Server device for controlling a transaction, first entity and second entity
Server device for performing a transaction in a system having a first entity, such as a POS, a second entity, such as a user having a mobile phone with a digital camera, and a remote server. The first entity generates a code having a transaction information and sends a first message to a server. The second entity, such as a buyer of a product or a user of a service captures the code and transmits a second message to the server having information on the transaction extracted from the code. The transaction is only authorized, when the server has determined that the first message and the second message match with each other. The transaction can be a payment transfer, a grant of an access to a service or a grant of an access to an internet portal.
1. A server device for controlling a transaction between the first entity and the second entity, comprising:
a receiver for receiving a first message from the first entity, the first message comprising first information related to the transaction, and a second message from the second entity, the second message comprising second information related to the transaction;
a matcher for checking whether the first information in the first message and the second information in the second message comprise a predetermined relation to each other; and
an output interface for authorizing the transaction, when the first information and the second information comprise a predetermined relation and for rejecting the transaction, when the first information and the second information do not comprise the predetermined relation to each other,
wherein the matcher is adapted to perform a check whether a time difference between a reception or generation of the first message and a reception or generation of the second message or a time difference between a generation of an identification code in the first entity and a transmission or reception of the first message or the second message is greater than a predetermined amount of time or not,
wherein the output interface is operative to reject a transaction, when the predetermined amount of time is exceeded,
wherein each of the first message and the second message comprises a time stamp indicating a generation or a transmission time, and wherein the matcher is operative to perform the check based on the time stamps of the first message and the second message, or
wherein the second message comprises a time code generated by the first entity, and wherein the matcher is operative to perform the check by comparing the time code generated by the first entity to a reception time of the second message.
2. The server device in accordance with claim 1 , in which the transaction information comprises a transaction ID uniquely referencing a transaction record comprising further information on the transaction, and
in which the matcher is operative to determine whether a message from the first entity and the message from the second entity comprising matching transaction IDs have been received by the receiver.
3. The server device in accordance with claim 1 , in which the transaction is a payment transaction or a cash redraw transaction, and the output interface is operative to initiate the communication to a payment or a cash providing institute only when the transaction has been authorized.
4. The server device in accordance with claim 1 , in which the transaction is an access to a data service of the first entity, and in which the output interface is operative to only authorize the transaction by sending an authorization message to the first entity.
5. Server device in accordance with claim 1 , wherein the second message is derived from an optical, radio, touch, contactless or active ID code.
6. A method, performed in a server device, for controlling a transaction between the first entity and the second entity, comprising:
receiving, by a receiver, a first message from the first entity, the first message comprising first information related to the transaction, and a second message from the second entity, the second message comprising second information related to the transaction;
checking, by a matcher, whether the first information in the first message and the second information in the second message comprise a predetermined relation to each other; and
authorizing, by an output interface, the transaction, when the first information and the second information comprise a predetermined relation and for rejecting the transaction, when the first information and the second information do not comprise the predetermined relation to each other,
wherein, in checking, a check is performed, whether a time difference between a reception or generation of the first message and a reception or generation of the second message or a time difference between a generation of an identification code in the first entity and a transmission or reception of the first message or the second message is greater than a predetermined amount of time or not,
wherein a transaction is rejected, when the predetermined amount of time is exceeded,
wherein each of the first message and the second message comprises a time stamp indicating a generation or a transmission time, and wherein the check is performed based on the time stamps of the first message and the second message, or
wherein the second message comprises a time code generated by the first entity, and wherein the check is performed by comparing the time code generated by the first entity to a reception time of the second message,
wherein at least one of the receiver, the matcher and the output interface comprises a hardware implementation.
7. A non-transitory storage medium having stored thereon a computer program for performing, when running on a computer, a method, performed in a server device, for controlling a transaction between the first entity and the second entity, the method comprising: receiving a first message from the first entity, the first message comprising first information related to the transaction, and a second message from the second entity, the second message comprising second information related to the transaction; checking whether the first information in the first message and the second information in the second message comprise a predetermined relation to each other; and
authorizing the transaction, when the first information and the second information comprise a predetermined relation and for rejecting the transaction, when the first information and the second information do not comprise the predetermined relation to each other, wherein, in checking, a check is performed, whether a time difference between a reception or generation of the first message and a reception or generation of the second message or a time difference between a generation of an identification code in the first entity and a transmission or reception of the first message or the second message is greater than a predetermined amount of time or not, wherein a transaction is rejected, when the predetermined amount of time is exceeded, wherein each of the first message and the second message comprises a time stamp indicating a generation or a transmission time, and wherein the check is performed based on the time stamps of the first message and the second message, or wherein the second message comprises a time code generated by the first entity, and wherein the check is performed by comparing the time code generated by the first entity to a reception time of the second message.