WO2014020244A1

WO2014020244A1 - Secure payment method and device intended for implementing said method

Info

Publication number: WO2014020244A1
Application number: PCT/FR2013/000207
Authority: WO
Inventors: Benito PENNELLA
Original assignee: Pennella Benito
Priority date: 2012-08-02
Filing date: 2013-07-29
Publication date: 2014-02-06
Also published as: FR2994306A1; FR2994306B1

Abstract

The invention relates to a secure payment method and to a device intended for implementing said method. The invention relates to a transaction validation method, characterized in that it comprises the following steps: a) associating at least one payment means (18.1, 18.2,... 18.n) with a self-contained validation device (10); b) presenting the payment means (18.1) to an apparatus (21) in charge of carrying out a desired transaction, with a view to carrying out said transaction; c) querying (12) said self-contained validation device (10); d) having the client perform a deliberate operation, characteristic of the validation of the transaction, on said self-contained validation device (10); and e) validating (16) and performing the transaction. The present invention can be used for securing the transactions that use payment means, in particular debit cards, credit cards, bank cards, or the like.

Description

Secure payment method and device for implementing said method.

The invention relates to a secure payment method and to a device for implementing said method.

It is known to provide credit cards with various means of security to ensure that payment is made by the rightful owner.

However, a significant number of frauds persist.

It is therefore the object of the present invention to provide a method of secure payment and / or withdrawal of money.

It is also the object of the present invention to provide such a method that can be implemented anywhere in the world.

It is also the object of the present invention to provide such a method generating only a moderate transaction overhead.

These objects are achieved according to the invention by a transaction validation method implementing a simple device preferably housing type comprising at least one validation key.

The subject of the invention is mainly a transaction validation method characterized in that it comprises the following steps:

a- associate at least one means of payment with an autonomous validation device;

b- present the means of payment to an apparatus responsible for carrying out a desired transaction, with a view to effecting said transaction;

c- querying said autonomous validation device;

d- perform a voluntary operation by the client on said autonomous validation device characteristic of the validation of the transaction;

e- validate and complete the transaction.

The invention also relates to such a method characterized in that the autonomous validation device comprises a transaction validation key.

The invention also relates to such a method characterized in that the autonomous validation device further comprises a transaction repudiation key corresponding to a rejection of said transaction.

The invention also relates to such a method characterized in that the interrogation and validation is performed via a telephone network. The invention also relates to such a method characterized in that said telephone network is a wireless cellular telephone network, and in that the autonomous validation device is a cellular telephone adapted to operate with such a network.

The invention also relates to such a method characterized in that further comprises a configuration step during which the user designates one of the phone keys as a validation key.

The invention also relates to such a method characterized in that the validation is performed by transmitting an encrypted message.

The invention also relates to such a method characterized in that the encryption is effected by transmitting a predetermined occurrence of a pseudo-random code from a determined pseudo-random code generator.

The subject of the invention is also such a method characterized in that it comprises a communication interface capable of emitting a signal characteristic of pressing a validation key of a transaction.

The invention also relates to such a method characterized in that said device is furthermore a cellular telephone provided with an encryption device and in that one of the keys of the telephone also provides the function of a validation key.

The invention will be better understood using the following figures:

FIG. 1 is a block diagram of the preferred embodiment of the validation device according to the invention,

FIG. 2 is an explanatory diagram of the method according to the invention,

FIG. 3 is a flowchart of the method according to the invention,

FIG. 4 is a flowchart of an application implemented by the method according to

the invention.

In Figure 1, there can be seen a validation device 10 according to the invention, autonomous comprising a power supply 15 typically a battery or a rechargeable battery.

A communication interface 11 receives a query 12 for the purpose of validating the transaction or not, such as a payment by credit card or a withdrawal of money. If the cardholder is at the origin of the transaction, he activates the validation key 13, for example with the word "YES". If the card holder (and bearer of the device according to the invention) is not at the origin of the transaction, he presses a key 14 for example the mention "NO" invalidating the transaction or advantageously does not respond which is considered a repudiation of the transaction. Advantageously, the validation device also comprises a third key, (not shown), of invalidation, permanent or temporary, of the bank card for which an attempted transaction, deemed illegitimate by the card owner upon receipt of The interrogation 12. Advantageously, the method of invalidation of the card comprises a step of entering a numerical or alphanumeric code.

For the validation devices 10 equipped with a display, in particular a display

alphanumeric, it is advantageous to display during a query 12 the relevant information on the current transaction, such as the currency used, the amount, the identity of the provider or merchant with whom the transaction is performed and the like. Alternatively the display is completed or replaced by an announcement in voice synthesis about the transaction.

Advantageously, a response is coded and / or encrypted. Advantageously, the coding is performed by a pseudo-random code generator 17 synchronized with a similar pseudo-random code generator of the banking system.

Advantageously, the coding is performed by a pseudo-random code generator 17, synchronized with a similar generator, that is to say based on the same polynomial of a bank transaction validation system. For example, the validation of the operation, by pressing the key 13, corresponds to the transmission 16 of a code having the following occurrence with respect to the previous transmission 16 generated by the arrangement 10 according to the invention, while the repudiation of the operation following the pressing of the key 14 or a non-activation of the validation key 13 during a predefined period of time, for example equal to two minutes corresponds to the jump of at least one occurrence successive codes generated by a pseudo random generator 17.

In a first variant embodiment, the device 10 is a dedicated box comprising communication means (the communication interface 11) adapted to a communication network, advantageously wireless, dedicated to either an existing type network such as the GPS upstream channel, Argos beacon or, preferably, the cell phone network.

Preferably, the housing 10 is a cellular phone type GSM, smartphone or other.

Although such a telephone may be provided with specific validation keys 13 and repudiation 14, it is more economical to assign the function of said keys to keys.

pre-existing phone. Preferably, the assignment to pre-existing keys of the validation or repudiation functions is performed during an initialization procedure by the end user so as to make it extremely difficult for the unauthorized person to validate without knowing which key the phone plays the role of the validation key 13.

Advantageously, the interrogation 12 and the validation or repudiation response communications 16 are performed by service messages (SMS). The program for assigning validation and processing keys is stored in a permanent memory of the telephone delivered by the manufacturer or provided as an application.

In FIG. 2, there can be seen a housing 10 provided with at least one validation key 13 to which a plurality of payment means 18.1, 18.2 to 18.n have been associated, typically bank cards provided in a known manner with the chips 19 and 18. / or tracks 20. Thus, a single box 10 makes it possible to perform the validation of transactions performed by a plurality of cards. When introducing a card, for example the card 18.1, in a device 21 responsible for a transaction such as a payment terminal or a cash dispenser, the latter establishes a communication 22 with a bank symbolized by the storage medium 23 as well as with the housing 10. The customer having introduced the card 18.1 in the apparatus 21 receives a message on its housing 10, provided that the bank 23 has authorized the transaction. To terminate the transaction, the customer presses the key 13 of the case 10. In the case where the card 18.1 is a false card and / or illegitimately used, the holder of the card carrying the case 10 does not validate the operation. which is stopped and appropriate measures are taken such as, for example, the non-return of the card 18.1 by the apparatus 21, ...

In FIG. 3, an example of a treatment sequence according to the invention can be seen.

At 24, the customer initiates the transaction, for example by the introduction of a payment card 18.1 in a suitable reader 21. In known manner, by invitation, the customer enters his PIN code in 25.

In 26, in the case of withdrawal of money, the customer enters the amount of the transaction to be made. In the case of a purchase, the merchant enters the amount to be paid.

At 12, the banking system comprising the apparatus 21 and the bank 23 issue the interrogation of the validation device 10. The banking system knows the generator polynomial of the pseudo-random code generator as well as the occurrence of the expected response as a function of the transaction history performed by the customer.

At 16, the system checks to see if a valid validation has been received from the client. The transmission of a valid validation 27 is accepted in the case where the code generated by the pseudo-random code generator advantageously accompanied by the transaction number issued by the bank 23 corresponds to the expected values. Preferably, the bank also verifies the telephone number of the transmitter and compares it with the number of the box 10 of the customer registered in its computer system 23. The validation 27 makes it possible to perform the transaction.

A repudiation 28 corresponds either to the absence of entry on the key 13 or the entry of a key 14. In such a case, the operation is rejected.

It should be noted that the SMS to be exchanged have an extremely small amount of data, so it is possible and advantageous to assign this type of message a high priority even in the case of a congested telephone network.

The method according to the present invention is extremely simple to implement for the end customer insofar as it suffices to press a key to automatically generate a validation message, without having to memorize or enter a confidential code. In the preferred embodiment implementing on the one hand smart cards and on the other hand a cellular network, it benefits from all the security systems that are already incorporated.

As a variant, the coding uses, in addition to and / or instead of a pseudo-random code generator, a function of the time of the establishment of the call 12.6.

Advantageously, the application is a standard application, the same for all customers implementing a platform as marketed on the IPhone, Android, Windows name. The personalization that is to say the association with at least one credit card is done for example by entering a code communicated by the bank. Alternatively, the transaction authorization is prior to the transaction request, for example the introduction of a bank card in a card reader of a cash dispenser. For example, the user authorizes a withdrawal for a credit card for a limited time for example to two minutes, four minutes or ten minutes by pressing the validation key 13 of his phone and, after storing it, goes to distributor and performs the withdrawal operation.

This avoids having to handle the phone in public in front of the distributor.

Advantageously, the user indicates on the phone the amount of the desired transaction, either by entering the amount on the number keys of the phone, or by selecting the amount among the proposed amounts by pressing the validation key the number of times

corresponding to the desired amount.

In Figure 4, we can see the preferred example of execution of a smartphone application according to the invention.

In 41, the application is initialized, for example by entering a code provided by the bank to associate the phone to a credit card. At 42, the SMS service message reception detection is performed. It is understood that the SMS is given as an example but we implement the most suitable network, typically the fastest network (UTMS data network, 3G, 3G +, 4G or the like).

At 43, the application reads the received SMS.

In 44, the application has identified whether it is a request for validation.

If no, we go back to 42.

If yes, at 45, the application displays on the smartphone screen a validation request message.

In 46, in the absence of entry of the validation key 13, or in the case of entry of the repudiation key 14, 42 is returned without transmission of response.

On the contrary, if the validation key 13 is entered, it goes to 16. In 16, the application generates and sends the validation SMS containing the data expected by the bank. Alternatively, the cell phone has one or more connectors capable of receiving a chip (electronic circuit) of a smart card (credit card, withdrawal or payment) so as to be able to substitute for at least one such card. Advantageously, the telephone implemented according to the present invention comprises means, preferably encrypted, short-distance communication type Bluetooth, RFID, contact or other. Advantageously, the range is reduced and / or the directivity is increased to reduce to avoid the interception of data exchanges with a payment terminal, transaction or withdrawal of money adapted to communicate with the phone.

It is understood that a housing according to the unique invention, including a single phone, can ensure the security of a plurality of cards. Either a single validation server associates the box with a plurality of cards, or the validation server of each issuing agency and / or manager of such a card associates the card holder to its validation box, including his phone. It can be convenient, but not necessary, the same touch of the case the validation key for all the cards associated with said box. It is the same for the repudiation key. A possible change of telephone or line (SIM card) is immediately reported to each issuing agency and / or manager of a card protected by the device according to the invention by the user or, on his behalf, by the operator of telecommunication. The phone is identified by its unique identification number (IMEI) as well as by the identification smart card (SIM card) issued by the telecommunication operator and assigning a telephone number. Security is further enhanced by combining the identification number of the phone with that of the SIM card. The combination of these two numbers is for example a concatenation, an addition, or, preferably a multiplication. In the preferred embodiment each of the identification numbers of the telephone and the SIM card are prime numbers of randomly selected lengths making it very difficult to guess which prime numbers are used among all prime numbers. In the case of securing a plurality of payment means 18.1, 18.2, ... a prime number of great length is associated in the SIM card with each payment means. The security server of the bank 23 knows at least one of said prime numbers, preferably both, associated, for example, the payment means 18.1 to secure. Alternatively, the two prime numbers associated with a payment means 18.1 are distributed on two mutually cooperating security servers. During the initialization of the transaction, the interrogation 12 is not only transmitted by a secure channel, but is also encrypted by a "public key and private key" type algorithm, or RSA, the two so-called prime numbers playing the roles. public key and private key. Although the two prime numbers are kept secret, preferably, the unique identification number of the telephone (IMEI), common to all means of payment 18.1, 18.2, ..., 18.n is considered as the public key.

The telephone or, preferably, the SIM card decodes the interrogation 12, and elaborates a validation or repudiation response 16 according to the keys 13 or 14 captures and encrypts the response developed according to the same algorithm. The phone transmits the encrypted response 16.

As a variant, each secure payment means 18 according to the invention comprises means (for example, incorporated in the chip 19) for storing and sending, on command, an encryption key considered here as a public key; the telephone, or preferably the SIM card containing the encryption key considered here as a private key. During the initialization of the transaction, for example after the entry of the confidential code (PIN), the apparatus 21 initiates the transmission of the interrogation 12 and activates the preferably encrypted transmission over a short range of Bluetooth, RFID type. , by contact or other, by the card 18 of the public key to the phone that presents it to the SIM card. If necessary, the device 21 provides power to the card 18. On the other hand, the phone receives the interrogation 12, warns the user and presents it to the SIM card. The phone communicates to the SIM card if the validation key 13 or the repudiation key 14 has been entered. The SIM card decrypts with its private key interrogation 12, elaborates, according to the key 13 or 14 enters the corresponding response expected. The SIM card encrypts the preferred response by the public key provided by the payment means 18. The phone responds advantageously as an SMS. This response is transmitted to the bank 23 corresponding to the card 18 used. The bank 23 decrypts the response by the private key and if the answer corresponds to that expected with input of the validation key 13 authorizes the transaction. It should be noted that a possible interception of the public key does not make it possible to carry out a fraudulent operation. However, the risk of this interception can be avoided, either by directly memorizing the couples private key- public key with an identification of the means of payment 18 associated in the SIM card interrogation 12 containing in clear or with a different encryption preferably lower than the RSA encryption the identification of the means of payment 18 corresponding to the current transaction; either the public key is transmitted in the interrogation 12 in the clear or with a different encryption preferably lower than the RSA encryption.

The RSA encryption implements a number of bits (for example equal to 512, 1024, 2048, 4096, 8182 or other) which is chosen according to the number of clients (boxes 10) and the payment means 18 to be protected to dispose of a number of prime numbers sufficient to allocate public keys and private keys. Preferably, in accordance with the conventional RSA encryption strategy, only a small percentage of available prime numbers are allocated as encryption keys. In addition, a large number of usable prime numbers makes it possible to use a single private key per user (or SIM card). However, a plurality of private keys by a single SIM card (typically a private key per payment means 18) is not outside the scope of the present invention. In such a case the SIM card advantageously comprises a table of correspondence between means of payment 18, or between public keys on the one hand and the private keys on the other hand. It is understood that the allocation of the same number as a key (public and / or private) to several users or several cards, although not preferred, is not outside the scope of the present invention.

It is understood that the compatible protection means can be combined without departing from the scope of the present invention. For example, bank 23 will only validate an expected response

(correct) if it comes from a phone whose IMEI number has been previously registered as belonging to the legitimate user.

Insofar as the housing 10 is the only means in which the user can have confidence it may be advantageous to provide it with security means, including biometric. In the case of phone with a camera, it can, for example, be used to compare the back of the eye of the user with that recorded in the SIM card. Answer 16 is developed only in case of correspondence. The biometric validation is requested at the initialization of the security application according to the invention, with each transaction, or, advantageously only during the "risky" transactions such as transaction of a significant amount, transaction made of a place where the customer seldom visits or from a reputable place for numerous attempts at fraud.

The present invention applies to securing transactions implementing payment means, including payment cards, credit cards, bank cards or the like.

Claims

A method of transaction validation characterized in that it comprises the following steps: a- associating at least one payment means (18.1, 18.2, ... 18.n) with an autonomous validation device (10);

b- present the means of payment (18.1) to a device (21) charged with performing a

desired transaction, in order to effect said transaction;

c- interrogating (12) said autonomous validation device (10);

d- perform a voluntary operation by the client on said autonomous device of

validation (10) characteristic of the transaction validation;

e-validate (16) and perform the transaction (27).

2. Method according to claim 1 characterized in that the autonomous validation device (10) comprises a key (13) for transaction validation.

3. Method according to claim 2 characterized in that the autonomous validation device (10) further comprises a key (14) transaction repudiation corresponding to a rejection of said transaction.

4. Method according to any one of the preceding claims, characterized in that

the interrogation (12) and the validation (16) are carried out via a telephone network.

5. Method according to claim 4 characterized in that said telephone network is a

wireless telephone network, cellular, and in that the autonomous validation device (10) is a cell phone adapted to operate with such a network.

6. Method according to claim 5 characterized in that further comprises a step of

configuration during which the user designates one of the keys of the telephone as validation key (13)

7. Method according to any one of the preceding claims, characterized in that the validation (16, 27) is carried out by transmission of an encrypted message.

8. The method of claim 7 characterized in that the encryption is effected by transmitting a predetermined occurrence of a pseudo-random code from a determined pseudo-random code generator.

9. Autonomous validation device (10) for implementing the method according to one

any of the preceding claims characterized in that it comprises a communication interface (11) capable of emitting a signal characteristic of pressing a key (13) for validating a transaction.

10. Device according to claim 9 characterized in that said device is furthermore a cell phone provided with an encryption device (17) and in that one of the keys of the telephone further provides the function of validation key.