TH44503A - Methods and communication systems for electronic transactions in mobile communication networks. - Google Patents

Abstract

DC60 (08/06/43) This invention relates to a system, method, and communication device for the efficient operation of electronic transactions between mobile subscribers in a mobile communication network and network equipment, using a credit card payment model. The model used in secure electronic transactions, such as SET™, is isolated across a number of related communication units. To achieve this, the first part of the model, which would normally reside in the user's mobile station, is divided into two parts. The first part contains the subscriber's personal information, such as private keys or credentials, which reside in the mobile station. The second part of the software is shifted to a server located between the mobile station and the merchant. Thus, this invention ensures, on the one hand, the possibility of integrating sophisticated electronic payment software into a network governed by characteristics of low transmission capacity and terminal equipment with sufficient storage capacity, and on the other hand, the security of the user. Furthermore, this invention ensures compatibility with currently used software. This invention relates to a system, method, and communication device for the efficient operation of electronic transactions between mobile subscribers in a mobile communication network and network equipment, using a credit card payment model. The model used in secure electronic transactions, such as SET™, is fragmented across a number of related communication units. To achieve this, the first part of the model, which would normally reside in the user's mobile station, is fragmented into two parts. The first part contains the subscriber's personal information, such as private keys or credentials, which resides in the mobile station. The second part of the software is forwarded to a server located between the mobile station and the merchant. Thus, this invention ensures, on the one hand, the possibility of integrating sophisticated electronic payment software into a network governed by characteristics of low transmission capacity and terminal equipment with sufficient storage capacity, and on the other hand, the security of the user. Furthermore, this invention ensures compatibility with currently used software.

Claims (26)

1. A communication system for electronic transactions between mobile stations (MS) in a mobile network (MN) and network equipment (NV) in an open network (ON), which consists of an additional device (WV) between the mobile station and network equipment and a model (PT) for secure electronic transactions, separated into Part One (PT1) to control the personal data of the subscriber parties, and Part Two (PT2) where Part One (PT1) is used in the mobile station (MS) and Part Two (PT2) in the additional device (WV), and where electronic transactions are processed from the mobile station through the additional device to the network equipment. 2. Communication system as defined in Claim 1, whereby the Mobile Station (MS) shall receive the private keys of the Mobile Subscriber. 3. Communication system as specified in either Claim 1 or 2, whereby the Additional Device (WV) will handle matters of assurance and public key. 4. A communication system as specified in any one of Claims 1 through 3, where the execution of the mobile subscriber signature process takes place at a mobile station. 5. A communications system as specified in any one of Claims 1 through 4, where the additional device (WV) controls the entire process of the electronic transaction. 6. Communication systems as specified in any one of Claims 1, 3, or 5, where additional devices (WV) are installed in either the mobile network or in external network mode. 7. A communications system as specified in any one of Claims 1, 2, or 4, in which a mobile station comprises the functions of a personal computer and a mobile phone provided for communication with a mobile communications network. 8. A communication system as defined in any of Claims 1 through 7, where electronic transactions are conducted by exchanging information on signaling. 9. A communication system as specified in any one of the claims 1 through 8, where the order and payment constitute an electronic transaction. 10. A communication system as specified in any of Claims 8 to 9, where information in the form of signals is transmitted in an encrypted manner. 11. Communication systems as defined in Claim 10, where symmetric and asymmetric encoding methods shall be used to encode and decode information as signals. 12. Communication systems as defined in Claim 11, where the keys used in the encryption method may be the same or related to each other in such a way that a message encrypted by one key can be decrypted by another key. 13. Communication systems as specified in any of Claims 10 through 12, where the key is a symmetrical key or a private and public key. 14. Communication systems as specified in any one of Claims 4 through 13, where the signature process is also valid through authentication procedures based on asymmetric cryptographic methods. 15. Communication system as specified in any one of Claims 4 through 14, where messages are sent from an additional device to a mobile station during the signature process, whereby the mobile station signs the received message with its own private key and sends it to the server to notify the server of the mobile station's signature. 16. A communication system as specified in any of Claims 1 through 15, where electronic transactions shall be conducted using an electronic transaction model. 17. Communication systems as defined in Claim 16, where the transaction model is Cyber-Cash, First Virtual, or Secure Electronic Transaction™ (SET™). 18. Communication systems as defined in Claim 1, where the mobile networks are Global System for Mobile Communication (GSM), General Package Radio Service (GPRS) and the Universal Mobile Telecommunication System (UMTS) network. 19. Methods for conducting electronic transactions between mobile stations (MS) in a mobile communication network (MN) and network devices (NV) in an open network (ON) and peripheral devices (WV), and models (PTs) for conducting secure electronic transactions, where such models are separated into Part One (PT1) to control the personal data of the subscriber parties and Part Two (PT2), where transactions from the mobile station (MS) to the peripheral device (WV) are controlled by Part One (PT1), and where transactions with the network device (NV) in the open network (ON) are controlled by Part Two (PT2), which is integrated into the peripheral device (WV). 20. The method specified in Claim 19, where personal information is the personal key of the subscriber's partner. 21. The method specified in Claim 19, where the second part of the software contains public information of the subscriber line. 22. The method specified in Claim 21, where the specific information is at least the public key of the subscriber line and an additional assurance portion. 23. One of the methods specified in Claims 19 to 22 shall, whereby the signature process shall be initiated by the mobile device by sending an initial signaling message (Requeat_Message) and the termination of the initial phase shall be fed to the mobile device by sending a signaling message (RequestSignProcess) with such effect, and whereby, upon completion of the signature process, the payment process of the additional device shall be initiated by sending a message (ResponseSignProcess) and the result of the completed payment process shall be fed to the mobile device by sending a message (Response). 24. The device in the mobile station shall perform the procedures specified in Claim 19, which comprises: - the first part of the retrieval route for handling the personal data of the subscriber's partner in the mobile station; - the transmission route; - the route for receiving electronic transactions in the mobile station; - the route for receiving electronic transactions between the mobile station and additional devices; and - the data reception route. 25. Equipment as specified in Claim 24, which includes the means for carrying out the signature process. 26. Inter-station devices and network devices to carry out the methods specified in Claim 19, which include: - storage paths; - transmission paths; - paths for handling publicly accessible subscriber line data; - paths for controlling electronic transactions between interstation devices and network devices; and - reception paths.