Smart card transactions using wireless telecommunications network

• US 7,729,986 B1
• Filed: 05/31/2000
• Issued: 06/01/2010
• Est. Priority Date: 07/30/1999
• Status: Expired due to Term

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Cutino, Suzanne C., Hoffman, Steven R.
• Primary Examiner(s): Borlinghaus; Jason M
• Application Number:
  US09/587,092
• Time in Patent Office: 3,653 Days
• Field of Search: 705/41, 705/42, 705/44, 705/39, 235/380
• US Class Current: 705/41
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/28 Pre-payment schemes, e.g. "pay before"
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/3255 using mobile network messaging services for payment, e.g. SMS
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/349 Rechargeable cards
• CPC Class Codes: G06Q 20/353 Payments by cards read by M-devices
• CPC Class Codes: G06Q 20/36 using electronic wallets or electronic money safes
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 2220/12 Usage or charge determination
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 : Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A smart card transaction allows a consumer to load value onto a smart card and to make purchases using a smart card with a mobile telephone handset over the telecommunications network. For loading, the system includes: a mobile telephone handset including a card reader; a gateway computer; a funds issuer computer; and an authentication computer. The mobile telephone handset receives a request from a user to load a value onto the smart card. The handset generates a funds request message which includes the value and sends the funds request message to a funds issuer computer. The funds issuer computer debits an account associated with the user. Next, the handset generates a load request message with a cryptographic signature and sends the load request message to an authentication computer which authenticates the smart card. The handset receives a response message which includes a cryptographic signature and an approval to load. Finally, the handset validates the second cryptographic signature and loads the value onto the smart card. For payment, the system includes a merchant server and a payment server. First, the handset sends an order request message to the merchant server computer, and in return receives a purchase instruction message. The handset processes the purchase instruction message locally, and then sends a draw request message to a payment server computer. The payment server computer sends a debit message which includes a cryptographic signature and an approval to debit the smart card. Finally, the handset validates the cryptographic signature and debits the smart card.

Claims

1. A method of loading value over a wireless telecommunications network onto a smart card, said method comprising:

receiving at a mobile telephone handset with a subscriber identification module a request from a user to load a value into a stored-value application of said smart card inserted in said handset;

opening a second application on said smart card capable of funding said stored-value application;

generating a funds request message which includes said value and an authorization certificate;

sending said funds request message over said telecommunications network to a funds issuer computer arranged to authenticate said second application and to generate an authentication response certificate;

receiving through the mobile telephone handset to the smart card a response message which includes said authentication response certificate;

validating said authentication response certificate; and

loading said value onto said stored-value application of said smart card from said second application.

2. A method as recited in claim 1 wherein said response message is implemented as an alphanumeric message integrated within an Short Message Service (SMS) message of said telecommunications network, said alphanumeric message serving as a command input to said smart card used to control operation of said smart card.

3. A method as recited in claim 1 further comprising:

generating a transaction certificate to be used for irrepudiation.