Patent Application
20240362614
The invention relates to contactless communications, that is to say wireless communications, for the transmission of data between a communicating object and a communication device. More specifically, the invention relates to transactions implemented during these contactless communications, such as in particular banking transactions, accessing a means of transport or a secure location, ordering one or more products or services, etc. and the way in which a communicating object, such as for example a connected vehicle, a smartphone, a connected watch, controls these contactless transactions with a communication device, typically a reader, a payment point, an access gate, etc.
It is possible at present to implement a transaction using a communicating or connected object. If for example the transaction is a payment for a product or a service, a user who has made a purchase is able to pay for it using a connected object, such as a bank card, a smartphone, a connected watch, etc. To this end, the user knows the context of their purchase (the object they are purchasing, the location of the purchase, the merchant, etc.). Thus, when the merchant presents the user with an electronic payment terminal (EPT) on which the price corresponding to this purchase and sometimes the object being purchased is displayed, the user checks this information and, if they agree with said information, brings their connected object towards the EPT in order to authorize the transaction if this is contactless. If the contactless transaction is not possible, the user is obliged to enter a code on the EPT to authorize the transaction.
If the transaction is accessing a secure premises or a means of transport (the metro for example) via an access gate, the user knows the location and the conditions of this access. Thus, when the user approaches a terminal or a gate, they simply need to bring their connected object (access badge, transport card, smartphone, etc.) close in order to validate access.
In recent years, more sophisticated connected objects, such as for example connected vehicles, have also emerged. These connected vehicles are equipped with:
One disadvantage of using such a connected vehicle is that the user is obliged, as in previous use cases, to check all information relating to the transaction, which information is displayed for example on a dashboard console, before authorizing the transaction, by clicking on a “validate” button displayed on the console, or before declining the transaction, by clicking on a “cancel” button displayed on the console. Although such a connected vehicle makes it easier to implement transactions for a user located on board, the user is still obliged to intervene during the transaction in order to check and validate it.
One of the aims of the invention is to rectify drawbacks of the abovementioned prior art by allowing a connected object to control the implementation of a contactless transaction with a communication device completely autonomously and securely, without a user of the object needing to intervene on the connected object or manipulate it.
To this end, one subject of the present invention relates to a method for controlling a contactless transaction between a communicating object and a communication device, during which the communicating object receives, from the communication device, a request containing data relating to the transaction.
Such a method is noteworthy in that the communicating object autonomously executes the following:
The invention advantageously allows a connected object, able to communicate contactlessly with a communication device as part of the implementation of a transaction, to be provided with a decision-making mechanism for checking:
One advantage of the invention is that such a check is carried out completely autonomously by the communicating object, such as for example a connected vehicle, a connected watch, a connected card, that is to say without any human intervention or manipulation with respect to the object. Thus, by virtue of the invention, the connected object decides on its own initiative whether it is authorized to carry out a contactless transaction correctly with the communication device, such a transaction being for example a payment, the delivery of a product or service, accessing a locker, a means of transport, etc.
Such a decision-making mechanism installed in the communicating object also makes it possible to avoid or limit the development and deployment, in the network, of preventive processing tools intended to check the legitimacy of a request, these tools being technically complex and expensive.
According to one particular embodiment, in the absence of a match between the information relating to the transaction and the use context data, the communicating object activates sending, to the communication device, of a response to the request declining the transaction, or does not respond to the request.
By virtue of this embodiment, the communicating object is able to autonomously process the reception of any request containing data relating to a transaction that might not be intended for this communicating object but for another communicating object or else that might be intended for the communicating object for fraudulent purposes or by mistake. To this end, the communicating object is able to send a response to the request declining the transaction, thereby ending the communication between the communicating object and the communication device. As an alternative, the communicating object may ignore this request and not respond to it, in order to save the resources of the battery of the communicating object and/or the bandwidth of the wireless communication network between the communicating object and the communication device.
According to another particular embodiment, during the comparison of the extracted information with the use context data, at least one additional datum relating to the transaction is determined, said at least one additional datum being added to the response to the request authorizing the transaction.
By virtue of this embodiment, the communicating object is able:
The response to the request authorizing the transaction is thus advantageously enriched with payload data that the communication device is able to transmit to the manager of the transaction or of the communicating object or else to the provider of the product or service, for the purpose of processing/archiving/tracing transactions that have been carried out by a user of the particular communicating object.
According to another particular embodiment, when the transaction is a payment and the communicating object comprises at least two means of payment associated respectively with two different users, the at least one additional datum is an identifier of the means of payment associated with the user of the object at the time of the transaction.
By virtue of this embodiment, if the communicating object is able to implement a payment for multiple different potential users, the communicating object is advantageously capable of autonomously and automatically deducing the means of payment of the user actually involved in this payment.
According to another particular embodiment, the comparison of the extracted information with the use context data comprises the following:
Such an embodiment constitutes a decision-making mechanism that is very simple to implement and therefore suitable for sparing the computing resources of the communicating object, which are generally low. This score is then compared with a reference threshold, for example 0.5, which characterizes a transaction situation that is for example valid above this threshold and a transaction situation that is invalid below this threshold (the opposite is also possible depending on the established comparison convention). If the assigned score is greater than (or greater than or equal to) this reference threshold, the communicating object sends a response to the request authorizing the transaction. If the assigned score is less than (or less than or equal to) this reference threshold, the communicating object does not respond to the request or sends a response to the request declining the transaction.
According to another particular embodiment, the use context data in relation to the communicating object are representative of an environment in which the communicating object is located or contain at least one operating datum in relation to a transaction of the communicating object.
Such use context data, determined fully autonomously by the communicating object, are particularly accurate and reliable since they are related to the very environment in which the communicating object is located and/or are based on operating data in relation to this object.
According to another particular embodiment, the at least one operating datum in relation to the communicating object is a current operating parameter recorded by the communicating object or an element of a history of the communications carried out by the communicating object.
According to another particular embodiment, the use context data representative of an environment in which the communicating object is located are contained in a message received by the communicating object from the communication device or from a message-transmitting device located in said environment.
Such use context data constitute additional relevant data that may advantageously be used in the abovementioned comparison step, in addition to the use context data obtained in the previous embodiment. These may be for example the name of the provider of the product or service that is the subject of the transaction, the type of product or service, or a location where the product or service is located.
According to another particular embodiment, the use context data representative of an environment in which the communicating object is located contain a datum from at least one sensor belonging to the communicating object.
The various abovementioned embodiments or implementation features may be added, independently or in combination with one another, to the method for controlling a contactless transaction defined above.
The invention also relates to a communicating object having abilities to control a contactless transaction with a communication device, the communicating object comprising a processor that is configured to receive, from the communication device, a request containing data relating to the transaction.
Such a communicating object is noteworthy in that the processor of the communicating object autonomously executes the following:
The invention also relates to a system for controlling a contactless transaction. Such a system is noteworthy in that it comprises:
The invention also relates to a computer program comprising instructions for implementing the method for controlling a contactless transaction according to the invention, according to any one of the particular embodiments described above, when said program is executed by a processor.
Such instructions may be stored durably in a non-transient memory medium of the communicating object implementing the method for controlling a contactless transaction according to the invention.
This program may use any programming language and be in the form of source code, object code or intermediate code between source code and object code, such as in a partially compiled form, or in any other desirable form.
The invention also targets a computer-readable recording medium or information medium containing instructions of a computer program as mentioned above. The recording medium may be any entity or device capable of storing the program. For example, the medium may comprise a storage means, such as a ROM, for example a CD-ROM or a microelectronic circuit ROM, or else a magnetic recording means, for example a mobile medium, a hard disk or an SSD.
On the other hand, the recording medium may be a transmissible medium such as an electrical or optical signal, which may be routed via an electrical or optical cable, by radio or by other means, such that the computer program that it contains is able to be executed remotely. The program according to the invention may in particular be downloaded from a network, for example an Internet network.
As an alternative, the recording medium may be an integrated circuit in which the program is incorporated, the circuit being designed to execute or to be used in the execution of the abovementioned method for controlling a contactless transaction. According to one exemplary embodiment, the present technique is implemented by way of software components and/or hardware components. With this in mind, the term “module” may correspond in this document equally to a software component, to a hardware component or to a set of software components and hardware components.
Other features and advantages will become apparent on reading particular embodiments of the invention, which are given by way of illustrative and non-limiting examples, and the appended drawings, in which:
Such a system comprises:
Communicating or connected object is the name given to any object configured to capture data and to communicate with other objects or with dedicated infrastructures using IoT (Internet of Things) technology.
According to the invention, the method for controlling a contactless transaction is implemented on the communicating object OC1, completely autonomously, as will be described later in the description.
In the example of
According to the invention, the connected car OC1 is equipped with:
In the example of
In this contactless transaction context of the invention, the connected electric car OC1 starts by pairing with the charging terminal DF1, via its communication module MCO, so as to establish a secure contactless communication channel in order to implement the contactless transaction, here a payment corresponding to the charging carried out. This contactless transaction is controlled by the connected car OC1, starting from the time when the user UT connected the charging connector of the terminal DF1 to the battery of the connected car OC1. If the connected car OC1 considers that the contactless transaction is valid/legitimate, the contactless transaction begins, and then ends once the user has replaced the charging connector on the terminal. Of course, this example is in no way exhaustive. In particular, the provision device DF1 for providing products or services varies depending on the use context of the connected car OC1. To this end, the provision device DF1 for providing products or services could be, as an alternative:
Such a system comprises:
According to the invention, the method for controlling a contactless transaction is implemented on the communicating object OC2, completely autonomously, as will be described later in the description.
In the example of
As such, the watch OC2 is natively equipped with a plurality of sensors/detectors, such as for example a camera, a photographic camera, an accelerometer, a GPS geolocation device, a fingerprint sensor, etc.
According to the invention, the connected watch OC2 is equipped with:
In the example of
In the example of
Such a system comprises:
According to the invention, the method for controlling a contactless transaction is implemented on the communicating object OC3, completely autonomously, as will be described later in the description.
In the example of
As such, the smartphone OCs is natively equipped with a plurality of sensors/detectors, such as for example a camera, a photographic camera, an accelerometer, a GPS geolocation device, a biometric sensor, etc.
According to the invention, the smartphone OC3 is equipped with:
In the example of
In the example of
In this contactless transaction context of the invention, the smartphone OC3 starts by pairing with the collection locker unit DF3, via its communication module MCO, so as to establish a secure contactless communication channel in order to implement the contactless transaction, here collection of a parcel COL. This contactless transaction is controlled by the smartphone OC3, starting from the time when the user UT is a few centimeters away from the collection locker unit DF3. If the smartphone OC3 considers that the contactless transaction with the server DC3 is valid/legitimate, the contactless transaction begins with the server DC3, which results in the opening of one of the lockers that contains the parcel COL, the locker E in the example shown. The contactless transaction ends once the user UT has removed the parcel COL from the locker E and said locker has been closed. Such access control for example checks that the collection identifier stored in the memory of the smartphone OC3 actually corresponds to the identifier of the parcel COL awaiting collection in the locker E, for the purpose of causing this locker to open automatically, without the user UT having to manipulate their smartphone OC3.
As already explained above, such a communicating object conventionally comprises:
The communicating object OC furthermore comprises, according to the invention:
In
Although in
According to one particular embodiment of the invention, the actions executed by the communicating object OC, in the context of implementing the method for controlling a contactless transaction according to the present invention, are implemented by instructions of a computer program PG. For this purpose, the communicating object OC has the conventional architecture of a computer and comprises in particular a memory MEM2, a processing unit UTR, equipped for example with a processor PROC, and driven by the computer program PG stored in memory MEM2. The computer program PG comprises instructions for implementing the actions executed by the communicating object OC when the program is executed by the processor PROC, according to any one of the particular embodiments of the invention. On initialization, the code instructions of the computer program PG are for example loaded into a RAM memory (not shown), before being executed by the processor PROC. The processor PROC of the processing unit UTR implements in particular the actions of collecting data from the one and/or more sensors CAP1, CAP2, . . . , CAPS, the actions of receiving the one and/or more messages MSG, the actions of receiving transaction requests, the actions of analyzing these requests, the actions of determining at least one additional transaction datum, and the actions of sending or not sending a response to these transaction requests.
A description will now be given, with reference to
According to the invention, the communicating object OC is configured such that it autonomously executes the various actions that will be described below in order to control a contactless transaction with the communication device DC, as if it were the user UT themselves who were implementing such control, namely checking the legitimacy of the transaction, as the user usually does by checking for example that the subject of the transaction is the one they want, that the price of the subject, when it is paid for, is actually correct, the location of the transaction, etc., and validating or not validating the transaction based on this check.
Prior to carrying out the method for controlling a contactless transaction described below, it is considered that the user UT and their communicating object OC have been brought toward the provision device DF for providing products or services and that a communication channel has been established securely in order to implement the contactless transaction between the communicating object OC and the communication device DC. The establishment of such a communication channel or pairing is conventional and will not be described further. In one particular embodiment, such a communication channel is established autonomously by the communicating object OC as described in document FR2106702, incorporated into the present description by reference.
The method for controlling a contactless transaction then takes place as follows: In S1, the communicating object OC receives, from the communication device DC, a request REQ_TR containing data DAT1 relating to a transaction. Such a request may be received by the communication module MCO or MCO′ from
https://developer.paypal.com/docs/integration/paypal-plus/mexico-brazil/create-a-payment-request/, etc., for which the data DAT1 correspond for example:
In the use context of
In the use context of
The method for controlling the contactless transaction continues in S2, where the communicating object OC extracts the data DAT1 from the received request REQ TR.
In S3, the analysis module ANA from
The use context data/information DCU are data/information collected by the communicating object OC while it is moving toward the provision device DF for providing a product or service, but also prior to this movement.
In one embodiment, the use context data/information DCU:
During or at the end of this comparison S3, one or more additional transaction data DAT2 are determined or identified in S4 using the module DET from
In the use context of
Such a message MSG is for example of beacon, V2X, UWB (Ultra-wideband), Wi-Fi multicast, or even Li-Fi (Light Fidelity) type, etc.
Typically, this item of information INF1 designates for example:
The data/information INF1 may also correspond to an interpretation made by the connected electric car OC1 of the data from its various sensors CAP1 to CAPS, typically the level of charge of electricity of its battery, the dimensions or the type of the car OC1, the one or more occupants of the car OC1 (biometrics), etc. The data/information INF1 may also correspond for example to a brand or logo of the charging station that have been recognized after analyzing an image or video captured by one of the sensors CAP1, CAP2, . . . , CAPS of the car OC1, typically a photographic camera or a camera. They may also involve metadata associated with this image, such as for example the geographical position of the charging station, the date and/or the time of capture of the image or video. The data/information INF1 also correspond, in this use context, to the geographical coordinates (Cartesian, polar, spherical, etc.) of the car OC1 that are measured by one of the sensors CAP1, CAP2, . . . , CAPS of the car OC1, typically a GPS device.
In the use context of
In the use context of
In the use context of
In the use context of
The data/information INF1 may also correspond to an interpretation made by the connected watch OC2 of the data from its various sensors CAP1 to CAPS. They correspond for example to the name of the station or of the railway station, to an identifier of the transport line taken by the user UT, etc. that have been recognized after analyzing an image or video captured by one of the sensors CAP1, CAP2, . . . , CAPS of the watch OC2, typically a photographic camera or a camera. They may also involve metadata associated with this image, such as the geographical position of the station or of the railway station, the date and/or the time of capture of the image or video. The data/information INF1 may also correspond, in this use context:
In the use context of
In the use context of
In the use context of
The data/information INF1 may also correspond to an interpretation made by the smartphone OC3 of the data from its various sensors CAP1 to CAPS. They correspond for example to the name or to an identifier of the collection locker unit DF3 that have been identified after analyzing an image or video captured by one of the sensors CAP1, CAP2, . . . , CAPS of the smartphone OC3, typically a photographic camera or a camera. They may also involve metadata associated with this image, such as the geographical position of the collection locker unit DF3, the date and/or the time of capture of the image or video. The data/information INF1 may also correspond, in this use context:
In the use context of
In the use context of
In the use context of
If there is a match between the data DAT1 and the use context data DCU in relation to the communicating object OC (Y in
In one particular embodiment, the response REP_TR_AUT may be enriched by at least one datum DAT2 that was determined in S4. The one and/or more data DAT2 may thus be transmitted by the communication device DC both to the manager of the transaction and to the manager of the communicating object (for example: manager of a fleet of vehicles, bank, etc., if the communicating object OC is a connected car OC1, public transport authority if the communicating object OC is a connected watch OC2, telecommunications operator or delivery brand if the communicating object OC is a smartphone OC3), or else to the provider of the product or service that is the subject of the transaction (service station, merchant website, etc.). These one or more data DAT2 may thus be advantageously utilized for the purposes of processing/archiving/tracing transactions that have been carried out by a user UT of the given communicating object OC, at a given time.
If there is not a match between the data DAT1 and the use context data DCU in relation to the communicating object OC (N in
REP_TR_REF designating declining of the transaction between the communicating object OC and the communication device DC. As an alternative, the communicating object OC does not send any response to the request REQ_TR and the transaction method ends after a period that is set beforehand, the duration of which depends on the implementation carried out.
The steps of the method for controlling a contactless transaction that have just been described above advantageously allow any connected object to check whether or not a transaction (payment, access, order collection, etc.) with a communication device (payment server, access control server or gate, opening/closing command for a parcel collection locker unit, an automatic locker, etc.) is valid/legitimate, and to do so completely autonomously and securely.
A description will now be given, with reference to
To this end, the comparison S3 comprises a sub-step S30 during which items of reference use context information ICURef are combined.
These items of reference use context information ICURef may take various forms. These may be for example:
At the end of sub-step S30, a reliability score having a value V is obtained.
In S31, the data DAT1 and the use context data DCU are combined.
In S32, a reliability score SC is assigned to the result of this combination.
In S33, the score SC is compared with the value V obtained in S30, which is considered as a reference value.
According to one embodiment, 0≤V≤1. Other bounding values are of course possible depending on the implementation of the method for controlling a contactless transaction. One convention establishes for example that V=0.6 and that, beyond this reference value V, the communicating object OC is in a valid/legitimate transaction situation.
If SC>V (or SC>V depending on the established convention) (Y in
In one particular embodiment, depending on the value of the score SC, and in particular if the value of the score SC is very close to the reference value V, below or above it, additional data may be used to refine the comparison S3, such as for example data from an external database of known fraud (to detect a risky transaction situation), data provided by the user UT if they are present at the time when the comparison S3 is implemented, data corresponding to the selection of a specific transaction module MT (for example a transaction module benefiting from particular assurance, a transaction module having a particular identifier IDGT that authorizes free public transport, etc.).
In the transaction context of
The data DAT1 are for example the date and time of day along with the payment amount for the charging.
This information is compared, in S3, with a learning situation that has been modeled with reference use context information ICURef of the same type as or a type similar to the use context information DCU and the data DAT1 and that has already been evaluated beforehand in an identical or similar use context:
Thus, if, in S31, all of the use context information DCU and the transaction data DAT1 match the reference use context information ICURef, the value of the reliability score SC assigned in S32 will be greater than V or greater than or equal to V.
If, on the other hand, the determined use context information DCU is for example:
In the use context of
The data DAT1 are for example an identifier of a gate that begins with the letter “B” to indicate that the means of transport taken is a bus,
This information is compared with a learning situation that has been modeled with reference use context information ICURef of the same type as or a type similar to the use context information DCU and that has already been evaluated beforehand in an identical or similar use context of a means of transport and representative of the public transport travel habits of the user UT or of another user who shares the connected watch OC2 with the user UT.
Thus, if, in S31, all of the use context information DCU and the transaction data DAT1 match the reference use context information ICURef, the value of the reliability score SC assigned in S32 will be greater than V or greater than or equal to V.
If, on the other hand, the determined use context information DCU is for example:
In the use context of
The data DAT1 are for example the date and time of day along with the price of the order to be collected and a number of items corresponding to the order, which is equal to 3.
These one or more items of information is/are compared with a learning situation that has been modeled with one or more items of reference use context information ICURef of the same type as or a type similar to the use context information DCU and that has already been evaluated beforehand in an identical or similar use context that defines the parcel collection locations that the user UT visits most often, known purchase kinematics of the user UT or of another user sharing the smartphone OC3 with the user UT, etc.
Thus, if, in S31, all of the use context information DCU and the data DAT1 match the reference use context information ICURef, the value of the reliability score SC assigned in S32 will be greater than V or greater than or equal to V.
If, on the other hand, the determined use context information DCU is for example:
The data DAT1 are for example the date and time of day along with the price of the order to be collected, which corresponds to a number of items equal to 3,
| Number | Date | Country | Kind |
|---|---|---|---|
| FR2107284 | Jul 2021 | FR | national |
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/FR2022/051183 | 6/17/2022 | WO |
