CN100353705C

CN100353705C - Disposable cipher protection careless electronic transaction payment method

Info

Publication number: CN100353705C
Application number: CNB2004100264627A
Authority: CN
Inventors: 欧阳世杰
Original assignee: Individual
Current assignee: Individual
Priority date: 2004-03-09
Filing date: 2004-03-09
Publication date: 2007-12-05
Anticipated expiration: 2024-03-09
Also published as: CN1560801A

Abstract

The present invention discloses a disposable password protection cardless electronic transaction payment method. Communication and transaction are carried out through text messages of a user's mobile phone and an electronic transaction terminal of a bank. A disposable password comprises a four-digit dynamic password and a six-digit user static password registered in the bank in advance, wherein the four-digit dynamic password is determined after a four-digit random number as a seed and the user's electronic transaction money sum are encrypted by the bank, and is sent to the user through text messages of the mobile phone. The transaction password is sent to the bank through the electronic transaction terminal; after verification, whether transaction can be carried out is determined. The life period of the disposable password is set to be one to five minutes; after used, the disposable password fails so that the security problem of financial transaction is solved. The method has the advantages of cardless transaction and disposable password protection, and can be widely used in finance, Internet ecommerce, etc.

Description

The no card-type electronic transaction of disposal password protection delivery method

Technical field the present invention relates to the no card-type electronic transaction of a kind of disposal password protection delivery method; more particularly, relate to a kind of disposal password that carries out the e-commerce transaction clearing on bank self-help terminal access money, personal consumption electronic accounting and the Internet that can be applied in effectively and protect no card-type electronic transaction delivery method.

Background technology in the prior art, personal banking electronic accountings such as bank individual debit, deposit, adopt the user to hold the bank card of issued by banks, with confirming subscriber authorisation at the user cipher of bank's registration in advance, carry out electronic accounting, deposit that card is forged, user cipher is stolen in the bank or the offender forces the user tell password after plundering user's bank card, thereby steal the fund of user in bank.The user is carrying out internet electronic business when transaction, if Bank Account Number, user cipher are stolen by the hacker on Network Transmission, transaction platform server or client personal computer, also threatens the safety of user's fund.Generally speaking, there is bigger security risk in present stage electronic transaction clearing.

Summary of the invention the object of the present invention is to provide the no card-type electronic transaction of a kind of disposal password protection delivery method; the user need not to carry bank card; just can carry out the electronic transaction clearing; can avoid effectively being plundered user's bank card, to take precautions against the fund security risk that Bank Account Number, user cipher are stolen and bring by the offender.

In order to achieve the above object; the invention provides following technical scheme: adopt the no card-type electronic transaction of a kind of disposal password protection delivery method; by user's mobile phone short-message and contact of bank electronic transaction terminal and transaction; the electronic transaction terminal comprises the POS machine of bank; ATM and e-commerce website; old-style Chinese private bank's code that user's Bank Account Number that this method adopted is encoded to bank adds user's Mobile Directory Number; disposal password is added in advance by 4 figure place dynamic passwords to be formed at 6 figure place user static passwords of bank's registration; when carrying out the electronic transaction payment; the user is to bank electronic transaction terminal input user account and dealing money; transaction terminal is submitted to bank and is contained user account; the transaction request of dealing money; by bank 4 figure place dynamic passwords are carried out determining behind the cryptographic calculation as seed and user's electronic dealing money by 4 random numbers; and Transaction Informations such as dynamic password and dealing money are sent to user's mobile phone; the user adds 4 figure place dynamic passwords trading password definite could transaction after the electronic transaction terminal sends to bank's empirical tests that 6 figure place user static passwords are formed again; whether transaction terminal concludes the business according to the decision of could concluding the business that bank provides again; the information that the electronic transaction terminal maybe can not be concluded the business Transaction Success is shown to the user, and passage at last Cancels Transaction.

The present invention will solve the coding method of user's Bank Account Number, disposal password generation and the technical problems of being convenient to remember such as method of calibration, disposal password and user interaction method.Because Bank of China's code has only double-digit numeral to form at present, user's Mobile Directory Number user can both remember, therefore, and the very convenient user's memory of user account.Because disposal password is made of at user's static password of notes such as bank in advance 4 figure place dynamic passwords+six figure places, after 4 figure place dynamic passwords carry out cryptographic calculation by 4 random numbers as seed and user's electronic dealing money, get 4 bit digital and be user's dynamic password, transaction each time all generates different dynamic passwords, when password authentification, examine password that user submit with dealing money through identical cryptographic calculation scheme by the dynamic password seed, can effectively prevent the dealing money deception that illegal transaction terminal such as illegal business site produce; Static password uses, and in the time of can preventing that user's mobile phone from illegally being used by other people, user account ground is protected.

The present invention's technical scheme preferably can be: bank is set at 1～5 minute with disposal password life cycle, submits to from the user and comes into force in the electronic transaction request, loses efficacy after reaching setting-up time.Because adopt online transaction, the time of the actual use of disposal password generally got final product at 1～3 minute, will be set at 5 minutes its life cycle with the interior requirement that can satisfy transaction.

Hold with existing user, the static password calibration technology compares, the present invention has following tangible advantage and effect: 1, the user does not need to carry bank card, just can carry out the electronic transaction clearing, can take precautions against stolen, the quilt carrying bank card and bring effectively and be robbed risk; 2, adopt the disposal password protection, can take precautions against user account effectively, user cipher is revealed the risk of bringing to the user account fund; 3, dynamic password is relevant with dealing money, can take precautions against the dealing money deception of illegal transaction platform such as illegal e-commerce website effectively, respectively submits different dealing money to the user with bank as illegal e-commerce website; 4, settlement of transactions each time, all use generate by bank, by the cryptoguard of mobile network's transmission, can solve the user effectively to the worry of internet electronic business to account, cryptoguard, can greatly stimulate internet electronic business ground to develop.

Be description of drawings of the present invention below the description of drawings:

Fig. 1 is the no card-type electronic transaction of a disposal password protection delivery method flow chart;

Fig. 2 is the application of the no card-type electronic transaction delivery method of disposal password protection on the bank self-help terminal;

Fig. 3 is the application of the no card-type electronic transaction delivery method of disposal password protection on internet electronic business;

Fig. 4 is the application of the no card-type electronic transaction delivery method of disposal password protection on the personal consumption electronic accounting.

Among Fig. 1～Fig. 4, the counterparty is user and electronic transaction terminal both sides, by bank settlement Processor is settled accounts, and the electronic transaction terminal among the figure comprises POS machine, the ATM of bank With e-commerce website etc.

With reference to Fig. 1, the user is handed over by electronics to electronic transaction terminal input account number, dealing money Easily terminal proposes transaction request to bank, and bank settlement generates transaction journal number, dynamic password kind Son, dynamic password, while separate users Mobile Directory Number, and with dynamic password, trade gold The Transaction Informations such as volume send to user's mobile phone by note, and the user will be obtained by mobile phone Dynamic password add the 10 figure place trading passwords input electronic transaction terminal that static password forms And submitted to bank by the electronic transaction terminal, bank settlement checking dynamic password, dealing money, Static password, dynamic password be after life cycle, and sending to the electronic transaction terminal could Transaction Information, The electronic transaction terminal will according to bank provide could Transaction Information, conclude the business with the user or get The transaction that disappears, and transaction results is shown to the user, and carry out the relevant processing that writes off with bank. Silver Row also can send to Transaction Information user's mobile phone.

By specific embodiment the present invention is carried out more detailed description below the embodiment:

The application of embodiment 1 on the bank self-help terminal

With reference to Fig. 2, the user imports user account number on ATM, the amount of money of withdrawing the money, to bank transaction request is proposed through ATM, bank settlement generates transaction journal number, the dynamic password seed, dynamic password, while separate users Mobile Directory Number, and with dynamic password, Transaction Informations such as dealing money send to user's mobile phone by note, the user will be added 10 figure place trading passwords input ATM that static password forms by the dynamic password that mobile phone obtains and submit to bank, bank settlement checking dynamic password, dealing money, static password, dynamic password is after life cycle, sending to ATM could Transaction Information, ATM according to bank provide could Transaction Information, conclude the business or Cancel Transaction with the user, and transaction results is shown to the user, ATM is submitted the transaction results report to, and by bank's processing that writes off of being correlated with, bank also can send to Transaction Information user's mobile phone.

The application of embodiment 2 on internet electronic business

With reference to Fig. 3, user's order products is to the e-commerce website order products, e-commerce website shows product value, the user imports user account number, to e-commerce website transaction request is proposed, bank settlement generates transaction journal number, the dynamic password seed, dynamic password, while separate users Mobile Directory Number, and with dynamic password, Transaction Informations such as dealing money send to user's mobile phone by note, the user will be added that the 10 figure place trading passwords that static password is formed submit business web site to by the dynamic password that mobile phone obtains after examining dealing money, business web site transmitted transaction password is given bank, bank settlement checking dynamic password, dealing money, static password, dynamic password is after life cycle, sending to business web site could Transaction Information, business web site according to bank provide could Transaction Information, conclude the business or Cancel Transaction with the user, and transaction results is shown to the user, business web site is submitted the transaction results report to, and by bank's processing that writes off of being correlated with, bank is to send to Transaction Information user's mobile phone.

The application of embodiment 3 on the personal consumption electronic accounting

With reference to Fig. 4, trade company imports the amount of money of customer consumption on the POS machine, the user imports user account number on the POS machine, the POS machine proposes transaction request by Unionpay to bank through trade company, bank settlement generates transaction journal number, the dynamic password seed, dynamic password, while separate users Mobile Directory Number, and with dynamic password, Transaction Informations such as dealing money send to user's mobile phone by note, the user will be added 10 figure place trading passwords input POS machine that static password forms by the dynamic password that mobile phone obtains and submit to bank by Unionpay, bank settlement checking dynamic password, dealing money, static password, dynamic password is after life cycle, sending to the POS machine by Unionpay could Transaction Information, the POS machine according to bank provide could Transaction Information, conclude the business or Cancel Transaction with the user, and transaction results is shown to the user, the POS machine is submitted the transaction results report to, and carries out relevant writing off and Account Disposal through Unionpay by Unionpay and bank, and bank sends to user's mobile phone with Transaction Information.

Claims

1; the no card-type electronic transaction of a kind of disposal password protection delivery method; the user is by mobile phone short-message and contact of electronic transaction terminal and transaction; the electronic transaction terminal comprises the POS machine of bank; ATM and e-commerce website; it is characterized in that: old-style Chinese private bank's code that the user's Bank Account Number that is adopted is encoded to bank adds user's Mobile Directory Number; disposal password is added in advance by 4 figure place dynamic passwords to be formed at 6 figure place user static passwords of bank's registration; when carrying out the electronic transaction payment; the user is to electronic transaction terminal input user's Bank Account Number and dealing money; the electronic transaction terminal is submitted to bank and is contained user's Bank Account Number; the transaction request of dealing money; bank carries out determining 4 figure place dynamic passwords behind the cryptographic calculation as seed and with the user's electronic dealing money with 4 random numbers; and the Transaction Information of dynamic password and dealing money sent to user's mobile phone; the user will add that the trading password that 6 figure place user static passwords are formed sends to bank through the electronic transaction terminal by 4 figure place dynamic passwords again; could conclude the business with definite through bank's checking; the electronic transaction terminal could determine whether transaction by Transaction Information according to what bank provided again; the information that the electronic transaction terminal maybe can not be concluded the business Transaction Success is shown to the user, at last by user's passage that Cancels Transaction.

2, method according to claim 1 is characterized in that: bank is set at 1～5 minute with disposal password life cycle, submits to from the user and comes into force in the electronic transaction request, loses efficacy after reaching setting-up time.