Method and system for ensuring the security of the supply of services of telecommunication operators

• US 6,377,670 B1
• Filed: 05/03/1999
• Issued: 04/23/2002
• Est. Priority Date: 09/25/1996
• Status: Expired due to Fees

• Current Assignee: Fintel SA
• Original Assignee: Fintel SA
• Inventors: Rosset, Franck, Moulin, Jean, Gayet, Alain
• Primary Examiner(s): TIEU, BINH KIEN
• Application Number:
  US09/269,045
• Time in Patent Office: 1,086 Days
• Field of Search: 379/91.01, 379/91.02, 379/93.02, 379/93.03, 379/93.04, 379/93.05, 379/93.08, 379/93.15, 379/93.37, 379/144.01, 379/144.05, 379/355, 379/356, 379/357, 379/114.01, 379/114.14, 379/114.17, 379/114.2, 379/144.06, 380/23, 380/25, 380/28, 340/825.34, 340/825.31, 340/825.32, 340/825.33, 235/379, 235/380, 235/382
• US Class Current: 379/144.05
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04M 3/42 Systems providing special services or facilities to subscribers specially adapted for wireless communication networks H04W4/00

Abstract

The invention concerns a method and a system enabling a telecommunication operator (12) to identify rapidly and to debit in complete security the accounts of subscribers of a telephone network. The method comprises the following steps: the telecommunication operator (12) provides each of its subscribers (11) with a subscriber card (10), formatted like a credit card, personalised by specific identifiers for each subscriber and for each subscriber card; said card (10), formatted like a credit card, personalised by specific identifiers for each subscriber and for each subscriber card; said card (10), formatted like a credit card, emits brief identifying sound signals, of the DTMF type, at least partly encrypted, varying with each operation, when it is actuated (14) by the customer (11); the sound signals are received by the microphone (17) of the handset (16) and are converted into electric signals, before being transmitted by the communication network (15) to the computer service (18) of the telecommunication operator (12); the transmitted signals are electronically processed and decrypted (24) by the computer service (18) of the telecommunication operator (12) and the data obtained after processing are compared (25) to the identification data of the subscriber and the subscriber card in the possession of the computer service (18) of the telecommunication operator.

Claims

1. A method enabling a telecommunications operator to quickly identify and reliably debit subscribers to a telephone network, the method comprising:

the telecommunications operator provides each subscriber with a subscriber card, the same size as a credit card, customized by identifiers specific to each subscriber and to each subscriber card;

said card;

counts the number of times C(p,n) the subscriber uses the card by pressing a button;

a emits acoustic identification signals varying each time that said card has been used and representing the number of times C(p,n) that said card has been used; and

at least partly encrypts acoustic signals as a function of the number of times C(p,n) that said card has been used;

acoustic identification signals are received by a microphone in a telephone handset and are converted into electrical signals before being transmitted through a communications network to a computer service of the telecommunications operator, said computer service comprising a computer means;

the transmitted signals and the subscriber and subscriber card identification data stored by the computer service of the telecommunications operator are methoded and electronically compared by said computer means of said telecommunications operator'"'"'s computer service;

said computer means for methoding and electronically comparing the transmitted signals and the subscriber and card identification data held by the computer service of the telecommunications operator;

stores the number of times C(p,m) that the card has been used at the time of the last validated operation;

compares the number of times C(p,n) that the card has been used at the time of the current operation, with the memorized number of times C(p,m);

refuses the current operation if C(p,n) is less than or equal to C(p,m) and continues verifying the current operation if C(p,n) is greater than C(p,m); and

recalculates the electronic signals S'"'"'(p,n) as a function of identification data and the number of times C(p,n) that the card was used, during the current operation, and then compares them with the transmitted electronic signals S(p,n), so that if the values agree, the subscriber may then immediately be connected to the services of the telecommunications operator.

2. The method according to claim 1, further comprising the following step:

the subscriber uses a keypad associated with the microphone and/or the card to send a pin code;

after transmission to the telecommunications operator'"'"'s computer service through the communications network, the pin code is methoded and compared with the customer'"'"'s pin code held by the telecommunications operator'"'"'s computer service.

3. The method according to claim 1, further comprising the following steps:

orders given by the subscriber to the telecommunications operator are validated by the subscriber by activating the subscriber card so that it emits an encrypted acoustic validation signal; and

the telecommunications operator'"'"'s computer service records said validation signal.

4. The method according to claim 3, further comprising the following step:

an acknowledgment of the validation signal is addressed to the customer.

5. A system by which a telecommunications operator can quickly identify and reliably debit subscribers to a telephone network, said system comprising:

a subscriber card, the same size as a credit card, customized by identifiers different for each subscriber card and for each subscriber, and provided to subscribers;

said card comprising;

an incremental counter that is incremented by at least one unit every time that the card is activated by the subscriber using an element accessible from the outside of the subscriber card;

encryption means and emission means, interconnected to said incremental counter, emitting the state of the incremental counter and varying and at least partly encrypting acoustic identification signals, every time that the card is activated by element, such that the acoustic identification signals are encrypted as a function of the state of the incremental counter;

said system further comprising;

a telephone handset comprising a microphone that will receive the acoustic signals and transform them into electronic signals that can be transmitted to a remote site of a computer service of the telecommunications operator through a communications network;

said computer service comprising computer means connected to the telecommunications network;

said computer means comprising;

a database containing the references of subscriber cards and subscribers and their identification data;

means of memorizing the state C(p,m) of the incremental counter at the time of the last validated operation;

means for comparing the state C(p,n) of the incremental counter emitted during the current operation with the state C(p,m) of the memorized incremental counter, such that the check on the current operation is refused if C(p,n) is less than or equal to C(p,m) and is accepted if C(p,n) is greater than C(p,m); and

means of recalculating the electronic signals S'"'"'(p,n) as a function of the state C(p,n) of the incremental counter and the identification data contained in the data base, and then comparing them with the transmitted electronic signals S(p,n), such that if agreement is found, the subscriber can immediately be connected with the services of the telecommunications operator.

6. The system according to claim 5, said computer means also comprising:

second means of comparison to compare a subscriber pin code contained in the database with a pin code emitted by the customer using a keypad associated with the telephone handset and/or the card and transmitted to the telecommunications operator'"'"'s computer means through the communications network.

7. The system according to claim 5, said card also emitting an encrypted acoustic signal validating the orders given by the subscriber, when activated by the subscriber, said computer means also comprising:

means of detecting and recording the validation signal.

8. The system according to claim 7, said computer means also comprising:

means of printing an acknowledgment of the orders given, which will be addressed to the subscriber.