Method and assembly for the transfer of sums of money between transferable memories of an IC-card

The invention relates to a method for transferring sums of money between at least two rewritable memories of a chip card using a terminal which can be connected to a central device, in particular a billing center in accordance with claim 1 and a plant for carrying out the method according to claims 7 and 8. FIG.

For some time are smart cards that contain an electronic wallet of a stock exchange or service provider, available which can be paid at designated Abzeptanzstellen instead of cash. Basically, two methods are known that enable the charging of the electronic purse on the smart card. After the first method to load amounts of money, for example, in cash, with an EC card or a credit card pre-paid and then loaded as money denominations in the electronic purse on the smart card. The other method, the smart card is inserted into an ATM and initially identifies himself against a security module or a background system. At once stored on their bank details of the customer is transferred to the security module. After entering the desired amount of money to the ATM machine and loading the electronic wallet with this amount of money a booking record is generated, on the one debits the cardholder with this amount of money and on the other hand this amount credited to the account of the exchange operator. However Prefer a different card issuers Exchanges providers allow for the possibility to use the electronic purse on the smart card together, this often results in practical difficulties. For the operation and administration of a so-called open market system, in which several exchanges providers a single electronic wallet use in common is much more complicated and therefore more costly than in closed market systems where each exchanges provider assigned its own electronic purse on the smart card is the case. Another disadvantage of the open market system is the fact that a possible misuse of the card is hardly recognizable as a rule. The difficulties of an open market system can be avoided that the card issuer each exchange providers own electronic purse on the smart card assigns, ie a closed market system creates. However, this leads to the cardholder at a disadvantage in that it must bind to each electronic wallet. If a customer wants to use as a purse, on which no monetary value units are stored more, he must continue to spend money, even if sufficient funds are on the other electronic wallets yet by any of the above methods.

The invention is therefore based on the object to provide a method and a system available, with which the disadvantages of the known open and closed Boersensysteme be avoided.

The technical problem the invention solves with the method steps of claim 1 and the features of claims 7 and 8. Advantageous further developments are mentioned in the subclaims.

The invention is based on the idea of ​​being able to more, on a smart card implemented electronic purses of different exchange operator, form a coherent se exchange system to pair with. For this purpose, the invention provides a method for transferring money between at least two rewritable memories of a smart card by means of a terminal a card reader contained ready that can be connected to a central facility, the first, a first exchange operator assigned memory initially loaded with a predetermined amount of money is. First, the chip card is inserted into the card reader of the terminal. Then, the predetermined amount of money is transferred from the first memory in the second, a second exchange operator associated memory. After Umladeprozedur a booking record is generated, which is transferred to another settlement to the central facility. However, before funds are transferred between the memories, the IC card performs with a assigned to the terminal security module or a background system through a mutual, known per se authentication. The smart card can be programmed so that it automatically reloads in response to a cryptographically secure trigger signal from the security module to the input at the terminal amount of money from the first memory to the second memory. Alternatively, the smart card acts only as a slave device to cryptographically secured control commands from the security module reads the input at the terminal amount of money from the first memory in response and enrolls in the second memory. The central device in which it is a debit headquarters usually makes in response to the posting record for that the transhipped amount of money is credited to the account of the second stock exchange operator and the account of the first electronic purse operator is charged with this amount. The booking record may also be cryptographically secured. The exchange operator said first memory, which is the so-called major stock exchange operator, is able to verify the cryptographically secured booking record. Under a cryptographic data security is generally understood as the encryption of data to be transmitted itself. A cryptographic data security is but also when the user data are transmitted in plain text, but additionally attached from the user data derived message authentication code (MAC of message authentification code) becomes.

The invention allows a customer to a simple way to access the electronic wallet of another stock exchange operator, if he needs an electronic wallet of another market operator, which is integrated on the same chip card, just yet. With the invention, the advantages of a closed market system, in particular the independence of the individual exchange operators and their assigned on a smart card electronic purses, are preserved.

The invention is explained below using an exemplary embodiment in conjunction with the accompanying drawings.

The figure shows the block diagram of a system with which the inventive method for transferring sums of money can be carried out between at least two rewritable memories of a smart card. A greatly enlarged scale in relation to the other components of smart card 10 includes a memory 20, which is also commonly referred to as an electronic wallet. The memory 20 is the main stock exchange, which is associated with a first exchange operator. In the first exchange operator if it were, for example, a department store. On the smart card 10, a second memory 30 is implemented, which acts as a second electronic wallet and another stock exchange operator is assigned.

For further description, it is assumed that it is the second exchange operator is a telecommunications network operator that provides, among other public telephones. Such a card phone is provided in the figure by the numeral 40th The Cardphone 40 course has a smart card reader, which is not shown. A security module 50, whose function will be described in greater detail below is, for example, integrated in the phone card 40; however, it may also be associated with this external. The system further comprises a known ec-ATM, where the chip card holder can load its primary exchange 20th For simplicity, only the designated 45 ec-ATM is shown. The store has a total account 70, also called pool account that the total financial transactions of cardholders with the department store and the telecommunications carriers are handled. The cardholder has an account 90, whereas the telecommunications network operators own account leads 80th Each Kartentelephon 40 and each ec-ATM 45 are connected to a Abbrechnungszentrale 60th The billing center 60 is designed such that it 80 of the telecommunications networks driver can complete all requested by the card holder with respect to its smart card 10 movements of funds in the total account 70, the customer 90 and the account.

The operation of the system and method of the invention will now be explained with reference to the following scenarios. First, assume that the cardholder's main exchange 20 with a cash prize of 50, - has already loaded DM. He can at the ATM 45 or any electronic cash terminal of the store to make the ATM 45 transmits to the transaction of the desired cash amount of 50, - DM a reservation record to the billing center 60. The billing center 60 is caused in response to the booking record that the account of the cardholder 90 with the amount of 50, - is charged DM. At the same time debiting Central 60 ensures that the money will be credited on the account sum 70 of the department store. The cardholder wishes to make a call now on the map Phone 40th Surprised, he notes that, no credit is stored on the electronic wallet 30 which is associated with the telecommunications network operator. Without again having to withdraw money from his account 90, it can, thanks to the invention, a desired amount of money, say of 20, - DM, reload from memory 20 to memory 30th Given the cardholder takes his smart card 10 into the card reader of the card phone 40th The payphone 40 may 20 and 30 for example, read the current assets of the purses on the smart card 10 and show the customer on a display. Because no credit is stored on the memory 30, the customer causes the transhipment of the desired amount of the main exchange 20 of the department store on the stock exchange 30 of the telecommunications network operator. To increase the safety for money transfer, a mutual authentication between the imported chip card 10 and the card telephone 40 associated security module 50 is performed before the actual money Umladeprozedur. The security module 50 satisfies itself that the inserted smart card 10 is genuine. Also located 10 convinced the smart card from the fact that the terminal 40 or the security module 50 is genuine. where Kartentelephon 40 a DM to be transferred from the memory 20 into the memory 30, - After a positive authentication of the cardholder enters the desired amount of 20. The smart card 10 is operated in slave mode, ie the Umladeprozedur is controlled from the outside, for example, the security module 50th First, the cardholder is prompted by the phone card 40 to enter his personal identification number. After an examination of the secret number is correct reads the card phone 40 the expiration date and the card number from the smart card 10 and checks whether the expiration date has expired and if necessary, the card number is in a locked file. The examination showed that the expiration date has not expired or that the card number is in a locked file. The cardholder passes on the card phone 40 a the Umladeprozedur means of a key sequence, after which the card telephone 40 associated security module 50 first transmits a cryptographically safe "reducing instruction" to the smart card 10th In response to the decreasing command 10 reduces the chip card, the balance in the main exchange 20 to the mentioned reduction in the amount of money order of 20, - DM and transmits cryptographically secured response to the security module 50 back. The security module 50 transmits a cryptographically secured "reload" command to the smart card 10, the response to the Umladebefehl to read from the memory 20 the amount of 20, - writes DM in the memory 30 and again a cryptographically secure answer to the security module 50 sends back. After the Umladeprozedur is completed, generates the security module 50 a cryptographically secure accounting data set corresponding to the transhipped balances. The cryptographically secure accounting record is sent in the next step to billing center 60th The billing center 60 causes after receiving the booking record that the total account 70 of the department store with the transshipped amount of 20, - DM is charged. In other words, the memory 20 has after Umladeprozedur only a credit of 30, - DM. At the same time, the billing center 60 ensures that the transhipped from the memory 20 to the memory 30 cash prize of 20, - DM to the account 80 of telecommunications network operator will be credited. The inventive method provides that the cryptographically secure booking record may be reviewed by the store at any time.

Instead of letting the Umladeprozedur a predetermined amount of money from the main memory 20 into the memory 30 under control of the security module 50 carry, the smart card 10 can be programmed such that they to a cryptographically secured trigger command from the security module 50 the Umladeprozedur executes independently in response.