WO2016108017A1 - Payment request verification method including determination of the location where a payment token was issued - Google Patents

Payment request verification method including determination of the location where a payment token was issued Download PDF

Info

Publication number
WO2016108017A1
WO2016108017A1 PCT/FR2015/053743 FR2015053743W WO2016108017A1 WO 2016108017 A1 WO2016108017 A1 WO 2016108017A1 FR 2015053743 W FR2015053743 W FR 2015053743W WO 2016108017 A1 WO2016108017 A1 WO 2016108017A1
Authority
WO
WIPO (PCT)
Prior art keywords
payment
location
terminal
request
token
Prior art date
Application number
PCT/FR2015/053743
Other languages
French (fr)
Inventor
Eric LASSOUAOUI
Francis LIMOUSY
Original Assignee
Oberthur Technologies
Oberthur Technologies Of America Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Oberthur Technologies, Oberthur Technologies Of America Corp filed Critical Oberthur Technologies
Publication of WO2016108017A1 publication Critical patent/WO2016108017A1/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G06Q20/3224—Transactions dependent on location of M-devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/04—Payment circuits
    • G06Q20/045—Payment circuits using payment protocols involving tickets
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/085—Payment architectures involving remote charge determination or related payment systems
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3821—Electronic credentials
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Definitions

  • the field of the invention relates to a method of verifying a payment request, the method of preparing a payment request and a mobile payment terminal.
  • a banking entity offers its customers secure payment instruments guaranteeing the protection of banking transactions and banking data.
  • Payment instruments include electronic chip cards, identity check devices via web platforms and restricted-use virtual bank card numbers.
  • a new trend is also the integration of a virtual payment card hosted on a mobile payment application of a mobile phone.
  • An underwriter thus has a dematerialized version of his bank card that he can use for a near field payment using the NFC (Near Field Contact) technology.
  • NFC Near Field Contact
  • HCE High Capacity Card Emulation
  • the banking entity issues a physical bank card to its customer but also a payment application hosting a dematerialized card. It is intended to provision payment tokens (commonly referred to as "Token Payment” in English) for restricted Mobile payment terminal on which the payment application works, most often the mobile phone.
  • the user can, via a means of communication in the near field (for example NFC), use this payment token with a payment station of a merchant.
  • the payment token is derived from the bank card data.
  • the security of the real banking data is ensured because during the banking transaction these are not exposed.
  • the payment token being restricted in duration and number of use, even in case of theft by software fraud or electronic financial exposure of the customer is reduced.
  • a known verification measure of the state of the art which consists in verifying the location of the user to operate a payment transaction.
  • the banking entity restricts a geographic area of use of the bank card (physical or virtual) and when a payment is made outside this geographical area the payment request can be refused and an alert lifted.
  • the following invention proposes to solve the aforementioned problems.
  • the invention relates to a method for verifying a payment request for a bank transaction for a transaction verification server, said request comprising at least one token previously provisioned in a mobile payment terminal of a user.
  • the method comprises the following successive steps: the acquisition of a first location of the user's payment terminal during the provisioning of the payment token in the payment terminal,
  • it also includes the acquisition of a second location of the payment terminal during the preparation of the payment request, and the condition of use is a function of the first location and the second location.
  • the geographical criterion of verification is a maximum authorized distance.
  • the first location and / or the second location are encrypted by a payment application of the mobile payment terminal.
  • the first location and / or the second location are inserted into a data field of the payment request.
  • the payment request complies with a near field communication protocol of ISO / IEC 14443 type.
  • the first location is received by the verification server during a protocol for provisioning the payment token in the payment terminal. It will be noted that the first location is calculated by a means of locating the payment terminal, for example a satellite signal receiver.
  • condition of use is the first location and the geographical verification criterion is an authorized location during provisioning.
  • the payment token is generated by a provisioning server and is transmitted to the mobile payment terminal via a cellular telephone network or an internet communication network.
  • the payment token is generated by the mobile payment terminal.
  • the invention also provides a method for preparing a payment request comprising a payment token previously provisioned in a mobile payment terminal for the mobile payment terminal.
  • the method comprises the following successive steps: determining a first location of the mobile terminal when provisioning the payment token,
  • it also comprises determining a second location of the mobile terminal during the preparation of the payment request for verifying the payment request.
  • the preparation of the payment request includes the encryption of the first location and / or the second location.
  • the invention also provides a mobile payment terminal of a user comprising means for provisioning a payment token in the payment terminal and for preparing a payment request comprising at least the payment token.
  • the device also comprises: a device for locating the mobile terminal for determining a first location when the payment token is provisioned in the payment terminal, and means for transmitting the first location to a server verification of the payment request, the first location being transmitted during the provisioning or during the preparation of the payment request.
  • the location means is able to determine a second location of the mobile terminal during the preparation of the payment request, and the payment request also includes the second location.
  • the payment terminal is a cellular telephone.
  • the verification method of the payment request makes it possible to refine the geographical verification criteria and to make sure that the payment token is used in conformity with these geographical criteria based in particular on the location of the payment request. provisioning of the token.
  • the verification of the distance between the place of provisioning and the place of the payment transaction is all the more relevant because the token is generally used shortly or even immediately after its provisioning.
  • the invention makes it possible to attach to the payment token commercial offers that are valid depending on the place of delivery of the payment token.
  • FIG. 1 represents an architecture of a payment solution by means of payment tokens for restricted use
  • FIG. 2 represents a mobile payment terminal of a user and the payment software applications enabling the acquisition of the user's location during the provisioning of the payment token
  • FIG. 3 represents the steps of the verification method of the payment request according to the invention.
  • the proposed invention consists of implementing an improved geographic verification method to ensure the security of the means of payment of a user.
  • the invention provides for the use of an HCE payment architecture based on restricted-use payment tokens derived from a payment instrument.
  • the invention provides in particular to verify the distance between the place of provisioning of the payment token and the place of use of the payment token.
  • Figure 1 shows the architecture of the payment system. It provides for a banking entity, a bank or a payment service, which can issue a payment instrument 17.
  • the payment instrument 17 may comprise several payment products in the form of either a bank card or a payment service. online payment via an internet portal or a payment service by means of payment tokens that can be provisioned in a mobile terminal 12 of the subscriber.
  • the payment instrument 17 is defined: - by the subscriber's bank details, such as an account number attached to the payment instrument and personal data,
  • security data such as the security cryptogram or electronic security mechanisms embedded in a payment card to verify the data of a bank transaction.
  • the payment application 24 and the security mechanisms can be hosted in a secure module welded in the terminal, for example a secure integrated circuit commonly called eSE for "Embedded Secure Element" in English or an integrated circuit dedicated to NFC type communications.
  • eSE embedded Secure Element
  • the payment application 24 and the security mechanisms can be hosted in a secure module welded in the terminal, for example a secure integrated circuit commonly called eSE for "Embedded Secure Element" in English or an integrated circuit dedicated to NFC type communications.
  • eSE embedded Secure Element
  • TEE Trusted Execution Environment
  • the mobile terminal 12 comprises communication means for receiving and transmitting data remotely via the cellular telephone network, an IP type data network via the telephone network or an IP type data network via a medium network.
  • scope for example the WIFI.
  • the mobile terminal 12 includes a payment application able to develop payment requests comprising at least the payment token 103.
  • the payment request 104 conforms to EMV ("Europay Mastercard Visa", registered trademarks), it includes in particular the data of the bank transaction (amount, currency), an ARQC verification cryptogram, a counter and data. application so that the verification server can generate in turn the verification cryptogram.
  • EMV Europay Mastercard Visa
  • the mobile terminal further comprises a geographical location device for determining a first location 108 during the provisioning of the payment token 103 in the mobile terminal 12.
  • the first location 108 is transmitted to the verification server 16 of the banking entity.
  • the first location is the geographical position of the mobile terminal 12 during provisioning.
  • the first location 108 is transmitted via a first secure communication channel to the server of check 16 via the provisioning server 11 during the provisioning protocol. This makes it possible to benefit from the transmission security of the provisioning protocol.
  • the first communication channel may be the cellular network or an internet communication network.
  • the first lease is transmitted directly to the verification server 16, especially when the verification server and the provisioning server are the same physical structures.
  • the provisioning may be the generation of the payment token by the mobile terminal 12, on request of the provisioning server, at the request of the user or at the request of the payment application.
  • the payment token is preferably generated in a secure integrated circuit.
  • the geographical location device may determine a second location 109 of the mobile terminal 12 during the execution of a bank transaction.
  • the second location is the geographical position of the terminal 12 during the preparation of the payment request.
  • the determination of the second location 109 is triggered by the protocol for preparing the payment request 104.
  • the second location is transmitted to the verification server 16 via a second secure communication channel during the payment protocol.
  • the second secure communication channel is a payment network 15 which is described in the following description. It is expected that the request for payment 104 also includes the second location 109.
  • an authentication server 10 managed by the banking institution 16 or by a third party authentication services operator.
  • the authentication server 10 exchanges cryptographic means 102 with the mobile terminal 12.
  • These cryptographic means 102 are, for example, session cryptographic keys, temporary transaction numbers or cryptographic algorithms making it possible to operate a secure exchange protocol.
  • These cryptographic means are exchanged via a secure channel that can be a communication protocol HTTPS ("Hyper Text Transfer Protocol Secure" in English), CAT_TP ("Card Application Toolkit Transport Protocol”) or SMS (“Short Message Service”).
  • HTTPS Hyper Text Transfer Protocol Secure
  • CAT_TP Card Application Toolkit Transport Protocol
  • SMS Short Message Service
  • a token generation server 103 derived from the payment instrument 17 is also provided.
  • the server 11 includes cryptographic means for generating a token 103 from bank data 105 attached to the payment instrument 17.
  • a random data generator may generate a token 103 from the bank data 105 and a diversification or derivation means, for example a counter. Other means of diversification can be implemented for the generation of the token 103 in the server 11.
  • the bank data 105 used by the random data generator can be retrieved by the chip generation server 11 or by a partner verification server on the server. basis of the information of the payment request 104.
  • the bank data are thus protected and kept secret in the server 11.
  • the token generation server 103 can exchange information with the banking entity 16 via a secure wireless remote data communication network or via a wired communication network if the authentication server 11 is operated by the banking entity 16.
  • the banking entity 16 can transmit a subscriber's personal and banking data to the authentication server 10 for the purposes of the authentication protocols between the subscriber's mobile terminal 12 and the subscriber server. authentication.
  • the token generation server 11 may exchange information with the authentication server 10 via a secure wireless remote data communication network or via a wired communication network if the servers 10 and 11 are managed by the same operator.
  • the authentication server 10 exchanges cryptographic means 101 with the token generation server 103. These cryptographic means 101 are, for example, session cryptographic keys, temporary transaction numbers or cryptographic algorithms making it possible to operate a protocol. secure exchange with the terminal 12.
  • the secure exchange protocol with the terminal 12 makes it possible in particular to exchange tokens 103 via the first secure communication channel that can be an HTTPS, CAT TP or SMS communication protocol.
  • the first secure communication channel can be an HTTPS, CAT TP or SMS communication protocol.
  • it can be generated by a software function embedded in the mobile terminal 12.
  • the function of derivation and generation of the payment token is then hosted in a secure integrated circuit (eSE type) soldered in the mobile terminal 12. It is then possible to generate payment tokens in off-line mode, that is to say without communication with a remote server.
  • a secure payment network 15 may be provided for transmitting the subscribers' bank data and the banking transaction data complying with EMV specifications, for example conventional transaction data and secure payment tokens.
  • the secure payment network 15 is operated by a payment service operator 14 responsible for carrying out payment banking transactions.
  • the payment service operator uses the secure network 15 to transmit the transaction data received from the merchants 13, by means of a payment item or a remote payment server.
  • the network 15 uses a secure wireless or wired communication network between the payment items.
  • FIG. 2 more precisely describes the terminal 12. It comprises a payment application 24, hosted by the operating environment of the mobile terminal 12 or in a secure module, for example eUICC (for "Embedded Universal Integrated Circuit Card”).
  • eUICC embedded Universal Integrated Circuit Card
  • the mobile terminal 12 comprises non-volatile memories, of the ROM type ("Read Only Memory” in English), EEPROM (Electrically Erasable Read Only Memory) or FLASH for the recording of parameters and the execution code of applications and of the computer program comprising the instructions for implementing the process for preparing the payment request 104, for example the operating environment of the terminal, applications or libraries of specific functions that can be used by the applications.
  • ROM Read Only Memory
  • EEPROM Electrical Erasable Read Only Memory
  • FLASH for the recording of parameters and the execution code of applications and of the computer program comprising the instructions for implementing the process for preparing the payment request 104, for example the operating environment of the terminal, applications or libraries of specific functions that can be used by the applications.
  • the terminal notably includes function libraries, classes or methods, called APIs for "Application Progamming Interface" in English, for exchanges with the chip generation server 11, for the execution of payment transactions with a payment terminal 13 and for authentication with the authentication server 10.
  • the application 24 can use the functions provided by the APIs.
  • the mobile terminal also comprises a random access memory, of RAM ("Random Acess Memory”) type for the recording of temporary parameters, for example bank transaction data or a payment request 104.
  • RAM Random Acess Memory
  • the random access memory comprises adapted registers for the registration of the variables and parameters created during the execution of the computer program comprising the instructions for implementing the method of preparing the payment request 104 when it is executed.
  • the terminal 12 also includes man-machine interfaces for entering and displaying data with the subscriber, for example for entering a personal code (PIN code in English, "Personal Identification Number") and for the interaction with the application of payment 24. It is expected that the payment application will display requests on a screen of the mobile terminal, for example a request to approach the terminal 12 of the payment station 13, a request to enter a personal code or a request for choose a payment instrument.
  • a personal code PIN code in English, "Personal Identification Number”
  • the payment application will display requests on a screen of the mobile terminal, for example a request to approach the terminal 12 of the payment station 13, a request to enter a personal code or a request for choose a payment instrument.
  • the mobile terminal comprises the calculation processor for executing the functions of the applications of the mobile terminal 12.
  • the payment application 24 includes a processing agent 23 of a token 103 derived from a payment instrument 17 of a subscriber and a data receiving means 25 of a payment transaction.
  • the processing agent 23 is a function of the payment application 24 for the provisioning of the token 103 sent from the token provisioning server 11 and its storage in a non-volatile memory of the mobile terminal.
  • the processing agent 23 is a software application exploiting the software functions APIs for interacting with the generation server 11 of the token 103.
  • the processing agent 23 is a function of the payment application 24 allowing the generation of the payment token 103.
  • the payment application 24 hosts one or more payment instruments 17.
  • a virtual payment card is registered as an application specific to the payment card profile and can be stored using an application identifier.
  • the payment instrument is registered in the payment application prior to the first provisioning of a payment token.
  • the bank transaction data receiving means 25 is a function of the payment application 24 enabling the communication with the payment terminal 13.
  • the reception function is capable of controlling a contactless exchange protocol according to the ISO standard. IEC 14443, to store the transaction data in a memory and to return responses to the payment terminal 13.
  • the payment application 24 includes cryptographic means 26 for certifying data of the payment request 104, for example a private key for the signature of data transmitted with the payment request 104, or for certifying data transmitted to the payment request 104. Provisioning server 11 or verification server 16.
  • the invention may provide for the signature of the first location 108 before it is transmitted to the verification server 16. This ensures that the first location 108 is transmitted by the user.
  • the signature can be conditioned to the entry of a password or personal code.
  • the terminal 12 includes a means 27 for locating the mobile terminal 12 for determining the first location 108 when the payment token 103 is provisioned in the payment terminal 12.
  • the location means 27 also determines the second location 109 when the payment request 104 is made.
  • the locating means 27 is preferably a satellite signal receiver from a geolocation system 200 comprising a satellite constellation.
  • the use of satellite signals offers a precision of the order of a few meters.
  • the first and second locations 108, 109 are coordinates in latitudes and longitudes corresponding to the terrestrial positioning.
  • the location can be determined from the data of wireless communication networks, for example the cellular network or a WIFI network.
  • the precision is of the order of several hundred meters.
  • it can be provided for the determination of the first location that the mobile payment terminal 12 transmits network data to the verification server for its location.
  • the payment application transmits to the verification server 16 (directly or via the provisioning server 11) the first location 108.
  • the first location is preferably transmitted to the verification server 16 via the provisioning server 11 during the Token provisioning protocol 103.
  • the first location 108 is transmitted along with the payment request 104 comprising the payment token 103 via the payment network 15. ensure the security of the first location, it is then encrypted by cryptographic means 26, for example by a signature.
  • the second location 109 is transmitted with the payment request 104, identically encrypted at the first location 108.
  • the processing means 23 of the payment token 103 prepares the payment request 104.
  • the latter comprises at least the payment token 103 (preferably signed by the user to ensure that it is used by the subscriber of the instrument payment data), the bank transaction data received from the merchant's payment item and the verification cryptograms.
  • the payment request may also include the first location 108 and / or the second location 109, according to the intended verification mode.
  • FIG. 3 represents an embodiment of the method of verifying a payment request 104 executed by the verification server 16 and the method of preparing the corresponding payment request 104 executed by the mobile terminal 12.
  • the method of preparing the payment request 104 comprising at least the payment token 103 previously provisioned in the mobile terminal 12 comprises the following successive steps:
  • the first location 108 corresponds to the location of the provisioning of the payment token (for example the domicile of the subscriber, place of business etc.). Provisioning is triggered at the request of the user or banking entity.
  • the first location 108 is transmitted via the provisioning server 11 during the provisioning of the token. The transmission thus benefits from the security of the provisioning protocol when the payment token 103 is received from the provisioning server 11.
  • the first location 108 is preferably transmitted before the completion of the bank transaction using the payment token 103.
  • the provisioning corresponds to a step of generating the token 103 by the mobile terminal 12.
  • the generation of the token can be triggered following a request from the provisioning server 11 or following a request from the user.
  • the first location 108 is transmitted via a secure exchange protocol (HTTPS or CAT_TP for example) to the verification server 16, via the provisioning server 11 or not.
  • HTTPS secure exchange protocol
  • CAT_TP secure exchange protocol
  • the process the creation of the payment request includes the creation 303 of the payment request 104.
  • verification cryptograms are notably generated from the transaction data received from the merchant's payment item (not shown on Figure 3).
  • the payment request 104 conforms to a near field communication protocol of ISO / IEC 14443 type.
  • the payment request 104 is transmitted to the verification server 16 in accordance with the payment protocol provided.
  • the method for preparing the payment request comprises the determination 304 of the second location 109. This is then transmitted with the payment request 104 to the verification server 16.
  • the second location 109 is preferably determined by satellite geolocation data and signed by the payment application.
  • the second location is inserted in a data field of the payment request 104 standardized in the EMV transaction protocols, for example the "Track 2 discretionnary Data" field or any free data field.
  • the second location is determined from location data of the merchant's payment item.
  • the verification server 16 executes the verification process of the payment request 104. It includes the acquisition 401 of the first location 108 of the payment terminal 12 of the user when provisioning the payment token 103 in the payment terminal. The first location 108 is acquired via the provisioning server 11 or directly from the mobile terminal 12.
  • the method comprises the acquisition 402 of the second location 109 of the payment terminal 12 during the preparation of the payment request 104.
  • the second location 109 is received with the payment request 104.
  • the payment request is received via the payment request 104.
  • the method then comprises the determination 403 of a condition for using the payment request 104 as a function of the first location 108 and the second location 109.
  • the condition of use is determined by a processing of the location data received by the verification server 16.
  • the condition of use is the calculation of the distance between the first location 108 and the second location 109.
  • the verification method then comprises the verification 404 of the condition of use with a geographical criterion.
  • the audit includes risk rules for which the geographical criteria are developed by the banking entity issuing the payment instrument 17.
  • the geographical criterion of verification is a maximum distance allowed. The maximum distance allowed may be several hundred kilometers. For example, if the distance between the first location 108 and the second location 109 is greater than 200km, the check may refuse the request for payment.
  • the geographical criterion can be a correspondence between the first location and the second location.
  • the geographical criterion can be a correspondence between a country during provisioning and a country when drawing up the payment request.
  • a first rule of correspondence may be that the country when provisioning is identical to the country when preparing the payment request.
  • a second rule of correspondence may be that the country when drawing up the payment request is a country bordering on that when provisioning.
  • the verification method finally comprises the authorization 405 of the payment request 104 according to the result of the verification 404 with respect to the geographical criterion.
  • the authorization is transmitted to the payment station 13 of the merchant.
  • the verification protocol also includes the verification of verification cryptograms (for example ARQC).
  • the condition of use is the first location only and the geographical verification criterion is an authorized location during provisioning. In particular, a check can be made only on the first location. The banking transaction is then refused if the payment token has been provisioned in a geographical area not authorized by the banking entity, for example a foreign country not declared by the user. This makes it possible to detect a fraud on the provisioning protocol.
  • the first location 108 is transmitted with the payment request 104. It is recorded in the mobile terminal between the provisioning moment and that of the banking transaction with a merchant's payment item.
  • the verification process controls the first and second locations 108, 109 when they are encrypted.
  • the method includes verification of a signature or decryption. The verification process checks whether the locations were issued by the user.

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Finance (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

The invention relates to a payment request verification method (104), a method for producing said payment request, and a mobile payment terminal (12). The verification method includes a step for acquiring the location (108) of the mobile terminal (12) when the payment token was issued, then verifying conditions for using the payment request (104) produced from the issued payment token (103). The mobile terminal (12) is capable of determining the issuing location (108) and the payment location (109) for the purpose of verifying the payment request (104). The invention is of applicable to banking payment instruments (17) onboard a mobile terminal (12).

Description

PROCEDE DE VERIFICATION D'UNE REQUETE DE PAIEMENT COMPRENANT LA DETERMINATION DE LA LOCALISATION DU PROVISIONNEMENT D'UN JETON DE PAIEMENT  METHOD FOR VERIFYING A PAYMENT REQUEST INCLUDING DETERMINING THE LOCATION OF THE PROVISION OF A PAYMENT TOKEN
Le domaine de l'invention concerne un procédé de vérification d'une requête de paiement, le procédé d'élaboration d'une requête de paiement et un terminal de paiement mobile. The field of the invention relates to a method of verifying a payment request, the method of preparing a payment request and a mobile payment terminal.
Une entité bancaire propose à ses clients des instruments de paiement sécurisés garantissant la protection des transactions bancaires et des données bancaires. On peut citer parmi les instruments de paiement les cartes bancaires à puce électronique, les dispositifs de contrôles d'identité via les plates-formes web et les numéros de carte bancaire virtuelle à usage restreint. A banking entity offers its customers secure payment instruments guaranteeing the protection of banking transactions and banking data. Payment instruments include electronic chip cards, identity check devices via web platforms and restricted-use virtual bank card numbers.
Une nouvelle tendance est également l'intégration d'une carte de paiement virtuelle hébergée sur une application de paiement mobile d'un téléphone portable. Un souscripteur possède ainsi une version dématérialisée de sa carte bancaire qu'il peut utiliser pour un paiement en champ proche au moyen de la technologie NFC (« Near Field Contact », en anglais) . Ces architectures sont couramment appelées HCE (pour « Host Card Emulation » en anglais) . A new trend is also the integration of a virtual payment card hosted on a mobile payment application of a mobile phone. An underwriter thus has a dematerialized version of his bank card that he can use for a near field payment using the NFC (Near Field Contact) technology. These architectures are commonly called HCE (for "Host Card Emulation" in English).
Selon une architecture de paiement, l'entité bancaire délivre une carte bancaire physique à son client mais aussi une application de paiement hébergeant une carte dématérialisée. Il est prévu de provisionner des jetons de paiement (couramment désignés par « Token Payment » en anglais) à usage restreint à destination d'un terminal de paiement mobile sur lequel fonctionne l'application de paiement, le plus souvent le téléphone portable. L'utilisateur peut, via un moyen de communication en champs proche (par exemple NFC) , utiliser ce jeton de paiement avec un poste de paiement d'un marchand. According to a payment architecture, the banking entity issues a physical bank card to its customer but also a payment application hosting a dematerialized card. It is intended to provision payment tokens (commonly referred to as "Token Payment" in English) for restricted Mobile payment terminal on which the payment application works, most often the mobile phone. The user can, via a means of communication in the near field (for example NFC), use this payment token with a payment station of a merchant.
Le jeton de paiement est dérivé des données bancaires de la carte de paiement. La sécurité des véritables données bancaires est assurée car lors de la transaction bancaire celles-ci ne sont pas exposées. The payment token is derived from the bank card data. The security of the real banking data is ensured because during the banking transaction these are not exposed.
Par ailleurs, le jeton de paiement étant à usage restreint en durée de validité et nombre d'utilisation, même en cas de vol par fraude logiciel ou électronique l'exposition financière du client est réduite. II existe par ailleurs une mesure de vérification connue de l'état de la technique qui consiste à vérifier la localisation de l'utilisateur pour opérer une transaction de paiement. Par exemple, l'entité bancaire restreint une zone géographique d'utilisation de la carte bancaire (physique ou virtuelle) et lorsqu'un paiement est réalisé en dehors de cette zone géographique la requête de paiement peut être refusée et une alerte levée. In addition, the payment token being restricted in duration and number of use, even in case of theft by software fraud or electronic financial exposure of the customer is reduced. There is moreover a known verification measure of the state of the art which consists in verifying the location of the user to operate a payment transaction. For example, the banking entity restricts a geographic area of use of the bank card (physical or virtual) and when a payment is made outside this geographical area the payment request can be refused and an alert lifted.
On connaît dans l'état de la technique la demande de brevet américain US20140289116 et le brevet américain US857731 décrivant des procédés de vérification consistant à collecter des données de localisation du dispositif GPS (« Global Positioning System » en anglais) du terminal mobile de l'utilisateur lors de la réalisation de la transaction bancaire et vérifier la correspondance avec la localisation du poste de paiement du marchand. Cependant, pour être efficaces ces méthodes nécessitent une phase de collecte des positions précises des postes de paiement des marchands pour pouvoir être comparées avec la position de l'utilisateur. Cette collecte implique un protocole de relevé des informations de localisation de chaque commerçant et un système de maintenance coûteux. The prior art is known from US patent application US20140289116 and US patent US857731 describing verification methods of collecting location data from the GPS device ("Global Positioning System") of the mobile terminal of the device. user when performing the bank transaction and check the correspondence with the location of the merchant's payment item. However, to be effective these methods require a phase of collecting the precise positions of merchant payment items to be compared with the position of the user. This collection involves a protocol for recording the location information of each trader and an expensive maintenance system.
Il existe donc un besoin de proposer un procédé de vérification géographique des requêtes de paiement moins coûteux. There is therefore a need to provide a method for geographic verification of less expensive payment requests.
Par ailleurs, pour les solutions de paiement à base de jetons de paiement provisionnés dans le terminal mobile, il existe un risque de vol de données bancaires tant que celui-ci est provisionné dans le terminal mobile et en attente d'une utilisation. Un fraudeur peut alors exploiter le jeton de paiement avec son propre terminal mobile et fournir sa position comme le ferait le véritable propriétaire de la carte bancaire. Dans ce cas-ci, le fraudeur passerait avec succès les mesures de vérification précitées. Moreover, for payment solutions based on payment tokens provisioned in the mobile terminal, there is a risk of theft of bank data as long as it is provisioned in the mobile terminal and waiting for use. A fraudster can then use the payment token with his own mobile terminal and provide his position as the real owner of the credit card. In this case, the fraudster would successfully pass the above verification measures.
Il existe donc également un besoin d'améliorer la sécurité d'utilisation des jetons de paiement provisionnés dans le terminal mobile de l'utilisateur. There is therefore also a need to improve the security of use of the payment tokens provisioned in the mobile terminal of the user.
L' invention ci-après propose de résoudre les problèmes précités. The following invention proposes to solve the aforementioned problems.
Plus précisément, l'invention concerne un procédé de vérification d'une requête de paiement d'une transaction bancaire pour un serveur de vérification de transaction, la dite requête comprenant au moins un jeton de paiement préalablement provisionné dans un terminal de paiement mobile d'un utilisateur. More specifically, the invention relates to a method for verifying a payment request for a bank transaction for a transaction verification server, said request comprising at least one token previously provisioned in a mobile payment terminal of a user.
Selon l'invention, le procédé comprend les étapes successives suivantes : - l'acquisition d'une première localisation du terminal de paiement de l'utilisateur lors du provisionnement du jeton de paiement dans le terminal de paiement, According to the invention, the method comprises the following successive steps: the acquisition of a first location of the user's payment terminal during the provisioning of the payment token in the payment terminal,
- la détermination d'une condition d'utilisation de la requête de paiement en fonction d'au moins la première localisation, determining a condition for using the payment request according to at least the first location,
- la vérification de la condition d'utilisation en fonction d'un critère géographique, l'autorisation de la requête de paiement en fonction du résultat de la vérification. - the verification of the condition of use according to a geographical criterion, the authorization of the request for payment according to the result of the verification.
Selon une variante, il comprend également l'acquisition d'une deuxième localisation du terminal de paiement lors de l'élaboration de la requête de paiement, et la condition d'utilisation est fonction de la première localisation et de la deuxième localisation. According to a variant, it also includes the acquisition of a second location of the payment terminal during the preparation of the payment request, and the condition of use is a function of the first location and the second location.
Selon une variante, le critère géographique de vérification est une distance maximale autorisée. According to one variant, the geographical criterion of verification is a maximum authorized distance.
De préférence, la première localisation et/ou la deuxième localisation sont chiffrées par une application de paiement du terminal de paiement mobile. Avantageusement, la première localisation et/ou la deuxième localisation sont insérées dans un champ de données de la requête de paiement. Preferably, the first location and / or the second location are encrypted by a payment application of the mobile payment terminal. Advantageously, the first location and / or the second location are inserted into a data field of the payment request.
La requête de paiement est conforme à un protocole de communication en champs proche de type ISO/IEC 14443. The payment request complies with a near field communication protocol of ISO / IEC 14443 type.
De préférence, la première localisation est reçue par le serveur de vérification lors d'un protocole de provisionnement du jeton de paiement dans le terminal de paiement . On notera que la première localisation est calculée par un moyen de localisation du terminal de paiement, par exemple un récepteur de signaux satellitaires. Preferably, the first location is received by the verification server during a protocol for provisioning the payment token in the payment terminal. It will be noted that the first location is calculated by a means of locating the payment terminal, for example a satellite signal receiver.
Selon une variante, la condition d'utilisation est la première localisation et le critère géographique de vérification est une localisation autorisée lors du provisionnement . According to one variant, the condition of use is the first location and the geographical verification criterion is an authorized location during provisioning.
Selon une variante, le jeton de paiement est généré par un serveur de provisionnement et est transmis au terminal de paiement mobile via un réseau de téléphonie cellulaire ou un réseau de communication internet. According to one variant, the payment token is generated by a provisioning server and is transmitted to the mobile payment terminal via a cellular telephone network or an internet communication network.
Selon une variante, le jeton de paiement est généré par le terminal de paiement mobile. According to one variant, the payment token is generated by the mobile payment terminal.
L' invention prévoit également un procédé d'élaboration d'une requête de paiement comprenant un jeton de paiement préalablement provisionné dans un terminal de paiement mobile pour le terminal de paiement mobile. Selon l'invention, le procédé comprend les étapes successives suivantes : - la détermination d'une première localisation du terminal mobile lors du provisionnement du jeton de paiement, The invention also provides a method for preparing a payment request comprising a payment token previously provisioned in a mobile payment terminal for the mobile payment terminal. According to the invention, the method comprises the following successive steps: determining a first location of the mobile terminal when provisioning the payment token,
- la transmission de la première localisation à un serveur de vérification pour la vérification de la requête de paiement. - The transmission of the first location to a verification server for verification of the payment request.
De préférence, il comprend également la détermination d'une deuxième localisation du terminal mobile lors de l'élaboration de la requête de paiement pour la vérification de la requête de paiement. Preferably, it also comprises determining a second location of the mobile terminal during the preparation of the payment request for verifying the payment request.
Dans cette dernière variante, l'élaboration de la requête de paiement comprend le chiffrement de la première localisation et/ou de la deuxième localisation. In this last variant, the preparation of the payment request includes the encryption of the first location and / or the second location.
L' invention prévoit également un terminal de paiement mobile d'un utilisateur comprenant un moyen pour provisionner un jeton de paiement dans le terminal de paiement et pour l'élaboration d'une requête de paiement comprenant au moins le jeton de paiement. The invention also provides a mobile payment terminal of a user comprising means for provisioning a payment token in the payment terminal and for preparing a payment request comprising at least the payment token.
Selon l'invention, il comprend également : - un moyen de localisation du terminal mobile pour la détermination d'une première localisation lorsque le jeton de paiement est provisionné dans le terminal de paiement, et un moyen de transmission de la première localisation à un serveur de vérification de la requête de paiement, la première localisation étant transmise lors du provisionnement ou lors de l'élaboration de la requête de paiement . Selon une variante, le moyen de localisation est apte à déterminer une deuxième localisation du terminal mobile lors de l'élaboration de la requête de paiement, et la requête de paiement comprend également la deuxième localisation. According to the invention, it also comprises: a device for locating the mobile terminal for determining a first location when the payment token is provisioned in the payment terminal, and means for transmitting the first location to a server verification of the payment request, the first location being transmitted during the provisioning or during the preparation of the payment request. According to one variant, the location means is able to determine a second location of the mobile terminal during the preparation of the payment request, and the payment request also includes the second location.
Selon une variante, le terminal de paiement est un téléphone cellulaire. According to one variant, the payment terminal is a cellular telephone.
Grâce à l'invention, la méthode de vérification de la requête de paiement permet d' affiner les critères de vérification géographique et de s'assurer que le jeton de paiement est utilisé en conformité avec ces critères géographiques fondés notamment en fonction de la localisation de provisionnement du jeton. Thanks to the invention, the verification method of the payment request makes it possible to refine the geographical verification criteria and to make sure that the payment token is used in conformity with these geographical criteria based in particular on the location of the payment request. provisioning of the token.
La vérification de la distance entre le lieu de provisionnement et le lieu de la transaction de paiement est d'autant plus pertinente car le jeton est généralement utilisé peu de temps, voire immédiatement après son provisionnement . The verification of the distance between the place of provisioning and the place of the payment transaction is all the more relevant because the token is generally used shortly or even immediately after its provisioning.
De plus, l'invention permet d'attacher au jeton de paiement des offres commerciales qui sont valides en fonction du lieu de délivrance du jeton de paiement. In addition, the invention makes it possible to attach to the payment token commercial offers that are valid depending on the place of delivery of the payment token.
D'autres caractéristiques et avantages de la présente invention apparaîtront plus clairement à la lecture de la description détaillée qui suit de modes de réalisation de l'invention donnés à titre d'exemples nullement limitatifs et illustrés par les dessins annexés, dans lesquels : la figure 1 représente une architecture d'une solution de paiement au moyen de jetons de paiement à usage restreint, Other features and advantages of the present invention will appear more clearly on reading the following detailed description of embodiments of the invention given as non-limiting examples and illustrated by the appended drawings, in which: FIG. 1 represents an architecture of a payment solution by means of payment tokens for restricted use,
- la figure 2 représente un terminal de paiement mobile d'un utilisateur et les applications logicielles de paiement permettant l'acquisition de la localisation de l'utilisateur lors du provisionnement du jeton de paiement, FIG. 2 represents a mobile payment terminal of a user and the payment software applications enabling the acquisition of the user's location during the provisioning of the payment token,
- la figure 3 représente les étapes du procédé de vérification de la requête de paiement selon l'invention. FIG. 3 represents the steps of the verification method of the payment request according to the invention.
L' invention proposée consiste à mettre en place un procédé de vérification géographique amélioré pour assurer la sécurité des moyens de paiement d'un utilisateur. L'invention prévoit l'utilisation d'une architecture de paiement de type HCE à base de jetons de paiement à usage restreint dérivés d'un instrument de paiement. L'invention prévoit en particulier de vérifier la distance entre le lieu de provisionnement du jeton de paiement et le lieu d'utilisation du jeton de paiement. La figure 1 représente l'architecture du système de paiement. Il prévoit une entité bancaire, une banque ou un service de paiement, pouvant émettre un instrument de paiement 17. L'instrument de paiement 17 pouvant comprendre plusieurs produits de paiement sous la forme soit d'une carte bancaire, soit d'un service de paiement en ligne via un portail internet ou soit un service de paiement au moyen de jetons de paiement pouvant être provisionnés dans un terminal mobile 12 du souscripteur. The proposed invention consists of implementing an improved geographic verification method to ensure the security of the means of payment of a user. The invention provides for the use of an HCE payment architecture based on restricted-use payment tokens derived from a payment instrument. The invention provides in particular to verify the distance between the place of provisioning of the payment token and the place of use of the payment token. Figure 1 shows the architecture of the payment system. It provides for a banking entity, a bank or a payment service, which can issue a payment instrument 17. The payment instrument 17 may comprise several payment products in the form of either a bank card or a payment service. online payment via an internet portal or a payment service by means of payment tokens that can be provisioned in a mobile terminal 12 of the subscriber.
L'instrument de paiement 17 est défini : - par des données bancaires du souscripteur, comme un numéro de compte attaché à l'instrument de paiement et des données personnelles, The payment instrument 17 is defined: - by the subscriber's bank details, such as an account number attached to the payment instrument and personal data,
- par des critères d'utilisation de l'instrument de paiement, notamment une période de validité, une zone géographique, un plafond de transaction, - criteria for the use of the payment instrument, in particular a period of validity, a geographical area, a transaction ceiling,
- et par des données de sécurisation, comme par exemple le cryptogramme de sécurité ou des mécanismes de sécurité électroniques embarqués dans une carte de paiement permettant la vérification des données d'une transaction bancaire. - And by security data, such as the security cryptogram or electronic security mechanisms embedded in a payment card to verify the data of a bank transaction.
Dans le cas du terminal mobile 12 destiné à recevoir des jetons de paiement 103 (ou à les générer de façon embarquée), l'application de paiement 24 et les mécanismes de sécurité peuvent être hébergés dans un module sécurisé soudé dans le terminal, par exemple un circuit intégré sécurisé communément appelé eSE pour « Embedded Secure Elément » en anglais ou un circuit intégré dédié aux communications de type NFC . Dans une autre variante, l'application de paiementIn the case of the mobile terminal 12 intended to receive payment tokens 103 (or to generate them on-board), the payment application 24 and the security mechanisms can be hosted in a secure module welded in the terminal, for example a secure integrated circuit commonly called eSE for "Embedded Secure Element" in English or an integrated circuit dedicated to NFC type communications. In another variant, the payment application
24 et les mécanismes de sécurité peuvent être hébergés au niveau d'un environnement logiciel sécurisé (appelé TEE, pour « Trusted Execution Environment » en anglais) . Il s'agit dans ce dernier cas d'une solution entièrement logicielle dans laquelle la zone applicative de l'environnement d'exploitation du terminal mobile exécutant l'application de paiement est considérée comme étant de confiance grâce à divers mécanismes de sécurité. Ces mécanismes peuvent être la vérification de l'intégrité de la zone mémoire, ou des protocoles d' authentification avec un serveur distant d' authentification 10 pour l'installation d'applications ou de profils de paiement. 24 and security mechanisms can be hosted in a secure software environment (called TEE, for "Trusted Execution Environment"). In the latter case, it is a fully software solution in which the application area of the operating environment of the mobile terminal running the payment application is considered to be trusted by various security mechanisms. These mechanisms can be the verification of the integrity of the memory area, or the authentication protocols with a remote authentication server 10 for installing applications or payment profiles.
De préférence, Le terminal mobile 12 comprend des moyens de communication pour recevoir et émettre des données à distance via le réseau téléphonique cellulaire, un réseau de données de type IP via le réseau téléphonique ou un réseau de données de type IP via un réseau à moyenne portée, par exemple le WIFI. Preferably, the mobile terminal 12 comprises communication means for receiving and transmitting data remotely via the cellular telephone network, an IP type data network via the telephone network or an IP type data network via a medium network. scope, for example the WIFI.
Par ailleurs, pour l'opération du procédé de vérification des requêtes de paiement 104, le terminal mobile 12 comprend une application de paiement apte à élaborer des requêtes de paiement comprenant au moins le jeton de paiement 103. Moreover, for the operation of the verification process of the payment requests 104, the mobile terminal 12 includes a payment application able to develop payment requests comprising at least the payment token 103.
Si la requête de paiement 104 est conforme aux normes EMV (« Europay Mastercard Visa », marques déposées) , elle comprend notamment les données de la transaction bancaire (montant, devise) , un cryptogramme de vérification de type ARQC, un compteur et des données d'application pour que le serveur de vérification puisse générer à son tour le cryptogramme de vérification. If the payment request 104 conforms to EMV ("Europay Mastercard Visa", registered trademarks), it includes in particular the data of the bank transaction (amount, currency), an ARQC verification cryptogram, a counter and data. application so that the verification server can generate in turn the verification cryptogram.
Le terminal mobile comprend par ailleurs un dispositif de localisation géographique pour déterminer une première localisation 108 lors du provisionnement du jeton de paiement 103 dans le terminal mobile 12. La première localisation 108 est transmise au serveur de vérification 16 de l'entité bancaire. La première localisation est la position géographique du terminal mobile 12 lors du provisionnement. The mobile terminal further comprises a geographical location device for determining a first location 108 during the provisioning of the payment token 103 in the mobile terminal 12. The first location 108 is transmitted to the verification server 16 of the banking entity. The first location is the geographical position of the mobile terminal 12 during provisioning.
La première localisation 108 est transmise via un premier canal de communication sécurisé au serveur de vérification 16 via le serveur de provisionnement 11 lors du protocole de provisionnement. Cela permet de bénéficier de la sécurité de transmission du protocole de provisionnement. Le premier canal de communication peut être le réseau cellulaire ou un réseau de communication internet . The first location 108 is transmitted via a first secure communication channel to the server of check 16 via the provisioning server 11 during the provisioning protocol. This makes it possible to benefit from the transmission security of the provisioning protocol. The first communication channel may be the cellular network or an internet communication network.
En variante, la première location est transmise directement au serveur de vérification 16, notamment lorsque le serveur de vérification et le serveur de provisionnement sont les mêmes structures physiques. Alternatively, the first lease is transmitted directly to the verification server 16, especially when the verification server and the provisioning server are the same physical structures.
En variante, le provisionnement peut être la génération du jeton de paiement par le terminal mobile 12, sur requête du serveur de provisionnement, sur requête de l'utilisateur ou sur requête de l'application de paiement. Le jeton de paiement est de préférence généré dans un circuit intégré sécurisé. As a variant, the provisioning may be the generation of the payment token by the mobile terminal 12, on request of the provisioning server, at the request of the user or at the request of the payment application. The payment token is preferably generated in a secure integrated circuit.
Dans une variante, le dispositif de localisation géographique peut déterminer une deuxième localisation 109 du terminal mobile 12 lors de l'exécution d'une transaction bancaire. La deuxième localisation est la position géographique du terminal 12 lors de l'élaboration de la requête de paiement. In one variant, the geographical location device may determine a second location 109 of the mobile terminal 12 during the execution of a bank transaction. The second location is the geographical position of the terminal 12 during the preparation of the payment request.
Plus précisément, la détermination de la deuxième localisation 109 est déclenchée par le protocole d'élaboration de la requête de paiement 104. La deuxième localisation est transmise au serveur de vérification 16 via un deuxième canal de communication sécurisé lors du protocole de paiement. Le deuxième canal de communication sécurisé est un réseau de paiement 15 qui est décrit dans la suite de la description. Il est prévu que la requête de paiement 104 comprenne également la deuxième localisation 109. More precisely, the determination of the second location 109 is triggered by the protocol for preparing the payment request 104. The second location is transmitted to the verification server 16 via a second secure communication channel during the payment protocol. The second secure communication channel is a payment network 15 which is described in the following description. It is expected that the request for payment 104 also includes the second location 109.
Par ailleurs, il est prévu un serveur d' authentification 10 géré par l'institution bancaire 16 ou par un opérateur tiers de services d' authentification . Le serveur d' authentification 10 échange des moyens cryptographiques 102 avec le terminal mobile 12. Ces moyens cryptographiques 102 sont par exemple des clés cryptographiques de sessions, des numéros de transaction temporaires ou des algorithmes de cryptographie permettant d'opérer un protocole d'échange sécurisé. Ces moyens cryptographiques sont échangés via un canal sécurisé pouvant être un protocole de communication HTTPS (« Hyper Text Transfert Protocol Secure » en anglais) , CAT_TP (« Card Application Toolkit Transport Protocol ») ou SMS (« Short Message Service ») . Furthermore, there is provided an authentication server 10 managed by the banking institution 16 or by a third party authentication services operator. The authentication server 10 exchanges cryptographic means 102 with the mobile terminal 12. These cryptographic means 102 are, for example, session cryptographic keys, temporary transaction numbers or cryptographic algorithms making it possible to operate a secure exchange protocol. . These cryptographic means are exchanged via a secure channel that can be a communication protocol HTTPS ("Hyper Text Transfer Protocol Secure" in English), CAT_TP ("Card Application Toolkit Transport Protocol") or SMS ("Short Message Service").
De plus, un serveur 11 de génération de jetons 103 dérivés de l'instrument de paiement 17 est également prévu. Le serveur 11 comprend des moyens cryptographiques pour générer un jeton 103 à partir de données bancaires 105 attachées à l'instrument de paiement 17. In addition, a token generation server 103 derived from the payment instrument 17 is also provided. The server 11 includes cryptographic means for generating a token 103 from bank data 105 attached to the payment instrument 17.
Un générateur de données aléatoires peut générer un jeton 103 à partir des données bancaires 105 et d'un moyen de diversification ou dérivation, par exemple un compteur. D'autres moyens de diversification peuvent être mis en œuvre pour la génération du jeton 103 dans le serveur 11. A random data generator may generate a token 103 from the bank data 105 and a diversification or derivation means, for example a counter. Other means of diversification can be implemented for the generation of the token 103 in the server 11.
On notera qu' il est prévu que les données bancaires 105 exploitées par le générateur de données aléatoires peuvent être retrouvées par le serveur 11 de génération de jetons ou par un serveur de vérification partenaire sur la base des informations de la requête de paiement 104. Les données bancaires sont ainsi protégées et maintenues secrètes dans le du serveur 11. Note that it is expected that the bank data 105 used by the random data generator can be retrieved by the chip generation server 11 or by a partner verification server on the server. basis of the information of the payment request 104. The bank data are thus protected and kept secret in the server 11.
Par ailleurs, le serveur 11 de génération de jeton 103 peut échanger des informations avec l'entité bancaire 16 via un réseau sécurisé de communication de données à distance sans fil ou via un réseau de communication filaire si le serveur d' authentification 11 est opéré par l'entité bancaire 16. Ainsi, l'entité bancaire 16 peut transmettre des données personnelles et bancaires d'un souscripteur au serveur d' authentification 10 pour les besoins des protocoles d' authentification entre le terminal mobile 12 du souscripteur et le serveur d' authentification . De plus, le serveur 11 de génération de jeton peut échanger des informations avec le serveur d' authentification 10 via un réseau sécurisé de communication de données à distance sans fil ou via un réseau de communication filaire si les serveurs 10 et 11 sont en gestion par le même opérateur. Le serveur d' authentification 10 échange des moyens cryptographiques 101 avec le serveur 11 de génération de jetons 103. Ces moyens cryptographiques 101 sont par exemple des clés cryptographiques de sessions, des numéros de transaction temporaires ou des algorithmes de cryptographie permettant d'opérer un protocole d'échange sécurisé avec le terminal 12. Furthermore, the token generation server 103 can exchange information with the banking entity 16 via a secure wireless remote data communication network or via a wired communication network if the authentication server 11 is operated by the banking entity 16. Thus, the banking entity 16 can transmit a subscriber's personal and banking data to the authentication server 10 for the purposes of the authentication protocols between the subscriber's mobile terminal 12 and the subscriber server. authentication. In addition, the token generation server 11 may exchange information with the authentication server 10 via a secure wireless remote data communication network or via a wired communication network if the servers 10 and 11 are managed by the same operator. The authentication server 10 exchanges cryptographic means 101 with the token generation server 103. These cryptographic means 101 are, for example, session cryptographic keys, temporary transaction numbers or cryptographic algorithms making it possible to operate a protocol. secure exchange with the terminal 12.
Le protocole d'échange sécurisé avec le terminal 12 permet notamment d'échanger des jetons 103 via le premier canal de communication sécurisé pouvant être un protocole de communication HTTPS, CAT TP ou SMS. On notera par ailleurs que dans une variante du procédé de génération d'un jeton de paiement 103, celui-ci peut être généré par une fonction logicielle embarquée dans le terminal mobile 12. La fonction de dérivation et génération du jeton de paiement est alors hébergée dans un circuit intégré sécurisé (de type eSE) soudé dans le terminal mobile 12. Il est alors possible de générer des jetons de paiement en mode hors-ligne, c'est à dire sans communication avec un serveur distant. Un réseau sécurisé de paiement 15 peut être prévu pour transmettre les données bancaires des souscripteurs et les données de transactions bancaires respectant les spécifications des normes EMV, par exemple les données de transaction conventionnelles et les jetons de paiement sécurisés. Le réseau sécurisé de paiement 15 est opéré par un opérateur de service de paiement 14 chargé d'opérer les transactions bancaires de paiement. The secure exchange protocol with the terminal 12 makes it possible in particular to exchange tokens 103 via the first secure communication channel that can be an HTTPS, CAT TP or SMS communication protocol. Note also that in a variant of the method of generating a payment token 103, it can be generated by a software function embedded in the mobile terminal 12. The function of derivation and generation of the payment token is then hosted in a secure integrated circuit (eSE type) soldered in the mobile terminal 12. It is then possible to generate payment tokens in off-line mode, that is to say without communication with a remote server. A secure payment network 15 may be provided for transmitting the subscribers' bank data and the banking transaction data complying with EMV specifications, for example conventional transaction data and secure payment tokens. The secure payment network 15 is operated by a payment service operator 14 responsible for carrying out payment banking transactions.
L'opérateur de service de paiement utilise le réseau sécurisé 15 pour transmettre les données de transaction reçues des marchands 13, au moyen d'un poste de paiement ou un serveur distant de paiement. Le réseau 15 utilise un réseau de communication sans fil ou filaire sécurisé entre les postes de paiement. The payment service operator uses the secure network 15 to transmit the transaction data received from the merchants 13, by means of a payment item or a remote payment server. The network 15 uses a secure wireless or wired communication network between the payment items.
La figure 2 décrit plus précisément le terminal 12. II comprend une application de paiement 24, hébergée par l'environnement d'exploitation du terminal mobile 12 ou dans un module sécurisé, par exemple eUICC (pour « Embedded Universal Integrated Circuit Card) . FIG. 2 more precisely describes the terminal 12. It comprises a payment application 24, hosted by the operating environment of the mobile terminal 12 or in a secure module, for example eUICC (for "Embedded Universal Integrated Circuit Card").
Le terminal mobile 12 comprend des mémoires non volatiles, de type ROM (« Read Only Memory » en anglais) , EEPROM (Electrically Erasable Read Only Memory ») ou FLASH pour l'enregistrement de paramètres et du code d'exécution d'applications et du programme informatique comprenant les instructions pour la mise en œuvre du procédé d'élaboration de la requête de paiement 104, par exemple l'environnement d'exploitation du terminal, des applications ou des bibliothèques de fonctions spécifiques pouvant être utilisées par les applications. The mobile terminal 12 comprises non-volatile memories, of the ROM type ("Read Only Memory" in English), EEPROM (Electrically Erasable Read Only Memory) or FLASH for the recording of parameters and the execution code of applications and of the computer program comprising the instructions for implementing the process for preparing the payment request 104, for example the operating environment of the terminal, applications or libraries of specific functions that can be used by the applications.
Le terminal comprend notamment des bibliothèques de fonctions, classes ou méthodes, dites API pour « Application Progamming Interface » en anglais, pour les échanges avec le serveur 11 de génération de jetons, pour l'exécution de transactions de paiement avec un terminal de paiement 13 et pour 1 ' authentification avec le serveur d' authentification 10. L'application 24 peut faire appel aux fonctions fournies par les APIs. The terminal notably includes function libraries, classes or methods, called APIs for "Application Progamming Interface" in English, for exchanges with the chip generation server 11, for the execution of payment transactions with a payment terminal 13 and for authentication with the authentication server 10. The application 24 can use the functions provided by the APIs.
Le terminal mobile comprend également une mémoire vive, de type RAM (« Random Acess Memory » en anglais) pour l'enregistrement de paramètres temporaires, par exemple des données de transaction bancaire ou une requête de paiement 104. La mémoire vive comprend des registres adaptés pour l'enregistrement des variables et paramètres créés lors de l'exécution du programme informatique comprenant les instructions pour la mise en oeuvre du procédé d'élaboration de la requête de paiement 104 lors de son exécution. The mobile terminal also comprises a random access memory, of RAM ("Random Acess Memory") type for the recording of temporary parameters, for example bank transaction data or a payment request 104. The random access memory comprises adapted registers for the registration of the variables and parameters created during the execution of the computer program comprising the instructions for implementing the method of preparing the payment request 104 when it is executed.
Le terminal 12 comprend en plus des interfaces homme-machine pour la saisie et l'affichage de données avec le souscripteur, par exemple pour la saisie d'un code personnel (code PIN en anglais, « Personal Identification Number ») et pour l'interaction avec l'application de paiement 24. Il est prévu que l'application de paiement affiche des requêtes sur un écran du terminal mobile, par exemple une requête pour approcher le terminal 12 du poste de paiement 13, une requête de saisie d'un code personnel ou une requête pour choisir un instrument de paiement. The terminal 12 also includes man-machine interfaces for entering and displaying data with the subscriber, for example for entering a personal code (PIN code in English, "Personal Identification Number") and for the interaction with the application of payment 24. It is expected that the payment application will display requests on a screen of the mobile terminal, for example a request to approach the terminal 12 of the payment station 13, a request to enter a personal code or a request for choose a payment instrument.
Le terminal mobile comprend le processeur de calcul pour l'exécution des fonctions des applications du terminal mobile 12. The mobile terminal comprises the calculation processor for executing the functions of the applications of the mobile terminal 12.
L'application de paiement 24 comprend un agent de traitement 23 d'un jeton 103 dérivé d'un instrument de paiement 17 d'un souscripteur et un moyen réception de données 25 d'une transaction de paiement. The payment application 24 includes a processing agent 23 of a token 103 derived from a payment instrument 17 of a subscriber and a data receiving means 25 of a payment transaction.
L'agent de traitement 23 est une fonction de l'application de paiement 24 permettant le provisionnement du jeton 103 envoyé du serveur 11 de provisionnement de jetons et sa mémorisation dans une mémoire non volatile du terminal mobile. L'agent de traitement 23 est un applicatif logiciel exploitant les fonctions logicielles APIs permettant d' interagir avec le serveur 11 de génération du jeton 103. The processing agent 23 is a function of the payment application 24 for the provisioning of the token 103 sent from the token provisioning server 11 and its storage in a non-volatile memory of the mobile terminal. The processing agent 23 is a software application exploiting the software functions APIs for interacting with the generation server 11 of the token 103.
Selon la variante de génération embarquée dans le terminal mobile 12, l'agent de traitement 23 est une fonction de l'application de paiement 24 permettant la génération du jeton de paiement 103. Par ailleurs, l'application de paiement 24 héberge un ou plusieurs instruments de paiement 17. Une carte virtuelle de paiement est enregistrée sous la forme d'une application spécifique au profil de la carte de paiement et peut être mémorisée au moyen d'un identifiant d'application. L'instrument de paiement est enregistré dans l'application de paiement préalablement au premier provisionnement d'un jeton paiement. According to the generation variant embedded in the mobile terminal 12, the processing agent 23 is a function of the payment application 24 allowing the generation of the payment token 103. Moreover, the payment application 24 hosts one or more payment instruments 17. A virtual payment card is registered as an application specific to the payment card profile and can be stored using an application identifier. The payment instrument is registered in the payment application prior to the first provisioning of a payment token.
Le moyen de réception 25 de données de transaction bancaire est une fonction de l'application de paiement 24 permettant la communication avec le terminal de paiement 13. La fonction de réception est capable de piloter un protocole d'échange sans contact selon la norme ISO/IEC 14443, d'enregistrer les données de la transaction dans une mémoire et de retourner des réponses au terminal de paiement 13. The bank transaction data receiving means 25 is a function of the payment application 24 enabling the communication with the payment terminal 13. The reception function is capable of controlling a contactless exchange protocol according to the ISO standard. IEC 14443, to store the transaction data in a memory and to return responses to the payment terminal 13.
En outre, l'application de paiement 24 comporte des moyens cryptographiques 26 pour certifier des données de la requête de paiement 104, par exemple une clé privée pour la signature de données transmises avec la requête de paiement 104, ou pour certifier des données transmises au serveur de provisionnement 11 ou au serveur de vérification 16. In addition, the payment application 24 includes cryptographic means 26 for certifying data of the payment request 104, for example a private key for the signature of data transmitted with the payment request 104, or for certifying data transmitted to the payment request 104. Provisioning server 11 or verification server 16.
En particulier, l'invention peut prévoir la signature de la première localisation 108 avant sa transmission au serveur de vérification 16. Ceci permet de garantir que la première localisation 108 est émise par l'utilisateur. La signature peut être conditionnée à la saisie d'un mot de passe ou code personnel. In particular, the invention may provide for the signature of the first location 108 before it is transmitted to the verification server 16. This ensures that the first location 108 is transmitted by the user. The signature can be conditioned to the entry of a password or personal code.
En outre, le terminal 12 comprend un moyen de localisation 27 du terminal mobile 12 pour la détermination de la première localisation 108 lorsque le jeton de paiement 103 est provisionné dans le terminal de paiement 12. De préférence, le moyen de localisation 27 détermine également la deuxième localisation 109 lorsque la requête de paiement 104 est élaborée. In addition, the terminal 12 includes a means 27 for locating the mobile terminal 12 for determining the first location 108 when the payment token 103 is provisioned in the payment terminal 12. Preferably, the location means 27 also determines the second location 109 when the payment request 104 is made.
Le moyen de localisation 27 est de préférence un récepteur de signaux satellitaires provenant d'un système de géolocalisation 200 comprenant une constellation de satellites. L'utilisation des signaux satellitaires offre une précision de l'ordre de quelques mètres. Les première et deuxième localisations 108, 109 sont des coordonnées en latitudes et longitudes correspondant au positionnement terrestre . The locating means 27 is preferably a satellite signal receiver from a geolocation system 200 comprising a satellite constellation. The use of satellite signals offers a precision of the order of a few meters. The first and second locations 108, 109 are coordinates in latitudes and longitudes corresponding to the terrestrial positioning.
Dans une autre variante, la localisation peut être déterminée à partir des données de réseaux de communication sans fil, par exemple le réseau cellulaire ou un réseau WIFI. La précision est de l'ordre de plusieurs centaines de mètres. En particulier, Il peut être prévu pour la détermination de la première localisation que le terminal de paiement mobile 12 transmette des données de réseau au serveur de vérification pour sa localisation. In another variant, the location can be determined from the data of wireless communication networks, for example the cellular network or a WIFI network. The precision is of the order of several hundred meters. In particular, it can be provided for the determination of the first location that the mobile payment terminal 12 transmits network data to the verification server for its location.
Il est prévu que l'application de paiement transmette au serveur de vérification 16 (directement ou via le serveur de provisionnement 11) la première localisation 108. La première localisation est de préférence transmise au serveur de vérification 16 via le serveur de provisionnement 11 lors du protocole de provisionnement du jeton 103. It is expected that the payment application transmits to the verification server 16 (directly or via the provisioning server 11) the first location 108. The first location is preferably transmitted to the verification server 16 via the provisioning server 11 during the Token provisioning protocol 103.
En variante, la première localisation 108 est transmise avec la requête de paiement 104 comprenant le jeton de paiement 103 via le réseau de paiement 15. Pour assurer la sécurité de la première localisation, celle-ci est alors chiffrée grâce au moyens cryptographiques 26, par exemple par une signature. As a variant, the first location 108 is transmitted along with the payment request 104 comprising the payment token 103 via the payment network 15. ensure the security of the first location, it is then encrypted by cryptographic means 26, for example by a signature.
La deuxième location 109 est transmise avec la requête de paiement 104, chiffrée identiquement à la première localisation 108. The second location 109 is transmitted with the payment request 104, identically encrypted at the first location 108.
Le moyen de traitement 23 du jeton de paiement 103 élabore la requête de paiement 104. Celle-ci comprenant au moins le jeton de paiement 103 (de préférence signé par l'utilisateur pour assurer qu'il est utilisé par le souscripteur de l'instrument de paiement), les données de la transaction bancaire reçues du poste de paiement du marchand et des cryptogrammes de vérification. The processing means 23 of the payment token 103 prepares the payment request 104. The latter comprises at least the payment token 103 (preferably signed by the user to ensure that it is used by the subscriber of the instrument payment data), the bank transaction data received from the merchant's payment item and the verification cryptograms.
On notera que la requête de paiement peut comprendre également la première localisation 108 et/ou la deuxième localisation 109, selon le mode de vérification prévu . Note that the payment request may also include the first location 108 and / or the second location 109, according to the intended verification mode.
La figure 3 représente un mode de réalisation du procédé de vérification d'une requête de paiement 104 exécuté par le serveur de vérification 16 et le procédé d'élaboration de la requête de paiement 104 correspondante exécuté par le terminal mobile 12. FIG. 3 represents an embodiment of the method of verifying a payment request 104 executed by the verification server 16 and the method of preparing the corresponding payment request 104 executed by the mobile terminal 12.
Le procédé d'élaboration de la requête de paiement 104 comprenant au moins le jeton de paiement 103 préalablement provisionné dans le terminal mobile 12 comprend les étapes successives suivantes : The method of preparing the payment request 104 comprising at least the payment token 103 previously provisioned in the mobile terminal 12 comprises the following successive steps:
- la détermination 301 de la première localisation 108 du terminal mobile 12 lors du provisionnement du jeton de paiement 103 dans le terminal mobile, - la transmission 302 de la première localisation 108 au serveur de vérification 16 pour une vérification ultérieure de la requête de paiement 104 comprenant le jeton de paiement 103. La première localisation 108 correspond au lieu du provisionnement du jeton de paiement (par exemple le domicile du souscripteur, lieu d'un commerce etc..) . Le provisionnement est déclenché sur requête de l'utilisateur ou de l'entité bancaire. Dans cette variante, la première localisation 108 est transmise via le serveur de provisionnement 11 lors du provisionnement du jeton. La transmission bénéficie ainsi de la sécurité du protocole de provisionnement quand le jeton de paiement 103 est reçu du serveur de provisionnement 11. La première localisation 108 est de préférence transmise avant la réalisation de la transaction bancaire utilisant le jeton de paiement 103. the determination 301 of the first location 108 of the mobile terminal 12 during the provisioning of the payment token 103 in the mobile terminal, the transmission 302 of the first location 108 to the verification server 16 for a subsequent verification of the payment request 104 including the payment token 103. The first location 108 corresponds to the location of the provisioning of the payment token (for example the domicile of the subscriber, place of business etc.). Provisioning is triggered at the request of the user or banking entity. In this variant, the first location 108 is transmitted via the provisioning server 11 during the provisioning of the token. The transmission thus benefits from the security of the provisioning protocol when the payment token 103 is received from the provisioning server 11. The first location 108 is preferably transmitted before the completion of the bank transaction using the payment token 103.
Dans une autre variante, quand le terminal mobile 12 comprend un circuit intégré sécurisé exécutant des fonctions de génération du jeton de paiement 103, le provisionnement correspond à une étape de génération du jeton 103 par le terminal mobile 12. La génération du jeton peut être déclenchée suite à une requête issue du serveur de provisionnement 11 ou suite à une requête de l'utilisateur. La première localisation 108 est transmise via un protocole d'échange sécurisé (HTTPS ou CAT_TP par exemple) au serveur de vérification 16, via le serveur de provisionnement 11 ou non. In another variant, when the mobile terminal 12 comprises a secure integrated circuit executing functions for generating the payment token 103, the provisioning corresponds to a step of generating the token 103 by the mobile terminal 12. The generation of the token can be triggered following a request from the provisioning server 11 or following a request from the user. The first location 108 is transmitted via a secure exchange protocol (HTTPS or CAT_TP for example) to the verification server 16, via the provisioning server 11 or not.
Ensuite, lorsqu'une transaction bancaire est déclenchée, notamment lors d'un échange NFC, le procédé d'élaboration de la requête de paiement comprend la création 303 de la requête de paiement 104. Lors de la création 303, des cryptogrammes de vérification sont notamment générés à partir des données de la transaction reçues du poste de paiement du marchand (non représenté sur la figure 3) . Then, when a bank transaction is triggered, especially during an NFC exchange, the process the creation of the payment request includes the creation 303 of the payment request 104. At the time of the creation 303, verification cryptograms are notably generated from the transaction data received from the merchant's payment item (not shown on Figure 3).
La requête de paiement 104 est conforme à un protocole de communication en champs proche de type ISO/IEC 14443. La requête de paiement 104 est transmise au serveur de vérification 16 conformément au protocole de paiement prévu. The payment request 104 conforms to a near field communication protocol of ISO / IEC 14443 type. The payment request 104 is transmitted to the verification server 16 in accordance with the payment protocol provided.
De plus, dans la variante préférée, le procédé d'élaboration de la requête de paiement comprend la détermination 304 de la deuxième localisation 109. Celle- ci est alors transmise avec la requête de paiement 104 au serveur de vérification 16. La deuxième localisation 109 est de préférence déterminée par des données de géolocalisation satellitaires et signée par l'application de paiement. De préférence, la deuxième localisation est insérée dans un champ de données de la requête de paiement 104 normalisé dans les protocoles de transaction EMV, par exemple le champ « Track 2 discretionnary Data » ou tout champ de données libre. Dans une autre variante, la deuxième localisation est déterminée à partir de données de localisation du poste de paiement du marchand. In addition, in the preferred variant, the method for preparing the payment request comprises the determination 304 of the second location 109. This is then transmitted with the payment request 104 to the verification server 16. The second location 109 is preferably determined by satellite geolocation data and signed by the payment application. Preferably, the second location is inserted in a data field of the payment request 104 standardized in the EMV transaction protocols, for example the "Track 2 discretionnary Data" field or any free data field. In another variant, the second location is determined from location data of the merchant's payment item.
Le serveur de vérification 16 exécute le procédé de vérification de la requête de paiement 104. Il comprend l'acquisition 401 de la première localisation 108 du terminal de paiement 12 de l'utilisateur lors du provisionnement du jeton de paiement 103 dans le terminal de paiement. La première localisation 108 est acquise via le serveur de provisionnement 11 ou directement du terminal mobile 12. The verification server 16 executes the verification process of the payment request 104. It includes the acquisition 401 of the first location 108 of the payment terminal 12 of the user when provisioning the payment token 103 in the payment terminal. The first location 108 is acquired via the provisioning server 11 or directly from the mobile terminal 12.
Le procédé comprend l'acquisition 402 de la deuxième localisation 109 du terminal de paiement 12 lors de l'élaboration de la requête de paiement 104. La deuxième localisation 109 est reçue avec la requête de paiement 104. La requête de paiement est reçue via le réseau de paiement 15. Il est prévu que la requête de paiement ait été préalablement vérifiée par le serveur de provisionnement pour déterminer l'identité bancaire 105 du souscripteur attachée au jeton de paiement. Le procédé comprend ensuite la détermination 403 d'une condition d'utilisation de la requête de paiement 104 en fonction de la première localisation 108 et de la deuxième localisation 109. La condition d'utilisation est déterminée par un traitement des données de localisation reçues par le serveur de vérification 16. La condition d'utilisation est le calcul de la distance entre la première localisation 108 et la deuxième localisation 109. The method comprises the acquisition 402 of the second location 109 of the payment terminal 12 during the preparation of the payment request 104. The second location 109 is received with the payment request 104. The payment request is received via the payment request 104. payment network 15. It is expected that the payment request has been previously verified by the provisioning server to determine the subscriber's bank identity 105 attached to the payment token. The method then comprises the determination 403 of a condition for using the payment request 104 as a function of the first location 108 and the second location 109. The condition of use is determined by a processing of the location data received by the verification server 16. The condition of use is the calculation of the distance between the first location 108 and the second location 109.
Le procédé de vérification comprend ensuite la vérification 404 de la condition d'utilisation avec un critère géographique. La vérification comprend des règles de risque dont les critères géographiques sont élaborés par l'entité bancaire émettrice de l'instrument de paiement 17. Le critère géographique de vérification est une distance maximale autorisée. La distance maximale autorisée peut être de plusieurs centaines de kilomètres. Par exemple, si la distance entre la première localisation 108 et la deuxième localisation 109 est supérieure à 200km, la vérification peut refuser la requête de paiement. En variante, le critère géographique peut être une correspondance entre la première localisation et la deuxième localisation. Par exemple, le critère géographique peut être une correspondance entre un pays lors du provisionnement et un pays lors de l'élaboration de la requête de paiement. Une première règle de correspondance peut être que le pays lors du provisionnement est identique au pays lors de l'élaboration de la requête de paiement. Une deuxième règle de correspondance peut être que le pays lors de l'élaboration de la requête de paiement est un pays limitrophe de celui lors du provisionnement. The verification method then comprises the verification 404 of the condition of use with a geographical criterion. The audit includes risk rules for which the geographical criteria are developed by the banking entity issuing the payment instrument 17. The geographical criterion of verification is a maximum distance allowed. The maximum distance allowed may be several hundred kilometers. For example, if the distance between the first location 108 and the second location 109 is greater than 200km, the check may refuse the request for payment. As a variant, the geographical criterion can be a correspondence between the first location and the second location. For example, the geographical criterion can be a correspondence between a country during provisioning and a country when drawing up the payment request. A first rule of correspondence may be that the country when provisioning is identical to the country when preparing the payment request. A second rule of correspondence may be that the country when drawing up the payment request is a country bordering on that when provisioning.
Le procédé de vérification comprend finalement l'autorisation 405 de la requête de paiement 104 en fonction du résultat de la vérification 404 au regard du critère géographique. L'autorisation est transmise au poste de paiement 13 du marchand. The verification method finally comprises the authorization 405 of the payment request 104 according to the result of the verification 404 with respect to the geographical criterion. The authorization is transmitted to the payment station 13 of the merchant.
On notera que le protocole de vérification comprend également la vérification de cryptogrammes de vérification (par exemple ARQC) . Dans une variante du procédé de vérification, la condition d'utilisation est la première localisation uniquement et le critère géographique de vérification est une localisation autorisée lors du provisionnement. En particulier, une vérification peut être opérée uniquement sur la première localisation. La transaction bancaire est alors refusée si le jeton de paiement a été provisionné dans une zone géographique non habilitée par l'entité bancaire, par exemple un pays étranger non déclaré par l'utilisateur. Ceci permet notamment de détecter une fraude sur le protocole de provisionnement. It should be noted that the verification protocol also includes the verification of verification cryptograms (for example ARQC). In a variant of the verification method, the condition of use is the first location only and the geographical verification criterion is an authorized location during provisioning. In particular, a check can be made only on the first location. The banking transaction is then refused if the payment token has been provisioned in a geographical area not authorized by the banking entity, for example a foreign country not declared by the user. This makes it possible to detect a fraud on the provisioning protocol.
Dans cette dernière variante, la première localisation 108 est transmise avec la requête de paiement 104. Elle est enregistrée dans le terminal mobile entre l'instant de provisionnement et celui de la transaction bancaire avec un poste de paiement du marchand. In this latter variant, the first location 108 is transmitted with the payment request 104. It is recorded in the mobile terminal between the provisioning moment and that of the banking transaction with a merchant's payment item.
Il est prévu que le procédé de vérification contrôle les première et deuxième localisations 108, 109 lorsque celles-ci sont chiffrées. Par exemple, le procédé comprend la vérification d'une signature ou un déchiffrement. Le procédé de vérification contrôle si les localisations ont été émises par l'utilisateur. It is expected that the verification process controls the first and second locations 108, 109 when they are encrypted. For example, the method includes verification of a signature or decryption. The verification process checks whether the locations were issued by the user.

Claims

REVENDICATIONS
1. Procédé de vérification d'une requête de paiement (104) d'une transaction bancaire pour un serveur1. Method for verifying a payment request (104) for a bank transaction for a server
(16) de vérification de transaction, la dite requête (104) comprenant au moins un jeton de paiement (103) préalablement provisionné dans un terminal de paiement mobile d'un utilisateur, caractérisé en ce qu'il comprend les étapes successives suivantes : (16) transaction verification, said request (104) comprising at least one payment token (103) previously provisioned in a mobile payment terminal of a user, characterized in that it comprises the following successive steps:
- l'acquisition (401) d'une première localisation (108) du terminal de paiement de l'utilisateur (12) lors du provisionnement du jeton de paiement (103) dans le terminal de paiement, - la détermination (403) d'une condition d'utilisation de la requête de paiement (104) en fonction d'au moins la première localisation (108), la vérification (404) de la condition d'utilisation en fonction d'un critère géographique, - l'autorisation (405) de la requête de paiementthe acquisition (401) of a first location (108) of the user's payment terminal (12) during the provisioning of the payment token (103) in the payment terminal, - the determination (403) of a condition of use of the payment request (104) according to at least the first location (108), the verification (404) of the condition of use according to a geographical criterion, - the authorization ( 405) of the payment request
(104) en fonction du résultat de la vérification. (104) depending on the result of the verification.
2. Procédé selon la revendication 1, caractérisé en ce qu'il comprend également l'acquisition (402) d'une deuxième localisation du terminal de paiement (12) lors de l'élaboration de la requête de paiement (104), et en ce que la condition d'utilisation est fonction de la première localisation (108) et de la deuxième localisation (109) . 2. Method according to claim 1, characterized in that it also comprises the acquisition (402) of a second location of the payment terminal (12) during the preparation of the payment request (104), and the condition of use is a function of the first location (108) and the second location (109).
3. Procédé selon la revendication 2, caractérisé en ce que le critère géographique de vérification est une distance maximale autorisée. 3. Method according to claim 2, characterized in that the geographical criterion of verification is a maximum distance allowed.
4. Procédé selon la revendication 2 ou 3, caractérisé en ce que la première localisation (108) et/ou la deuxième localisation (109) sont chiffrées par une application de paiement du terminal de paiement mobile. 4. Method according to claim 2 or 3, characterized in that the first location (108) and / or the second location (109) are encrypted by a payment application of the mobile payment terminal.
5. Procédé selon l'une quelconque des revendications 2 à 4, caractérisé en ce que la première localisation (108) et/ou la deuxième localisation (109) sont insérées dans un champ de données de la requête de paiement (104) . 5. Method according to any one of claims 2 to 4, characterized in that the first location (108) and / or the second location (109) are inserted into a data field of the payment request (104).
6. Procédé selon l'une quelconque des revendications 1 à 5, caractérisé en ce que la requête de paiement (104) est conforme à un protocole de communication en champs proche de type ISO/IEC 14443. 6. Method according to any one of claims 1 to 5, characterized in that the payment request (104) is in accordance with a near field communication protocol type ISO / IEC 14443.
7. Procédé selon l'une quelconque des revendications 1 à 6, caractérisé en ce que la première localisation (108) est reçue par le serveur de vérification (16) lors d'un protocole de provisionnement du jeton de paiement (103) dans le terminal de paiement (12) . 7. Method according to any one of claims 1 to 6, characterized in that the first location (108) is received by the verification server (16) during a payment token provisioning protocol (103) in the payment terminal (12).
8. Procédé selon l'une quelconque des revendications 1 à 7, caractérisé en ce que la première localisation (108) est calculée par un moyen de localisation (27) du terminal de paiement (12), par exemple un récepteur de signaux satellitaires. 8. Method according to any one of claims 1 to 7, characterized in that the first location (108) is calculated by a location means (27) of the payment terminal (12), for example a satellite signal receiver.
9. Procédé selon la revendication 1, caractérisé en ce que la condition d'utilisation est la première localisation et le critère géographique de vérification est une localisation autorisée lors du provisionnement. 9. Method according to claim 1, characterized in that the condition of use is the first location and the geographical criterion of verification is an authorized location during the provisioning.
10. Procédé selon l'une quelconque des revendications 1 à 9, caractérisé en ce que le jeton de paiement (103) est généré par un serveur de provisionnement (11) et est transmis au terminal de paiement mobile (12) via un réseau de téléphonie cellulaire ou un réseau de communication internet. 10. Method according to any one of claims 1 to 9, characterized in that the payment token (103) is generated by a provisioning server (11) and is transmitted to the mobile payment terminal (12) via a payment network. cellular telephony or an internet communication network.
11. Procédé selon l'une quelconque des revendications 1 à 9, caractérisé en ce que le jeton de paiement (103) est généré par le terminal de paiement mobile ( 12 ) . 11. Method according to any one of claims 1 to 9, characterized in that the payment token (103) is generated by the mobile payment terminal (12).
12. Procédé d'élaboration d'une requête de paiement (104) comprenant un jeton de paiement (103) préalablement provisionné dans un terminal de paiement mobile (12) pour le terminal de paiement mobile (12), caractérisé en ce qu' il comprend les étapes successives suivantes : la détermination (301) d'une première localisation (108) du terminal mobile (12) lors du provisionnement du jeton de paiement (103), 12. A method for preparing a payment request (104) comprising a payment token (103) previously provisioned in a mobile payment terminal (12) for the mobile payment terminal (12), characterized in that it comprises the following successive steps: determining (301) a first location (108) of the mobile terminal (12) when provisioning the payment token (103),
- la transmission (302) de la première localisation (108) à un serveur de vérification (16) pour la vérification de la requête de paiement (104) . - The transmission (302) of the first location (108) to a verification server (16) for verification of the payment request (104).
13. Procédé selon la revendication 12, caractérisé en ce qu'il comprend également la détermination (304) d'une deuxième localisation (109) du terminal mobile (12) lors de l'élaboration de la requête de paiement (104) pour la vérification de la requête de paiement (104) . 13. Method according to claim 12, characterized in that it also comprises the determination (304) of a second location (109) of the mobile terminal (12) during the preparation of the payment request (104) for the verification of the payment request (104).
14. Procédé selon la revendication 13, caractérisé en ce que l'élaboration de la requête de paiement (104) comprend le chiffrement de la première localisation (108) et/ou de la deuxième localisation (109) . 14. The method of claim 13, characterized in that the development of the payment request (104) comprises the encryption of the first location (108) and / or the second location (109).
15. Terminal de paiement mobile (12) d'un utilisateur comprenant un moyen pour provisionner (23) un jeton de paiement (103) dans le terminal de paiement (12) et pour l'élaboration d'une requête de paiement (104) comprenant au moins le jeton de paiement (103), caractérisé en ce qu' il comprend également : 15. A mobile payment terminal (12) of a user including means for provisioning (23) a payment token (103) in the payment terminal (12) and for generating a payment request (104) comprising at least the payment token (103), characterized in that it also comprises:
- un moyen de localisation (27) du terminal mobile (12) pour la détermination d'une première localisation (108) lorsque le jeton de paiement (103) est provisionné dans le terminal de paiement (12), - et un moyen de transmission de la première localisation (108) à un serveur de vérification de la requête de paiement, la première localisation (108) étant transmise lors du provisionnement (301) ou lors de l'élaboration de la requête de paiement (104) . a means (27) for locating the mobile terminal (12) for determining a first location (108) when the payment token (103) is provisioned in the payment terminal (12), and a transmission means from the first location (108) to a verification server of the payment request, the first location (108) being transmitted during the provisioning (301) or during the preparation of the payment request (104).
16. Terminal selon la revendication 15, caractérisé en ce que le moyen de localisation (27) est apte à déterminer une deuxième localisation (109) du terminal mobile (12) lors de l'élaboration de la requête de paiement (104), et en ce que la requête de paiement (104) comprend également la deuxième localisation (109) . Terminal according to claim 15, characterized in that the locating means (27) is able to determine a second location (109) of the mobile terminal (12) during the preparation of the payment request (104), and in that the payment request (104) also includes the second location (109).
17. Terminal selon la revendication 15 ou 16, caractérisé en ce qu'il est un téléphone cellulaire. 17. Terminal according to claim 15 or 16, characterized in that it is a cellular telephone.
PCT/FR2015/053743 2014-12-30 2015-12-23 Payment request verification method including determination of the location where a payment token was issued WO2016108017A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FR1463458A FR3031217B1 (en) 2014-12-30 2014-12-30 METHOD FOR VERIFYING A PAYMENT REQUEST INCLUDING DETERMINING THE LOCATION OF THE PROVISION OF A PAYMENT TOKEN
FR1463458 2014-12-30

Publications (1)

Publication Number Publication Date
WO2016108017A1 true WO2016108017A1 (en) 2016-07-07

Family

ID=53298448

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/FR2015/053743 WO2016108017A1 (en) 2014-12-30 2015-12-23 Payment request verification method including determination of the location where a payment token was issued

Country Status (2)

Country Link
FR (1) FR3031217B1 (en)
WO (1) WO2016108017A1 (en)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US857731A (en) 1904-10-11 1907-06-25 John W Granger Carrier-plate for hooks and eyes.
US20140040139A1 (en) * 2011-12-19 2014-02-06 Sequent Software, Inc. System and method for dynamic temporary payment authorization in a portable communication device
US20140289116A1 (en) 2013-03-22 2014-09-25 Igor Polivanyi System and method for performing authentication for a local transaction

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US857731A (en) 1904-10-11 1907-06-25 John W Granger Carrier-plate for hooks and eyes.
US20140040139A1 (en) * 2011-12-19 2014-02-06 Sequent Software, Inc. System and method for dynamic temporary payment authorization in a portable communication device
US20140289116A1 (en) 2013-03-22 2014-09-25 Igor Polivanyi System and method for performing authentication for a local transaction

Also Published As

Publication number Publication date
FR3031217A1 (en) 2016-07-01
FR3031217B1 (en) 2018-02-09

Similar Documents

Publication Publication Date Title
EP3221815B1 (en) Method for securing a payment token
US10373161B2 (en) Offline mobile phone payments
EP2873045B1 (en) Secure electronic entity for authorizing a transaction
JP5513626B2 (en) System and method for approving transactions
EP3688961B1 (en) Federated closed-loop system
US20130041831A1 (en) Secure and shareable payment system using trusted personal device
US11132664B2 (en) Securing contactless payment performed by a mobile device
US11698982B2 (en) System and method for protecting location data
FR2975855A1 (en) SYSTEM AND METHOD FOR SECURING DATA EXCHANGES BETWEEN A CLIENT MODULE AND A SERVER MODULE
US20130297516A1 (en) Payment transaction method and corresponding applications
EP3163487B1 (en) Method, terminal, and computer program for securing the processing of transactional data
EP3857413A1 (en) Method for processing a transaction, device, system and corresponding program
Bocek et al. An NFC relay attack with off-the-shelf hardware and software
FR2944177A1 (en) NON-CONTACT PROXIMITY TRANSACTION METHOD AND SYSTEM
WO2007006771A1 (en) Transaction authorization method and device
EP3095223B1 (en) Method of transmitting encrypted data, method of reception, devices and computer programs corresponding thereto
WO2016108017A1 (en) Payment request verification method including determination of the location where a payment token was issued
Neville et al. Efficiently achieving full three-way non-repudiation in consumer-level ecommerce and M-Commerce transactions
CA2946145C (en) Methods for processing transactional data, and corresponding devices and programs
US11620646B2 (en) Method for carrying out a transaction, terminal, server and corresponding computer program
EP3371760A1 (en) Method for verifying identity during virtualization
WO2016051059A1 (en) Method of protecting a mobile terminal against attacks
WO2007071573A2 (en) System for secure transactions of card-borne value units
ITTO20080156A1 (en) CASH-LESS AND CARD-LESS SECURE FINANCIAL TRANSACTIONS BASED ON GEOREFERENCE INFORMATION

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15823369

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 15823369

Country of ref document: EP

Kind code of ref document: A1