TWM514614U - Fraud detection system for online payments - Google Patents

Description

Online payment anti-theft brush system

An online payment anti-theft brush system, the main purpose of the present invention is that a consumer can receive a set of dynamic passwords (OTP) for authentication when conducting transactions on an online trading platform, and the online trading platform can further retain the dynamic password (OTP). Check the online payment anti-theft brush system.

With the rapid development of the Internet, e-commerce has also emerged, using the e-commerce platform to diversify, immediacy, and not subject to time and space constraints, manufacturers provide goods or services, so that the average consumer or business can Purchasing through the Internet to complete the transaction, so many websites that sell different products are born in combination with people's daily needs. For example, hotel operators, tourism operators, food industry, boutiques, transportation operators, etc. The product design catalogue is placed on the e-commerce platform to provide consumers with an order to order hotel rooms, travel tickets, food, boutiques or tickets via the Internet. In this way, consumers can complete consumer transactions without going out to the queue. At present, most consumers who use the above e-commerce platform to conduct transactions must use credit card swipe, ATM The transfer or the bank's prepayment action, when the consumer completes the payment and causes the service provider to obtain the payment, the service provider begins to provide the product to the consumer. However, such a transaction method is often prone to disputes, for example, when the service provider obtains the payment. After that, the goods are not provided to the consumers, or the time for providing the goods to the consumers is delayed, or when the consumers order a product and pay the amount, the service provider suddenly collapses, so that the consumer cannot obtain the loss of the goods. . In response to the above problems, a trading mechanism has emerged in the market, with the bank as a trading bridge and a third-party certification body as the authenticator. When the consumer wants to consume, the amount is first paid to the bank trust. When the consumer and the server make consumption, the third-party certification body will make a certification judgment to confirm the completion of the transaction and notify the bank trust, and then the bank trust will pay the consumption amount to the server to ensure the two parties. However, the trading mechanism of this method must be authenticated by a third-party certification body, which will cause the parties to wait for a longer period of time in obtaining the transaction voucher. Although taking into account the security of the transaction, it reduces the overall transaction. Speed, therefore, in order to avoid disputes arising from the above transactions, and at the same time achieve the effect of faster completion of the certification of the transaction, and avoid the risk of information outflow from the third-party certification unit of the non-financial institution to improve security For example, the Republic of China Invention Patent Publication No. 201411513 "Transaction Management System and Method" thereof discloses The transaction management system and the method thereof, the transaction management system comprises a consumer device, a trust device and a server device, and the consumer device provides a consumer for the consumer to consume and provide the consumer payment The trust device receives a transaction signal and an amount of money and transmits an identification message to the consumer device. And displaying, by the consumer device, the identification information is provided to the consumer, and the server device obtains the transaction completion confirmation signal after obtaining the identification information input by the consumer, and transmits the transaction completion confirmation signal to the trust device to obtain the amount. However, the identification information disclosed in this case has not been retained in the server device or the trust device. In the future, when there is a consumer dispute, for example, the consumer is stolen, it is not easy to clarify the responsibility.

In view of the above problems, the creator is based on years of experience in related industries, researching and analyzing the security mechanism of online transactions, and is able to develop a complete and secure trading mechanism system; therefore, the main focus of this creation The purpose is to provide a dynamic password (OTP) sent by the bank to the consumer when the consumer conducts online transactions, and can be retained in the server of the trading platform for clarifying the responsibility of the future transaction dispute.

In order to achieve the above purpose, when the consumer uses online trading on the trading platform, when the consumer confirms the transaction, the trading platform further completes the information connection with the bank, and further sends a dynamic password (OTP) by the bank. The message is sent to the consumer for authentication, and after the consumer receives the dynamic password (OTP) message, the dynamic password (OTP) message can be entered in the transaction screen to complete the authentication, and the consumer completes the authentication on the transaction platform side. The dynamic password (OTP) message will be further stored on the trading platform for reference, thereby providing effective between the trading platform and the bank. Responsibility for clarifying consumer disputes (eg, consumers are stolen).

In order for your review board to have a clear understanding of the purpose, technical features and effectiveness of this work, please refer to the following instructions for illustration.

10‧‧‧Online payment anti-theft brush system

101‧‧‧Mobile electronic devices

102‧‧‧ trading platform server

Send module 1011‧‧

1021‧‧‧Information receiving module

1012‧‧‧Password receiving module

1022‧‧‧Signal transmission module

1023‧‧‧Database

103‧‧‧Bank-side server

1031‧‧‧ password generation module

1032‧‧‧Database

11‧‧‧Commodity Information Page

12‧‧‧OTP input page

21‧‧‧Transfer transaction request message steps

22‧‧‧Transfer payment request step steps

23‧‧‧ Generate dynamic password message steps

24‧‧‧Backup of dynamic password message steps

A‧‧‧ consumer

B‧‧‧ trading platform

C‧‧‧Bank side

S1‧‧‧Transaction request message

P1‧‧‧ payment request message

M1‧‧‧ dynamic password message

Figure 1 is a schematic diagram of the online transaction process of the creation.

Figure 2 is a schematic diagram of the system composition of the creation.

Figure 3 is a schematic diagram of the implementation of this creation (1).

Figure 4 is a schematic diagram of the implementation of the creation (2).

Figure 5 is a schematic diagram of the implementation of the creation (3).

Figure 6 is a schematic diagram of the implementation of the creation (4).

Figure 7 is a schematic diagram showing the steps of the implementation process of the creation.

Please refer to "Figure 1", which shows the schematic diagram of the online transaction process of the creation. As shown in the figure, a consumer A, a trading platform B and a bank C, wherein the consumer A main system Refers to consumers who generally make purchases online through the Internet, and Consumer A can further use a mobile electronic device (such as mobile phones, computers, laptops, etc.) to form information through an Internet and trading platform B. Connect, so that consumer A can be handed over Easy platform B conducts product browsing and online shopping. When consumer A wants to conduct online commodity checkout on the trading platform end B, it can send a transaction request message S1 to the trading platform end B through the electronic device to request online product settlement. When the transaction platform end B receives the transaction request message S1 of the consumer terminal A, it further sends a payment request message P1 to the bank terminal C, requesting the bank terminal C to make payment for the online commodity, and the bank terminal C is After receiving the payment request message P1, a dynamic password message M1 is further generated and transmitted to the consumer A for identity authentication. The dynamic password message M1 refers to a one-time password (OTP, also referred to as dynamic). The password refers to the password that can only be used once, and is mostly transmitted to the mobile phone number that the consumer A is originally bound to, so it can provide a valid identity confirmation mechanism, and when the consumer A receives the dynamic password message M1 After that, you can enter the online product shopping page on the trading platform side B to complete the identity authentication and checkout of the online goods, and then, when the consumer A completes After entering the password state message M1, the dynamic password message M1 further store the backup system to end trading platform B, there is time for future trade disputes, through the trading platform can be dynamic password message B stored M1 clarify the accountability side.

Please refer to "Figure 2", which shows the system composition diagram of the creation. Please refer to "Figure 1". The online payment anti-theft brush system 10 shown in this figure is mainly composed of a mobile electronic The device 101, the transaction platform server 102, and a bank server 103 are configured. The mobile electronic device 101 can be, for example, a mobile communication device such as a mobile communication device or a notebook computer. For the operation of consumer A The mobile electronic device 101 has a signal transmitting module 1011 and a password receiving module 1012, and the mobile electronic device 101 can form an information link with the trading platform server 102. When the consumer A wants to be at the trading platform server 102, When the online shopping is performed, the transaction request message S1 can be generated and transmitted to the transaction platform server 102 of the transaction platform B through the message sending module 1011; the transaction platform server 102 has an information receiving module 1021 and an information transmission. The module 1022 and the database 1023, and the information receiving module 1021 is respectively connected with the information sending module 1022 and the database 1023, and the information receiving module 1021 can receive the transaction request message S1 sent by the mobile electronic device 101. The transaction platform server 102 generates a payment request message P1 after receiving the transaction request message S1, and transmits the payment request message P1 to the bank server 103 through the information sending module 1022; the bank server 103 has a password generation The module 1031 and a database 1032, when the bank server 103 receives the payment request message P1, the password generation module 1031 Further, a dynamic password message M1 is generated and further transmitted to the consumer A, so that the mobile electronic device 101 can receive the dynamic password message M1 by the password receiving module 1012, and input the dynamic password message M1 to the transaction platform server 102. The shopping page is authenticated by the identity, and while the consumer A enters the dynamic password message M1, the transaction platform server 102 further stores the dynamic password message M1 in the database 1023 for later transaction disputes. The responsibility can be clarified by the dynamic password message M1 stored in the database 1023.

Please refer to "Figure 3", which shows the implementation of the creation. (1) Please refer to "Figure 1" to "Figure 2". As shown in the figure, the mobile electronic device 101 is connected to the transaction platform server 102 through the Internet to make consumption. The terminal A can browse the product information page 11 provided by the transaction platform server 102 through the mobile electronic device 101, and the consumer A can also purchase the online product through the product information page 11; see "Fig. 4", The implementation diagram (2) of the creation is shown in the figure. According to the "Fig. 3", when the consumer A confirms the purchase on the product information page 11, the mobile electronic device 101 receives the server 103 from the bank. The dynamic password message M1 is sent, and the dynamic password message M1 is further displayed on the display screen of the mobile electronic device 101; please refer to "figure 5", which shows the implementation diagram of the creation (3). The consumer A receives the dynamic password message M1, and the display screen of the mobile electronic device 101 displays an OTP input page 12 as shown in the figure. The consumer A can input the received dynamic password message M1 for shopping on this page. Identity authentication to After the subsequent shopping process is continued, the transaction platform server 102 stores the dynamic password message M1 in the database 1023 for the future transaction dispute. The dynamic password message M1 stored in the database server 102 of the trading platform server 102 clarifies the responsibility attribution; and the transaction screen for completing the online shopping of the product is as shown in "Fig. 6", which is a schematic diagram of the implementation of the creation ( four).

Please refer to "Figure 7", which shows the implementation process steps of this creation. For the schematic diagram, please refer to "1st picture" to "2nd picture". As shown in the figure, the implementation process flow includes: (1) a transmission transaction request message. Step 21: After the consumer A selects the product on the online shopping page, Further transmitting the transaction request message S1 to the transaction platform server 102 of the transaction platform B through the mobile electronic device 101; (2) transmitting the payment request step 22: as described in step 21, the transaction platform server 102 of the transaction platform B After receiving the transaction request message S1 of the consumer A, a payment request message P1 is sent to the bank server 103 of the bank C; (3) a dynamic password message is generated. Step 23: According to step 22, the bank side After receiving the payment request message P1, the server 103 generates a dynamic password message M1 and further transmits it to the mobile electronic device 101 of the consumer A. (4) A backup dynamic password message. Step 24: According to step 23 The consumer A can input the received dynamic password message M1 in the mobile electronic device 101, and the completed dynamic password message M1 is further stored in the transaction platform server 102 for retention; When the server 102 performs the backup of the dynamic password message M1, the dynamic password message M1 may be simultaneously transmitted to the database 1032 of the bank server 103 for storage, or the bank server 103 may send the dynamic password message M1. When the mobile electronic device 101 is connected, the mobile electronic device 101 is backed up and stored in the database 1023 of the bank server 103.

As can be seen from the above, the online payment anti-theft brush system referred to in the present invention can further receive the dynamic password message sent by the bank server when the consumer uses the mobile electronic device for online shopping, and the consumer end uses the mobile electronic device. After the device inputs the dynamic password message, the transaction platform server can further back up the dynamic password information input by the consumer; accordingly, after the implementation of the creation, the implementation can actually provide a consumer terminal and then conduct online transactions, the bank side A dynamic password (OTP) sent to the consumer can be retained in the server of the trading platform for the purpose of clarifying the responsibility for the future transaction dispute.

The above description is only for the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention; any person skilled in the art can make equal changes and modifications without departing from the spirit and scope of the present invention. , should be covered by the scope of this creation patent.

In summary, the effectiveness of this creation is based on the patent requirements such as “industry availability,” “novelty,” and “progressiveness”; the applicant filed a new patent with the bureau in accordance with the provisions of the Patent Law. Application.

10‧‧‧Online payment anti-theft brush system

101‧‧‧Mobile electronic devices

102‧‧‧ trading platform server

Send module 1011‧‧

1021‧‧‧Information receiving module

1012‧‧‧Password receiving module

1022‧‧‧Signal transmission module

1023‧‧‧Database

103‧‧‧Bank-side server

1031‧‧‧ password generation module

1032‧‧‧Database

Claims (3)

An online payment anti-theft brush system, comprising: a mobile electronic device, which can generate a transaction request message after a consumer operation, has a signal transmission module, and a password receiving module; a transaction platform server, through a The Internet and the mobile electronic device form an information connection, and have an information receiving module, an information sending module and a database. After receiving the transaction request message, the information receiving module generates a payment request message. And being transmitted by the information sending module; a bank server having a password generating module, the bank server receiving the payment request message sent by the information sending module, generating a dynamic password message, and The password receiving module is transmitted to the mobile electronic device, and when the consumer inputs the dynamic password message by the mobile electronic device, the dynamic password message is further stored in the database of the trading platform server. The online payment anti-theft brush system of claim 1, wherein the bank server has a database, and the database forms an information link with the password generation module. The online payment anti-theft brush system of claim 2, wherein the dynamic password message of the bank server is further stored in the database of the bank server before being sent.