CN1324051A

CN1324051A - Safe communication

Info

Publication number: CN1324051A
Application number: CN 00121358
Authority: CN
Inventors: 张承勷; 马智驹; 侯晏泉
Original assignee: MR TANG ENTERPRISE CO Ltd
Current assignee: MR TANG ENTERPRISE CO Ltd
Priority date: 2000-05-15
Filing date: 2000-07-21
Publication date: 2001-11-28
Also published as: GB2362489A; GB0011673D0; CA2313832A1; AU4384000A; HK1034416A2

Abstract

The present invention relates to the validation of internet purchases. The intending purchaser supplies a vendor's website with identification data, The website then accesses a database of contact data, preferably a telecommunications network , to locate contact data (e.g. the purchaser's phono number) for the purchaser. The web site then telephones the purchaser's phone number to validate the purchaser' s identity. Preferably the vendor's website then issues an invoice to the purchaser's telephone company and the purchaser is debited for the purchase in his telephone bill.

Description

Secure communication

The invention relates on a communication network method and apparatus of move instruction safely, the present invention especially is applicable to and carries out online business transaction.

The Internet commerce increases rapidly at present, relates to the user and buys commodity, service and information (as down-load music is paid).

In order to buy, user will be sent to website by retailer's operation to its instruction by the Internet, and this instruction may comprise user's credit card and account information, usually these information be printed on credit card originally on one's body.This retailer approves this transaction (can send commodity with charge free as the retailer), and the user's that correspondingly debts credit card.

Above-mentioned system relates to a safety problem, and promptly the data on credit card also can be visited for the third party that can visit this card, and he just can remember to be printed on the data on the card, and buys with its oneself account in the time afterwards.

A common user will repeatedly buy from same website in one period, repeatedly transmit same credit card for fear of this user, as everyone knows, a credit card information storehouse is often kept for each user in the website, each user is provided (selection) identification data and is used to identify himself, this identification data generally includes a password and a user name, no matter when when this user wants to buy from this website, he just provides his identification data to this website, credit card database is just visited with this identification data in this website, and retrieves this user's credit card information.

This configuration has more worsened above-mentioned safety problem, also can utilize this website to buy because can visit the third party of this identification data, and a such third party for example is this retailer's operating personnel.In addition, this third party can visit this identification data, because this user is recorded in somewhere (on paper) to it, to avoid remembeing it.In fact, relevant with on-line purchase crime problem is also increasing rapidly.

Although as described, the internet security problem shows sharply especially in on-line purchase, and it also appears in other affairs, has a lot of examples to show that the user wishes to communicate with the website safely.

The present invention is devoted to provide the method and apparatus that carries out secure network communications, especially transmits trading instruction to the Internet retailers.

Generally speaking, the present invention advises that the user provides in order to identify his data to the website, and this website visiting relates to the contact data base of one second telecommunications network, so that search user's contact data.For example, this second telecommunications network can be a telephone network (as mobile telephone network), and this contact data just can be a user's telephone number.This second telecommunications network contact user of this website use is so that check user's sign.

For example, this website can send a confirmation code to the user, the some that it can be used as message sends on the user's mobile phone, and this user reads this confirmation code, and sends it to this website by the Internet (as key in this sign indicating number on the webpage of user browser).If the third party can visit the telecommunications network relevant with this contact data in this second communication network like this, also only can use the user account of this website.

This database can be safeguarded by website itself as a contact data base.In addition, this database can be the operating personnel's maintenance by second telecommunications network.In fact, a plurality of phone operation personnel can safeguard database separately.This user can indicate his telephone number to the website, so that the corresponding telephone operating personnel can be got in touch in this website, and correct database.After having verified user ID, this website just normally mode (import credit card details, or the database by the previous credit card information of keying in of visit) as the request user send bill to a credit card account about this purchase.Preferably the bill at this purchase is to pay the bill from the capital account that second telecommunications network is relevant therewith.For example, it can appear on user's the telephone bill of next month, and this needing just have been avoided independent credit card account.

With reference to the accompanying drawings, at length explained the present invention as an example, wherein:

Fig. 1 illustrates the screen that is shown to the user in the first embodiment of the present invention;

Fig. 2 is the block scheme of the step in the second embodiment of the present invention.

With reference to Fig. 1, be labeled as 1 zone and schematically show and be engraved in a demonstration on the user browser, i.e. user's display screen at a time.This screen 1 is the demonstration that is produced by a server, and its function is as an online retailer.Screen 1 an indication repertory (as user's " shopping frame "), by checking this frame (and roughly clicking " purchase " button), this user indicates him to think to be " project 2 " payment.

Show to transform to screen 2 then, the indication user keys in identification data, especially its username and password.This server has been kept the database of a username and password, so that it can check results, if not success of user, he will be directed to screen 3, keys in again.

The Fac success, the user just can enter into screen 4.It is sending a piece of news to a mobile phone user (or other message sink equipment in this server indication, as pager), and provide cell-phone number, this cell-phone number can extract from the database of this identification data visit of server by utilizing, and perhaps user oneself is typed into telephone number in the screen 4.Under latter event, verification that a user relevant with telephone number with this input identification data (as the operator by call connection system) is arranged.

Show and transform to screen 5.The message that sends to mobile phone comprises a confirmation code.This user imports its (can read from the display screen of hand mobile phone) so that carry out verification.If it is incorrect that this user keys in, then enter screen 6, require to re-enter.

If the sign indicating number that the user keys in is correct, then enter screen 7, finished this time purchase, server sends a bill to the account relevant with this Mobile Directory Number.

Get back to Fig. 2, the block scheme of nine payment steps has been shown in the second embodiment of the present invention.

At first, show screen 11, inquire that this user verifies that with visa, cash (delivering to site operation person with mailing way) or by phone (according to the present invention) pays the bill to the user.

In step 1, the user states that he wants the phone checking, so transform to screen 12.Require the user to import a user ID, password and telephone number (indicating the phone account that the user wishes to be used to verify) are in these data of step 2 input.

Verify that by visiting a database (safeguarding) (step 3), this database comprise all details of user name, password and telephone number to all data by the Telephone Operator.

Then, retail server sends a signal to a SMS (Short Message Service) server (step 4).The SMS server sends a message, and (step 5), this message comprise an identifying code (utilize a random generator to produce as retailer server, or produce and send to retailer server by SMS server oneself) to the telephone number that is indicated by the user.

In step 6, show screen 13 to the user, and require to key in identifying code that this identifying code can be read by the display screen of its mobile phone, can finish in step 7.

In step 8, this identifying code that this retailer server verification has been remembered.Then, it just sends a bill to a billing proxy, and this billing proxy can be have traditional Fare Collection System in the industry any, as telecommunication, practicality, bank or financial institution, can be the operator of mobile phone as it.

After this Transaction Success ground is handled, send to acknowledge message (step 9) of user.

Although the present invention is illustrated at certain embodiments, the people in the present technique field, can carry out a lot of modifications within the scope of the invention.For example, although the present invention is not limited to this respect with respect to indicating the purchase stage to explain, and this method can be used to wish a lot of environment of verified users sign.

Further, although this method is illustrated with reference to a kind of telex network (mainly being to pass through the Internet), the present invention also is applicable to the occasion that user and retailer communicate by another kind of communication network, for example, the user can use a point-of-sale terminal point, observes the content that screen shows on this terminal.

Claims

1, a kind of method that is used to confirm to buy instruction based on the Internet, this method comprises:

Receive purchase information by the Internet there from the user, this has bought information declaration single purchase that takes place of user expectation;

Receive the identification information of this user ID of indication from the user by the Internet;

Utilize this identification information from a database, to extract user's the contact details on a second communication network;

By this second communication network, utilize these contact details to send a confirmation code to the user;

Receive a confirmation code from the user there by the Internet; And

The confirmation code that verification sends to the user meets the confirmation code that receives from this user.

2, according to the process of claim 1 wherein that this second communication network is a telephone network, as mobile telephone network.

3, claim 1 or 2 method, wherein said confirmation code sends with text message.

4, according to the described method of aforementioned arbitrary claim, also comprise the capital account that debts, this account is bought about this time and is associated with this user and second communication network.

5, a kind of server system that moves Internet commerce, this server has:

The interface generating means is used to produce a user interface so that receive the identification information of the purchase information and the indication user ID of the purchase of stating that the user wishes to take place from a user;

Buy satisfied device, be used to finish purchase by this purchase information appointment;

Extraction element is used for extracting the contact details of a plurality of users on a second communication network from database, and for a specific user, described contact details are based on this identification information; And

Dispensing device is used for sending a confirmation code by this second communication network to the user according to the contact details of being extracted;

Interface arrangement is used for from this user by the Internet confirmation of receipt sign indicating number; And

This server system also comprises and is used for the device that confirmation code that verification sends to this user meets the confirmation code that receives from this user, and control is bought satisfied device and finished this time purchase when meeting.

6, according to the server system of claim 5, messenger service wherein by notifying one to send to the user, the contact data that this dispensing device utilization is extracted sends this confirmation code to user, a text message that comprises this confirmation code.

7, a kind of method of verified users sign, this method comprises:

Receive the identification information of this user ID of indication from this user by one first communication network;

Utilize this identification information from a database, to extract the contact details of this user on a second communication network;

Utilize these contact details to send a confirmation code to this user by this second communication network;

Receive a confirmation code by this first communication network from the user; And

The confirmation code that verification sends to this user meets the confirmation code that receives from this user.