Financial transaction system and method using electronic messaging

• US 20050044042A1
• Filed: 08/01/2002
• Published: 02/24/2005
• Est. Priority Date: 08/31/2001
• Status: Abandoned Application

• Current Assignee: Anthony Albert Martinez Zamora, Dennis Mendiola, Roland Alen Rondolo Benzon
• Original Assignee: Anthony Albert Martinez Zamora, Dennis Mendiola, Roland Alen Rondolo Benzon
• Inventors: Mendiola, Dennis, Zamora, Anthony Albert Martinez, Benzon, Roland Alen Rondolo
• Application Number:
  US10/488,342
• Publication Number:
  US 20050044042A1
• Time in Patent Office: Days
• US Class Current: 705/42
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/108 Remote banking, e.g. home banking
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code
• CPC Class Codes: H04L 2101/663 Transport layer addresses, e.g. aspects of transmission control protocol [TCP] or user datagram protocol [UDP] ports
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming

Abstract

A method and a system for performing financial transactions between parties having clients (15a, 15b) with an electronic messaging facility and a banking account facility with a financial institution. Each party has an electronic messaging address (CIN) associated with the electronic messaging facility and a banking account number (CAN) associated with the banking account facility (27) thereof.

A financial service provider server (13) is interfaced with the electronic messaging facility to handle communications between the clients (15a, 15b) of the parties and is also interfaced with the banking account facilities (27) of the parties to perform the financial transaction. The electronic messaging address (CIN) of each party is linked with the banking account facility therefor, and thus the banking account number(s) (CAN) thereof, within a database (45) associated with the server (13) to facilitate the financial transaction.

The server (13) undertakes an authentication process within one and/or the other party using the electronic messaging facility requiring confirmation of a PIN also stored in the database (45). The authentication process is characterised by the server (13) providing the client (15a) of the one party instigating the financial transaction with a different electronic messaging address to “reply to” when requesting the PIN, from the original electronic messaging address of the server (13) used by that same party to initiate the financial transaction, to enhance the security of the transaction.

Claims

1. A method for performing a financial transaction for a party having an electronic messaging facility, the party having an electronic messaging address and a banking account number for a banking account with a financial institution, whereby a financial transaction may be performed with the banking account, and the financial institution having a banking server for effecting a financial transaction with the banking account, the method comprising:

—

serving an electronic message from a client of the party, the electronic message;

(i) being sent to a predetermined electronic messaging address for performing a particular type of financial transaction;

(ii) being prepared in accordance with a first prescribed protocol; and

(iii) requesting that the particular type of financial transaction be performed; and

requesting the banking server of the financial institution of the party to effect the financial transaction in accordance with the first prescribed protocol of the electronic message.

2. A method as claimed in claim 1, wherein the server includes serving an electronic message to the client of the party in response to serving said electronic message from the client of the party for controlling the progress of the financial transaction.

3. A method as claimed in claim 1 or 2, including linking the electronic messaging address to the banking account of the party.

4. A method as claimed in any one of claims 1 to 3, wherein the server includes authenticating the identity of the party before proceeding with requesting the banking server to effect the transaction.

5. A method as claimed in claim 4, wherein the authenticating includes requesting a personal identification number (PIN) to be provided by the party in a further electronic message prepared in accordance with a second prescribed protocol, and verifying that the PIN provided in the further electronic message is correct.

6. A method as claimed in claim 5, wherein the authenticating includes timing out a prescribed time period after requesting the PIN from the party and abandoning the financial transaction if the further electronic message is not provided by the party within said prescribed time period.

7. A method as claimed in any one of claims 4 to 6, wherein the authenticating includes supplying a different electronic messaging address to the party from the predetermined electronic messaging address, for the party to reply to in order to progress the financial transaction.

8. A method as claimed in claim 7, including pseudo-randomly generating part of the different electronic messaging address to ensure that it is different and not derivable from the predetermined electronic messaging address.

9. A method as claimed in any one of the preceding claims, wherein the particular type of financial transaction involves a financial transaction between two said parties each having electronic messaging facilities, whereby:

(iii) the electronic message is served from a client of one party and includes requesting that the particular type of financial transaction be performed with the other party; and

(iv) the banking server of the financial institution of each party is requested to effect the financial transaction relative to the particular party in accordance with the first prescribed protocol of the electronic message.

10. A method as claimed in claim 9, wherein the electronic message includes the electronic messaging address of the one party and either the electronic messaging address or the banking account number of the other party.

11. A system for performing a financial transaction for a party having an electronic messaging facility, the party having an electronic messaging address and a banking account number for a banking account with a financial institution, whereby a financial transaction may be performed with the banking account, and the financial institution having a banking server for effecting a financial transaction with the banking account, the system comprising:

—

a financial service provider server for serving an electronic message from a client of the party, the electronic message being prepared in accordance with a first prescribed protocol and including;

(i) a predetermined electronic messaging address dedicated to the performance of a particular type of financial transaction; and

(ii) a request that the particular type of financial transaction be performed;

wherein the financial service provider server includes message handling means to receive and decode said electronic message, and transacting means to request the banking server of the financial institution of the party to effect the financial transaction in accordance with the first prescribed protocol of the electronic message on the financial service provider server receiving said electronic message.

12. A system as claimed in claim 11, wherein said message handling means is adapted to serve an electronic message to the client of the party in response to serving said electronic message from the client of the party for progressing the financial transaction.

13. A system as claimed in claim 11 or 12, wherein said financial service provider server includes a database that links said electronic messaging address to the banking account of the party.

14. A system as claimed in any one of claims 11 to 13, wherein said financial service provider server includes authenticating means to authenticate the identity of the party before invoking said transacting means.

15. A system as claimed in claim 14, wherein said message handling means is adapted to request a PIN from the party in a further electronic message prepared in accordance with a second prescribed protocol, and the authenticating means includes verifying means to verify that the PIN provided in the further electronic message is correct.

16. A system as claimed in claim 15, wherein said authenticating means includes timing means to time out a prescribed time period after requesting the PIN from the party and said financial service provider server includes abandoning means to abandon the financial transaction if said further electronic message is not provided by the party within said prescribed time period.

17. A system as claimed in any one of claims 14 to 16, wherein the authenticating means includes supplying a different electronic messaging address to the party from the predetermined electronic messaging address for the party to reply to in order to progress the financial transaction.

18. A system as claimed in claim 17, wherein the message handling means includes a pseudo-random number generating means to pseudo-randomly generate part of the different electronic messaging address to ensure that it is different and not derivable from the predetermined electronic messaging address.

19. A system as claimed in any one of claims 11 to 18, wherein the particular type of financial transaction involves a financial transaction between two said parties each having electronic messaging facilities, whereby:

(i) said electronic message is served by said financial service provider server from a client of one party at an electronic messaging address dedicated to the performance of a financial transaction between the two parties and includes a request that the particular type of financial transaction be performed with the other party; and

(ii) the banking server of the financial institution of each party is requested by said financial service provider server to effect the particular financial transaction relative to the particular party in accordance with the first prescribed protocol of said electronic message.

20. A system as claimed in claim 19, wherein said electronic message includes the electronic messaging address of the one party and either the electronic messaging address or the banking account number of the other party.

21. A method for performing financial transactions between two parties functioning as clients to a financial service provider server for controlling the transaction, the clients and server being interconnected via a communication network, at least one of the clients being a wireless device, and said financial service provider server being electronically connected to an account facility for each client, each account facility having a personal account for the client identified by an account number, and a wireless communication server for handling messages sent to or received from said wireless device using a wireless identifying number for the wireless device, the method comprising:

—

ascribing a client identifying number to each of the clients of the financial service provider server to uniquely identify each client to the financial service provider server;

ascribing an access code to the financial service provider server to uniquely identify the financial service provider server to the wireless communication server and the nature of the transaction to be performed;

registering the account number of each client with the financial service provider server to enable the financial service provider to access the personal account of the party associated with the client;

registering a personal identification number (PIN) for each client;

a sender client compiling and sending a text message to the financial service provider server in accordance with a first prescribed client protocol comprising;

the amount to be transacted,

the address of the other party to the transaction comprising;

(i) the access code identifying the financial service provider server and the nature of the transaction, and (ii) the client identifying number of the other client, and

the client identifying number of the client sending the message;

the financial service provider server on receipt of said text message compiling and sending back a further text message to the sender client in accordance with a first prescribed server protocol comprising;

a confirmation of the transaction to be performed,

a request for the PIN of the client, and

a “

reply to”

address that is different to the previous address of the receiver;

the sender client on receipt of said further text message compiling and sending back another text message to the “

reply to”

address with a second prescribed client protocol comprising the PIN thereof;

the financial service provider server waiting a prescribed time for receipt of said other text message and if received within said prescribed time, verifying the PIN and if correct, compiling and sending an advisory text message to the other client in accordance with a second prescribed server protocol that includes an advice describing the transaction; and

on authenticating the transaction, the financial service provider server effecting the transaction between the account facilities of the parties to the transaction to which the financial service provider server is connected;

wherein if either said prescribed time elapses without receipt of said other text message or if the PIN is not verified to be correct by the financial service provider server, the transaction is abandoned by the financial service provider server.

22. A method as claimed in claim 21, including generating the “

reply to”

address in accordance with the first prescribed server protocol to include the access code and a pseudo-randomly generated number.

23. A method as claimed In claim 21 or 22, including the financial service provider server generating a prescribed “

reply to”

address comprising the access code of the financial service provider server to be included in the second prescribed server protocol.

24. A method as claimed in claim 23, wherein the second prescribed server protocol includes:

the financial service provider server also including a request for the PIN of the other client in the advisory text message and making the prescribed “

reply to”

address different from any previous address identifying the financial service provider server; and

the method includes;

the other client compiling and sending back a reply text message to the prescribed “

reply to”

address with the PIN thereof on receipt of the advisory text message; and

the financial service provider server waiting a prescribed time for receipt of said reply text message and if received within said prescribed time, verifying the PIN and if correct, authenticating the transaction.

25. A method as claimed in claim 23 or 24, including generating the prescribed “

reply to”

address so that it includes the access code and a pseudo-randomly generated number.

26. A system for performing financial transactions between two parties comprising:

—

a financial service provider server for controlling a financial transaction between the parties;

each party having;

(i) an account facility that includes a personal account for the party identified by an account number registered with said financial service provider server,

(ii) a client for connection to said financial service provider server via a communication network, whereby at least one of the clients is a wireless device,

(iii) a client identifying number to uniquely identify each client to the financial service provider server, whereby the client identifying number for the client that is a wireless device corresponds to the wireless identifying number thereof, and

(iv) a PIN registered with said financial service provider server;

said financial service provider server being electronically connected to;

(i) each account facility and being able to identify and access same by said account number on registration of same with said financial service provider server, and

(ii) a wireless communication server for handling messages sent to or received from said wireless device using a wireless identifying number for the wireless device;

a said client having messaging means for compiling and sending text messages to said financial service provider server in accordance with;

(i) a first prescribed client protocol comprising;

the amount to be transacted,

the address of the other party to the transaction comprising;

an access code to uniquely identify the financial service provider to the wireless communication server and the nature of the transaction to be performed, and (ii) the client identifying number of the other client, and

the client identifying number of the client sending the message; and

(ii) a second prescribed client protocol comprising the PIN thereof; and

the financial service provider server having message handling means, authenticating means, transacting means and transaction abandoning means;

wherein;

(a) said message handling means is designed to;

(i) receive a said text message and compile and send back a further text message to the sender client in reply thereto in accordance with a first prescribed server protocol therefor comprising;

a confirmation of the transaction to be performed,

a request for the PIN of the client, and

a “

reply to”

address that is different to the previous address of the receiver; and

(ii) wait a prescribed time for receipt of another text message from the sender client in accordance with a second prescribed client protocol comprising the PIN of the sender client, and if said other text message is received within said prescribed time, verify the PIN and if correct, compile and send an advisory text message to the other client in accordance with a second prescribed server protocol comprising an advice describing the transaction;

(b) said authenticating means is designed to authenticate the transaction on said message handling means establishing a prescribed level of security of the identity of the parties to the transaction;

(c) said transacting means effecting a transaction in accordance with said text message between the parties in response to said authenticating means authenticating said transaction; and

(d) said transaction abandoning means abandoning said transaction if either said prescribed time elapses without receipt of said other text message or if the PIN is not verified to be correct by the message handling means.

27. A system as claimed in claim 26, wherein the message handling means includes a pseudo-random number generating means to pseudo-randomly generate a number, and said message handling means generates the “

reply to”

address in accordance with the first prescribed server protocol for said further text message, so as to comprise the access code and the pseudo-randomly generated number.

28. A system as claimed in claim 26 or 27, wherein the message handling means generates a prescribed “

reply to”

address in accordance with the second prescribed server protocol for said advisory text message, comprising the access code of the financial service provider.

29. A system as claimed in any one of claims 26 to 28, wherein the advisory text message compiled in accordance with said second prescribed server protocol includes a request for the PIN of the other client and a prescribed “

reply to”

address that is different from any previous address identifying the financial service provider server.

30. A system as claimed in claim 29, wherein said message handling means is also designed to wait a further prescribed time for receipt of a reply text message from the other client in accordance with a first prescribed client protocol for the other client comprising the PIN of the other client, and if received within said further prescribed time period, verify the PIN.

31. A system as claimed in claim 29 or 30, wherein the prescribed “

reply to”

address is generated so that it includes the access code and a further pseudo-randomly generated number from said pseudo-random number generating means.

32. A system as claimed in any one of claims 26 to 31, wherein said authenticating means authenticates the transaction if said message handling means verifies that the PIN of the other client received in said reply text message is correct.

33. A method substantially as herein described with respect to the accompanying drawings where appropriate.

34. A system substantially as described herein with respect to the accompanying drawings where appropriate.