Method and system for activating a portable contactless payment device
Patent Information
- Authority / Receiving Office
- CH · CH
- Patent Type
- Patents
- Current Assignee / Owner
- THE SWATCH GRP RES & DEVELONMENT LTD
- Filing Date
- 2018-10-17
- Publication Date
- 2026-07-15
Abstract
Description
Scope of the invention
[0001] The invention relates to a method of activating a portable contactless payment object of the type watch or jewelry piece capable of participating in the realization of an electronic payment by tokenization as well as to a system implementing such a method.
[0002] The invention also relates to the portable object and to an activation terminal which are suitable for implementation in this system.
[0003] The invention also relates to a computer program comprising program code instructions for the execution of steps in this process. Background of the invention
[0004] With the increasing development of the digital economy, the share of payment transactions by bank card has increased sharply in recent years. In this context, significant improvements in the security of these bank cards have been made, but bank card fraud still exists.
[0005] To overcome this drawback, new payment methods have emerged, notably offering a payment process based on "tokenization." In this new process, a potential buyer's bank details are replaced by disposable data called a "token," which is stored in a mobile payment application on a payment device such as a smartphone. The buyer thus possesses a token on this smartphone that can be used for near-field payment via NFC (Near Field Communication) technology.
[0006] However, one of the major drawbacks of this process lies in its implementation, which requires numerous lengthy and complex operations to activate the payment medium. Summary of the invention
[0007] The aim of the present invention is to overcome, in whole or in part, the aforementioned disadvantages by offering a simple and quick activation of the payment support.
[0008] To this end, the invention relates to a method for activating a contactless portable payment object, such as a watch or jewelry piece, capable of participating in the execution of an electronic payment by tokenization. The method comprises the following steps: obtaining a payment token by an electronic device, in particular a mobile device, from a server of a trusted third party providing a token-based payment service, and configuring the portable object for its use, providing for the transmission of said token contained in the electronic device to said portable object via an activation terminal. In other embodiments: the obtaining step includes a sub-step of digitizing by the electronic device a first graphic representation contained on an activation terminal, said first graphic representation comprising a matrix code;The retrieval step includes a sub-step of decoding the matrix code in order to obtain binary information sequences containing data relating to a location in a digital configuration file of the electronic device; the retrieval step includes a sub-step of generating by the electronic device configured by the digital file a request to obtain this payment token including data for the creation of said token containing at least one banking data point; the retrieval step includes a sub-step of transmitting a payment token by the trusted third party's server to the electronic device; the configuration step of the portable payment object includes a sub-step of arranging this portable object on a data transmission area defined on / in the activation terminal;The portable object configuration step includes a substep of scanning by the electronic device of a second graphical representation included on the activation terminal, said graphical representation including a matrix code, and the portable object configuration step includes a substep of decoding the matrix code in order to obtain binary information sequences containing data relating to a configuration of a communication link between this electronic device and the activation terminal.
[0009] The invention also relates to an activation system for a portable contactless payment object of the type watch or jewelry piece capable of participating in the realization of an electronic payment by tokenization, the system comprising the following elements capable of communicating with each other: an electronic device, in particular mobile, a server of a trusted third party providing a token payment service and an activation terminal.
[0010] Advantageously, the activation terminal includes first and second graphical representations, each comprising a matrix code.
[0011] In particular, the activation terminal includes a data transmission area.
[0012] The invention also relates to a portable contactless payment object of the type watch or jewelry piece suitable for use in such a system.
[0013] The invention further relates to an activation terminal suitable for implementation in such a system.
[0014] The invention also relates to a computer program comprising program code instructions for the execution of the steps of this process, when said computer program is executed by the server processing module, the electronic device processing unit and the wearable object's contactless proximity communication module. Brief description of the drawings
[0015] Other features and advantages will become clear from the description given below, by way of example and not limitation, with reference to the attached figures, in which: Figure 1 is a schematic representation of an activation system for a contactless portable payment object of the type of watch or jewelry piece suitable for participating in the execution of an electronic payment by tokenization, according to the embodiment of the invention, and Figure 2 is a flowchart relating to a method of activating the contactless portable payment object suitable for participating in the execution of the electronic payment by tokenization, according to the embodiment of the invention. Detailed description of preferred embodiments
[0016] Figure 1 shows an activation system 1 for a contactless payment wearable device 2. Such a system 1 allows the wearable device 2 to be configured so that it participates in the execution of an electronic payment by tokenization during a transaction carried out between a merchant and the bearer of this wearable device 2.
[0017] Electronic payment by tokenization falls within the field of electronic payments. In this field, tokenization is the process of replacing payment data, such as bank details (card numbers, etc.), with disposable data called a "token." This token is also called a "DAN" (for "Digital Account Number"). In other words, this process allows critical data to be replaced by an equivalent element, in this case the "token," which will have no intrinsic value or usable meaning once it leaves the payment system. It is therefore understood that tokenization is the process of replacing critical data with an equivalent element that will have no intrinsic value or usable meaning once it leaves the payment system.
[0018] Such a system 1 then comprises: the portable object 2 for contactless payment; an electronic device 3; a server of a trusted third party 4 token payment service provider 9; an activation terminal 5.
[0019] In this system 1, the contactless payment wearable device 2 is preferably a timepiece or a piece of jewelry. Such a device 2 includes a contactless proximity communication module 6 that performs certain security functions and very short-range communications of the "near-field communication" type. This module may be an NFC (Near Field Communication) proximity communication module 6. This module 6 includes a near-field communication antenna 7a and a microcircuit 7b connected to the antenna. The microcircuit 7b and the antenna 7a together form near-field communication means capable of communicating with external equipment such as a contactless payment terminal or the activation terminal 5. The microcircuit 7b includes hardware and software resources, in particular at least one processor cooperating with memory elements 8.In this portable object 2, the antenna 7a is formed, for example, by a plurality of electrically conductive turns and it delimits a useful surface for receiving a magnetic field.
[0020] In this portable object 2, the memory elements 8 are capable of storing at least one payment token 9. This token 9 includes, but is not limited to: a token identifier such as a token number; a token expiry date or token validity period; a geographical area of use of the token; a transaction limit; a cryptogram which may be a password, a personal code, or a digital biometric fingerprint.
[0021] As we will see later, each token 9 is generated by the server of a trusted third party 4, a token payment service provider. This trusted third party, also called a Token Service Provider, manages the process of issuing and generating this token 9. This server 4 includes a processing module 10 equipped with hardware and software resources, in particular at least one processor cooperating with memory elements, as well as a database 11 containing, in particular, generated tokens 9, each of which is associated with the cardholder's bank details 12. Such bank details 12 include, but are not limited to: the cardholder's bank card number, the card's expiry date; the cardholder's personal data: surname, first name, address, etc.; a bank account number; etc.
[0022] The server 4 also includes a communication unit 13 for receiving and transmitting data remotely via the cellular telephone network, an IP-type data network via the telephone network or an IP-type data network via a wired Ethernet-type network.
[0023] As previously discussed, the activation terminal 5 of this system 1 participates in the configuration of the wearable object 2. This activation terminal 5 is a housing preferably having an essentially parallelepiped shape. Such an activation terminal 5 comprises first and second graphical representations 14a, 14b, each comprising a matrix code. This matrix code may be a two- or three-dimensional barcode. This matrix code may, for example, include a QR code or a Data Matrix code. This matrix code comprises sequences of binary information that are encoded / encrypted. In the first graphical representation 14a, the matrix code comprises sequences of binary information containing data relating to a location in a digital configuration file of the electronic device 3.Regarding the second graphical representation, the matrix code includes sequences of binary information containing data relating to a configuration of a communication link, in particular wireless, between this electronic device 3 and the activation terminal 5.
[0024] Such first and second graphic representations 14a, 14b are defined on a visible external face of this activation terminal 5. It is understood that this visible external face is designed so that the electronic device 3 can be arranged with respect to this external face in such a way as to be able to capture these first and second graphic representations 14a, 14b, as we will see later. The activation terminal 5 also includes a data transmission area 16 in which the wearable object 2 can be arranged or which can receive / support said wearable object 2.
[0025] Such an activation terminal 5 comprises two communication modules, the first and second communication modules 15a and 15b. The first communication module 15a comprises a contactless proximity communication unit performing certain security functions and very short-range communications of the "near field communication" type. This unit is capable of exchanging data bidirectionally with the communication module 6 of the wearable device 2. This unit is an NFC (Near Field Communication) proximity communication unit. To this end, this unit comprises a near field communication antenna and a microcircuit connected to the antenna. The microcircuit comprises hardware and software resources, in particular at least one processor cooperating with memory elements.In this portable object 2, the antenna is formed, for example, by a plurality of electrically conductive turns and it delimits a useful surface for receiving a magnetic field.
[0026] The second communication module 15b includes a communication unit for receiving and transmitting data remotely via a wireless network such as Wi-Fi or Bluetooth. This second module is capable of exchanging data bidirectionally with the electronic device 3.
[0027] In addition, it should be noted that the activation terminal 5 is connected to an external power supply or includes an electric accumulator.
[0028] The electronic device 3 is, for example, a computer, a smartphone, a tablet, or an electronic kiosk. Such an electronic device 3 is preferably mobile and / or portable and / or compact. This electronic device 3 comprises, without limitation: a processing unit 21 including hardware and software resources, in particular at least one processor cooperating with memory elements; a display module 17 of the screen type; an interface for disseminating sound information such as a loudspeaker; a communication interface 18 enabling the electronic device 3 to establish a communication link with the activation kiosk 5 and / or with the trusted third party server 4 for data exchange; a selection interface 19 such as a keyboard or a touch interface included, for example, in the display module 17;a capture module 20 of at least one image including in particular at least one image sensor otherwise called a matrix image sensor which may for example include sensors of CCD technology (charge transfer technology) or of so-called CMOS technology.;
[0029] In this electronic device 3, the processing unit 21 is connected among other things to the display module 17, the broadcast interface, the communication interface 18 and the selection interface 19. The communication interface 18 of this electronic device 3 includes communication elements for receiving and transmitting data remotely via the cellular telephone network, an IP-type data network via the telephone network or an IP-type data network via a medium-range network, for example WIFI or a short-range network based on Bluetooth technology.
[0030] Each image sensor of the capture module 20 comprises a matrix of photosensitive image points (or pixels). This matrix of points is also referred to herein as the "pixel matrix" and comprises NxM individual pixels with excellent light sensitivity. The capture module 20 also includes an analog-to-digital converter (ADC) connected to the processing unit 21 of the electronic device 3.
[0031] With reference to figure 2, this system 1 implements a method for activating the contactless portable payment object 2 capable of participating in the execution of an electronic payment by tokenization.
[0032] This method includes a step 30 of obtaining the payment token 9 by an electronic device 3 from the server of the trusted third party 4, the token payment service provider 9. Step 30 includes a substep of scanning 31 by the electronic device 3 of the first graphic representation 14a included on the activation terminal 5, said graphic representation 14a comprising a matrix code. This substep 31 provides for an acquisition phase 32 of this first graphic representation 14a, provided that the electronic device 3 is arranged in the immediate vicinity of the activation terminal 5 so that the capture module 20 is positioned opposite this first graphic representation 14a. During this phase 32, the pixel matrix detects at least one image from the first graphic representation 14a and then generates analog signals relating to this image.The analog-to-digital converter of the capture module 20 then converts these analog signals from this pixel matrix into digital signals which are then transmitted to the processing unit 21 of the electronic device 3.
[0033] Subsequently, this step 30 includes a substep 33 for decoding the matrix code in order to obtain binary information sequences containing data relating to a remote location in a digital configuration file of the electronic device 3. This substep 33 includes a processing phase 34 for the digital signals relating to the acquired graphical representation 14a comprising the matrix code. During this phase 34, the processing unit 21 applies a decoding algorithm to said digital signals so as to obtain the binary information sequences containing data relating to a location in a digital configuration file of the electronic device 3. These binary information sequences preferably include a hyperlink.
[0034] Next, the acquisition step 30 includes a sub-step of generation 35 by the electronic device 3 configured by the digital file of a request to obtain this payment token 9 including development data for said token 9 comprising at least one bank data 12. As we have seen previously, a bank data 12 includes in particular characteristics of a bank account and / or a medium of a payment method of the bearer of the wearable object 2. Such development data include, without limitation and without exhaustiveness: the number of the bearer's bank card, the expiry date of the card.
[0035] Alternatively, this development data may also include personal data of the bearer: name, surname, address, etc. and / or the bearer's bank account number.
[0036] This substep 35 includes a configuration phase 36 of the electronic device 3 during which the electronic file is executed by the processing unit 21 once this digital file has been downloaded from a file server following the execution by the processing unit 21 of the binary information sequences containing the hyperlink. This configuration phase 36 thus enables the execution of this digital file to install a computer program (or software application) which is then implemented by the processing unit 21 during a generation phase 37 of the request to obtain this token 9. This generation phase 37 provides for the collection of at least one banking data item from the holder of the wearable device 2.The bank data 12 is then temporarily recorded in the processing unit 21, notably via the selection interface 19 and display interface 17 of the electronic device 3, in preparation for generating the retrieval request. The processing unit 21 then manages the request to obtain this token 9 from said at least one piece of collected bank data. Subsequently, this substep 35 includes a transmission phase 38 of the retrieval request, including said at least one piece of collected bank data, to the server of the trusted third party 4, the token payment service provider. During this phase 38, said at least one piece of collected bank data included in the request may be encrypted and / or the request may be sent to this server 4 via a secure network. It should be noted that this retrieval request may be transmitted directly or indirectly to the server of the trusted third party 4.When this transmission is carried out indirectly, the request is then transmitted to this server 4 via a technical platform acting as a tokenization service otherwise known in English as a "token requestor" and which can then take care of conveying the token request 9.
[0037] This acquisition step 30 subsequently includes a substep of transmission 39 by the trusted third-party server 4 to the electronic device 3 of a payment token 9. This substep 39 includes a generation phase 40 of the payment token 9 from said at least one banking data point received by this server 4. During this phase 40, the processing module 10 of the server 4 then generates the payment token 9 derived from said at least one banking data point. Such a phase 40 may provide for the implementation of tools for the random generation of this token 9, such as algorithms.In one variant, the generation of this token 9 can be carried out from the bank data 12 and a diversifier representing an authorization for a payment transaction with usage restriction criteria determined by the server 4, for example a validity for one or more bank transactions, a time validity, a validity for a transaction limit.
[0038] The method also includes a configuration step 41 of the wearable object 2 for use, providing for the transmission of said token 9 included in the electronic device 3 to said wearable object 2 via the activation terminal 5. This step 41 includes a substep of arranging the wearable object 2 on / in the data transmission zone 16 defined on / in the activation terminal 5. During this substep 42, the wearable object 2 is arranged on / in this zone 16 so as to guarantee optimal data exchange between the contactless proximity communication module 6 of the wearable object 2 and the first communication module 15a of the activation terminal 5.
[0039] Subsequently, the configuration step 41 includes a substep 43 of digitizing, by the electronic device 3, a second graphic representation 14b included on the activation terminal 5, said graphic representation 14b comprising a matrix code. This substep 43 provides for an acquisition phase 44 of this second graphic representation 14b, provided that the electronic device 3 is arranged in the immediate vicinity of the activation terminal 5 so that this capture module 20 is positioned opposite this second graphic representation. During this phase 44, the pixel matrix detects at least one image from this second graphic representation 14b and then generates analog signals relating to this image.The analog-to-digital converter of the capture module 20 then converts these analog signals from this pixel matrix into digital signals which are then transmitted to the processing unit 21 of the electronic device 3.
[0040] Next, the configuration step 41 includes a substep 45 for decoding the matrix code in order to obtain binary information sequences containing data relating to the configuration of a communication link between this electronic device and the activation terminal 5. This substep 45 includes a processing phase 46 of the digital signals relating to the second acquired graphical representation 14b comprising the matrix code. During this phase 46, the processing unit 21 applies a decoding algorithm to said digital signals so as to obtain the binary information sequences containing data relating to the configuration of a communication link between this electronic device 3 and the activation terminal 5.
[0041] Next, the acquisition step 41 includes a substep 47 for establishing a communication link between the electronic device 3 and the activation terminal 5. During this substep 47, the processing unit 21 configures the communication interface 18 of this electronic device 3 for the configuration of the communication link between the communication interface 18 and the second communication module 15b of the activation terminal 5.
[0042] Subsequently, during a configuration substep 48 of the wearable object 2 in preparation for its use in carrying out a payment transaction, the processing unit 21 of the electronic device 3 transmits to the second communication module 15b of the activation terminal 5 via its communication interface 18, the token 9 generated by the server of the trusted third party 4. This token 9 is then transmitted by the first communication module of the activation terminal 5 to the wearable object 2 via the contactless proximity communication module 6 of this object 2.
[0043] By being activated in this way, the wearable object 2 can then participate in the realization of an electronic payment by tokenization during a transaction established between a merchant / trader and the bearer of this wearable object 2.
[0044] The invention also relates to a computer program comprising program code instructions for the execution of steps of the process described above when said computer program is executed by the processing module 10 of the server 4, the processing unit 21 of the electronic device 3 and the contactless proximity communication module 6 of the wearable object 2.
[0045] Of course, the present invention is not limited to the illustrated example but is susceptible to various variants and modifications which will become apparent to a person skilled in the art.
Claims
1. Method for activating a portable contactless payment object (2) of the type watch or jewelry item capable of participating in the making of an electronic payment by tokenization, the method comprising the following steps: – obtaining (30) a payment token (9) by an electronic device (3) in particular mobile from a server of a trusted third party (4) token payment service provider, and – configuration (41) of the portable object (2) for its use providing for a transmission of said token (9) contained in the electronic device (3) to said portable object (2) via an activation terminal (5).
2. Method according to the preceding claim, characterized in that the obtaining step (30) comprises a substep of digitizing (31) by the electronic device (3) a first graphic representation (14a) included on an activation terminal, said first graphic representation (14a) comprising a matrix code.
3. Method according to the preceding claim, characterized in that the obtaining step (30) comprises a substep of decoding (33) the matrix code in order to obtain binary information sequences comprising data relating to a location of a digital configuration file of the electronic device (3).
4. Method according to the preceding claim, characterized in that the obtaining step (30) includes a sub-step of generation (35) by the electronic device (3) configured by the digital file of a request to obtain this payment token (9) comprising data for the development of said token (9) including at least one banking data (12).
5. Method according to the preceding claim, characterized in that the obtaining step (30) includes a substep of transmission (39) by the server of the trusted third party (4) to the electronic device (3) of a payment token (9).
6. Method according to any one of the preceding claims, characterized in that the configuration step (41) of the portable payment object (2) includes a substep of arranging this portable object (2) on a data transmission area (16) defined on / in the activation terminal (5).
7. A method according to any one of the preceding claims, characterized in that the configuration step (41) of the wearable object (2) includes a substep of digitizing (43) by the electronic device (3) a second graphic representation (14b) included on the activation terminal (5), said graphic representation (14b) comprising a matrix code.
8. Method according to the preceding claim, characterized in that the configuration step (41) of the portable object (2) includes a substep of decoding (45) the matrix code in order to obtain binary information sequences comprising data relating to a configuration of a communication link between this electronic device (3) and the activation terminal (5).
9. Activation system (1) of a portable object (2) of contactless payment of the type watch or jewelry piece capable of participating in the making of an electronic payment by tokenization, the system (1) comprising the following elements capable of communicating with each other: an electronic device (3), in particular mobile, a server of a trusted third party (4) token payment service provider (9) and an activation terminal (5).
10. System (1) according to the preceding claim, characterized in that the activation terminal (5) comprises first and second graphical representations (14a, 14b) each comprising a matrix code.
11. System (1) according to any one of claims 9 and 10, characterized in that the activation terminal (5) comprises a data transmission area (16).
12. Portable contactless payment device (2) of the type watch or jewelry item suitable for implementation in a system (1) according to any one of claims 9 to 11.
13. Activation terminal (5) suitable for implementation in a system (1) according to any one of claims 9 to 11 14. Computer program comprising program code instructions for carrying out the steps of the process according to any one of claims 1 to 8, where said computer program is executed by the processing module (10) of the server (4), the processing unit (21) of the electronic device (3) and the contactless proximity communication module (6) of the wearable object (2).