Mobile Financial Transaction System and Method
AssigneeTurkcell Teknoloji Arastirma Ve Gelistirme Anonim Sirketi
InventorSaner Ates
Life of this patent
Estimating the term…
Abstract
The present invention relates to a mobile financial transaction system (1) and method (100) which is operated on mobile device (3) and enables user information to be carried on SIM card (2) by being encrypted. With the inventive system (1) and method (100), the user can carry out his/her financial transactions on the bank (B) desired.
Claims20
A mobile financial transaction system (1) comprising at least one mobile device (3) which has at least one SIM card (2) providing connection to a GSM network, enables a financial transaction order to be given by a user and a message in which there is at least one password to be sent;
- characterized by
- at least one encryption center (5) which has at least one physical cryptographic device (hardware security module_HSM) (4) enabling the password in the message received from the mobile device (3) to be converted into a format that can be verified by a bank (B);
- at least one payment center (6) which enables getting in contact with the bank (B) where it is desired to carry out the transaction;
- and
- at least one application server (7) which transmits the message received from the mobile device (3) to the encryption center (5), connects and gives order to the payment center (6) in order that the transaction is carried out after the encryption center (5) converts the password in the message into a format that can be verified by the bank (B), and notifies the mobile device (3) of the user about the transaction result via a message.
A mobile financial transaction method (100) which enables mobile device users to carry out their financial transactions securely by means of their mobile devices characterized by steps of:
- the user selecting a financial transaction that the user wants to carry out by means of the user's mobile device (3) (101);
- the user selecting one of a credit card or other debit cards through which the user wants to carry out the financial transaction by means of the user's mobile device (3) (102);
- the user entering a password of the card that the user has selected into the mobile device (3) (103);
- encrypting the password of one of the credit card or other debit cards input by the user such that it will not be understood by anyone by mixing it with the information of an integrated circuit card identifier (ICCID) and encryption keys, and putting it into a message form by means of a SIM card (2) (104);
- transmitting the message, which includes the password, from the mobile device (3) to an application server (7) over a GSM network (105);
- transmitting the password, in the message reaching the application server (7), from the application server (7) to an encryption center (5) (106);
- converting the password into a format that can be verified by a bank (B) by a physical cryptographic device (4) in the encryption center (5) (107);
- transmitting the password, which is converted into a format that can be verified by the bank (B), to the application server (7) (108);
- transmitting the order of password and starting the transaction to a payment center (6) by means of the application server (7) (109);
- the payment center (6) getting in contact with the bank (B) where the user wants to carry out the transaction (110);
- the payment center (6) transmitting the password to the bank (B) (111);
- the bank (B) controlling validity of the password (112);
- if the password is valid, the bank (B) carrying out the transaction desired by the user (113);
- if the password is invalid, the bank (B) not carrying out the transaction desired by the user (114);
- the bank (B) informing the payment center (6) concerning whether the transaction is carried out or not (115);
- the payment center (6) informing the application server (7) (116);
- and
- sending an information message to the mobile device (3) by the application server (7) concerning whether the transaction is carried out by the bank (B) or not (117).
Dependencies are inferred from the claim text.