FR2994006A1 - Method for conducting bank payment between e.g. mobile phone, and vending machine delivering e.g. food products, or services, involves generating control command to execute request for control of goods or services on standby state - Google Patents

Abstract

The method involves activating an application program in a portable device (20) to generate a transaction authorization request message. Goods or services control request is received, and a single information code assembly (110) is generated from a goods or services delivery device (10). A transaction authorization message is received from a transaction server (30) during validation of the request. A determination is made whether an agreement between the message and the request is on standby state. A control command is generated to execute the request on standby in the event of agreement. An independent claim is also included for a device for delivering goods or services.

Description

Method and device for conducting a transaction at a vending machine The present invention relates to the field of transaction processing involving a bank payment, made with a device for delivering goods or services such as a vending machine, and more particularly relates to a method for conducting such a transaction using a mobile phone type device. As part of the present application, a device for issuing goods or services is a vending machine allowing the sale, without intervention of a seller, of goods, broadly understood as being products or consumables ( fuel, electrical energy, food products, etc.) or time of use (parking, etc.).

In recent years, the development of contactless NFC or Near Field Communication (NFC) communication technologies has enabled the emergence of mobile phones incorporating a SIM-NFC card to interact with their immediate environment and in particular to Implement contactless payment services using a credit card application in the mobile phone. However, the development of NFC technology in the field of bank payment requires the deployment of a complex and heavy infrastructure and, in particular, vendors managing vending machines must equip them with PCI PTS certified very expensive bank terminals to ensure optimal security. In addition, a constraint that hinders this development also lies in the complexity and the cost of a secure processor to be integrated into the mobile phones to perform payment transactions, in that it must be able to run at least one application bank card and must therefore contain cryptographic keys validated by the bank that provides the credit card application. It must also have sufficient computing power to perform complex cryptographic calculations during the authentication phase of a transaction. In addition, loading a credit card application in its memory is a complex operation, which requires to be validated by the bank.

Finally, in case of theft of the phone, the processor is likely to attack by a fraudster to discover the bank keys it contains. Also, an object of the invention is to provide a method for conducting a transaction involving a bank payment from a vending machine using a mobile phone type mobile device having a simpler and less expensive architecture to implement that the known architectures of contactless payment and, in particular, which avoid equipping the vending machine with an expensive secure payment terminal.

For this purpose, the present invention proposes a method for conducting a transaction between a portable device and a device for delivering goods or services, characterized in that it comprises the steps of: - providing at least one configured transaction server to validate a transaction authorization request; - Activate in the portable device an application program configured to generate a transaction authorization request message to the transaction server, and - using the device for issuing goods or services: - receive a request for a command of goods or services submitted by a user of the portable device and, in response, generating on the fly a single set of coded information relating to the received goods or services order request and placing the request on hold before execution for a non-zero bounded time interval, and - using the portable device: - acquiring the single set of information coded from the device for delivering goods or services and providing the single set of coded information to the program of application for generating the transaction authorization request message; and by means of the device for delivering goods or services: receiving an authorization message for the transaction sent by the transaction server in the event of validation of the transaction authorization request; - Check the agreement between the authorization message of the received transaction and the request for order of goods or services pending, and - Generate a command order for the execution of the order request for goods or services in question. wait in case of concordance. According to one embodiment, the method comprises the steps of: - connecting the transaction server to a bank server configured to receive the transaction authorization request from the portable device and to authenticate the transaction authorization request, transmitting a certificate of authentication of the transaction authorization request from the bank server to the transaction server, and using the transaction server, checking the integrity of the authentication certificate received to validate the request for authorization of the transaction. transaction authorization. According to one embodiment, the method comprises the steps of: - by means of the device for delivering goods or services, transmitting a message of acknowledgment of the execution of the request for order of 20 goods or services at least at destination of the transaction server, and - transmit, in response to the acknowledgment message received, a confirmation message of the execution of the request from the transaction server to the bank server, and - generate, by means of the banking server, a payment order of the amount of the transaction. Preferably, the banking server is configured to check an identifier of the portable device and / or the user and to check the creditworthiness of a bank account associated with the user of the portable device. According to one embodiment, the method comprises the following steps consisting in: constituting the single set of information coded in the form of a multidimensional bar code, in particular a code of the OR code type, and displaying on a display unit of the goods or services delivery device the multidimensional bar code.

Advantageously, the acquisition of the single set of information coded by means of the portable device comprises the following step of: - performing a digital capture of the single set of coded information displayed on the display unit of the device for delivering goods or services by photography of the display unit by means of a digital camera incorporated in the portable device. According to one embodiment, the acquisition of the single set of information encoded by means of the portable device comprises the following steps: - establishing at least one wireless data link short distance between the device for issuing goods or of services and the portable device, and - transfer the single set of coded information from the device for issuing goods or services to the portable device via the established data link.

Preferably, the short-distance wireless data link established between the goods or services delivery device and the portable device is an infrared or radio frequency link. According to one embodiment, the single set of coded information comprises at least the amount of the transaction corresponding to the pending order request, an identification number of the device for issuing goods or services and data of timestamp of receipt of the command request. Advantageously, the single set of coded information comprises a serial number generated by the goods or service delivery device, which is uniquely associated with the pending control request and which is used to check, by means of the device for issuing goods or services, the correspondence between the authorization message of the received transaction and the pending order request. The invention also relates to a device for delivering goods or services comprising human-machine interface means making it possible to submit a request for the control of goods or services to an operating automaton of the device intended to execute the command in function. of the submitted control request, characterized in that it comprises: means for processing the submitted request, configured to generate on the fly a single set of coded information corresponding to the submitted control request, display having a display area of the unique set of coded information generated by the processing means, - communication means adapted to establish a communication channel with a transaction server accessible via the Internet configured to receive and processing a transaction authorization request for the submitted order request, based on the unique set of informa coded means, means for receiving an authorization message from the transaction sent by the transaction server, means for checking the correspondence between the submitted control request and the authorization message of the transaction received from the transaction server; transaction server, and - means for transferring a control command to the operating system of the device allowing the execution of the command by the operating system in case of agreement established by the control means.

According to one embodiment, the processing means comprise means for generating a multidimensional bar code, in particular of the OR code type, to constitute the unique set of coded information. According to one embodiment, the device comprises a short-distance wireless data transmission / reception module adapted to emit a radio frequency or infrared signal comprising the single set of coded information. Other features and advantages of the invention will appear on reading the following description of a particular embodiment of the invention, given by way of indication but not limitation, with reference to the appended figures, in which Figure 1 is a block diagram showing a transaction system according to the invention; - Figure 2 shows the steps of a transaction performed using the system of Figure 1.

FIG. 1 represents an embodiment of a transaction system according to the invention. The system includes a goods or services delivery device 10, in the form of a vending machine, a portable device 20 and a transaction server 30 connected to the Internet. The vending machine 10 comprises a man-machine interface 11, enabling a user to enter various parameters relating to a request for the ordering of goods or services placed with the vending machine (selection of the desired product or service, quantity, etc.). , as well as the display of the amount of the transaction corresponding to this request and, as will be seen in more detail later, a single set of information coded 110, generated on the fly by processing means 12 of the request submitted, installed in the vending machine 10, once the input of the parameters of the query is completed. This interface 11 therefore comprises at least one display unit 111, which may be tactile or more classically of the type comprising an LCD display, associated with a keyboard 112 with selection keys for the input by the user of the parameters of the command . This human-machine interface 11 conventionally cooperates with an automatic machine operating the vending machine (not shown), intended to execute the order, that is to say to perform the delivery of the good or service desired by the user, in According to the request submitted via the man-machine interface 11. The vending machine 10 may also comprise a data transmission / reception module 13, designed to establish a short-distance wireless data link, in particular with the portable device 20 It may be an infrared module or a radiofrequency module, for example of the Bluetooth, IEEE802.11 or contactless chip type, of the NFC type. Finally, the vending machine 10 further comprises a wireless communication circuit 14, to allow the vending machine 10 to connect to the Internet.

The portable device 20 may be any data processing device allowing access to the Internet network via a terrestrial or satellite wireless telecommunications network (such as 3G networks, 4G WIMAX, etc.) such as a mobile phone, a digital assistant communicating staff or a communicating laptop. In the form of a mobile phone, the portable device 20 includes a SIM card processor allowing the subscribed user to use the mobile network for a connection to the Internet. It may further comprise a short-distance wireless data transmission / reception module intended to cooperate with the transmission / reception module of the automatic distributor 10 when it is provided with it and, according to the embodiment envisaged, a digital capture device, such as a digital camera or a bar code reader, including a multidimensional barcode. According to the invention, a specific application program is further loaded into a memory of the portable device 20, allowing the portable device 20 to initiate the transaction corresponding to the request for control of good or service submitted to the automatic device 10 , in the way that will be explained in detail later. The transaction server 30 connected to the Internet network comprises a management application of the automatic distributor 10. Preferably, it is connected to a bank server 40 connected to the Internet network, which is a computer server of the banking operator in charge of the management banking transaction involving the user of the portable device 10. More specifically, the bank server 40 is designed to be able to authenticate the user and his mobile phone, verify its solvency, authorize, where appropriate, the supply of the product or service corresponding to the order request placed with the automatic distributor 10 and to trigger the transfer of funds from the bank account of the user to that of the merchant managing the vending machine 10. Alternatively, the transaction server 30 and the bank server 40 may be merged in the form of a single server. The main steps of the method will now be described in greater detail with reference to FIG. 2. Thus, in a step SO, a request for the control of goods or services submitted by a user is received at the automatic dispenser 10. To do this, the user selects the good or service desired, offered by the vending machine 10, by means of the man-machine interface 11 of the automatic dispenser 10. The user also activates in a step If the application program installed on his telephone mobile 20, which is designed, as will be seen later, to generate a transaction authorization request message corresponding to the goods or services order request that the user submitted to the vending machine 10. Following the receipt of the order for goods or services, in a step S2, the processing means 12 of the vending machine 10 generate on the fly a single set coded information ee 110 relating to the received control request, which integrates all the information necessary for the order taking. According to one embodiment, this unique set of coded information is in the form of a multidimensional bar code, preferably a code of the OR code type, intended to be displayed on the display unit 111 of the 10. Specifically, the processing means 12 installed in the vending machine 10 are designed to receive from the operating machine integrated in the vending machine 10, the amount of the purchase corresponding to the order request received (this may be the amount to be paid if it is known or a maximum amount to be authorized, if for example the exact amount of the transaction can not be known in advance but only after that the delivery has been made, in case of fuel order in particular), to generate a sequence number able to uniquely identify the received control request, to time stamp the request, to generate a c hash algorithm by applying a hashing algorithm to this information, for encoding this information in the form of a multidimensional bar code, preferably a code type OR code, and finally to control the display of this code 110 on the display unit 111 of the man-machine interface 11 of the vending machine 10. The multidimensional code bar type OR code can code the following information: the order number of the order request, the amount of the transaction (to pay, or maximum to allow), the date and time of receipt of the request and the hash key. It also preferably incorporates an identification number of the vending machine. Thus, all OR codes generated by the processing means 12 of the vending machine 10 for respective control requests are different. The control request received by the vending machine 10 is then put on hold during a non-zero bounded time slot, typically a few seconds, during which the OR code is considered valid and is kept displayed. This time interval corresponds to the time required to receive an authorization message for the transaction from the transaction server 30.

In a step S3, the user acquires the OR code using his mobile phone 20. This acquisition is for example carried out by a digital capture of the OR code displayed on the display unit 111 performed with the aid of the digital camera incorporated in the mobile telephone 20. Preferably, in order to overcome the problems of brightness and contrast of the display unit 111 with respect to the ambient light, it will be possible to position the display unit 111 slightly behind the front of the vending machine. The withdrawal distance of the display unit 111 from the front face of the automatic dispenser may advantageously be the minimum focusing distance required by the autofocus of the camera equipping the mobile telephone 20. Thus, in simply positioning the mobile phone camera 20 against the front face of the display unit 111, spurious reflections are avoided and the contrast of the display unit 111 is enhanced by the shadow of the phone mobile 20 made on the display unit, allowing autofocus to achieve a faster and more reliable focus. In addition, the fact of pressing the mobile phone 20 against the front of the vending machine to take the picture stabilizes it, which further improves the reliability of capturing the OR code. As a variant, the acquisition by the mobile telephone 20 of the information necessary for ordering, which is contained in the OR code, can be carried out via the short-distance wireless data link mentioned above, capable of be established between the vending machine 10 and the mobile phone 20, and on which the information contained in the OR code from the automatic dispenser 10 to the mobile telephone 20 passes. This information is previously encrypted on the vending machine side, for example using a a public key encryption system deployed between the vending machine and the mobile phone, so as to secure the exchange of information between the vending machine and the mobile phone.

The application program installed in the mobile phone 20 is then designed to be able to decode the information contained in the OR code captured. In addition, the hash key contained in the decoded information is checked by the application program. To do this, the application program is designed to calculate the same hash key from the decoded information and to compare it with the hash key contained in the OR code. If the values match, the order taking information is considered authentic. The information hashing mechanism thus advantageously enables the mobile phone to authenticate the order taking information contained in the OR code without the need for a bidirectional link between the mobile telephone 20 and the vending machine. 10. Once the OR code is captured and decoded by the mobile phone 20, all the information of the order taking is automatically available, without the need to establish a connection with a merchant manager's merchant website. the vending machine 20 to manage the transaction request, which allows the immediate connection with the bank operator of the user. To do this, in a step S4, the application program of the mobile phone 20 is designed to generate a transaction authorization request message, intended to be preferably transmitted to the bank server 40. The authorization request message transaction generated by the application program includes all the order taking information contained in the OR code previously decoded and also includes an identifier of the user, for example comprising an identifier of a user's bank account , and an identifier of the mobile phone. The mobile phone application program 20 thus establishes a connection via the Internet with the bank server 40 with which the user's bank account identifier and the mobile phone identifier are stored among the data relating to the user, and transmits to the bank server 40 the transaction authorization request message, preferably encrypted using for example a public key encryption system. The bank server 40 is then responsible for authenticating the authorization request message of the transaction received and verifying the creditworthiness of the user. To do this, the application program installed in the mobile phone 20 is designed to respond to an authentication request from the bank server. For example, a password allows the user to authenticate with the bank server 40. In this way, the vending machine 10 benefits from the expertise of the banking server 40 in terms of authentication and is relieved of this responsibility. complex operation. In addition, no confidential banking data passes through the vending machine 10. Following a positive authentication of the request for authorization of the transaction, the bank server 40 transmits, in a step S6, a certificate of authentication of the request for authorization. authorization of the transaction to the transaction server 30 responsible for managing the vending machine 10. This certificate includes, in addition for example a bank authorization number, at least part of the order taking information contained in the OR. code, among which in particular the order number of the order request corresponding to the current transaction. The sending of an authorization message of the transaction by the transaction server 30 to the automatic distributor 10 is then conditioned by the prior verification by the transaction server 30, in a step S7, of the integrity of the certificate of authentication received. For example, the certificate is sent, on the one hand, in clear and, on the other hand, in an encrypted manner, which can be deciphered by the transaction server 30, and the latter is designed to compare the certificate received in the clear with the decrypted certificate. to validate the request for authorization of the transaction.

Following this validation, in a step S8, the transaction server 30 formats the data of the received certificate into an authorization message of the transaction, which is transmitted to the automatic distributor 10 via the Internet network. Thus, at least part of the information contained in the OR code displayed on the vending machine 10, and in particular the order number of the order request and the amount of the transaction, is returned to the vending machine 10, after having passed through the mobile telephone 20, the bank server 40 and the transaction server 30, according to flows for authenticating and authorizing the transaction. The vending machine 10 is then designed to check, in a step S9, the concordance between the authorization message of the received transaction and the pending control request. To do this, the vending machine 10 checks the correspondence between the information received from the transaction server 30 and that displayed by the OR code 110, based in particular on the order number of the control request. In case of agreement, in a step S10, the vending machine 10 generates a control command intended for the operating automaton of the vending machine 10, allowing the execution of the control request, resulting in the delivery by the vending machine. operating system of the desired product to the user. After the machine has confirmed the delivery of the product, the vending machine 10 is designed to transmit, in a step S11, an acknowledgment message of the execution of the control request to the transaction server 30, allowing trigger the payment of the transaction. To do this, the transaction server 30 sends to the bank server 40, in a step S12, a confirmation message of the execution of the order request, including in particular the corresponding bank authorization number and the amount to be paid. The bank server 40 then generates a transfer order to trigger a transfer of funds corresponding to the amount to be paid from the user's bank account to the bank account of the merchant manager of the automatic dispenser 10. Thus, the bank account of the user is debited from the amount to be paid to that of the merchant manager of the vending machine 10 only after the delivery of the product has been made by the vending machine 10.

Claims (13)

REVENDICATIONS1. A method for conducting a transaction between a portable device (20) and a device (10) for delivering goods or services, characterized in that it comprises the steps of: - providing at least one configured transaction server (30) to validate a transaction authorization request; - activating (51) in the portable device (20) an application program configured to generate a transaction authorization request message to the transaction server (30), and - by means of the delivery device (10) of goods or services: - receiving (SO) a request for the ordering of goods or services submitted by a user of the portable device (20) and, in response, generating (S2) on the fly a single set of coded information ( 110) relating to the request for the control of goods or services received and to put the request on hold before execution during a non-zero bounded time slot, and - by means of the portable device (20): - to acquire (S3) the set unique encoded information (110) from the device (10) for issuing goods or services and providing the unique set of coded information to the application program for generating and transmitting (S4) the request message of transaction authorization; and by means of the device (10) for delivering goods or services: receiving (S8) an authorization message for the transaction sent by the transaction server (30) in the event of validation of the request for authorization of transaction ; checking (S9) the agreement between the authorization message of the received transaction and the request for the order of goods or services on standby, and - generating (S10) a command order allowing the execution of the command request goods or services in the event of concordance. 2. Method according to any one of claims 1, characterized in that it comprises the steps of: - connecting the transaction server (30) to a bank server (40) configured to receive the transaction authorization request from the portable device (10) and to authenticate (S5) the transaction authorization request, - transmit (S6) a certificate of authentication of the transaction authorization request from the bank server (40) to the server of transaction (30), and - using the transaction server (30), checking the integrity of the authentication certificate received to validate the transaction authorization request. 3. Method according to claim 2, characterized in that it comprises the steps of: - by means of the device (10) for issuing goods or services, transmitting (S11) a message of acknowledgment of the execution of the control request at least to the transaction server (30), and - transmit (S12), in response to the received acknowledgment message, a confirmation message of the execution of the command request from the transaction server ( 30) to the bank server (40), and - generate (S13) by means of the bank server (30), an order of payment of the amount of the transaction. 4. Method according to claim 2 or 3, characterized in that the bank server (40) is configured to check an identifier of the portable device (20) and / or the user and to check the creditworthiness of an associated bank account to the user of the portable device (20). 5. Method according to any one of the preceding claims, characterized in that it comprises the following steps: - constituting the single set of coded information (110) in the form of a multidimensional bar code, in particular a code of type OR code, and - display on a display unit (111) of the device (10) for issuing goods or services the multidimensional bar code. 6. Method according to claim 5, characterized in that the acquisition (S3) of the single set of information coded by means of the portable device (20) comprises the following step of: - performing a digital capture of the single set of coded information (110) displayed on the display unit (111) of the device (10) for delivering goods or services by photography of the display unit (111) by means of a device digital picture incorporated in the portable device (20). 7. Method according to any one of claims 1 to 4, characterized in that the acquisition (S3) of the single set of information coded by means of the portable device (20) comprises the following steps: - to establish at least one short-distance wireless data link between the goods or services delivery device (10) and the portable device (20), and - transfer the single coded information set of the device (10) for delivering goods or services to the portable device (20) via the established short-haul wireless data link. 8. The method as claimed in claim 7, characterized in that the short-distance wireless data link established between the device (10) for delivering goods or services and the portable device (20) is an infrared or radio frequency link. 9. Method according to any one of the preceding claims, characterized in that the single set of coded information (110) comprises at least the amount of the transaction corresponding to the pending request for order, an identification number of the device (10) for delivering goods or services and timestamping data of receipt of the order request. Method according to one of the preceding claims, characterized in that the single set of coded information (10) comprises a sequence number generated by the device (10) for issuing goods or services, which is uniquely associated with the pending control request and used to verify, by means of the device (10) for issuing goods or services, the match between the authorization message of the received transaction and the request for control waiting. 11. Device (10) for issuing goods or services comprising means (11) for human-machine interface for submitting a request for the control of goods or services to an operating system of the device for executing the command according to the submitted control request, characterized in that it comprises: - processing means (12) of the submitted request, configured to generate on the fly a single set of coded information (110) corresponding to the request control unit submitted, - a display unit (111) having a display area of the single set of coded information (110) generated by the processing means, - communication means (14) adapted to establish a communication channel with a transaction server (30) accessible via the Internet and configured to receive and process a transaction authorization request for the submitted command request, established from the set one coded information code (110), - means for receiving an authorization message of the transaction sent by the transaction server (30), - means for checking the agreement between the submitted control request and the authorization message of the transaction received from the transaction server, and - means for generating a control command to the operating system of the device (10) allowing the execution of the command by the controller in case of concordance established by the control means. 12. Device according to claim 11, characterized in that the processing means (12) comprise means for generating a multidimensional bar code, in particular of the OR code type, to form the single set of coded information (110). ). 13. Device according to any one of claims 11 or 12, characterized in that it comprises a module (13) for transmitting / receiving wireless data short distance adapted to emit a radio frequency signal or infrared to transmit the whole unique coded information.