FR3104760B1 - Procede, serveur et systeme d’authentification de transaction utilisant deux canaux de communication - Google Patents

Procede, serveur et systeme d’authentification de transaction utilisant deux canaux de communication Download PDF

Info

Publication number
FR3104760B1
FR3104760B1 FR1914346A FR1914346A FR3104760B1 FR 3104760 B1 FR3104760 B1 FR 3104760B1 FR 1914346 A FR1914346 A FR 1914346A FR 1914346 A FR1914346 A FR 1914346A FR 3104760 B1 FR3104760 B1 FR 3104760B1
Authority
FR
France
Prior art keywords
server
terminal
transaction
sends
communication channels
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
FR1914346A
Other languages
English (en)
Other versions
FR3104760A1 (fr
Inventor
Marc Beunardeau
Aisling Connolly
Rémi Geraud
Hiba Koudoussi
David Naccache
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Banks and Acquirers International Holding SAS
Original Assignee
Ingenico Group SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ingenico Group SA filed Critical Ingenico Group SA
Priority to FR1914346A priority Critical patent/FR3104760B1/fr
Priority to US17/784,861 priority patent/US12229772B2/en
Priority to PCT/FR2020/052398 priority patent/WO2021116627A1/fr
Priority to CA3161325A priority patent/CA3161325A1/fr
Priority to EP20845185.6A priority patent/EP4074005A1/fr
Publication of FR3104760A1 publication Critical patent/FR3104760A1/fr
Application granted granted Critical
Publication of FR3104760B1 publication Critical patent/FR3104760B1/fr
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/45—Structures or tools for the administration of authentication
    • G06F21/46—Structures or tools for the administration of authentication by designing passwords or checking the strength of passwords
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/386—Payment protocols; Details thereof using messaging services or messaging apps
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q40/00—Finance; Insurance; Tax strategies; Processing of corporate or income taxes
    • G06Q40/02—Banking, e.g. interest calculation or account maintenance
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/067—Network architectures or network communication protocols for network security for supporting key management in a packet data network using one-time keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/18—Network architectures or network communication protocols for network security using different networks or channels, e.g. using out of band channels
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/082—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying multi-factor authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
    • H04L2463/102—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measure for e-commerce

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Finance (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Computing Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Technology Law (AREA)
  • Marketing (AREA)
  • Economics (AREA)
  • Development Economics (AREA)
  • Software Systems (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Communication Control (AREA)
  • Computer And Data Communications (AREA)

Abstract

L’invention concerne un procédé de transaction pour un utilisateur 1 utilisant un premier et un deuxième terminal 2 et relié à un serveur 4 via respectivement un premier et un deuxième canal de communication. Le premier terminal 2 envoie 304 au serveur 4 un montant de transaction TA. Le serveur 4 établit 502 à 504 un code de vérification AC dont une longueur L est fonction du montant de la transaction TA puis envoie 505 et 506 une requête Req au premier terminal 2 et le code de vérification AC au deuxième terminal 5. L’utilisateur renvoie 310 ladite requête remplie avec un code recopié AC’ au serveur 4 à l’aide du premier terminal 2. Le serveur 4 compare 508 le code de vérification AC avec le code recopié AC’ et envoie 510, 512 au premier terminal 2 un message de validation ou d’invalidation de transaction en fonction de la comparaison. Figure pour l’abrégé : Fig.3
FR1914346A 2019-12-13 2019-12-13 Procede, serveur et systeme d’authentification de transaction utilisant deux canaux de communication Active FR3104760B1 (fr)

Priority Applications (5)

Application Number Priority Date Filing Date Title
FR1914346A FR3104760B1 (fr) 2019-12-13 2019-12-13 Procede, serveur et systeme d’authentification de transaction utilisant deux canaux de communication
US17/784,861 US12229772B2 (en) 2019-12-13 2020-12-11 Transaction authentication method, server and system using two communication channels
PCT/FR2020/052398 WO2021116627A1 (fr) 2019-12-13 2020-12-11 Procede, serveur et systeme d'authentification de transaction utilisant deux canaux de communication
CA3161325A CA3161325A1 (fr) 2019-12-13 2020-12-11 Procede, serveur et systeme d'authentification de transaction utilisant deux canaux de communication
EP20845185.6A EP4074005A1 (fr) 2019-12-13 2020-12-11 Procede, serveur et systeme d'authentification de transaction utilisant deux canaux de communication

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FR1914346A FR3104760B1 (fr) 2019-12-13 2019-12-13 Procede, serveur et systeme d’authentification de transaction utilisant deux canaux de communication
FR1914346 2019-12-13

Publications (2)

Publication Number Publication Date
FR3104760A1 FR3104760A1 (fr) 2021-06-18
FR3104760B1 true FR3104760B1 (fr) 2023-05-26

Family

ID=70228146

Family Applications (1)

Application Number Title Priority Date Filing Date
FR1914346A Active FR3104760B1 (fr) 2019-12-13 2019-12-13 Procede, serveur et systeme d’authentification de transaction utilisant deux canaux de communication

Country Status (5)

Country Link
US (1) US12229772B2 (fr)
EP (1) EP4074005A1 (fr)
CA (1) CA3161325A1 (fr)
FR (1) FR3104760B1 (fr)
WO (1) WO2021116627A1 (fr)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US12021861B2 (en) * 2021-01-04 2024-06-25 Bank Of America Corporation Identity verification through multisystem cooperation
US20250300982A1 (en) * 2024-03-19 2025-09-25 Truist Bank Accessing non-collocated data corresponding to a detected mobile apparatus

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
SK5232001A3 (en) * 2001-04-18 2002-03-05 Blue Orange S R O Method of safety transactions by means of public networks
WO2005114886A2 (fr) * 2004-05-21 2005-12-01 Rsa Security Inc. Systeme et procede permettant de reduire la fraude
US7657489B2 (en) * 2006-01-18 2010-02-02 Mocapay, Inc. Systems and method for secure wireless payment transactions
US20090307140A1 (en) * 2008-06-06 2009-12-10 Upendra Mardikar Mobile device over-the-air (ota) registration and point-of-sale (pos) payment
US8661258B2 (en) * 2009-10-23 2014-02-25 Vasco Data Security, Inc. Compact security device with transaction risk level approval capability
US9800574B2 (en) * 2013-12-31 2017-10-24 Vasco Data Security, Inc. Method and apparatus for providing client-side score-based authentication
US11151568B2 (en) * 2018-05-09 2021-10-19 Capital One Services, Llc Real-time selection of authentication procedures based on risk assessment

Also Published As

Publication number Publication date
US12229772B2 (en) 2025-02-18
US20230009385A1 (en) 2023-01-12
EP4074005A1 (fr) 2022-10-19
FR3104760A1 (fr) 2021-06-18
CA3161325A1 (fr) 2021-06-17
WO2021116627A1 (fr) 2021-06-17

Similar Documents

Publication Publication Date Title
KR101455891B1 (ko) 네트워크와 통신하는 이동 장비에 의해 수행되는 방법 및 이동 장비와 통신하는 네트워크에 의해 수행되는 방법
FR3079322B1 (fr) Methode et systeme de gestion d'acces a des donnees personnelles au moyen d'un contrat intelligent
CN101816150B (zh) 建立认证密钥的方法和安全无线通信
ATE357099T1 (de) Vermeidung der unberechtigten nutzung eines dienstes
FR3104760B1 (fr) Procede, serveur et systeme d’authentification de transaction utilisant deux canaux de communication
KR20060123345A (ko) 무선 랜에서의 인증을 위한 시스템, 방법, 및 장치들
WO2004057517A3 (fr) Procede et systeme pour autorisation d'homologues
ATE419704T1 (de) Anordnung zur benutzerauthentifizierung und autorisierung der benutzung eines gesicherten systems
HUP0303213A2 (hu) Eljárás és rendszer vezeték nélküli tranzakció elősegítésére
FR2821225B1 (fr) Systeme de paiement electronique a distance
CN110995751B (zh) 一种基于区块链的大数据智慧医疗养老服务方法及其系统
MXPA02007338A (es) Sistema y metodo para controlar el acceso a un sistema de telecomunicaciones o de internet.
WO2019179423A1 (fr) Procédé et dispositif d'appel par carte, procédé et dispositif de poussée d'information, et système d'attribution de carte
FR3052283B1 (fr) Procede de fourniture de donnees relatives a une transaction de paiement, dispositif et programme correspondant
CN105813070B (zh) 一种车载终端通过移动终端进行通信的方法及装置
ZA202300301B (en) Subscription retrieval for anonymous identification
ATE260010T1 (de) Sim basierte authentifizierung als zahlungsverfahren in öffentlichen isp zugangsnetzen
WO2002093513A3 (fr) Procede pour tarifer des services proposes dans un reseau informatique
WO2013044630A1 (fr) Système et procédé de partage d'emplacement et de reconnaissance de conditions routières
CN105451356B (zh) 一种sim卡资源的分配方法及装置
CN113938328A (zh) 一种接口验签的方法和系统
CN105208042A (zh) 一种资源安全访问方法及系统
FR3060785B1 (fr) Procede et systeme d’impression securisee a distance depuis un terminal mobile
CN101959167B (zh) 一种无线Mesh网络的计费方法
ATE393555T1 (de) Verfahren, vorrichtung und system zur behandlung von einem authentifizierungsfehler von einem zwischen einem gsm-netz und einem wlan-netz umherstreifenden teilnehmer

Legal Events

Date Code Title Description
PLFP Fee payment

Year of fee payment: 2

PLSC Publication of the preliminary search report

Effective date: 20210618

PLFP Fee payment

Year of fee payment: 3

TP Transmission of property

Owner name: BANKS AND ACQUIRERS INTERNATIONAL HOLDING, FR

Effective date: 20211202

PLFP Fee payment

Year of fee payment: 4

PLFP Fee payment

Year of fee payment: 5

PLFP Fee payment

Year of fee payment: 6

PLFP Fee payment

Year of fee payment: 7