Method and system for secured transactions over a wireless network

• US 8,352,360 B2
• Filed: 09/29/2003
• Issued: 01/08/2013
• Est. Priority Date: 06/30/2003
• Status: Expired due to Fees

• Current Assignee: Toshiba Global Commerce Solutions Holdings Corporation (Toshiba Corporation)
• Original Assignee: Toshiba Global Commerce Solutions Holdings Corporation (Toshiba Corporation)
• Inventors: Modeo, Leonardo, De Judicibus, Dario, Leopardi, Sandro, Pergola, Nicola
• Primary Examiner(s): Thein, M.
• Application Number:
  US10/676,346
• Publication Number:
  US 20040267618A1
• Time in Patent Office: 3,389 Days
• Field of Search: None
• US Class Current: 705/39
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A method and system are disclosed for booking and paying a retailer having a POS, which can be a low cost thin client computer system, connected to a transaction server storing confidential user information including a retailer identification, a user code and a user wireless device phone number, said method comprising the steps of receiving at the transaction server, from the user wireless device which can be a common cellphone, an SMS containing a retailer identification, reading at the transaction server the phone number of the wireless device communicated by the carrier transporting the SMS, authentifying said phone number and retailer identification with the stored confidential user information and sending the user confidential information to the retailer POS, the user entering on the POS the user code and the POS reading and authentifying the user code with the user confidential information received from the transaction server, the retailer entering the payment information on the POS and sending it with user information to the transaction server.

Claims

1. A method for booking and paying a retailer comprising a Point of Sale (POS) connected to a transaction server, said method comprising:

a transaction server storing a retail identifier that identifies the retailer, a first user telephone number of a wireless device of a user, and confidential user information for implementing a transaction between the retailer and the user, said confidential user information comprising a first user identification identifying the user and a first personal identification number (PIN) pertaining to the user;

after said storing, said transaction server receiving a Short Messaging Service (SMS) message from the wireless device of the user, said SMS message comprising a retailer identification identifying the retailer, said SMS message not including any readable sensitive information;

said transaction server receiving, from a carrier transporting the SMS message to the retailer, a second user telephone number of the wireless device of the user;

in response to said transaction server receiving the SMS message from the wireless device of the user and the second user telephone number from the carrier, said transaction server verifying that the second user telephone number matches the first user telephone number and that the retailer identification matches the retailer identifier;

in response to said verifying, said transaction server sending the first user identification and the first PIN to the POS comprised by the retailer which results in the sent first user identification and first PIN being received by the POS; and

after said sending the first user identification and the first PIN to the POS, said transaction server receiving from the retailer payment information comprising a fee required to be paid by the user to the retailer with respect to the transaction, said receiving the payment information occurring in response to;

the user having entered on the POS both a second user identification identifying the user and a second PIN pertaining to the user, and

the retailer having confirmed that the second user identification entered by the user matched the first user identification received by the POS from the transaction server and that the second PIN entered by the user matched the first PIN received by the POS from the transaction server.

2. The method of claim 1, said method further comprising:

after said receiving from the retailer payment information, said transaction server communicating with a banking server to perform a financial settlement of the transaction based on the payment information.

3. The method of claim 1, wherein the method further comprises said transaction server encrypting the confidential user information, and wherein said sending the confidential user comprises said transaction server sending the encrypted confidential user information to the POS comprised by the retailer.

4. A computer program product, comprising a computer readable storage medium having program instructions stored thereon, said program instructions configured to be executed by a processor to implement a method for booking and paying a retailer comprising a Point of Sale (POS) connected to a transaction server, said method comprising:

a transaction server storing a retail identifier that identifies the retailer, a first user telephone number of a wireless device of a user, and confidential user information for implementing a transaction between the retailer and the user, said confidential user information comprising a first user identification identifying the user and a first personal identification number (PIN) pertaining to the user;

after said storing, said transaction server receiving a Short Messaging Service (SMS) message from the wireless device of the user, said SMS message comprising a retailer identification identifying the retailer, said SMS message not including any readable sensitive information;

said transaction server receiving, from a carrier transporting the SMS message to the retailer, a second user telephone number of the wireless device of the user;

in response to said transaction server receiving the SMS message from the wireless device of the user and the second user telephone number from the carrier, said transaction server verifying that the second user telephone number matches the first user telephone number and that the retailer identification matches the retailer identifier;

in response to said verifying, said transaction server sending the first user identification and the first PIN to the POS comprised by the retailer which results in the sent first user identification and first PIN being received by the POS; and

after said sending the first user identification and the first PIN to the POS, said transaction server receiving from the retailer payment information comprising a fee required to be paid by the user to the retailer with respect to the transaction, said receiving the payment information occurring in response to;

the user having entered on the POS both a second user identification identifying the user and a second PIN pertaining to the user, and

the retailer having confirmed that the second user identification entered by the user matched the first user identification received by the POS from the transaction server and that the second PIN entered by the user matched the first PIN received by the POS from the transaction server.

5. The computer program product of claim 4, said method further comprising:

after said receiving from the retailer payment information, said transaction server communicating with a banking server to perform a financial settlement of the transaction based on the payment information.

6. The computer program product of claim 4, wherein the method further comprises said transaction server encrypting the confidential user information, and wherein said sending the confidential user comprises said transaction server sending the encrypted confidential user information to the POS comprised by the retailer.