WO2010115604A2

WO2010115604A2 - Method and system for contactless proximity transactions

Info

Publication number: WO2010115604A2
Application number: PCT/EP2010/002151
Authority: WO
Inventors: Dominique Bolignano; Eric Vetillard
Original assignee: Trusted Logic
Priority date: 2009-04-07
Filing date: 2010-04-06
Publication date: 2010-10-14
Also published as: FR2944177A1; WO2010115604A3

Abstract

A transaction method comprising an identification step (S1) and an electronic transaction step (S2). The identification step identification (S1) of mobile telecommunication equipment (3) includes the transmission of at least one piece of identification information (ID) from the mobile telecommunication equipment (3) to an electronic transaction terminal (2) according to a first contactless proximity communication protocol (P1) when the telecommunication equipment (3) is placed in a detection zone (ZD) of the terminal (2). The electronic transaction step (S2) between the telecommunication equipment (3) and the electronic transaction terminal (2) is carried out according to a second contactless communication protocol (P2).

Description

METHOD AND SYSTEM FOR CONTACTLESS PROXIMITY TRANSACTIONS

TECHNICAL FIELD OF THE INVENTION This invention concerns the field of electronic transactions and, more particularly, contactless electronic proximity transactions between, on the one hand, a user's mobile telecommunications equipment and, on the other hand, at least one electronic transaction terminal. One particular application of the invention is aimed at electronic transactions carried out using a mobile/portable telephone. PRIOR STATE OF THE ART

The ISO 14443 standard relates to smart cards having a contactless operating mode. In particular it describes the operation of such smart cards placed close to the aerial of a contactless smart card reader. It defines communication standards and transmission protocols between contactless smart cards and readers. So-called NFC (Near Field Communication) technology is a high frequency (13.56 MHz), proximity, contactless communication technology. It enables data exchange between devices a few centimetres away. This technology is an extension of the ISO 14443 standard. It is generally implemented using an NFC integrated circuit. When a device, for example a mobile telephone, includes such an integrated circuit, it can communicate with other devices including an NFC integrated circuit, or smart cards and/or smart card readers compatible with the ISO 14443 standard. NFC technology enables contactless electronic proximity transactions between a mobile telephone equipped with NFC technology and an electronic transaction terminal. Application examples for NFC technology are access to a public transport network and payment for products or services.

Only users of mobile telephones including an NFC integrated circuit can carry out such electronic transactions. Mobile telephones including an NFC integrated circuit currently remain rare. As a result these transactions are not available to the majority of people.

CONFIRMATION COPV EXPOSITION OF THE INVENTION

In consideration of the above, the invention is intended to solve the problem of providing a method and an electronic transaction system that enables the user experience of NFC transactions to be reproduced, however without requiring substantial modifications to equipment architecture and/or existing software needed to implement these transactions, the said transactions remaining nonetheless secure. The solution to this problem offered by the invention provides a method including an identification step and the actual transaction step. This identification step is separated from the transaction step by using means of communication that can be distinct. The identification step uses a direct, contactless, short-range means of communication. The transaction step takes place using any other means of communication, at least partially contactless. More precisely, according to a first aspect, the invention relates to transaction method comprising the following steps: the identification of mobile telecommunication equipment including the transmission of at least one security identification information element from the said mobile telecommunication equipment to an electronic transaction terminal according to a first contactless proximity communication protocol when the said security element is placed in a detection zone of the electronic transaction terminal; and electronic transaction between the said mobile telecommunication equipment and the said electronic transaction terminal according to a second communication protocol.

According to a second aspect, the invention relates to a transaction system comprising an electronic transaction terminal and mobile telecommunication equipment, in which: the said mobile telecommunication equipment includes a security element provided to transmit at least one piece of identification information from the telecommunication equipment to the terminal according to a first contactless proximity communication protocol when the security element is placed in a detection zone of the terminal; and the said electronic transaction terminal includes at least a means of reading the said identification information and a means of communication to relay an electronic transaction between the telecommunication equipment and the electronic transaction terminal according to a second communication protocol. More interestingly, - the first and second communication protocols are distinct communication protocols; - the identification information transmitted to the terminal according to the first communication protocol is used to conduct the transaction according to the second communication protocol;

- the method also includes an authentication step for the telecommunication equipment; - the first communication protocol is uni-directional; - the second communication protocol is bi-directional; - the identification information includes a unique identifier for the telecommunication equipment associated directly or indirectly with a telephone number for the telecommunication equipment; - the identification information also includes additional information enabling the terminal to determine the second communication protocol; - the identification information also includes additional location information for the telecommunication equipment;

- the second communication protocol is a contactless protocol, which employs a mobile telephone network to local wireless telecommunication network; the security element is an RFID transponder built into or fixed onto the telecommunication equipment; - the security element is a contactless smart card built into the communication equipment or inserted removably into the telecommunication equipment; and - the system also includes a server relaying the electronic transaction between the terminal and the telecommunication equipment according to the second communication protocol. In this way the invention enables contactless transactions to be implemented simply, securely and at low cost as part of an existing architecture with few modifications and without equipment modifications. In particular, users of standard mobile telecommunication equipment can have a user experience similar to those equipped with NFC technology. DESCRIPTION OF THE DIAGRAMS

The invention will be better understood on reading the following non-exhaustive description, which has been written in relation to the attached diagrams, in which: figure 1 is a schematic illustration of the transaction system according to a first embodiment of the invention; figure 2 is a schematic illustration of the transaction method according to the first embodiment of the invention; figure 3 is a schematic illustration of the transaction system according to a second embodiment of the invention; and figure 4 is a schematic illustration of the transaction method according to the second embodiment of the invention.

DETAILED DESCRIPTION OF THE INVENTION

In the description that follows, the terminology "telecommunication equipment" will be used in its broadest definition. An item of telecommunication equipment is a portable or mobile multi-function device. As an example, the telecommunication equipment can be a mobile/portable telephone, a PDA personal assistant, a PC personal microcomputer, etc., equipped with means of connection to a telecommunications network. The telecommunication network can be a mobile telecommunication network, for example of type GSM, 3G, GPRS, EDGE, UMTS, CDMA or CDMA2000, or a local wireless telecommunication network such as WLAN, WPAN, WiFi™, Zigbee™, Bluetooth™ or WiMAX™, etc. Figures 1 and 2 are schematic illustrations of the first embodiment of the invention. Transaction system 1 shown in figure 1 includes an electronic transaction terminal 2 and a user's mobile telecommunication equipment 3.

The mobile telecommunication equipment 3, for example a mobile telephone, includes an information display device 4, an information input device 5, a security element 6, and a first transaction module 7. The information display device 4 can be a screen or loudspeaker, for example. The information input device 5 can be a keyboard or touch screen, for example. The security element 6 includes identification information ID for the telecommunication equipment. The security element 6 can be permanently fixed or removable in or on the surface of the telecommunication equipment. The first transaction module 7 performs the actual transaction for the telecommunication equipment by enabling interaction with the user by means, for example, of the screen and information input device 4. This transaction module 7 can be made in the form of a software application loaded into a memory and executed by a micro-processor (not shown) in the mobile telecommunication equipment 3.

The security element 6 can be a uni-dimensional or bi-dimensional bar code printed on the telecommunication equipment 3, fixed for example glued on the said equipment or displayed on the screen 4. The bar codes include identification information ID for the telecommunication equipment. Alternatively the security element 6 can be an RFID transponder (Radio Frequency Identification) built into the telecommunication equipment 3 or fixed to equipment 3. Or alternatively the security element 6 can be a contactless smart card built into telecommunication equipment 3 or inserted removably into the telecommunication equipment 3. The electronic transaction terminal 2 is fixed or mobile. It includes a reader 8, a means of communication 9 and a second transaction module 10. The reader 8 defines a detection zone ZD for terminal 2. When security element 6 in the mobile telecommunication equipment 3 is placed in this detection zone ZD, the reader 8 is able to read the identification information of the said security element 6. In practice, the reader 8 can be an optical detector to detect a security element such as a bar code. Alternatively the reader 8 can be an aerial to detect a security element such as an RFID transponder or contactless smart card. The detection zone ZD is preferably short-range. Typically it extends over a few centimetres. The means of communication 9 enables direct or indirect bi-directional contactless communication with the telecommunication equipment 3.

The second transaction module carries out the actual transaction for the terminal. It can be made in the form of a software application loaded into a memory and executed by a micro-processor (not shown) in the terminal. The transaction method shown in figure 2 includes an identification step S1 for mobile telecommunication equipment 3 and an electronic transaction step S2. During identification step S1 , identification information ID from the telecommunication equipment is sent to the electronic transaction terminal. This transmission is performed according to a first contactless proximity communication protocol P1. It requires telecommunication equipment 3 to be placed in the detection zone ZD of electronic transaction terminal 2. Identification is carried out when the mobile telecommunication equipment 3 and terminal 2 are close to one another, in practice a few centimetres apart. The identification information is temporarily or permanently associated with the telecommunication equipment. The identification information ID can be included in a unique identifier for the telecommunication equipment, for example a telephone number, an IMSI (International Mobile Subscriber Identity), an IMEI (International Mobile Equipment Identity), a MAC (Media Access Control) address, or an IP (Internet Protocol) address or a customer code associated with the telecommunication equipment (for example a season ticket number for a public transport network) or a user name. In general terms, any identification information ID enabling direct or indirect identification of the telecommunication equipment and subsequently the user of this equipment is suitable.

The first communication protocol P1 can also be used to transmit additional information IS. As an example, the additional information IS can include a second communication protocol P2 to be used to continue the transaction, and/or data forming part of the authentication process for the transaction (public key encryption, random code), etc.

The first communication protocol P1 is used by security element 6 in telecommunication equipment 3 combined with the appropriate reader 8 in the electronic transaction terminal 2. Different communication protocols are possible depending on the different security elements described above. In order to reduce the risks associated with transaction security, the first communication protocol P1 uses a short-range contactless communication technique over less than 10 cm. In this way the risks of MITM-type attacks (Man In The Middle) are reduced. In fact, third parties will not be able to interfere, or indeed take over, in the transaction between the telecommunication equipment and the terminal from the start of the transaction, the telecommunication equipment, in order to hijack the transaction for fraudulent purposes.

The first communication protocol P1 can be implemented by means of a uni- dimensional or bi-dimensional bar code combined with a terminal equipped with a suitable optical reader. In this case, the identification information is contained in the bar code that is read by the optical reader when the said code is placed in the optical reader's detection zone. This first communication protocol P1 is unidirectional. The detection zone ZD of the reader is directional in the case of an optical reader. As a result, this first example of communication protocol is highly resistant to an MITM attack because the optical technique is short range and directional.

Alternatively, the first communication protocol P1 can be implemented by means of an RFID tag or similar passive integrated circuit combined with a terminal equipped with a suitable receiving aerial. In this example, the identification information contained in the radio signal sent by the RFID tag is detected by the aerial when the RFID transponder is placed in the aerial's detection zone. This first communication protocol P1 is also uni-directional. Alternatively, the first communication protocol P1 can be implemented by means of a smart card or similar active integrated circuit combined with a terminal equipped with a suitable receiving aerial. In this example, the smart card is authenticated by the terminal, that is it sends identification information to the terminal; the identification information may be accompanied by elements enabling its authentication such as an encrypted signature proving knowledge of a secret obtained using any known encryption algorithm. This first communication protocol P1 can be bi-directional.

During the electronic transaction step S2, the actual electronic transaction, for example access to a public transport network or payment for a product or service, etc., is carried out between the mobile telecommunication electronic and the electronic transaction terminal. During this transaction, data are exchanged according to a second contactless communication protocol P2. The means of communication 9 in the terminal enables communication with the telecommunication equipment through a second communication protocol P2. This second communication protocol P2 is preferably bi-directional. According to a first example, communication according to the second communication protocol P2 is performed by exchange of SMS (Short Message Service) type messages. Typically, the means of communication 9 in the terminal sends a first SMS message to the telephone number contained in the identification number information received during the identification step. The SMS message is viewed by the user of the telecommunication equipment. The user replies to the terminal with a second SMS message that may include information required to continue the transaction to its completion. In such a case, the SMS messages are processed in the telecommunication equipment by the first transaction module 7 and in the terminal by the second transaction module 10.

According to a second example, communication according to the second communication protocol P2 is performed by GPRS (General Packet Radio Service) or Internet. In this case, the interaction is performed by means of messages sent to the telephone number or IP address contained in the identification number information received during the identification number step. The rest of the transaction is performed in a similar way to the first example above. It will be noted that the two previous examples do not exclude the use of voice messages or e-mails to send certain information required for the transaction. According to a third example, communication according to the second communication protocol P2 is performed by means of a local protocol of type Bluetooth™, Zigbee™, WiFi™, etc. The terminal is connected to the telecommunication equipment according to one of these protocols using the identification information and automatically starts execution of the first transaction module 7. The rest of the transaction is performed in a similar way to the first example above.

According to a fourth example, a direct or indirect link is established between the terminal and the security element in the form of a SIM (Subscriber Identity Module) smart card, communication by the second communication protocol P2 being performed by means of the standardised protocol used by the SIM smart card.

Figures 3 and 4 are schematic illustrations of the second embodiment of the invention. The second implementation method differs from the first implementation method in that the second communication protocol P2 does not directly link terminal 2 to the telecommunication equipment 3. In the second implementation method, an external telecommunication network TN is used to complete the electronic transaction step S2. Only the elements/steps that differ from the first implementation method will now be described. Transaction system 1 shown in figure 3 also includes an application server 11. The application server includes a third transaction module 12. The transaction module 12 can be made in the form of a software application loaded into a memory and executed by a micro-processor (not shown) in the application server. The identification step S1 for telecommunication equipment by the terminal is performed in the same way as the first implementation method. The electronic transaction step S2 involves the application server 11 that relays information exchanges and messages between the terminal and the telecommunication equipment and vice-versa by means of the second communication protocol. The examples described above apply except in regard to local communication protocols. Communication between the terminal and the telecommunication equipment is established by means of the telecommunication network TN. As an example, the application server 11 communicates with terminal 2 and the telecommunication equipment using SMS type messages. Preferably, the transaction module 12 can be used to decode the identification information when this does not enable the terminal to contact the telecommunication equipment directly. This can be the case if the identifier contained in the identification information matches a customer code or when it is encrypted. The two implementation methods presented above can also include an additional authentication step. Typically, the authentication step is includes between the identification step and the actual electronic transaction step. It can be an integral part of one or the other. The authentication step is intended to reduce or indeed avoid cloning or MITM type attacks already described above. In fact, if the identification information is cloned, it becomes possible for a third party to carry out a transaction without the knowledge of the telecommunication equipment's authorised user.

When the security element 6 is a bar code or a passive integrated circuit, for example an RFID transponder, the user of the telecommunication equipment is asked to confirm their transaction request at the start of the electronic transaction step. For example, the terminal can send the telecommunication equipment a message including data describing the purpose and amount of the transaction as well as data authenticating the terminal (merchant name of service supplier). The transaction will actually be initiated after the terminal receives confirmation sent by the user of the telecommunication equipment. To improve security, in particular regarding MITM type attacks, these data can also contain random data (digital code, colour code, etc.) presented (for example by display on the screen) both on the telecommunication equipment and on the terminal, in order to enable the user to confirm the consistency of the information showing on their telecommunication equipment and on the terminal.

When the security element 6 is an active integrated circuit, for example a contactless smart card, the authentication step can be performed at the same time as the identification step. For example, the security element like the terminal systematically uses diversification data in the messages exchanged in order to provide joint authentication. The diversification data avoids cloning and replaying a message from a previous identification step. In all the above cases, if the terminal requires the use of a human operator, it is possible to complete the authentication process by sending biometric data stored in the telecommunication equipment or in the application server. For example, the photograph of the authorised user of the telecommunication equipment can easily be authenticated by the terminal operator before continuing the transaction. This additional security measure is particularly effective against cloning. Finally, to ensure that the telecommunication equipment communicating during the transaction step using the second protocol P2 is indeed the same as that identified by the first protocol P1 , the identification information ID can also include additional information IS, for example a unique transaction number generated randomly that will also be sent back during all exchanges in the transaction step. Optionally, the additional information exchanged IS locating the telecommunication equipment and/or the transaction terminal can be exchanged during the transaction phase by means of the second communication protocol P2. The telecommunication equipment can have location information, for example if it is equipped with a GPS (Global Positioning System) module, by triangulation from known positions of relay antennae of a mobile telephone network or WiFi ™ access point, or by approximate determination of the relay antenna of the nearest mobile telephone network operator or nearest WiFi ™ access point. The location information can be used to avoid cloning of identification information for the telecommunication equipment that could be reused in another place. A few application examples for the invention will now be described. According to a first application, the method and system of the invention are used to pay for products or services from a merchant. The user of the telecommunication equipment sends identification information by bar code reader or RFID transponder through the merchant's payment terminal. Alternatively, the user can run an application displaying identification information (for example a bar code) on the telecommunication equipment's screen. This identification information can depend on environmental parameters (transaction data and time, location, etc.). This identification information can be completed by cryptographic authentication. The payment terminal sends the identification information to a server. The server links the identification information to a telephone number of the telecommunication equipment, and sends an SMS message to this telecommunication equipment. Once received, the SMS message runs the transaction module of the telecommunication equipment. The transaction module contacts the merchant's payment terminal via the server. Alternatively, the transaction can be undertaken directly between the payment terminal and the telecommunication equipment by using a local connection, for example Bluetooth™. Transaction information is sent by the terminal and presented to the users on the screen of their telecommunication equipment. The transaction information may also include authentication information from the payment terminal (for example, a random character) also displayed on the payment terminal's screen. The user confirms the transaction by authenticating it with a password, biometric data or some other means. The transaction module in the telecommunication equipment sends the payment terminal information confirming the transaction. This transaction may be accompanied by additional authentication information from the user (for example, the user's photo). The merchant can then approve the transaction. Data exchange can be done according to a proprietary protocol or according to an existing protocol, for example following the EMV standard used in banking.

According to a second application, the method and system of the invention are used to pay for products or services at a merchant, payment made by a first person, for example a child, is supervised and approved remotely by a second person, for example a responsible adult. In this case, the transaction is made in a similar way to the first application except that the identification step is carried out using the first person's telecommunication equipment, while the actual transaction step and in particular its approval is carried out remotely through the second person's telecommunication equipment. Alternatively, the transaction can be approved by double confirmation of the transaction, that is by both the first and the second persons. For example, confirmation by the child initiates the confirmation request from the responsible adult. According to a third application, the method and system of the invention are used to access a public transport network and pay for journeys on this network. The network is equipped with contactless terminals at the entrance and exit to the network. The telecommunication equipment enables the user to be identified and to manage debits and recharges to his network access account. The user of the telecommunication equipment sends identification information by bar code reader or RFID transponder through the network access terminal. For example, identification number information can include the user's season ticket account number for the public transport network. Alternatively, the user can run an application displaying identification information (for example a bar code) on the telecommunication equipment's screen. This identification information can also depend on environmental parameters (entry/exit data and time, location, etc.). This identification information can be completed by cryptographic authentication. The network access terminal sends the identification information to a server. The server links the identification number information to the telephone number of the telecommunication equipment and can send messages to this telecommunication equipment in order to allow users to manage their season ticket account for the public transport network. For example, an SMS message sent by the server can run the transaction module in the telecommunication equipment in order to request the account to be recharged. The transaction module can also be used by the telecommunication equipment user to check debits from the account. Cloning can be combated by detecting duplicates in the public transport network, possibly by interacting with the telecommunication equipment. In a fourth application, the user has both a mobile telephone and a contactless card for access to the transport network, for example a Navigo™ type card. The card then constitutes the security element including identification data required when using the first protocol. It identifies the mobile telephone, although not being physically associated to it. In this application, to recharge the card, ie. to credit a number of units or tickets to the user account allowing access to the network, the user passes the card in front of a specific terminal. An SMS is then sent to the mobile telephone. This SMS launches a mobile application allowing the card to be recharged. Later on the user passes the card in front of another specific terminal. This time the card is actually credited. In the event that the account limit is exceeded, a message can be sent to the mobile telephone, which launches a specific application in the telephone in order to recharge the card.

Claims

1. Transaction method comprising the following steps: identification (S1) of mobile telecommunication equipment (3) including the transmission of at least one security element (6) identification information (ID) from the said mobile telecommunication equipment (3) to an electronic transaction terminal (2) according to a first contactless proximity communication protocol (P1) when the said security element is placed in a detection zone (ZD) of the electronic transaction terminal (2); and electronic transaction (S2) between the said mobile telecommunication equipment (3) and the said electronic transaction terminal (2) according to a second communication protocol (P2).

2. Method according to the previous claim, in which the first (P1) and second (P2) communication protocols are distinct communication protocols.

3. Method according to one of claims 1 or 2, in which the identification information (ID) transmitted to the terminal (2) according to the first communication protocol (P1) is used to conduct the transaction according to the second communication protocol (P2).

4. Method according to one of the previous claims, comprising an additional authentication step for the telecommunication equipment (3).

5. Method according to one of the previous claims, in which the first communication protocol (P1) is uni-directional.

6. Method according to one of the previous claims, in which the second communication protocol (P2) is bi-directional.

7. Method according to one of the previous claims, in which the identification information (ID) includes a unique identifier for the telecommunication equipment (3) directly or indirectly associated with a telephone number for the telecommunication equipment (3).

8. Method according to one of the previous claims, in which the identification information (ID) also includes additional information (IS) enabling the terminal (2) to determine the second communication protocol (P2).

9. Method according to one of the previous claims, in which the identification information (ID) also includes additional information (IS) to locate the telecommunication equipment (3).

10. Method according to one of the previous claims, in which the second communication protocol (P2) is a contactless protocol that employs a mobile telecommunication network or a local wireless telecommunication network.

11. Transaction system (1) including an electronic transaction terminal (2) and mobile telecommunication equipment (3), in which: the mobile telecommunication equipment (3) includes a security element (6) provided to transmit at least one piece of identification information (ID) from the telecommunication equipment (3) to the terminal (2) according to a first contactless proximity communication protocol (P1) when the security element (6) is placed in a detection zone (ZD) of the terminal (2); and the electronic transaction terminal (2) includes a reader (8) defining the detection zone (ZD) of the terminal (2) and a means of communication (9) to relay an electronic transaction between the telecommunication equipment (3) and the electronic transaction terminal (2) according to a second contactless communication protocol (P2).

12. System according to claim 11 , in which the security element (6) is a bar code printed on the telecommunication equipment (3) or glued to the telecommunication equipment (3) or displayed on a screen (4) of the telecommunication equipment (3), the bar code including the identification information (ID).

13. System according to claim 11 , in which the security element (6) is an RFID transponder built into or fixed onto the telecommunication equipment (3).

14. System according to claim 11 , in which the security element (6) is a contactless smart card built into the telecommunication equipment (3) or inserted removably into the telecommunication equipment (3).

15. System according to one of claims 11 to 14, also including a server (11) relaying the electronic transaction between the terminal (2) and the telecommunication equipment (3) according to a second communication protocol (P2).