WO2000017827A1

WO2000017827A1 - Method for managing an electronic transaction by smart card, terminal and smart card implementing same

Info

Publication number: WO2000017827A1
Application number: PCT/FR1999/002214
Authority: WO
Inventors: Patrick Remery; Aymeric De Solages; Bernard Darbour
Original assignee: France Telecom
Priority date: 1998-09-18
Filing date: 1999-09-17
Publication date: 2000-03-30
Also published as: CN100580720C; EP1114403A1; JP2009245442A; JP4411781B2; CN1322336A; FR2783623A1; FR2783623B1; HK1039673A1; JP2002525766A

Abstract

The invention concerns a method for managing an electronic transaction using a client card with microprocessor chip and a reading terminal capable of interacting with said card, whereby the reading terminal transmits to said card a signal indicating thereto the amount of the transaction and whereby the card compares said amount to a threshold value of amount for transaction and commands a procedure for authenticating the bearer when said amount is greater than said threshold. The invention is characterised in that, when said amount is less than said threshold, said smart card compares to a threshold value a counter value, called summation of small amounts, which it increments by the value of the amount of the transaction and a procedure for authenticating the bearer is commanded by said card based on the result of said comparison.

Description

METHOD FOR MANAGING AN ELECTRONIC TRANSACTION

BY CHIP CARD, TERMINAL AND CHIP CARD

IMPLEMENTING THIS PROCESS

The present invention relates to electronic transactions carried out by means of a smart card.

It provides a method for managing such an electronic transaction, as well as a terminal and a smart card implementing this method. Usually, during a transaction with a smart card, it is the reading terminal in which the smart card is engaged which manages the procedure for authenticating the card and the holder thereof, as well as the procedure validation of the transaction.

In particular, the terminal of the reading terminal systematically requests the card holder to indicate their authentication code. And if the amount of the transaction exceeds a certain threshold, the reading terminal can decide to interrogate an outside authorization center.

However, we now wish to be able to carry out very rapid electronic transactions, capable of intervening in very short times - for example less than 100 ms - for which the authentication of the carrier is not feasible.

To date, it is the systems called "electronic wallets" which allow rapid electronic transactions to be carried out.

An electronic wallet is a device which comprises a memory in which is stored a value corresponding to a monetary sum which is decremented as and when transactions made by means of said wallet. However, electronic wallets have drawbacks. In particular, they do not provide the same transaction security as bank cards. In particular, it can happen with a electronic wallet that it records a debit while the transaction at the reading terminal is not taken into account.

An object of the invention is to propose a method for managing an electronic transaction which makes it possible to carry out transactions as quickly as with an electronic purse, but with a security similar to that which the protocols of transactions by bank card currently known.

The solution according to the invention consists of a method for managing an electronic transaction by means of a micro-processor chip type bank card and a reading terminal capable of communicating with said card, in which the reading terminal transmits to said card a signal which indicates to it the amount of the transaction and in which said card compares this amount with a threshold value of transaction amount and controls a procedure for authentication of the holder when this amount is greater than said threshold, characterized in that, when this amount is lower than said threshold, said smart card compares to a threshold value the value of a counter, known as the cumulative of small amounts, which it increments by the value of the amount of the transaction and in that a card holder authentication procedure is controlled by said card according to the result of this comparison.

Thus, a card holder benefits with his bank card from a service which for him is similar to that of an electronic wallet, but which is of greater security, since he uses the existing infrastructure to bank cards. In addition, the traditional recharging function is eliminated, which makes it easier to use the card.

This process is advantageously supplemented by the following different characteristics taken alone or in all their technically possible combinations: - the counter value is replaced by said incremented value when the value of the transaction amount is less than the threshold value of the transaction amount; the value of the counter for accumulating small amounts is replaced by said incremented value when, depending on the result of the comparison, the authentication procedure of the card holder is not controlled by said card; - when the identification code of the card holder has been verified, the card increments the value of the transaction amount, the sum of the counter for small amounts and a second counter, it compares the amount incremented with a value threshold and controls the interrogation by the reading terminal of an authorization center as a function of the result of this comparison, said card resetting the two counters to zero when the authorization is given by said center, the value of the second counter being replaced by the value of the incremented sum, if according to the result of the comparison, the card decides not to ask the reading terminal to interrogate the authorization center, the value of the counter for small amounts then being reset to zero ;

- the increment implemented by the smart card is a positive increment;

- the increment implemented by the smart card is a negative increment. The invention also relates to a micro-processor chip card intended to be used for carrying out electronic transactions, characterized in that it includes means for implementing the above-mentioned method.

Advantageously, this smart card includes memory means for storing one or more threshold values and / or counter values, as well as comparison means.

The invention further relates to a micro-processor chip card reader terminal, intended to be used for carrying out electronic transactions, characterized in that it comprises means for implementing the aforementioned method.

Other characteristics and advantages of the invention will emerge from the following description of several modes of implementation of the invention. This description is purely illustrative and not limiting. It should be read with reference to the appended drawings in which: - Figure 1 is a flowchart illustrating a possible mode of implementation for the method proposed by the invention; - Figure 2 is a flowchart illustrating another possible mode of implementation.

The various stages of the management methods illustrated in FIGS. 1 and 2 are implemented during an electronic transaction carried out by means of a smart card of the banking type. This smart card comprises a microprocessor which is programmed so as to implement a protocol which corresponds to these different stages, as well as ROM, EPROM, EEPROM or RAM memories in which the various values calculated or taken into account during storage are stored. these different stages (amount of the transaction, counter values (s), ceiling (s), etc.).

The reading terminal is programmed to implement the same method, the smart card and said terminal comprising means allowing them to dialogue, these means being able to be of any type (bus using connection tracks carried by the smart card, exchanges by RF transmission / reception, etc.).

In FIG. 1, the steps implemented by the smart card are presented in the block referenced by C, those implemented by the reading terminal being presented in the block referenced by L.

The transaction begins with an initialization of the smart card controlled by the reading terminal (step 1).

The latter, in response, transmits its identification to the reading terminal (step 2).

Then the reading terminal requests the operator to enter the amount M of the transaction (step 3). It transmits this amount M to the card. This implements a test 4 on the value of this amount M.

If this amount M is less than a ceiling value VP1, the card increments a counter COMPT by the value of this amount M (step 5). The card then compares the value of this counter COMPT with a threshold VP2, which may be different from the threshold VP1.

If the counter COMPT is less than VP2, the microprocessor of the card calculates the signature ST of the transaction (step 7) and transmits it to the reading terminal which verifies it and archives the amount of the transaction, as well as the detail of this one (steps 8 and 9).

If on the other hand, the value of the counter COMPT is greater than VP2, the card requests the reading terminal to present the code of the carrier (step 10). The carrier enters his code (step 11).

The code is transmitted by the reading terminal to the card which verifies it (step 12).

After verification, the microprocessor of the card resumes processing and calculates the transaction signature ST (step 7). Between the verification step 12 and the calculation step 7, the counter COMPT is reset to zero. Thus, the counter COMPT is reset to zero after each positive verification of the confidential code (step 20).

The carrier code is also requested by the card when the amount M is greater than the threshold value VP1 ("yes" answer to test 4). In this case, the bearer's code is verified and the amount M is not accumulated on the ACCOUNT counter.

The classic stages of a credit card transaction take place.

Optionally, or alternatively, provision may be made for the card to request the connection of the reading terminal to the banking system in order to obtain a transaction authorization.

With the transaction authorization, the reading terminal can, according to the information provided by the banking system, transmit to the card an order to update the VP1 and VP2 ceilings. As will be understood, in the implementation variant which has just been described with reference to FIG. 1, the payment card accumulates on the internal counter COMPT the amount of transactions below a certain threshold and does not request a carrier authentication only when the amount M is greater than this threshold or when the cumulative sum of previous transactions becomes greater than a given threshold.

As a variant, provision may be made for the counter COMPT to be reset only if it is verified that the value of the counter COMPT is greater than the threshold value VP2 in step 6 and where the code entered is recognized as correct by card.

In this hypothesis, the counter COMPT is not reset to zero if, during step 4, it is verified that the amount M is greater than the threshold value VP1. It is only reset if the amount M is less than the threshold value

VP1 and if it is checked in step 6 that the counter COMPT is higher than VP2 and if the verified code is correct.

Thus, the counter COMPT is only reset to zero when on the one hand the sum of the small amounts reaches the threshold VP2 and on the other hand the holder is authenticated by his code.

In another variant, the card can be used to make an incremental payment, for example in the case of a communication from a public telephone booth.

In this case, an increment loop is added between steps 7 and 3, and the ST signature is based on the incremented sum (ΣM) at the end of the communication, ΣM being reset to zero in the card at from the identification step 2.

Thus, only one ST transfer order containing the sum of the taxes consumed is kept at the end of the communication; the user pays according to the duration of the communication and over the taxes consumed.

Another implementation variant is illustrated in FIG. 2.

This second variant consists in managing a second counter

CPT2 in the card aggregating the accumulations made on a first counter CPT1 of small amounts. If the value of the counter CPT2 reaches a second ceiling value VP2, defined by the bank and recorded previously in the card, the card will require the control of a certificate calculated by an authorization center.

The procedure is as follows:

The card adds the amount M of the transaction to the value read in CPT1.

If (test 13) the sum CPT1 + M reaches the ceiling value VP1, the card requires the control of the confidential code of the holder (steps 10, 11 and 12).

If the confidential code is correct, the card adds the value of CPT1 + M to the value read in CPT2. The new value obtained is compared to a VP2 threshold (test 14).

If the sum CPT1 + M + CPT2 reaches the ceiling VP2, the card requires (step 15) the control of a certificate calculated by an authorization center interrogated by the terminal of the reading terminal L (step 16).

If the certificate is correct, the card resets the counters CPT1 and CPT2 to zero (step 17) then calculates and delivers the signature of the transaction (steps 7 and following).

If the certificate is incorrect, the card does not deliver the signature of the transaction and leaves the values of the counters CPT1 and CPT2 as they are.

If the sum CPT1 + M + CPT2 has not reached the ceiling value VP2, the card resets the counter CPT1 to zero and updates the counter CPT2 by replacing its previous value with CPT2 + CPT1 + M (step 18). Then it calculates and delivers the signature of the transaction (steps 7, 8 and 9).

If the confidential code is not correct, the card C does not deliver the signature of the transaction and leaves the counters CPT1 and CPT2 as they are. If the sum CPT1 + M does not reach the ceiling value VP1, the card updates the counter CPT1 by replacing its previous value with the sum CPT1 + M (step 19), then it delivers the signature of the transaction (steps 7 , 8 and 9).

The card which has just been described can be used in post-flow. The amounts debited are accumulated, for example over 30 days at most, by bearer account number, and the bearer account is debited after exceeding the VP2 ceiling or at the end of 30 days of the value of the amounts accumulated since the last debit from the account. The amounts can be accumulated:

- on the collection server after collection of the transactions stored on the merchant terminals. In this case, exceeding the VP2 ceiling triggers in the card via the terminal an authorization request for an amount equal to the new VP2 ceiling which can be redefined by the bank.

- In the card itself. In this case, exceeding the VP2 ceiling triggers a discount in the card via the terminal and an authorization request. It is necessary in this case to make the customer pay a deposit when obtaining his card, to avoid loss or the "voluntary" theft of his card (thus avoiding the debit of the accumulation). This deposit can be disguised, that is to say included in the annual subscription of the card.

The card can also be used in advance. In this case, the value VP1, and for the variant of FIG. 2, the value VP2, is (or are) prepaid by the carrier and updated in the card, using the certificate receipt which depends on the amount prepaid by the user. If the user is on a terminal without an identification keypad or not connected to a telecommunications network, and the prepaid value VP1, VP2 is reached, he must present himself on a bank device (ATM - ATM) ticket or public telephone) so that the certificate control operations issued by the authorization center can be carried out. The transaction in this case is fictitious, no amount being debited from the customer's account, except in the pre-charge application. In another variant, the card may not have the authentication code of the holder.

In this case, the comparison of the transaction amount with the threshold VP1 is not made and VP1 is not used. When the value COMPT stored in the card is greater than or equal to the threshold VP2, the card does not deliver the transaction signature ST. A tolerance on VP2 is defined to accept values of COMPT slightly higher than VP2 and thus allow the crossing by COMPT of the value VP2 which blocks the card.

The card can be disposable, when VP2 is reached, the card is no longer usable. However, in particular if the card is consigned, the holder can return the card to the bank which, using a secure procedure, resets the value of COMPT to zero, before reintroducing it into a new use cycle.

Or, the card can be released by the bank using a secure online procedure. During this procedure, the bearer is authenticated, for example, using a second payment card or a code verified by the bank's server, and ACCT is reset after verification by the card of a certificate. calculated by the bank.

In the above examples, the counters CPT1 and CPT2 are incremented from the value 0 to a ceiling value. It is also possible to count down, the counters being initialized at the ceiling value

VP1 and VP2 then decremented to the value 0, counting can also be done on negative values etc.

As will be understood, with the management method proposed by the invention, the accumulated amount is compared, not to an amount previously recharged in the card, but to a maximum value fixed according to the risk that the issuer of the card believes to take. This comparison is a means of limiting the client's spending over time, and this is one of the roles of the card, in addition to authentication. The maximum value chosen can be considered as a kind of permanent credit granted to creditworthy customers, the bank being remunerated for example through a commission on transactions.

Small transactions are delivered: - either individually by the merchant, like transactions of normal amount, using the banking infrastructure. The only function of client accumulation in the card is then to limit the client's expenses (moderating role); - or with a merchant cumulation option, which supposes that the client cumulation is also delivered (by card, during a transaction) to the bank for invoicing. This option obviously does not allow the same controls as the first.

Credit management in the card can be as follows:

- a transaction to be valid must be signed by the card. The ST1 signature, printed on the customer ticket, is used to resolve any disputes.

- The data of a transaction are stored in the delivery file of the terminal and then collected once a day by the collection center of the merchant's bank. Small amount transactions are transmitted to the bearer's bank and are not processed individually by it: they are stored to allow the audit of the system, resolve any disputes, and compensate the merchant bank.

- The merchant's bank account is credited according to the cumulative amount of small amounts collected in the terminal daily.

- The amount of a transaction is accumulated in the credit counter of the card. The card checks the value of the credit counter and the duration of the credit.

Examples of transactions processed by the card are given in the following tables. Table 1 /

The credit card counter has reached the ceiling value set by the bank. The data in the table is managed in the map. The date of the transaction, the amount of the transaction are provided to the card by the terminal.

Table II /

The maximum credit duration of the card has been reached.

The transaction method proposed by the invention has many advantages:

- the security is that of the bank card because debits are verified a posteriori by the holder, the merchant and the bank;

- payment with debit-credit card can be made on a contactless card because there is no longer any systematic entry of the confidential code, in the event of interruption of contactless exchanges, the transaction can be easily canceled;

- the bank card network is not modified and there is the possibility of reusing the aggregation server for payphone transaction amounts over a month by bank card; - it is no longer possible to mislead the terminal on the response to the verification of the carrier code, because the transaction will only be continued if the carrier code is correct.

Claims

1. Method for managing an electronic transaction by means of a micro-processor chip type bank card and a reading terminal capable of communicating with said card, in which the reading terminal transmits to said card a signal which indicates to him the amount of the transaction and in which said card compares this amount to a threshold value of transaction amount and controls a procedure for authentication of the holder when this amount is greater than said threshold, characterized in that, when this amount is less than said threshold, said smart card compares to a threshold value the value of a counter, known as the accumulation of small amounts, which it increments by the value of the amount of the transaction and in that a authentication of the card holder is controlled by said card according to the result of this comparison.

2. Method according to claim 1, characterized in that the counter value is replaced by said incremented value when the value of the transaction amount is less than the threshold value of transaction amount.

3. Method according to one of the preceding claims, characterized in that the value of the counter for accumulating small amounts is replaced by said incremented value when, depending on the result of the comparison, the authentication procedure of the card holder is not ordered by said card.

4. Method according to claim 3, characterized in that when the identification code of the card holder has been verified, the card increments by the value of the amount of the transaction, the sum of the counter of small amounts and a second counter, in that it compares the sum incremented with a threshold value and controls the interrogation by the reading terminal of an authorization center according to the result of this comparison, said card resetting the two counters when the authorization is given by said center, the value of the second counter being replaced by the value of the incremented sum, if, depending on the result of the comparison, the card decides not to ask the terminal reading to interrogate the authorization center, the value of the counter for small amounts then being reset to zero.

5. Method according to one of the preceding claims, characterized in that the increment implemented by the smart card is a positive increment.

6. Method according to one of claims 1 to 4, characterized in that the increment implemented by the smart card is a negative increment.

7. Chip card with microprocessor intended to be used to carry out electronic transactions, characterized in that it comprises means for implementing the method according to one of the preceding claims.

8. Smart card according to claim 7, characterized in that, to implement the method according to one of claims 1 to 6, it comprises memory means for storing one or more threshold values and / or counter values , as well as means of comparison.

9. Terminal for reading microprocessor smart cards, intended to be used for carrying out electronic transactions, characterized in that it comprises means for implementing the method according to one of claims 1 to 6.