WO2008101819A1

WO2008101819A1 - Method for the secured transfer of a monetary flow via a communication network, and corresponding transfer system and software product

Info

Publication number: WO2008101819A1
Application number: PCT/EP2008/051557
Authority: WO
Inventors: Ahmed Djoudi; Mohamed Allou
Original assignee: Ahmed Djoudi; Mohamed Allou
Priority date: 2007-02-09
Filing date: 2008-02-08
Publication date: 2008-08-28
Also published as: FR2912579A1; FR2912579B1

Abstract

The invention relates to a method for the secured transfer of a monetary flow via a communication network from a first bank account of a first user in a first bank (16) to a second bank account of a second user in a second bank (15). The method comprises the following steps: a first transmission by a management device (13) of an information for validating the transfer of said monetary flow to the second user; a second transmission by said second user of said validation information to the first user; a third transmission by said first user of said validation information to the first bank (16); and the transfer of the monetary flow from the first bank (16) to the second bank (15) if each of the first, second and third transmissions have taken place.

Description

Method for secure transfer via a communication network of a cash flow, transfer system and corresponding program product.

1. Field of the invention

The field of the invention is that of secure transfers of cash flows via a communication network, for example the Internet network.

More precisely, the invention applies in particular, but not exclusively, to secure payments in the context of electronic commerce and secure bank-to-bank cash flow transfers.

2. Solutions of the Prior Art Thanks to the rapid development of electronic commerce via the Internet communication network, Internet sales sites have developed multiple online payment methods (also called Internet payment) depending on the type of purchase. performed by the user.

Thus, some e-commerce websites offer the opportunity for buyers to pay for their purchase over the phone. In fact, the buyer calls a special number posted on a page of the website (on which he wants to make his purchase) to be assigned an access code. Once his access code obtained, he can use it to make his purchase (such a code allowing for example access to certain services such as downloading logos, ringtones, music, ...). Thus, according to this method of payment, the purchase is billed on the buyer's telephone bill. At no point in the transaction, is there any transmission on the Internet of the buyer's details.

A variant of this method of payment is to send an instant message using a mobile phone (also called SMS) to the telephone number indicated on the e-commerce site, and to receive in return a new instant message including the corresponding access code.

Thus, although the buyer's bank details are not transmitted on the website or when obtaining the access code, this method of payment by telephone has the disadvantage of not being sufficiently secure. Indeed, an attacker (in possession of a phone that does not belong to him) can use this method of payment without the knowledge of the owner of the phone and engage in fraudulent online purchases. Moreover, such a method of payment is only implemented for payments of a small amount (also called micros payments), and is therefore not applicable to purchases on the Internet of more expensive items such as hifi material. /video.

The e-commerce sites have also set up a credit card payment system for a buyer to pay for his purchases by directly transmitting the details of his credit card to the e-commerce site. Such a method of payment requires securing the bank transaction carried out on the Internet. Such security is based in particular on four conditions: - the authenticity of the parties: it is necessary to ensure the identity of the buyer (still called customer) and the e-commerce site (also called e-merchant site) in order to avoid any fraudulent use of the bank details of a payment card whether by a buyer or by an e-merchant site;

- the confidentiality of bank data: it is necessary to make the data confidential (credit card numbers, due date, security code, ...) and unreadable unauthorized third parties. Such confidentiality is generally obtained by using for example a secure file transfer communication protocol (for example HTTPS (for "HyperText Transfer Protocol Secure") according to the SSL encryption protocol (for "Secure Socket Layer"). at 128 bits); - the integrity of the bank data: it must be ensured that the confidential data transmitted have not been accidentally or fraudulently altered during transmission;

- the archiving of bank data: it must be ensured that the confidential data are stored and stored securely in a protected place in order to prevent any fraudulent use and any accidental modification.

However, despite the precautions and security measures established by online commerce sites, a disadvantage of this technique of the prior art is that there are still many fraudulent uses of bank details of customers of these sites. online commerce, which were intercepted (or hacked) when transmitted over the Internet. Thus, to mitigate the piracy of banking data and their fraudulent use, a buyer can today call on a third party operator providing a server (also called technical platform). The buyer provides this third party operator (and no longer directly to the e-merchant site) its bank details (card numbers, security code, due date, ...) that it collects and stores securely. Thus, when a buyer makes a purchase on an e-commerce site, he uses this third-party operator (to whom he has previously provided his bank details) who then takes charge of the request for payment authorization of the purchase. with the buyer's bank. Such a request for payment authorization is renewed for each new purchase by the buyer.

Also, this indirect online payment method (use of a third party operator) implements a single transmission of bank details (from the buyer to the server of the third party operator, and no longer to the e-merchant site). at the time of the subscription thus reducing the risk of piracy. However, a disadvantage of this technique of the prior art is that the communication of bank details via the Internet network, even once, does not in any way reduce the risk of hacking or accidental or deliberate alteration of bank details when they occur. transit from the buyer to the server of the third-party operator. Thus this type of payment poses security problems. Furthermore, another disadvantage of this technique of the prior art is that there are still risks of hacking the server of the third party operator where the bank details of the buyer are stored.

In addition, the implementation of an inter-bank transfer (that is to say the transfer of money from a first bank account domiciled in a first bank to a second bank account domiciled in a second bank) is currently complex.

Indeed, if the customer A of a bank A wishes to benefit from a bank transfer from a customer B of a bank B, the customer A provides the customer B with his international account number IBAN as well as the amount transfer.

Once this information has been received, the customer B can, for example, issue a transfer order to his bank B (in which the information of the customer A is summarized as well as the amount of the transfer) and confirm it to his bank B to validate the order. transfer. When the customer B can not bring the confirmation of his transfer order directly with the counter of his bank (for example by what it is on the move), it is in the obligation to send this written confirmation to his bank by mail which lengthens all the time of execution of the transfer. Once the confirmation of the transfer order received by the bank B, the transfer is definitively made upon acceptance by the customer A (the absence of protest on his part, after receipt of a credit notice or his raised, suffice to presume this acceptance).

Thus, besides the problem of the complexity of implementation and the fact that the time from the transfer request to its execution can be important in some cases (for example in the aforementioned case), another disadvantage of this technique of the prior art relates to the security problem at the time of issuing and confirming a transfer order. Indeed, nothing prevents a malicious person (knowing the bank details of the customer of a bank) to counterfeit or to imitate a transfer order (as well as its confirmation) of the account of this customer to a bank account recipient ( his, that of an ecommerce site, ...). 3. Objectives of the invention

The invention particularly aims to overcome these disadvantages of the prior art. More specifically, an objective of the invention, in at least one of its embodiments, is to provide a cash flow transfer technique over a communication network such as the Internet which is simpler and safer than conventional techniques. .

Another object of the invention, in at least one of its embodiments, is to implement such a technique that allows for a secure payment on the Internet without having to transmit its bank details.

Another objective of the invention, in at least one of its embodiments, is to implement such a technique which makes it possible to avoid the storage of bank details on the servers implemented during a payment on the Internet. Another objective of the invention, in at least one of its embodiments, is to implement such a technique that makes it possible to carry out a transfer of a first bank account domiciled in a first bank to a second bank account domiciled in a second bank that is simpler and safer to implement than conventional techniques.

The invention, in at least one of its embodiments, still aims to implement such a technique that does not require adaptation of the operation of conventional banks.

The invention, in at least one of its embodiments, still aims to implement such a technique that is simple and inexpensive.

4. DISCLOSURE OF THE INVENTION In accordance with a particular embodiment, the invention relates to a method of secure transfer via a communication network of a cash flow from a first bank account of a first user to a first bank. to a second bank account of a second user in a second bank

According to the invention, such a method comprises the following steps: first transmission, by a management device, of validation information of the transfer of said cash flow to the second user; second transmission by said second user of said validation information to the first user; third transmission by said first user of said validation information to the first bank; transfer of money flow from the first bank to the second bank if each of the first, second and third transmissions has taken place.

The general principle of the invention relies on the communication not of bank coordinates in order to implement the transfer of a monetary flow via a communication network, for example of the Internet type, but rather of a validation information which does not present high confidentiality.

Thus, the invention makes it possible to provide a cash flow transfer technique over a communication network such as the Internet which is simpler and safer than conventional techniques. Furthermore, the implementation of the invention does not require adaptation of the operation of conventional banks. A management device may for example serve as an interface between the bank of the first user and the second user.

Preferably, the method also comprises a fourth transmission step, by the management device, of the validation information to the first user simultaneously or after the second transmission (in redundancy with the second transmission).

Preferably, the method comprises a step of transmission, by the first bank to the management device, of information indicating that the cash flow has been transferred to the second bank, said transfer information successfully. Preferably, the method comprises a step of transmitting, by the management device to the second user and / or the first user, the transfer information successfully.

Advantageously, the secure transfer method also comprises a step of obtaining, by the first bank, at least one piece of information representing the amount of the cash flow and at least one piece of information representative of the second account in order to be able to implement said transfer stage.

Thus, for example, the first bank establishes a connection with the management device via a connection according to a standardized banking protocol (for example the CBSA or CBPR banking encryption protocols on X25) in order to collect certain information relating to the control of the first user (for example the order number, the total amount of the order, the account number of the second user,

Preferably, the method also comprises at least one of the following steps: - checking that the amount of cash flow is available on the first account; verification that an opposition has not been made to the first account. According to a first embodiment of the invention, the secure transfer method is a method of secure payment of a product and / or service by the first user, said buyer user, the second user, said user seller, said buyer user and said selling user implementing an e-commerce transaction on the communication network for the sale of said product and / or service, said method comprising the preliminary step of selecting said product and / or service by the purchasing user by means of an interface of a vendor server of the selling user.

Thus, the transfer method according to the invention makes it possible to make a secure payment on the Internet without having to transmit its bank details. In fact, buying users no longer need to transmit their bank details over the Internet.

Advantageously, the secure transfer method also comprises a prior step of transmission, by the user selling to the management device, of at least one piece of information representative of said product and / or service.

Thus, for example, the selling user sends at least one information relating to the order of the purchasing user, for example the references of the different items ordered, the unit price of each item, the number of items ordered. , the total amount of the order, the type of currency used. The transmission of all this information can be achieved through a manager software installed on the server of the user's website seller. Transmission can be via an HTTPS link.

According to an advantageous characteristic of the first embodiment of the invention, the secure transfer method also comprises the following steps: taking said amount from the first account; - temporary storage of said amount in the first bank; checking a condition before implementing said step of transferring money flow from the first bank to the second bank.

Thus, for example, the amount of the order of the selling user is debited from the account of the first user and blocked within the first bank. The unlocking or not of the sum blocked within the first bank may be subject to special conditions that ensure in particular the shipment of the order to the buyer user.

Advantageously, said condition is at least one of the conditions belonging to the group comprising the following conditions: a predetermined delay between the third transmission and a supply of the product and / or service to the first user has not elapsed; a predetermined delay between the second transmission and the third transmission has not elapsed; the first user did not cancel said transaction; the product and / or service is available in stock. Thus, for example, if after seven days after the third transmission (which corresponds to a confirmation of the transfer by the first user), the product and / or service has still not been received by the first user, then the transfer cash flow is not implemented.

According to another example, if after ten days after the second transmission, the first user has still not implemented the third transmission, then the transfer is not implemented.

According to yet another example, if the first user has made a request to cancel the transaction within ten days of the second transmission, then the transfer is not implemented. Preferably, the method comprises a step of transmitting, by the second user to the management device, information indicating that the product and / or service has been provided to the first user, called the provisioning information, and a transmission step, by the manager device to the bank of the first user, supply information. According to an advantageous implementation of the first embodiment of the invention, the third transmission, by said first user, of said validation information to the first bank is implemented by means of an automatic ticket machine belonging to said first bank.

Thus, the transfer method according to the invention is compatible with the operation of conventional banks.

Advantageously, the third transmission, by said first user, of said validation information to the first bank is implemented by means of a validation terminal belonging to said first bank.

The validation terminal may for example be a payment terminal including a display screen, a keyboard and a credit card reader, so that the first user can confirm his payment. Advantageously, the third transmission, by said first user, of said validation information to the first bank comprises the following steps: transmission, by the first user to the management device, of an electronic message comprising said validation-transmission information by the manager device to the first bank, said validation information.

For example, the e-mail message is a text message sent by a mobile phone or an e-mail.

Preferably, this third transmission can be performed only if the first user has requested the activation of a corresponding option.

According to a second embodiment of the invention, said secure transfer method being a secure bank transfer method of the cash flow from the first bank account to the second bank account, the validation information comprises at least one identification information. the second bank account and at least one piece of information representative of the amount of cash flow.

Thus, the transfer method according to the invention makes it possible to transfer from a first bank account domiciled in a first bank to a second bank account domiciled in a second bank that is simpler and more secure to implement than the techniques. classics. It is simpler for example because from the point of view of the second user, it is no longer necessary to send written mail to confirm the transfer order.

Advantageously, the secure transfer method comprises a step of storing at least one piece of information representative of a transfer of a cash flow between the first bank and the second bank. Thus, this information can be transmitted (in particular by means of encryption), for example daily, to the second bank.

Moreover, the second user can consult (for example by means of a secure connection and provided that he has previously authenticated himself to the management device) this information. According to an advantageous characteristic of the second embodiment of the invention, the communication network is the Internet network. Of course, the communication network may be any other network such as, for example, a LAN type network (for "Local Area Network") or a metropolitan network.

Advantageously, at least some of said information is exchanged in encrypted form.

Thus, for example: the exchanges between the management device and the first bank are performed in encrypted form using the CBSA or CBPR banking encryption protocol on

X25; the exchanges between the management device and the second user are performed in encrypted form using the 128-bit SSL encryption protocol.

The invention also relates to a secure transfer system via a communication network of a cash flow from a first bank account of a first user in a first bank to a second bank account of a second user in a second bank which comprises: first means for transmitting a validation information of the transfer of said cash flow to the second user, said first transmission means belonging to a management device; second transmission means, by the second user, of said validation information to the first user; means for receiving said validation information, said receiving means belonging to the first bank; money flow transfer means from the first bank to the second bank. The invention also relates to a computer program product downloadable from a communication network and / or stored by a computer and / or executable by a microprocessor which comprises program code instructions for executing the steps of the secure transfer method as previously described, when said program is run on a computer. The invention also relates to a storage medium, possibly totally or partially removable, readable by a computer, storing a set of executable instructions by said computer to implement the secure transfer method as previously described.

5. List of figures

Other features and advantages of the invention will emerge more clearly on reading the following description of several embodiments, given by way of simple illustrative and non-limiting examples, and the appended drawings, among which: FIGS. 1 -A and 1 -B show a first (FIG. 1 -A) and a second (FIG. 1 -B) example of a global network architecture in which the invention is implemented according to a first embodiment; FIG. 2 presents the main steps of a control algorithm implemented in the context of the first embodiment of the invention; FIG. 3 presents the main steps of a payment algorithm implemented as part of the first embodiment of the invention; FIG. 4 describes an illustration of an example of a global network architecture in which the invention is implemented according to a variant of the first embodiment; FIG. 5 presents the main steps of a payment algorithm implemented as part of a variant of the first embodiment of the invention; FIG. 6 is an illustration of an example of a global network architecture in which the invention is implemented according to a second embodiment; FIG. 7 presents the main steps of a transfer algorithm implemented in the context of the second embodiment of the invention; FIG. 8 is an illustration of an example of a global network architecture in which the invention is implemented according to a variant of the second embodiment; FIG. 9 presents the main steps of a transfer algorithm implemented as part of a variant of the second embodiment of the invention. 6. Description of embodiments of the invention

Hereinafter, in the context of secure transfer processes via a communication network, for example the Internet network, cash flows from a first account in bank from a first user in a first bank to a second bank account of a second user in a second bank.

Of course, the communication network may be any other network such as, for example, a LAN (for "Local Area Network") or a metropolitan network. The two embodiments described below concern, for the first, the payment of an order placed on an e-merchant site directly with a ticket vending machine (or ATM), and for the second, the validation of a bank transfer to a DAB by a user.

The secure transfer methods according to the invention described below can be implemented in the form of software and / or a plurality of sub-software (including a plurality of algorithms described below) which is ( are) executed in one or more machines of the aforementioned network, for example in the server of the e-merchant site, the managing server, the server of the ATM bank described below.

6.1-Secure Payment via a Communication Network The following is a first embodiment of the invention concerning a secure payment method (which is a method for securely transferring a bank-to-bank cash flow) of a product. and / or service via a communication network, for example the Internet network.

Such a secure payment method implements in particular the two following phases: a first control phase by the first user (or buyer user still called buyer) of a product and / or service to a second user (or user seller still called seller) for example via an ecommerce site (also called e-merchant site) belonging to the seller; - a second payment phase of the selected product or service.

Thus, the buyer and the seller implement an e-commerce transaction on the Internet for the sale of said product and / or service.

FIG. 1-A presents a first example of a global network architecture in which the control and payment phases of a product and / or service are implemented on an e-merchant site according to a first embodiment. The global network architecture of this first example includes: a terminal 11 (for example a computer); a server 12 of an e-merchant site (or vendor server of the selling user); a management device 13 (for example in the form of a computer server still called manager server); an ATM 14 (or DAB); the bank 16 of ATM 14; a control device 17 (implemented, for example, by an individual bank and / or by an Economic Interest Group (or GIE) of bank cards); and - the bank of the e-merchant site 15.

According to the first example of a global network architecture according to the first embodiment of the invention, the management device 13 is for example located outside the DAB bank 16, but can exchange information therewith. Adaptations may be necessary to establish a connection between the server of the bank 16 and the management device 13.

Of course, according to a variant of this first example of a global network architecture, the management device 13 can be integrated within the banking network of the bank 16.

FIG. 1-B shows a second example of a global network architecture in which the control and payment phases of a product and / or service are implemented on an e-merchant site according to the first embodiment. The overall network architecture of this second example is identical to that of the first example, with the exception of the DAB 14 which is replaced by a validation terminal 102, and the bank 16 of the DAB 14 which is replaced by the bank 101. of the terminal 102. According to this second example of a global network architecture according to the first embodiment of the invention, the management device 13 is for example located outside the bank 101 of the terminal 102, but can exchange information with this one. Adaptations may be necessary to establish a connection between the server of the bank 101 and the management device 13. According to a variant of this second example of global network architecture, the management device 13 may form an integral part of the bank 101. a-Command phase

In the following, with reference to FIG. 2, the various steps involved in the control phase of a service and / or a service on an electronic commerce site according to the first embodiment of the invention are described below. . During a first step 21, the buyer can for example connect to the e-merchant site of his choice via the web browser installed on his computer 11 via a link 121 HTTP classic (in English "HyperText Transfer Protocol" ).

He can then navigate within the virtual store of the e-merchant site and select one or more items offered (product, service, ...) using a specific virtual shop software (or vendor server interface). For example, each selected article is then deposited in a virtual basket simulating the filling of a carriage.

Once the selection of articles completed, the buyer continues for example his order by completing, in a step 22, an interactive form that appears on one of the pages of the e-merchant site. The form can for example include the following fields (also called personal information): name, first name; mailing address; mobile phone number (if available); - E-mail ;

When he has filled in the aforementioned fields, the buyer can validate the interactive form which is then processed, during a substep of processing, by the virtual shop software. During this substep of processing, the virtual shop software performs for example the following actions: verification of the information provided by the buyer (for example the omission of a field, ...); inventory control and / or delivery methods; - calculation of any ancillary costs (eg the port, the VAT, ...); For example, when the buyer has forgotten to fill in a field, the virtual shop software asks him to complete this field and then validate the form again in order to execute the processing sub-step.

Once the form has been validated, the server 12 of the e-merchant site for example establishes a connection (for example via a 122 HTPPS link according to the 128-bit SSL encryption protocol which encrypts all the information exchanged) with the managerial computer server. 13 during a step 23. During the establishment of the connection, a first substep (of step 23) of authenticating the server of the e-merchant site can be implemented by the management server 13 to verify the identity of the e-commerce site.

Once authenticated, the server 12 of the e-merchant site can for example transmit, to the management device, during a second substep of step 23, information representative of said product and / or service such as information relating to the order (for example the references of the different items ordered, the price per unit of each item, the number of items ordered, the total amount of the order, the type of currency used, etc.), personal information buyer, as well as information about the e-merchant site itself (eg the merchant number). The transmission of all of this information is for example carried out by means of a manager software installed on the server 12 of the e-merchant site via the link 122 HTTPS.

During a step 24 the management server 13 may for example generate a unique order number (also called validation information) that it sends (first transmission) then to the server 12 of the e-merchant site belonging to the seller, via a link 122 HTTPS according to the 128-bit SSL encryption protocol. The order number sent is for example retrieved by the management software installed on the server 12 of the e-merchant site, then stored on the server 12.

During a step 25, the virtual shop software of the e-merchant site (belonging to the selling user) can for example retrieve the unique order number stored on the server 12 of the e-merchant site to transmit it (second transmission) to the buyer with the summary of his order (items ordered, total amount of order, time and type of delivery, ...). The buyer can for example view all this information on a page of his web browser displayed on the screen of his computer 11.

Optionally, the unique command number may be transmitted (fourth transmission) directly to the buyer by the management server 13 either simultaneously or later in step 25. There may then be redundancy with the second transmission.

The buyer can then confirm or cancel his order during a step 26. He can also modify it, but this requires the return to step 22.

When the buyer decides to cancel his order (for example by clicking on the tab "Cancel"), the latter is for example automatically canceled.

When the buyer confirms his order (for example by clicking on the tab

"Validate"), it can for example activate the validation operation of its purchases, and can receive, in a step 27, an e-mail and / or SMS confirmation of the order. This e-mail and / or SMS (containing for example the number of the order, the payment period, the delivery address, ...) marks the end of the ordering phase.

From the end of the ordering phase, the buyer may have a few days (for example a period of seven days) to implement the payment phase which begins for example by the payment of the order by the buyer in a Automatic Banknote Dispenser (or ATM) according to the first embodiment of the invention. Without validation by the buyer of the order with a DAB 14 during the predetermined payment period, it is for example automatically canceled. b-Payment phase

In the following, with reference to FIG. 3, the various steps occurring during the payment phase according to the first embodiment of the invention are presented. For example, the payment phase is implemented only within the payment period indicated on the e-merchant site and specified in the confirmation e-mail (sent during step 27). Once this period has expired the order is canceled and can no longer be paid.

Prior to the start of the payment phase, when the payment period has not yet expired, the buyer may for example insert his bank card in an ATM 14 (or DAB) connected to the bank 16 (also called DAB bank), and then dial his confidential credit card number. The payment phase is then initiated once the PIN has been validated.

According to one variant, the ATM can be replaced by a validation terminal 101

(For example in the form of a terminal including a display screen, a keyboard and a credit card reader, so that the buyer can confirm payment) belonging to a bank 102 as shown in FIG. 1-B. Such a terminal may for example be available in any shopping center. Unlike the

DAB 14, the validation terminal 101 can not distribute money to the users, but nevertheless implements all the payment validation steps performed by the DAB 14 according to the first embodiment.

The buyer can for example perform these preliminary operations in any DAB 14, which may belong to a different bank than the account of the buyer, provided that it implements the management software.

The implementation of the management software may in particular require adaptations of the graphical interface of the ATMs. These adaptations are for example made by the banks themselves. In a step 31, the buyer can for example select the payment method called "payment Internet order" controlled by the management server 13.

Then, when the aforementioned mode has been selected, the buyer can for example enter his order number which was transmitted to him during step 25 (and present in the e-mail sent to the buyer during the step 27).

The order number entered by the buyer can for example be transmitted (third transmission) from the ATM to the bank DAB 16 via a link 124 implementing a standardized banking protocol (for example the bank encryption protocols CBSA or CBPR on 25X). .

Then, during a step 32, a control of the bank account of the buyer can for example be carried out by a control device 17 in order to verify (as for a conventional withdrawal of money), a possible opposition on the bank account and request authorization to debit the account (which is to verify that the amount of cash flow is available on the account the buyer). The exchange of information between the bank DAB 16 and the control device 17 is effected for example by means of a link 126 in accordance with a standardized banking protocol, for example the CBSA or CBPR banking encryption protocols on X25.

After the payment authorization has been sent by the control device 17, the bank DAB 16 may, for example, establish a connection with the management server 13 via a link complying with a standardized banking protocol (for example the CBSA banking encryption protocols). or CBPR on X25) in order to collect (sub-step of obtaining) certain information relating to the order of the buyer (for example the order number, the total amount of the order (information representative of the cash flow amount), the account number of the e-merchant site (information representative of the second account), ...).

When the bank DAB 16 has retrieved the information relating to the order, it can for example send a summary of the order to the ATM 14 which presents it to the buyer via its graphical interface. Thus, after reading this summary, the buyer has for example the possibility of paying his order by selecting the tab "Pay order" which confirms the payment, or can also cancel the order by selecting the tab "Cancel order For example, when the summary contains an error.

When the buyer chooses to cancel his order, a cancellation request is for example sent from DAB 14 to DAB bank 16 during a cancellation sub-step. The cancellation request can then pass through the management server 13 to finally be transmitted to the e-merchant server 12 which is responsible for canceling the order. The buyer then no longer has the opportunity to validate his order at any time or in any way whatsoever.

For example, when the buyer validates his order, validation information can be sent to the bank DAB 16, and the buyer's bank account can be debited classically in an amount equal to that of the order . However, the amount of the order (also called cash flow amount), although debited from the buyer's account, is not transferred to the bank account of the e-merchant site. Indeed, it is for example blocked and stored temporarily (temporary storage step) at the bank DAB 16. During a step 33, the "blocked amount" information may, for example, be sent from the DAB bank 16 to the management server 13 via the link 123, before being transmitted to the e-merchant server 12. Once the information "Blocked amount" received, the e-merchant site for example has a first predetermined shipping period (for example seven days) (which depends on the type of product or service) to send the order to the buyer.

According to the first embodiment of the invention, the buyer has for example no longer the possibility of canceling his order once the confirmation of payment made at the ATM until the expiry of the first delivery period. Of course, according to one variant, the buyer may cancel his order before the end of the first expiry period.

As soon as the order is sent, the server 12 of the e-merchant site for example establishes a connection with the managing server 13 during a step 34 (transmission step) to transmit to it the information "dispatched order" (again called supply information). During a step 35, the information "order shipped" can be relayed by the e-merchant server 12 to the bank DAB 16.

Once the information "order shipped" received by the bank DAB 16, it makes the transfer (also called transfer of cash flow) the amount of the order (which it had blocked) to the bank of the e-merchant site during a step 36 (transfer of the cash flow from the bank DAB 16 to the seller's bank) after remote collection of all stored payment confirmation information (storage step) on the managing server 13. The transfers are effective at telecollection time performed for example once a day (depending on the parameters given by the bank) via a secure connection according to a standardized protocol (for example the bank encryption protocol CB2A). Thus, the transfer of money flow occurs only if each of the first, second and third transmissions mentioned above has taken place.

A confirmation of transfer (also called "successful transfer" information) can be sent to the management server 13 for example by the bank DAB 16 for each actual transfer. Then, during a step 37, the management server 13 can send a "successful transfer" information to the server of the e-merchant site to inform it that its bank account has been credited.

It is also conceivable that the beneficiary can connect to the server manager 13, via a password and a login, to control and view live payments orders placed on its e-merchant site, canceled orders, and orders pending payment.

Optionally, an e-mail and / or an SMS can be sent to the buyer to inform him that the transfer was made to the account of the e-merchant site during a step 38.

When the order has not been shipped within a pre-determined first shipping period (eg seven days), the buyer may cancel the order at DAB 14 at the end of the shipping time similarly to the sub-step The amount blocked by the bank DAB 16 is, for example, unlocked and credited to the buyer's bank account.

When the order has not been dispatched within a second predetermined shipping period (greater than the first delivery period, for example ten days) or canceled by the buyer after the end of the first delivery period, the order is for example then automatically canceled. The amount blocked by the bank DAB 16 can for example be unlocked and credited to the bank account of the buyer.

Thus, the transfer of the amount of the order (or cash flow transfer) to the seller's bank account is for example subject to a step of verification of at least one of the following conditions: a predetermined delay between the third transmission and the shipment of the order (corresponding to the supply of the product and / or service ordered by the buyer) by the seller has not expired; a predetermined delay between the second transmission and the third transmission has not elapsed; the buyer did not cancel the transaction; - the product and / or service is available in storage. Moreover, a payment step may be provided for the organization that owns the management device 13, for example in the form of paying a commission for each order paid.

According to a variant of the first embodiment, the buyer can trigger the payment phase by sending a conventional SMS to the management server 13 via his mobile phone, as shown in Figure 4.

However, the payment of the order by mobile phone is possible for example only when the buyer has previously registered and has subscribed a telephone payment contract with his personal bank 42 (Figure 4). When subscribing the telephone payment contract, the personal bank 42 may, for example, provide the buyer with a secret code enabling him to authenticate.

The following will be described below, in relation with FIG. 5, the different steps implemented during the payment phase, according to the variant of the first embodiment of the invention. Thus, during a step 51, the buyer sends, for example, to the managing server

13, an SMS including the order number and the secret code of the buyer.

In a step 52, the management server 13 may for example request verification of the secret code contained in the SMS from the bank 42 to authenticate the buyer. When the buyer is authenticated, a check of the buyer's bank account can be performed by the control device 17 to check a possible opposition on the bank account and request authorization to debit the account, similarly to what has been described in step 32.

After the payment authorization has been sent by the control device 17, the buyer's bank 42 establishes, for example, a connection with the management server 13 via a link complying with a standardized banking protocol (for example the encryption protocols). CBSA bank or CBPR on X25) in order to collect certain information relating to the order of the buyer (for example the order number, the total amount of the order, the account number of the e-merchant site, ...). For example, the buyer's bank account is debited (collection step) by an amount equal to that of the order. However, the amount of the order, although debited from the account of the buyer, may not be transferred to the bank account of the e-merchant site. Indeed, it can for example be blocked and stored at the bank 42 of the buyer.

The further payment of the order by telephone is identical to that described above in steps 32 to 38 for the payment of the order via a ticket vending machine 14, except that the bank DAB 16 is replaced by the personal bank 42 of the buyer.

The method of payment by telephone, variant of the first embodiment of the invention, does not allow the buyer to cancel the order, it will cancel itself if it does not occur within a time limit predetermined payment.

Thus, the invention makes it possible in particular to eliminate the risk of piracy because no confidential information (for example the credit card number) passes over the Internet. For example, only data relating to the buyer's order is communicated via the Internet, either during the ordering phase or during the payment phase.

Moreover, such a secure payment method also ensures the buyer the shipment of his order. Indeed, the transfer of the amount of the order to the bank account of the e-merchant site is for example made once the items of the order shipped. Thus, thanks to the secure payment method according to the invention, buyers no longer need to transmit their bank details via the Internet. Consequently, the buyer's bank details are never stored on the servers at any time (management server 13, e-merchant server 12) implemented during the ordering and payment phases of the secure payment method according to the invention. The invention is therefore particularly for merchants (eg mail order, brokerage sites, portfolios and virtual banks sites, web hosts, virtual gallery managers, site creators, ...) wishing to market products or services on the Internet by securing their payment transactions while keeping their current bank. It is also intended for buyers of items marketed on e-commerce sites, concerned about the security and confidentiality of their payments as well as the guarantee of the shipping of the ordered items.

In addition, the invention is intended for banking establishments wishing to meet the needs of their customers while maintaining a traditional electronic banking using standardized banking protocols and standard contracts such as those implemented in the case of distance sales.

6.2 - Secure bank transfer of a cash flow

A second embodiment of the invention is presented concerning a secure bank transfer method for a money flow (which is a method for securely transferring a bank-to-bank cash flow) via a communication network of a first account. in a bank from a first user in a first bank to a second bank account of a second user in a second bank.

The method of secure bank transfer of cash flow implements in particular the following two phases: a first phase of bank transfer request for a cash flow by the second user (called payee) to the first user (called issuer); a second phase of effective transfer of the cash flow from the issuer's bank account to the beneficiary's bank account. As illustrated in FIG. 6, in the transfer request and effective transfer phases according to the second embodiment of the invention are implemented in particular: an automatic cash dispenser 14 (or DAB); the bank 16 of ATM 14; a management device 13 (for example in the form of a computer server still called a management server); bank 64 of the beneficiary; a control device 17 (implemented, for example, by an individual bank and / or by an Economic Interest Group (or GIE) of bank cards); and a terminal 66 (for example a computer). According to the second embodiment of the invention, the management device 13 is for example located outside the DAB bank 16, but can exchange information with it. Adaptations may be necessary to establish a connection between the server of the bank 16 and the management device 13. Of course, according to a variant of the second embodiment, the management device 13 can be integrated into the banking network of the bank 16. a -Phase of request

Prior to the transfer request, the beneficiary may for example connect via a link 144 implementing a secure file transfer communication protocol (for example HTTPS according to the 128-bit SSL encryption protocol) to the server's Internet site. manager 13 to register and register.

During registration, the beneficiary provides for example its international account number (or IBAN number), its name, its postal address, its e-mail address, etc.

When the registration has been validated by the management server 13, login identifiers (for example a login, a password, etc.) as well as a unique customer number (also called validation information) making it possible to identify the bank account to be credited when the transfer is sent for example (first transmission) to the payee by the manager server 13. The unique customer number is still called the credentials of the payee. Therefore, if he wishes, the beneficiary can ask the issuer to transfer money to him. For example, it only needs to provide (second transmission) its unique customer number (which corresponds to a bank account number), as well as the amount of the amount to be transferred to its bank account (also called cash flow amount). .

The unique customer number as well as the amount of the sum to be transferred can be transmitted to the issuer for example by e-mail, postal mail, telephone, SMS, fax, ...

Of course, according to one variant, the beneficiary can connect to the website of the managing server 13 to make a transfer request to the issuer by entering information relating to the issuer, such as, for example, his telephone number, his e-mail address, mail, its fax number, its postal address ... The managing server 13 can, for example, be responsible for relaying (for example by e-mail) the transfer request to the issuer by communicating for example the unique customer number the beneficiary, as well as the amount of the transfer (information representative of the amount of the cash flow). b-Transfer phase

The following is presented below, in relation with FIG. 7, the different steps involved during the transfer phase of a cash flow according to the second embodiment of the invention.

Prior to the start of the payment phase, the issuer can for example insert his bank card into an ATM 14 (or ATM) connected to the bank 16 (also called ATM bank), and then dial his confidential card number. banking. The transfer phase begins, for example, once the PIN has been validated.

The issuer can perform these preliminary operations in any DAB 14, which may belong to a different bank than that of the issuer's account, provided that it implements the manager program of the managing device. The implementation of the management software may in particular require adaptations of the graphical interface of the ATMs. These adaptations are for example made by the banks themselves. In a step 71, the issuer can for example select the payment method called "money transfer" controlled by the manager server 13. When the aforementioned mode has been selected, the issuer can for example enter the unique customer number he has received as well as the amount of the transfer requested by the beneficiary, then can for example validate this information by selecting the tab "Validate transfer". The beneficiary's unique customer number information (which corresponds to information representative of the second account) and the amount of the transfer (also called information representing the amount of the cash flow) are for example transmitted (third transmission and obtaining step) to the bank. DAB 16 via a link 140 implementing a standardized banking protocol, for example CBSA or CBPR banking encryption protocols on 25X.

Then, during a step 72, a control of the bank account of the issuer may for example be carried out by a control device 17 in order to check a possible opposition on the bank account and request authorization to debit the account (this which consists in checking that the amount of the cash flow is available on the account the buyer). The exchange of information between the bank DAB 16 and the control device 17 is effected for example by means of a link 126 in accordance with a standard banking protocol, for example the bank encryption protocols CBSA or CBPR on X25.

After sending the payment authorization by the control device 17, the DAB bank 16 may, for example, establish, during a step 73, a connection with the management server 13 via a connection according to a standardized banking protocol. (eg CBSA or CBPR banking encryption protocols on X25) to authenticate the transfer beneficiary. The bank DAB 16 may for example transmit the unique customer number of the beneficiary. When the beneficiary has been authenticated, the management server 13 for example sends back to the bank DAB 16, during a step 74, information relating to the beneficiary (for example the IBAN international account number).

During a step 75, the bank DAB 16 may for example debit the bank account of the issuer of the amount indicated to transfer it to the bank account of the beneficiary in the bank 64. The transfer procedure (still called cash flow transfer) implemented during step 75 may correspond to a conventional operating procedure between banks. Simultaneously, the bank DAB 16 for example transmits a confirmation of transfer (also called "successful transfer" information) to the manager server 13. It is also possible that the recipient can connect to the server manager 13, via its login credentials , to check and view live transfers made to his bank account domiciled in the bank 64.

Furthermore, all the transfer confirmation information (information representative of an inter-bank cash flow transfer) can be stored (storage step) on the management server 13.

Optionally, during a step 76, the management server 13 sends a message to the beneficiary (for example an e-mail or an SMS) to inform him that the transfer has been made to his bank account (information of "Successful transfer"). According to a variant of the second embodiment, the transmitter can trigger the transfer phase by sending a conventional SMS to the personal bank 65 via its mobile phone 67, as shown in Figure 8.

However, the confirmation of transfer of the order by mobile phone is possible for example only when the issuer has previously registered and has signed a contract of "confirmation of transfer by telephone" with his personal bank 65 (where is domiciled its account).

When subscribing to a "confirmation of transfer by telephone" contract, the personal bank 65 may, for example, provide the issuer with a secret code enabling it to be authenticated (also called the issuer secret code).

The following are described below, in relation with FIG. 9, the different steps implemented during the transfer phase, according to the variant of the second embodiment of the invention.

Thus, during a step 91, the sender sends, for example, to the manager server 13, an SMS including the unique customer number of the recipient, the sender secret code and the transfer amount.

In an authentication step 92, the personal bank 65 may for example check the sender secret code contained in the SMS to authenticate the sender.

The continuation of the transfer according to the variant of the second embodiment is identical to that described above in steps 72 to 76 of the confirmation of transfer via a ticket vending machine 14, except that the bank DAB 16 is replaced by the personal bank 65.

In addition, there may be a payment stage of the organization owner of the management device 13, for example in the form of the payment of a commission for each transfer made.

Of course, the invention is not limited to the embodiments mentioned above.

In particular, the skilled person may provide any variant of the method of secure transfer of a monetary flow of the invention. Indeed, the invention also applies to the settlement of daily bills

(eg water, gas, electricity, ...), but also tickets. The invention applies of course to the payment of an Internet order in several times.

In addition, the invention applies to customers using electronic wallets or virtual banks (for example PAYPAL registered trademark, PAYNOVA registered trademark, ...) so that they can feed their virtual accounts using the management server. invention and validating these operations at ATM or by SMS.

Claims

1. Method of securely transferring via a communication network a cash flow from a first bank account of a first user in a first bank (16) to a second bank account of a second user in a second bank (15), characterized in that it comprises the following steps: first transmission (24), by a management device (13), of validation information of the transfer of said cash flow to the second user; second transmission (25) by said second user of said validation information to the first user; third transmission (31; 71) by said first user of said validation information to the first bank; transferring (36; 75) the cash flow from the first bank to the second bank if each of the first, second and third transmissions has occurred.

2. Secure transfer method according to claim 1, characterized in that it also comprises a step of obtaining, by the first bank, at least one representative information of the amount of cash flow and at least one representative information. the second account in order to implement said transfer step (36; 75).

3. secure transfer method according to any one of claims 1 and 2, characterized in that said secure transfer method is a method of secure payment of a product and / or service by the first user, said buyer user, at second user, said selling user, said purchasing user and said selling user implementing an electronic commerce transaction on the communication network for the sale of said product and / or service, said method comprising the following preliminary step: selection (21) said product and / or service by the purchasing user by means of an interface of a vendor server of the selling user.

4. secure transfer method according to claim 3, characterized in that it also comprises the following preliminary step: - transmission (23), by the user seller to the management device, at least one representative information of said product and / or service.

5. Secure transfer method according to any one of claims 3 and 4, characterized in that it also comprises the following steps: sampling (32) of said amount on the first account; temporarily storing (32) said amount in the first bank; checking a condition before implementing said step of transferring the cash flow from the first bank to the second bank.

6. Secure transfer method according to claim 5, characterized in that said condition is at least one of the conditions belonging to the group comprising the following conditions: a predetermined delay between the third transmission and a supply of the product and / or service the first user is not up; a predetermined delay between the second transmission and the third transmission has not elapsed; the first user did not cancel said transaction; - the product and / or service is available in stock.

7. secure transfer method according to any one of claims 3 to 6, characterized in that the third transmission (31), by said first user, said validation information to the first bank (16) is implemented at means of a ticket vending machine (14) belonging to said first bank.

8. secure transfer method according to any one of claims 3 to 6, characterized in that the third transmission (31) by said first user, said validation information to the first bank (16) is implemented at means of a validation terminal belonging to said first bank.

9. secure transfer method according to any one of claims 3 to 6, characterized in that the third transmission (31) by said first user, said validation information to the first bank (16) comprises the following steps transmission (51), by the first user to the management device (13), an electronic message including said transmission validation information (52) by the management device (13) to the first bank (16), said validation information.

10. Secure transfer method according to any one of claims 1 and 2, said secure transfer method being a secure bank transfer method of the cash flow from the first bank account to the second bank account, characterized in that the validation information comprises at least one identification information of the second bank account and at least one information representative of the amount of cash flow.

11. secure transfer method according to any one of claims 1 to 10, characterized in that it comprises a step of storing at least one information representative of a transfer of a cash flow between the first bank and the second bank.

12. Method according to any one of claims 1 to 11, characterized in that the communication network is the Internet network.

13. Method according to any one of claims 1 to 12, characterized in that at least some of said information is exchanged in encrypted form.

14. System for secure transfer via a communication network of a cash flow from a first bank account of a first user in a first bank (16) to a second bank account of a second user in a second bank (15), characterized in that it comprises: first means for transmitting a validation information of the transfer of said cash flow to the second user, said first transmission means belonging to a management device (13); second transmission means, by the second user, of said validation information to the first user; means for receiving said validation information, said receiving means belonging to the first bank; means for transferring the cash flow from the first bank to the second bank.

15. Computer program product downloadable from a communication network and / or stored by a computer and / or executable by a microprocessor, characterized in that it comprises program code instructions for the execution of the steps of the method of secure transfer according to any one of claims 1 to 13, when said program is executed on a computer.

16. Storage medium, possibly totally or partially removable, readable by a computer, storing a set of instructions executable by said computer to implement the secure transfer method according to any one of claims 1 to 13.