TW201828188A - Electronic wallet system and method thereof effectively improve the safety of using the electronic wallet - Google Patents

Abstract

The invention provides an electronic wallet system and a method thereof, which comprises a proxy server that transmits the encryption key and generates an application program to the user device. The user device then inputs the card information as required by the application program, and uses the encryption key for encryption to generate the encrypted card data to the merchant server, and transmits it to an authorization switching center server, and sends it back to the proxy server. The encrypted card data can then be decrypted and transmitted to the card issuing server to authenticate the card information and generate a successful authentication message to the proxy server. The corresponding card transaction information is generated according to the card data displayed on the user device so as to provide payment by selecting the transaction card data and requesting the payment. According to the invention, encryption processing can be performed when the card information is transmitted, so that the safety of using the electronic wallet can be effectively improved.

Description

Establishing electronic wallet system and method thereof

The invention relates to a technology for establishing an electronic wallet, in particular to a method for establishing an electronic wallet with high security and a method thereof.

As smart portable devices (such as smart phones or tablets) have prospered in recent years, consumers have become more dependent on mobile devices such as smart phones and tablets, so merchants have seen this opportunity. Business services for mobile communication devices began to be launched.

One type of business service is Mobile Payment, which is a service that uses mobile devices to make payments. Consumers can use mobile phones to pay for services or without using cash, checks or credit cards. The cost of digital and physical goods allows consumers to go out with their smart phones and no longer need to carry physical money to cope with the life of food and clothing.

However, existing mobile business service providers and mobile payment service providers are mostly independent operating companies. Therefore, consumers must install mobile payment service applications in mobile communication devices and applications corresponding to payment store mobile business services. The program must first obtain the relevant services through the application that implements the mobile business service, and then execute the payment payment service application to complete the payment action, which not only increases the burden of the storage space of the consumer mobile communication device, but also complicated steps. It also makes consumers feel bad, so there are many active business service providers and mobile payment service providers actively integrating, or the company itself plays two roles at the same time, to provide users to download only a single application, operate a single application Business services and payment services can be completed. However, if the mobile business service provider does not cooperate with the mobile payment service provider, it is still inconvenient to use a single application for payment.

Moreover, the security mechanism established by each merchant is quite incomplete. Most of the merchants only perform the verification of the credit card number and the identification code input when the credit card is bound, and it is not completely checked whether the card input card is the card holder. Because of this, it is easy for people who are used by unscrupulous people to perform acts such as stealing and brushing, which causes many safety problems.

In view of the above, the present invention proposes an electronic wallet system and a method thereof to effectively overcome the above problems in view of the above-mentioned shortcomings of the prior art.

The main object of the present invention is to provide an electronic wallet system and a method thereof, which can encrypt a card number of a credit card after being applied for a credit card, and then transmit the card number to avoid leakage of the card number, and the credit card is directly sent through the card issuing bank. Checking the user's identity can enhance the security of the application card, avoid the risk of the card number being stolen, and effectively improve the security of using the electronic wallet.

Another object of the present invention is to provide an electronic wallet system and a method thereof, which can integrate various credit card formats, a card issuing bank, and a plurality of payment using platforms, thereby improving the mobility of use.

For the above purposes, the present invention provides a method for establishing an electronic wallet. First, at least one card data is input to a user device; then the user device encrypts the card data with an encryption key and generates an encrypted card data, which includes There is a core command, the user device transmits the encrypted card data to a card management system; the card management system decrypts the encrypted card data, generates card data and a nuclear body command, so that the card management system authenticates the card data according to the nuclear body instruction; After the card data is successfully authenticated, a verification success message is generated; the card management system can generate a verification code to the user device, and after the user inputs the verification code to the user device, the card management system generates a corresponding transaction according to the card data. The card data, and the transaction card data is transmitted to the user device and the transaction card data is displayed, and the user is selected to select the transaction card data to request payment.

For the above purposes, the present invention also provides an electronic wallet system, comprising: an agent server generating an application program and at least one encryption key to a user device, the user device receiving the encryption key and applying the program, Entering at least one card data according to the application program requirement, and then the user device encrypts the card data by using the encryption key to generate an encrypted card data including a core command to transmit the encrypted card data to at least one merchant server, the merchant servo After receiving the encrypted card data, the device transmits the encrypted card data to an authorized transfer center server, and the authorized transfer center server receives the encrypted card data of the merchant server, and then transmits the encrypted card data to the agent server, The agent server is used to decrypt the encrypted card data, and the card data and the kernel command are generated to at least one card issuing server, so that the card issuing server authenticates the card data according to the nuclear body command authentication, and the card data is successfully authenticated and generates an authentication success information. To the agency server to make the agency Server means to the user generates a transaction card corresponding to the card information according to display information, providing information requests the user to select a payment card transactions.

After the card issuing server authenticates the card data successfully, a verification code is generated to the user device display, and the user inputs the verification code to the agency server, and the agent server receives the verification code before transmitting the transaction card data to User device display.

After the agent server transmits the transaction card data to the user device display, a transaction card data download completion information is generated to the authorized transfer center server, and the transaction card data download completion information is transmitted to the merchant server, and the notification card is sent. Download completed.

The purpose, technical content, features and effects achieved by the present invention will be more readily understood by the detailed description of the embodiments.

Please refer to the first figure, as shown in the figure, to illustrate the system architecture diagram of the present invention. As shown, the electronic wallet system 1 includes a user device 10, which can be a portable communication device, such as a smart phone or tablet. A card management system 20 is connected to the user device 10 to process the card login, verification, payment, etc., wherein the card management system 20 includes an agency server 22, a merchant server 24, and an authorized transfer center. The server 26 and the card issuing server 28. The user device 10 signals the proxy server 22, the merchant server 24, the authorized transfer center server 26, and the card issuer server 28. The merchant server 24 signals the authorized transfer center server 26; the proxy server 22 then signals the authorized transfer center server 26 and the card issuer server 28.

The merchant server 24 is a payment management electronic wallet of a merchant such as an online store, an online shopping mall, an online shopping mall, etc., such as a google wallet; the agency server 22 is the main core of the invention, and is regarded as a manager of a digital wallet. The e-wallet is connected and transmitted and integrated through the proxy server 22; the card-issuing server 28 is the issuer of the card held by the user, for example, each banker, which is mainly used for checking Card information and transaction related check operations, and subsequent authorization operations review based on the user's transaction behavior; authorized transfer center server 26 is an organization that handles credit card transactions, such as the United Credit Card Processing Center (National Credit Card) Center, NCCC), or authorized transfer center server 26 may also be a financial institution, such as an acquiring bank that processes bills, etc. The authorized transfer center server 26 of this embodiment only serves as the current status of the accepted card to record the card at present. The status is used as a medium to contact the merchant server 24 to receive or transmit the card status.

After explaining the various roles in the system architecture of the embodiments of the present invention, the present invention provides a more detailed description of the collocation between the user operation and the transaction process. First, a flow chart of the method when the agency server 22 and the card issuance server 28 are signed, please refer to the first figure and the second figure. As shown in the figure, first proceed to step S10, when the user applies for the electronic wallet. The user enters an application command to the user device 10, and the user device 10 transmits the application command to the agency server 22, so that the agency server 22 generates an application program and at least one encryption key to the user. Device 10, user device 10 then makes a request to agency server 22, which generates a new set of five encryption keys to user device 10. After the agent server 22 generates an application program and encrypts the key to the user device 10, the process proceeds to step S12, and the user device 10 displays the application program, and provides the user with at least one card data according to the application program requirement. The card is a credit card, and a plurality of card materials can be input. In this embodiment, the card data is input as an embodiment. The card data includes at least one credit card number of the credit card or the user profile, and of course, the user can also use the card. The device 10 captures the card image and provides the user device 10 to determine the card data, the card number or the user profile of the card data image. Then, proceeding to step S14, after inputting the card data, the user device 10 encrypts the card data by using the encryption key, and simultaneously entrains a core command to generate an encrypted card data, so the card data and the core are included in the encrypted card data. The user device 10 generates the encrypted card data and transmits it to the merchant server 24, and the merchant server 24 transmits the encrypted card data to the authorized transfer center server 26; wherein when the merchant server 24 is plural, the user device 24 The device 10 will pre-set which merchant server 24 the encrypted card data should be transmitted to, and the user device 10 is provided to transmit the encrypted card data to the corresponding merchant server 24. Next, proceeding to step S16, the authorization transfer center server 26 transfers the encrypted card data to the agency server 22, and the agent server 22 decrypts the encrypted card data to generate card data and the body command, and decrypts the card data. The card data and the body command are transmitted to the card issuing server 28, so that the card issuing server 28 starts to authenticate the card data according to the body command, and whether the card data is the holder's application, and the card issuing bank can be proofread by the card issuing bank during the authentication. Or use communication devices, such as telephones and Internet telephony, in addition to directly interviewing cardholders for identity verification. Then, proceeding to step S18, after the card data is successfully authenticated, the card issuing server 28 generates an authentication success message to the agency server 22. After the agent server 22 receives the authentication success information, the agent server 22 generates a system. The card notification information is sent to the authorized transfer center server 26, which then transmits the card making notification information to the merchant server 24, notifying the authorized transfer center server 26 and the merchant server 24 that the credit card verification is successful, waiting for the user to open. The card is used, and at the same time, the card issuing server 28 sends a verification code to the user device 10, and the user device 10 displays the verification code again. Finally, in step S20, the user inputs the displayed verification code in the user device 10, and the user device 10 transmits the verification code to the agency server 22 to generate corresponding transaction card data according to the card data to the user device 10. Display, wherein the transaction card data can be represented by the aspect or number of the credit card graphic, and is merely for the description of the embodiment and is not intended to limit the manner in which the transaction card data is displayed on the screen of the user device 10; After the transaction card data is transmitted to the user device 10 for display, the mechanism server 22 generates a transaction card data download completion information to the authorized transfer center server 26, and the authorization transfer center server 26 transmits the transaction card data download completion information to the The merchant server 24 notifies that the credit card has been downloaded to the user device 10, and the user can start to select the transaction card information displayed in the user device 10 to request payment. After applying for a credit card as an electronic wallet, it is also possible to apply for a plurality of different credit cards as electronic wallets, so that the user device 10 can simultaneously use a plurality of credit cards to pay, and the application steps are the same as above.

Next, please refer to the third figure to explain in detail the system architecture diagram used by the user to operate the user device 10 to perform payment after the credit card authentication is completed. As shown, the electronic wallet system 1 is configured to include a user device 10, It can be a portable communication device, such as a smart phone or a tablet computer; a card management system 20 signals the user device 10 to handle card login, verification, payment, etc., wherein the card management system 20 includes an agent. The server 22, the merchant server 24, the authorized transfer center server 26, and the card issuer server 28. The user device 10 signals the proxy server 22, the merchant server 24, and the authorized transfer center server 26. The merchant server 24 signals the authorized transfer center server 26; the agent server 22 signals the authorization. The transfer center server 26 and the card issuer server 28; the authorized transfer center server 26 is coupled to the card issuer server 28.

Then, please refer to the third figure and the fourth figure to explain the detailed steps of the line payment. First, proceed to step S22, when the user selects the goods of the merchant server 24 to pay the bill, according to the desired payment. The credit card generates a payment information after the user device 10 selects the corresponding transaction card data. Next, proceeding to step S24, the user device 10 encrypts the payment information by using the encryption key previously downloaded from the agency server 22, generates an encrypted payment information, and transmits the encrypted payment information to the authorized transfer center server. . Next, proceeding to step S26, the authorization transfer center server 26 notifies the agency server 22 to request the proxy server 22 to decode the encrypted payment information to decode the generated payment information to the card issuing server 28. Then, proceeding to step S28, after the card issuance server 28 verifies that the payment information is successful, an authorization notification message is generated to the authorized transfer center server 26, and finally proceeds to step S30, and the transfer center server 26 is authorized to transmit the authorization notification information to the use. The device 10 informs the user that the payment is successful, and transmits the authorization notification information to the merchant server 24, and the merchant server 24 can make a payment to the authorized transfer center server 26.

In addition, the user device 10 can be connected to a computer device (not shown). After the product is purchased on the computer device, the user device 10 performs payment through the user device 10. For the detailed method flow, please refer to the third figure. As shown in the fifth figure, as shown in the figure, first, the process proceeds to step S32, and the user requests the user device 10 to generate an electronic wallet code. Then, proceeding to step S34, the user inputs the electronic wallet code displayed by the user device 10 into a computer device. Then, proceeding to step S36, the user can select the transaction card data corresponding to the prepaid credit card in the user device 10 to generate a payment information. In step S38, the user device 10 re-uses the previously loaded encryption key to encrypt the payment information to generate an encrypted payment information to the authorized transfer center server 26. Next, proceeding to step S40, the authorization transfer center server 26 requests the proxy server 22 to perform decoding of the encrypted payment information to decode the generated payment information, and transmits the payment information to the card issuing server 28. Then, proceeding to step S42, the card issuing server 28 authenticates the payment information. After the payment information is successfully authenticated, the card issuing server 28 generates an authorization notification message to the authorized transfer center server 26, and finally proceeds to step S44 to authorize the transfer center. The server 26 then transmits the authorization notification information to the user device 10, notifies the user that the payment is successful, and transmits the authorization notification information to the merchant server 24, and the merchant server 24 can make a payment to the authorized transfer center server 26.

In addition, the card issuing server 28 of the present invention generates a card update information to the agency server after automatically updating the card data when the card data is expired or other unexpected conditions are updated. 22. The agency server 22 then passes the card update information to the authorized transfer center server 26, which authorizes the transfer center server 26 to pass the card update information to the merchant server 24, and the agent server 22 will present the card. The update information is passed to the user device 10 to inform the user that the card has been updated.

In summary, the present invention can integrate a variety of credit card formats, issuing banks and a variety of payment usage platforms to improve the mobility of use. Moreover, the invention can encrypt the card number of the credit card after logging in the credit card and payment, and then transmit the card number to avoid leakage of the card number, and the credit card is directly checked by the card issuing bank when the card is credited, and the card application card can be strengthened. The security, to avoid the risk of the card number being stolen, and effectively improve the security of using the electronic wallet.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention. Therefore, any changes or modifications of the features and spirits of the present invention should be included in the scope of the present invention.

1‧‧‧Create an electronic wallet system

10‧‧‧User device

20‧‧‧Card Management System

22‧‧‧ Agency Server

24‧‧‧Business Server

26‧‧‧Authorized Transfer Center Server

28‧‧‧ card issuing server

The first figure is a block diagram of the system of the present invention. The second figure is a flow chart of the steps of applying for an electronic wallet of the present invention. The third figure is a system block diagram of another embodiment of the present invention. The fourth figure is a flow chart of the steps of using the electronic wallet to pay for the present invention. The fifth figure is a flow chart of another embodiment of the present invention for payment by electronic wallet.

Claims (19)

An electronic wallet system, comprising: an agency server, generating an application program and at least one encryption key; a user device receiving the encryption key and the application program to input at least one card according to the application requirement After the data, the user device encrypts the card data by using the encryption key and generates an encrypted card data, the encrypted card data includes a core command; at least one merchant server receives the encrypted card data, and the encrypted card The data is transmitted; an authorized transfer center server receives the encrypted card data of the merchant server, and transmits the encrypted card data to the agency server, so that the agent server decrypts the encrypted card data Generating the card data and the nuclear body command; and at least one card issuing server receiving the card data and the nuclear body command transmitted by the agency server, and authenticating the card data according to the nuclear body instruction, the card data After the authentication is successful, an authentication success message is generated to the agency server, so that The agency server device user generates a corresponding transaction data to the card based on the card information, the user selects the provided information request payment card transaction. The electronic wallet system is established as described in claim 1, wherein after the card issuing server authenticates the card data, a verification code is generated to the user device display, and the user is provided to input the verification code to the agency server. After receiving the verification code, the agency server transmits the transaction card data to the user device for display. The method as claimed in claim 2, wherein the agent server further generates a transaction card data download completion information to the authorization transfer after the transaction card data is transmitted to the user device for display. After receiving the central server, the authorized transfer center server transmits the transaction card data download completion information to the merchant server. If the e-wallet system is established as described in claim 1, after the agent server receives the authentication success information, the agent server further generates a card-making notification information to the authorized transfer center server, and then The card-making notification information is transmitted to the merchant server. The electronic wallet system is established as claimed in claim 1, wherein the card material includes at least one card data image, a credit card number, or a user profile. Establishing the electronic wallet system as claimed in claim 1, wherein the card issuing server further generates a card update information to the agency server, and then transmits the card update information to the authorized transfer center server, the authorization The transfer center server then transmits the card update information to the merchant server, and the agent server can transmit the card update information to the user device. The e-wallet system is configured as described in claim 1, wherein the user device selects the transaction card data to generate a payment information, and the user device encrypts the payment information by using the encryption key to generate an encrypted payment information to The authorized transfer center server, after the authorized transfer center server decodes the encrypted payment information through the proxy server, generates the payment information to the card issuing server, and the card issuing server authenticates the payment information successfully, and generates An authorization notification message is sent to the authorized transfer center server, and the authorized transfer center server transmits the authorization notification information to the user device and the merchant server. The electronic wallet system is configured as described in claim 1, wherein the user device further generates an electronic wallet code to input the electronic wallet code into a computer device, and generates a message after the user device selects the transaction card data. Payment information, the user device encrypts the payment information by using the encryption key, and generates an encrypted payment information to the authorized transfer center server, and the authorized transfer center server decodes the encrypted payment through the proxy server After the information is generated, the payment information is generated to the card issuing server, and after the card issuing server authenticates the payment information, an authorization notification message is generated to the agent server, and then transmitted to the authorized transfer center server, and the Authorization notification information is transmitted to the user device and the merchant server. The electronic wallet system is established as described in claim 1, wherein the user device is a smart phone. The electronic wallet system is established as described in claim 1, wherein the card issuing server checks the identity with a user through a communication device. A method for establishing an electronic wallet, the method comprising: inputting at least one card data in a user device; the user device encrypting the card data by using an encryption key and generating an encrypted card data, the encrypted card data comprising a core body instruction, The user device transmits the encrypted card data to a card management system; the card management system decrypts the encrypted card data, generates the card data and the nuclear body command, so that the card management system according to the nuclear body command, Authenticating the card data; after the card data is successfully authenticated, generating an authentication success message; and the card management system generates corresponding transaction card data according to the card data, and transmitting the transaction card data to the user device and displaying the transaction card Information, providing the user to select the transaction card information to request payment. The method for establishing an electronic wallet according to claim 11, wherein after the step of successfully authenticating the card data, the card management system further generates a verification code to the user device, and provides the user to input the verification code to the user device. Thereafter, the user device displays the transaction card data. The method for establishing an electronic wallet as claimed in claim 12, wherein the card management system further generates a card download completion information after the user device displays the transaction card data. The method for establishing an e-wallet according to claim 11, wherein the card management system further generates a card-making notification information after the step of generating the authentication success information. The method for establishing an electronic wallet as claimed in claim 11, further comprising the card management system generating a card update information. The method for establishing an electronic wallet as claimed in claim 11, wherein the card material comprises at least one card data image, a credit card number or a user profile. The method for establishing an electronic wallet according to claim 11, wherein the step of providing the user to select the transaction card data to request payment further comprises: selecting the transaction card data at the user device to generate a payment message; The payment information is encrypted by using the encryption key to generate an encrypted payment information; the card management system receives the encrypted payment information and decodes the encrypted payment information to generate the payment information; and the card management system authenticates the payment information and generates the payment information. An authorization notification information; and the card management system makes a payment according to the authorization notification information, and transmits the authorization notification information to the user device. The method for establishing an electronic wallet according to claim 11, wherein the step of providing the user to select the transaction card data to request payment further comprises: the user device generating an electronic wallet code; inputting the electronic wallet code into a computer device Selecting the transaction card data at the user device to generate a payment message; the user device encrypts the payment information by using the encryption key to generate an encrypted payment information; the card management system receives the encrypted payment information and decodes the Encrypting the payment information to generate the payment information; after the card management system authenticates the payment information, generating an authorization notification information; and the card management system makes a payment according to the authorization notification information, and transmits the authorization notification information to the use Device. The method for establishing an e-wallet according to claim 11, wherein in the step of authenticating the card data, the card management system contacts the user via communication to check the identity with the user.