Remote Electronic Payment System

• US 20090182676A1
• Filed: 03/26/2009
• Published: 07/16/2009
• Est. Priority Date: 02/20/2001
• Status: Abandoned Application

• Current Assignee: Sybase 365 Incorporated (SAP SE)
• Original Assignee: Sybase 365 Incorporated (SAP SE)
• Inventors: Barbier, Eric, Dolique, Christophe, Guillot, Carles
• Application Number:
  US12/411,800
• Publication Number:
  US 20090182676A1
• Time in Patent Office: Days
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

The invention concerns a remote electronic payment system comprising an authentication device (300) with an authenticating server in a remote payment system, the authentication being performed prior to a transaction carried out by a user. The device (300) is characterised in that it comprises: means (310) for receiving a first authentication request, from the authenticating server; means (330) for verifying the validity of the authentication request; means (350) for validation, by the user, of the transaction; means (370) for controlling said user'"'"'s identity; and means (380) for sending a return message of authentication, to the authenticating server (900).

Claims

1-45. -45. (canceled)

46. A method for authentication within an electronic payment system, the method comprising:

receiving at an authentication device, the authentication device incorporated in a mobile telephone, a first authentication request from an authentication server, the first authentication request indicative of a transaction and including at least (a) a description of the transaction and (b) a first authentication code;

(a) verifying the first authentication request through at least the first authentication code;

(b) validating the transaction and confirming the identity of a user of the mobile telephone through input by the user yielding user input, the user input including one or more of (i) an indicator of the user'"'"'s acceptance or rejection of the transaction, (ii) a payment option, and (iii) a Personal Identification Number;

(c) generating a second authentication code;

(d) generating a return authentication message, the return authentication message including at least (i) the second authentication code and (ii) aspects of the user input; and

sending the return authentication message to the authentication server.

47. The method of claim 46, wherein the first authentication request, following receipt, is decrypted using a previously-supplied transport key.

48. The method of claim 46, wherein the return authentication message, prior to sending, is encrypted using a previously-supplied transport key.

49. The method of claim 46, further comprising:

receiving a first authentication key prior to receipt of the first authentication request and subsequently employing aspects of the first authentication key while verifying the first authentication request during the one or more processing steps.

50. The method of claim 46, further comprising:

a transaction counter, aspects of the transaction counter being included in one or more of (a) the return authentication message and (b) generating the second authentication code.

51. The method of claim 46, wherein the authentication device is resident on a Subscriber Identity Module card.