DE10022973A1 - Method of conducting financial transactions via an electronic transmission medium, requires a subscriber to be initially accessed into a main server for identification via a specific identification code - Google Patents

Abstract

Conducting electronic trade and commercial dealings using an electronic currency system, such as via the commercial arm of the Internet, requires a secure and reliable basis for conducting transactions e.g. by smart card , credit card or SET-system etc. To provide an improved and simplified method of doing business etc electronically, it is proposed that the subscriber (1) is now initially accessed into a main server (3) and a sales server (4) , the subscriber being identified in the main server (3) on the basis of a specific identification code; the offered product is then selected by the subscriber. The credit limit of the subscriber is then ascertained via his identification code via an account server (8) at an external bank server (18) and communicated via a credit release code from the external bank-server (18) to the main server (3), and the product is communicated to the subscriber and the transfer of the selling price from the subscriber's account to the seller's account is arranged.

Description

The present invention relates to a method for handling an electronic Trading and a corresponding electronic payment system.

So far, the Internet has mainly been used as an information exchange and advertising medium used. It is only recently that more and more software manufacturers have been offering service providers and banks use digital payment systems primarily in pilot projects. At the moment the number of Internet users is estimated to be around 40 million. The through cut user no longer uses his computer only for word processing, but in addition to the communication function, more and more the commer Target arm of the Internet discovered and used. Here comes the new electro cash in electronic commerce, the so-called e- Commerce, great importance too.

Electronic commerce brings with it completely new opportunities but also dangers yourself, because the Internet is an insecure computer network. It is possible that View (intercept) data traffic (e.g. confidential data such as credit card number mern) or pretend to be someone else without this from the communica tion partner is noticed. Therefore, the consumer becomes an electronic one Only accept payment if it is guaranteed that it is secure and that the personal data will not fall into the wrong hands.  

In principle, the electronic means of payment must also accept Enjoy sellers and buyers and as a medium of exchange for non-physical Goods, information and information services. The must entire area of a means of payment, d. H. from penny amounts to higher Totals are recorded.

Furthermore, the electronic means of payment must be universal and unlimited for everyone Internet participants can be used to purchase products and services to be able to.

To date, none of the existing forms and the Payments are made consistently by credit card companies.

Another important aspect in this context is anonymity of the consumer. The identity of the Consumers are not recognizable, furthermore the information about the Purchased goods are not accessible to everyone. This serves to protect privacy of the consumer, since data about transactions allow conclusions about the purchase and Habits of the consumer can provide information.

As mentioned above, credit card systems are the most commonly used electronic payment systems. The credit card systems are based on Passing the credit card information to the seller, who will then transfer the amount can request from the credit card company without the signature of the Need of the buyer. However, the credit card numbers are not encrypted rarely sent over the Internet. In addition, the buyer must be able to be sure that he also sends his information to an authorized recipient, d. i.e. the Recipient must have been authorized by a credit card organization. With Disadvantages associated with the credit card system are obvious, namely, that there is insufficient protection against abuse, loss, counterfeiting and Multiple use is given and that furthermore the anonymity of the consumer is not guaranteed.

A so-called cash-on-delivery system works in the same way as in Mail order business, but its expenses are still high. The cost per Delivery is currently around 5 euros. It is only suitable for goods and the purchase items must always be picked up from the post office.  

Another payment method is the Avant card payment system. It is based on a smart card technology and can be used in ordinary shops who have the equipment for reading the data. Avant is based on one embedded integrated circuit, which also has the necessary security modules. The buyer and the seller must have separate card readers and Have software. This system cannot be used internationally.

The so-called Solo / Kultaraha payment systems are based on giro transfers between the buyer and the seller, whereby both customers must be the bank sen. The service does not require any additional applications, but the bank does issue necessary user codes and passwords. Both systems can can only be used for payments of more than 5 euros.

In the known e-cash system, the consumer must have a customer account with a Open a bank, with the consumer simultaneously having the software they need gets delivered. Then the consumer withdraws a certain amount from his Account and transfers this digital amount of money to his local computer. The amount of money is presented as electronic coins with different values stored on the consumer's computer. Then he can sell this money contact goods / services / at a provider that accepts e-cash Buy information or he can also send money to other e-cash users transfer or receive. The recipient of the electronic coins also be a customer of the same bank and have an e-cash account. This turns out to be disadvantageous, however, since the e-cash user only within the e- Cash-Verbundes can transfer and receive money. Furthermore, the e-cash System has the disadvantage that the electronic or digital coins are not global are available when the computer is turned off or has a defect.

The SET system (Secure Electronic Transactions). This system is an open standard for a secure Credit card payments over insecure networks. The credit cards information with a symmetric 56-bit key together with the The recipient's 1024-bit public key is encrypted. The messages of the SET Systems are always provided with a digital fingerprint before sending provided, which is encrypted with the private key of the sender. The The recipient can then use the sender's public key to check whether the Message really comes from this. When paying with the SET system also transmit encrypted credit card information with the order. By  using the SET system, the data is on the way from the Consumer protected to the provider, but it does not provide protection for the data of the Consumer at the dealer. Furthermore, the sale must have a value of at least Have 5 euros and the consumer always needs a credit card. So you can Neither small amounts will be paid nor will the anonymity of the consumer guaranteed.

The invention has for its object a method and a system for Simplify and improve the handling of electronic trading.

This object is achieved by a method according to claim 1 and a system according to Claim 6 solved. The invention is based on the idea that a Participants dial into a main server and a sales server. there the participant in the main server using an identification code identified. The participant chooses one of those offered by the sales server Products. The sales server then transmits the purchase price of the selected product to the participant and the main server. A credit line the participant is connected to an external bank server using an account server in the main server based on the purchase price of the selected product and determined using the participant's identification code. A credit release code is transmitted from the external bank server to the main server when a appropriate credit line of the participant is available. This loan Release code is then subsequently sent from the main server to the sales server forwarded. Finally, the product is sent to the participant, and the Transfers of the purchase price from an account of the participant to an account of the Ver buyer is prompted.

The advantages achieved by the invention are in particular that Procedure is user-friendly by identifying the participant without A code or number is entered. Furthermore, the privacy of the Consumers guaranteed by the system anonymity of the consumer maintains, since only the bank or credit company maintains the creditworthiness of the Consumer checked.

Further embodiments of the invention are the subject of the dependent claims.

Embodiments of the invention are described below with reference to FIG Drawing described.  

Show it

Fig. 1 is a basic block diagram of the payment system, and

Fig. 2 is a basic diagram of the payment system.

In Fig. 1 and 2, an inventive electronic payment system is illustrated in each case. The main components of the payment system are a subscriber 1 , a transmission medium 2 , preferably the Internet, a central main server 3 and at least one sales server 4 . The subscriber 1 , the main server 3 and the sales server 4 are each connected to one another by the Internet 2 . The main server 3 can also be connected to one or more bank servers 18 . The main server 3 has a protective device 5 , a first processing device 6 , an account server 9 and an account subsystem 8 , which are connected in series in the order described above. The first processing device 6 is also connected to an identification assignment means 16 , a subscriber database 15 and a price memory 14 . The account server 9 is connected to a sales account store 17 .

The sales server 4 has a protective device 5 , a second processing device 10 , a sales subsystem 12 and a server database 11 , which are also connected in series in the order described above. The second processing device 10 is also connected to a credit frame store 19 and an order receipt store 20 .

The subscriber 1 dials into the Internet 2 and visits the sales server 4 of a provider. When subscriber 1 has dialed into Internet 2, an identification code specific to subscriber 1 is automatically transmitted to the main server. The identification code must first pass through the protective device 5 in the main server. The protective device 5 represents a so-called firewall, which serves to protect the main server 3 against external threats. The protective device 5 then forwards the identification code to the first processing device 6 of the main server 3 . In the first processing device 6 , the identification code is compared with the information stored in the subscriber database 15 and the subscriber 1 is identified on the basis of this information, if necessary.

The subscriber 1 can choose from the products offered by a provider on the sales server 4 . The purchase price of the selected product is then transmitted to subscriber 1 and main server 3 . The price of the selected product is stored in the price memory 14 in the main server 3 .

It is also possible that the identification of the subscriber is not carried out immediately by the main server 3 when dialing into the Internet 2 , but that the identification is initiated by the sales server 4 .

The credit limit of the participant 1 is determined on the basis of the purchase price of the selected product stored in the price memory 14 and the identification code specific for the participant 1 . The term credit limit is understood to mean both the participant's credit balance in an account and the participant's credit limit at a bank. In the account server 9 , the identity of the subscriber determined on the basis of the identification code and the amount of the purchase price of the selected product are processed and forwarded by means of the account subsystem 8 to an external bank server 18 with the request to check the credit limit. Only the identity of the subscriber, but not the specific identification code, is transmitted to the external bank server 18 . Only the main server 3 can establish the connection between the identity of the subscriber and the identification code specific for the subscriber 1 . If the subscriber either has sufficient credit in his account or if the subscriber 1 has a sufficiently large credit limit, the external bank server 18 transmits a credit release code to the main server 3 . This code is then forwarded from the main server 3 to the sales server 4 , where the credit line is stored in the credit line memory 19 in accordance with the credit release code. It should be noted, however, that in the account server 9 the credit release code is only assigned to the identification code of the participant. The credit release code can also be viewed as a payment certificate.

After the sales server 4 has received the credit release code with the corresponding identification code, the second processing device 10 initiates the transmission of the selected product to the subscriber 1 . This can include, for example, the commissioning of a parcel service, the transmission of data or the activation of a code so that the subscriber can download information from the server database.

As soon as the participant has received the product, he sends a receipt confirmation to both the main server 3 and the sales server 4 . As soon as the first processing device 6 of the main server 3 receives this acknowledgment of receipt, it forwards the corresponding information to the account server 9 , which causes an amount corresponding to the purchase price to be debited from the account of the subscriber 1 on an external bank server 18 and on an account of the provider is credited to an external bank server 18 . The subscriber 1 and the provider need not have their accounts set up on the same external bank server 18 . By using the account subsystem 8 , it is irrelevant on which external bank servers 18 the accounts are located. It is only important that the account subsystem 8 knows the respective account on the respective external bank server 18 .

The main server 3 also has an identification assignment means 16 . In this identification assignment means 16 , a specific identification code is assigned to each subscriber 1 . This identification code can be assigned to the subscriber centrally, for example when he dials in or logs on for the first time. Only the subscriber 1 and the main server 3 know the relationship between the identity of the subscriber and the associated identification code. In the communication between the main server 3 and the external bank servers 18 , the identity, ie the name of the subscriber and possibly his account number, is used in each case. In other words, the external bank servers 18 do not know which identification code belongs to the identity of the subscriber 1 .

In the communication between the main server 3 and the sales server 4 , on the other hand, only the specific identification code of the subscriber 1 is used. As a result, the sales server 4 only knows the identification code, but not the identity of the subscriber.

The procedure for handling electronic trading is in a client ser executed structure. One exemplary embodiment provides that this structure Running Java-based. The participant thus provides a Java client The method can thus be applied to all systems and platforms that support Java. Examples include: pocket organizer, Notebooks, pen computers, IBN-compatible computers and web television.

It is also possible that the payment certificates or the credit release codes by means of short messages, also SMS, used in the mobile GSM standard  (Short Messege Service).

The procedure and system for handling electronic commerce is especially for the sale of digital products, e.g. B. Software over the Internet suitable, these products can include music-graphic elements, multimedia Contain aspects and texts.

In order to achieve broad consumer acceptance, the participant does not have to enter a password or a personal identification number at any point. The subscriber is automatically identified by the main server 3 when dialing into the Internet 2 . To increase the security of the transactions, each participant is assigned an identification code by the identification assignment means 16 in the main server 3 . As mentioned above, this code is initially used to identify a subscriber 1 dialed into the Internet. This identification code is also used when determining the credit limit. Finally, the code is used for the third time when one of the bank servers 18 transmits a credit release code to the main server 3 . As stated above, this credit release code or the payment certificate is assigned to the identification code of the respective subscriber.

The procedure and system for handling electronic commerce enables small and smallest payments. Payments can be up to 0,00016 Amount to euros. Furthermore, the payment basis can differ, i. H. it can be a payment for a file, a directory or for a period of use.

Since the procedure is based on the use of the Internet, the procedure for all buyers of products are applied. The method can, for example be stored on a central server, so that a user can access the this procedure can download required information or data.

The consumer and the provider can keep their bank accounts at different banking institutions, since a higher-level account server 9 is provided. This account server 9 acts as a connection point between the individual banking institutions. It can thus be achieved that the method can actually be used internationally.

In summary, the problem underlying the invention is the aim of Invention and the approach to solving the problem are different below  shown.

More and more consumers and industries buy and sell on the Internet, with the result that e-commerce is increasing every year. In at this moment, many users of the Internet - buyers and sellers - Experience with difficulties in the calculation and payment of goods on the internet, from privacy violations to false or even payments by consumers and industries are not enough. If the European Community wants to increase the number of Internet users, it is very important that the calculation, payment and privacy of consumers be safer and protected. Unfortunately, the security of Financial transactions on the Internet currently have many shortcomings. Furthermore, that is Method of payment (e.g. with a credit card) not tamper-proof.

The inventors of the present invention have recognized the above-mentioned problems and have started to work on solving these safety problems. The goals of the underlying project are therefore as follows:
Develop a financial security system for the global marketplace; to further develop an e-payment concept with so-called 'digital coins'; to integrate the MSI (multi sentry implement) system and e-payment into a completely new concept; To develop identification and authentication systems that guarantee the complete privacy of the user and to demonstrate this completely new concept in practice.

In other words, it's about being reliable and tamper-proof To develop a way of payment and calculation on the Internet.

The new system is aimed directly at the market for selling digital products the internet, which includes music, graphic elements, multimedia aspects, Chips and text. The market for non-digital products continues with the new ones Possibilities of calculation and payment addressed on the Internet. To one To promote broad consumer acceptance, the system is free from stress for all Users. The software is available for download from the Internet all over the world available. Revenues are generated from license fees by digital sellers Products.

The new system is based on: a different, user-friendly philosophy (KISS) using existing solutions and technologies to E-payment transactions for consumers and sellers simple and anonymous and un  depending on banks. The new system cannot exist with one which payment methods are compared.

The security of the system is achieved through codes that are on three different codes Digits must be used. If a computer hacker ent the code keys, e.g. B. at the bank, the system recognizes this and shuts down. On in this way it is impossible to penetrate the system. This means that System is 100% tamper-proof and highly reliable.

The software for using the system can be downloaded from the Internet become. This means that the use of the system for all buyers of Goods is applicable. Also the fact that the user is not one Must remember code or number, emphasizes the user-friendly System. The system is also free of charge for the client. This speeds up the Acceptance of the new system by consumers and buyers of (digital) goods.

Consumers are through the system through the use of individual codes automatically identified. This means that an unauthorized record and Disclosure of data is prevented.

The system guarantees 100% anonymity for potential consumers Sellers. Only the bank or credit card company checks the creditworthiness of the consumer.

The system runs with JAVA software. This type of software can be used in many different areas. For example:
Make sure that CDs, music, etc. cannot be duplicated; Make sure software cannot be duplicated. This means that software companies have more control over the users of the software. E-commerce opportunities:
All goods and services offered on the Internet can be paid for and purchased securely. Telecommunication options: The software can be used in GSM.

The digital coins are available globally since the money is constantly in the bank account of the consumer or seller. This means that the money is through secure dialing and safe handling of the system is protected. At In the new system, digital coins are always active digital coins.

The system of the present invention makes it possible to make small and smallest  Make payments. These payments can come up to 0.00016 euros perish. Furthermore, the payment basis can differ: file, directory and Usage time payment.

Some known payment systems require the buyer and the seller Be customers of the same bank. In the system of the present invention the seller and the buyer have different banks.

Claims (10)

1. Procedure for processing an electronic trade, with the steps:

• - Dialing the participant ( 1 ) in a main server ( 3 ) and a sales server ( 4 ),
• - Identification of the subscriber ( 1 ) in the main server ( 3 ) using an identification code specific to the subscriber ( 1 ),
• Selection of a product offered by the sales server ( 4 ) by the subscriber ( 1 ),
• - Transmission of the purchase price of the selected product to the participant ( 1 ) and the main server ( 3 ) by the sales server ( 4 ),
• - Determining a credit limit of the participant ( 1 ) based on his identification code by an account server ( 8 ) contained in the main server ( 3 ) at an external bank server ( 18 ) with regard to the purchase price of the selected product,
• - Transmission of a credit release code from the external bank server ( 18 ) to the main server ( 3 ) with a corresponding credit limit and forwarding this code to the sales server ( 4 ), and
• - Transmission of the product to the participant ( 1 ) and arranging for the transfer of the purchase price from an account of the participant ( 1 ) to an account of the seller.

2. The method according to claim 1, characterized in that, the product is transmitted after the sales server ( 4 ) has received the credit approval de. 3. The method according to claim 1 or 2, characterized in that the identification code is assigned to the subscriber centrally by the main server ( 3 ), so that only the main server ( 3 ) knows the identity of the subscriber. 4. The method according to any one of the preceding claims, characterized in that the subscriber ( 1 ) sends a corresponding message to the main server ( 3 ) after receipt of the product, whereupon the main server ( 3 ) transfers the purchase amount from an account of the subscriber ( 1 ) to an account prompted the seller. 5. The method according to any one of the preceding claims, characterized in that the main server ( 3 ) and the sales server ( 4 ) are designed to manage and exchange even small amounts. 6. Electronic payment system in particular for performing the method according to claim 1, with
at least one subscriber ( 1 ) for dialing into a main server ( 3 ) and a sales server ( 4 ),
a central main server ( 3 ) for identifying the subscriber ( 1 ) on the basis of an identification code specific to the subscriber ( 1 ), for determining a credit limit for the subscriber ( 1 ) on the basis of his identification code with regard to the purchase price of a product selected from the offer of a sales server ( 4 ) , to forward a credit release code received from an external bank server ( 18 ) according to the credit line of the participant ( 1 ), and to initiate the transfer of the purchase price from an account of the participant ( 1 ) to an account of the seller, and
at least one sales server ( 4 ) for offering products, for transmitting the purchase price of a product selected by the participants ( 1 ) on the sales server to the main server ( 3 ) and for the participants ( 1 ), for receiving the credit release code according to the credit line of the Participant and to arrange for the transmission of the product to the participant ( 1 ). 7. System according to claim 6, characterized in that the sales server ( 4 ) initiates the transmission of the product after receipt of the credit release code from the main server ( 3 ). 8. Server in particular for use as a main server in the method according to claim 1, with
a processing device ( 6 ) for checking the identification code of a subscriber ( 1 ) on the basis of stored subscriber data,
an account server ( 9 ) for receiving price information about products selected by the subscriber and offered by a sales server ( 4 ) and for determining a credit limit for a subscriber based on the purchase price of the product, and
an account subsystem ( 8 ) for transferring an amount of money corresponding to the purchase price from the account of the participant ( 1 ) to an account of the seller. 9. Server according to claim 8, characterized in that the identification code is assigned to the subscriber ( 1 ) centrally by the main server ( 3 ), so that only the main server ( 3 ) knows the identity of the subscriber. 10. Server according to one of claims 8 or 9, characterized in that the respective server ( 3 , 4 ) is designed to manage and exchange even small amounts.