CN109427157B - Touch computer device for financial transaction payment and management method thereof - Google Patents
Touch computer device for financial transaction payment and management method thereof Download PDFInfo
- Publication number
- CN109427157B CN109427157B CN201710722489.7A CN201710722489A CN109427157B CN 109427157 B CN109427157 B CN 109427157B CN 201710722489 A CN201710722489 A CN 201710722489A CN 109427157 B CN109427157 B CN 109427157B
- Authority
- CN
- China
- Prior art keywords
- touch
- unit
- message
- control unit
- processing
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07G—REGISTERING THE RECEIPT OF CASH, VALUABLES, OR TOKENS
- G07G1/00—Cash registers
- G07G1/12—Cash registers electronically operated
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/401—Transaction verification
- G06Q20/4014—Identity check for transactions
Landscapes
- Business, Economics & Management (AREA)
- Engineering & Computer Science (AREA)
- Accounting & Taxation (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Finance (AREA)
- Strategic Management (AREA)
- General Business, Economics & Management (AREA)
- Theoretical Computer Science (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
A touch computer device for financial transaction payment and a management method thereof. The touch computer device comprises a screen unit capable of inputting messages in a touch mode, a processing unit, a safety control unit and a switching unit linked with the screen unit. In a standard processing position, the switching unit is linked to the processing unit; in a safety processing position, the switching unit is linked to the safety management and control unit. When the processing unit executes a password input mode of a safe transaction program, the safety control unit controls the switching unit to move to the safe processing position and receives password data input by touch pressing of the screen unit so as to ensure the safety of password data input, and the processing unit receives and processes non-confidential data input by touch pressing of the screen unit after receiving the password data and controlling the switching unit to move to the standard processing position, so that the time is saved effectively and the efficiency is improved.
Description
Technical Field
The present invention relates to a payment system, and more particularly, to a touch computer device for executing financial transaction payment and a management method thereof.
Background
The POS (Point of Sales) devices commonly used in financial transactions today can provide the payment amount of the customer by swiping a card, wherein one POS device uses its Magnetic card reader (MSR) to perform the card swiping operation and the subsequent transaction operations, such as: the card obtains the related transaction operations such as remote bank authorization and authentication, so the subsequent transaction action can be performed only by inputting the password of the financial card to complete data authentication in the transaction process. Therefore, when reading the confidential data such as the card data and inputting the password, the data is processed by a Security processor conforming to the Security protocol (Security protocol) level, so as to avoid the data of the financial card authentication and the transaction process from being stolen, and ensure the Security of the confidential data of the transaction.
Although the security processor conforming to the security hierarchy can ensure the security of processing the financial transaction data, the security processor usually needs to perform security procedure verification and other processes during execution, which results in a slow processing speed, and the security processor also executes general data or data for processing non-financial transaction operations during the processing of financial transactions, which results in a time-consuming processing process and is not in accordance with the use benefit, and thus further research, study, and improvement are required by the staff.
Disclosure of Invention
The technical problem to be solved by the present invention is to provide a secure and efficient touch computer device for financial transaction payment.
In order to solve the above technical problem, the touch computer device of the present invention includes a screen unit for inputting information by touch, a processing unit, a security control unit linked to the processing unit, and a switching unit linked to the screen unit.
The switching unit can move between a safe processing position and a standard processing position under the control of the safety control unit. When the standard processing position is reached, the switching unit is linked to the processing unit and enables the processing unit to be linked with the screen unit so as to receive the touch and press information of the screen unit; when the screen unit is in the safe processing position, the switching unit is linked to the safety control unit, and the safety control unit is linked to the screen unit to receive the touch and press information of the screen unit.
When the processing unit of the touch computer device is controlled to start executing a secure transaction program and execute an input password mode of the secure transaction program, the processing unit transmits a touch transaction message to the security control unit, and the security control unit receives the touch transaction message and controls the switching unit to move to the secure processing position, so that the security control unit is linked with the screen unit and can receive password data input by the screen unit in a touch mode.
After the safety control unit receives the password data and controls the switching unit to move to the standard processing position, the processing unit is connected with the screen unit to receive the touch information of the screen unit, the safety control unit encrypts the password data and transmits the encrypted password data to the processing unit, and the processing unit transmits the password data to a remote financial system through a network communication link to process and authenticate.
Another technical object of the present invention is to provide a secure and efficient method for managing payment in financial transactions.
To solve the above technical problems, the present invention provides a management method for financial transaction payment, which is applied to a touch computer device for financial transaction payment. The touch control computer device comprises a screen unit, a processing unit, a safety control unit and a switching unit. The management method of financial transaction payment comprises a step (A), a step (B), a step (C), a step (D) and a step (E).
In the step (a), the screen unit of the touch computer device is controlled to start executing a secure transaction process.
In the step (B), when the processing unit starts to execute an input password mode of the secure transaction process, a touch transaction message is transmitted to the security management and control unit.
In the step (C), when the security control unit receives the touch transaction message, the switching unit is controlled to switch to a security processing position, so that the security control unit is linked with the screen unit and can receive the touch message of the screen unit.
In the step (D), the security control unit receives a password data input by the touch control of the screen unit, and controls the switching unit to switch to the standard processing position after the security control unit receives the password data, so that the processing unit is linked to the screen unit to receive a touch message of the screen unit, and the security control unit encrypts the password data and transmits the encrypted password data to the processing unit.
In step (E), the processing unit transmits the cryptographic data to a remote financial system via a network communication link for authentication.
Compared with the prior art, the design that the switching unit can move between the safe processing position and the standard processing position can be controlled by the safety control unit, and when the processing unit executes the password input mode, the safety control unit immediately controls the switching unit to move to the safe processing position and receives the password data pressed by the screen unit, so that the safety of inputting the password data is ensured. And the security control unit receives the password data and immediately controls the switching unit to move to the standard processing position, so that the processing unit directly receives and processes the non-confidential data pressed by the screen unit, thereby effectively saving time and improving efficiency.
[ description of the drawings ]
FIG. 1 is a block diagram illustrating one embodiment of a touch-sensitive computer device for financial transaction payment in accordance with the present invention;
FIG. 2 is a block diagram of the system of FIG. 1; and
fig. 3 is a flow chart illustrating an embodiment of the method for managing payment for financial transactions of the present invention.
[ detailed description ] embodiments
Referring to fig. 1, 2 and 3, in an embodiment of a touch computer device for financial transaction payment and a management method thereof according to the present invention, the touch computer device 1 includes a screen unit 11 for inputting a message by touch, a processing unit 12, a security control unit 13 linked to the processing unit 12, a switching unit 14 linked to the screen unit 11, a plurality of sensing reading devices 2 linked to the security control unit 13, and a light emitting unit 3 linked to the security control unit 13.
The switching unit 14 is controlled by the security management unit 13 to move between a secure processing position and a standard processing position. In the standard processing position, the switching unit 14 is linked to the processing unit 12 and enables the processing unit 12 to link to the screen unit 11 so as to receive the touch and press message of the screen unit 11; in the security processing position, the switching unit 14 is linked to the security management unit 13 and enables the security management unit 13 to be linked to the screen unit 11 so as to receive the touch message of the screen unit 11. In this embodiment, the Processing Unit 12 is a Central Processing Unit (CPU), the security management and control Unit 13 is a Secure CPU, the security management and control Unit 13 controls the switch Unit 14 to move by controlling a Controller 131(Controller) linked to the switch Unit 14, and the switch Unit 14 is default to the standard Processing position, that is, the initial position of the switch Unit 14 is linked to the Processing Unit 12, so that the screen Unit 11 is linked to the Processing Unit 12 and can directly receive the touch message of the screen Unit 11, and the message instruction of the user touching the screen Unit 11 is directly processed by the Processing Unit 12. In short, the pressed message command of the screen unit 11 is linked to the processing unit 12 or the security management unit 13 through the switching unit 14.
In use, when the processing unit 12 of the touch computer device 1 is controlled to start executing a secure transaction program 15 and the processing unit 12 executes an input password mode of the secure transaction program 15, the processing unit 12 sends a touch transaction message to the security control unit 13, and the security control unit 13 receives the touch transaction message, i.e. controls the switching unit 14 to move to the secure processing position, so that the security control unit 13 receives the password data input by the touch of the screen unit 11. In the present embodiment, the secure transaction program 15 is in the form of an Application program (App), and a secure transaction program Icon 111 (App Icon) corresponding to the secure transaction program 15 is displayed on the screen unit 11. In other words, when a consumer needs to perform a financial card transaction, a user (a checkout staff) touches and clicks the secure transaction program icon 111 (see fig. 1) on the screen unit 11 and the processing unit 12 starts to execute the secure transaction program 15 to start a financial card consumption transaction, when the processing unit 12 executes the password input mode of the secure transaction program 15, i.e. an action of requiring the consumer to input a PIN code, the processing unit 12 will transmit the touch transaction message to notify the security control unit 13 that the action of inputting a PIN code is to be performed, and at the same time, the security control unit 13 immediately controls the switching unit 14 to move to the security processing position to link the screen unit 11, and the security control unit 13 receives the password data touch-input by the screen unit 11, thereby ensuring that the password data touch-input by the consumer on the screen unit 11 is completely input by the security control unit 13 (in accordance with security management verification) Mechanism) for processing and real-time storage and control.
It is to be specifically noted that the screen unit 11 includes a touch module 112, a message display module 113, and a display interface 114. The display interface 114 displays a plurality of numeric symbol keys (not shown), a plurality of function processing keys (not shown), an input confirmation key (not shown), and a message field (not shown) corresponding to the message display module 113. The touch module 112 has a plurality of touch points (not shown) respectively corresponding to the number symbol key, the function processing key and the input confirmation key. In this embodiment, when the processing unit 12 executes the password input mode of the secure transaction process 15, the display interface 114 is displayed on the screen unit 11, and the display interface 114 displays the number symbol keys (e.g., number keys such as 0-9), the function processing keys (e.g., function keys such as forward, backward, cancel, and delete), and the input confirmation key (e.g., OK or confirmation key). In addition, when the security control unit 13 receives the touch transaction message, the switching unit 14 is controlled to move to the security processing position, and the security control unit 13 is linked to the touch module 112 to receive the touch point touched message of the touch module 112. In the process of inputting the password data, the number symbol key of the display interface 114 is touched and pressed to synchronously touch the touch point of the touch module 112, and the security control unit 13 receives the password data that is touch-input to the touch point of the touch module 112, that is, when a consumer presses the number symbol key, the touch point of the touch module 112 is actually touched and pressed, the data of the number symbol corresponding to the touch point of the touch module 112 is directly transmitted to the security control unit 13, and the message display module 113 displays the corresponding encrypted symbol (such as a "" -key) in the message field, but not limited thereto. In other words, at the security processing position, the switching unit 14 links the touch module 112 and the security management unit 13 such that the security management unit 13 can directly receive the touch point touched and pressed message of the touch module 112, and the message display module 113 is still managed by the processing unit 12 and only displays the corresponding encrypted symbol (e.g., "+" key) in the message field through the message display module 113.
In addition, in the embodiment, since the function (display interface 114) of the screen unit 11 displaying the image is controlled by the processing unit 12, the images of the number symbol key, the function processing key and the input confirmation key corresponding to the touch point of the touch module 112 are displayed on the screen unit 11 by the processing unit 12. In this embodiment, the arrangement positions of the keys of the display interface 114 are positions required to be arranged by the security control unit 13 executing a built-in random number function (random function), and the security control unit 13 controls the data of the keys corresponding to the touch points of the touch module 112, so that when the instruction message of the touch points being touched is directly transmitted to the security control unit 13, the security control unit 13 knows the data of the number symbols input by the touch. When the processing unit 12 executes the password input mode of the secure transaction process 15, the security control unit 13 not only immediately controls the switching unit 14 to move to the secure processing position, but also simultaneously sends an indication message corresponding to the arrangement position of the keys of the display interface 114 to the processing unit 12, and the processing unit 12 displays the key position of the display interface 114 on the screen unit 11 according to the indication message. It is needless to say that the safety control unit 13 sends the indication message to the processing unit 12 and at the same time the safety control unit 13 immediately controls the switching unit 14 to move to the safety processing position, and when the processing unit 12 displays the display interface 114 on the screen unit 11 according to the indication message, the switching unit 14 synchronously completes the switching to the safety processing position so that the safety control unit 13 is linked to the touch module 112, which is not described herein again. In the present embodiment, the touch module 112 is a capacitive touch module, but not limited thereto, and may also be an infrared touch module or a surface acoustic wave touch module.
When the security management and control unit 13 receives the password data and controls the switching unit 14 to move to the standard processing position, the password data is encrypted and transmitted to the processing unit 12, and the processing unit 12 transmits the password data to a remote financial system 4 for processing and authentication through a network communication link. That is, in this embodiment, when the consumer presses the input confirmation key after inputting the PIN code in the touch module 112, it represents that the input of the password data is completed and the security control unit 13 completes receiving in real time, and at the same time, the switching unit 14 is controlled to move to the standard processing position and the processing unit 12 is connected to the screen unit 11 to directly receive the touch message of the screen unit 11, so that the processing unit 12 can subsequently and directly process and receive the non-confidential data of the touch input of the screen unit 11 without performing complicated security level verification by the security control unit 13, thereby effectively saving time and improving operation efficiency. Particularly, when the security management and control unit 13 receives the password data, the password data is integrated into an encrypted packet and transmitted to the processing unit 12 in an Asynchronous serial data transmission (UART) manner, and the processing unit 12 transmits the encrypted packet of the password data to the remote financial system 4 via a network communication link for processing authentication (such as card issuing bank or joint financial card center), and the remote financial system 4 authenticates subsequent authentication and financial transaction operations.
It should be noted that, when the processing unit 12 executes a sensing mode of the secure transaction program 15, the processing unit 12 sends a sensing transaction message to the security control unit 13, and the security control unit 13 receives the touch transaction message, receives the read data read by each sensing reading device 2, encrypts each read data and sends the encrypted read data to the processing unit 12, and the processing unit 12 sends each read data to the remote financial system 4 via the network communication link for processing authentication. That is, when the user executes the sensing mode of the secure transaction program 15, the processing unit 12 will transmit the sensing transaction message to notify the security control unit 13, and then the security control unit 13 can receive the read data read by each sensing reader 2, since the sensing reader 2 is directly linked to the security control unit 13, the read data (e.g., the confidential data of the financial card) read by the sensing reader 2 will be directly transmitted to the security control unit 13 for processing and storage control, and the security control unit 13 will integrate each received read data into a sealed package and transmit the sealed package to the processing unit 12. In the present embodiment, the inductive reader 2 has a function of supporting Bluetooth (Bluetooth), NFC (Near Field Communication), Wi-Fi transmission, and the like, but not limited thereto. In addition, in this embodiment, when the security control unit 13 receives the touch transaction message and the sensing transaction message, the lighting unit 3 is controlled to emit Light, so that the user can know that confidential data operation is currently processed, and the lighting unit 3 is in a Light-emitting diode (LED) mode, and when the security control unit 13 receives the touch transaction message and the sensing transaction message, the security control unit 13 controls an LED to emit green Light, but not limited thereto.
Referring to fig. 1, fig. 2 and fig. 3, the embodiment of the management method for financial transaction payment of the present invention is applied to the above-mentioned touch computer device 1 for financial transaction payment. The management method of financial transaction payment comprises a step (A), a step (B), a step (C), a step (D) and a step (E).
First, in the step (a), the processing unit 12 of the touch-sensing computing device 1 is controlled to start executing the secure transaction process 15. And in the step (B), when the processing unit 12 starts to execute the password input mode of the secure transaction process 15, the touch transaction message is sent to the security management unit 13. In detail, when performing a card financial transaction, a user touches the secure transaction icon 111 on the screen unit 11 to enable the processing unit 12 to start executing the secure transaction program 15 to start performing a financial card consumption transaction, and when the processing unit 12 executes the password input mode of the secure transaction program 15, the touch transaction message is sent to the security control unit 13. Therefore, in the step (C), when the security management and control unit 13 receives the touch transaction message, the security management and control unit 13 immediately controls the switching unit 14 to move to the security processing position so that the security management and control unit 13 is linked to the touch module 112 of the screen unit 11, and the security management and control unit 13 directly receives the password data touch-inputted by the touch module 112, at this time, the processing unit 12 is not linked to the touch module 112 and cannot receive the touch-pressed message of the touch module 112. That is, the touch module 112 is linked to the security management unit 13, so that the security management unit 13 can directly receive and manage confidential data such as PIN codes and the like inputted by the consumer touching and pressing the touch module 112 in the whole process. In addition, after clicking the secure transaction program icon 111 (see fig. 1), the display interface 114 (see fig. 2) is displayed on the screen unit 11, and as for the above embodiment, when the processing unit 12 executes the password input mode of the secure transaction program 15, the display interface 114 is displayed on the screen unit 11, and the display interface 114 displays the number symbol key (e.g., number keys such as 0-9), the function processing key (e.g., function keys such as forward, backward, cancel, and delete), and the input confirmation key (e.g., OK or confirmation key), the touch points (not shown) of the touch module 112 respectively correspond to the number symbol key (not shown), the function processing key (not shown), and the input confirmation key (not shown).
It is further explained that, when the security management and control unit 13 receives the touch transaction message, the switching unit 14 is controlled to move to the secure processing position and the security management and control unit 13 is linked to the touch module 112 to receive the touch point touched message of the touch module 112. In the process of inputting the password data, the number symbol key of the display interface 114 is touched and pressed to synchronously touch the touch point of the touch module 112, and the security management and control unit 13 receives the password data that is touch-input to the touch point of the touch module 112, that is, when the consumer presses the number symbol key, the touch point of the touch module 112 corresponding to the touch point is actually touched and pressed, and the data of the number symbol corresponding to the touch point in the touch module 112 corresponding to the touch point is directly transmitted to the security management and control unit 13. In this embodiment, the arrangement positions of the keys of the display interface 114 are positions required to be arranged by the security control unit 13 executing a built-in random number function (random function), and the security control unit 13 controls the data of the keys corresponding to the touch points of the touch module 112, so that when the instruction message of the touch points being touched is directly transmitted to the security control unit 13, the security control unit 13 knows the data of the number symbols input by the touch. When the processing unit 12 executes the password input mode of the secure transaction program 15, the touch transaction message is sent to notify the security control unit 13 that the PIN code is to be input, and the security control unit 13, besides immediately controlling the switching unit 14 to move to the secure processing position, also simultaneously sends the indication message corresponding to the arrangement position of the key of the display interface 114 this time to the processing unit 12, and the processing unit 12 displays the key position of the display interface 114 this time on the screen unit 11 according to the indication message. It is needless to say that the safety control unit 13 sends the indication message to the processing unit 12 and at the same time the safety control unit 13 immediately controls the switching unit 14 to move to the safety processing position, and when the processing unit 12 displays the display interface 114 on the screen unit 11 according to the indication message, the switching unit 14 completes the switching to the safety processing position so that the safety control unit 13 is linked to the touch module 112, which is not described herein again. In other words, each time a PIN code needs to be input, the security management and control unit 13 executes the random number function (random function) and generates the arrangement position that the key needs to present, so that the arrangement position of the key cannot be predicted by the outside, thereby further improving the security of the password data operation that the touch point corresponding to the key is touch-input.
Then, in the step (D), the security management and control unit 13 receives the password data input by the touch module 112, and after the security management and control unit 13 receives the password data, the switching unit 14 is controlled to switch and move to the standard processing position, so that the processing unit 12 is linked with the screen unit 11 to directly receive the touch message of the screen unit 11, and the security management and control unit 13 encrypts the password data and transmits the encrypted password data to the processing unit 12. In detail, the step (D) includes a step (D1), and a step (D2).
In this step (D1), the number symbol keys of the display interface 114 are touched to synchronously touch the touch points of the touch module 112, and the security management and control unit 13 receives the password data of the touch points of the touch module 112, and transmits a display encryption message to the processing unit 12 each time the security management and control unit 13 receives the number symbol data corresponding to any touch point via the touch module 112, and the processing unit 12 controls the message display module 113 to display an encryption symbol in the message field each time the processing unit 12 receives the display encryption message. For example: in the password input mode of the secure transaction process 15, when the consumer presses the number symbol key and the function processing key (e.g., forward, backward, cancel, delete, etc. function keys) of the display interface 114 to input the PIN code, the touch points of the touch module 112 are synchronously touched, and the data of the number symbol corresponding to the touched touch point in the touch module 112 is directly transmitted to the security management and control unit 13. In the process of inputting the password data, the security control unit 13 transmits the display encryption message to the processing unit 12 each time the data of the numeric symbol is received, and the processing unit 12 controls the message display module 113 to display the encryption symbol (such as a "") in the message field each time the display encryption message is received, thereby effectively preventing the information in the process of inputting the password from being viewed by the outside. In addition, in the embodiment, since the function (display interface 114) of the screen unit 11 displaying the image is controlled by the processing unit 12, the images of the number symbol key, the function processing key and the input confirmation key corresponding to the touch point of the touch module 112 are displayed on the screen unit 11 by the processing unit 12. Therefore, at the security processing position, the switching unit 14 links the touch module 112 and the security management unit 13, so that the security management unit 13 can directly receive the touch point touched message of the touch module 112, and the message display module 113 is still managed by the processing unit 12 and only displays the corresponding encrypted symbol (such as "") on the message field through the message display module 113. It should be noted that, in this embodiment, each time the function processing key of the display interface 114 is touched and synchronously touched and pressed, the function processing instruction corresponding to the touched and pressed touch point in the touch module 112 is directly transmitted to the safety control unit 13, and each time the safety control unit 13 receives the function processing key instruction, the safety control unit 13 transmits a corresponding action processing message (such as action processing messages of forward, backward, cancel, and delete) to the processing unit 12 in real time, and the processing unit 12 executes the received action processing message and synchronously controls the message display module 113 to perform corresponding action processing on the message field. In the embodiment, the safety control unit 13 transmits data and communicates with the processing unit 12 in an asynchronous serial data transmission (UART) manner, but not limited thereto.
In the step (D2), when the input ok key is pressed to synchronously press the touch point corresponding to the touch module 112 and the security management unit 13 receives the password data, the security management unit 13 controls the switching unit 14 to move to the standard processing position, encrypts the password data and transmits the encrypted password data to the processing unit 12. Following the above example, when the consumer presses the input confirmation key (e.g. OK or confirmation key) to complete the PIN code input, the security management and control unit 13 integrates the received password data into an encrypted packet and transmits the encrypted packet to the processing unit 12, and simultaneously moves the switching unit 14 to the standard processing position, so that the processing unit 12 can directly process the general touch input operation of the screen unit 11 and receive non-confidential data, thereby effectively saving time and improving operation efficiency. It should be particularly noted that, in the present embodiment, in the step (D1), the security management unit 13 only receives the password data that is touch-input to the touch point of the touch module 112 corresponding to the number symbol key within a preset receiving time, that is, the security management unit 13 has a limitation that the password data needs to be received within the preset receiving time, for example: the preset receiving time is 1 minute, so that the consumer needs to input the password data within 1 minute, and the security management and control unit 13 can receive the password data within the default receiving time (1 minute), so as to avoid the situation that the password data is input too long and the outside can steal the password data when the password data is still available, but not limited to this. In the step (D2), when the touch point corresponding to the input confirmation key is touched and the security control unit 13 completes receiving the password data or the security control unit 13 receives the password data for the default receiving time, the security control unit 13 controls the switching unit 14 to move to the standard processing position, and encrypts and transmits the received password data to the processing unit 12. In other words, except for the case that the customer presses the input confirmation key to complete the PIN code input, the security control unit 13 controls the switching unit 14 to move to the standard processing position and encrypt and transmit the password data to the processing unit 12, in this embodiment, when the customer has reached the predetermined receiving time during the process of inputting the password data, the security control unit 13 also controls the switching unit 14 to move to the standard processing position and encrypt and transmit the password data to the processing unit 12, at this time, since the customer has not completed the input of the password data, the authentication of the remote financial system 4 will fail subsequently, and further the transaction operation needs to be executed again, but not limited thereto, it is also possible to design that the time for the security control unit 13 to receive the password data reaches the predetermined receiving time but the touch point corresponding to the input confirmation key is not touched, i.e. the time for inputting the password by the customer has exceeded the password input time The default receiving time, at this time, the security management and control unit 13 only controls the switching unit 14 to move to the standard processing position, but does not encrypt and transmit the password data to the processing unit 12, so that the subsequent remote financial system 4 does not receive the password data and cause authentication failure.
Finally, in step (E), the processing unit 12 transmits the cryptographic data to the remote financial system 4 via a network communication link for authentication. In short, the processing unit 12 transmits the received encrypted packet of the password data to the remote financial system 4 via the network communication link for authentication (such as card issuing bank or joint financial card center), and the remote financial system 4 processes the subsequent authentication and financial transaction operation, and when the authentication of the remote financial system 4 is successful, the financial transaction operation is completed; however, if the remote financial system 4 fails to authenticate, the process returns to the step (B) to re-execute the transaction operation of the input password mode. In this embodiment, the security management and control unit 13 integrates the received password data into an encrypted packet by Asymmetric encryption (Asymmetric cryptography) and transmits the encrypted packet to the remote financial system 4 through the processing unit 12 and the network communication link for processing and communication, that is, the security management and control unit 13 encrypts the password data by using a Public key (Public key) provided by the remote financial system 4 and transmits the encrypted data to the remote financial system 4, so that the remote financial system 4 can decrypt the encrypted data by its Private key (Private key).
It is noted that the method for managing financial transaction payment further comprises a step (B1), a step (C1), and a step (C2) between the step (a) and the step (E).
In step (B1), the processing unit 12 executes the sensing mode of the secure transaction process 15 and sends the sensed transaction message to the security management unit 13. That is, when the processing unit 12 executes the sensing mode of the secure transaction program 15, the consumer only needs to sense the financial card through the sensing reading device 2 and perform the contactless data transmission operation such as bluetooth, NFC, or Wi-Fi, and the security control unit 13 can directly receive the read data read by the sensing reading device 2.
In addition, in the step (C1), when the security management unit 13 receives the inductive transaction message, the switching unit 14 is located at the standard processing position. Further, when the secure transaction process 15 is in the sensing mode, the consumer does not need to input the PIN code, so that the user does not need to touch the screen unit 11 to input the financial confidential data, and therefore the security management unit 13 controls the switching unit 14 to remain at the standard processing position. In the step (C2), the security management and control unit 13 receives the read data read by any sensing reading device 2, and after the security management and control unit 13 receives the read data, encrypts the read data and transmits the encrypted read data to the processing unit 12. In step (E), the processing unit 12 transmits the read data to the remote financial system 4 via the network communication link for authentication. Similarly, the security management unit 13 integrates the received read data into a sealed packet and transmits the sealed packet to the processing unit 12, and the encryption transmission method is described in the above example with reference to the encryption transmission, which is not described herein again.
The design that the switching unit 14 can move between the secure processing position and the standard processing position can be controlled by the security control unit 13, and when the processing unit 12 executes the password input mode, the security control unit 13 immediately controls the switching unit 14 to move to the secure processing position and receive the password data, thereby ensuring the security of the password data input. The security management and control unit 13 receives the password data and immediately controls the switching unit 14 to move to the standard processing position, so that the processing unit 12 directly processes and receives the non-confidential data, thereby effectively saving time and improving efficiency.
It should be noted that the touch computer device 1 further includes a light emitting unit 3 linked to the security management unit 13, and in the step (C), when the security management unit 13 receives the touch transaction message and controls the light emitting unit 3 to emit light, and in the step (C1), when the security management unit 13 receives the touch transaction message and controls the light emitting unit 3 to emit light. The light-emitting unit 3 is used to display that the security control unit 13 is currently processing confidential data of financial transactions, but not limited thereto, it may also be designed in the step (a) according to the usage requirement, when the processing unit 12 is controlled to start executing the security transaction program 15, the processing unit 12 will transmit a start message to the security control unit 13, and the security control unit 13 and the light-emitting unit 3 are controlled to emit light, so as to notify the user that the security transaction program 15 has been started and the subsequent financial transaction operation can be performed. In addition, in the embodiment, the light emitting unit 3 is in a Light Emitting Diode (LED) mode, and when the safety control unit 13 receives the touch transaction message and the sensing transaction message, the safety control unit 13 controls an LED to turn on a green light, but not limited thereto. Furthermore, in this embodiment, the design of the light-emitting unit 3 can be controlled by the safety control unit 13, when the touch-control computer device 1 is started, the safety control unit 13 will detect whether an internal signal protection circuit (not shown) is safe or not, and when the safety control unit 13 detects that the signal protection circuit has been damaged by an external force to form an open circuit or cause the signal protection circuit to be short-circuited with an internal power loop or other signal lines, a safety protection mechanism is started to perform data protection, such as: the security management and control unit 13 deletes the Public key (Public key) provided by the remote financial system 4 and cannot perform subsequent communication with the remote financial system 4 or deletes internal confidential data, so as to prevent the external from stealing transaction information and control the light-emitting unit 3 to illuminate red light to achieve the warning effect.
In summary, according to the touch computer device for financial transaction payment and the management method thereof of the present invention, when the processing unit 12 executes the password input mode, the security control unit 13 immediately controls the switching unit 14 to move to the security processing position and receives the password data pressed by the screen unit 11, thereby ensuring the security of the password data input. The security management and control unit 13 receives the password data and immediately controls the switch unit 14 to move to the standard processing position, so that the processing unit 12 directly processes and receives the non-confidential data pressed by the screen unit 11, thereby effectively saving time and improving efficiency.
The above description is only for the specific embodiments of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present invention, and all the changes or substitutions should be covered within the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.
Claims (7)
1. A management method of financial transaction payment is applied to a touch computer device of financial transaction payment, the touch computer device comprises a screen unit, a processing unit, a safety control unit and a switching unit, and is characterized in that the screen unit comprises a touch module, a message display module and a display interface, the display interface displays a plurality of numeric symbol keys, an input confirmation key and a message field corresponding to the message display module, the touch module is provided with a plurality of touch points corresponding to the numeric symbol keys and the input confirmation key, and the management method of financial transaction payment comprises the following steps:
(A) the processing unit of the touch computer device is controlled to start and execute a safe transaction process;
(B) when the processing unit starts to execute a password input mode of the secure transaction program, a touch transaction message is transmitted to the secure control unit;
(C) when the safety control unit receives the touch transaction message, the switching unit is controlled to switch and move to a safety processing position, so that the safety control unit is linked with the touch module of the screen unit and can receive the touch message of the touch module of the screen unit, and at the moment, the processing unit is not linked with the touch module and cannot receive the touch message of the touch module;
(D) the safety control unit receives a password data input by the screen unit in a touch manner, when the safety control unit receives the password data, the switching unit is controlled to move to a standard processing position, so that the processing unit is linked with the screen unit and can receive a touch message of the screen unit, the safety control unit encrypts the password data and transmits the encrypted password data to the processing unit, the step (D) comprises a step (D1) of synchronously touching and pressing the touch points of the touch module by touching and pressing the number symbol keys of the display interface, receiving the password data input by the touch points of the touch module in a touch manner by the safety control unit, transmitting a display encryption message to the processing unit when the safety control unit receives the data of the number symbol corresponding to any touch point by the touch module each time, and transmitting the display encryption message when the processing unit receives the display encryption message each time, controlling the message display module to display an encryption symbol in the message field, and a step (D2) of controlling the switching unit to move to the standard processing position and encrypting the password data and transmitting the encrypted password data to the processing unit when the input confirmation key is pressed to synchronously press the touch point corresponding to the touch module and the security control unit completes receiving the password data; and
(E) the processing unit transmits the cryptographic data to a remote financial system via a network communication link for authentication processing.
2. The method according to claim 1, wherein in the step (D1), the security control unit receives the password data from the touch module corresponding to the number symbol key when the touch point corresponding to the input confirmation key is touched and the security control unit completes receiving the password data or the security control unit receives the password data for the default receiving time, and in the step (D2), the security control unit controls the switching unit to move to the standard processing position and encrypts and transmits the received password data to the processing unit.
3. The method according to claim 2, wherein in the step (D2), the security management unit integrates the cryptographic data into a sealed packet and transmits the sealed packet to the processing unit.
4. The method according to claim 1, wherein in the step (C), after the security management and control unit receives the touch transaction message, the security management and control unit sends an indication message to the processing unit and controls the switching unit to move to the secure processing position, the indication message includes the position where the number symbol keys and the input confirmation keys are required to be arranged on the display interface, and the processing unit displays the number symbol keys and the input confirmation keys of the display interface on the screen unit according to the indication message.
5. The method as claimed in claim 1, wherein the touch-controlled computer device for financial transaction payment further comprises a light-emitting unit linked to the security management unit, and in the step (C), when the security management unit receives the touch-controlled transaction message and controls the light-emitting unit to emit light.
6. A touch-sensitive computer device for financial transaction payment, comprising:
a screen unit for touch input message, the screen unit includes a touch module, a message display module, and a display interface, the display interface displays a plurality of number symbol keys, an input confirmation key, and a message field corresponding to the message display module, the touch module has a plurality of touch points corresponding to the number symbol keys and the input confirmation key;
a processing unit;
a safety control unit linked with the processing unit; and
the switching unit is linked with the screen unit and can move between a safe processing position and a standard processing position under the control of the safety control unit, and when the switching unit is at the standard processing position, the switching unit is linked with the processing unit and enables the processing unit to be linked with the screen unit so as to receive the touch information of the touch module of the screen unit; when the processing unit is controlled to start executing a safe transaction program and execute an input password mode of the safe transaction program, the processing unit transmits a touch transaction message to the safe control unit, and the safe control unit receives the touch transaction message and controls the switching unit to move to the safe processing position, so that the safe control unit is linked with the touch module of the screen unit and can receive a password data input by touch of the touch module of the screen unit, and the number symbol keys of the display interface are touched and pressed to synchronously touch and press the touch points of the touch module, the security control unit receives the password data input by the touch control point of the touch control module in a touch control mode, transmits a display encryption message to the processing unit when the security control unit receives data of a numerical symbol corresponding to any touch control point from the touch control module each time, controls the message display module to display an encryption symbol in the message field when the processing unit receives the display encryption message each time, controls the switching unit to move to the standard processing position when the input confirmation key is pressed to synchronously press the touch control point corresponding to the touch control module and enables the security control unit to receive the password data, enables the processing unit to link with the screen unit to receive the pressed message of the screen unit, encrypts the password data and transmits the encrypted password data to the processing unit, and the processing unit transmits the cryptographic data to a remote financial system via a network communication link for authentication processing.
7. The touch-sensitive computer device for financial transaction payment of claim 6, further comprising a light emitting unit linked to the security management unit, wherein when the security management unit receives the touch-sensitive transaction message, the security management unit controls the light emitting unit to emit light.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710722489.7A CN109427157B (en) | 2017-08-22 | 2017-08-22 | Touch computer device for financial transaction payment and management method thereof |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710722489.7A CN109427157B (en) | 2017-08-22 | 2017-08-22 | Touch computer device for financial transaction payment and management method thereof |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109427157A CN109427157A (en) | 2019-03-05 |
| CN109427157B true CN109427157B (en) | 2021-03-26 |
Family
ID=65499131
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710722489.7A Active CN109427157B (en) | 2017-08-22 | 2017-08-22 | Touch computer device for financial transaction payment and management method thereof |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109427157B (en) |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6826395B2 (en) * | 2000-08-03 | 2004-11-30 | Telepaq Technology, Inc. | System and method for secure trading mechanism combining wireless communication and wired communication |
| CN1797484A (en) * | 2004-12-28 | 2006-07-05 | 冲电气工业株式会社 | Automatic trade apparatus |
| CN103986837A (en) * | 2014-05-28 | 2014-08-13 | 天地融科技股份有限公司 | Information processing method and device |
| CN104021473A (en) * | 2014-05-30 | 2014-09-03 | 刘劲彤 | Safe payment method of visual financial card |
| CN105164694A (en) * | 2013-03-05 | 2015-12-16 | 温科尼克斯多夫国际有限公司 | Trusted terminal platform |
| CN105704332A (en) * | 2016-04-27 | 2016-06-22 | 中国银联股份有限公司 | Mobile payment method and device |
| JP2016133832A (en) * | 2015-01-15 | 2016-07-25 | パナソニックＩｐマネジメント株式会社 | Transaction processing system, transaction processing method, transaction processor, and program |
| CN106991343A (en) * | 2016-01-11 | 2017-07-28 | 仁宝电脑工业股份有限公司 | Secure payment device and its safe payment method |
-
2017
- 2017-08-22 CN CN201710722489.7A patent/CN109427157B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6826395B2 (en) * | 2000-08-03 | 2004-11-30 | Telepaq Technology, Inc. | System and method for secure trading mechanism combining wireless communication and wired communication |
| CN1797484A (en) * | 2004-12-28 | 2006-07-05 | 冲电气工业株式会社 | Automatic trade apparatus |
| CN105164694A (en) * | 2013-03-05 | 2015-12-16 | 温科尼克斯多夫国际有限公司 | Trusted terminal platform |
| CN103986837A (en) * | 2014-05-28 | 2014-08-13 | 天地融科技股份有限公司 | Information processing method and device |
| CN104021473A (en) * | 2014-05-30 | 2014-09-03 | 刘劲彤 | Safe payment method of visual financial card |
| JP2016133832A (en) * | 2015-01-15 | 2016-07-25 | パナソニックＩｐマネジメント株式会社 | Transaction processing system, transaction processing method, transaction processor, and program |
| CN106991343A (en) * | 2016-01-11 | 2017-07-28 | 仁宝电脑工业股份有限公司 | Secure payment device and its safe payment method |
| CN105704332A (en) * | 2016-04-27 | 2016-06-22 | 中国银联股份有限公司 | Mobile payment method and device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109427157A (en) | 2019-03-05 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| AU2019229343B2 (en) | Secure mobile user interface and mobile device case | |
| US9904912B2 (en) | Protecting transactions | |
| KR102576809B1 (en) | Registering Method for Payment means information and electronic device supporting the same | |
| US9495524B2 (en) | Secure user authentication using a master secure element | |
| CN202758442U (en) | Mobile card-swiping terminal | |
| US10552830B2 (en) | Deletion of credentials from an electronic device | |
| US11087315B2 (en) | Server-assisted pairing for wireless communications | |
| US20040024710A1 (en) | Secure input pad partition | |
| JP2016516230A5 (en) | ||
| CN103337117A (en) | Mobile card-swiping terminal | |
| CN104866129A (en) | Computing device and password input method thereof | |
| US10147090B2 (en) | Validating a transaction with a secure input without requiring pin code entry | |
| EP3332571B1 (en) | Server-assisisted pairing for wireless communications | |
| CN104636917A (en) | Mobile payment system and method with secure payment function | |
| CN107516215B (en) | Intelligent POS terminal and method capable of safely inputting PIN code | |
| CN109427157B (en) | Touch computer device for financial transaction payment and management method thereof | |
| TWM564228U (en) | System for executing transaction based on a mobile communication device | |
| TWI648693B (en) | Touch computer device for financial transaction payment and management method thereof | |
| CN108990041B (en) | Method and equipment for setting main card and auxiliary card | |
| US10296902B2 (en) | Payment device with data entry keys | |
| CN108985767A (en) | PIN data safe input method and terminal | |
| CN102651687A (en) | Intelligent cipher key for voice recognition of online transaction | |
| CN202009388U (en) | Speech recognition eKey for online transaction | |
| JP2022184078A (en) | Information input device and information processing system | |
| ATMURI | SYSTEM AND METHOD TO AUTHORIZE A PAYMENT TRANSACTION USING A DIGITAL GLOVE |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |