Remote authentication for point of sale machine using a mobile number through unstructured supplementary service data

Patent metadata

Field	Value
Publication number	US-2016132853-A1
Application number	US-201414538256-A
Country	US
Kind code	A1
Filing date	Nov 11, 2014
Priority date	Nov 11, 2014
Publication date	May 12, 2016
Grant date	—

Abstract

Remotely authenticating an invoice amount for a sales transaction with a merchant through a mobile device of a user using a USSD session initiated by a telecom service provider. The provider receives a transaction request of at least a mobile phone number and invoice amount from a POS machine at the merchant. The provider identifies the user from the mobile number and generates a one-time purchase ID associated with the invoice and sends the purchase ID to the user through the mobile device. The provider initiates an interactive USSD session with the user through a gateway and sends a menu with transaction details and financial account list on the user's mobile device within the session including multiple financial accounts registered to the user. The provider receives a password from the user through the session and deducts the invoice amount from a user's account and transfers the funds to the merchant.

First claim

What is claimed is:

1 . A method of a user remotely authenticating an invoice amount for a sales transaction with a merchant through a mobile device using an unstructured supplementary service data session initiated by a telecom service provider, the method comprising the steps of:
the telecom service provider receiving a transaction request comprising at least a mobile phone number and the invoice amount from a point of sale machine at the merchant; the telecom service provider identifying the user from the mobile phone number received; the telecom service provider generating a one-time purchase identification associated with the invoice and sending the one-time purchase identification to the user through the mobile device; the telecom service provider initiating an interactive unstructured supplementary service data session with the user through a gateway; the telecom service provider sending a menu with transaction details on the user's mobile device through the data session; the telecom service provider receiving a password from the user through the unstructured supplementary service data session, deducting the invoice amount from a financial account associated with the user and transferring the invoice amount to a financial account associated with the merchant; and the telecom service provider sending an acknowledgement of payment of the invoice to the point of sale machine.

2 . The method of claim 1 , further comprising the step of the telecom service provider placing the transaction on hold after a specified time period without receiving the password from the user.

3 . The method of claim 1 , further comprising the step of the telecom service provider placing the transaction on hold when the user is engaged with the mobile phone.

4 . The method of claim 1 , wherein the telecom service provider is connected to the point of sale machine through Internet using a telecom identification number.

5 . The method of claim 1 , wherein the telecom service provider is connected to the point of sale machine through a unstructured supplementary service data session using a telecom identification number.

6 . The method of claim 1 , wherein the one-time purchase identification is sent to the mobile device via a message outside the unstructured supplementary service data session.

7 . The method of claim 1 , wherein the one-time purchase identification is sent to the mobile device via the unstructured supplementary service data gateway.

8 . The method of claim 1 , wherein the method further comprises the step of the telecom service provider receiving a choice from the user of a financial account out of a plurality of financial accounts associated with the mobile number of the user, from which to transfer the invoice amount to the financial account associated with the merchant.

9 . The method of claim 1 , wherein the user is present at the merchant.

10 . The method of claim 1 , wherein the user having the mobile device is not present at the merchant, and the sales transaction is initiated by another customer present at the merchant giving the mobile phone number associated with the user to the merchant.

11 . The method of claim 1 , in which if the telecom service provider does not receive the password within a specified time limit, the method ends.

12 . A computer program product for a user to remotely authenticating an invoice amount for a sales transaction with a merchant through a mobile device using an unstructured supplementary service data session initiated by a telecom service provider comprising a telecom service provider computer comprising at least one processor, one or more memories, one or more computer readable storage media, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by the computer to perform a method comprising:
receiving, by the telecom service provider computer, a transaction request comprising at least a mobile phone number and the invoice amount from a point of sale machine at the merchant; identifying, by the telecom service provider computer, the user from the mobile phone number received; generating, by the telecom service provider computer, a one-time purchase identification associated with the invoice and sending the one-time purchase identification to the user through the mobile device; initiating, by the telecom service provider computer, an interactive unstructured supplementary service data session with the user through a gateway; sending, by the telecom service provider computer, a menu with transaction details on the user's mobile device through the unstructured supplementary service data session; receiving, by the telecom service provider computer, a password from the user through the unstructured supplementary service data session, deducting the invoice amount from a financial account associated with the user and transferring the invoice amount to a financial account associated with the merchant; and sending, by the telecom service provider computer, an acknowledgement of payment of the invoice to the point of sale machine.

13 . The computer program product of claim 12 , wherein the program instructions further comprises receiving, by the telecom service provider, a choice from the user of a money account out of a plurality of money accounts associated with the mobile number of the user, from which to transfer the invoice amount to the financial account associated with the merchant.

14 . The computer program product of claim 12 , wherein the user is present at the merchant.

15 . The computer program product of claim 12 , wherein the user having the mobile device is not present at the merchant, and the sales transaction is initiated by another customer present at the merchant giving the mobile phone number associated with the user to the merchant.

16 . The computer program product of claim 12 , in which if the telecom service provider does not receive the password within a specified time limit, the program instructions end.

17 . A computer system for a user to remotely authenticating an invoice amount for a sales transaction with a merchant through a mobile device using an unstructured supplementary service data session initiated by a telecom service provider comprising a telecom service provider computer comprising at least one processor, one or more memories, one or more computer readable storage media having program instructions executable by the computer to perform the program instructions comprising:
receiving, by the telecom service provider computer, a transaction request comprising at least a mobile phone number and the invoice amount from a point of sale machine at the merchant; identifying, by the telecom service provider computer, the user from the mobile phone number received; generating, by the telecom service provider computer, a one-time purchase identification associated with the invoice and sending the one-time purchase identification to the user through the mobile device; initiating, by the telecom service provider computer, an interactive unstructured supplementary service data session with the user through a gateway; sending, by the telecom service provider computer, a menu with transaction details on the user's mobile device through the unstructured supplementary service data session; receiving, by the telecom service provider computer, a password from the user through the data session, deducting the invoice amount from a financial account associated with the user and transferrin

Assignees

• IBM

Inventors

• Kumar Saurabh
• Nahar Dharmendra

Classifications

• G06Q20/385 Primary

  using an alias or single-use codes · CPC title

• G06Q20/3226

  Use of secure elements separate from M-devices · CPC title

• G06Q20/206 Primary

  comprising security or operator identification provisions, e.g. password entry · CPC title

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/14

  specially adapted for billing systems · CPC title