Barcode chip card.

Abstract

The present invention relates to a smart card (100) configured to be able to carry out contactless banking transactions between a customer and a merchant, the card comprising: • a support comprising a front face and a back face, • a secure element in which a secret code (PIN) is recorded, and • an antenna. It is essentially characterized in that: • the secure element further comprises means for generating a two-dimensional barcode, autonomous and offline, the barcode allowing a contactless banking transaction between the debtor and the creditor when said barcode is scanned by an optical device of the creditor; • the card comprises display means (160) capable of displaying said generated barcode.

Description

Title of the invention: Barcode chip card.

[0001] The present invention relates to the field of payment by two-dimensional barcode, in particular a QR code.

[0002] In this field, there are the following two main modes of transaction.

[0003] A first mode of transaction concerns creditor (merchant) / debtor (customer) transactions.

[0004] In this mode of transaction, there are currently the following three transaction schemes.

[0005] A first diagram is considered static and called “static”.

[0006] In this first diagram, the merchant has a two-dimensional barcode, accessible to customers. The merchant's two-dimensional barcode is equivalent, for example, to the merchant's bank details. In operation, a customer scans this two-dimensional barcode, typically via an application on their smartphone, and the customer enters the amount of the transaction they wish to make.

[0007] The transaction amount and the time of the transaction are therefore initiated by the customer.

[0008] A second scheme is considered dynamic and called “merchant present”.

[0009] In this second scheme, the merchant generates a unique two-dimensional barcode that includes the transaction amount. In operation, a customer scans this two-dimensional barcode, typically via an application on their smartphone, and authorizes the payment.

[0010] The transaction is therefore initiated by the merchant. The amount of the transaction is determined by the merchant and this amount is encoded in the two-dimensional barcode.

[0011] In general, the two-dimensional barcode is unique, that is, there is a bijection between the transaction and the two-dimensional barcode. In other words, two transactions involving the same amount require two two-dimensional barcodes.

[0012] A third scheme is considered dynamic and called “client present”.

[0013] In this third scheme, the customer generates a unique two-dimensional barcode, which includes the transaction amount, generally on their smartphone. In operation, a merchant scans this two-dimensional barcode, typically via an application on their smartphone, and triggers the payment, i.e. makes a debit from the customer's account.

[0014] A second mode of transaction concerns “peer to peer” or P2P transactions, typically between two individuals. This second mode of transaction operates according to the principle of the first static scheme.

[0015] Regardless of the transaction method or scheme, this requires a smartphone and a dedicated application. However, by concentrating a number of applications on a single smartphone, the risk of fraud and the risk of the severity of the effects of fraud increases if the smartphone is stolen, lost or hacked.

[0016] Unlike smart cards, which operate on secure, closed systems, smartphones operate in open, online, interconnected systems that are more susceptible to fraudulent attacks.

[0017] In this context, the present invention aims to propose a solution making it possible to implement a dynamic “client present” or P2P scheme, in the presence of a smart card.

[0018] Also, according to a first of its objects, the invention relates to a smart card configured to be able to carry out contactless banking transactions between a debtor and a creditor, the card comprising:

[0019] • a support comprising a front face and a back face,

[0020] • a secure element in which a secret code (PIN) is recorded, and

[0021] • an antenna.

[0022] It is essentially characterized in that:

[0023] • the secure element further comprises means for generating a barcode at two-dimensional, stand-alone and offline, the barcode enabling a contactless banking transaction between the debtor and the creditor when said barcode is scanned by an optical device of the creditor, and

[0024] • the card comprises display means capable of displaying said barcode generated.

[0025] For example, one of the sides includes personal data relating to the cardholder.

[0026] A “two-dimensional barcode” is indistinctly called a “2D barcode” or “2D code”, and is presented for example in the form of a QR Code. For brevity, it is referred to as a “barcode” hereinafter.

[0027] It can be provided that the generated barcode is a dynamic barcode, each generated barcode being unique and secure, each transaction generating a respective barcode.

[0028] It may be provided that the smart card comprises a unique static two-dimensional barcode, comprising an identifier relating at least to the cardholder and also making it possible to establish peer-to-peer (P2P) transactions between two individuals, one of whom is a creditor and the other a debtor,

[0029] said static two-dimensional barcode being:

[0030] • displayable on said display means; or

[0031] • visible on any of the front or back sides of the smart card, integral with said face.

[0032] At least one of:

[0033] • means for activating the display means, for displaying the barcode dynamic or static two-dimensional barcode, and

[0034] • means for activating the means for generating a two-digit barcode dynamic dimensions.

[0035] It can be provided that the activation means comprise:

[0036] • An input device for entering a secret code or recording fingerprints; and

[0037] • Comparison means, configured to compare the entered secret code or the fingerprints to a pre-recorded reference code or to reference fingerprints pre-recorded in a memory of the secure element; and to generate a signal representative of the result of the comparison, the activation of the means for generating a two-dimensional barcode being controlled by said signal.

[0038] It can be provided that the input device comprises at least one of:

[0039] • a keyboard integrated into the card;

[0040] • a set of at least one button integrated into the card;

[0041] • an optoelectronic transducer, electrically connected to the secure element;

[0042] • a microelectromechanical system (MEMS); and

[0043] • a fingerprint reader

[0044] the entered secret code corresponding respectively:

[0045] • to the code entered on the keyboard;

[0046] • to a sequence of activation of the set of at least one button;

[0047] • to a sequence of shutters of the optoelectronic transducer;

[0048] • to an actuation sequence of the microelectromechanical system (MEMS); and

[0049] • to a set of metrics between predetermined biometric points on a fingerprint image.

[0050] It can be predicted that:

[0051] • When the card includes a set of at least one button,

[0052] i. If the card includes a single button, the activation sequence is a function of at least one of: the total number of activations of said button in a predetermined time window, the duration of each activation and the time interval between two consecutive activations;

[0053] ii. If the card comprises a plurality of buttons: the activation sequence is a function of at least one of: the total number of activations of each of said buttons in a predetermined time window, the duration of each activation and the time interval between two consecutive activations;

[0054] • When the card includes an optoelectronic transducer,

[0055] i. the sequence of shutters of the optoelectronic transducer is a function of at least one of: the total number of shutters in a predetermined time window, the duration of each shutter and the time interval between two consecutive shutters. • When the card includes a microelectromechanical system (MEMS), i. the actuation sequence of the microelectromechanical system (MEMS) is a function of at least one of: the total number of actuations in a predetermined time window, the duration of each actuation and the time interval between two consecutive actuations

[0056] It is also possible to provide an electric battery, optionally rechargeable, to electrically power the means for generating a two-dimensional bar code.

[0057] According to another of its objects, the invention relates to a method for securing a transaction between a debtor and a creditor, the debtor being equipped with a chip card according to the invention, the creditor being equipped with a payment terminal connected to a banking network, the method comprising steps consisting of:

[0058] • Generate a dynamic two-dimensional barcode by the secure element of the smart card, the barcode enabling a contactless banking transaction between the debtor and the creditor for a previously defined amount when said barcode is scanned by an optical device of the creditor;

[0059] • Display said generated dynamic barcode on card display means chipped;

[0060] • Scanning said dynamic barcode by an optical device in connection with the creditor's payment terminal, decode said dynamic barcode and extract the data enabling the banking transaction;

[0061] • Issue a request for authorization of the banking transaction by the terminal of payment of the creditor, the request including said extracted data.

[0062] The invention also relates to a method for securing a peer-to-peer transaction between a debtor and a creditor, at least the debtor being equipped with a smart card according to the invention, the method comprising steps consisting of:

[0063] • define the amount of a contactless banking transaction between the debtor and the creditor;

[0064] • Scan the unique static two-dimensional barcode of the smart card of the debtor by a communicating object of the creditor;

[0065] • decode said static barcode;

[0066] • extract the data enabling the banking transaction;

[0067] • Issue a request for authorization of the banking transaction by the com object communicating with the creditor, the request including said extracted data.

[0068] There are transactions that are implemented by a smartphone equipped with an application that generates a 2D code. But such solutions are inherently online and therefore present a certain attack surface.

[0069] On the contrary, the smart card according to the invention is advantageously offline, it is therefore more secure.

[0070] Other characteristics and advantages of the present invention will appear more clearly on reading the following description given by way of illustrative and non-limiting example and made with reference to the appended figures.

[0071] The figures are not to scale. Some details have been omitted and others enlarged, to facilitate understanding.

[0072] DESCRIPTION OF THE DRAWINGS

[0073] [Fig. 1] illustrates a smart card according to the prior art,

[0074] [Fig.2] illustrates an embodiment of a smart card according to the invention.

[0075] [Fig.l] a smart card according to the prior art. It allows a transaction fi financial, banking, between a customer and a merchant, that is to say between a debtor and a creditor.

[0076] Conventionally, a smart card 100 comprises a support and meets standards.

[0077] The support comprises a front face and a back face, the front face often comprising data, in particular personal data relating to the card holder, for example individual data of the card holder, at least the name and first name of the holder of the smart card 100.

[0078] The smart card 100 also generally includes a card number 120. In general, the number 120 is a 16-digit, unique, generally standardized number.

[0079] The smart card 100 also comprises a secure element, allowing secure transactions to be established. The secure element is generally included in a module 110.

[0080] A secret code (PIN code) is stored in a memory of the secure element, and sometimes online. In a manner known per se, the completion of a transaction can be subject to the entry of the PIN code.

[0081] For security reasons, the smart card 100 also includes an expiration date 130.

[0082] In a manner not illustrated, the smart card 100 also comprises an antenna which makes it possible to electrically power the module using the antenna when the smart card 100 is powered by a terminal.

[0083] For a so-called “contactless” payment, the smart card 100 is positioned in the magnetic field of a payment terminal, generally on a specific surface thereof. However, this power supply mode is called “contactless” as opposed to the “contact” mode in which metal tips come into contact with the module of the smart card 100. The smart card 100 may comprise a concentrator in electrical connection with the antenna.

[0084] According to the invention, illustrated [Fig.2], the smart card 100 further comprises a set of means described below.

[0085] In particular, the smart card 100 comprises display means 160, for example a display screen or an electronic label.

[0086] The display means 160 are electrically connected to the secure element.

[0087] The secure element further comprises means for generating a two-dimensional barcode, indistinctly called a “2D barcode”, or “2D code” for brevity.

[0088] The 2D code allows a contactless banking transaction between the debtor and the creditor when said barcode is scanned by an optical device of the creditor.

[0089] Preferably, the generated 2D code is a dynamic barcode 151, i.e. a unique and secure 2D code is generated for each transaction. Typically, the dynamic 2D code 151 makes it possible to implement a bank debit.

[0090] The display means 160 are configured to display said generated dynamic 2D code 151.

[0091] In this case, the means for generating the dynamic 2D code 151 are autonomous and offline.

[0092] By “autonomous” we mean that each dynamic 2D code 151 is generated only by the secure element, and is not generated by an external device such as a payment terminal or a smartphone.

[0093] By “offline” we mean that each dynamic 2D code 151 is generated outside the banking network, that is to say is generated only by the smart card itself, provided that the latter is supplied with electrical energy, by on-board means (battery) or external means (smart card reader, payment terminal, smartphone, etc.).

[0094] Preferably, it is provided that the smart card comprises means for activating the means for generating the dynamic 2D code 151.

[0095] It may be provided that the activation means comprise an input device 140 allowing a secret code to be entered.

[0096] For example, a button, such as a push button, can be provided which generates the 2D code as soon as it is pressed. This variant is practical and easy to implement. However, it presents a security flaw in the event of theft of the smart card.

[0097] We can therefore provide another variant in which the 2D code is generated using an authentication factor, in this case “what I know”. In this case, the 2D code is only generated if the bearer enters a secret code using an input device 140.

[0098] For example, the input device 140 is a keyboard integrated into the card, as illustrated in [Fig. 2], in particular a numeric keyboard. In this case, the secret code corresponds to the code entered on the keyboard.

[0099] The input device 140 may also be a set of at least one button integrated into the card, in particular a galvanic button. In this case, the secret code corresponds to an activation sequence of the set of at least one button.

[0100] In a first variant, the card comprises a single button.

[0101] In this case, the activation sequence is a function of at least one of: the total number of activations of said button in a predetermined time window, the duration of each activation and the time interval between two consecutive activations.

[0102] For example, each activation of the button corresponds to a “click”. The code “1234” can be entered by the following sequence: one click, one timeout, 2 successive clicks, one timeout, 3 successive clicks, one timeout and 4 successive clicks.

[0103] In a second variant, the card comprises a plurality of buttons.

[0104] In this case, the activation sequence is a function of at least one of: the total number of activations of said button in a predetermined time window, the duration of each activation and the time interval between two consecutive activations.

[0105] For example, the smart card comprises 4 buttons, each activation of which corresponds to a respective “click”. The code “1234” can be entered by the following sequence: one click of the first button, a time delay, one click of the second button, a time delay, one click of the third button, a time delay and one click of the fourth button. Alternatively, one click of the first button, one time delay, two clicks of the second button, one time delay, three clicks of the third button, one time delay and four clicks of the fourth button can be provided.

[0106] The input device 140 may also be an optoelectronic transducer, electrically connected to the secure element. In this case, the secret code corresponds to a sequence of shutters of the optoelectronic transducer.

[0107] In this case, the activation sequence corresponds to the sequence of shutters of the optoelectronic transducer, which is a function of at least one of: the total number of shutters in a predetermined time window, the duration of each shutter and the time interval between two consecutive shutters.

[0108] For example, each shutter of the optoelectronic transducer corresponds to an increment of 1. The code “1234” can be entered by the following sequence: one shutter, one time delay, 2 successive shutters, one time delay rization, 3 successive shutters, a time delay and 4 successive shutters. The number 0 can be coded for example by a long shutter duration, i.e. greater than a predetermined time value.

[0109] Finally, the input device 140 may also be a microelectromechanical system (MEMS). In this case, the secret code corresponds to an actuation sequence of the microelectromechanical system, similarly to the shutter sequence of an optoelectronic transducer.

[0110] The entered code is compared to a reference code stored in a memory of the secure element. The reference code may be the same or different from the PIN code of the smart card.

[0111] It can therefore be provided that the secure element also comprises comparison means, configured to compare the secret code entered with a reference code recorded in a memory of the secure element.

[0112] In this case, the secure element generates a signal representative of the result of the comparison, and preferably the activation of the means for generating a dynamic 2D code 151 is controlled by said signal.

[0113] In particular, it can be provided that the reference code is the PIN code.

[0114] If the entered code is different from the reference code, then it can be expected that the card emits an error signal, for example a message displayed on the display means 160, or on another peripheral, for example an LED.

[0115] Similarly, the input device 140 may include a fingerprint reader. Fingerprints are in this sense equivalent to a secret code. In this case, the secret code corresponds not to the “what I know” authentication factor but to the “what I am” authentication factor.

[0116] A memory accessible to the secure element comprises a set of metrics between predetermined biometric points on a reference fingerprint image.

[0117] When an individual activates the fingerprint reader, the read fingerprints are compared to the reference fingerprints. In this case, the same biometric points are extracted from the read fingerprints as those of the reference fingerprints. The metrics of the read fingerprints can then be calculated and compared to the metrics of the reference fingerprints.

[0118] The smart card 100 is supplied with electrical energy by an external or on-board energy source.

[0119] For example, it can be provided that the smart card 100 comprises an electric battery, preferably rechargeable, to electrically power the means for generating the dynamic 2D code 151.

[0120] Preferably, the display means 160 are also electrically powered. by the electric battery.

[0121] It can be provided that the smart card 100 further comprises a second 2D code.

[0122] In this case, the second 2D code is a static barcode 150, i.e. identical regardless of the transaction, and makes it possible to establish peer-to-peer (P2P) transactions between a first individual, or debtor, and a second individual, or creditor.

[0123] In this case, the static 2D code 150 is visible from any one of the front or back faces of the smart card 100. It is integral with said face. For example, the static 2D code 150 is engraved by laser printing on said face or a label comprising the static 2D code 150 is stuck on said face, as illustrated in [Fig.2],

[0124] It can also be provided that the static 2D code 150 can be displayed on the display means 160.

[0125] For example, the static 2D code 150 is displayed by default on the display means 160. Upon a trigger, for example the activation of an input device, the dynamic 2D code 151 is displayed on the display means 160, typically for a predetermined duration at the end of which the display means 160 displays the static 2D code 150 again, or a blank display to save energy.

[0126] Preferably, the static 2D code 150 is unique, for example because it includes an identifier relating at least to the cardholder. Typically, the static 2D code 150 is equivalent to an IB AN code, allowing instant transfers. Example of customer-merchant operation

[0127] According to an example for securing a contactless transaction between a debtor (customer) and a creditor (merchant), the customer is equipped with a chip card according to the invention and the creditor (merchant) is equipped with a payment terminal connected to a banking network.

[0128] A transaction amount is previously defined.

[0129] To carry out the transaction, the debtor generates a dynamic 2D code 151 by the secure element of the smart card, for example by entering his PIN code on the input device 140 of the smart card.

[0130] The secure element having verified that the code entered is equal to the PIN code, it sends an instruction to display the dynamic 2D code 151 generated on the display means 160 of the smart card, for example a display screen.

[0131] The creditor can then scan said dynamic 2D code 151 by an optical device connected to the payment terminal, for example a barcode reader, known per se.

[0132] The dynamic 2D code 151 is decoded and the data enabling the transaction banking data are extracted from it.

[0133] Conventionally, a request for authorization of the banking transaction is then issued by the creditor's payment terminal, the request including said extracted data. Example of peer-to-peer operation

[0134] According to an example for securing a peer-to-peer contactless transaction, i.e. between a first individual, or debtor, and a second individual, or creditor, the amount of the contactless banking transaction between the debtor and the creditor is first defined.

[0135] The debtor is equipped with a chip card according to the invention and the creditor is equipped with a barcode reader capable of being connected to a banking network, for example a smartphone.

[0136] To carry out the transaction, it is not necessary to generate a dynamic 2D code 151, only the static 2D code 150 may suffice.

[0137] The debtor simply presents his smart card to the creditor. The creditor can then scan the static 2D code 150 of the debtor's smart card using a communicating object, for example his smartphone.

[0138] The static 2D code 150 is then decoded and the data enabling the banking transaction is extracted from it, in a manner known per se.

[0139] In a manner also known per se, the creditor's smartphone can then send a request for authorization of the banking transaction, the request including said extracted data, to his banking establishment. In this case, it is a request for a bank transfer and not a bank debit.

[0140] Thanks to the present invention, it is possible to implement an instant transfer from account to account.

[0141] Typically, the present invention meets the EMV standard (Europay MasterCard Visa - registered trademarks).

[0142] In operation, the generation of the dynamic 2D code 151 makes it possible to activate the transaction, the amount of which has been previously defined.

[0143] Advantageously, the generated dynamic 2D code 151 does not include the amount of the transaction. To validate the transaction, i.e. send a debit order to the customer's bank account, a creditor can scan this dynamic 2D code 151 with a standard reader or a smartphone. The implementation of the invention therefore does not require the implementation of new readers or the modification of existing barcode readers. Nomenclature

[0144] 100 Smart card

[0145]

[0146]

[0147]

[0148]

[0149]

[0150]

[0151] 110 Module 120 Smart card number 130 Smart card expiry date 140 input device 150 static barcode 151 dynamic barcode 160 display means capable of displaying a dynamic and / or static barcode

Claims

Claims

1. Smart card (100) configured to be able to carry out contactless banking transactions between a debtor and a creditor, the card comprising: • a support comprising a front face and a back face, • a secure element in which a secret code (PIN) is recorded, and • an antenna, in which: • the secure element further comprises means for generating a two-dimensional barcode, the barcode allowing a contactless banking transaction between the debtor and the creditor when said barcode is scanned by an optical device of the creditor; • the card comprises display means (160) capable of displaying said generated barcode; Characterized in that: the means for generating a two-dimensional barcode are autonomous and offline.

2. A smart card (100) according to claim 1, wherein the generated barcode is a dynamic barcode (151), each generated barcode being unique and secure, each transaction generating a respective barcode.

3. Smart card (100) according to any one of the preceding claims, comprising a unique static two-dimensional barcode (150), comprising an identifier relating at least to the cardholder and further enabling peer-to-peer (P2P) transactions to be established between two individuals, one of whom is a creditor and the other a debtor, said static two-dimensional barcode (150) being: • displayable on said display means (160); or • visible on any one of the front or back faces of the smart card (100), integral with said face.

4. Smart card (100) according to any one of claims 2 or 3, comprising at least one of: • means for activating the display means (160), for displaying the dynamic barcode (151) or the static two-dimensional barcode (150), and • means for activating the means for generating a dynamic two-dimensional barcode (151).

5. Smart card (100) according to claim 4, wherein the activation means comprise: • An input device (140) for entering a secret code or recording fingerprints; and • Comparison means, configured to compare the entered secret code or the fingerprints with a pre-recorded reference code or with reference fingerprints pre-recorded in a memory of the secure element; and to generate a signal representative of the result of the comparison, the activation of the means for generating a two-dimensional bar code being controlled by said signal.

6. Smart card (100) according to claim 5, wherein the input device (140) comprises at least one of: • a keyboard integrated into the card; • a set of at least one button integrated into the card; • an optoelectronic transducer, electrically connected to the secure element; • a microelectromechanical system (MEMS); and • a fingerprint reader; the secret code entered corresponding respectively: • to the code entered on the keyboard; • to an activation sequence of the set of at least one button; • to a sequence of shutters of the optoelectronic transducer; • to an actuation sequence of the microelectromechanical system (MEMS); and • to a set of metrics between predetermined biometric points on a fingerprint image.

7. A smart card (100) according to claim 6, wherein: • When the card comprises a set of at least one button, i. If the card comprises a single button, the activation sequence is a function of at least one of: the total number of activations of said button in a predetermined time window, the duration of each activation and the time interval between two consecutive activations; ii. If the card comprises a plurality of buttons: the activation sequence is a function of at least one of: the total number of activations of each of said buttons in a predetermined time window, the duration of each activation and the time interval between two consecutive activations; • When the card includes an optoelectronic transducer, i. the sequence of shutters of the optoelectronic transducer is a function of at least one of: the total number of shutters in a predetermined time window, the duration of each shutter and the time interval between two consecutive shutters; • When the card includes a microelectromechanical system (MEMS), i. the actuation sequence of the microelectromechanical system (MEMS) is a function of at least one of: the total number of actuations in a predetermined time window, the duration of each actuation and the time interval between two consecutive actuations.

8. A smart card (100) according to any one of the preceding claims preceding, further comprising an electric battery, optionally rechargeable, for electrically powering the means for generating a two-dimensional barcode

9. Method for securing a transaction between a debtor and a creditor, the debtor being equipped with a chip card (100) according to any one of the preceding claims, the creditor being equipped with a payment terminal connected to a banking network, the method comprising steps consisting of: • Generate a dynamic two-dimensional barcode (151) by the secure element of the smart card (100), the barcode enabling a contactless banking transaction between the debtor and the creditor for a previously defined amount when said barcode is scanned by an optical device of the creditor; • Display said dynamic barcode (151) generated on display means (160) of the smart card (100); • Scanning said dynamic barcode (151) by an optical device connected to the creditor's payment terminal, decoding said dynamic barcode (151) and extracting the data enabling the banking transaction; • Issue a request for authorization of the banking transaction by the creditor's payment terminal, the request including said extracted data.

10. Method for securing a peer-to-peer transaction between two individuals, one of whom is a debtor and the other a creditor, at least the debtor being equipped with a smart card (100) according to any one of claims 3 to 8, the method comprising steps consisting of: • define the amount of a contactless banking transaction between the debtor and the creditor; • Scanning the unique static two-dimensional barcode (150) of the debtor's smart card (100) by a communicating object of the creditor; • decode said static barcode (150); • extract the data enabling the banking transaction; • Issue a request for authorization of the banking transaction by the creditor's communicating object, the request including said extracted data.

Images