System and method for facilitating electronic financial transactions using a mobile telecommunication device

• US 20050177517A1
• Filed: 12/04/2002
• Published: 08/11/2005
• Est. Priority Date: 12/04/2001
• Status: Active Grant

• Current Assignee: Andrew Mitchell, Gary Leung, Joseph Chan, Kevin Cheng, Peter Chui, Raymond Fung, Rudolph Lee, Shahen Mekertichian
• Original Assignee: Andrew Mitchell, Gary Leung, Joseph Chan, Kevin Cheng, Peter Chui, Raymond Fung, Rudolph Lee, Shahen Mekertichian
• Inventors: Cheng, Kevin, Mitchell, Andrew, Chan, Joseph, Leung, Gary, Chui, Peter, Lee, Rudolph, Fung, Raymond, Mekertichian, Shahen
• Granted Patent: US 7,379,920 B2
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/42 Confirmation, e.g. check or permission by the legal debtor of payment
• CPC Class Codes: G06Q 30/0225 Avoiding frauds
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04M 15/68 Payment of value-added services
• CPC Class Codes: H04M 2215/0196 Payment of value-added services, mainly when their charges are added on the telephone bill, e.g. payment of non-telecom services, e-commerce, on-line banking
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

A transaction processing system for processing a transaction between a supplier and a customer, said system comprising a supplier device for initiating the transaction, a system server and a mobile communication device, said device containing a message processing program module for enabling local verification of the transaction within the mobile device, wherein a transaction message is sent from the supplier device to the system server, a message requesting payment for the transaction is sent from the system server to the mobile communication device, the transaction is authorised and verified at the mobile telecommunications device from which a verification message is sent back to the system server, and the transaction is then processed.

Claims

1. A transaction processing system for processing a transaction between a supplier and a customer, said system comprising:

(a) a supplier device for initiating a transaction between the supplier and the customer, said supplier device including;

(i) supplier device data storage means for storing supplier identifying indicia;

(ii) supplier device data receiving means for receiving transaction data and customer-supplied customer identifying indicia, said transaction data including the monetary amount of the transaction;

(iii) supplier device message generation means for generating a transaction message containing the supplier identifying indicia, the transaction data and the customer identifying indicia; and

(iv) supplier device telecommunication means for sending the transaction message to a system server and for receiving messages from the system server;

(b) the system server which includes;

(i) server data storage means for storing supplier information and customer information;

(ii) server telecommunication means for sending and receiving messages to and from the supplier device and a mobile communication device of the customer;

(iii) server verification means;

for verifying that the supplier identifying indicia and the customer identifying indicia in the transaction message match corresponding indicia within the supplier information and the customer information, respectively; and

for issuing either a transaction proceed order or a transaction terminate order based on a result of said verification;

(iv) server message generation means for generating either;

a transaction denied message following receipt of a transaction terminate order;

or

a transaction request message following receipt of a transaction proceed order, said message containing, the supplier identifying indicia, the transaction data, the customer identifying indicia, and a unique transaction identifier which is different for each transaction;

and for transmitting the transaction denied message or the transaction request message to the server telecommunication means for the sending of said message to the mobile communication device;

(c) the mobile communication device of the customer, comprising

(i) mobile device telecommunication means for receiving messages from and sending messages to the system server;

(ii) a message processing program module comprising;

mobile device data storage means containing a customer security criterion; and

transaction authorisation means adapted to extract the transaction data and the supplier identifying indicia contained in the transaction request message, received by the mobile communication device, and to generate and display, on a visual display screen of

the mobile communication device, a message containing the transaction data, the supplier identifying indicia and a request for the customer either to;

 

authorise the transaction, by making a first pre-determined entry in a keypad of the mobile device, said predetermined entry including a secret identification parameter of the customer, or

 

decline the transaction, by making a second pre-determined entry in the keypad;

(iii) verification message generation means adapted to;

receive an authorisation order generated by the first predetermined entry into the keypad;

following receipt of said authorisation order, verify that the identification parameter matches the customer security criterion in the mobile device data storage means and, if they do match, generate a verification message, said verification message containing contents of the transaction request message; and

encrypt the verification message to generate a secure verification message.

(iv) decline transaction message generation means adapted to;

receive a decline order generated by the second predetermined entry into the keypad; and

generate a decline transaction message, following receipt of said decline order; and

(v) message transfer means for transferring the secure verification message, or the decline transaction message, to the mobile device telecommunication means for sending to the system server;

(d) a transaction processing server, in secure communication with the system server, comprising;

(i) means for receiving the secure verification message;

(ii) means for decrypting the secure verification message; and

(iii) processing means for;

identifying a customer account associated with the customer identifying indicia;

identifying a supplier account associated with the supplier identifying indicia;

arranging for said customer account to be debited by the monetary amount of the transaction; and

arranging for said supplier account to be credited by said monetary amount.

2. A transaction processing system according to Claim 1 wherein the customer identifying indicia is a mobile telephone number of said mobile communication device.

3. A transaction processing system according to claim 1 wherein the transaction data further includes one or more of the following;

time of the transaction;

nature of the goods and/or services being purchased;

monetary amount of particular goods and/or services of the transaction; and

any discount or surcharge applied by the supplier.

4. A transaction processing system according to claim 1 wherein the unique transaction identifier of the transaction request message is assigned by the system server.

5. A transaction processing system according to claim 1 wherein the customer security criterion is a personal identification number (PIN) of the customer.

6. A transaction processing system according to claim 1 wherein the transaction message, the transaction request message and the verification message are mobile data messages.

7. A transaction processing system according to claim 6 wherein the mobile data messages are selected from SMS messages, GPRS messages and UTMS messages.

8. A transaction processing system according to claim 7 wherein the secure verification message, sent from the mobile communication device to the system server, comprises a binary data stream.

9. A transaction processing system according to claim 8 wherein the transaction message and the transaction request message also comprise binary data streams.

10. A transaction processing system according to claim 1 wherein:

(a) the system server includes digital signature recognition means;

an

(b) the verification message generation means is further adapted to create and attach to the secure verification message a digital signature adapted to be recognised by said recognition means.

11. A transaction processing system according to claim 1 wherein the transaction authorising means of the program module is further adapted to include, in the request within the message generated by said authorising means, a further option to enable the customer to indicate that the monetary amount of the transaction is to be varied.

12. A transaction processing system according to claim 11 wherein said option is exercisable by a third predetermined entry being made in the keypad;

13. A transaction processing system according to claim 12 wherein the transaction authorising means is adapted, upon receipt of the third predetermined entry being made, to:

(a) generate a query message querying the amended monetary amount to which the customer wants the monetary amount amended;

(b) receive said amended monetary amount input by the customer; and

(c) amend the monetary amount of the transaction data to the amended monetary amount.

14. A transaction processing system according to claim 13 wherein, if the monetary amount is so amended, in all subsequent messages which contain the monetary amount, the amended monetary amount will be substituted for the monetary amount.

15. A transaction processing system according to claim 1 wherein the message processing program module is contained in a Subscriber Identity Module (SIM) card.

16. A transaction processing system according to any claim 1 wherein:

(a) the transaction message sent to the system server includes a predetermined transaction message code;

(b) the transaction request message sent to the mobile communication device contains a predetermined request message code;

(c) the verification message sent to the system server contains a predetermined verification message code;

wherein said codes are recognisable by the receiving system server or mobile device and said receiving system server or mobile device are adapted to discontinue the transaction if the relevant message does not contain its predetermined code.

17. A transaction processing system according to claim 1 wherein the server data storage means of the system server further includes benefits information concerning the availability of benefits offered by system-subscribed suppliers, and the system server further includes:

(a) checking means adapted to determine whether the server data storage means contains any benefits information concerning any benefits which are, or may be, available in respect of, or in association with, the transaction; and

means for generating a benefit notification message if any relevant benefit is located and for transmitting this notification message to the server telecommunication means for sending to the supplier device, said notification message containing details of the located benefit and a request for the supplier to verify or deny availability of the benefit.

18. A transaction processing system according to claim 17 wherein the supplier device further includes benefit processing means adapted to:

(a) receive and display the benefit notification message;

(b) receive a verification input or a denial input from the supplier; and

(c) upon receipt of a verification input, revise the monetary amount to a revised monetary amount to accommodate any discount associated with said benefit and to send to the system server a benefit confirmation message containing the revised monetary amount;

or

(d) upon receipt of a denial input, send a benefit denial message to the system server.

19. A transaction processing system according to claim 18 wherein, if the monetary amount is so revised, in all subsequent messages which contain the monetary amount, the revised monetary amount will be substituted for the monetary amount.

20. A transaction processing system according to claim 1 wherein the server data storage means further includes a transaction database adapted to capture desired details of each transaction.

21. A transaction processing system according to claim 20 wherein the desired transaction details include one or more of the following:

(a) the transaction data;

(b) desired additional transaction data including some or all of, date of transaction, amount of any discount provided; and

the goods or services covered by the transaction; and

(c) customer identifying indicia, and supplier identifying indicia.

22. A transaction processing system according to claim 21 wherein the transaction processing server is in secure communication with a financial institution server, said financial institution server being adapted to transfer funds, corresponding to the monetary amount, to the supplier account and to record a corresponding debit in the customer account.

23. A transaction processing system according to claim 22, wherein the transaction processing server communicates with the financial institution server via a payment gateway.

24. A transaction processing system according to claim 1 wherein the transaction processing server further includes account record means for keeping a record of the supplier account, the customer account and all debits and credits associated with these accounts.

25. A transaction processing system according to claim 1 wherein:

(a) the transaction processing server is adapted to send, upon completion of the transaction, a transaction complete message to the system server; and

(b) the system server is adapted to send said transaction complete message to either or both of the supplier device and the mobile communication device.

29. A message processing program module according to claim 25 wherein said program module is contained in a SIM card.

26. A message processing program module, for use in a mobile communication device, which device forms part of a transaction processing system, said program module comprising:

(a) mobile device data storage means containing a customer security criterion;

(b) message receiving means for receiving the transaction request message from the system server;

(c) transaction authorisation means adapted to;

(i) extract transaction data and the supplier identifying indicia contained in the transaction request message;

(ii) generate and display, on a visual display screen of the mobile communication device, a text message containing the transaction data, the supplier identifying indicia and a request for the customer either to;

authorise the transaction, by making a first predetermined entry in a keypad of the mobile device, said predetermined entry including a secret identification parameter of the customer, or

decline the transaction, by making a second predetermined entry in the keypad;

(d) verification message generation means adapted to;

(i) receive an authorisation order generated by the first predetermined entry into the keypad;

(ii) following receipt of said authorisation order, verify that the identification parameter matches the customer security criterion in the mobile device data storage means and, if they do match, generate a verification message, said verification message containing contents of the transaction request message; and

(iii) encrypt the verification message to generate a secure verification message.

(e) decline message generation means adapted to;

(i) receive a decline order generated by the second pre-determined entry into the keypad; and

(ii) generate and send a decline transaction message, following receipt of said decline order; and

(f) message transfer means for transferring the secure verification message or the decline message to the mobile device telecommunication means for sending to the system server.

27. A message processing program module according to claim 26, wherein the customer security criterion is a personal identification number (PIN) of the customer.

28. A message processing program module according to claim 26 wherein the secure verification message, sent from the mobile communication device to the system server, comprises a binary data stream.

30. A method of processing a transaction between a supplier and a customer, using a transaction processing system, said method comprising:

(a) within the supplier device;

(i) receiving transaction data and customer-supplied customer identifying indicia;

(ii) generating a transaction message containing the supplier identifying indicia (obtained from data storage means within the supplier device), the transaction data and the customer identifying indicia;

(iii) transmitting the transaction message to the supplier device telecommunications means; and

(iv) sending the transaction message to the system server;

(b) within the system server;

(i) receiving the transaction message;

(ii) verifying that the supplier identifying indicia and the customer identifying indicia in the transaction message match corresponding indicia within the supplier information and customer information (stored in data storage means within the server);

(iii) issuing either a transaction proceed order or a transaction terminate order based on result of said verification;

(iv) transmitting the transaction proceed order or the transaction terminate order to the server message generation means;

(v) generating, within the server message generation means, either;

a transaction denied message following receipt of a transaction terminate order;

or

a transaction request message following receipt of a transaction proceed order, said message containing, the supplier identifying indicia, the transaction data, the customer identifying indicia, and a unique transaction identifier which is different for each transaction;

(vi) transmitting the transaction denied message or the transaction request message to the server telecommunications means;

(vii) sending the transaction denied message to the supplier device or sending the transaction request message to mobile device telecommunication means of the customer;

(c) within the mobile communication device;

(i) receiving, within the telecommunication means of the mobile device, the transaction request message;

(ii) transmitting the transaction request message to receiving means within a message processing program module;

(iii) said module;

extracting transaction data and supplier data from the transaction request message;

generating and displaying, on a visual display screen of the mobile communication device, a message containing the transaction data, the supplier identifying indicia and a request for the customer either to;

 

authorise the transaction, by making a first predetermined entry in a keypad of the mobile device, said predetermined entry including a secret identification parameter of the customer, or

 

decline the transaction, by making a second predetermined entry in the keypad;

receiving an authorisation order generated by the first pre-determined entry into the keypad;

following receipt of said authorisation order, verifying that the identification parameter matches the customer security criterion in the mobile device data storage means and, if they do match, generating a verification message, said verification message containing the contents of the transaction request message;

encrypting the verification message to generate a secure verification message;

transferring the secure verification message to the mobile device telecommunication means;

(iv) sending the secure verification message to the system server.

31. A method according to claim 30 wherein the unique transaction identifier of the transaction request message is assigned by the system server.

32. A method according to claim 30 including the further step of forwarding the secure verification message from the system server onto the transaction processing server.

33. A method according to claim 32 further including the transaction processing server decrypting the secure message verification.

34. A method according to claim 33 wherein, following decryption, the transaction processing server:

(a) identifies a customer account associated with the customer identifying indicia and a supplier account associated with the supplier identifying indicia; and

(b) arranges for said customer account to be debited by the monetary amount of the transaction and for said supplier account to be credited by the monetary amount.

35. A method according to claim 30 wherein the transaction message, the transaction request message and the verification message are mobile data messages.

36. A method according to claim 35 wherein the mobile data messages are selected from SMS messages, GPRS messages and UTMS messages.

37. A transaction processing system, comprising:

(a) a supplier device for initiating a transaction between a customer and a supplier;

(b) a transaction processing server adapted to process said transaction; and

(c) a system server adapted to receive messages from, and forward messages to, the supplier device, the transaction processing server and a mobile communication device;

wherein;

(i) the supplier device is adapted so that, when initiating a transaction, it forwards a transaction initiation message to the system server; and

(ii) the system server is adapted so that;

after receiving said transaction initiation message, it sends a first transaction authorisation request to the mobile communication device;

it may receive a secured first transaction verification message from the mobile communication device in response to said authorisation request;

upon receipt of said secured first transaction verification message, it sends a second transaction authorisation request to the transaction processing server;

it receives a second transaction verification message from the transaction processing server; and

provided the second transaction verification message satisfies predetermined criteria, it sends a first transaction approval message to said supplier device.

38. A transaction processing system according to claim 37, said system being further adapted to send a second transaction approval message to said mobile communication device if the second transaction verification message satisfies predetermined criteria.

39. A system server for facilitating an electronic financial transaction, said system server being adapted to communicate with a supplier device, a mobile communication device of a customer and a transaction processing server, wherein said system server is further adapted to:

(a) receive a transaction initiation message from a supplier device, said message containing certain customer identifying indicia;

(b) identify the customer by reference to customer identifying indicia;

(c) send a first transaction authorisation request to the mobile communication device of the identified customer in response to receiving the transaction initiation message;

(d) receive a secured first transaction verification message from the mobile communication device;

(e) send a second transaction authorisation request to the transaction processing server;

(f) receive a second transaction verification message from the transaction processing server; and

(g) send a first transaction approval message to said supplier device if the second transaction verification message satisfies predetermined approval criteria.

40. A system server according to claim 39, said server being further adapted to send a second transaction approval message to said mobile communication device if the second transaction verification message satisfies predetermined approval criteria.

41. A method of facilitating an electronic financial transaction between a supplier and a customer, using a system server, which is adapted to communicate with a supplier device, a mobile communication device of a customer and a transaction processing server, wherein the system server performs the steps of.

(a) receiving a transaction initiation message from the supplier device;

(b) sending a first transaction authorisation request to the mobile communication device in response to receiving the transaction initiation message;

(c) receiving a secured first transaction verification message from the mobile communication device;

(d) sending a second transaction authorisation request to the transaction processing server;

(e) receiving a second transaction verification message from the transaction processing server; and

(f) sending a first transaction approval message to said supplier device if the second transaction verification message satisfies predetermined approval criteria.

42. A method according to claim 41 further including the step of sending a second transaction approval message to said mobile communication device if the second transaction verification message satisfies predetermined criteria.

43. A method according to claim 41 wherein the supplier device has a display screen and the method includes the step of displaying the first transaction approval message on the display screen.

44. A method according to claim 43 wherein the supplier device may be in communication with a printer and the step of displaying the fast transaction approval message includes displaying the message by sending to the printer a print command which corresponds to the message.

45. A method according to claim 42 wherein the mobile communication device is further adapted to receive the second transaction approval message from the system server and to display said message on the display screen.

46. A method according to claim 45 wherein the mobile communication device is programmed to require entry of a customer'"'"'s personal identification details before the secured transaction verification message is sent to the system server.

47. A method according to claim 46 wherein the personal identification details are selected from a personal identification number (PIN), a password and a security key.

48. A method according to claim 41 wherein the first transaction verification message is digitally secured using customer identification data.

49. A method according to claim 48 wherein the customer identification data is selected from the group consisting of the mobile telephone number, a customer account number, a personal identification number (PIN), a password and a security key.

50. A method according to claim 41 wherein the first transaction verification message includes a customer verification that the customer authorises the transaction to proceed.

51. A method according to claim 41 wherein the transaction approval message simply comprises a positive indication from the transaction processing server that the transaction has been, is being or will be processed.

52. A method according to claim 41 wherein the mobile communication device is a mobile phone or cellular phone.

53. (canceled)

54. (canceled)