WO2013089568A1

WO2013089568A1 - Method of making payment transaction via cellular telephone system and telecommunication system for conducting payment transactions

Info

Publication number: WO2013089568A1
Application number: PCT/PL2011/000132
Authority: WO
Inventors: Rafał STYCZEŃ
Original assignee: Iif Spółka Akcyjna
Priority date: 2011-12-12
Filing date: 2011-12-12
Publication date: 2013-06-20

Abstract

A method to carry out payment transactions via a cellular telephone system and a telecommunication system for conducting payments using mobile telephones consisting in that the mobile station MS establishes a short-range wireless connection, through an NFC module contained therein, with an NFC tag applied to identify a Point of Sale POS. Upon the connection established, the NFC module in the mobile station MS deciphers an identifier of the POS (4) contained in the NFC tag. Next, payment amount details are entered in the mobile station MS. The mobile station MS communicates with a payment transaction processing server. As soon as the connection is established, the mobile station MS transmits the encrypted data to the payment transactions processing server using a 2G/3G or an LTE standard of the mobile encrypted data transmission; the data transmitted comprise an identifier of the user, an identifier of the POS (4), and a payment amount. Next, the payment transaction processing server (5) compares the user's identifier and the identifiers of the users' banks in order to identify the target bank of a particular user.

Description

Method of Making Payment Transaction via Cellular Telephone System and Telecommunication System for Conducting Payment

Transactions

The present Invention relates to a method of making payment transactions via a cellular telephone system and to a telecommunication system for conducting payments via a cellular (mobile) telephone, preferably a smartphone. Both the method and system as disclosed in the present Invention use a server and a bank interface. The Invention is developed to carry out payment transactions, for example, in shops, public transportation vehicles, or in the Internet.

A method and a device for conducting financial transactions in a mobile environment is known from the invention description as disclosed under the Patent No. WO2008005018 (A2) . In the said Patent, mobile devices, such as a cellular telephone or a wireless connected personal digital assistant (PDA) communicate with a mobile financial transaction system (MFTS) where information on users and transactions are stored. The MFTS receives information on a payment to be made on behalf of a particular user. Additionally, the MFTS receives information relating to payment sources available for use while carrying out payment. The selected information on payments and payment sources are transmitted to the user' s mobile telephone via a wireless network and displayed for user selection. The user selects an amount to be paid and a payment source. The MTFS orders the recipient of the payment instruction to make a given payment to identified entities-payees. The necessary real-time updated accounts and payment balances are provided to the user's mobile telephone.

A mobile device is known from the invention description as disclosed under the Patent No. GB2476989 (A) . Preferably, this device is a cellular telephone that activates secure functions using authentication tags. For this purpose, the mobile device is brought as close as possible to an authentication tag with which the said device communicates using an NFC technology. The system described under this Patent comprises a server that communicates with the cellular telephone. With this system in use, it is possible to activate virtual bank cards in order to make a payment through a contactless payment point.

Another solution is known from the invention description as disclosed under the Patent No. JP20020141656. Under this Patent, a mobile telephone communicates with the first device for the purpose of receiving money. The information from the first device is transferred to the second device. The second device transmits the information received to a registration centre .

According to the Invention as disclosed herein, the essence of the method of making payment transactions via cellular telephone system consists in that a mobile station MS (1) (preferably a smartphone) establishes a short-range wireless connection, through an NFC module (2) contained therein, with an NFC tag (3) applied to identify a Point of Sale POS (4). Upon the connection established, the NFC (2) module in the mobile station MS (1) decodes an identifier of the POS (4) contained in the NFC tag (3) . Thereupon, payment amount details are entered in the mobile station MS (1). The mobile station MS (1) communicates with a transaction payment processing server (5) via a centre of the cellular telephone system. As soon as the connection is established, the mobile station MS (1) transmits encrypted data to the payment transactions processing server (5) using a 2G/3G or an LTE standard of the mobile encrypted data transmission; the data transmitted comprise the user's identifier, the identifier of the POS (4), and the payment amount. Next, the payment transaction processing server (5) compares the user's identifier and the identifiers of the users' banks to identify the user's target bank. Then, the payment transactions processing server (5) communicates with the payment Application Programmatic Interface API (6) in the user's bank via a data transmission network. Thereupon, the payment transaction processing server (5) sends a payment request to the user's bank utilizing the ΑΡΙ' (6); the bank requests that the given amount is transferred from the user's bank account to the bank account of the payment transactions processing server (5). Then, the user's bank transfers the requested payment amount from the user' s bank account to the account of the payment transactions processing server

(5) , PROVIDED, however, that the necessary amount is available in the user's bank account. As next, the API

(6) sends a response stating that the money transfer has been performed, i.e. the money has been transferred to the payment transactions processing server (5) . In the case, the available account balance in the user's account is not enough to cover the payment value, the API (6) sends a response saying that there is not enough money in the user's bank account. Then, the payment transaction processing server (5) sends a report on the money transfer performed or a report stating that the account balance available to MS (1) is insufficient. At the same time, the payment transaction processing server (5) sends the above report to, optionally: a point of termination station POTS (7) in the POS (4) in the form of an SMS or to the POS terminal (8) in the POS (4). Additionally, the payment transactions processing server (5) accumulates money supplies received from the payment transactions performed in its bank account. By the end of the day, the payment transactions processing server (5) makes a cumulative money transfer to the account of the POS (4).

According to the present Invention, there is also one favourable variant of the payment method to be utilized in two cases: the user's bank is not equipped with the API (6) or the user's bank does not make the API (6) available for communication with the payment transactions processing server (5) . In each of the two cases above, the communication between the user' s bank and the payment transactions processing server (5), as well as the payment amount transfer procedure from the user's bank account on the account of the payment transactions processing server (5) are performed via an internet banking platform. During the communication, the payment transactions processing server (5) simulates the user, and the authentication of the money transfer is carried out with the use of a one-time password sent as an SMS.

Another favourable variant of the method under this Patent uses a Personal Identification Number 'PIN' . In this case, first, the NFC module (2) of the MS (1) has to decrypt the identifier of the POS (4) from the NFC tag (3) ; thereupon, the PIN must be entered. The details of the payment amount cannot be entered in the MS (1) until the PIN has been entered. According to the Invention as disclosed herein, the essence of the telecommunication system for conducting payment transactions is a mutual communication among the system components. The following components make up the entire system: a mobile station MS (1) equipped with an NFC module (2) applied to establish a short-range wireless connection via an NFC tag (3) that identifies a POS (4); a payment transactions processing server (5) that communicates with the following units: the MS (1); the API (6) located in a user's bank; a point of termination station POTS (7) situated in the POS (4); and/or a terminal (8) of the POS (4).

According to the Invention disclosed, a favourable variant of the communication system is provided for the case when the user's bank has not the API (6) or this bank does not make its API (6) available for the communication with the payment transactions processing server (5) . This favourable variant causes the MS (1) to communicate with the user' s bank via an internet banking platform.

The advantage of the method and the system under the Invention disclosed consists in that the entire architecture is minimized owing to the utilization of mobile stations, i.e. cellular telephones owned by all users, and because there is solely one payment transactions processing server. Moreover, both the method and the system according to the Invention disclosed guarantee an easy and quick payment transfer.

The method and the system under this Invention are shown in the drawing attached to this Application; they are demonstrated by one practical example.

The method of making payment transaction via cellular telephone system consists in that the mobile station MS (_1) , preferably a cellular telephone, establishes a short-range wireless connection, through the NFC module { 2 ) contained therein, with the NFC tag (3) that identifies the POS (4) . Next, the NFC module (2) of the MS ( I ) deciphers the identifier of the POS (4_) from the NFC tag (3) . To carry out this procedure, the cellular telephone has to be brought into proximity of the NFC code.

Thereupon, the user enters payment amount details in the MS (1_) . In the case of a large-value payment, the system requires the user to enter their PIN code encrypted by using the MD5 algorithm. Then, the MS (_1) communicates with the payment transactions processing server (_5) via the centre of the cellular telephone system. As soon as the contact is established, the MS (_1) transmits the encrypted data to the payment transactions processing server (_5) using a 2G/3G or an LTE standard of the encrypted mobile data transmission; the data transmitted comprise the identifier of the user, the identifier of the POS (_4 ) , and the payment value. Next, the payment transaction processing server (_5) compares the user's identifier and the identifiers of the users' banks to identify the target bank of the particular user. Then, the payment transactions processing server (5) verifies whether or not the PIN/MSISDN agree with the data contained in the database. It also confirms whether or not the ID of the POS (shop) stands in the list of trusted recipients and it examines whether or not any payment transactions were carried out using the same MSISDN in any other part of a particular area (i.e. country) over the last one hour period. For authentication, this system applies a pair: PIN key and MSISDN. It is practically impossible to carry out any transaction from the bank account that was already utilized by any other cellular telephone with a different MSISDN ascribed to the SIM card therein. The next step is that the payment transactions processing server (_5) communicates, via the data transmission network, with the API (6) located in the user's bank. Next, the payment transactions processing server (5) sends, via the API

(_6) , a payment request to the user' s bank using the API

(6) , and requests a particular amount to be transferred from the user's bank account to the bank account of the payment transactions processing server (5_^) . Subsequently, the user's bank transfers the requested payment amount from the bank account of the user indicated to the account of the payment transactions processing server

(_5) , provided, however, that the necessary amount is available in the user's bank account. After that, the API

(6) sends a response to the payment transactions processing server (5; the response confirms that the money transfer has been performed. But, in the case, the available account balance of the user is not enough to cover the payment amount as requested, the API (_6) sends a response saying that there is not enough money in the user's bank account. At that point, the payment transaction processing server (5) sends a report on the money transfer performed or a report stating that the account balance available is insufficient. Such a report is sent to the MS (_1) and, optionally, to: a point of termination station POTS (7) in the POS ( _) , in the form of an SMS, or to the POS terminal (8) in the POS (4) using a coded internet transmission. Additionally, the payment transactions processing server (_5) accumulates money supplies received through the payment transactions performed in its bank account, and, by the end of the accounting period, makes a cumulative money transfer to the account of the POS (4). Should one purchase transaction show an abnormal, weird profile, the payment transactions processing server (5) demands an additional authentication by sending a request, in the form of an SMS, to confirm this specific purchase transaction. The purchase procedure can be continued only after the uncertain transaction is confirmed. Payment transactions are not settled online (monies are not instantly deposited to the bank account of a given shop, but, they are settled in the future- dated separate transactions) . When any irregularity is detected before the money transfers are effected to the bank accounts, then, those money transfers are withheld for want of clarification (the user receives a telephone call asking him/her to confirm the payment) .

Bank accounts of the recipients receiving money transfers are defined in the payment transactions processing server (_5) ; thus, it is practically impossible to transfer money to a bank account that has not been pre-defined .

In addition, there is another variant of the Invention disclosed; according to this variant, the system described can be applied also in the situations where the user' s bank is not equipped with the API {6) or this bank does not make its API (_6) available for the communication with the payment transactions processing server (_5) . In this case, the communication between the user's bank and the payment transactions processing server (_5) proceeds via the internet banking platform as does the payment transfer from the user' s bank account to the payment transactions processing server (_5) . The latter one (5) simulates the user, and the authentication of the money transfer is effected using a one-time password being sent as an SMS. The telecommunication system for conducting payment transactions is made up of the following components: a mobile station MS (1_) equipped with an NFC module (2) to establish a short-range wireless connection with an NFC tag (3) , which identifies a point of sale POS (_4) ; a payment transactions processing server (5) that communicates with: the mobile station MS (1_) , the API (_6) located in the user's bank, the point of termination station POTS ( ) situated in the POS (4) , and/or with the POS terminal (8) in the Point of Sale (4) .

Claims

A method to carry out payment transactions via a cellular telephone system wherein the mobile station MS (1) establishes a short-range wireless connection, via the NFC module (2) inserted therein, with the NFC tag (3) , which identifies the point of sale POS (4_) . Upon the connection established, the NFC (2) module in the mobile station MS (_1) deciphers the identifier of the POS ( _) contained in the NFC tag (3_) . Next, payment amount details are entered in the mobile station MS (1) . The mobile station MS (1) communicates, via a centre of cellular telephone system, with the transaction payment processing server (5) . As soon as the connection is established, the mobile station MS (1) transmits the encrypted data to the payment transactions processing server (5) using a 2G/3G or an LTE standard of the mobile encrypted data transmission; the data transmitted comprise the identifier of the user, the identifier of the POS (4_) , and the payment amount. Then, the payment transaction processing server (.5) compares the user's identifier and the identifiers of the users' banks to identify the target bank of the particular user. Thereafter, the payment transactions processing server (5) communicates with the payment Application Programmatic Interface API (6) in the user's bank via a data transmission network. Next, the payment transaction processing server (5) sends a payment request to the user's bank using the API (6), and it requests the given amount to be transferred from the user' s bank account to the bank account of the payment transactions processing server (5). Thereafter, the user's bank transfers the requested payment amount from the user' s bank account to the account of the payment transactions processing server (_5) , provided, however, that the necessary amount is available in the user's bank account. As next, the API (_6) sends a response stating that the money transfer has been performed, i.e. the money has been transferred to the payment transactions processing server (_5) . In the case, the available account balance of the user is not sufficient to cover the payment amount as requested, the API (_6) sends a response saying that there is not enough money in the user's bank account. Thereupon, the payment transaction processing server (5) sends a report on the money transfer performed or a report stating that the account balance available to the MS (_1) is insufficient. AT the same time either of the two reports is sent to, optionally: a point of termination station POTS ( ) in the POS (4) , in the form of an SMS, or to the POS terminal (8) in the POS (4_) using a coded internet transmission system. Moreover, the payment transactions processing server (_5) accumulates money supplies received through the payment transactions performed in its bank account, and, by the end of the accounting period, makes a cumulative money transfer to the account of the POS (4).

2. The method as set forth in Claim 1, wherein in the case, the user's bank is not equipped with the API (_6) or the user' s bank does not make its API (_6) available for the communication with the payment transactions processing server (5) , the communication between the user' s bank and the payment transactions processing server (_5) proceeds via the internet banking platform as does the payment transfer from the user' s bank account to the payment transactions processing server (5) . The latter one (5) simulates the user, and the authentication of the money transfer is effected using a one-time password being sent as an SMS.

3. The method as set forth in Claim 1 or Claim 2, wherein a Personal Identification Number ^λΡΙΝ' is entered after the NFC module (2) of the MS (1) has decrypted the identifier of the POS (4_) from the NFC tag (3) and before the payment value details are entered in the MS (1_) .

4. The method as set forth in Claim 1, Claim 2 or Claim 3, wherein the mobile station MS is a smartphone.

5. A telecommunication system for conducting payment transactions, wherein it consists of the following components: a mobile station MS (1) equipped with an NFC module (2_^) to establish a short-range wireless connection with an NFC tag (_3) _/ which identifies a point of sale POS (4_) ; a payment transactions processing server (_5) that communicates with: the mobile station MS (1) , the API (_6) located in the user's bank, the point of termination station POTS (7) situated in the POS (4) , and/or with the POS terminal (8) in the Point of Sale (_4) .

6. The telecommunication system for conducting payment transactions as set forth in Claim 5, wherein in the case the user' s bank is not equipped with the API (6) or the user's bank does not make its API (_6) available for the communication with the payment transactions processing server (_5) , then, the mobile station MS (1) is able to communicate with the user's bank via the internet banking platform.