DE102007023003A1 - Mobile paying method, involves causing paying process based on transferred data record with reference data record in server computer, where data record comprises safety information with temporally limited validation - Google Patents

Abstract

The method involves transmitting a data record of a mobile communications device i.e. mobile telephone (100) to on a scanner (112), where the record is provided for repeated use. The transferred data record is tested by a reference data record on a server computer (104). A paying process is caused in accordance with the transferred data record with the reference data record in the server computer, where the data record comprises a safety information i.e. alphanumeric code, with temporally limited validation. The safety information is comparably changed at the paying process. An independent claim is also included for a computer program product for performing a method for mobile paying using a mobile communications device.

Description

The The invention relates to a method for mobile payment and a A computer program product.

Next the well-known payment options, such as Eg cash, check, bank transfer, debit or credit card, the so-called mobile payment has developed. Under "mobile payment" is the payment with a mobile communication device, in particular with a mobile telephone, Understood. In the process, data is generated by means of a mobile communication device to a data processing device at a point of sale (also "Point of Sale "). These data are then verified and after successful verification a payment transaction is triggered.

at A first known from practice is for the mobile Pay a two-dimensional code used as individual assigned and easy-to-use transaction number (TAN) serves. Each customer can have a maximum of 3 such TANs on his mobile phone and save it there until it is used. Once a TAN has been used, it will be deleted and automatically send the customer a new TAN via SMS or MMS. To the TAN for To use a payment process, this is done with the mobile phone selected and read in at a point of sale from a scanner. The read in TAN is then converted to an alphanumeric code and opened plausibility checked. The procedure is associated with the risk that third parties - for example due to data theft - illegal Get access to the TANs, copy them on their own Save the mobile phone and the copied TANs before the authorized as Use means of payment. The data theft may possibly be Not noticed, since the use of illegally copied TAN the transmission a new TAN causes, so that at any time three TANs are available.

at a second known from practice is for the mobile Pay also used a two-dimensional code. In this Method is the two-dimensional code of customer identification. This code is therefore used again and again. When paying the two-dimensional code is called with the mobile phone and from read in a scanner. This determines which customer a Would like to make payment. Subsequently For authentication of the customer, a PIN code belonging to the code is used polled. This is provided by the customer at a number field of a terminal entered. Even with this method, there is a risk that third parties illegally gain access to this through data theft or otherwise Two-dimensional code procure this as a copy on its own Save mobile phone and use as a means of payment. The supposed one Securing by means of a PIN code does not constitute an effective one Protection as it often does not be ruled out is that third party personally observe the entry of the PIN code at the terminal or otherwise - eg. B. with technical aids - the Get PIN code.

Of the Invention is based on the object, a method for mobile Payments available too provide security with the use of a mobile communication device as a means of payment increased is.

The solution The object is achieved according to the invention with a method according to claim 1 or 7 and with a computer program product according to claim 11 or 12.

• a) Übertragung eines zur mehrmaligen Verwendung vorgesehenen Datensatzes von dem mobilen Kommunikationsgerät auf eine Eingabevorrichtung,
• b) Überprüfung des übertragenen Datensatzes mit einem Referenzdatensatz auf einem Serverrechner,
• c) bei Übereinstimmung des übertragenen Datensatzes mit dem Referenzdatensatz auf dem Serverrechner Veranlassung eines Bezahlvorganges, wobei
• d) der Datensatz mindestens eine Sicherheitsinformation mit zeitlich beschränkter Gültigkeit umfaßt.

A method according to the invention, according to which a mobile communication device is used for mobile payment, comprises the following steps:

• a) transmission of a record intended for multiple use from the mobile communication device to an input device,
• b) checking the transmitted data record with a reference data record on a server computer,
• c) upon agreement of the transmitted data record with the reference data record on the server computer initiating a payment process, wherein
• d) the data set comprises at least one security information with limited validity.

When mobile communication device In addition to mobile phones, smartphones and mobile digital assistants will also be available (MDAs) or others for understood the mobile communication suitable devices. The inventive method has the advantage that in abusive Way - z. B. by data theft - to third parties arrived records automatically become worthless after a specified period of time and thus no longer abused can be. This security mechanism works regardless of whether the legitimate user of the mobile communication device has previously detected any data theft itself or even must have actively acted.

In a first variant of the method according to the invention, the security information is changed equally after each payment process both on the server computer and on the mobile communication device. The change can be done, for example, that the Security information changed on the server computer and the changed security information is then transmitted directly from the server computer to the mobile communication device. Alternatively, the change can also take place in that the entire data record with the changed security information is transmitted to the mobile communication device. Regardless of how the change is made, it is ensured that a data misappropriated to a third party data record is maximally usable for a payment process. However, this is the case only if the third party uses a robbed record for a payment transaction before the rightful owner of the mobile communication device completes his next payment transaction. Otherwise, a misuse in this variant is completely excluded. The security of mobile payment is in this variant, the higher, the more often paid with the mobile communication device.

In According to a second variant of the method according to the invention, the security information predetermined intervals changed. This variant of the method can be used both instead of the first variant as well as in addition to be applied to this. If the security information in very small time intervals changed becomes already, with exclusive application of the second Process variant achieved a high level of security, so that a change the security information depending on paid transactions possibly brings only a small added benefit. The larger the time intervals are chosen, the more sensible it is to combine variants 1 and 2 with each other. It is not necessary that the intervals are consistent. The time intervals can also be dependent the payment behavior or purely random. For example could one time-dependent change the safety information only if not at least two payment processes been done in one day are.

In a practical embodiment the method according to the invention the security information is an alphanumeric code which is changed regularly. An alphanumeric code has the advantage that both of mobile communication devices as also easily recognizable and storable by server computers. Further an alphanumeric code is suitable for common storage with more data in a common record.

A common storage of an alphanumeric code or other Security information can, for example, with the help of an optical Codes are made. Such an optical code can, for. B. as two-dimensional Code, on a display of most mobile communication device easily represented and detected by this means of a scanner. This has the advantage that the in the optical code contained data are shown encrypted and without technical aids not simply readable by third or decipherable are while they are read by the scanner. Sophisticated technologies for generation of two-dimensional optical codes and detection by means of Scanners are already available. As optical codes are in particular the following codes in question: QR code according to ISO / IEC 18004, Maxi code according to ISO / IEC 16023, Aztec Code, mesa code etc.

alternative The record can also be transmitted by data transfer from the mobile communication device transferred to the input device become. There are basically all wired and wireless data transmission techniques, in particular USB, Firewire, GSM, Bluetooth, Infrared etc. available.

According to one Another aspect of the invention may be the safety of a method according to the generic term of claim 7 are increased by that the personal Identification number (PIN) entered into the mobile communication device and then transmitted from the mobile communication device to an input device becomes. In this case, the input in a simple embodiment 1: 1 shown on the display of the mobile communication device and from the input device by means of text recognition on the display be read. This already has the advantage that the input the personal Identification number hidden, z. B. in a coat pocket or Handbag, can be done. This will ensure that third parties use the Entry neither personally still with technical or other aids observe and thus gaining knowledge of it.

The Security can be further increased if the personal identification number for transmission to the input device in a code, preferably in an optical Code or transformed into a signal. For example, can the entered personal Identification number directly into a two-dimensional optical Code to be transformed, which is displayed on the display of the mobile communication device and can be read from there by means of a scanner. Then is the risk that the PIN when entering or transferring from the mobile communication device is read to the input device from third parties, significantly reduced.

Instead of a two-dimensional optical code, other codes can also be used be. Furthermore, it is possible to enter the PIN in a signal, eg. B. to transform a vibration of a certain frequency and to transmit as such signal to a corresponding input device. Such signals are also understood as the techniques already mentioned in connection with the data transmission from the mobile communication device to the input device.

Preferably is neither the PIN nor the two-dimensional generated from the PIN optical code storable. The input as well as the one transformed from the input Code will preferably be a few seconds after entering the PIN automatically deleted.

In another practical embodiment the method according to the invention comprises the record is a bank account independent user name to which confidential bank data is stored on the server computer. The Using a bank name independent user name has the Advantage that confidential Bank data, such. B. bank code, account number, first and last name of an account holder in mobile payments in the front-end area never publicly accessible are. This ensures the inventive method a high personal Data protection.

In Practice is common be required to initiate a payment process first the appropriate Record to be transmitted to the input device to call. In this regard the security against abuse to increase, especially in the case that lost the mobile communication devices goes or is stolen, can for calling the record requires the input of a password become. This password can and should be assigned independently of the PIN.

The solution The object is further achieved with computer program products according to the invention 11 or 12.

One Computer program product according to claim 11 includes a memory module, a transmission module and an administrative module, thus creating the conditions for implementation A method according to claims 1 to 10th

One Computer program product according to claim 12 with a transformation module creates in particular the possibilities for the Implementation of a method according to claims 8 to 10th

The Computer program products according to claim 11 or 12 can analogously to the method according to the invention be further educated. On the related to the corresponding Methods described advantages are hereby referred to.

Further advantageous embodiments show the figures described below. Show it:

1 a schematic representation of devices which are used in one embodiment of the method according to the invention and their compounds.

Based on 1 the method according to the invention will be described by way of non-limiting example.

As a mobile communication device is in 1 a mobile phone 100 shown, which via a first data connection 102 with a server computer 104 a bank can communicate. As a data connection 102 especially digital radio networks, such. As GSM networks, but also other wireless connections such as satellite connections, etc. into consideration.

1 also shows a point of sale 106 (also called "Point of Sale"), which has a second data connection 108 also with the server computer 104 the bank can communicate. Because both the server computer 104 as well as the point of sale are installed substantially stationary, come for the second data connection 108 Wired connections such as computer networks, etc. into consideration. Preferably, the second data connection is 108 an encrypted online connection.

At the point of sale 106 are a display device 110 , a scanner 112 as well as a num pad 114 to enter a numeric code.

It is assumed below that all requirements for the mobile procedure are met and an account activated for the mobile payment as well as a mobile phone activated and ready for mobile payment are available. For the sake of completeness, a possibility will be described below, as the conditions with respect to the in 1 Example shown can be created.

First, it is necessary to set up a mobile payment account at a conventional bank or bank. This can either be a conventional account, which is activated for this form of payment transactions, or a specially and exclusively set up for mobile payment account. When setting up such an account is usually selected a (not yet assigned) username and deposited a phone number of a mobile communication device. Furthermore, a personal identification number (PIN) is created for this account.

The identification-relevant data user name, telephone number and security information, eg. As an alphanumeric code, are as a record on the server computer 104 saved the bank. Furthermore, this record, z. B. in the form of an optical code, as a picture message (SMS or MMS) to the phone number of the mobile phone 100 cleverly. The record can be accessed at any time and used as a means of payment as described below.

With A software that can optionally be installed on the mobile phone can be used to Messages are automatically analyzed to see if they are is about the mobile payment related image messages. Becomes If such an image message is detected, it automatically becomes one moved special inbox folder of the mobile communication device, z. For example, in a folder called "Payment." This "Payment" folder can be used for increase security through a password to be protected. Then it is only possible with knowledge of the password, the mobile payment call required record.

An example of a payment process will be described below. A customer wants to pay for an item in a department store. He indicates that he wants to pay by mobile phone. The cashier selects "mobile payment" on his cash register system and thus activates the devices 110 . 112 and 114 , On the display device appears the amount to be paid and the request to the mobile phone 100 with the optical code in front of the scanner 112 to position. The account holder dials on his mobile phone 100 the optical code, which contains the last transmitted data record and, if necessary, enters the required password. The optical code is on the display 116 of the mobile phone 100 displayed and in front of the scanner 112 positioned.

As soon as the scanner has recognized the optical code, it converts the optical code into the data record containing the identification-relevant data, ie user name, telephone number and security information (here: alphanumeric code) and compares these over the second data connection 108 with the reference data set stored on the server. Alternatively, the code read in via the second data connection 108 to the server computer 104 be transferred and this decrypted only on the server computer. If the records agree on the display 110 to enter a PIN.

The PIN can be optionally via the num pad 114 entered or in the mobile phone 110 entered and from this in turn with the scanner 112 be transferred to the point of sale. The input of the PIN is - similar to the record - with a on the server computer 104 stored reference PIN compared. If the entered PIN also matches the reference PIN, the point of sale will initiate a payment process by sending a payment record containing the relevant payment data over the second data connection 108 to the server computer 104 the bank is transmitted. This payment record also includes the terminal number of the point of sale, with the help of which the dealer and his bank account can be assigned. The transaction of the book money is directly from the server computer 104 A payment confirmation is triggered via the second data connection 108 to the point of sale 106 transmitted and issued a receipt of payment for the customer to a printer (not shown). The mobile payment process has been successfully completed.

Used when matching an entered record with one on the server machine 104 stored reference data set a deviation, an error message appears on the display 110 output.

An important advantage of the method according to the invention is that the security information (in the exemplary embodiment, this is the alphanumeric code) is only valid for a limited time. At certain intervals (eg, after each payment process or within a time window randomly) is on the server computer 104 a new optical code is generated and stored as a reference data record containing the identical user name, the same telephone number and a new alphanumeric code. This new optical code will be over the first data connection 102 directly to the mobile phone 100 transmitted (eg via SMS or MMS). An optical code copied from the mobile phone in an unauthorized manner before this update 100 has therefore no longer validity at the moment in which a new reference data record has been stored on the server computer. Any optical code that is unlawful from a mobile phone 100 is copied, so for the respective Entwender only for a certain, for the stranger uncertain period usable. If, in addition, a PIN must be entered and the time period is chosen to be very small, the probability of misuse by data theft is thus kept to a minimum.

Since the permanent renewal of the optical code by sending messages in most cases involves the use of telephone networks and therefore costs, the Renewal of the code alternatively or in addition to be controlled for certain periods by an algorithm, which is linked to particularly secure information. For example, upon initial registration for mobile payment, the individual serial number of the mobile phone 100 determined and on the server computer 104 be deposited. Furthermore, an algorithm based on this serial number can be used on the server computer 104 and on the mobile phone 100 be deposited. This algorithm may include change times as well as a change rule based on the serial number, which contains the security information on the server computer 104 and on the mobile phone 100 with the corresponding serial number changed simultaneously and in the same way, without requiring a data transmission over the first data connection 102 is required. Additional costs therefore do not arise in this type of change of safety information. However, the algorithm should be linked to information that is not or only under difficult conditions by data theft from the mobile phone 100 is removable if similar high security is intended to be achieved as in the previously described regular updating of the code by transmission of picture messages.

100

mobile phone

102

first Data Connection

104

server computers

106

point of sale (Point of sale)

108

second Data Connection

110

display

112

scanner

114

Num pad

116

display

Claims (12)

Method for mobile payment using a mobile communication device ( 100 ), comprising the following steps: a) transmission of a record intended for repeated use by the mobile communication device ( 100 ) on an input device ( 112 ), b) checking the transmitted data record with a reference data record on a server computer ( 104 ), c) if the transmitted data record matches the reference data record on the server computer ( 104 ) Initiation of a payment process, characterized in that d) the record comprises at least one security information with limited validity. Method according to Claim 1, characterized in that, following each payment process, the security information is displayed both on the server computer ( 104 ) as well as on the mobile communication device ( 100 ) alike. Method according to one of claims 1 or 2, characterized that the Security information is changed after predetermined time intervals. Method according to one of claims 1 to 3, characterized that the Security information is an alphanumeric code. Method according to one of claims 1 to 4, characterized in that the data record is represented by an optical code, in particular by a two-dimensional optical code, on a display of the mobile communication device and the transmission of the data record by means of a scanner ( 112 ) he follows. Method according to one of Claims 1 to 4, characterized in that the data record is transmitted by data transmission from the mobile communication device ( 100 ) to the input device ( 112 ) is transmitted. Method for mobile payment using a mobile communication device ( 100 ), by means of which a payment process can be triggered, in particular according to one of claims 1 to 6, wherein a personal identification number (PIN) is requested prior to the initiation of a payment process, which must be entered correctly in order to be able to initiate a payment process, characterized that the personal identification number in the mobile communication device ( 100 ) and then from the mobile communication device ( 100 ) to an input device ( 112 ) is transmitted. Method according to Claim 7, characterized in that the personal identification number for transmission to the input device ( 112 ) is transformed into a code, preferably into an optical code, or into a signal. Method according to one of Claims 1 to 8, characterized in that the data record comprises a user name independent of bank data, to which on the server computer ( 104 ) confidential bank data are stored. Method according to one of claims 1 to 9, characterized in that the data record before detection by means of the input device ( 112 ), where calling the record requires the input of a password. Computer program product for installation on a server computer ( 104 ) and for carrying out a method according to one of claims 1 to 10, characterized by a) a memory module which is connected to each mobile communication device ( 100 ) the storage of at least one security information on the server computer ( 104 ), b) a transmission module, which is adapted to the on the server computer ( 104 ) to a mobile communication device ( 100 ) stored security information to the corresponding mobile communication device ( 100 ) and c) a management module connecting to a mobile communication device ( 100 ) transmitted security information and the information content in their validity insofar limited in time, as the monitoring module due to a time-out and / or a payment process, an automatic change of the security information on the server computer ( 104 ) as well as an immediate transmission of the changed security information to the mobile communication device ( 100 ) causes. Computer program product for installation on a mobile communication device ( 100 ) and for carrying out a method according to any one of claims 8 to 10, characterized by a transformation module, which is adapted to transform the input of a personal identification number into a code or a signal.