WO2002013151A1

WO2002013151A1 - Electronic payment device using a consumer apparatus and a trader apparatus communicating through wireless link

Info

Publication number: WO2002013151A1
Application number: PCT/FR2001/002548
Authority: WO
Inventors: Pascal Moree; Marc Besnault
Original assignee: Thales E-Transactions S.A.
Priority date: 2000-08-04
Filing date: 2001-08-03
Publication date: 2002-02-14
Also published as: FR2812744A1; AU2001287786A1

Abstract

The invention concerns an electronic payment device comprising at least consumer payment means, used for reading a payment support belonging to said consumer, and a trader's payment terminal (710), used for carrying out a transaction with the consumer's payment means. The consumer's payment means comprises a wireless communication interface (703), means for reading the payment support (701), a central unit (702) including a storage and a microprocessor. The trader's payment terminal comprises a wireless communication interface (713) adapted to co-operate with the wireless communication interface of the payment means, a central unit (712) including a storage and a microprocessor. Programmes are stored in the storage units of said central units to prepare requests in the payment terminal which are sent to the payment means, to prepare replies to said requests in the payment means which are sent to the payment terminal, to process said replies in the payment terminal, and in accordance with a predetermined payment protocol. The invention is particularly applicable to transactions with contact or contact-free smart cards between an individual's personal electronic apparatus and a trader's sales outlet terminal.

Description

ELECTRONIC PAYMENT DEVICE USING AN APPARATUS

CONSUMER AND TRADING DEVICE

COMMUNICATING THROUGH WIRELESS LINK

The present invention relates to an electronic payment device by means of a consumer device and a merchant device communicating via a wireless link. It applies in particular to chip card transactions between a personal electronic device of an individual and a merchant's point of sale terminal. Electronic payment terminals (EPTs) are devices allowing electronic payment by card (such as smart cards or magnetic stripe cards). These VSEs are often linked by merchants to a cash register which ensures the management of the point of sale. A VSE connected to such a means of management is called a point of sale terminal (POS). Some VSEs have a portable device dedicated to reading smart cards and printing tickets. This portable device can rest on a base when not in use, and communicate with this base by a wireless link, in particular radio or infrared, when it is used. The base generally includes a modem which makes it possible to obtain direct debit authorizations from bank card organizations, and can itself be connected to a cash register for example.

One drawback of these TPEs is that they have a lot of expensive electronic components. The portable device generally includes at least one keyboard, a smart card reader, a magnetic stripe card reader, a display, a transmitter, a receiver, a battery, a processor, a printer. The base, for its part, comprises at least one transmitter, one receiver, one processor, one modem, one telephone socket, one network socket. Another drawback is that the market for these terminals is a professional market with a low sales volume. Compared to consumer devices, VSEs are therefore expensive devices. They represent a significant investment for merchants, who cannot always replace them at the rate of technological change, especially in the smart card sector. This is an obstacle to the technological development of new smart cards such as multi-application cards, multi-service cards, or electronic wallet cards which cannot be generalized. multi-application cards, multi-service cards, or electronic purses which cannot be generalized.

An object of the invention is to overcome the aforementioned drawbacks, and in particular to reduce the investment that an electronic payment terminal represents for a merchant.

To this end, the invention relates to an electronic payment device. This device comprises at least one means of payment for a consumer, used to read a payment medium belonging to said consumer, and a payment terminal of a merchant, used to carry out a transaction with the means of payment of the consumer. The means of payment for the consumer comprises a wireless communication interface, means for reading the payment medium, a central unit comprising a memory and a microprocessor. The merchant's payment terminal comprises a wireless communication interface capable of cooperating with the wireless communication interface of the payment means, a central unit comprising a memory and a microprocessor. Programs are stored in the memories of said central units to prepare requests in the payment terminal which are sent to the payment means, to prepare responses to said requests in the payment means which are sent to the payment terminal, to process said requests responses in the payment terminal, according to a predetermined payment protocol.

According to the invention, the consumer uses a personal electronic device to read his card, which has the main advantages of avoiding the risk of fraud, in particular of reading the secret code by dishonest merchants, to provide great simplicity. 'use, to be easy to handle, to allow the saving of the transactions carried out on the personal electronic device of the consumer, and to replace the paper tickets by electronic tickets. Other characteristics and advantages of the invention will appear more clearly in the description which follows and in the appended figures which represent:

- Figure 1, an example of an electronic payment terminal of the prior art; - Figure 2, an example of an electronic payment device according to the invention using a mobile phone; - Figure 3, an alternative embodiment of the invention advantageously comprising a multi-node link;

- Figure 4, another example of a smart card payment device according to the invention using a personal electronic assistant; - Figure 5, a personal electronic assistant comprising a serial link with a peripheral smart card reader;

- Figure 6, an example of use of the invention in a trade;

- Figure 7, a block diagram illustrating a device according to the invention;

- Figures 8 to 13, various steps of an example of payment protocol according to the invention.

We first refer to Figure 1 which shows an example of an electronic payment terminal of the prior art. This terminal is composed in particular of two elements communicating by a radio link.

A first element is a portable device 10 used to read smart cards. This device comprises in particular a smart card reader 11, a module for transmitting and receiving radio signals 12, a thermal printer 1, a display 2, such as a liquid crystal screen, a numeric keyboard 3, a processor , as well as a battery.

A second element is a base 13 on which the portable device 10 can rest. This base comprises in particular a modem, a radio transmission and reception module 14, a connection 15 to a telephone line, a connection 16 to a device such a cash register, a socket 4 for recharging the battery of the portable device 10, as well as a power supply, not shown.

We now describe the conventional operation of such a payment terminal. A consumer pays with his chip card for an item at a merchant owning the payment terminal described above. The merchant enters the amount of the transaction on a cash register connected to the base 13 by the link 16. This cash register can for example be a computer dedicated to this use. The transaction amount, transmitted by radio from the transmitter 14 of the base 13 to the receiver 12 of the portable device 10, is displayed on the screen 2. The consumer checks the amount of the displayed transaction, inserts its smart card into the reader 11 and enters its secret code on the keyboard 3. The processor of the portable device 10 performs the processing necessary for negotiating the payment protocol. For example, it processes the data read from the card, checks the secret code, checks that the card limit is exceeded, calculates a certificate, prepares the data for writing the transaction to the card. During the negotiation of the payment protocol, the portable device 10 communicates data with the base 13 by the radio link, which can in turn communicate via its modem with an organization to authorize the transaction, such as a bank card organization.

A drawback of this type of device is its cost, linked in particular to the number of electronic components it comprises. It is possible to reduce the number of components, but these savings come at the expense of ergonomics or functionality. One can for example make the portable device integral with its base, which amounts to saying that the device is no longer portable (because of its high weight and its size). Another solution is to link the device to its base with a wire connection. A common embodiment is the confidential code box. This box replaces the portable device, but does not include a printer, and is connected by wire to the base. Such a housing is more economical because it has fewer electronic elements. On the other hand, the wire limits the distance at which one can move away from the base, which in particular makes its use impossible in restaurants. In addition, it does not include a printer, which requires placing this ticket printing function on another device such as a cash register.

Another factor contributing to the high cost of these devices is the market for which they are intended. The sales volume of these devices is very low compared to consumer electronics. Another drawback, linked to the aforementioned drawbacks, is the lack of responsiveness of the payment terminal market to new technologies, in particular of payment by smart card. This is a considerable obstacle to the launch of new cards such as multi-application cards, multi-service cards or electronic wallet cards. In fact, to be adopted by consumers, the majority of merchants must be equipped with the associated reading means. In order to overcome the aforementioned drawbacks, and in particular to reduce the investment which an electronic payment terminal represents for a merchant, the invention relates to an electronic card payment device which considerably reduces the number of electronic components used without however harming ergonomics or functionality.

Today, personal electronic devices such as mobile phones or personal electronic assistants are increasingly equipped with wireless communication means for new applications requiring short distance communications. One of these applications is the home network, also known as "Home RF" in the English literature, which allows personal electronic devices to communicate with each other and with computers. Another application is linked to the development of the Internet. In particular, the standard "WAP" (English initials for "Wireless Application Protocol") from Motorola, Ericsson and Nokia provides simplified Internet access to mobile phones, electronic organizers and other personal electronic assistants. These electronic devices are consequently equipped in series with wireless communication means such as for example radioelectric links of the Bluetooth type, infrared links, or acoustic links.

Other applications are leading manufacturers to add a card reader to mobile phones and PDAs. In particular, portable telephones equipped with smart card readers, also called dual-slot telephones, would allow a prepaid telephone card of a user to be recharged from the smart card reader of his own portable telephone. We can also cite personal electronic assistants which allow French doctors to read a health card, the Sesam Vitale smart card. More generally, smart cards seem to be the most suitable medium for storing personal information (for example health cards, loyalty cards) and their use is becoming more widespread, which leads manufacturers of personal electronic assistants to add the smart card reading interfaces. The invention therefore proposes to use these personal electronic devices equipped with wireless communication and reading means. card intended for a general public market for a use other than that for which they are intended, ie using them in the field of electronic banking for local trade. Local commerce is opposed to distance commerce, such as commerce on the Internet. Indeed, in local commerce, the merchant and the consumer see each other, while in distance commerce, the exchanges between merchant and consumer are dematerialized. When such personal electronic devices are used in distance commerce, exchanges are not made directly between the merchant and the consumer. These exchanges are made through financial organizations. According to the invention, the merchant and the consumer exchange data directly with one another. The client does not need to establish a link with a financial organization. Thus, exchanges are simplified, faster and safer.

Reference is now made to FIG. 2 which represents an example of an electronic card payment device according to the invention using a portable telephone 20. The portable telephone 20 of a consumer is equipped with a radio link, for example Bluetooth 22 and d a smart card reader 21. The portable telephone 20 further comprises a central unit comprising a microprocessor and a memory. Programs are stored in this memory. These programs allow the processing necessary to prepare data to be exchanged according to a predetermined payment protocol. They also make it possible to format this data according to a predetermined communication protocol. The communication protocol and the payment protocol make it possible to communicate with the merchant's payment terminal. The merchant's payment terminal includes a modem 23 equipped with a Bluetooth link 24. The merchant's payment terminal is able to communicate with the mobile telephone 20 by said link and using the aforementioned communication protocol and payment protocol. The modem has a connection 25 to a telephone line, a connection 26 to a transaction recording device such as a cash register. The invention has an economic advantage for the trader. Indeed, the use of a personal electronic device saves part of the electronic components necessary for the merchant's payment terminal. The electronic components which are no longer the responsibility of the merchant are in particular: a display, a keyboard, a receiver, a transmitter, a processor, a smart card reader. In addition, the consumer market offers economies of scale, and therefore offers a low-cost personal electronic device. The equipment rate is therefore high and the product life cycles are short. Thus, financial organizations can more easily and quickly introduce smart card payment protocols for new electronic wallet cards, multi-application cards, or multi-service cards.

The invention also has advantages for the consumer. First, it increases payment security. Indeed, merchant point of sale terminals are never entirely reliable. There is always a risk of merchant fraud, such as the use of a modified device which registers secret codes and consumer card numbers. Thanks to the invention, the consumer uses his own electronic device, is no longer subject to this risk of fraud.

Another advantage concerns the simplicity of use. This is particularly useful for complex payment transactions. For example, when paying with a multi-application card, the consumer can have the choice between: paying the whole of their purchase from a bank account, using a store credit, paying with electronic money, or share the purchase amount between several different payment methods. To simplify these operations, the consumer can for example personalize his electronic device so as to always use his bank account for large amounts, and electronic money for others.

Another advantage of the invention is the maneuverability of the device compared to traditional payment terminals. Personal electronic devices are designed to be as light and small as possible. They are therefore much more manageable than existing portable payment terminals. This allows for example a consumer to hide the keyboard from prying eyes when entering his secret code by orienting the device vertically. The invention has another practical advantage, especially when paying in places where the merchant and the consumer are separated by a hygiaphone. Generally, the consumer must swipe his smart card under the hygienic phone, and dial his secret code on a confidential code keyboard placed on his side of the hygienic phone. The invention allows the consumer to use a personal electronic device to make the payment. He no longer needs to entrust his chip card to the merchant, and the merchant no longer needs to leave part of his payment terminal available to the consumer.

Reference is now made to FIG. 3 which represents an advantageous alternative embodiment of the invention comprising a multi-node link. This link makes it possible to share a peripheral such as a printer or a modem of several point of sale terminals. In this example, a mobile phone 20 communicates via a Bluetooth link 22 with a cash register 30 equipped with a Bluetooth link 32. The cash register in turn communicates with its Bluetooth link 32 with a modem 23. The modem 23 is of course also equipped with a Bluetooth 24 link. In other words, the cash register 30 communicates by Bluetooth link with the telephone 20 on the one hand and the modem 23 on the other hand. This arrangement allows several cash registers to share the same modem, which is of economic interest to the merchant.

Reference is now made to FIG. 4 which represents another example of a chip card payment device according to the invention using a personal electronic agenda.

This electronic agenda 40 is equipped with a Bluetooth radio link 42 and a smart card reader 41. It communicates in the same way as the mobile phone of the previous example with the merchant's electronic payment terminal.

An advantage of this device is that the personal electronic assistant can automatically record information relating to the transactions, such as their amounts and their dates. This information can then be further processed by a program residing in the personal electronic assistant itself or in a microcomputer after the transfer of this information. For example the program can calculate an account balance, find a transaction according to certain criteria, or help manage a personal budget. In other words, paper tickets are replaced by electronic tickets, which allows automated processing. We now refer to FIG. 5 which represents a personal electronic assistant 50 comprising a serial link 53 with a peripheral smart card reader 54. This smart card reader 54 is connected to the personal electronic assistant 50 by a serial link 53 of the USB (“Universal Serial Bus”) type for example. Reading the card controlled by software of the personal electronic assistant 50. In the same way as the mobile phone in FIG. 3, the personal electronic device 50 includes a wireless link 52 with a merchant's electronic payment terminal. . Thus, one can use a personal electronic device not originally equipped with a card reader, to which a card reader is added using a standard interface. A secret code can be transmitted by this link without risk of interception for the consumer because the reading device belongs to him.

According to an advantageous variant, the card reader can be integrated into the personal electronic device so that the card remains permanently in the box of the personal electronic assistant. Thus, the consumer no longer needs to insert his card into his personal electronic assistant, which then also serves as his card holder.

According to another variant, the card reader can be a contactless reader. Generally speaking, the physical card reading interface being on the consumer side and no longer on the merchant side, the card manufacturers can introduce card formats and communication interfaces with said specific cards. The need for a standard is located at the interface between the consumer device and the merchant device, and no longer between a card and a card reading device.

Referring now to Figure 6 which shows an example of use of the invention in a business, such as a restaurant. A consumer 63 has a personal electronic device 60 equipped with a Bluetooth link 61 and a smart card reader 62. A merchant 66 holds in his hand a portable device 64 equipped with a Bluetooth link 65. The portable device 64 of the merchant communicates by Bluetooth link with a cash register 68. Of course, the cash register 68 is itself equipped with a Bluetooth link 67.

The merchant 66 uses his portable device 64 to enter and send a payment request to the consumer's device 60. The consumer inserts his card into the reader 62, and accepts the transaction. If the amount of the transaction is large, the portable device 64 communicates with the cash register 68, which transmits a transaction authorization request to a remote authorization server. When the cash register 68 receives the response from the remote authorization server, the latter transmits it to the portable device 64. The portable device 64 then continues the payment with the device 60.

According to an advantageous embodiment, the portable device 64 is a personal electronic device. This electronic device 64 allows the merchant, thanks to a resident program, to record the consumer's order when the order is taken. This command is sent to the cash register 68 on the one hand, and to the personal electronic device 60 of the consumer on the other hand. Thus, the order is recorded in the cash register, and the customer receives an electronic ticket corresponding to this order. In other words, the various stages such as taking orders, printing a receipt, are carried out electronically. When paying, the merchant no longer needs to enter the transaction amount, because it is already recorded.

FIG. 7 illustrates by a block diagram a device according to the invention.

An apparatus 700 belonging to a consumer is equipped with means for reading a payment medium 701, a central unit 702 operatively connected to the reading means 701, and wireless communication means 703 functionally connected to the central unit 702. The consumer device 700 may for example be a mobile telephone or a personal electronic assistant. The reading means 701 are for example a smart card reader with or without contact, or a magnetic strip card reader. These reading means 701 are placed for example in the housing of the device 700, or can be connected to the device 700 by a serial link. The central unit 702 controls the reading means 701 and communication 703 with programs residing in said central unit. These programs include a communication protocol and a payment protocol. The communication protocol can for example be the Bluetooth communication protocol. Those skilled in the art will be able to obtain technical information relating to this protocol on the official Bluetooth site, the Internet address of which is “https://www.bluetooth.net”. and in particular in the specification documents of the Bluetooth standard. In addition, by way of illustration, an example of a payment protocol will be described in the following description.

An apparatus 710 belonging to a merchant is equipped with means for processing the transaction 711 denoted means A, a central unit 712 operatively connected to the means A (processing means 711), and wireless communication means 713 functionally connected to the central unit 712. The commercial device 710 can be for example a modem equipped with a central unit, a cash register, a personal electronic assistant. The means A (processing means 711) are then for example means of communication to an authorization center (modem), means of recording the transaction (cash register), means of entering transaction data (assistant personal electronics). In general, the means A (processing means 711) make it possible to carry out all the operations necessary during a transaction between the consumer and the merchant which are not carried out by the consumer device 700. The central unit 712 controls the means A (processing means 711) and the wireless communication means 713 with programs residing in said central unit. These programs are in particular a communication protocol and a payment protocol compatible with those of the consumer device 700.

The consumer apparatus 700 and the merchant apparatus 710 communicate with each other with their respective wireless communication means 703, 713. The merchant apparatus 710 initiates the transaction on the merchant's orders. The consumer device 700 responds to the merchant device with the aforementioned communication protocol. A wireless link is established between the two devices 700, 710. During the course of the transaction, the two devices 700, 710 exchange data, also called messages, according to the aforementioned payment protocol. The format of these messages depends on the communication protocol, the content of these payment protocol messages. Messages can be encrypted to prevent interception or interference. Those skilled in the art will be able to refer to the document "Bluetooth SIGnal - The officiai newsletter of the Bluetooth Spécial Interest Goup" - number 3, September 1999, in which an example of an encrypted Bluetooth connection is described. When the transaction is complete, communication between the two devices ends.

According to an advantageous variant, the merchant device 710 communicates according to a master / slave relationship with at least one other device 720 belonging to the merchant. The first trader 710 is the master, the other trader 720 is the slave. The slave trading device 720 is equipped with processing means 721 denoted means B, a central unit 722 operatively connected to means B (processing means 721), and wireless communication means 723 functionally connected to the central unit 722. The wireless communication means 723 of the slave device are compatible with the wireless communication means 713 of the master device. The central unit 722 controls the wireless communication means 723 and the means B (processing means 721) using a program residing in said central unit. These programs are in particular a communication protocol with the master device 710 and a program for managing the means B (processing means 721). The slave device 720 can be for example a modem equipped with a microprocessor or a cash register. The means B (processing means 721) are then for example means of communication to an authorization center (modem), means of recording the transaction (cash register). Generally, the means B (processing means 721) make it possible to carry out all the operations necessary during a transaction between the consumer and the merchant which are not carried out by the consumer device 700 or the master device 710 Thus, according to this advantageous variant, it is possible to transfer functionalities, initially carried out by means A (processing means 711), from the master device 710 to the slave device 720. This in particular allows savings to be made, in sharing means B (processing means 721) with several master devices. For example, it is possible to connect multiple master personal electronic devices 710 to a single slave cash register. Means B (processing means 721) shared between the master devices 710 are then the recording and transaction authorization means.

Reference is now made to FIGS. 8 to 13 to describe an example of a payment protocol. This payment protocol was initially intended to connect an IBM 4683/4693 point of sale terminal with a smart card reader. As an example, it is proposed to adapt this protocol to the invention.

We describe the data exchanged according to this protocol between a commercial device on the one hand and a consumer device on the other hand, as well as the operations carried out on both sides. In other words, we are now interested in the data exchanged between the consumer device 700 and the merchant device 710 via their wireless communication means 703, 713, as well as the operations carried out by their units. central units 702, 712. In this example, it is considered that there is only one merchant device (no master / slave ratio). It is of course possible to adapt this protocol in the case where some of the operations must be carried out by a slave merchant device 720. In this case, these operations are executed by the slave apparatus 720 at the request of the master apparatus 710, and the result transmitted to the master device 710. It is thus possible to assimilate from a functional point of view the master / slave assembly to a single fictitious commercial device.

By way of illustration, it is considered here that the means for reading a payment medium 701 from the consumer device 700 is a chip card reader (also called memory cards).

According to the payment protocol, the consumer device and the merchant device exchange messages. The first messages from the merchant device are requests addressed to the consumer device. Second messages from the consumer device are responses to requests. The requests are also called requests for processing, or request for a function. The responses are also called processing report, or execution report. The sending of treatment requests or treatment reports by the merchant device or the consumer device results in the exchange of several messages making it possible to synchronize the two devices and to ensure that the information is received correctly. . These messages from synchronization or verification of the reception of information is the responsibility of the communication protocol and not of the payment protocol.

The payment protocol is a dialogue between the merchant device and the consumer device. In this dialog, a set of function request messages to be produced are sent by the merchant. In return, a production report is issued by the consumer device, ie the card reader. Each phase of card processing corresponds to a function request message. For example: reading a card, checking the confidential code. There is a response to each function request message.

Reference is now made to FIG. 8 in which is illustrated the dialogue between the shopping appliance and the consumer appliance during a card reading request. The merchant device sends a processing request to the consumer device. This processing request is a card read request 801. The data transmitted 800 from the merchant device to the consumer device can be a function code, for example a number coded on a byte. Once the request has been issued, the merchant device waits 802 for a response from the consumer device, ie from the card reader. If this operation must be canceled, a procedure defined at the level of the merchant device (a sequence of keys for example) causes the sending of an abandonment message to the consumer device. For its part, the consumer device performs the following operations. It is first in a request waiting state 811 when it receives the data 800 transmitted by the merchant device. The consumer device then performs an authentication 812 and a reading 813 of the card. Once these operations have been carried out, the consumer device prepares a response for reading the card 814. It sends a report 810 of production, that is to say data read from the card. The report 810 issued by the consumer device contains for example a reminder of the function code, the card holder number, the card registration code, the start and end dates of validity of the card , the bank code (“BIN” or “Bank Identification Number”), the service code, the currency, the language and a status word. The status word indicates the state in which the card is located. The status word is for example a number whose meaning is as follows: 0: card OK;

1: a code error;

2: two code errors; 4: blocked card; 8: full code area (full card).

Upon receipt of the report 810, the merchant performs several checks 803 of the data contained in the report 810. These checks are sometimes called card validation checks. The commercial device notably carries out checks on the carrier number (“Luhn” key check), bank code (“BIN”), service code, validity dates, black list, status word . If for example the status word indicates that the card is blocked or that the card is full, the merchant device displays an anomaly message and sends an abandonment message to the consumer device. These operations 801, 802, 803, 811, 812, 813, 814 constitute an example of card authentication. Card authentication is the process of verifying that a card has been issued by a bank card organization. This notion of card authentication extends to any payment medium. The authentication of a payment medium consists in verifying that said payment medium has indeed been issued by an authorized body.

Reference is now made to FIG. 9 in which the dialogue between the merchant device and the consumer device is illustrated during a request for control of the confidential code. This request for control of confidential code 901 comes after the controls 803 described above. The request for control of confidential code 901 is issued by the merchant device. The data transmitted 900 from the merchant device to the consumer device contains for example a function code (such as a number coded on a byte), a carrier number, a debit amount and the date of the day. Once this request has been sent, the merchant device waits 902 for a response from the consumer device. If this operation must be canceled, a procedure defined at the level of the merchant device (a sequence of keys for example) causes the sending of an abandonment message to the consumer device. For its part, the consumer device performs the following operations. It is first in a 911 request waiting state when it receives the data 900 transmitted by the merchant device. Upon receipt of 900 data, the device consumer allows the consumer to enter his confidential code 912. This entry of the confidential code involves only the consumer device and the code is not transmitted to another device. The confidential code is validated 913 by the card at the consumer device. If this code is valid, the consumer device checks 914 the amount of the debit against the ceiling of the card. The consumer device then prepares a confidential code control response 915. It issues an achievement report 910, that is to say validity data of the code entered. The report 910 issued by the consumer device contains for example the recall of the function code, validation information, a status word, a filling indicator. The validation information can be for example a number whose meaning is as follows:

• 1: valid secret code and debit amount below the ceiling; "2: valid secret code and debit amount higher than the ceiling;

^» 9: invalid or unprocessed secret code.

The status word is for example a number whose meaning is as follows: - 0: card OK; • 1: a code error;

• 2: two code errors;

• 4: blocked card;

"8: full code area (full card);

"9: code area almost full. The filling indicator can for example be a number whose meaning is as follows:

^» 0: OK (default value);

"1: transaction area almost full;

• 2: full transaction area. These operations 901, 902, 911, 912, 913, 914, 915 constitute an example of carrier authentication. Holder authentication is the operation which consists in verifying that the holder of a card is indeed the owner, and if necessary blocking said card. This notion of carrier authentication extends to any payment medium. It is then a question of verifying that said payment medium belongs to the bearer. In the case of a valid secret code but card limit exceeded, the merchant apparatus transmits an authorization request for transaction 903 to an authorization center. Likewise, in the case of a full transaction zone, the merchant apparatus transmits an authorization request 903 to an authorization center. This authorization results in the sending of information from the merchant to the authorization center. This information is for example an identification of the merchant, the activity of the merchant, the identification of the customer, the amount of the transaction, the date of the transaction. In return, the authorization center sends the merchant an authorization number. The transaction authorization request does not involve the consumer's device. This is one of the operations carried out by means A (means 711) or means B (means 721) mentioned above.

Reference is now made to FIG. 10 in which the dialogue between the merchant apparatus and the consumer apparatus is illustrated during a write request and a transaction certificate. The merchant device sends a write request and a transaction certificate 1001. This request 1001 comes after the authentication of the bearer (and possibly the transaction authorization). The data transmitted 1000 from the merchant device to the consumer device include for example a function code, the number of the carrier, the amount of the debit, the date of the day, an identification of the merchant device, the time of writing of the transaction, identification of the merchant. Once the request has been issued, the merchant device waits 1002 for a response from the consumer device. For its part, the consumer device performs the following operations. It is first in a request waiting state 1011 when it receives the data 1000 transmitted by the merchant device. On receipt of the data 1000, the consumer device records 1012 the transaction in the smart card. The consumer device then prepares a response 1013 to the request for writing and for a certificate. It issues a 1010 achievement report attesting that the payment is good. The report 1010 issued by the consumer device contains, for example, a reminder of the function code, a code indicating whether registration has taken place, a certificate. The value of the certificate is calculated by the consumer device. This is for example data 1000 signed with a key contained in the smart card. Payment is deemed good only after receipt of this message. The certificate is always returned, even if the transaction could not be written to the card.

Reference is now made to FIG. 11, on which the dialogue between the merchant device and the consumer device is illustrated during a card presence test. The merchant device sends 1101 a card presence test request to the consumer device. Such a request can be sent by the merchant at any time. Its purpose is to test the presence of a card in the card reader of the consumer device. The data transmitted 1100 is for example a function code. The merchant then waits 1102 for a response from the consumer. The consumer device tests the presence of a card 11 1 upon receipt of the data transmitted 1100 by the merchant device. The consumer device then sends a response 1112. The data sent 1110 by the consumer device include, for example, a recall of the function code and a number equal to "0" or "1". The answer "1" means that a card is physically present in the card reader of the consumer device. Otherwise, the answer is "0".

Reference is now made to FIG. 12 on which is illustrated a request for abandonment on the part of the trading apparatus. The merchant device sends 1201 a request to abandon the consumer device to cancel the operation in progress. This request takes place for example if the merchant wishes to cancel the operation (the consumer does not find his card, does not remember his secret code ...), the validation checks of the card fail, the response to a request authorization leads to a refusal of payment. There is no response to this message from the consumer device. The data sent 1200 is for example a function code. When the consumer device receives 1211 this message, it aborts 1212 the transaction. Reference is now made to FIG. 13 in which is illustrated the dialogue between the shopping appliance and the consumer appliance during a request for blocking the card. The shopping appliance sends 1301 a card blocking request to block the chip. This request takes place for example if the carrier number is present on a black list, or if the response from the authorization center is "PROHIBITED". The data transmitted 1300 are for example a function code and the number of the carrier. Once once these data have been sent, the merchant appliance waits 1302 for a response. For its part, the consumer device performs the following operations. It is first in a waiting state 1311 when it receives the data 1300 transmitted by the merchant device. After receiving this data, the consumer device blocks 1312 the card chip. Then he issues 1313 a response to the merchant. The data 1310 transmitted include for example a reminder of the function code and a status word. The status word can be “4” to signify that the card is blocked, or “8” to signify that the code area is full.

Of course, the present invention is not limited to the embodiment described above by way of example. It extends to other variants.

Advantageously, the consumer device can contain a means of identifying the holder using information not contained in the payment medium. A first identification means can for example be an identification module contained in the consumer device. This identification module can for example be a “SIM” card (Suscriber Identifaction Module) of a mobile telephone. Another means of identification can be a biometric sensor. Such a sensor can for example be a fingerprint sensor placed on the consumer device, which recognizes a characteristic signature which it compares to a signature stored either in the card or in a memory of the device.

It will also be understood that the chip card reader can be placed in the housing of the consumer device so that the chip card resides permanently in said housing, in the manner of "SIM" cards in mobile telephones.

It will also be understood that the merchant device and the consumer device can both be portable telephones for example. Mobile phones communicate with each other via a wireless link. The merchant's mobile phone communicates with an authorization center by establishing a telephone call. The consumer's mobile phone reads the consumer's payment medium.

Claims

1. Electronic payment device characterized in that it comprises at least: (a) a means of payment for a consumer, used to read a payment medium belonging to said consumer, said means of payment comprising a wireless communication interface , means for reading the payment medium, a central unit comprising a memory and a microprocessor; (b) a merchant's payment terminal, used to carry out a transaction with the consumer's means of payment, said payment terminal comprising a wireless communication interface capable of cooperating with the wireless communication interface of the means of payment, a central unit comprising a memory and a microprocessor; (c) programs stored in the memories of said central units for preparing requests in the payment terminal which are sent to the payment means, for preparing responses to said requests in the payment means which are sent to the payment terminal, for process said responses in the payment terminal, according to a predetermined payment protocol.

2. Payment method for a consumer, characterized in that it is intended to read a payment medium belonging to said consumer during a transaction with a payment terminal belonging to a merchant, and that it comprises at least:

(a) wireless communication means for communicating with the payment terminal;

(b) reading means for reading said payment medium;

(c) a central unit comprising a memory and a microprocessor, operatively connected to the wireless communication means and to the reading means for carrying out the transaction with the payment terminal according to a payment protocol;

(d) a program, stored in the memory of the central unit, for preparing responses to requests sent by the payment terminal, according to the payment protocol.

3. Payment terminal of a merchant characterized in that it is intended to carry out a transaction with the means of payment of a consumer, and that it comprises at least:

(a) wireless communication means for communicating with the payment means;

(b) a central unit comprising a memory and a microprocessor, operatively connected to the wireless communication means for carrying out the transaction with the payment means according to a payment protocol; (c) a program, stored in the memory of the central unit, for preparing requests to be sent to the means of payment, and for processing the responses to said requests coming from the means of payment, according to the payment protocol.

4. Payment terminal of a merchant according to the claim

3 characterized in that it is formed from at least two devices:

(a) a first device being a master device, which communicates with the means of payment of the consumer;

(b) one or more other devices being slave devices, which communicate with the master device in a master / slave relationship, the master device using the same wireless communication means to communicate with the consumer's payment means and the or the slave apparatuses, the master apparatus and the slave apparatus or apparatuses being able to carry out the transaction with the means of payment by means of transactions distributed between them.

5. Device according to one of the preceding claims, characterized in that the means of payment is a mobile telephone or a personal electronic assistant.

6. Device according to one of the preceding claims, characterized in that the payment medium is a smart card with or without contact, and that the means for reading a payment medium are a smart card reader.

7. Device one of the preceding claims characterized in that the means of payment and the payment terminal are mobile phones.

8. Device one of the preceding claims characterized in that the personal electronic device is equipped with an electronic means of identification of the SIM type carrier (Suscriber Identification Module).

9. Device according to one of the preceding claims, characterized in that the personal electronic device is equipped with a biometric means for identifying the wearer of the fingerprint sensor type.

10. Device according to one of the preceding claims, characterized in that the wireless communication means is a radio link of the Bluetooth type.

11. Device according to one of claims 1 to 9 characterized in that the wireless communication means is an infrared link.

12. Device according to one of claims 1 to 9 characterized in that the wireless communication means is an acoustic connection.

13. Payment method using a means of payment for a consumer and a merchant's payment terminal comprising the following steps:

(a) establishing wireless communication between the consumer device and the merchant device, through which the merchant device sends requests to the consumer device, and the consumer device sends responses to the trading apparatus;

(b) the reading of the payment medium that the consumer uses to make the payment, this reading being carried out with the means of payment of the consumer at the request of the merchant;

(c) verification of the proper progress of this reading by the merchant; (d) sending a message indicating the success or failure of the transaction, from the merchant device to the consumer device, to complete the transaction and the communication between the consumer device and the merchant device.