专利摘要:
In a method for making cashless payments by means of mobile telecommunication terminals and at least one electronic payment processing station, each telecommunication terminal having stored a subscriber identifier and the payment processing station has stored the subscriber identifiers of the participating telecommunication terminals and the subscriber identifiers respectively assigned payment limits, the payment transaction is based on a transaction code generated by the payment processing center, which is transmitted to the mobile telecommunication terminal, from there to the cashier system of the payee and from there together with the payment amount to the payment processing center, where the transaction code is checked and the payment amount is compared with the respective payment limit.
公开号:AT512070A1
申请号:T1649/2011
申请日:2011-11-08
公开日:2013-05-15
发明作者:
申请人:Secure Payment Technologies Gmbh;
IPC主号:
专利说明:

The invention relates to a method and a device for performing cashless payments by means of mobile telecommunication terminals.
Cashless payment is usually through credit institutions and involves payments in the form of book money between current accounts where no cash is moved. The customer's account will be debited with the payment amount and the recipient will have a corresponding credit note in his account. The credit institutions bring the service of the transfer and usually receive a fee credit ev. In the context of Kontoführungspauschalen.
The order to make a cashless payment may be made either by the payee or by the payer. In the case of an order placed by the debtor, the latter carries out a transfer, for example by means of electronic banking. The commissioning by the payee is usually done by direct debit due to a corresponding contractual relationship between payee and payer. In addition to traditional bank transfer and direct debit, there are a variety of electronically based payment options, such as cash cards, debit cards and credit cards. The card payments generally use one of the above-mentioned basic payment methods. In most cases, the amounts are collected from the cardholder by means of guaranteed non-repayable direct debits and debited to his account. In addition to the function of cards as cashless means of payment, they serve mainly the
Cash collection and the credit card for short-term borrowing.
Although the aforementioned electronic-based payment options bring with them the advantage of fast and convenient payment as well as high security due to the low cash holdings, there are a number of disadvantages. For example, the effort for the usually required online authorization of the card used in the course of the payment process associated with a lot of effort. Online authorization requires a direct data connection from the payee's POS system to the card issuing bank's or bank's data center. Online authorization delays the payment process and causes data transfer costs. The payment process is further delayed by additional controls such as PIN entry, so that customer friendliness and efficiency are low. A disadvantage of the conventional payment method is further that a number of personal details of the debtor is announced, so there is a risk of misuse. In conventional electronic-based payment options, the payee is known, for example, the name of the cardholder, his card number and the PIN code. In the course of carrying out a transaction, additional data is added, such as the purchased item and the account number of the payer. Together with the aforementioned personal data, there is thus a clear assignment of different security-relevant and confidential data to individual persons, so that the risk of misuse of the data is great.
A conventional payment transaction with an electronic payment card usually proceeds as follows: 1) Amount is input 2) Card is requested and read by the card reader. The security module is activated and requires the entry of the PIN. 3) The communication module establishes the connection to the provider and registers there for the data exchange. 4) Plausibility checks are carried out via the communication connection via data exchange. 5) By online connection with the bank, it is checked whether a) there is no entry of the card used in the lock file; b) the entered PIN is correct; c) the payment amount is within the available financial envelope. The payment will be rejected if one of the conditions is not met. 6) The communication module logs off the provider and terminates the connection. Some terminals are always online. 7} The printer creates a record of payment or
Repellency. The display shows the corresponding. 8) The result " Payment " guarantees the merchant his payment.
The present invention now aims to improve a method and a device of the type mentioned in that the effort for the authorization and the risk of data misuse are reduced. The cashless payment should be easy with the help of mobile telecommunication terminals
without compromising the security of the payment transaction.
Straight mobile telecommunications terminals are particularly vulnerable from a security point of view, because they can be easily stolen and have no sophisticated security technologies (firewall, etc.).
To solve this problem, a method for performing cashless payments by means of mobile telecommunication terminals and at least one electronic payment processing center is provided according to a first aspect of the invention, each Telekomraunikationsendgerät has stored a subscriber identifier and the payment processing center, the participant identifiers of the participating
A) generating a payment transaction specific transaction code using an algorithm, b) storing the transaction code and assigning the transaction code to a subscriber identifier and the payment limit associated therewith, c) transmitting the Transaction codes to a mobile telecommunication terminal, d) transmitting the transaction code from the mobile telecommunication terminal to a payee cashier system as part of a cashless payment transaction, e) transmitting a record from the POS system to the payment processing station, wherein the record
♦ * M contains at least the transaction code and the desired payment amount, f) g) h) i)
Authorization of the transaction code in the payment processing agency,
Determining the payment limit associated with the transaction code,
Releasing the payment if the requested payment amount is within the assigned payment limit,
Saving the approved payment in the payment processing center for a later or immediate cause of a debit order.
In the context of the invention, the authorization of the payment thus takes place primarily in the payment processing center. In this case, the authorization of the transaction code preferably comprises the comparison of the transaction code transmitted from the POS system to the payment processing center with the transaction codes stored in step b).
Only in the case of a failure of the data connection between the POS system and the payment processing center, the authorization of the payment in the POS system. In this case, the need for a permanent online connection to a bank is eliminated. If the transmission of the data record according to step e) fails, the procedure is preferably as follows: the desired payment amount is compared with a general payment limit stored in the POS system, the payment is released if the desired payment amount is within the general payment limit and the transaction code is valid, and the released payment will be in the cash register system for a later or immediate transfer to the
Payment processing agency stored for initiating a debit order. In this case, the authorization of the transaction code preferably comprises checking the validity of the transaction code in the checkout system using a check algorithm stored in the checkout system in order to determine whether the transaction code has been created by the payment processing point.
The fact that the general payment limit per transaction code is checked in the POS system or in a program extension of the POS system, the payee is the general payment limit of the payment solution available, without any query or control at the card issuing institution or at the bank is required.
If the banking network changes the payment limit of an account which is connected to a telecommunication terminal, this is preferably reported directly to the payment processing center. The
Payment processing agency changes due to this message, the payment limit of the already delivered to the telecommunication terminal transaction codes of the payer concerned in the database.
This ensures that transaction codes already in circulation can be given a new limit at any time. Since the authorization of the payment is preferred in the payment processing center and this is the current payment limit of each
Who knows the debtor, it can be ensured that only the current
Payment limits are used without having to exchange the already sent transaction codes.
To authenticate the mobile
Telecommunications terminal of the debtor, the transaction code is used, which is generated before the execution of the payment process and was transmitted to the mobile telecommunications terminal of the debtor. In the payee's POS system or in a POS enhancement, in a preferred policy, the transaction code may be validated in advance using a stored check algorithm, with the payment processing point being forwarded only if the validity check has been completed positively. Thus, only the check algorithm stored in the checkout system is required for validation, whereby the check algorithm can be renewed at regular intervals to increase security.
The debtor is identified solely on the basis of the transaction code transmitted during the payment process. Person-specific data is not available to the payee as part of the payment process, so that the highest possible level of data protection can be achieved, especially if the transaction code is neither the number of a credit, debit or cash card nor the number of a bank account. Furthermore, if the transaction code is not related to a telephone number of the mobile telecommunication terminal, no assignment to a specific person can take place in this way. »:»: •: • • • · · · · · · · · · · · · · · · · · · ·
If the authorization or release of the payment occurs in the event of a breakdown of the data connection between the POS system and the payment processing center in the vicinity of the POS system, a large number of payments can be collected in the POS system before the payments are passed on for the actual execution of the transfer or for direct debit become.
In the majority of cases there will be a data connection between the POS system and the payment processing center. In this case, the payments will be forwarded to the Payments Agent immediately.
A preferred procedure in this context provides that the reason for the booking order comprises the following steps:
Determining the subscriber code and the payment amount from the payment processing point to a banking network as part of a debit order, transmitted by the POS system to the payment processing point, and person-specific account numbers and subscriber identifications in the bank network or in an interface between the banking network and the payment processing point are assigned to each other and assigned by the
Payment processing center transmitted subscriber identifier is assigned to the corresponding account number and a debit is made from an account using the account number. • φ 9 * f 9 • ♦ • 9 99 *: 9 9 9 • 99 99 • 9 i ·· «44» · 99 99 * 9% ·· 99 • 9% 9 9 9 * · 9 9
It is essential that also the
Payment processing agency has no personal data in the sense of data protection. The payment processing center only has records made available by the cash register system which contain at least the transaction code and the payment amount. As a rule, the data record also contains other data enabling the payment process, such as an identification of the payee and the like
Payment processing center either directly or indirectly transmitted to a banking network, only there is the assignment of the subscriber identifier to an account number. This means that only with the bank the assignment of the payment to a certain person can take place. To further increase the security is preferably provided that the person-specific account number is a virtual account number, virtual account numbers and real account numbers are stored in the banking network assigned to each other and assigned as part of a debit order the virtual account number of the corresponding real account number. The subscriber identifier is thus not directly in a real account number of
But a virtual account number is interposed, so that even in the possibly used interface between the banking network and the payment processing agency, the actual person-specific account number of the debtor is not available. Rather, the translation of the subscriber identifier into a virtual account number takes place in said interface, so that even in the event that the payment processing agency would gain access to the data records of the interface in an inadmissible manner, no useable personal data could be obtained. Only after the forwarding of the payment data records to the bank is a translation of the virtual account number into the real account number made, so that an allocation of the payment to a specific person actually only in the bank itself is possible.
The data transfer between the mobile
Telecommunication terminal and the POS system can be done using conventional data transmission standards, for which the majority of
Telecommunication terminal equipment is equipped. For example, modern mobile phones have the option of a Bluetooth, WLAN or NFC connection. However, this requires an appropriate retrofitting of existing POS systems in order to achieve the respectively required hardware adaptation and to implement the respective transmission protocols by software. In order to reduce the related effort and at the same time to realize the most secure and no additional equipment requiring data transmission, it is preferably provided that the code is an opto-electronically readable code, in particular a bar code, which is displayed on a display unit of the mobile telecommunication terminal. Such opto-electronically readable code, in particular a bar code, can be read out with conventional and widespread bar code scanners on the display unit of the telecommunication terminal. However, the system according to the invention can also be used without problems by means of NFC technology or another transmission technology at the POS (point of sale). 11
The verification of the validity of the data provided by the debtor based in the context of the inventive method mainly on the transmitted transaction code. The transaction code is thereby generated using an algorithm and, in the case of temporary unavailability of the payment processing point in the POS system, using a check algorithm to check whether the transaction code a} has been generated by the payment processing point and b) is within the general payment limit for transaction codes. A particularly preferred embodiment results here when the test algorithm and the algorithm used for the generation of the transaction code are matched to one another. This means that the checking algorithm and the algorithm used to generate the transaction code must be mathematically linked such that the checking algorithm only validates those transactions that were generated using the algorithm provided for generating the transaction code. In order to increase security, it is preferably provided that the algorithm used for generating the transaction code is stored in the payment processing station. The algorithm used to generate the transaction code is thus outside the influence of the debtor, making manipulation more difficult. Preferably, it is further provided that the transaction code is generated in the payment processing center. 12
It is conceivable that the respective payment limit is provided by the debtor with each payment transaction, so that on the part of the payee, the cost of the relevant review deleted · In the simplest case, the payment limit can be set by the debtor itself, for example, by setting a default value in the mobile telecommunication terminal can be done. The setting of the payment limit can also be made separately for each payment. However, the setting of the payment limit by the debtor has the disadvantage that the corresponding cover on the account is not guaranteed. Preferably, it is therefore provided that the payment limits are managed centrally. In this case, it is preferably provided that the subscriber identifications are stored in the payment processing station and each subscriber identifier is assigned a respective payment limit. It is particularly preferred if the payment limit associated with a subscriber identifier in the payment processing station is matched with a stored payment limit assigned to the respective subscriber identifier in a banking network.
In order to ensure that the current payment limit is available for a payment transaction, the procedure according to the invention can be such that a payment limit set to 0 after a matching process corresponds to the mobile payment corresponding to the subscriber identifier
Telecommunications terminal is passed in such a way that the telecommunication terminal receives no new transaction code transmitted and the existing transaction code is deleted on the program application. 13
To further increase security, it is preferably provided that the application loads the transaction code from a memory before it is transmitted to the POS system and when loading the transaction code a time stamp is generated, which is transmitted to the payment processing center and stored associated with the transaction code and the authorization of the Transaction codes in the payment processing center according to step f) comprises the comparison of the time stamp with the current time, wherein releasing the payment according to step h) is carried out under the additional condition that the difference between the current time and the time stamp does not exceed a defined value. When a transaction code is opened in the program application, a time stamp is thus additionally created and reported to the payment processing point. This time stamp is stored in the database. Transaction codes have a defined validity period.
The payment processing center can use the time stamp to reject transaction codes that have exceeded this validity period.
The functions required for carrying out the cashless payment procedure are designed such that they can be readily implemented on conventional mobile telephones. A particularly convenient and user-friendly embodiment provides here that the process steps that can be carried out on the mobile telecommunication terminal are implemented in a program application loadable on the device. Such a program application can simultaneously provide a correspondingly user-friendly and appealing user interface. The function of coding the data to be transmitted can also be included in the program application... * * * * * * * * * * * * * * * * * * «· · · · * * "Μ" f be implemented, wherein a correspondingly large-area display element also allows the preferred provided display of a bar code. Furthermore, the subscriber application can be embedded in the program application in a simple manner, wherein provision is preferably made in this connection for the subscriber identifier to be an application-specific identifier which is generated, for example, by the banking network and stored in the program application. To increase security, it may further be preferred for the application to initiate a PIN request before the transmission of the transaction code from the mobile telecommunication terminal to the POS system and for the transmission to take place only if the PIN is entered correctly. The process can be provided in detail, for example, as follows: a) The application receives the transaction code at a time when the mobile phone is online - possibly long before the application is activated for payment. b) If the PIN is entered in the application, it is preferably checked again whether the transaction code already held ready in the application is in line with the payment limit. If the payment limit has been set to 0 in the meantime, the application will not receive a new transaction code and the transaction code available on the application will be deleted.
In this case, the application can no longer be used for payment. c) If the payment limit is outdated, the old transaction code is replaced with a new one. 15 d) If no online connection is available at the time of PIN entry, the ready-to-use transaction code will be used.
Mobile phones can be relatively easily stolen compared to stand-alone computers or notebooks and usually do not have security devices such as firewalls. Thus, the mobile phone provides more attack surface for hackers and easier readability of the stored content, such as. sensitive data. In order to ensure that the program application on the mobile phone is not manipulated, copied or misused, it is preferably provided that when generating a transaction code according to step a) a check code is generated and stored associated with the transaction code, that upon transmission of the transaction code the mobile telecommunication terminal according to step c) is transmitted at the same time the check code that with the request of a new transaction code by the mobile telecommunication terminal to the payment processing center, the check code is returned to the payment processing unit, that the check code is compared in the payment processing center with the stored there check code and the Transmission of the new transaction code to the mobile telecommunication terminal is released when the returned and the stored check code match. The check code is advantageously a 72-digit hexadecimal value, which is created in the payment processing point and stored on the mobile telecommunication terminal in a secure element. The check code represents one
Identification parameter of the program application for the
Payments processing center, which changes with each query, the functionality of the program application occupied and the integrity of the program application (not manipulated, not hacked, program application was not relocated to another mobile phone) occupied.
To ensure that the program application also works when the mobile telecommunication terminal has no data connection, the program application can store more than one transaction code in a secure element on the mobile phone. The stored transaction codes are based on the principle "First In - First Out". called by the program application. If the mobile can re-establish a data connection, the " Transaction Code Warehouse " refilled on the mobile phone. In this context, the method according to the invention is preferably carried out such that in steps a), b) and c) at least two transaction codes are generated, transmitted and stored in the mobile communication terminal.
According to a second aspect of the invention, an apparatus for making cashless payments by means of mobile telecommunication terminals is proposed, comprising an electronic payment processing center and at least one electronic cash register system of a payee, wherein the payment processing center has at least one database, the subscriber identifications of mobile telecommunication terminals and payment limits associated with the subscriber identifications has stored a transaction code generator which generates a transaction code specific to the respective payment transaction using an algorithm... 9 ·······················································. ··· · * ·· Μ and transmission means for transmitting the transaction code to the mobile telecommunication terminal, and wherein the POS system is adapted to receive the transmitted as part of a cashless payment transaction from a mobile telecommunication terminal transaction code, the POS system having input means to enter a payment amount, the checkout system further comprising transferring means for transferring a record comprising the transaction code and the payment amount to the payment processing station, wherein the
Payment processing center has processing means which are adapted to authorize the received transaction code and to determine the payment limit associated with the transaction code, wherein the
Payment processing station further comprises release means to release the payment, if the following conditions are met: the desired payment amount is within the payment limit and the transaction code is valid, the payment processing unit further having a memory for storing the released payment, the storage cooperating with transfer means to pass on the payment later or immediately to initiate a debit order.
Preferred developments of the devices according to the invention are defined in the subclaims.
The invention will be explained in more detail with reference to an embodiment schematically illustrated in the drawing. 1 with a cash register system of a payee is referred to, comprising at least one cash register 2, which is connected to a central
Cash register server 3 is connected. The cash register server 3 can be located locally at the location of the cash register 2. Particularly in the case of cash register systems with a multiplicity of spatially distributed cash registers 2, the cash register server 3 can also be arranged at a remote location. The cash register server 3 is a conventional accounting system to which data of the payments processed by the individual cash registers 2 are transmitted. Typically, the payment amount, an identification of the cash register 2 as well as the time of payment are transmitted for each payment. The cash registers are suitable for both cash payments and electronic cashless payments. The connections of the individual cash registers 2 to the checkout server 3 via conventional protocols, such as an XML web service.
The conventional POS server 3 is supplemented in the present embodiment by a program extension 4, which allows the implementation of the present invention.
A mobile telecommunication terminal of a user is designated 5. This is a conventional mobile phone, in particular smartphones are suitable. On the mobile telecommunication terminal 5, a program application 6 is installed, which allows the processing of the cashless payment method according to the invention.
The central payment processing point is denoted by 7 and comprises a payment server 8 and a database 9. The payment processing point 7 can establish a data connection both to the POS system 1 and to the mobile telecommunication terminal 5.
Furthermore, the payment processing point 7 is connected to an exchange server 10, which in turn communicates with a bank 11 or corresponding electronic banking networks.
The processing of a cashless payment according to the present invention from the point of view of a customer who wants to make a cashless payment is as follows. This assumes that the customer maintains an account with a bank. First, the bank customer has to program application 6 on his mobile
Telecommunications terminal 5 load. Preferably, this is done so that the bank customer logs into the online banking area of his bank and there connects the program application 6 with his bank account. Once the customer has the program application 6 on his mobile
Telecommunications terminal 5 has loaded and installed there, the terminal 5 is ready for cashless payment transactions. Previously, a subscriber identifier generated by the bank 11 was stored in the program application 6.
The storage process can be carried out either due to a manual input of the subscriber identifier by the customer or may already have been stored on the bank side in the program application provided for downloading. It is essential that the subscriber identifier is a unique and unique identifier, so that it is subsequently possible to clearly identify the subscriber based on the subscriber identifier. · ♦ · ♦ · · ι 20 • * · · I · • ·· Μ
If the customer wants to pay cashless in a shop, he opens the program application 6 on his mobile telecommunication terminal 5 by means of a PIN request. The program application represents on the display unit of the mobile telecommunication terminal 5 a disposable barcode, which is read by a barcode reader of the cash register 2. The transaction code transmitted in this way is transmitted from the POS system 3 to the payment processing point 7 and checked there. In the event that the payment processing center 7 is not reachable, the transaction code in the program extension 4 is checked for validity. If the check was positive, the barcode will be accepted as payment and the payment amount will be withdrawn from the customer's bank account.
In order to enable the cashless payment process described above, the technical implementation is provided as follows. The bank 11 is connected to the payment processing point 7 via the exchange server 10. When a bank customer downloads the program application 6, this is reported by the bank 11 to the payment processing point 7. In this case, the bank 11 first transmits the subscriber identifier assigned to the bank customer together with an anonymous virtual account number to the exchange server 10. The virtual account number is not the real account number of the checking account maintained by the subscriber at the bank 11. In the exchange server 10, the subscriber identifier and the subscriber identifier respectively associated virtual account number is stored. The payment processing center 7 receives transmitted in the sequence only the subscriber identifier. As a result, the payment processing point 7 does not have any real account data of the 21
· »· * · · # * * · ·«
Bank customers so that in the
Payment processing point 7 existing data are fundamentally anonymous, which means that the security standard in the payment processing 7 and also in the POS system 1 can be chosen lower and that any data theft does not bring any usable or personal data. The further data exchange between the payment processing point 7 and the bank 11 takes place exclusively via the virtual account number, i. under the intermediation of the exchange server 10,
Together with the subscriber identifier, the bank 11 sends the payment account associated with the relevant account to the payment processing point 7. If the payment limit of a customer changes as a result, the bank 11 can send a new payment limit to the payment processing point 7 via the interface server 10 at any time.
The payment processing center 7 has stored the subscriber identifier and the respective assigned payment limit in the database 9. This data is transmitted to the payment server 8, which comprises a transaction code generator with which unique transaction codes can be created using an algorithm stored in the payment server 8. To prepare a cashless payment transaction with the help of mobile
Telecommunications terminal 5, the payment server 8 generates a transaction code and stored it so that it is associated with a subscriber identifier and the respective payment limit. Then, the payment server 8 transmits the transaction code to the program application 6 of the mobile
Telecommunications terminal 5 in the form of a bar code, wherein it is checked whether the subscriber identifier of the program application corresponds to that subscriber identifier that is stored as assigned to the transaction code to be transmitted in the payment server. The data transmission can either take place at the request of the program application 6 or be initiated by the payment server 8.
The program application 6 subsequently displays the transaction code in the form of a barcode on the display unit of the mobile telecommunication terminal 5. The cash register 2 scans the displayed barcode with the aid of a barcode scanner and transmits it together with the desired payment amount to the cash register server 3. The cash register server 3 implemented program extension 4 forwards the transmitted transaction code and the payment amount to the payment processing point 7 for checking.
In the payment processing point 7 is then checked whether the transaction code received from the POS system corresponds to a transaction code stored in the payment server. If so, the payment limit associated with the transaction code stored in the payment server is determined and a check is made as to whether the desired payment amount is within the payment limit. If both exams have been completed successfully, the payment processor 7 will report that the payment can be accepted.
In the event that the payment processing center is unreachable from the point of sale system, the program extension 4 can be retrieved using a locally stored • 9 23 • 9 23
• ft • ··· * ftft ··· > * ft 9 «· · · * · * · · · * 9 · ·« m 9 ·· ···· ftft ft »
Check algorithm, whether the transmitted transaction code was generated by the payment processing agency and if the payment amount is within the general payment limit. After a positive verification of the payment, the cash register system 3 or the program extension 4 reports to the cash register 2 that the payment can be accepted. Once the data connection between the cash register system 3 and the payment processing center is restored, the payment-relevant data of the released payments are forwarded to the payment processing point 7 for initiating debit orders. The checkout system 3 is connected to the payment server 8, whereby the check algorithm stored in the checkout system 3 can be changed at any time.
If the payment has been released, the transaction code and additionally the payment amount and other payment-relevant data such as an identification of the cash register and the merchant in the database 9 is stored. After receiving these data in the database 9, the generation of a new transaction code by the payment server 8 and the transmission of the same to the program application 6 of the relevant customer is released, so that a new cashless payment transaction can be initiated. Furthermore, the payment processing center 7 transmits a data record containing the subscriber identifier, the payment amount and an identification of the merchant and possibly the time stamp, an invoice number and further payment-relevant data to the exchange server 10. The exchange server 10 can assign the subscriber identifier to a virtual account number and sends a debit order as well as the transaction details together 24 24 «« «i *« t · # | tv; ·: ··················! »* · · ·········· # with the virtual account number to Bank 11 or to a corresponding banking network. In bank 11, the virtual account number is used to assign the customer's real account and the account is debited with the corresponding payment amount.
权利要求:
Claims (33)
[1]


25:: * * • * Claims: 1. A method for making cashless payments by means of mobile telecommunication terminals and at least one electronic payment processing unit, each telecommunication terminal having stored a subscriber identifier and the payment processing unit storing the subscriber identifiers of the participating telecommunication terminals and the subscriber identifiers respectively associated payment limits a) generating a transaction code specific to the payment transaction using an algorithm, b) storing the transaction code and assigning the transaction code to a subscriber identifier and the payment limit associated therewith, c) transmitting the transaction code to a mobile telecommunication terminal, d ) Transmission of the transaction code from the mobile telecommunication terminal to a cash register system of the payee as part of a cashless payment method e) transferring a record from the point-of-sale system to the payment processing center, the record containing at least the transaction code and the desired payment amount, f) authorizing the transaction code in the payment processing center, g) determining the payment limit associated with the transaction code, h) releasing the payment, if the desired payment amount is within the assigned payment limit, i) storing the released payment in the payment processing office for later or immediate initiation of a debit order.
[2]
2. The method according to claim 1, characterized in that the authorization of the transaction code comprises the adjustment of the transaction code transmitted from the POS system to the payment processing center with the transaction codes stored in step b).
[3]
3. The method according to claim 1, characterized in that in a failure of the transmission of the record according to step e) the authorization of the Taktionsaktionscodes according to step f) takes place in the POS system, the desired payment amount is compared with a stored in the POS system general payment limit, the payment released is when the desired payment amount is within the general payment limit and the transaction code is valid, and the released payment is stored in the POS system for later or immediate transfer to the payment processing center for initiating a debit order.
[4]
4. The method according to claim 3, characterized in that the authorization of the transaction code comprises the verification of the validity of the transaction code in the POS system using a check algorithm stored in the POS system to determine whether the transaction code has been created by the payment processing center.

«· · 9 · * ·« «···« «* * * ··· * *» »»
[5]
5. The method according to any one of claims 1 to 4, characterized in that the instigation of the booking order comprises the following steps: Determining the transmitted from the POS system to the payment processing agency transaction code in the payment processing center associated subscriber identifier and submit the subscriber identifier and the payment amount from the payment processing center to a Bank network as part of a debit order, wherein in the banking network or in an interface between the banking network and the payment processing person-specific account numbers and subscriber identifiers are stored associated with each other and assigned by the payment processing agency subscriber identifier is assigned to the corresponding account number and made a debit from an account using the account number becomes.
[6]
6. The method according to claim 5, characterized in that the person-specific account number is a virtual account number, wherein virtual account numbers and real account numbers are stored in the banking network assigned to each other and in the context of a debit order, the virtual account number of the corresponding real account number is assigned
[7]
7. The method according to claim 4, characterized in that the transaction code is an opto-electronically readable code, in particular a bar code, which is displayed on a display unit of the mobile telecommunication terminal. 28 • i t I • ·
[8]
8. The method according to any one of claims 4 to 7, characterized in that the checking algorithm and the algorithm used for the generation of the transaction code are matched to each other.
[9]
9. The method according to any one of claims 1 to 8, characterized in that the algorithm used for the generation of the transaction code is stored in the payment processing center.
[10]
10. The method according to any one of claims 4 to 9, characterized in that the test algorithm generated in the payment processing center and to the POS system, in particular a program extension of the POS system, is transmitted.
[11]
11. The method according to any one of claims 1 to 10, characterized in that the transaction code is generated in the Sahlungsabwicklungsstelle.
[12]
12. The method according to any one of claims 1 to 11, characterized in that the subscriber identifier is a device-specific identifier.
[13]
13. The method according to any one of claims 1 to 12, characterized in that the payment limit assigned to a subscriber identifier in the payment processing center is matched with a payment limit stored in the respective subnose recognition in a banking network.
[14]
14. The method according to any one of claims 1 to 13, characterized in that the mobile telecommunication terminal executable process steps are implemented in a loadable on the device program application.
[15]
15. The method according to claim 14, characterized in that the subscriber identifier is an application-specific identifier, which is stored by the banking network stored in the program application.
[16]
16. The method according to claim 14 or 15, characterized in that the application before the transmission of the transaction code from the mobile telecommunication terminal to the POS system starts a PIN request and the transmission takes place only with correct PIN entry.
[17]
17. The method according to any one of claims 14 to 16, characterized in that the application loads the transaction code before it is transmitted to the POS system from a memory and when loading the transaction code, a time stamp is generated, which is transmitted to the payment processing center and stored associated with the transaction code and that the authorization of the transaction code in the payment processing center according to step f) comprises the comparison of the time stamp with the current time, whereby releasing the payment according to step h) takes place under the additional condition that the difference between the current time and the time stamp has a defined value does not exceed.
[18]
18. The method according to any one of claims 1 to 17, characterized in that generated in the generation of a transaction code according to step a) a check code and associated with the transaction code that in the transmission of the transaction code to the mobile telecommunication terminal according to step c) at the same time Verification code is transmitted that with the request of a new transaction code by the mobile telecommunication terminal to the payment processing center, the check code is returned to the payment processing unit, that the check code is compared in the payment processing with the check code stored there and released the transmission of the new transaction code to the mobile telecommunication terminal when the returned and the stored check code match.
[19]
19. The method according to any one of claims 1 to 18, characterized in that in steps a), b) and c) generates at least two transaction codes, transmitted and stored in the mobile communication terminal.
[20]
20. A device for making cashless payments, by means of mobile telecommunication terminals (5), in particular for carrying out a method according to one of claims 1 to 19, comprising an electronic payment processing center (7) and at least one electronic cash register system (1) of a payee, wherein the payment processing point (7) has at least one database (9) which stores subscriber identifications of mobile telecommunication terminals and payment limits assigned to the subscriber identifiers, a transaction code generator which generates a transaction code specific to the respective payment transaction using an algorithm, and transmission means for transmitting the transaction code to 31 The mobile telecommunications terminal (5), and wherein the POS system (1) is adapted to the in a cashless payment transaction of. English:. T · ft · t · · · · · · ·a transaction code transmitted to a mobile telecommunications terminal (5), the cash register system (1) having input means for inputting a payment amount, the checkout system (1) further comprising transferring a record comprising the transaction code and the payment amount to the payment processing station (7 ), the payment processing point (7) having processing means arranged to authorize the received transaction code and to determine the payment limit associated with the transaction code, the payment processing unit further comprising release means for releasing the payment if the following conditions are met; the desired payment amount is within the payment limit and the transaction code is valid, the payment processing unit (7) further comprising a memory for storing the released payment, the storage cooperating with transferring means for later or immediately forwarding the payment to initiate a debit order.
[21]
21. Device according to claim 20, characterized in that the cash register system (1) is designed to check the data transmitted by the mobile telecommunication terminal (5) in the event of failure of the data transmission to the payment processing station, the cash register system {1) having processing means, which are adapted to compare a stored general payment limit with the desired payment amount and to check the validity of the transaction code using a check algorithm stored in the checkout system (1), the checkout system further comprising release means for releasing the payment if the following conditions exist are fulfilled: the desired payment amount is within the general payment limit and the transaction code is valid, wherein the cash register system (1) further comprises a memory for storing the released payment, wherein the memory cooperates with transfer means to the payment s later or later to the payment processing center (7) to pass on a debit order.
[22]
22. The apparatus of claim 20 or 21, characterized in that the payment processing point {7) is connected to a banking network, wherein the payment processing point is adapted to transmit the subscriber identifier and the payment amount in the context of a debit order to the banking network
[23]
23. The apparatus according to claim 22, characterized in that in the banking network or in an interface between the banking network and the payment processing center (7) person-specific account numbers and subscriber identifiers are stored associated with each other and the banking network is formed by the payment processing center (7) transmitted subscriber identifier to the corresponding account number and debit from an account using the account number.
[24]
24. The device according to claim 23, characterized in that the person-specific account number is a virtual account number, virtual account numbers and real account numbers are stored in the banking network associated with each other and in the context of a debit order, the virtual account number of the corresponding real account number can be assigned.
[25]
25. Device according to one of claims 20 to 24, characterized in that the transaction code is an opto-electronically readable code, in particular a bar code, which can be displayed on a display unit of a mobile telecommunication terminal (5).
[26]
26. Device according to one of claims 21 to 25, characterized in that the test algorithm and the algorithm used for the generation of the transaction code are matched to each other.
[27]
27. Device according to one of claims 20 to 26, characterized in that the payment processing center (7) comprises a memory for the algorithm used for the generation of the transaction code.
[28]
28. Device according to one of claims 20 to 27, characterized in that the subscriber identifier is a device-specific identifier.
[29]
29. Device according to one of claims 20 to 28, characterized in that the payment processing center (7) comprises cooperating with the banking network matching means to match the payment processing center (7) of a subscriber identifier associated payment limit with a payment of the respective subscriber identifier in a banking network payment limit ,
[30]
30. The device according to claim 29, characterized in that the balancing means are formed with a trigger circuit to trigger the transmission of a modified after a matching payment limit, the telecommunication terminal no new transaction code is transmitted and existing transaction codes are deleted at the telecommunication terminal, if the subscriber identifier associated payment limit is 0.
[31]
31. Device according to one of claims 20 to 30, characterized in that a mobile telecommunication terminal (5) executable program application (6) is provided.
[32]
32. The apparatus of claim 31, characterized in that the subscriber identifier is an application-specific identifier, which is stored in the program application (6).
[33]
33. Apparatus according to claim 31 or 32, characterized drawn in that the application comprises a PIN query to query a PIN before the opening of the transaction code, wherein the presentation or transmission takes place only with correct PIN entry. Vienna, 8 November 2011 Applicants by:

类似技术:
公开号 | 公开日 | 专利标题
AT512070B1|2018-02-15|METHOD AND DEVICE FOR IMPLEMENTING CASH-FREE PAYMENTS
DE212010000059U1|2012-02-02|Changeable safety value
WO2002011082A1|2002-02-07|Electronic payment transaction via sms
EP1374011A2|2004-01-02|Method for securing a transaction on a computer network
WO2009003605A9|2009-05-14|Virtual prepaid or credit card and method and system for providing such and for electronic payment transactions
WO2004034343A2|2004-04-22|Method for concluding a payment transaction in electronic commerce
EP1665184A1|2006-06-07|Method for carrying out an electronic transaction
EP1869630A1|2007-12-26|Method for confirming a service request
DE102010017861A1|2011-10-27|Method for handling electronic tickets
DE102016109209A1|2017-11-23|Method and arrangement for the transmission of transaction data using a public data network
DE102011079317A1|2013-01-24|MOBILE SYSTEM FOR FINANCIAL TRANSACTIONS
DE112015000746T5|2017-02-09|Secure transaction processing in a communication system
DE60122912T2|2007-04-12|METHOD FOR DELIVERING IDENTIFICATION DATA OF A PAYMENT CARD TO A USER
EP1141904A1|2001-10-10|Method for the secure handling of money or units of value with pre-paid data carriers
AT511626B1|2014-09-15|METHOD AND DEVICE FOR IMPLEMENTING CASH-FREE PAYMENTS
DE202019106383U1|2020-01-31|Electronic payment device
WO2011141062A1|2011-11-17|Payment system, procedure for producing at least one code pair for authorizing a debit operation, and method for carrying out a payment operation
WO2001081875A2|2001-11-01|Method for securing payment for deliveries and services in open networks
DE10218729B4|2004-05-27|Methods for authenticating and / or authorizing people
EP1371038B1|2005-12-28|Method and device for carrying out at least one commercial transaction in return for payment
DE102012101091B4|2014-10-09|Method and device for processing cashless payment transactions
DE102017003245A1|2018-10-04|Direct payment of manageable amounts of money at vending machines by the payer's own smartphone without cash use or transmission of data of the smartphone owner to the sender
WO2013127520A1|2013-09-06|Authenticated transaction approval
DE10229619A1|2003-01-23|Conducting a payment process by mobile telephone involves checking identification characteristic in transaction center, completing payment process if identification check satisfactory
WO2019155254A1|2019-08-15|Device, system and method for processing virtual value documents
同族专利:
公开号 | 公开日
US20140344157A1|2014-11-20|
AT512070B1|2018-02-15|
EP2776999A1|2014-09-17|
WO2013067561A1|2013-05-16|
引用文献:
公开号 | 申请日 | 公开日 | 申请人 | 专利标题
US20100138344A1|2008-12-02|2010-06-03|Ebay Inc.|Mobile barcode generation and payment|
US20110071914A1|2009-09-22|2011-03-24|Murphy Oil Usa, Inc.|Method and Apparatus for Secure Transaction Management|
US20110238473A1|2010-03-23|2011-09-29|Sanjay Dattatreya Sankolli|Alternate mobile payment service|
DE10005487A1|2000-02-08|2001-08-09|Siemens Ag|User identification control at service terminal - using separate code generator to generate code for transmission from user terminal to service terminal for decryption and/or verification|
JP2001344545A|2000-03-29|2001-12-14|Ibm Japan Ltd|Processing system, server, processing terminal, communication terminal, processing method, data managing method, processing performing method and program|
US7209903B1|2000-07-13|2007-04-24|Ctech Global Services Corporation Limited|Method and system for facilitation of wireless e-commerce transactions|
EP1316930A3|2001-12-01|2005-11-23|Scheidt & Bachmann Gmbh|Modular unit for automatic vending machines of products or services|
WO2009070114A1|2007-11-30|2009-06-04|Skycash Sp.Z O.O.|A server of a check issuer and a merchant system in a proximity payment system|
US20090254479A1|2008-04-02|2009-10-08|Pharris Dennis J|Transaction server configured to authorize payment transactions using mobile telephone devices|CA2888800C|2012-10-22|2021-02-23|Modopayments, Llc|Payment processing access device and method|
DE102013105781A1|2013-06-05|2014-12-11|Ralf Sommer|Method for addressing, authentication and secure data storage in computer systems|
EP2843605A1|2013-08-30|2015-03-04|Gemalto SA|Method for authenticating transactions|
US20160210619A1|2013-09-19|2016-07-21|Nec Corporation|Blacklist updating system, terminal device, method, and program recording medium|
US10475296B1|2014-12-30|2019-11-12|Jpmorgan Chase Bank, N.A.|Hybrid cash recycler|
US10719822B2|2016-04-06|2020-07-21|Paypal, Inc.|Methods and systems for contactless transmission of transactional information|
US20180336562A1|2017-05-17|2018-11-22|Mastercard International Incorporated|System to provide enhanced security against unauthorized use of a cashless transaction card|
WO2019028481A1|2017-08-03|2019-02-07|Just PayLtd.|Mobile payment system|
法律状态:
优先权:
申请号 | 申请日 | 专利标题
ATA1649/2011A|AT512070B1|2011-11-08|2011-11-08|METHOD AND DEVICE FOR IMPLEMENTING CASH-FREE PAYMENTS|ATA1649/2011A| AT512070B1|2011-11-08|2011-11-08|METHOD AND DEVICE FOR IMPLEMENTING CASH-FREE PAYMENTS|
EP12808670.9A| EP2776999A1|2011-11-08|2012-11-08|Method and apparatus for performing cashless payments|
US14/356,946| US20140344157A1|2011-11-08|2012-11-08|Method and device for carrying out cashless payment|
PCT/AT2012/000285| WO2013067561A1|2011-11-08|2012-11-08|Method and apparatus for performing cashless payments|
[返回顶部]