RU2162249C1 - System for control of conclusion of transactions - Google Patents

Abstract

FIELD: electronic monetary systems, applicable in financial systems of electronic payments on a clearing basis for control of purchase and sale conclusions, for example, in the Internet network. SUBSTANCE: system has buyer's control devices shop control device, authorization means control device, bank control device. In addition to the payment system servicing the clients with the aid of providers, the clients may be serviced with credit cards. EFFECT: enhanced reliability of the system without complication of the structure and observance of service. 5 dwg

Description

 The invention relates to electronic money systems and can be used in financial systems of non-cash electronic payments to control the execution of sales transactions, for example, on the Internet.

 Currently, the Internet has a huge number of virtual stores with all kinds of offers for sale. This allows the consumer to quickly select the necessary goods. However, the terms of payment and receipt of goods significantly complicate and lengthen the process of sale.

 Existing financial systems of non-cash electronic payments provide a high speed of service through the use of electronic communications and high reliability through the use of the achievements of cryptographic science and appropriate special tools.

 In the present invention, an attempt is made to combine the advantages of the two systems and provide quick and reliable support for sales transactions on the open Internet.

 A well-known electronic money system containing company terminals, subscriber terminals, authentication server, authorization unit (application PCT 98/26385, CL G 07 F 19/00, publ. 1998). The known system describes mainly the operation of a server that provides and allows transactions.

 A well-known system of secure paid sales, containing the customer’s servers, store servers, a bank server, a working server, a payment system server (PCT application 98/26386, class G 07 F 19/00, publ. 1998). The known system uses a sophisticated coding system to protect payment transactions for goods and services.

 The objective of the present invention is to develop a transaction management system with a reliable, but rather simple algorithm for verifying that a buyer pays a basket of goods and services.

 The technical result consists in increasing the reliability of the system without complicating the structure and discipline of service.

 The result is achieved in that in a transaction management system comprising customer control devices configured to connect to store management devices, a payment system management device, an authorization server management device, with the possibility of receiving a customer certificate from a payment system (provider), with the possibility the formation of a basket of goods and services, with the possibility of payment according to the buyer’s certificate, with the possibility of requesting an extract from the authorization server transactions and receiving it, store management devices configured to connect to customer control devices, authorization server management device, with the possibility of registration in the authorization server, with the possibility of generating the ordered goods and services, with the possibility of transferring the store name, number and order amount, with the possibility of sending the buyer to the authorization server, with the possibility of providing the ordered goods and services with a positive result at the time of authorization, an authorization server control device configured to connect to customer control devices, store control devices, and a bank control device, with the ability to connect to customer control devices using a secure protocol, receive confidential data (certificate) from the buyer, and preprocess the received data ( certificate control and determination of the provider number) and transfer of processed data (provider number and payment data) to the bank I am authorization, with the possibility of receiving a ban signal of authorization from the bank and the corresponding generation and transmission of a refusal signal with a description of the reason and the formation and transmission of a refusal signal to the store indicating the order number, with the possibility of receiving an authorization permission signal from the bank and the corresponding generation and transmission of a permission signal to the buyer and generating and transmitting a permission signal to the store indicating the order number, with the possibility of receiving a buyer's request for a statement of transactions control of the buyer’s certificate, and with a positive result, with the possibility of sending a request to the bank, with the possibility of receiving a statement of transactions from the bank and transmitting it to the buyer, a bank control device configured to connect to an authorization server control device and a payment system control device , with the ability to control the registration of the store and the provider in the system, control transactions, control the balance on the provider’s account and the buyer's limit, and control the compliance of the alleged operations to established system restrictions and, with negative control results, with the possibility of generating and transmitting an authorization prohibition signal to the authorization server, with positive control results, with the possibility of generating and transmitting an authorization authorization signal to the authorization server and with the ability to transfer funds to the store’s account from the provider's account , with the ability to receive a buyer's request for transactions from the authorization server, generate an extract and transfer the statement to the authorization to the server, the customer’s control devices are additionally configured to pay by credit cards, the authorization server control device is additionally configured to receive credit card parameters via a secure protocol and transfer this data and payment data for authorization to the bank, with the possibility of receiving a refusal signal from the bank authorization and the formation and transmission to the buyer of the refusal signal with a description of the reason and the formation and transmission to the store of the signal indicating the order number of the device your bank management is additionally configured to generate and send an authorization request to the payment system and, if the payment system responds positively, to generate and transmit an authorization authorization signal to the authorization server, and if the payment system responds negatively, to generate and transmit a signal to the authorization server denial of authorization.

 A specific, but not limiting, embodiment of the system structure is shown in FIG. 1-5, where customer control devices 1, store control devices 2, authorization tool control device 3, bank control device 4, inter-system communication device 5, device 1 comprises a system unit 6, a display unit 7, a control panel 8, a forming unit 9 a secure protocol, device 2 comprises a system unit 10, a display unit 11, a control panel 12, a customer redirection unit 13, device 3 comprises a system unit 14, a display unit 15, a control panel 16, a secure formation unit 17 Tokola, customer data conversion unit 18, authorization control unit 19, transaction request reception, processing and transmission unit 20, device 4 includes a system unit 21, a display unit 22, a control panel 23, a store and provider registration control unit 24, a control unit 25 payment options, transaction control and management unit 26, transaction statement preparation unit 27, system units 6, 10, 14, 21 comprise a control and processing unit 28, an input / output unit 29, a memory unit 30. All devices, blocks and nodes of the system are connected via communication buses, i.e. carry out two-way data exchange. To build the system using standard means of computer technology (for example, servers), with standard and necessary additional peripherals.

 The system operates as follows.

 The system can work both with credit cards and with an Internet provider. When working with an Internet provider, the provider issues a digital certificate to the client with a code and password to identify the client in the system and transmits information about the issued certificates to the bank.

 The buyer connects to the store’s Web server via the Internet, forms a basket of goods and services and indicates that payment will be made from the provider’s account. The store forms an order, redirects the buyer to the authorization server and transfers the store code, order number and its amount to the authorization server.

 The authorization server establishes a connection with the customer via a secure protocol and accepts its digital certificate, which determines which provider the customer belongs to. After that, the authorization server sends information to the bank for authorization. The bank checks the availability of the store and the provider in the system, checks the buyer's limits and the balance on the provider's account. Based on the results of the check, a permit or prohibition of the payment is formed. If the result is positive, the bank transfers the funds from the provider’s account to the store’s account and transfers the authorization result to the authorization server. The store sells goods and provides services. If the result is negative, the bank transfers the refusal to make the payment to the authorization server indicating the reason for the refusal. The authorization server sends a refusal to the buyer and the store.

 If necessary, the buyer has the opportunity to request a statement of transactions in the system. To do this, the buyer makes an appropriate request and transmits his code and password to the server using a secure protocol. The authorization server checks the code and password of the buyer. If the result is positive, the device 3 using the blocks 14, 20 generates and transmits the buyer’s request to the bank. Bank using block 27 generates a statement and through block 21 and device 5 transfers the statement to device 3, which transfers it to the buyer.

 In the case of working with cards, the buyer can pay for purchases in online stores registered on the authorization server. At the same time, the buyer, using block 1, connects to the store’s Web server, forms a basket of goods and selects a payment method for credit cards, for example, Visa Master Card, Eurocard, Diners Club, JCB. For this, the buyer forms the address on the remote control 8, displayed in block 7 and connects to the selected store via device 5 through block 5 — device 2. Having selected goods and services, the buyer transmits the card data via a secure protocol generated using block 9 through the device 5 to device 3, where, with the help of block 17, parameters of his credit card are accepted through block 14 (card number, card expiration date, holder’s name in the transcription as indicated on the card - for example, 411100000000158 Visa 02/2001 Ivan lvanov. Property 2 accepts the order through block 10, forms the order using blocks 10-12 and redirects the buyer using blocks 13, 10 to the authorization server, transferring the order number and its amount to it at the same time. Information from the buyer about the credit card is transmitted in a secure form only into device 3 and is not provided to devices 2. Device 3, using blocks 14-16, 18, preprocesses the information received from devices 1, 2, for example, the correctness of filling: the number of digits in the number, the holder’s name, corresponds to e card date store availability, and sends it to the bank.

 The device 4 receives information through block 21. Using blocks 22, 23, 24, 25, it checks whether the operation matches the established system restrictions, namely, using blocks 22, 23, they control the name, address, e-mail, using block 24 - restriction according to store accounts, 25 - lack of blocking on specific cards. Based on the results of the checks, a prohibition or authorization is generated (prohibition in case of blocking the card (for example, fraud), if it does not match the previously entered data, the card number corresponds to the type of card) transactions in the card payment system using block 26. If authorization is prohibited, the device 4 through block 21 and device 5 transfers to device 3 a payment failure. Device 3 receives this information through block 14 and, using block 19, forms a refusal to the buyer with a description of the reason for the refusal, and the store receives a refusal with the order number and transmits this data through block 14 and device 5. When authorization is enabled (no card lock, the data matches previously entered, the card number corresponds to its type, there are no restrictions on the store, etc.), an authorization request is generated through closed banking networks to the card issuing bank of the buyer card or the processing center of the card payment system authorized by b Ankom-issuer (not shown in the drawings).

 If the authorization result received from the card payment system is positive, the device 4, using the block 26, generates and through the block 21 transmits to the authorization server a positive authorization result. Device 3 transmits a positive result to the buyer and a positive result to the store with the order number. The store releases the ordered goods and provides the ordered services. The bank transfers funds to the store account.

 In case of refusal of authorization, the bank transfers the refusal to make payment to the authorization server. Device 3 sends a refusal to the buyer with a description of the reason, and the store refuses with the order number.

 The use of the invention protects the interests of the buyer, since the card data of the buyer, as well as the data of his certificate cannot be used by outsiders (including the store itself, as the link in the transfer of the card parameters is reduced and the transfer is carried out according to a secure protocol), and interests of the store, since the goods are released only after actually double checking by the authorization server and the bank. The algorithm of the system is quite simple.

Claims (1)

 A system for managing transactions, comprising customer control devices configured to connect to store management devices, an authorization server management device, with the ability to obtain a customer certificate from the provider, with the possibility of forming a basket of goods and services, with the possibility of payment according to the customer’s certificate, with the possibility a request in the authorization server for extracting transactions and receiving it, store management devices, configured to access to customer control devices, authorization server management device, with the possibility of registration in the authorization server, with the possibility of generating the ordered goods and services, with the possibility of transferring the store name, order number and amount to the authorization server, with the possibility of sending the buyer to the authorization server, with the possibility providing the ordered goods and services with a positive authorization result, the control device of the authorization server, made with the possibility of connecting to buyer’s control devices, store’s control devices and bank’s control device, with the ability to connect to customer control devices using a secure protocol, receive a certificate from the buyer, control the certificate and determine the provider number and transfer the provider number and payment data to the bank for authorization, with the possibility of receiving an authorization ban signal from the bank and the corresponding generation and transmission of a refusal signal to the buyer with a description of the reason and formation and transfer giving the store a refusal signal indicating the order number, with the possibility of receiving an authorization permission signal from the bank and correspondingly generating and transmitting to the buyer an authorization signal and generating and transmitting the permission signal to the store with the order number, with the possibility of receiving the buyer’s request for statement of transactions, certificate control the buyer and, if the result is positive, with the possibility of sending a request to the bank, with the possibility of receiving a statement of transactions from the bank and transferring it to the buyer y, a bank control device configured to connect an authorization server to the control device, with the ability to control the registration of the store and provider in the system, control transactions, control the balance of the provider’s account and the buyer's limit, and monitor the compliance of the proposed operation with the established system restrictions and, with negative results control, with the ability to generate and transmit an authorization prohibition signal to the authorization server, with positive control results, with possible the possibility of generating and transmitting an authorization permission signal to the authorization server and with the possibility of transferring funds to the store’s account from the provider’s account, with the possibility of receiving a buyer's request for transactions from the authorization server, generating a statement and transmitting the statement to the authorization server, characterized in that the customer’s control devices are made with the ability to pay by credit card, the authorization server control device is configured to receive pairs via a secure protocol meters of credit cards and the transfer of this data and data on payment for authorization to the bank, with the possibility of receiving a refusal signal from the bank for authorization and generating and transmitting a refusal signal to the buyer with a description of the reason and generating and transmitting to the store a signal indicating the order number, the bank control device is made with the possibility of generating and transmitting an authorization request to the payment system and, with a positive response from the payment system, with the possibility of generating and transmitting a signal to the authorization server once Addressing authorization, and if the answer is no payment system to generate and transmit authorization server signal failure in authentication.

Images