TWM493715U - Trading system - Google Patents
Trading system Download PDFInfo
- Publication number
- TWM493715U TWM493715U TW103214417U TW103214417U TWM493715U TW M493715 U TWM493715 U TW M493715U TW 103214417 U TW103214417 U TW 103214417U TW 103214417 U TW103214417 U TW 103214417U TW M493715 U TWM493715 U TW M493715U
- Authority
- TW
- Taiwan
- Prior art keywords
- unit
- verification
- transaction
- application
- application data
- Prior art date
Links
Landscapes
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Description
本創作係指一種交易系統,尤指一種透過銀行端資料驗證,授權交易網路端進行交易的交易系統。This creation refers to a trading system, especially a trading system that authorizes the trading network to conduct transactions through bank-side data verification.
隨著網路技術的演進,消費者在購物網站透過信用卡進行交易變得越來越頻繁,同時亦衍生出交易安全的問題。舉例來說,消費者要進行每一筆交易時,皆需要在購物網站輸入信用卡資料,非常不方便。為此,交易網站會儲存消費者輸入過的信用卡資料,消費者下一次消費就不用重新再輸入。With the evolution of network technology, consumers are increasingly trading on credit cards through shopping websites, and at the same time, transaction security issues arise. For example, when consumers want to make every transaction, they need to input credit card information on the shopping website, which is very inconvenient. To this end, the transaction website will store the credit card information entered by the consumer, and the consumer will not have to re-enter the next consumption.
然而,將信用卡資料儲存在交易網站又會衍生出新的安全性問題。由於銀行端無法得知購物網站傳送來的信用卡資料是否為持卡人本人所操作,一旦信用卡資料被駭客竊取或購物網站被駭,持卡人將蒙受巨大的財務損失。However, storing credit card information on a trading website creates new security issues. Since the bank cannot know whether the credit card information sent by the shopping website is operated by the card holder himself, the cardholder will suffer huge financial losses once the credit card information is stolen by the hacker or the shopping website is smashed.
因此,如何加強網路信用交易的安全性,已成為業界的努力目標之一。Therefore, how to strengthen the security of online credit transactions has become one of the goals of the industry.
因此,本創作之主要目的即在於提供一種交易系統。Therefore, the main purpose of this creation is to provide a trading system.
本創作揭露一種交易系統,包含有驗證端裝置,包 含有第一接收單元,用來接收第一申請資料及授權請求,其中第一申請資料包含通訊裝置之電話號碼;第一儲存單元,電性連接第一接收單元,用來儲存第一申請資料;第一通知單元,電性連接第一接收單元,用來根據電話號碼,傳送申請完成通知至通訊裝置;第一驗證單元,電性連接第一接收單元,用來比較第一申請資料與第二申請資料,以產生第一驗證結果;第一傳送單元,電性連接第一驗證單元,用來傳送第一驗證結果及交易授權訊號;以及授權單元,用來根據授權請求,產生交易授權訊號;以及應用端裝置,包含有第二接收單元,用來接收第二申請資料、第一驗證結果、交易授權訊號及交易內容;第二傳送單元,電性連接第二接收單元,用來傳送第二申請資料至第一驗證單元;以及傳送授權請求至第一接收單元;組合單元,電性連接第二接收單元,用來根據第一驗證結果,重組第二申請資料,以產生授權請求;以及交易單元,電性連接第二接收單元,用來根據交易內容、第二申請資料及交易授權訊號,執行交易。This creation discloses a trading system that includes a verification device, a package The first receiving unit is configured to receive the first application data and the authorization request, where the first application data includes a telephone number of the communication device, and the first storage unit is electrically connected to the first receiving unit for storing the first application data; The first notification unit is electrically connected to the first receiving unit for transmitting the application completion notification to the communication device according to the telephone number; the first verification unit is electrically connected to the first receiving unit, and is configured to compare the first application data with the second Applying information to generate a first verification result; the first transmitting unit is electrically connected to the first verification unit for transmitting the first verification result and the transaction authorization signal; and the authorization unit is configured to generate the transaction authorization signal according to the authorization request; And the application device includes a second receiving unit, configured to receive the second application data, the first verification result, the transaction authorization signal, and the transaction content; the second transmitting unit is electrically connected to the second receiving unit, and is configured to transmit the second Applying the data to the first verification unit; and transmitting the authorization request to the first receiving unit; the combining unit, electrically connecting the second a receiving unit, configured to reorganize the second application data according to the first verification result to generate an authorization request; and the transaction unit is electrically connected to the second receiving unit, and is configured to execute according to the transaction content, the second application data, and the transaction authorization signal transaction.
在本創作一實施方式中,上述應用端裝置另包含有第二通知單元,電性連接第二接收單元,用來根據第一驗證結果,傳送驗證碼至通訊裝置;第二驗證單元,電性連接第二通知單元,用來比較驗證碼與回傳驗證碼,以產生第二驗證結果;以及第二儲存單元,電性連接第二驗證單元,用來根據第二驗證結果,儲存第二申請資料,其中第二接收單元另用來接收回傳驗證碼。In an embodiment of the present invention, the application device further includes a second notification unit electrically connected to the second receiving unit, configured to transmit the verification code to the communication device according to the first verification result; and the second verification unit is electrically Connecting a second notification unit, configured to compare the verification code and the return verification code to generate a second verification result; and the second storage unit is electrically connected to the second verification unit, configured to save the second application according to the second verification result Data, wherein the second receiving unit is additionally used to receive the return verification code.
在本創作一實施方式中,上述第二通知單元是用來在第一驗證結果顯示第一申請資料與第二申請資料相符時,傳送驗證碼至通訊裝置。In an embodiment of the present invention, the second notification unit is configured to transmit the verification code to the communication device when the first verification result indicates that the first application data matches the second application data.
在本創作一實施方式中,上述掃描器還用來在驗證結果判定使用者身份是一個合格身份時,掃描申請文件,以產生第一影像檔。In an embodiment of the present invention, the scanner is further configured to scan the application file to generate the first image file when the verification result determines that the user identity is a qualified identity.
在本創作一實施方式中,上述第二儲存單元是用來在第二驗證結果顯示驗證碼與回傳驗證碼相符時,儲存第二申請資料。In an embodiment of the present invention, the second storage unit is configured to store the second application data when the second verification result display verification code matches the return verification code.
在本創作一實施方式中,上述第一申請資料及第二申請資料包含有身份證字號、生日、手機號碼、信用卡號及信用卡到期日。In an embodiment of the present invention, the first application data and the second application data include an ID number, a birthday, a mobile phone number, a credit card number, and a credit card expiration date.
此一交易系統會比對驗證端與應用端的使用者申請資料,相較於先前技術只比對信用卡資料,更有安全性。This transaction system compares the user application data of the verification side and the application side, and is more secure than the prior art only to the credit card data.
20‧‧‧交易系統20‧‧‧ trading system
300‧‧‧驗證端裝置300‧‧‧Verification device
400‧‧‧應用端裝置400‧‧‧Application device
310‧‧‧第一接收單元310‧‧‧First receiving unit
320‧‧‧第一儲存單元320‧‧‧First storage unit
330‧‧‧第一通知單元330‧‧‧First notification unit
340‧‧‧第一驗證單元340‧‧‧First Verification Unit
350‧‧‧第一傳送單元350‧‧‧First transmission unit
360‧‧‧授權單元360‧‧‧Authorization unit
410‧‧‧第二接收單元410‧‧‧second receiving unit
420‧‧‧第二傳送單元420‧‧‧Second transfer unit
430‧‧‧組合單元430‧‧‧ combination unit
440‧‧‧第二通知單元440‧‧‧second notification unit
450‧‧‧第二驗證單元450‧‧‧Second verification unit
460‧‧‧第二儲存單元460‧‧‧Second storage unit
470‧‧‧交易單元470‧‧‧transaction unit
APP1‧‧‧第一申請資料APP1‧‧‧First Application Information
APP2‧‧‧第二申請資料APP2‧‧‧Second application materials
AR‧‧‧授權請求AR‧‧‧ Authorization Request
ACK‧‧‧申請完成通知ACK‧‧‧Application completion notice
VR1‧‧‧第一驗證結果VR1‧‧‧ first verification result
VR2‧‧‧第二驗證結果VR2‧‧‧ second verification result
AU‧‧‧交易授權訊號AU‧‧‧ transaction authorization signal
TC‧‧‧交易內容TC‧‧‧ transaction content
CODE‧‧‧驗證碼CODE‧‧‧ verification code
CODE-R‧‧‧回傳驗證碼CODE-R‧‧‧Return verification code
為讓本創作之上述和其他目的、特徵、優點與實施例能更明顯易懂,所附圖式之說明如下:第1圖為本創作實施例一交易系統的示意圖。The above and other objects, features, advantages and embodiments of the present invention can be more clearly understood. The description of the drawings is as follows: FIG. 1 is a schematic diagram of a trading system of the creative embodiment.
為了使本創作之敘述更加詳盡與完備,可參照所附之圖式及以下所述各種實施例,圖式中相同之號碼代表相同或相似之元件。另一方面,眾所週知的元件並未描述於實施例中,以避免對本創作造成不必要的限制。In order to make the description of the present invention more detailed and complete, reference is made to the accompanying drawings and the various embodiments described below. On the other hand, well-known elements are not described in the embodiments to avoid unnecessarily limiting the creation.
於實施方式與申請專利範圍中,涉及『電性連接』 之描述,其可泛指一元件透過其他電性元件而間接地電氣連結至另一元件,或是一元件無須透過其他元件而直接連接至另一元件。In the scope of implementation and patent application, it relates to "electrical connection" The description may refer to a component being indirectly electrically connected to another component through other electrical components, or a component may be directly connected to another component without passing through other components.
於實施方式與申請專利範圍中,除非內文中對於冠詞有所特別限定,否則『一』與『該』可泛指單一個或複數個。In the scope of the embodiments and patent applications, unless the context specifically dictates the articles, "a" and "the" may mean a single or plural.
請參考第1圖,第1圖為本創作實施例交易系統20的示意圖。交易系統20包含有驗證端裝置300與應用端裝置400。舉例來說,驗證端裝置300可設置在銀行,應用端裝置400則可設置在購物網站。驗證端裝置300包含有第一接收單元310、第一儲存單元320、第一通知單元330、第一驗證單元340、第一傳送單元350及授權單元360。第一儲存單元320電性連接第一接收單元310,第一通知單元330電性連接第一接收單元310,第一驗證單元340電性連接第一接收單元310,第一傳送單元350電性連接第一驗證單元340。應用端裝置400包含有第二接收單元410、第二傳送單元420、組合單元430、第二通知單元440、第二驗證單元450、第二儲存單元460及交易單元470。第二傳送單元420電性連接第二接收單元410,組合單元430電性連接第二接收單元410,交易單元470電性連接第二接收單元410,第二通知單元440電性連接第二接收單元410,第二驗證單元450電性連接第二通知單元440,第二儲存單元460第二驗證單元450。第一接收單元310用來接收第一申請資料APP1及授權請求AR。在本創作一實施例中,第一 申請資料APP1包含通訊裝置的電話號碼。第一儲存單元320用來儲存第一申請資料APP1。第一通知單元330用來根據電話號碼,傳送申請完成通知ACK至通訊裝置。第一驗證單元340用來比較第一申請資料APP1與第二申請資料APP2,以產生第一驗證結果VR1。第一傳送單元350用來傳送第一驗證結果VR1及交易授權訊號AU。授權單元360用來根據授權請求AR,產生交易授權訊號AU。第二接收單元410用來接收第二申請資料APP2、第一驗證結果VR1、交易授權訊號AU及交易內容TC。第二傳送單元420用來傳送第二申請資料APP2至第一驗證單元340,以及傳送授權請求AR至第一接收單元310。組合單元430用來根據第一驗證結果VR1,重組第二申請資料APP2,以產生授權請求AR。最後,交易單元470用來根據交易內容TC、第二申請資料APP2及交易授權訊號AU,執行交易。Please refer to FIG. 1 , which is a schematic diagram of the transaction system 20 of the present embodiment. The transaction system 20 includes a verification end device 300 and an application end device 400. For example, the verification device 300 can be set at the bank, and the application device 400 can be set at the shopping website. The verification end device 300 includes a first receiving unit 310, a first storage unit 320, a first notification unit 330, a first verification unit 340, a first transmission unit 350, and an authorization unit 360. The first storage unit 320 is electrically connected to the first receiving unit 310. The first notification unit 330 is electrically connected to the first receiving unit 310. The first verification unit 340 is electrically connected to the first receiving unit 310. The first transmitting unit 350 is electrically connected. The first verification unit 340. The application device 400 includes a second receiving unit 410, a second transmitting unit 420, a combining unit 430, a second notification unit 440, a second verification unit 450, a second storage unit 460, and a transaction unit 470. The second transmitting unit 420 is electrically connected to the second receiving unit 410, the combining unit 430 is electrically connected to the second receiving unit 410, the transaction unit 470 is electrically connected to the second receiving unit 410, and the second notification unit 440 is electrically connected to the second receiving unit. 410. The second verification unit 450 is electrically connected to the second notification unit 440, and the second storage unit 460 is configured by the second verification unit 450. The first receiving unit 310 is configured to receive the first application profile APP1 and the authorization request AR. In an embodiment of the present creation, the first The application profile APP1 contains the telephone number of the communication device. The first storage unit 320 is configured to store the first application profile APP1. The first notification unit 330 is configured to transmit an application completion notification ACK to the communication device according to the telephone number. The first verification unit 340 is configured to compare the first application profile APP1 with the second application profile APP2 to generate a first verification result VR1. The first transmitting unit 350 is configured to transmit the first verification result VR1 and the transaction authorization signal AU. The authorization unit 360 is configured to generate a transaction authorization signal AU according to the authorization request AR. The second receiving unit 410 is configured to receive the second application information APP2, the first verification result VR1, the transaction authorization signal AU, and the transaction content TC. The second transmitting unit 420 is configured to transmit the second application profile APP2 to the first verification unit 340, and transmit the authorization request AR to the first receiving unit 310. The combining unit 430 is configured to reorganize the second application material APP2 according to the first verification result VR1 to generate an authorization request AR. Finally, the transaction unit 470 is configured to execute the transaction based on the transaction content TC, the second application profile APP2, and the transaction authorization signal AU.
關於交易系統20的操作,舉例來說,驗證端裝置300設置於銀行,應用端裝置400設置在購物網站。驗證端裝置300接收銀行客戶的第一申請資料APP1,應用端裝置400接收購物網站消費者的第二申請資料APP2。第一通知單元330用來根據第一申請資料APP1中客戶的電話號碼,傳送申請完成通知ACK至客戶的通訊裝置,例如手機或平板電腦,通知客戶再於購物網站輸入第二申請資料APP2。第一驗證單元340驗證購物網站回傳的第二申請資料APP2是否與第一申請資料APP1相符。若第一驗證結果VR1顯示申請資料相符,組合單元430擷取第二申請資料APP2 中部分項目,例如信用卡號及信用卡到期日,做為授權請求AR。銀行端的授權單元360在接收到授權請求AR後,產生交易授權訊號AU。最後,購物網站端的交易單元470在收到交易授權訊號AU後,根據實際的交易內容TC及第二申請資料APP2中的消費者資訊,執行交易。Regarding the operation of the transaction system 20, for example, the verification side device 300 is disposed at a bank, and the application device 400 is disposed at a shopping website. The verification device 300 receives the first application profile APP1 of the bank customer, and the application device 400 receives the second application profile APP2 of the shopping website consumer. The first notification unit 330 is configured to transmit a request completion notification ACK to the communication device of the client, such as a mobile phone or a tablet, according to the phone number of the client in the first application profile APP1, and notify the client to input the second application profile APP2 on the shopping website. The first verification unit 340 verifies whether the second application profile APP2 returned by the shopping website matches the first application profile APP1. If the first verification result VR1 shows that the application data matches, the combination unit 430 retrieves the second application data APP2 Some of the items, such as credit card numbers and credit card expiration dates, are used as authorization requests for AR. The authorization unit 360 on the bank side generates the transaction authorization signal AU after receiving the authorization request AR. Finally, after receiving the transaction authorization signal AU, the transaction unit 470 on the shopping website side executes the transaction according to the actual transaction content TC and the consumer information in the second application data APP2.
在本創作的交易系統20中,消費者先於銀行端提交第一申請資料APP1,再於購物網站端提交第二申請資料APP2,銀行端驗證第一申請資料APP1與第二申請資料APP2相符,才能啟動交易。相較於先前技術,銀行端僅憑購物網站儲存的信用卡資料就授權交易,本創作大幅加強了網路交易的安全性。舉例來說,在交易系統20中,即使購物網站傳送正確的信用卡資料到銀行端,由於未經過第一申請資料APP1與第二申請資料APP2的比對程序,銀行端不會授權交易。In the transaction system 20 of the present creation, the consumer submits the first application information APP1 before the bank, and then submits the second application information APP2 on the shopping website, and the bank-side verification first application information APP1 matches the second application information APP2. In order to start a transaction. Compared with the prior art, the bank only authorizes the transaction by the credit card information stored on the shopping website, and the creation greatly enhances the security of the online transaction. For example, in the transaction system 20, even if the shopping website transmits the correct credit card information to the bank, the bank does not authorize the transaction because the comparison procedure between the first application profile APP1 and the second application profile APP2 is not passed.
根據本創作一實施例,為了進一步加強安全性,購物網站端亦可包含簡訊認證程序。為此,應用端裝置400還包含有第二通知單元440、第二驗證單元450及第二儲存單元460。第二通知單元440用來在第一驗證結果VR1顯示第一申請資料APP1與第二申請資料APP2相符時,傳送驗證碼CODE至消費者的通訊裝置。第二接收單元410接收消費者回傳的回傳驗證碼CODE-R。第二驗證單元450用來比較驗證碼CODE與回傳驗證碼CODE-R,以產生第二驗證結果VR。最後,第二儲存單元460用來在第二驗證結果VR2顯示驗證碼CODE與回傳驗證碼CODE-R相符 時,儲存第二申請資料APP2。如此一來,第二申請資料APP2的安全性得到更進一步地強化。According to an embodiment of the present creation, in order to further enhance security, the shopping website side may also include a SMS authentication program. To this end, the application device 400 further includes a second notification unit 440, a second verification unit 450, and a second storage unit 460. The second notification unit 440 is configured to transmit the verification code CODE to the communication device of the consumer when the first verification result VR1 indicates that the first application profile APP1 matches the second application profile APP2. The second receiving unit 410 receives the return verification code CODE-R returned by the consumer. The second verification unit 450 is configured to compare the verification code CODE and the return verification code CODE-R to generate a second verification result VR. Finally, the second storage unit 460 is configured to display the verification code CODE and the return verification code CODE-R in the second verification result VR2. When the second application data APP2 is stored. As a result, the security of the second application profile APP2 is further enhanced.
根據本創作一實施例,第一申請資料APP1及第二申請資料APP2包含有身份證字號、生日、手機號碼、信用卡號及信用卡到期日。According to an embodiment of the present invention, the first application profile APP1 and the second application profile APP2 include an ID card number, a birthday, a mobile phone number, a credit card number, and a credit card expiration date.
綜上所述,本創作的交易系統在驗證端(例如銀行)及應用端(例如購物網站)都需要經過申請程序,唯有兩端的申請資料相符,驗證端才會授權交易。此一交易系統改善了先前技術無法驗證應用端使用者身分的安全缺陷,加強了網路交易的安全性。In summary, the transaction system of the creation needs to go through the application process on the verification end (such as the bank) and the application end (such as the shopping website). Only when the application materials at both ends are matched, the verification end will authorize the transaction. This transaction system improves the security flaws of previous technologies that fail to verify the identity of the application user and enhances the security of online transactions.
雖然本創作已以實施方式揭露如上,然其並非用以限定本創作,任何熟習此技藝者,在不脫離本創作之精神和範圍內,當可作各種之更動與潤飾,因此本創作之保護範圍當視後附之申請專利範圍所界定者為準。Although the present invention has been disclosed in the above embodiments, it is not intended to limit the present invention, and any person skilled in the art can make various changes and refinements without departing from the spirit and scope of the present invention. The scope is subject to the definition of the scope of the patent application attached.
20‧‧‧交易系統20‧‧‧ trading system
300‧‧‧驗證端裝置300‧‧‧Verification device
400‧‧‧應用端裝置400‧‧‧Application device
310‧‧‧第一接收單元310‧‧‧First receiving unit
320‧‧‧第一儲存單元320‧‧‧First storage unit
330‧‧‧第一通知單元330‧‧‧First notification unit
340‧‧‧第一驗證單元340‧‧‧First Verification Unit
350‧‧‧第一傳送單元350‧‧‧First transmission unit
360‧‧‧授權單元360‧‧‧Authorization unit
410‧‧‧第二接收單元410‧‧‧second receiving unit
420‧‧‧第二傳送單元420‧‧‧Second transfer unit
430‧‧‧組合單元430‧‧‧ combination unit
440‧‧‧第二通知單元440‧‧‧second notification unit
450‧‧‧第二驗證單元450‧‧‧Second verification unit
460‧‧‧第二儲存單元460‧‧‧Second storage unit
470‧‧‧交易單元470‧‧‧transaction unit
APP1‧‧‧第一申請資料APP1‧‧‧First Application Information
APP2‧‧‧第二申請資料APP2‧‧‧Second application materials
AR‧‧‧授權請求AR‧‧‧ Authorization Request
ACK‧‧‧申請完成通知ACK‧‧‧Application completion notice
VR1‧‧‧第一驗證結果VR1‧‧‧ first verification result
VR2‧‧‧第二驗證結果VR2‧‧‧ second verification result
AU‧‧‧交易授權訊號AU‧‧‧ transaction authorization signal
TC‧‧‧交易內容TC‧‧‧ transaction content
CODE‧‧‧驗證碼CODE‧‧‧ verification code
CODE-R‧‧‧回傳驗證碼CODE-R‧‧‧Return verification code
Claims (5)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
TW103214417U TWM493715U (en) | 2014-08-13 | 2014-08-13 | Trading system |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
TW103214417U TWM493715U (en) | 2014-08-13 | 2014-08-13 | Trading system |
Publications (1)
Publication Number | Publication Date |
---|---|
TWM493715U true TWM493715U (en) | 2015-01-11 |
Family
ID=52784011
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
TW103214417U TWM493715U (en) | 2014-08-13 | 2014-08-13 | Trading system |
Country Status (1)
Country | Link |
---|---|
TW (1) | TWM493715U (en) |
-
2014
- 2014-08-13 TW TW103214417U patent/TWM493715U/en unknown
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN107851254B (en) | Seamless transactions with minimized user input | |
CA2945703C (en) | Systems, apparatus and methods for improved authentication | |
EP3207515B1 (en) | Securely authenticating a person depending on context | |
US20170116596A1 (en) | Mobile Communication Device with Proximity Based Communication Circuitry | |
US10061912B2 (en) | Multi-factor authentication system and method | |
WO2015103963A1 (en) | Method and system for processing secure offline transactions | |
US20150120574A1 (en) | Information transmission method, apparatus and system | |
WO2015062232A1 (en) | Information transmission method, apparatus and system | |
US20150134539A1 (en) | System and method of processing point-of-sale payment transactions via mobile devices | |
US20150248676A1 (en) | Touchless signature | |
US11341495B2 (en) | Electronic method for instantly creating an account with a service provider during point of sale | |
US20200143370A1 (en) | Method for authenticating and authorising a transaction using a portable device | |
WO2017092202A1 (en) | Transaction method and transaction system | |
TWM493715U (en) | Trading system | |
US20160321668A1 (en) | System and method for enhancing security protection of an electronic transaction in online environment | |
TWI661365B (en) | System and method for dynamically checking code scanning payment, computer-readable recording medium and computer program product | |
SG10201610472XA (en) | Processing electronic payments on a mobile computer device | |
TW201619878A (en) | Method of transacting by using mobile wallet at internet transacting side | |
US11341470B1 (en) | Systems and methods for smart card online purchase authentication | |
TWM563014U (en) | Dynamic checking scan payment system | |
US20210390529A1 (en) | Systems and methods for performing payment transactions using indicia-based associations between user interfaces | |
TWM514614U (en) | Fraud detection system for online payments | |
TW201721543A (en) | Transaction method and transaction system | |
TW201715447A (en) | Online payment fraud prevention system and its implementing method |