Process for carrying out a transaction between a payment module and a security module

• US 8,874,488 B2
• Filed: 02/26/2008
• Issued: 10/28/2014
• Est. Priority Date: 02/27/2007
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagravision SA (Kudelski SA)
• Inventors: Kudelski, Henri
• Primary Examiner(s): Nigh, James D
• Application Number:
  US12/528,552
• Publication Number:
  US 20100293098A1
• Time in Patent Office: 2,436 Days
• Field of Search: 705/64
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/06 Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/0873 Details of the card reader
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4185 for payment
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/47815 Electronic shopping payment schemes, payment architectures or payment protocols for electronic shopping systems G06Q20/12
• CPC Class Codes: H04N 21/6582 Data stored in the client, e.g. viewing habits, hardware capabilities, credit card number arrangements where receivers interact with the broadcast H04H20/38
• CPC Class Codes: H04N 7/163 by receiver means only

Abstract

This invention relates to a process for carrying out a transaction between a payment module and a security module connected to a user'"'"'s unit, this process being characterized in that it comprises the following steps: entering an identifier representative of the transaction to be carried out by means of an input device; generating by the user'"'"'s unit, a control message containing at least a representative code of said transaction and an identifier of the security module requiring the transaction; sending said control message to said payment module (PP); verifying in said payment module whether it is entitled to carry out the desired transaction; if the payment module is entitled to carry out this transaction, execution of the transaction, storage of the result of the transaction in said payment module and generation by the payment module, of a receipt relating to the desired transaction and to the related security module; sending said receipt to a management center; sending an unlocking code to the security module (SC) by the management center; registering the transaction in said security module.

Claims

1. A process for carrying out a transaction, said process comprising:

receiving, by a hardware decoder, an indication that a transaction to be carried out between a payment module connected to the hardware decoder and a security module connected to the hardware decoder has been requested, said indication including a transaction identifier, the security module being configured to perform conditional access operations;

generating by the hardware decoder a control message containing at least a representative code representing said transaction and an identifier of the security module;

sending said control message to said payment module;

verifying in said payment module whether the payment module is entitled to carry out the transaction;

executing the transaction by the payment module, storing a result of the transaction in said payment module, and generating by the payment module a receipt relating to the transaction and to the security module;

sending by the hardware decoder said receipt to a management center;

receiving an unlocking code at the security module from the management center, said unlocking code being based on the receipt; and

registering the transaction in said security module.

2. The process of claim 1, wherein the control message is stored in the hardware decoder before being sent to the payment module.

3. The process of claim 1, wherein the receipt is encrypted using a key that the management center is able to determine.

4. The process of claim 1, wherein the receipt is sent to the management center in encrypted form.

5. The process of claim 1, wherein the unlocking code is formed from said receipt.

6. The process of claim 1, wherein the transaction concerns at least one the element selected from among the group consisting of an event access entitlement, a data access entitlement, and a credit.

7. A process for carrying out a transaction, said process comprising:

receiving, by a hardware decoder, an indication that a transaction to be carried out between a payment module and a security module connected to the hardware decoder has been requested, said indication including a transaction identifier, the security module being configured to perform conditional access operations;

generating by the hardware decoder a control message containing at least a representative code representing said transaction and an identifier of the security module;

sending said control message by the hardware decoder to a management center;

receiving said control message from the management center at the payment module;

verifying in said payment module whether the payment module is entitled to carry out the transaction;

executing the transaction and transmitting an unlocking code relating to the transaction to the corresponding security module; and

registering the transaction in said security module.

8. The process of claim 7, wherein the transaction concerns at least one element selected from among the group consisting of an event access entitlement, a data access entitlement, and a credit.

9. The process of claim 7, wherein the control message is sent in encrypted form to the management center.

10. The process of claim 7, wherein the control message is decrypted by the management center.

11. The process of claim 7, wherein the unlocking code is stored in the hardware decoder.

12. A process for carrying out a transaction, said process comprising:

receiving, by a hardware decoder, an indication that a transaction to be carried out between a payment module and a security module connected to the hardware decoder has been requested, said indication including a transaction identifier, the security module being configured to perform conditional access operations;

generating by the hardware decoder a control message containing at least a representative code representing said transaction and an identifier of the security module;

sending by the hardware decoder said control message to a management center;

receiving said control message from the management center at the payment module;

verifying in said payment module whether the payment module is entitled to carry out the transaction;

executing the transaction and transmitting a receipt relating to the transaction to the management center;

receiving an unlocking code from the management center at the security module, said unlocking code being based on the receipt; and

registering the transaction in said security module.

13. The process of claim 12, wherein the receipt is sent in encrypted form to the management center.

14. The process of claim 12, wherein the unlocking code is formed from said receipt.

15. The process of claim 12, wherein the transaction concerns at least one element selected from among the group consisting of an event access entitlement, a data access entitlement, and a credit.

16. The process of claim 12, wherein the control message is decrypted by the management center.

17. The process of claim 12, wherein the unlocking code is stored in the hardware decoder.

18. A process for carrying out a transaction, said process comprising:

receiving, by a hardware decoder, an indication that a transaction to be carried out between a payment module and a security module connected to the hardware decoder has been requested, said indication including a transaction identifier, said security module being configured to perform conditional access operations;

generating, by the payment module, a control message containing at least a representative code representing said transaction;

verifying in said payment module whether the payment module is entitled to carry out the transaction;

executing the transaction, storing the result of the transaction in said payment module, and generating a receipt by the payment module relating to the transaction and to the security module;

sending said receipt to a management center;

receiving an unlocking code at the security module, said unlocking code being based on the receipt; and

registering the transaction in said security module.

19. The process of claim 18, wherein the receipt is sent in encrypted form to the management center.

20. The process of claim 18, wherein the unlocking code is formed from said receipt.

21. The process of claim 18, wherein the transaction concerns at least one element selected from among the group consisting of an event access entitlement, a data access entitlement, and a credit.

22. The process of claim 18, wherein the unlocking code is sent in encrypted form to the security module.