COMMUNICATION METHOD AND SYSTEM

• US 20110112965A1
• Filed: 12/02/2010
• Published: 05/12/2011
• Est. Priority Date: 08/21/2001
• Status: Active Grant

• Current Assignee: Smartcom Labs OY
• Original Assignee: Bookit Oy Ajanvarauspalvelu
• Inventors: SALONEN, Jukka
• Granted Patent: US 9,461,951 B2
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 10/02 Reservations, e.g. for tickets, services or events
• CPC Class Codes: G06Q 10/025 Coordination of plural reservations, e.g. plural trip segments, transportation combined with accommodation
• CPC Class Codes: G06Q 10/109 Time management, e.g. calendars, reminders, meetings or time accounting
• CPC Class Codes: G06Q 10/1095 Meeting or appointment
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3221 Access to banking information through M-devices
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/0267 Wireless devices
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G06Q 30/0623 Item investigation
• CPC Class Codes: G06Q 50/14 Travel agencies
• CPC Class Codes: G08G 1/207 with respect to certain areas, e.g. forbidden or allowed areas with possible alerting when inside or outside boundaries
• CPC Class Codes: H04L 2101/37 E-mail addresses
• CPC Class Codes: H04L 51/18 Commands or executable codes
• CPC Class Codes: H04L 51/23 Reliability checks, e.g. acknowledgments or fault reporting
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04M 3/42382 : Text-based messaging services in telephone networks such as PSTN/ISDN, e.g. User-to-User Signalling or Short Message Service for fixed networks
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/71 : Hardware identity
• CPC Class Codes: H04W 12/72 : Subscriber identity
• CPC Class Codes: H04W 4/12 : Messaging; Mailboxes; Announcements
• CPC Class Codes: H04W 4/14 : Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 4/40 : for vehicles, e.g. vehicle-to-pedestrians [V2P]
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring

Abstract

The present invention relates generally to a method and system for authenticating a transaction between a user and a payment system. The information of the transaction is transmitted through a secure communications from the user to the payment system, and the authentication message is sent from a payment system to the user via an authentication system. The authentication message is sent from the authentication system from one of multiplicity of addresses to the user, and the response to the message is received in that address. Additional security is achieved when the reply addresses are selected randomly.

Claims

1. A method for authenticating a transaction between a user and a payment system, wherein the communication between the user, having a user terminal capable of sending and receiving messages, and the payment system is communicated through a secured communication, and the authentication of the transaction is communicated through a telecommunications network, the method comprising:

transmitting a payment request from a user to the payment system;

sending an authentication request from a payment system to an authentication system through a communications network;

preparing an authentication message to the user terminal;

associating a reply address from a multiplicity of reply addresses, at which the authentication system is capable of receiving communications from the user, to the message;

sending the authentication message to the user;

receiving a reply message from the user'"'"'s sender address; and

authenticating the transaction on the basis of the sender address and the reply address.

2. A method in accordance with claim 1, wherein the reply address is selected from the multiplicity of reply addresses randomly.

3. A method in accordance with claim 1, further comprising sending the information that the user authenticated the transaction from the authentication system to the payment system.

4. A method in accordance with claim 1, wherein the telecommunications network is a mobile communications network.

5. A method in accordance with claim 1, wherein the sender address is user'"'"'s A-subscriber'"'"'s number.

6. A method in accordance with claim 1, wherein the authenticating further analyzes the semantics of the reply.

7. A method in accordance with claim 1, wherein the authentication system is further adapted to track which of the multiplicity of addresses are currently available for use, and to choose each particular reply address from among the addresses which are currently available for use.

8. A method in accordance with claim 1, wherein the payment request to the payment system is provided from a seller'"'"'s system to a credit card company'"'"'s payment system or to a banking system.

10. A system in accordance with claim 1, wherein the reply address is selected from the multiplicity of reply addresses randomly.

11. A system in accordance with claim 1, wherein the logic and resources further comprises sending the information that the user authenticated the transaction from the authentication system to the payment system.

12. A system in accordance with claim 1, wherein the telecommunications network is a mobile communications network.

13. A system in accordance with claim 1, wherein the sender address is user'"'"'s A-subscriber'"'"'s number.

14. A system in accordance with claim 1, wherein the authenticating further analyzes the semantics of the reply.

15. A system in accordance with claim 1, wherein the authentication system is further adapted to track which of the multiplicity of addresses are currently available for use, and to choose each particular reply address from among the addresses which are currently available for use.

16. A system in accordance with claim 1, wherein the payment request to the payment system is provided from a seller'"'"'s system to a credit card company'"'"'s payment system or to a banking system.

9. An authentication system for authentication a transaction between a user, having a user terminal capable of sending and receiving messages, and a payment system, wherein the authentication system comprises:

a communications network connection to a payment system;

a telecommunications connection to a user terminal;

a multiplicity of reply addresses at which the authentication system is capable of receiving messages from the user terminals;

logic and resources to prepare an authentication message to the user, associate a reply address to the authentication message, send the message to the user terminal, receive a reply from the user terminal, having a user'"'"'s sender address, and authenticating the transaction on the basis of the sender address and the reply address.