| 摘要 |
There is provided an authorisation system comprising: an authorisation server (140); an account server (120) for storing account data relating to a plurality of accounts; an access terminal (100), including: a token reader (106) for inputting token data from a selected one of a plurality of tokens, the token data identifying one of the plurality of accounts; input means (108) for inputting transaction data; wherein the access terminal is operable to receive token data from the token reader and to receive transaction data from the input means; to transmit to the account server a first transaction request containing the token data and the transaction data; and to transmit to the authorisation server a second transaction request including access terminal identification data identifying the access terminal; wherein the account server is operable to receive the transaction request; to process the token data to generate account identification data, the account identification data being associated with a portion of the account data; and to transmit a third transaction request to the authorisation server, the third transaction request including the transaction data; wherein the authorisation server is operable to receive the second transaction request and to receive the third transaction request; to process the transaction data and the access terminal identification data to determine whether the access terminal is authorised to enable the transaction; and, if applicable, to transmit to the account server an authorisation request to indicate that the access terminal is authorised; and wherein, in response to receipt of the authorisation request from the authorisation server, the account server is operable to process the transaction data and to modify the account data associated with the account identification data in dependence on the processing. |
