The present disclosure relates to the field of electronic money payments and also to a device, system and method for making an electronic money payment.
These electronic payment instructions are received by the sending bank 104, in other words the bank that manages the account containing the payment funds. The funds are then transmitted to the receiving bank 106 via a clearing mechanism 108. The clearing mechanism 108 for example performs the necessary actions to process the payment instruction, and ensure that the funds are transferred and settled. The clearing mechanism 108 also for example routes authorization requests to the sending bank 104 to check that funds are available, reserves the funds, and provides a confirmation to the receiving bank 106.
The cash payment part 110 of the system 100 receives and/or deposits physical cash from/to the sending and receiving banks 104, 106, via a cash distribution facility 112, for example an ATM (automated teller machine), a bank branch, post office or retail outlet that offers cash back. The cash may then be used for making payments in the cash economy 114, for example in shops, restaurants etc. that accept cash payment.
Physical cash has a number of technical problems, such as the fact that it is a relatively bulky form of payment, in particular in the case of metal coins, when compared to electronic payment means such as bank/credit cards.
However, electronics payments have the technical problem of requiring a clearing and settlement operation, which is relatively time consuming and complex to implement.
There is thus a need for a new type of electronic payment method and device that does not suffer from these problems. In particular, there is a need for an electronic payment method and device that allows money to be exchanged as easily as physical cash, and without the need of a clearing and settlement infrastructure.
It is an aim of embodiments described herein to at least partially address one or more needs in the prior art.
According to one aspect of the present disclosure, there is provided a method of making an electronic payment by an electronic payment device comprising: transmitting from said electronic payment device to an electronic receiving device a first money token comprising at least data indicating an identifier of said first money token and an amount indicating a payment sum of said first money token, wherein said first money token further comprises an electronic watermark.
According to one embodiment, said first money token comprises an algorithm that determines said payment amount of said first money token based on at least one parameter external to said first money token.
According to another embodiment, said electronic watermark is based on data of said first money token, for example at least said identifier of said first money token.
According to another embodiment, said electronic watermark is based on data of said first money token modified by a hash function.
According to another embodiment, said electronic watermark is encrypted by an encryption algorithm not known by said electronic payment and electronic receiving devices.
According to another embodiment, said electronic watermark is encrypted by an encryption algorithm not based on keys.
According to another embodiment, the method further comprises: transmitting by said electronic receiving device said electronic watermark to an authentication module; and decrypting said electronic watermark by said authentication module to verify that said first money token is authentic.
According to another embodiment, decrypting said electronic watermark comprises performing a hash function.
According to another embodiment, the method further comprises, prior to transmitting said money token, the step of: splitting by said electronic payment device a second money token to generate said first money token and a third money token having a value equal to the difference between said first payment sum and a value of said second token.
According to another embodiment, splitting said second money token comprises including in said first and third money tokens an identifier of said second money token and an electronic watermark of said second money token.
According to another embodiment, the method further comprises receiving by said electronic payment device said second money token from token distribution equipment.
According to another embodiment, the method further comprises generating said second money token by combining fourth and fifth money tokens.
According to another embodiment, the method further comprises splitting a second money token to generate a third money token, and combining said third money token with a fourth money token to generate said first money token, the sum of the values of said third and fourth money tokens being equal to the value of said first money token.
According to a further aspect of the present invention, there is provided an electronic memory storing a first money token comprising at least data indicating an identifier of said first money token and an amount indicating a payment sum of said first money token, wherein said first money token further comprises an electronic watermark.
According to a further aspect of the present invention, there is provided a mobile electronic payment device comprising the above electronic memory and transmission circuitry for transmitting said first money token to an electronic receiving device to make a payment.
According to one embodiment, the mobile electronic payment device further comprises: reception circuitry adapted to receive a second money token; and a processor configured to generate said first money token based on said second money token.
According to a further aspect of the present invention, there is provided an electronic money payment system comprising: the above mobile electronic payment device; an electronic receiving device adapted to receive said first money token from said mobile electronic payment device; and an authentication module adapted to receive from said electronic receiving device said electronic watermark of said first money token and to decrypt said electronic watermark to verify that said first money token is authentic.
According to one embodiment, the electronic money payment system further comprises money token distribution equipment configured to generate said electronic watermark.
According to a further aspect of the present invention, there is provided an electronic data signal transmitting a money token comprising at least data indicating an identifier of said money token and an amount indicating a payment sum of said first money token, wherein said first money token further comprises an electronic watermark.
According to yet a further aspect of the present invention, there is provided a method of authenticating an electronic money token having an associated monetary value and comprising an electronic watermark, the method comprising: receiving at least an identifier and said electronic watermark of said electronic money token; decrypting the electronic watermark to determine an identifier associated with said watermark; and comparing said identifier associated with said watermark with the identifier of said electronic money token and outputting the result of said comparison.
The foregoing and other purposes, features, aspects and advantages of the present disclosure will become apparent from the following detailed description of embodiments, given by way of illustration and not limitation with reference to the accompanying drawings, in which:
Throughout the following, only those aspects useful for an understanding of the present disclosure have been illustrated in the drawing and described in detail. Other aspects, such as the particular implementations of encryption, decryption or authentication algorithms, will be apparent to those skilled in the art, and have not been described in detail.
System 200 comprises an electronic money token distribution equipment 202, which performs the role of generating and distributing electronic money tokens, of which one example of a money token 204 is provided in
System 200 further comprises an electronic payment device 206 and electronic receiving devices 208 and 210. In this example, devices 206 and 208 are both mobile telephones, while device 210 is sales equipment, for example of a shop or restaurant.
The mobile device 206 receives the electronic money token 204 from the distribution equipment 202. For example, the user of device 206 connects, via the interne, to their bank account, and requests the electronic withdrawal of a certain sum. This request is then relayed to the distribution equipment 202, which for example generates the corresponding token 204 of an amount equal to the requested sum, as will be explained in more detail below, and transmits this token to device 206, for example after encrypting the token.
The mobile device 206 stores the electronic money token 204 in a memory (not shown in
In one example, the mobile device 206 makes a payment to the user of the mobile device 208. This involves transmitting the electronic money token 204 from the memory of device 206 to the memory of device 208. After transmission from device 206, the money token 204 is for example deleted from the memory of device 206.
After receiving the electronic money token 204, the device 208 may optionally transmit at least part of the token to the distribution equipment 202 in order to verify its validity, as will be explained in more detail below.
Alternatively, rather than the electronic payment device 206 transmitting the money token 204 to the mobile device 208, it could make a payment to a merchant via the sales equipment 210. In particular, the token 204 is transmitted from the memory of device 206 to the equipment 210. The equipment 210 receives the token 204, and for example transmits at least part of the token to an authentication module 212 in order to verify that it is authentic. As will be described in more detail below, the money token 204 comprises a watermark, and the module 212 for example comprises circuitry 214 for decrypting the watermark, which is for example based on a hash function, to verify that the money token 204 is authentic. The watermark is for example generated and then encrypted by the distribution equipment 202, and the decryption algorithm of the watermark is for example not known by the devices 206, 208 nor the equipment 210, but only by the module 212 and the distribution equipment 202, as will be explained in more detail below. In some embodiments, the devices 206 and 208 may also include the same module 212 for verifying that the tokens they receive are authentic.
The communications between the distribution equipment 202 and device 206, between devices 206 and 208, between device 208 and distribution equipment 202, and between device 206 and the sales equipment 210, could each be via any of a number of interface types, for example a wireless connection, such as a Bluetooth connection or other NFC (near field communications) connection, a network connection via a mobile telecommunications network and/or a wireless internet connection via a wireless router. Alternatively, a wired connection could be established between any of the devices/equipment.
While in
The token 300 comprises a field indicating an identifier 302 of the token, called in
For example, in the case that a token is split, each of the new tokens has a security ID equal to the ID of the original token with an added suffix. Thus calling the original ID “XXXX”, if this token is split into n tokens, these tokens could have security IDs “XXXX-1”, “XXXX-2”, etc. to “XXXX-n” respectively. Alternatively, if tokens are combined, the security ID of the new token for example equals a concatenation of the security IDs of each of the original tokens. For example, if tokens having IDs “XXXX” and “YYYY” respectively are combined, the new security ID is for example “XXXX-YYYY”.
The token 300 also comprises a field 304 indicating one or more root IDs of the token. In particular, each time a token is split, a new security ID will be generated for each of the resulting tokens, and the security ID of the original token is for example stored as a root ID in each of the resulting tokens.
The token 300 also comprises a field 306 indicating the currency of the monetary value represented by the token, such as US Dollars, Euros, etc. During the lifetime of the token, it may be possible to perform a currency exchange of the money token, in which case this field would be updated.
The token 300 also comprises a field 308 indicating the amount of the monetary value represented by the token. For example, in some circumstances, tokens for amounts corresponding to standard bank notes could be issued, such as tokens for 5, 10, 20, 50 dollars/euros/pounds etc. In other cases, tokens could be issued directly having an amount corresponding to an intended transaction amount. In either case, after being issued, the tokens may be split or combined. Furthermore, as will be described in more detail below, the amount may be variable during the life of the money token.
The token 300 also comprises a field 310 indicating start and/or end dates of the token. For example, before the start date and/or after the end date, the token is not valid for use in payment transactions. If expired, the token can for example be reinitialized by the distribution equipment 202.
The token 300 also comprises a field 312 indicating an interest rate/algorithm that can be applied to the token. In this way, the amount of the token can be set to change in time, on certain future dates, or whenever the token amount is refreshed by a user. The interest rate could be a negative or positive fixed rate, or a variable rate that depends on information accessible by the electronic payment device storing the token. The field 312 may comprise an algorithm for periodically generating the new token value.
For example, using the interest rate, the algorithm could apply compound or simple interest. Compound interest is for example determined using the following algorithm:
V
n
=V
n-1(1+i)p
where Vn-1 is the initial value of the token, Vn is the new token value, i is the interest rate, which can be positive or negative, to be applied over a time period t, and p is the number of time periods t that have elapsed since the initialisation of the token, for example its start date.
Simple interest is for example determined using the following algorithm:
V
n
=V
n-1(1+(p·i))
where Vn-1, Vn, i and p are as before.
Alternatively, the algorithm could apply a fixed or variable sum increment to the data value, determined as follows:
V
n
=V
n-1
+A
where Vn-1 and Vn are as before, and A is a fixed or variable increment value, which could be positive or negative. It should be noted that in this case, the algorithm could be set to be applied only on certain dates. The increment A could be fixed, and for example stored in the field 312 of the money token 300. Alternatively, the increment A could depend on certain factors set by the token issuer, such as based on an inflation rate or the like.
As a further example, the algorithm could be based on a peg value, in other words being of the form:
V
n
=V
n-1(Cn/Cn-1)
where Vn-1 and Vn are as before, Cn-1 is the previous peg value at the time that the previous data value Vn-1 was calculated, and Cn is a current peg value, such that the value Vn tracks the peg value. The peg value could be a commodity price, for example the price of gold or oil, an exchange rate, a stock market index, an inflation index etc.
The various variables used in the algorithms, such as the interest rate i, the increment value A and the peg value Cn, may be programmed, along with their evolution over time, when the token is issued by the distribution equipment 202. Alternatively or additionally, these variables could be updated during the lifetime of the token by sources defined by the distribution equipment 202, such as a stock exchange index at the end of each day, or they could be updated manually using any of the devices 206, 208, 210.
The token 300 also comprises a field 314 indicating audit information, such as the usage and history of the electronic money token, including for example information identifying the issuing institution, such as the distribution equipment 202.
The token 300 also comprises a message field 316, which for example indicates information inserted by the issuing institution, such as it electronic contact address, and/or information regarding promotions, vouchers etc.
The token 300 also comprises an electronic watermark 318, which is a data value generated by the token issuing institution, in this case the distribution equipment 202 of
When tokens are split or combined, the fields of the resulting tokens will grow, and in particular the security ID, root ID and audit information fields. The storage of the money token does not generally use much memory, but the size of the tokens could be periodically reduced by returning them to the distribution equipment 202 of
In a first step S0, an initial electronic money token TI of amount VI is received by an electronic payment device, such as device 206 of
In a next step S1, it is determined that a new payment of an amount Vp is to be made by the user of the electronic payment device. For example, the user is in a shop and makes a purchase of this amount, or the user wishes to pay somebody for a service. The payment amount is for example entered by the user into the electronic payment device, or alternatively, this information could be supplied automatically to the electronic payment device by an electronic receiving device, such as device 208 or 210 of
In a next step S2, the electronic payment device determines whether the amount Vp to be paid is equal to the amount VI of the money token TI. For example, the token TI may have been issued specifically for the purpose of making the payment of amount VP, in which case the amounts will match. Alternatively, the token TI could be for a set integer amount. While not illustrated in
If the amounts VI and VP are equal, the next step is S3, in which the token TI is transmitted to the electronic receiving device of the party receiving the funds. For example, a connection has already been established between the payment device and the receiving device, via a wired connection, or a wireless connection. Alternatively, the user of the electronic payment device may initiate the communication with the receiving device, such that the payment can be made.
Alternatively, if in step S2 it is determined that the amounts VP and VI are not equal, the token TI can be split or combined with another in order to reach the payment amount VP. In particular, a subsequent step S4 involves verifying whether VP is less than VI, again taking into account any exchange rate if the currencies are not the same.
If VP is less than VI, this implies that token TI can be split in order to make the payment. Thus, in a next step S5, the token TI is split into a new token TP of amount VP, and a new token TR of amount equal to VI−VP. The token TP is then transmitted to the electronic receiving device in a step S6, and the token TR remains in the memory of the electronic payment device to be used for a future payment.
If in step S4 it is determined that VP is not less than VI, the next step is S7, in which it is determined whether or not there are one or more additional tokens TA stored by the electronic payment device that can be combined with the token TI to make the payment. If not, the next step is S8 in which an error message is for example displayed on a display of the electronic payment device, indicating that there are not sufficient funds to make the payment.
If there are one or more additional tokens TA, the next step is S9, in which it is checked whether the sum of the amount VI with the amount VA of the one or more additional tokens is greater than or equal to VP, again taking into account any exchange rate if the currencies are not the same. If the sum is not greater than or equal to VP, the next step is S8, in which the error message may be indicated. Otherwise, if the sum is greater than or equal to VP, the next step is S10.
In step 10, tokens are combined to generate a new token TP of amount VP. For example, if the sum of the amount VI with the amounts VA of the additional tokens is equal to VP, then these tokens are simply combined. Alternatively, if the sum of the amount VI with the amounts VA of the additional tokens is greater than VP, then one or more of the tokens TA is split to generate one or more tokens having a combined sum equal to VP−VI, which is then combined with token TI to generate the token TP of value VP. Combining tokens is optional, as in some cases more than one token can be transmitted in order to make the payment, in which case it is not necessary to combine tokens. Combining tokens can also be performed periodically for example to avoid large numbers of tokens of relatively small values from accumulating.
Then, in a next step S11, the token TP is transmitted from the electronic payment device to the electronic receiving device to make the payment.
The device 500 comprises a processing unit 502, coupled to an instruction memory 504, for example adapted to store instructions that, when executed by processor 502, cause some or all of the steps of
A verification of the electronic money token 204 can be performed by the distribution equipment 202 of
Alternatively or additionally, the money token may be authenticated based on its watermark, as will not be described with reference to
In a first step S1, the money token is received by an authentication module, such as module 212 of
In a next step S2, the electronic watermark is decrypted, and based on the decrypted watermark, at least an identifier IDWM associated with the electronic watermark is determined. For example, the electronic watermark of the token is generated by applying a hash function to one or more data fields of the money token. Such a function for example does not use an encryption key. As an example, the digits of the security ID and/or root ID and/or other fields of the original money token are summed and/or multiplied together to generate a hash total. Depending on the information used to generate the electronic watermark as mentioned above, other data associated with the token may also be determined, such as the amount of the token.
In a next step S3, the identifiers IDT and IDWM are compared, and if they do not match, the next step is S4, in which the authentication module returns a “fail” message, indicating that the authentication failed, and that the money token should therefore be considered invalid. Alternatively, if the identifiers match, the next step is S5, in which the authentication module returns a “pass” message, indicating that the money token is valid. If decrypting the watermark allows any of the other data fields of the money token to be determined, such data can also be verified in step S3.
In some cases, the watermark may be based on fields of the money token that vary, for example the amount of the money token. This data can also be verified if for example information is available on how the data should have varied since the original watermark was generated.
An advantage of the embodiments described herein is that an electronic form of payment can be implemented that does not use a clearing mechanism and settlement to be transferred from one party to another. Furthermore, such a payment token is particularly versatile, being capable of being split or combined without security risks thanks to the electronic watermark issued with each token.
Furthermore, an advantage of the electronic money token described herein is that it can have a dynamically changing value.
While a number of particular embodiments have been described herein, it will be apparent to those skilled in the art that numerous variations and alternatives could be applied.
For example, it will be apparent to those skilled in the art that the data fields of the token shown in
Furthermore, while some examples of operations for splitting and combining tokens to obtain a payment value have been provided, it will be apparent to those skilled in the art that there are numerous alternative operations that could be applied.
Number | Date | Country | Kind |
---|---|---|---|
11305821.8 | Jun 2011 | EP | regional |