EP1116194A1 - Method and system for paying for goods or services - Google Patents
Method and system for paying for goods or servicesInfo
- Publication number
- EP1116194A1 EP1116194A1 EP99955714A EP99955714A EP1116194A1 EP 1116194 A1 EP1116194 A1 EP 1116194A1 EP 99955714 A EP99955714 A EP 99955714A EP 99955714 A EP99955714 A EP 99955714A EP 1116194 A1 EP1116194 A1 EP 1116194A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- payment
- data
- mobile radio
- telecommunications
- base
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
- 238000000034 method Methods 0.000 title claims abstract description 80
- 238000012790 confirmation Methods 0.000 claims abstract description 14
- 230000008569 process Effects 0.000 claims description 39
- 230000005540 biological transmission Effects 0.000 claims description 12
- 238000004891 communication Methods 0.000 claims description 7
- 238000006243 chemical reaction Methods 0.000 claims description 6
- 238000012546 transfer Methods 0.000 description 9
- 230000008901 benefit Effects 0.000 description 3
- 230000001413 cellular effect Effects 0.000 description 2
- 238000013478 data encryption standard Methods 0.000 description 2
- 238000012545 processing Methods 0.000 description 2
- 230000005855 radiation Effects 0.000 description 2
- 238000012795 verification Methods 0.000 description 2
- 238000013475 authorization Methods 0.000 description 1
- 230000015572 biosynthetic process Effects 0.000 description 1
- 239000000571 coke Substances 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000018109 developmental process Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000005755 formation reaction Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000009466 transformation Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/16—Payments settled via telecommunication systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/04—Payment circuits
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/20—Point-of-sale [POS] network systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
- G06Q20/322—Aspects of commerce using mobile devices [M-devices]
- G06Q20/3223—Realising banking transactions through M-devices
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
- G06Q20/322—Aspects of commerce using mobile devices [M-devices]
- G06Q20/3229—Use of the SIM of a M-device as secure element
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
- G06Q20/327—Short range or proximity payments by means of M-devices
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
- G06Q20/363—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes with the personal data of a user
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
- G06Q20/367—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
- G06Q20/3674—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes involving authentication
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/42—Confirmation, e.g. check or permission by the legal debtor of payment
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/0866—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means by active credit-cards adapted therefor
Definitions
- the present invention relates to a method for the secure payment of goods or services by means of a mobile radio device and a base telecommunication station which communicates with the mobile radio device via electromagnetic waves.
- the invention further relates to a system for paying for goods or services.
- the user transmits the data necessary for the transfer.
- the data can be transmitted, for example, by the voice of another person belonging to the financial institution. It is also possible for the user's telephone to send short messages to the telecommunications facility of the financial institution, which contain all the data required for the transfer. The financial institution can then carry out the transfer on the basis of these short messages.
- Encryption For the secure transmission of personal information or access authorization information, the corresponding Data encrypted before transmission.
- Encryption often referred to as encryption, means the conversion of data into an illegible form. Almost always, both encryption and decryption require some secret information, commonly known as a key.
- DES Data Encryption Standard
- the transformation of the original text into the ciphertext consists of a sequence of mathematical operations such as permutations, non-linear substitutions and logical product formations.
- An individual key is used for the user.
- Asymmetric encryption methods are in contrast to the symmetrical methods. Different keys are used for encryption and decryption, which are such that data that has been encrypted with one key can only be decrypted with the other.
- Telephone banking methods can also be carried out using mobile radio devices, such as mobile telephones.
- Mobile telephones according to the GSM standard comprise, on the one hand, the actual telephone with input and display devices and, on the other hand, a so-called SIM card, which has an encrypted personal identification number (Personal Identification Number, PIN) stored.
- SIM card which has an encrypted personal identification number (Personal Identification Number, PIN) stored.
- PIN Personal Identification Number
- SIM Application Tool Kit GSM 11.14
- a new technology enables access to these offers.
- the user needs a mobile phone with an integrated SIM toolkit and a SIM card that supports the new value-added functions.
- the customer switches on their mobile phone, enters the PIN number and selects their financial institution from the menu. If the mobile phone
- CTS Cellular Telephony System
- Such systems include a base station and a mobile phone for home use.
- the base station receives the calls from the associated cell phone internally free of charge and forwards them to the landline.
- this object is achieved by a method having the features of claim 1 or by a system having the features of claim 16, with advantageous refinements and developments arising from the subclaims.
- the method according to the invention for paying for goods or services by means of a mobile radio device and a base telecommunication device which communicates with the mobile radio device via electromagnetic waves characterized in that the base telecommunication station sends the data required for payment to the mobile radio device, the mobile phone device Confirmation of payment with the user queries, after the confirmation by the mobile device a payment process Sends payment instruction data and the mobile phone device or the telecommunications device of a financial institution or a biller sends receipt data for the radio payment process to the base telecommunications station.
- An advantage of the method according to the invention is that it is particularly simple since the data required for payment are automatically sent to a buyer's mobile radio device, so that the seller does not have to disclose this data to the buyer. Furthermore, the method meets the same security requirements as telephone banking methods via mobile phones. The security standards developed here can be adopted directly, which will contribute to a high level of acceptance of the method according to the invention. In addition, since the cell phone equipment or the telecommunication device of a buyer's financial institution sends receipt data for the radio payment process to the seller's base telecommunications station, the presence of a seller person is no longer absolutely necessary, which is why the method according to the invention offers considerable possibilities for reducing costs and is also suitable for automatic machines.
- information or data can also be transmitted in the form of short messages, messages or by means of one or more data packets.
- the communication of the mobile radio device with the base telecommunication station can also take place according to a mobile radio standard, such as the GSM standard, a cordless standard, the Bluetooth standard, an infrared standard, such as the IrDA standard, or a future one, using a CDMA method based, standard done ..
- the mobile radio device when carrying out the payment process, can be operated directly with a telecommunications device of a cash stituts or an invoice issuer, for example, in accordance with a mobile radio standard, such as the GSM standard.
- a mobile radio standard such as the GSM standard.
- the mobile radio device can send the payment instruction data to the base telecommunications station, which then transmits this data to a telecommunications device of the financial institution or the biller via a landline connection or according to a mobile radio standard, such as the GSM standard.
- the mobile radio device can communicate with the base telecommunication station by means of infrared radiation.
- the advantage of the latter option is that it is particularly cost-effective, since only the low fees of the fixed network apply.
- the telephone charges are generally lower than, for example, credit card commissions, so that the method according to the invention is also special in this case for both the buyer and the seller is inexpensive.
- the data received by the base telecommunication station can be converted by the mobile radio device before transmission m into a format suitable for a radio payment process
- the user of the mobile radio device is advantageously authenticated before the step of executing the payment process.
- This authentication can be carried out by entering a personal identification number or via biometric features. This measure ensures that the user of the mobile radio device is actually authorized to trigger the payment process.
- the uses with a personal identification number or the use of biometric features very high security requirements.
- an electronic cash register can transmit the data required for payment to the base telecommunications station. This further simplifies and automates the payment process, which makes the method according to the invention even simpler and cheaper.
- the data required for payment can, for example, the amount of money to be paid and / or the account number and / or the routing number of the recipient and / or the purpose, such as. B. include the invoice number.
- the system according to the invention for paying for goods or services comprises a basic telecommunication station with a radio device for sending data required for payment to a mobile radio device and for receiving data from the mobile radio device, the mobile radio device being a receiving device for receiving the data transmitted by the basic telecommunication station, an interrogation device connected to the receiving device for interrogating a confirmation of the payment and a transmitting device connected to the interrogation device for sending
- FIG. 1 shows a first exemplary embodiment of the present invention
- FIG. 2 shows a second exemplary embodiment of the present invention and FIG. 3 schematically shows the structure of the mobile radio device.
- the system according to the invention for paying for goods or services are explained below.
- the system according to the invention is to be installed in the shop floor of a seller, the buyer paying for goods via a mobile radio device of the system according to the invention.
- data and / or payment instruction data and / or receipt data required for payment are provided with a key (the key is appended to the corresponding data, for example) and / or encrypted with a key.
- the key is used for verification and / or decryption of the data encrypted with it.
- a base telecommunication station 1 is installed in the shop of the seller. This base telecommunication station 1 is advantageously connected to an electronic cash register 2, so that the data recorded by the cash register 2 are transmitted directly to the base telecommunication station 1.
- the base telecommunication station 1 corresponds to the base station of a CTS (Cordless Telephony System) with data transmission possibility. It can communicate with a mobile radio device 3 via electromagnetic waves.
- the mobile radio device is a mobile phone according to the GSM standard.
- the mobile radio device 3 could also be another electronic device, such as an appointment planner, which is equipped with means for radio transmission of data.
- the use of a cell phone according to the GSM standard has the advantage that no or very few modifications have to be made to the device.
- the base telecommunications station 1 of the seller sends the data required for a payment process and a key (key) for any subsequent encryption of data to be transmitted to the mobile phone 3 of the buyer.
- These data include, for example, the amount of the amount of money that has been transmitted by the electronic cash register 2, the telephone number of the base telecommunications station or the account number and the bank sort code of the seller.
- This data is received by the mobile phone 3 and displayed on the display 5 of the mobile phone 3.
- the mobile phone 3 then asks for confirmation that the amount of money displayed should be transferred from the account of the holder of the mobile phone 3 to the corresponding displayed account.
- the user can confirm via the emmission unit 4 of the mobile telephone 3.
- the mobile telephone 3 can query a special personal identifier number that is only required for transfers, or biometric features of the user can be recorded, as a result of which the user can be identified particularly securely and easily. If the user is authorized, the data required for the payment process or part thereof may be encrypted with the key transmitted together with this data by the base telecommunication station, and this payment instruction data from the mobile phone 3 to a telecommunications device 6 of a financial institution or a biller sent, and the corresponding amount debited or invoiced.
- the payment instruction data can also contain all or part of the data required for payment and the number of the mobile radio device. It is also possible that the key is only transmitted together with the payment instruction data, but not to the data Encryption or encryption of other data is used.
- the mobile telephone 3 then sends receipt data to the base telecommunications station 1 of the seller, so that the latter gains knowledge of the payment of his goods. Furthermore, the telecommunications device 6 of the financial institution or a biller could also transmit the receipt data to the base telecommunications station 1.
- the receipt data provided or encrypted with the same key may be decrypted in the base telecommunication station 1 or an assigned unit and, after successful decryption, sent to the cash register which, after successful verification of the key, issues the receipt and registers the amount as paid.
- the receipt data can also contain part of the data required for payment or data that describe the type of goods or that describe the price of the goods, and their receipt or processing triggers the output of the goods or the provision of the service.
- This possible further encryption of the data by means of a key, which is transmitted from the base telecommunication station to the mobile radio device, means that the data are also transmitted during a transmission that goes beyond the mobile radio system, for example via the fixed network to the server of a bank or a biller , secure against unauthorized access.
- FIG. 2 shows a further embodiment of the present invention.
- the exemplary embodiment shown in FIG. 2 differs from the exemplary embodiment shown in FIG. 1 only in that when the payment process is carried out, the mobile telephone 3 does not send the encrypted payment instruction data directly to the telecommunications device of the financial institution, but instead sends this data back to the base telecommunications station 1. This transmits then the data via a landline connection C or via a mobile radio connection to the telecommunications device 6 of the financial institution or a biller.
- the transmission method with which data is sent to the base telecommunications device 1 can differ from that with which the data in the first exemplary embodiment are sent to the financial institution.
- the seller makes his base telecommunication station 1 available to the buyer for the transmission of a short message.
- the payment process is designed to be particularly cost-effective since the buyer incurs no costs and the seller only has to pay the relatively low fixed network charges for a short message.
- the receipt data for the payment process together with the payment instruction data can be sent to the base telecommunication station by the mobile radio device. Furthermore, it is also possible for the payment instruction data to be interpreted as receipt data, so that no separate receipt data have to be sent out. Furthermore, the receipt data could be transmitted from the financial institution to the base telecommunication station 1.
- FIG. 3 shows possible configurations of the mobile radio device 3 of the exemplary embodiments explained above.
- the mobile radio device 3 has a receiving device 7, which receives the data required for payment, which have been sent out by the base telecommunications station 1. If this data has a format with which the payment process can be carried out directly, further processing of the data is not necessary. In this case, who is not in
- FIG. 3 shows, the data are transmitted to an interrogation device 9, which via the display 5 and the input direction 4 asks for confirmation of payment. If necessary, the authentication of the user explained above can also take place via this query device 9. If there is a confirmation of the payment and it has been established by the authentication that the user is authorized to make the requested payment, the data are transmitted to the transmission device 10, which sends out the data for the payment process. Before being sent out, the data may be encrypted using a digital signal processor.
- the data are then sent directly to a telecommunication device 6 of a financial institution or a biller, whereas in the second exemplary embodiment shown in FIG. 2, the data are sent back to the basic telecommunication station 1.
- the transmission device 10 sends receipt data for the payment process to the base telecommunications station 1.
- a conversion device 8 is provided in the mobile radio device 3, which converts the received data into a format that is suitable for a payment process. As shown in FIG. 3, this conversion device can be provided between the receiving device 7 and the interrogation device 9. However, there is also the possibility of providing the conversion device 8 between the interrogation device 9 and the transmission device 10.
- the mobile radio direction 3 can also transmit and receive separately. catch devices 7, 10 for communication with the base telecommunication device 1 and
- the base telecommunications device 1 is the ATM of a financial institution, which is connected to the central computer of the financial institution via a landline.
- a person makes a corresponding request to the ATM.
- the ATM sends this data together with a key to the mobile radio device 3, which asks for confirmation of the withdrawal process from the person.
- the authentication of the person is now advantageously carried out by means of the mobile radio device 3. If the person has been identified as authorized and has entered a confirmation for the withdrawal process m the mobile radio device, the mobile radio device sends keyed or encrypted data to the ATM, so that this is informed that the money can be paid out.
- the ATM communicates with the central computer of a financial institution via a landline connection.
- the base telecommunications station consists of an infrared interface according to the IrDA standard and a GSM module.
- the infrared interface and the GSM module are connected to the control system that is usually available in a machine or a cash register.
- the data can also be transmitted via an AT cellular interface based on an infrared interface.
- a short message is now sent to the mobile phone via infrared rays, which in plain text contains the question of whether the customer wants to pay for the desired goods at the desired price and, if necessary, a key number.
- the short message contains the data required for payment, optionally a key and the telephone number of a "sender".
- this telephone number can be permanently programmed in the machine or in the cash register and then corresponds to the telephone number of the biller.
- the customer reads the short message and, if he agrees, generates a "YES" answer. This is possible with many cell phones with just a few keystrokes or can be simplified with the SIM Application Toolkit.
- the short message generated by the customer is then sent to the "sender" phone number, ie to the biller.
- the service calculator of the invoice divider puts the amount on the customer's invoice, who in turn identifies himself by his phone number contained in his short message.
- the service computer of the biller then sends a message to the machine or the cash register to issue the desired goods. This message can be sent via GSM or via any type of fixed network or any network based on electromagnetic waves.
- the (optionally) sent key is checked in the cash register or in the machine, where it was generated, and the desired goods are dispensed.
- the key is checked or verified by comparing the transmitted key with a key stored in the base telecommunication station or an assigned unit after the key has been generated. After a successful comparison, ie if the two keys match, the paid goods are issued or the paid service is performed. Another specific exemplary embodiment of the invention is explained below:
- a customer stands in front of a machine and presses a button for a desired product or the customer stands at a cash register.
- the cash register or the machine sends a message, short message or corresponding data packets to the customer's mobile phone using infrared rays (for example IrDA), in accordance with the Bluetooth standard, a cordless standard or a mobile radio standard.
- this message contains a key which can be used on one or more of the following signal paths to encrypt the corresponding data.
- the message also contains the biller's number. This can also be a bank, a network operator or a department store chain.
- the message triggers a SIM Application Toolkit application on the mobile phone, which initiates a dialog with the customer.
- the customer is asked: "Do you want to buy a coke from this machine for € 1.50?" or "Do you want to pay DM 123.45 at Hertie's food department?”
- a message is generated - possibly after requesting a PIN - which contains the price, the type of goods, the tel. machine or cash register and, if applicable, that of the customer.
- This data is encrypted with the key and sent to the billing center.
- the request for a PIN e.g. B. from a certain amount, can be activated by the customer.
- the billing center the amount is placed on the customer's invoice, and a message encrypted with the same key is sent to the machine that, after successful decryption, dispenses the desired goods or to the cash register, which issues the receipt and the amount as paid registered.
- the billing center (the invoice splitter) is not restricted to a financial institution.
- the receipt data for the payment process does not have to be forwarded via a mobile radio system, such as the GSM system.
- the billing center can e.g. B. stand in a large department store that is networked with the cash registers.
- a randomly generated number with the payment instruction can be sent back to the bill divider and from there to the machine. Since the machine has generated the key, it can check it itself.
- encryption of the entire message known to the machine and the biller can be used to generate additional security. In this case, encryption does not have to take place in the mobile phone.
- An embodiment variant of the invention provides that the key is generated by the cash register / the machine or the base telecommunications station as a random number, since the key is checked again at the cash register / the machine.
- the key can also be changed in the billing center according to an algorithm known in the cash register / vending machine or the basic telecommunications station. If the algorithm is changed regularly via the connection of the cash registers to the billing center, abuse of the payment process is excluded.
Landscapes
- Business, Economics & Management (AREA)
- Engineering & Computer Science (AREA)
- Accounting & Taxation (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Strategic Management (AREA)
- General Business, Economics & Management (AREA)
- Theoretical Computer Science (AREA)
- Finance (AREA)
- Computer Networks & Wireless Communication (AREA)
- Economics (AREA)
- Development Economics (AREA)
- Marketing (AREA)
- Technology Law (AREA)
- Computer Security & Cryptography (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
- Mobile Radio Communication Systems (AREA)
- Telephonic Communication Services (AREA)
- Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)
- Cash Registers Or Receiving Machines (AREA)
Abstract
Description
Beschreibungdescription
Verfahren und System zum Bezahlen von Waren oder DienstenMethod and system for paying for goods or services
Die vorliegende Erfindung betrifft ein Verfahren zum sicheren Bezahlen von Waren oder Diensten mittels einer Mobilfunkeinrichtung und einer Basistelekommunikationsstation, die mit der Mobilfunkeinrichtung über elektromagnetische Wellen kommuniziert. Ferner betrifft die Erfindung ein System zum Be- zahlen von Waren oder Diensten.The present invention relates to a method for the secure payment of goods or services by means of a mobile radio device and a base telecommunication station which communicates with the mobile radio device via electromagnetic waves. The invention further relates to a system for paying for goods or services.
Herkömmlicherweise werden beispielsweise Waren in einem Ladenlokal bar, mit einem Scheck oder elektronisch über eine Kreditkarte oder eine speziell zu diesem Zweck von einem Geldinstitut ausgegebenen Karte bezahlt. Nachteilig an derartigen Bezahlarten ist, daß der Käufer entweder Bargeld oder spezielle Karten mit sich führen muß.Traditionally, for example, goods in a shop are paid for in cash, by check, or electronically via a credit card or a card issued by a financial institution specifically for this purpose. A disadvantage of such payment methods is that the buyer has to carry either cash or special cards.
Ferner gibt es die Möglichkeit, mittels sogenannter Telefon- banking-Verfahren Überweisungen über Telefone auszuführen. Hierzu wählt sich der Benutzer beispielsweise in die Telekommunikationseinrichtung seines Geldinstitutes ein. Daraufhin wird aus Sicherheitsgründen eine Authentifikation der Person durchgeführt, die die Überweisung tätigen will. Ergibt sich, daß der Benutzer berechtigt ist, die entsprechendenThere is also the option of making telephone transfers using so-called telephone banking procedures. For this purpose, the user dials into the telecommunications device of his financial institution, for example. An authentication of the person who wants to make the transfer is then carried out for security reasons. It turns out that the user is authorized to do so
Überweisungen zu tätigen, übermittelt der Benutzer die Daten, die für die Überweisung notwendig sind. Die Daten können beispielsweise durch Sprache einer anderen dem Geldinstitut zugehörigen Person übermittelt werden. Ferner ist es möglich, daß das Telefon des Benutzers der Telekommunikationseinrichtung des Geldinstituts Kurznachrichten übersendet, die alle für die Überweisung erforderlichen Daten beinhalten. Aufgrund dieser Kurznachrichten kann das Geldinstitut dann die Überweisung ausführen.To make transfers, the user transmits the data necessary for the transfer. The data can be transmitted, for example, by the voice of another person belonging to the financial institution. It is also possible for the user's telephone to send short messages to the telecommunications facility of the financial institution, which contain all the data required for the transfer. The financial institution can then carry out the transfer on the basis of these short messages.
Zur sicheren Übertragung persönlicher Informationen oder von Zugangsberechtigungsinformationen werden die entsprechenden Daten vor der Übertragung verschlüsselt. Unter Verschlüsselung, oft auch als Chiffrierung bezeichnet, versteht man die Umwandlung von Daten m eine unlesbare Form. Nahezu immer benotigen sowohl die Ver- als auch die Entschlüsselung einige geheime Informationen, die gewöhnlich als Schlüssel bezeichnet werden.For the secure transmission of personal information or access authorization information, the corresponding Data encrypted before transmission. Encryption, often referred to as encryption, means the conversion of data into an illegible form. Almost always, both encryption and decryption require some secret information, commonly known as a key.
Bei einem symmetrischen Verschlusselungsverfahren wird der gleiche Schlüssel sowohl zur Chiffrierung als auch zur De- chiffrierung verwendet. Der DES (Data Encryption Standard) gehört zu den symmetrischen Verschlusselungsverfahren. Bei diesem Verfahren besteht die Transformation des Originaltextes m den Chiffretext aus einer Aufeinanderfolge von mathematischen Operationen wie Permutationen, nichtlmearen Sub- stitutionen und logischen Produktbildungen. Dabei wird ein für den Anwender individueller Schlüssel verwendet.In the case of a symmetrical encryption method, the same key is used for both encryption and decryption. DES (Data Encryption Standard) is one of the symmetrical encryption methods. With this method, the transformation of the original text into the ciphertext consists of a sequence of mathematical operations such as permutations, non-linear substitutions and logical product formations. An individual key is used for the user.
Asymmetrische Verschlusselungsverfahren bilden den Gegensatz zu den symmetrischen Verfahren. Dabei werden für Chiffrierung und Dechiffrierung unterschiedliche Schlüssel verwendet, die so beschaffen sind, daß Daten, die mit dem einen Schlüssel chiffriert wurden, nur mit dem anderen wieder dechiffriert werden können.Asymmetric encryption methods are in contrast to the symmetrical methods. Different keys are used for encryption and decryption, which are such that data that has been encrypted with one key can only be decrypted with the other.
Telefonbanking-Verfahren können auch mit Mobilfunk- emπchtungen, wie Mobiltelefonen, durchgeführt werden. Mo- biltelefone nach dem GSM-Standard umfassen einerseits das eigentliche Telefon mit Eingabe- und Anzeigeeinrichtungen und andererseits eine sogenannte SIM-Karte, die eine Personen- Identifiziernummer (Personal Identification Number, PIN) verschlüsselt gespeichert hat. Es ist jedoch möglich, zusatzliche Anwendungen, die hohen Sicherheitsanforderungen genügen müssen, von der SIM-Karte ausfuhren zu lassen. (SIM Application Tool Kit, GSM 11.14). Es ist möglich, die für eine Uber- Weisung erforderlichen Daten über die Eingabeeinrichtung des Mobiltelefons einzugeben. Daraufhin kann eine speziell für die Überweisung erforderliche Authentifikation über die SIM- Karte des Mobiltelefons erfolgen. Den Zugriff auf diese Angebote ermöglicht eine neuartige Technik. Der Anwender benotigt hierfür ein Mobilfunktelefon mit integriertem SIM-Toolkit und einer SIM-Karte, die die neuen Mehrwertfunktionen unter- stutzt. Um an den virtuellen Bankschalter zu kommen, schaltet der Kunde sein Mobiltelefon ein, gibt die PIN-Nummer ein und wählt aus dem Menü sein Geldinstitut aus. Hat sich das Mobilfunktelefon m den Server der Bank emgewahlt, kann der Benutzer innerhalb weniger Sekunden auf sein Bankkonto zugrei- fen.Telephone banking methods can also be carried out using mobile radio devices, such as mobile telephones. Mobile telephones according to the GSM standard comprise, on the one hand, the actual telephone with input and display devices and, on the other hand, a so-called SIM card, which has an encrypted personal identification number (Personal Identification Number, PIN) stored. However, it is possible to have additional applications that have to meet high security requirements run from the SIM card. (SIM Application Tool Kit, GSM 11.14). It is possible to enter the data required for a transfer via the input device of the mobile phone. Thereupon, authentication that is required for the transfer via the SIM Card of the mobile phone. A new technology enables access to these offers. The user needs a mobile phone with an integrated SIM toolkit and a SIM card that supports the new value-added functions. To get to the virtual bank counter, the customer switches on their mobile phone, enters the PIN number and selects their financial institution from the menu. If the mobile phone has chosen the bank's server, the user can access his bank account within a few seconds.
Des weiteren sind sogenannte CTS (Cellular Telephony System) - Anwendungen bekannt. Derartige Systeme umfassen eine Basis- station und ein Mobiltelefon für den Hausgebrauch. Die Basis- Station empfangt die Gespräche des zugehörigen Mobiltelefons intern kostenlos und leitet sie ms Festnetz weiter.So-called CTS (Cellular Telephony System) applications are also known. Such systems include a base station and a mobile phone for home use. The base station receives the calls from the associated cell phone internally free of charge and forwards them to the landline.
Es ist die Aufgabe der vorliegenden Erfindung, ein Verfahren und ein System zum sicheren Bezahlen von Waren oder Diensten zu schaffen, das für den Kaufer und den Verkaufer einfach, sicher und kostengünstig ist.It is the object of the present invention to provide a method and a system for the secure payment of goods or services which is simple, safe and inexpensive for the buyer and the seller.
Diese Aufgabe wird erfmdungsgemaß durch ein Verfahren mit den Merkmalen des Anspruchs 1 bzw. durch ein System mit den Merkmalen des Anspruchs 16 gelost, wobei sich vorteilhafte Ausgestaltungen und Weiterbildungen aus den Unteranspruchen ergeben.According to the invention, this object is achieved by a method having the features of claim 1 or by a system having the features of claim 16, with advantageous refinements and developments arising from the subclaims.
Im einzelnen ist das erfmdungsgemaße Verfahren zum Bezahlen von Waren oder Diensten mittels einer Mobilfunkeinnchtung und einer Basistelekommunikationseinrichtung, die mit der Mobilfunkeinnchtung über elektromagnetische Wellen kommuniziert, dadurch gekennzeichnet, daß die Basistelekommunikati- onsstation zum Bezahlen erforderliche Daten an die Mobilfun- keinrichtung sendet, die Mobilfunkeinnchtung eine Bestätigung für die Bezahlung beim Benutzer abfragt, nach der Bestätigung die Mobilfunkeinnchtung einen Bezahlvorgang durch Aussenden von Bezahlanweisungsdaten ausfuhrt und die Mobilfunkeinnchtung oder die Telekommunikationsemrichtung eines Geldinstituts oder eines Rechnungsstellers Quittungsdaten für den Funkbezahlvorgang an die Basistelekommunikationsstation sendet.In particular, the method according to the invention for paying for goods or services by means of a mobile radio device and a base telecommunication device which communicates with the mobile radio device via electromagnetic waves, characterized in that the base telecommunication station sends the data required for payment to the mobile radio device, the mobile phone device Confirmation of payment with the user queries, after the confirmation by the mobile device a payment process Sends payment instruction data and the mobile phone device or the telecommunications device of a financial institution or a biller sends receipt data for the radio payment process to the base telecommunications station.
Vorteilhaft an dem erfmdungsgemaßen Verfahren ist, daß es besonders einfach ist, da die zum Bezahlen erforderlichen Daten automatisch an eine Mobilfunkeinnchtung eines Kaufers gesandt werden, so daß der Verkaufer dem Kaufer diese Daten nicht mitteilen muß. Des weiteren genügt das Verfahren den gleichen Sicherheitsanforderungen wie Telefonbankmg- Verfahren über Mobiltelefone . Die hierbei entwickelten Sicherheitsstandards können direkt bernommen werden, was zu einer hohen Akzeptanz des erf dungsgemaßen Verfahrens beitragen wird. Da ferner die Mobilfunkeinnchtung oder die Telekommunikationseinrichtung eines Geldinstituts des Kaufers Quittungsdaten für den Funkbezahlvorgang an die Basistelekommunikationsstation des Verkaufers sendet, ist d e Anwesenheit eines Verkaufers Person nicht mehr unbedingt erforderlich, weshalb das erf dungsgemaße Verfahren erhebliche Möglichkeiten zur Kostensenkung bietet und auch für Automaten geeignet ist.An advantage of the method according to the invention is that it is particularly simple since the data required for payment are automatically sent to a buyer's mobile radio device, so that the seller does not have to disclose this data to the buyer. Furthermore, the method meets the same security requirements as telephone banking methods via mobile phones. The security standards developed here can be adopted directly, which will contribute to a high level of acceptance of the method according to the invention. In addition, since the cell phone equipment or the telecommunication device of a buyer's financial institution sends receipt data for the radio payment process to the seller's base telecommunications station, the presence of a seller person is no longer absolutely necessary, which is why the method according to the invention offers considerable possibilities for reducing costs and is also suitable for automatic machines.
Die Übertragung von Informationen oder Daten kann im Rahmen der vorliegenden Erfindung auch in Form von Kurznachrichten, Nachrichten oder mittels eines oder mehrerer Datenpakete erfolgen. Die Kommunikation der Mobilfunkeinnchtung mit der Basistelekommunikationsstation kann auch gemäß einem Mobil- funkstandard, wie dem GSM-Standard, einem Schnurlos-Standard, dem Bluetooth-Standard, einem Infrarotstandard, wie dem IrDA- Standard erfolgen, oder einem zukunftigen, auf einem CDMA- Verfahren basierenden, Standard erfolgen..Within the scope of the present invention, information or data can also be transmitted in the form of short messages, messages or by means of one or more data packets. The communication of the mobile radio device with the base telecommunication station can also take place according to a mobile radio standard, such as the GSM standard, a cordless standard, the Bluetooth standard, an infrared standard, such as the IrDA standard, or a future one, using a CDMA method based, standard done ..
In einer Ausgestaltung des erf dungsgemaßen Verfahrens kann beim Ausfuhren des Bezahlvorgangs die Mobilfunkeinnchtung direkt mit einer Telekommunikationseinrichtung eines Geldin- stituts oder eines Rechnungsstellers beispielsweise gemäß einem Mobilfunkstandard, wie dem GSM-Standard kommunizieren. Andererseits kann beim Ausfuhren des Bezahlvorgangs die Mobilfunkeinnchtung die Bezahlanweisungsdaten an die Basistelekommunikationsstation senden, die diese Daten dann über eine Festnetzverbindung oder gemäß einem Mobilfunkstan- dard, wie dem GSM-Standard, an eine Telekommunikationseinrichtung des Geldinstituts oder des Rechnungsstellers übermittelt. Ferner kann die Kommunikation der Mobilfunkeinrich- tung mit der Basistelekommunikationsstation mittels Infrarotstrahlung erfolgen.In one embodiment of the method according to the invention, when carrying out the payment process, the mobile radio device can be operated directly with a telecommunications device of a cash stituts or an invoice issuer, for example, in accordance with a mobile radio standard, such as the GSM standard. On the other hand, when the payment process is carried out, the mobile radio device can send the payment instruction data to the base telecommunications station, which then transmits this data to a telecommunications device of the financial institution or the biller via a landline connection or according to a mobile radio standard, such as the GSM standard. Furthermore, the mobile radio device can communicate with the base telecommunication station by means of infrared radiation.
Vorteilhaft an der letzteren Möglichkeit ist, daß sie besonders kostengünstig ist, da einzig die gunstigen Gebuhren des Festnetzes anfallen. Ferner sind jedoch auch bei der ersten Möglichkeit der direkten Kommunikation der Mobilfunkeinnchtung mit der Telekommunikationsemrichtung des Geldinstituts, die Telefongebuhren m der Regel niedriger als beispielsweise Kreditkartenkommissionen, so daß auch in diesem Fall das er- fmdungsgemaße Verfahren sowohl für den Kaufer als auch für den Verkaufer besonders kostengünstig ist.The advantage of the latter option is that it is particularly cost-effective, since only the low fees of the fixed network apply. In addition, however, even with the first possibility of direct communication of the mobile radio device with the telecommunications device of the financial institution, the telephone charges are generally lower than, for example, credit card commissions, so that the method according to the invention is also special in this case for both the buyer and the seller is inexpensive.
Falls die zum Bezahlen erforderlichen Daten nicht in dem Format sind, das für den Funkbezahlvorgang notwendig ist, können die von der Basistelekommunikationsstation empfangenen Daten von der Mobilfunkeinnchtung vor dem Aussenden m ein Format umgesetzt werden, das für einen Funkbezahlvorgang geeignetIf the data required for payment is not in the format required for the radio payment process, the data received by the base telecommunication station can be converted by the mobile radio device before transmission m into a format suitable for a radio payment process
Vorteilhafterweise erfolgt vor dem Schritt des Ausfuhrens des Bezahlvorgangs eine Authentifikation des Benutzers der Mobilfunkeinnchtung. Diese Authentifikation kann über die Eingabe einer Personenidentifiziernummer oder über biometrische Merkmale erfolgen. Durch diese Maßnahme wird sichergestellt, daß der Benutzer der Mobilfunkeinnchtung tatsachlich berechtigt ist, den Bezahlvorgang auszulosen. Dabei erfüllen die Verwen- düng einer Personenidentiflziernummer oder die Verwendung von biometrischen Merkmalen sehr hohe Sicherheitsanforderungen.The user of the mobile radio device is advantageously authenticated before the step of executing the payment process. This authentication can be carried out by entering a personal identification number or via biometric features. This measure ensures that the user of the mobile radio device is actually authorized to trigger the payment process. The uses with a personal identification number or the use of biometric features very high security requirements.
Ferner kann m einer vorteilhaften Ausgestaltung des erfin- dungsgemaßen Verfahrens eine elektronische Kasse die zum Bezahlen erforderlichen Daten an die Basistelekommunikationsstation übermitteln. Hierdurch wird der Bezahlvorgang weiter erleichtert und automatisiert, wodurch das erf dungsgemäße Verfahren noch einfacher und kostengünstiger wird.Furthermore, in an advantageous embodiment of the method according to the invention, an electronic cash register can transmit the data required for payment to the base telecommunications station. This further simplifies and automates the payment process, which makes the method according to the invention even simpler and cheaper.
Die zum Bezahlen erforderlichen Daten können beispielsweise den zu zahlenden Geldbetrag und/oder die Kontonummer und/oder die Bankleitzahl des Empfangers und/oder des Verwendungszwecks, wie z. B. die Rechnungsnummer, umfassen.The data required for payment can, for example, the amount of money to be paid and / or the account number and / or the routing number of the recipient and / or the purpose, such as. B. include the invoice number.
Das erfmdungsgemaße System zum Bezahlen von Waren oder Diensten umfaßt eine Basistelekommunikationsstation mit einer Funkemrichtung zum Senden von zum Bezahlen erforderlichen Daten an eine Mobilfunkeinnchtung und zum Empfangen von Da- ten von der Mobilfunkeinnchtung, wobei die Mobilfunkeinnchtung eine Empfangseinrichtung zum Empfangen der von der Basistelekommunikationsstation ausgesandten Daten, eine mit der Empfangseinrichtung verbundene Abfrageeinrichtung zum Abfragen einer Bestätigung für die Bezahlung und eine mit der Ab- frageemnchtung verbundene Sendeeinrichtung zum Senden vonThe system according to the invention for paying for goods or services comprises a basic telecommunication station with a radio device for sending data required for payment to a mobile radio device and for receiving data from the mobile radio device, the mobile radio device being a receiving device for receiving the data transmitted by the basic telecommunication station, an interrogation device connected to the receiving device for interrogating a confirmation of the payment and a transmitting device connected to the interrogation device for sending
Daten für einen Bezahlvorgang und zum Senden von Quittungsdaten für den Funkbezahlvorgang an die Basistelekommunikationsstation aufweist.Has data for a payment process and for sending receipt data for the radio payment process to the base telecommunications station.
Ausfuhrungsbeispiele der Erfindung werden nun mit Bezug auf die beigefugten Zeichnungen erläutert.Exemplary embodiments of the invention will now be explained with reference to the accompanying drawings.
Figur 1 zeigt ein erstes Ausfuhrungsbeispiel der vorliegenden Erfindung,FIG. 1 shows a first exemplary embodiment of the present invention,
Figur 2 zeigt ein zweites Ausfuhrungsbeispiel der vorliegenden Erfindung und Figur 3 zeigt schematisch den Aufbau der Mobilfunkeinnchtung.FIG. 2 shows a second exemplary embodiment of the present invention and FIG. 3 schematically shows the structure of the mobile radio device.
Im Folgenden werden Ausfuhrungsbeispiele des erfmdungsgemaßen Systems zum Bezahlen von Waren oder Diensten erläutert. In diesem Ausfuhrungsbeispiel soll das erfmdungsgemaße System in dem Ladenlokal eines Verkaufers installiert sein, wobei der Kaufer über eine Mobilfunkeinnchtung des erfmdungs- gemäßen Systems Waren bezahlt.Exemplary embodiments of the system according to the invention for paying for goods or services are explained below. In this exemplary embodiment, the system according to the invention is to be installed in the shop floor of a seller, the buyer paying for goods via a mobile radio device of the system according to the invention.
Bei Ausfuhrungsvarianten der Erfindung werden zum Bezahlen erforderliche Daten und/oder Bezahlanweisungsdaten und/oder Quittungsdaten mit einem Schlüssel versehen (der Schlüssel wird beispielsweise an die entsprechenden Daten angehängt) und/oder mit einem Schlüssel verschlüsselt. Je nach Ausfuhrungsvariante dient der Schlüssel der Verifizierung und/oder der Entschlüsselung der damit verschlüsselten Daten.In embodiment variants of the invention, data and / or payment instruction data and / or receipt data required for payment are provided with a key (the key is appended to the corresponding data, for example) and / or encrypted with a key. Depending on the version, the key is used for verification and / or decryption of the data encrypted with it.
In dem Ladenlokal des Verkaufers ist eine Basistelekommunikationsstation 1 installiert. Vorteilhafterweise ist diese Basistelekommunikationsstation 1 mit einer elektronischen Kasse 2 verbunden, so daß die von der Kasse 2 erfaßten Daten direkt an die Basistelekommunikationsstation 1 übermittelt werden. Die Basistelekommunikationsstation 1 entspricht der Basissta- tion eines CTS (Cordless Telephony System) mit Datenubertra- gungsmoglichkeit . Sie kann über elektromagnetische Wellen mit einer Mobilfunkeinnchtung 3 kommunizieren. In dem hier beschriebenen Ausfuhrungsbeispiel wird angenommen, daß die Mo- bilfunkemnchtung 3 em Mobiltelefon nach dem GSM-Standard ist. Die Mobilfunkeinnchtung 3 konnte πedoch auch eine andere elektronische Einrichtung wie beispielsweise em Termin- planer sein, der mit Mitteln für eine Funkubertragung von Daten ausgestattet ist. Die Verwendung eines Mobiltelefons nach dem GSM-Standard hat πedoch den Vorteil, daß an dem Gerat keine oder nur sehr wenige Modifikationen vorgenommen werden müssen. Für den Bezahlvorgang sendet die Basistelekommunikationsstation 1 des Verkaufers die für einen Bezahlvorgang erforderlichen Daten und einen Schlüssel (key) zu einer eventuell fol- genden Verschlüsselung von zu übertragenden Daten an das Mobiltelefon 3 des Kaufers. Diese Daten umfassen beispielsweise die Hohe des Geldbetrags, die von der elektronischen Kasse 2 übermittelt worden ist, die Telefonnnummer der Basistelekommunikationsstation oder die Kontonummer und die Bankleitzahl des Verkaufers . Diese Daten werden von dem Mobiltelefon 3 empfangen und mittels der Anzeige 5 des Mobiltelefons 3 angezeigt. Daraufhin fragt das Mobiltelefon 3 eine Bestätigung dafür ab, daß der angezeigte Geldbetrag von dem Konto des Inhabers des Mobiltelefons 3 auf das entsprechende angezeigte Konto überwiesen werden soll. Die Bestätigung kann von dem Benutzer über die Emgabeemheit 4 des Mobiltelefons 3 erfolgen.A base telecommunication station 1 is installed in the shop of the seller. This base telecommunication station 1 is advantageously connected to an electronic cash register 2, so that the data recorded by the cash register 2 are transmitted directly to the base telecommunication station 1. The base telecommunication station 1 corresponds to the base station of a CTS (Cordless Telephony System) with data transmission possibility. It can communicate with a mobile radio device 3 via electromagnetic waves. In the exemplary embodiment described here, it is assumed that the mobile radio device is a mobile phone according to the GSM standard. However, the mobile radio device 3 could also be another electronic device, such as an appointment planner, which is equipped with means for radio transmission of data. However, the use of a cell phone according to the GSM standard has the advantage that no or very few modifications have to be made to the device. For the payment process, the base telecommunications station 1 of the seller sends the data required for a payment process and a key (key) for any subsequent encryption of data to be transmitted to the mobile phone 3 of the buyer. These data include, for example, the amount of the amount of money that has been transmitted by the electronic cash register 2, the telephone number of the base telecommunications station or the account number and the bank sort code of the seller. This data is received by the mobile phone 3 and displayed on the display 5 of the mobile phone 3. The mobile phone 3 then asks for confirmation that the amount of money displayed should be transferred from the account of the holder of the mobile phone 3 to the corresponding displayed account. The user can confirm via the emmission unit 4 of the mobile telephone 3.
Vorteilhafterwelse erfolgt daraufhin die Authentifikation des Benutzers. Beispielsweise kann das Mobiltelefon 3 eine spezielle, nur für Überweisungen erforderliche PersonenidentifIZI- ernummer abfragen oder es können biometrische Merkmale des Benutzers erfaßt werden, wodurch der Benutzer besonders sicher und einfach identifiziert werden kann. Ergibt sich die Berechtigung des Benutzers, werden die für den Bezahlvorgang notigen Daten oder e Teil davon eventuell mit dem zusammen mit diesen Daten von der Basistelekommunikationsstation übermittelten Schlüssel verschlüsselt, und diese Bezahlanweisungsdaten von dem Mobiltelefon 3 an eine Telekommunikations- emπchtung 6 eines Geldinstituts oder eines Rechnungsstellers gesandt, und der entsprechende Betrag abgebucht oder in Rechnung gestellt. Die Bezahlanweisungsdaten können dabei auch alle oder einen Teil der zum Bezahlen erforderlichen Daten und die Rufnummer der Mobilfunkeinnchtung enthalten. Es ist auch möglich, daß der Schlüssel nur zusammen mit den Bezahlanweisungsdaten übermittelt wird, jedoch nicht zu deren Verschlüsselung oder zur Verschlüsselung anderer Daten herangezogen wird.The user is then advantageously authenticated. For example, the mobile telephone 3 can query a special personal identifier number that is only required for transfers, or biometric features of the user can be recorded, as a result of which the user can be identified particularly securely and easily. If the user is authorized, the data required for the payment process or part thereof may be encrypted with the key transmitted together with this data by the base telecommunication station, and this payment instruction data from the mobile phone 3 to a telecommunications device 6 of a financial institution or a biller sent, and the corresponding amount debited or invoiced. The payment instruction data can also contain all or part of the data required for payment and the number of the mobile radio device. It is also possible that the key is only transmitted together with the payment instruction data, but not to the data Encryption or encryption of other data is used.
Daraufhin sendet das Mobiltelefon 3 Quittungsdaten an die Ba- sistelekommunikationsstation 1 des Verkäufers, so daß dieser Kenntnis von dem Bezahlen seiner Waren erlangt. Ferner könnte auch die Telekommunikationseinrichtung 6 des Geldinstituts oder eines Rechnungsstellers die Quittungsdaten an die Basistelekommunikationsstation 1 übermitteln. Die mit demselben Schlüssel versehenen oder verschlüsselten Quittungsdaten werden eventuell in der Basistelekommunikationsstation 1 oder einer zugeordneten Einheit entschlüsselt und nach einer erfolgreichen Entschlüsselung an die Kasse gesendet, die nach erfolgreicher Verifzierung des Schlüssels den Bon ausgibt und den Betrag als bezahlt registriert. Die Quittungsdaten können dabei auch einen Teil der zum Bezahlen erforderlichen Daten enthalten oder Daten, die die Art der Ware beschreiben, oder die den Preis der Ware beschreiben, und ihr Empfang bzw. ihre Verarbeitung löst die Ausgabe der Ware oder die Erbringung des Dienstes aus.The mobile telephone 3 then sends receipt data to the base telecommunications station 1 of the seller, so that the latter gains knowledge of the payment of his goods. Furthermore, the telecommunications device 6 of the financial institution or a biller could also transmit the receipt data to the base telecommunications station 1. The receipt data provided or encrypted with the same key may be decrypted in the base telecommunication station 1 or an assigned unit and, after successful decryption, sent to the cash register which, after successful verification of the key, issues the receipt and registers the amount as paid. The receipt data can also contain part of the data required for payment or data that describe the type of goods or that describe the price of the goods, and their receipt or processing triggers the output of the goods or the provision of the service.
Durch diese eventuelle weitere Verschlüsselung der Daten mittels eines Schlüssels, der von der Basistelekommunikationsstation an die Mobilfunkeinrichtung übermittelt wird, sind die Daten auch bei einer Übermittlung, die über das Mobil- funksystem hinaus erfolgt, beispielsweise über das Festnetz zu dem Server einer Bank oder eines Rechnungsstellers, sicher vor unberechtigtem Zugriff.This possible further encryption of the data by means of a key, which is transmitted from the base telecommunication station to the mobile radio device, means that the data are also transmitted during a transmission that goes beyond the mobile radio system, for example via the fixed network to the server of a bank or a biller , secure against unauthorized access.
Figur 2 zeigt ein weiteres Ausführungsbeispiel der vorliegenden Erfindung. Das in Figur 2 gezeigte Ausführungsbeispiel unterscheidet sich von dem in Figur 1 gezeigten Ausführungsbeispiel einzig dadurch, daß beim Ausführen des Bezahlvorgangs das Mobiltelefon 3 die verschlüsselten Bezahlanwei- sungsdaten nicht direkt an die Telekommunikationseinrichtung des Geldinstituts sendet, sondern diese Daten zurück an die Basistelekommunikationsstation 1 sendet. Diese übermittelt dann die Daten über eine Festnetzverbindung C oder über eine Mobilfunkverbmdung an die Telekommunikationsemrichtung 6 des Geldinstituts oder eines Rechnungsstellers.Figure 2 shows a further embodiment of the present invention. The exemplary embodiment shown in FIG. 2 differs from the exemplary embodiment shown in FIG. 1 only in that when the payment process is carried out, the mobile telephone 3 does not send the encrypted payment instruction data directly to the telecommunications device of the financial institution, but instead sends this data back to the base telecommunications station 1. This transmits then the data via a landline connection C or via a mobile radio connection to the telecommunications device 6 of the financial institution or a biller.
Dabei kann sich jedoch das Übertragungsverfahren, mit dem Daten an die Basistelekommunikationseinrichtung 1 gesendet werden, von demjenigen unterscheiden, mit dem die Daten m dem ersten Ausfuhrungsbeispiel an das Geldinstitut gesendet werden.However, the transmission method with which data is sent to the base telecommunications device 1 can differ from that with which the data in the first exemplary embodiment are sent to the financial institution.
Dies bedeutet, daß in diesem Fall der Verkaufer seine Basistelekommunikationsstation 1 dem Kaufer für das Übermitteln einer Kurznachricht zur Verfugung stellt. Auf diese Weise wird der Bezahlvorgang besonders kostengünstig gestaltet, da dem Kaufer keinerlei Kosten entstehen und der Verkaufer einzig die relativ niedrigen Gebuhren des Festnetzes für eine Kurznachricht aufbringen muß.This means that in this case the seller makes his base telecommunication station 1 available to the buyer for the transmission of a short message. In this way, the payment process is designed to be particularly cost-effective since the buyer incurs no costs and the seller only has to pay the relatively low fixed network charges for a short message.
In diesem Fall können die Quittungsdaten für den Bezahlvor- gang zusammen mit den Bezahlanweisungsdaten an die Basistelekommunikationsstation von der Mobilfunkeinnchtung gesandt werden. Ferner ist es auch möglich, daß die Bezahlanweisungsdaten als Quittungsdaten interpretiert werden, so daß keine gesonderten Quittungsdaten ausgesandt werden müssen. Des wei- teren konnten die Quittungsdaten von dem Geldinstitut an die Basistelekommunikationsstation 1 übermittelt werden.In this case, the receipt data for the payment process together with the payment instruction data can be sent to the base telecommunication station by the mobile radio device. Furthermore, it is also possible for the payment instruction data to be interpreted as receipt data, so that no separate receipt data have to be sent out. Furthermore, the receipt data could be transmitted from the financial institution to the base telecommunication station 1.
Figur 3 zeigt mögliche Ausbildungen der Mobilfunkeinnchtung 3 der vorstehend erläuterten Ausfuhrungsbeispiele. Die Mobil- funkemrichtung 3 weist eine Empfangseinrichtung 7 auf, die die zum Bezahlen erforderlichen Daten, die von der Basistelekommunikationsstation 1 ausgesandt worden sind, empfangt. Weisen diese Daten em Format auf, mit dem em Bezahlvorgang direkt ausgeführt werden kann, ist eine weitere Bearbeitung der Daten nicht erforderlich. In diesem Fall, der nicht inFIG. 3 shows possible configurations of the mobile radio device 3 of the exemplary embodiments explained above. The mobile radio device 3 has a receiving device 7, which receives the data required for payment, which have been sent out by the base telecommunications station 1. If this data has a format with which the payment process can be carried out directly, further processing of the data is not necessary. In this case, who is not in
Figur 3 gezeigt ist, werden die Daten an eine Abfrageeinrichtung 9 übertragen, die über die Anzeige 5 und die Eingabeein- richtung 4 eine Bestätigung für die Bezahlung abfragt. Gegebenenfalls kann über diese Abfrageeinrichtung 9 auch die vorstehend erläuterte Authentifikation des Benutzers erfolgen. Liegt eine Bestätigung für die Bezahlung vor und ist durch die Authentifikation festgestellt worden, daß der Benutzer berechtigt ist, die abgefragte Bezahlung vorzunehmen, werden die Daten an die Sendeeinrichtung 10 übertragen, die die Daten für den Bezahlvorgang aussendet. Vor dem Aussenden werden die Daten mittels eines digitalen Signalprozessors eventuell verschlüsselt werden.FIG. 3 shows, the data are transmitted to an interrogation device 9, which via the display 5 and the input direction 4 asks for confirmation of payment. If necessary, the authentication of the user explained above can also take place via this query device 9. If there is a confirmation of the payment and it has been established by the authentication that the user is authorized to make the requested payment, the data are transmitted to the transmission device 10, which sends out the data for the payment process. Before being sent out, the data may be encrypted using a digital signal processor.
Beim ersten Ausfuhrungsbeispiel der vorliegenden Erfindung werden die Daten dann direkt an eine Telekommunikationsem- richtung 6 eines Geldinstituts oder eines Rechnungsstellers gesandt, wohingegen beim zweiten m Figur 2 gezeigten Ausfuhrungsbeispiel die Daten zurück an die Basistelekommunikationsstation 1 gesandt werden. Ferner besteht die Möglichkeit, daß die Sendeeinrichtung 10 Quittungsdaten für den Bezahlvorgang an die Basistelekommunikationsstation 1 sendet.In the first exemplary embodiment of the present invention, the data are then sent directly to a telecommunication device 6 of a financial institution or a biller, whereas in the second exemplary embodiment shown in FIG. 2, the data are sent back to the basic telecommunication station 1. There is also the possibility that the transmission device 10 sends receipt data for the payment process to the base telecommunications station 1.
Falls die von der Basistelekommunikationsstation 1 empfangenen Daten em anderes Format aufweisen als das für den Bezahlvorgang erforderliche Format, ist m der Mobilfunkeinnchtung 3 eine Umsetzeinrichtung 8 vorgesehen, die die emp- fangenen Daten em Format umsetzt, das für einen Bezahlvorgang geeignet ist. Diese Umsetzeinrichtung kann beispielsweise, wie in Figur 3 gezeigt, zwischen der Empfangseinrichtung 7 und der Abfrageeinrichtung 9 vorgesehen sein. Es besteht jedoch auch die Möglichkeit die Umsetzemπchtung 8 zwischen der Abfrageeinrichtung 9 und der Sendeeinrichtung 10 vorzusehen.If the data received by the base telecommunication station 1 have a different format than the format required for the payment process, a conversion device 8 is provided in the mobile radio device 3, which converts the received data into a format that is suitable for a payment process. As shown in FIG. 3, this conversion device can be provided between the receiving device 7 and the interrogation device 9. However, there is also the possibility of providing the conversion device 8 between the interrogation device 9 and the transmission device 10.
Bezuglich des ersten Ausfuhrungsbeispiels, bei dem die Mobilfunkeinnchtung 3 sowohl mit der Basistelekommunikationssta- tion 1 als auch mit der Telekommunikationsemnchtung 6 eines Geldinstituts oder eines Rechnungsstellers kommuniziert, kann die Mobilfun-ke richtung 3 auch getrennte Sende- und Emp- fangsemrichtungen 7, 10 für die Kommunikation mit der Basi- stelekommunikationsemrichtung 1 und derWith regard to the first exemplary embodiment, in which the mobile radio device 3 communicates both with the basic telecommunication station 1 and with the telecommunication device 6 of a financial institution or an invoice issuer, the mobile radio direction 3 can also transmit and receive separately. catch devices 7, 10 for communication with the base telecommunication device 1 and
Telekommunikationsemrichtung 6 des Geldinstituts aufweisen. Dadurch konnte beispielsweise die Kommunikation mit der Ba- siskommunikationse richtung 1 über Infrarotstrahlung erfolgen und die Kommunikation mit der Telekommunikationseinrichtung 6 des Geldinstituts gemäß dem GSM-Standard erfolgen.Have telecommunications device 6 of the financial institution. In this way, for example, the communication with the basic communication direction 1 could take place via infrared radiation and the communication with the telecommunication device 6 of the financial institution could take place in accordance with the GSM standard.
In einer weiteren Anwendung der vorliegenden Erfindung wird diese zum Abheben von Geld an einem Geldautomaten verwendet. In diesem Fall ist die Basistelekommunikationseinrichtung 1 der Geldautomat eines Geldinstituts, der über eine Festnetz- leitung mit dem Zentralrechner des Geldinstituts verbunden ist. Zum Geldabheben gibt eine Person eine entsprechende An- frage bei dem Geldautomat em. Diese Daten sendet der Geldautomat zusammen mit einem Schlüssel an die Mobilfunkeinnchtung 3, die eine Bestätigung für den Abhebevorgang bei der Person abfragt. Vorteilhafterweise erfolgt nun die Authenti- fikation der Person mittels der Mobilfunkeinnchtung 3. Ist die Person als berechtigt identifiziert worden und hat sie eine Bestätigung für den Abhebevorgang m die Mobilfunkeinnchtung eingegeben, sendet die Mobilfunkeinnchtung mit dem Schlüssel versehene oder verschlüsselte Daten an den Geldautomaten, so daß diesem mitgeteilt wird, daß das Geld ausge- zahlt werden kann. Für die Abbuchung des Geldbetrags kommuniziert der Geldautomat mit dem Zentralrechner αes Geldinstituts über eine Festnetzverbindung.In a further application of the present invention, this is used for withdrawing money from an ATM. In this case, the base telecommunications device 1 is the ATM of a financial institution, which is connected to the central computer of the financial institution via a landline. To withdraw money, a person makes a corresponding request to the ATM. The ATM sends this data together with a key to the mobile radio device 3, which asks for confirmation of the withdrawal process from the person. The authentication of the person is now advantageously carried out by means of the mobile radio device 3. If the person has been identified as authorized and has entered a confirmation for the withdrawal process m the mobile radio device, the mobile radio device sends keyed or encrypted data to the ATM, so that this is informed that the money can be paid out. To debit the amount of money, the ATM communicates with the central computer of a financial institution via a landline connection.
In einer besonders einfachen Ausfuhrung der Erfindung besteht die Basistelekommunikationsstation aus einer Infrarot- Schnittstelle nach dem IrDA-Standard und einem GSM-Modul. Die Infrarot-Schnittstelle und das GSM-Modul sind angeschlossen an das üblicherweise in einem Automaten oder einer Registrierkasse vorhandene Steuerungssystem. Die Daten können da- bei auch über eine auf einer Infrarot-Schnittstelle basierenden AT-Zellular-Schnittstelle übertragen werden. Über Infrarotstrahlen wird nun eine Kurznachricht an das Mobiltelefon gesandt, die im Klartext die Frage enthalt, ob der Kunde die gewünschte Ware zum gewünschten Preis bezahlen will und ggf. eine Schlüsselzahl. Die Kurznachricht enthalt zum bezahlen erforderliche Daten, optional einen Schlüssel und die Telefonnummer eines "Absenders". Da die Kurznachricht von einem Steuerungssystem kunstlich generiert wird, kann diese Telefonnummer im Automaten oder m der Registrierkasse fest einprogrammiert werden und entspricht dann der Telefonnummer des Rechnungsstellers. Der Kunde liest die Kurznachricht und generiert, wenn er einverstanden ist, eine Antwort "JA". Dies ist bei vielen Mobiltelefonen mit wenigen Tastendrucken möglich oder kann durch SIM Application Toolkit vereinfacht werden. Die vom Kunden generierte Kurznachricht wird dann an die "Absender"-Telefonnummer, also an den Rechnungssteller geschickt. Der Servicerechner des Rechnungssteiler setzt den Betrag auf die Rechnung des Kunden, der sich wiederum durch seine m seiner Kurznachricht enthaltene Telefonnummer identifiziert. Anschließend sendet der Servicerechner des Rech- nungssteller eine Nachricht zur Ausgabe der gewünschten Ware an den Automaten oder die Registrierkasse. Diese Nachricht kann über GSM oder auch über em wie auch immer geartetes Festnetz oder em beliebiges Netz basierend auf elektromagnetischen Wellen gesendet werden. Der (optional) gesendete Schlüssel wird in der Registrierkasse oder dem Automaten, wo er ja auch generiert wurde, geprüft und die gewünschte Ware wird ausgegeben.In a particularly simple embodiment of the invention, the base telecommunications station consists of an infrared interface according to the IrDA standard and a GSM module. The infrared interface and the GSM module are connected to the control system that is usually available in a machine or a cash register. The data can also be transmitted via an AT cellular interface based on an infrared interface. A short message is now sent to the mobile phone via infrared rays, which in plain text contains the question of whether the customer wants to pay for the desired goods at the desired price and, if necessary, a key number. The short message contains the data required for payment, optionally a key and the telephone number of a "sender". Since the short message is artificially generated by a control system, this telephone number can be permanently programmed in the machine or in the cash register and then corresponds to the telephone number of the biller. The customer reads the short message and, if he agrees, generates a "YES" answer. This is possible with many cell phones with just a few keystrokes or can be simplified with the SIM Application Toolkit. The short message generated by the customer is then sent to the "sender" phone number, ie to the biller. The service calculator of the invoice divider puts the amount on the customer's invoice, who in turn identifies himself by his phone number contained in his short message. The service computer of the biller then sends a message to the machine or the cash register to issue the desired goods. This message can be sent via GSM or via any type of fixed network or any network based on electromagnetic waves. The (optionally) sent key is checked in the cash register or in the machine, where it was generated, and the desired goods are dispensed.
Die Überprüfung oder Verifizierung des Schlüssels erfolgt durch einen Vergleich des übermittelten Schlüssels mit einem nach der Generierung des Schlüssels in der Basistelekommunikationsstation oder einer zugeordneten Einheit gespeicherten Schlüssel. Nach einem erfolgreichen Vergleich, also bei Übereinstimmung der beiden Schlüssel wird die bezahlte Ware aus- gegeben oder der bezahlte Dienst erbracht. Im folgenden wird ein weiteres konkretes Ausführungsbeispiel der Erfindung erläutert:The key is checked or verified by comparing the transmitted key with a key stored in the base telecommunication station or an assigned unit after the key has been generated. After a successful comparison, ie if the two keys match, the paid goods are issued or the paid service is performed. Another specific exemplary embodiment of the invention is explained below:
- Ein Kunde steht vor einem Automaten und drückt eine Taste für eine gewünschte Ware oder der Kunde steht an einer Registrierkasse .- A customer stands in front of a machine and presses a button for a desired product or the customer stands at a cash register.
Die Registrierkasse oder der Automat schicken mittels Infrarotstrahlen (beispielsweise IrDA) , gemäß dem Bluetoothstandard, einem Schnurlosstandard oder einem Mobilfunkstan- dard eine Nachricht, Kurznachricht (Short Message) oder entsprechende Datenpakete an das Mobiltelefon des Kunden. Diese Nachricht enthält neben allen zum Bezahlen erforderlichen Daten einen Schlüssel (Key) , der auf einem oder mehreren folgenden Signalpfaden zur Verschlüsselung der entsprechenden Daten verwendet werden kann. Außerdem enthält die Nachricht die Rufnummer des Rechnungsstellers (Billing Center) . Dies kann auch eine Bank, ein Netzwerkbetreiber oder eine Kaufhauskette sein.The cash register or the machine sends a message, short message or corresponding data packets to the customer's mobile phone using infrared rays (for example IrDA), in accordance with the Bluetooth standard, a cordless standard or a mobile radio standard. In addition to all the data required for payment, this message contains a key which can be used on one or more of the following signal paths to encrypt the corresponding data. The message also contains the biller's number. This can also be a bank, a network operator or a department store chain.
- Die Nachricht löst eine SIM Application Toolkit Anwendung auf dem Mobilfunktelefon aus, die einen Dialog mit dem Kunden einleitet. Der Kunde wird gefragt: "Wollen Sie eine Cola an diesem Automaten für Euro 1,50 kaufen?" oder "Wollen Sie bei Hertie in der Lebensmittelabteilung DM 123,45 bezahlen?".- The message triggers a SIM Application Toolkit application on the mobile phone, which initiates a dialog with the customer. The customer is asked: "Do you want to buy a coke from this machine for € 1.50?" or "Do you want to pay DM 123.45 at Hertie's food department?"
- Mit dem Softkey "ja" oder einer spezifizierten Ziffernta- ste wird - ggf. nach Abfrage einer PIN - eine Nachricht generiert, die den Preis, die Warenart, die Tel. -Nr. des Automaten oder der Registrierkasse und ggf. die des Kunden enthält. Diese Daten werden mit dem Schlüssel verschlüsselt und an das Billing Center versandt. Die Abfrage einer PIN ,z. B. ab ei- ne bestimmten Betrag, kann vom Kunden aktiviert werden. Im Billing Center wird der Betrag auf die Rechnung des Kunden gesetzt, und eine mit demselben Schlüssel verschlüsselte Nachricht an den Automaten gesendet, der nach einer erfolgreichen Entschlüsselung die gewünschte Ware ausgibt, bzw. an die Kasse gesendet, die den Bon ausgibt und den Betrag als bezahlt registriert. Dabei ist das Billing Center (der Rechnungssteiler) nicht auf ein Geldinstitut eingeschränkt. Es kann sich dabei auch um den Netzwerkbetreiber, den Betreiber der Automaten oder der Registrierkassen, oder ein Kreditkartenunternehmen handeln. Die Weiterleitung der Quittungsdaten für den Bezahlvorgang muß nicht über ein Mobilfunksystem, wie das GSM-System erfolgen. Das Billing-Center kann z. B. in einem großen Kaufhaus stehen, das mit den Registrierkassen vernetzt ist.- With the "yes" softkey or a specified numeric key, a message is generated - possibly after requesting a PIN - which contains the price, the type of goods, the tel. machine or cash register and, if applicable, that of the customer. This data is encrypted with the key and sent to the billing center. The request for a PIN, e.g. B. from a certain amount, can be activated by the customer. In the billing center, the amount is placed on the customer's invoice, and a message encrypted with the same key is sent to the machine that, after successful decryption, dispenses the desired goods or to the cash register, which issues the receipt and the amount as paid registered. The billing center (the invoice splitter) is not restricted to a financial institution. It can also be the network operator, the operator of the machines or the cash registers, or a credit card company. The receipt data for the payment process does not have to be forwarded via a mobile radio system, such as the GSM system. The billing center can e.g. B. stand in a large department store that is networked with the cash registers.
Als Schlüssel kann eine zufällig generierte Zahl mit der Bezahlanweisung an den Rechnungssteiler und von dort an den Automaten zurückgeschickt werden. Da der Automat den Schlüssel generiert hat, kann er ihn selbst abprüfen. Dabei kann außerdem eine dem Automaten und dem Rechnungssteller bekannte Ver- schlüsselung der gesamten Nachricht angewandt werden, um zusätzliche Sicherheit zu generieren. In diesem Fall muß keine Verschlüsselung im Mobiltelefon stattfinden.As a key, a randomly generated number with the payment instruction can be sent back to the bill divider and from there to the machine. Since the machine has generated the key, it can check it itself. In addition, encryption of the entire message known to the machine and the biller can be used to generate additional security. In this case, encryption does not have to take place in the mobile phone.
Eine Ausführungsvariante der Erfindung sieht vor, daß der Schlüssel von der Kasse/dem Automaten oder der Basistelekommunikationsstation als Zufallszahl generiert wird, da die Kontrolle des Schlüssels wieder an der Kasse/dem Automaten erfolgt. Der Schlüssel kann im Billing Center zusätzlich nach einem in der Kasse/dem Automaten oder der Basistelekommunika- tionsstation bekannten Algorithmus verändert werden. Wenn über die Verbindung der Kassen mit dem Billing Center zusätzlich der Algorithmus regelmäßig verändert wird, ist ein Mißbrauch des Bezahlvorganges ausgeschlossen. An embodiment variant of the invention provides that the key is generated by the cash register / the machine or the base telecommunications station as a random number, since the key is checked again at the cash register / the machine. The key can also be changed in the billing center according to an algorithm known in the cash register / vending machine or the basic telecommunications station. If the algorithm is changed regularly via the connection of the cash registers to the billing center, abuse of the payment process is excluded.
Claims
Applications Claiming Priority (5)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE19843439 | 1998-09-22 | ||
DE19843439A DE19843439C2 (en) | 1998-09-22 | 1998-09-22 | Method and system for paying for goods or services |
DE19907496 | 1999-02-22 | ||
DE19907496 | 1999-02-22 | ||
PCT/DE1999/002934 WO2000017833A1 (en) | 1998-09-22 | 1999-09-15 | Method and system for paying for goods or services |
Publications (1)
Publication Number | Publication Date |
---|---|
EP1116194A1 true EP1116194A1 (en) | 2001-07-18 |
Family
ID=26049015
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP99955714A Ceased EP1116194A1 (en) | 1998-09-22 | 1999-09-15 | Method and system for paying for goods or services |
Country Status (6)
Country | Link |
---|---|
US (1) | US7231372B1 (en) |
EP (1) | EP1116194A1 (en) |
JP (1) | JP2002525767A (en) |
KR (1) | KR20010075291A (en) |
CN (1) | CN1319219A (en) |
WO (1) | WO2000017833A1 (en) |
Families Citing this family (57)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
PT1250685E (en) * | 2000-01-28 | 2004-11-30 | Fundamo Proprietary Ltd | BANKING SYSTEM WITH IMPROVED FINANCIAL ACCOUNTS IDENTIFICATION |
WO2001058110A2 (en) * | 2000-02-03 | 2001-08-09 | Apion Telecoms Limited | A network gateway-based billing method |
GB2362070B (en) | 2000-05-05 | 2004-06-16 | Nokia Mobile Phones Ltd | Communication devices and method of communication |
FR2812745B1 (en) * | 2000-08-04 | 2003-01-31 | Dassault Automatismes | ELECTRONIC PAYMENT TERMINAL INCLUDING A WIRELESS LINK WITH A PORTABLE TELEPHONE USED AS A MODEM |
FR2818778A1 (en) * | 2000-12-22 | 2002-06-28 | France Telecom | PAYMENT METHOD AND SYSTEM, AND TELECOMMUNICATIONS EQUIPMENT USED IN THIS SYSTEM |
EP1302917A3 (en) * | 2001-08-16 | 2004-01-02 | Siemens Aktiengesellschaft | Method and apparatus for electronic payment of goods and services, in particular for an application on a data network |
DE10157930A1 (en) * | 2001-11-26 | 2003-06-12 | Siemens Ag | Automatic payment request via contactless reader |
CN100433617C (en) | 2001-12-04 | 2008-11-12 | M概念有限公司 | System and method for facilitating electronic financial transactions using a mobile telecommunications device |
US20040117262A1 (en) * | 2002-12-17 | 2004-06-17 | Berger Jeffrey Keith | System and method for conducting a monetary transaction |
TW595195B (en) * | 2003-04-04 | 2004-06-21 | Benq Corp | Network lock method and related apparatus by ciphered network lock and inerasable deciphering key |
US7374079B2 (en) * | 2003-06-24 | 2008-05-20 | Lg Telecom, Ltd. | Method for providing banking services by use of mobile communication system |
DE60330507D1 (en) | 2003-07-22 | 2010-01-21 | Nokia Corp | READER FOR A HIGH FREQUENCY IDENTIFICATION TRANSPONDER WITH TRANSPONDER FUNCTIONALITY |
ES2290667T3 (en) | 2004-01-23 | 2008-02-16 | Nokia Corporation | METHOD, DEVICE AND SYSTEM FOR INFORMATION OF AUTOMATED CONTEXT FROM SELECTIVE DATA PROVIDED BY MEANS OF IDENTIFICATION. |
US8225014B2 (en) * | 2004-03-17 | 2012-07-17 | Nokia Corporation | Continuous data provision by radio frequency identification (RFID) transponders |
US9084116B2 (en) * | 2004-03-19 | 2015-07-14 | Nokia Technologies Oy | Detector logic and radio identification device and method for enhancing terminal operations |
PL368774A1 (en) * | 2004-06-25 | 2005-12-27 | Artur Kozioł | Method and sales point terminal for effecting payments through the gsm mobile telephone network (or other networks, such as the umts) |
US7865448B2 (en) * | 2004-10-19 | 2011-01-04 | First Data Corporation | Methods and systems for performing credit transactions with a wireless device |
CN1797476B (en) * | 2004-12-27 | 2010-04-14 | 中兴通讯股份有限公司 | Communication system for paying fare and method for paying fare |
GB0510713D0 (en) * | 2005-05-26 | 2005-06-29 | Ibm | A method or apparatus for sharing image data |
US8249965B2 (en) * | 2006-03-30 | 2012-08-21 | Obopay, Inc. | Member-supported mobile payment system |
EP2013842A4 (en) * | 2006-03-30 | 2009-03-18 | Obopay Inc | Mobile person-to-person payment system |
US20070255662A1 (en) * | 2006-03-30 | 2007-11-01 | Obopay Inc. | Authenticating Wireless Person-to-Person Money Transfers |
US20070244811A1 (en) * | 2006-03-30 | 2007-10-18 | Obopay Inc. | Mobile Client Application for Mobile Payments |
US8532021B2 (en) | 2006-03-30 | 2013-09-10 | Obopay, Inc. | Data communications over voice channel with mobile consumer communications devices |
KR20090063254A (en) | 2006-10-11 | 2009-06-17 | 비자 인터내셔날 써비스 어쏘시에이션 | Method and system for processing micropayment transactions |
US10068220B2 (en) | 2006-10-11 | 2018-09-04 | Visa International Service Association | Systems and methods for brokered authentication express seller links |
US7848980B2 (en) | 2006-12-26 | 2010-12-07 | Visa U.S.A. Inc. | Mobile payment system and method using alias |
CN101595491A (en) | 2006-12-26 | 2009-12-02 | 维萨美国股份有限公司 | Mobile vending purchasing |
US8615426B2 (en) | 2006-12-26 | 2013-12-24 | Visa U.S.A. Inc. | Coupon offers from multiple entities |
US9940627B2 (en) | 2006-12-26 | 2018-04-10 | Visa U.S.A. Inc. | Mobile coupon method and system |
BRPI0806464A2 (en) | 2007-01-09 | 2011-09-06 | Visa Usa Inc | method, readable by computer, telephone, and communications server |
US20090319425A1 (en) * | 2007-03-30 | 2009-12-24 | Obopay, Inc. | Mobile Person-to-Person Payment System |
US8688570B2 (en) * | 2007-04-27 | 2014-04-01 | American Express Travel Related Services Company, Inc. | System and method for performing person-to-person funds transfers via wireless communications |
US8170527B2 (en) | 2007-09-26 | 2012-05-01 | Visa U.S.A. Inc. | Real-time balance on a mobile phone |
US7958052B2 (en) * | 2007-12-31 | 2011-06-07 | Mastercard International Incorporated | Methods and systems for cardholder initiated transactions |
EP2266083A4 (en) * | 2008-03-14 | 2012-01-25 | Obopay Inc | Network-based viral payment system |
US20090271327A1 (en) * | 2008-04-23 | 2009-10-29 | Raghav Lal | Payment portfolio optimization |
US20090271305A1 (en) * | 2008-04-23 | 2009-10-29 | Raghav Lal | Payment portfolio optimization |
US9715709B2 (en) | 2008-05-09 | 2017-07-25 | Visa International Services Association | Communication device including multi-part alias identifier |
EP2124177A1 (en) | 2008-05-21 | 2009-11-25 | Johnson Controls Technology Company | Method and device for communication between an automobile and a point of sale |
US9542687B2 (en) | 2008-06-26 | 2017-01-10 | Visa International Service Association | Systems and methods for visual representation of offers |
US10706402B2 (en) | 2008-09-22 | 2020-07-07 | Visa International Service Association | Over the air update of payment transaction data stored in secure memory |
US8977567B2 (en) | 2008-09-22 | 2015-03-10 | Visa International Service Association | Recordation of electronic payment transaction information |
US9824355B2 (en) | 2008-09-22 | 2017-11-21 | Visa International Service Association | Method of performing transactions with contactless payment devices using pre-tap and two-tap operations |
US7827108B2 (en) | 2008-11-21 | 2010-11-02 | Visa U.S.A. Inc. | System and method of validating a relationship between a user and a user account at a financial institution |
DE102008060513A1 (en) | 2008-12-04 | 2010-06-17 | Karsten Rackwitz | Payment method for transmitting information between e.g. mobile telephones, using application software, involves allowing end user to enter amount of money to be transferred for mobile-based payment transaction |
KR20100074596A (en) * | 2008-12-24 | 2010-07-02 | 삼성전자주식회사 | Mutistandby terminal and method for offering tool kit menu thereof |
EP2280580A1 (en) * | 2009-07-07 | 2011-02-02 | Nokia Corporation | Data transfer with wirelessly powered communication devices |
US8676639B2 (en) * | 2009-10-29 | 2014-03-18 | Visa International Service Association | System and method for promotion processing and authorization |
US8280788B2 (en) | 2009-10-29 | 2012-10-02 | Visa International Service Association | Peer-to-peer and group financial management systems and methods |
US10255591B2 (en) * | 2009-12-18 | 2019-04-09 | Visa International Service Association | Payment channel returning limited use proxy dynamic value |
RU2589395C2 (en) | 2011-04-22 | 2016-07-10 | Пепсико, Инк. | Dispensing system for beverages with social services capabilities |
US9218704B2 (en) | 2011-11-01 | 2015-12-22 | Pepsico, Inc. | Dispensing system and user interface |
WO2013089568A1 (en) * | 2011-12-12 | 2013-06-20 | Iif Spółka Akcyjna | Method of making payment transaction via cellular telephone system and telecommunication system for conducting payment transactions |
CN103841532B (en) * | 2014-03-20 | 2018-02-23 | 深圳市金立通信设备有限公司 | The method and terminal of a kind of filtering short message |
US9967319B2 (en) * | 2014-10-07 | 2018-05-08 | Microsoft Technology Licensing, Llc | Security context management in multi-tenant environments |
JP5847345B1 (en) * | 2015-04-10 | 2016-01-20 | さくら情報システム株式会社 | Information processing apparatus, authentication method, and program |
Family Cites Families (20)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5799087A (en) * | 1994-04-28 | 1998-08-25 | Citibank, N.A. | Electronic-monetary system |
DE4425271A1 (en) | 1994-07-18 | 1996-01-25 | Sel Alcatel Ag | Method and device arrangement for secure, anonymous payment transactions |
US5608778A (en) | 1994-09-22 | 1997-03-04 | Lucent Technologies Inc. | Cellular telephone as an authenticated transaction controller |
US5991410A (en) * | 1995-02-15 | 1999-11-23 | At&T Wireless Services, Inc. | Wireless adaptor and wireless financial transaction system |
DE19526726C2 (en) | 1995-07-21 | 1997-12-18 | Loewe Opta Gmbh | System for the secure data exchange of alphanumeric data between two telecommunication devices |
US5796832A (en) * | 1995-11-13 | 1998-08-18 | Transaction Technology, Inc. | Wireless transaction and information system |
DE19628045A1 (en) | 1996-07-11 | 1998-01-22 | Esd Information Technology Ent | Networked customer and supplier financial transaction system |
DE59702957D1 (en) * | 1996-09-13 | 2001-03-01 | Siemens Ag | CASHLESS PAYMENT WITH A MOBILE RADIO |
EP0848360A1 (en) * | 1996-12-11 | 1998-06-17 | BRITISH TELECOMMUNICATIONS public limited company | Electronic funds transfer authentication system |
CN100375491C (en) | 1996-12-23 | 2008-03-12 | 瑞士电信流动电话公司 | Process and system for transmitting orders over a telecommunication network |
TW355899B (en) | 1997-01-30 | 1999-04-11 | Qualcomm Inc | Method and apparatus for performing financial transactions using a mobile communication unit |
ATE220814T1 (en) * | 1997-06-27 | 2002-08-15 | Swisscom Mobile Ag | TRANSACTION METHOD USING A PORTABLE IDENTIFICATION ELEMENT |
JPH1166430A (en) * | 1997-08-21 | 1999-03-09 | Junichi Mineo | Accounting and payment system using radio telephone with high safety |
US6098879A (en) * | 1997-09-26 | 2000-08-08 | Gilbarco, Inc. | Fuel dispensing system providing customer preferences |
JP3790032B2 (en) * | 1998-01-12 | 2006-06-28 | 住友商事株式会社 | Authentication settlement method using portable terminal device and portable terminal device |
JP2000286836A (en) * | 1999-03-30 | 2000-10-13 | Fujitsu Ltd | Authentication device and recording medium |
KR20000059150A (en) * | 2000-07-18 | 2000-10-05 | 최창국 | Phone-Account System |
KR20000072548A (en) * | 2000-09-08 | 2000-12-05 | 한진현 | Liquidation system and method and radio liquidation terminal using mobile communication network |
KR100325416B1 (en) * | 2000-09-22 | 2002-02-21 | 신현길 | Method of real time sattlement with Phone & Phone, and make use of short message service for second confirmation |
KR20010067931A (en) * | 2001-04-09 | 2001-07-13 | 김남중 | The System settle accounts by cellular phone |
-
1999
- 1999-09-15 US US09/787,961 patent/US7231372B1/en not_active Expired - Fee Related
- 1999-09-15 JP JP2000571417A patent/JP2002525767A/en not_active Withdrawn
- 1999-09-15 WO PCT/DE1999/002934 patent/WO2000017833A1/en not_active Application Discontinuation
- 1999-09-15 CN CN99811213A patent/CN1319219A/en active Pending
- 1999-09-15 KR KR1020017003675A patent/KR20010075291A/en not_active Ceased
- 1999-09-15 EP EP99955714A patent/EP1116194A1/en not_active Ceased
Non-Patent Citations (1)
Title |
---|
"An Introduction To The IrDa Standard And System Implementation", ABSTRACT ARTICLE, XP002118651 * |
Also Published As
Publication number | Publication date |
---|---|
JP2002525767A (en) | 2002-08-13 |
KR20010075291A (en) | 2001-08-09 |
WO2000017833A1 (en) | 2000-03-30 |
US7231372B1 (en) | 2007-06-12 |
CN1319219A (en) | 2001-10-24 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2000017833A1 (en) | Method and system for paying for goods or services | |
DE69524733T2 (en) | REAL-TIME PAYMENT SYSTEM TELE | |
EP1240632B1 (en) | Payment transaction method and payment transaction system | |
EP1240631B1 (en) | Payment transaction method and payment transaction system | |
DE69732526T2 (en) | Method and arrangement for pre-paid telecommunications services | |
DE60208550T2 (en) | PAYMENT PURCHASE BY BAKING (LIGHT SIGNAL) | |
DE69723333T2 (en) | Prepayment method for telephone communication use | |
EP1178444B1 (en) | Electronic payment using SMS | |
DE69624342T2 (en) | SYSTEM AND METHOD FOR ELECTRONIC MONEY TRANSFERS USING AN AUTOMATIC BANK SWITCH-POS MACHINE TO DISPENSE THE TRANSFERED MONEY | |
DE69631706T2 (en) | System for enabling the ordering and payment of services via a communication network | |
EP1120759A2 (en) | Arrangement for the provision of and flexible charging for goods or services, a dispenser employing this system and a method of operation | |
EP2174281A2 (en) | Virtual prepaid or credit card and method and system for providing such and for electronic payment transactions | |
EP1149367A1 (en) | Method for carrying out cash-free payments and system for carrying out said method | |
DE10156177A1 (en) | Conducting cashless payment transaction involves combining accounts for cashless payment for telephony service and for goods or services into common account in user interface | |
EP1281137A1 (en) | Transaction method and selling system | |
EP1282087A1 (en) | Method for executing electronic money transactions between terminals of participants in a communication network; associated transaction server and program module | |
DE10003875A1 (en) | Payment execution device for cashless payment and method for executing a cashless payment | |
DE10054633C2 (en) | Process and system for controlling access to goods and services | |
EP1309951B1 (en) | Method and arrangement for electronically transferring an amount of money from a credit account memory | |
DE19843439C2 (en) | Method and system for paying for goods or services | |
DE19609232A1 (en) | Method and device for universal and secure access to the multimedia services offered via the telephone network | |
EP1081919B1 (en) | Method to give authorization for payments of goods and/or services bought over the Internet in data transmission systems | |
EP1128340A1 (en) | Method for loading a client account for telecommunication services and associated loading system | |
DE10223282B3 (en) | Method, computer program and computer system for a prepaid telecommunication service | |
DE10008280C1 (en) | Cash-free transaction method has supplier and customer data handled via coordination device out of sphere of influence of either supplier or customer for providing fraud protection |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 20010223 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE |
|
17Q | First examination report despatched |
Effective date: 20021210 |
|
RBV | Designated contracting states (corrected) |
Designated state(s): DE FR GB IT |
|
APBN | Date of receipt of notice of appeal recorded |
Free format text: ORIGINAL CODE: EPIDOSNNOA2E |
|
APBR | Date of receipt of statement of grounds of appeal recorded |
Free format text: ORIGINAL CODE: EPIDOSNNOA3E |
|
APAF | Appeal reference modified |
Free format text: ORIGINAL CODE: EPIDOSCREFNE |
|
APBT | Appeal procedure closed |
Free format text: ORIGINAL CODE: EPIDOSNNOA9E |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION HAS BEEN REFUSED |
|
18R | Application refused |
Effective date: 20100302 |