WO2007048976A2

WO2007048976A2 - Method and device for justifying a monetary transaction

Info

Publication number: WO2007048976A2
Application number: PCT/FR2006/051106
Authority: WO
Inventors: Loïc EONNET; Yves Eonnet
Original assignee: Customer Product Relationship Management
Priority date: 2005-10-26
Filing date: 2006-10-25
Publication date: 2007-05-03
Also published as: FR2892545A1; FR2892545B1; WO2007048976A3

Abstract

The invention concerns a device (1) for justifying a monetary transaction comprising: means (40, 40', 40') for short-range transmission of a data (DM) representing an amount of said transaction, to a personal equipment (2) located proximate said device, said personal equipment (2) being adapted to send said data (DM) to a trusted server (100), via a mobile telecommunication network (R1); means (60) for short-range reception, adapted to receive, via said personal equipment (2), an encrypted message (M4) from the trusted server (100); and means (10) for decrypting said message (M4) and, if required, for extracting from the message (M4) a voucher of a monetary transaction corresponding to the amount.

Description

Method and device for justifying a monetary transaction

Background of the invention

The invention relates to a device and a method for justifying the realization of a monetary transaction.

As explained in detail below, the invention can be advantageously used to issue a monetary transaction proof to a machine adapted to deliver a product to an individual upon receipt of the credential.

The invention can also be used to deliver, for example to a natural person such as a merchant, information in any form whatsoever (for example in the form of a visual, sound or printed message) representative of the fact that a monetary transaction actually took place.

The machines to which the monetary transaction voucher can be provided by a device and a method according to the invention can be constituted by pay and display machines, automatic vending machines (food products, etc.), or any device enabling the merchant to ensure that the transaction has been completed.

Historically, such machines included a coin mechanism in which the individual had to introduce coins to obtain his product. In order to fight against vandalism, coiners of these machines are often replaced by prepaid card readers. The need to purchase such a prepaid card requires the establishment of a complex infrastructure for the merchant and is often perceived as a disadvantage by users. To overcome this problem, it is known machines with a credit card reader allowing the user to make a monetary transaction directly from the machine. These solutions are widely used for petrol dispensers. However, those skilled in the art will understand that such machines must incorporate means of communication with a remote trusted server adapted to validate the transaction before the product is delivered. The installation of these means of communication which in particular requires the cabling of the machine to a telecommunication network can not reasonably be envisaged for machines of the type of parking meters, distributors of goods, or any other type of robot.

Object of the invention

The invention relates to a device for justifying a monetary transaction without installation of specific means of communication. For this purpose and according to a first aspect, the invention relates to a device for justifying a monetary transaction comprising:

means for transmitting, at short range, data representative of a transaction amount, to personal equipment located near the device, said personal equipment being adapted to send the data to a trusted server via a network of mobile telecommunication;

short-range reception means adapted to receive, via the personal equipment, an encrypted message from the trusted server; means for decrypting the message and, if necessary, extracting from the message a proof of a monetary transaction corresponding to the amount.

The personal equipment of the individual may in particular be constituted by a mobile phone adapted to communicate with the trusted server, via a GSM, GPRS or UMTS mobile telecommunications network.

In a first embodiment, the device according to the invention comprises means for delivering this monetary transaction voucher to a machine adapted to deliver a product upon receipt of said voucher.

Those skilled in the art will understand that, very advantageously, it is not necessary for the aforementioned machine (or the robot) to be itself connected to a telecommunications network.

In this first embodiment, the justification device according to the invention is preferably adapted to send to the server of confidence, via personal equipment, a secure message representative of the fact that the product has been delivered.

In a second embodiment, the device according to the invention comprises means for delivering the monetary transaction confirmation document in the form of a message intended for a user, for example a merchant.

The proof of monetary transaction may be interpreted as an acknowledgment of the transaction by the merchant or the aforementioned robot. Advantageously, the device benefits from the means of communication specific to the personal equipment, and its installation does not require cabling operation to the network nor the use of clean wireless communication means.

Those skilled in the art will understand that the notion of "proximity" (and therefore "short range") strongly depends on the constraints of the application in which the invention is used.

It is typically a few centimeters or, at most, a few meters.

Thus, the machine is assured that the delivered product will be recovered by the owner of the aforementioned personal equipment.

In a preferred embodiment of this first variant, the message is received using short-range receiving means of the personal equipment. These short-range reception means may for example be constituted by a microphone adapted to receive an audio message transmitted by a speaker of the personal equipment of the individual.

Preferably, the device according to the invention comprises means for verifying that the personal equipment is in the process of communication on the network before transmitting the aforementioned data. These verification means are for example constituted by means adapted to detect the transmission of personal equipment on the mobile telecommunication network, optionally combined with a photoelectric cell known per se.

Preferably, the device according to the invention comprises internal supply means rechargeable (or replaceable) and sufficient to allow the autonomous use of the device. With this feature, the device according to the invention can be installed easily, and not necessarily next to an electrical outlet.

In this preferred embodiment, the device can therefore be used for example to justify a monetary transaction to a machine installed in an area for a short period, in which there is no provision of power.

In a preferred embodiment, the data representative of a transaction amount is constituted by the amount itself. It can also be constituted by a product code in which case the trusted server is adapted to obtain the amount of the transaction associated with this code.

In a first preferred embodiment, the short-range transmission means consist of a loudspeaker whose transmission power is comparable to the power of the loudspeakers used in mobile phones that comply with the GSM standard.

This power may for example be chosen substantially less than 50 dB.

In this first preferred embodiment, the data transmitted by the loudspeaker (for example in the form of a FSK type code) can be picked up by the microphone of the personal equipment if it is within a short range. , ie within a radius of less than twenty centimeters.

Preferably, the decryption means use a secret key specific to the device.

Preferably, the device according to the invention comprises means adapted to implement an asymmetric encryption algorithm using a private key and a public key to modify the aforementioned secret key. This algorithm may for example be in accordance with the algorithm developed by R.LRîves, A.Shamir and LAdleman and known to those skilled in the art under the name of "RSA".

This feature allows to counter possible fraudulent attacks to obtain the secret key. This feature is particularly advantageous when the justification device according to the invention is free access, in a shopping mall for example. Preferably, the decryption means implement a triple-DES type algorithm.

Preferably, the device according to the invention comprises means for reading a SIM card in which this secret key is stored.

The invention also provides a method for justifying a monetary transaction comprising:

a step of short-range transmission of a datum representative of an amount of said transaction, to personal equipment located close to said device, this personal equipment being adapted to send said datum to a trusted server via a network mobile telecommunication;

a step of receiving at short range, via said personal equipment, an encrypted message from said trusted server; and a step of decrypting said message and, where appropriate;

a step of extracting said message from a proof of a monetary transaction corresponding to said amount.

The features and advantages of the method according to the invention are the same as those of the device mentioned above and will not be recalled here.

According to a preferred implementation, the various steps of the presence attestation process are determined by computer program instructions.

Accordingly, the invention is also directed to a computer program on an information carrier. This program includes instructions adapted to the implementation of the steps of the monetary transaction justification process as mentioned above when this program is executed by a computer.

This program can use any programming language, and be in the form of source code, object code, or intermediate code between source code and object code, such as in a partially compiled form, or in any other form desirable shape.

The invention is also directed to a computer-readable information carrier having instructions for executing the steps of the monetary transaction justification method mentioned above. The information carrier may be any entity or device capable of storing the program. For example, the medium may comprise storage means, such as a ROM, for example a CD ROM or a microelectronic circuit ROM, or a magnetic recording medium, for example a floppy disk or a disk. hard.

On the other hand, the information medium may be a transmissible medium such as an electrical or optical signal, which may be conveyed via an electrical or optical cable, by radio or by other means. The program according to the invention can be downloaded in particular on an Internet type network.

Alternatively, the information carrier may be an integrated circuit in which the program is incorporated, the circuit being adapted to execute or to be used in the execution of the method in question.

Brief description of the drawings

Other features and advantages of the present invention will emerge from the description given below, with reference to the accompanying drawings which illustrate an embodiment having no limiting character. In the figures:

- Figure 1 shows schematically a device for justifying a monetary transaction, according to the invention in an alternative embodiment; FIG. 2 represents, in flowchart form, the main steps of a method for certifying the presence of an individual, according to the invention in a preferred embodiment; and

FIGS. 3 and 4 represent two preferred uses of the device according to the invention.

Detailed description of an embodiment

Figure 1 shows a device 1 to justify a monetary transaction according to the invention.

This device comprises processing means 10, for example a processor, associated with a memory 11 comprising a computer program PG adapted to implement the method of justification according to the invention, the main stages of which are represented in FIG.

In the example described here, it will be considered that the device 1 is connected to a food dispenser 200 210. In a manner known per se, the dispenser 200 comprises a display panel 205 on which are inscribed product names and DM amounts to be paid to obtain these products.

In the preferred embodiment described here, the device 1 comprises means 20 for detecting the presence of personal equipment 2 during communication on a mobile telecommunications network R1.

In the preferred mode described here, the mobile telecommunications network R1 is a GSM type network, and the mobile equipment 2 a telephone adapted to communicate on this network. In practice, the aforementioned detection means 20 may be means for measuring the received power radiated by the mobile phone 2.

These power measurement means can advantageously be combined with a photoelectric cell, so that to detect that the personal equipment 2 is in communication on the network R1, two conditions must be met, namely to detect a transmission power. allowing the personal equipment 2 to communicate on the mobile communication network and a presence detected by the cell. So, when an individual wants to pay to get the product

210, he approaches his personal equipment 2 near the aforementioned presence detection means 20 after having established a communication with a trusted server 100.

The detection of the presence of personal equipment constitutes a step ElO of the justification method according to the invention.

Those skilled in the art will understand that in this embodiment the trusted server 100 comprises means 110 for GSM communication.

In practice, the GSM number of the trusted server 100 may be written on the display panel 205. The step ElO for detecting the presence of the personal equipment 2 is followed by a step E20 during which the device 1 according to the invention transmits, at short range, a datum DM representing the amount of the transaction to the equipment 2. In the preferred embodiment described here, the device 1 according to the invention comprises communication means 41 with the machine 200 to obtain the DM code of this machine, for example when the user selects the product concerned.

These communication means 41 are for example constituted by a conventional serial link known to those skilled in the art.

In the variant embodiment described here, this data item DM is transmitted, at short range, in the form of a message M1 constituted by an FSK code, by a loudspeaker 40 of the device 1 according to the invention.

Preferably, as soon as this code is transmitted, the device 1 according to the invention illuminates in red an electroluminescent diode (LED) 52.

Anyway, the message Ml comprising the data DM is received by the microphone of the personal equipment 2 and is transmitted in a GSM message M2 to the trusted server 100. In the embodiment described here, the server of trust

100 includes means adapted to verify if the owner of the personal equipment 2 is authorized to perform the DM amount transaction. These verification means are known per se and will not be described here. In this example, it will be assumed that the transaction is allowed.

According to the invention, the trusted server 100 constructs a message M3 in which it inserts a representative document JT representative of the fact that the transaction is authorized.

According to the invention, this message M3 is encrypted by the trusted server 100.

In the preferred embodiment described here, this message is encrypted using a triple-DES type algorithm using secret keys stored on one side in the server 100 to encrypt the message and on the other side in the device 1 according to the invention to decrypt it. The GSM message M3 is transmitted by the trusted server 100 to the mobile equipment 2 via the GSM network.

In this preferred embodiment, this message M3 is sent, in the form of a message M4, by the loudspeaker of the personal equipment 2.

This message M4 is received, during a step E30 of the justification method according to the invention, by the justification device 1 which comprises, for this purpose, a microphone 70.

This reception step E30 is followed by a step E40 during which the processing means 10 of the attestation device 1 decrypt the message M4 by using a secret key PK stored in a SIM card 30.

During a step E50, these processing means 10 extract the receipt JT received from the trusted server 100 attesting that the transaction is authorized.

Of course, those skilled in the art will understand that if the transaction is refused, the message M3 contains a refusal indication.

In a preferred embodiment, the processing means 10 verify that the message M4 has been received within a predetermined time counted from the transmission of the data DM by the loudspeaker 40.

If this is the case, the processing means 10 control the lighting of the LED 52 in green, this light being representative of the fact that the transaction was authorized within the predetermined 30 seconds delay preceding the receipt of the message M4 to the step E30. In the preferred embodiment described here, the transaction receipt JT is transmitted, via the communication means 41, to the food distributor 200 during a step E60.

On receipt of this justification, the dispenser 200 delivers the food product 210. In the embodiment described here, the justification device 1 sends, during a step E70, to the trusted server 100, via the personal equipment 2 an acknowledgment, in the form of a secure message, representative of the fact that the product 210 has been delivered.

In the embodiment described here, this message is encrypted by the processing means 10 using the secret key PK stored in the SIM card 30. It is then transmitted to the trusted server, in a manner identical to the message M1 previously described (short-range transmission in the form of an FSK code by the loudspeaker 40 of the device 1 according to the invention, then transmission in a message GSM M2 to the trusted server 100).

In the embodiment of Figure 3, the DM data is transmitted to the mobile equipment 2 as a message M1 by a short-range infrared transmitter 40 '.

When the short-range emission means are constituted by a short-range infrared transmitter 40 ', the presence-indicating device according to the invention can advantageously be placed in a closed enclosure by reflecting mirrors 80, as shown in FIG. Fig.

Those skilled in the art will understand that in this embodiment, the message M1 can be received by an infrared receiver of the personal equipment, since this equipment 2 is placed in this enclosure.

In another embodiment of the invention, the short-range transmission means are constituted by a transmitter 40 "compliant with the Bluetooth (registered trademark) standard, the message Ml being received by a Bluetooth receiver of the personal equipment 2 .

To limit the short range to a controlled distance, the presence attestation device 1 according to the invention can be placed in a Faraday cage 81, in which the personal equipment 2 must necessarily be introduced to receive the message M1.

This use is shown in Figure 4.

In another variant embodiment of the invention, the short-range transmission means are adapted to communicate with an electronic tag incorporated in the personal equipment 2.

Claims

1. Device (1) for justifying a monetary transaction comprising: means (40, 40 ', 40 ") for issuing, at short range, a datum (DM) representative of an amount of said transaction, to a personal equipment (2) located near said device, said personal equipment (2) being adapted to send said data (DM) to a trusted server (100) via a mobile telecommunications network (Rl);

- short-range receiving means (70) adapted to receive via said personal equipment (2) an encrypted message (M4) from said trusted server (100);

means (10) for decrypting said message (M4) and, if necessary, extracting from said message (M4) a proof of a monetary transaction corresponding to said amount.

2. Device (1) of justification according to claim 1, characterized in that it comprises means (41) for delivering said transaction transaction certificate in the form of a message intended for a user.

3. Device (1) of justification according to claim 1 or 2, characterized in that it comprises means (41) for delivering said monetary transaction evidence to a machine adapted to deliver a product upon receipt of said credential.

4. Device (1) of justification according to claim 3, characterized in that it is adapted to send to said trusted server

(100), via said personal equipment (2) a secure message representative of the fact that the product has been delivered.

5. Device according to any one of claims 1 to 4, characterized in that it comprises means (20) for detecting that said personal equipment (2) is in communication with said network (R1) before transmitting said data (DM).

6. Device according to any one of claims 1 to 5, characterized in that it comprises means (10) for selecting said data (DM) from among several data (DM, C2) according to a predetermined context (B1). , B2).

7. Device according to any one of claims 1 to 6, characterized in that said transmission means (40, 40 ', 40 ") at short range are constituted by a speaker (40) whose power of emission is comparable to the loudspeaker power used in GSM-compliant mobile phones.

8. Device according to any one of claims 1 to 7, characterized in that said transmitting means (40, 40 ', 40 ") at short range are constituted by a short-range infrared transmitter (40').

9. Device according to any one of claims 1 to 7, characterized in that said transmitting means (40, 40 ', 40 ") at short range are constituted by a transmitter (40") compliant with the Bluetooth standard (brand Mark).

10. Device according to any one of claims 1 to 7, characterized in that said short range transmission means are adapted to communicate with an electronic tag incorporated in said personal equipment (2).

11. Device according to any one of claims 1 to 10, characterized in that said decryption means use a secret key specific to said device.

12. Device according to claim 11, characterized in that it comprises means adapted to implement an algorithm of asymmetric encryption using a private key and a public key to modify said secret key.

13. Device according to any one of claims 1 to 12, characterized in that said decryption means implement a triple-DES type algorithm.

14. Device according to any one of claims 11 to 13 characterized in that it comprises means for reading a SIM card in which is stored said secret key.

15. Process (1) for justifying a monetary transaction comprising:

a short-range transmission step (E20) of a datum (DM) representative of an amount of said transaction, to personal equipment (2) located near said device, said personal equipment (2) being adapted to sending said data (DM) to a trusted server (100) via a mobile telecommunication network (R1);

- a step (E30) for short-range reception, via said personal equipment (2), of an encrypted message (M4) from said trusted server (100); and

a step (E40) for decrypting said message (M4) and, where appropriate;

a step (E50) for extracting said message (M4) from a proof of a monetary transaction corresponding to said amount.

A computer program (PG) comprising instructions for executing the steps of the method of justifying a monetary transaction according to claim 15 when said program (PG) is executed by a computer.

17. A computer-readable recording medium (11) on which is recorded a computer program (PG) including instructions for performing steps (E10-E40) of the method of justifying a monetary transaction according to the claim 15.

18. Use of the device (1) of justification according to claim 8 in a closed enclosure by reflecting mirrors (80).

19. Use of the justification device (1) according to claim 9 in a Faraday cage (81).