Method for secure transaction of payments via a data network

• US 20050049978A1
• Filed: 08/05/2004
• Published: 03/03/2005
• Est. Priority Date: 08/06/2003
• Status: Abandoned Application

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Kleen, Martin
• Application Number:
  US10/911,808
• Publication Number:
  US 20050049978A1
• Time in Patent Office: Days
• US Class Current: 705/72
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method and appertaining device provides for secure transaction of payments via a data network, comprising inputting the desire for payment by a purchaser on a device connected to the data network; transmitting the desire for payment from the device to a server computer of a seller via the data network; transmitting an encrypted communication acknowledging the desire for payment from the seller to the device via the data network; a query and input of a password by the user to a checking device connected to the device; unlocking the checking device given a correctly input password or abort of the payment event given an incorrectly input password; displaying the communication on the checking device; authorizing communication by the user or abort of the payment event; transmitting a transaction authorization to the seller via the device; and submitting the transaction authorization by the seller to a business handling the payment.

Claims

1. A method for secure transaction of payments via a data network, comprising:

inputting a desire for payment by a purchaser on a device connected to the data network;

transmitting the desire for payment from the device to a server computer of a seller via the data network;

transmitting an encrypted communication acknowledging the desire for payment from the seller to the device via the data network;

querying for a password and inputting the password by the purchaser to a checking device connected to the device;

unlocking the checking device given a correctly input password or aborting the payment event given an incorrectly input password;

displaying information regarding the communication on the checking device;

authorizing the communication by the user or aborting the payment event;

transmitting a transaction authorization to the seller via the device; and

submitting the transaction authorization by the seller to a business handling payment.

2. The method according to claim 1, further comprising storing a public key of the business implementing the payment in the checking device.

3. The method according to claim 1, further comprising storing a device number in the checking device.

4. The method according to claim 1, further comprising associating an individual key pair with the checking device, a public key being stored at the business implementing the payment and a private key is stored in the checking device.

5. The method according to claim 4, wherein the private key is stored in the checking device such that it cannot be read out.

6. The method according to claim 1, further comprising creating, by the seller, a key pair and a business identification identifying the seller.

7. The method according to claim 6, further comprising signing a public key of the seller and a business card of the business implementing the payment.

8. The method according to claim 1, wherein communication sent by the seller comprises a name of the seller, at least one of a selling price, information about purchased goods or services, and a transaction number.

9. The method according to claim 1, wherein a computer, a portable computer, or a mobile telephone is used as the device connected to the data network.

10. The method according to claim 1, further comprising plugging the checking device into a slot of the device.

11. The method according to claim 10, wherein a USB interface of a serial or parallel interface is used for the slot.

12. The method according to claim 1, further comprising checking, by the checking device, the communication sent by the seller.

13. The method according to claim 1, further comprising verifying a business card of the seller and its public key utilizing a public key stored in the checking device.

14. The method according to claim 13, further comprising checking the entire communication of the seller with the public key of the seller.

15. The method according to claim 1, wherein the data network is the Internet.

16. A checking device for secure transaction of payments via a data network configured to be connected to a device that can be connected with the data network, comprising:

a transmitter and receiver configured to communicate between a buyer and a seller; and

an approval mechanism configured for approving a communication sent by the seller and designating a selling price and the payment receiver on the checking device in order to initiate a payment.

17. The checking device according to claim 16, further comprising a display configured to display information relating to the communication and an approval button connected with the approval mechanism.

18. The checking device according to claim 16, further comprising an abort button configured to initiate an abort of the communication.

19. The checking device according to claim 16, wherein the device to which the checking device connects is at least one of a personal computer, a portable computer, and a mobile telephone.

20. The checking device according to claim 16, further comprising an interface that is at least one of a USB interface, a parallel interface, and a serial interface to connect with the device that can be connected to the data network.

21. The checking device according to claim 16, comprising a storage area configured to hold a public key of a business of the seller implementing the payment.

22. The checking device according to claim 16, wherein an individual key pair is associated with the checking device, a public key of the key pair being stored at a business of the seller handling the payment, and a private key of the key pair being stored in the checking device.

23. The checking device according to claim 22, wherein the private key is stored in the checking device in a manner preventing it from being read out.

24. The checking device according to claim 16, further comprising a device number.