Wallet-to-wallet transmission of an electronic amount of money (coin)

Exchange-to-Exchange transfer of an electronic money amount (coin)

The invention relates to a method for transferring (transfer) of an electronic money amount ( "electronic coin", "Coin") from a first electronic wallet to a second electronic wallet.

In an electronic purse (partly electronic purse or eWallet called), for example, the German so-called cash card, is stored against prepayment of an amount in one chip of a purse the amount of money corresponding exchange amount and also the

Amount of money credited to a shadow account the background system of the purse. In receipt of funds to the wallet to a merchant terminal with the total amount in the purse will be reduced by the amount of money and a transfer the amount of money corresponding to the record Händlerter- minal. A connection to the background system is not, that is, the payment is done "offline". It was only after closing the trader terminal expects the occupied amounts of money from payments with purses with the background system from. Only then are the account balances of shadow accounts of all purses, from which payments were accepted, tracked. the receipt of money from a wallet is an authorized dealer terminal possible. a direct transfer of funds from one purse to another is not possible, because the danger is feared during the direct transmission across exchanges amounts of money could be duplicated ,

Electronic purses are used primarily for the payment of small amounts (low-value) of a few euros, in the area of ​​so-called micropayments. Meanwhile, there are also a plurality of micropayment systems. In BitCoin the customer acquires electronic units in BitCoin currency and may redeem the units at partners who accept the BitCoin currency against goods or resell. The BitCoin units are not tied to any physical electronic wallet. In Bitmint a customer receives a fee of an amount a

Bit string comprising a N (eg 32) multiplied by amount of money-byte random number. The smallest available unit 1 cent consists of an N (eg 32) byte random number. A cash prize of x Cent consists of a N * x-byte random number. The bit string can be stored and carried in a tangible medium.

WO 2007/106866 A2 describes the transfer of electronic money, which is administered at a financial background system from a transmitter to a receiver through the intermediary of financial background system. To an amount of money from the transmitter to transmit to the receiver can the transmitter send the background system an identifier to the amount of money and sends the identifier to the receiver. Once a competent authority receives the identifier from the receiver in the background system, the background system transmits the power to dispose of the amount of money from the sender to the receiver. During the entire payment process to connect to the background system is required.

From the user point of view of an electronic purse it would be desirable sums offline directly from a wallet to another transfer, similar to the delivery of cash. There is both a risk that the sender the amount of money from his wallet does not delete and outputs multiple. On the other hand, the sender can not be sure that the recipient has received the amount of money. threatened loss of the money. Once the sender has the amount of money cleared in his wallet, He may also refer not resend to the recipient, if he has doubts that the recipient has received the amount of money. Abstract words, the amount of money to be reliable teleported from the purse of the sender to the recipient, ie dwindling reliable supply at the transmitter and arrive reliably at the receiver.

The invention has the object of providing a method for transmitting an electronic sum of money (an electronic coin) from a first electronic wallet to a second electronic wallet to create, which is secured against both loss and against abusive duplication of the money.

The object is achieved by a method of claim 1. Advantageous embodiments of the invention are specified in the dependent claims.

The method according to claim 1 is provided for transmitting an electronic sum of money from a first purse of a transmitter to a second purse of a receiver. Here, the amount of money from the first electronic wallet is transferred to the second electronic wallet. The amount of money is thereby charged with the first electronic wallet, that is deleted, ie deducted from the total balance of the first purse, and be credited with the second electronic wallet, that the information presented on the second purse bank added. The method is characterized in that

a) the amount of money will be locked to the second electronic wallet before transferring, so that the amount of money by the second wallet can not be used to make a payment; b) is transferred to the blocked amount of money from the first electronic wallet to the second electronic wallet;

c) the blocked amount of money is stored in the second electronic wallet;

d) is transmitted an acknowledgment of receipt of the second electronic wallet to the first electronic wallet;

e) receiving the acknowledgment of receipt of the first electronic wallet;

f) is deleted in response to receipt of the acknowledgment of the amount of money in the first electronic wallet;

g) is released in response to debit the amount of money a release tokens in the first electronic wallet for transmission to the second electronic wallet;

h) will transfer the released token from the first electronic wallet to the second electronic wallet;

i) will receive the token release in the second electronic wallet; and

j) is unlocked when the second electronic wallet with the release token of blocked amount of money, so the amount of money may be used by the second wallet to a payment.

Locking the amount of money in accordance with step a) of the foundation is laid that the amount of money not simultaneously exist in two purses in usable (output enabled, otherwise solvent) form. Casual is also causes a third party could steal the amount of money, but can not use. If the recipient, ie, does not get the amount of money the owner of the second purse, the transmitter can, ie the owner of the first purse, send it again just to the recipient. Once on the other hand, the transmitter (first purse) the acknowledgment of receipt tion received in accordance with step e), the sender can be sure that the receiver has received the amount of money. Thus, the transmitter can the amount of money still in that first purse (ie delete) withdraw. The amount of money is thus secured against loss. The sender can also expect to actually get the acknowledgment from the receiver. The receiver is in fact motivated to send the receipt to the sender because it still requires the release token from the transmitter to unlock the received amount of money. Conversely, the transmitter would have any advantage from a generated token release restrain instead it sent to the recipient. Because the amount of money is at the transmitter when in this release a token exists already deleted. A non-member of the ENABLE tokens would most annoy the receiver and keep him with the transmitter from future transactions. The amount of money is also protected against copying the transmitter. Once the sender has sent the amount of money to the receiver, and as soon as the recipient has received the amount of money the sender is in the obligation to send the release token. The transmitter achieves the release token with him only after he has the amount of money in his (first) Wallet deleted (debited). Will the station's continued effort to it must therefore be at the amount of money delete forcibly and can not keep, Third eg for retransmission, for example to a the amount of money.

The transmitter preferably preserves the release token as long with him on until he can be sure that the recipient has received the release token. If the recipient has not received the release token, what may happen, for example due to transmission problems between transmitter and receiver, it will request it at the transmitter again. The transmitter can send the release token safely as often as necessary again. Therefore, according to claim 1, a method for transmitting an electronic money amount is created (an electronic coin) from a first electronic wallet to a second electronic wallet, the well is well protected against loss and against abusive duplication of the money.

According to step g) the release tokens in response to the deletion of the money is released for sending. Optionally, the release token already exists. Depending on the embodiment may alternatively be provided that the release token is not generated in response to the deletion of the money and then released for sending.

If receiving no acknowledgment after repeated sending of the money in the first purse, preferably starts through the first purse from the fact that the second purse has not received the amount of money. Therefore, alternatively, if the acknowledgment is not received or not after a predetermined time interval in accordance with step e) in the first electronic wallet, repeated in the first purse of step a) the transmission of the monetary amount. Since the amount of money is blocked, the money will not be duplicated by the resending.

Optionally, only the amount of money recently sent a release tokens in step g) is further, after sending to step b) one or more times has been repeated generated. This causes that the repeated transmission is an acknowledgment of the first transmission of a sum of money, and not the sending of a new, additional amount of money. Optionally it can be provided to the holder of the first purse a choice between either again, sending the same amount of money as a confirmation (amount of money is only one charged), or alternatively send a new amount of money (amount of money is so often off bay as sent).

Optionally, if the release token is not or is not received after a predetermined time interval in accordance with step i) in the second electronic wallet, in the second electronic wallet veran- let that in the first purse, the step h) of transmitting the release tokens is repeated. The second wallet sends example to the first purse as often as necessary, a request to send the token release again until the second purse enters the release token. Preferably in the first purse a secure runtime environment is set up under the administration of a first secure operating system, established in the second purse a secure runtime environment under the administration of a second secure operating system, and between the secured runtime environment of the first purse and the secure runtime environment, a second purse cryptographically secure communication channel established. It is through the secure runtime environments of the first and second purse and the cryptographically secured transmission channel a secure transmission system is formed. The operations of blocking the amount of money in step a), of releasing the release tokens in step g) and of unlocking in step j) are thereby performed within the secure transmission system, in particular without action is a user of the first purse and without action is a user of the second purse , This is particularly reliably ensured that the amount of money and the release token several times so can not be sent to receive him more recipients and can unlock below.

Optionally, the amount of money is individualized by the amount of money is marked with a unique identifier, in particular a random number which is generated for each process of transferring a sum of money in accordance with step b). This process of sending each a sum of money will be unique. A retransmission of the money is a distinguishable new process.

Optionally, the amount of money is newly customized for each repeating the sending of step b) and still existing previously individualized monetary amounts are deleted without an enabling token is released for transmission to the second purse. Each repeated sending with a newly individualized amount of money and a subsequent holding of release token represents a confirmation of one and the same amount of money. The amount of money, after he was repeatedly sent (maximum) charged only once both the first purse. A, according to an alternative, optional also possible new Send a sum of money with new generating an enabling token effected against the fact that the amount of money charged as often as sent.

Optionally, the amount of money and the release tokens are individually matched to one another that the corresponding individualized release token only locked in step a) individualized amount of money can be unlocked.

Optionally, further

the amount of money through operational processing, in particular comparison in step a) XOR-ung, locked with the identifier and the same time individualized to a locked, individualized amount of money;

sent in step b) of the locked, individualized amount of money;

amount sent in step d) to confirm the receipt of the locked, individualized money;

addition of individualized amount of money cleared in step f);

Released in step g) of the identifier as the release token; and

in step j) of the locked, individualized amount of money through operational processing, in particular re-ver-XOR-ung, blocks with the identifier corresponds.

As identifier may be provided, for example, a random number. When operational processing, the same causes blocking and individualization, (Session Key) can be provided for example an encryption using a session key.

Optionally, on the occasion of blocking of funds in accordance with step a) or on the occasion of transferring a sum of money in accordance with step b) it is checked whether the first purse or more release tokens are stored, and stored released tokens are deleted in the first purse. This ensures that release tokens can not be used multiple times to unlock several different amounts of money. Optionally, a symmetrical or asymmetrical key pair is in the first purse generated using an encryption key and a decryption key, said further: is locked in step a) the amount of money by means of the encryption key, in particular by encrypting the sum of money with the encryption key; in Step g) is released as a token release in the first electronic wallet for transmission to the second electronic wallet in response to debit the monetary amount of the decryption key; and in step h) in the second electronic wallet with the decryption key of the blocked amount of money unlocked particular decrypted is. In the symmetric variant encryption key and decryption key are the same, in the asymmetric variant, they are each other accordingly. Optionally, the key pair is kept in a secure transmission system, as indicated above, especially without access possibilities of a user of the first purse and without access possibilities of a user of the second purse on the key pair. Optionally, a new key pair is generated for each process of blocking of funds in accordance with step a), so that the release token generated in step g) can only be used at most to unlock the associated, previously in step b) the transferred amount of money. In particular, as a key (encryption and decryption keys) are selectively generates session keys that are used only once.

1 shows a system illustrating the invention; The invention at hand of embodiments and with reference to the drawings is explained in more detail in FIG.

Fig. 2 shows another system for illustrating the invention.

FIG. 1 shows an implemented in a mobile phone first electronic wallet (e-wallet) A and one in another mobile phone implemented oriented second electronic wallet (e Wallet) as a monetary amount G, a Coin (receive one electronic coin) is to be teleported from A to B. The first purse A disables the amount of money G so that it is unblocked again with a release token FT, and sends the blocked amount of money G / FT along with a random number as an identifier ID to the second purse B. The second purse B stores the locked Coin G / FT and sends a delivery confirmation EB / ID which comprises the identifier ID to the first purse a. Once the first purse A has received the acknowledgment EB / ID and has recognized that the identifier ID matches the identifier of the money G, the first purse A the amount of money G. deletes Immediately upon by deleting, in the first purse A an enabling token FT released for the amount of money G with the identifier ID. The first purse A sends the release token FT along with the identifier ID to the second purse B. The second purse B identifies that the identifier ID of the release token FT to identifier ID of the previously stored locked cash sum G suits and unlocked the amount of money G with the release token FT.

This is a total of the amount of money G has been destroyed due to the first purse A and produced in the second purse B, has therefore teleported from A to B.

Fig. 2 shows a system similar to that shown in FIG. 1. In the system of FIG. 2 the amount of money G COIN is characterized locks in the first purse A charged and individualized same time that he is a public session key SKPUK derived from the public key PUK an asymmetric key pair, encrypts to ENC Coin (SKPUK). In step b) the so encrypted sum of money is G * = sent ENC Coin (SKPUK) to the second purse B, together with the pub- lic session key SKPUK. The second wallet sends B d) the public session key SKPUK as acknowledgment EB to the first purse A back. In response to receipt of the acknowledgment EB monetary amount G f) of the public session key SKPUK corresponding private session key SKPRK g) is in the first purse A deleted and then released and sent to the second purse h). In the second purse B i) is the amount of money encrypted ENC Coin (SKPUK) with the received private session key decrypted SKPRK to G = Coin = DEC ENC Coin (SKPUK) (SKPRK). The amount of money G is now successfully deleted freely available in the second purse and B in the first purse A. Each session key SKPUK, SKPRK respectively only be used for a single transaction of funds, for example, by deriving the key PUK or PRK using a random number. This individualization is achieved.

According to FIG. 2 of the amount of money G has been banned and individualized by encryption using a session key SKPUK. Alternatively, the amount of money by encryption using a symmetric key, in particular session key, be locked and unlocked again. As acknowledgment for example, a hash value of the symmetric

Key, in particular session key, are used. As token release is to decrypt the keys and session keys used. Alternatively, the amount of money by Ver-XOR-ung with an identifier ID, especially a random number RND, locked and be listed individually to GxID. The acknowledgment of receipt GxID used. To unlock is again with the random number ver XOR t, that is, as a token release the identifier ID, in particular random number RND, transmitted from A to B.