CA2220099A1 - Value transfer system - Google Patents
Value transfer system Download PDFInfo
- Publication number
- CA2220099A1 CA2220099A1 CA002220099A CA2220099A CA2220099A1 CA 2220099 A1 CA2220099 A1 CA 2220099A1 CA 002220099 A CA002220099 A CA 002220099A CA 2220099 A CA2220099 A CA 2220099A CA 2220099 A1 CA2220099 A1 CA 2220099A1
- Authority
- CA
- Canada
- Prior art keywords
- purse
- class
- value
- transfer system
- purses
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
- G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q20/105—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems involving programming of a portable memory device, e.g. IC cards, "electronic purses"
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/22—Payment schemes or models
- G06Q20/229—Hierarchy of users of accounts
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
Abstract
The invention is concerned with systems for transferring value between electronic purses, usually in the form of IC or "Smart" cards, via the intermediary of an interface device. In order to control the flow of value between purses a hierarchical class structure is proposed. This is achieved by assigning to each purse a class which controls the conditions under which value may be transferred to an from (mainly from) a purse. Thus each purse stores in memory a representation of its own class, together with a list of those classes to which the purse can transfer value.
Description
CA 02220099 l997-ll-03 WO 96/3~6025 PC~/GB96/01104 'VALUE TRANSFER SYSTEM"
This invention relates to value trans~er systems for transferring financial value between electronic purses which are carried by purse carrier devices.
A purse carrier device refers to any device which carries an electronic purse. In the short to medium term the purse carrier device will be a smart card, and this implementation will be assumed through- out the pre!sent specification for convenience. However, in the longer term other 0 implementations are envisaged (the main requirement being tamper resistance) and the present invention is not limited to the smart card option.
Smart cards, also known as IC (integrated circuit) cards, are small plastics cards similar to the well known credit and debit cards but I5 whiich contain some computing capacity in the forrn of an IC
mic:roprocessor. The smart card includes some form of memory, usually built in to the microprocessor itself. The memory may be of two types:
vol,atile, and non-volatile. The typical smart card will possess both types of memory.
A value transfer system of the type with which the present invention is concerned is described for example in patent application WC) 91/16691. This patent application describes a system which provides for the transfer of value equivalent to cash between two smart cards via an interface device, for example in the form of a point of sale device including 25 at least card readers. In this way, goods and services can be paid for in an analogous manner to cash - i.e. without specific reconciliation between the payer and payee accounts.
In broad terms, the basic system with which the present invention is concerned comprises a plurality of electronic purses and 30 interface devices by which purses may communicate with one another by means of transactions, each of which involves an exchange of electric signals between a pair of purses, one acting as a payer purse and one as a payee purse, said signals being operable to transfer financial value from the payer purse to the payee purse.
s Each purse comprises a data area and a computer program for carrying out the purse functions, both being stored in memory within the smart card. The data area contains, amongst other things, a record of the accumulated value currently contained within the purse. That part of the data area of the purse which holds the accumulated value is known as a o pocket. A purse may have several pockets, each storing value in a different currency. Unused pockets can contain zero value, or be unassigned within the program. For the purpose of the present specification, it is assumed that the smart card and the purse are effectively the same entity; however, it is possible for a single smart card to S carry multiple purses and/or to additionally carry programs for performing other functions not connected with the transfer of electronic cash.
In the present invention, means are provided for more closely controlling the transfer of financial value from one purse to another. It is not at present envisaged that any control needs to be placed on the receipt 20 of value by a purse (although this could change), but there is a need to control the issuance of value by a purse.
To effect this, in accordance with the present invention, each purse is assigned a class in a hierarchical structure, and a record of the class - for example in the form of a number - is stored in the data area of 25 the purse. Also stored in the data area of the purse is a class list, which is a list of those classes to which the purse can transfer value. In a purse which supports more than one currency, there is a class list for each currency. Thus, each purse is assigned a single purse class and includes within its memory one or more purse class lists depending upon the 30 number of currencies supported.
W 096/'i6025 PCTIGB96/01104 lt has already been mentioned that the transfer of value between purses proceeds by exchange of electric signals between the two, via the intermediary of an interface device. As explained in some detail in the aforementioned WO 91116691, the actual transfer is preceded by exchange of s various check signals in the form of commands and ,t sponses issued by the tv/o purses and by the interface device.
In the present invention these checks a~liti~nally include a check on ~Nhether the purse class of the payee purse appear~ in the class list of the payer purse before ?~l~w;"g the transfer to proceed. ~his can be achieved by o passing the purse class of the payee purse via the interface device to the payer pur~ie which latter uses its computing capacity to carry out the necessary check.
Integrity is maintained by protecting the purse class cr~ luy,~phically before it i!;
pas~ed out of the purse to which it belongs. Detail of ~ypical cryptographic methods are described in WO 91/16691; forexample, the record ofthe lS pur;e class may be stored in that part of the purse which is signed by the global secret key. However, the mechanism does not depend on any particular cryptographic implementation. It requires only that the payer purse can verify the integrity and authenticity of the purse class it has been senl:. In practice, purse class is only one of a nun ber of data items which are protected in this way during a value transfer.
The mechanism has the following benefits:
a. Purse class provides a security and control mechanism, whic:h enables exposure to be limited in a flexible manner, by control of thle types of purse to which a given purse can transfer value. For example, this ,enables purse issuers to limit the opportunities for realising value in a stolen purse by constraining the types of purses it can pay.
b. Purse classes should be considered as forming a hierarchy composed of at least the following maior groupings consumer serviice provider, bank, value manufacturer. The ascending hierarchy 30 would typically be associated with an ascending set of value limits. The posilion in the hierarchy reflects the likely importance of the purse in value terms, and relates to the care which shouid be exercised in its control.
c. The variability of purse class list by currency enhances the flexibility to control value transfer. Different rules can be supported for different currencies if this is appropriate from a business point of view.
d. The use of purse class category (for example, consumer, service provider, bank) is useful in conjunction with other control measures.
For example, in some remote payment scenarios it is vital to know that payment is being made to a bank purse, and not to any other. This can be achieved by verifying the cryptographically protected payee purse class o sent from the remote purse.
In this example, four major purse groupings are identified and can be placed in hierarchy order as follows:
Value manufacturer Bank Service Provider Consumer The Value manufacturer, sometimes known as the originator, is the central bank or equivalent in the country concer"ed which is responsible for minting and issuing cash. The value manufacturer is at the top of the hierarchy.20 A service provider is an entity that provides goods or services or equivaient - for example a point of sale device in a shop or garage. The bank and consumer groupings are self-explanatory. Each grouping is given an identifying code, for example a number, which is stored in the purse memory as will be described in more detail below. For example, the following purse class category values will be 25 used herein:
1. Value manufacturer 2. Bank 3. Service Provider 4. Consumer In an embodiment of the invention, a subset of purse cl~sses, at least one from each of the above groupings, is globally defined to support interworking between groupings (for example, a purse provider must know what minimum set of cl~cses he should allocate in the purse class list for consumer cards, so that they are cerlain to be able to int~3rwork with service provider and bank purses). Consideration of s pra,ctical operational scenarios suggests that at least four service provider, three bank, and two consumer purse classes and a single value manufacturer purse class are required. These "global purse classes" may for example be represented symbolically as:
Value manufacturer-1 o Bank-1, Bank-2, Bank-3 Service-Provider-1, Service-Provider-2, Service-Provider-3, Service-Provider-4 Consumer-1, Consumer-2 The following table thus summarises the global purse s cl~sses:
I~ame Purse class Purse class category number 20 \~'alue manufacturer-1 Bank-1,2,3 2 1,2,3 Service-Provider-1,2,3,4 3 1,2,3,4 Consumer-1,2 4 1,2 r~ It will be seen from the above that the purse class is 30 composed of two separate items of information, details of which may be stored in memory as two separate numbers, purse class category and purse class number, in the following format:
Purse class = Purse class category +
Purse class number where the purse class category is defined above and the purse class .
5 number is the subset number as represented symbolically in the above example.
For example the purse class could be stored in purse memory as a 1 byte number whose first 4 bits represent the purse class category and whose second 4 bits represent the purse class number.
o This gives the possibility of 16 purse cl~sses which is currently considered adequate, bearing in mind commercial requirements.
The purse class list may be stored, likewise in the memory, as a bit map of 16 bits (2 bytes). For example, assuming the 16 bits are numbered O to 15, a four element table offset may be defined such that entries 1, 2, 3 and 4 are bits 0, 2, 6 and 12 respectively. Then a purse class belongs to the class list if and only if bit position:
offset (category) + class number- 1 is set.
For example service provider-1 corresponds to bit position 6:
6+1 -1 =6 Likewise consumer-2 corresponds to bit position 13:
12 + 2 - 1 = 13 Thus a purse in which just bits 6 and 13 of the class list bit map are set will be able to transfer value only to purses having service provider-1 class or consumer-2 class (this example is for the purpose of illustration only - such a purse would not be practicable).
This implementation allows for one spare value manufacturer and Bank purse class and two spare Service Provider and Consumer purse cl~sses. , An example of a simple global purse class scheme will now be described by way of example only and with reference to the Wo 96/36025 PCT/GB96J01104 accompanying drawing which is a chart summarising the interworking rules behveen the purse cl~sses of the exemplary scherne.
In the exemplary sGheme a limited number of purse classes ~, are defined as follows:
Value manufacturer The most sensitive, highest value purse class. Note that it can only inteRace with bank purses, and not with service provider or consumer purses.
Bank Used generally for distribution of value to, and receipt of value from consumers, service providers, and banks.
S Service-Provider-1 "Standard". This would be configured not to give refunds to consumers, but could pay upwards to bank purses. It can pay its own class, and thus offers options for value movement within purses of the class.
Service-Provider-2 "Refund". This is more capable than the Service Provider-1 purse class, and hence the one with potentially the most exposure. It can pay a consumer for refund purposes, and would be the purse class used for receipt of value from a bank, should this be ~I' required. Note, this is the only route for a Service Provider to receive funds from a bank purse.
Consumer The standard consumer purse class, capable of interfacing to the bank purse.
The choice of purse class list is a commercial decision which s would normally be made by the purse provider, subject to predetermined rules. Most of the decisions would be made on an understanding of how the service providers or banks to whom they are issuing purses require to operate.
The purse class "rules" - the sets of purse class lists o associated with each purse class - are defined for each individual payment scheme. Each purse is "personalised" with the purse class lists applicable to its allocated purse class.
Thus there is a clear separation between the purse class mechanism and the set of rules defined for a payment scheme. Different schemes, with quite different rules, could use exactly the same purse class mechanism.
A summary of the interworking rules between purse classes according to the above rules is given for the exemplary scheme in the chart shown in the accompanying drawing. In the drawing, the global purse cl~sses are indicated by the following reference numerals:
Ref 1: Value manufacturer Ref 2: Bank Ref 3: Service provider-1 (standard) Ref 4: Service provider-2 (refund) Ref 5: Consumer The arrows indicate the direction in which value can be transferred: thus a double ended arrow, as between the value manufacturer and bank means that value can be transferred both ways g belween the respective purses. A single ended arrow means that value can be transferred only in one direction, such as between service provider-1 and the bank. An arrow which returns to the same block, such as the arrow 6associated with block 2 (the bank) means that the respective purse can transfer value to other purses of the same class.
It must be emphasised that the above is a hypothetical set of purse classes and rules, and deliberately does not correspond to any known scheme. In fact, a practical scheme would use many more classes, particularly at the bank and service provider levels.
This invention relates to value trans~er systems for transferring financial value between electronic purses which are carried by purse carrier devices.
A purse carrier device refers to any device which carries an electronic purse. In the short to medium term the purse carrier device will be a smart card, and this implementation will be assumed through- out the pre!sent specification for convenience. However, in the longer term other 0 implementations are envisaged (the main requirement being tamper resistance) and the present invention is not limited to the smart card option.
Smart cards, also known as IC (integrated circuit) cards, are small plastics cards similar to the well known credit and debit cards but I5 whiich contain some computing capacity in the forrn of an IC
mic:roprocessor. The smart card includes some form of memory, usually built in to the microprocessor itself. The memory may be of two types:
vol,atile, and non-volatile. The typical smart card will possess both types of memory.
A value transfer system of the type with which the present invention is concerned is described for example in patent application WC) 91/16691. This patent application describes a system which provides for the transfer of value equivalent to cash between two smart cards via an interface device, for example in the form of a point of sale device including 25 at least card readers. In this way, goods and services can be paid for in an analogous manner to cash - i.e. without specific reconciliation between the payer and payee accounts.
In broad terms, the basic system with which the present invention is concerned comprises a plurality of electronic purses and 30 interface devices by which purses may communicate with one another by means of transactions, each of which involves an exchange of electric signals between a pair of purses, one acting as a payer purse and one as a payee purse, said signals being operable to transfer financial value from the payer purse to the payee purse.
s Each purse comprises a data area and a computer program for carrying out the purse functions, both being stored in memory within the smart card. The data area contains, amongst other things, a record of the accumulated value currently contained within the purse. That part of the data area of the purse which holds the accumulated value is known as a o pocket. A purse may have several pockets, each storing value in a different currency. Unused pockets can contain zero value, or be unassigned within the program. For the purpose of the present specification, it is assumed that the smart card and the purse are effectively the same entity; however, it is possible for a single smart card to S carry multiple purses and/or to additionally carry programs for performing other functions not connected with the transfer of electronic cash.
In the present invention, means are provided for more closely controlling the transfer of financial value from one purse to another. It is not at present envisaged that any control needs to be placed on the receipt 20 of value by a purse (although this could change), but there is a need to control the issuance of value by a purse.
To effect this, in accordance with the present invention, each purse is assigned a class in a hierarchical structure, and a record of the class - for example in the form of a number - is stored in the data area of 25 the purse. Also stored in the data area of the purse is a class list, which is a list of those classes to which the purse can transfer value. In a purse which supports more than one currency, there is a class list for each currency. Thus, each purse is assigned a single purse class and includes within its memory one or more purse class lists depending upon the 30 number of currencies supported.
W 096/'i6025 PCTIGB96/01104 lt has already been mentioned that the transfer of value between purses proceeds by exchange of electric signals between the two, via the intermediary of an interface device. As explained in some detail in the aforementioned WO 91116691, the actual transfer is preceded by exchange of s various check signals in the form of commands and ,t sponses issued by the tv/o purses and by the interface device.
In the present invention these checks a~liti~nally include a check on ~Nhether the purse class of the payee purse appear~ in the class list of the payer purse before ?~l~w;"g the transfer to proceed. ~his can be achieved by o passing the purse class of the payee purse via the interface device to the payer pur~ie which latter uses its computing capacity to carry out the necessary check.
Integrity is maintained by protecting the purse class cr~ luy,~phically before it i!;
pas~ed out of the purse to which it belongs. Detail of ~ypical cryptographic methods are described in WO 91/16691; forexample, the record ofthe lS pur;e class may be stored in that part of the purse which is signed by the global secret key. However, the mechanism does not depend on any particular cryptographic implementation. It requires only that the payer purse can verify the integrity and authenticity of the purse class it has been senl:. In practice, purse class is only one of a nun ber of data items which are protected in this way during a value transfer.
The mechanism has the following benefits:
a. Purse class provides a security and control mechanism, whic:h enables exposure to be limited in a flexible manner, by control of thle types of purse to which a given purse can transfer value. For example, this ,enables purse issuers to limit the opportunities for realising value in a stolen purse by constraining the types of purses it can pay.
b. Purse classes should be considered as forming a hierarchy composed of at least the following maior groupings consumer serviice provider, bank, value manufacturer. The ascending hierarchy 30 would typically be associated with an ascending set of value limits. The posilion in the hierarchy reflects the likely importance of the purse in value terms, and relates to the care which shouid be exercised in its control.
c. The variability of purse class list by currency enhances the flexibility to control value transfer. Different rules can be supported for different currencies if this is appropriate from a business point of view.
d. The use of purse class category (for example, consumer, service provider, bank) is useful in conjunction with other control measures.
For example, in some remote payment scenarios it is vital to know that payment is being made to a bank purse, and not to any other. This can be achieved by verifying the cryptographically protected payee purse class o sent from the remote purse.
In this example, four major purse groupings are identified and can be placed in hierarchy order as follows:
Value manufacturer Bank Service Provider Consumer The Value manufacturer, sometimes known as the originator, is the central bank or equivalent in the country concer"ed which is responsible for minting and issuing cash. The value manufacturer is at the top of the hierarchy.20 A service provider is an entity that provides goods or services or equivaient - for example a point of sale device in a shop or garage. The bank and consumer groupings are self-explanatory. Each grouping is given an identifying code, for example a number, which is stored in the purse memory as will be described in more detail below. For example, the following purse class category values will be 25 used herein:
1. Value manufacturer 2. Bank 3. Service Provider 4. Consumer In an embodiment of the invention, a subset of purse cl~sses, at least one from each of the above groupings, is globally defined to support interworking between groupings (for example, a purse provider must know what minimum set of cl~cses he should allocate in the purse class list for consumer cards, so that they are cerlain to be able to int~3rwork with service provider and bank purses). Consideration of s pra,ctical operational scenarios suggests that at least four service provider, three bank, and two consumer purse classes and a single value manufacturer purse class are required. These "global purse classes" may for example be represented symbolically as:
Value manufacturer-1 o Bank-1, Bank-2, Bank-3 Service-Provider-1, Service-Provider-2, Service-Provider-3, Service-Provider-4 Consumer-1, Consumer-2 The following table thus summarises the global purse s cl~sses:
I~ame Purse class Purse class category number 20 \~'alue manufacturer-1 Bank-1,2,3 2 1,2,3 Service-Provider-1,2,3,4 3 1,2,3,4 Consumer-1,2 4 1,2 r~ It will be seen from the above that the purse class is 30 composed of two separate items of information, details of which may be stored in memory as two separate numbers, purse class category and purse class number, in the following format:
Purse class = Purse class category +
Purse class number where the purse class category is defined above and the purse class .
5 number is the subset number as represented symbolically in the above example.
For example the purse class could be stored in purse memory as a 1 byte number whose first 4 bits represent the purse class category and whose second 4 bits represent the purse class number.
o This gives the possibility of 16 purse cl~sses which is currently considered adequate, bearing in mind commercial requirements.
The purse class list may be stored, likewise in the memory, as a bit map of 16 bits (2 bytes). For example, assuming the 16 bits are numbered O to 15, a four element table offset may be defined such that entries 1, 2, 3 and 4 are bits 0, 2, 6 and 12 respectively. Then a purse class belongs to the class list if and only if bit position:
offset (category) + class number- 1 is set.
For example service provider-1 corresponds to bit position 6:
6+1 -1 =6 Likewise consumer-2 corresponds to bit position 13:
12 + 2 - 1 = 13 Thus a purse in which just bits 6 and 13 of the class list bit map are set will be able to transfer value only to purses having service provider-1 class or consumer-2 class (this example is for the purpose of illustration only - such a purse would not be practicable).
This implementation allows for one spare value manufacturer and Bank purse class and two spare Service Provider and Consumer purse cl~sses. , An example of a simple global purse class scheme will now be described by way of example only and with reference to the Wo 96/36025 PCT/GB96J01104 accompanying drawing which is a chart summarising the interworking rules behveen the purse cl~sses of the exemplary scherne.
In the exemplary sGheme a limited number of purse classes ~, are defined as follows:
Value manufacturer The most sensitive, highest value purse class. Note that it can only inteRace with bank purses, and not with service provider or consumer purses.
Bank Used generally for distribution of value to, and receipt of value from consumers, service providers, and banks.
S Service-Provider-1 "Standard". This would be configured not to give refunds to consumers, but could pay upwards to bank purses. It can pay its own class, and thus offers options for value movement within purses of the class.
Service-Provider-2 "Refund". This is more capable than the Service Provider-1 purse class, and hence the one with potentially the most exposure. It can pay a consumer for refund purposes, and would be the purse class used for receipt of value from a bank, should this be ~I' required. Note, this is the only route for a Service Provider to receive funds from a bank purse.
Consumer The standard consumer purse class, capable of interfacing to the bank purse.
The choice of purse class list is a commercial decision which s would normally be made by the purse provider, subject to predetermined rules. Most of the decisions would be made on an understanding of how the service providers or banks to whom they are issuing purses require to operate.
The purse class "rules" - the sets of purse class lists o associated with each purse class - are defined for each individual payment scheme. Each purse is "personalised" with the purse class lists applicable to its allocated purse class.
Thus there is a clear separation between the purse class mechanism and the set of rules defined for a payment scheme. Different schemes, with quite different rules, could use exactly the same purse class mechanism.
A summary of the interworking rules between purse classes according to the above rules is given for the exemplary scheme in the chart shown in the accompanying drawing. In the drawing, the global purse cl~sses are indicated by the following reference numerals:
Ref 1: Value manufacturer Ref 2: Bank Ref 3: Service provider-1 (standard) Ref 4: Service provider-2 (refund) Ref 5: Consumer The arrows indicate the direction in which value can be transferred: thus a double ended arrow, as between the value manufacturer and bank means that value can be transferred both ways g belween the respective purses. A single ended arrow means that value can be transferred only in one direction, such as between service provider-1 and the bank. An arrow which returns to the same block, such as the arrow 6associated with block 2 (the bank) means that the respective purse can transfer value to other purses of the same class.
It must be emphasised that the above is a hypothetical set of purse classes and rules, and deliberately does not correspond to any known scheme. In fact, a practical scheme would use many more classes, particularly at the bank and service provider levels.
Claims (12)
1. A value transfer system comprising a plurality of electronic purses, and interface devices whereby purses may communicate with each other to transfer value by means of transactions, each of which involves an exchange of electric signals between a pair of purses, each purse including memory means storing a record of the accumulated value currently contained within the purse, the system being characterised in that each purse is assigned a class in a hierarchical structure and in that said memory means further stores a record of the class of that purse, together with a list of those classes to which that purse can transfer value.
2. A value transfer system as claimed in claim 1 wherein, in each purse or associated transfer device, is a microprocessor which is programmed so that each value transfer transaction from a payer purse to a payee purse includes at least the step of checking whether the purse class of the payee purse appears on the class list of the payer purse before allowing the transfer of value to take place.
3. A value transfer system as claimed in claim 2 wherein said step of checking comprises passing an electric signal representative of the purse class of the payee purse from the payee purse to the payer purse via said interface device, and carrying out the check in said payer purse.
4. A value transfer system as claimed in claim 3 wherein the information relating to the purse class of the payee purse is cryptographically protected before being passed to the payer purse.
5. A value transfer system as claimed in any one of the preceding claims wherein the purse class is representative of a category of purse user, in a hierarchical tree.
6. A value transfer system as claimed in claim 6 wherein said class categories include or comprise any one or more of the following categories:
Value manufacturer Bank Service Provider Consumer or their equivalent.
Value manufacturer Bank Service Provider Consumer or their equivalent.
7. A value transfer system as claimed in claim 6 wherein the class lists of the respective purses in said categories are such that the value manufacturer purse can only transfer value to and from the bank purse and cannot transfer value directly to or from the service provider purses and/or the consumer purses.
8. A value transfer system as claimed in either one of claims 5, 6 or 7 wherein one or more of said purse categories each includes a subset of purse classes representative of a hierarchy within the category.
9. A value transfer system as claimed in claim 8 wherein the purse class is stored in said memory means as a 1 byte number whose first 4 bits represent the purse class category and whose second 4 bits is a number which represents the subject within the purse class category.
10. A value transfer system as claimed in either one of claims 8 or 9 wherein the class list is stored in said memory means as a bit map comprising a pattern of bits, and wherein each category and/or subject within each category is represented by one bit within the pattern of bits.
11. A value transfer system as claimed in claim 10 wherein each class category is given a unique offset within said bit map such that a purse class belongs to the class list only if bit position n within the bit map has a particular value, where:
n = offset + subset class number- 1.
n = offset + subset class number- 1.
12. A value transfer system according to any one of the preceding claims wherein at least some of said purses store in their memory means a plurality of class lists, each class being assigned to a particular currency.
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
GBGB9509582.4A GB9509582D0 (en) | 1995-05-11 | 1995-05-11 | Value transfer system |
GB9509582.4 | 1995-05-11 |
Publications (1)
Publication Number | Publication Date |
---|---|
CA2220099A1 true CA2220099A1 (en) | 1996-11-14 |
Family
ID=10774322
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CA002220099A Abandoned CA2220099A1 (en) | 1995-05-11 | 1996-05-09 | Value transfer system |
Country Status (29)
Country | Link |
---|---|
US (1) | US6439455B1 (en) |
EP (1) | EP0824740B1 (en) |
JP (1) | JPH11504737A (en) |
KR (1) | KR100338492B1 (en) |
CN (1) | CN1160672C (en) |
AT (1) | ATE216523T1 (en) |
AU (1) | AU702388B2 (en) |
BG (1) | BG102032A (en) |
BR (1) | BR9608704A (en) |
CA (1) | CA2220099A1 (en) |
CZ (1) | CZ353197A3 (en) |
DE (1) | DE69620750T2 (en) |
EE (1) | EE9700299A (en) |
ES (1) | ES2175090T3 (en) |
GB (1) | GB9509582D0 (en) |
HK (1) | HK1003074A1 (en) |
HU (1) | HUP9802924A3 (en) |
IS (1) | IS4600A (en) |
MX (1) | MX9708553A (en) |
MY (1) | MY126396A (en) |
NO (1) | NO317866B1 (en) |
NZ (1) | NZ307255A (en) |
PL (1) | PL323306A1 (en) |
RU (1) | RU2142160C1 (en) |
SK (1) | SK151097A3 (en) |
TR (1) | TR199701339T1 (en) |
TW (1) | TW421747B (en) |
WO (1) | WO1996036025A2 (en) |
ZA (1) | ZA963691B (en) |
Families Citing this family (54)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6945457B1 (en) | 1996-05-10 | 2005-09-20 | Transaction Holdings Ltd. L.L.C. | Automated transaction machine |
US5953705A (en) * | 1996-09-13 | 1999-09-14 | Fujitsu Limited | Ticketless system and processing method and memory medium storing its processing program |
IL119486A0 (en) * | 1996-10-24 | 1997-01-10 | Fortress U & T Ltd | Apparatus and methods for collecting value |
US6105006A (en) * | 1997-12-22 | 2000-08-15 | Motorola Inc | Transaction authentication for 1-way wireless financial messaging units |
US6041314A (en) * | 1997-12-22 | 2000-03-21 | Davis; Walter Lee | Multiple account portable wireless financial messaging unit |
KR100382181B1 (en) | 1997-12-22 | 2003-05-09 | 모토로라 인코포레이티드 | Single account portable wireless financial messaging unit |
US6038549A (en) * | 1997-12-22 | 2000-03-14 | Motorola Inc | Portable 1-way wireless financial messaging unit |
US6314519B1 (en) | 1997-12-22 | 2001-11-06 | Motorola, Inc. | Secure messaging system overlay for a selective call signaling system |
US6311167B1 (en) | 1997-12-22 | 2001-10-30 | Motorola, Inc. | Portable 2-way wireless financial messaging unit |
GB2332833A (en) * | 1997-12-24 | 1999-06-30 | Interactive Magazines Limited | Secure credit card transactions over the internet |
GB2336456B (en) | 1998-04-15 | 2001-11-14 | Lg | Payment system |
JP2000276543A (en) * | 1999-03-26 | 2000-10-06 | Fujitsu Ltd | Numerical data processor and numerical data processing method |
US7889052B2 (en) | 2001-07-10 | 2011-02-15 | Xatra Fund Mx, Llc | Authorizing payment subsequent to RF transactions |
US7239226B2 (en) | 2001-07-10 | 2007-07-03 | American Express Travel Related Services Company, Inc. | System and method for payment using radio frequency identification in contact and contactless transactions |
US8429041B2 (en) | 2003-05-09 | 2013-04-23 | American Express Travel Related Services Company, Inc. | Systems and methods for managing account information lifecycles |
US7172112B2 (en) | 2000-01-21 | 2007-02-06 | American Express Travel Related Services Company, Inc. | Public/private dual card system and method |
US8543423B2 (en) | 2002-07-16 | 2013-09-24 | American Express Travel Related Services Company, Inc. | Method and apparatus for enrolling with multiple transaction environments |
AU2001243473A1 (en) | 2000-03-07 | 2001-09-17 | American Express Travel Related Services Company, Inc. | System for facilitating a transaction |
US7650314B1 (en) | 2001-05-25 | 2010-01-19 | American Express Travel Related Services Company, Inc. | System and method for securing a recurrent billing transaction |
FR2827058B1 (en) * | 2001-07-09 | 2005-05-27 | A S K | ELECTRONIC CASH SYSTEM FOR ELECTRONIC COIN PURSE |
US20040236699A1 (en) | 2001-07-10 | 2004-11-25 | American Express Travel Related Services Company, Inc. | Method and system for hand geometry recognition biometrics on a fob |
US7668750B2 (en) | 2001-07-10 | 2010-02-23 | David S Bonalle | Securing RF transactions using a transactions counter |
US7705732B2 (en) | 2001-07-10 | 2010-04-27 | Fred Bishop | Authenticating an RF transaction using a transaction counter |
US7925535B2 (en) | 2001-07-10 | 2011-04-12 | American Express Travel Related Services Company, Inc. | System and method for securing RF transactions using a radio frequency identification device including a random number generator |
US7303120B2 (en) | 2001-07-10 | 2007-12-04 | American Express Travel Related Services Company, Inc. | System for biometric security using a FOB |
US8001054B1 (en) | 2001-07-10 | 2011-08-16 | American Express Travel Related Services Company, Inc. | System and method for generating an unpredictable number using a seeded algorithm |
US7762457B2 (en) | 2001-07-10 | 2010-07-27 | American Express Travel Related Services Company, Inc. | System and method for dynamic fob synchronization and personalization |
US7746215B1 (en) | 2001-07-10 | 2010-06-29 | Fred Bishop | RF transactions using a wireless reader grid |
US8548927B2 (en) | 2001-07-10 | 2013-10-01 | Xatra Fund Mx, Llc | Biometric registration for facilitating an RF transaction |
US7249112B2 (en) | 2002-07-09 | 2007-07-24 | American Express Travel Related Services Company, Inc. | System and method for assigning a funding source for a radio frequency identification device |
US9031880B2 (en) | 2001-07-10 | 2015-05-12 | Iii Holdings 1, Llc | Systems and methods for non-traditional payment using biometric data |
US7503480B2 (en) | 2001-07-10 | 2009-03-17 | American Express Travel Related Services Company, Inc. | Method and system for tracking user performance |
US8294552B2 (en) | 2001-07-10 | 2012-10-23 | Xatra Fund Mx, Llc | Facial scan biometrics on a payment device |
US7119659B2 (en) | 2001-07-10 | 2006-10-10 | American Express Travel Related Services Company, Inc. | Systems and methods for providing a RF transaction device for use in a private label transaction |
US7360689B2 (en) | 2001-07-10 | 2008-04-22 | American Express Travel Related Services Company, Inc. | Method and system for proffering multiple biometrics for use with a FOB |
US7805378B2 (en) | 2001-07-10 | 2010-09-28 | American Express Travel Related Servicex Company, Inc. | System and method for encoding information in magnetic stripe format for use in radio frequency identification transactions |
US8635131B1 (en) | 2001-07-10 | 2014-01-21 | American Express Travel Related Services Company, Inc. | System and method for managing a transaction protocol |
US9454752B2 (en) | 2001-07-10 | 2016-09-27 | Chartoleaux Kg Limited Liability Company | Reload protocol at a transaction processing entity |
US9024719B1 (en) | 2001-07-10 | 2015-05-05 | Xatra Fund Mx, Llc | RF transaction system and method for storing user personal data |
US8960535B2 (en) | 2001-07-10 | 2015-02-24 | Iii Holdings 1, Llc | Method and system for resource management and evaluation |
US7996324B2 (en) | 2001-07-10 | 2011-08-09 | American Express Travel Related Services Company, Inc. | Systems and methods for managing multiple accounts on a RF transaction device using secondary identification indicia |
US8284025B2 (en) | 2001-07-10 | 2012-10-09 | Xatra Fund Mx, Llc | Method and system for auditory recognition biometrics on a FOB |
US7735725B1 (en) | 2001-07-10 | 2010-06-15 | Fred Bishop | Processing an RF transaction using a routing number |
US6805287B2 (en) | 2002-09-12 | 2004-10-19 | American Express Travel Related Services Company, Inc. | System and method for converting a stored value card to a credit card |
GB0305806D0 (en) * | 2003-03-13 | 2003-04-16 | Ecebs Ltd | Smartcard based value transfer |
US20050192862A1 (en) * | 2004-02-27 | 2005-09-01 | Capital One Financial Corporation | Methods, systems, and articles of manufacture for providing incentives for a financial account |
US7318550B2 (en) | 2004-07-01 | 2008-01-15 | American Express Travel Related Services Company, Inc. | Biometric safeguard method for use with a smartcard |
US8049594B1 (en) | 2004-11-30 | 2011-11-01 | Xatra Fund Mx, Llc | Enhanced RFID instrument security |
DE102006017911B4 (en) * | 2006-04-18 | 2023-01-26 | creditPass GmbH | Electronic payment system and method for carrying out a payment transaction |
US9230259B1 (en) | 2009-03-20 | 2016-01-05 | Jpmorgan Chase Bank, N.A. | Systems and methods for mobile ordering and payment |
US20130036017A1 (en) * | 2011-08-05 | 2013-02-07 | Ivason Galloway | Financial card for online fund transfer and method therefor |
US20130282552A1 (en) * | 2012-03-19 | 2013-10-24 | Royal Canadian Mint/Monnaie Royale Canadienne | Automated forex function in an asset storage and transfer system |
US10380586B2 (en) | 2015-10-27 | 2019-08-13 | Mastercard International Incorporated | Systems and methods for managing funds for financial transactions |
AU2021377603A1 (en) | 2020-11-16 | 2023-06-15 | Mastercard International Incorporated | Offline coin protocol |
Family Cites Families (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4319336A (en) * | 1979-02-02 | 1982-03-09 | International Business Machines Corporation | Transaction execution system with improved key function versatility |
IE820411L (en) * | 1982-02-25 | 1983-08-25 | L M Ericsson Ltd | Portable device for storing and transferring data |
US4454414A (en) * | 1982-06-16 | 1984-06-12 | Vericard Corporation | Funds transfer system using optically coupled, portable modules |
FR2539897B1 (en) | 1983-01-20 | 1988-12-30 | Cii Honeywell Bull | METHOD AND DEVICE FOR ENABLING THE HOLDER OF A PORTABLE OBJECT SUCH AS A CARD, TO BE ACCESSED BY THIS CARD TO AT LEAST ONE SERVICE PROVIDED BY AT LEAST ONE AUTHORIZING ORGANIZATION |
JPS60160491A (en) | 1984-01-31 | 1985-08-22 | Toshiba Corp | Ic card |
US4766293A (en) | 1986-06-26 | 1988-08-23 | Visa International Service Association | Portable financial transaction card capable of authorizing a transaction in foreign currencies |
JPH07104891B2 (en) * | 1986-08-05 | 1995-11-13 | 沖電気工業株式会社 | Transaction processor |
ATE160039T1 (en) * | 1986-09-02 | 1997-11-15 | Pitney Bowes Inc | AUTOMATED TRANSACTION SYSTEM USING INSERTABLE CARDS FOR REMOTE LOADING FEES OR UTILITY DATA |
US5179517A (en) * | 1988-09-22 | 1993-01-12 | Bally Manufacturing Corporation | Game machine data transfer system utilizing portable data units |
GB9008362D0 (en) * | 1990-04-12 | 1990-06-13 | Hackremco No 574 Limited | Banking computer system |
JPH04213242A (en) * | 1990-12-07 | 1992-08-04 | Hitachi Ltd | Limited multiple address communication system |
US5453601A (en) * | 1991-11-15 | 1995-09-26 | Citibank, N.A. | Electronic-monetary system |
IT1260254B (en) * | 1992-02-13 | 1996-04-02 | California Inn Srl | ELECTRONIC MANAGEMENT AND CONTROL SYSTEM, THROUGH INTELLIGENT CARDS, OF AUTOMATIC DEVICES FOR RETENTION AND GAMES, AS WELL AS GAMES AND GATHERINGS IN GENERAL |
US5461217A (en) | 1994-02-08 | 1995-10-24 | At&T Ipm Corp. | Secure money transfer techniques using smart cards |
JP2891220B2 (en) * | 1996-12-27 | 1999-05-17 | 日本電気株式会社 | Deposit and withdrawal processing method by card transaction |
US6012049A (en) * | 1998-02-04 | 2000-01-04 | Citicorp Development Center, Inc. | System for performing financial transactions using a smartcard |
-
1995
- 1995-05-11 GB GBGB9509582.4A patent/GB9509582D0/en active Pending
-
1996
- 1996-05-09 WO PCT/GB1996/001104 patent/WO1996036025A2/en not_active Application Discontinuation
- 1996-05-09 DE DE69620750T patent/DE69620750T2/en not_active Expired - Fee Related
- 1996-05-09 SK SK1510-97A patent/SK151097A3/en unknown
- 1996-05-09 EP EP96913632A patent/EP0824740B1/en not_active Expired - Lifetime
- 1996-05-09 AT AT96913632T patent/ATE216523T1/en not_active IP Right Cessation
- 1996-05-09 AU AU56554/96A patent/AU702388B2/en not_active Expired
- 1996-05-09 CA CA002220099A patent/CA2220099A1/en not_active Abandoned
- 1996-05-09 PL PL96323306A patent/PL323306A1/en unknown
- 1996-05-09 TR TR97/01339T patent/TR199701339T1/en unknown
- 1996-05-09 JP JP8533867A patent/JPH11504737A/en active Pending
- 1996-05-09 BR BR9608704-8A patent/BR9608704A/en not_active Application Discontinuation
- 1996-05-09 HU HU9802924A patent/HUP9802924A3/en unknown
- 1996-05-09 MX MX9708553A patent/MX9708553A/en not_active IP Right Cessation
- 1996-05-09 CZ CZ973531A patent/CZ353197A3/en unknown
- 1996-05-09 RU RU97120517A patent/RU2142160C1/en not_active IP Right Cessation
- 1996-05-09 NZ NZ307255A patent/NZ307255A/en not_active IP Right Cessation
- 1996-05-09 KR KR1019970708016A patent/KR100338492B1/en not_active IP Right Cessation
- 1996-05-09 ES ES96913632T patent/ES2175090T3/en not_active Expired - Lifetime
- 1996-05-09 EE EE9700299A patent/EE9700299A/en unknown
- 1996-05-09 ZA ZA963691A patent/ZA963691B/en unknown
- 1996-05-09 CN CNB961952288A patent/CN1160672C/en not_active Expired - Lifetime
- 1996-05-10 TW TW085105560A patent/TW421747B/en not_active IP Right Cessation
-
1997
- 1997-10-28 IS IS4600A patent/IS4600A/en unknown
- 1997-11-06 BG BG102032A patent/BG102032A/en unknown
- 1997-11-10 NO NO19975156A patent/NO317866B1/en unknown
- 1997-11-14 MY MYPI97005473A patent/MY126396A/en unknown
-
1998
- 1998-03-18 HK HK98102262A patent/HK1003074A1/en not_active IP Right Cessation
-
2000
- 2000-07-07 US US09/611,867 patent/US6439455B1/en not_active Expired - Lifetime
Also Published As
Similar Documents
Publication | Publication Date | Title |
---|---|---|
AU702388B2 (en) | Value transfer system | |
US6615193B1 (en) | Monitoring system and method | |
JP3299560B2 (en) | Electronic payment method by IC chip card with numbered token | |
US11282048B1 (en) | Card based transfer account | |
US6249869B1 (en) | Integrated circuit card, secure application module, system comprising a secure application module and a terminal and a method for controlling service actions to be carried out by the secure application module on the integrated circuit card | |
US6405182B1 (en) | System for dispensing prepaid debit cards through point-of-sale terminals | |
US5796832A (en) | Wireless transaction and information system | |
RU97120517A (en) | CASH TRANSFER SYSTEM | |
US20150242853A1 (en) | Payment account tokenization method | |
US8341076B1 (en) | Automatic overdraft attached to prepaid debit card accounts | |
JP2001505339A (en) | System and method for sending values to a magnetic stripe of a transaction card | |
EP1522035A2 (en) | Method and system for a multi-purpose transactional platform | |
CN101145264A (en) | Business affairs bank card processing system and method | |
US20030144956A1 (en) | System and method for capturing payments data onto uniquely identified payer-carried chips for periodic upload and download with institutions | |
US7908220B1 (en) | Method of conducting financial transactions | |
WO1994019777A1 (en) | Electronic funds control system | |
CN105894426A (en) | Resident information sharing, storing, and managing system based on CPU chip card | |
WO2019240878A1 (en) | A transaction device, computer program and transaction method | |
US20060167798A1 (en) | Currency transfer computerized card | |
WO2019108303A1 (en) | Systems and methods for tokenizing tokens in transactions | |
US7039617B1 (en) | Currency and float ID tracking in an electronic purse | |
Sneddon | Promises and puzzles of electronic purses | |
ZA200504695B (en) | Voucher or token based payment system | |
WO2005066859A1 (en) | Storage system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
EEER | Examination request | ||
FZDE | Discontinued |