Electronic payment system and payment authorisation method

FIELD: physics, computer engineering.

SUBSTANCE: invention relates to an electronic payment system. The system comprises a virtual payment terminal in a user personal mobile device, having a virtual payment terminal control unit, a removable memory card on which there are at least two physically separate secure elements. The removable memory card is connected to the secure element containing the secure region of the virtual payment terminal. The mobile communication device and/or the separate portable element are adjusted in such a way to be able to connect to a remote payment processing server. The removable memory card and the separate portable element can be equipped with an NFC communication unit. Depending on the user choice, a corresponding secure element with payment card data selected by a payment card selection unit is activated on the removable memory card. Payment card identification data of the user are added to the identification data of the payment recipient together with a one-time password generated by a one-time password generating unit.

EFFECT: high reliability of payments owing to protection from unauthorised access.

10 cl, 2 dwg

The technical FIELD TO WHICH the INVENTION RELATES.

The invention relates to a system of electronic payments, especially payments through the mobile communication device, such as a mobile phone. The invention also describes the method of implementation and authorization of an electronic payment.

The LEVEL of TECHNOLOGY

Payment terminals are widely used in electronic payments using different payment cards. Terminals connected to the payment system. There are payment systems, payments which are made using payment terminals, which are maintained by organizations receiving payment.

The invention described in the patent CN 1450782, describes the interaction between the device and the payment terminal, which, however, does not provide security of committed payments. There is also a variant embodiment of the invention CN 101136123, in accordance with which the mobile phone is used for a password, but the phone does not perform the functions of a payment terminal.

The solution in accordance with the patent US 2002/0147658 A1 describes the relationship between the participants of the electronic payment process, however, does not affect the technical organization of individual elements. Other similar inventions, such as WO 03/012717 A1 and US 2007/0106564 A1, offer a way organisms is tion elements, but do not affect the question of specific technical implementation, which would provide sufficient security payments. The invention according to WO 2008/105703 describes the participation of the mobile phone to communicate with the payment terminal, however, does not provide enough secure storage of payment card in a mobile phone. Certain features of the communication between the mobile phone and the payment terminal is described in such patents as IE 980562, US 6450407 B1 and GB 2432031A. However, in these solutions not offered a convenient system to ensure the security of payments.

Existing tools do not allow you to create a personal portable payment terminals from public devices such as mobile phones. Known solutions, using the system of electronic payments through the payment terminal and the banks can not fully be used for processing payments in a developing Internet Commerce, as not all online stores are equipped with payment terminals.

DISCLOSURE of INVENTIONS

The above disadvantages can be avoided by using the payment system of electronic payments, which consists of a secure element, server, payment processing, mobile communication device with a display and keyboard, such as a mobile phone, as described in this invention. Use the Finance mobile phone implies, the mobile communication device equipped with a module virtual payment terminal. Functions of the payment terminal is equipped with a device that is in full possession of the user, and not the beneficiary, as in the existing solutions. Protected element with the encryption module and the storage module can be placed inside the mobile communication device, such as a mobile phone, or it can be made as a separate portable module in the form of USB keys. Key USB is connected to a personal computer through the USB connector. The mobile communication device also includes a removable memory card, for example, a common format microSD. Removable storage card contains at least two physically separate secure element, and a removable memory card is connected to the control module virtual terminal. Placement of protected items on a removable memory card creates the precondition, which provides opportunities to expand the capabilities of existing phones with the slot to insert the memory card. An important characteristic of the system described here has the hardware, the physical separation of the protected elements; a solution that gives you the ability to store data on payment cards, which belong to various financial institutions in reliable, safe and the nom. In the above-mentioned decision of the removable memory card can contain various functions of the payment card, and according to the number of protected items, it may even contain a secure area where you can store personal data or the like. Protected items on a removable memory card are connected with the control module, which translates the secure element in the active mode. The control module always activates the secure element with the selected payment card data. The device that hosts the secure element with the encryption module and the storage module, configured to be able to connect to the server payment processing. From the point of view of the payment processing system and related elements are organized in the same way as if the payments were made through the terminals belonging to the financial institutions. The encryption module and the storage module form a secure virtual terminal, located in the secure element. Within the system described electronic payments these modules can be placed on a printed circuit Board technical support mobile devices or in a separate portable element, which is adapted for connection to a personal computer. In the first case, the transmission channel between manojkarthi memory and control module virtual terminal contact and creates a conductive path with the technical support of mobile devices. In the second case, the transmission channel between the separate portable element and removable memory card with contactless (wireless). This basic configuration allows you to create a payment terminal directly to the mobile communication device of each user, such as in a mobile phone. Using the system described above, the user will be able to pay a non-contact way by using your phone or a phone that communicates with the personal computer. Since this decision will cause an increase in the number of payment terminals and since payment terminals will not only be managed by financial institutions, but basically, every mobile phone user, it would be reasonable, if the connection between the virtual terminal and the server processing payments passed first through the module packet data, and then output to the server payment processing. Individual payments from a large number of individual virtual terminals are the inputs for the module packet data. It is assumed that one virtual terminal will have a small number of payments. At the output of the module packet data will be a brief information the Oia received the payments in the batch mode.

The output will be similar to the existing situation, when one terminal carries out the processing of payments for different payment clients.

In the same secure element on the removable memory module is a one-time password, and at least one other protected element on the removable memory card has a storage unit of data on a payment card. Create a one-time password increases the protection level authorization and solve the problem of insufficient security keypad for PIN entry.

If the system has a secure element with a virtual terminal, stored on a separate portable element, it will be convenient if the data transmission channel between the separate portable element and removable memory card is NFC (Near Field Communication) is a wireless technology for small (up to several cm). In order to use mobile devices that do not have NFC functionality, for payments described above, the removable memory card can be equipped with NFC module, preferably even with the NFC antenna. A separate portable element is also equipped with NFC module with antenna. Using a similar design, the mobile communication device, originally not equipped with NFC module, can be used in the system when placing the removable section is ATA memory in the device. For ease of use by inserting a memory card with NFC module in slot a mobile communication device, it is preferable that the memory card also contains an antenna for communication with a separate portable element. However, in principle, the NFC antenna can be placed outside a removable memory card.

Regarding the proposed increase in the use of mobile communications devices to implement payment processes, preferably, if the mobile communication device will be equipped with start button the application of contactless payment. The button can be released by an icon of payment, perhaps a symbol of the local currency.

Deficiencies in existing technologies due to the large extent excluded by such authorization, payment, where the payment is instantly entered to the account of the payee; especially when conducting electronic payment method using a mobile phone with e-shopping with subsequent processing on a remote server payment processing. The object of this invention is based on the fact that the control module activates the corresponding secure element with the selected payment module card removable memory card in accordance with the user selection. Identification data of the payment card user are added to the ID the authorized data recipient's payment, as well as one-time password that was generated by the entered PIN-code in the module, create a one-time password. All these data electronically signed, and then electronically signed data is transferred either directly or through the storage device to the server payment processing. Preferably, if electronically signed data is encoded in the module coding virtual terminal before they are sent to the server payment processing.

The process, as described above, different from existing processes on the payment terminal, and also because the payment terminal in its virtual form contains the recipient of the payment, but on the contrary, the user paying for goods and services. And if the payment is not accepted for profit on the default account of this payment terminal, then the payment terminal also handles the identification data of the recipient, according to which the offset account to which payment must be received, shall be appointed on the server payment processing. The account of the recipient may serve as identification data. Electronically signed data is encoded in the module coding, which is included in the protected part of the virtual terminal before being sent to the server processing Board is A.

After successful payment the unique number of the transaction, confirming the implementation of the payment is received from the server payment processing management module virtual payment terminal in the mobile communication device.

At the beginning of the payment process control module virtual terminal in the mobile communication device receives the identification data of the recipient of payment, that payment could be routed correctly. It is preferable that the data transfer has been processed through the server communication processing on the Internet-store of the recipient of the payment. If a separate portable element is used, it is preferable that the data transfer channel between the separate portable element and removable memory card was the contactless type, preferably on the platform NFC connection.

In order to preserve the statistical structure of the data that arrive at the server payment processing and processed to the number of terminals was significantly increased, preferably, electronically signed data was sent to server payment processing through the module packet data, which centralizes connections to multiple modules virtual terminal.

The described system and method solves the problem of carrying out a convenient and secure electronic payments. Polzovateley.onlain manages virtual terminal, which is able to handle the payments, which are sent to different accounts.

BRIEF DESCRIPTION of DRAWINGS

The invention is explained in more detail in the drawings, figures 1 and 2. Figure 1, presents a scheme of the system with the mobile communication device that includes a secure element with the encryption module and the storage module.

Figure 2 represents a system with a separate portable element, which is connected to a personal computer through the USB connector. Before the server payment processing placed the module packet data.

EXAMPLES

Example 1

The system includes a mobile communication device 1, which is a mobile phone NOKIA 6131. On the hardware Board mobile communication device 1 is secured to the element 2. In this example, the mobile communication device 1 is a device in which there is a protected element 2 protected areas virtual payment terminal, the encryption module 12, and the storage module 13. Removable memory card 3 format microSD is inserted into the slot of the mobile communication device 1. Removable storage card 3 with the standard options, there are four protected element 2. Each of them physically and hardware separated from each other and independent. Removable storage card 3 there is also a control module that is used to translate the corresponding f the th element 2 in the active mode. The control module is responsible for the exceptional work of one protected element 2. In the same secure element 2 on a removable memory card 3 has a module 15 creating one-time password and the other three secure elements 2 modules 14 a payment card. In this example, they use a system of three different providers of electronic payment systems such as VISA, EC/MC, LGM. Protected element 2 with the protected area of the virtual payment terminal contains the encryption module 12 and the block data storage 13. Removable memory card 3 is connected via its contact to the mobile communication device 1, and through the circuit Board and the contacts of the mobile communication device 1 to the control module 4 virtual terminal. Communication between the removable memory card 3 and the secure element 2 with the protected area of the virtual payment terminal is provided via the contact connection Protocol ISO 7816. According to the data transmission network service provider of GSM standard in the format of GPRS mobile communication device 1 is connected to a remote server payment processing 10. Server payment processing 10 has the same configuration and function as in the payment system with a standard fixed payment terminals. Server payment processing 10 also connects to the database 11 financial institutions, such as banks that PR is leading payment which were implemented by the client from the account of the client.

Payment of purchases in the online store using the mobile communication device 1 with its own secure element 2 on the circuit Board of the mobile communication device with the protected areas virtual payment terminal is as shown below. The user activates the keyboard application for payment. The mobile communication device 1 is connected with the Internet network. Depending on the data stored on the removable memory card 3 separate secure elements 2, the user is prompted to make payment through various payment card (system). After payment card (system) has been selected, the control module activates the corresponding secure element 2 on a removable memory card 3. After a user requests a payment online store as the recipient of the payment, sends the request, along with your banking data to the remote server payment processing 10. In response, the online store (the seller) receives a unique number of the payment transaction, which is displayed on the customer display online store. Identification of the account of the online store (the seller) is carried out by comparing the identity of the payee to which the processing server PLA the hedgehogs 10 attaches the data Bank of the seller. Identification of the seller's account may also be implemented by passing a full banking identifies the seller data in the data stream.

After prompting the user enters a specified PIN on the keypad of the mobile communication device 1. This PIN is independent of the PIN that was assigned to the user by the system of the relevant payment card; PIN code, which is contained in the secure element 2 on a removable memory card 3. The PIN specified by the user, may act for all belonging to him, payment cards, as it does not depend on the data related to payment cards. The application in the secure element 2 sends data to the control module 4 virtual payment terminal in the same manner as if the transferred data in a standard fixed payment terminal. Once the correct PIN has been entered, the display window appears with the authorization number. The user enters the authorization number in the online form. The control module 4 virtual payment terminal, sends the PIN code generation module one-time password 15, which generates a one-time password, which is then stored in data storage module 13. The control module 4 virtual payment terminal enters the one-time password and the number of the transaction (payment) in the active selected protected element 2 with suitable the module card, where they are added to the user's banking information. At this point, the data file consists of the identification of the payment card data of the user, the identity of the payee and one-time password is signed. The control module 4 virtual payment terminal sends data to the encryption module 12, and the encrypted data is sent via GPRS to the server payment processing 10. There's the signature is checked and the password of the payment card. The payment is treated as paid for via the virtual payment card via the virtual payment terminal and without the PIN, because the PIN has already been verified by a module to generate one-time password. If the payment is authorized, the authorization code in the form of a unique number to the transaction (payment) is generated on the server payment processing 10. This code will be added to other payment data in the database server. At the same time, the unique number of the transaction is sent via GPRS to the control module 4 virtual payment terminal in the mobile communication device 1. In this example, the authorization code is displayed on the display of the mobile communication device 1; the user enters it in the appropriate box in the online store (the seller). Sold through its own communication channel, sends the transaction code and the authorization code to the server processing the payment is 10. The seller informs the user about the results of the verification (validation). If the verification is positive, the payment is completed by a command sent by the server payment processing 10 the appropriate database 11 financial institutions. There the user account debetowa on the amount of ongoing payments.

Example 2

In this example, a device that contains a protected member 2 protected areas virtual payment terminal, a separate portable element 6 with the USB connector. The data transmission channel 5 between the separate portable element 6 and the removable memory card 3 without contact. A separate portable element 6 is equipped with NFC communication module 7 with the antenna 8. Removable memory card 3 is equipped with NFC communication module 7, including NFC antenna 8. The mobile communication device 1 is equipped with a special key (button) to start the application of electronic payment. This key caused the EURO currency symbol.

The mobile communication device 1 includes the control module 4 virtual payment guiding module of the terminal, which is connected with the removable memory card 3. Removable memory card 3 are three physically separate secure elements 2. Removable memory card 3 is connected to the protected element 2 on a separate portable element 6 through the control module 4 virtual payment was terminal the communication of the NFC standard. A separate portable element 6 is configured to be able to connect to the remote server payment processing 10 using a personal computer. A separate portable element 6 is connected with a personal computer using a USB connection. Before the server payment processing module 10 is a packet data 9. The module packet data 9 is administered by the Manager of the payment system, which enables communication between the module packet data 9 and the server payment processing 10.

After the user activates the payment process, the seller (online store) sends a request along with your banking data to the server payment processing 10. In response, he receives a unique number of the transaction that the seller sends a separate portable element 6 via the USB port. By pressing with the EURO sign, the user confirms the payment process. The control module 4 virtual payment terminal in the mobile communication device 1 recognizes that it is a payment via a personal computer connected with a separate portable element 6, and is not acting as in example 1. The control module 4 virtual payment terminal requests that the user has entered the PIN code for generating one-time password, which is then fed to storage in C is diseny element 2 on a removable memory card 3. The control module 4 virtual payment terminal prompts the user to bring his mobile communication device 1 to a separate portable element 6. After that, the number of the transaction transmitted by the communication standard NFC secure element 2 on a removable memory card 3. There, the data is padded with Bank account data. All data shall be signed by the card and sent in a separate portable element 6, which sends them to the server payment processing 10. There signature passes the verification process (check), check the password and payment is authorized. The payment is treated as a payment for virtual card via the virtual terminal and as payment without the PIN, because the PIN has already been verified by a module to generate one-time password 15. In case of positive verification and authorization server payment processing 10 generates an authorization code, which is sent to the control module 4 to the mobile communication device 1, where it is displayed on the display screen, or even on the monitor of a personal computer. The user logs in, copy the authorization code in the appropriate box online store. The online store sends payment code and authorization code to the server payment processing to check and informs the user about the result.

INDUSTRIAL APPLICABILITY

The convenience is obvious. The agreement is but the invention may create and use a system of electronic payments, in which the user uses the mobile communication device as an instrument of payment. The user disposes of its own payment terminal in its mobile communication device or use this system when you connect mobile devices to a separate portable element.

List of the USED NOTATION:

1 - device mobile communication

2 - reserved

3, a removable memory card

4 - the control module virtual payment terminal

5 - channel data

6 - separate portable element

7 - NFC communication module

8 - antenna

9 - module packet data

10 - server payment processing

11 is a database of financial institutions

12 - module encoding

13 - storage module

14 module data about the card (system)

15 module generate one-time password

1. The system of electronic payments, which contains the mobile communication device, made of display printing hardware card and removable memory card placed in the slot of the mobile communication device, as well as with a keyboard configured to input user-selected PIN code and run the application electronic payment using a remote server payment processing, and printing hardware-the Board is made with virtual the payment terminal, equipped with a control module virtual payment terminal and associated with the secure element with the protected area of the virtual terminal which includes a storage module and the encryption module to transmit the encoded data over the Internet to the server payment processing, when the removable memory card is connected with the control module virtual payment terminal and executed independent from each other secure elements, one secure element memory card equipped with a module create a one-time password, and at least one other secure element memory card equipped with a module activate one of the payment card user associated with the said module to generate one-time password and the control module virtual payment terminal

2. An electronic payment system according to claim 1, wherein the secure element with the protected area of the virtual payment terminal is located on the printed circuit Board of the mobile communication device and associated contact data channel modules removable memory card.

3. An electronic payment system according to claim 1, wherein the secure element with the protected area of the virtual payment terminal located in a separate portable device and associated contactless data transmission channel with modules smann the second memory card.

4. An electronic payment system according to claim 3, characterized in that the contactless data transmission channel is made in the form of channel NFC, and a separate portable device configured to connect through the computer to the server payment processing.

5. An electronic payment system according to claim 4, characterized in that the removable memory card is equipped with a communication module channel NFC, and a separate portable device equipped with the antenna and the communication module channel.

6. An electronic payment system according to any one of claims 1 to 3, characterized in that before the server payment processing module is placed packet data, which is made with centralized connection with multiple modules virtual payment terminal.

7. An electronic payment system according to any one of claims 1 to 5, characterized in that the mobile communication device is equipped with a separate key to run the application, electronic payment, and on the key shows the special character of the payment.

8. The authorization method of payment carried out by the system according to claim 1, wherein the user selects the purchase item, and then using his mobile communication device, a hardware Board which is made with a virtual payment terminal and associated secure element with the protected area of the virtual payment terminal, selects for payment the art and transmits via the Internet a request to the online store for purchasing, as well as information about the selected card and the payment for processing on a remote server payment processing to identify accounts online store and user, and obtain a unique non payment transactions transmitted to both the user and the online store, virtual payment terminal provides authorization number and to select a payment card, the user activates the corresponding secure element selection module payment card removable memory card of the mobile device, the control module virtual payment terminal to which the payment data on the identity of the payee and one-time password that is generated by the generation module one-time password plug-in cards, added the number of the transaction and identification information of a payment card of the user; these data signed and then sent in coded form via the server processing payments in the database of the financial institution to whom a payment card, to write off the payment amount.

9. How to authorize payment of claim 8, wherein the control module virtual payment terminal in the mobile communication device receives from the financial institution the unique transaction number confirming that payment has been made.

10. Way autorizati the payment on any of PP, 9, wherein the secure element with the protected area of the virtual payment terminal located in a separate portable device and associated non-contact transmission channel in the form of a channel NFC data modules removable memory card.