Wireless Mobile Transaction System and the Procedure for Carrying Out Transactions with a Mobile Phone

• US 20130029646A1
• Filed: 07/16/2010
• Published: 01/31/2013
• Est. Priority Date: 03/10/2010
• Status: Active Grant

• Current Assignee: Margento R&D DOO
• Original Assignee: Margento R&D DOO
• Inventors: Chowdhury, Amor, Urbanija, Milos, Kotnik, Bojan, Alyamour, Dani
• Granted Patent: US 9,189,783 B2
• Time in Patent Office: Days
• US Class Current: 455/414.1
• CPC Class Codes: G06Q 20/22 Payment schemes or models
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

The invention belongs to the field of systems for provision of computer-supported transactions with the use of a mobile phone, more exactly to the field of enabling universal communication between a telephone device, different transaction terminals and different servers including bank servers for carrying out certain transactions, considering all the security requirements against unauthorised access to an individual bank account or other user account. The core of the wireless mobile transaction system and the procedure for carrying out transactions with the mobile phone according to the invention is in the fact that the transfer of the transaction data between the user'"'"'s mobile phone and the transaction processing centre is done using a secure connection based on GPRS or UMTS data package transfer, whereas between the user'"'"'s mobile phone and the shop'"'"'s POS terminal the data is transferred using sound-modulated data transfer through an acoustic coupling or on the basis of infrared data association (IrDA) or Bluetooth wireless data connection or NFC contactless short-range communication technology or wireless interne connection WLAN. This way the user'"'"'s mobile phone becomes a simple, safe and handy transaction instrument for carrying out financial transactions, such as electronic payment and transfer of funds, as well as non-financial transactions, such as using bonuses, collecting loyalty points and allowing and/or controlling access to secured areas, premises, buildings and similar. According to the invention the system is using operator'"'"'s existent dedicated wireless data-transfer technology, such as GPRS or UMTS, for transferring data between the transaction processing centre and the mobile phone, and is performing identification of the user with the certificate which is securely stored on the user'"'"'s SIM card or in another secure memory of the mobile phone.

Claims

1. A wireless mobile transaction system including a user'"'"'s mobile phone (1.1), a mobile transaction terminal (1.2), a transaction processing centre (1.3), a mobile network (1.4) and dedicated wireless data-transfer technology, characterized in that it uses dedicated wireless data-transfer technology, such as GPRS or UMTS, and the operator'"'"'s mobile network (1.4) for transferring data between the transaction processing centre (1.3) and the mobile phone (1.1);

that the mobile transaction terminal (1.2) is with or without one of the forms of wired or wireless data connection to the transaction processing centre (1.3), and is equipped with the components for enabling full-duplex acoustic coupling with the mobile phone (speaker, microphone) and/or components for enabling one or more forms of short-range wireless communication technology, such as IrDA, Bluetooth, WLAN or NFC.

2. A wireless mobile transaction system according to claim 1, characterized in that the transaction data in the direction from the transaction processing centre (1.3) to the payment terminal (1.2) is first transferred through connection (1.10), which can be wired or wireless, to the mobile operator'"'"'s network (1.4), and then goes through wireless connection (1.5), which can be UMTS, GPRS and/or WLAN, to the user'"'"'s mobile phone (1.1);

that a special application installed on the mobile phone (1.1) enables sound modulation and acoustic reproduction of the modulated signal, built on the basis of the transaction data received from the transaction processing centre (1.3);

that the microphone (1.7) of the POS transaction terminal (1.2) captures the sound-modulated signal (1.6) from the mobile phone (1.1);

that the software of the POS transaction terminal (1.2) performs demodulation of the received sound-modulated signal (1.6) and further performs the processing of the transaction data according to the requested operation;

that the data can be transferred between the mobile phone (1.1) and the POS transaction terminal (1.2) also through short-range wireless communication technology, which can be IrDA, Bluetooth, WLAN or NFC;

that the POS transaction terminal (1.2) can have a wired form of connection (1.9) TCP/IP, such as Ethernet, wireless internet connection WLAN, or a packet data-transfer connection GPRS or UMTS;

that if the POS transaction terminal (1.2) has one of the abovementioned forms of own active data connection, the transaction data is transferred from the terminal (1.2) to the transaction processing centre (1.3) so that the data transfer to the transaction processing centre (1.3) can go through wireless WLAN, GPRS or UMTS connection or through wired TCP/IP connection (1.9).

3. A wireless mobile transaction system according to claim 1, characterized in that the POS terminal (1.2) can be without active connection and the transaction data is transferred to the transaction processing centre (1.3) through the user'"'"'s mobile phone (1.1) so that the algorithm or the software of the POS terminal (1.2) performs sound modulation of the transaction data which are to be sent to the transaction centre (1.3);

that this is followed by acoustic reproduction of sound-modulated signal using the speaker (1.8) inbuilt in the POS terminal (1.2);

that the microphone of the user'"'"'s mobile phone (1.1) captures the acoustic modulation signal from the acoustic coupling (1.6);

that a special software on the mobile phone (1.1) performs demodulation of sound-modulated signal and then sends the transaction data of the POS terminal (1.2) to the transaction processing centre (1.3) through the operator'"'"'s wireless network (1.5).

4. A wireless mobile transaction system according to claim 1, characterized in that it includes a POS terminal (1.2) without own active connection (1.9);

that the transaction data is transferred to the transaction processing centre (1.3) entirely through the user'"'"'s mobile phone (1.1) so that the algorithm or the software of the POS terminal (1.2) performs sound modulation of the transaction data which are to be sent to the transaction centre (1.3);

that this is followed by acoustic reproduction of sound-modulated signal using the speaker (1.8) inbuilt in the POS terminal (1.2);

that the microphone of the user'"'"'s mobile phone (1.1) captures the acoustic modulation signal from the acoustic coupling (1.6);

that a special software on the mobile phone (1.1) performs demodulation of sound-modulated signal and then sends the transaction data of the POS terminal (1.2) to the transaction processing centre (1.3) through the operator'"'"'s wireless network (1.5).

5. A wireless mobile transaction system according to either of the claims 1 to 4, characterized in that in the course of the transaction the data can exchange between the transaction processing centre (1.3) and the mobile wireless transaction terminal (1.2) several times according to the communication protocol;

that the data transfer can be performed simultaneously in both directions (full-duplex);

that the identification of the user is done using the identification data securely stored on the SIM card or in another secure memory of the user'"'"'s mobile phone, and/or by entering a secret identification PIN number, which on the request of the application the user enters in his/her mobile phone (1.1) and/or in the mobile transaction terminal (1.2);

that the POS transaction terminal (1.2) can also be connected to or integrated into the cash register (1.11);

that this enables automatic forwarding of the information on the amount of the purchase or on using bonuses in case of bonus and loyalty application from the cash register to the terminal (1.2) or vice versa;

that the control module (2.1) ensures the correct course of the application in the transaction from the moment the user starts the application on his/her mobile phone;

that in the first step authenticity of the user and the application is verified through the security certificate securely stored on the SIM card or in a secure memory of the mobile phone (2.10);

that module (2.2) ensures secure wireless connection to the transaction processing centre (1.3) using wireless packet connection enabled by the mobile operator'"'"'s network (1.4);

that the control over sending of the data between the transaction processing centre (1.3) and the terminal (1.2) is done by module (2.3);

that the data is transferred between modules (2.2) and (2.3) simultaneously in both directions and module (2.3) ensures correct assembly and disassembly of the data packets;

that module (2.4) performs the function of forward data correction;

that module (2.4) calculates and adds redundant data to data packets received from the transaction processing centre (1.3);

that the data packets with added redundant information are then sent to the modulator (2.5), which transforms them into a sound-modulated signal;

that the output audio encoder (2.7) together with the speaker (2.8) reproduces the acoustic modulation signal received and processed by the terminal (1.2);

that in the opposite the microphone (2.9) together with the audio encoder (2.7) captures the acoustic modulation signal received from the terminal (1.2);

that the demodulator (2.6) transforms the sound modulation signal into a sequence of data transaction packets;

that the module (2.3) ensures unpacking of data packets;

that after the procedure of error correction is done by module (2.4) using the redundant data added to the data packet by the mobile transaction terminal (1.2), the sequence of the transaction data is sent to the transaction processing centre (1.3) using packet data connection (2.2);

6. A wireless mobile transaction system according to either of the claims 1 to 5, characterized in that if the terminal (1.2) is connected to the transaction processing centre (1.3) through active wired or wireless data connection, the data is not sent through the user'"'"'s mobile phone in the direction from the terminal (1.2) to the centre (1.3);

that modules (2.9) and (2.6) thus stay inactive, and module (2.4) only ensures the calculation and adding of the redundant data to data packets that are to be sent to the terminal (1.2).

8. A wireless mobile transaction system according to claims 1 to 6, characterized in that a special application for carrying out the transaction on the mobile phone (1.1) can operate on any mobile platform that enables installing applications with access to sound encoder or to one or several short-range wireless communication technologies (IrDA, Bluetooth, WLAN, NFC or similar), and control over one of the wireless packet connections (GPRS, UMTS or similar).

9. A wireless mobile transaction system according to claims 1 to 6;

characterized in that it enables transactions in the broadest sense to be carried out, and is not limited only to financial transactions.

10. A wireless mobile transaction system according to claims 1 to 6, characterized in that the application includes implementation of the acoustic modulator and demodulator and levels of control over sending, receiving, confirming and verifying data packets sent through the acoustic coupling.

11. A wireless mobile transaction system according to claims 1 to 6, characterized in that a special application for carrying out transactions on a mobile phone supports also other radiofrequency (Bluetooth, WLAN, NFC and similar) and infrared (IrDA and similar) modes of full-duplex wireless data transfer between the mobile phone and the POS terminal.

12. A wireless mobile transaction system according to claims 1 to 6, characterized in that it enables full-duplex data transfer between the transaction processing centre (1.3) and the POS terminal (1.2), which is security-wise faultless both on the level of data transfer through the mobile operator'"'"'s data packet network and with data transfers through the acoustic coupling or short-range wireless communication (IrDA, Bluetooth, WLAN, NFC and similar).

7. A procedure for carrying out a transaction with a mobile phone, characterized in that the algorithm for carrying out the transaction is uploaded on the user'"'"'s mobile phone (1.1);

that the procedure of carrying out a mobile transaction is started by the user by starting the application (START) and choosing the desired mode of data connection between the mobile phone and the POS terminal, which can be through the acoustic coupling or short-range wireless communication technology, i.e. IrDA, Bluetooth, WLAN or NFC;

that the control module (2.1) starts, after which through GPRS or UMTS packet connection module (2.2) executes step (S3.1) for establishing data connection between the mobile phone (1.1) and the transaction processing centre (1.2);

that if step (S3.1) for establishing connection to the transaction processing centre (1.3) is unsuccessful at point (S3.2) and has the result NO, in step (S3.17) the phone user is notified of this and the application closes;

that if the answer at point (S3.2) is YES, meaning the connection to the transaction processing centre (1.3) has been successfully established, this is followed by reading of the code (S3.3) of the user of the phone (1.1) and verification of the authenticity and validity of the security certificate (S3.4) stored on the SIM card or other secure memory of the mobile phone;

that if the data of the user and the certificate (S3.4) do not match, the user of the phone (1.1) is notified of this and the application is closed with step (S3.16);

that if the security certificate (S3.4) is verified and confirmed, simultaneous full-duplex data transfer (S3.5) between the transaction processing centre (1.3) and the transaction terminal (1.2) starts;

that the logics for transferring transaction data in the direction from the transaction processing centre (1.3) to the terminal (1.2) is the following;

transaction data is received by the transaction processing centre through GPRS or UMTS packet connection (S3.6), redundant information of forward error detection and correction is added by module (2.4) on the terminal (S3.7), and sound modulation of the received data set (S3.8) is done, this is followed by an acoustic reproduction of the sound-modulated signal using the speaker (S3.9) of the mobile phone (1.1);

if the users chooses to use the acoustic coupling the transaction data is transferred between the terminal (1.2) and the transaction processing centre (1.3) in the following way;

first modulation signal (S3.10) transmitted by the speaker (1.8) of the terminal (1.2) is captured, this is followed by demodulation (S3.11) of the signal (S3.10), forward error correction (FEC) (S3.12) and sending the transaction data (S3.13) to the transaction processing centre (1.3);

if the user chooses to use short-range wireless communication technology, the transaction data is transferred between the terminal (1.2) and the transaction processing centre (1.3) through IrDA, Bluetooth, WLAN or NFC connection in step (S3.18);

if the transaction (S3.14) has been successfully completed a message to the user is written on the screen of the mobile phone (1.1) through step (S3.15), and the application closes (STOP);

if the answer to the transaction (S3.14) is NO, this means the transaction has not yet been completed, and the procedure of simultaneous full-duplex data transfer (S3.5) continues until the transaction between the terminal (1.2) and the transaction processing centre is completed.