Apparatus and method for integrated payment and electronic merchandise transfer

• US 8,196,818 B2
• Filed: 02/08/2010
• Issued: 06/12/2012
• Est. Priority Date: 07/13/2005
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Van de Velde, Eddy L. H., Roberts, David A., Smets, Patrik, Garrett, Duncan, Rans, Jean-Paul
• Primary Examiner(s): ST CYR, DANIEL
• Application Number:
  US12/701,998
• Publication Number:
  US 20100252624A1
• Time in Patent Office: 855 Days
• Field of Search: 235/380, 235/382, 235/383, 235/384, 705/41, 705/44, 705/26
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/045 using payment protocols involving tickets
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 2240/00 Transportation facility access, e.g. fares, tolls or parking

Abstract

Interrogation of an electronic device by a first terminal is facilitated, to obtain an account number associated with the electronic device. The electronic device is configured according to a payment specification. The first terminal has a first terminal payment module configured according to the payment specification and a first terminal electronic merchandise module configured according to the electronic merchandise infrastructure and coupled to the first terminal payment module to permit transfer of non-payment e-merchandise related information from the first terminal electronic merchandise module to the first terminal payment module. The interrogation of the electronic device is performed by the first terminal payment module. Generation of non-payment e-merchandise related information by the first terminal electronic merchandise module is facilitated. Transfer of the non-payment e-merchandise related information from the first terminal electronic merchandise module to the electronic device via the first terminal payment module, within a transaction between the electronic device and the first terminal payment module that is conducted in accordance with the payment specification, is also facilitated. The non-payment e-merchandise related information is stored on the electronic device in accordance with the payment specification. The electronic device and the first terminal independently calculate a summary data item. The first terminal calculates a first message authentication code based on the non-payment e-merchandise related information and a terminal-calculated value of the summary data item. The non-payment e-merchandise related information is stored on the electronic device together with an electronic device-calculated value of the summary data item and the first message authentication code.

Claims

1. A method for integrated payment and electronic merchandise transfer via:

(i) a payment infrastructure, configured in accordance with a payment specification, in association with (ii) an electronic merchandise infrastructure, comprising the steps of;

facilitating interrogation of an electronic device by a first terminal to obtain an account number associated with said electronic device, said electronic device being configured according to the payment specification, said first terminal having a first terminal payment module configured according to the payment specification and a first terminal electronic merchandise module configured according to the electronic merchandise infrastructure and coupled to said first terminal payment module to permit transfer of non-payment e-merchandise related information from said first terminal electronic merchandise module to said first terminal payment module, said interrogation of said electronic device being performed by said first terminal payment module;

facilitating generation of said non-payment e-merchandise related information by said first terminal electronic merchandise module;

facilitating transfer of said non-payment e-merchandise related information from said first terminal electronic merchandise module to said electronic device via said first terminal payment module, within a transaction between said electronic device and said first terminal payment module that is conducted in accordance with said payment specification, said non-payment e-merchandise related information being stored on said electronic device in accordance with said payment specification;

facilitating said electronic device and said first terminal independently calculating a summary data item; and

facilitating said first terminal calculating a first message authentication code based on said non-payment e-merchandise related information and a terminal-calculated value of said summary data item;

wherein said non-payment e-merchandise related information is stored on said electronic device together with an electronic device-calculated value of said summary data item and said first message authentication code.

2. The method of claim 1, further comprising:

facilitating interrogation of said electronic device by a second terminal to obtain said non-payment e-merchandise related information, said electronic device-calculated value of said summary data item and said first message authentication code

facilitating said second terminal calculating a second message authentication code based on said non-payment e-merchandise related information and said electronic device-calculated value of said summary data item;

facilitating said second terminal determining whether said first and second message authentication codes match; and

responsive to said first and second message authentication codes not matching, determining that said non-payment e-merchandise related information obtained by said second terminal is illicit.

3. The method of claim 2, wherein said first and second terminals are the same.

4. The method of claim 2, wherein said first and second terminals are different.

5. The method of claim 2, further comprising:

facilitating said second terminal obtaining a Combined Data Authentication signature from said electronic device, based at least in part on said electronic device-calculated value of said summary data item;

facilitating said second terminal verifying said combined data authentication signature from said electronic device, based at least in part on a value of said summary data item calculated by said second terminal.

6. The method of claim 1, wherein in said step of facilitating interrogation:

profile data pertaining to a holder of said electronic device is obtained; and

said e-merchandise related information is generated by said first terminal electronic merchandise module based on said profile data.

7. The method of claim 6, wherein said profile data includes information identifying said holder of said electronic device as a member of a class having at least one of a plurality of entitlement categories associated therewith, said entitlement categories relating to said e-merchandise.

8. The method of claim 7, wherein said entitlement categories comprise transportation fare categories and said e-merchandise related information comprises transportation ticket information.

9. The method of claim 1, wherein said steps are executed in connection with entrance of a holder to a controlled access system and said e-merchandise related information comprises initial entry point information.

10. The method of claim 1, wherein said summary data item comprises a hash of at least an identifier of said electronic device, a random number generated by said electronic device, and an amount of said transaction.

11. The method of claim 10, wherein said identifier of said electronic device comprises at least one of said account number and a device identity of said electronic device.

12. The method of claim 1, wherein said e-merchandise related information comprises voucher information.

13. The method of claim 1, wherein said e-merchandise related information comprises loyalty point information.

14. A method for integrated payment and electronic merchandise transfer via:

(i) a payment infrastructure, configured in accordance with a payment specification, in association with (ii) an electronic merchandise infrastructure, comprising the steps of

facilitating interrogation of an electronic device by a first terminal to obtain an account number associated with said electronic device, said electronic device being configured according to the payment specification, said first terminal having a first terminal payment module configured according to the payment specification and a first terminal electronic merchandise module configured according to the electronic merchandise infrastructure and coupled to said first terminal payment module to permit transfer of non-payment e-merchandise related information from said first terminal electronic merchandise module to said first terminal payment module, said interrogation of said electronic device being performed by said first terminal payment module;

facilitating generation of said non-payment e-merchandise related information by said first terminal electronic merchandise module;

facilitating transfer of said non-payment e-merchandise related information from said first terminal electronic merchandise module to said electronic device via said first terminal payment module, within a transaction between said electronic device and said first terminal payment module that is conducted in accordance with said payment specification, said non-payment e-merchandise related information being stored on said electronic device in accordance with said payment specification;

facilitating interrogation of said electronic device by said first terminal to obtain;

at least one of a transaction counter and an electronic device-generated random number; and

at least one of said account number and a device identity of said electronic device;

facilitating calculation of an authentication code based on said e-merchandise related information, said at least one of said transaction counter and said electronic device-generated random number, and said at least one of said account number and said device identity of said electronic device; and

facilitating detection of irregularity via said authentication code.

15. A terminal for integrated payment and electronic merchandise transfer via:

(i) a payment infrastructure, configured in accordance with a payment specification, in association with (ii) an electronic merchandise infrastructure and in conjunction with an electronic device configured according to the payment specification, said terminal comprising;

a payment module configured according to the payment specification and configured to interrogate the electronic device to obtain an account number associated with said electronic device; and

an electronic merchandise module configured according to the electronic merchandise infrastructure and coupled to said payment module to permit transfer of non-payment e-merchandise related information from said electronic merchandise module to said payment module, said electronic merchandise module being configured to facilitate processing of said non-payment e-merchandise related information;

wherein said payment module is further configured to facilitate transfer of said non-payment e-merchandise related information to the electronic device, in a transaction between the electronic device and said payment module that is conducted in accordance with said payment specification, said non-payment related e-merchandise related information being stored on said electronic device in accordance with said payment specification; and

wherein said payment module and said electronic merchandise module are cooperatively configured to;

facilitate said electronic device and said first terminal independently calculating a summary data item; and

facilitate said first terminal calculating a first message authentication code based on said non-payment e-merchandise related information and a terminal-calculated value of said summary data item;

wherein said non-payment e-merchandise related information is stored on said electronic device together with a electronic device-calculated value of said summary data item and said first message authentication code.

16. The terminal of claim 15, wherein said payment module and said electronic merchandise module are further cooperatively configured to:

facilitate interrogation of said electronic device to obtain said non-payment e-merchandise related information, said electronic device-calculated value of said summary data item and said first message authentication code;

facilitating calculating a second message authentication code based on said non-payment e-merchandise related information and said electronic device-calculated value of said summary data item;

facilitating determining whether said first and second message authentication codes match; and

responsive to said first and second message authentication codes not matching, determining that said non-payment e-merchandise related information obtained by said terminal is illicit.

17. The terminal of claim 16, wherein said payment module and said electronic merchandise module are further cooperatively configured to:

facilitate obtaining a combined data authentication signature from said electronic device, based at least in part on said electronic device-calculated value of said summary data item; and

facilitate verifying said combined data authentication signature from said electronic device, based at least in part on a value of said summary data item calculated by said second terminal.

18. An electronic device for facilitating integrated payment and electronic merchandise transfer via:

(i) a payment infrastructure, configured in accordance with a payment specification, in association with (ii) an electronic merchandise infrastructure, said electronic device being configured according to the payment specification, said electronic device comprising;

a memory; and

at least one processor coupled to said memory, said processor being operative to;

facilitate interrogation of said electronic device by a first terminal to obtain an account number associated with said electronic device, said first terminal having a first terminal payment module configured according to the payment specification and a first terminal electronic merchandise module configured according to the electronic merchandise infrastructure and coupled to said first terminal payment module to permit transfer of non-payment e-merchandise related information from said first terminal electronic merchandise module to said first terminal payment module, said interrogation of said electronic device being performed by said first terminal payment module;

facilitate generation of said non-payment e-merchandise related information by said first terminal electronic merchandise module;

facilitate transfer of said non-payment e-merchandise related information from said first terminal electronic merchandise module to said electronic device via said first terminal payment module, within a transaction between said electronic device and said first terminal payment module that is conducted in accordance with said payment specification, said non-payment e-merchandise related information being stored on said electronic device in accordance with said payment specification;

facilitate said electronic device and said first terminal independently calculating a summary data item; and

facilitate said first terminal calculating a first message authentication code based on said non-payment e-merchandise related information and a terminal-calculated value of said summary data item;

wherein said non-payment e-merchandise related information is stored on said electronic device together with a electronic device-calculated value of said summary data item and said first message authentication code.

19. The electronic device of claim 18, wherein said at least one processor is further operative to:

facilitate interrogation of said electronic device by a second terminal to obtain said non-payment e-merchandise related information, said electronic device-calculated value of said summary data item and said first message authentication code

facilitate said second terminal calculating a second message authentication code based on said non-payment e-merchandise related information and said electronic device-calculated value of said summary data item;

facilitate said second terminal determining whether said first and second message authentication codes match; and

responsive to said first and second message authentication codes not matching, facilitate determining that said non-payment e-merchandise related information obtained by said second terminal is illicit.

20. The electronic device of claim 19, wherein said at least one processor is further operative to:

facilitate said second terminal obtaining a combined data authentication signature from said electronic device, based at least in part on said electronic device-calculated value of said summary data item; and

facilitate said second terminal verifying said combined data authentication signature from said electronic device, based at least in part on a value of said summary data item calculated by said second terminal.

21. A computer program product comprising a tangible computer readable recordable storage medium including computer usable program code for integrated payment and electronic merchandise transfer via:

(i) a payment infrastructure, configured in accordance with a payment specification, in association with (ii) an electronic merchandise infrastructure, said computer program product including;

computer usable program code for facilitating interrogation of an electronic device by a first terminal to obtain an account number associated with said electronic device, said electronic device being configured according to the payment specification, said first terminal having a first terminal payment module configured according to the payment specification and a first terminal electronic merchandise module configured according to the electronic merchandise infrastructure and coupled to said first terminal payment module to permit transfer of non-payment e-merchandise related information from said first terminal electronic merchandise module to said first terminal payment module, said interrogation of said electronic device being performed by said first terminal payment module;

computer usable program code for facilitating generation of non-payment e-merchandise related information by said first terminal electronic merchandise module;

computer usable program code for facilitating transfer of said non-payment e-merchandise related information from said first terminal electronic merchandise module to said electronic device via said first terminal payment module, within a transaction between said electronic device and said first terminal payment module that is conducted in accordance said payment specification, said non-payment e-merchandise related information being stored on said electronic device in accordance with said payment specification;

computer usable program code for facilitating said electronic device and said first terminal independently calculating a summary data item; and

computer usable program code for facilitating said first terminal calculating a first message authentication code based on said non-payment e-merchandise related information and a terminal-calculated value of said summary data item;

wherein said non-payment e-merchandise related information is stored on said electronic device together with a electronic device-calculated value of said summary data item and said first message authentication code.

22. A system for integrated payment and electronic merchandise transfer via:

(i) a payment infrastructure, configured in accordance with a payment specification, in association with (ii) an electronic merchandise infrastructure, comprising;

means for facilitating interrogation of an electronic device by a first terminal to obtain an account number associated with said electronic device, said electronic device being configured according to the payment specification, said first terminal having a first terminal payment module configured according to the payment specification and a first terminal electronic merchandise module configured according to the electronic merchandise infrastructure and coupled to said first terminal payment module to permit transfer of non-payment e-merchandise related information from said first terminal electronic merchandise module to said first terminal payment module, said interrogation of said electronic device being performed by said first terminal payment module;

means for facilitating generation of said non-payment e-merchandise related information by said first terminal electronic merchandise module;

means for facilitating transfer of said non-payment e-merchandise related information from said first terminal electronic merchandise module to said electronic device via said first terminal payment module, within a transaction between said electronic device and said first terminal payment module that is conducted in accordance with said payment specification, said non-payment e-merchandise related information being stored on said electronic device in accordance with said payment specification;

means for facilitating said electronic device and said first terminal independently calculating a summary data item; and

means for facilitating said first terminal calculating a first message authentication code based on said non-payment e-merchandise related information and a terminal-calculated value of said summary data item;

wherein said non-payment e-merchandise related information is stored on said electronic device together with a electronic device-calculated value of said summary data item and said first message authentication code.