TW202230260A - Inter-bank identity authentication system and method thereof in which an intermediary server is applied to transmit identity authentication data and result of comparison between a first financial institution server and a second financial institution server - Google Patents

Abstract

Disclosed are an inter-bank identity authentication system and a method thereof, in which a plurality of personal data of a user is stored in a first financial institution server; when a second financial institution server receives a plurality of identity authentication data entered by the user, the second financial institution server transmits the identity authentication data to an intermediary server; the intermediary server forwards the identity authentication data to the first financial institution server in order to conduct comparison of the identity authentication data with the personal data in the first financial institution server; and the first financial institution server transmits a result of comparison through the intermediary server back to the second financial institution server so as to on-line complete authentication of the identity of the user. By means of the system of the present invention, the easiness of inter-bank identity authentication operations between financial institutions can be enhanced to effectively increase the percentage of electronic payment.

Description

System and method for cross-bank identity authentication

The present invention relates to a new type of cash flow structure, in particular to a system and method for cross-bank identity authentication.

With the increasing popularity of mobile payment, financial institutions provide customers with more diverse and convenient online financial services. When customers apply for financial services online, they do not need to go to the counter, so they must confirm their identity online. For example, when authenticating a financial card on a mobile payment application, since the financial card is bound to a bank account, it is even more necessary to strictly confirm whether the user using the mobile payment application is the cardholder of the financial card.

The online identity authentication methods in the financial industry are diverse, including hardware certificate signatures (such as industrial and commercial certificates, natural person certificates, etc.), one-time passwords, video conferences, knowledge inquiries, etc., but the identity authentication of the chip financial card cannot be used. Authenticate across banks.

Therefore, the present invention proposes a system and method for cross-bank identity authentication in view of the above-mentioned deficiencies in the prior art and future needs. The specific architecture and implementation thereof will be described in detail below:

The main purpose of the present invention is to provide an inter-bank identity authentication system and method, which provide an intermediary server to interface with multiple financial institution servers, and provide users with online financial card identity authentication operations without going over the counter.

Another object of the present invention is to provide a system and method for cross-bank identity authentication, which provides two authentication methods of inserting a card and not having a card.

In order to achieve the above object, the present invention provides an inter-bank identity authentication system, comprising: a first financial institution server, which stores multiple personal information of a user; and a second financial institution server, which accepts multiple identity authentications input by the user and an intermediary server, the signal is connected to the first financial institution server and the second financial institution server, and after receiving the identity authentication information sent by the second financial institution server, it is transmitted to the first financial institution server. The device compares with the personal information, and sends the comparison result back to the server of the second financial institution through the intermediary server to complete the user's identity authentication online.

According to an embodiment of the present invention, the personal information is stored when the user opens an account on the server of the first financial institution.

According to an embodiment of the present invention, the second financial institution server is further connected to a physical or network automated teller machine (ATM), and the ATM receives a financial card inserted by the user, and sends a transaction code, a transaction amount, a bank The account number, identity authentication information, etc. are transferred into the chip of the financial card for signing, and a corresponding transaction authentication code (TAC) of the financial card is generated.

According to an embodiment of the present invention, the financial card is issued by the first financial institution server, and the ATM transmits the identity authentication information and the financial card transaction verification code to the second financial institution server, and then transmits it to the first financial institution through the intermediary server. Organization server for verification.

According to an embodiment of the present invention, after receiving the identity authentication information and the financial card transaction verification code, the first financial institution server verifies the legality of the financial card transaction verification code, and then compares the identity authentication information with the personal information.

According to an embodiment of the present invention, after the first financial institution server verifies the user's identity, the second financial institution server sends a one-time password short message to the user for confirmation.

According to an embodiment of the present invention, the second financial institution server is an agent bank server.

The present invention further provides a method for cross-bank identity authentication, comprising the following steps: storing a plurality of personal information of a user in a first financial institution server; when a second financial institution server accepts the plurality of identity authentication information input by the user When , the second financial institution server transmits the identity authentication information to an intermediary server; the intermediary server transmits the identity authentication information to the first financial institution server, and the identity authentication information is associated with the individual in the first financial institution server The information is compared; and the first financial institution server sends the comparison result back to the second financial institution server through the intermediary server to complete the user's identity authentication online.

The present invention provides an inter-bank identity authentication system and method thereof. Please also refer to FIG. 1 , which is a block diagram of the inter-bank identity authentication system 10 of the present invention. The system 10 for inter-bank identity authentication of the present invention includes a plurality of first financial institution servers 12 , an intermediary server 14 and a plurality of second financial institution servers. The first financial institution server 12 is an agent bank server that provides multiple financial services, and can also be an agent bank cooperating with an electronic payment institution. The intermediary server 14 is a credible third-party platform, and is a financial institution platform, which interfaces each agent bank server (ie, the first financial institution server 12 ) with each second financial institution server 16 to provide security and safety. Credible data transmission. The second financial institution server 16 is a card issuing bank in the present invention, which stores a plurality of personal information retained when the user opens an account.

When a user needs to perform cross-bank authentication, for example, in an application of a financial institution or an electronic payment institution, to authenticate the user's identity online, the first financial institution server 12 must confirm the validity of the user's personal information. The second financial institution server 12 transmits the multiple identity authentication information input by the user to the intermediary server 14 . The signal of the intermediary server 14 is connected to the first financial institution server 12 and the second financial institution server 16 , and after receiving the identity authentication information sent by the second financial institution server 16 , it is transmitted to the first financial institution server 12 to communicate with the first financial institution server 12 . The personal information is compared, and the comparison result is sent back to the second financial institution server 16 through the intermediary server 14 to complete the user's identity authentication online.

The present invention includes two cross-bank identity authentication modes: no-card verification and card-inserted verification. Please also refer to FIG. 2 , which is a flow chart of card-free verification in the method of cross-bank identity authentication of the present invention. The user is operating on a mobile device when there is no card verification. First, in step S10, a plurality of personal information of a user is stored in the first financial institution server 12; in step S12, the user inputs a plurality of identity authentication information on the user interface provided by the second financial institution server 16, and this uses The user interface may be an authentication webpage of the second financial institution displayed on the mobile device. When the second financial institution server 16 accepts the identity authentication information input by the user, the second financial institution server 16 transmits the identity authentication information to the intermediary server 14 . Next, in step S14, the intermediary server 14 transmits the identity authentication information to the first financial institution server 16, and the first financial institution server 16 compares the identity authentication information with the stored personal information to determine whether they are consistent , to confirm the validity of the identity authentication information; finally, in step S16 , the first financial institution server 12 sends the comparison result back to the second financial institution server 16 through the intermediary server 14 to complete the user's online verification. Authentication.

In the above step S16, after the first financial institution server 12 verifies that the identity of the user is correct, the second financial institution server 16 receives the comparison result and sends a one-time password SMS to the user for confirmation to ensure that no The object of card verification is indeed the user himself.

Next, another embodiment of the present invention will be described. Please refer to FIG. 3 , which is a flowchart of card insertion verification in the method of cross-bank identity authentication of the present invention. This embodiment requires a card insertion operation, such as inserting a financial card into a physical ATM or a network ATM. In the case of a network ATM, the user prepares a card reader with a signal to connect the computer, and operates the computer to connect to the website provided by the second financial institution server 16 to operate the network ATM service on the website . The aforementioned physical or network ATM is connected to the second financial institution server 16 via the Internet and exchanges messages. First, in step S20 , a plurality of personal information of a user is stored in the first financial institution server 12 . In step S22, the ATM receives a financial card inserted by the user, and transmits a transaction code, a transaction amount, a bank account number, identity authentication information, etc. into the chip of the financial card for signing, and generates a corresponding financial card transaction verification code. Next, in step S24 , the ATM transmits the identity authentication information and the financial card transaction verification code to the second financial institution server 16 , and the second financial institution server 16 transmits it to the intermediary server 14 . Next, in step S26, the intermediary server 14 transfers the identity authentication information and the financial card transaction verification code to the first financial institution server 16, where the identity authentication information and the stored personal information are processed in the first financial institution server 16. Compare and judge whether they are consistent to confirm the validity of the identity authentication information; finally, in step S28, the first financial institution server 12 returns the result of the comparison to the second financial institution server 16 through the intermediary server 14, Complete the user's identity authentication online.

In the above step S26, after receiving the identity authentication information and the financial card transaction verification code, the first financial institution server 12 will first verify the legality of the financial card transaction verification code. The identity verification information is then compared with the personal information. If the verification code of the financial card transaction is invalid, the direct transaction fails.

To sum up, with the system and method for inter-bank identity authentication provided by the present invention, when a user applies to a financial institution (including an electronic payment institution) for various financial services that require inter-bank authentication, the user can insert a card or without Cards are checked in two ways. Specifically, verify the personal data retained by the user when opening an account, such as account number, mobile phone number, birthday and other identifiable information; it can also verify whether the user's deposit account is open over the counter, if so, it can be used for The criteria for subsequent users to open an online account shall be based on the "Operation Template for Banks Accepting Customers to Open Digital Deposit Accounts by the Way of the Road" as mentioned in item (1) of Article 4, Paragraph 4: "Deposits made in person (must include a uniform number)" Accounts, credit cards or other financial payment instruments recognized by the competent authority are limited, but do not include deposit accounts that have not been opened through the counter…”. In this way, the authentication of online user identity information, financial information attributes and their validity provided by the present invention can effectively solve the difficulties that cannot be overcome by current technology, thereby significantly improving the utilization rate of electronic payment.

Only the above descriptions are only preferred embodiments of the present invention, and are not intended to limit the scope of the present invention. Therefore, all equivalent changes or modifications made according to the features and spirits described in the scope of the application of the present invention shall be included in the scope of the application for patent of the present invention.

10: Cross-bank identity authentication system 12: First Financial Institution Server 14: Mediation server 16: Second Financial Institution Server

FIG. 1 is a block diagram of the system for cross-bank identity authentication according to the present invention. Fig. 2 is a flow chart of card-free verification in the method of cross-bank identity authentication of the present invention. FIG. 3 is a flow chart of card insertion verification in the method of cross-bank identity authentication of the present invention.

10: Cross-bank identity authentication system

12: First Financial Institution Server

14: Mediation server

16: Second Financial Institution Server

Claims (13)

A system for cross-bank identity authentication, including: a first financial institution server, storing a plurality of personal information of a user; a second financial institution server that accepts and transmits the multiple identity authentication information input by the user; and an intermediary server, the signal is connected to the first financial institution server and the second financial institution server, and after receiving the identity authentication information sent by the second financial institution server, it is forwarded to the first financial institution server The device compares with the personal information, and sends the comparison result back to the second financial institution server through the intermediary server to complete the user's identity authentication online. The system for cross-bank identity authentication as described in claim 1, wherein the personal information is what the user retains when opening an account on the server of the first financial institution. The inter-bank identity authentication system as claimed in claim 1, wherein the second financial institution server is further connected to a physical or network ATM, and the ATM receives a financial card inserted by the user and sends a transaction code , a transaction amount, a bank account number, the identity authentication information, etc. are transferred into the chip of the financial card for signing, and a corresponding transaction authentication code (TAC) of the financial card is generated. The inter-bank identity authentication system as described in claim 3, wherein the financial card is issued by the first financial institution server, and the ATM transmits the identity authentication information and the financial card transaction verification code to the second financial institution The institution server, and then sent to the first financial institution server through the intermediary server for verification. The system for inter-bank identity authentication according to claim 4, wherein after receiving the identity authentication information and the financial card transaction verification code, the first financial institution server first verifies the legality of the financial card transaction verification code, and then Compare such identification information with such personal information. The cross-bank identity authentication system according to claim 1, wherein after the first financial institution server verifies the user's identity, the second financial institution server sends a one-time password message to the user for confirmation. The inter-bank identity authentication system according to claim 1, wherein the second financial institution server is a correspondent bank server. A method for virtualized inter-bank fund transfer, comprising the following steps: storing a plurality of personal information of a user in a first financial institution server; When a second financial institution server accepts the plurality of identity authentication information input by the user, the second financial institution server transmits the identity authentication information to an intermediary server; The intermediary server forwards the identity authentication information to the first financial institution server, where the identity authentication information is compared with the personal information in the first financial institution server; and The first financial institution server sends the comparison result back to the second financial institution server through the intermediary server, and completes the identity authentication of the user online. The method for cross-bank identity authentication as described in claim 8, wherein the personal information is the one stored by the user when opening an account on the server of the first financial institution. The method for cross-bank identity authentication as described in claim 8, wherein the second financial institution server is further connected to a physical or network ATM, and the ATM receives a financial card inserted by the user and sends a transaction code , a transaction amount, a bank account number, the identity authentication information, etc. are transferred into the chip of the financial card for signing, and a corresponding transaction authentication code (TAC) of the financial card is generated. The method for inter-bank identity authentication as described in claim 10, wherein the financial card is issued by the first financial institution server, and the ATM transmits the identity authentication information and the financial card transaction verification code to the second financial institution The institution server, and then sent to the first financial institution server through the intermediary server for verification. The method for cross-bank identity authentication as described in claim 11, wherein after receiving the identity authentication information and the financial card transaction verification code, the first financial institution server first verifies the validity of the financial card transaction verification code, and then Compare such identification information with such personal information. The method for cross-bank identity authentication according to claim 8, wherein after the first financial institution server verifies the user's identity, the second financial institution server sends a one-time password SMS to the user for confirmation.

Images