves the values of counters CPT1 and CPT2 unchanged. If the total value of CPT1 + M does not reach the maximum value VP1, the card updates the counter CPT1 by replacing its previous value with the total value of CPT1 + M (step 19), and then hands over the signature of the transaction (step 19). 7, 8
And 9).

The card just described can be used in a post-debit (post-debit) manner. The amount to be debited is aggregated for each holder's account number, for example, over a maximum of 30 days, and the debit of the holder's account is deducted when the maximum limit VP2 is exceeded or since the last debit of the account. It will be implemented when the total of the amount has reached 30 days. The amount can be totaled at the following places.

On the collection server after collection of the transactions stored on the commercial terminal. In this case, if the maximum limit VP2 is exceeded, an authentication request of an amount equal to the new maximum limit VP2, which can be redefined by the bank, is triggered in the card via the terminal.

• Inside the card itself. In this case, if the maximum limit VP2 is exceeded, a reset of the counting and authentication request is triggered in the card via the terminal. In this case, it is necessary to have the customer pay a security deposit when the card is acquired to prevent the "plan" of the card from being stolen or lost (thus preventing the deduction of the tally). This deposit can be hidden, ie included in the card's annual fee.

The card can also be used in a pre-debit (pre-debit) manner. in this case,
The VP1 value, in the case of the variant of FIG. 2, the VP1 value and the VP2 value have been prepaid by the holder and are updated in the card by the received certificate depending on the amount prepaid by the user. Is done.

If the user notices that there is no identification keypad on the terminal or that the terminal is not connected to the communication network and wants to know the value of VP1, VP2 prepaid, the user can The operation of checking the certificate issued by the authentication center can be executed by the operation using the device (automatic teller machine <ATM> -voucher dispenser or public telephone). The transaction in this case is fictitious and no debits will be made from the customer's account, except in the case of a pre-debit application.

As a variant, the card may not require the use of a personal identification number for the holder. In this case, no comparison is made between the transaction amount and the threshold value VP1, and VP1 is not used. If the value of COMPT stored in the card is equal to or greater than the threshold VP2, the card does not deliver the transaction signature ST.

The allowable value of VP2 is defined to accept a value of COMPT slightly larger than VP2. In this way, COMPT will disable VP2
Values can be exceeded.

When VP2 is reached, the card can be made discardable and the card can no longer be used. However, the holder will return the card to the bank, especially if the card is refundable, and the bank will use a security procedure to reset the COMPT value to zero before reintroducing the card for a new cycle. I do.

Alternatively, the card can be made available to the bank using a secure online procedure. In this procedure, the holder is authenticated using, for example, another payment card or PIN verified by the bank's server, and COMPT is reset to zero after the card's verification of the bank calculated certificate.

In the above example, counters CPT1 and CPT2 are incremented from a value of 0 to a maximum amount. Conversely, it is also possible to count in the decreasing direction. In that case, after the counter is initialized to the maximum limits VP1 and VP2, it is decremented to a value of 0 and the count can be performed for negative values.

As will be appreciated, in the management method proposed by the present invention, the aggregate amount is fixed based on the risk that the card issuer is willing to assume, rather than the amount reloaded in advance on the card. Compared to the maximum value. This comparison with a fixed value is a means of limiting customer sacrifice over time, which is one of the roles of this card other than authentication. The selected maximum value can be considered as a kind of permanent credit granted to the payable customer, and the bank is rewarded, for example, by a transaction fee.

The small value transaction is submitted as follows. • Individually submitted by merchants using the banking infrastructure, similar to regular value transactions. In that case, the only function of tallying the customer's value in the card is to limit the customer's consumption (the role of arbitrator).

• Alternatively, the customer's tally is also submitted to the bank for billing (in the course of the transaction,
(Using a card), and submitted using the merchant's aggregation options. Obviously, this option cannot perform the same inspection as the first option.

The credit management of the card is performed as follows. -For a transaction to be valid, the transaction must be signed by a card. The signature ST1 written on the customer's slip is useful for resolving the dispute.

The transaction data is stored in the submission file of the terminal and is collected once a day by the collection center of the merchant's bank. Small transactions are sent to the holder's bank, but are not processed individually by that bank. These transactions are stored to be audited by the system, to resolve disputes, and to settle with the bank.

The merchant's bank account is deposited according to the small sums collected daily in the terminal.・ The transaction value is counted in the credit counter of the card. The card verifies the value of the credit counter and the duration of the credit.

An example of a transaction processed by the card is shown in the table below. Table 1 shows the case where the credit counter of the card reaches the maximum fixed by the bank. Table data is managed in the card. The transaction date and transaction value are provided to the card by the terminal.

[0059]

[Table 1]

Table 2 shows the case where the maximum validity period of the card has been reached.

[0061]

[Table 2]

The transaction proposed by the present invention has a number of advantages: Security is the same as bank cards, as debits are later verified by holders, merchants and banks.

No transaction with a debit / credit card is required, since daily entry of a secret PIN is eliminated and even if contactless exchange is interrupted, transactions can be easily canceled. This is possible on contact cards.

The bank card network is not changed, and the server for storing the amount of the public telephone transaction for one month by the bank card can be reused. -Since the transaction continues only when the holder's PIN is correct, the terminal cannot be deceived in responding to the verification of the holder's PIN.

[Brief description of the drawings]

FIG. 1 is a flowchart illustrating one possible embodiment of the method proposed by the present invention.

FIG. 2 is a flowchart illustrating another possible embodiment.

[Procedural Amendment] Submission of translation of Article 34 Amendment of the Patent Cooperation Treaty

[Submission date] August 14, 2000 (2000.8.14)

[Procedure amendment 1]

[Document name to be amended] Statement

[Correction target item name] 0005

[Correction method] Change

[Correction contents]

[0005] Today, high-speed electronic transactions are made possible by so-called "electronic wallet" systems. An electronic wallet is a device that includes a memory that stores a value corresponding to a total amount that is decremented immediately when a transaction is performed by the wallet. EP 829 830 has already disclosed an electronic wallet that performs a cardholder authentication procedure when the value of a transaction or the total amount of executed transactions exceeds a predetermined threshold.

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G07F 7/12 ZEC G07F 7/08 ZECB (72) Inventor Darboux, Bernard France, F-14000 Caen, Are・ Board rail, 10F term (reference) 2C005 MA04 MB08 NA06 SA30 3E044 AA03 AA09 BA04 CA06 DA03 DA06 DB02 DD01 DE01 5B058 CA27 KA32 YA02 YA06 YA07

Claims (9)

[Claims] 1. A method for managing electronic transactions by a bank card (chip card) in the form of a microprocessor chip and a reading terminal capable of interacting with said card, said reading terminal comprising: Sending a signal indicating the amount, the card comparing the amount with a transaction amount threshold and invoking a holder authentication procedure when the amount exceeds the threshold, the method comprising: When the amount is less than the threshold, the chip card compares the value of the counter, called the sum of the small value counter, to a threshold and increments the value of the counter by the value of the transaction amount. And a step of authenticating the card holder is activated by the card based on the result of the comparison. 2. The method of claim 1, wherein when the value of the transaction value is less than the transaction value threshold, the value of the counter is replaced with the incremented value. 3. The method according to claim 1, wherein when the card does not trigger the cardholder authentication procedure based on the result of the comparison, the total value of the small counter is replaced by the incremented value. 3. The method according to any one of 2 above. 4. Upon verification of the cardholder's identification code, the card first increments the sum of the small counter and the second counter by the value of the transaction, and then increments the incremented sum by some amount. Comparing to a threshold, based on the result of this comparison, triggering an inquiry to an authentication center by the reading terminal, and upon authentication by the center, the card resets the two counters to zero; The value of the second counter is replaced by the value of the incremented total value, and if the card decides not to request the reading terminal to query the authentication center based on the result of the comparison, the value of the small value counter becomes zero. 4. The method according to claim 3, wherein the method is reset. 5. The method according to claim 1, wherein the increment performed by the chip card is a positive increment. 6. The method according to claim 1, wherein the increment performed by the chip card is a negative increment. 7. A microprocessor chip card for use in performing electronic transactions, comprising means for implementing the method according to claim 1. Description: Microprocessor chip card. 8. The method according to claim 1, comprising a memory means for storing one or more threshold and / or counter values and a comparison means. The chip card according to claim 7, characterized in that: 9. A terminal for reading a microprocessor chip card for use in executing an electronic transaction, comprising means for implementing the method according to claim 1. A terminal characterized by including.