Method for paying goods and / or service fees

Abstract

The invention relates to a method for paying goods and / or services by an authorized user using a mobile radio device (2) with a SIM or eSIM, in which a set of user-related parameters is transmitted to a mobile wireless service provider (5) corresponding to a SIM card or eSIM card and the set of parameters is associated with the SIM card or eSIM card by the mobile wireless service provider, after which the user-related parameters are transmitted to the mobile radio device (2) with the SIM or eSIM card. The mobile wireless service provider (5) sends a request to a payment service provider (6), the payment service provider (6) creates and transmits a virtual payment card or a virtual payment token to the mobile wireless service provider (5), after which the mobile wireless service provider (5) associates the virtual payment card or the virtual payment token with a SIM card or an eSIM card. The method according to the invention is characterized in that the mobile radio device (2) is integrated in the vehicle (1), in which a user-related parameter set is determined by a vehicle-external server (4) of a vehicle manufacturer associated with the vehicle (1) and transmitted to the mobile radio service provider (5), and in that the user-related parameter set is transmitted to the mobile radio service provider (5) by a vehicle-external server (4) of a vehicle manufacturer associated with the vehicle (1). A user-specific vehicle-related parameter set is determined by the vehicle external server (4) of the vehicle manufacturer and transmitted to the mobile wireless service provider (5), which also associates the user-specific vehicle-related parameter set with the SIM card or eSIM card, in which the user-specific vehicle-related parameter set is transmitted to the mobile wireless service provider (5) when the goods and / or services are paid. A set of parameters associated with the SIM card or eSIM card is compared with a corresponding set of parameters at the mobile wireless service provider (5) and / or a set of parameters stored on the vehicle external server (4) of the vehicle manufacturer in order to verify the identity of the user.

Description

Technical Field

[0001] The invention relates to a method for paying for goods and / or services by an authorized user using a mobile radio device with a SIM card or an eSIM card, in particular as defined in the preamble of claim 1 . Background Art

[0002] The closest prior art here is WO 2019 / 147160 A1, which describes a method for making payments via a SIM card or eSIM card in a mobile phone.

[0003] Typically, dealers do not accept payments made via SIM cards or eSIM cards in this way, or do not have the necessary infrastructure for such payments, which are usually settled via mobile wireless service providers. The aforementioned document therefore describes a method for generating a virtual credit card or virtual token at a payment service provider, which can then be associated with a SIM card or eSIM card in order to make payments. In this case, the only prerequisite for normal payment is that the user has authenticated his identity on his smartphone accordingly, for example by logging into the payment application or, if the application is continuously active, by authenticating his identity on his smartphone accordingly, for example by means of a PIN, by unlocking the smartphone via biometric recognition, etc. The disadvantage is that anyone who has access to the smartphone can use it to make payments as long as they know the PIN or the login information. Therefore, the security requirements here are relatively low.

[0004] In addition, it is known from the prior art that payments can also be made from a vehicle. For this, see, for example, EP 3931 782 A1 or its international counterpart WO 2021 / 204411 A1.

[0005] In addition, the prior art also recognizes the possibility of making payments from the vehicle via an eSIM card, for which see US2020 / 0193411 A1. Before the user can use a corresponding mobile terminal device such as a smartphone to make a payment, the payment task is assigned to the corresponding user based on the user's seat in the vehicle, such as through a camera.

[0006] That is, on the one hand, according to the prior art discussed now, people want to be able to make payments from the vehicle. On the other hand, when using virtual payment cards or virtual tokens associated with SIM cards or eSIM cards, there are security issues within the framework of the prior art discussed at the beginning of the article. Summary of the invention

[0007] It is therefore an object of the present invention to provide an improved method for paying for goods and / or services via a SIM card or an eSIM card from a vehicle.

[0008] This object is achieved by a method having the features of claim 1, in particular the characterizing part of claim 1. Advantageous embodiments and developments of the solution according to the invention are given in the dependent claims.

[0009] In the method according to the invention, similar to the prior art described at the beginning, a SIM card or eSIM card in a mobile radio device of an authorized user is used, which is associated with a virtual payment card or virtual payment token generated by a payment service provider.

[0010] In this case, the method according to the invention uses a mobile radio device that is integrated in the vehicle. In the context of the invention, such integration of the mobile radio device in the vehicle means that the mobile radio device is a fixed component of the vehicle and is correspondingly fixedly connected to the vehicle's operating system and sensor system. In the context of the invention, "fixed" means that it is not a smartphone or similar device that is connected via software or a docking station, but a real mobile radio device that is part of the vehicle's electronic system and is usually not carried outside the vehicle by the user.

[0011] The mobile radio device integrated in the vehicle is now used to determine a set of parameters related to the user, which at least includes the user ID of the user. In contrast to the prior art, the set of parameters, which can be a vector of different parameters, is determined on the vehicle side, by a server of the vehicle manufacturer, which is located outside the vehicle and is in communication connection with the vehicle, which is usually referred to as the vehicle backend. The determined set of parameters is transmitted by the server to the mobile radio service provider. In addition, the vehicle in which the mobile radio device is integrated determines a set of parameters related to the vehicle, which is user-specific, i.e., both the vehicle and the user are taken into account. For example, the set of parameters can include a vehicle identification number, which is simultaneously associated with the user identification code on the server outside the vehicle if the user is the owner of the vehicle or is known or stored as a user of the vehicle. The user-specific set of vehicle-related parameters is then transmitted to the mobile radio service provider and associated by the mobile radio service provider with the SIM card or eSIM card of the mobile radio device of the vehicle.

[0012] Thus, similar to the current technology described at the beginning of the article, a virtual payment card or a virtual payment token is used for payment. At the same time, a decisive security advantage is that the parameter set associated with the SIM card or eSIM card is compared with the corresponding parameter set at the mobile wireless service provider and / or the parameter set stored on the vehicle-external server of the vehicle manufacturer. Comparing the parameter set associated with the SIM card or eSIM card with the parameter set at the mobile wireless service provider and / or the parameter set stored on the vehicle-external server of the vehicle manufacturer, which is independent of it, can be used for user authentication, so that payments can be made in a very reliable and secure manner, and the payment task can be assigned to the user who is about to pay.

[0013] According to a very advantageous refinement of the method according to the invention, it can be provided that, during payment, a communication connection is established between the mobile radio device and the mobile wireless service provider and / or the vehicle-external server, so that a virtual payment card or a virtual payment token associated with the SIM card or the eSIM card is transmitted to the mobile radio device, and a parameter set associated with the SIM card or the eSIM card is compared with a corresponding parameter set at the mobile wireless service provider and / or a parameter set stored on the vehicle-external server of the vehicle manufacturer, so as to verify the identity of the user. In other words, the identity verification is carried out almost simultaneously with the transmission of the virtual payment card or the virtual payment token, so that the authentication data required for the payment is transmitted to the provider of the goods and / or services during the payment. In this way, the payment can be made directly, so that the provider of the goods and / or services can process the payment very conveniently and efficiently without actively intervening in the identity verification.

[0014] According to a very advantageous alternative design, it can also be designed here that when associated with a SIM card or an eSIM card, the virtual payment card or virtual token and the parameter set can also be stored on the SIM card or the eSIM card. In this way, all the information required for payment is located on the SIM card or the eSIM card, so that if the mobile radio device is not connected to the Internet during the payment process, this payment scenario can still be realized. In this case, different virtual payment cards and / or virtual payment tokens can be stored accordingly for use in different payment processes. In addition, it is also conceivable to generate only one payment token or one virtual payment card and use it for a variety of different payment processes. According to a very advantageous improved design, the virtual payment card or virtual payment token and the parameter set can have a validity period so that, for example for security reasons, it automatically expires within a certain period of time after generation and can no longer be used.

[0015] As mentioned above, the advantage of this storage operation here is that payments can still be made even when the mobile radio device is not connected to the Internet via mobile wireless. For the data stored on the SIM card or eSIM card, the associated virtual payment card or virtual payment token and the parameter set associated with the SIM card or eSIM card can be transmitted to the provider of goods and / or services when making a payment. The provider of goods or services, such as a dealer, a gas station, a toll station, a ferry, etc., then directly (or indirectly through a payment service provider) initiates the comparison of the parameter set transmitted to him with the corresponding parameter set at the mobile wireless service provider and / or the parameter set stored on the vehicle-external server of the vehicle manufacturer. Such methods are also called 3D authentication, because multiple parties and different data paths are used for identity authentication. Here, "initiate" means that the provider of goods and / or services triggers the comparison, preferably through the payment service provider as an intermediary. For the provider of goods and / or services, this has a decisive advantage, namely that it only needs to communicate through traditional communication channels that already exist with the payment service provider (such as credit card companies or similar companies). This allows all necessary processes to be handled by traditional hardware and / or communication channels at the provider of goods and / or services, eliminating the need to meet any additional requirements beyond those that are already required for 3D authentication.

[0016] In addition, according to another very advantageous embodiment of the method of the invention, the data collected by the vehicle sensors are incorporated into the user-related parameter set or added to the user-related parameter set by the user. This will further increase security, because the vehicle's sensors can collect different values ​​related to the user, which are correspondingly known to the vehicle manufacturer's vehicle-external server and can therefore be incorporated into the user-related parameter set, such as a multidimensional vector, thereby increasing the security of the identity verification.

[0017] According to a particularly advantageous refinement, the user-related parameter set may include at least biometric data, name, e-mail address, bank information, telephone number, driving behavior, seat settings, vehicle access rights, data on driving rights and / or body data collected, for example, by sensors or cameras in the seat. These data may form the user-related parameter set individually, in combination with each other, or in the form of selected groups of the above data, or may be part of the user-related parameter set. If the data collected by the vehicle sensors are also included, the advantage is that the data collection is relatively simple on the one hand, and on the other hand, these data can ensure high security. For example, if the vehicle has biometrically controlled access rights, which can control the user's access rights based on fingerprint, iris recognition, voice analysis and / or similar functions, then these data have already been collected and are known and can be used for the user-related parameter set. Other forms of access rights can also be used, such as establishing an NFC connection with a smartphone, smart watch, smart bracelet, etc. that has access rights. The fact that a person who then pays using a mobile radio device integrated in the vehicle has access rights to the vehicle alone is already of relatively high value in terms of the security of the identity verification.

[0018] Then, through other parameters or data, such as driving behavior or seat settings, in particular through a vehicle manufacturer's external server, it is confirmed again that the user with vehicle access and driving rights is indeed the person who actually uses the vehicle, because his typical seat settings, typical driving behavior, etc. have been identified.

[0019] At the same time, according to a very advantageous design of the method according to the invention, the user-specific vehicle-related parameters can at least include the vehicle identification number and / or the sensor configuration available in the vehicle. The vehicle identification number is a unique identifier of the vehicle and is represented internationally by the abbreviation VIN (Vehicle Identification Number). In addition, different vehicles are now equipped with different sensors, so that the configuration of the available sensors can also form suitable parameters to identify the vehicle, or at least distinguish different vehicles. In addition, if the corresponding sensor data is used in the user-related parameters to create a parameter set, these sensor configurations must also be available in the corresponding vehicle, otherwise, a meaningful identity authentication cannot be carried out. For example, if the user-related parameter set contains the user's weight, this also requires that the weight can be collected. For example, this can be done by a corresponding sensor in the vehicle seat. Therefore, if on the one hand this weight is now a component of the user-related parameter set, and on the other hand the sensor configuration in the user-specific vehicle-related parameter set indicates that the sensor required to collect the weight is not available, this can already constitute a clear sign of potential abuse and may lead to a refusal to pass the identity authentication.

[0020] Furthermore, in a particularly advantageous embodiment of the method according to the invention, it is provided that the virtual payment card or virtual payment token is created and transmitted as a virtual payment card or virtual payment token with an encryption program. For example, such a virtual payment card with an encryption program can increase security, because in this way, it is not possible to make payments using the data of the virtual payment card alone, which can prevent abuse, but must always be combined with a corresponding encryption program, thereby ensuring security. In principle, this is known in conventional methods based on the prior art and further increases security, especially in the case of payments being carried out from the vehicle.

[0021] In addition, according to a particularly advantageous refinement of the method according to the invention, the comparison of the parameter sets takes into account changes over time in the individual parameters of the parameter sets by means of machine learning methods. For example, for a parameter set consisting of a multidimensional vector, the value of one or another parameter may change over time. This is the case in particular when data on user behavior are included in the parameter set. For example, driving behavior, a set seat position or the like may change over time because the user makes corresponding adjustments thereto. By means of machine learning methods, these adjustments can be identified, or also changes over time, such as changes in the weight of the user or the like, can be identified and taken into account accordingly. These parameters can be tracked accordingly by means of machine learning, so that during the comparison the system performing the comparison can be trained accordingly, and the parameter set can still be considered identical during the authentication if a certain parameter of the parameter set has undergone a minor change that could in principle have occurred. In this way, it is possible to effectively avoid unnecessary rejections of authentication for minor deviations in the specific data of the parameter set, and the system can still reliably determine whether a slightly changed user's driving habits are a temporary or gradual change, and can still in principle assign the use of the vehicle to the user.

[0022] According to a particularly advantageous improvement of the method, different weights can be applied to specific parameters when comparing parameter sets. For example, this makes it possible to apply a higher weight to explicit parameters than to parameters that may be subject to continuous or temporary changes. This also makes it possible to adjust the reliability of the identity verification in a desired way. But it is also possible to apply weights in another way, so that, for example, the weight of parameters in the parameter set or vector that reflect the user's behavior is higher. The background for this consideration may be that it is much more difficult to imitate the user's behavior than for a third party to intercept data such as the user's name, telephone number, etc. and illegally use them in the method described here.

[0023] In addition, by using such machine learning methods, it is possible to respond more appropriately to deviations when using parameters that describe user behavior characteristics. For example, the system can be trained to identify deviations determined by machine learning during adjustment and deviations that currently occur and are within the range of such deviations that have been previously determined as allowed deviations, so that when comparing parameter sets, these parameter sets are evaluated as "same", thereby approving identity verification. If the deviations that now appear are more serious than those detected under normal circumstances, there may be such a situation that, for example, another person is driving the vehicle and exhibits completely different driving behavior, or, for example, although the authorized user is driving the vehicle, he is under the influence of, for example, drugs or similar drugs. For this situation, in order to protect the authorized user or allow the authorized user to protect himself, the method according to the present invention can be designed to refuse identity verification, or at least limit the maximum amount of payment, so that, for example, users under the influence of drugs cannot spend large sums of money, or prevent unauthorized users from paying for expensive goods and / or services at the expense of the authorized user.

[0024] As mentioned above, the virtual payment card or virtual payment token can be stored accordingly or, if there is an Internet connection, can also be transmitted to the mobile radio device during payment. In practice, it can be designed, for example, to use one virtual payment card or one virtual payment token for multiple payment processes. In order to increase security, it can then be designed that the payment token is updated accordingly at regular intervals to ensure that the corresponding parameter set is verified at least from time to time. Similarly, when the virtual payment card or virtual payment token is associated and managed at the mobile wireless service provider and / or the vehicle manufacturer's vehicle-external server, similar operations can also be taken, even in the case of an Internet connection during the payment process. In an alternative design solution that is preferred for security reasons, the virtual payment card or virtual payment token is updated for each payment process, but this solution increases the cost accordingly. In this way, for each payment process requested, a corresponding virtual payment card or virtual payment token will be generated and used according to the above method. This operation requires that the mobile radio device is connected to the Internet during the payment process, or as an alternative, as mentioned above, different virtual payment cards or virtual payment tokens can also be stored on the SIM card or eSIM card. For example, three or four cards or three or four tokens could be saved on a SIM or eSIM card, so that these three or four payment processes could be processed without an Internet connection, and then these possible payment process "stocks" could be replenished immediately as soon as the Internet connection is restored.

[0025] As has been mentioned repeatedly above, the comparison can be performed using either a mobile wireless service provider or a vehicle-external server of the vehicle manufacturer. In practice, for the comparison, it is basically sufficient to communicate with the mobile wireless service provider, which will correspondingly obtain a virtual payment token or a virtual payment card from the payment service provider and associate it with the SIM card or eSIM card. As an alternative or in addition, in order to enable the vehicle-external server of the vehicle manufacturer to perform this comparison, according to a particularly advantageous embodiment of the method according to the invention, it can be designed that the mobile wireless service provider forwards the virtual payment card or virtual payment token to a server outside the vehicle and stores it there, or the payment service provider transmits the virtual payment card or virtual payment token to a server outside the vehicle at the same time as transmitting it to the mobile wireless service provider and stores it there. In other words, the payment service provider can directly hand over the virtual payment card or virtual token to the mobile wireless service provider and the server outside the vehicle at the same time. As an alternative, according to this advantageous embodiment of the method according to the invention, the payment service provider can also only transmit it to the mobile wireless service provider, and then the latter can forward it to the server outside the vehicle. In any case, this allows a comparison with the mobile wireless service provider or the server outside the vehicle (in other words, here with the vehicle manufacturer). This would provide an additional option if, for example, one of these institutions is temporarily unreachable or for other similar reasons. In addition, this would allow both the mobile wireless service provider and the vehicle manufacturer to play the role of service provider and ultimately process the payment for the user. From an economic point of view, this could also involve risk assessment issues, so that the amount paid via the SIM card or eSIM card would be borne by the mobile wireless service provider or the vehicle manufacturer, who would then request the amount incurred from the user.

[0026] Furthermore, further advantageous embodiments of the method according to the invention are given by means of the exemplary embodiments which are described in more detail below with reference to the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] The single FIGURE schematically shows a system for carrying out the method according to the invention. DETAILED DESCRIPTION

[0028] The only attached Figure 1 1 shows a vehicle 1 in which a mobile radio device referenced 2 is installed for paying for goods and / or services at a goods and / or service provider 3 via an integrated SIM card or an eSIM card.

[0029] The vehicle-external server 4, shown here as a cloud, is connected to the vehicle 1 or its mobile radio device 2 and, for example, provides a manufacturer-specific application, wherein the user of the vehicle 1 has a corresponding account, which is associated with the SIM card / eSIM card of the mobile radio device 2 in the vehicle 1. In this case, there is another communication connection between the vehicle-external server 4 of the vehicle manufacturer and a mobile radio service provider 5. The mobile radio service provider 5 itself is in communication connection with a payment service provider 6, such as a credit card company or the like. In addition to this, the mobile radio service provider 5, like the vehicle 1 or its mobile radio device 2, or in addition or as an alternative to it, the vehicle-external server 4, i.e. the vehicle manufacturer, is connected to a bank 7 of the user of the vehicle 1 as a customer.

[0030] To illustrate the process, Figure 1 In the figure, six specific method steps are symbolically indicated by circled numbers 1 to 6. The first step is mainly carried out in the ecosystem of the vehicle manufacturer and then on the vehicle-external server 4, if necessary in a communication connection with the vehicle 1 or its mobile radio device 2 and the user of the vehicle 1, in which initial parameters are collected, which are usually already located on the vehicle-external server 4. These parameters can include, for example, the user's name, his e-mail address, the user's biometric data, his driving behavior, his seat settings, his bank information, his telephone number, etc. These data then form a user-related parameter set or at least form part of such a user-related parameter set and can be used for authentication in the subsequent process.

[0031] Furthermore, a connection between the user data and the corresponding data of his vehicle 1 is usually present on the vehicle-external server 4, so that vehicle-related parameters, such as the vehicle identification number, the sensor configuration of the vehicle, etc., can be associated with the user account and thus with the user-related parameter set. This information can be used to identify the physical unit of the vehicle 1 and the mobile radio device 2 accordingly. In particular, if the user has several different vehicles 1, it is important to identify the vehicle identification number in order to be able to make an unambiguous assignment and, if necessary, to prevent payment without an unambiguous assignment. Other parameters collected by the sensors of the vehicle 1, such as transmitted telemetry data, can also be used, for example, in order to detect the driving behavior of the user and to supplement them in order to be able to identify the user as unambiguously as possible.

[0032] This now results in a user-specific parameter set on the one hand and a vehicle-specific parameter set on the other hand, which in particular form a user-specific vehicle-specific parameter set by linking with the user data. These parameter sets are now transmitted in a second step to the mobile radio service provider 5, which links the parameter sets with the user's SIM card or eSIM card in the mobile radio device 2 of the vehicle 1. This can be done periodically or always when one of the parameter sets changes, so that the change causes the vehicle-external server 4 to send the corresponding parameter set to the mobile radio service provider 5 in order to implement the update.

[0033] Based on the received data, the mobile radio service provider 5 now additionally creates a risk profile for the corresponding user, which is usually necessary because payments are processed on a credit basis. This means that the mobile radio service provider 5 first bears the costs and, for example, bills its customers regularly, which makes it necessary for the mobile radio service provider 5 to be able to assess the risk, i.e., whether the bill will eventually be paid. As an alternative to the mobile radio service provider 5, the vehicle-external server 4 and ultimately the vehicle manufacturer, which is also relatively familiar with its customers, can also be responsible for this risk assessment, or in particular can directly assume the role of first implementing the payment on a credit basis and then further settling with its customers. That is to say, if necessary, the vehicle manufacturer can fully or partially assume the role of the mobile radio service provider 5 in the processing of the payment.

[0034] Next, in the step marked with "three", a request is sent by the mobile wireless service provider 5 to a payment service provider 6, such as a credit card company. The purpose of the request is to create a virtual payment card or virtual payment token with or without an encryption program, preferably with an encryption program due to security issues. In this respect, the process is consistent with conventional prior art.

[0035] In a fourth step, the payment service provider 6 sends the virtual payment card or virtual payment token, in particular and preferably with an encryption program, to the mobile wireless service provider 5, which associates the virtual payment card or virtual payment token with the SIM card or eSIM card, the user-related parameter set and the user-specific vehicle-related parameter set. In addition, the virtual payment card or virtual payment token can be preferably transmitted to the ecosystem of the vehicle manufacturer, that is, to the vehicle-external server 4, which also stores the data. In this case, the virtual payment card or virtual payment token can be generated separately for each payment process, or it can be generated or updated regularly, depending on the security requirements imposed on the system.

[0036] Through this operation step, the user of the vehicle 1 can then pay for goods and / or services directly through the vehicle 1, without the need for a credit card or the like. However, since the goods and / or service provider 3 generally does not support payment via a SIM card or eSIM card, a virtual payment card or virtual payment token can be associated with a SIM card or eSIM card and ultimately used for payment, thereby solving the problem in this way.

[0037] Next, in Figure 1 The actual payment is carried out in the fifth step of the process, for example, if the vehicle 1 or its mobile radio device 2 has an Internet connection, then with the start of the payment process, the mobile wireless service provider 5 transmits a virtual payment card or a virtual payment token to the mobile radio device 2. Next, the parameter set associated with the SIM card or eSIM card is compared with the parameter set stored on the vehicle-external server 4 in order to finally verify the identity of the user of the vehicle 1. That is, in the fifth step, the commodity and / or service provider 3 in this scenario will directly obtain the payment information after the identity is verified, so that the payment can be processed directly.

[0038] The so-called 3D authentication method can be used as an alternative to the fifth step. This method does not require an Internet connection. In this case, the virtual payment card or virtual payment token is stored on the SIM card or eSIM card of the mobile radio device 2 together with the corresponding parameter set. These data will be transmitted to the goods and / or service provider 3 when paying. According to the dotted arrow, the goods and / or service provider contact the mobile wireless service provider 5 or the vehicle external server 4 to initiate a comparison on the mobile wireless service provider or the vehicle external server to verify the identity. Since the provider 3 usually has a connection with the payment service provider 6, such as a credit card company, he will usually use and prefer this path to initiate the comparison. Therefore, the dotted arrow will start from the provider 3 to the payment service provider 6. Next, the payment service provider will forward the corresponding request to the mobile wireless service provider 5 and / or the vehicle external server 4 through the established channel, and the mobile wireless service provider and / or the vehicle external server will then feedback the identity authentication in the case of verification, so that the payment process can be reliably completed for the goods and / or service provider 3.

[0039] As in a typical credit process, the payment is first handled by the mobile wireless service provider 5 or the vehicle manufacturer (here represented by the vehicle-external server 4). These institutions then contact the user of the vehicle 1, the customer's bank 7, in order to have the customer pay the bill accordingly. This is correspondingly shown here as step 6 and is triggered by the mobile wireless service provider 5 in most scenarios, but according to the connection shown by the dashed line, it is also possible to choose to be responsible for the vehicle-external server 4 or the vehicle manufacturer accordingly.

[0040] Since a parameter set, which can be designed, for example, as an n-dimensional vector, may contain different parameters that may change continuously, such as the user's weight, the user's driving behavior, etc., it is reasonable that when comparing the parameter set associated with the SIM card or eSIM card for payment purposes with the parameter set stored on the vehicle-external server 4 and / or at the mobile wireless service provider 5, a certain tolerance can be given before the parameter set is deemed to be different and thus the authentication is rejected, especially for parameters that are sensitive to this. Machine learning methods are particularly suitable here to achieve reliable functions. In this way, continuous changes, such as changes in the user's driving behavior, can be detected. These changes are usually relatively small and can be tracked accordingly by machine learning methods. Such methods can then also be trained so that when comparing the current parameter set (for example on the vehicle manufacturer's vehicle-external server 4) with the parameter set transmitted for authentication during payment, even if there are slight deviations, these parameter sets are still deemed to be "the same". In this way, the knowledge gained from the machine learning method can be used to recognize that although the user's driving behavior has changed, it still basically corresponds to the known pattern of the user, so that it can be recognized with a very high probability that the user is actually driving the vehicle 1. However, if the deviation exceeds a threshold value that usually occurs during machine learning, then in this case it can also be assumed that the change is sufficiently drastic that another user is using the vehicle and that the authentication should be rejected. As mentioned at the beginning, it can also be considered as an alternative that the same user is moving the vehicle 1 but is under the influence of drugs, for example, and is in a state of confusion. In this case, the authentication can also be rejected.

[0041] In both cases, if the user is indeed an authorized user, but this is not recognized by the system, in order to avoid being unable to pay at all, the payment can be limited to a certain maximum amount for such cases. In this way, in possible exceptional cases, the user can at least still pay smaller amounts, such as to refill a certain amount of gasoline, etc. At the same time, the risk for the authorized user will be minimized, because if the payment is not triggered by him, the subsequent losses will be limited to this maximum amount.

Claims

1. A method for paying for goods and / or services by an authorized user using a mobile radio device (2) with a SIM card or an eSIM card, wherein: The user-related parameter set is transmitted to the mobile wireless service provider (5) corresponding to the SIM card or the eSIM card, and the mobile wireless service provider associates the parameter set with the SIM card or the eSIM card. After that, the mobile wireless service provider (5) sends a request to the payment service provider (6), and the payment service provider (6) creates a virtual payment card or a virtual payment token and transmits it to the mobile wireless service provider (5). After that, the mobile wireless service provider (5) associates the virtual payment card or the virtual payment token with the SIM card or the eSIM card. It is characterized in that The mobile radio device (2) is integrated in a vehicle (1), wherein a user-related parameter set is determined by a vehicle-external server (4) of a vehicle manufacturer associated with the vehicle (1) and transmitted to the mobile wireless service provider (5), and furthermore, a user-specific vehicle-related parameter set is determined by the vehicle-external server (4) of the vehicle manufacturer and transmitted to the mobile wireless service provider (5), and the mobile wireless service provider also associates the user-specific vehicle-related parameter set with a SIM card or an eSIM card, wherein, when paying for goods and / or services, the parameter set associated with the SIM card or the eSIM card is compared with a corresponding parameter set at the mobile wireless service provider (5) and / or a parameter set stored on the vehicle-external server (4) of the vehicle manufacturer in order to verify the identity of the user.

2. The method according to claim 1, It is characterized in that When making a payment, a communication connection is established between the mobile radio device (2) and the mobile wireless service provider (5) and / or the vehicle external server (4) to transmit a virtual payment card or virtual payment token associated with a SIM card or an eSIM card, and the parameter set associated with the SIM card or the eSIM card is compared with the corresponding parameter set at the mobile wireless service provider (5) and / or the parameter set stored on the vehicle external server (4) of the vehicle manufacturer to verify the identity of the user. Thereafter, the data required for payment and with verified identity is transmitted to the commodity and / or service provider (3).

3. The method according to claim 1, It is characterized in that When associated with a SIM card or eSIM card, the virtual payment card or virtual payment token and the parameter set are saved on the SIM card or eSIM card.

4. The method according to claim 3, It is characterized in that When making a payment, a virtual payment card or a virtual payment token associated with a SIM card or an eSIM card and a parameter set associated with the SIM card or the eSIM card are transmitted to the commodity and / or service provider (3), and the commodity and / or service provider directly initiates or initiates through the payment service provider (6) a comparison of the parameter set transmitted to the commodity and / or service provider with a corresponding parameter set at the mobile wireless service provider (5) and / or a parameter set stored on the vehicle external server (4) of the vehicle manufacturer.

5. The method according to claim 3 or 4, It is characterized in that Set a validity period for the virtual payment card or virtual payment token and parameter set saved on the SIM card or eSIM card.

6. The method according to any one of claims 1 to 5, It is characterized in that User data collected by vehicle sensors will be included in the user-related parameter set.

7. The method according to any one of claims 1 to 6, It is characterized in that The user-related parameter set includes at least biometric data, name, email address, bank information, phone number, driving behavior, seat settings, vehicle access rights, driving rights and / or physical data.

8. The method according to any one of claims 1 to 7, It is characterized in that The user-specific vehicle-related parameter set comprises at least a vehicle identification number and / or a sensor configuration available in the vehicle (1).

9. The method according to any one of claims 1 to 8, It is characterized in that Virtual payment cards or virtual payment tokens are created and transmitted with encryption procedures.

10. The method according to any one of claims 1 to 9, It is characterized in that The comparison of parameter sets takes into account the changes over time in the individual parameters of the parameter sets through machine learning methods.

11. The method according to claim 10, It is characterized in that Apply different weights to specific parameters when comparing parameter sets.

12. The method according to claim 10 or 11, It is characterized in that When using parameters that describe user behavior characteristics, if the deviation is significantly greater than the deviation previously determined by machine learning during adjustment, identity authentication is rejected or the maximum payment amount is limited.

13. The method according to any one of claims 1 to 12, It is characterized in that The virtual payment card or virtual payment token is updated periodically or for each payment process.

14. The method according to any one of claims 1 to 13, It is characterized in that The mobile wireless service provider (5) forwards the virtual payment card or virtual payment token to the vehicle manufacturer's external server (4) and stores it at the vehicle manufacturer's external server, or the payment service provider (6) transmits the virtual payment card or virtual payment token to the vehicle manufacturer's external server (4) while transmitting it to the mobile wireless service provider (5) and stores it at the vehicle manufacturer's external server.

Images