Method for carrying out a transaction, terminal, server and corresponding computer program

Patent metadata

Field	Value
Publication number	US-11620646-B2
Application number	US-201916415422-A
Country	US
Kind code	B2
Filing date	May 17, 2019
Priority date	May 18, 2018
Publication date	Apr 4, 2023
Grant date	Apr 4, 2023

Abstract

A method for processing a transaction of a communications terminal, asking a server, through a communications network, for processing of a transaction involving the use of payment data. The method is implemented within the communications terminal. The method includes: transmitting a request for obtaining a certification code to the payment method whose data is used for the transaction; receiving the certification code coming from the payment method; inserting the certification code into a transaction data structure; transmitting the transaction data structure to the server; and when the certification code received by the server is valid, receiving a piece of data representing the validation of the transaction by the server.

First claim

The invention claimed is:

1. A method for processing a transaction between a communications terminal of a user and a server through a communications network, wherein the transaction is a payment transaction involving use of payment data provided by the user's communications terminal during execution of the transaction, wherein the method comprises the following acts performed by the communications terminal of the user:
transmitting a request for obtaining a certification code from the user's communications terminal to a payment device of the user;
after transmitting the request for obtaining the aforementioned certification code, receiving, from the payment device, the aforementioned certification code;
inserting said certification code into a transaction data structure of the user's communications terminal;
transmitting the transaction data structure from the user's communications terminal to said server; and
receiving a piece of data representing validation of the transaction by said server, indicating the certification code transmitted to the server compares positively with an expected certification code;

wherein the method further comprises the following acts performed by the payment device:
recording the payment data that is used for the transaction;
generating the certification code as a function of at least one piece of data of said payment device and at least one piece of data of the user's communications terminal transmitted in the request;

and wherein the payment device is distinct from the user's communications terminal.

2. The method for processing a transaction according to claim 1 , wherein the method further comprises:
a preliminary act of the user's communications terminal determining a value of a certification parameter, said certification parameter being linked to said transaction; and
inserting the value of the certification parameter into the request for obtaining a certification code.

3. The method for processing a transaction according to claim 2 , wherein the certification parameter belongs to the group consisting of:
a parameter of a function for creating said certification code;
a value representing a merchant's identifier;
a value representing a communications terminal identifier;
a value representing the transaction;
a value representing a date and/or time of the transaction.

4. The method for processing a transaction according to claim 1 , wherein inserting said certification code within a transaction data structure comprises a selection, from among a plurality of available fields, of an existing specific field.

5. The method for processing a transaction according to claim 4 , wherein the specific field is the field dedicated to reception of a card verification value.

6. The method for processing a transaction according to claim 2 , wherein the certification parameter comprises a piece of data representing an identifier of said communications terminal and a piece of data representing an actual time of the transaction.

7. The method for processing a transaction according to claim 1 , wherein the certification code represents a result of an encryption operation carried out by said payment device, said encryption operation being performed by using the user's communications terminal and an encryption key held by said payment device, said certification code being received by the user's communications terminal over an NFC-type communication after the encryption operation.

8. The method for processing a transaction according to claim 1 , wherein the user's communications terminal transmits the request to the payment device and receives the certification code from the payment device by near field communication (NFC) using an NFC antenna.

9. The method for processing a transaction according to claim 1 , wherein the data structure in which the certification code is inserted further comprises the payment data associated with the payment device.

10. The method for processing a transaction according to claim 1 , wherein the payment device is a payment card.

11. The method for processing a transaction according to claim 1 , wherein the payment device is another communications terminal.

12. A processing server for processing a transaction, wherein the transaction is a payment transaction involving use of payment data provided by a user's communications terminal during execution of the transaction, the processing server taking the form of an electronic device connected to a communications network, said processing server comprising:
a processor; and
a non-transitory computer-readable medium comprising instructions stored thereon, which when executed by the processor configure the processing server to perform acts comprising:
receiving a transactional request from the user's communications terminal, comprising at least one piece of data representing a payment to be made through said user's communications terminal and a certification code, said certification code being a function of at least one piece of data of the payment device and at least one piece of data of the user's communications terminal, the payment device of the user being distinct from the user's communications terminal;
obtaining a piece of verification data for verifying the certification code generated by the payment device used for the transaction;
determining a current certification code associated with the at least one piece of data representing a payment to be made through said user's communications terminal received within the aforementioned transactional request;
comparing certification code received with the transactional request with the current certification code; and
providing a third-party entity with a transaction authorization when said comparison is positive.

13. A user's communications terminal comprising:
a processor; and
a non-transitory computer-readable medium comprising instructions stored thereon, which when executed by the processor configure the user's communications terminal to process a transaction between the user's communications terminal and a server through a communications network, wherein the transaction is a payment transaction involving use of payment data provided by the user's communications terminal during execution of the transaction, by performing acts comprising:
processing the transaction;
transmitting a request for obtaining a certification code from the user's communications terminal to a payment device of the user on which is recorded the payment data that is used for the transaction, the payment device being distinct from the user's communications terminal;
after transmitting the request for obtaining the aforementioned certification code, receiving, from said payment device, the aforementioned certification code, which is a function of at least one piece of data of said payment device and at least one piece of data of the user's communications terminal transmitted in the request;
inserting said certification code into a transaction data structure of the user's communication terminal;
transmitting the transaction data structure from the user's communications terminal to said server; and
receiving a piece of data representing validation of the transaction by said server, indicating the certification code transmitted to the server compares positively with an expected certification code.

14. A non-transitory computer-readable medium comprising program code instructions stored thereon for executing a method for processing a transaction between a communications terminal of a user and a server through a communications network, when the instructions are executed by a processor of

Assignees

• Banks And Acquirers Int Holding

Inventors

• Quentin Pierre

Classifications

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04W12/40

  Security arrangements using identity modules · CPC title

• H04W12/069

  using certificates or pre-shared keys · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L63/0838

  using one-time-passwords · CPC title