SE518766C2 - Procedure and system for identifying a legal entity - Google Patents

Abstract

The invention relates to a method and a system for identifying a juridical person (80) in order to provide the juridical person (80) access to a provided service. It comprises the retrieval of the CLI-number provided to a telephone device allocated to the juridical person. The CLI-number being part of the phone communication protocol and being retrieved at a service unit telephone device (82) or a clearing unit telephone device (88), respectively, during a phone call connection trial without establishing the communication. This is accomplished through recognition of the CLI-number, whereby the call is inhibited from being announced at the service unit (82) or the clearing unit (88). The service unit (82) communicates the call to a clearing unit (88), which always decides if the received CLI-number has access to the service provided. Hence, making it possible to provide the service if access is established. The method and the system of the invention are used to provide payment transactions, inlet access transactions for facilities etc.

Description

530 766 2 at least at one point in time there is an open connection between the user and the call code requesting unit (CAN) and since both the CLI number and the call code (CAN) are transmitted airborne from the same telephone device, the chance of that signals thus transmitted are undesirably captured larger e fi as the interception of both signals, perhaps transmitted at different frequencies, can nevertheless simply be concentrated on transmissions to and from only one telephone device. Opening a connection also implies a greater cost and a greater utilization of the capacity of the telecommunications network.

U.S. Patent 5,590,197 discloses a cyber wallet in the form of stored and protected accounting information which can be "carried" on a clutter-protected, portable electronic storage medium such as a smart card, or which is stored in the customer's computer (or digital PCMCIA card browser / mosaic, and manufactured for a ktmd so that he can make electronic personal assistant, or similar) together with the software for payments from the wallet owner to a seller at a remote site on the Internet.

The information in the wallet is protected by a public key fil containing general keys to be used for encrypting the payment information in a permit receipt sent by the wallet to the seller and which is then forwarded to the account service provider for decoding, whereby the decryption key is in the form of a private key. and to which the seller and other parties have no access.

The public key preferably includes a plurality of public keys which may be selected by an identifier associated with the key itself but which do not form part thereof so that the account service intermediary may control, by having the seller send an identifier to the wallet, the selection of uncompromised keys. no one except the service provider knows which key is selected. This solution is relatively complicated.

Summary of the described invention The present invention relates to a method and a system for providing access to a service such as a transaction for payment access, a transaction for access to a premises, access to membership, access to a schedule for bonuses or loyal customers, etc.

One aspect of the invention is to solve problems associated with an automatic payment transaction through, for example, a mobile telephone system such as GSM or some other telephone-like communication device, hereinafter referred to as telephone device.

Another aspect of the present invention relates to a door entrance, wherein the door lacks a keypad or some other physical access means from the outside of the room.

Another aspect of the present invention is to have telephone numbers called to determine which service is in demand among a number of services.

These aspects are achieved through a CLI number calling (CLI = Calling Line Identification) when making a call and by not letting the call be received through an answer detection performed by a called party.

A procedure for identifying a legal person to give said legal person access to a service offered is thus established by the present invention.

The procedure includes the search for the CLI numbers assigned to a mobile communication equipment which is used by the said legal person. The CLI number forms part of the telephone communication protocol and is returned to a telephone set in a service unit and a telephone set in a clearing unit, respectively, during an attempt to connect a telephone call without establishing the communication, the call being rejected in the service unit and clearing unit respectively, which are adapted to reject a call. The service unit establishes a communication with a clearing unit that always determines whether the received CLI number has access to the offered service and provides the service if the access is established.

A further identification of the legal person is effected by inputting additional data to the service unit via a further identification unit, which communicates over a channel separate from said communication channel of said mobile. Access to the requested service is established if the clearing unit accepts the CLI number and if the legal entity is identified by the additional identification unit.

In one embodiment of the invention, the service is a payment transaction.

In another embodiment of the present invention, the service is a transaction for filmed in a local. In an execution form, it is included that a called service category depends on the dialed telephone number, ie the service, eg payment or access to a premises, depends on the dialed telephone number.

In a further embodiment, the access to a room does not include any physically accessible locking means from the outside of the room to enter. In another embodiment, the service unit is arranged inside the premises and thus prevents vandalism. The arrangement on the inside prevents a person from noticing the presence of organs to enter the room from the outside of the same in an embodiment of the invention.

In yet another embodiment, the clearing unit checks that the received CLI number has been stored in the database of a connected computer. If so, and after searching for information corresponding to the approximate CL1 numbers, and if the CL1 number is stored in the database of the date and if the corresponding information, the user of this CLI number qualifies for access to said service, the clearing unit sends an access confirmation to the service unit.

Yet another embodiment comprises that the user is notified of a service through his mobile communication means. In the case of an embodiment, a notification is transmitted via an SMS message or the like from the service unit or the clearing unit, which then comprises a GSM means or the like for transmitting the SMS message.

Furthermore, the present invention proposes a system for identifying a legal person in order to give said legal person access to a service offered. It comprises: a mobile communication means having a CLI number, the means being assigned to said person, and said CLI numbers forming part of the telephone communication protocol; a device of the service unit and a device of the clearing unit, which are connected to a database in a computer, which determines whether the received CLI number has access to the offered service, at least one of these comprises a telephone set of the unit, which apparatus shall be called by said person with said mobile communication means; retrieval means in the service unit or clearing unit for retrieving the CLI number during an attempt to connect a telephone call, which is adapted not to establish the connection, whereby a call is rejected in the mobile communication means unit; and said service unit provides the service if access is granted. It further comprises that the service unit comprises a keyboard or a keypad, for inputting further data to the service unit via a further identification unit, which communicates over a channel separate from said communication channel of said mobile communication means; and wherein said service unit allows access to the service if the clearing unit accepts the CLI number and if the legal entity is identified by the additional identification unit.

Other embodiments of the present invention are defined in the appended subclaims, which comprise that the above-mentioned system is capable of constituting embodiments of the method described above.

Brief Description of the Figures Hereinafter, reference is made to the accompanying figures for a better understanding of the present invention with its examples and embodiments, in which: Figure 1 illustrates a block diagram of a licensing system; 10 15 20 25 30 518 766 s Figure 2 illustrates a schematic example of a specific application of a licensing system; Figure 3 illustrates a flow chart of a licensing procedure with respect to payment from a consumer to a seller; Figure 4 illustrates a schematic example of a particular application of a targeted automatic armor system; Figure 5 illustrates a schematic block diagram of an embodiment of the present invention for authorizing and identifying a user to give that user access to a specific service; Figure 6 schematically illustrates the blockchains of another embodiment of the present invention for licensing and identifying a user to give that user access to a specific service; Figure 7 illustrates a schematic block diagram of a further embodiment of the present invention for authorizing and identifying a user to give said user access to a service; Figure 8 schematically illustrates a block diagram of yet another embodiment of the present invention for licensing and identifying a user to give said user access to a specific service; Figure 9 schematically illustrates a block diagram which is based on the embodiments according to Figures 5 to 8 and which represents a specific service in a payment system; and Figure 10 schematically illustrates a block diagram based on the embodiments according to Figures 5 to 8 and explaining a specific service with respect to a system for accessing the premises.

Detailed Description of Preferred Embodiments The accompanying Figures 1 - 4 and the accompanying text for the present invention relate to Swedish patent application 9902768-2 which was filed on July 20, 1999.

Figure 1 shows a licensing system 10. The system 10 comprises at least one source unit 12 and at least one destination unit 14 ,, ..., 141 ,. The system may include, although not necessarily, a communication means 16 for communication between said source unit 12 and said destination units 14 ,, 14 ,,. Said system 10 also comprises a licensing unit 18 and communication means 20 for communication between said licensing unit 18 and said source unit 12 as well as between said said licensing unit 18 and said destination units 14 ,, ..., 14 ,, 10 15 20 25 30 518 766 6 authorization unit 18 comprises a memory means 22, in which validity information about the at least one source unit 12 is stored. Said licensing unit 18 checks the validity information before a decision is made as to whether said source unit is to be licensed to perform said specific task. Said memory means 22 may for instance be in the form of a database 22. Said system 10 also comprises a clearing means 24 which is connected to said licensing unit 18. Said clearing means 24 handles and / or executes each payment transaction between e.g. a consumer and a seller with or without the use of any intermediary.

It should be pointed out here that in this application the term consumer means everyone who pays and the term seller means anyone who receives money in a payment schedule.

Any of the communication means 16, 20 may for instance consist of optical or infrared communication links, an electronic bus system, or mobile communication means.

Approximate mobile communication means may, for example, consist of microwave communication means, radio communication means, or based on the standards NMT, GSM or WCDMA.

Any of said communication means 16, 20 may also be telephone means, or based on the Internet standard.

According to one embodiment, said source unit 12 is intended for a specific consumer and each destination unit 14 ,, ..., 14 ,, is a point of sale unit. Said system 10 also comprises a clearing means 24 which is connected to said memory means 22. In the first embodiment, said validity information comprises the credit capacity of each consumer. Said licensing unit 18 uses the credit capacity of each consumer and payment data received from a point of sale unit 14 ,, ..., 14 ,, as a basis for deciding whether or not to approve the payment. When the immediate payment is approved, the said point of sale 14 ,, ..., 14 ,, issues some kind of proof of purchase to the said seller and / or the said competitor. This proof of purchase can, for example, be a cash receipt.

According to another embodiment, which is based on the previous embodiment, said system 10 also comprises a warning system 26 which is connected to In the second validity information also information on advertised financial benefits for each said memory means 22. the embodiment comprises said consumer. Said licensing unit 18 uses the information on the advertised financial benefits for each consumer and the purchasing data received from a point of sale unit 14 ,, ..., 14 ,, as a basis for making the decision on whether the payment is to be made. approved or not and whether a förm financial benefit has been taken into account in the clearing body.

According to yet another embodiment, each source unit 12 is intended for the user of a specific machine and each destination unit 14 ,, ..., 14 ,, is a single component in a specific machine. Approximate validity information includes the condition of said component and data about each machine user.

Figure 2 shows a special application of a licensing system.

It refers to a licensing procedure in communication schemes where a particular source communicates with a particular entity (destination) that is part of a distributed system. Here follows first a brief explanation of the above mentioned terms.

Communication schedule: This is a special application where a certain communication between source and destination is desired and which requires a certain type of licensing.

Some examples of such distributed systems are: - Electronic parking meters, which are paid for by the driver's mobile phone.

- A machine in which, for example, each individual component of the machine can be remotely controlled by one or more different machine users.

- A remote control system (Internet / telephone / GSM) for electronic equipment in a building or especially in a house (cf. the communication standard bluetooth).

- An electronic payment system.

- A targeted advertising system.

- Components connected by an electronic bus system. z '- Vending machines paid for using the buyer's mobile phone.

The physical information carrier for the communication can be of different types: GSM, WCDAM, microwave communications, infrared communications ...), optical communication links, telephone, all mobile communication systems (NMT, radio, Internet, any kind of electronic (computer) bus system etc.

Figure 3 illustrates a fate chart for a licensing procedure with respect to the payment of a contractor to a seller. The procedure begins in block 40.

Then, at block 42, the procedure continues by said consumer entering, for example using his GSM telephone, a payment identification, for example a specific GSM number, for the seller in question, whereby a licensing unit receives said 10 15 20 25 30 518 766's payment identification for the said salesmen concerned and said consumer identification, in particular the GSM payment number from the consumer's telephone call without opening a telephone connection. ex by retrieving the consumer's GSM number and that The procedure then continues in block 44 by a point of sale unit for said seller sending all payment data to said licensing unit. Then, in block 46, a database in said licensing unit checks the validity information with respect to said consumer and said concerned seller before a decision is made as to whether said license should be granted for payment. There, in block 48, and if said payment authorization has been granted, said point of sale unit issues some kind of proof of purchase to said seller concerned and / or said consumer. In block 50, the procedure ends.

If said payment authorization is not granted, said authorization unit stops the procedure.

Figure 4 gives a schematic example of a particular application of an automatic and targeted advertising procedure in which a consumer 62 takes advantage of a fi financial benefit associated with an advertisement sent to him through the remuneration system 72.

The remonstration system 72 is associated with an electronic payment system 74, for example the payment system described above.

The procedure begins with step 50. Steps 50 and 60 follow one another in time.

At step 50, an advertiser 64 requests the advertising system 72 to send a specific ad message to a specific group of consumers and specifies a financial benefit associated with the ad. In step 52, the database 68 of the remonstration system 72 is used, which, for example, utilizes previous consumer buying habits stored in the electronic payment system's database, in order to de-target the targeted consumer group. The advertising system 72 also logs into its database 68 whose consumers are targeted for the advertising message.

At step 54, the advertising system's computer unit 66 receives the list of target consumers from its database 68.

At step 56, the advertising system 72 sends the specific advertising messages to all target consumers.

At step 58, a target consumer 62 purchases a number of items including one or more items where the consumer receives a remonstrance message. The consumer uses the electronic payment system 74 for the purchase.

During step 60, which forms part of the clearing of the purchase in the electronic payment system 74, the electronic payment system retrieves the information about the discount amount in the advertisement from the advertising system 72 and automatically considers this discount.

A particular embodiment of the system includes a GSM-based payment system, wherein the provider of the advertising system is the same provider as of the electronic system, the database 68 is the same as the memory means 22, and the armon messages are in the form of SMS messages.

In particular, the present invention proposes a system for granting permission and identifying a user in order to give said user access to a service. It is based on the retrieval of the so-called CLI number (clearing number), which is sometimes called A-number (calling party). The CLI number is a number that is included in the telephone communication protocol and can be retrieved by the recipient of a telephone call without having to open the dial-up connection. This refusal to open a telephone connection line takes place by adapting a receiving telephone set such as a modem, telephone, mobile telephone, etc.

The telephone set can be adapted by activating a special switch or by programming the set. The system comprises at least four subsystems consisting of the user, the service unit, the clearing unit and a database in a computer. It may optionally include an additional identification device or additional database in a computer.

A user is any legal entity or technology device that can send a telephone signal via an interface, such as a GSM telephone or equivalent. has access to communication means with the clearing unit, such as a telephone modem. The service unit is the said service unit at least one processing unit and elements that offer a service response to a user. It may also include a keyboard or a keypad for entering additional data such as a PIN code. A place where a service unit can be located can be a store or any other place where a sale or a money transaction takes place. i "The clearing unit comprises at least one processor unit. It can be located in, for example, a bank or other financial institutions.

Said database in the computer and the database in the additional computer include at least information relating to the service offered and to the users who have access to the service. A possible additional identification device may include means for biometric or electronic identification, such as fingerprint identification or PIN code identification.

In one embodiment of the present invention illustrated in Figure 5, the user 80 calls a telephone number corresponding to a telephone number of a modem in the service unit 82.

The service unit 82 retrieves at 84, without establishing a communication, the user's CLI number and rejects the call. The CLI number is then transmitted at 86 to the clearing unit 88 by well known communication means. The clearing unit 88 checks whether the received CLI number is stored in the computer database 90 and if so, it searches at 92 for information corresponding to said CLI numbers. If the CL1 number is stored in the computer database and the corresponding information qualifies the user of this CLI number for access to said service, the clearing unit sends a grain information 94 to the service unit 82 through previously known communication means. The service is then provided to the user through the service unit 82. The clearing unit 88 may optionally send information regarding the service to the user, for example a confirmation of a successfully performed service by communication 96, for example a GSM telephone or the like by sending an SMS message (Short Messages Services) to the user or through a printout if the service unit 82 includes a printer.

Another embodiment of the present invention is illustrated in Figure 6, which embodiment is based on another embodiment illustrated in Figure 5 and which is identical to the embodiment according to Figure 6, except that an additional identification unit 100 has been added. The service is provided only if the service unit 82 receives the access acknowledgment 94 and if the user is identified 102, 104 by the added identification unit 100.

In yet another embodiment illustrated in Figure 7, the clearing unit 14 includes at least one modem. The user 80 calls a telephone number corresponding to the telephone number of the modem in the clearing unit. The clearing unit 88 retrieves, without establishing the communication, the CLI number 106 of the calling device, the clearing unit 88 checking whether the received CLI number is stored in the computer database 90 and if so, it searches for information 92 corresponding to said CLI number. If the CLI honey is stored in the computer database 90 and if the corresponding information qualifies the user of this CL1 number before accessing said service, the clearing unit 88 sends an access acknowledgment 94 to the service unit 82 via said communication means. The requested service is then provided to the user through the service unit 82. The clearing unit may optionally send 96 an information relating to the service to the user, for example a charge for a service performed by a service through a communication means such as a GSM telephone or the like. The service unit can send 98 a printout of a receipt as an option.

Yet another embodiment of the present invention is illustrated in Figure 8, which is based on the embodiments of Figure 7 and is identical to this, except that an additional identification unit 100 has been added. The service is provided only if the service unit 82 receives access information 94 and if the user has been identified 102, 104 by the added identification unit 82.

A further embodiment of the present invention is based on one of the preceding embodiments and is illustrated in Figure 9. In this embodiment, a possible service is described in more detail. The present invention proposes a service regarding a payment from one party, eg the user 80, to another third party 108, eg a seller. In this embodiment, the service unit 82 further comprises means for receiving 110 the amount of money that the user owes the third party 108, for example via a keyboard or via an electronic interface to a contact box. If the access information 94 is provided to the service unit 82 and if, as an option, the user is identified by the added identification unit 108, the service unit 82 transfers the amount of money that the user owes the third party 108 to the clearing unit. The clearing unit 88 stores 114 the amount of money in the computer database 90. The amount of money is then invoiced to the user 80.

Another embodiment of the present invention is based on any of the foregoing embodiments and is illustrated in Figure 10. In this embodiment, a possible service is described in more detail. The present invention proposes a service regarding the access of the user 80 to a room, for example that the present invention provides a key for access to a protected room. An access information 94 is provided to the service unit 82, which sends an unlock signal 116 to the locked door lock 118. Thereafter, the door is unlocked by known electrical or mechanical means and the user 12 has access to the room. The present invention provides increased security over standard physical keys. Firstly, as soon as the user loses his telephone and the corresponding CLI nurrimer, the latter can be removed from the access list to the premises and secondly, the telephone number that the user has to call in to gain access can be kept secret. This means that even if the user loses his telephone, a fraudster can still not gain access to the premises without having to dial the telephone number to be called. Furthermore, no mechanical, electrical or electronic devices are required that provide access to the premises from outside the premises, such as keypads for input codes. According to the present invention, the physical means can be arranged inside the room being entered, which significantly reduces the risk of destruction of the access means. The arrangement on the inside can also prevent a person from noticing a room with alarms.

Another embodiment of the present invention is based on the embodiments according to Figures 5 - 8. In this embodiment, a possible service is described in more detail. The present invention proposes a service for purchasing a ticket, for example for gaining access to a cinema, a museum, a theater, a train, etc. In this embodiment, the telephone number which the user 80 calls refers to the type of ticket. which user wishes to buy, eg which som lm that user 80 would like to see. The clearing unit 88 communicates by communicating with the computer database 90 which contains information about the availability of the ticket that the user wishes to purchase. If the access information 94 is provided to the service unit 82 and if the clearing unit 88 retrieves the information from the computer database 90 that there is at least one ticket left that can be purchased and if, as an option, the user is identified by the added identification unit 100, the clearing unit 88 stores the ticket price. the telephone number called by the user 80 in the computer database 90 in a field corresponding to the returned CLI number. The amount of money is then invoiced to the user 80 and the computer database 90 is updated to the number of tickets left for sale.

It is to be understood here that the above-mentioned means may consist of software means or a combination of software and hardware means which are known per se in the art, but not in the way they are used or proposed by the present invention.

It is to be understood here that the invention is not limited to the illustrated examples of embodiments thereof described above, and that modifications may be made within the scope of the drawings below.

Claims (22)

10 15 20 25 30 518 766 13 Patent claims A procedure for identifying a legal person (80) to ensure that said legal person has access to a service provided, including obtaining the CLI number held by a mobile communications agency assigned to said legal person (80). , wherein the CLI number forms part of the telephone communication protocol and is retrieved in a telephone set of a service unit (82) and of a clearing unit (88), respectively, during an attempt (84) to dry-bind a telephone call, said units (82, 88) are adapted not to establish the communication, the call (84) being rejected in the service unit (82) and in the electrical unit (88), respectively, if the service unit (82) rejects the call which it forwards to the electrical unit (88) which always determines whether a received CLI number has access to the service provided, and thus provides the service if access has been established, characterized in that a further identification of the a legal person is provided by inputting additional data to the service unit (82) via an additional identification unit (100), which communicates over a channel (104) separate from said mobile communication means communication channel (106), thereby establishing access to the requested service, if the electricity unit (88) accepts the CLI number and if the legal entity is identified by the additional identification unit (100). A method according to claim 1, characterized in that the service is a payment transaction. A method according to claim 1, characterized in that the service is a transaction for access to a premises. _ Method according to claims 1 - 3, characterized in that the called service category depends on the telephone number dialed. 5. A method according to claim 3, characterized in that the access to the premises does not include any locking means physically accessible from the outside of the premises to enter the premises. Method according to claims 1 - 5, characterized in that the electrical unit (88) checks whether the received CLI number is stored in a connected database (90) in a computer and if so it searches for (92) information corresponding to said CLI number, and if the CLI number is stored in the database and if the corresponding information qualifies the user (80) of this CLI number for access to said service, the electrical unit (88) sends a confirmation message (94) to the service unit (82) . A method according to claims 1 - 6, characterized in that the user's mobile communication means is notified of a service. 10 15 20 25 30 518 766 14 Method according to claims 1 - 7, characterized in that the additional data entered is a PIN code. Method according to claims 1 - 8, characterized in that the identification unit (100) comprises means for biometric or electronic identification. A method according to claims 1 - 9, characterized in that the identification unit (100) comprises means for fingerprint identification or PIN code identification. Method according to claim 7, characterized in that a notification is transmitted via an SMS message or the like from the service unit or the clearing unit, which thus comprises a GSM means or the like for transmitting the SMS message. A system for identifying a legal person (80) for ensuring that said legal person has access to a service provided, comprising a mobile communication means having a CLI number, the means being assigned to said person (80), and said CLI numbers form part of the telephone communication protocol; a service unit device (82), a clearing device device (88), which are connected to a database in a computer (90) which decides whether the received CLI number has access to the provided service, at least one of which comprises a telephone set in the unit which to be called by said person (80) with said mobile communication means; generation means at the service unit (82) or clearing unit (88) for generating the CLI number during an attempt to establish a telephone call, which means is adapted not to establish the communication, a call being rejected in the unit's telephone apparatus, the system being characterized by: the service unit (82) comprises a keyboard or a keypad, for inputting further data to the service unit (82) via a further identification unit (100), which communicates over a channel (104) separate from said mobile communication means communication channel (l06); and wherein said service unit (82) allows access to the service if the clearing unit (88) accepts the CLI number and if the legal entity is identified by the additional identification unit (100). 13. A system according to claim 12, characterized in that the service is a payment transaction. 14. A system according to claim 12, characterized in that the service is a transaction for access to a premises. 10 15 20 25 518 766 15 15. A system according to claims 12 - 14, characterized in that the category of service called depends on the dialed telephone number. 16. A system according to claim 14, characterized in that access to the premises does not comprise any physically accessible locking means outside the premises for entering the premises. _ 17. l7. System according to claims 12 - 16, characterized in that the clearing unit (88) checks whether the received CLI number has been stored in the adjacent connected computer database (90) and if so, it searches for (92) information corresponding to said CLI nuns, and if the CLI number is stored in the computer database and if the corresponding information qualifies the user (80) of this CLI number for access to said service, the clearing unit (88) sends an access declaration (94) to the service unit (82). A system according to any one of claims 12 to 17, characterized in that a notification of a service is transmitted to the user's mobile communication means. 19. A system according to any one of claims 12 to 18, characterized in that the further entered data is a PIN code. A system according to any one of claims 12 to 19, characterized in that the identification unit (100) comprises means for biometric or electronic identification. A system according to any one of claims 12 to 20, characterized in that the identification unit (100) comprises means for fingerprint identification or PIN code identification. 22. A system according to claim 18, characterized in that a notification is transmitted via an SMS message or the like from the service unit or the clearing unit, which thus comprise a GSM means or the like for transmitting the SMS message.