Patent EP-3343494-A1 (EP)
Inventor: ODDI LUCA
IPC: G06Q30/06
Filed: 2017-12-15
Abstract: The invention concerns a certification method for certifying transactions between a user (2) and a remote provider (3) by means of an electronic signature system (10), wherein the user (2) uses a browser (221) installed on a first electronic communications device (22) to start a given transaction with a management server (31) of the remote provider (3), and wherein the electronic signature system (10) includes a certification server (11) connected to a database (12) on which first data related to the given transaction are stored, including: a user code (UT_UID) that univocally identifies the user (2), a provider code (SP UID) that univocally identifies the remote provider (3) and a transaction code (TX_UID2; TX_UID3) that univocally identifies the given transaction. Said electronic signature system (10) also includes a software application (13) on which the user code (UT_UID) is stored and which is installed on a second electronic communications device (21) used by the user (2), said second electronic communications device (21) being equipped with a digital camera. The certification method comprises a certification step that includes: requesting, by the management server (31), certification of the given transaction from the certification server (11), and sending the provider code (SP_UID) and at least one document related to the given transaction from said management server (31) to said certification server (11); generating, by the certification server (11), a first two-dimensional code (QR2; QR4) in which the transaction code (TX_UID2; TX_UID3) is encoded; sending the first two-dimensional code (QR2; QR4) from the certification server (11) to the management server (31); sending the first two-dimensional code (QR2; QR4) from the management server (31) to the browser (221); displaying, by the browser (221), the first two-dimensional code (QR2; QR4) on a screen of the first electronic communications device (22); capturing, by the digital camera of the second electronic communications device (21), the first two-dimensional code (QR2; QR4) displayed on the screen of the first electronic communications device (22); extracting, by the software application (13), the transaction code (TX_UID2; TX_UID3) encoded in the captured first two-dimensional code (QR2; QR4); sending, from the software application (13) to the certification server (11), second data related to the given transaction that include the user code (UT_UID) stored on the software application (13) and the extracted transaction code (TX_UID2; TX_UID3); checking, by the certification server (11), whether the second data related to the given transaction received from the software application (13) are consistent with the first data related to the given transaction stored on the database (12); and, if the first and the second data related to the given transaction are consistent with each other, electronically signing, by the certification server (11), the document related to the given transaction received from the management server (31), and storing, on the database (12), the electronically signed document related to the given transaction.