Transaction recovery in a value transfer system

• US 5,982,293 A
• Filed: 01/27/1998
• Issued: 11/09/1999
• Est. Priority Date: 05/15/1995
• Status: Expired due to Term

• Current Assignee: Mondex International Ltd. (MasterCard Incorporated)
• Original Assignee: Mondex International Ltd. (MasterCard Incorporated)
• Inventors: Richards, Timothy Philip, Everett, David Barrington
• Primary Examiner(s): Horabik, Michael
• Assistant Examiner(s): Asongwed, Anthony A.
• Application Number:
  US08/945,582
• Time in Patent Office: 651 Days
• Field of Search: 340/825.33, 340/825.54, 705/41, 395/181, 395/182.01, 395/182.02, 395/182.03, 371/32
• US Class Current: 340/5.4
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A value transfer system for transferring value in transactions between electronic purses as electronic cash has a transaction failure recovery procedure whereby a pending log stores transaction messages after they are sent. On detection of an error an interface device (IFD) can issue a payment resume command to re-send the last transaction message and resume the transaction.

Claims

1. A value transfer system comprising:

a plurality of electronic purses;

a plurality of application carrier devices (ACD'"'"'s) for carrying the electronic purses;

a plurality of interface devices (IFD'"'"'s) for coupling together pairs of ACD'"'"'s to allow value transfer transactions to take place between pairs of electronic purses, wherein a transaction between a pair of electronic purses in ACD'"'"'s coupled by an IFD comprises an exchange of transaction messages in a sequence according to a predetermined protocol, each transaction message being sent from one electronic purse of a pair to the IFD and from the IFD to the other electronic purse of the pair;

characterized in that each electronic purse includes;

storage means in the form of a pending log which holds details of the current or latest transaction;

recovery means effective to cause the IFD to invoke a recovery procedure if the predetermined sequence of transaction messages fails, said recovery means comprising means for interrogating one electronic purse of the pair to derive from its pending log the last transaction message which it sent and means for sending that transaction message to the other electronic purse of the pair to resume the transaction; and

means for interrogating the other electronic purse of the pair to derive from its pending log the last transaction message which it sent, if the last transaction message of the one electronic purse results in an error when sent, to resume the transaction; and

means for sending the last transaction message of the other electronic purse of the pair to the one electronic purse to resume the transaction.

2. The value transfer system as claimed in claim 1 wherein said recovery means further comprises:

means for interrogating both electronic purses of the pair to determine from their pending logs which electronic purse had progressed further in the failed transaction;

means for interrogating the electronic purse which had progressed further in the failed transaction to derive from its pending log the last transaction message which it sent; and

means for sending that transaction message to the other electronic purse of the pair to resume the transaction.

3. The value transfer system as claimed in claim 1 wherein the IFD is effective to invoke the recovery procedure automatically and immediately during a transaction on detection of a failure in the predetermined sequence of transaction messages.

4. The value transfer system as claimed in claim 1 further comprising means effective to cause the IFD to interrogate the electronic pursed at the beginning of a proposed transaction to determine where there is a failed transaction pending between those purses which may be capable of resumption so that a delayed recovery procedure may be initiated.

5. The value transfer system as claimed in claim 1 wherein each electronic purse has an exception log which is a store of the details of failed transactions, the contents of the pending log being copied to a record in the exception log on failure to recover a failed transaction.