Version 2.3. Operations Manual for Users, Agents and Merchants

Transcription

1 SETECS SAFE System Secure Mobile Transactions System Version 2.3 Operations Manual for Users, Agents and Merchants (for Smart Phone Applications) ~~~~~~~~~~~~~~~~ December 2011 Copyright SETECS Mobile Technologies

2 SETECS SAFE System: Wallet, Agent, and Merchant Manual 2 Table of Contents: Foreword... 3! Chapter 1: Installation and Initialization Initial Sequence... 4! Chapter 2: SAFE Secure Mobile Wallet Application... 6! 2.1! Mobile Financial Transactions... 7! 2.1.1! Mobile Payments: Over!the!Counter (OTC) and Over!the!Air (OTA)... 7! ! Mobile Payments Over!the!Counter (OTC) using Bluetooth... 7! ! Mobile Payments Over!the!Air (OTA) using GPRS... 12! 2.1.2! Transactions with SAFE Mobile Accounts... 13! 2.1.3! Operations with SAFE Mobile Accounts... 15! 2.1.4! Mobile Banking (m Banking)... 17! 2.1.5! Mobile Bankcard Transactions (m Cards)... 19! 2.1.6! Transactions with Stored Money (m Cash)... 21! 2.2! Mobile Shopping Functions... 22! 2.3! Wallet Settings Functions... 30! Chapter 3: SAFE Secure Mobile Merchant Application... 33! 3.1! Mobile Payments... 34! 3.1.1! Mobile Payments Over!the!Counter (OTC) and Over!the!Air (OTA)... 34! ! Mobile Payments: Over!the!Counter (OTC) using Bluetooth... 34! ! Mobile Payments Over!the!Air (OTA) using GPRS... 39! 3.2! Mobile Marketing Functions... 39! 3.3! Mobile Business Functions... 48! 3.4! Mobile SAFE Accounts... 50! 3.5! Merchant Settings Functions... 51! Chapter 4: SAFE Secure Mobile Agent Application... 54! Chapter 5: Using SAFE System with SMS Messages... 60! 5.1! Introduction SMS Messages... 60! 5.2! SAFE Registration... 60! 5.3! Registration of User s SAFE Account... 61! 5.4! Account Status... 61! 5.5! List Accounts... 61! 5.6! Money Deposit... 61! 5.7! Money Withdraw... 62! 5.8! Money Transfer... 63! Chapter 6: SAFE System Security... 64! 6.1! Access to Mobile Phone Applications... 64! 6.2! Protection of Local Data... 65! 6.3! Network Key Management... 65! 6.4! Protection of Messages in Transfer... 65! 6.5! Authenticity of Users... 66! 6.6! Reliable Registration of Users and Merchants... 66! 6.7! Confirmation of Transactions... 66! 6.8! Biometric (Fingerprint) Authentication... 66! 6.9! Protection of Data in Databases... 67! 6.10! Suspension and Re Activation of SAFE Mobile Accounts... 67! 6.11! Access to System Administration Functions... 67! 6.12! Role based Authorization of System Administrators... 68! 6.13! Role based Authorization of Transactions performed by Agents... 68! 6.14! Role based Authorization of Transactions performed by System Officers... 68! 6.15! Confirmation of Transactions... 68! 6.16! Financial Transactions Policy... 68!

3 SETECS SAFE System: Wallet, Agent, and Merchant Manual 3 Foreword This Manual describes in detail operations of the SAFE system from a user s perspective. There are three types of users in the system:! Subscribers, who use the system for various financial and shopping functions! Agents, who assist subscribers with registration, cash in and cash out operations, and! Merchants, who use the system for mobile marketing, mobile business transactions, and for accepting mobile payments by subscribers. Subscribers use smart phone application called SAFE Wallet. Agents use smart phone application called SAFE Agent. Merchants use smart phone application called SAFE Merchant. SAFE Wallet application supports three groups of mobile functions:! Various types of mobile payments using mobile pre paid accounts, standard bank accounts, bankcards and stored money payments! Various types of mobile shopping functions: promotions, mobile coupons, mobile gift cards, and mobile tickets! Mobile security functions: registration of an user, configuration of the SAFE system, detection of locations, management of Wallet s local and SAFE system PINs, selection of cryptographic options, and managing X.509 digital certificates. SAFE Merchant application supports three groups of mobile functions:! Mobile payments with subscribers using over the air (OTA) SMS and GPRS messages and over the counter (OTC) Bluetooth protocols! Various types of mobile marketing functions: depositing promotions, mobile coupons, mobile gift cards, and mobile tickets into the SAFE system! Various types of mobile business functions: accepting discounts based on promotions, mobile coupons, mobile gift cards, and verification of mobile tickets! Mobile security functions: registration of a merchant, configuration of the SAFE system, detection of locations, management of Merchant s local and SAFE system PINs, selection of cryptographic options, and managing X.509 digital certificates. SAFE Agent application supports three groups of mobile functions:! Self registration and registration of subscribers and merchants, including registration of locations for merchants! Cash in and cash out financial transactions with subscribers and merchants! Mobile security functions: registration of an agent, management of agent s local and SAFE system PINs, selection of cryptographic options, and managing X.509 digital certificates. All three applications are available on a variety of smart phones including iphone, various Android phones, various Java phones, and Blackberry phones. The Manual describes operational steps for all three of these smart phone applications.

4 SETECS SAFE System: Wallet, Agent, and Merchant Manual 4 Chapter 1: Installation and Initialization Initial Sequence Installation of the three smart phone applications is performed in a standard way, as installation of any other application for mobile phones, after their download. After installation and activation, each application performs an initial sequence of steps whose goal is to setup and configure the application. This sequence is performed by all three SAFE smart phone applications: Wallet, Agent and Merchant. The sequence comprises three steps, demonstrated here using Mobile Wallet: Step 1: Personalization of the application Step 2: Configuration of the SAFE server Step 3: Registration of the user Step 1:Wallet Configuration This is the first step in the initial sequence. Each application has local PIN, which is used to enter and activate the application. The size of the PIN is not limited and it can comprise of digits, letters or any combination of them. In addition, each application must be configured with the Country code of the user and his/her mobile number. The screen appears when starting SAFE Wallet the first time. User should enter local PIN and confirm it, country code and mobile number. Step 2: Configuration of the SAFE System This is the second step in the initial sequence. Its purpose is to specify SAFE system to which an application will connect. This screen allows user to enter mobile number and IP number of the SAFE server. Mobile number is used for SMS messages and IP number is used for GPRS messages. (Sometimes, SETECS Mobile distributes versions of the Wallet preconfigured to one particular instance of the SAFE system in which case these parameters do not have to be entered, just confirmed).

5 SETECS SAFE System: Wallet, Agent, and Merchant Manual 5 Step 3: User Registration This is the third step in the initial sequence. Its purpose is to register the user who will be using the application. User must enter his/her first name and last name. Mobile number is reproduced from the first step, for verification. After sending registration message, the system will confirm user registration. SAFE system PIN is returned. It must be remembered for future secure communications with the SAFE system, using SMS messages or Web interface. Registration is pending, so user must confirm it. After confirmation, user registration is completed and confirmed by the SAFE system. The system returns customer ID and user s SAFE account number. Customer ID is permanent customer s identification in the SAFE system. SAFE account number is permanent, until user terminates it. User s mobile number may change with its subscription with the telecom servicers provider. SAFE account number comprises three groups: Two digits: SAFE system country code (in the example: 46 for Sweden) Two digits: SAFE system sequence number within a country (in the example: 01 for the first instance of the SAFE system in Sweden) Seven digits: User s sequence number in the SAFE system (in the example: ). When using SAFE account number for SAFE transactions, user may use only the last significant digits from user s sequence number. In the example that would be 30

6 SETECS SAFE System: Wallet, Agent, and Merchant Manual 6 Chapter 2: SAFE Secure Mobile Wallet Application After completing the initial sequence, when starting SAFE Wallet, user must specify PIN. SAFE Wallet Login using PIN To start Wallet, user must specify PIN. After login into the Wallet by providing local PIN, Wallet will display the main menu. SAFE Secure Mobile Wallet supports several groups of functions, accessible through their corresponding buttons on Wallet s home page:! m Wallet: Mobile financial transactions! m Shopping: Mobile shopping transactions! m!club: Collecting various bonus points and benefits! m!health: Mobile medical services! m Settings: Selecting or updating various Wallet parameters With the current version of the SAFE Wallet, only m!wallet, m!shopping and m Settings groups of functions are available. Users may hide icons for m!club and m!health using Wallet Applications in the m!settings group (see section 2.3) SAFE Wallet Main Menu m-wallet mobile financial transactions with pre paid (SAFE ) accounts, bank accounts, credit cards or stored money m-shopping mobile shopping transactions using promotions, discounts, coupons, gift cards and tickets m-club mobile application to accumulate and spend various bonus points, loyalty rewards, etc. (under development) m-health mobile application supporting transactions with health data (under development) m-settings various functions to configure Secure Mobile Wallet

7 SETECS SAFE System: Wallet, Agent, and Merchant Manual Mobile Financial Transactions SAFE Wallet Mobile Financial Transactions Menu SAFE Wallet supports six groups of secure mobile financial transactions, selected through m Wallet financial transactions menu. From this menu users can perform the following functions: m-pay payments with merchants over the air (OTA) using GPRS or SMS messages or over the counter (OTC) using Bluetooth protocol m-transactions transactions with SAFE mobile (pre paid) accounts m-accounts administration of and access to SAFE mobile (pre paid) accounts m-banking access to and use of bank accounts m-cards administration of and payments using bankcards (debit or credit cards) m-cash handling of and payments using money stored in the Wallet Mobile Payments: Over!the!Counter (OTC) and Over!the!Air (OTA) SAFE Merchant supports two types of mobile payment protocols between merchant and customer, both using mobile phones: OTC based on Bluetooth and OTA based on GPRS/SMS messages. Since for both protocols SAFE Wallet and SAFE Merchant work through the sequence of steps and messages, in the next two sections the sequence is shown through corresponding screen shots of the SAFE Merchant and SAFE Wallet. The first section ( ) demonstrates payments OCT using Bluetooth, while the next section ( ) demonstrates payments OTA using GPRS Mobile Payments Over!the!Counter (OTC) using Bluetooth With OTC mobile payment, the sequence is initiated by the merchant by pressing m!pay button. SAFE Merchant: m Pay When merchant selects m!pay function, SAFE Merchant application starts Bluetooth protocol. For that, the system asks for permission. In this protocol SAFE Merchant acts as the Server, SAFE Wallet acts as the Client. If the merchant selects Yes, Bluetooth protocol will be initiated. If the merchant rejects, i.e. selects No, m!pay will be performed using GPRS/SMS messages. In this section, we demonstrate the case when merchant decides to use OTC payment using Bluetooth protocol and selects Yes.

8 SETECS SAFE System: Wallet, Agent, and Merchant Manual 8 SAFE Merchant: m Pay Next, m!pay form for the merchant is displayed. It has Amount to pay and Tax fields. Both fields are dimmed, since SAFE Wallet still has not connected to the SAFE Merchant through the Bluetooth protocol. So, the merchant is waiting. SAFE Merchant: m Pay When Wallet connects, the fields in the form open for data entry. Merchant fills amount to pay and eventually tax and requests payment from the customer. This step will transfer the amount to pay and tax to customer s SAFE Wallet. SAFE Wallet: m Pay When customer presses m!pay button, SAFE Wallet starts Bluetooth protocol. For that, the system asks for permission. If the customer selects Yes, Bluetooth protocol will be initiated. If the customer rejects, i.e. selects No, m!pay will be performed using GPRS/SMS messages. In this section, we demonstrate the case when customer decides to use OTC payment using Bluetooth protocol and selects Yes. SAFE Wallet: m Pay Starting Bluetooth needs some time, so the system shows the message to wait. SAFE Wallet is starting Bluetooth protocol and discovering Bluetooth servers in the proximity. If one or more are detected, SAFE Wallet will recognize merchant s Bluetooth server and connect to it.

9 SETECS SAFE System: Wallet, Agent, and Merchant Manual 9 SAFE Wallet: m Pay After connection is established, SAFE Wallet displays the form for payment. All data fields are empty. Since Bluetooth connection has been established, data will be transferred from the SAFE Merchant and SAFE Wallet waits for data to be received. SAFE Merchant: m Pay When SAFE Wallet connects, Merchant s fields are enabled for entering payment data. Merchant fills amount to pay and eventually tax and requests payment from the customer. This step will transfer the amount to pay and tax to customer s SAFE Wallet. In the background, SAFE Merchant also transfers merchant s SAFE account number to receive the payment. SAFE Merchant: m Pay When the merchants presses Request Payment button, payment data will be transferred to the SAFE Wallet and merchant must wait.

10 SETECS SAFE System: Wallet, Agent, and Merchant Manual 10 SAFE Wallet: m Pay When merchant fills in amount to pay and tax and presses Request Payment button, data are transferred to the SAFE Wallet and displayed in the m-pay form. SAFE Merchant also transfers merchant s SAFE account, which will be used to receive payment. When payment data are displayed in the m!pay form, the customer first selects payment type: SAFE account, bank account or bankcard. In the case of having multiple SAFE or bank accounts or multiple bankcards, the customer must select one SAFE account, bank account or bankcard for payment. When the customer presses Pay button. SAFE Wallet sends the message to the SAFE system. SAFE Wallet: m Pay SAFE system performs the transaction! transfers money from the customer s SAFE account to the merchant s SAFE account and informs the customer about successful completion of the transaction. SAFE Wallet: m Pay When the customer presses OK button, SAFE Wallet, using again Bluetooth connection, informs SAFE Merchant that the payment has been completed. During that transfer, SAFE Wallet displays Please wait... message.

11 SETECS SAFE System: Wallet, Agent, and Merchant Manual 11 SAFE Merchant: m Pay When SAFE Merchant receives payment confirmation message, it displays information to the merchant. The next step, merchant asks the customer if he/she wants the receipt. SAFE Merchant: m Pay The message is transferred to the SAFE Wallet, so SAFE Merchant waits for the reply. SAFE Wallet: m Pay Customer receives the question if he/she wants to get the receipt from the merchant for the payment. If No the transaction is completed and SAFE Wallet s main menu is displayed. If Yes, SAFE Wallet informs SAFE Merchant. SAFE Wallet: m Pay SAFE Wallet must wait for merchant s receipt. SAFE Merchant: m Pay Merchant receives customer s request for the receipt. It presses Send Receipt and the receipt is transferred to the SAFE Wallet.

12 SETECS SAFE System: Wallet, Agent, and Merchant Manual 12 SAFE Merchant: m Pay The message is transferred to the SAFE Wallet, so SAFE Merchant waits. When transfer is completed, SAFE Merchant returns to its main menu Mobile Payments Over!the!Air (OTA) using GPRS With OTA payment, the merchant just tells the customer how much to pay. When payment is completed, merchant is notified simply by checking its SAFE account status. So, all steps are performed only by the SAFE Wallet. The sequence is initiated by the customer by pressing m!pay button. SAFE Wallet: m Pay When customer selects m-pay function, SAFE Wallet application starts Bluetooth protocol. For that, the system asks for permission. In this protocol SAFE Wallet acts as the Client, while SAFE Merchant acts as the Server. If the customer selects Yes, Bluetooth protocol will be initiated. If the customer rejects, i.e. selects No, m-pay will be performed using GPRS/SMS messages. In this section, we demonstrate the case when customer decides to use OTA payment using GPRS protocol and selects No. SAFE Wallet: m Pay In the next step, SAFE Wallet will display m-pay form. The customer first selects payment type: SAFE account, bank account or bankcard. In case of having multiple SAFE or bank accounts or multiple bankcards, the customer must select one SAFE account, bank account or bankcard for payment. Then, customer enters amount to pay and eventually tip. Merchant informs the customer to which SAFE account the payment should be made using merchant s mobile number, so the customer enters it.

13 SETECS SAFE System: Wallet, Agent, and Merchant Manual 13 SAFE Wallet: m Pay Payment form filled by the customer is sent to the SAFE system by pressing Pay button. SAFE Wallet: m Pay SAFE system performs the transaction! transfers money from the customer s SAFE account to the merchant s SAFE account and informs the customer about successful completion of the transaction. When the customer presses OK button, SAFE Wallet returns to the main menu Transactions with SAFE Mobile Accounts m Transactions: SAFE Transactions Menu Users may perform three transactions using SAFE mobile accounts and also list those transactions: Deposit Cash performed between the user and an agent (user pre pays money to his/her SAFE account) Withdraw Cash performed between the user and an agent (user cashes out money from his/her SAFE account) Transfer Money performed between two users (one user transfers money to the SAFE account of another user) List Transactions user lists the last five transactions from his/her SAFE account

14 SETECS SAFE System: Wallet, Agent, and Merchant Manual 14 m Transactions: Deposit Cash User enters the amount to deposit and the mobile number of the agent. In case of multiple SAFE accounts, user also selects his/her SAFE account to which the money will be deposited. Note: SAFE v 2.3 supports only one SAFE account per user m Transactions: Withdraw Cash User enters the amount to withdraw and the mobile number of the agent. In case of multiple SAFE accounts, user also selects his/her SAFE account from which the money will be withdrawn. Note: SAFE v 2.3 supports only one SAFE account per user m Transactions: Transaction Code Both transactions deposit cash and withdraw cash require confirmation by the agent. For that, the system returns four digits random transaction code to the user. User tells that code to the agent, who uses it to confirm the transaction (see Chapter 4). m Transactions: Transfer Money User enters the amount to transfer and SAFE account of the recipient. In case of multiple SAFE accounts, user also selects his/her SAFE account from which the money will be withdrawn. The money is immediately transferred and the user is notified about new balance of his/her account. The recipient can verify the transfer by checking his/her SAFE account balance. Note: SAFE v 2.3 supports only one SAFE account per user

15 SETECS SAFE System: Wallet, Agent, and Merchant Manual 15 m Transactions: List Transactions The list of the last five transactions is displayed. This function displays transactions only if some transactions with mobile account have been performed Operations with SAFE Mobile Accounts m Accounts: SAFE Accounts Menu Users may perform five actions with their SAFE mobile accounts: List SAFE Accounts list all user s SAFE accounts registered in the system SAFE Account Balance get balance of the selected SAFE account Suspend Account temporally disable the use of the account Activate Account enable the use of an account after being suspended Terminate Account permanently remove the account from the system Note: Only accounts without money may be terminated m Accounts: List SAFE Accounts All user s SAFE accounts are listed Note: SAFE v 2.3 supports only one SAFE account per user m Accounts: SAFE Account Balance User selects one of the SAFE accounts and checks its current balance Note: SAFE v 2.3 supports only one SAFE account per user

16 SETECS SAFE System: Wallet, Agent, and Merchant Manual 16 m Accounts: SAFE Account Balance System displays selected SAFE account number and its current balance. m Accounts: Suspend SAFE Account User temporally disables the use of one of his/her SAFE accounts. m Accounts: Activate SAFE Account User activates previously suspended SAFE account. m Accounts: Terminate SAFE Account User permanently terminates one of his/her SAFE accounts.

17 SETECS SAFE System: Wallet, Agent, and Merchant Manual Mobile Banking (m Banking) m Banking: Transactions Menu Users may perform three transactions using bank accounts, list those accounts, and list transactions with bank accounts: Register Bank Account register bank account in the SAFE system Pay Bill/Invoice pay bill (individuals) or pay invoice (companies) using bank account Transfer Funds transfer funds from one bank account to another Account Balancer inquire the balance for the selected account List/Delete Bank Accounts list all bank accounts registered in the SAFE system List Transactions list the last five transactions performed with the selected bank account Note: m Banking can be used only if SAFE system is connected to a bank s IT Server directly or through some banking switch m Banking: Register Bank Account User enters bank s name, IBAN or Routing Number and his/her bank account number. m Banking: Pay Bill/Invoice User enters bill/invoice number and the amount to pay using bank account.

18 SETECS SAFE System: Wallet, Agent, and Merchant Manual 18 m Banking: Transfer Funds User enters target bank account for transfer and the amount to transfer. Note: Money may also be transferred to user s own mobile account m Banking: List Bank Accounts The system lists all user s bank accounts registered in the SAFE system. m Banking: List / Delete Bank Accounts When one account is selected, the system displays it, together with its balance. User may choose to delete it from the Wallet, if that account has been closed in the bank. m Banking: List Transactions User may select bank account and list the last five transactions performed with the selected bank account.

19 SETECS SAFE System: Wallet, Agent, and Merchant Manual 19 m Banking: Listing of Transactions The system lists the last five transactions performed with the selected bank account Mobile Bankcard Transactions (m Cards) m Cards: Bankcards Menu Users may register bankcard in the Wallet, check balance of credit cards, list registered bankcards, and list transactions performed with bankcards: Register Card register bankcard Check Card Balance inquire balance for the selected credit card List/Delete Cards list registered bankcards and remove those that are no longer valid List Transactions list the last five transactions performed with the selected bankcard Note: m Cards functions can be used only if SAFE system is connected to some card transaction processing gateway Note: Payments are performed by selecting one of the registered bankcards in the m Pay function m Cards: Register Card User registers his/her bankcard by entering card brand, card type, issuing bank, card number, card authorization code and card expiration date. In order to select Issuing Bank, at least one bank and one bank account must be registered.

20 SETECS SAFE System: Wallet, Agent, and Merchant Manual 20 m Cards: List Cards User may list all registered bankcards. m Cards: View / Delete Card When one bankcard is selected, the system displays it. User may choose to delete it from the Wallet, if that card has been closed in the bank. m Cards: List Transactions User may list the last five transactions performed with the selected bankcard. m Cards: Listing of Transactions The system lists the last five transactions performed with the selected bankcard.

21 SETECS SAFE System: Wallet, Agent, and Merchant Manual Transactions with Stored Money (m Cash) m Cash: Stored Cash Menu Users may perform two transactions with stored money and view money stored in the Wallet: Load Cash into Wallet transfer cash from the SAFE mobile account into Wallet Unload Cash from Wallet transfer cash stored in the Wallet back to the SAFE mobile account View Stored Money view the amount of money available in the Wallet Note: Payments are performed by selecting Stored Money in the m Pay function m Cash: Load Cash into Wallet Users must select SAFE account from which the money will be loaded into the Wallet and enters the amount to be loaded. m Cash: Unload Cash from Wallet Users must select SAFE account to which the money will be unloaded from the Wallet and enter the amount to be unloaded. m Cash: View Stored Cash Users may view the amount of money stored in the Wallet.

22 SETECS SAFE System: Wallet, Agent, and Merchant Manual Mobile Shopping Functions m Shopping: Mobile Shopping Menu SAFE Wallet supports seven groups of secure mobile shopping transactions, selected using mobile shopping menu. From this menu users can perform the following functions: m-advertisements select and download announcements m-promotions select and download promotions with various discounts and benefits m Coupons select and download mobile coupons m-telecom inquire, select, purchase top-up) air time m-tickets inquire, select, purchase, transfer and use mobile tickets m-parking search for parking places, pay parking using SAFE account, receive expiration notifications m-gift Cards inquire, select, purchase, transfer and use mobile gift cards m Shopping: View / Download Advertisements Mobile advertisements are loaded into Mobile Marketing Server of the SAFE system by merchants, using m Marketing functions of the SAFE Merchant smart phone application. By pressing m Advertising button users can list mobile advertisements. Initially, only advertisements already stored in the Wallet are listed. By pressing On the Market tab users list advertisements loaded into Mobile Marketing Server. These advertisements can be downloaded into the Wallet selecting them individually. Users can view the downloaded advertisements by pressing the In the Wallet tab. Advertisements loaded at the Mobile Marketing Server can be filtered by user s location. Either all are listed (tab All ) at the bottom or only those uploaded by merchants close to user s location (tab At nearby Location ) at the bottom of the screen. m Shopping: View Stored Advertisements When the customer selects In the Wallet, advertisements stored locally in the Wallet are displayed.

23 SETECS SAFE System: Wallet, Agent, and Merchant Manual 23 m Shopping: View / Delete Advertisement When one advertisement is selected, it is displayed enlarged, so the customer can view its details and also remove it from the Wallet, if it is not valid any longer. QR bar code is used to present it to the merchant s SAFE Merchant application for mobile clearance, using merchant s mobile phone as mobile Point of Sale (PoS) device. m Shopping: View / Download Promotions Mobile promotions are loaded into Mobile Marketing Server of the SAFE system by merchants, using m Marketing functions of the SAFE Merchant smart phone application. By pressing m Promotions button users can list mobile promotions. Initially, only promotions already stored in the Wallet are listed. By pressing On the Market tab users list promotions loaded into Mobile Marketing Server. These promotions can be downloaded into the Wallet selecting them individually. Users can view the downloaded promotions by pressing the In the Wallet tab. Promotions loaded at the Mobile Marketing Server can be filtered by user s location. Either all are listed (tab All ) at the bottom or only those uploaded by merchants close to user s location (tab At nearby Location ) at the bottom of the screen. m Shopping: View Stored Promotions When the customer selects In the Wallet, promotions stored locally in the Wallet are displayed.

24 SETECS SAFE System: Wallet, Agent, and Merchant Manual 24 m Shopping: View / Delete Promotion When one promotion is selected, it is displayed enlarged, so the customer can view its details and also remove it from the Wallet, if it is not valid any longer. QR bar code is used to present it to the merchant s SAFE Merchant application for mobile clearance, using merchant s mobile phone as mobile Pont of Sale (PoS) device. m Shopping: View / Download Coupons Mobile coupons are loaded into m Marketing Server of the SAFE system by merchants, using m Marketing functions of the Merchant smart phone application. By pressing m Coupons button users list mobile coupons. Initially, only coupons already stored in the Wallet are listed. By pressing On the Market tab users list coupons loaded into the Mobile Marketing Server. These coupons can be downloaded into the Wallet pressing them individually. Users can view the downloaded coupons by pressing the In the Wallet tab. Coupons on the m Marketing Server can be filtered by user s location. Either all are listed (tab All ) at the bottom or only those uploaded by merchants close to user s location (tab At nearby Location ) at the bottom of the screen. m Shopping: View Stored Coupons When one coupon is selected, it is displayed enlarged, so the customer can view its details and also remove it from the Wallet, if it is not valid any longer. QR bar code is used to present it to the merchant s SAFE Merchant application for mobile clearance, using merchant s mobile phone as mobile Point of Sale (PoS) device.

25 SETECS SAFE System: Wallet, Agent, and Merchant Manual 25 m Shopping: View / Delete Coupon When one coupon is selected, it is displayed enlarged, so the customer can view its details and also remove it from the Wallet, if it is not valid any longer. QR bar code is used to present it to the merchant s SAFE Merchant application for mobile clearance, using merchant s mobile phone. m Marketing: Mobile Telecom Menu Through mobile telecom menu, telecom providers will be able to upload their airtime plans and in that way providing possibility to users to review various airtime plans, search for plans, select one plan and pay for it. This group of mobile services requires on line connection to telecoms offering airtime plans m Shopping: View Tickets at the Server Mobile tickets are loaded into m Marketing Server of the SAFE system by theaters, using m Marketing functions of the Merchant smart phone application. By pressing m Tickets button users list mobile tickets. Initially, only tickets already stored in the Wallet are listed. By pressing On the Market tab users list tickets loaded into the m Marketing Server. These tickets can be purchased and then downloaded into the Wallet pressing them individually. Users can view purchased tickets by pressing the In the Wallet tab. Tickets on the m Marketing Server can be filtered by user s location. Either all are listed (tab All ) at the bottom or only those uploaded by theaters close to user s location (tab At nearby Location ) at the bottom of the screen. Tickets may be paid using any SAFE payment method SAFE accounts, bank accounts, bankcards, or stored money.

26 SETECS SAFE System: Wallet, Agent, and Merchant Manual 26 m Shopping: View Stored Tickets When the customer lists ticket in the Wallet purchased tickets, the list of locally stored tickets is displayed. m Shopping: Purchase Ticket When one of the tickets available at the Server is selected, Wallet immediately displays m Pay form. The price of the ticket and merchant s account are preloaded in the form. When customer pays the ticket, the system will download the ticket into customer s Wallet. m Shopping: View Purchased Tickets After the ticket is downloaded in the Wallet, the Wallet will display locally stored purchased tickets, including the new ticket. This listing is equivalent with the listing shown by Wallet when listing of tickets in the Wallet is selected.

27 SETECS SAFE System: Wallet, Agent, and Merchant Manual 27 m Shopping: View / Present Ticket When one of the locally stored purchased tickets is selected, it is displayed with its full details. QR bar code is used to present it to the merchant s SAFE Merchant application for mobile clearance, using merchant s mobile phone as mobile Point od Sale (PoS) device. m Shopping: Mobile Parking SAFE Wallet supports four functions for mobile parking: Search Parking users may search available parking place at the local garage / parking location Pay Parking users may pay parking Extend Parking users may extend their parking hours Pay Ticket users may use SAFE system to pay tickets for parking violations Note: All mobile parking functions require SAFE system to be integrated with the parking system of some Parking Authority m Shopping: Search Parking Users may search for available parking place at the local garage / parking location by giving its registration number m Shopping: Pay Parking Users may pay for parking by specifying parking place, parking time and selecting method of payment.

28 SETECS SAFE System: Wallet, Agent, and Merchant Manual 28 m Shopping: Extend Parking The system will warn users about expiration of their parking time. In that case, users may extend parking by specifying parking place number and additional parking time. m Shopping: Pay Ticket The system will notify users if the ticket has been issued for parking violation. In that case, users may pay the ticket using SAFE system, by specifying ticket number, parking place number, amount to pay and by selecting the method for payment. m Shopping: View Gift Cards at the Server Mobile gift cards are loaded into m Marketing Server of the SAFE system by merchants, using m Marketing functions of the Merchant smart phone application. By pressing m Gift Cards button users list mobile gift cards. Initially, only gift cards already stored in the Wallet are listed. By pressing On the Market tab users list gift cards loaded into the m Marketing Server. These gift cards can be purchased and then downloaded into the Wallet pressing them individually. Users can view purchased gift cards by pressing the In the Wallet tab. Gift cards on the m Marketing Server can be filtered by user s location. Either all are listed (tab All ) at the bottom or only those uploaded by merchants close to user s location (tab At nearby Location ) at the bottom of the screen. Gift cards may be paid using any SAFE payment method SAFE accounts, bank accounts, bankcards, or stored money.

29 SETECS SAFE System: Wallet, Agent, and Merchant Manual 29 m Shopping: View Stored Gift Cards When the customer lists gift cards in the Wallet purchased gift cards, the list of locally stored gift cards is displayed. m Shopping: Purchase Gift Card When one of the gift cards available at the Server is selected, Wallet immediately displays m Pay form. The price of the gift cards and merchant s account are preloaded in the form. When customer pays the gift cards, the system will download the gift cards into customer s Wallet. m Shopping: View Purchased Gift Cards After the gift card is downloaded in the Wallet, the Wallet will display locally stored purchased gift cards, including the new gift card. This listing is equivalent with the listing shown by Wallet when listing of gift cards in the Wallet is selected.

30 SETECS SAFE System: Wallet, Agent, and Merchant Manual 30 m Shopping: View / Transfer Gift Card When one of the locally stored purchased gift cards is selected, it is displayed with its full details. Gift card can be transferred to another SAFE user. Gift cards may be used as one of the payment options with m-pay, as explained for the SAFE Wallet. 2.3 Wallet Settings Functions SAFE Wallet m!settings Menu SAFE Wallet supports four functions to perform settings of various Wallet parameters. From this menu users can perform the following functions: System Configuration enter/edit the SAFE server address. Wallet Applications select applications which will appear on Wallet s home page User Registration update user registration data entered during initial sequence Security Settings select / update various security options m Settings: System Configuration This function is the same as the one performed during initial sequence. Users may modify SAFE system mobile number and/or SAFE system IP number, entered during the initial sequence.

31 SETECS SAFE System: Wallet, Agent, and Merchant Manual 31 m Settings: Wallet Applications This function is used to select/unselect Wallet applications that will appear on Wallet s home page. m Settings: User Registration If the user is already registered, this function will display such message. If for some reason, user did not register during the initial sequence, this function will provide the user the possibility to register in the SAFE system. In that case the panel displayed is the same as in the third step of the initial sequence. m Settings: Security Settings With Security Settings users may select: to change local Wallet PIN to change SAFE system PIN to request certificate to select/modify various security options m Settings: Change Wallet PIN Users may modify local PIN specified during the initial sequence.

32 SETECS SAFE System: Wallet, Agent, and Merchant Manual 32 m Settings: Change SAFE System PIN Users may modify SAFE system PIN which was assigned to them automatically during registration. m Settings: Request Certificate By executing this function, user will generates RSA key pair send certificate request to the CA Server and download the resulting certificate m Settings: Security Options Users may select various security options for protection of their messages: no security, data integrity only, data confidentiality only, or both data integrity and data confidentiality

33 SETECS SAFE System: Wallet, Agent, and Merchant Manual 33 Chapter 3: SAFE Secure Mobile Merchant Application SAFE Secure Mobile Merchant as an application for smart phones used by merchants. It provides four groups of mobile functions: Mobile payments with SAFE Wallet over the air (OTA) using GPRS or SMS messages and over the-counter (OTC) using Bluetooth protocol Mobile marketing functions, where merchants can upload to the Mobile Marketing Server their advertising and promotion messages, coupons, tickets and gift cards and telecoms may upload their airtime top up plans Mobile business functions, first mobile transactions in locations using Point of Sale (PoS) systems, then mobile services for the owners/drivers of vehicles, and various mobile commerce transactions accepting and clearing mobile vouchers from customers, uploaded by merchants using m Marketing services Mobile accounts administration of and access to SAFE mobile (pre paid) accounts. Settings various functions for configuring Secure Mobile Merchant application Note: If merchant wants to use full scope of mobile services, with mobile SAFE accounts, mobile services with bank accounts, bank cards, etc., then the merchant must use SAFE Wallet for those functions. Initial sequence for SAFE Merchant is equivalent as for SAFE Wallet. After initial sequence, when starting SAFE Merchant application, merchant must specify PIN. SAFE Merchant Login using PIN To start SAFE Merchant application, merchant must specify PIN. After login into the Merchant application by providing local PIN, the application will display the main menu. SAFE Secure Mobile Merchant supports several groups of functions, accessible through their corresponding buttons on the Merchant s home page:! m Pay: Mobile payments using different payment methods and protocols! m!marketing: Uploading and distribution of various mobile discounts and vouchers! m Business: Mobile PoS transactions, mobile vehicles services, and mobile commerce transactions! m!accounts: Administration and use of SAFE mobile accounts! m Settings: Selecting or updating various Merchant parameters

34 SETECS SAFE System: Wallet, Agent, and Merchant Manual 34 SAFE Merchant Main Menu m-pay mobile payments (accept payments from customers) m-marketing uploading advertisements, promotions, coupons, gift cards, tickets and other vouchers to the m Marketing Server m-business perform mobile business transactions: handle inventory, create orders, invoices and perform payments m-accounts administration of and access to SAFE mobile (pre paid) accounts m-settings various functions to configure Secure Mobile Merchant 3.1 Mobile Payments Mobile Payments Over!the!Counter (OTC) and Over!the!Air (OTA) SAFE Merchant supports two types of mobile payment protocols between merchant and customer, both using mobile phones: OTC based on Bluetooth and OTA based on GPRS/SMS messages. Since for both protocols SAFE Wallet and SAFE Merchant work through the sequence of steps and messages, in the next two sections the sequence is shown through corresponding screen shots of the SAFE Merchant and SAFE Wallet Mobile Payments: Over!the!Counter (OTC) using Bluetooth With OTC mobile payment, the sequence is initiated by the merchant by pressing m!pay button. SAFE Merchant: m Pay When merchant selects m!pay function, SAFE Merchant application starts Bluetooth protocol. For that, the system asks for permission. In this protocol SAFE Merchant acts as the Server, SAFE Wallet acts as the Client. If the merchant selects Yes, Bluetooth protocol will be initiated. If the merchant rejects, i.e. selects No, m!pay will be performed using GPRS/SMS messages. In this section, we demonstrate the case when merchant decides to use OTC payment using Bluetooth protocol and selects Yes.

35 SETECS SAFE System: Wallet, Agent, and Merchant Manual 35 SAFE Merchant: m Pay Next, m!pay form for the merchant is displayed. It has Amount to pay and Tax fields. Both fields are dimmed, since SAFE Wallet still has not connected to the SAFE Merchant through the Bluetooth protocol. So, the merchant is waiting. SAFE Merchant: m Pay When Wallet connects, the fields in the form open for data entry. Merchant fills amount to pay and eventually tax and requests payment from the customer. This step will transfer the amount to pay and tax to customer s SAFE Wallet. SAFE Wallet: m Pay When customer presses m!pay button, SAFE Wallet starts Bluetooth protocol. For that, the system asks for permission. If the customer selects Yes, Bluetooth protocol will be initiated. If the customer rejects, i.e. selects No, m!pay will be performed using GPRS/SMS messages. In this section, we demonstrate the case when customer decides to use OTC payment using Bluetooth protocol and selects Yes. SAFE Wallet: m Pay Starting Bluetooth needs some time, so the system shows the message to wait. SAFE Wallet is starting Bluetooth protocol and discovering Bluetooth servers in the proximity. If one or more are detected, SAFE Wallet will recognize merchant s Bluetooth server and connect to it.

36 SETECS SAFE System: Wallet, Agent, and Merchant Manual 36 SAFE Wallet: m Pay After connection is established, SAFE Wallet displays the form for payment. All data fields are empty. Since Bluetooth connection has been established, data will be transferred from the SAFE Merchant and SAFE Wallet waits for data to be received. SAFE Merchant: m Pay When SAFE Wallet connects, Merchant s fields are enabled for entering payment data. Merchant fills amount to pay and eventually tax and requests payment from the customer. This step will transfer the amount to pay and tax to customer s SAFE Wallet. In the background, SAFE Merchant also transfers merchant s SAFE account number to receive the payment. SAFE Merchant: m Pay When the merchants presses Request Payment button, payment data will be transferred to the SAFE Wallet and merchant must wait.

37 SETECS SAFE System: Wallet, Agent, and Merchant Manual 37 SAFE Wallet: m Pay When merchant fills in amount to pay and tax and presses Request Payment button, data are transferred to the SAFE Wallet and displayed in the m-pay form. SAFE Merchant also transfers merchant s SAFE account, which will be used to receive payment. When payment data are displayed in the m!pay form, the customer first selects payment type: SAFE account, bank account or bankcard. In the case of having multiple SAFE or bank accounts or multiple bankcards, the customer must select one SAFE account, bank account or bankcard for payment. When the customer presses Pay button. SAFE Wallet sends the message to the SAFE system. SAFE Wallet: m Pay SAFE system performs the transaction! transfers money from the customer s SAFE account to the merchant s SAFE account and informs the customer about successful completion of the transaction. SAFE Wallet: m Pay When the customer presses OK button, SAFE Wallet, using again Bluetooth connection, informs SAFE Merchant that the payment has been completed. During that transfer, SAFE Wallet displays Please wait... message.

38 SETECS SAFE System: Wallet, Agent, and Merchant Manual 38 SAFE Merchant: m Pay When SAFE Merchant receives payment confirmation message, it displays information to the merchant. The next step, merchant asks the customer if he/she wants the receipt. SAFE Merchant: m Pay The message is transferred to the SAFE Wallet, so SAFE Merchant waits for the reply. SAFE Wallet: m Pay Customer receives the question if he/she wants to get the receipt from the merchant for the payment. If No the transaction is completed and SAFE Wallet s main menu is displayed. If Yes, SAFE Wallet informs SAFE Merchant. SAFE Wallet: m Pay SAFE Wallet must wait for merchant s receipt. SAFE Merchant: m Pay Merchant receives customer s request for the receipt. It presses Send Receipt and the receipt is transferred to the SAFE Wallet.

39 SETECS SAFE System: Wallet, Agent, and Merchant Manual 39 SAFE Merchant: m Pay The message is transferred to the SAFE Wallet, so SAFE Merchant waits. When transfer is completed, SAFE Merchant returns to its main menu Mobile Payments Over!the!Air (OTA) using GPRS With OTA payment, the merchant just tells the customer how much to pay. When payment is completed, merchant is notified simply by checking it SAFE account status. So, all steps are performed only by the SAFE Wallet. The sequence is shown in the section Mobile Marketing Functions With mobile marketing functions merchants can upload various marketing items to the SAFE Mobile Marketing Server. SAFE Merchant Mobile Marketing Menu SAFE Merchant supports the following m Marketing functions: m-advertising upload advertising messages to the Mobile Marketing Server and view/remove uploaded advertisements m-promotions upload promotions to the Mobile Marketing Server and view/remove uploaded promotions m-coupons upload mobile coupons to the Mobile Marketing Server and view/remove uploaded coupons m-telecom upload various airtime plans m-tickets upload tickets to the Mobile Marketing Server and view/remove uploaded tickets m-gift Cards upload mobile gift cards to the Mobile Marketing Server and view/remove uploaded gift cards m Marketing: Mobile Advertising Menu For mobile advertising, merchant can upload its advertising messages to the Mobile Marketing Server, view, and delete those that are not valid any longer. Advertisements are messages with general information about products and services. They are informative and no benefits are offered to customers. Benefit offers (discounts, special offers, etc.) are handled by m!promotions and m Coupons.

40 SETECS SAFE System: Wallet, Agent, and Merchant Manual 40 m Marketing: Upload Advertisement Merchant uploads an advertisement to the Mobile Marketing Server by specifying its description, starting and expiration dates. m Marketing: View Advertisements Merchant can view all its advertisements uploaded to the Mobile Marketing Server and delete those not accurate or relevant any longer. m Marketing: View / Delete Advertisement When one advertisement is selected, it is displayed enlarged, so the merchant can view its details and also remove it from the Mobile Marketing Server, if it is not valid any longer.

41 SETECS SAFE System: Wallet, Agent, and Merchant Manual 41 m Marketing: Confirm Deletion When the merchant decides to remove the advertisement from the Mobile Marketing Server, he/she will be asked to confirm this action. m Marketing: Mobile Promotions Menu For mobile promotions, merchant can upload its promotion messages using Mobile Marketing Server, view and delete those that are not valid any longer. Promotions are various informative messages offering benefits to customers, like discounts, special deals, special arrangements, etc. m Marketing: Upload Promotion When uploading mobile promotions, merchant enters description of the promotion, its starting and expiration dates. m Marketing: View Promotions Merchant can view all its promotions uploaded into the Mobile Marketing Server and delete those that are not relevant or accurate.

42 SETECS SAFE System: Wallet, Agent, and Merchant Manual 42 m Marketing: View / Delete Promotion When one promotion is selected, it is displayed enlarged, so the merchant can view its details and also remove it from the Mobile Marketing Server, if it is not valid any longer. m Marketing: Confirm Deletion When the merchant decides to remove the promotion from the Mobile Marketing Server, he/she will be asked to confirm this action. m Marketing: Mobile Coupons Menu For mobile coupons, merchant can upload and view mobile coupons. Mobile coupons are messages that have certain benefits to user, like discounts, special deals, special arrangements, etc. The difference with promotions is that, contrary to the promotion, where users must only be informed about them, with mobile coupons to use their benefits. They must be presented to the merchant. Mobile coupons may have discounted value or discount percentage.