Release of transaction data

• US 8,996,387 B2
• Filed: 09/08/2009
• Issued: 03/31/2015
• Est. Priority Date: 09/09/2008
• Status: Active Grant

• Current Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Original Assignee: Giesecke & Devrient GmbH
• Inventors: Stocker, Thomas, Baldischweiler, Michael
• Primary Examiner(s): Shah, Paras D
• Application Number:
  US13/063,042
• Publication Number:
  US 20110166863A1
• Time in Patent Office: 2,030 Days
• Field of Search: 704/231, 704/246, 704/251, 704/250, 704/258, 704/270, 704/275, 704/271, 379/88.01
• US Class Current: 704/275
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G07F 7/10 together with a coded signal , e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
• CPC Class Codes: G10L 17/00 Speaker identification or verification techniques
• CPC Class Codes: G10L 21/00 Speech or voice signal processing techniques to produce another audible or non-audible signal, e.g. visual or tactile, in order to modify its quality or its intelligibility G10L19/00 takes precedence
• CPC Class Codes: G10L 25/48 specially adapted for particular use
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

For clearing transaction data selected for a processing, there is generated in a portable data carrier (1) a transaction acoustic signal (003; 103; 203) (S007; S107; S207) upon whose acoustic reproduction by an end device (10) at least transaction data selected for the processing are reproduced superimposed acoustically with a melody specific to a user of the data carrier (1) (S009; S109; S209). The generated transaction acoustic signal (003; 103; 203) is electronically transferred to an end device (10) (S108; S208), which processes the selected transaction data (S011; S121; S216) only when the user of the data carrier (1) confirms vis-à-vis the end device (10) an at least partial match both of the acoustically reproduced melody with the user-specific melody and of the acoustically reproduced transaction data with the selected transaction data (S010; S110, S116; S210).

Claims

1. A method in a portable data carrier of a user for clearing transaction data selected by the user for a processing, the method comprising the steps:

supplying by the data carrier a transaction identification uniquely linked with the transaction data;

generating by the data carrier a transaction acoustic signal, the transaction acoustic signal being configured to produce, upon acoustic reproduction of the transaction acoustic signal by an end device, the selected transaction data of the transaction to be cleared and the transaction identification both superimposed acoustically with a melody specific to the user of the data carrier;

electronically transferring by the data carrier the transaction acoustic signal to the end device;

comparing by the data carrier an electronically received transaction identification with the supplied transaction identification, the data carrier receiving the transaction identification from the end device as confirmation both of an at least partial match of the melody acoustically reproduced by the end device with the user-specific melody and of a match of the transaction data acoustically reproduced by the end device with the selected transaction data,

wherein, upon the acoustic reproduction of the transaction acoustic signal by an end device with the selected transaction data of the transaction to be cleared and the transaction identification superimposed acoustically with the melody specific to the user of the data carrier, said confirmation of said matches is based on a user input to said end device of at least a portion of the transaction identification, and

electronically transferring by the data carrier a clearance signal to the end device if the received transaction identification matches the supplied transaction identification.

2. The method according to claim 1, including generating via the data carrier such transaction acoustic signal that enables the user, as a result of the reproduction of the transaction acoustic signal by the end device to confirm, for clearing the transaction data, both an at least partial match of the acoustically reproduced melody with the user-specific melody and a match of the acoustically reproduced transaction data with the selected transaction data.

3. The method according to claim 1, including generating via the data carrier the transaction acoustic signal by acoustic superimposition of a user acoustic signal present on the data carrier and reproducing the user-specific melody and a speech acoustic signal reproducing the transaction data.

4. The method according to claim 3, including loading to the data carrier a user acoustic signal which reproduces the user-specific melody determined by the user, such that user acoustic signal reproducing the user-specific melody was either specified by the user or generated from a user-specific melody sung or played by the user.

5. The method according to claim 3, including loading to the data carrier a user acoustic signal which reproduces a commonly known user-specific melody which has been acoustically defamiliarized.

6. The method according to claim 3, including loading to a memory of the data carrier the user acoustic signal reproducing the user-specific melody, and/or an acoustic signal underlying the speech acoustic signal, upon a personalization of the data carrier to its user.

7. The method according to claim 1, wherein the data carrier, before the generation of the transaction acoustic signal, converts the transaction data selected for a processing to a speech acoustic signal.

8. The method according to claim 7, wherein the data carrier electronically receives from the end device the transaction data selected for a processing or a transaction designation uniquely associated with the selected transaction data, and acoustically superimposes the user acoustic signal and the speech acoustic signal which reproduces the transaction data or the transaction data associated with the received transaction designation.

9. The method according to claim 8, wherein the data carrier supplies the transaction identification uniquely linked with the electronically received, selected transaction data or their transaction designation and generates the user acoustic signal such that upon an acoustic reproduction of the generated user acoustic signal the generated transaction identification is also reproduced superimposed acoustically with the user-specific melody, by acoustic superimposition of the user acoustic signal reproducing the user-specific melody and of a speech acoustic signal reproducing the transaction identification.

10. The method according to claim 9, wherein the data carrier electronically receives the transaction identification from the end device as confirmation both of an at least partial match of the melody acoustically reproduced by the end device with the user-specific melody and of a match of the transaction data acoustically reproduced by the end device with the selected transaction data.

11. The method according to claim 10, wherein the data carrier generates as the clearance signal a clearance data signal comprising at least the transaction data and electronically transfers it to the end device for clearing the transaction data.

12. The method according to claim 1, wherein the data carrier generates a clearance acoustic signal upon whose acoustic reproduction by the end device at least the clearance code generated by the data carrier is reproduced superimposed acoustically with the user-specific melody, and electronically transfers the generated clearance acoustic signal to the end device, whereby the data carrier, in case of a match of a thereupon electronically received clearance code with the generated clearance code, electronically transfers the clearance signal to the end device for clearing the transaction data.

13. The method according to claim 1, wherein the data carrier, for supplying the transaction identification, generates a random transaction identification and links it uniquely with the selected transaction data or their transaction designation.

14. The method according to claim 3, wherein the data carrier creates a transaction list with transaction data selectable for a processing and a transaction designation respectively uniquely associated with the selectable transaction data, electronically transfers the created transaction list to the end device and electronically receives from the end device transaction data selected from the transaction list for a processing or the transaction designation respectively uniquely associated with the selected transaction data.

15. The method according to claim 14, wherein the data carrier, for supplying the transaction identification for the transaction data, generates mutually different transaction identifications upon the creation of the transaction list and respectively uniquely links them with the transaction data or their transaction designations, and determines the transaction identification associated with the selected transaction data.

17. The method according to claim 3, wherein the data carrier generates the transaction acoustic signal such that from the transaction acoustic signal there can be extracted at least no speech acoustic signal reproducing the transaction data from the user acoustic signal reproducing the user-specific melody such that upon an acoustic reproduction of a detached speech acoustic signal the transaction data would be reproduced in acoustically recognizable fashion.

18. The method according to claim 1, wherein the clearance signal comprises a cryptographic signature or a clearance code generated by the data carrier.

19. The method according to claim 1, wherein the data carrier generates a transaction acoustic signal upon whose acoustic reproduction by the end device at least transaction data to be newly registered are reproduced superimposed acoustically with the user-specific melody, by acoustic superimposition of the user acoustic signal reproducing the user-specific melody and of a speech acoustic signal reproducing the transaction data to be newly registered, and transfers the generated transaction acoustic signal to the end device, whereby the data carrier registers for a processing the transaction data to be newly registered, provided that the data carrier electronically receives a registration confirmation signal from the end device as confirmation both of an at least partial match of the melody acoustically reproduced by the end device with the user-specific melody and of a match of the transaction data acoustically reproduced by the end device with the transaction data to be newly registered.

16. A portable data carrier of a user for clearing transaction data selected by the user for a processing, the portable data carrier comprising:

at least a processor;

a memory; and

a data communication interface for data communication with an end device,

wherein the data carrier is configured to receive a supplied transaction identification uniquely linked with transaction data;

wherein the data carrier includes a control device, the control device being configured to generate a transaction acoustic signal upon an acoustic reproduction of the generated transaction acoustic signal by an end device, the selected transaction data of the transaction to be cleared and the transaction identification both superimposed acoustically with a melody specific to the user of the data carrier, and wherein the data carrier is configured to

transfer the transaction acoustic signal to the end device,

compare an electronically received transaction identification with the supplied transaction identification, the data carrier receiving the transaction identification from the end device as confirmation both of an at least partial match of the melody acoustically reproduced by the end device with the user-specific melody and of a match of the transaction data acoustically reproduced by the end device with the selected transaction data,

wherein, upon the acoustic reproduction of the transaction acoustic signal by an end device with the selected transaction data of the transaction to be cleared and the transaction identification superimposed acoustically with the melody specific to the user of the data carrier, said portable data carrier is configured to receive said confirmation of said matches based on a user input to said end device of at least a portion of the transaction identification, and

transfer a clearance signal to the end device if the received transaction identification matches the supplied transaction identification.

20. A method in a portable data carrier for clearing transaction data selected for a processing, comprising the steps:

generating by the data carrier a transaction acoustic signal, the transaction acoustic signal being configured to produce, upon acoustic reproduction of the transaction acoustic signal by an end device, at least acoustical transaction data corresponding to the transaction to be cleared superimposed acoustically with a melody specific to a user of the data carrier; and

electronically transferring the transaction acoustic signal to the end device,

wherein the data carrier generates a transaction acoustic signal upon whose acoustic reproduction by the end device of at least transaction data to be newly registered are reproduced superimposed acoustically with the user-specific melody, by acoustic superimposition of the user acoustic signal reproducing the user-specific melody and of a speech acoustic signal reproducing the transaction data to be newly registered, and transfers the generated transaction acoustic signal to the end device, whereby the data carrier registers for a processing the transaction data to be newly registered, provided that the data carrier electronically receives a registration confirmation signal from the end device as confirmation both of an at least partial match of the melody acoustically reproduced by the end device with the user-specific melody and of a match of the transaction data acoustically reproduced by the end device with the transaction data to be newly registered.

21. A portable data carrier of a user for clearing transaction data selected by the user for a processing, the portable data carrier comprising:

at least a processor;

a memory; and

a data communication interface for data communication with an end device,

wherein the data carrier is configured to receive a supplied transaction identification uniquely linked with transaction data;

wherein the data carrier includes a control device, the control device being configured to generate a transaction acoustic signal, upon an acoustic reproduction of the generated transaction acoustic signal by an end device, the selected transaction data of the transaction to be cleared and the transaction identifier both superimposed acoustically with a melody specific to the user of the data carrier, and wherein the data carrier is configured to

transfer the transaction acoustic signal to the end device,

compare an electronically received transaction identification with the supplied transaction identification, and

transfer a clearance signal to the end device if the received transaction identification matches the supplied transaction identification.

22. A transaction system, comprising a portable data carrier according to claim 21 and an end device which is set up to acoustically reproduce a transaction acoustic signal electronically received from the data carrier, and to process the selected transaction data only when the user of the data carrier confirms via the end device both an at least partial match of the acoustically reproduced melody with the user-specific melody and a match of the acoustically reproduced transaction data with the selected transaction data.