USRE37067E1 - Chip card based payment system having an on-card flag for specifying proper completion of a prior card balance replenishment session - Google Patents
Chip card based payment system having an on-card flag for specifying proper completion of a prior card balance replenishment session Download PDFInfo
- Publication number
- USRE37067E1 USRE37067E1 US09/324,686 US32468699A USRE37067E US RE37067 E1 USRE37067 E1 US RE37067E1 US 32468699 A US32468699 A US 32468699A US RE37067 E USRE37067 E US RE37067E
- Authority
- US
- United States
- Prior art keywords
- symbol
- balance
- card
- stored
- symbol value
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
- G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/0806—Details of the card
- G07F7/0813—Specific details related to card security
- G07F7/082—Features insuring the integrity of the data on or in the card
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/0866—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means by active credit-cards adapted therefor
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M15/00—Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
- H04M15/47—Fraud detection or prevention means
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M15/00—Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
- H04M15/48—Secure or trusted billing, e.g. trusted elements or encryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M17/00—Prepayment of wireline communication systems, wireless communication systems or telephone systems
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M17/00—Prepayment of wireline communication systems, wireless communication systems or telephone systems
- H04M17/10—Account details or usage
- H04M17/106—Account details or usage using commercial credit or debit cards
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M17/00—Prepayment of wireline communication systems, wireless communication systems or telephone systems
- H04M17/20—Prepayment of wireline communication systems, wireless communication systems or telephone systems with provision for recharging the prepaid account or card, or for credit establishment
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M17/00—Prepayment of wireline communication systems, wireless communication systems or telephone systems
- H04M17/20—Prepayment of wireline communication systems, wireless communication systems or telephone systems with provision for recharging the prepaid account or card, or for credit establishment
- H04M17/204—Prepayment of wireline communication systems, wireless communication systems or telephone systems with provision for recharging the prepaid account or card, or for credit establishment on-line recharging, e.g. cashless
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M17/00—Prepayment of wireline communication systems, wireless communication systems or telephone systems
- H04M2017/14—Prepayment of wireline communication systems, wireless communication systems or telephone systems using commercial credit/debit cards, e.g. VISA, AMEX
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M17/00—Prepayment of wireline communication systems, wireless communication systems or telephone systems
- H04M2017/24—Prepayment of wireline communication systems, wireless communication systems or telephone systems with on-line recharging of an account or card, e.g. cashless
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M2215/00—Metering arrangements; Time controlling arrangements; Time indicating arrangements
- H04M2215/01—Details of billing arrangements
- H04M2215/0148—Fraud detection or prevention means
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M2215/00—Metering arrangements; Time controlling arrangements; Time indicating arrangements
- H04M2215/01—Details of billing arrangements
- H04M2215/0156—Secure and trusted billing, e.g. trusted elements, encryption, digital signature, codes or double check mechanisms to secure billing calculation and information
Definitions
- the invention relates to a payment system in which use is made of electronic payment cards, in particular “chip cards” or “smart cards”.
- electronic payment cards in particular “chip cards” or “smart cards”.
- chips cards or “smart cards”.
- payment cards which can be used for paying call costs in public telephone terminals.
- other services and goods can also be paid for in this way.
- This development is in fact referred to as a so-called “electronic purse”.
- Electronic purse Under consideration in this connection is the payment of generally none too large small amounts by means of electronic payment cards on which a balance is previously entered. Payment takes place by reducing the balance on the card. Of course, measures have to be taken in order to arrange for the balance reduction to benefit the supplier; systems for this purpose are still being developed and tests are taking place in that field.
- a payment card After a payment card has been provided with an initial balance, that balance is reduced by the telephone terminal in accordance with a rate for the telephone costs.
- the provision of an initial balance and the replenishment of the balance after the passing of time can also occur via the telephone terminal.
- a connection has to be made to a central administration system which, onto on the one hand, enters the amount desired by the user on the card and, on the other hand, ensures that the amount can be received, for example, by sending an account to the user or via (after authorization) electronic reduction of the balance of a bank account belonging to the user.
- the measures proposed according to the present invention are intended to combat errors and frauds in the processes mentioned (the use/payment process and the “balance process”).
- the essence of the invention is that a “flag” is placed on the payment card during each balance process throughout the entire process time in order to indicate that the payment card is occupied with an indivisible action, i.e. a process which cannot be interrupted. After said indivisible action has taken place, the flag is removed.
- the placing and removal of the flag takes place by writing a certain first symbol (for example, “1”) or second symbol (for example, “0”) into a certain memory location of the payment card.
- the exploitation process and payment process (the use of the telephone facilities) can only be started after it has been confirmed that there is no flag at said certain memory location, which means that the last balance process was correctly concluded. If there is, in fact, a flag, no connection to the telephone system is set up. Instead thereof, a balance session is set up in which the incorrectly concluded previous session is repeated or is continued and correctly and finally concluded on the basis of the information still present an the in an administration system.
- the flag In order to prevent the flag from being capable of being removed by fraud, for example by means of a PC and a card terminal (under consideration is the situation where the payment card is pulled out of the terminal during the balance process at the instant when the balance on the card has already been increased while preparation of the invoice (or automatic debit instruction) has not yet taken place) provision is preferably made that the flag can be removed only by the central system which is concerned with increasing the balance.
- the code signal for removing the flag is therefore, preferably also presented to the payment card, provided with a cryptographic code which the central system denotes as the origin of the code signal (message authentication code, MAC).
- the code signal is converted into an instruction to replace the first symbol (“1”, “flag up”) into the second symbol (“0”, “flag down”).
- various instructions are used to set up the flag and to remove it. For the first action (“0” ⁇ “1”), the instruction “WRITE” is used and for the second action (“1” ⁇ “0”), the instruction “MODIFY” is used. The difference is:
- FIG. 1 depicts apparatus, here illustratively a telephone terminal and an accounting and billing system, both interconnected by a telephone network, which embodies the present invention
- FIGS. 2-5 each depicts a particular protocol occurring among the telephone network (system), the terminal and a payment card for a corresponding mode of operation involving the present invention.
- FIG. 1 shows, a e.g., a public switched telephone network (PSTN) to which a telephone terminal is connected.
- PSTN public switched telephone network
- Payment of telephone costs occurs by periodically reducing a balance stored in an electronic payment card.
- the balance stored in the card can be increased by inserting the card into the terminal.
- Connection is made to an “Accounting & Billing” system (ABS) connected to the PSTN in a menu-controlled dialog with the terminal (via the keyboard and display window of the terminal).
- ABS Accounting & Billing
- the payment card can be used to start a telephone session with the PSTN, the costs of which are paid by periodically debiting the balance.
- the payment card contains, inter alia, an electrically erasable programmable read only memory (EEPROM).
- EEPROM electrically erasable programmable read only memory
- FIG. 2 diagrammatically shows a protocol which occurs after a user has inserted his payment card into the terminal.
- the “flag” of the payment card is read.
- FIG. 3 shows a protocol for set-up and payment of a telephone call through of the card balance.
- the initial balance is first investigated to determine whether it is sufficient (lines 20 - 24 ); thereafter the connection is set up and periodically an amount P is deducted from the card balance. As soon as the balance is insufficient, the connection is interrupted. (lines 25 - 29 )
- FIG. 4 shows a protocol for increasing the card balance.
- the first action is to raise the flag (“1”).
- lines 31 - 33 This indicates that a “RAISE CREDIT” operation is in progress; only at the end of the latter is the flag lowered (“0”).
- the amount by which the balance has to be increased is entered via a keyboard of the terminal (the same one as that through which telephone connections can be dialled).
- the card balance is read.
- lines 34 - 39 Connection is also made to ABS (via the telephone network).
- the card balance and the amount with which the card balance has to be replenished is now transmitted by the terminal to the ABS and registered at the credit and amount registration system (CAR).
- CAR credit and amount registration system
- the terminal then instructs the payment card to increase the balance by the amount (lines 40 - 43 ); the card transmits the new balance to the ABS via the terminal.
- the amount entered is compared in the ABS with the difference between the new and the old card balance and, in the event of agreement, an invoice is prepared for the user. (lines 44 - 45 )
- the registration of the old card balance in the ABS and the amount entered by the user are then erased.
- the flag on the payment card is lowered again.
- the instruction to do this is received from the ABS using “message authentication” by means of a cryptographic “message authentication code” (MAC). This is checked in the payment card, after which the flag is set by means of a MODIFY instruction to “0”.
- MAC cryptographic “message authentication code”
- the payment card is programmed in such a way that the MODIFY instruction can be carried out only together with a correct MAC.
- Use of MACs is generally known, inter alia from “Electronic banking using smartcards”, SMART CARD '90, Int. Exh. and Conf. PLF Commun., vol. 2, 1990, pages M1-8, or from the book entitled “Security for Communication Networks” by Davis and Price.
- FIG. 5 shows a protocol which is processed if, after the payment card has been inserted, it is found that the flag is raised. This indicates that an earlier action to increase the card balance has not been correctly terminated. The incorrectly processed previous action is now correctly terminated by the protocol shown in FIG. 5 .
- the present card balance is greater than the registered card balance in the CAR, it may be assumed that during the previous session the card balance has, in fact, been increased but that no account thereof has been prepared. In that case, the account is now updated, the CAR is erased and the flag is reset (lines 57 - 59 ).
- the present card balance is equal to the card balance registered in the CAR, the previous attempt to increase the balance is now processed, namely on the basis of the amount, known from the CAR, by which the balance had to be increased.
- the card balance is now increased, the account is prepared, the CAR is erased and the flag is reset (lines 60 - 66 ).
- the planned session for which the choice was already made can be started after all (line 67 ).
Abstract
Improved integrity of a payment system for paying for services or goods, for example, telephone facilities, through use of electronic payment cards. In any session to increase a card balance, a “flag” is placed (“1”) on the payment card which indicates that the session must not be interrupted. After completion, the flag is removed again (“0”). A session to pay for the product or the service or to increase the balance can only be established if the flag is absent (“0”) indicating that the last session to increase the balance was correctly completed. If, on the other hand, the flag is still “1” at the start of a session, a correction routine is first performed in which the previous session to increase the balance is then correctly concluded to prevent the flag being removed by fraud, the flag can only be removed by a central system (PSTN/ABS) through issurance of an authorized instruction.
Description
This application is a Reissue of application Ser. No. 08/519,253, filed Aug. 25, 1995, which issued as U.S. Pat. No. 5,635,695.
The invention relates to a payment system in which use is made of electronic payment cards, in particular “chip cards” or “smart cards”. Under consideration in the present application are, in particular, payment cards which can be used for paying call costs in public telephone terminals. However, other services and goods can also be paid for in this way. This development is in fact referred to as a so-called “electronic purse”. Under consideration in this connection is the payment of generally none too large small amounts by means of electronic payment cards on which a balance is previously entered. Payment takes place by reducing the balance on the card. Of course, measures have to be taken in order to arrange for the balance reduction to benefit the supplier; systems for this purpose are still being developed and tests are taking place in that field. To place an initial balance on the card and increase the balance later, there must be an infrastructure of terminals and the like if this form of payment is to be accepted. It appears possible to use the public telephone terminals for this purpose. Such terminals act as “charging stations” for the electronic payment cards. Of course, the public telephone terminals remain suitable as means for conducting telephone calls and offering any other telecommunication facilities via the downstream central telephone system or telecommunication system. Payment of such telephone calls and any other facilities may, at the same time, take place by means of the “electronic purse”. Although the payment of telephone/telecommunication costs, in particular, is considered below, it is emphasized that the invention, as explained below, is not limited thereto and is equally applicable for payment for other services or goods by means of an “electronic purse”. The “charging” of payment cards need not occur via telephone terminals either, but can equally well occur via other terminals, for example, terminals which are now used for issuing cash (so-called “cash points”).
After a payment card has been provided with an initial balance, that balance is reduced by the telephone terminal in accordance with a rate for the telephone costs. The provision of an initial balance and the replenishment of the balance after the passing of time can also occur via the telephone terminal. To do this, a connection has to be made to a central administration system which, onto on the one hand, enters the amount desired by the user on the card and, on the other hand, ensures that the amount can be received, for example, by sending an account to the user or via (after authorization) electronic reduction of the balance of a bank account belonging to the user.
The measures proposed according to the present invention are intended to combat errors and frauds in the processes mentioned (the use/payment process and the “balance process”).
The essence of the invention is that a “flag” is placed on the payment card during each balance process throughout the entire process time in order to indicate that the payment card is occupied with an indivisible action, i.e. a process which cannot be interrupted. After said indivisible action has taken place, the flag is removed. The placing and removal of the flag takes place by writing a certain first symbol (for example, “1”) or second symbol (for example, “0”) into a certain memory location of the payment card. The exploitation process and payment process (the use of the telephone facilities) can only be started after it has been confirmed that there is no flag at said certain memory location, which means that the last balance process was correctly concluded. If there is, in fact, a flag, no connection to the telephone system is set up. Instead thereof, a balance session is set up in which the incorrectly concluded previous session is repeated or is continued and correctly and finally concluded on the basis of the information still present an the in an administration system.
In order to prevent the flag from being capable of being removed by fraud, for example by means of a PC and a card terminal (under consideration is the situation where the payment card is pulled out of the terminal during the balance process at the instant when the balance on the card has already been increased while preparation of the invoice (or automatic debit instruction) has not yet taken place) provision is preferably made that the flag can be removed only by the central system which is concerned with increasing the balance. The code signal for removing the flag is therefore, preferably also presented to the payment card, provided with a cryptographic code which the central system denotes as the origin of the code signal (message authentication code, MAC). If this appears to be correct, the code signal is converted into an instruction to replace the first symbol (“1”, “flag up”) into the second symbol (“0”, “flag down”). Preferably, if EEPROM cards are used, various instructions are used to set up the flag and to remove it. For the first action (“0”→“1”), the instruction “WRITE” is used and for the second action (“1”→“0”), the instruction “MODIFY” is used. The difference is:
bit in buffer | WRITE | → | bit in |
0 | 0 | → | 0 |
1 | 0 | → | 1 |
0 | 1 | → | 1 |
1 | 1 | → | 1 |
bit in buffer | MODIFY | → | bit in |
0 | 0 | → | 0 |
1 | 0 | → | 0 |
0 | 1 | → | 1 |
1 | 1 | → | 1 |
The invention is discussed in greater detail below with reference to a diagrammatic representation of a card telephone system in FIG. 1 and four diagrams in FIGS. 2-5.
FIG. 1 depicts apparatus, here illustratively a telephone terminal and an accounting and billing system, both interconnected by a telephone network, which embodies the present invention; and
FIGS. 2-5 each depicts a particular protocol occurring among the telephone network (system), the terminal and a payment card for a corresponding mode of operation involving the present invention.
FIG. 1 shows, a e.g., a public switched telephone network (PSTN) to which a telephone terminal is connected. Payment of telephone costs occurs by periodically reducing a balance stored in an electronic payment card. The balance stored in the card can be increased by inserting the card into the terminal. Connection is made to an “Accounting & Billing” system (ABS) connected to the PSTN in a menu-controlled dialog with the terminal (via the keyboard and display window of the terminal). After a balance desired by the user has been entered (for which the user receives an invoice from the ABS), the payment card can be used to start a telephone session with the PSTN, the costs of which are paid by periodically debiting the balance. The payment card contains, inter alia, an electrically erasable programmable read only memory (EEPROM).
The diagram of FIG. 2 diagrammatically shows a protocol which occurs after a user has inserted his payment card into the terminal.
After the card has been inserted into the terminal and the identity has been established and authorized (like further protocol details, this is not indicated in the figures), the “flag” of the payment card is read. (lines 1-7) This normally has (in this example) the value “0”: “flag down”. If the flag is down, a telephone connection set-up can be started, which is illustrated in FIG. 3. In place thereof, an action can also be started to increase the card balance, see FIG. 4. If the flag has the value “1” (“flag up”), something is not in order and an error routine is first processed; this is shown in FIG. 5. (lines 8-14)
FIG. 3 shows a protocol for set-up and payment of a telephone call through of the card balance. In this process, the initial balance is first investigated to determine whether it is sufficient (lines 20-24); thereafter the connection is set up and periodically an amount P is deducted from the card balance. As soon as the balance is insufficient, the connection is interrupted. (lines 25-29)
FIG. 4 shows a protocol for increasing the card balance. The first action is to raise the flag (“1”). (lines 31-33) This indicates that a “RAISE CREDIT” operation is in progress; only at the end of the latter is the flag lowered (“0”). The amount by which the balance has to be increased is entered via a keyboard of the terminal (the same one as that through which telephone connections can be dialled). After the value of the flag has been read for the purpose of security (it should now be “1”), the card balance is read. (lines 34-39) Connection is also made to ABS (via the telephone network). The card balance and the amount with which the card balance has to be replenished is now transmitted by the terminal to the ABS and registered at the credit and amount registration system (CAR). The terminal then instructs the payment card to increase the balance by the amount (lines 40-43); the card transmits the new balance to the ABS via the terminal. The amount entered is compared in the ABS with the difference between the new and the old card balance and, in the event of agreement, an invoice is prepared for the user. (lines 44-45) The registration of the old card balance in the ABS and the amount entered by the user are then erased. Finally, the flag on the payment card is lowered again. The instruction to do this is received from the ABS using “message authentication” by means of a cryptographic “message authentication code” (MAC). This is checked in the payment card, after which the flag is set by means of a MODIFY instruction to “0”. (lines 46-47) The payment card is programmed in such a way that the MODIFY instruction can be carried out only together with a correct MAC. Use of MACs is generally known, inter alia from “Electronic banking using smartcards”, SMART CARD '90, Int. Exh. and Conf. PLF Commun., vol. 2, 1990, pages M1-8, or from the book entitled “Security for Communication Networks” by Davis and Price.
FIG. 5 shows a protocol which is processed if, after the payment card has been inserted, it is found that the flag is raised. This indicates that an earlier action to increase the card balance has not been correctly terminated. The incorrectly processed previous action is now correctly terminated by the protocol shown in FIG. 5.
First of all (through lines 50-51), it is determined whether the registration (made during the previous action) of the old card balance and the amount by which the balance had to be increased (CAR) still exist in the ABS. If this information was erased in the previous action, then the only action which has to be carried out is to reset the flag. It may be assumed that only the resetting of the card flag has been omitted in the incorrectly concluded action (lines 52-53).
If the CAR still exists (lines 54-55), it is determined whether the registered card balance is or is not equal to the present card balance (line 56).
If the present card balance is greater than the registered card balance in the CAR, it may be assumed that during the previous session the card balance has, in fact, been increased but that no account thereof has been prepared. In that case, the account is now updated, the CAR is erased and the flag is reset (lines 57-59).
If the present card balance is equal to the card balance registered in the CAR, the previous attempt to increase the balance is now processed, namely on the basis of the amount, known from the CAR, by which the balance had to be increased. The card balance is now increased, the account is prepared, the CAR is erased and the flag is reset (lines 60-66). After an incorrect session to increase the card balance was signalled by detection of the flag and the error was then corrected, the planned session for which the choice was already made (see FIG. 2, lines 12-14) can be started after all (line 67).
Claims (10)
1. A payment system comprising: a terminal; arranged to communicate with a payment card for communicatively interacting with the terminal so as to effectuate a transaction therethrough;
means, operative in conjunction with a balance process which increases a balance stored in the payment card, for to carry out the following tasks:
changing a symbol stored in the payment card from a first symbol value to a second symbol, wherein value at the beginning of said balance process;
changing said symbol stored in said payment card from said second symbol value into said first symbol value at the end of said balance process; said changing means also being arranged to carry out the following tasks during a further process with the payment card:
detectsdetecting, at a beginning of said further process, if said first or said second symbol value is stored in the payment card;
if said second symbol is stored, changes said second symbol to said first symbol and performs said process to increase the stored balance; and has said first symbol value, continuing with said further process;
if said first symbol is stored, indicates has a second value, indicating that a previous execution of said balance process was interrupted prior to completion and completes or repeats starting a terminating process to change said second symbol value into said first symbol value;
wherein the system also comprises an administration system and the system is arranged to:
store information regard the balance process during the execution of the balance process in said administration system;
complete or repeat the previous execution of the balance process during said terminating process in said further process on the basis of said information still present in the administration system; and
continue said further process after said terminating process.
2. The payment system in claim 1 further comprising a central system connected to the terminal, the terminal being remote from the central system, wherein the central system, upon completion of the balance process to increase the balance stored in the card, sends a signal to the terminal so as to change the stored symbol from the first second symbol value to the second first symbol value.
3. The payment system in claim 2 wherein at the beginning of the balance process to increase the balance stored in the card, the terminal changes the stored symbol from the second first symbol value to the first second symbol value.
4. The payment system in claim 3comprising a payment card wherein the payment card comprises an electrically erasable programmable read only memory (EEPROM) and the stored symbol is changed from the secondfirst symbol value to the firstsecond symbol value as a result of a WRITE instruction executed by the card.
5. The payment system in claim 2comprising a payment card, wherein the payment card comprises an electrically erasable programmable read only memory (EEPROM) and the stored symbol is changed from the firstsecond symbol value to the secondfirst symbol value as a result of a MODIFY instruction executed by the card.
6. A method for use in a payment system having a terminal and a payment card, wherein the payment card communicatively interacts with the terminal so as to effectuate a transaction therethrough, the method comprising the steps of:
changing, in conjunction with a balance process which increases a balance stored in the payment card, a symbol stored in the card from a first symbol value to a second symbol value at the beginning of said balance process;
changing said symbol stored in said payment card from said second symbol value into said first symbol value at the end of said balance process, said method also comprising the following steps ofduring a further process with the payment card:
detecting, at a beginning of said further process, if said first or said second symbol value is stored in the payment card;
if said second symbol is stored, changing said second symbol to has said first symbol and performing said process to increase the stored balance value, continuing with said further process; and
if said first symbol is stored has said second symbol value, indicating that a previous execution of said balance process was interrupted prior to completion and starting a terminating process to change said second symbol value into said first symbol value,
wherein the method also comprises the steps of:
storing information regarding the balance process during the execution of the balance process in an administration system;
completing or repeating the previous execution of the balance process during said terminating process in said further process on the basis of said information still present in the administration system; and
continuing said further process after said terminating process.
7. The method in claim 6 further comprising the step of sending a signal, from a central system to the card and upon completion of the balance process to increase the balance stored in the card, so as to change the stored symbol from the first second symbol value to the second first symbol value.
8. The method in claim 7 further comprising the step of changing, at the beginning of the balance process to increase the balance stored in the card, the stored symbol from the second first symbol value to the first second symbol value by means of said terminal.
9. The method in claim 8 further comprising the step of changing the stored symbol from the second first symbol value to the first second symbol value as a result of a WRITE instruction executed by the card.
10. The method in claim 7 further comprising the step of changing the stored symbol from the first second symbol value to the second first symbol value as a result of a MODIFY instruction executed by the card.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US09/324,686 USRE37067E1 (en) | 1994-08-31 | 1999-06-03 | Chip card based payment system having an on-card flag for specifying proper completion of a prior card balance replenishment session |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
NL9401406A NL9401406A (en) | 1994-08-31 | 1994-08-31 | Payment system with improved integrity. |
NL9401406 | 1994-08-31 | ||
US08/519,253 US5635695A (en) | 1994-08-31 | 1995-08-25 | Chip card based payment system having an on-card flag for specifying proper completion of a prior card balance replenishment session |
US09/324,686 USRE37067E1 (en) | 1994-08-31 | 1999-06-03 | Chip card based payment system having an on-card flag for specifying proper completion of a prior card balance replenishment session |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US08/519,253 Reissue US5635695A (en) | 1994-08-31 | 1995-08-25 | Chip card based payment system having an on-card flag for specifying proper completion of a prior card balance replenishment session |
Publications (1)
Publication Number | Publication Date |
---|---|
USRE37067E1 true USRE37067E1 (en) | 2001-02-27 |
Family
ID=19864587
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US08/519,253 Ceased US5635695A (en) | 1994-08-31 | 1995-08-25 | Chip card based payment system having an on-card flag for specifying proper completion of a prior card balance replenishment session |
US09/324,686 Expired - Fee Related USRE37067E1 (en) | 1994-08-31 | 1999-06-03 | Chip card based payment system having an on-card flag for specifying proper completion of a prior card balance replenishment session |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US08/519,253 Ceased US5635695A (en) | 1994-08-31 | 1995-08-25 | Chip card based payment system having an on-card flag for specifying proper completion of a prior card balance replenishment session |
Country Status (3)
Country | Link |
---|---|
US (2) | US5635695A (en) |
EP (1) | EP0700023A1 (en) |
NL (1) | NL9401406A (en) |
Cited By (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030052162A1 (en) * | 1999-12-23 | 2003-03-20 | Jean-Louis Sarradin | Smart card payment terminal |
US20030154153A1 (en) * | 2002-01-31 | 2003-08-14 | Steidlmayer J. Peter | Composite commodity financial product |
US6853983B1 (en) * | 1996-12-02 | 2005-02-08 | R. Clewits Beheer B.V. | System and method for the selective activation of one or several software and/or hardware functions of a programmable device |
US20050283430A1 (en) * | 2004-06-17 | 2005-12-22 | Visa International Service Association | Method and system for providing buyer bank payable discounting services |
US20060155644A1 (en) * | 2005-01-12 | 2006-07-13 | Visa International | Pre-funding system and method |
US7822679B1 (en) | 2001-10-29 | 2010-10-26 | Visa U.S.A. Inc. | Method and system for conducting a commercial transaction between a buyer and a seller |
US20120296819A1 (en) * | 2010-06-29 | 2012-11-22 | Zhou Lu | Method for operating an e-purse |
Families Citing this family (25)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
SE506506C2 (en) * | 1995-04-11 | 1997-12-22 | Au System | Electronic transaction terminal, telecommunication system including an electronic transaction terminal, smart card as electronic transaction terminal and method of transferring electronic credits |
NL1001659C2 (en) * | 1995-11-15 | 1997-05-21 | Nederland Ptt | Method for writing down an electronic payment method. |
DE19600081C2 (en) * | 1996-01-03 | 1999-11-18 | Ibm | Ensuring data integrity for data carrier cards |
EP0798673A1 (en) * | 1996-03-29 | 1997-10-01 | Koninklijke KPN N.V. | Method of securely loading commands in a smart card |
FR2757661B1 (en) * | 1996-12-24 | 1999-01-22 | Gemplus Card Int | METHOD FOR SECURE DATA TRANSFER THROUGH A COMMUNICATION NETWORK |
DE19748757A1 (en) * | 1997-11-05 | 1999-05-06 | Cit Alcatel | Procedure for the acceptance of charges in individual connections as well as telephone network and terminal |
FR2777371B1 (en) * | 1998-04-09 | 2001-10-26 | Innovatron Electronique | METHOD FOR INDIVISIBILY MODIFYING A PLURALITY OF LOCATIONS IN THE NON-VOLATILE MEMORY OF A MICROCIRCUIT CARD |
FR2784483B1 (en) * | 1998-10-13 | 2000-12-29 | Innovatron Electronique | METHOD FOR EXCHANGING DATA BETWEEN AN AUTOMATON AND A HANDHELD OBJECT, IN PARTICULAR A MICROCIRCUIT CARD, LIKELY TO BE DEBIT BY THE AUTOMATON IN REPLACEMENT OF THE DELIVERY OF GOODS OR SERVICES |
CN100468452C (en) * | 1999-08-23 | 2009-03-11 | 李东声 | Method for accomplishment secure transaction for electronicbankbook (purse) |
JP2002123806A (en) * | 2000-10-17 | 2002-04-26 | Fujitsu Ltd | Ic card, data update control method, data/message restoration control method, and storage medium with control program recorded thereon |
JP2002251524A (en) * | 2001-02-23 | 2002-09-06 | Sony Corp | Communication system, card, control server, communication method, program, and recording medium recorded with program |
US7108176B2 (en) * | 2001-03-21 | 2006-09-19 | Cubic Corporation | Customer administered autoload |
US7184989B2 (en) * | 2001-03-31 | 2007-02-27 | First Data Corporation | Staged transactions systems and methods |
US9853759B1 (en) | 2001-03-31 | 2017-12-26 | First Data Corporation | Staged transaction system for mobile commerce |
US7117183B2 (en) * | 2001-03-31 | 2006-10-03 | First Data Coroporation | Airline ticket payment and reservation system and methods |
US7103577B2 (en) * | 2001-03-31 | 2006-09-05 | First Data Corporation | Systems and methods for staging transactions, payments and collections |
US7165052B2 (en) * | 2001-03-31 | 2007-01-16 | First Data Corporation | Payment service method and system |
CA2443220A1 (en) | 2001-03-31 | 2002-10-10 | First Data Corporation | Electronic identifier payment system and methods |
JP5158928B2 (en) * | 2004-04-27 | 2013-03-06 | 楽天株式会社 | Server apparatus, server apparatus control method, and program |
US8818904B2 (en) | 2007-01-17 | 2014-08-26 | The Western Union Company | Generation systems and methods for transaction identifiers having biometric keys associated therewith |
US8504473B2 (en) | 2007-03-28 | 2013-08-06 | The Western Union Company | Money transfer system and messaging system |
US7865439B2 (en) | 2007-10-24 | 2011-01-04 | The Western Union Company | Systems and methods for verifying identities |
FR2968799B1 (en) * | 2010-12-09 | 2013-01-11 | Oberthur Technologies | METHOD AND DEVICE FOR EXECUTION CONTROL FOR INTERNAL FUNCTIONS AND PROTECTED APPLICATIONS ONBOARD IN MICROCIRCUIT CARDS FOR MOBILE TERMINALS |
US20140019275A1 (en) * | 2012-07-12 | 2014-01-16 | Thomas Mackenzie Fallows | Processing payment information for online orders at a local merchant's point of sale via check payment |
US10861007B2 (en) * | 2014-06-04 | 2020-12-08 | Mastercard International Incorporated | Multi-account payment card |
Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO1989002140A1 (en) * | 1987-08-28 | 1989-03-09 | Mars Incorporated | Data carrying devices |
US4845351A (en) * | 1985-09-30 | 1989-07-04 | Casio Computer Co., Ltd. | IC card |
US4877945A (en) * | 1986-11-10 | 1989-10-31 | Hitachi, Ltd. | IC card having a function to exclude erroneous recording |
US5155342A (en) * | 1989-07-13 | 1992-10-13 | Brother Kogyo Kabushiki Kaisha | Prepaid card processing device |
US5175416A (en) * | 1989-10-06 | 1992-12-29 | Mansvelt Andre Peter | Funds transfer system |
EP0563997A1 (en) * | 1992-04-02 | 1993-10-06 | Kabushiki Kaisha Toshiba | Memory card apparatus |
FR2689662A1 (en) * | 1992-04-01 | 1993-10-08 | Gemplus Card Int | Protection against information loss from telephone cards - uses memory zones and releases modified information from first to second zones with control bit |
NL9200857A (en) * | 1992-05-14 | 1993-12-01 | Nederlanden Staat | Method and system for causing a first component to carry out, within the system, an instruction as instructed by a second component |
DE4230866A1 (en) * | 1992-09-16 | 1994-03-17 | Venture Engineering Management | Data handling system for smart data cards - has input of code and values to on card integrated circuit for checking to control access and use |
US5401950A (en) * | 1988-06-15 | 1995-03-28 | Omron Tateisi Electronics Co. | IC card having improved security checking function |
US5504701A (en) * | 1993-09-30 | 1996-04-02 | Toppan Printing Co., Ltd. | Memory card |
-
1994
- 1994-08-31 NL NL9401406A patent/NL9401406A/en not_active Application Discontinuation
-
1995
- 1995-08-25 US US08/519,253 patent/US5635695A/en not_active Ceased
- 1995-08-31 EP EP95202353A patent/EP0700023A1/en not_active Withdrawn
-
1999
- 1999-06-03 US US09/324,686 patent/USRE37067E1/en not_active Expired - Fee Related
Patent Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4845351A (en) * | 1985-09-30 | 1989-07-04 | Casio Computer Co., Ltd. | IC card |
US4877945A (en) * | 1986-11-10 | 1989-10-31 | Hitachi, Ltd. | IC card having a function to exclude erroneous recording |
WO1989002140A1 (en) * | 1987-08-28 | 1989-03-09 | Mars Incorporated | Data carrying devices |
US5401950A (en) * | 1988-06-15 | 1995-03-28 | Omron Tateisi Electronics Co. | IC card having improved security checking function |
US5155342A (en) * | 1989-07-13 | 1992-10-13 | Brother Kogyo Kabushiki Kaisha | Prepaid card processing device |
US5175416A (en) * | 1989-10-06 | 1992-12-29 | Mansvelt Andre Peter | Funds transfer system |
FR2689662A1 (en) * | 1992-04-01 | 1993-10-08 | Gemplus Card Int | Protection against information loss from telephone cards - uses memory zones and releases modified information from first to second zones with control bit |
EP0563997A1 (en) * | 1992-04-02 | 1993-10-06 | Kabushiki Kaisha Toshiba | Memory card apparatus |
NL9200857A (en) * | 1992-05-14 | 1993-12-01 | Nederlanden Staat | Method and system for causing a first component to carry out, within the system, an instruction as instructed by a second component |
DE4230866A1 (en) * | 1992-09-16 | 1994-03-17 | Venture Engineering Management | Data handling system for smart data cards - has input of code and values to on card integrated circuit for checking to control access and use |
US5504701A (en) * | 1993-09-30 | 1996-04-02 | Toppan Printing Co., Ltd. | Memory card |
Cited By (18)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6853983B1 (en) * | 1996-12-02 | 2005-02-08 | R. Clewits Beheer B.V. | System and method for the selective activation of one or several software and/or hardware functions of a programmable device |
US6832718B2 (en) * | 1999-12-23 | 2004-12-21 | Sagem Sa | Smart card payment terminal |
US20030052162A1 (en) * | 1999-12-23 | 2003-03-20 | Jean-Louis Sarradin | Smart card payment terminal |
US7822679B1 (en) | 2001-10-29 | 2010-10-26 | Visa U.S.A. Inc. | Method and system for conducting a commercial transaction between a buyer and a seller |
US20110004552A1 (en) * | 2001-10-29 | 2011-01-06 | Visa U.S.A., Inc. | Method and system for conducting a commercial transaction between a buyer and a seller |
US20030154153A1 (en) * | 2002-01-31 | 2003-08-14 | Steidlmayer J. Peter | Composite commodity financial product |
US8566231B2 (en) | 2004-06-17 | 2013-10-22 | Visa International Service Association | Method and system for providing buyer bank payable discounting aggregation services |
US20050283430A1 (en) * | 2004-06-17 | 2005-12-22 | Visa International Service Association | Method and system for providing buyer bank payable discounting services |
US20050283433A1 (en) * | 2004-06-17 | 2005-12-22 | Visa International Service Association | Method and system for providing seller bank receivable discounting services |
US8606697B2 (en) | 2004-06-17 | 2013-12-10 | Visa International Service Association | Method and system for providing buyer bank payable discounting services |
US8571978B2 (en) | 2004-06-17 | 2013-10-29 | Visa International Service Association | Method and system for providing assurance and financing services |
US8571977B2 (en) | 2004-06-17 | 2013-10-29 | Visa International Service Association | Method and system for providing seller bank receivable discounting aggregation services |
US20100205092A1 (en) * | 2005-01-12 | 2010-08-12 | Visa International | Pre-Funding System and Method |
US8036985B2 (en) | 2005-01-12 | 2011-10-11 | Visa International Service Association | Pre-funding system and method |
US7711639B2 (en) | 2005-01-12 | 2010-05-04 | Visa International | Pre-funding system and method |
US20060155644A1 (en) * | 2005-01-12 | 2006-07-13 | Visa International | Pre-funding system and method |
US20120296819A1 (en) * | 2010-06-29 | 2012-11-22 | Zhou Lu | Method for operating an e-purse |
US10878404B2 (en) * | 2010-06-29 | 2020-12-29 | Feitian Technologies Co., Ltd. | Method for operating an e-purse |
Also Published As
Publication number | Publication date |
---|---|
US5635695A (en) | 1997-06-03 |
NL9401406A (en) | 1996-04-01 |
EP0700023A1 (en) | 1996-03-06 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
USRE37067E1 (en) | Chip card based payment system having an on-card flag for specifying proper completion of a prior card balance replenishment session | |
US8095463B1 (en) | System and method for prepaid account replenishment | |
US5914471A (en) | Method and apparatus for recording usage data of card operated devices | |
EP0883866B1 (en) | Method for protectedly debiting an electronic payment means | |
US7580859B2 (en) | Intelligent transaction router and process for handling multi-product point of sale transactions | |
US5936221A (en) | Smart card system and method for transferring value | |
US20020073024A1 (en) | System and methods of using wireless communication devices to conduct financial transactions | |
US5739511A (en) | Method for effecting an electronic payment transaction having a variable number of payment units, as well as payment means and system for applying the method | |
EP0637004B1 (en) | Method for recording usage data of card operated devices | |
US20030119554A1 (en) | Method and arrangement for performing a cashless payment transaction | |
WO2003010951A1 (en) | Method and system for data management in electronic payments transactions | |
WO2002093515A2 (en) | Payment system and method for mobile communication services | |
AU2003285840A1 (en) | Method of accounting electronic transactions and method of effecting electronic transactions via phone | |
EP0785534A1 (en) | Method and system for performing financial transactions by means of mobile telephone sets | |
ZA200505192B (en) | Method of accounting electronic transactions and method of effecting electronic transactions via phone | |
WO2003024061A2 (en) | A method and system of crediting a pre-paid amount | |
JPH06348742A (en) | On-line financial system | |
WO2003085948A1 (en) | System and method for recharging prepaid mobile telephones from telephone booths | |
JP2001186283A (en) | Settlement method for payment of communication charge | |
JP2001292254A (en) | Immediate settlement call system |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: KONINKLIJKE PTT NEDERLAND N.V., NETHERLANDS Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:FEIKEN, ALBERTUS;REEL/FRAME:010209/0351 Effective date: 19950815 |
|
REMI | Maintenance fee reminder mailed | ||
LAPS | Lapse for failure to pay maintenance fees |