# Patent

## Title
Location-based payment system and method

## Abstract

A virtual payment system including a customer-specific, customer geolocation responsive, limited time duration payment identifier generator operative to generate a customer-specific, customer geolocation responsive, limited time duration payment identifier, a customer-specific limited time duration payment identifier communicator operative to communicate the customer-specific, customer geolocation responsive, limited time duration payment identifier to a customer and a limited time duration payment identifier validator, operative to verify genuineness and timeliness of the customer-specific, customer geolocation responsive, limited time duration payment identifier presented by the customer at a point of sale.

## Background
FIELD OF THE INVENTION
The present invention relates to payment systems and methodologies generally.
BACKGROUND OF THE INVENTION
Computerized payment systems have been developed to facilitate purchases of goods and services. Such payment systems are typically deployed at points of sale such as retail stores and gas stations.
SUMMARY OF THE INVENTION
The present invention seeks to provide improved payment systems and methodologies. There is thus provided in accordance with a preferred embodiment of the present invention a virtual payment system including a customer-specific, customer geolocation responsive, limited time duration payment identifier generator operative to generate a customer-specific, customer geolocation responsive, limited time duration payment identifier, a customer-specific limited time duration payment identifier communicator operative to communicate the customer-specific, customer geolocation responsive, limited time duration payment identifier to a customer and a limited time duration payment identifier validator, operative to verify genuineness and timeliness of the customer-specific, customer geolocation responsive, limited time duration payment identifier presented by the customer at a point of sale.
Preferably, the customer-specific, customer geolocation responsive, limited time duration payment identifier is also operative as a purchase identifier.
In accordance with a preferred embodiment of the present invention the virtual payment system also includes a point of sale (POS) device cooperating with the limited time duration payment identifier validator. Additionally, the limited time duration payment identifier validator is located at the POS device. Alternatively, the limited time duration payment identifier validator is remotely located from the POS device.
Preferably, the customer-specific, geolocation responsive, limited time duration payment identifier generator is located at the POS device. Alternatively, the customer geolocation responsive, limited time duration payment identifier generator is remotely located from the POS device.
In accordance with a preferred embodiment of the present invention the limited time duration payment identifier is valid at a single point of sale. Alternatively, the limited time duration payment identifier is valid at multiple points of sale within a geolocation-determined range of the customer.
Preferably, the limited time duration payment identifier is valid for a geolocation-determined time which is a function of travel time between a location of the customer and the point of sale.
There is also provided in accordance with another preferred embodiment of the present invention a virtual payment method including generating a customer geolocation responsive, limited time duration payment identifier, communicating the limited time duration payment identifier to a customer and verifying correctness and timeliness of the limited time duration payment identifier presented by the customer at a point of sale.
Preferably, the customer-specific, customer geolocation responsive, limited time duration payment identifier is also operative as a purchase identifier.
In accordance with a preferred embodiment of the present invention the verifying includes verifying at the point of sale. Alternatively, the verifying includes verifying at a location remote from the point of sale.
Preferably, the generating includes generating at the point of sale. Alternatively, the generating includes generating at a location remote from the point of sale.
In accordance with a preferred embodiment of the present invention the limited time duration payment identifier is valid at a single point of sale. Alternatively, the limited time duration payment identifier is valid at multiple points of sale within a geolocation-determined range of the customer.
Preferably, the limited time duration payment identifier is valid for a geolocation-determined time which is a function of travel time between a location of the customer and the point of sale.



BRIEF DESCRIPTION OF THE DRAWINGS
The present invention will be understood and appreciated more fully from the following detailed description, taken in conjunction with the drawings in which:
FIG. 1 is a simplified functional block diagram of a payment system constructed and operative in accordance with a preferred embodiment of the present invention;
FIGS. 2A-2G are together a simplified illustration of the structure and operation of a payment system constructed and operative in accordance with a preferred embodiment of the present invention; and
FIGS. 3A-3C are together a simplified flowchart illustrating operation of the methodology of a preferred embodiment of the present invention.



DETAILED DESCRIPTION OF A PREFERRED EMBODIMENT
Reference is now made to FIG. 1, which is a simplified functional block diagram of a payment system constructed and operative in accordance with a preferred embodiment of the present invention. As seen in FIG. 1, the payment system preferably includes a system server 100, here also termed a “SPEEDCODE” server, which preferably manages the payment system. The system server 100 preferably cooperates with at least one POS configuration and management server 102, such as a VERIX® configuration server commercially available from Verifone, Inc. The at least one POS configuration and management server 102 is operative for configuring a plurality of point of sale (POS) devices 104, which are located at business premises, such as convenience stores, and are incorporated into gasoline dispensers, which may be adjunct to the convenience stores. POS devices 104 may include, for example, payment terminals 106, commercially available from Verifone, Inc., such as a VERIFONE® model MX® 915, connected to an electronic cash register (ECR) 108. More generally, the POS devices 104 may include one or more of ECRs, payment terminals, pin pads, and readers, which may be fully or partially integrated and/or interconnected. The payment system of the present invention may be used to purchase any suitable goods or services.
The system server 100 preferably interfaces directly or indirectly with a geolocation server 110 which may be cellular-based and/or GPS based. Geolocation server 110 may provide location data for fixed locations 113, such as convenience stores 114 and gas stations 116, as well as current location data for a plurality of mobile devices which may be in motion, such as vehicles and hand-held mobile communicators 118. Geolocation server 110 may also provide navigation instructions leading a customer from his current location to a selected fixed location 113, such as one of convenience stores 114 and gas stations 116. Geolocation server 110 may communicate directly with system server 100 or via a SPEEDCODE application resident on a customer mobile communicator 118.
The system server 100 preferably interfaces with one or more financial transaction processor servers 120, which in turn communicate with financial institutions such as banks, credit card companies and PAYPAL®.
The system server 100 and/or the geolocation server 110 preferably also interface with one or more merchant location databases 122 which permit merchant locations to be accessed via merchant identifiers known to POS configuration and management server 102.
The system server 100 preferably also interfaces with one or more customer location databases 124, which permit current customer locations to be accessed by the geolocation server 110 via customer identifiers known to the system server 100. A typical customer identifier may be the customer's mobile telephone number or the Temporary Mobile Subscriber Identity (TMSI).
The system server 100 preferably also interfaces with a customer details database 126 which preferably includes, inter alia, a customer vehicle license plate number. Database 126 enables a customer vehicle license plate number to be accessed by the system server 100 via customer identifiers known to the system server 100.
The system typically also includes at least one mobile device configuration server (MDCS) 128, such as Apple App Store or the Android Playstore or a Trusted Secure Manager (TSM) server, commercially available from Gemalto NV, operative for configuring the plurality of mobile devices and downloading applications to the mobile communicator 118. System server 100 may include this functionality or may communicate with MDCS server 128.
Typically, POS devices 104 interface with a POS/ECR operating server 130, such as a Retail 360 server commercially available from Verifone, Inc., which may also manage, for example, inventory, sales and promotions. System server 100 may interface with some or all of the various POS devices 104, particularly ECRs 108, via POS/ECR operating server 130. Alternatively, the system server 100 may interface directly with the individual POS devices 104. Preferably, system server 100 interfaces with payment terminals 106 via POS configuration server 102. Payment terminals 106 are typically in communication with financial transaction processor servers 120.
It is appreciated that payment terminals 106, ECRs 108, POS configuration and management servers 102, POS/ECR operating server 130 and system server 100 are typically not under common management control. Merchants and various store operators typically control POS/ECR operating server 130. Payment terminals 106 and POS configuration and management servers 102 are typically controlled by POS device manufacturers and financial institutions. It is also appreciated that POS configuration and management servers 102 and POS/ECR operating servers 130 may be embodied in a single server. It is also appreciated that system server 100 may incorporate the functionalities of POS configuration and management servers 102 and POS/ECR operating servers 130.
Typically, fuel dispensers 132 at gasoline stations 116 interface with a fuel dispenser operating server 134. In such a case the system server 100 may interface with the various fuel dispensers 132 via the fuel dispenser operating server 134. Preferably, fuel dispensers 132 include a payment terminal 106 and a customer interface device 136, which typically includes one or more of a keyboard or keypad, a camera, a NFC device and a display. Preferably, system server 100 may interface with payment terminal 106 via POS configuration and management server 102 and with fuel dispenser 132 and customer interface device 136 via fuel dispenser operating server 134.
Reference is now made to FIGS. 2A-2G, which are together a simplified illustration of the structure and operation of a payment system constructed and operative in accordance with a preferred embodiment of the present invention, such as that shown in FIG. 1, and to FIGS. 3A-3C, which are together a simplified flowchart illustrating operation of the methodology of a preferred embodiment of the present invention.
Turning to FIGS. 2A and 3A, it is seen that a customer who wishes to use the payment system of an embodiment of the present invention, here termed “SPEEDCODE”, may initially register using his mobile communicator 118 via wireless link, such as a cellular telephone link, communicating with the system server 100.
Typically, the customer enters the following personal information via a template which appears on the display of his mobile communicator 118: name, address, payment account information, vehicle license plate number and mobile communicator number and transmits this information via the wireless link to system server 100, as indicated at A in FIG. 2A. Normally, within a few minutes, the customer receives, as indicated at B in FIG. 2A, a confirmation of his SPEEDCODE registration together with a SPEEDCODE ID, typically the customer's mobile telephone number.
As seen particularly in FIG. 3A, customer registration applications are preferably made available by the system server 100 either directly to a customer computer or mobile communicator 118, via a suitable website or via a marketplace such as the Apple App Store or the Android Playstore. Download of this application provides an opportunity for a customer to enter his relevant customer details, preferably including name, mobile telephone number, address, payment account information, such as credit card, PAYPAL® or bank account number, vehicle license plate number, vehicle gasoline preference, purchase limits, if any. Upon completion, customer details are communicated to system server 100.
System server 100 verifies validity of the customer details and upon verification enters the customer details into customer details database 126 (FIG. 1). The system server 100 preferably sends a registration confirmation message to the mobile communicator 118 of the customer.
The system server 100 determines a customer identifier, which may be, for example, the mobile telephone number of the customer or any other available string selected by the customer, and preferably communicates it to the customer's mobile communicator 118. The customer identifier, here termed also “SPEEDCODE ID,” is preferably confirmed to the customer via the display of the mobile communicator 118. As seen particularly in FIG. 2A, the registration confirmation message and SPEEDCODE ID are preferably communicated from system server 100 to the mobile communicator 118 in a single communication.
Turning to FIGS. 2B and 3B, it is seen that a customer, wishing to use the virtual payment system of the present invention, preferably selects the SPEEDCODE application by touching a suitable icon on his mobile communicator 118 and preferably confirms that selection by a further customer action. The application preferably automatically sends the SPEEDCODE ID from the mobile communicator 118 to the system server 100 and may also send an account verification code, which may be selected by the customer and may be provided as part of a wallet application. The system server 100 verifies the SPEEDCODE ID and preferably ascertains the current location of the customer, preferably by interaction between the mobile communicator 118 and the geolocation server 110.
Turning now to FIG. 2C, it is seen that the SPEEDCODE application preferably annunciates to the customer, via the customer's mobile communicator 118, in an audio and/or visually sensible manner, a menu which enables the customer to make purchase selections. For example, the customer may indicate that he wishes to purchase gasoline and food and may specify which food he wishes to purchase. The customer's purchase selections are communicated to the system server 100.
Turning now to FIG. 2D, it is seen that the system server 100, interfacing with the geolocation server 110 and one or more merchant location databases 122, ascertains and then annunciates to the customer, via the customer's mobile communicator 118, the locations and identifying details, including one or more unambiguous merchant identifiers, of a plurality of fixed locations 113 which include retail facilities offering both food and gasoline. These fixed locations 113 are typically at various distances and in various directions from the current location of the customer.
The customer may indicate his selection of one or more of the retail facilities at a selected fixed location 113 of the fixed locations 113 annunciated, in which case, driving directions or walking instructions may be automatically provided to the customer via the customer's mobile communicator 118.
Alternatively, the customer need not communicate a selection of a retail facility explicitly but may begin driving or walking in a direction which indicates that he is heading for one of the indicated retail facilities. Preferably, once the geolocation server 110 ascertains unambiguously that the customer is headed for a specific one of the indicated retail facilities, it may request a confirmation from the customer, via the customer's mobile communicator, that the customer does wish to purchase gasoline and/or the selected food at the retail facility that he appears to be headed for. Alternatively, no such confirmation is requested.
Turning now to FIG. 2E, it is seen that in accordance with a preferred embodiment of the present invention, once the customer is within a predetermined propinquity of the selected retail facility, typically 1000 feet, the following occurs:
The system server 100 generates and communicates to the customer's mobile communicator 118 a limited duration, single use purchase/payment (LDSU) code. In accordance with one embodiment of the invention, the LDSU code is preferably easily remembered by the customer and thus can be readily presented by the customer at a point of sale. In such a case, the LDSU code may be annunciated to the customer, preferably via the customer's mobile communicator 118. The annunciation may be oral and/or visual. Alternatively, the LDSU code may be designed to be communicated, such as via NFC, BLUETOOTH and/or WIFI via the customer's mobile communicator 118 directly to a POS device 104 and thus need not be easily remembered by a customer or even annuniciated to the customer.
If more than one merchant identifier is present at the selected retail facility or selected fixed location 113, multiple LDSU codes may be provided, as seen in FIG. 2E. For example, if gasoline and food are sold by a merchant identified by a single merchant identifier, a single LDSU code may be employed, however if instead the gasoline sales and the food sales are controlled by separate entities, having separate merchant identifiers, as seen in FIG. 2E, multiple LDSU codes may be employed. The LDSU code may be a series of numbers and/or other symbols, including phrases.
The LDSU code is preferably valid for a short period of time, normally denominated in minutes, sufficient to allow the customer to reach the retail facility and complete the fuel dispensing and/or purchase activity. After the limited duration, the code expires and can no longer be used for a transaction. Once the code is used, it expires. The duration may be a function of the sensed propinquity, in terms of time or distance of the customer from the retail facility at the time of LDSU code generation.
The LDSU code may be valid at a single retail facility or alternatively at multiple retail facilities.
It is appreciated that system server 100 may communicate the LDSU code to the customer's mobile communicator 118 immediately after LDSU generation.
Turning now to FIG. 3C, it is seen that the system server 100 may send a message to the selected retail facility, preferably via the POS operating server 130, and alternatively via a merchant server, or directly via a POS device, placing an order for the selected food, to enable it to be prepared for delivery prior to arrival of the customer at the retail facility. This message preferably indicates the estimated arrival time of the customer at the retail facility.
As seen in FIG. 2F, arrival of the customer vehicle at the retail facility may be sensed via GPS or by reading the customer's vehicle license plate by a reader interfacing with the a fuel dispenser operating server 134 and with system server 100. In the latter case, the vehicle's license plate may be recognized as corresponding to a registered SPEEDCODE customer who has indicated his wish to purchase gasoline within the limited duration established by the LDSU code and a specific fuel dispenser adjacent which the vehicle is located may provide a customer specific message to the customer, inviting the customer to display or otherwise enter the LDSU code. A message may be communicated from system server 100 to the POS/ECR operating server 130 notifying the arrival of the customer to the adjacent gasoline station,
In either case, the customer is invited to display or otherwise enter the LDSU code. This may be done, for example, using a customer interface device 136, such as a keyboard or keypad, camera or NFC device, as by placing the display of the customer's mobile communicator 118 in front of a camera or by using NFC communication.
If no licensed plate recognition is provided, the customer may select payment via SPEEDCODE and then proceed to enter his LDSU code.
Preferably, while the customer is present at the selected the retail facility, the LDSU code is either displayed or readily displayable or otherwise annunciatable by the customer's mobile communicator 118.
Upon entry of the LDSU code in any of the foregoing ways, following received LDSU validity verification by system server 100 or by one of a POS device, a merchant server and a POS operating server 130 at the retail facility, a fuel dispenser 132 is enabled to dispense the type of fuel that was indicated by the customer upon registration and a POS device 104. The fuel dispenser 132 is automatically operated to interface with the system server 100 to obtain the necessary payment particulars to enable completion of the payment via payment terminal 106 communicating to financial transaction processor servers 120. Alternatively, completion of the payment transaction may be effected by the system server 100, a financial transaction processer server 120 and one or more of a merchant server and POS operating server 130 without involving a payment terminal 106 at the fuel dispenser.
As seen in FIG. 2G, customer's food order is delivered. LDSU is presented to a payment device 106. Non-gasoline purchase transactions may be carried out automatically in a similar manner by the system server 100 either via a POS device 104 located at the store or by payment device 106 or independently thereof by interactions between the system server 100, a financial transaction processer server 120 and one or more of a merchant server and POS operating server 130.
In an alternative system configuration, the geolocation server is obviated. The customer may select a geographical area, for example New York City, from an application menu, and may or may not indicate goods or services to be purchased, for example, SELL OIL Gasoline. An LDSU code valid for a predetermined limited time duration, for example, 10 minutes, is generated by system server 100 and communicated to the customer's mobile communicator 118 as well as to all SELL OIL retail facilities within New York City. The customer may purchase gasoline or possible other products or services from any SELL OIL retail facilities in New York City during the validity of the LDSU code in the manner described hereinabove.
It will be appreciated by persons skilled in the art that the present invention is not limited by what has been particularly shown and described hereinabove. Rather the scope of the present invention includes both combinations and subcombinations of the various features described hereinabove as well as modifications thereof which are not in the prior art.

## Claims

1. A remotely-initiated transaction system comprising:
a customer-specific, merchant location-specific, customer geolocation responsive, limited time duration transaction identifier generator operative to automatically generate, in response to a customer order for at least one specific product, a customer-specific, merchant location-specific, customer geolocation responsive, limited time duration transaction identifier, said limited time duration transaction identifier being valid for a geolocation-determined time duration sufficient to allow a customer to reach a merchant location and complete purchase activity, said geolocation-determined time duration being a function of vehicular travel time between a location of said a-customer at a time of generation of said customer-specific, customer geolocation responsive, limited time duration transaction identifier and said merchant location;
a customer-specific, merchant location-specific, limited time duration transaction identifier communicator operative to automatically communicate said customer-specific, merchant location-specific, customer geolocation responsive, limited time duration transaction identifier as well as information relating to said merchant location to said customer;
a limited time duration transaction identifier validator, communicating with a point of sale (POS) device, operative to automatically verify genuineness and timeliness of said customer-specific, merchant location-specific, customer geolocation responsive, limited time duration transaction identifier presented by said customer at said merchant location;
wherein said customer-specific, merchant location-specific, customer geolocation responsive, limited time duration transaction identifier generator is remotely located from said POS device.

2. The virtual payment system according to claim 1 and wherein said customer-specific, merchant location-specific, customer geolocation responsive, limited time duration transaction identifier is also operative as a purchase identifier.

3. The virtual payment system according to claim 1 and wherein said limited time duration transaction identifier validator is located at said POS device.

4. The virtual payment system according to claim 1 and wherein said limited time duration transaction identifier validator is remotely located from said POS device.

5. The virtual payment system according to claim 1 and wherein said limited time duration transaction identifier is valid at a single point of sale.