WO2001063571A1

WO2001063571A1 - Method and system for the automatic handling of cashless purchases

Info

Publication number: WO2001063571A1
Application number: PCT/EP2001/001976
Authority: WO
Inventors: Detlev Hoppenrath; Eckhard Kantz; Peter Herold
Original assignee: Wire Card Ag
Priority date: 2000-02-23
Filing date: 2001-02-21
Publication date: 2001-08-30
Also published as: AU2001244157A1; DE10008280C1

Abstract

The invention relates to a method for the automatic handling of cashless purchases according to which client data are protected and suppliers are safeguarded. The inventive method comprises the following steps: electronically storing supplier data of a plurality of suppliers and of client-specific data of a plurality of clients in an electronic coordination device (17) that is outside the sphere of influence of both the suppliers and the clients; producing, on the supplier side, an electric price signal for a product chosen by a client and transmitting said signal to the coordination device (17); producing, on the client side, an electric purchase intent signal containing the client-specific data of the respective client and electrically or electromagnetically transmitting said signal to the coordination device (17); electronically acquiring the supplier data of the respective supplier, the price signal of the respective product and the client-specific data of the respective client in the coordination device (17); electronically verifying the transmitted client-specific data for their congruence with the client-specific data stored for the respective client in the coordination device (17); producing an electric decision signal in the coordination device (17) that signals authorization or non-authorization of the product chosen by the respective client depending on the result of said verification; and electrically or electromagnetically transmitting the decision signal from the coordination device (17) to the supplier. The inventive method is further characterized in that the client-specific data are transmitted to the coordination device (17) via a personal, client-specific, secure transmission channel.

Description

Process and system for the automatic processing of cashless purchase transactions

The invention relates to a method for the automatic handling of cashless purchase transactions and an electrical system for such a handling.

Over the years, there has been an increasing trend away from cash-based purchases to cashless purchases, for example using EC cards or credit cards.

The disadvantage of EC cards is that purchases are only possible at points of sale where the buyer can be present in person, together with his EC card.

A card that functions similarly to an EC card is known from the

DE 690 33 207 T2. This describes a system for cashless payment, in which the buyer uses a card which has a semiconductor chip, an LCD display device and an input keyboard. This card can be loaded up to a predetermined maximum amount using ATMs on the bank side and can be used in shops with correspondingly equipped cash register systems, such as an EC card, for cashless payments, whereby the amount to be paid is subtracted from the remaining credit on the card and on the other hand, it is offset electronically with the bank. In contrast to a normal EC card can the holder of the card can view the amount and date of the last debit on the one hand and the respective remaining credit on the card on the display device of the card on the other. However, this payment system is not suitable for distance purchases where the buyer cannot appear with his card at the seller's location, as is the case, for example, when shopping online via the Internet.

Credit cards are an internationally accepted form of electronic payment and can also be used for distance purchases. The problem for the retailer is often an inadequate one

Protection against credit card fraud. It is problematic for the customer that if he passes on his credit card data for the purpose of payment processing, he exposes himself to the risk of misuse of his credit card data if the credit card number and expiry date fall into the hands of fraudsters.

In connection with the globalization of trade, cashless payment processing via credit cards has expanded. The rapid spread of online shops on the Internet in particular has contributed to this, with payment transactions being carried out exclusively via electronic payment methods, predominantly using credit card data. The risk for providers and customers has increased with such purchase transactions.

Another disadvantage with such cashless payment processing is that the anonymity of the respective customer is not preserved in such purchase processes. From WO 98/02852 a method for cashless payment of data that is downloaded via the Internet is known. The prerequisite is the establishment of a connection via an ISDN line. While the Internet connection between the customer and the provider is established via their B channel (data transmission channel), the customer must do so

Provide providers with their telephone number and PIN number via the Internet connection. These numbers supplied by the customer to the provider are then compared with the numbers which are stored for the persons registered with the provider or an authorization point, and thereupon it is checked whether they match the

Registered customer numbers match. This happens either on the part of the provider or after further transmission of the transmitted numbers via the D channel (signal transmission channel) of another ISDN connection to an authorization point. If, in this comparison, the numbers match those stored by the provider or the authorization center, the amount to be paid is debited from a current account, which the customer must maintain, for example, with an authorization center whose telephone number the customer informs the provider of. After debiting, an authorization code is generated, which enables the customer to download the purchased data via the D channel of the ISDN connection that is still established between him and the provider. If at this point in time the D channel of the ISDN connection established between provider and customer is no longer free or has broken down, a signal to disconnect this ISDN

Connection established and the connection broken, i.e. at a time when the amount to be paid for the desired data has already been debited from the customer's current account, but the data has not yet been transferred to the customer. This payment system creates security for the provider in that he only provides the service to be paid if he is certain that the order for the requested data has been made by a registered customer and that the required amount has already been paid. However, this system creates considerable uncertainty for the customer. On the one hand, he not only has to disclose his telephone number via a known, insecure Internet connection, but also his PIN number, which one actually wants to know to be closely guarded. In addition, the customer must maintain a current account with the provider or an authorization center, and with current cover at a level that is certainly sufficient to enable several purchases in succession at short intervals and with larger amounts. Furthermore, amounts of money may be debited from the customer's current account, although the transfer of the desired data from the provider to the customer ultimately does not take place.

Some of the disadvantages mentioned are avoided when using SET (Secure Electronic Transaction). In this process, both the provider and the customer authenticate themselves with a recognized one

Authentication center and receive an electronic certificate in this way, which can then be used in payment processes. The additional effort with this method is that both the dealer and the customer have to be authenticated beforehand. The dealer then has the advantage that he is a safe

Receives information about the identity of the customer. However, this may conflict with the interests of the customer. The object of the present invention is therefore to make a method for the automatic electronic processing of cashless purchase processes available in a customer data-protecting and provider-securing manner.

Procedural solutions to this problem are given in claims 1 and 10. A system that solves this problem is specified in claim 26. Further developments of the method according to the invention and of the system according to the invention are specified in the dependent claims.

A method according to the invention for the automatic processing of cashless purchase processes in a manner protecting customers and protecting suppliers includes the following method steps:

Electronic storage of provider data of a plurality of providers and of customer-specific data of a plurality of customers in an electronic coordination device which is outside the sphere of influence of both providers and customers; generation of an electrical price signal by the provider for a customer-selected product and its transmission to the coordination device; Customer-generated generation of an electrical purchase intention signal containing the customer-specific data of the respective customer and its electrical or electromagnetic transmission to the customer

Coordinator; electronic recording of the provider data of the respective provider, the price signal of the respective product and the customer-specific data of the respective customer in the coordination device; electronic checking of the transmitted customer-specific data for correspondence with the customer-specific data stored for this customer in the coordination device; Generation of an electrical decision signal in the coordinator, which is dependent on the

Result of the check signals approval or non-approval of the product selected by the respective customer; and electrical or electromagnetic transmission of the decision signal from the coordinating device to the provider; whereby the transmission of the customer-specific data to the

Coordination facility takes place via a customer-specific, secure transmission channel.

A system according to the invention for the electronic processing of customer data protection and provider securing the release of customer-selected products in connection with cashless purchase processes has the following components: a first electronic database, which is assigned to an electronic coordination device located outside the sphere of influence of both providers and customers, and in which on the one hand a plurality of provider data records assigned to a specific provider, to which access can be accessed via a provider identification code assigned to the respective provider, and on the other hand a large number of customer data records assigned to a specific customer, each of which can be accessed via a customer identification code assigned to the respective customer become, are storable; a provider-side electrical price signal generator, which is designed for generating electrical price signals; a customer-operated electrical input device that is used to generate a Customer identification code of the respective customer-containing electrical purchase intention signal and to supplement the purchase intention signal by an electrical provider identification signal and can be coupled to the coordination device via a first electrical or electromagnetic data transmission channel; an electronic price signal receiving device provided in the coordination device, which is designed to electronically call up the provider data record belonging to the transmitted provider identification code from the database via a the coordination device with the

To call the price signal generator of the called-up provider coupling the second electrical or electromagnetic data transmission channel to the coordination device for the price signal generated for the selected product; a first electronic comparison device, which is designed to electronic

Calling up the customer data record belonging to the transmitted customer identification code from the database to compare the purchase price limit stored for this data record with the retrieved price signal and to generate an electrical decision signal signaling the release or non-release of the product delivery depending on the comparison result; a provider-side electrical decision signal receiver; and a third electrical or electromagnetic data transmission channel for transmitting the decision signal from the coordinating device to the decision signal receiver.

The coordination facility is a facility that is independent of both the customer and the provider. The provider has no access to their database, so that he The purchase process does not receive any data from the respective customer, thus ensuring full anonymity for the customer as well as for cash payment purchases.

The coordinating device is in the hands of an independent coordinating service provider who receives a coordinating payment for his coordinating service from the provider and / or customer, for example in each purchase transaction coordinated by him, for example in the form of a certain percentage of the price of the one selected by the customer

Product.

In order to participate in the system according to the invention, authentication of the individual customers with the coordination device is first required. As part of this authentication, the respective receives

Customer an individual customer identification code. In addition, an individual purchase price limit can be set for each purchase process as part of authentication for the respective customer. Furthermore, a password and / or a personal identification number (PIN) can also be agreed as part of the authentication of the individual customer.

For providers who want to use the system according to the invention, it is necessary to agree with the coordinating device an individual provider code assigned to the respective provider. The customer data mentioned and the provider identification number are stored in the database of the coordination device. A cashless purchase process using the method according to the invention proceeds as follows:

After selecting a specific product, the provider of this product generates an electrical purchase price signal, with which

Help the customer to see the price of the selected product. The customer then establishes a connection to the coordination device via a customer-specific, secured transmission channel, which is, for example, a telephone line or a

Cellular connection is acting. By means of an electrical input device, the customer triggers the delivery of an electrical purchase intent signal to the coordination device, which contains the customer identification code and is supplemented with the provider identification number of the provider of the product. With this information, the customer data and the provider can be determined electronically from the database of the coordination device. The retrieval of the provider data from the database triggers a query of the electrical price signal previously generated by the provider via a connection between the coordination device and the provider

Data transmission channel, via which the price signal is automatically transmitted to the coordination device. The price signal called up by the provider is automatically compared with a purchase price limit assigned to the customer. The electronic comparison device used for this purpose automatically emits an electronic decision signal as a result of the comparison, which signals whether the product is released or not released, depending on whether the price of the selected product is within the purchase price limit or exceeds the purchase price limit. This decision signal is made via the - In the meantime, the data transmission channel established between the provider and the coordination device is transmitted from the coordination device to an electronic decision signal receiver of the provider. Depending on the content of this decision signal, the provider releases the selected product to the customer or not.

In one embodiment of the invention, the system according to the invention comprises an electronic creditworthiness checker, which is in the hands of, for example, a bank or a credit card issuing company. Then you come to one

Method in which at least one further electronic database belonging to an electronic creditworthiness checking device is provided, which is coupled to the coordination device via a fourth electrical or electromagnetic data transmission channel, and in which a large number of credit client data records, each associated with a specific credit client, for which one each relates to the respective one Allocated credit customer identification code is accessed and the credit data required for cashless payments and a current one

Credit limit for the respective credit customer are stored, customer data records are provided in the first database, which contain the customer identification codes belonging to the individual customers, before the transmission of the decision signal from the coordinating device to the decision signal receiver of the provider, first of all the credit customer identification code called up from the first database respective customers together with transmit the respective price signal via the fourth data transmission channel to the creditworthiness test facility and there, by means of a second electronic comparison facility, are compared with creditworthiness-relevant data called up from the second database, including the current credit limit of the respective customer, a release or non-approval depending on the comparison result of the second comparison facility of the credit signaling electrical credit signal is generated, the credit signal over a fifth electrical or electromagnetic data transmission channel from the

Creditworthiness tester is transmitted to the coordination facility and then a decision signal signaling the release of the selected product is only transmitted from the coordination facility to the decision signal receiver of the provider if a creditworthiness signal signaling the credit release has been transmitted to the coordination facility.

If a creditworthiness check is included in the procedure, the previously described sequence of a purchase process is modified in that the decision signal from the coordinating facility is not sent to the provider immediately after the price signal has been called up by the provider and after it has been compared with the customer data stored for the respective customer becomes. Before this happens, the coordinating facility first passes over another

Data transfer channel established a connection to the creditworthiness test facility. Customer-specific data are transmitted from the coordination facility to the creditworthiness test facility via this transmission channel transmitted, which enables the creditworthiness test facility to automatically call up the customer and the associated creditworthiness-relevant data electronically and to compare them with the price signal which the creditworthiness test facility has been sent by the coordinating facility in addition to the customer-specific data. An electrical creditworthiness signal is generated by means of the comparison facility of the creditworthiness checking facility, which signals the approval or non-approval of the loan, depending on the comparison result. This creditworthiness signal is automatically transmitted to the coordinator and is fed to a electronic creditworthiness signal processing device. This only allows the decision signal generated by the coordination device to pass to the decision signal receiver of the provider if the creditworthiness signal signals the credit release.

The invention will now be explained in more detail by means of embodiments. The drawings show:

1 shows a first embodiment of a system according to the invention in a block diagram representation; and

Fig. 2 shows a second embodiment of a system according to the invention in block diagram representation.

1 shows an electrical system which includes a provider-side area 13, a customer-operated area 15 and an electronic coordination device 17. The provider-side area 13 comprises an electrical price signal transmitter 19 and an electrical decision signal receiver 21.

The customer actuatable area 15 comprises an electrical price display device 23 and an electrical input device 25.

The input of the 2 5 and the purchase intent signal input device 27, an electrical prompting device 28, and an electrical identification signal input device 29.

The coordination device 17 comprises an electronic database 31, an electronic comparison device 33 and an electronic price signal receiving device 35.

The coordination device 17 is connected to the input device 25 via a first data transmission channel 37, which in the embodiment shown is formed by two separate data transmission channels 37a and 37b. The coordination device 17 is connected to the provider-side area 13 via a second data transmission channel 39. The data transmission channels 37a, 37b and 39 are, for example, telephone lines, radio lines or mobile radio lines. At least some of the data transmission channels 37a, 37b and 39 can be constructed entirely or partially with light guides. At least some of these data transmission channels can be permanent data connections or data connections that only exist temporarily during the respective purchase process. The individual data transmission channels are connected to the individual system participants via interfaces which can be, for example, modems, ISDN cards from computers or mobile telephones (cell phones). The area 13 provided by the provider has an interface 41 for coupling to the second data transmission channel 39. The customer-actuatable area 15 has an interface 43 for coupling to the data transmission channel 37a and an interface 45 for coupling to the data transmission channel 37b. The coordination device 17 has an interface 47 for coupling to the data transmission channel 39, an interface 49 for coupling to the data transmission channel 37a and an interface 41 for coupling to the data transmission channel 37b.

The interface 41 couples the second data transmission channel 39 to the price signal transmitter 19 on the one hand and to the decision signal receiver 21 on the other hand. The interface 43 couples the data transmission to the 3 7 a m i t d e r

Purchase intent signal input device 27. The interface 45 couples the data transmission channel 37b on the one hand to the input request device 27 and on the other hand to the identification signal input device 29. The interface 47 couples the data transmission channel 39 to the database 31, the

Comparison device 33 and the price signal receiving device 35 of the coordinating device. The interfaces 49 and 51 couple the database 31 to the data transmission channel 37a and to the data transmission channel 37b.

Internal and permanent electrical connecting lines of the area 13 on the supplier side, the area 15 which can be operated by the customer, and the coordinating device 17 are shown with solid lines. The data transmission channels are 37a, 37b and 39 Shown in dashed lines, which is intended to symbolize that it can only be temporarily established data transmission channels.

The area 13 on the supplier side can be part of a real sales outlet, in particular in the form of a sales shop, or a virtual sales outlet, for example an online shop using the Internet. In the event of a purchase being processed with a real sales outlet, the area 15 which can be operated by the customer can be an input device set up at the location of the provider, for example in the area of the price signal transmitter 19, which can be used by the respective customer. The customer-actuatable area 15 can, however, also be an individual input device owned by the respective customer. In the case of a purchase made on the Internet with a

Online shop is processed, the customer-operated area 15 can be a computer (PC) or an internet-enabled mobile phone (WAP mobile phone). The coordinating device 17 is usually located at a location both from the provider and from the customer and is beyond the influence of both the provider and the customer.

The mode of operation of the embodiment of a system according to the invention shown in FIG. 1 will now be explained on the assumption that the area 15 that can be operated by the customer is a mobile phone

(Cell phone). Such mobile telephones have a device-specific memory in which a device identification number IMEI (International Mobile Equipment Identity) is stored, and a SIM card (subscriber) which is removably inserted into the mobile telephone device Identity Module), in which a personal identification number IMSI (Mobile Subscriber Identity) of the owner of the mobile phone is stored. Additional data can be stored in the SIM card.

The mode of operation of the embodiment shown in FIG. 1 will now be explained on the assumption that an internet-compatible cell phone (WAP cell phone) is acting as the customer-actuable area 15.

A customer has selected a product (goods and / or service) either by visiting the real sales business of a provider or by visiting the website of a virtual sales business (online shop). This triggers the generation of an electrical price signal representing the price of the selected product by the price signal generator 19. The price corresponding to the price signal is displayed to the customer either by means of a price display device provided by the provider or via the price display device 23, which is formed by the display thereof when a mobile radio telephone is used. Subsequent operation of the purchase intent signal input device 27 by the customer

Generation of an electrical purchase intention signal triggered. This purchase intent signal contains the customer's customer-specific data, for example in the form of a customer identification code.

In addition to the price, the customer is provided with a provider code

Brought to know, which specifies the special provider with which the customer wants to process the purchase. After the supplier identification number has been added in electrical form to the electrical purchase intention signal, the purchase intention signal becomes via a mobile radio connection, which forms the data transmission channel 37a, to the interface 49 and from there to the database 31 of the coordination device 17. With the customer identification code of the respective customer, access is made to the customer data record stored for this customer in the database 31 and the provider data of the provider of the selected product are also called up on the basis of the provider identification number transmitted to the coordination facility 17. The latter triggers the generation of a price signal query signal, which is transmitted via the interface 47, the data transmission channel 39 and the

Interface 41 is transmitted to the price signal generator 19. This reacts automatically with the transmission of the current price signal over the same route back to the interface 47, from where the price signal of the price signal receiving device 35 is fed to the coordinating device 17. A saved for the identified customer

The purchase price limit is then automatically compared by means of the comparison device 33 with the price signal that has entered the price signal receiving device 35. The comparison result generated by the comparison device 33 is in the form of an electrical decision signal via the interface 47, the data transmission channel 39 and the

Interface 41 sent to the provider decision signal receiver 21. If it has been found during the comparison by means of the comparison device 33 that the price of the selected product lies within the purchase price limit set for the identified customer, the decision signal signals the decision signal receiver

21 release of delivery of the selected product. If, on the other hand, the purchase price is above the purchase price limit of the identified customer, the provider uses the decision signal to signal that the coordinating device 17 does not release the product for delivery. The fact that the customer does not deliver his personal and in particular credit card-related data directly to the provider, but merely transmits a customer identification code to the coordination device 17 of the "concealed" coordination service provider, the

If the customer identification code does not contain any security-relevant data of the customer and can only be interpreted by the secretive coordinating service provider, it is not absolutely necessary to protect the data transmission connection between the customer-operated area 15 and the coordinating device 17 particularly against eavesdropping or tapping. However, the security of the system according to the invention is increased still further if the possibilities created with the input request device 27 and the identification signal input device 29 are used. In this case, the transmission of the intention to buy signal from the customer to the coordinating device 17 does not yet trigger the automatic process that takes place until a decision signal is delivered to the decision signal receiver 21, but rather only calls up the data belonging to the respective customer from the database 31. This call causes the database 31 to transmit an electrical request signal to the input device 27 via the interface 51, the data transmission channel 37b and the interface 45. This request signal prompts the transmission of further customer-specific identification signals, for example in the form of passwords and / or PIN numbers, which the identification signal input device 29 creates and delivers to the database 31 as electrical signals via the data transmission channel 37b. The customer can either enter these identification signals be made or automatically retrieved from a memory of the identification signal input device and transmitted to the database 31 upon receipt of the request signal.

The requirement for additional transmission of such identification signals to the database 31 can be used to increase the security of the system, but also to form different access security levels for several purchase price limits defined for a customer in the database 31. For example, purchase transactions up to a low purchase price limit of, for example, DM 100 can be released without the need to enter the additional identification signals, i.e. only by transmitting the purchase intention signal, while a higher purchase price limit can only be released by the additional transmission of identification signals in the form of passwords and / or PIN Numbers will be released.

A particularly high level of security can be achieved in that the data transmission channel 37b is set up for the call-up of the further identification signals on the part of the coordinating device 17, that is to say only when a customer transmits the purchase intention signal via the

Data transmission channel 37a has been identified by the coordinating device 17.

The IMEI stored in the mobile telephone device, the IMSI stored in the SIM card or the telephone number assigned to the customer's cell phone can be used as the customer identification code contained in the purchase intent signal. As an additional identification signal between the customer and the Coordinating device agreed any mark can be used.

There is also the option of agreeing a password that is only valid for each individual purchase. In this case it can

Password are transmitted unprotected, as it loses its usability after the purchase process and its knowledge cannot be used by third parties.

In one embodiment of the invention, together with the

Purchase intent signal transmits an electrical means of payment signal to the coordination device 17 and the generation of a decision signal occurs only when the transmitted means of payment signal matches a means of payment signal stored for the respective customer. The type of means of payment that the customer wishes to use for the respective purchase process is transmitted with the means of payment signal. Credit cards or Euroscheck cards, for example, can be agreed and selected as payment methods.

In one embodiment of the invention, the coordinating device 17 assigns a transaction number to each purchase process, by means of which the purchase intent signal transmitted by the customer to the coordinating device 17, the price signal called up by the provider and that by the

Coordinating device 17 decision signals transmitted to the provider can be assigned to a specific purchase process. In this way it is ensured that with approximately simultaneous processing of several purchase processes, in which the same provider and same coordination device are involved, a reliable assignment of the purchase price signal and the decision signal to the associated product is maintained.

In another embodiment, an electronic transaction time window is assigned to each purchase process, a price signal arriving during this transaction time window and a decision signal generated during this transaction time window being assigned to the purchase process whose purchase intent signal triggered the generation of the transaction time window at the coordination device 17. During the duration of the respective transaction window, further purchases involving the same provider are blocked.

The participation of the coordination service provider in the method according to the invention can be limited to the coordination work. However, it can also include financial services, namely the financial handling of the cashless buying processes or a participation in the financial handling of the cashless buying processes.

2 shows an embodiment of a system according to the invention. In this embodiment, the area 13 provided by the provider and the area 15 that can be operated by the customer remain unchanged from the embodiment shown in FIG. 1. The coordination facility

17 of the embodiment shown in FIG. 2 has all components of the coordination apparatus shown in FIG. 1. As far as there is agreement between the two embodiments, the same designations for the individual components of the Systems uses and so far an explanation of the operation of the embodiment shown in Figure 2 is no longer required.

The embodiment shown in FIG. 2 differs from the embodiment shown in FIG. 1 in that the

Coordinating device 17 additionally has a creditworthiness signal processing device 53 and a further interface 55 and the system is expanded by a creditworthiness checker 57. This comprises a second database 59, a credit data signal receiver 61 and a second one

Comparison device 63. The creditworthiness checker 57 has an interface 65 which can be coupled to the interface 55 of the coordination device 17 via a further data transmission channel 67. This data transmission channel can either be a permanent connection between the

Establish coordination facility 17 and the creditworthiness test facility 57 or be temporarily set up for individual purchase processes. For signals sent by the coordinating device 17 to the creditworthiness checking device 57, on the one hand, and for signals sent by the creditworthiness checking device 57 to the coordinating device

17 transmitted data, on the other hand, different data transmission channels or the same data transmission channel can be used.

The credit data signal receiver 61 is on the input side with the

Interface 65 and on the output side connected on the one hand to the database 59 and on the other hand to the comparison device 63. The comparator 63 also has an output of Database 59 connected. An output of the comparison device 63 is connected to the interface 65.

The mode of operation of the embodiment shown in FIG. 2 is explained in the following in that it differs from that already described

Operation of the embodiment shown in Fig. 1 differs.

In the embodiment shown in FIG. 2, the decision signal supplied by the comparison device 33 is not transmitted directly to the decision signal receiver 21 of the provider-side area 13, but only when a creditworthiness signal 57 has been received via the interface 55 which indicates a credit release for the signals the current purchase process. This credit signaling signaling credit approval is due to the fact that a ß d i e

Credit capability signal processing device 53 of the coordination device 17 becomes permeable for the decision signal delivered by the comparison device 33, which can thus be transmitted via the data transmission channel 39 to the decision signal receiver 21 in the area 13 on the provider side. The

Creditworthiness signal processing device 53 could, for example, be formed by a logic AND logic circuit which only delivers a decision signal to the interface 41 if the decision signal from the comparison device 33 or the creditworthiness signal from the interface 55 has been fed to its two inputs.

In the database 59 of the creditworthiness checker 57, there is a large number each assigned to a specific credit customer Credit customer records are stored, each of which can be accessed via a credit customer identification code assigned to the respective credit customer and which contain the credit data required for cashless payment transactions and a current credit limit for the respective credit customer.

If the customer and the specified means of payment have been determined from the database 31 of the coordinating device 17 on the basis of the receipt of a purchase intent signal and a means of payment signal from a specific customer, the customer is notified

Credit data signal receiver 61 of the creditworthiness checking device 57 transmit a credit data signal belonging to this customer, which contains the credit customer identification code called up for the respective credit customer from the database 31 and the price signal for the selected product. Using the credit data signal, the

Database 59 of the creditworthiness checker 57 the associated credit customer and the current credit limit assigned to this credit customer. By means of the comparison device 63, the credit limit of this customer is compared with the price signal transmitted by the coordination device 17 and becomes one of the

Electrical creditworthiness signal dependent on the comparison result is generated, which signals the creditworthiness or non-creditworthiness for the payment of the selected product and which is transmitted to the creditworthiness signal processing device 53 via the data transmission channel 6 7. This is controlled in the manner explained above by the creditworthiness signal in order to let the decision signal supplied by the comparison device 33 of the coordination device 17 through to the connection point 47 or not. In one embodiment of the invention, the coordination device 17 is provided with a price signal transmitter and the customer-operated input device 25 has a price signal receiver, a price signal display device and a resolution signal generator which can be operated by the customer and which is in

Depending on a customer input, an electrical decision signal signaling a purchase decision or a purchase termination is generated. In this case, the coordinating device 17 is designed in such a way that it only sends the decision signal to the decision signal receiver 21 in the provider-side area 13 after receipt of one

Sending decision signaling decision signals from the input device 25 sends.

In such an embodiment, the price signal receiving device 35 of the coordinating device 17 is designed such that it transmits the price signal transmitted by the price signal transmitter 19 via the interface 51 to the price display device 23 of the customer-actuatable area 15, and the identification signal input device 29 is designed to receive a decision signal triggered by the customer generate and transmit via the interface 45, the data transmission channel 37b and the interface 51 to the coordinating device 17. In this case, the coordination device 17 can be designed with a signal processing device corresponding to the creditworthiness signal processing device 53 of the embodiment shown in FIG. 2, to which the decision signal is additionally fed instead of the creditworthiness signal or via a further input. In such an embodiment, the decision signal generated by the comparison device 33 becomes the interface 47 and thus the Decision signal receiver 21 only passed if the decision signal or if a creditworthiness tester 57 is included in the system, the decision signal and the creditworthiness signal are present.

Reference character list

11 system

13 provider-side area

15 customer operated area

17 coordination facility

19 price signal transmitter

21 decision signal receivers

23 Price display device

25 input device

27 Purchase intent signal input device

28 Prompt facility

29 Identification signal input device

31 first database

33 first comparison device

35 Price signal receiving device

37 Data transmission channel

37a data transmission channel

37b data transmission channel

39 Data transmission channel

41 interface

43 interface

45 interface

47 interface

49 interface

51 interface

53 credit capability signal processing device

55 interface

57 Creditworthiness test facility second database credit data signal receiver second comparison device interface data transmission channel

Claims

claims

Process for the automatic processing of cashless purchases in customer data protecting and securing manner, with the following procedural steps: electronic storage of provider data of a plurality of providers and of customer-specific data of a plurality of customers in an electronic coordination facility outside the sphere of influence of both providers and customers (17); generation by the provider of an electrical price signal for a customer-selected product and its transmission to the coordination device (17); - Customer-specific generation of a customer-specific

Data of the respective customer containing electrical purchase intent signal and its electrical or electromagnetic transmission to the coordinating device (17); - Electronic recording of the provider data of the respective

Provider, the price signal of the respective product and the customer-specific data of the respective customer in the coordinating device (17); electronic checking of the transmitted customer-specific data for agreement with the customer-specific data stored for this customer in the coordination device (17); Generation of an electrical decision signal in the coordination device (17), which is a function of signals the release or non-release of the product selected by the respective customer to the result of the check; and electrical or electromagnetic transmission of the decision signal from the coordinating device

(17) to the provider; wherein the transmission of the customer-specific data to the coordination device (17) takes place via a customer-specific, secure transmission channel.

Method according to claim 1, in which the electronic storage of customer-specific data comprises the storage of a purchase price limit agreed with the respective customer, during the review by the customer

Coordinating device (17) the purchase price limit is compared with the product price signaled by means of the respectively transmitted price signal and the decision signal signaling the product release is transmitted from the coordinating device (17) to the provider only if the product price does not exceed the purchase price limit.

Method according to Claim 2, in which the electronic storage of customer-specific data comprises the at least temporary storage of the data of one or more payment instruments selected by the respective customer, with which the intention to purchase signal transmits an electrical payment signal to the coordinating device (17) and the A decision signal is only generated when the transmitted means of payment signal matches a means of payment signal stored for the respective customer.

Method according to one of Claims 1 to 3, in which a purchase decision signal not containing the customer-specific data is first transmitted to the coordinating device (17), the receipt of this purchase decision signal in the coordinating device (17) automatically

Production of a temporary electrical or electromagnetic transmission channel (37b) between a customer-side input device (25) and the coordination device (17) and the customer-specific data are only transmitted to the coordination device (17) via this temporarily established transmission channel (37b).

Method according to one of Claims 1 to 5, in which the coordination coordinating device (17) receives a

Purchase decision signal automatically generates an electrical identification signal and is transmitted to the customer side, the identification signal is transmitted back from the customer side to the coordination device (17) and there is electronically compared with the identification signal previously transmitted to the customer side and the

Transmission of the decision signal is only released if the transmitted identification signal and the returned identification signal match. Method according to spoke 5, in which the identification signal has a password assigned to the individual purchase process.

Method according to spoke 5 or 6, in which the identification signal has a password assigned to a specific customer.

Method according to one of Claims 5 to 7, in which the identification signal has a transaction number assigned to the respective purchase process.

Method according to one of Claims 1 to 7, in which an electronic transaction time window is generated in the coordinating device (17) upon receipt of a purchase decision signal, all within the respective one

Transaction time window signals arriving at the coordination device (17) are assigned to a purchase process and the coordination reception device (17) is blocked for receiving further purchase decision signals during the respective transaction time window.

Process for the electronic processing of customer data protection and vendor securing the release of customer-selected products in connection with cashless purchase processes, with the following process steps: a) a first electronic database (31) is provided, which is outside the sphere of influence of both vendors and customers is located associated electronic coordination facility and in which, on the one hand, a plurality of provider data sets, each associated with a specific provider, to which access can be accessed via a provider identification code assigned to the respective provider, and, on the other hand, a large number of customer data records, each associated with a specific customer, for which each via a customer identification code assigned to the respective customer can be accessed and contains the data required for cashless payment transactions and a current purchase price limit for the respective customer; b) an electrical price signal is generated for a product selected by a customer; c) by means of an electrical input device (25) that can be operated by the customer

Generates an electrical purchase intention signal containing the customer identification code of the respective customer and, after being supplemented by an electrical provider identification signal, transmitted to the coordinating device (17) via a first electrical or electromagnetic data transmission channel (37) coupling the input device (25) to the coordinating device (17); d) after electronic recording of the one belonging to the transmitted provider identification code

Provider data record from the database (31) becomes this via a second electrical or electromagnetic data transmission channel (39) coupling the coordinating device (17) with the provider (13) the price signal generated for the selected product is called up to the coordinating device (17); e) after electronically picking up the customer data record belonging to the transmitted customer identification code from the database (31), the purchase price limit stored for this data record is compared with the retrieved price signal by means of a first electronic comparison device (33) and, depending on the comparison result, the release or the Non-release of the product delivery signaling electrical decision signal generated; f) the decision signal is transmitted via a third electrical or electromagnetic data transmission channel (39) from the coordinating device (17) to a provider-provided electrical decision signal receiver (21).

Method according to Claim 10, in which a) at least one second electronic database (59) belonging to an electronic creditworthiness checking device (57) is provided, which is coupled to the coordination device (17) via a fourth electrical or electromagnetic data transmission channel (67) and in which a variety of each one specific

Credit customer data records assigned to credit customers, each of which is accessed via a credit customer identification code assigned to the respective credit customer and for cashless payment transactions necessary credit data and a current credit limit for the respective credit customer are stored, b) customer data records are provided in the first database (31), which contain the customer identification code belonging to the individual customers, c) before the decision signal is transmitted from the coordination device (17 ) to the decision signal receiver (21) of the provider first transfer the credit customer identification code of the respective customer, called up from the first database (31), together with the respective price signal via the fourth data transmission channel (67) to the creditworthiness testing device (57) and there by means of a second electronic comparison device ( 63) are compared with data relevant to creditworthiness called up from the second database (39), including the current credit limit of the respective customer, d) depending on the comparison result of the second comparison device ng (63) the release or the

If the credit signaling electrical creditworthiness signal is not released, e) the creditworthiness signal is sent from the creditworthiness checking device (57) to the credit agency via a fifth electrical or electromagnetic data transmission channel (67)

Coordinating device (17) is transmitted and f) thereafter a decision signal signaling the release of the selected product from the coordinating device (17) to the Decision signal receiver (21) of the provider is only transmitted if a creditworthiness signal signaling the credit release has been transmitted to the coordination facility.

12. The method of spoke 10 or 11, in which the same data transmission channel (39) is used as the second and third data transmission channel.

13. The method according to any one of claims 10 to 12, in which the same data transmission channel (67) is used as the fourth and fifth data transmission channel.

14. The method according to any one of claims 10 to 13, wherein at least a part of the data transmission channels (37, 39, 67) is only temporarily established for about the duration of a purchase process.

15. The method according spoke 14, in which telephone connections are used as temporary data transmission channels.

16. The method according to any one of claims 10 to 15, in which an electrical cash register of the provider is used as the price signal transmitter (19).

17. The method according to any one of claims 10 to 16, in which an input device (25) positioned in the vicinity of the price signal transmitter is used.

18. The method according to any one of claims 10 to 16, in which a mobile radio telephone of the customer is used as input device (25) and a mobile radio connection between the customer's mobile radio telephone and the coordination device (17) is used as the first data transmission channel (37).

19. The method according to any one of claims 10 to 18, wherein the customer identification code is stored in a memory arranged in the mobile phone and after selecting the

Mobile radio connection to the coordination device is retrieved from the memory and transmitted to the coordination device.

20. The method of claim 19, wherein the

Customer identification code is automatically retrieved from the memory by the process of dialing the mobile radio connection to the coordinating device (17) and transmitted to the coordinating device (17).

21. The method according to any one of claims 18 to 20, in which the customer's mobile phone number is used as the customer identification code.

22. The method according to any one of claims 10 to 21, with an im

Internet-occurring online shop, in which a computer with Internet access is used as the input device (25).

23. The method according to any one of claims 10 to 21, with an online shop occurring in the Internet, in which a WAP mobile phone with Internet access is used as the input device (25).

24. The method according to any one of claims 10 to 23, in which a) the coordination device (17) is provided with a price signal transmitter, b) the input device with a price signal receiver, a price signal display device and a resolution signal generator which can be operated by the customer and which is dependent on a customer input a purchase decision or a purchase termination signaling decision signal is generated, equipped, c) the price signal transmitted from the price signal transmitter to the coordinating device is forwarded via a sixth electrical or electromagnetic data transmission channel to the price signal receiver and d) from the coordinating device the decision signal to the decision signal receiver only after receipt of one Purchase decision signaling decision signal is sent from the input device.

25. The method according to spoke 24, in which the same data transmission channel is used as the first and sixth data transmission channel. Electrical system for the customer data-protecting and provider-securing electronic processing of the release of customer-selected products in connection with cashless purchase processes, comprising: a) a first electronic database (31), which is an electronic coordination device outside the sphere of influence of both providers and customers (17 ) and in which, on the one hand, a plurality of provider data records, each assigned to a specific provider, to which access can be accessed via a provider identification code assigned to the respective provider, and, on the other hand, a large number of customer data records, each assigned to a specific customer, each of which via one to the respective provider Allocated to customers

Customer identification code can be accessed, saved; b) an electrical price signal generator (19) on the supplier side, which is designed for generating electrical price signals; c) an electrical input device (25) which can be operated by the customer and which is used to generate an electrical purchase intention signal containing the customer identification code of the respective customer and to supplement the purchase intention signal with an electrical one

Provider recognition signal is formed and can be coupled to the coordination device (17) via a first electrical or electromagnetic data transmission channel (37); d) an electronic price signal receiving device (35) provided in the coordination device, which is designed to electronically pick up the provider data record belonging to the transmitted provider identification code from the first database (31) via a coordinating device (17) with the price signal transmitter (19) of the called up Provider coupling second electrical or electromagnetic data transmission channel (39) the price signal generated for the selected product to the

Retrieve coordinating device (17); e) a first electronic comparison device (33) which is designed, after electronically picking up the customer data record belonging to the transmitted customer identification code from the first database (31), to compare the purchase price limit stored for this data record with the retrieved price signal and a function of that To generate the comparison result of the release or non-release of the product delivery signaling electrical decision signal; f) a supply-side electrical decision signal receiver (21); and g) a third electrical or electromagnetic data transmission channel (39) for transmitting the

Decision signal from the coordination device (17) to the decision signal receiver (21).

The system of claim 26, further comprising: a) one to an electronic creditworthiness test facility

(57) second electronic database (59) for the

Storage of a variety of a specific one

Credit customer data records assigned to credit customers, each of which can be accessed via a credit customer identification code assigned to the respective credit customer and which contain the credit data required for cashless payment transactions and a current credit limit for the respective credit customer; b) an electronic credit data signal receiver (61) provided in the creditworthiness checker, which can be coupled to the coordinating device (17) via a fourth electrical or electromagnetic data transmission channel (67) and for receiving a credit data signal that is suitable for the each credit customer is trained by the coordinating device (17) from the first database (31) called credit customer identification code and signals the respective price signal; c) a second electronic comparison device (63) provided in the creditworthiness checking device (57), which is designed to compare the current credit limit of the respective customer called up on the basis of the received credit customer identification code from the second database (59) with the received price signal and a function of this the approval or non-approval of the loan from the comparison result of the second comparison device (63) generate signaling electrical credit signal; d) a fifth electrical or electromagnetic

Data transmission channel (67) for transmission of the c r e d i t k e i t s s i g n a l s v o n d e r

Creditworthiness test facility (57) to the

Coordinator (17); and f) an electronic credit capability signal processing device (53), which is provided in the coordination device (17) and is designed to transmit the data

Signaling release of the selected product

To release the decision signal from the coordinating device to the decision signal receiver of the provider only when a creditworthiness signal signaling the credit release to the coordinating device

(17) has been transferred.

The system of claim 26 or 27, wherein the same data transmission channel (39) is used as the second and third data transmission channel.

System according to one of Claims 26 to 28, in which the same data transmission channel (67) is used as fourth and fifth data transmission channels.

System according to one of Claims 26 to 29, in which at least some of the data transmission channels (37, 39, 67) are only temporarily available for approximately one time Data transmission channels produced during the purchase process is formed.

System according to spoke 30, in which temporary data transmission channels are formed by telephone connections.

System according to one of claims 26 to 31, in which the price signal transmitter (19) is formed by an electrical cash register of the provider.

System according to one of Claims 26 to 32, in which an input device (25) positioned in the vicinity of the price signal transmitter (19) is used.

System according to one of Claims 26 to 32, in which the input device (25) is formed by a customer's mobile radio telephone and the first data transmission channel (37) is formed by a mobile telephone connection between the customer's mobile radio telephone and the coordinating device (17).

System according to one of claims 26 to 34, in which the mobile telephone is provided with a memory for storing the customer identification code from which the

Customer identification code after dialing the

Mobile radio connection can be called up for transmission to the coordination device. System according to claim 35, in which the mobile radio telephone is provided with an electronic scanning device, by means of which the customer identification code can be automatically scanned from the memory by the process of selecting the mobile radio connection to the coordination device (17).

System according to one of Claims 34 to 36, in which the customer identification code is formed by the SIM number of the mobile telephone.

System according to one of claims 26 to 37, with an online shop occurring in the Internet, in which the input device (25) is formed by a computer with Internet access.

System according to one of claims 26 to 37, with an online shop occurring in the Internet, in which the input device (25) is formed by a WAP mobile phone with Internet access.

System according to one of claims 26 to 39, in which a) the coordination device (17) is provided with a price signal transmitter; b) the input device (25) with a

Price signal receiver, a price signal display device (23) and a resolution signal generator which can be operated by the customer and which, depending on a customer input, makes a purchase decision or Abandoned purchase signaling electrical decision signal generated, is provided; c) a sixth electrical or electromagnetic data transmission channel is provided for transmitting the price signal received from the coordinating device to the price signal receiver of the input device; d) the coordination device (17) is designed such that it sends the decision signal to the decision signal receiver (21) only after receipt of a decision signal signaling a purchase decision from the input device (25).

The system of spoke 40, wherein the first and sixth data transmission channels pass through the same

Data transmission channel (37) are formed.