Transaction authentication

• US 20040064406A1
• Filed: 04/28/2003
• Published: 04/01/2004
• Est. Priority Date: 11/01/2000
• Status: Abandoned Application

• Current Assignee: British Telecommunications PLC (BT Group PLC)
• Original Assignee: British Telecommunications PLC (BT Group PLC)
• Inventors: Thompson, Stephen M, Yates, Martin J, McCartney, David J, Gifford, Maurice M, Edwards, Nicholas H
• Application Number:
  US10/415,274
• Publication Number:
  US 20040064406A1
• Time in Patent Office: Days
• US Class Current: 705/40
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

In a payment validation system, a mobile phone or other communications terminal associated with a particular user is used. A vending node communicates with a validation platform which either returns a telephone number to be displayed for the user to call or which calls the alleged users phone or terminal for confirmation.

Claims

1. A method of validating a payment transaction comprising the steps of transmitting through a communications network a request message from a vending node to a transaction authorisation function, said request message identifying a communications node identity, said transaction authentication function using said communications node identity to establish a communications session with said communications node and transmitting a notification message thereto, said notification message instructing a confirmation response, said transaction function determining from the confirmation response whether the transaction is valid and, if so, transmitting an authorisation message to said vending node.

3. A method of validating a payment transaction as claimed in claim 1 or claim 2 in which the geographical location of the vending node is compared with the geographical location of communications apparatus prior to transmitting the authorisation message.

5. A method of validating a payment transaction as claimed in any preceding claim in which the vending node may displays a transaction identification message to be transmitted by the communications apparatus to the transaction authentication function, the request message including the transaction identification message.

6. A method of validating a payment transaction as claimed in any preceding claim in which, prior to transmitting the authorisation message, the transaction authorisation function requires the transmission of a personal identification code known to an authorised consumer associated with the transmitting communications apparatus and to the transaction authentication function.

7. A method of validating a payment transaction as claimed in claim 6 in which the personal identification code is in the form of a Personal Identification Number (PIN) code or an alpha- or alphanumeric code.

8. A method of validating a payment transaction as claimed in any preceding claim in which the transaction authorisation function determines, prior to transmitting the authorisation message, whether the account accessed has sufficient credit for the transaction.

9. A method of validating a payment transaction as claimed in any preceding claim in which the product requested is compared with a list of restricted articles associated with the account accessed and the authorisation message is withheld or modified to prevent the dispensing of the requested vended products or services.

2. A method of validating a payment transaction comprising the steps of transmitting through a communications network a request message from a vending node to a transaction authorisation function said request message identifying variable information displayed at said vending node, said transaction authorisation function monitoring a communications network node for receipt of a transaction confirmation message from communications apparatus and, on receipt of a transaction confirmation message determining whether the transaction is valid and, if so, transmitting an authorisation message to said vending node.

4. A method of validating a payment transaction as claimed in claim 2 in which the vending node is adapted to display a communications node address selected from a plurality of communications node addresses such that the consumer contacts the monitored communications node address which is transmitted by the vending node to the transaction authentication function in said request message.