SMART CARD LOAD AND PURCHASE TRANSACTIONS USING WIRELESS TELECOMMUNICATIONS NETWORK

• US 20090030843A1
• Filed: 10/06/2008
• Published: 01/29/2009
• Est. Priority Date: 07/30/1999
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Cutino, Suzanne C., Hoffman, Steven R.
• Granted Patent: US 8,019,684 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/349 Rechargeable cards
• CPC Class Codes: G06Q 20/353 Payments by cards read by M-devices
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 2220/12 Usage or charge determination
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A smart card transaction allows a consumer to load value onto a smart card and to make purchases using a smart card with a mobile telephone handset over the telecommunications network. For loading, the system includes: a mobile telephone handset including a card reader; a gateway computer; a funds issuer computer; and an authentication computer. The mobile telephone handset receives a request from a user to load a value onto the smart card. The handset generates a funds request message which includes the value and sends the funds request message to a funds issuer computer. The funds issuer computer debits an account associated with the user. Next, the handset generates a load request message with a cryptographic signature and sends the load request message to an authentication computer which authenticates the smart card. The handset receives a response message which includes a cryptographic signature and an approval to load. Finally, the handset validates the second cryptographic signature and loads the value onto the smart card. For payment, the system includes a merchant server and a payment server. First, the handset sends an order request message to the merchant server computer, and in return receives a purchase instruction message. The handset processes the purchase instruction message locally, and then sends a draw request message to a payment server computer. The payment server computer sends a debit message which includes a cryptographic signature and an approval to debit the smart card. Finally, the handset validates the cryptographic signature and debits the smart card.

Claims

1. A method of loading value onto a subscriber identification module (SIM) located within a mobile telephone handset of a user, said method comprising:

sending a funds request message from said SIM to a bank system that controls an account of said user, said funds request message including a load value and a funding account identifier that identifies said account of said user;

sending a funds response message from said bank system to said SIM indicating an approval to debit said user account by said load value;

sending a load request message from said SIM to an issuer system, said load request message including a first cryptographic signature, wherein said first cryptographic signature is generated using a first cryptographic key shared between said SIM and an issuer;

validating said first cryptographic signature by said issuer system and authenticating said SIM;

sending a load response message from said issuer system to said SIM including a second cryptographic signature, wherein said second cryptographic signature is generated using a second cryptographic key shared between said SIM and said issuer;

validating, by said SIM, said second cryptographic signature; and

loading said load value into a stored-value application of said SIM.

2. A method as recited in claim 1 further comprising:

debiting said user account of said bank system by said load value; and

crediting said issuer system by said load value, whereby liability for said load value is transferred to said issuer system.

3. A method as recited in claim 1 further comprising:

incrementing a value in a database of an administration system computer by said load value, wherein said incremented value in said database reflects the value of said stored-value application of said SIM.

4. A method as recited in claim 1 further comprising:

processing said funds request message, said funds response message, said load request message and said load response message by a gateway computer located between said SIM and said bank system and between said SIM and said issuer system, wherein said gateway computer uses a different message protocol for communication with said SIM than with said bank system and said issuer system.

5. A method as recited in claim 1 further comprising:

generating, by said SIM, a cryptographic signature S3 using a third cryptographic key shared between said SIM and said issuer;

sending a settlement funds request message over said network from said SIM to said bank system to effect the debiting of said user account of said bank system by said load value; and

sending a settlement load request message that includes said cryptographic signature S3 over said network from said SIM to said issuer system to effect the crediting of said issuer system by said load value, whereby liability for said load value is transferred to said issuer system.

6. A method as recited in claim 1 wherein said first cryptographic key and said second cryptographic key are the same key.

7. A method of loading value over a wireless telecommunications network onto a subscriber identification module (SIM) located within a mobile telephone handset, said method comprising:

receiving at said SIM within said mobile telephone handset a request from a user to load a load value onto said SIM;

generating, by said SIM, a cryptographic signature S1 using a first cryptographic key shared between said SIM and an issuer;

preparing a load data message that includes said load value, a funding account identifier, and said cryptographic signature S1;

sending said load data message over said telecommunications network from said SIM of said handset to a gateway server computer;

receiving an approval response message from said gateway server computer at said SIM of said handset, said approval response message including a cryptographic signature S2 and an approval to load said load value, wherein said cryptographic signature S2 is generated using a second cryptographic key shared between said SIM and said issuer;

validating, by said SIM, said cryptographic signature S2; and

loading said load value into a stored-value application of said SIM.

8. A method as recited in claim 7 further comprising:

generating, by said SIM, a cryptographic signature S3 using a third cryptographic key shared between said SIM and an issuer; and

sending a load confirmation message over said telecommunications network from said SIM of said handset to said gateway server computer that includes said cryptographic signature S3, wherein said cryptographic signature S3 indicates that said stored-value application of said SIM has been loaded by said load value.

9. A method as recited in claim 7 further comprising:

debiting a user account of a user bank system identified by said funding account identifier by said load value; and

crediting an issuer system by said load value, whereby liability for said load value is transferred to said issuer system.

10. A method as recited in claim 7 further comprising:

incrementing a value in a database of an administration system computer by said load value, wherein said incremented value in said database reflects the value of said stored-value application of said SIM.

11. A method as recited in claim 7 wherein said first cryptographic key and said second cryptographic key are the same key.

12. A method of purchasing an item from a merchant by a user over a wireless telecommunications network using a mobile telephone handset, said method comprising:

formulating a draw request message at a subscriber identification module (SIM) of said handset that includes a purchase amount of said item;

sending said draw request message over said telecommunications network from said SIM of said handset to a payment server computer associated with said merchant;

generating a first cryptographic signature at said payment server computer using a first cryptographic key shared between said SIM and an issuer;

sending a debit message from said payment server computer to said SIM in said handset including said second cryptographic signature and an approval to debit said SIM by said purchase amount;

verifying said first cryptographic signature at said SIM using said first shared cryptographic key;

debiting a stored-value application of said SIM by said purchase amount;

sending a debit result message from said SIM to said payment server computer that includes a second cryptographic signature, said second cryptographic signature being generated using a second cryptographic key shared between said SIM and said issuer, said second cryptographic signature uniquely identifying said SIM and indicating that said stored-value application of said SIM has been debited by said purchase amount;

verifying said second cryptographic signature from said SIM using said second shared cryptographic key; and

sending a confirmation message from said payment server computer to said merchant indicating that said SIM has been debited by said purchase amount, whereby said merchant releases said item to said user.

13. A method as recited in claim 12 further comprising:

sending an order request message to said merchant from said handset for the purchase of said item; and

receiving a purchase instruction message at said SIM of said handset from said merchant, said purchase instruction message including said purchase amount of said item.

14. A method as recited in claim 12 further comprising:

decrementing a value in a database of an administration system computer by said purchase amount; and

transferring said purchase amount to an acquiring bank associated with said merchant.

15. A method as recited in claim 12 further comprising:

transmitting said first three steps of sending via a processing gateway computer, said gateway computer using a different message protocol for communication with said SIM than with said payment server computer.

16. A method as recited in claim 12 wherein said first cryptographic key and said second cryptographic key are the same key.

17. A method of purchasing an item from a merchant server computer by a user over a wireless telecommunications network using a mobile telephone handset, said method comprising:

formulating a draw request message at said handset that includes a purchase amount of said item;

sending said draw request message over said telecommunications network from a subscriber identification module (SIM) of said handset to a payment server computer associated with said merchant server computer;

receiving a debit message at said handset from said payment server computer that includes a cryptographic signature S2 and an approval to debit said SIM by said purchase amount, said cryptographic signature S2 being generated using a first cryptographic key shared between said SIM and an issuer;

verifying said cryptographic signature S2 at said SIM using said first shared cryptographic key;

debiting a stored-value application of said SIM by said purchase amount;

sending a debit result message from said SIM to said payment server computer that includes a cryptographic signature S3, said cryptographic signature S3 being generated using a second cryptographic key shared between said SIM and said issuer, said signature S3 uniquely identifying said SIM and indicating that said stored-value application of said SIM has been debited by said purchase amount; and

receiving said item by said user.

18. A method as recited in claim 17 further comprising:

sending an order request message to said merchant server computer from said handset for the purchase of said item; and

receiving a purchase instruction message at said SIM of said handset from said merchant server computer, said purchase instruction message including said purchase amount of said item.

19. A method as recited in claim 17 further comprising:

decrementing a value in a database of an administration system computer by said purchase amount; and

transferring said purchase amount to an acquiring bank associated with said merchant server computer.

20. A method as recited in claim 17 further comprising:

sending said draw request message, receiving said debit message and sending said debit result message via a processing gateway computer, said gateway computer using a different message protocol for communication with said SIM than with said payment server computer.

21. A method as recited in claim 17 further comprising:

said user confirming said purchase amount before said sending of said draw request message.

22. A method as recited in claim 17 wherein said first cryptographic key and said second cryptographic key are the same key.

23. A method as recited in claim 17 further comprising:

displaying said item on a display of said handset; and

receiving an indication from said user to purchase said item via said display or a keypad of said handset.

24. A method as recited in claim 17 further comprising:

validating a confirmation message from said payment server computer by said merchant server computer; and

releasing said item to said user only if said confirmation message is validated.

25. A method as recited in claim 18 further comprising:

including a merchant identifier in said purchase instruction that identifies said merchant server computer; and

including said merchant identifier in said draw request message, said merchant identifier being used by said payment server computer to identify said merchant server computer.