Method guaranteeing payment for electronic commerce in particularly by mobile telephone and a system implementing it

• US 8,136,722 B2
• Filed: 09/14/2009
• Issued: 03/20/2012
• Est. Priority Date: 07/12/2001
• Status: Expired due to Fees

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Cornillon, Christophe, Vermelle, Brigitte
• Primary Examiner(s): Sharifzada, Ali
• Application Number:
  US12/558,937
• Publication Number:
  US 20100235281A1
• Time in Patent Office: 918 Days
• Field of Search: 235/375, 235/379, 235/380, 235/472.01, 705/1.1, 705/18, 705/44, 705/71, 705/317
• US Class Current: 235/379
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3263 characterised by activation or deactivation of payment capabilities
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

An electronic payment method for a retailer using an operator network and a financial organization. During a transaction two certificates are produced; one using an operator key and the other using a banking key. The first certificate is sent to the operator and the other certificate is securely placed under the control of the financial organization.

Claims

1. A method of making an electronic payment by a customer to a retailer over a telecommunication network using a customer device, wherein the customer device stores a key of an operator of the telecommunication network and a key of a bank, said method comprising:

producing by the customer device a first certificate using the key of the operator of the telecommunication network;

producing by the customer device a second certificate using the key of the bank;

transmitting by the customer device, via the telecommunication network, the first certificate to the operator of the telecommunication network, and

storing by the customer device the second certificate in a secure location accessible only by the bank.

2. The electronic payment method according to claim 1, wherein the certificates are produced by a smart card and the second certificate is stored within said smart card.

3. The electronic payment method according to claim 1, wherein the second certificate is transmitted to the network operator, who stores it on a database under the control of and/or with the approval of only the financial organization.

4. The electronic payment method according to claim 3, wherein the second certificate is sent to the financial organization by the network operator.

5. The electronic payment method according to claim 1, wherein the payment is made by means of a mobile telephone.

6. The electronic payment method according to claim 5, wherein:

the mobile telephone comprises a subscriber identification smart card, and

the network of the telecommunication network operator is equipped with an invoicing server,

said method including the following steps;

sending by the mobile telephone the two certificates to the telecommunication network operator, and

authenticating by the invoicing server the holder of the card from the first certificate and sending a payment authorization to the financial organization.

7. An electronic payment device for making an electronic payment by a customer to a retailer over a telecommunication network, said electronic payment device comprising:

means for storing a key of an operator of the telecommunication network;

means for storing a key of a bank;

means for producing a first certificate using the key of the operator of the telecommunication network;

means for producing a second certificate using the key of the bank;

means for transmitting the first certificate to the operator via the telecommunication network; and

means for storing the second certificate in a secure location accessible only by the bank.

8. The electronic payment device according to claim 7, wherein said device comprises one of a microcomputer or a mobile telephone or a personal assistant.

9. The electronic payment device according to claim 7, wherein said device comprises a secure medium with an electronic chip.

10. The electronic payment device according to claim 9, wherein said electronic chip produces the certificates.

11. An invoicing server connected to a network of a telecommunication network operator for invoicing goods or at least one service supplied by a retailer to a customer performing at least one electronic transaction on the network by means of an electronic payment means, said invoicing server comprising:

means for receiving from the electronic payment means a certificate of the network operator and a certificate of a bank, the certificate of the network operator and the certificate of the bank being produced by the electronic payment means using a key of the operator of the telecommunication network and a key of the bank, respectively, at the time of the electronic transaction;

means for processing the transaction using the network operator certificate received from the electronic payment means; and

means for storing the certificate of the bank under the control of only the bank.