RU2397543C2 - Electronic ticket - Google Patents

Abstract

FIELD: information technologies. ^ SUBSTANCE: system comprises central station (21) and mobile terminal (10) of user, besides central station (1) comprises facility for generation of electronic ticket and for sending of electronic ticket to mobile terminal (10), besides electronic ticket contains coded part, and mobile terminal (10) contains facility for acceptance of electronic ticket and for presentation of coded part. Coding may be arranged from central station in process of electronic ticket generation. ^ EFFECT: provides for information protection of electronic tickets. ^ 22 cl, 5 dwg

Description

The present invention relates to a system for providing and controlling an electronic ticket for a user.

The following description first explains what is meant by certain terms that are important in the framework of this document before moving on to the description of the prior art.

The term “ticket” means a certificate that provides the user (or also several users) the right to use a certain service of a transport or transportation company, or the right of access for a user in the sense of an entrance ticket, or a “physical” access right for a user. In the case of such a ticket, it can be, for example, a ticket, a ticket, a ticket for a bus or metro ride, a concert ticket, a ticket to a multi-tier garage, a movie ticket or some other comparable ticket.

The concept of “electronic ticket” (also called “e-ticket”) has come into use since some time, and this often means a special expression for an electronic ticket. To manipulate such an electronic ticket, the latter is stored on an electronic storage medium, for example, on a computer network of an aviation company. During control, for example, when registering a user at the airport, control personnel are provided with on-site information about the electronic ticket online through the computer network.

In the framework of the present description, the term "electronic ticket" means a ticket that is available in electronic form, that is, stored on an electronic medium for storing data, and therefore, as such, in principle, it does not have to be implemented in tangible or "physical" form, for example, also in paper form. This advantage is often expressed briefly by the term “paperless”, and in the following description this designation will be used for simplicity. In order to distinguish between an electronic ticket and a ticket in physical or physical form, that is, in traditional form, in the second case, a brief definition of “ticket in material form” can be used.

An electronic ticket usually contains information about the user of the ticket, such as the username. In addition, the electronic ticket contains information that indicates what this ticket entitles the user to; this information may also be in the form of a special flight indication.

When using an electronic ticket in the general case, two aspects can be distinguished: firstly, the electronic ticket is provided and, secondly, when using the ticket, the user should be able to purposefully control the electronic ticket or the user of this ticket. Below is explained in more detail what should be specifically denoted by these concepts in the present description.

In Fig. 5, both of these aspects of "provision" and "control" are shown schematically. The wide arrow in figure 5 indicates the direction of the process in time. The provision of an electronic ticket is, of course, for its control.

In the provision and control, in the general case, two parties are involved, namely the user of the electronic ticket and the party that issues or issues the electronic ticket, for example, an organization for transport transportation. The issuing party is hereinafter referred to as the “provider”.

The provision begins, as a rule, with the fact that the user requests the desired electronic ticket from the supplier and, as a rule, purchases it through purchase. The supplier issues or generates an electronic ticket for the user. In addition, as a rule, it is provided that the user, after the formation or manufacture of the electronic ticket has been completed, has the opportunity to make sure that the electronic ticket is really issued for him exactly as provided. For this, as a rule, it is provided that the corresponding “ticket information” is transmitted to the user. This transfer of ticket information can be carried out either at the initiative of the provider or at the initiative of the user (in the request and response mode for the user). In the case of a ticket, it can also be provided that the provider, in this case the airline, can send the ticket information to the user, for example, by e-mail, or it can also be provided that the user can access the electronic data store of the provider, for example, via the Internet, which he then finds the necessary information. Of course, a combination of both of these modes is possible.

The formation of an electronic ticket is a key element of the submission procedure and is required in any case. In contrast, the requirement and transmission of ticket information to the user are optional elements of the provision. This practice applies, in the General case, when the ticket is issued by the supplier for the user, for example, without initiative from the user. The transfer of ticket information is also not urgently required, because the ticket is also valid when the user simply trusts that the electronic ticket is issued in accordance with the procedure provided, that is, refuses to transmit ticket information.

After the electronic ticket is provided, control is provided. For example, in the case of a ticket, this control is carried out when the user is registered at the airport. In a generalized wording, for control it is provided that the user, in relation to the supplier’s side, provides data that certifies him as the owner of the (valid) electronic ticket.

A significant advantage of an electronic ticket over a ticket in tangible form is that the user of an electronic ticket cannot, in the usual sense, lose or forget it; an electronic ticket is not sent by mail, so its loss along the way is excluded. In addition, a ticket in material form requires the appropriate use of material, which is not required in electronic form.

However, in any case, along with these advantages, there are also known disadvantages: in the case of control, as a rule, by the supplier, that is, for example, by the airline, the user is required to “material identification”, for example photo ID, credit card, driver’s license, “regular passenger card”, etc. In some cases, a combination of several similar certifications is also required. Due to the requirement of such certification, the advantage of a “paperless” nature for the user becomes relative. When considering the entire system, including the provision and control of an electronic ticket, the benefits of a “paperless” nature for the user are no longer available. When presenting a credit card, the user also opens up some data that is critical from the point of view of ensuring security, which is associated with the corresponding risk, which in some cases is significant.

In this regard, it should be noted that in the example of an “electronic air ticket” case, the user at the airport must already present his identification card, and therefore the mentioned drawback might not be considered significant. In any case, in general, various cases are possible in which the corresponding control of identity cards would be considered disproportionately unacceptable to the user and also too troublesome to carry out control. Examples include ticket control for traveling by tram or metro, passes to the multi-tier garage, entrance tickets to movie theaters, etc.

From the PCT publication WO 2004/019581 A1, a method is known by which, using an independent identification module, it is possible to identify a user of a mobile terminal and, in addition, generate authority to perform actions for that user. To do this, the user requests using the mobile terminal on the identification module the granting of authority to perform the action, the identification module then generates a one-time valid and time-limited action code, which is sent to both the user and the terminal of the participating third party. To complete the action, the user enters a PIN code into a third party terminal or sends a PIN code directly or through an identification module to a third party terminal.

This method can be used to purchase an electronic ticket. In this case, it is provided that the user, together with the “authorization request”, indicates the identification number of the relevant payment terminal at the (mobile or stationary) ticket sales point for “issuing E-tickets”. From the identification module, the action code together with the “application PIN-code” known to the user is sent to the payment terminal. To complete the process, the user enters the application PIN into the payment terminal. After that, an electronic ticket and a receipt are issued as confirmation to the user. The advantage of this method is that the user does not need to provide any third-party information critical from a security point of view, for example, a credit card number.

In general, in the case of control, for example, by the train conductor, it is provided that the user - as already mentioned for the general case of an electronic ticket according to the prior art - must certify himself to the controlling personnel, or present a printed receipt. The advantage of a “paperless” ticket, in this case, is not achieved when considering the entire system of “provision and control”.

The basis of the present invention is the creation of a system for the implementation of the provision and control of electronic tickets, which overcomes the above disadvantages. In particular, the system should be able to be applied in a “paperless” way in the above sense and at the same time be convenient to use.

This task in accordance with the invention is solved by the features of independent clauses. The dependent claims develop the central idea of the invention in a particularly preferred manner.

According to a first aspect of the invention, there is provided a system for implementing the provision and control of an electronic ticket for a user. The specified implementation system includes a central station and a mobile terminal, and the user has the ability to access the mobile terminal. In the case of a mobile terminal, it may be a mobile phone, a personal digital assistant (PDA), a handheld computer, or the like.

The central station contains means for generating an electronic ticket and for sending the electronic ticket to the mobile terminal. For example, for this, a well-known short message service (SMS) of the GSM standard (Global System for Mobile Communications) or another service with comparable properties may be provided. Moreover, the electronic ticket provider can be serviced by the central station for this purpose.

An electronic ticket in accordance with the invention contains an encrypted portion. Encryption can be carried out from the central station when generating an electronic ticket, and the encryption code can, in principle, be freely selected by the operator of the central station.

The mobile terminal comprises means for receiving an electronic ticket and means for presenting the encrypted part. For example, it may be provided that the encrypted portion may be displayed on an indicator, for example, on a display of a mobile terminal. It is also possible that another characteristic visual, or acoustic, or tactile signal, or the like, is generated to represent the encrypted part by the mobile terminal.

Moreover, in the ongoing procedure, it is provided that the decryption code is not known to the user at the time of control.

Thus, using the system corresponding to the invention, an electronic ticket can be provided to the user due to the fact that it is generated at the central station, for example, at the user's request, and transmitted to the user's mobile terminal.

To control an electronic ticket, the encrypted part is displayed using a mobile terminal and is perceived by the controlling personnel or, as appropriate, by the controlling device.

In the case of control by the controlling personnel, in order to carry out the method according to the invention, the controlling personnel are first informed what properties the encrypted part must have in order to indicate the validity of the electronic ticket. For example, for this, it can be provided that the encrypted part is presented on the display of the mobile terminal in the form of a certain sequence of characters. In this case, the controlling personnel in this case knows what signs this sequence of signs must have in order to testify to the validity of the electronic ticket. In the case of automatic control, it is provided that the decryption code from the central station is entered into the corresponding monitoring device.

Thus, the corresponding system provides the ability to conduct a completely “paperless” way of providing and controlling an electronic ticket. In particular, the user does not need to personally certify himself to supervisory personnel. Also, the user does not need to divulge sensitive data from a security point of view, such as a credit card number, etc.

Preferably, the mobile terminal comprises means for displaying ticket information related to the electronic ticket. The user can thus, immediately after receiving the electronic ticket, visually display ticket information related to the electronic ticket, for example, on the indicator of the mobile terminal. This information may be data that allows the user to be informed about what authority an electronic ticket gives him. In the case of a ticket, such information may be, for example, an indication of the initial stop and final stop, in the corresponding case, the time interval of the received authority, etc.

Preferably, the mobile terminal comprises a called monitoring function, the monitoring function including a decryption code for converting the encrypted part to the decrypted part, and the decrypted part using the mobile terminal may be provided on an indicator or display.

At the same time, for monitoring it is provided that the monitoring function is called by the controlling personnel or, in the corresponding case, by the controlling device. Then, the decrypted part is displayed and may indicate the validity of the electronic ticket.

Preferably, it is provided that a code number is required to call the monitoring function, for example in the form of a PIN code. To do this, the user does not know this code number until the moment of control. For monitoring personnel, the code number is provided in advance for monitoring or, if appropriate, the control number is entered into the monitoring device accordingly. This improves reliability or reduces the risk of abuse accordingly. To do this, for example, the controlling function calls the monitoring function and enters the code number, after which the decrypted part is displayed. The decrypted part may at least partially include ticket information.

Preferably, the mobile terminal comprises a memory unit in which an executable program may be stored to call a monitoring function. In addition, it is preferable that the memory unit is physically rigidly connected to the mobile terminal or integrated into the mobile terminal. In addition, it can be provided that the memory unit, if appropriate, can be provided in addition to another memory unit integrated in the SIM card of the mobile terminal. This makes it possible to install a program with which the user, for example, by using the menu control, is provided with a particularly convenient way of requesting an electronic ticket, as well as, if appropriate, performing the following steps of the procedure.

In a preferred way, the program is designed in such a way that it is based on an object-oriented, platform-neutral programming language. For example, it may be based on a programming language such as JAVA or a programming language with comparable properties. For example, a program can be programmed in J2ME (Java 2 Micro Edition).

Preferably, the program is a MIDlet or program with comparable properties. At the same time, the MIDlet stands for the J2ME application for “MIDP devices” (MIDP - profile of a mobile information device). This enables wireless programming of the mobile terminal.

Preferably, the central station and the mobile terminal can be connected through a network, such as the Internet or an intranet. Thus, for example, it is possible that, within the control, the current valid decryption code is transmitted from the central station to the mobile terminal. Alternatively, the encrypted part may be transmitted for decryption to the central station and, after the decryption has been carried out, transmitted by the central station as the decrypted part back to the mobile terminal.

Further, in a preferred manner, the mobile terminal comprises a functional means, for example a WAP function (WAP - Wireless Application Protocol), with which network content, also, for example, web content can be provided wirelessly.

Also, programming a mobile terminal, such as installing a MIDlet, can be done using this network connection. The MIDlet program in this case can be made available to the user in a simple way from the central station.

By using the aforementioned program, monitoring can be integrated into the program. Thus, it may be envisaged that, by controlling the menu, the control function is called up and - after the code number has been entered by the monitoring staff - through the established WAP connection, the actual decryption code is transmitted or decryption, as mentioned above, is performed at the central station.

In a preferred manner, the central station can also change the decryption code at specific time intervals, for example daily. This way you can further reduce the risk of abuse.

Preferably, the central station comprises means for accessing a user account. For this, the central station can be connected, for example, through a network with a data bank of a financial or credit institution, so that through this connection path from the central station, you can access the user's account and initiate a money transfer. This provides an especially easy way to purchase an electronic ticket. An invoice may be, for example, a prepaid invoice, a subsequent invoice, a bank account or a credit card account.

According to another aspect of the invention, there is provided a system for implementing the provision and control of an electronic ticket for a user, comprising a central station, a mobile user terminal, and a reader. In this case, the mobile terminal comprises a transmitter physically rigidly connected to the mobile terminal, which can transmit the device identification number uniquely assigned to the mobile terminal. In addition, the reader is configured to determine the identification number of the device in the near range, for example, at a range of visibility or access. The central station contains means for generating an electronic ticket when establishing a unique correspondence between the electronic ticket and the device identification number.

Using the system according to the invention, an electronic ticket can also be provided to the user, while he, for example, at the request of the user, is formed by the central station. In this case, the central station establishes a uniquely defined correspondence between the electronic ticket and the identification number of the device. To do this, the central station must also have a device identification number. For example, it may be communicated to this central station user.

Then, during control, using the reader, the device identification number is determined and, using the matching information, it is checked whether there is a valid electronic ticket for the received device identification number. For example, it may be provided that the controlling personnel are aware of information on establishing correspondence between the electronic ticket and the device identification number. Supervisory personnel can then, using a reader, determine the device’s identification number and, using established compliance, control whether a valid electronic ticket is available.

In particular, this implementation system is suitable in this case for implementing an automated method, since for monitoring it may be provided that the user simply has to navigate his mobile terminal in front of the reader, which is installed on some “barrier”.

The provisioning system according to the invention thus makes it possible to carry out a completely “paperless” method for providing and controlling an electronic ticket. In particular, the user is not required to authenticate himself personally for control purposes. Also, it is not necessary to jeopardize security-critical data, such as a credit card number, etc.

Preferably, the transmitter is in the form of a transponder. The transponder has the property that in response to receiving radiation from a reader, it responds by transmitting another radiation that carries information about the identification number of the device. The transponder can be performed, for example, as a passive device that operates without its own energy source and can consist of a metal coil and microcircuit, and the device’s identification number is stored in the microcircuit. The radiation that is emitted by the reader and can be received by the transponder may be, for example, radiation of the radio wave range, for example, at a frequency of 13.56 MHz. The technology of transponders, as such, is known and therefore is not described in more detail.

Preferably, the mobile terminal comprises means for receiving and indicating an electronic ticket. This makes it possible, in particular, to immediately check the ticket information by the user in a similar manner as described above for the first aspect.

Preferably, the central station and the mobile terminal are capable of being connected via a network, such as the Internet or an intranet.

Preferably, the mobile terminal comprises a memory unit in which a program can be stored, which is preferably based on an object-oriented, platform-neutral programming language. This allows you to install a program on the mobile terminal that, through the menu control, provides the possibility of particularly convenient handling for requesting and receiving an electronic ticket.

Preferably, the program is based on a programming language such as JAVA or a programming language with comparable properties. Preferably, the program is a MIDlet or program with comparable properties. This makes it possible to provide the program from the central station and transmit it to the mobile terminal so that it is installed in the memory block of the mobile terminal and then present in it as an executable program.

For the method according to the invention, in addition to the above-described embodiments, the following is provided.

The method according to the invention serves to provide and control an electronic ticket for a user. According to a first aspect, it is carried out using a central station and a mobile user terminal. The central station contains means for generating an electronic ticket and for sending the electronic ticket to the user's mobile terminal. The electronic ticket has an encrypted part. The mobile terminal comprises means for receiving an electronic ticket and for presenting the encrypted part.

At the first stage, the central station forms an electronic ticket with an encrypted part.

At the second stage, the generated ticket is transmitted to the mobile terminal.

For control in the next step, the encrypted part of the electronic ticket is displayed through the mobile terminal.

During the control by the control personnel, the control personnel are informed in advance how the encrypted part should be created in order to testify to the validity of the ticket. This information is not communicated to the user prior to monitoring.

In addition, the mobile terminal has a called control function, while the control function contains a decryption code with which the encrypted part of the electronic ticket can be decrypted. In this case, it is preferable for entering the monitoring function to enter a code number, for example, in the form of a PIN code. To carry out the control, the control function is called up and the code number is entered by the controlling personnel or the user himself. At the same time, it can optionally be provided that the code number is not communicated to the user, but is communicated only to supervisory personnel in order to control the electronic ticket.

The encrypted part of the electronic ticket is then converted into the decrypted part and presented on the indicator of the mobile term for controlling personnel. Thus, it becomes possible for supervisory staff to determine whether an electronic ticket is valid.

Preferably, the central station and the mobile terminal are connected during monitoring through a network, such as the Internet. In this case, a valid decryption code for monitoring is sent from the central station to the mobile terminal and is used there for the monitoring function. Alternatively, it may be provided that, through this connection, the encrypted part of the electronic ticket is transmitted to the central station, there it is decrypted and again transmitted to the mobile terminal as an decrypted part.

Preferably, the encryption code is changed by the central station at certain time intervals, for example daily.

Preferably, the user of the mobile terminal before issuing an electronic ticket, that is, in advance, by means of a request message, requests an electronic ticket at the central station.

Preferably, after requesting an electronic ticket, the user pays for the electronic ticket from the central station by transferring funds from the user's account.

Preferably, before requesting an electronic ticket, an executable program, for example, in the form of a MIDlet, installed on a mobile terminal, allows the user to conveniently, for example, by controlling the menu, carry out the steps that must be performed by him to implement the method. The program can also be programmed, for example, to present ticket information and to call the control function. In addition, the program must ensure that the request and purchase of an electronic ticket is carried out in a convenient way, and at the request of the user, the corresponding movement of funds in the account and the transfer of funds are carried out.

Preferably, calling the program requires entering a predetermined program code number, for example, in the form of a PIN code.

In addition, in a preferred manner, a program call requires an activation code that is pre-set by the central station and transmitted to the user. Preferably, the activation code is valid only once and / or limited in time. The activation code can be transmitted to the user, for example, via the Internet.

In addition, it is preferable that at the preparatory stage the user profile is stored in the central station, which, along with the user's personal data, such as name and postal address, also contains a connection to the user's account and the call number of the mobile terminal.

According to a second aspect, a method is provided for providing and controlling an electronic ticket for a user. The method is carried out using a central station, a user’s mobile terminal and a reader, the mobile terminal having a built-in transmitter that can transmit the device identification number of the mobile terminal, which can be determined at a short distance from the reader.

When implementing the method, it is provided that at the first stage the identification number of the device is transmitted to the central station.

At the second stage, the central station, for example, at the request of the user, issues an electronic ticket, in particular, when establishing unambiguous correspondence with the identification number of the device.

In the next step, compliance information is passed to the checkpoint.

In order to carry out control, the control point determines the device identification number for the mobile terminal using the reader and, using the available compliance information, checks whether a valid electronic ticket has been presented.

The preferred way, in addition, the identification number of the device is mapped to the corresponding call number of the mobile terminal, and this information is made available at the central station. When requesting an electronic ticket, the user can then transfer the call number (“his”) of the mobile terminal to the central station. Then the indication of the corresponding device identification number as part of the ticket request is not required. In this case, at the central station, the device’s call number can be unambiguously associated with the device identification number and the issued electronic ticket.

As for the other steps of the method, reference may be made to the corresponding steps of the method according to the first aspect.

Other features, advantages, and properties are explained below using a detailed description of exemplary embodiments with reference to the drawings, in which the following is presented:

Figure 1 - a symbolic representation of the components of the invention of the implementation system and the invention of the procedure for installing a new user profile at the central station,

Figure 2 - process diagram for activating a user account,

Figure 3 is a process diagram according to a first embodiment for controlling an electronic ticket,

4 is a diagram of a process according to a second exemplary embodiment,

5 is a symbolic representation of the main process in the provision and control of an electronic ticket according to the prior art, shown to explain the concepts.

1-3, a first embodiment of a process according to the invention is shown schematically using an implementation system for the provision and control of an electronic ticket according to the invention. In the method according to the invention, in particular, an electronic ticket user and a central station 1 are involved.

As shown in FIG. 1, the system comprises a central station 1, which is used by the electronic ticket provider, but which should not be controlled or operated by the supplier. The central station 1 comprises a server 3 connected to the Internet 2 and a short message service (SMS) center 5, which can send SMS messages. The central station 1 is also connected to a data bank 4 of a financial or credit institution. This connection can be provided, for example, through server 3. In a financial or credit institution, the user has an account, and access to the user's account is possible through the data bank 4. In particular, appropriate transfers of funds are possible in this way. In addition, the central station 1 comprises an internal memory unit, not shown in FIG. 1, in which user data can be stored in the form of a user profile.

In addition, the system comprises a mobile terminal 10 with SMS functionality, for example, a mobile phone, personal digital assistant (PDA), PDA, and the like. The user has access to the mobile terminal 10. Further, for simplicity, it is referred to as the mobile terminal 10 of the user.

The mobile terminal 10, in accordance with the first exemplary embodiment presented here, comprises means for presenting or displaying an electronic ticket, more specifically, information about an electronic ticket. For this, an indicator or a display can serve in a known manner.

In addition, the mobile terminal 10 has an Internet connection, for example, using the WAP function (WAP - Wireless Application Protocol), a standard for providing Web content and other data-oriented services over wireless networks.

In addition, the mobile terminal 10 is programmable. According to the presented exemplary embodiment, the mobile terminal 10 supports for this purpose a programming language of the JAVA family, for example, J2ME (Java 2 Micro Edition) or another programming language with comparable properties. In addition, the mobile terminal 10 comprises a memory unit in which an application programmed in the corresponding language can be stored. Moreover, this memory unit is independent of the SIM card of the mobile terminal 10, which is available in the corresponding case.

A stored program or a stored application may be, for example, a so-called MIDlet program. A similar program or similar application can be downloaded to the mobile terminal 10 via a WAP or Internet connection and stored in the memory block, as a result of which there is a program for the user running on the mobile terminal 10.

In addition, the user has through the personal computer 12 an Internet connection and installed e-mail software.

The system thus provides access to the Internet from the central station 1. In particular, the website of the central station 1 can be placed on the Internet 2 in this way. Server 3 can serve for this. In addition, an Internet connection can be established via Internet 2 with personal computer 12 user. Through this connection, for example, e-mail can be sent to the user. In addition, from the central station 1, using the SMS center 5, an SMS message can be sent to the mobile terminal 10 and an SMS message from the mobile terminal 10 can be received.

An Internet connection can be established from the personal computer 12 of the user to the central station 1. In particular, from the personal computer 12, access to a Web site located on the Internet 2 by the central station 1 is possible. From the mobile terminal 10, the user can send SMS- to the central station 1 message and establish via the WAP-function Internet connection to the central station 1.

In order to carry out the method according to the invention, it is provided that the user is first registered at the central station 1. The registration of the user is only one-time, namely, it is only required before the user first requests an electronic ticket. For subsequent e-ticket requests by this user, the registration step is no longer required. Registration is thus valid for a given user, with a single implementation, for the future.

1, on the lower part of the drawing, the steps of the registration procedure according to the invention are symbolically represented. The wide arrow 20 in FIG. 1 shows the time process of the presented circuit.

As part of the registration by the central station 1, a “user profile” of the user is established. The user profile contains the user's personal data, such as his name and his mailing address. In addition, the user profile contains data related to contacts with the user, namely, the user-specified mobile radio call number, his mobile terminal number 10 and the user's email address through which the user can be contacted using his personal computer 12 via the Internet 2. Finally, the user profile contains information about the user's account, in particular, the corresponding connection to the account, and from the central station you can access this from account, as well as initiate the movement of funds in the account. For this, the above connection of the central station 1 with the data bank 4 of the corresponding financial or credit institution maintaining the account is provided. The bill may be, for example, a credit card bill.

For the registration procedure, it is provided that the user at the first stage 95, on the corresponding website of the central station 1, that is, through the Internet connection, enters the data that is required to set up the user profile.

User profile data is stored on the central station 1 in the provided internal memory unit.

In the next step 96, a request is sent from the user from the central station 1 to the central station 1 via the mobile terminal 10. This request can be made, for example, via the Internet or, for example, by e-mail. Then, from the mobile terminal 10 of the user in accordance with this request at the next step 97, an SMS message is sent to the central station 1.

After receiving the SMS from step 97 from the side of the central station 1, the call number of the mobile terminal 10 is identified and verified (“check”).

For example, at this stage, it may be provided that the call number of this last named SMS message is the same as the call number that was stored as part of step 95 when establishing the user profile. In this case, the check leads to a positive result if there is a coincidence of both of these call numbers. Due to this verification procedure, security is significantly increased, because the user must specify two "addresses" independent of each other in the form of an email address, on the one hand, and a mobile radio call number, on the other hand, in order to "authenticate" himself to the central station . Of course, there are other possibilities for checking the mobile radio call number from the SMS message transmitted in step 97 to the central station. For example, in this case, as an alternative or in addition, a “credibility test” may be provided “only”.

If the test result is positive, then a registration code (REG.CODE) is generated from the side of the central station, which is valid once. In the next step 101, it is transmitted via SMS to the specified mobile radio call number, that is, to the user’s mobile terminal 10. Alternatively or additionally, the registration code may be sent by e-mail to the specified email address of the user.

The registration code is then read by the user and at a subsequent step 103 is re-entered on the website of the central station 1. Thereby, the connection protection is maintained.

Alternatively, it may be provided that the user profile data is entered only after receiving the registration code.

In a subsequent step 104, the user selects a password and a PIN code and enters them again into the website of the central station 1 (the password and PIN code are required for the user to request an electronic ticket later).

With this data, a new user user profile is stored in the internal memory unit of the central station 1. Registration on this ends.

In the next part of the method, which is shown in FIG. 2 as a continuation of the diagram shown in FIG. 1, it is provided that the user’s mobile terminal 10 is equipped with an executable program that allows the later provision and control of an electronic ticket for the user in a particularly convenient manner, for example with using the menu control.

To this end, in the considered exemplary embodiment, it is provided that the user first in step 110 establishes a WAP or Internet connection with the server 3 of the central station 1 and via this connection in step 111 downloads the MIDlet program provided from the central station to his mobile terminal 10. The MIDlet program can represent, for example, a J2ME application for MIDP devices (MIDP - profile of a mobile information device). In this case, the MIDlet program, as noted above, is stored not on the SIM card of the mobile terminal 10, but on an additional memory block of the mobile terminal 10. The installed MIDlet program is, therefore, a program executable on the mobile terminal 10.

The program, hereinafter briefly referred to as MIDlet, serves to provide the user with a convenient way to request electronic tickets through the central station from the supplier. In addition, the MIDlet program serves to ensure that the user can check the data of the electronic ticket, in particular the information about the ticket, for correctness, and during control can enter or present the data of the electronic ticket.

The properties of the MIDlet program are explained in the following steps of the method.

As security components, it is envisaged that the MIDlet requires the entry of the aforementioned PIN code selected during user registration. Thus, the danger of using the MIDlet program for illegal purposes by a person other than the user can also practically be eliminated.

As an additional protection component, it is envisaged that the activation code (ACT.CODE) is required to execute the MIDlet program, which is valid only once and, moreover, is limited in time. This activation code is communicated to the user by the central station at a subsequent step 120, for example, via the Internet, for example, using the secure area via the website of the central station 1. In order to get into the secure area on the website of the central station 1, it may be provided that the user must enter the above password and PIN on the website of the central station 1.

To request an electronic ticket, it is now provided that the user in step 130 calls the MIDlet program on the mobile terminal 10. In this case, the user is requested to enter a time-limited and only once valid activation code and PIN code. When both of these entries are performed correctly in step 140, using the MIDlet program in step 150, a WAP connection is established with the server 3 of the central station 1, a connection with the data bank 4 is established there, and the user account is activated by switching on accordingly. After successful activation, the MIDlet program allows the user at step 160 to request and pay for an electronic ticket by controlling the menu through the MIDlet program.

An e-ticket request includes the data necessary to issue a ticket, for example, in the case of a ticket, an indication of the initial stop and final stop, the period of time during which the ticket must be valid. In the case of an “admission ticket”, we can talk about indicating the place and time of the corresponding presentation, etc.

The electronic ticket is issued by the central station 1 as on the basis of the data indicated during the request and is transmitted to step 180 via a WAP connection or, alternatively, by means of an SMS message to the user’s mobile terminal 10.

The corresponding transfer of funds from the user's account required to purchase an electronic ticket is also carried out from central station 1.

The electronic ticket is then transformed for the user using the MIDlet program into an indication readable or displayed on the display of the mobile terminals 10. At the same time, the electronic ticket contains an unencrypted part that represents the ticket information, that is, the electronic ticket data relevant to the user; in the above example, an indication of the start and end stop, time limits of reality, etc. Thus, the user immediately after receiving the electronic ticket can check this data.

The electronic ticket also contains the encrypted part. The corresponding encryption code is set by the central station 1 and is not known to the user. As a measure to further increase security or reduce the risk of abuse, it may be provided that the encryption code with which the central station 1 partially encrypts the electronic ticket, with certain time intervals, for example daily, changes.

According to the first option (option I), this encrypted part is also displayed. According to the second option (option II) it is not required that the encrypted part is displayed on the display of the mobile terminal 10 at this stage of the method.

When controlling an electronic ticket, in case of option I, the user requests to visually present an electronic ticket on the display of his mobile terminal 10. This requirement may be presented, for example, by controlling personnel. For example, a train conductor requests this from a passenger as a user of a mobile terminal.

The decryption code is communicated to the monitoring personnel in advance from the central station 1. In this way, supervisory personnel can judge whether the electronic ticket presented by the user on the display of his mobile terminal was really issued by central station 1 and is valid.

In option II, it is provided that the mobile terminal contains a called monitoring function, wherein the monitoring function contains a (current valid) decryption code with which the encrypted part of the electronic ticket can be decrypted.

The monitoring function is preferably integrated in the MIDlet program and can be called up by controlling the menu. To call the monitoring function, in particular, a code number is required, for example, a “control code number”, for example, in the form of an additional PIN code, which is known to the controlling personnel for carrying out the control, but not to the user.

The corresponding process is shown schematically in FIG. Also, according to option II, it can be provided that the user calls up the MIDlet program on his mobile terminal 10 at step 301. By controlling the menu, you can then call the control function at 302, after which a request to enter the control code number is generated at 303. After that, the user at step 304 transfers his mobile terminal 10 to the supervisory staff. The latter enters the control code number at step 305 and then at step 306 decrypts the encrypted part using the control function and displays it, so that the control staff can easily determine whether the electronic ticket has been issued by central station 1 and whether it is valid. The decrypted portion may be, for example, at least in part, ticket information.

The control is preferably carried out using the MIDlet program and with a WAP or Internet connection established. In this case, the decryption code can be transmitted from the central station 1 via this connection to the mobile terminal 10, so that it is there for use in decryption. Alternatively, it may be provided that the encrypted part is transmitted to the central station 1, there it is decrypted and then the decrypted part is again transmitted back to the mobile terminal 10. In any case, this ensures the use of the decryption code actually provided from the central station. By means of the above-described measures for changing the decryption code at certain time intervals, the risk of counterfeiting can be practically eliminated.

The proposed method provides an opportunity, both in option I and option II, to implement the provision and control of an electronic ticket, which operates in a completely "paperless" way. Moreover, the method is particularly convenient to use for the user.

According to the second exemplary embodiment, in contrast to the first exemplary embodiment, it is provided that the mobile terminal 10 ′ comprises an integrated transmitter that can transmit a device identification number that is uniquely correlated with the mobile terminal 10 '(hereinafter, for brevity, defined as an identification number).

In the case of a transmitter, it can be, for example, a known transponder, for example a so-called passive transponder, that is, a transmitter without an energy source, for example without a battery or other power source, which consists of a metal coil and a microcircuit. The identification number is stored in the chip.

Using an appropriate reader, this identification number can be received. To do this, the reader emits a certain wavelength, for example, in the range of radio waves (for example, at a frequency of 13.56 MHz), which is received by the transponder. The transponder then responds to the reception of this radiation by emitting an identification number signal. Using a reader, this identification number can be received. Such a transponder is also known as an “intelligent marker” and is a so-called radio frequency identification (RFID) unit. The method based on the use of transponders is itself widely known and therefore is not considered in more detail here.

A similar system with a reader and a transponder can have a range of, for example, up to two meters. The identification number of the mobile terminal may be determined by the reader at short range.

According to the second exemplary embodiment, furthermore, unlike the first exemplary embodiment, it is not necessary that the mobile terminal 10 ′ comprises an indicator or a display or other similar means. However, the indication in this case is also preferred, in particular, as in the first embodiment, for implementing a simple check of ticket information by the user.

The procedure according to the second exemplary embodiment is described in more detail below with reference to FIG. In this case, user registration and activation or inclusion of the account is carried out, as in the first execution example. And the request of the electronic ticket by the user at step 150 is carried out in the same way as in the first embodiment. However, now additionally, for example, at step 160 ', the identification number of the mobile terminal 10' is transmitted to the central station. As an alternative, of course, the transmission of the identification number can also be carried out in another way, for example, in the framework of registration.

In contrast to the first embodiment, when issuing an electronic ticket, the central station 1 now establishes a uniquely defined correspondence between the electronic ticket and the identification number of the mobile terminal 10 '.

As an additional protection measure, it may be provided that the call number of the mobile terminal 10 'is also involved in the establishment of compliance as an additional component.

The conformity established by the central station should be known to the controlling personnel when controlling the electronic ticket or, if appropriate, should be present in the monitoring device. For this, the electronic ticket, together with its identification number, is sent to the control point 200, for example, using the Internet or the intranet of the central station 1. The control point 200 is equipped with an appropriate reader.

Control is carried out at the checkpoint. In this case, the user, in accordance with this second embodiment, is requested to pass his mobile terminal 10 'past the corresponding reader, or to lead the reader past the mobile terminal 10', so that the identification number of the mobile terminal 10 'is determined using the reader. Then, by means of the controlling personnel (or automatically by means of the controlling device), on the basis of the available compliance information, it is checked whether there is an electronic ticket corresponding to the received identification number.

According to a second embodiment, the user is no longer required to present himself to supervisory personnel by presenting the display of his mobile terminal. Granting of rights can be carried out automatically by means of an appropriate reader. Identification number determination can also be carried out in a non-contact manner, in particular wirelessly. For control purposes, with his mobile terminal 10 ', the user approaches the “barrier” in the control point, which wirelessly checks the credential for the corresponding position and the corresponding time and automatically sets, for example, appropriate access, for example, a physical “barrier” for the credential.

The advantages of the invention can be formulated as follows.

The security system enables the "paperless" provision and control of electronic tickets.

As part of the control, no personal identification of the user is required.

The handling is carried out in a particularly user-friendly manner using the menu control.

To install the service program on the mobile terminal, the MIDlet program can be downloaded via the Internet from the central station.

Control is carried out by controlling personnel or a controlling device.

In the central station, a user profile is stored in advance, which can be used for some time.

According to a second embodiment, presentation for monitoring a display of a mobile terminal is not required.

List of Reference Items

1 central station

2 Internet

3 server

4 databank

5 SMS center

10 mobile terminal

12 personal computer

20 indication of the direction of the temporary process

95 data entry for user profile on the web site of the central station

96 request to send an SMS message

97 SMS message

101 transfer registration code

103 entering the registration code on the website of the central station

104 enter password and PIN

110 establishing a WAP connection

111 downloading the MIDlet program to the mobile terminal

120 transmission activation code

130 call MIDlet

140 enter activation code and PIN

150 MIDlet WAP Connection

160 request and payment of electronic ticket

180 forwarding an electronic ticket to a mobile terminal

200 checkpoint

301 MIDlet call

302 call control function

304 request for entering control code number

304 transfer of the mobile terminal to supervisory personnel

305 entering the control code number by supervisory personnel

306 decryption of the encrypted part and presentation

Claims (22)

1. A processing system for providing and controlling an electronic ticket for a user, comprising a control center (1) and a mobile terminal (10) of the user, the control center (1) comprising means for generating an electronic ticket and forwarding the electronic ticket to the mobile terminal (10) ), the electronic ticket contains the encrypted part, and the mobile terminal (10) contains means for receiving the electronic ticket and for presenting the encrypted part, different
a program that is a MIDlet or a program with comparable properties, which is provided by the control center (1) and downloaded to the mobile terminal (10),
moreover, the program is stored not on the SIM card of the mobile terminal (10), but in the additional memory of the mobile terminal (10),
in order to execute the program, it is necessary to enter the PIN selected by the user during the registration process, as well as enter the activation code, which is valid only once and for a limited period of time, and
moreover, the mobile terminal (10) has a call control function containing a decryption code for converting the encrypted part to the decrypted part, while the control function is built into the program. 2. The system according to claim 1, characterized in that the mobile terminal (10) comprises means for indicating ticket information related to the electronic ticket. 3. The system according to claim 1 or 2, characterized in that the mobile terminal (10) comprises means for indicating the decrypted part. 4. The system according to claim 1, characterized in that the code number is required to perform the monitoring function. 5. The system according to claim 1, characterized in that the mobile terminal (10) comprises a memory unit in which an executable program can be stored to call the monitoring function. 6. The system according to claim 5, characterized in that the memory unit is physically rigidly connected to the mobile terminal (10) or integrated into the mobile terminal (10). 7. The system according to claim 5, characterized in that the program is based on an object-oriented, platform-neutral programming language. 8. The system according to claim 5, characterized in that the program is based on a programming language such as JAVA or in a programming language with comparable properties. 9. The system according to claim 1, characterized in that the control center and the mobile terminal (10) can be connected via a network. 10. The system according to claim 9, characterized in that the network is the Internet (2) or an intranet. 11. The system according to claim 1, characterized in that the mobile terminal (10) contains functional means by which network content can be provided wirelessly. 12. The system according to claim 1, characterized in that the mobile terminal (10) contains a WAP function. 13. The system according to claim 1, characterized in that the decryption code is changed by the control center (1). 14. The system according to claim 1, characterized in that the control center (1) comprises means for accessing the user account. 15. The system according to claim 1, characterized in that the control center (1) is connected to the network, and access to the account can be performed through the network. 16. A processing system for providing and controlling an electronic ticket for a user, comprising a control center (1), a mobile terminal (10) of the user and a reader, the mobile terminal (10) comprising a transmitter physically rigidly connected to the mobile terminal (10), moreover, the transmitter can transmit the device identification number, uniquely associated with the mobile terminal (10), the reader is configured locally to register the device identification number, and the control center (1) contains means for generating an electronic ticket when establishing an unambiguous association between the electronic ticket and the device identification number,
the processing system further comprises a program that is a MIDlet or a program with comparable properties, which is provided by the control center (1) and downloaded to the mobile terminal (10),
moreover, the program is stored not on the SIM card of the mobile terminal (10), but in the additional memory of the mobile terminal (10),
in order to execute the program, it is necessary to enter the PIN selected by the user during the registration process, as well as enter the activation code, which is valid only once and for a limited period of time, and
moreover, the mobile terminal (10) has a call control function containing a decryption code for converting the encrypted part to the decrypted part, while the control function is built into the program. 17. The system of clause 16, wherein the transmitter is in the form of a transponder. 18. The system according to item 16 or 17, characterized in that the mobile terminal (10) comprises means for receiving and indicating an electronic ticket. 19. The system according to clause 16, wherein the control center (1) and the mobile terminal (10) have the ability to connect through the network. 20. The system according to claim 19, characterized in that the network is the Internet (2) or an intranet. 21. The system according to p. 16, characterized in that the mobile terminal (10) contains a memory unit in which a program that is based on an object-oriented, platform-neutral programming language can be stored. 22. The system according to item 21, wherein the program is based on a programming language such as JAVA or in a programming language with comparable properties.

Images