Smart card loading transactions using wireless telecommunications networks
A smart card transaction allows a consumer to load value onto a smart card and to make purchases using a smart card with a mobile telephone handset over the telecommunications network. For loading, the system includes: a mobile telephone handset including a card reader; a gateway computer; a funds issuer computer; and an authentication computer. The mobile telephone handset receives a request from a user to load a value onto the smart card. The handset generates a funds request message which includes the value and sends the funds request message to a funds issuer computer. The funds issuer computer debits an account associated with the user. Next, the handset generates a load request message with a cryptographic signature and sends the load request message to an authentication computer which authenticates the smart card. The handset receives a response message which includes a cryptographic signature and an approval to load. Finally, the handset validates the second cryptographic signature and loads the value onto the smart card. For payment, the system includes a merchant server and a payment server. First, the handset sends an order request message to the merchant server computer, and in return receives a purchase instruction message. The handset processes the purchase instruction message locally, and then sends a draw request message to a payment server computer. The payment server computer sends a debit message which includes a cryptographic signature and an approval to debit the smart card. Finally, the handset validates the cryptographic signature and debits the smart card.
1. A method of loading value onto a smart card that is in communication with a mobile telephone handset of a user, said method comprising:
sending a funds request message from said handset to a bank system that controls an account of said user, said funds request message including a load value and a funding account identifier that identifies said account of said user;
sending a funds response message from said bank system to said handset indicating an approval to debit said user account by said load value;
sending a load request message from said handset to an issuer system, said load request message including a first cryptographic signature, wherein said first cryptographic signature is generated using a first cryptographic key shared between said smart card and an issuer of said smart card;
validating said first cryptographic signature by said issuer system and authenticating said smart card;
sending a load response message from said issuer system to said handset including a second cryptographic signature, wherein said second cryptographic signature is generated using a second cryptographic key shared between said smart card and said issuer of said smart card;
validating, by said smart card, said second cryptographic signature; and
loading said load value into a stored-value application of said smart card.
2. A method as recited in claim 1 further comprising:
debiting said user account of said bank system by said load value; and
crediting said issuer system by said load value, whereby liability for said load value is transferred to said issuer system.
3. A method as recited in claim 1 further comprising:
incrementing a value of said smart card in a database of an administration system computer by said load value, wherein said incremented value in said database reflects the value of said stored-value application of said smart card.
4. A method as recited in claim 1 further comprising:
processing said funds request message, said funds response message, said load request message and said load response message by a gateway computer located between said handset and said bank system and between said handset and said issuer system, wherein said gateway computer uses a different message protocol for communication with said handset than with said bank system and said issuer system.
5. A method as recited in claim 1 further comprising:
generating, by said smart card, a cryptographic signature S 3 using a third cryptographic key shared between said smart card and said issuer of said smart card;
sending a settlement funds request message over said network from said handset to said bank system to effect the debiting of said user account of said bank system by said load value; and
sending a settlement load request message that includes said cryptographic signature S 3 over said network from said handset to said issuer system to effect the crediting of said issuer system by said load value, whereby liability for said load value is transferred to said issuer system.
6. A method as recited in claim 1 wherein said smart card may be disconnected from said handset without affecting the telecommunications functionality of said handset.
7. A method as recited in claim 1 further comprising:
receiving a request from said user at said handset to load said load value; and
prompting said user to place said smart card into communication with said handset using a card reader interface.
8. A method as recited in claim 1 wherein said first cryptographic key and said second cryptographic key are the same key.