RO133219A0 - Method for automatically transmitting and storing financial and commercial receipts in electronic format - Google Patents

Abstract

The invention relates to a method for automatically transmitting and storing financial and commercial receipts in electronic format, with payment instruments of the bank card type, including dynamic generation of at least one electronic receipt deposit account for each payment instrument holder in the moment of performing the first transaction with the mentioned payment instrument, followed by determining and using electronic addresses of destination for transmitting the electronic receipts in real time or at a moment subsequent to the financial transaction, using only data stored in local memories available to the payment terminal application, these memories including at least one memory of the payment instrument or of a terminal of cash register type or the like connected to the payment terminal. According to the invention, the method also includes a mechanism for transmitting in electronic format commercial bills, including fiscal bills emitted by equipments such as cash registers or automatic vending machines which are connected to bank card payment terminals, as well as a mechanism by means of which the payment instrument holders may access and log in the server-application for storage of the electronic receipts and the electronic commercial bills for retrieving and viewing the same, and it also includes a mechanism for notifying the holders of the mentioned electronic fiscal bills which meet a given condition, namely which are declared winners upon drawing in games or contests such as the fiscal bill lottery.

Description

The present invention is applicable in the field of transactions carried out with bank cards, both at specialized card reading terminals and online transactions where the user completes an electronic form with the main card details. In the case of transactions carried out at specialized card-reading terminals for electronic financial operations, such equipment may be of the type Electronic Funds Transfer Point of Sale or Automated Teller Machine terminals or other automatons that include functions of the type of financial operations with bank cards, in implementation of stand-alone or, optionally, locally connected through data communication interfaces with electronic tax markers or other equipment with which commercial operations are performed, such as the sale of products or services, operated in an assisted manner by an economic agent or unassisted , directly by the customer.

According to the specifications of the regulations of the international MasterCard and Visa card organizations, for payment transactions made with bank cards at terminals such as Electronic Funds Transfer Point of Sales (hereinafter referred to as EFTPOS), payment receipts presenting a set must be issued minimum data identifying the electronic payment made with the bank card. Also, in the case of Automated Teller Machine (ATM) or other self-service equipment, they must be able to issue a receipt for the financial transaction made if the customer chooses to receive a receipt.

At the same time, the legal regulations in the fiscal field stipulate that the economic agents that realize the sale of goods or services must use electronic fiscal markers, and these must also be provided with remote data communication modules for reporting the tax transactions data to an Agency server. National Tax Administration. Also in the legislative framework, in Romania the organization of the Lottery of fiscal bonds is established, which is organized monthly and occasionally. In addition, more and more businesses that make sales of goods or services and are equipped with electronic tax markers and payment terminals with card implements interconnection solutions between these types of equipment, so as to simplify more manual operations from the moment of making a sale, by sending orders and data between the two equipment.

It is also known that in some implementations mechanisms are used for electronic receipt of receipts for bank card payments, to e1 addresses of 2018 00802

12/10/2018 mail of card holders. An example of implementation in this regard is that of sales and payments made under high mobility conditions of the economic agents that use equipment like fiscal electronic marking machines and mobile payment terminals, of small size. In some of these situations, mobile payment card models used, also called mPOS, do not have a built-in receipt printer, but are based on an electronic payment communication communication variant at an e-mail address. of the card holder obtained on the spot by him and manually entered in the terminal.

Several methods of transmitting electronic receipts to electronic contact addresses of card holders are known. A first method for this purpose is described in the patent application of the MasterCard Asia / Pacific PTE LTD applicant published with US number 20180096314 Al dated April 5, 2018. The method described in this published patent application illustrates an automated preparation system and transmission of the data to be transmitted in the form of a receipt in electronic format to an e-mail address obtained after the remote query of the contact details of the cardholder, to a server located at the card issuing bank, the query having to go through the entire circuit between the merchant, the bank accepting the card payments to which the merchant has his payment terminal enrolled, the international card organization network, a middleware server of that card organization and the card issuing bank presented for payment, and the answer of the query runs the same circuit in the opposite direction . An essential role in this method described in the patent application US 20180096314 Al has the middleware system installed at the international card organization, named in the original description "intermediate terminal", which constitutes a portal type platform that centralizes the data related to it. sale and payment transactions received from the cash register systems and bank card payment terminal from merchants, and based on cardholder account identification data, including Issuer Identifier Number / Bank code 11N / B1N Identifier Number) sends a real-time online query to the issuing bank of the respective card in order to obtain from that issuing bank certain electronic contact data from the cardholder's account at which the respective intermediary terminal will post the electronic receipt related to the transaction. performed. The disadvantages of that method are the following:

- the solution is applicable only to card holders who have previously opted, at the time of requesting a new card account, for the receipt of electronic receipts and have provided for this purpose an e-mail or SMS or other type email address;

- at the time and place of the card transaction, the email address or email or other type of card holder is not available directly from the data of 2018 00802

12/10/2018 customized by card and a remote and dependency query system is required depending on an intermediary server of a hosted intermediary server, centralized to MasterCard or a third party service provider, who can route the query data to the bank issuing;

- the impossibility of operating the solution offline from the electronic receipt server, in cases where the payment terminals would not have data connectivity with that server;

- the impossibility of functioning offline from the accepting bank, provided that the EMV standard provides for the possibility of conducting transactions with smart card in offline and with offline PIN verification or even without PIN verification up to certain ceilings of payment values ;

- the impossibility of determining a contact address of a cardholder in the case of prepaid cards, which is not correlated at the time of issuance with any customer identity, so also with his contact details;

- there is no mechanism for finding and alerting an eventual tax winner to the Lottery of tax receipts.

Another known method is described by the applicant MasterCard International lncorporated in the patent application published with the number US 20160117895 Al, by which, also, the destination email address for the transmission of the electronic receipt is determined by the online query of a remote server, based on the provision. In query of the card PAN number, to verify whether or not a correspondence email address corresponding to the PAN number of the query is already registered and, if so, retrieve that address from the server to be used when sending the electronic receipt. This method is very similar to the method described in the patent application with US number 20180096314 Al, mentioned above, and has the same disadvantages as this.

Another known method is that described in the patent application of the MasterCard International lncorporated applicant, published with the number US 20180101832 Al dated April 12, 2018. In this case, a method is described by which the e-mail address or number of SMS to which the electronic receipts must be sent must be pre-registered at a memory location on the card in the card customization phase, either on one of the tracks of the magnetic card of the card, or in an electronic memory location in the circuit integrated smart card payment. Thus, the electronic address of destination of the electronic receipt is determined at each payment transaction directly between the data read from the card's memory locations, no remote query being required. Even in the case of this 2018 00802

10/12/2018 methods are some of the disadvantages presented previously in connection with the method described in US patent application 20180096314 Al, namely:

- the solution is only applicable for card holders who have previously opted, at the time of requesting a new card account, for the receipt of electronic receipts and have provided for this purpose an e-mail or SMS or other type that it will have been subsequently stored in the profile of the personalization data of the respective card during its issuing phase;

- the solution does not cover situations where payment terminals are temporarily offline, without data connectivity with the electronic receipt server;

- the impossibility of determining a contact address of a cardholder in the case of prepaid cards, which is not correlated at the time of issuance with any customer identity, so also with his contact details;

- the disadvantage that there is no mechanism for finding and alerting a tax winner possibly winning the Tax Bond Lottery.

The technical problem that the present invention aims to solve is to provide a secure solution for the generation, automatic transmission and storage of electronic receipts related to payments made with bank card payment instruments, as well as electronic copies of tax receipts. related to the sales transactions for which the respective electronic payments are made with bank card payment instruments, which can be applied independently of specific contact data of the payment instrument holders and independent of the existence of an active data connection at the time of the transaction at the level payment terminal, respectively the solution according to the invention can be applied both online and offline.

The present invention consists of a method and a set of computer programs by means of which electronic receipts are created for the financial operations performed with bank card payment instruments or similar types and by which one is generated dynamically first. deposit account of electronic receipts for each payment instrument holder after the first transaction with that payment instrument and subsequently dynamically determined and the respective destination email addresses are used for transmitting electronic receipts in real time or at a later time to perform the financial transaction , using only data that is available in the local memories available to the payment terminal application, these memories including at least one memory of the respective payment instrument and a memory of the payment terminal or a cash register terminal connected with the payment terminal. The same method according to the invention also includes a mechanism for electronically transmitting receipts for commercial operations, including receipts of type tax receipts issued by equipment of cash register type or automatically to 2018 00802

12/10/2018 sale that are connected with payment terminals with card. The method according to the invention also includes a mechanism by which the holders of payment instruments can authenticate and connect to a system of deposit of electronic receipts and electronic commercial receipts for their retrieval and visualization, as well as a notification mechanism for the holders of electronic tax receipts that are declared. winners at the draws of games or contests such as the tax voucher lotteries.

In connection with a first aspect of the invention, it is described how dynamically determined by the software application of the financial transaction terminal or the commercial transaction terminal the electronic address of a deposit account to be created at the first use with a payment instrument and to which the electronic receipts must subsequently be transmitted online or offline in order to be found by the holder of the respective payment instrument, based on an algorithm that deducts an electronic contact address from a unique identification code of the respective payment instrument, without the need to query a remote database and without the need to pre-configure any memory location of the payment card, when customizing and issuing the card, a specific address and for the purpose of electronic contact.

In connection with a second aspect of the invention, it is described how the method presented manages, in addition to the online or offline transmission and the storage of electronic receipts related to financial transactions (made by a terminal such as financial payment) , and the transmission online or offline and the deposit of electronic copies of the tax receipts related to the commercial transactions (carried out by a sales terminal, the type of cash registers or the vending machines) for which the respective electronic financial transactions are made, with a mechanism for identifying and alerting the holder in case of a win at the draws of games or contests such as lotteries of tax vouchers.

In connection with a third aspect of the invention, the way in which the cardholder accesses his electronic receipts and vouchers is described and described is described.

The present invention has a first advantage which consists in eliminating any dependence on any prior need for preconfiguration of contact data in any memory of the payment instrument or of any server in connection with the card system of the issuing organization of that payment instrument. or in connection with the electronic receipt management system. The electronic accounts for the deposit of electronic receipts related to the transactions made with bank card payment instruments are dynamically created at the first transactions with those payment instruments, and the addresses of the respective electronic deposit accounts are found in 2018 00802

12/10/2018 also dynamic, for each transaction, only on the basis of data stored in the local memories to which the application of the financial transaction terminal or the application of commercial transactions can be accessed as well as information commonly found in the basic data set with are already issued bank cards usually presented for payment. Thus, the method according to the invention is applicable to all payment instruments of the type of bank cards, whether they are newly issued or are already in circulation, eliminating the condition regarding the prior provision by the holders of the respective payment instruments, at the time of their issuance or at the time of enrollment. their holders in an electronic receipts administration system, the option for receiving receipts in electronic format and, respectively, any destination email address for electronic receipts.

Another advantage of the invention is that it eliminates the conditionality regarding the existence of an active data connection at the time of the transaction, both between the payment terminal and the electronic receipt server, allowing the functioning of the presented solution and offline both with respect to any server of the accepting institution. of the financial transaction as well as offline in relation to a server of the issuing institution of the payment instrument used for that transaction or any other server, in the case of financial transactions that can be authorized offline in accordance with EMV rules. Thus, the method according to this invention may also work in the eventual time intervals when the payment terminal would be temporarily disconnected from the data network through which it is remotely connected to any of the electronic receipt server, the financial transaction acceptance server, the authorization server of the organization issuing the payment instrument as well as other external systems.

In particular, the invention described fulfills the purpose of determining the mode of transmission of the electronic receipt and the electronic address of its destination, eliminating the condition of any online query at the time of payment transactions, or between the application on the payment terminals at which the transactions are carried out. and servers of the issuing banks of those payment instruments or of other institutions, either between any application server in connection with the electronic receipt system and servers of the issuing banks of those payment instruments or servers of other institutions.

Another advantage of the present invention is that the method for determining the destination addresses of electronic receipts does not handle externally sensitive information about the cardholder's financial account, which gives an additional security measure to other systems and helps to reduce the extent. checks for compliance with the PCI DSS security standard but also with the GDPR provisions for the protection of personal data, through the use of email addresses with an alias type or 2018 00802 format

12/10/2018 token instead of addresses with components from the name or other personal data of the cardholder.

On the other hand, the much simpler scheme for determining the destination email address for storing electronic receipts ensures a reduction in the total time of the transaction and the risk of a delay or even a break in data communications during the creation and transmission operation. electronic receipts, by eliminating the use of third-party systems in the scheme of the logical network for querying and retrieving the destination electronic address.

Another advantage of the present invention is that it offers a solution applicable both in electronic payment systems with card present at the terminal, in which the card is read through specialized secure equipment, as well as in transactions of the type of online payments over the Internet, called and transactions in the "absent card" system, in which the only card details that are necessary for the transaction are completed by the user in an electronic form from the online payment interface after the user reads them visually from at least one of the two sides of the Card.

The present invention also offers the advantage of a solution for managing, in addition to electronic receipts for financial transactions, and electronic receipts for commercial transactions for which the respective financial transactions have been performed, namely electronic tax receipts, the method according to the invention comprising the transmission and storage. , in addition to electronic receipts related to bank card financial transactions, and electronic copies of the tax receipts related to the sale transactions for which the respective bank card electronic payments are made and the implementation of a mechanism to identify possible winning tax receipts upon any withdrawal of the a lottery system of tax receipts and subsequent alert of the cardholder to whom the respective electronic tax receipts belong.

Thus, this functionality gives cardholders the opportunity to track and be informed automatically and in time about a possible win at a draw of a lottery system, such as the Tax Voucher Lottery. This can even create an incentive to use bank card payments on a larger scale, as it gives customers the opportunity to send a copy of the tax receipt, in addition to the electronic payment receipt, allowing a management process. much easier and safer tax receipts and receipts than in their physical printing.

to 2018 00802

12/10/2018 (Another advantage of the invention described is that of providing a subsequent account enrollment and secure access of card holders for accessing, in a server application, electronic receipts and electronic tax receipts belong.

Another advantage of the invention is its applicability even in the case of prepaid cards, which have not initially assigned the identity of a cardholder, being able to handle electronic receipts from the first card transaction and can be subsequently found by a future holder of the card.

Figures 1 ... 9 accompanying the present description of the invention represent:

FIG. 1 illustrates an information network scheme that can be used for transmitting electronic receipts from a workstation of a merchant equipped with at least one electronic fiscal marking device and at least one payment terminal to an electronic receipt deposit server. ;

FIG. 2 schematically represents the content of the electronic message that includes the electronic receipt and the components of the destination email address;

FIG. 3 represents a block diagram of the operational flow responsible for the creation of electronic receipts, the establishment of electronic deposit accounts and the subsequent determination of their electronic addresses for the transmission of electronic receipts;

FIG. 4-8 represent the diagrams of the functional steps that make up the first five functional blocks in the block diagram shown in fig. 2;

FIG. 9 is a logical diagram of the functional steps provided for activating the access of a bank card holder for viewing electronic payment receipts with card and electronic tax receipts.

Further to this description, transactions or commercial transactions refer to transactions related to the sale of products or services, and transactions or financial transactions refer to operations related to the transfer of funds due for the payment obligations generated to be extinguished. by business operations.

Card payment transactions in the "present card" environment refers to those financial transactions carried out at any specialized terminal for payments with a bank card payment instrument, which is provided with a secure read-write module of that instrument payment via interface with magnetic stripe or integrated circuit with electronic or non-contact (contactless or Near Field Communication or NFC), such as "Electronic Funds Transfer" (shortened "EFTPOS") or " Automatic Teller Machine "(short for" ATM ") or the type of automatic distributors of products or services equipped with card payment modules. For these types of payment terminals, 2018 00802 is required

12/10/2018% the physical presence of the payment instrument at the merchant's premises for reading it in those specialized payment terminals that are in the supply of that merchant.

Card payment transactions in the "absent card" environment refers to those financial transactions performed at any terminal capable of running a computer program that includes an online payment interface, in which the user manually enters, at that terminal, some card readings read visually from one of its faces. In these situations, the card is not presented at the merchant's office but at that online payment terminal, which may be the type of a personal computer or a smart mobile device such as a tablet or phone, so at a user's address.

A payment instrument such as a payment card means a physical object, such as a financial card or other types with equivalent functions, such as, but not limited to: NFC card or keychain, smart phone with interface NFC, these payment instruments having an identification data set that include at least a unique identification number of the respective payment instrument uniquely correlated with a financial account of the holder of that payment instrument in the system of an issuing organization. The terms payment instrument or card are used herein with the same meaning.

The terms "fiscal electronic cash register", "electronic cash register", "cash register", "Electronic Cash Register" and the acronym "ECR" refer to one and the same thing, namely a terminal used by the merchant to mark commercial transactions. for the sale of goods or services, including specialized cash registers, personal computers equipped with tax modules and special applications for sale, optionally and with product inventory applications, smart portable devices of tablet or mobile phone which have, optionally, incorporated a tax module or are connected to a peripheral equipped with a fiscal module or, in some cases, not taxed, such as for example some vending machines, such as automatic vending machines. in the acceptance and the terminology used in this description, the house type terminals of any kind or automatic sale of products are responsible for carrying out commercial operations, including the creation and issuance of a sales voucher which, in the cases in which controlled equipment is used , is a tax voucher.

The term "application" will be used to continue this description with the meaning of computer program.

In presenting the syntax of the electronic addresses of the servers and the electronic deposit accounts to which the electronic receipts will be sent, the following symbols will be used conventionally: round brackets () to indicate the application of the function left of the open bracket on the argument between round brackets; straight brackets [] to symbolize some of 2018 00802

12/10/2018 Ϋ) optional data fields in the syntaxes described; the sequence of three points ... to symbolize the continuation of a series of elements according to the logic or the format presented immediately before the three points. The partial or complete syntax of the email addresses presented in this description will be edited in bold.

In connection with a first aspect of the invention, the first functional mode is included which includes the steps to be taken to establish an electronic receipts deposit account at the first use of a payment instrument and, subsequently, the dynamic determination of the electronic address of destination to which the electronic receipts must be sent for the transactions made with that payment instrument.

in FIG. 1 illustrates a variant of technical equipment common in practice, in which a trader has in the endowment of a point of sale a payment terminal 1 with card type EFTPOS, with which he performs the electronic payment operation with a payment instrument 2 issued by an issuing organization 3 and at least one electronic cash register type equipment 4 with which to carry out the sale of goods or services.

The method according to the present invention is applicable in the same way to other types of terminals for carrying out financial transactions with payment instruments 2, such as ATMs or automatic distribution of products or services or to personal computer terminals or portable smart devices with which online payment transactions can be carried out through the Internet or any other type of terminals with financial operations with such payment instruments 2, either in "present" or "absent" mode, which are not represented in the figures shown in this description. In the following description, the implementation of the method will be presented in connection with a payment terminal 1 of type EFTPOS, but will be considered similar for any other type of payment terminal with payment instruments 2 of the type of bank cards.

In order to increase the efficiency of the operation by the commercial worker, the cash register 4 is connected to the payment terminal 1 through an ECR-POS 5 data interface through which the cashier house 4 can send authorization orders for the payment of a certain amount to a financial application. 6 which is installed on the payment terminal 1 and which, after the authorization of the financial transaction offline or in relation to an acceptance server 7 of an accepting bank 8 to which the merchant is affiliated, returns information corresponding to the transaction made back to the cash register 4 .

The financial application 6 from the payment terminal 1 initiates the financial transaction with the payment instrument 2, offline, if certain criteria for verifying the risk conditions for that payment instrument 2 are fulfilled or requests the authorization of the financial transaction online to the payment server. acceptance 7 of payments at the accepting organization 8 (to 2018 00802

10/12/2018 for example, a bank or intermediary company for electronic payments) through a channel 9 of data communications, then waiting for the receipt of a response code that means either the successful authorization of the respective payment or an error message that can have various causes, either of a transactional nature (insufficient funds, invalid card, invalid PIN), or strictly technical (for example, data communication problems or technical errors at the payment terminal 1 or the acceptance server 7 of payments) as well as other payment transaction specific data.

The Financial Transaction Acceptance Server 7 checks the Issuer Identifier Number (IIN) code consisting of the first 6 digits of the PAN (Primary Account Number) of the payment instrument 2 to determine the card organization under which the payment instrument 2 was issued and if it was issued by the accepting organization 8 or by another organization. If the payment instrument 2 was issued by another organization, server 7 relays the request for authorization of the financial transaction further to the interswitching server 10 of card organization 11 determined on the basis of the UN code. For simplicity, in FIG. 1 is the connection of the acceptance server 7 to a single organization 11 cards; however, it is specified that acceptance server 7 can be connected to one or more card organizations 11, each having at least one own server 10 and one number of issuing organizations 3 affiliates, some of which may be distinct or coincides between two or more 11 card organizations. The inter-switching server 10 determines which issuing bank 3 of the payment instrument 2 submitted for the financial transaction and sends the request for the authorization of the transaction to the authorization server 12 of that issuing organization 3. The authorization server 12 identifies in the issuing organization system 3 the financial account associated with the payment instrument 2 through the PAN number extracted from the transaction received upon authorization, checks the cardholder's code în if the transaction is online PIN and then checks the account data to determine if the financial transaction can be made , and if so, it sends a confirmation of authorization of this transaction on the same circuit, but in the opposite direction, until the payment terminal 1. If the payment cannot be authorized, the authorization server 12 sends an error code to the terminal Payment 1.

After authorizing the transaction offline directly by the financial application 6, or after receiving the response code when requesting online payment authorization or failing to receive a response within a maximum preconfigured time period (a timeout), a local application 13 which running on the payment terminal 1 will carry out the necessary operations for generating and issuing the contents of a receipt for the respective financial transaction.

to 2018 00802

10/12/2018

It is important to note that this local application 13, which runs on payment terminal 1 and is responsible for generating and issuing receipts for financial transactions, may be a separate application from financial application 6 running on the same payment terminal 1 and which is responsible for securely taking the card data and performing the financial transaction in relation to the acceptance server 7 to which payment terminal 1 is connected, or the local application 13 on payment terminal 1 can be implemented as a module or as an internal routine of the financial application 6. The financial application 6 and the local application 13 of the payment terminal 1 have access to an internal or peripheral electronic memory 14 of the payment terminal 1.

It is also important to mention that the method according to the invention can be applied in the same way and if the functions of generating and issuing receipts of financial transactions are implemented at the level of a local application 15 installed on the cash register 4, in this case the data necessary for generating the electronic receipt for the financial transaction being transmitted by the financial application 6 to the local application 15 through the ECR-POS interface

5. The local application 15 of the cash register 4 has access to an electronic memory 16 internal or peripheral of the cash register 4.

Further describing the method according to the invention will be mentioned the possibility of using the local application 13 of the payment terminal 1 or of the local application 15 of the cash register 4, as well as of the local electronic memory 14 of the payment terminal 1, respectively of the local electronic memory 16 a. the cash register 4, in the operational steps that are part of the method according to the invention.

The receipt for the financial transaction can be issued directly in electronic format, or it can be printed only in physical format on paper, or it can be transmitted both in electronic format and printed in physical format, depending on the configuration of a parameter in the local application 13 or 15 or, possibly, by the cardholder's choice of one of these options at the time of the transaction.

In the case of electronic broadcasting, the local application 13 or 15 will create an electronic message 17, which will contain, as shown in fig. 2, at least one data set Dl that constitutes the contents of the electronic receipt 18, which will be transmitted online or offline to a server-application 19 for receiving and storing electronic receipts 18, which is installed on a server 20 of electronic receipts. The electronic receipt server 20 has at least the following elements: a server application 19, a data memory 21, a database 22 and a secure interface 23 for external registration and authentication by the payment instrument holders 2.

to 2018 00802

10/12/2018

The method according to the invention includes certain operational steps that ensure, at first use, the dynamic creation of a deposit account of electronic receipts 18 in server application 19 and, subsequently, the dynamic determination of the electronic addresses 24 of destination of that deposit account to which the local application 13 or 15 must send electronic messages 17 containing electronic receipts 18. Each destination email address 24 is composed of two parts:

- a part PI of the server-address type that constitutes the electronic address to which the server-application 19 is called through a data network 25 to which the server 20 of electronic receipts is connected;

- another part P2 which constitutes a deposit account identifier within the server application 19, which is uniquely associated with the holder of the payment instrument 2.

The server-side PI part includes at least the domain address of the server's 20 electronic receipts, which can be expressed as a fully qualified domain name (Fully Qualified Domanin Name, or FQDN) or as a 1P numeric address, and, Depending on the technology of the server application 19 used, it may also include a local resource name on the server 20 of electronic receipts in the form of a subdirector or TCP port and the name of a service type, for example http or https, so that in this case the entire PI part that constitutes the server address is in the form of a URL. Within the IP address-server part, the fully qualified domain name consists of a string of the type [subdomain. [subdomain2.] ...] .name_SLD.name_TLD where the hierarchical peak of the domain, name_TLD, is the Top domain Level Domain, this is either a generic domain type com, org, info, net, edu, tv or a country specific domain of type ro, fr, bg etc. The character strings from which the domain names can be formed may contain numbers, letters, and some non-alphanumeric printable characters in the ASCII string.

The identifier part P2 of the deposit account may be of the type of an electronic mailbox identifier, or in the form of a subdirector, or as a user index, or any other form in electronic coding that uniquely identifies the deposit account corresponding to the holder of the payment instrument 2 in the server application 19.

Server application 19 manages a database 22 in which electronic receipt records 18 are stored in electronic deposit accounts associated with payment instrument holders 2. Electronic deposit accounts are dynamically created by server application 19 at every first electronic message 17 received from each first financial transaction performed with a payment instrument 2, or by an optional prior enrollment of the holder of the payment instrument 2 in the server application 19. Subsequently, each holder of a payment instrument 2 may have 2018 00802

12/10/2018 access to his deposit account from the server application 19 for viewing his electronic receipts 18 through a remote connection, through a network of 26 data communications, either public, such as online or private, from a computer 27 or from a smart phone or tablet or other portable device 28. The users access to the server application 19 is made with their prior registration and then each time with their authentication through the interface 23 of registration and authentication.

The server application 19 can be realized in several technological variants, of which three possibilities are mentioned in this description (the web service type, the email server type and the server type protocol with proprietary protocol). Specialists in the field of computer software technologies will easily be able to apply the method according to the present invention and to another way of implementing local applications 13 or 15 and application serer 19.

In one embodiment, server application 19 may be a web service application, and electronic message 17 is in XML format and contains data fields such as deposit account identifier, subject, actual content, and this the latter contains, in its turn, separate data fields such as those specific to receipts for financial transactions issued by payment terminals: the date and time of the transaction, the identifier of the payment terminal 1, the trader's name, the amount, the receipt number, the authorization number in server '12 of the issuing bank 3 and other details. In this case, the IP address-server part that represents the domain type part of the destination email address 24 will be preceded by a static prefix that designates the type of web service, such as http: // or https: //, and consists of a URL address that includes a character string that forms a fully qualified domain name type address followed by one or more subdirectories delimited by the "/" character against the fully qualified domain name and between them. The identifier part P2 of the deposit account will be constituted by a data field inside the XML message in which the alphanumeric string identifying the respective deposit account to which this electronic message is addressed will be entered by the local application 13 or 15.

In another embodiment, the server application 19 may be an e-mail application. In this case, the electronic receipt 18 will be transmitted by the local application 13 or 15 in the form of an electronic message 17 of an e-mail type to an e-mail address 24 of destination which will be in the form of an e-mail address, of the account_local type @ domain_name. In this case, the IP address-server part is constituted by the domain_name member on the right of the character and the identifier part P2 of the deposit account is constituted by the account_local member on the left of the character. The e-mail message may optionally contain a text string in the special field of 2018 00802

10/12/2018

Subject, and in this field the local application 13 or 15 will provide information such as the date and time of the transaction, the name of the trader or the traded amount, information that may be useful for the cardholder to find one or more electronic receipts according to a criterion of search.

In another embodiment, the server application 19 may be an application implemented on the basis of a proprietary communication protocol with a local application, which creates a logical connection to the local application 13 or 15 and receives data from it in a predefined structure in the respective owner protocol. In this case, the electronic message 17 will be transmitted after, first, the local application 13 or 15 opens a logical connection to the server application 19 through a call using the IP address-server part which consists of associating a fully qualified name. domain or IP address with an application port number, such as a TCP port.

In any embodiment chosen for the implementation of the server application 19, it must include at least one means of storing electronic receipts 18 in a database 22, at least one deposit account for each payment instrument holder 2, a means of authenticating the access of payment instrument holders 2 to their electronic receipts 18, a means of performing search and retrieval of electronic receipts 18 belonging to a holder of a payment instrument 2 based on at least one filtering criterion from the records corresponding to the respective holder of the payment instrument 2.

The first functional module of the method according to the present invention is implemented according to the block diagram of fig.3. This functional module includes: a functional block 100 responsible for carrying out the financial transaction with the payment instrument 2 and with the creation of the electronic receipt content 18 related to the respective financial transaction; a functional block 200 in which a first string of characters, SI, is determined, which will be assigned to the expression of the server-side PI part of the destination e-mail address 24 of the server-application 19 for storing electronic receipts 18; a functional block 300 in which a second character string, S2, is determined, which will be assigned to the expression of the identifier part P2 of the deposit account in the composition of the destination email address 24; a block 400 responsible for sending the electronic message 17 to the destination email 24 resulted by combining the PI server-server part determined in block 200 with the identifier part P2 of the deposit account determined in block 300; a functional block 500 in which the database 22 searches for the existence of a deposit account corresponding to the cardholder identified with the identifier part P2 of the deposit account, and if it does not exist, the server application 19 creates this deposit account at receiving the electronic message 17. Also, in FIG. 3 is represented by 2018 00802

12/10/2018 with a dotted line and a functional block 600 which is responsible for periodically updating and if necessary data from an external memory queried by local application 13 or 15. The operations from steps 101 - 102 of the functional block 100 are executed by the financial application 6, those of step 103 of the functional block 100 as well as those of the functional blocks 200 - 400 and 600 are executed by the local application 13 or 15, and those of the functional block 500 are executed by the server application 19 .

The functional steps 101 - 103 for the block 100 are shown in FIG. 4. In step 101, the financial application 6 reads the data of the payment instrument 2 in order to carry out the financial transaction, among them the PAN number of the payment instrument 2, the name of the holder as well as the expiry date of the payment instrument 2, data that are available in the form electronic in the internal memory 29 of the payment instrument 2 in the case of transactions in the "present card" environment or which are visibly printed on that payment instrument 2, where they can be read and entered manually by the holder of that payment instrument 2 in the case of transactions in medium "absent card". Also in step 101, the operation of authorizing the financial transaction is performed, either offline, directly by the financial application 6, when certain criteria for verifying the risks associated with the payment instrument 2 are met, or online through the communication channel 9 connected to at least one transaction acceptance server 7. In step 102, the financial application 6 generates the characteristic Dl data set of the electronic receipt 18. In step 103, the local application 13 or 15 creates the content of a subject type D2 field, which will serve as a generic identifier of the electronic receipt 18 which will be included in the electronic message 17.

It is known that PAN numbers of payment instruments such as bank cards are created when issuing cards according to a data structure defined by standard 1SO / 1EC 7812-1. The PAN number can have a total length of between 8 and 19 digits and is composed of the following subnets of digits:

- the first 6 digits represent the code lssuer ldentifier Number, abbreviated 11N, of the issuing organization of the respective payment instrument. If the issuing organization is a bank, the IIN code is also known as Bank ldentifier Number, abbreviated BIN - the reference IINfig. 1;

- the following figures up to the penultimate figure of the PAN, including, represent the identifier of the financial account of the card holder in the system of the issuing organization - the CC mark in fig. 1;

- the last digit in the PAN is a check of the integrity of the whole PAN number, according to the Luhn algorithm.

to 2018 00802

12/10/2018 according to the version of the ISO / IEC 7812-1 standard of 2017, the code ΙΓΝ will consist of the first 8 digits of the PAN starting with the year 2022, which will extend the current use of the 6 digit IIN numbers in the form of 100 subdomains. The method according to the invention is applicable in the same way regardless of the length of the IIN code.

The method according to the invention determines the server-side part PI of the server-application 19 by the composite use of data stored in the local memory 14 of the payment terminal 1 or in the local memory 16 of the cash register 4 and of data stored in the memory 29 of the instrument of payment 2 or printed visibly on it, following the functional steps 201 - 205 of the functional block 200 which are represented separately in fig. 5.

In step 201, the local application 13 or 15 finds the value of a primary data CI identifying the payment instrument 2 as the actual PAN number previously read in step 101 and temporarily stored in memory 14 or 16. In step 202, the local application 13 or 15 deducts an IIN code identifying the 3 issuing organization of the payment instrument 2 as the IIN code of the PAN, CI number.

In step 203, the name of the organization 3 issuing the payment instrument 2 is identified on the basis of the IIN code, based on the query of at least one file or other type of data set stored in local memory 14 or 16, in which there is at least one data record containing an attribution of at least one IIN code with an issuing organization name 3 and with a country name in which the issuing organization operates 3. Also at step 203, local application 13 or 15 also identifies the parameters that define some components. different from the IP address-server part by querying from local memory 14 or 16 attributes in relation to the issuing organization 3 or the card organization 11 as well as, optionally, other parameters independent of these two organizations 3 and 11: the Top Level Domain domain which is determined by the country name determined in step 203, the Second Level Domain domain that is determined as belonging to an organization take issuer 3 or another company that offers electronic receipt filing services for the respective IIN code, optionally other sub-domain names of hierarchical levels smaller than the Second Level Domain and which may also have different values for each IIN code or for certain sets of IIN codes, or such as an IP address and application port, or components of a URL such as a service type name (for example, http: // or https: //), a Top Level Domain, at least one subdomain name, one or more local subdirectory names on server 20 of electronic receipts to which the server application 19 is appealable.

In step 204, the local application 13 or 15 combines the address components found in the previous step 203 and thus creates a first string of SI characters in canonical format corresponding to 2018 00802

10/12/2018 to an e-mail address for calling a server application, which is temporarily stored in a local memory location for further processing and assignment.

In step 205, local application 13 or 15 modifies the content of the SI character string resulting in step 204 by extending with a subaddress type subdomain (subdomain or subdirector) determined by at least one additional parameter extracted from local memory 14 or 16, which parameter is independent of the issuing organization 3 and the card organization 11. An example of such a parameter may be an assistant director's name, "electronic-receipts".

In step 206, local application 13 or 15 assigns the value of this first string of SI characters to the expression of the server-side PI part of the destination email address 24.

To avoid the need for a real-time remote query of an IIN code database in order to retrieve the name of the issuing organization 3, the card organization 11 and the country in which the payment instrument 2 was issued, as well as the retrieval the TLD and SLD names to be used, the data sets containing the attribute type names of the issuing organization 3, the name of the card organization 11 and the country name of the issuing organization 3, the names of the fields that must be composed to determine the SI character string to be assigned the server-side part PI of the server-application 19 is updated periodically (for example daily, at the beginning or end of the work shift) and whenever necessary, within the functional block 500 represented dotted in the diagram in fig. 3, through a feature of local application 13 or 15 that updates these data sets from a database external to local application 13 or 15, which may be available on the same server 20 electronic receipts or on another external server and which keeps the information relevant to these file types updated. The information related to the IIN codes issued at national or international level can be updated by the centralized updating service by querying a generic server of type IIN-Lookup.

Following the execution of the first functional mode, the local application 13 or 15 continues with the execution of the operational steps corresponding to the functional block 300, according to the diagram in fig. 6, for establishing the P2 identifier of the deposit account within the server application 19, corresponding to the holder of the payment instrument 2 and the recipient of the electronic receipts 18. For this, the method according to the invention is based on using only locally available data at the time of the transaction in memory. 29 of the payment instrument 2, or printed visibly on it or stored in the local memory 14 of the payment terminal 1 or in the local memory 16 of the cash register 4 or in another memory not shown in the figures shown and to which the local application 13 or 15 can had direct access, without requiring the query of a data set by connecting to a remote data resource and without requiring the use of any specific contact data, of any kind (for example, but not limited to them, email address , phone number, address to 2018 00802

10/12/2018 social network) previously registered in the payment instrument memory 2. The data read locally by the local application 13 or 15 include at least the figures related to the customer code CC from the PAN number, CI, and, optionally other data entered in the the main data set of the banking application stored in memory 29 of the payment instrument 2 or of the ones printed visibly on it, preferably the name C2 of the holder of the payment instrument 2 and the date C3 of the payment instrument 2 expiration, of which at least the name of the holder it is an obvious date also known by the card holder, and in the case of payment instruments 2 such as bank cards, these data CI, C2 and C3 are also inscribed on one side of the payment instrument 2 from where they can be read visually. by the holder of the payment instrument 2.

In step 301, the local application 13 or 15 creates a second string of characters S2 based on at least one primary data CI identifying the payment instrument 2 read in step 101.

In order to create a secure form of the S2 character string to be assigned as an expression of the part corresponding to the P2 identifier of the deposit account in the destination email address 24 and to comply with PC1-DSS rules, the method of the invention includes step 303 in which uses, instead of the PAN number that constitutes the primary CI date for identifying the payment instrument 2, a value processed at least by the subset of client code CC or the whole string that constitutes the PAN number, CI, by means of a secure type function hash, this ensuring that it is not possible to directly determine the initial string of characters S2 knowing only the value of the result of the secure hash function over that initial string of characters S2. In addition, to avoid the possibility of identifying PAN numbers corresponding to secure hash values through a cyber attack that would generate secure hash values for some PAN numbers with randomly created client code for a specific known IIN, the proposed algorithm for a preferred variant for carrying out the method according to the invention for determining the part corresponding to the identifier P2 of the deposit account, it processes the initial string S2 of characters formed by the PAN number, CI, by concatenating to it with a secondary date C2 of the payment instrument 2 read in step 302 and constituted in the preferred variants of realization even by the name of the cardholder as it is visible on the face of the card, but processed by eliminating spaces and other punctuation marks from the composition of the first and last name and by replacing the special diacritical characters with characters allowed by the syntax of the electronic addresses according to the technologies used for the server application 19, so that the new value of the S2 string thus obtained exclusively from alphanumeric characters will be of the form "PAN" | "Name-processed", and then this new value of the S2 character string is passed as date entering a secure hash type function at step 304, the result of which will be a new value that will be reallocated to string S2, with the mention that this is an abstract value of 2018 00802

12/10/2018 from which the initial value of the string of characters S2 from any previous processing stage, respectively the number PAN, CI can no longer be deduced back. Thus, a possible attempt of a possible interceptor of the transmitted e-mail message to determine the PAN number, CI, correlated with that message by searching in a list of the secure hash values corresponding to PAN numbers randomly generated in the field of code 11N from the name message domain would not allow the PAN, CI, real number to be used if the person trying this type of attack would not know the C2 name of the cardholder associated with each PAN for which he tries to calculate secure hash values.

An example of a secure hash algorithm is SHA-1, which, regardless of the input text length, produces a fixed-length hash value of 160 bits. The recommendation for more recent security standards is to use a hash algorithm with even stronger security, for example SHA-2, which has several sub-variants: SHA-224, SHA-256, SHA-384 or SHA-512 with fixed lengths of hash values produced by 224, 256, 384 and 512 bits respectively. When using the SHA-1 function, the result of 160 bits length is presented as a string of 40 hexadecimal characters, in the case of the SHA-256 function the result is presented as a string of 64 hexadecimal characters and so on.

In order to provide a shorter length of representation of the hash value in a format allowed for a URL or e-mail address, the method according to the invention includes in the optional step 305 an operation to transpose the hash result of the PAN number in hexadecimal format with 4-bit symbols in a 5-bit symbol format, such as the Base32 system, which is a 32-character subset of the ASCII character set, consisting of all uppercase letters in the English alphabet, AZ, and 2 digits. -7. The length of a string represented by 5-bit symbols has a length equal to four-fifths of the length of the same string represented by 4-bit symbols. Thus, the coding in Base32 format of the hash value with the SHA-1 algorithm of a card holder code from the PAN number in the Base32 format will have a length of 32 characters, the result with SHA-224 will be represented by a length of 45 characters, the result with SHA-256 will be represented by a length of 52 characters, the result with SHA-384 will be 77 characters, and the result with SHA-512 will have 103 characters.

if it is desired to use secure hash functions considered to be more secure from a cryptographic point of view, the result produced will be longer and the problem may arise that it may exceed the accepted canonical form for the identifier part P2 of the deposit account which must be used in the composition of the destination email address 24. In this situation, a variant of the method according to the invention can be used, which consists of at least two functions of secure hash type, as mentioned in step 302 of fig. 6. Specifically, to 2018 00802

12/10/2018 according to the examples above, the method will first calculate the SHA-512 result of the cardholder code from the PAN number, and then calculate the SHA-1 value of the SHA-512 result, so the compound function will be applied SHA-1 (SHA-512 ("PAN" | "Work-Name")).

further, as illustrated in FIG. 7, the method according to the invention establishes at step 401 of the functional block 400 the complete expression of the destination e-mail 24 as the result of the composition of the PI server-server part determined in step 206 with the identifier part P2 of the deposit account determined in step 303. step 402, the local application 13 or 15 creates the content of the electronic message 17 which includes: the data field Dl which constitutes the content of the electronic receipt 18 having the content created in step 104; a subject-type D2 field optionally created in step 103; a D3 data field that includes the P2 identifier of the deposit account; data fields containing information regarding the characteristic data of the electronic receipt 18 and the payment instrument 2. In step 403 the local application 13 or 15 stores in the local memory 14 or 16 the electronic message 17. In step 404, the local application 13 or 15 verifies the fulfillment at least one logical condition based on which it decides and operates the extraction of the electronic message 17 from the local memory 14 or 16, as well as the transmission of the electronic message 17 to the destination electronic address 24 established in step 401.

Operational step 404 is thus responsible for making the decision whether the electronic message 17 can be sent to the destination email address 24 in real time, at the time of the financial transaction, or if its transmission will be made at a later time, when the little logical condition verified by the local application 13 or 15. This logical condition may be, for example, the existence of an active data connection between the local application 13 or 15 and the server application 19. Thus, the functionality of the method solution according to the invention and in the situations is ensured. wherein the data communication of the local payment terminal 1 or cash register 4 with the electronic receipt server 20 and, possibly, also with the acceptance server 7 or the authorization server 12 would be temporarily interrupted, since if authorization is allowed in offline mode of financial transaction according to risk criteria con listed in the financial application 6 and payment instrument 2, then it will be created in step 402 and temporarily stored in step 404 and electronic receipt 18, and its transmission will be made in step 404 as soon as the data connection is reactivated with server application 19, or as soon as any other logical condition implemented by local application 13 or 15 is met.

The server application 19 receives the electronic message 17 in step 501 and extracts from its header the identifier part P2 of the deposit account, and then checks in the database 22 if there is already a deposit account corresponding to the identifier P2. if that deposit account is not found, the server application 19 creates this deposit account immediately, only on 2018 00802

12/10/2018 P2 identifier basis. Then, the server application 19 stores the contents of the electronic message 17 in data records related to this deposit account in the database 22.

In order to avoid the creation of electronic deposit accounts in the server application 19 as a result of any electronic messages transmitted by other applications or systems outside the authentic local applications 13 or 15, the electronic messages 17 can be optionally encrypted or digitally signed by these local applications 13 or 15 before transmission, and the server application 19 will accept only those electronic messages 17 that can be verified according to the respective encryption or digital signature.

The following is an example embodiment of the method according to the invention for a variant of a server application 19 based on a web service technology in which the destination email address 24 will have the PI server-server part determined at step 206 constituted as a URL of the server. call of the server application 19, and the identifier part P2 of the deposit account determined in step 306 will be inscribed in a label (a data tag) in the header of the content of the electronic message 17. within the block 200 the following functional steps will be taken: for a transaction made with a bank card 2, the local application 13 or 15 finds in step 201 a PAN number, CI, which has, in this example, the first 6 digits 425603 and in step 202 associates this 6-digit string with the variable corresponding to the IIN code. . In step 203, the local application 13 finds in a local data set in the local memory 14 of the payment terminal 1 a record in which this code IIN 425603 appears as issued under the logo of the international card organization 11 "VISA" and corresponds to the issuing bank. 3 with the name "ING BANK, NV", which operates in the country with the name "Romania". Then, the local application 13 identifies the values of the following distinct fields: the name of the service type of the server-application 19 is "https: //", the domain name Top Level Domain is ". Ro" corresponding to the country "Romania" and being assigned to the IIN code 425603 found in a file in local memory 14, the sub-domain name of the Second Level Domain is ". ing" corresponding to the name of the issuing bank "ING BANK, NV" assigned to the IIN code and creates a first string of SI characters with the initial value "https: / /ing.ro/visa/425603 ".

In step 205, we find the name of a third level subdomain to be used as a parameter "customer_services" as well as the name of a first subdirector "/ electronic_receipts" in which the server application 19 can be called, these last two parameters also set. directly local, and the new value of the first SI character string becomes "https://customer-services.ing.ro/visa/425603/electronic-receipts".

In step 206, the local application 13 assigns the completed value of this first string of SI characters to the expression of the IP address-server part: "https://customerservices.ing.ro/visa/425603/electronic-receipts".

to 2018 00802

10/12/2018

In step 301 a second row S2 consisting of the PAN number is obtained. CI of the payment instrument 2. In step 302 we find the name of the holder of the payment instrument 2, which is the secondary date C2 of the payment instrument 2, which will be used subsequently for determining the P2 identifier of the deposit account. In step 303 the string corresponding to the C2 name of the cardholder is modified by eliminating non-alphanumeric characters and by replacing characters containing diacritics and other orthographic characters with corresponding characters without diacritics and then assigning the string S2 the result of concatenating the number PAN, CI, with modified form of C2 cardholder name.

In step 304, the result of a SHA-1 function will be calculated on the result string in step 303 and will produce, according to this hypothetical example, the result 84d2f24498046ce5c7a46alf3e6b9b81aefbdfl) c (having a length of 40 characters) and in step 305 this result will be transposed hexadecimal format in Base32 format, resulting in the updated value of string S2: QTJPEREYARWOLR5ENIPT4243QGXPXXYM (32 characters in length). In step 306 the value of string S2 is assigned to the expression of identifier part P2 of the deposit account.

At step 401, it is determined that the destination email address 24 is made up of the server-side IP address "https://customer-services.ing.ro/visa/425603/electronic-receipts" and the P2 identifier part of the deposit account. "QTJPEREYARWOLR5ENIPT4243QGXPXXYM". In step 402, the electronic message 17 is created in the form of an XML file containing a phage with the content "QTJPEREYARWOLR5ENIPT4243QGXPXXYM" which will be marked and interpreted as the identifier part P2 of the deposit account, as well as a data field. of the type of content itself which will contain the electronic receipt 18. In the same electronic message 17 several data fields can be entered as some of the subject type, indicating the date and time of the transaction, the amount of the transaction, the name of the trader at which the transaction was performed, as well as and data fields with the purpose of segregating the deposit of electronic receipts 18 at the destination, for example a field with the name of the card organization "visa", also found as an attribute of the IIN code and a field with the IIN code of the bank card 2. In step 403 , the electronic message 17 is stored in the local memory 14. In step 404 the local application 13 will check for an online connection with the server application 19, and if so it will extract the electronic message 17 from the local memory 14 and send it to the PI server address with the expression https://customerservices.ing.ro/visa/425603/electronic-receipts; if there is no active local connection with the server application 19, step 404 remains in a loop waiting for the logical condition to reactivate the data connection and will execute as soon as this condition is met.

to 2018 00802

10/12/2018

In step 501, the server application 19 receives the electronic message 17 and extracts the P2 identifier part of the deposit account with the expression "QTJPEREYARWOLR5ENIPT4243QGXPXXYM", and then searches the database 22 for a deposit account with this identifier. If this is the first financial transaction made with this bank card 2 in this system of the server application 19 and if the holder of this card 2 had not previously registered through another mechanism to create a deposit account, then the server application 19 does not find no existing deposit account in database 22 and then create a new deposit account with the identifier P2 "QTJPEREYARWOLR5ENIPT4243QGXPXXYM" on site. In step 502, the server application 19 stores the contents of the electronic message 17 in the deposit account with the identifier P2 "QTJPEREYARWOLR5ENIPT4243QGXPXXYM".

In the case of implementing the method according to the invention with an application-server 19 of the e-mail service, the destination e-mail address 24 will have the part PI server-address constituted as the member on the right side of the character in the form of the complete e-mail address of the e-mail address of destination 24 of the contents of the electronic message 17, and the identifier part P2 of the deposit account determined in step 303 will be constituted as the member to the left of the character of the complete email address of the electronic address 24 of the destination of the electronic message 17. Using as a hypothetical example the same data of bank card 2 and part of the same parameters of local application 13 as in the example presented above, simplifying by eliminating the separate deposit according to the card organization name 11 "visa" and the number IIN 425603, the email address 24 of destination will in this implementation of the method according to the invention had the complete expression your next:

QTJPEREYARWOLR5ENIPT4243QGXPXXYM@electronic_receipts.customer_servic es.ing.ro.

In the case of implementing the method according to the invention with a server application 19 with a proprietary specification, the destination email address 24 will use a PI server-address part and a P2 identifier part of the deposit account determined according to the functional steps in the functional blocks 200 and 300 of fig. 5 and FIG. 6, and at step 401 will establish the destination email address 24 according to the proprietary protocol implemented in this variant of the method.

In connection with a second aspect of the invention, there is presented below a second functional module which is part of the method presented and which is responsible for transmitting and storing electronic tax receipts at the same or at email addresses derived from the email addresses of destination 24. which are also transmitted electronic receipts 18, as well as with the identification and alert of card holders, for example, in case of a win at a draw of 2018 00802

12/10/2018 of a lottery of tax receipts and that is valid for any of the embodiments presented according to the description of the first aspect of the method according to the invention.

In the case of the network scheme of FIG. 1, an electronic copy 30 of the tax receipt, optionally bearing a digital signature of the cash register 4, is transmitted from the cash register 4 to the payment terminal 1 through the ECR-POS interface 5. The application on the payment terminal 1 completes a data field D4 with the content of this electronic fiscal voucher 30 and sends it in the same electronic message 17 or in a separate electronic message to the same electronic address 24 of destination to which the electronic receipt 18 of the payment with the payment instrument 2 determined according to to the first aspect of the invention, or to an electronic address derived from the electronic address 24 of the destination of the electronic receipt 18 by using an algorithm implemented in the local application 13 of the payment terminal 1 or in the local application 15 of the cash register 4. in this variant of embodiment of the method according to the invention, the subject of the electronic message 17 which includes the data field D4 in which the content is electronic tax receipt 30 can be completed with optional commercial transaction identification data, such as date and time of sale and the transaction amount.

The server application 19 for receiving and storing electronic receipts 18 and electronic tax receipts 30 has implemented a mechanism for identifying these electronic documents 18 and 30 through an automatic search based on the calendar date and the total amount of the transaction. Immediately after publishing the results of the draws of a tax voucher lottery, the identification data of the winning tax vouchers are entered in the server application 19 or in another application that can be queried by the server application 19 for the automatic search of the electronic tax vouchers 30 winning among those deposited within the time period eligible for the current draw lottery winnings. if 30 electronic fiscal vouchers are found 30 winners in the database of the server application 19, it will enter a notification in the deposit account in the database 22 corresponding to the identifier P2 of the respective deposit account and, optionally, will send a copy of the same notification and on other channels of contact of the winning holder, based on other contact data declared by him in the enrollment phase for accessing electronic receipts 18.

In connection with a third aspect of the invention, the proposed method provides a mechanism for secure enrollment and subsequent authentication of a cardholder in the server application 19 via a secure interface 23 for enrollment and authentication, in order to view electronic receipts 18 and , if any, the electronic fiscal receipts 30, deposited by the server application 19 in its deposit account internally identified by the P2 identifier of the deposit account. Electronic receipts 18 of payment transactions related to payment instruments 2 and, if 2018 00802

12/10/2018 is active and the functional module of the method according to the invention for the transmission of tax receipts in electronic format, including electronic tax receipts 30, is deposited in a deposit account from the database 22 managed by the server-application 19 starting with the first electronic receipt 18 for the first financial transaction made with a payment instrument 2, even if the holder of the payment instrument 2 does not yet have an access account for viewing the deposit account. The deposit account is automatically created by the server application 19 upon receipt of the first electronic message 17 containing an electronic receipt 18 for that holder of the payment instrument 2, but at that time there is no account yet for the holder to access the electronic receipt 18 if the holder had not created it in advance.

The holder of a payment instrument 2 will be able to obtain remote access to his electronic receipts 18 and to his electronic fiscal receipts 30 after he will first enroll and then authenticate in a secure interface 23 for enrollment and access authentication. through a data network 26. At the first access to the secure interface 23 of registration and authentication, if the holder of payment instrument 2 does not already have an access account, he will be invited to make an account on the spot. In order to identify the payment instrument 2 associated with the electronic receipts deposit account for which access is requested in the server application 19 and to verify the quality of the authentic holder of that payment instrument 2, the enrollment function from the secure interface 23 of enrollment and authentication will require the respective user to perform an operation in which the holder of the payment instrument 2 has to successfully complete an online authentication method, for example in the form of an online transaction with the respective payment instrument 2, possibly a pre-authorization of payment or even a complete payment of a certain amount (which, possibly, can also be canceled automatically by the same enrollment function after authentication), as a sure method of verifying the payment instrument 2 and its holder. By successfully completing this online transaction with the payment instrument 2, the user is considered to have that payment instrument 2 in his possession, knowing or having visual access to the data printed on that payment instrument 2 and implicitly is considered to be his authentic holder. , server application 19 further allowing them to create their access account to the end by choosing by the holder of payment instrument 2 a username and password and by optionally declaring personal data, such as an address alternative email, phone number etc. which will be able to be used for various notifications and then allow him to login to his deposit account from the server application 19 where he will be able to access the list of electronic receipts 18 and electronic tax receipts 30 already accumulated in the deposit account having the P2 identifier of the deposit account corresponding to its payment instrument 2.

Claims (25)

1. Method of automatic transmission of an electronic receipt (18) related to a financial transaction carried out in a "present card" environment or in an "absent card" environment through a payment terminal (1) with a payment instrument (2) which is identified by a unique number linked to a financial account within an issuing organization (3), to at least one server (20) running a computer program (19) for storing electronic receipts, in which an electronic address (24) the destination of the electronic receipt (18) is composed of a part (PI) server-address that identifies the electronic address in a computer network data network (19) for storing electronic receipts on the server (20), and from part (P2) identifier of the deposit account corresponding to the holder of the payment instrument (2) in the computer program (19) for electronic receipt deposit, characterized by the fact that It comprises the following steps: - (102) creating a set (Dl) of data that constitutes the content of the electronic receipt (18) of a transaction made with a payment instrument (2); and - (103) creation of at least one optional subject field (D2) preferably containing at least one transaction identification date for which the electronic receipt is generated (18); and - (201) the direct reading from a memory (29) of the payment instrument (2) or by manual input by the user after the visual reading of the payment instrument (2), of a primary data (CI) of unique identification of the the payment instrument (2) in the system of the organization (3) that issued the payment instrument (2); and - (202) extraction from the primary date (CI) of unique identification of the payment instrument (2) of a code (IIN) identifying the issuing organization (3); and - (203) querying from a local memory (14 or 16) the payment terminal (1) or other equipment (4) connected to that payment terminal (1), based on the said code (IIN) identifying the the issuing organization (3), identifying attributes corresponding to the issuing organization (3) and identifying attributes of the card organization (11) under which the payment instrument (2) was issued, as well as some electronic address components which will be used to compose the server-side part (PI) corresponding to the transactions carried out with cards carrying the identification code (IIN) of the issuing organization (3); and - (204) the composition of said electronic address components determined in the previous step (203) in a first character string (SI) that has a canonical format of 2018 00802 12/10/2018 corresponding to a correct syntax of electronic address for calling the computer program (19) of the electronic receipt server type; and - (206) assigning the contents of the so-called first character string (SI) as the value of the server-side part (PI) of the destination email address (24); and - (301) creating a second character string (S2) with a value processed by a function that has at least one part of the primary date (CI) of unique payment instrument identification (2) as input; and - (306) attributing the contents of the second character string (S2) as the value of the identifier part (P2) of the deposit account from the expression of the destination email address (24); and - (401) attributing the result of the composition of the server-side part (PI) with the identifier part (P2) of the deposit account as the value of the destination email address (24); and - (402) creating an electronic message (17) that includes the data set (Dl) that constitutes the electronic receipt (18), the optional subject field (D2) and at least one field (D3) of the electronic address data that includes at least one of the server-side (PI) or identifier (P2) parts of the deposit account; and - (403) storing the electronic message (17) in a local memory (14.16); and - (404) at the moment of fulfilling a logical condition, after the moment of the financial transaction, extracting the electronic message (17) from the so-called local memory (14.16) and sending the electronic message (17) to the electronic address (24) of destination; and - (502) storing the content of the electronic message (17) in the deposit account identified by the identifier (P2) part of the deposit account. Method according to claim 1, characterized in that, before the step (206) of assigning said first string (SI) to the expression of the server-side part (PI), it further comprises the following step: - (205) modifying said first string (SI) by adding a subroutine determined by at least one additional parameter that is read from said local memory (14.16) and which is independent of the issuing organization (3) and the card organization ( 11). Method according to any one of claims 1 or 2, characterized in that it further comprises the following steps: - (302) the local query of at least one additional date (C2) of the payment instrument (2), distinct from the said primary date (CI) of unique identification of the payment instrument (2); and 2018 00802 10/12/2018 Fri. - (303) applying a processing and compositing function of the so-called secondary data (C2) of the payment instrument (2) together with at least one thin (CC) of the said primary date (CI) of the unique identification of the payment instrument (2) ), in which said sub-string (CC) is a customer code of the holder of the payment instrument (2) in the financial accounts system of the issuing organization (3), and then assigning the result value to the second string (S2) before attribution (306) to the expression of the identifier (P2) part of the deposit account. Method according to claim 3, characterized in that the secondary date (C2) of the payment instrument (2) is automatically read from the memory of the payment instrument (2) or is manually entered by the holder of the payment instrument (2) at the time of execution. transaction; Method according to any one of claims 1 to 4, characterized in that the primary date (CI) of unique identification of the payment instrument (2) is the Primary Account Number of the payment instrument (2), and the said code (IIN) of identification of the issuing organization (3) is the subset of numbers that constitute the Issuer Identifier Number code of the said Primary Account Number. Method according to any one of claims 1-5, characterized in that it further comprises the following step: - (304) the application of at least one function of irreversible modification of the value of said second character string (S2) in an abstract value from which the value of the primary date (CI) of unique identification of the payment instrument (2) cannot be deduced ). Method according to any one of claims 1 to 6, characterized in that it further comprises the following step: - (305) changing the value of said second character string (S2) by applying at least one transpose function to a string of symbols that involves encoding a total length shorter than the length of the initial value of said second string. characters (S2) and compatible with the canonical syntax of the destination email address (24). 8. Method according to any one of claims 1 - 7, characterized in that it further comprises the following step before step (502) of storing the content of the electronic message (17) in the deposit account identified by the identifier (P2) part of the deposit account: - (501) the verification by the computer program (19) of the electronic receipts deposit of the existence of a deposit account uniquely correlated with the expression of the part of the identifier (P2) of the deposit account and, if the said account of 2018 00802 12/10/2018 VI deposit does not already exist, the creation of this deposit account in a unique way correlated with the expression of the identifier (P2) part of the deposit account. Method according to any one of claims 1-8, characterized in that it further comprises the following step: - (600) periodic updating in the local memory (14 or 16) of the data sets containing the field-type attributes of electronic addresses corresponding to the so-called identification codes of the issuing organizations (3). Method according to any one of claims 1-9, characterized in that it further comprises the following step: - the inclusion in the electronic message (17) of a set (D4) of data that constitutes the content of the electronic tax receipt (30) for which the financial transaction with the payment instrument (3) was carried out. The method of claim 10, characterized in that it further comprises the following steps: - updating in the computer program (19) of electronic receipts storage of identification data for the search and identification of electronic tax receipts (30) that meet at least one given logical condition; and - automatic search and identification in a database (22) which has access to the computer program (19) for storing electronic receipts, based on the said identification data, of electronic tax receipts (30) that fulfill at least one given logical condition; and - identification of the payment instrument holders (2) to which the electronic tax receipts (30) belong, which fulfill at least one given logical condition; and - the notification of the card holders to whom the electronic fiscal receipts (30) belong that fulfill at least one logical condition, by an electronic message transmitted to their user account within the computer program (19) for depositing electronic receipts or at other contact details found in the user profile of said holders. Method according to any one of claims 1-11, characterized in that it further comprises the following steps: - Exposure in at least one data network of a secure interface (23) for enrolling and authenticating users to access their deposit accounts within the computer program (19) for storing electronic receipts; and 2018 00802 10/12/2018 \ Ί ^ - retrieval through the secure interface (23) of enrollment and authentication of the user data necessary to create a user account for each user of a payment instrument (2) that wishes to have access to its electronic receipts (18) and the processing of these data by going through an enrollment process that includes identifying the payment instrument (2) for which access to the respective user account is requested; and - following a procedure for enrollment as a user in the computer program (19) for electronic receipt storage (18), which includes a mechanism for verifying the quality of the authentic holder of the payment instrument (2). Method according to any one of claims 1-12, characterized in that it further comprises the following steps: - retrieve and validate through the secure interface (23) the identification and authentication data in order to allow the holders of payment instruments (2) access to the contents of their electronic accounts from the database (22) of the computer program (19) for depositing receipts electronic; - searching the database (22) their contents for electronic receipts (18) or electronic tax receipts (30) based on search criteria regarding some attributes or data contained in these electronic receipts (18) or in these electronic tax receipts (30) and exposing the data found through the secure interface (23) to the user; - Searching the database (22) and exposing via the secure interface (23) to the user the notifications issued by the computer program (19) for the storage of electronic receipts. 14. Client-application computer program (13, 15) for applying the method according to claims 1-13, characterized in that it includes instructions which, when executed by a processor, determine the following operations: - (102) creating a set (Dl) of data that constitutes the content of the electronic receipt (18) related to a transaction made with a payment instrument (2); and - (103) creation of at least one optional subject field (D2) preferably containing at least one transaction identification date for which the electronic receipt is generated (18); and - (201) reading directly from a memory (29) of the payment instrument (2) or from a data field generated by the user manually entering a primary data (CI) for the unique identification of the payment instrument (2) ) in the system of the organization (3) that issued the payment instrument (2); and 2018 00802 10/12/2018 - (202) extraction from the primary date (CI) of unique identification of the payment instrument (2) of a code (IIN) identifying the issuing organization (3); and - (203) querying from a local memory (14 or 16), based on the so-called code (IIN) for identifying the issuing organization (3) of identification attributes corresponding to the issuing organization (3) and for identifying attributes of the organization of cards (11) under the logo to which the payment instrument (2) was issued, as well as some electronic address components; and - (204) the composition of the so-called electronic address components determined in the previous step (203) in a first character string (SI) that has a canonical format corresponding to a correct syntax of the email address of the computer program (19); and - (206) assigning the contents of the so-called first character string (SI) to the expression of the part (PI) server-address from the electronic address (24) of destination; and - (301) creating a second character string (S2) with a value processed by a function that has at least one part of the primary date (CI) of unique payment instrument identification (2) as input; and - (306) attributing the contents of the second character string (S2) as the value of the identifier part (P2) of the deposit account from the expression of the destination email address (24); and - (401) attributing the result of the composition of the server-side part (PI) with the identifier part (P2) of the deposit account as the value of the destination email address (24); and - (402) creating an electronic message (17) that includes the data set (Dl) that constitutes the electronic receipt (18), the optional subject field (D2) and at least one field (D3) of the electronic address data that includes at least one of the server-side (PI) or identifier (P2) parts of the deposit account; and - (403) storing the electronic message (17) in a local memory (14.16); and - (404) at the moment of fulfilling a logical condition, after the moment of the financial transaction, extracting the electronic message (17) from a local memory (14, 16) and sending the electronic message (17) to the electronic address (24) of destination. Computer program (13,15) according to claim 14, characterized in that it also includes instructions which, when executed by a processor, determine the following operations: - (205) modifying said first string (SI) by adding a sub-string determined by at least one additional parameter that is read from a local memory (14,16). to 2018 00802 10/12/2018 Computer program (13, 15) according to any one of claims 14 or 15. characterized in that it also includes instructions which, when executed by a processor, determine the following operations: - (302) the local query of at least one secondary date (C2) of the payment instrument (2), distinct from the said primary date (CI) of unique identification of the payment instrument (2); and - (303) applying a processing and compositing function of the so-called secondary data (C2) of the payment instrument (2) together with at least one thin (CC) of the said primary date (CI) of the unique identification of the payment instrument (2) ) and then assigning the result value to the second character string (S2) before assigning it (306) to the expression of the identifier part (P2) of the deposit account. 17. Computer program (13, 15) according to any one of claims 14 - 16, characterized in that it also includes instructions which, when executed by a processor, determine the following operations: - (304) the application of at least one function of irreversible modification of the value of the second character string (S2) in an abstract value from which the value of the primary date (CI) of unique identification of the payment instrument (2) cannot be deduced . 18. Computer program (13, 15) according to any one of claims 14 - 17, characterized in that it also includes instructions which, when executed by a processor, determine the following operations: - (305) changing the value of said second character string (S2) by applying at least one transpose function to a string of symbols that involves encoding a total length shorter than the length of the initial value of the second string of characters (S2) and compatible with the canonical syntax of the destination email address (24). 19. Computer program (13, 15) according to any one of claims 14-18, characterized in that it also includes instructions which, when executed by a processor, determine the following operations: - (600) periodic updating in a local memory (14 or 16) of the data sets containing the field-type attributes of electronic addresses corresponding to the so-called identification codes of the issuing organizations (3). 20. Computer program (13, 15) according to any one of claims 14 - 19, characterized in that it also includes instructions which, when executed by a processor, determine the following operations: to 2018 00802 10/12/2018 - the inclusion in the electronic message (17) of a set (D4) of data that includes the content of the electronic tax receipt (30) for which the financial transaction with the payment instrument (2) was carried out. 21. Computer program (19) of application-server type of electronic receipt storage transmitted by means of the method according to claims 1-13, characterized in that it includes instructions which, when executed by a processor, determine the following operations: - (502) storing the content of the electronic message (17) in the deposit account identified by the identifier (P2) part of the deposit account. 22. The computer program (19) according to claim 21, characterized in that it includes instructions which, when executed by a processor, determine the following operations: - (501) verifying the existence of a deposit account that is uniquely correlated with the expression of the identifier (P2) part of the deposit account and, if such deposit account does not already exist, the creation of this deposit account correlated accordingly unique with the expression of the identifier (P2) part of the deposit account. Computer program (19) according to any one of claims 21 or 22, characterized in that it also includes instructions which, when executed by a processor, determine the following operations: - updating the identification data for the search and identification of electronic tax certificates (30) that meet at least one given logical condition; and - the automatic search and identification in a database (22) of electronic tax receipts (30) that fulfill at least one given logical condition; and - identification of the electronic deposit accounts of the holders of payment instruments (2) to which the electronic tax receipts (30) belong, which fulfill at least one given logical condition; and - sending electronic notification messages to the electronic deposit accounts and, optionally, to other contact details of the card holders to whom the electronic tax certificates belong (14). 24. Computer program (19) according to any one of claims 21 - 23. characterized in that it also includes instructions which, when executed by a processor, determine the following operations: - Exposure in at least one data network of a secure interface (23) for enrolling and authenticating users; and 2018 00802 10/12/2018 - retrieving through the secure interface (23) and processing the enrollment and authentication data necessary to create a user account for each user of a payment instrument (2) that wishes to have access to its electronic receipts (18), through a process registration which includes the identification of the payment instrument (2) for which access to the respective user account is requested; and - Enrolling as a user in the system the computer program (19) of server type through a mechanism for verifying the quality of authentic holder of the payment instrument (2). 25. Computer program (19) for storing electronic receipts according to any one of claims 21 to 24, characterized in that it also includes instructions which, when executed by a processor, determine the following operations: - retrieve and validate through the secure interface (23) the identification and authentication data in order to allow the holders of payment instruments (2) access to the contents of their electronic accounts from the database (22) of the computer program (19) for depositing receipts electronic; - searching the database (22) of the contents of the electronic receipts (18) or of the electronic fiscal receipts (30) based on search criteria regarding some attributes or data contained in these electronic receipts (18) or in these electronic tax receipts (30) and the exposure to the user of the data found corresponding to his user account; - searching the database (22) and exposing to the user the notifications issued by the computer program (19) for storing electronic receipts.