TWI626606B - Electronic card establishment system and method thereof - Google Patents

Abstract

The invention relates to an electronic card establishing system and a method thereof, which are provided after the user device inputs the card information with the card number image and the card expiration date code, and then transmits the card information to the proxy server, and then sends corresponding identity verification information according to the card information to User device, the user then enters the verification information to the user device according to the identity verification information, and then passes back to the proxy server to transmit the card information and the verification information to the card issuing server, so as to retrieve the user information verification information according to the card information. After the verification succeeds, the authentication success information is transmitted to the virtual card server through the proxy server to convert the card number image into a virtual card number, and generate card download notification information to the user device to notify the user device to download the virtual card number. The invention can convert the real card number into a virtual card number, which can effectively improve the security of the card information.

Description

Electronic card establishment system and method thereof

The invention relates to a technology for establishing an electronic wallet, in particular to an electronic card establishing system with high confidentiality and a method thereof.

In recent years, with the rapid development of smart phones or tablets, it has been possible to expand the functions of mobile phones by installing programs such as application software, which can help users to handle various services anytime and anywhere, so that the public can use smart phones and tablets. The dependence of smart devices such as computers has increased. Therefore, merchants have also seen the business opportunities of smart portable devices and started to launch business services for mobile communication devices.

One type of business service is Mobile Payment, which is a service that uses mobile devices to make payments, so that consumers can simply pass through without using physical cash, checks or cards. Smart portable devices can pay for various services or digital and physical goods. Therefore, consumers only need to carry smart money mobile phones to go out, they do not need to carry physical money checks or cards to pay various fees.

However, the security mechanisms established by the current payment software are quite incomplete. Generally, when the card is swiped through the smart portable device, the actual card card number is used to directly perform the card payment payment, but the actual card number is not used for the card card. The security mechanism, in the process of transmitting the actual card number to the transfer center to request authorization, if it is accidentally intercepted by the unscrupulous person, the unscrupulous person can directly obtain the actual card number from the intercepted signal for stealing. Although the card information is currently encrypted by the key to transmit the encrypted card information, the device that normally creates the key is connected to the external device, so it is easy to be The hacker invades the key, and then directly decrypts the encrypted card information using the key to perform the stolen brushing and the like. Therefore, it is generally known that the security mechanisms of the swipe card are quite incomplete, and it is easy to cause many security concerns.

In view of the above, the present invention has been made in view of the above-mentioned shortcomings of the prior art, and an electronic card establishing system and method thereof are provided to effectively overcome the above problems.

The main object of the present invention is to provide an electronic card establishing system and a method thereof, which convert a real card number into a virtual card number through a virtual card making server, and provide a transaction through a virtual card number in the future, thereby effectively improving card information. Security, to avoid hackers can directly steal the card number and other acts.

Another object of the present invention is to provide an electronic card establishing system and a method thereof, which are to separate a virtual card server storing a key from an external device, thereby preventing an external device from directly entering the virtual card server. The encryption key can effectively increase the density of the encryption key and improve the security of information transmission.

To achieve the above object, the present invention provides an electronic card establishing method, the method comprising: inputting at least one card information in a user device, wherein the card information includes a card number image and a card expiration date code; and then the user device sets the card The information is transmitted to a management system. The management system then sends a corresponding card information to the user device according to the card information. The user then inputs the verification information to the user device according to the identity verification information, and the user device will verify the information. Returning to the management system; the management system retrieves a user information based on the card information to check the verification information, and generates a verification success information after the verification information verification succeeds; finally, the management system converts the card number image of the card information according to the authentication success information. The virtual card number is generated, and a card download notification message is generated to the user device, and the user device is provided to download the virtual card number according to the card download notification information.

After the user device downloads the virtual card number according to the card download notification information, the user device can send a card card information, and the card card information carries the virtual card number to a card swipe machine, so that the card reader generates a transaction request to enclose the virtual card number to the management system. After the management system converts the virtual card number into the corresponding card number image, the card number image is checked. When the management system checks successfully, an authorization result transaction information is sent to authorize the card reader to perform the transaction.

In addition, the present invention provides an electronic card establishing system, including a user device for inputting a card information, the card information includes a card number image and a card expiration date code, and the user device transmits the card information to the card information after inputting the card information. The proxy server sends a card verification information to the user device after receiving the card information, and provides the user to input the verification information according to the identity verification information to the user device, and the user device returns the verification information. Passed to the proxy server, the proxy server then transmits the verification information and the card information to a card issuing server. After the card issuing server receives the card information and the verification information, the card issuing server retrieves a user information according to the card information to check Verification information, verification information verification success generates a certification success message to the proxy server, the proxy server can further transmit the card information and the authentication success information to a virtual card server, and the virtual card server verifies the card according to the authentication success information. Information card number image converted to virtual Number, and generates a notification card to download the information to the user device, the user's device to provide notification of information to download the virtual card number, as well as a transaction management server based on the card downloaded, synchronized storage virtual server virtual card image of the card number and card number.

The virtual card server can generate a plurality of encryption keys, and the virtual card server can transmit the encryption key to the user device to encrypt the card information.

The purpose, technical content, features and effects achieved by the present invention will be more readily understood by the detailed description of the embodiments.

Please refer to the first figure to explain in detail the system architecture used in the establishment of the electronic card of the present invention. As shown, the electronic card establishing system includes a user device 10, which can be a portable communication device, such as a smart phone or A smart device such as a tablet computer, the user device 10 provides a device as an electronic wallet, and provides input card information when establishing an electronic wallet, wherein the card information includes a card number image and a card expiration date code, and the card number image is transmitted through The camera lens of the user device 10 captures the card number on the card, and the card expiration date code can be input through the operation interface of the user device 10, wherein the card can be a credit card, a financial card, a charge card, a stored value card, or E-ticket smart card, etc., so the card number image is the image of the card number on each credit card, financial card, debit card, stored value card or e-ticket smart card; a management system 20 is used to process the card login , verification, payment and other services, the management system 20 includes a proxy server 22 signal connection user device 10, proxy server 22 A bridge for the user device 10 to communicate with other servers for connection, message transmission, and integration; a card issuer server 24 signal is connected to the proxy server 22, and the card issuer server 24 is a card held by the user. Issuers, such as various bankers or companies that issue stored-value cards, are mainly used to check card information and related auditing operations, and perform subsequent authorization operations review based on the user's trading behavior; The card server 26 is connected to the proxy server 22 and the user device 10. The virtual card server 26 can convert the card number image transmitted by the user device 10 into a virtual card number, and the virtual card server server 26 can further The complex encryption key is generated, and the virtual card server 26 can transmit the encryption key to the user device 10, and provide the user device 10 to encrypt and transmit various information by using the encryption key, thereby effectively improving the security of information transmission. A transaction management server 28 signals the virtual card server 26, and the transaction management server 28 synchronizes the virtual card number of the virtual card server 26 and The image of the number, so that when the transaction is subsequently performed, the virtual card number and the card number image in the virtual card server 26 can be obtained by simply connecting to the transaction management server 28, thereby preventing the virtual card server 26 from contacting the outside, resulting in contact with the outside. The encryption key of the virtual card server 26 is stolen, which improves the privacy of the virtual card server 26 and the security of the encryption key, and prevents the encryption key in the virtual card server 26 from being stolen or tampered. .

After explaining the various roles in the system architecture of the first embodiment of the present invention, the present invention further describes the flow of the electronic card establishing apparatus and the electronic card establishing method of the present invention. The embodiment is described by using a credit card as an embodiment. The methods and devices of the remaining cards are the same as the credit card, so the description is not repeated. Referring to the first figure and the second figure, as shown in the figure, first proceeding to step S10, when the user applies for the electronic wallet, the user inputs an application instruction at the user device 10, and the user device 10 itself. The user is required to set a program to open the password, so that the program can be opened by entering the program to open the program and can be used as an identity confirmation. Then, the process proceeds to step S12, after the user sets the program to open the password, the user device 10 An application reminder is generated to remind the user to input card information including the card number image and the card expiration date code into the user device 10 to perform the action of applying for the electronic wallet. Next, proceeding to step S14, the user device 10 transmits the card information to the proxy server 22. Before the card information is transmitted, the card information must be encrypted by the encryption key to improve security, wherein the encryption key is performed by the virtual card server. The virtual card server 26 determines whether the encryption key inside the user device 10 is sufficient. When not enough, the virtual card server 26 transmits the encryption key to the user device 10, and the user device 10 reuses the device. The encryption key encrypts the card information to transmit the encrypted card information to the proxy server 22. In addition, the proxy server 22 stores the identity verification information transmitted by the card issuing server 24, and the identity verification information is The card issuing server 24 is generated in advance for the user information setting such as the card information of the user. Therefore, each card information corresponds to different identity verification information. In step S14, the process proceeds to step S142, and the user device 10 After the encrypted card information is transmitted to the proxy server 22, the proxy server 22 determines whether the card information has a corresponding identity core. For the information, if otherwise, the process proceeds to step S144, and a non-acceptance message is sent to the user device 10; if yes, the process proceeds to step S146, and the proxy server 22 sends an identity verification information corresponding to the card information to the user device 10, and performs the following steps. S16.

As shown in step S16, the user inputs the verification information to the verification screen of the user device 10 according to the identity verification information. After the input is completed, the user device 10 returns the verification information to the proxy server 22, and the proxy server 22 The verification information and the card information are then transmitted to the card issuing server 24. Then, proceeding to step S18, the card issuing server 24 receives the card information and the verification information, so as to retrieve a user information according to the card information to check the verification information, and the verification information verification succeeds to generate an authentication success information to the proxy server 22. Finally, in step S20, after receiving the authentication success information, the proxy server 22 transmits the card information and the authentication success information to the virtual card server 26, so that the virtual card server 26 sends the card information card number map according to the authentication success information. After the conversion is completed, the virtual card server 26 generates a card-making success information to the proxy server 22, and the proxy server 22 transmits the card-making success information to the card-issuing server 24 to notify the card-issuing server. The virtual card server 26 has completed the card making process. At the same time, the virtual card server 26 generates a card download notification message to the user device 10 to remind the user to download the virtual card number according to the card download notification information, wherein the card download notification information sent by the virtual card server 26 includes a verification. The code is displayed on the screen of the user device 10 after the user device 10 receives the verification code, and the user is provided with a corresponding number or English letter according to the verification code. The input of the number or the English letter is only an embodiment description, of course. Without limitation, after the user inputs the verification code to the user device 10, the user device 10 transmits the verification code to the virtual card server 26 again, so that the virtual card server 26 confirms that the verification code is correct. The virtual card number is transmitted to the user device 10 to complete the action of downloading the card, and the user device 10 can perform the action of swiping using the virtual card number. Of course, the virtual card server 26 described above, in addition to the encryption key, the remaining virtual card numbers and card images are simultaneously stored in the transaction management server 28 for subsequent communication with the outside.

Next, please refer to the third figure, as shown in the figure, which illustrates the action of how to perform the card payment after the establishment of the electronic card. In addition to the structure of the above embodiment, the embodiment further increases the card punching machine 30 and the center transfer. The server 32, the card punching machine 30 is used to transmit and receive the card information, and the transfer center server 32 is used to process the card transaction, such as the National Credit Card Center (NCCC), and the proxy server. When there is no agreement with the card-issuing server 24, the transaction must be bypassed by the transfer center server 32. When the proxy server 22 and the card-issuing server 24 have signed an agreement, there is no need to The transit center server 32 acts as an intermediary for the mediation.

First, a system architecture diagram of the unsigned agreement between the proxy server 22 and the card issuing server 24 is illustrated, which includes a user device 10, a proxy server 22, a card issuance server 24, a virtual card server 26, and a transaction management server. 28, the signal connection mode and function are the same as the structure of the first figure above, so the description is not repeated. The difference is that the card punching machine 30 and the transfer center server 32 are added. The card punching machine 30 is connected to the user device 10 and the transfer center server 32 for receiving the user device 10. Swipe information, and according to the card information transmission signal, request authorization to swipe the card; the transfer center server 32 is a signal connection credit card machine 30, the card issuing server 24 and the transaction management server 28, as a transaction for the routing .

After explaining the various roles in the system architecture of the third figure, the present invention further describes the user operation and the transaction flow in more detail. Please refer to the third figure and the fourth figure together, first proceeding to step S22, the user device 10 can send a card information to the card swipe machine 30, wherein the swipe information folder has a virtual card number. Next, proceeding to step S24, the card swipe machine 30 generates a transaction request to carry the virtual card number to the transfer center server 32 based on the card information. Going to step S26, the transfer center server 32 can transfer the virtual card number to the transaction management server 28, so that the management transaction server 28 obtains the corresponding card number image according to the virtual card number, and transmits the card number image to the card issuing server. 24. Finally, proceeding to step S28, the card issuing server 24 starts to check the card image after receiving the card number image, and determines whether it is an authorized card image. If the card issuing server 24 fails verification, the failed transaction information is sent to the transfer center. The server 32, the transfer center server 32 then transmits the failed transaction information to the credit card machine 30, and the card printer 30 is provided to display the transaction failure to inform the user that the transaction has failed; but if the card issuing server 24 checks successfully, an authorization result is issued. The transaction information is sent to the transfer center server 32, and the transfer center server 32 is then authorized to the card reader 30 for the transaction.

Next, an embodiment in which the proxy server 22 and the card-issuing server 24 have signed an agreement is described. Please refer to the fifth figure. When the agency server 22 and the card-issuing server 24 have signed an agreement, there is no need to pass the transit center servo. The device 32 serves as an intermediary role for the mediation. As shown in the fifth figure, the card reader 30 is directly connected to the user device 10 and to the card issuing server 24, and the card issuing server 24 directly signals the transaction management server 28. The rest of the structure and function are the same as those of the above third figure, so the description will not be repeated.

After explaining the various roles in the system architecture of the fifth figure, the present invention further describes the user operation and the transaction flow in more detail. Please refer to the fifth figure and the sixth figure together, first proceeding to step S30, the user first The device 10 sends a swipe information to the card swipe machine 30, wherein the swipe information folder carries a virtual card number. Next, proceeding to step S32, the card swipe machine 30 generates a transaction request to carry the virtual card number to the card issuing server 24 based on the card information. As shown in step S34, the card issuing server 24 can directly transmit the virtual card number to the transaction management server 28, so that the management transaction server 28 obtains the corresponding card number image according to the virtual card number, and transmits the card number image to the card issuing server. 24. Finally, in step S36, the card issuing server 24 starts to check the card image after receiving the card number image, and determines whether it is an authorized card image. If the card issuing server 24 fails to check, the failed transaction information is directly sent to the card punching machine. 30. The card-sending machine 30 is provided to display the transaction failure to inform the user that the transaction has failed; but if the card-issuing server 24 checks successfully, an authorization result transaction information is sent to the card-swapping machine 30 to authorize the card-sending machine 30 to conduct the transaction.

In summary, the present invention can convert the original card number into a virtual card number through a virtual card server, and provide future transactions through the virtual card number, thereby effectively improving the security of the card information and preventing the hacker from directly stealing the card number. The behavior of stolen brushing, and the virtual card server storing the key are separated from the external device, which can effectively prevent the external device from directly entering the virtual card server to obtain the encryption key, thereby effectively increasing the hidden density of the encryption key and Improve the security of information transmission.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention. Therefore, any changes or modifications of the features and spirits of the present invention should be included in the scope of the present invention.

10‧‧‧User device

20‧‧‧Management system

22‧‧‧Proxy server

24‧‧‧ card issuing server

26‧‧‧Virtual card server

28‧‧‧Transaction Management Server

30‧‧‧ credit card machine

32‧‧‧Transfer Center Server

The first figure is a block diagram of the system for establishing an electronic card of the present invention. The second figure is a flow chart of a method for establishing an electronic card according to the present invention. The third figure is a block diagram of the system for swiping the present invention. The fourth figure is a flow chart of the method for swiping the card of the present invention. The fifth figure is a system block diagram of another embodiment of the present invention for swiping. Figure 6 is a flow chart of another embodiment of the present invention for swiping a card.

Claims (14)

An electronic card establishing system includes: a user device, inputting at least one card information, the card information including a card number image and a card expiration date code; and a proxy server, after receiving the card information, issuing a pair of card cards The identity verification information of the information is sent to the user device, and the user is provided to input the verification information according to the identity verification information to the user device, and then sent back to the proxy server, and then the verification information and the card information are transmitted. Receiving the card information and the verification information to retrieve a user information based on the card information to verify the verification information, and the verification information verification succeeds in generating an authentication success message to the proxy server; a virtual card server, receiving the card information and the authentication success information transmitted by the proxy server, and converting the card number image of the card information into a virtual card number according to the authentication success information, and generating a card download notification Information to the user device, the user device downloading a notification based on the card The virtual card number is downloaded, and the virtual card server encrypts the card number image of the card information into a virtual card number according to the authentication success information, and further generates a card success information to the proxy server, the agent The server then passes the card-making success information to the card-issuing server. The electronic card establishing system of claim 1, wherein the card download notification information sent by the virtual card server further includes a verification code, and the user device displays the verification code and displays the user input. After the verification code is sent to the user device, it is sent back to the virtual card server, and the virtual card server transmits the virtual card number to the user device. The electronic card establishing system according to claim 1, wherein the virtual card server is more capable A plurality of encryption keys are generated, and the virtual card server can transmit the encryption key to the user device to encrypt the card information. The electronic card establishing system of claim 1, further comprising a transaction management server that synchronously stores the virtual card number of the virtual card server and the card number image. The electronic card establishing system of claim 4, wherein the user device further sends a card information, and the virtual card number is entrained to a card swipe machine, so that the card reader generates a transaction request to entrain the virtual card number to a transfer. a central server, the transit center server transmits the virtual card number to the transaction management server to obtain a card number image corresponding to the virtual card number, and deliver the card number image to the card issuing server, when the card is issued After the server check is successful, an authorization result transaction information is sent to the transfer center server to authorize the card reader to conduct the transaction. The electronic card establishing system of claim 4, wherein the user device further sends a card information, and the virtual card number is entrained to a card swipe machine, so that the card reader generates a transaction request to entrain the virtual card number to the card issuing server. The card issuing server transmits the virtual card number to the transaction management server to obtain the card number image corresponding to the virtual card number, and transmits the card number image to the card issuing server, when the card issuing server checks successfully After that, an authorization result transaction information is issued to authorize the transaction to the card reader. The electronic card establishing system of claim 1, wherein the identity verification information is generated by the card issuing server and stored to the proxy server. The electronic card establishing system of claim 1, wherein the user device is a smart phone. An electronic card establishing method, the method comprising: inputting at least one card information in a user device, the card information comprising a card number image and a card expiration date code; The user device transmits the card information to a management system, and sends a pair of card verification information to the user device according to the card information; the user inputs the verification information to the user according to the identity verification information. The user device transmits the verification information to the management system; the management system retrieves a user information according to the card information to verify the verification information, and the verification information verification succeeds in generating an authentication success information; The authentication success information converts the card number image of the card information into a virtual card number, and generates a card download notification message to the user device, so that the user device downloads the virtual card number according to the card download notification information. The method for establishing an electronic card according to claim 9, wherein the card download notification further includes a verification code, and the user device receives the verification code and displays, after the user inputs the verification code to the user device, Passed to the management system, causing the management system to transmit the virtual card number to the user device. The method for establishing an electronic card according to claim 9, wherein after the step of inputting the at least one card information by the user device, the card information is further encrypted by an encryption key. The method for establishing an electronic card according to claim 9, further comprising: sending, by the user device, a card information, the virtual card number being entrained to a card swipe machine, causing the card reader to generate a transaction request to entrain the virtual card number to the management system, The virtual card number is converted into the corresponding card number image, and the card number image is verified. After the verification is successful, an authorization result transaction information is issued to authorize the card reader to perform the transaction. The method for establishing an electronic card according to claim 9, wherein after the step of the user device transmitting the card information to the management system, the management system further determines whether the card information has the corresponding identity verification information: if yes, Then, the identity verification information corresponding to the card information is sent to the user equipment. The steps are set; and if not, a non-acceptance message is sent to the user device. The method for establishing an electronic card according to claim 9, wherein the user device is a smart phone.