Method and system for secured transactions over a wireless network

• US 20040267618A1
• Filed: 09/29/2003
• Published: 12/30/2004
• Est. Priority Date: 06/30/2003
• Status: Active Grant

• Current Assignee: Toshiba Global Commerce Solutions Holdings Corporation (Toshiba Corporation)
• Original Assignee: International Business Machines Corporation
• Inventors: Modeo, Leonardo, Leopardi, Sandro, Pergola, Nicola, Judicibus, Dario De
• Granted Patent: US 8,352,360 B2
• Time in Patent Office: Days
• US Class Current: 705/16
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A method and system are disclosed for booking and paying a retailer having a POS, which can be a low cost thin client computer system, connected to a transaction server storing confidential user information including a retailer identification, a user code and a user wireless device phone number, said method comprising the steps of receiving at the transaction server, from the user wireless device which can be a common cellphone, an SMS containing a retailer identification, reading at the transaction server the phone number of the wireless device communicated by the carrier transporting the SMS, authentifying said phone number and retailer identification with the stored confidential user information and sending the user confidential information to the retailer POS, the user entering on the POS the user code and the POS reading and authentifying the user code with the user confidential information received from the transaction server, the retailer entering the payment information on the POS and sending it with user information to the transaction server.

Claims

1. A method for booking and paying a retailer having a POS connected to a transaction server storing confidential user information including a retailer identification, a user code and a user wireless device phone number, said method comprising the steps of:

receiving at the transaction server, from the user wireless device an SMS containing a retailer identification;

reading at the transaction server the phone number of the wireless device communicated by the carrier transporting the SMS;

authentifying said phone number and retailer identification with the stored confidential user information and sending the user confidential information to the retailer POS;

the user entering on the POS the user code and the POS reading and authentifying the user code with the user confidential information received from the transaction server; and

the retailer entering the payment information on the POS and sending it with user information to the transaction server.

2. The method of claim 1 wherein the authentifying said phone number step further comprising the step of executing the following steps only if the phone number is identified as belonging to user information on the transaction server.

3. The method of claim 1 wherein the authentifying said phone number step further comprising of the step of executing the following steps only if the user code is identified as belonging to the received user confidential information.

4. The method of claim 1 further comprising the initial steps of:

transmitting from the user to the transaction server user confidential information wherein the user code comprises a PIN;

storing at the transaction server the user confidential number and adding a user identification string;

sending the user identification string;

the method further comprising in the entering user code step at the POS the step of;

entering the user identification string;

authentifying the user identification string with the user confidential information received from the transaction server;

executing the following steps only if the user identification string is identified;

entering the user PIN;

authentifying the user identification string with said user confidential information; and

executing the following steps only if the user PIN is identified.

5. The method of claim 1 wherein the step of sending from the transaction server the user information to the retailer POS further comprises a step of encrypting the data at the transaction server before sending it and at the retailer pos decrypting the data received.

6. The method of claim 1 wherein the step of sending at the retailer POS the payment information with the user information to the transaction server a step of encrypting the data at the retailer POS before sending it and at the transaction server decrypting the data received.

7. A system for booking and paying a retailer in a secure way, said system comprising:

a user wireless device for sending a digital message through a wireless network, said message containing identification for a retailer through a wireless network;

a server for receiving said digital message and authentifying the user phone number and retailer with user confidential data stored on said server and sending said user confidential data to said retailer POS; and

a POS for receiving user confidential data and authentifying data entered on it by the user with said received user confidential data and sending user payment transaction data to said server.

8. A computer program product for instructing a processor to book and pay a retailer having a POS connected to a transaction server storing confidential user information including a retailer identification, a user code and a user wireless device phone number, said computer program product comprising:

a computer readable medium;

first program instruction means for receiving at the transaction server, from the user wireless device an SMS containing a retailer identification;

second program instruction means for reading at the transaction server the phone number of the wireless device communicated by the carrier transporting the SMS;

third program instruction means for authentifying said phone number and retailer identification with the stored confidential user information and sending the user confidential information to the retailer POS;

fourth program instruction means for entering by the user on the POS the user code and the POS reading and authentifying the user code with the user confidential information received from the transaction server; and

fifth program instruction means for entering by the retailer the payment information on the POS and sending it with user information to the transaction server; and

wherein all said program instruction means are recorded on said medium.