WO2003015043A1 - A credit card security system - Google Patents
A credit card security system Download PDFInfo
- Publication number
- WO2003015043A1 WO2003015043A1 PCT/GB2002/003485 GB0203485W WO03015043A1 WO 2003015043 A1 WO2003015043 A1 WO 2003015043A1 GB 0203485 W GB0203485 W GB 0203485W WO 03015043 A1 WO03015043 A1 WO 03015043A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- credit card
- account
- server
- data
- mobile phone
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/04—Payment circuits
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/20—Point-of-sale [POS] network systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/22—Payment schemes or models
- G06Q20/24—Credit schemes, i.e. "pay after"
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
- G06Q20/322—Aspects of commerce using mobile devices [M-devices]
- G06Q20/3223—Realising banking transactions through M-devices
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
- G06Q20/325—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices using wireless networks
- G06Q20/3255—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices using wireless networks using mobile network messaging services for payment, e.g. SMS
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/407—Cancellation of a transaction
Definitions
- the present invention is concerned with a credit card security system which is able to reduce the fraudulent use of a card.
- the problem of fraudulent use of a credit card will be familiar to most and is becoming more serious as credit card and like transactions become more commonplace.
- a frequent problem results from a credit card or card data being stolen and used fraudulently for hours or even days, while the card holder is unaware of the abuse and so unable to alert the card issuer.
- the present invention seeks to take advantage of the existing system of processing credit card transactions and so improve credit card security at minimal cost Accordingly the present invention provides a credit card security system having: a credit card bearing data corresponding to a card holder account a security server arranged to receive said card holder account data when a credit card account transaction is initiated and responsive to receipt of said data to transmit a message immediately to at least one of a mobile phone account in the name of said card holder or an email account in the name of said cardholder.
- a method of improved credit card security comprising the steps of: initiating a transaction by communicating data corresponding to a card holder account to a vendor, said vendor communicating said card holder account data to a security server, said security server responding to said credit card holder account data by addressing at least one of mobile phone account data or email account data previously provided by the credit card holder, and sending at least one of an SMS message or email to said mobile phone or email account.
- the credit card user may be unaware of the abuse of his card until he receives the monthly card balance probably days or weeks later, even then the abuse may not be instantly obvious.
- the present invention gives a clear and immediate warning if the credit card account is being used fraudulently and this will give the legitimate card holder a very early opportunity to alert the credit card provider to the fraudulent use so that steps can be taken to prevent further abuse.
- the mobile phone account data and/or email account data may be presented on the card in which case it is preferable that the data is encrypted and in machine readable form, such as the conventional magnetic strip or electronic memory. However, it is preferred that the credit card provider pre-loads the mobile phone and/or email account data onto the security server.
- the credit checking server or a server in close communication with the credit checking server may conveniently serve as the credit checking server.
- the mobile phone data and email account data is not available to a thief and the mobile phone and email data can be readily managed by the credit card provider in cooperation with the credit checking service provider.
- the security server has means to receive said card holder account data when a credit card account transaction is initiated, memory means which holds card holder account data, and memory means holding at least one of mobile phone account data or email account data.
- the security server is responsive to receipt of said card holder account data to recover at least one of the mobile phone account data or email account data corresponding to said card holder account data received from memory and has transmission means to transmit a message immediately to at least one of the mobile phone account or email account corresponding to said card holder. It is preferred that the message is a text message.
- the security system and method may be further enhanced by enabling the card holder's mobile phone to respond to the message with a default stop or proceed message to stop or expedite the transaction.
- a stop message might then be retransmitted from the security server to the vendor so that if the transaction is fraudulent the transaction can be stopped by the vendor.
- the mobile phone would be adapted to present the message in a way which allows the credit card holder to respond to the message from a soft key, selecting proceed or stop, alternatively one or two of the phone keys may be used to transmit a default, proceed or stop message to the security server.
- the security system may be set to allow a transaction to proceed if no response is received from the mobile phone within a predetermined period, for example, ninety seconds. This will allow transactions to proceed where the mobile phone is out of service for any reason.
- Figure 1 is a first embodiment of the system
- Figure 2 is a second embodiment of the invention.
- Figure 1 shows a credit card transaction being implemented using the security system.
- data indicative of the credit card account is input to a vendor's transaction computer/server 2.
- the data input may be via a card reader, by manual input, direct input via internet access or by any other conventional means.
- This data is processed in the usual way and communicated via normal telecommunication 3 to security server provided in this example by a card credit checking server 4 in two way communication with the vendors server 2.
- the card credit checking server 4 includes a register of email addresses and cellular mobile phone numbers which correspond to each credit card account. Upon receipt of the credit card account data the card credit checking server addresses the corresponding mobile phone account number and/or email address and forwards a predetermined message to an internet server 5 and/or a cellular network server 6 and hence to the credit card holder's mobile phone 7 or computer 8.
- the message will preferably be a text message and may in addition to an indication that a transaction has been implemented include further information data such as the location, time and value of the transaction. Particularly if this further information is delivered to a PC or other handheld type device this will allow credit card holders to maintain nearly instant monitoring of their credit card account balance in addition to enhancing the security of the account.
- credit card may also include debit cards and other forms of payment card, including; smart cards, stored value cards and any other microprocessor payment system embedded in hand held devices like mobile phones or personal digital assistants (PDA's).
- PDA's personal digital assistants
- These chip cards will have a processor, ROM and RAM, an operating system and even co-processor power for handling Crypto Algorithms in real time allowing the card or handheld device to trust or distrust a terminal on or off-line.
- Such a terminal will have the ability to intelligently interrogate a payment card or hand held device micro-processor payment system and locally satisfy itself that the card is trustworthy.
- card like devices are used in smart security systems as a key to provide access to restricted areas, in such instances the unauthorised use of an authorised key would be alerted to the authorised user.
- FIG. 2 diagrammatically illustrates a second embodiment of the invention.
- the components of the system common to the first embodiment are similarly numbered and only the differences between the two embodiments will be described.
- the security server 6 When the security server 6 generates a message to the mobile phone 7a the message includes code to generate one of two response messages from the phone.
- a message such as that illustrated on the phone display is received it includes that the message is a "credit card transaction alert" here abbreviated to "CC TRNS ALT" the date and time and the location "@XXXXXX" there is additionally a question "PROCEED?" 9.
- the message establishes a softkey 9 option "YES" to respond with a proceed message and option "NO" to respond with a stop message.
Landscapes
- Business, Economics & Management (AREA)
- Engineering & Computer Science (AREA)
- Accounting & Taxation (AREA)
- Strategic Management (AREA)
- Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Finance (AREA)
- Computer Security & Cryptography (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
Description
Claims
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
GB0119040A GB2378294A (en) | 2001-08-03 | 2001-08-03 | Credit card security system |
GB0119040.4 | 2001-08-03 | ||
GB0104072 | 2001-09-11 | ||
GBPCT/GB01/04072 | 2001-09-11 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2003015043A1 true WO2003015043A1 (en) | 2003-02-20 |
Family
ID=26245732
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/GB2002/003485 WO2003015043A1 (en) | 2001-08-03 | 2002-07-29 | A credit card security system |
Country Status (1)
Country | Link |
---|---|
WO (1) | WO2003015043A1 (en) |
Cited By (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2004111892A1 (en) * | 2003-06-19 | 2004-12-23 | Markets-Alert Pty Ltd. | A monitoring system |
WO2006018709A1 (en) * | 2004-08-20 | 2006-02-23 | Gary John Kamp | Improved security for bank card payments |
EP1665154A1 (en) * | 2003-08-18 | 2006-06-07 | Prime King Investments LTD | Payment transaction system and method |
WO2007092366A2 (en) * | 2006-02-02 | 2007-08-16 | Lucent Technologies Inc. | Authentication and verification services for third party vendors using mobile devices |
WO2008050132A2 (en) * | 2006-10-25 | 2008-05-02 | Payfont Limited | Secure authentication and payment system |
WO2010010062A2 (en) * | 2008-07-21 | 2010-01-28 | Andreas Traint | Untamperable anonymous payment system |
US8423466B2 (en) | 2006-10-25 | 2013-04-16 | Payfont Limited | Secure authentication and payment system |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP0793206A2 (en) * | 1996-02-29 | 1997-09-03 | Hitachi, Ltd. | IC card reader/writer and operation method thereof |
EP1065634A1 (en) * | 1999-07-02 | 2001-01-03 | Mic Systems | System and method for performing secure electronic transactions over an open communication network |
WO2001001300A1 (en) * | 1999-06-28 | 2001-01-04 | Industry Wide Networks Pty Ltd | An internet e-commerce system |
FR2801995A1 (en) * | 1999-12-07 | 2001-06-08 | Bruno Duval | METHOD AND SYSTEM FOR MANAGING SECURE TRANSACTION THROUGH A COMMUNICATION NETWORK |
WO2001052205A1 (en) * | 2000-01-12 | 2001-07-19 | Seaglade Developments Limited | A processing method and apparatus |
WO2001055984A1 (en) * | 2000-01-28 | 2001-08-02 | Fundamo (Proprietary) Limited | Flexible electronic system for conducting commercial transactions |
-
2002
- 2002-07-29 WO PCT/GB2002/003485 patent/WO2003015043A1/en not_active Application Discontinuation
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP0793206A2 (en) * | 1996-02-29 | 1997-09-03 | Hitachi, Ltd. | IC card reader/writer and operation method thereof |
WO2001001300A1 (en) * | 1999-06-28 | 2001-01-04 | Industry Wide Networks Pty Ltd | An internet e-commerce system |
EP1065634A1 (en) * | 1999-07-02 | 2001-01-03 | Mic Systems | System and method for performing secure electronic transactions over an open communication network |
FR2801995A1 (en) * | 1999-12-07 | 2001-06-08 | Bruno Duval | METHOD AND SYSTEM FOR MANAGING SECURE TRANSACTION THROUGH A COMMUNICATION NETWORK |
WO2001052205A1 (en) * | 2000-01-12 | 2001-07-19 | Seaglade Developments Limited | A processing method and apparatus |
WO2001055984A1 (en) * | 2000-01-28 | 2001-08-02 | Fundamo (Proprietary) Limited | Flexible electronic system for conducting commercial transactions |
Cited By (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
AU2004248209B2 (en) * | 2003-06-19 | 2007-02-08 | Markets-Alert Pty Ltd | A monitoring system |
WO2004111892A1 (en) * | 2003-06-19 | 2004-12-23 | Markets-Alert Pty Ltd. | A monitoring system |
EP1665154A4 (en) * | 2003-08-18 | 2012-05-02 | Marketing Intellectual Properties Pte Ltd U | Payment transaction system and method |
EP1665154A1 (en) * | 2003-08-18 | 2006-06-07 | Prime King Investments LTD | Payment transaction system and method |
WO2006018709A1 (en) * | 2004-08-20 | 2006-02-23 | Gary John Kamp | Improved security for bank card payments |
US8934865B2 (en) | 2006-02-02 | 2015-01-13 | Alcatel Lucent | Authentication and verification services for third party vendors using mobile devices |
WO2007092366A3 (en) * | 2006-02-02 | 2007-10-04 | Lucent Technologies Inc | Authentication and verification services for third party vendors using mobile devices |
WO2007092366A2 (en) * | 2006-02-02 | 2007-08-16 | Lucent Technologies Inc. | Authentication and verification services for third party vendors using mobile devices |
US9256869B2 (en) | 2006-02-02 | 2016-02-09 | Alcatel Lucent | Authentication and verification services for third party vendors using mobile devices |
US11087317B2 (en) | 2006-02-02 | 2021-08-10 | Alcatel Lucent | Authentication and verification services for third party vendors using mobile devices |
WO2008050132A2 (en) * | 2006-10-25 | 2008-05-02 | Payfont Limited | Secure authentication and payment system |
WO2008050132A3 (en) * | 2006-10-25 | 2008-06-26 | Payfont Ltd | Secure authentication and payment system |
US8423466B2 (en) | 2006-10-25 | 2013-04-16 | Payfont Limited | Secure authentication and payment system |
US9530129B2 (en) | 2006-10-25 | 2016-12-27 | Payfont Limited | Secure authentication and payment system |
WO2010010062A2 (en) * | 2008-07-21 | 2010-01-28 | Andreas Traint | Untamperable anonymous payment system |
WO2010010062A3 (en) * | 2008-07-21 | 2010-03-18 | Andreas Traint | Untamperable anonymous payment system |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US6829711B1 (en) | Personal website for electronic commerce on a smart java card with multiple security check points | |
US10121134B2 (en) | Payment terminal messaging | |
RU2645593C2 (en) | Verification of portable consumer devices | |
EP0981804B1 (en) | Electronic transaction and smart card for a electronic transaction | |
US7231372B1 (en) | Method and system for paying for goods or services | |
US20030191945A1 (en) | System and method for secure credit and debit card transactions | |
US20040177046A1 (en) | Credit card protection system | |
US20060253389A1 (en) | Method and system for securing card payment transactions using a mobile communication device | |
WO2003083793A2 (en) | System and method for secure credit and debit card transactions | |
CN101048794A (en) | Method and system for authorizing a transaction using a dynamic authorization code | |
WO2002082393A2 (en) | Systems and method for approval of credit/debit account transactions using a wireless device | |
US20090094458A1 (en) | Process and system for confirming transactions by means of mobile units | |
GB2328310A (en) | Electronic transaction authorisation system | |
US20210406909A1 (en) | Authorizing transactions using negative pin messages | |
JP2004310257A (en) | Non-contact ic mounted portable information terminal, transaction information transferring method and program | |
EP2787474A2 (en) | Dynamically allocated security code system for smart debt and credit cards | |
GB2398159A (en) | Electronic payment authorisation using a mobile communications device | |
WO2003015043A1 (en) | A credit card security system | |
EP1705605A1 (en) | Personal information storage device and mobile terminal | |
WO1998054943A2 (en) | Universal electronic transaction system and method therefor | |
GB2378294A (en) | Credit card security system | |
AU2004312730B2 (en) | Transaction processing system and method | |
WO2000042794A1 (en) | Apparatus and method relating to authorisation control | |
US20050010813A1 (en) | Security in data communication networks | |
KR100574044B1 (en) | Terminal for settling transaction and method for handling cash transaction |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AK | Designated states |
Kind code of ref document: A1 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ OM PH PL PT RO RU SD SE SG SI SK SL TJ TM TN TR TT TZ UA UG US UZ VN YU ZA ZM ZW Kind code of ref document: A1 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BY BZ CA CH CN CO CR CU CZ DE DM DZ EC EE ES FI GB GD GE GH HR HU ID IL IN IS JP KE KG KP KR LC LK LR LS LT LU LV MA MD MG MN MW MX MZ NO NZ OM PH PL PT RU SD SE SG SI SK SL TJ TM TN TR TZ UA UG US UZ VN YU ZA ZM |
|
AL | Designated countries for regional patents |
Kind code of ref document: A1 Designated state(s): GH GM KE LS MW MZ SD SL SZ UG ZM ZW AM AZ BY KG KZ RU TJ TM AT BE BG CH CY CZ DK EE ES FI FR GB GR IE IT LU MC PT SE SK TR BF BJ CF CG CI GA GN GQ GW ML MR NE SN TD TG Kind code of ref document: A1 Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR IE IT LU MC NL PT SE SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
REG | Reference to national code |
Ref country code: DE Ref legal event code: 8642 |
|
122 | Ep: pct application non-entry in european phase | ||
NENP | Non-entry into the national phase |
Ref country code: JP |
|
WWW | Wipo information: withdrawn in national office |
Country of ref document: JP |