Method for authorization of a transaction with the use of mobile phone

• US 8,965,789 B2
• Filed: 05/12/2010
• Issued: 02/24/2015
• Est. Priority Date: 05/12/2009
• Status: Expired due to Fees

• Current Assignee: Masspay SP Z OO
• Original Assignee: Masspay SP Z OO
• Inventors: Kulakowski, Henryk
• Primary Examiner(s): ZARE, SCOTT A
• Application Number:
  US13/320,433
• Publication Number:
  US 20120078737A1
• Time in Patent Office: 1,749 Days
• Field of Search: 705/16, 705/26.41
• US Class Current: 705/16
• CPC Class Codes: G06Q 20/16 Payments settled via telecommunication systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 30/0613 Third-party assisted
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Abstract

A method for transaction authorization with the use of a mobile phone, comprising the steps of receiving (102, 202) from the user (UR), by the communication server (CS) a voice call establishment request, to establish a voice connection to a telephone number which identifies a transaction; authorize the transaction by verifying (112, 206) the credentials of the user (UR); accepting (106, 214) or rejecting (108, 216) the voice call; sending a request (116, 220) to the user (UR) to enter necessary transaction parameters; entering (118, 222) the requested transaction parameters; verifying (120, 224), by the authorization system (AS), the validity of the entered parameter; determining (122, 226) whether the user (UR) has entered all necessary transaction parameters, including user'"'"'s authorization to fund the transaction and, preferably, a password authorizing the transaction; accepting the transaction funding by the transaction party responsible for it (124, 228), and, if the amount has been accepted, sending a message with instruction to reserve sufficient funds (126, 230) in the transaction funding party account to settle the transaction; determining (128, 232) whether the authorization system (AS) has been provided with all necessary the transaction parameters; storing (130, 234) the transaction for further processing or forwarding it (132, 236) for settlement.

Claims

1. A method for transaction authorization with the use of a mobile phone, comprising the steps of:

receiving by a communication server (CS) a voice call establishment request to establish a voice connection to a standard MSISDN telephone number which uniquely identifies a transaction;

determining, by the communication server, whether the voice call establishment request is a request for transaction authorization to be executed with the use of a text channel;

determining, by the communication server, whether the voice call establishment request is a request for transaction authorization to be continued via a voice channel;

rejecting the voice call establishment request based on a determination that the voice call establishment request is a request for transaction authorization to be executed with the use of the text channel;

accepting the voice call establishment request and establishing the voice connection based on a determination that the voice call establishment request is a request for transaction authorization to be continued via the voice channel;

transmitting, from the communication server (CS) to an authorization system (AS), information about the request, containing at least a telephone number of a user (UR) and the telephone number identifying the transaction;

transmitting, from the authorization system (AS) to the user (UR), a request to enter necessary transaction parameters;

receiving the necessary transaction parameters from a handset of the user (UR);

verifying the correctness and completeness of the transaction parameters received by the authorization system (AS);

determining that a transaction amount has been accepted by a transaction party responsible for funding the transaction;

sending a message containing an instruction to reserve sufficient funds in an account of the transaction party to settle the transaction;

verifying the completeness of all the transaction parameters received by the authorization system (AS); and

transmitting the transaction for settlement based on successful verification of the completeness of all of the transaction parameters.

2. A method according to claim 1, comprising a step of storing the transaction data for further processing in case of unsuccessful verification.

3. A method according to claim 1, wherein the number identifying the transaction is the number identifying the payee.

4. A method according to claim 1, wherein the number identifying the transaction is the number identifying the electronic point of sale apparatus.

5. A method according to claim 1, wherein the telephone number identifying the transaction is a number identifying a product or a service.

6. A method according to claim 1, wherein in case of rejecting the voice call establishment request, communication between the authorization system (AS) and the user (UR) is facilitated by the communication server (CS) via a SMS channel.

7. A method according to claim 1, wherein in the case of rejecting the voice call establishment request, communication between the authorization system (AS) and the user (UR) is facilitated by the communication server (CS) via a Unstructured Supplementary Service Data (USSD) channel.

8. A method according to claim 1, wherein the method further comprises:

once the communication server (CS) receives the voice call establishment request, transmitting by the communication server (CS) information about the voice connection to the authorization system (AS),

performing by the authorization system (AS) a verification of credentials of the user (UR); and

when the verification of the credentials of the user is not completed successfully, sending by the authorization system (AS) an instruction to the communication server (CS) to establish the voice connection, in which a message is played explaining the reasons for unsuccessful verification.

9. A method according to claim 1, wherein:

once the communication server (CS) receives the call establishment request, the communication server (CS) determines a type of the connection to be used for a transaction authorization;

transmitting by the communication server (CS) information about the voice call establishment request to the authorization system (AS); and

when the verification step is not completed successfully, sending by the communication server (CS) a message to the user (UR) with an explanation of the unsuccessful verification.

10. A method according to claim 1, wherein one of the transaction parameters requested by the authorization system (AS) and entered by the user (UR) is a password of the user.

11. A method according to claim 10, wherein the password is an explicit authorization of the transaction.

12. A method according to claim 10, wherein an authentication of the user (UR) is requested by the authorization system (AS) from an external user funds management system.

13. A method according to claim 1, wherein one of the transaction parameters requested by the authorization system (AS) and received from the user (UR) is an explicit authorization of the transaction.

14. A method according to claim 1, wherein once the voice connection is established, communication with the user takes place with the use of DTMF technology.

15. A method according to claim 1, wherein once the voice connection is established, communication with the user takes place with the use of voice communication and speech recognition technology.

16. A method according to claim 1, wherein some of the transaction parameters are encoded in the standard MSISDN telephone number that identifies the transaction.

17. A method according to any one of claims 1 and 16, wherein the user (UR) has a handset with the contactless technology, and the telephone number that identifies the transaction is read remotely from a contactless chip or an electronic emitter.

18. A method according to any one of claims 1 and 16, wherein the user (UR) has a handset with a software application that recognizes and processes barcodes and that application obtains the telephone number identifying the transaction encoded in the barcode.

19. A method according to any one of claims 1 and 16, wherein the user (UR) has a handset supporting wireless near field communication network, and the telephone number that identifies the transaction is transmitted to the user'"'"'s telephone via this network.

20. A method according to claim 1, wherein instead of rejecting the voice call establishment request, the voice connection is established, and finished after a specified time period.

26. A method according to claim 1, wherein some of the transaction parameters are included in the telephone number that uniquely identifies the transaction.

21. A telecommunications network comprising:

a communication server (CS); and

an authorization system (AS);

wherein the communication server (CS) adapted to;

receive a request to establish a voice call to a standard MSISDN telephone number, the telephone number identifying the transaction;

determine whether the request to establish the voice call is a request for executing an authorization procedure via a text channel;

determine whether the request to establish the voice call is a request for continuing the authorization procedure via a voice channel;

reject the voice call establishment request based on a determination that the request to establish the voice call is a request for executing an authorization procedure via a text channel; and

accept the request and to establish the voice call based on a determination that the request to establish the voice call is a request for continuing the authorization procedure via a voice channel;

wherein the communication server (CS) is further adapted to send, to the authorization system (AS), information about the request to establish the voice call, containing at least a telephone number of the user (UR) and the telephone number identifying the transaction;

wherein the authorization system (AS), communicating with the communication server (CS), is adapted to;

send a request to a user (UR) to enter necessary transaction parameters; and

receive from a handset of the user a call establishment request, and the necessary transaction parameters;

verify the correctness of the received transaction parameters; and

forward the transaction for settlement based on successful verification of the received transaction parameters.

22. A telecommunications network according to claim 21, wherein the acquisition of the transaction parameters is executed over the voice channel.

23. A telecommunications network according to claim 21, wherein the authorization system (AS) receives the transaction parameters over an Unstructured Supplementary Service Data (USSD) channel.

24. A telecommunications network according to claim 21, wherein the authorization system (AS) receives the transaction parameters via SMS messages.

25. A telecommunications network according to claim 21, wherein the communication server (CS) is a portion of the authorization system (AS).