JP2003196239A - Method for providing service of service provider - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method and device for providing the service of a service provider to a service user. <P>SOLUTION: When a user (1) has agreed with service provision, the user (1) enciphers at least one element of a message in which the service provision is included by his own private key, and returns the message to a service provider (2), and the service provider transfers the message to a service settler (3), and the service provider (2) receives confirmation prepared based on the check of the enciphered element by the service settler (3) from the service settler (3), and the service provider (2) enables a service to the user (1). <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

FIELD OF THE INVENTION The present invention relates to a method of providing services of a service provider.

[0002]

2. Description of the Related Art Telematics provided to users for a fee are well known. Especially in access-dependent charging models, it is necessary to detect the pay unit, in particular the number of accesses, the type of service or the access duration, without being tampered with and to unambiguously assign it to a legitimate user.

Currently, there are various methods for payment.

The user makes a contract with a telematic service provider. The user authenticates to the provider when accessing the service. by this,
Accurate charges can be detected and assigned. However, the user must enter into a separate contract with the service provider.

The service provider obtains a payment modality by the mobile radio provider, similar to a pay service number, through which the service provider seeks to enable access to his services. But in order not to limit the user groups here, an agreement is needed between the service provider and all mobile radio providers.

There are also companies specialized in the settlement of mobile commercial activities. When a user inquires for a telematic service, the service provider initiates an inquiry at the payment company, for example notifying the charges incurred and the user's mobile radio number. Based on this, the cut-off company authenticates the user separately, and the payment company discloses the amount by this authentication. This publication is then confirmed again by the service provider.

[0007]

SUMMARY OF THE INVENTION It is an object of the present invention to provide a method and a device by which the services of a service provider can be provided to a service user, and the settlement of this service by a service provider or a service provider or It is to be executed independently of the mobile wireless provider. And at that time, it is not necessary to construct a further communication channel on the service user side.

[0008]

According to the present invention, the user receives a private key from a service settlement person, and the user sends an inquiry to the service provider in order to use the service of the service provider and makes an inquiry about himself. As feedback to, the user receives the service offering from the service provider,
If the user agrees to the service offer, the user encrypts at least one element of the message in which the service offer was included with his private key,
The message is sent back to the service provider, who forwards the message to the service payer, and the service provider confirms with the service payer, a confirmation created based on the inspection of the encrypted element by the service payer. After receiving, it is solved by enabling the service to the user from the side of the service provider.

[0009]

The known method mentioned at the beginning, on the other hand, requires the construction of a further communication channel between the service payer and the service user, which is technically and logically Also requires a high cost.

In the method of the present invention, confirmation of a pay service act for, for example, e-commerce and / or m-commerce is performed by the service user with respect to the service payer. The channels that now exist for using the service can be used, under a given tamper protection, to confirm the payment to the service payer.

The advantage of the method according to the invention is, inter alia, that the user has immediate access to all paying services using this method once he has registered at the payment point (service payer). Such a payment point is, for example, a credit company (VISA, Paybox) or a bank. There is no need to personally sign a user contract with the service provider. Therefore, the corresponding service can be used immediately and independently of the communication provider.

In the method of the present invention, the user communicates only for the requested service and payment via the communication channel with the service provider. Service payers never openly appear in the foreground.

Security against tampering is guaranteed as follows. That is, the user is guaranteed by encrypting the element of the message containing the service offering with his private key and sending it to the service provider, who forwards it further to the service payer. The service provider releases the desired service only after receiving a confirmation created by the service settler based on the inspection of the encrypted element thereby. The data packet of the encrypted message can then only be encrypted by the authorized user with his private key.

[0014]

[Example] In order to use a pay service, for example, a telematic service, a user 1 is a service payer 3,
For example, make an arrangement with a credit company or a bank. For this purpose, the user 1 applies to the service settlement person 3 according to FIG. 1 (30) and has the user number issued by the user settled.
This user number is used as a public identifier. The service settlement person 3 manages the customer account 333, and the user number,
A user key at the service settlement person 3 and a credit line as an option are assigned. This method is even more secure if this key is kept secret. The private key is notified by the service payer 3 to the user 1 for the purpose of customer account specifications. The user, if properly authenticated for the debiting process, will have his customer account 333.
Approve the debit entry for the service settlement person 3.

The authentication process can proceed as follows in accordance with the present invention as shown in FIG.

1. The user 1 selects a service and inquires about the service provision by his / her public identifier (user number) (21).

2. The service provider 2 further forwards the unique feature of the service, eg the amount and the public identifier of the user 1 to the service payer 3 (22).
If the amount is not further transferred as a unique service future, this is notified separately to the service payer 3.

3. The service settlement person 3 generates a key from the public identifier (23). This key can later be encrypted by the user 1 based on the knowledge gained by his private key.

4. The service settlement person 3 encrypts the transaction number TAN with this key (24). This transaction number must be unique to User 1 and the payment process. Optionally, the unique service feature from point 2 can also be encrypted together. The TAN is advantageously only valid for a limited time.

5. This encrypted message is sent (26) to the service provider 2 and is uniquely tied to the user 1 inquiring here.

6. Service provider 2 points 2
Attach a unique service feature from, eg, an amount to the message. This message is notified to user 1 as a service provision through the inquiry channel (2
7).

7. User 1 receives the message and, based on his private key, is able to decrypt the unique service feature encrypted by TAN and optionally service payer 3 (28). Based on the private key, it is guaranteed that only User 1 can decrypt the packet. Conversely, if inferred, only the user 1 can make an inquiry, and a third party cannot make an inquiry for payment by mistake.

The service future can be compared by the user 1 or his terminal with the service future sent together from the service provider. This comparison is to see if the same features are being dealt with and therefore the same debt is settled. For this reason, the most certain amount of money is used as the unambiguous service future.

8. User 1 then responds accordingly to the confirmation inquiry. In case of negative confirmation, the above process is abandoned. In the case of a positive confirmation (user consent), User 1 encrypts the element of the message that contains the service offering. Here, the TANs from points 6 and 7 are specially encrypted again based on their own private key. Futures sent by the service provider with the message at point 6 are both encrypted. This ensures that the service provider 2 has provided the user with the same unique service feature that outsourced the service settler 3 to the debit, and only the user can encrypt this feature in the reply packet. it can.
The data packet should be considered different from the one sent at point 5. The confirmation packet is returned to the service settlement person 3 via the service provider 2 together with the public user identifier (29).

[0025] Optionally, the user further adds a random part of this message according to commonly known encryption methods. This allows the same query to
Even if there is one, the response is formed randomly.

9. The service payer 3 receives the packet and analyzes it (300).

Due to the other structure, the service provider 2 cannot easily copy and send it back.

Due to the presence of the TAN in association with the service future and the public user identifier from point 4, there is an earlier process than the one copied by the service provider based on the TAN not systematically selected. Never.

At point 4 the unique service future is encrypted and sent together and checked by user 1 with the unencrypted service future or by user 1 the service future attached by service provider 2. Co-encrypting together ensures that the service provider 2 will pay the same service future for user 1 in the same way as service payer 3.

By being able to interpret this message, User 1 must decrypt this message with a valid key and re-encrypt it. Therefore, it is possible for a user with the above public identifier to do this.

This check confirms to the service payer 2 that the user 1 knows, for example, a report of the amount of money via the service future that has been settled.
Make sure you have confirmed the process.

10. If the above steps are correctly examined, the service payer 3 confirms with the service provider 2 to debit the customer account (31). The service provider 2 then provides the service to the service user as usual (ie the service is enabled).

Next, an embodiment will be described with reference to FIG.

The user 1 logs on to the service settlement person 3, for example, the Visa card service, with a unique user identifier, for example, his own terminal device number (Nu007), and receives the private key. Only the user knows this private key. Without any further application, user 1 is a paid service of service provider 2,
For example, using offboard navigation of telephone information. This service provider 2 can be settled by the service settler 3.

User 1 next makes a route inquiry (32)
And the user identifier (Nu007) is transmitted without being encrypted. This is further transmitted from the service provider 2 to the service settler 3 together with the unique service future (DM3, 99) (33). Service payment is a random transaction number (TAN1234)
Is generated (34), and the service future (DM
3, 99) and the user identifier (Nu007) in memory. Known user identifier (Nu00
Based on 7), the service payer 3 forms a key or message. User 1 can decrypt this message again with his private key (3
5). The formed key or the formed message encrypts the transaction number (TAN 1234) and optionally attaches the service feature unencrypted. The service provider 2 receives this data packet for further output (36). The service provider 2 uses this service future (DM
3, 99) is not encrypted and is attached to the data packet received by the service settlement person 3.

The service provider 2 then sends out the service offer (37). This is, for example, the target point list, in which the user 1 has a unique service feature (DM) in addition to the encrypted elements.
3, 99) is now attached. The service future (DM3, 99) is displayed to the user 1 and confirmed by the user. At the same time, the user confirms the target, for example from the target point list. With this confirmation, the TAN (TAN1234) decrypted in the preceding processing step is then re-encrypted (38) with the private key along with the service future (DM3,99). The data packet thus generated can only be generated by user 1. Because only the user can decrypt the TAN (TAN1234) and recode it into a common packet with the service future (DM3,99), because this data packet is only relevant for this delegation. Because TAN
This is because (TAN1234) is randomly associated with the user number and the service future by the Visa card service in a peculiar manner. Therefore, it cannot be a copy of an old consignment or confirmation.

This packet is then returned to the service provider 2 again (39). The service payer 3 then
The data packet is decrypted and the user number (Nu007, T
AN1234) and service futures (DM3,99)
Can be checked for legitimacy with this combination (41).

If justified, the amount due is debited to the customer account. The relevant amount is credited to the service provider 2 account and billing is directed to the service provider 2 (42). The service is then enabled or the requested route is sent to the user (43).

FIG. 4 shows a block circuit diagram of a device on the user side for utilizing the service of the service provider. A sending unit 12 is provided for sending service inquiries and confirmations. The user 1 receives the service provision and the enabled service via the receiving unit 11. The private key is, for example, the input device 1
3 is input by the user 1. A decoding device 14 is provided for decoding the received message. This decoding device is correspondingly controlled by the key input device 13 so that it can be decrypted. After evaluating the decoded message by the evaluation device 15, the generator 16
Can organize new messages. Alternatively, the elements of the message received with the private key are controlled by the input device 13 and encrypted. This is to send the authentication confirmation to the service provider 2. The enabled services are preferably received by the service provider 2 and received at the unit 17 via the same communication channel. This unit 17 is connected to a display 18, for example for displaying and visualizing requested services, such as route searches and other graphical and / or textual information. A memory 19 is provided so that the user 1 can also reproduce existing route information, for example, map data on the display 18. For example, a card CD can be used as the storage medium.

[Brief description of drawings]

FIG. 1 is a diagram showing a logon method at a service settlement person.

FIG. 2 is a diagram showing a process history of a service inquiry.

FIG. 3 shows a method sequence for using a service of a service provider.

FIG. 4 is a block circuit diagram of an apparatus for utilizing a service of a service provider.

[Explanation of symbols]

1 user 2 service providers 3 service settlement person

─────────────────────────────────────────────────── ─── Continuation of the front page (51) Int.Cl. ⁷ Identification code FI theme coat (reference) G06F 17/60 ZEC G06F 17/60 ZEC (72) Inventor Volker Skuvalek Federal Republic of Germany Bad Salzdeutfur Werfenhehe 21 F-term (reference) 5B085 AE09 AE23 AE29 BC01 BG02 BG07

Claims (12)

[Claims] 1. A method for providing a service of a service provider, wherein a user (1) receives a private key from a service settlement person (3), and the user services an inquiry to use the service of the service provider (2). If the user (1) receives the service offer from the service provider (2) and sends it to the provider (2) as feedback to his / her inquiry, and the user (1) agrees to the service offer, the user (1): The service provider (2) encrypts at least one element of the message that included the service provision with his / her private key, and
And the service provider further forwards the message to the service payer (3), the service provider (2) inspecting the element encrypted by the service payer (3) by the service payer (3). A method of enabling a service for a user (1) from a side of a service provider (2) after receiving a confirmation created based on the above. 2. The method according to claim 1, wherein the public identifier of the user (1) is sent in the inquiry to the service provider (2). 3. A method according to claim 1 or 2, wherein the service provider (2) further forwards the queried unique identifier of the service future and the public identifier of the user (1) to the service payer (3). 4. The service payer (3) generates a key based on the notified public identifier of the user, and the user (1) receives the key from the private key previously received from the service payer (3). 4. A method according to any one of claims 1 to 3, which can be decrypted on the basis of. 5. The method according to claim 4, wherein the service payer (3) encrypts a transaction number (TAN) which is unique with respect to the payment process. 6. The method according to claim 5, wherein the service payer (3) encrypts the service future together with the encrypted transaction number. 7. The service provider (2) manages the encrypted message returned from the service settlement person (3) to the service provider and sends it to the user (1) as a service provision, wherein the encrypted message is 6. A service feature queried, for example comprising an amount identifier.
Or the method according to 6. 8. The method according to claim 7, wherein the service offering is sent to the user (1) with a service confirmation inquiry. 9. The user (1) decrypts the message with his private key in order to check the service offering and, if he agrees to the service offering, at least one element of the message, in particular the transaction number, is his private key. 9. A method according to any one of the preceding claims, which is encrypted by and sent back to the service provider (2). 10. The service-settler (3) analyzes the service confirmation encrypted by the user (1) and obtained via the service provider (2), and after the inspection, informs the service provider (2), in particular the customer. 10. The method according to any one of claims 1 to 9, wherein the account is debited and a confirmation is sent for enabling the service by the service provider (2). 11. The method according to claim 1, which is used for providing a telematic service in which the payment takes place independently of the service provider (2), especially without provision of a separate communication channel. Usage of the method described in paragraph 1. 12. A device for using a service of a service provider (2), a means (13) for activating a private key obtained from a service settlement person (3), and an inquiry for the service provider (2). A sending unit (12) for sending to and using the service, a receiving unit (11) for receiving the service offering of the service provider (2), and decoding the encrypted message containing the service offering. Means (13, 14) for evaluating the decoded message, and means (15) for evaluating the decoded message, wherein a new message is generated by encrypting at least one element of the decoded message with a private key. Means for doing (16) and a service provider ( Means (17) for receiving the services of the service provider (2) after being enabled by 2) on the basis of the examination of the encrypted element.