WO2010010062A2

WO2010010062A2 - Untamperable anonymous payment system

Info

Publication number: WO2010010062A2
Application number: PCT/EP2009/059293
Authority: WO
Inventors: Andreas Traint; Michael Türk
Original assignee: Andreas Traint; Tuerk Michael
Priority date: 2008-07-21
Filing date: 2009-07-20
Publication date: 2010-01-28
Also published as: WO2010010062A3; AT10546U3; AT10546U2

Abstract

The invention relates to a method for processing secure payment transactions in a data network (18) and in a telecommunications network (19) by way of a management system (10). The management system comprises at least one database server (11) with at least one database containing anonymous numbered accounts (14) and authenticatable buyer accounts (15). Simple and secure access processes (12) to access these accounts allow the buyer (17) to anonymously or non-anonymously process the payment transaction. The invention also relates to a technically automated registration method. According to the invention, the transport of purchased goods or services is monitored and controlled in a technically automated processing system (13). By way of the processing system (13), the sellers (16) have access to technical methods for accelerating confirmation of orderly receipt of the goods by the buyer (17). Said methods enable the anonymous and secure payment of monetary amounts for buyers (17) and for sellers (16) with a high degree of user-friendliness, and a balance of risk between the partners is secured.

Description

description

ABUSE FREE, ANONYMOUS PAYMENT SYSTEM Technical area

The invention relates to a method for handling fraud-free payment transactions in an existing data network and also without a data network, with a new management system that enables all important technical connections between buyers and sellers. Both partners attach great importance to secure, simple and fast processing.

State of the art

For the processing of payment transactions in a worldwide data network (Internet) are still predominantly the traditional cashless payment methods such as credit card, invoice, direct debit or cash on delivery. The credit card offers the advantage that a seller of goods or services gets his money relatively safe. However, the buyer carries a great risk, as his credit card details are spied on the Internet and can be misused by third parties. Although the sensitive customer data is exchanged over the so-called SSL (Secure Sockets Layer) standard, many Internet users still shy away from using this payment method.

The payment of small amounts of money by credit card is often not possible and the merchants often find this type of payment because of the high commissions unattractive. Therefore, so-called payment systems are developed for the payment of funds via the Internet.

In the meantime, essentially three different methods have become established among the payment systems:

A.) Telephone-based systems use the landline or

Mobile phone connection of a customer for identification and debiting. Also, the payment can be made via expensive premium phone numbers (in Austria these have the area code 0190). Such a system is known, for example, under the name "Paybox". B.) Credit-based systems rely in principle on existing

Accounts of a buyer, such as his checking account. A well-known example is the cash card, which is charged via the current account of a buyer.

C.) Trusted third-party systems in which a trusted third party handles the payment process. The customer collects payment amounts from a customer over a certain period of time and posts them either from the customer's credit card or current account. Such a system is known by the name "PayPal".

Presentation of the invention

Anonymous payment is necessary for data protection reasons, but can also be abused for criminal purposes. Protected by anonymous payments, crimes can be committed that would not be possible with cash (other than counterfeit banknotes). Since a possible misuse of anonymous payments can not be tolerated, the granted anonymity must be limited. Payment systems with limited anonymity are usually based on the concept of the trustee (like the method according to the invention), which can subsequently cancel the anonymity of each payment (in the case of goods delivery according to the customer's request, it must also cancel). If the anonymity was abused, the perpetrator can always be determined in this way. However, both clients and law enforcement agencies must trust the trustee to disclose the anonymity of a payment only if there is a court order. The present invention includes technical methods that enable a so-called "Deanonymization" and - which is completely new - in which each registered customer or "buyer" can control itself, whether such a Deanonymisierung has taken place. Every activity in the payment transaction is documented technically (free of abuse) automatically and made available only to authorized partners.

A disadvantage of the known systems is sometimes the missing

Anonymity of the buyer. In some cases, the buyer is identifiable, in part, he must be. This is the buying behavior of a Customer comprehensible, that is, private details of a buyer can be determined. Under the heading "transparent customer" this problem is also discussed publicly.

Desirable from the buyer's point of view would be a system where the anonymity remains secured, as well as the previous cash payment traffic offers. In addition, the buyer wants to know that the money transfer will be processed only if the ordered goods or services arrive without error. On the other hand, the seller would also like to be sure that the buyer has sums of money and, after delivery of the goods, receives them in accordance with the invoice.

In addition, the buyer and the seller want in one

Data network a simple payment system as simple as cash payment transactions. Data network means internet and telephone-like data areas, without data networks payment transactions are meant in usual transactions with cash-like payment transactions.

The invention has for its object to provide a method for handling payment transactions in an existing data network and also without a data network for performing the method. The anonymity of a buyer should be ensured, the procedure should be easy to handle and at the same time designed to be secure, that is, virtually anywhere where payments for goods or services are in demand, can be offered.

This object is achieved by a method according to the features of the claims. It is a new and simple management system without any new additional electronic aids or sophisticated encryption systems and belongs to the Trusted Third Party payment systems.

The invention is based on the idea to enable all the benefits of a cash payment in the conventional sense in a data network. From the point of view of the buyer and from the point of view of the seller, all important aspects are considered. These benefits can be in one However, there is also the possibility of the application without data network, that is in the traditional sense, for example when shopping in a normal food retail. Moreover, the disadvantages associated with cash payments are eliminated by the new payment system or

- when it comes to risks, as summarized in the topic counterfeiting - greatly reduced.

The present new payment system (applicable with and without

Data network) consists essentially of three technically fully automated parts:

- a management system

- a registration procedure

- a settlement system.

In addition, of course, the business partners who want to handle a payment involved:

- buyer and seller

The management system consists essentially of at least one server, which is equipped for security with a software and hardware firewall. The data access via a data line to the server by means of the usual standard technical devices, such as routers for Internet line and data converter for telephone access (landline or mobile).

The peculiarity of existing payment transactions lies in the strong imbalance of risks between buyer and seller. At a very high percentage, business risk is always on the buyer side as payment processing on the internet is very often done either through prepayments, direct debit or credit card (data theft). The seller has his money very quickly, but the buyer still has no goods. Normally, that is, all business partners are meticulous and honest with each other, no problems in the payment process can be expected. In the other case, the daily newspapers are full, reporting the difficulties between sellers and buyers. The new payment system according to the invention solves this particular difficulty solely by technical means, in that the outstanding amount of money is actually managed in trust and remains "frozen" until an agreement has been reached between the buyer and the seller.The commercial risk is in a balance between At the same time, the buyer and seller are assured that both business partners will remain protected during the entire payment process.The technical solution to the difficulties in payment processing and physical control of the data network lies in the technical implementation of new procedures and combinations thereof.

The management system serves the buyer and the seller alike, except that the buyer must register in a certain form and create real accounts or allow the management system access to the customer banks, but not the seller. Although the seller is not registered, with the exception of the bank details for money transfer, he can still check in the management system whether a certain buyer can pay an open invoice and whether the buyer may also purchase certain goods (youth protection regulations for anonymous accounts). That is, the management system fully automatically coordinates the payment processing, the buyer registration and activates the settlement system when shipping goods.

Any buyer wishing to use the new payment system must register via a data network such as the Internet. Each registration begins with the anonymous registration, which can later be extended into an authentication procedure (see: Detailed description of the technical solution). The data access for buyers takes place exclusively via the management system (own web address) with access via corresponding command buttons to the processing system or application server. The data access of the seller takes place exclusively via the processing system (own web address) with possibility of input over the invoice number for the Bank details of the seller.

The buyer then receives from the management system a so-called alias (or can freely choose such a name) and the aliases equivalent bar code-like number. This alias or barcode, which is then only visible when shopping, is additionally examined by the administrative system with a test method and, if there are no objections, as the alias name already exists or the name would be legally a violation of good morals, released.

The registration process generates a simplified and short

Username that is brought to the attention of the buyer via its own and secure delivery procedure (see: Detailed description of the technical solution). The registration process uses a random number generator to generate a PIN code (PIN = personal identifier number) and sends it (analogous to the user name) to the buyer via its own delivery (ie separately from the user name).

In order to allow anonymity for the deposit of these anonymous accounts, essentially the well-known from the telecommunications prepaid payment system is used. For example, you can buy a prepaid phone card without providing personal information at various points of sale and transfer by dialing a specific phone number and entering a code that is printed on the phone card, the balance on the anonymous accounts.

The authentication method consists essentially in the fact that the buyer via a data network such as the Internet or telephone procedure with personal data, for example, registered with name, address and age and thus creates real accounts that after the authentication process with real money must be replenished by conventional banking methods. It is also equivalent if the buyer allows the management system customary debit orders.

The settlement system only allows tracking-enabled package systems Selections that meet a certain high quality standard. This allows the buyer and the seller to check the goods transport and also to query via the selected package system where the goods are currently located. The invention is based on a new method that the buyer can also select an anonymous mail. The settlement system technically mandates a tracking parcel system to collect the product or service from the seller with a so-called "return order." The seller is not aware of the buyer name or buyer address, just the so-called alias or equivalent barcode technical solution).

The tracking systems with high quality standard have for the commissioning mutatis mutandis, three choices, in what kind and at what conditions a packaged goods transport has to be made:

• Shipping: pick up from your own place, send to any place (deliver).

• Retrieval: pick up from any location, bring it back to your own place.

• Combination: pick up from any location, deliver to any location. To protect the buyer can only confirm this per invoice number in the processing system according to the invention the receipt of the faultless goods. Only then will the payment transfer be made to the seller bank details. If the goods are damaged or do not correspond to the order, then automated processing options and corresponding inquiries to the respective business partner are provided in the processing system, which demand a clarification of the situation as quickly as possible. In these cases the funds managed by the trustee remain "frozen" until the agreement has been reached in full. [29 Zum] For the protection of the sellers (if the goods confirm from which

For reasons always delayed by the buyer) can activate this so-called examination systems (Urgenz) in the settlement system technically automated. After goods can be a quick payment transfer to the seller done, because the money is already exists on the buyer's account in real or is made possible by this by customary bank debit orders. Brief Description of the Drawings of the Drawings In the sole figure: [0031] Figure 10. Management system

11. Management server

12. Firewall software and hardware

13. Settlement system or application server

14. Anonymous buyer database

15. Authentic buyer database

16. Seller or dealer

17. Buyer or customer

18. Data network Internet, Intranet or Ethernet

19. Telecommunications fixed or mobile network 20. Telephone, landline or mobile network

Best way to carry out the invention

Registration procedure:

If the new payment system is to be used, the buyer or client must register with the management system (server) via a website. On the client side, the start page with navigation options for general information and two buttons appears. On the one hand to "register" and on the other hand after registration to "login" to edit or view the account information.

To register, press the "Register" button, which immediately sets up an https page (https = Hypertext Transfer Protocol Security) according to the technical standard at the client.The registration process always starts with the anonymous registration The reason is the expiration of the registration, because - independently, whether anonymous or not anonymous - the alias name, the user name and the PIN code (PIN = Personal Identifier Number) always selected by the client itself and checked for plausibility by the management system (server).

On the server side, the client IP address (IP = Internet Protocol) and the client MAC address (MAC = Media Access Control) are automatically held for a constant time (detention time, a few minutes) and checked whether this also remains constant. This ensures that the client registration is not handled by software because it has to be handled personally for security reasons. During this capture time, a few simple symbol character sets display a few symbols at the client via a random number generator. This display is distorted with a graphics generator so that practically only the human eye is able to recognize the simple symbols.

On the client side, the correct symbols must be selected in a table-like selection field (check box in check box). Displayed are the correct symbols and - selected by the random number generator - additionally some wrong symbols.

On the server side, the correct check boxes are checked and if there is no match, a maximum of three attempts allowed. If no activities are set in a certain time or if the selected symbols are wrongly selected, then the registration will be aborted.

Because of the international application possibility are exclusive

Symbols are displayed in the graphics window so that these registration procedures can be used even in countries that do not use numbers or Arabic letters. Thus, the procedures in the order automatically remain the same, only the explanations are displayed in the respective national language on the HTML page (HTML = Hypertext Markup Language) on the so-called port 80 or port 8080 at the client.

After this automated procedure, the client can choose an alias name (at least six and a maximum of ten characters) and also enter in the provided HTML form. This corresponds to one barcode generated by the management server and can also be used as an alternative to the alias name. The barcode is mainly used when the client does not want to shop in the data network, but in a usual shop. The HTML form still requires the client to enter a user name (restriction as in the alias) and a four-digit PIN code an e-mail address and - if available - a mobile phone number. This entry is not mandatory, but should be used for security reasons. Subsequently, the management system automatically sends an e-mail with command button to complete the "anonymous registration" or SMS to the client, if the client has also provided an address or phone number.

If the client has the command button over the sent e-mail

"Complete Anonymous Registration" is pressed, then the registration is complete and the PIN code is unlocked.The barcode or alias name is also the anonymous account and can be charged or paid anonymously up to a certain maximum amount via a so-called dial-in number Anonymous accounts are also limited by the statutory provisions applicable.

The client can now anonymous registration using

Complete the Done command button in the HTML window, or continue registration by selecting the Authentication command button. The authentication process continues in a new HTML window in which the client can enter name, address and date of birth. Then there are check boxes to choose from, which relate to the type of proof of identity. You can choose from a passport, identity card, driver's license or other. After the checkbox has been ticked by the client, the respective document number with the date of issue must be entered in a corresponding HTML form.

The method of authentication is performed with a command button The management system still checks the plausibility of the input and whether the client's e-mail address or phone number exist either, as otherwise the username and PIN code can not be sent in case the client does not receive an e-mail Address and no telephone number has been specified (is not recommended for security reasons), then the buyer data can also be sent by post, due to the time required for the identity check, which is carried out according to the usual country-specific standard technical procedures.

If the personal data is correct, then after the

Randomize the user name and the PIN code separately to the client e-mail address or sent by SMS to the client telephone number or in writing to the postal address (also considered a secure delivery method).

The client can change his user name, his alias and his personal PIN code via the website at the command button "Login" or via a telephone number via landline or mobile network.In addition, the client can over his phone his e-mail address and his Change the telephone number Only the personal data that has already been checked can not be changed accordingly The sending of the changed and thus new data is carried out separately from each other, as previously described.

Management system:

Concrete description of a technically automated

Payment processing, provided that the buyer client has previously registered with the management system (server) and created an account (anonymous or not anonymous). It does not matter if the seller client wants to sell goods or services in a data network or without a data network. When purchasing goods without a data network, for example, a usual purchase in the food retail, eliminates only the processing method of the invention:

- Buyer client with known alias (on the Internet case A) or bar code (at the grocery retailer case B or other Dealer only with phone case C) wants to buy goods or services from the seller-client. Seller client makes a request to the management system (server) via a data line (Internet or telephone).

• In the case of A Internet: Vendor Client presses the "Vendor Inquiry" command button on the HTML home page The server (holding the client IP and MAC address) displays a standard HTML form (SSL Encrypted) for entering the alias name and purchase amount, pressing the command button "Request" will display "OK" and "Invoice Number" or "Not OK" on the Seller Client page, or "Not OK" will interrupt the Internet connection after a certain time. If "OK", the seller client confirms that the specified alias name exists (registered) and can pay the specified amount (may, depending on child protection regulations).

The seller client sends the invoice number to the buyer by e-mail. The Buyer client connects to the server over the Internet line and the Pay command button, the server displays the HTML form for the Invoice Number and PIN Code to the client, and the client presses the Payment button and confirms with this action is the input. For security reasons, the IP number and the MAC address are always held by the client for a certain time.

• In case B food retailer: purchase amount is displayed at the cash desk, buyer client enters its alias (terminal) or the equivalent barcode (eg imprinted on the wristband) can be scanned. The scan automatically establishes a fast SSL connection line to the management system (server) and at the same time transfers the alias name with the payment amount in a data package. The server confirmed in a short time by means of invoice number at the cash desk the existing buyer client. The buyer client must have a standard terminal (like the ATM system without card only) enter the PIN code, and the payment order is sent to the management system. If no invoice number is displayed then the buyer client is not registered or the amount can not be paid. • In Case C Phone Request: The vendor client dials a specific dial-in number to the management system. The telephone decoder automatically establishes an SSL connection with the management system. The server confirms with a tone dialing system or digitally the request possibility. The seller client enters the buyer's barcode and the purchase amount and confirms the entry. The server uses the invoice number to confirm the existing alias name (equivalent to the barcode). The seller will give the buyer the invoice number. Another specific dial-in number gives the management system the invoice number with PIN code to the server. The payment transaction is confirmed by the server via the telephone decoder to the seller and the buyer via SMS.

- The buyer client has initiated the payment process by entering the PIN code. The server forwards the transfer order according to the usual bank procedure.

The buyer client can also "transfer" money to any e-mail address, that is, the e-mail recipient is technically notified automatically that he must authenticate himself through the registration process and a sum of money to his e-mail Address has been deposited.

The settlement process is only activated by the management system when a shipment of goods exists, that is, on the Internet or data network has been purchased, and now the goods or services to be sent from the seller to the buyer.

[0048] Processing system:

Concrete description of a technically automated

Settlement procedure, provided the seller client and the Buyer client have received the provisional money order and invoice number confirmed by the management system. The issued invoice number also includes the buyer's choice of whether anonymous or non-anonymous delivery should be made. However, the provisional payment order is not yet carried out to protect the buyers, as the error-free transport of goods (goods receipt) has not yet taken place and this only has to be confirmed by the buyer in the settlement system in a corresponding HTML form. To protect the sellers, there is a technically automated approach in the settlement system if the buyer, for whatever reason, delays the receipt of the goods.

• The seller has received an invoice number from the management system with the anonymous buyer send and presses on the HTML page of the processing system on the corresponding command button "pickup".

• The server shows the seller an HTML form with the following input requirement (the seller must first pack and measure the ordered goods):

- Invoice number (also serves as plausibility check)

- name and e-mail address of the seller

- Bank details (seller) for the payment transfer

- Collection address of the goods

- Number, dimensions and weight of the packaged goods.

• The seller confirms the entry in the HTML form with the command button "Continue".

• The server confirms the data entry again with the seller and additionally displays the standard package service, for example DPD (Direct Parcel Distribution), which picks up the goods from the seller.

• The server automatically hires the parcel service via a so-called "return order" to pick up the goods from the seller (specified address) and send them to the buyer (buyer address is not known to the seller), thus completing the activities of the seller on anonymous delivery , The server sends an e-mail to the involved business partners, in which all important data are indicated (no personal data of the buyer).

The seller has received an invoice number from the management system with the non-anonymous (authenticated buyer) Buyer Sent and will press on the HTML page from the settlement system on the appropriate command button "shipping".

The server shows the seller an HTML form with the following

Input forced (provided the seller has ordered

Goods already packed and measured):

- Invoice number (also serves as plausibility check)

- name and e-mail address of the seller

- Bank details (seller) for the payment transfer

The seller enters the appropriate data and confirms the entry with the command button "Continue".

The server opens a new HTML page with a selection form. In the list, all the usual traceable parcel services (of high quality standard) are displayed for selection:

- DPD (Direct Parcel Distribution) as default

- UPS (Unites Parcel Service)

- GLS (General Logistics System)

- DHL parcel service (founded by Dalsy Hillblom and Lynn)

- TNT (Thomas Nationwide Transport), or others.

The seller must always select a tracking system (parcel service) from one of the displayed services. If the seller has his own tracking system or has his own contract with a package system that does not appear in the list, then he must still select a displayed service. The reason lies in the high own quality criteria (buyer and seller protection with appropriate insurance possibility of the goods), which must have a tracking capable system, so that this can be included in the list. If the seller has his own contract with a displayed parcel service, then this should of course be used.

• The seller commissions the selected tracking service (direct link to the parcel service) for parcel pickup and shipping to the buyer.

• The seller must then return to the processing system (HTML form) to enter the so-called reference number or order number, depending on the tracking system. The seller has done with this input his part in the settlement system.

• The server sends an e-mail to the involved business partners, in which all important data are indicated (with personal data of the buyer). Buyers and sellers can follow the goods transport via the parcel service and with the so-called reference number (read in the processing system per invoice number) all goods movements with date and place or, if desired, inquire in detail.

• The authenticated buyer normally receives the package and has to confirm the goods receipt in the processing system. To do this, the buyer must enter his user name and PIN code via the data line, HTML start page management system, command button "Login".

• The server shows the buyer a new HTML page with a selection form as follows (selection forced):

- View own data

- Deanonymization initiated by judicial commission

- Change alias name

- Change username

- Change PIN code

- Change E-Mail address

- Change phone number

- Orders

• The buyer selects the Orders command button and confirms the entry with the Next command button. The server shows the buyer in list form to select all

Orders with open and completed invoice numbers in chronological order.

The buyer selects the desired open option in the option field

Invoice number and confirms the selection with the

Command button "continue".

The server displays another option button for the buyer to select:

- "Would be fine"

- "Goods in order, but return"

- "goods not in order"

In the case of "goods in order", the buyer selects this radio button and the buyer activities are completed.

The server saves the buyer selection with date and forwards it

Information to the management system. The server sends an e-mail to the involved business partners, in which all important business partners are sent

Data is collected.

The management system gives the clearance for the payment transfer to the seller (the bank details of the seller are ever

Invoice number stored in the processing system).

In the case of "goods in order, but return", the server automatically displays the following input field to the buyer for selection:

- Return reason (input possibility)

The buyer enters the reason for return (input constraint) and confirms the entry with the command button "Continue".

The server sends an e-mail to the involved business partners, in which the reason for return is indicated (with personal

Data of the buyer), with the advice to wait for the reaction of the seller.

The seller has the option to initiate a so-called "reversal" and must confirm to the buyer that the shipping costs will not be charged to the buyer (normal case), otherwise the buyer must be notified by e-mail, such as a

Rescheduling has to be done. In the case of "goods not in order", the server automatically displays the following option button to the buyer: a) Goods not received b) Goods incomplete or damaged c) Goods do not correspond to the order.

The buyer selects a radio button and confirms the selection with the command button "Continue".

The server displays an HTML form with the buyer. The buyer can now specify all the reasons that, from his point of view, were not correct during delivery. At the same time, an automated e-mail is sent to the seller and, for the purpose of documentation, to the buyer, containing all the information entered by the buyer in the form. In addition, the seller is automatically asked to give an opinion to the buyer.

The server can no longer handle automated processing from this point in time, which is usually rare. Further processing of these cases is only possible manually. The additional costs will be charged according to the polluter-pays principle and could be due to the following reasons:

- In case a:

A business partner has made an incorrect entry The goods have been delivered to a wrong address (buyer error) The parcel service has delivered incorrectly or for other reasons

- In case b:

Taking damage record with photos as evidence Contact the parcel service Insured event or no insurance case Seller additionally inform or other reasons

- In case c:

Goods not completely delivered Incorrect products delivered Defective merchandise in original packaging Seller may initiate the "redelivery" Sale has not been made Seller must confirm receipt of goods Seller may request payment for wear Clarification of conditions prior to return Buyer has option for return or other reasons Seller and Buyer are with the previous ones

Selection options and input activities in their own interest forced to complete the activities as quickly as possible in order to clarify the facts or to reach an agreement in case of dispute. The reason is the withholding of the fiduciary payment order, both for the seller and for the buyer. The unauthenticated buyer (anonymous buyer) normally receives the package via the settlement system and must likewise confirm the delivery of goods in the settlement system. The procedures in this case are the same as for the authenticated buyer, except that all information about the settlement system is sent via e-mail with technically hidden identity (hidden recipient address). This means that the seller sends an e-mail to the processing system (server). The server sends the mail to the buyer and vice versa. The advantages of the technically automated method can be represented most easily from the perspective of the seller and buyer. Seller benefits:

- Simple and technically secure payment processing, as well as easy control of the goods path at any time.

- The existing tracking-capable parcel services can be automatically integrated into the processing system (package retrieval order).

- The seller receives technical confirmation from the management system that the alias is present from the buyer and that the buyer has the can pay and allowed amount.

- If the goods are sent to the buyer anonymously, technically minimal activities must be carried out in the processing system. The settlement system automatically commissions a tracking parcel service.

- Buyer verification of certain goods or services, whether they may be purchased, is technically automated.

- The settlement system contains a technically automatic going-concern if the buyer delays the receipt of the goods.

- A seller registration is not necessary, only the usual bank details are to be announced in the settlement system.

- New technical devices or chip card are not necessary for payment processing.

- The bank details from the seller are not known to the buyer.

- A technically automated valuation option of the seller to the buyer is provided. Buyer benefits:

- Anonymous shopping in a data network or in a traditional department store such as grocery retail.

- Anonymous delivery of goods via the settlement system is technically ensured, as the so-called "return order" is automated by the settlement system.

- No disclosure of personal data and no access from uninvolved third parties is technically ensured.

- Anonymous setup, operation and payment of buyer accounts with limited purchase of goods and services.

- Easy handling of payment options, as only the alias name or the equivalent barcode appears in the data network.

- Secure payment option, as the PIN code is only transferred to the administration system via a separate data line or telephone.

- In case of data theft can be very quickly and easily over the Internet or phone by username and PIN code all data such as Alias name, username, e-mail address and phone number are changed, except the personal data.

- For security reasons, the data changes to the buyer also irregularly technically automated by the management system via mail or SMS proposed.

- Without cash, no cash forgery can be made. Counterfeit banknotes can not be accepted or inadvertently distributed (buyer risk).

- Additional technical equipment or chip card are not necessary for the payment process.

- A registered buyer can transfer funds to any e-mail address. The recipient receives a link in the mail to register if they have not yet registered.

- The bank details from the buyer are not known to the seller.

- A technically automated evaluation option of the buyer to the seller is provided. The methods described are technically automated and are also applicable from an international point of view, since during registration only the human eye can recognize the distorted symbols. This ensures that no software can register in the data network. The input and selection options are excluded from errors as far as possible and are constantly monitored by the system. The settlement system allows buyers and sellers to initiate procedures to ensure that payment can be completed safely, especially if there is a conscious or unconscious delay or error on both sides. The fiduciary managed accounts will remain temporarily suspended in the event of difficulties until a solution is sought from both sides. In addition, the buyer can shop anonymously on the data network and also send the goods anonymously to the address given by name.

Claims

claims

A method of processing payment transactions according to the Trusted Third Party System in a data network (19) or telecommunication network (18), comprising a management system (10) comprising at least one database server with at least one database with anonymous (14) and authenticated ( 15) has buyer accounts, characterized in that the technically automated registration method anonymous and authentifiable registration is possible and consists of the following security procedures: a. Submitting a radio button to register with the buyer with time retention of the Buyer IP and Buyer MAC address, b. Submit and display in a graphics window at the buyer of graphically distorted random symbols, c. Selection by the buyer via tabular and random check boxes to select the correctly recognized symbols, d. Submitting the buyer input to the management system with input via command button or exceeding a time limit on the database server, e. If the buyer input is correct by comparison with the database server, the buyer will be presented with a form with text boxes for entering arbitrary / selectable: i) aliases, ii) user names, iii) PIN code, iv) e-mail address, v) phone number , f. Submitting the buyer input to the management system with input via command button or aborting the input due to a timeout on the database server, g. Submission and notification to the buyer that the anonymous registration is completed when the command button "complete anonymous registration" is pressed or the SMS is returned in the sent e-mail, H. Transmission and display at the buyer from a radio button

"Continue Authentifiable Registration" if by the buyer this

Radio button is selected and transmitted to the server, i. Submit and display the buyer of a form with text boxes for

Entering: i) first and last name, ii) address, iii) date of birth, iv) checkbox to select the proof of identity by:

1. passport, with passport number and date of issue,

2. ID card, with number and date of issue,

3. Driver's license, with number and date of issue,

4. Other proof, j. Submitting the buyer input to the management system with input via command button or aborting the input because of a timeout at the database server, k. Submission and notification to the buyer that the authenticated registration is completed when the command button, "complete authenticating registration" is pressed or the SMS is returned in the e-mail sent,

I. Submit and display to the buyer that the identity check is initiated according to a standard procedure and released after positive result of the PIN code. 2. The method according to claim 1, characterized in that the

Authentication procedure in the management system of registered or anonymous buyer accounts over a data network or telecommunication network includes the following steps and allows changes to the stored server data: a. Submit a radio button to log in to the buyer b. Submit a form with text fields to enter a username and PIN code with the buyer, c. Transmission of the input data to the management system and comparison to match the server data, d. Transmission of a radio button for selection by the buyer, if the stored data match, i) View my account information, ii) Change alias name, iii) Change user name iv) Change PIN code, v) Change e-mail address, vi) Change phone number, e. Submit an input completion with command button.

A method according to claim 1 or 2, for processing payment transactions when the buyer (17) has selected goods or services on a server of a seller (16), characterized in that the authentication procedure is performed on the management system by the seller and at least following security procedures consists of: a. Transmitting the alias from the buyer to the management system with the amount of the purchase price, b. Check the alias name in the database server of anonymous or authenticated accounts, if it is stored, c. Submitting the inspection results to the seller with: i) yes, the buyer is registered, the administration system generates one

Order number, the purchase amount is covered, ii) yes, the buyer is registered, the management system does not generate any

Order number, purchase amount is not covered, iii) no, the buyer has no valid registration, the data line to

Seller is canceled, d. Submit the order number to the buyer if buyer registers with the database server and the purchase amount is paid in, e. Buyer input of the PIN code and transmission to the management system for confirmation of purchase, or termination of the data line, if a time limit has been exceeded, f. Transmission of the purchase confirmation from the management system to the seller with invoice number, g. Transmission of all data between buyer and seller to the Application server or the settlement system (13).

4. The method of claim 3, when the application server (13) has transmitted by the management system (10) an invoice number to the buyer (17) and seller (16), characterized in that the anonymous delivery of goods or services to the buyer on a data network (18) and (19) comprises the following security procedures: a. Submit a form with text box to enter an invoice number with the seller to the settlement system, b. Submit to Seller to Press a Pickup Command Button, c. Transmission from the clearing system to the seller of an entry form with input compulsion for: i) Invoice number, for plausibility check, ii) Name with seller's e-mail address, iii) Seller's bank details, iv) Goods pickup address, v) Number, dimensions and weight of goods packed goods, d. Transmission of an input termination to the server, e. Transmission to the seller of the name of a standard parcel service picking up the goods from the seller, f. Transmission of an automated return order from the settlement system to a standard package service, which collects the goods from the seller and sends them to the address provided by the anonymous buyer, g. Submit a summary by e-mail to the buyer and seller.

5. The method according to claim 3, characterized in that the non-anonymous sending of goods or services to the buyer via a data network (18) and (19) takes place and includes the following security procedures: a. Submission of a form with text box for entering an invoice number at the seller to the settlement system b. Submit to the seller to operate a command button "Shipping", c. Transmission from the clearing system to the seller of an entry form requiring input for: i) Invoice number, for plausibility check, ii) Name with email address of the seller, iii) Seller's bank details, d. Transmission of an input termination to the server, e. Transmission from the settlement system to the seller of a radio button for selecting a tracking parcel service, f. Transmission of the selection to the settlement system with indication to the seller of a direct hyperlink to the parcel service, g. Transmission to the seller that the reference number of the parcel service commissioned by the seller still has to be entered in the processing system, h. Submit a summary by e-mail to the buyer and seller.

A method of processing payment transactions when the buyer (17) has selected goods or services on a server of the seller (16), characterized in that the authentication procedure is performed on the management system by the seller and consists of at least the following security procedures: a. Transmitting the alias from the buyer to the management system with the amount of the purchase price, b. Check the alias name in the database server of anonymous or authenticated accounts, if it is stored, c. Submitting the inspection results to the seller with: i) yes, the buyer is registered, the administration system generates one

7. The method of claim 6, when the application server (13) has transmitted by the management system (10) an invoice number to the buyer (17) and seller (16), characterized in that the anonymous delivery of goods or services to the buyer on a data network (18) and (19) comprises the following security procedures: a. Submit a form with text box to enter an invoice number with the seller to the settlement system, b. Submit to Seller to Press a Pickup Command Button, c. Transmission from the clearing system to the seller of an entry form with input compulsion for: i) Invoice number, for plausibility check, ii) Name with seller's e-mail address, iii) Seller's bank details, iv) Goods pickup address, v) Number, dimensions and weight of goods packed goods, d. Transmission of an input termination to the server, e. Transmission to the seller of the name of a standard parcel service picking up the goods from the seller, f. Transmission of an automated return order from the settlement system to a standard package service, which collects the goods from the seller and sends them to the address provided by the anonymous buyer, g. Submit a summary by e-mail to the buyer and seller.

8. The method according to claim 6, characterized in that the non-anonymous sending of goods or services to the buyer via a Data Network (18) and (19) and includes the following security procedures: a. Submit a form with text box to enter an invoice number with the seller to the settlement system, b. Submit to Seller to Press a Command Button "Shipping," c. Transmission from the clearing system to the seller of an entry form requiring input for: i) Invoice number, for plausibility check, ii) Name with email address of the seller, iii) Seller's bank details, d. Transmission of an input termination to the server, e. Transmission from the settlement system to the seller of a radio button for selecting a tracking parcel service, f. Transmission of the selection to the settlement system with indication to the seller of a direct hyperlink to the parcel service, g. Transmission to the seller that the reference number of the parcel service commissioned by the seller still has to be entered in the processing system, h. Submit a summary by e-mail to the buyer and seller.

9. The method according to any one of the preceding claims, when the application server (13) by the management system (10) has transmitted an invoice number to the buyer (17) and seller (16), characterized in that when anonymous or not anonymous goods consignment is completed the confirmation The following safety procedures apply to the delivery of goods: a. Submit a radio button to log in to the buyer b. Submit a form with text fields to enter a username and PIN code with the buyer, c. Transmission of the input data to the management system and comparison to match the server data, d. Transmission of a choice for orders, e. Transmission to the buyer in list form for the selection of orders with open and completed invoice numbers, f. Submitting the selection of an open invoice number to the settlement system, g. Transmission to the buyer of an option field of: i) goods in order, ii) goods in order, but return, iii) goods not in order, h. Transmission of a termination of the selection.

10. The method according to claim 9, characterized in that in the case of the selection "goods in order" a secure completion of payment processing takes place and includes the following security procedures: a. Submitting the selection to the settlement system, b. Transmission of the buyer confirmation to the management system, c. Transmission of the payment order from the buyer's account to the seller's account, d. Submit a summary of the settlement by e-mail to the buyer and seller.

11. The method according to claim 9, characterized in that in the case of the selection "goods in order, but return" a reversal takes place at the seller and includes the following security procedures: a. Submitting the selection to the settlement system, b. Submit a form with text boxes to the buyer to enter the reasons for return and to indicate that a response from the seller must be awaited, c. Submitting the buyer's entry to the seller and the note that clarification of the settlement details must be made by e-mail to the buyer.

12. The method according to claim 9, characterized in that in the case of the selection "goods not in order" troubleshooting at the buyer and seller and the following security procedures includes: a. Submitting the selection to the settlement system, b. Transmission to the buyer of a radio button of: i) Goods not received, ii) Goods incomplete or damaged, iii) Goods not in accordance with the order, iv) or other reasons, c. Transmission of termination of the selection, d. Submit a form with text boxes to the buyer, indicating that a reason has to be entered, e. Transmission of the buyer's input to the seller, f. Submit a summary by e-mail to the seller and the buyer, stating that a clarification of the further procedure must be made as soon as possible.

13. Method, if the application server (13) has transmitted an invoice number to the buyer (17) and seller (16) through the management system (10), characterized in that the anonymous or non-anonymous consignment of goods confirming the delivery of goods comprises the following security procedures : a. Submit a radio button to the buyer, b. Submit a form with text fields to enter a username and PIN code with the buyer, c. Transmission of the input data to the management system and comparison to match the server data, d. Transmission of a choice for orders, e. Transmission to the buyer in list form for the selection of orders with open and completed invoice numbers, f. Submitting the selection of an open invoice number to the settlement system, g. Transmission to the buyer of an option field of: i) goods in order, ii) goods in order, but return, iii) goods not in order, h. Transmission of a termination of the selection.

14. The method according to claim 13, characterized in that in the case of the selection "goods in order" a secure completion of the payment process takes place and includes the following security procedures: a. Submitting the selection to the settlement system, b. Transmission of the buyer confirmation to the management system, c. Transmission of the payment order from the buyer's account to the seller's account, d. Submit a summary of the settlement by e-mail to the buyer and seller.

15. The method according to claim 13, characterized in that in the case of the selection "goods in order, but return" a reversal takes place at the seller and includes the following security procedures: a. Submitting the selection to the settlement system, b. Submit a form with text boxes to the buyer to enter the reasons for return and to indicate that the seller's answer should be awaited c. Submitting the buyer's entry to the seller and the note that clarification of the settlement details must be made by e-mail to the buyer.

16. The method according to claim 13, characterized in that in the case of the selection "goods not in order" troubleshooting the buyer and seller and the following security procedures includes: a. Submitting the selection to the settlement system, b. Transmission to the buyer of a radio button of: i) Goods not received, ii) Goods incomplete or damaged, iii) Goods not in accordance with the order, iv) or other reasons, c. Transmission of termination of the selection, d. Submit a form with text boxes to the buyer, indicating that a reason has to be entered, e. Transmission of the buyer's input to the seller, f. Submit a summary by e-mail to the seller and the buyer, stating that a clarification of the further procedure must be made as soon as possible.

17. The method according to any one of the preceding claims, characterized in that the seller in the settlement system finds a Urgenz that includes the following security procedures: a. Submission of a form with text field for entering a Invoice number at the seller to the settlement system, b. Transmission to the seller to actuate a command button Urgenz, c. Submit a form with text boxes to the buyer for input as to why the receipt of goods is not confirmed and the indication that the trusted amount remains in the management system until the questions are resolved, d. Transmission of an input termination to the server, e. Transmission of buyer input to the seller.

18. Method according to one of the preceding claims, characterized in that a transfer of funds from authenticated buyers to any e-mail address is possible and comprises the following security procedures: a. Submit a radio button to log in to the buyer b. Submit a form with text fields to enter a username and PIN code with the buyer, c. Transmission of the input data to the management system and comparison to match the server data, d. Transmission of an option field for the transfer of a sum of money to a freely selectable e-mail address, e. Submission of a form with text fields with mandatory entry of an e-mail address and the amount to be transferred, f. Transmission of the input from the buyer to the recipient of the e-mail with the note that a sum of money is available and only via the hyperlink in the received e-mail a login in the management system is enabled as soon as the recipient registered with the management system or registered is.

19. The method according to any one of the preceding claims, characterized in that the authenticated purchaser in the management system finds a technically automated notice when an authorized authority, the anonymity of the buyer was repealed.