Method Guaranteeing Payment for Electronic Commerce in Particularly by Mobile Telephone and a System Implementing It

• US 20100235281A1
• Filed: 09/14/2009
• Published: 09/16/2010
• Est. Priority Date: 07/12/2001
• Status: Active Grant

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Cornillon, Christophe, Vermelle, Brigitte
• Granted Patent: US 8,136,722 B2
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3263 characterised by activation or deactivation of payment capabilities
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

An electronic payment method for a retailer using an operator network and a financial organization. During a transaction two certificates are produced; one using an operator key and the other using a banking key. The first certificate is sent to the operator and the other certificate is securely placed under the control of the financial organization.

Claims

1. A method of electronic payment for a retailer using a communication means utilizing a network of an operator and a financial organization comprising the following steps:

at the time of a transaction, producing a first certificate using an operator key, and a second certificate using a bank key, transmitting the first certificate to the operator, and

placing the second certificate under the control of the financial organization in a secure manner.

2. An electronic payment method according to claim 1, wherein the certificates are produced by a smart card and the second certificate is stored on said smart card.

3. An electronic payment method according to claim 1, wherein the second certificate is transmitted to the operator, who stores it on a database under the control of and/or with the approval of the financial organization.

4. An electronic payment method according to claim 3, wherein the second certificate is sent to the financial organization by the operator.

5. An electronic payment method according to claim 1, wherein the payment is made by means of a mobile telephone.

6. An electronic payment method according to claim 5, wherein the mobile telephone comprises a subscriber identification smart card, and wherein the network of the telecommunication operator is equipped with an invoicing server, and further including the following steps:

for the mobile telephone;

sending the two certificates to the telecommunication operator, and

for the invoicing server;

authenticating the holder of the card from the first certificate and sending a payment authorization to the financial organization.

7. An electronic payment device comprising means for accessing a network that contains at least two keys, an operator key K1 and a bank key K2, for producing two certificates representing a transaction.

8. An electronic payment device according to claim 7, wherein said device comprises one of a microcomputer or a mobile telephone or a personal assistant.

9. An electronic payment device according to claim 7, wherein said device comprises a secure medium with an electronic chip.

10. An electronic payment device according to claim 7, wherein said device further produces the certificates.

11. An invoicing server connected to a network of a telecommunication operator for invoicing goods or services supplied by a retailer to a customer performing electronic transactions on the network by means of an electronic payment means, including means for processing operator certificates relating to the transactions, and means for putting under the control of a bank certificates relating to said transactions.