METHOD FOR THE GENERATION OF A CODE, AND METHOD AND SYSTEM FOR THE AUTHORIZATION OF AN OPERATION

• US 20140040617A1
• Filed: 09/12/2012
• Published: 02/06/2014
• Est. Priority Date: 08/02/2012
• Status: Active Grant

• Current Assignee: Banco Bilbao Vizcaya Argentaria, S.A.
• Original Assignee: Banco Bilbao Vizcaya Argentaria, S.A.
• Inventors: Fernndez de Torres, Francisco, Villa Martinez, Jos Manuel, Ugna Carrin, Luis, Tarrio Escudero, Alejandro
• Granted Patent: US 8,930,694 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3274 using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18

Abstract

The present invention relates to a method for generating a code and a method comprising the authorization of an operation carried out by a client on a first server. A second server generating an authorization code according to an encoding method is involved in the authorization. The operations can be transactions, access to a web page, user-to-user payments, user-to-business payments, online user-to-business payments, cash withdrawal in automated teller machines, etc.

Claims

1. A method for generating a code (108), characterized in that it comprises the steps of:

a.—

providing a first character string (101) of W characters,

b.—

encrypting (110) the first character string (101) by means of an encrypting method, obtaining an encrypted string (102),

c.—

encoding (111) the first encrypted string (102) by means of an encoding method, obtaining an encrypted and encoded string of Y characters (103),

d.—

splitting (112) the string of Y characters (103) into;

a public string of M characters (104), and

a private string of Y-M characters (105),

e.—

concatenating (113) at least;

the public string of M characters (104), and

additional information (106),

obtaining a second character string (107),

f.—

encoding (114) the second character string (107) with an encoding method, obtaining the code (108).

2. The method according to claim 1, characterized in that the encoding method of step f.—

is an encoding method for encoding QR codes, a QR code being obtained as the code (108).

3. The method according to claim 1, characterized in that the additional information in step e.—

comprises at least

one database identifier (301) indicating a memory address of a storage unit where the private string of Y-M characters (105) is stored,

one prefix (302).

4. The method according to claim 1, characterized in that the first character string (101) of W characters is a string obtained by means of a method comprising the following steps:

providing a string of information (201), which is preferably encrypted and encoded information,

decoding and decrypting this information if the information (201) is encrypted and encoded information,

generating (210) a random number (202),

concatenating (211) the random number to all or part of the string of information (201) provided, an initial string (101) being obtained,

5. An authorization method for authorizing an operation implemented in a system comprising,

a client (1),

a first server (2),

a second server (3) in communication with the first server (2) and in communication with the client (1),

characterized in that it comprises the steps of:

a.—

requesting (401) the second server (3) a code (108), the request comprising a string with data (4) about the operation,

b.—

the second server (3) generating (402) a code (108) from a string with data (4) about the operation according to a method according to claim 1,

c.—

the second server (3) sending (403) the code (108) to the first server (2),

d.—

the client (1) transferring (404) the code (108) from the first server (2) to the client (1),

e.—

the client (1) decoding (405) the code (108), obtaining the second character string (107),

f.—

the client (1) ending (408) the authorization by sending an authorization confirmation to the second server (3),

6. The method according to claim 5, characterized in that after step f.—

, step g.—

is performed, with;

g.—

the second server (3) running (409) the operation.

7. The method according to claim 5, characterized in that the following steps are implemented between step e.—

and step f.—

;

e1.—

the client (1) requesting (406) information about the operation from the second server (3), and

e2.—

the second server (3) providing (407) information about the operation.

8. The method according to claim 5, characterized in that the operation is a transfer operation for transferring from a bank account associated with the client (1) to a bank account associated with the first server (2).

9. The method according to claim 5, characterized in that

the code (108) is a QR image, or two-dimensional code, and

in step d.—

the transfer is performed by capturing the code (108).

10. The method according to claim 5, characterized in that the code (108) is transferred from the first server (2) to the client (1) via NFC technology.

11. The method according to claim 7, characterized in that

in step e1.—

the request (406) for information about the operation is performed together with a client (1) application identifier and application key, and

in step e2.—

the provision (407) of the information about the operation is performed if the client (1) application identifier and application key are correct, where a correct client (1) identifier and key are a client (1) application identifier and application key;

known by the second server (3) and

which correspond with the client (1) from which they are received.

12. The method according to claim 7, characterized in that,

after step e2.—

the following steps are implemented;

e3.—

the client (1) sending an operation key,

e4.—

receiving a single-use key (5) in the client (1) preferably by means of an sms or short message service message,

in step f.—

the client (1) ending (408) the authorization is performed by sending the single-use key (5).

13. The method according to claim 6, characterized in that,

in step a.—

the request (401) comprises an XML or Extensible Markup Language file with the data (4) about the operation encrypted by means of AES encryption and encoded by means of a Base64 encoding method, the XML file comprising information about the operation.

14. The method according to claim 7, characterized in that

in step e1.—

,

**the request (406) for additional information comprises the data obtained in step e.—

encoded by means of a URL encode method and

**the request (406) for additional information is made with a call to a web service of the second server (3), preferably a REST, or Representational State Transfer, service for requesting validation in the second server (3) and the call preferably comprises the parameters,

result of encoding the data (500) obtained in step e.—

after encoding by means of URL encode,

internal client (1) identifier,

internal client (1) key,

information receiving mode, preferably, json or XML,

in step e2.—

the information requested (406) comprises information about the operation that is obtained by the second server (3) after having implemented a method comprising the steps of;

**receiving the call to a web service of the second server (3), preferably a request for validation of the information in the second server (3),

**checking (411) that the client (1) identifier and the client (1) key are correct,

**using the database identifier (301) to access the private string of Y-M characters (105) stored in the memory of a storage unit and retrieving it to attach it to the data obtained in step e1.—

received in the call to a web service,

**concatenating (410) the data (500) obtained in step e1.—

received in the call to a web service with the private string of Y-M characters (105),

**decoding and decrypting the resulting string, the second server (3) obtaining the information about the operation,

**providing (407) information about the operation, preferably in the receiving mode selected in step e1.— and

preferably in a secure manner by means of the https protocol.

15. An authorization system for authorizing an operation comprising the following entities,

a client (1),

a first server (2), and

a second server (3) in communication with the first server (2) and in communication with the client (1),

characterized in that

the three entities (1, 2, 3) are suitable for implementing the steps of a method according to claim 5,

the second server (3) is suitable for implementing the steps of a method for generating a code (108) according to claim 1, and

the client (1) is suitable for decoding a code (108) generated by means of a method according to claim 1.

16. The system according to claim 15, characterized in that the client (1) is a device comprising an image sensor or it is a device comprising an antenna suitable for working with NFC technology, or it is a device comprising an image sensor and an antenna suitable for working with NFC technology.

17. An application, characterized in that it comprises program code means for performing the steps of a method according to claim 1, when said program works in the second server (3).

18. An application, characterized in that it comprises program code program code means for performing the steps of a method according to claim 5 when the steps are implemented by the client (1), the first server (2), or the second server (3).

19. A medium that can be read by a processor, characterized in that it contains an application comprising program code means for performing the steps of a method according to claim 1, when said program works in the second server (3).

20. A medium that can be read by a processor, characterized in that it contains an application comprising program code means for performing the steps of a method according to claim 5 when the steps are implemented by the client (1), the first server (2), or the second server (3).