CA2382696A1 - Procede et systeme ameliores permettant d'effectuer des paiements securises sur un reseau informatique - Google Patents
Procede et systeme ameliores permettant d'effectuer des paiements securises sur un reseau informatique Download PDFInfo
- Publication number
- CA2382696A1 CA2382696A1 CA002382696A CA2382696A CA2382696A1 CA 2382696 A1 CA2382696 A1 CA 2382696A1 CA 002382696 A CA002382696 A CA 002382696A CA 2382696 A CA2382696 A CA 2382696A CA 2382696 A1 CA2382696 A1 CA 2382696A1
- Authority
- CA
- Canada
- Prior art keywords
- account number
- spa
- pseudo
- key
- expiration date
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/04—Payment circuits
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/14—Payment architectures specially adapted for billing systems
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/22—Payment schemes or models
- G06Q20/24—Credit schemes, i.e. "pay after"
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3823—Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3825—Use of electronic signatures
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/385—Payment protocols; Details thereof using an alias or single-use codes
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q30/00—Commerce
- G06Q30/06—Buying, selling or leasing transactions
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/12—Card verification
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/12—Card verification
- G07F7/122—Online card verification
Landscapes
- Business, Economics & Management (AREA)
- Accounting & Taxation (AREA)
- Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- Strategic Management (AREA)
- Theoretical Computer Science (AREA)
- Finance (AREA)
- Computer Security & Cryptography (AREA)
- Development Economics (AREA)
- Economics (AREA)
- Marketing (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
La présente invention concerne un procédé sécurisé utile pour effectuer une transaction électronique sur un réseau de communications publiques dans lequel on utilise une date de pseudo-expiration dans le champ de date d'expiration d'une requête d'autorisation. Un des procédés préférés consiste à: générer une clé par carte associée à un numéro de compte; générer un code d'authentification de message au moyen de la clé par carte; convertir le code d'authentification de message en une date de pseudo-expiration; générer une requête d'autorisation pour la transaction, la requête ayant un champ de date d'expiration contenant la date de pseudo-expiration; et à vérifier le code d'authentification de message sur la base de la date de pseudo-expiration. Une autre forme de réalisation de cette invention comprend un procédé qui permet d'effectuer une transaction électronique sur un réseau de communications publiques, avec un numéro de compte pour le paiement ayant un numéro de pseudo-compte associé, ce procédé consistant à: a) utiliser le numéro de pseudo-compte avec un champ de commande indiquant un des divers processus de génération de clé devant être utilisé pour générer une clé d'authentification; b) générer une clé d'authentification associée au numéro de pseudo-compte au moyen d'un des divers processus de génération de clé indiqué dans le champ de commande du numéro de pseudo-compte; c) utiliser la clé d'authentification pour générer un code d'authentification de message spécifique à la transaction; d) générer un message de requête d'autorisation comprenant le code d'authentification et le numéro de pseudo-compte; et e) vérifier le code d'authentification du message à l'aide du processus de génération de clé indiqué et de la clé d'authentification.
Applications Claiming Priority (9)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US21306300P | 2000-06-21 | 2000-06-21 | |
| US60/213,063 | 2000-06-21 | ||
| US22622700P | 2000-08-18 | 2000-08-18 | |
| US60/226,227 | 2000-08-18 | ||
| US09/809,367 | 2001-03-15 | ||
| US09/809,367 US9672515B2 (en) | 2000-03-15 | 2001-03-15 | Method and system for secure payments over a computer network |
| US09/833,049 | 2001-04-11 | ||
| US09/833,049 US7379919B2 (en) | 2000-04-11 | 2001-04-11 | Method and system for conducting secure payments over a computer network |
| PCT/US2001/019753 WO2001099070A2 (fr) | 2000-06-21 | 2001-06-21 | Procede et systeme ameliores permettant d'effectuer des paiements securises sur un reseau informatique |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CA2382696A1 true CA2382696A1 (fr) | 2001-12-27 |
Family
ID=27498921
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CA002382696A Abandoned CA2382696A1 (fr) | 2000-06-21 | 2001-06-21 | Procede et systeme ameliores permettant d'effectuer des paiements securises sur un reseau informatique |
Country Status (5)
| Country | Link |
|---|---|
| EP (1) | EP1320839A2 (fr) |
| JP (1) | JP5093957B2 (fr) |
| AU (1) | AU781671B2 (fr) |
| CA (1) | CA2382696A1 (fr) |
| WO (1) | WO2001099070A2 (fr) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20190385160A1 (en) * | 2018-06-19 | 2019-12-19 | Mastercard International Incorporated | System and process for on-the-fly cardholder verification method selection |
| EP3853798B1 (fr) * | 2018-09-21 | 2025-09-24 | Mastercard International Incorporated | Procédé de transaction de paiement utilisant une expiration de compte dynamique et un code de vérification de jeton dynamique |
Families Citing this family (16)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP1503308B1 (fr) * | 2002-01-31 | 2010-01-13 | Servicios para Medios de Pago, S.A. | Procede reversible de generation de cartes de paiement mutees au moyen d'un algorithme mathematique |
| EP1783708A1 (fr) * | 2005-10-06 | 2007-05-09 | First Data Corporation | Méthode et système de transaction |
| NZ576259A (en) * | 2006-09-15 | 2012-04-27 | Visa Int Service Ass | Method and system for cross-issuer registration of transaction cards |
| FR2914763B1 (fr) * | 2007-04-06 | 2013-02-15 | Grp Des Cartes Bancaires | Cryptogramme dynamique |
| EP2026267A1 (fr) * | 2007-07-31 | 2009-02-18 | Nederlandse Organisatie voor toegepast- natuurwetenschappelijk onderzoek TNO | Émission de bons d'échange électroniques |
| US8181861B2 (en) | 2008-10-13 | 2012-05-22 | Miri Systems, Llc | Electronic transaction security system and method |
| CA2753576A1 (fr) * | 2009-02-25 | 2010-09-02 | Miri Systems, Llc | Systeme et procede de paiement |
| IN2012DN03242A (fr) | 2009-10-05 | 2015-10-23 | Miri Systems Llc | |
| US8762284B2 (en) * | 2010-12-16 | 2014-06-24 | Democracyontheweb, Llc | Systems and methods for facilitating secure transactions |
| WO2018004679A1 (fr) * | 2016-07-01 | 2018-01-04 | American Express Travel Related Services Company, Inc. | Systèmes et procédés de validation de transmissions sur des canaux de communication |
| KR102184807B1 (ko) * | 2018-05-23 | 2020-11-30 | 신한카드 주식회사 | Ars 기반의 사용자 인증을 처리하는 결제 장치 및 방법 |
| EP3767569A1 (fr) * | 2019-07-18 | 2021-01-20 | Mastercard International Incorporated | Procédé de transaction électronique et dispositif utilisant un identifiant de transactions flexible |
| EP3872733A1 (fr) | 2020-02-26 | 2021-09-01 | Mastercard International Incorporated | Communication de données sensibles dans un canal de données restreint |
| GB2598108A (en) | 2020-08-17 | 2022-02-23 | Mastercard International Inc | Card reader, smart card and method for processing a transaction |
| US12380431B2 (en) | 2021-05-24 | 2025-08-05 | Mastercard International Incorporated | Systems, methods and computer program products for asynchronous authentication of digital wallet based payment transactions |
| US12288213B2 (en) | 2022-03-16 | 2025-04-29 | Mastercard International Incorporated | Systems, methods and computer program products for secure contactless payment transactions |
Family Cites Families (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2708083B2 (ja) * | 1991-12-27 | 1998-02-04 | 国際電信電話株式会社 | クレジットカード課金簡易ダイヤル操作サービス装置 |
| WO1995016971A1 (fr) * | 1993-12-16 | 1995-06-22 | Open Market, Inc. | Publicite numerique active |
| JPH07231367A (ja) * | 1994-02-17 | 1995-08-29 | Fujitsu Ltd | パーソナル通信用クレジットカード課金サービス装置 |
| US5826245A (en) * | 1995-03-20 | 1998-10-20 | Sandberg-Diment; Erik | Providing verification information for a transaction |
| NL1001863C2 (nl) * | 1995-12-08 | 1997-06-10 | Nederland Ptt | Werkwijze voor het beveiligd afwaarderen van een elektronisch betaalmid- del, alsmede betaalmiddel voor het ten uitvoer leggen van de werkwijze. |
| US5913203A (en) * | 1996-10-03 | 1999-06-15 | Jaesent Inc. | System and method for pseudo cash transactions |
| US5953710A (en) * | 1996-10-09 | 1999-09-14 | Fleming; Stephen S. | Children's credit or debit card system |
| JPH1139401A (ja) * | 1997-07-16 | 1999-02-12 | Nippon Shinpan Kk | クレジットカードシステムおよびネットワークにおけるクレジットカードの利用方法 |
| US6000832A (en) * | 1997-09-24 | 1999-12-14 | Microsoft Corporation | Electronic online commerce card with customer generated transaction proxy number for online transactions |
| US5883810A (en) | 1997-09-24 | 1999-03-16 | Microsoft Corporation | Electronic online commerce card with transactionproxy number for online transactions |
| GB2345775A (en) * | 1998-10-21 | 2000-07-19 | Ordertrust Llc | Analyzing transaction information |
| US6327578B1 (en) * | 1998-12-29 | 2001-12-04 | International Business Machines Corporation | Four-party credit/debit payment protocol |
| EP1028401A3 (fr) * | 1999-02-12 | 2003-06-25 | Citibank, N.A. | Méthode et système pour exécuter une transaction avec cartes bancaires |
| US6847953B2 (en) * | 2000-02-04 | 2005-01-25 | Kuo James Shaw-Han | Process and method for secure online transactions with calculated risk and against fraud |
-
2001
- 2001-06-21 JP JP2002503837A patent/JP5093957B2/ja not_active Expired - Fee Related
- 2001-06-21 WO PCT/US2001/019753 patent/WO2001099070A2/fr not_active Ceased
- 2001-06-21 AU AU70011/01A patent/AU781671B2/en not_active Ceased
- 2001-06-21 EP EP01948538A patent/EP1320839A2/fr not_active Withdrawn
- 2001-06-21 CA CA002382696A patent/CA2382696A1/fr not_active Abandoned
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20190385160A1 (en) * | 2018-06-19 | 2019-12-19 | Mastercard International Incorporated | System and process for on-the-fly cardholder verification method selection |
| EP3853798B1 (fr) * | 2018-09-21 | 2025-09-24 | Mastercard International Incorporated | Procédé de transaction de paiement utilisant une expiration de compte dynamique et un code de vérification de jeton dynamique |
Also Published As
| Publication number | Publication date |
|---|---|
| JP5093957B2 (ja) | 2012-12-12 |
| EP1320839A2 (fr) | 2003-06-25 |
| WO2001099070A3 (fr) | 2003-01-16 |
| JP2003536180A (ja) | 2003-12-02 |
| AU781671B2 (en) | 2005-06-02 |
| AU7001101A (en) | 2002-01-02 |
| WO2001099070A2 (fr) | 2001-12-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US6990470B2 (en) | Method and system for conducting secure payments over a computer network | |
| US7177848B2 (en) | Method and system for conducting secure payments over a computer network without a pseudo or proxy account number | |
| US6915279B2 (en) | System and method for conducting secure payment transactions | |
| US7983987B2 (en) | System and method for conducting secure payment transaction | |
| US7379919B2 (en) | Method and system for conducting secure payments over a computer network | |
| AU781671B2 (en) | An improved method and system for conducting secure payments over a computer network | |
| EP1272988B1 (fr) | Procede et systeme ameliores pour effectuer des paiements en toute securite sur un reseau informatique | |
| AU2001257019A1 (en) | An improved method and system for conducting secure payments over a computer network | |
| JP4903346B2 (ja) | 擬似或いは代理口座番号なしでコンピュータネットワークを越えて安全な支払いを処理するための改善された方法およびシステム | |
| AU2002254513B8 (en) | System and method for conducting secure payment transactions | |
| AU2001270012A1 (en) | An improved method and system for conducting secure payments over a computer network without a pseudo or proxy account number | |
| ZA200201382B (en) | An improved method and system for conducting secure payments over a computer network. | |
| EP1921579A2 (fr) | Procédé et système améliorés pour réaliser des paiements sécurisés via un réseau informatique | |
| AU2007216920B2 (en) | An improved method and system for conducting secure payments over a computer network | |
| AU2012201255B2 (en) | An improved method and system for conducting secure payments over a computer network | |
| ZA200300114B (en) | An improved method and system for conducting secure payments over a computer network without a pseudo or proxy account number. | |
| ZA200307558B (en) | System and method for conducting secure payment transactions. | |
| HK1118626A (en) | An improved method and system for conducting secure payments over a computer network | |
| HK1052245A1 (en) | An improved method and system for conducting secure payments over a computer network | |
| HK1052245B (en) | An improved method and system for conducting secure payments over a computer network | |
| ZA200208248B (en) | An improved method and system for conducting secure payments over a computer network. |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| FZDE | Discontinued |