TW201835825A - Transaction verification method and system - Google Patents

Abstract

The present invention relates to a transaction verification method, comprising: generating transaction information of a first transaction; submitting a first request to a digital certificate applying party by a digital certificate using party; submitting a second request to a digital certificate providing party by the digital certificate applying party; querying a first secret key by the digital certificate providing party based on a first digital certificate, utilizing the first secret key to disperse identity information of the digital certificate using party to obtain a second secret key, and encrypting the transaction information of the first transaction based on the second secret key to form first dynamic information for delivery; and verifying second dynamic information sent from the digital certificate using party in a second transaction by the digital certificate providing party to indicate that the second transaction is continued or terminated, wherein the second dynamic information is corresponding to the first dynamic information. The method and the system provide the extremely convenient electronic payment mode for the user, avoid leakage of the user information, and perform dynamic information verification difficult to decrypt for each transaction.

Description

Transaction verification method and system

[0001] The present invention relates to the field of electronic payment technology, and more particularly, to a transaction verification method and system.

[0002] With the development of mobile Internet technology and Internet finance, electronic payment technology is showing a diversified development trend. Emerging payment methods such as Internet payment and mobile payment are rapidly spreading. At the same time, the security of this type of payment is being affected. Increasing attention. [0003] In the existing online payment scenario, the legality of payment transactions mainly depends on card-related information provided by cardholders. Generally, when making the first payment, the cardholder submits complete bank card information for payment on a merchant website or digital wallet website, including name, card number, validity period, CVN2 and other card surface information, and subsequent transactions need only be based on the registered The four-digit information behind the card can initiate a transaction. This fast payment relies on the merchant system or digital wallet system to store the card number information. Although the cardholder experience is relatively good, the transaction security is not good. Specifically include: 1. The merchant system needs to store a large amount of card information, which may be attacked or leaked; 2. The transaction authorization is mainly based on the card static information, and there is a possibility of forgery of transactions.

[0004] An object of the present invention is to provide a transaction verification method, which can perform dynamic information verification that is difficult to crack for each transaction, so as to enhance the security of the transaction. [0005] In order to achieve the above objective, the present invention provides a technical solution as follows: (1) A transaction verification method includes the following steps: a), a card user and a digital voucher user exchange information to generate transaction information of a first transaction; b). The digital certificate application submits a first request to the digital certificate applicant. The first request includes the transaction information of the first digital certificate and the first transaction. c) The digital certificate applicant identifies and verifies the identity information of the digital certificate user. The second request is submitted to the digital voucher provider, and the second request includes at least the identity information of the digital voucher user; d) The digital voucher provider identifies and verifies the identity information of the digital voucher applicant, and queries based on the first digital voucher A first key, and using the first key to disperse the identity information of the digital certificate user to obtain a second key, and the digital certificate provider encrypts the transaction information of the first transaction based on the second key to form a first key A dynamic information, the digital certificate provider also sends the first dynamic information to the digital certificate via the digital certificate applicant The certificate user; and e) the digital certificate provider verifies the second dynamic information received by the digital certificate user in the second transaction to instruct the second transaction to proceed or terminate based on the verification result; wherein, The second dynamic information corresponds to the first dynamic information. [0006] Step e) specifically includes: e1), the digital certificate user sends the second dynamic information, the first digital certificate, the digital certificate user's identity information, and the transaction information of the second transaction to the acquirer; e2), Based on the request of the acquirer, the transfer agency requests the digital certificate provider to verify the second dynamic information; and e3), the digital certificate provider verifies the second dynamic information and instructs the acquirer to continue the second transaction or based on the verification result. Rejected second transaction. [0007] Preferably, the verification of the second dynamic information by the digital certificate provider specifically includes: indexing based on the first digital certificate forwarded by the transfer mechanism to obtain a corresponding first key; and using the first key to decentralize the use of the digital certificate The party ’s identity information to obtain a second key; perform a message digest algorithm on the transaction information of the second transaction based on the second key to generate third dynamic information; and compare the third dynamic information with the second dynamic information Yes, to generate verification results. [0008] Preferably, the method further includes a registration phase and a digital credential generation phase. The registration phase includes: r1), the digital credential application submits business qualification information to the digital credential provider; r2), the digital credential provider reviews the business qualification Information, and after the approval is passed, the digital certificate applicant is assigned the unique identity information of the digital certificate applicant; r3), the digital certificate provider uses the third key to disperse the digital certificate applicant's identity information to obtain the fourth key Among them, the third key is held and managed by the digital certificate provider; the digital certificate generation phase includes the following steps: s1), the card user submits the first account information to the digital certificate user; s2), the direction of use of the digital certificate The digital voucher applicant submits the first application; wherein the first application includes the first account information; s3), the digital voucher applicant identifies and verifies the identity information of the digital voucher user, and submits the second application to the digital voucher provider; of which , The second application request is generated based on the first application; s4), the digital voucher provider identifies and verifies the digital voucher The identity information of the applicant, and generate a first digital certificate corresponding to the first account information, and return the first digital certificate to the digital certificate user via the digital certificate applicant. [0009] Preferably, step s4) specifically includes: the digital voucher provider judges whether the digital voucher applicant has previously submitted a second application request corresponding to the first account information; if not, the digital voucher provider generates a response corresponding to the first A first digital certificate of account information, and a fourth key to disperse the first digital certificate to obtain the first key; if so, the digital certificate provider queries the corresponding first digital certificate that has been generated; and the digital certificate provider will The first digital voucher is returned to the digital voucher consumer via the digital voucher applicant. [0010] Preferably, the digital credential provider is configured to maintain and / or store only one of the keys using a plurality of different keys. [0011] The present invention also discloses a transaction verification system, which includes: a digital voucher user, interacts with a card user to generate transaction information of a first transaction, and submits a first request to the digital voucher applicant; A request includes the first digital voucher and transaction information of the first transaction; the digital voucher applicant identifies and verifies the identity information of the digital voucher user to submit a second request to the digital voucher provider; wherein the second request includes at least The identity information of the digital certificate user; and the digital certificate provider, which identifies and verifies the identity information of the digital certificate applicant, queries the first key based on the first digital certificate, and uses the first key to disperse the use of the digital certificate The party ’s identity information to obtain a second key, and based on the second key, the transaction information of the first transaction is encrypted to form the first dynamic information, and the first dynamic information is transmitted to the digital party via the digital certificate applicant The voucher consumer; wherein the digital voucher provider is further configured to: The second dynamic information sent in the second transaction is verified to instruct the second transaction to continue or terminate based on the verification result; wherein the second dynamic information corresponds to the first dynamic information. [0012] The transaction verification method and system provided by the embodiments of the present invention use digital vouchers to speed up the transaction process and provide users with a very convenient electronic payment method; merchants only use digital vouchers to implement transactions, avoiding user information Leakage; in addition, dynamic verification of hard-to-decipher every transaction is performed to further strengthen transaction security. In dynamic information verification, the method and system also use multiple different keys, and only maintain one of them, and the leakage or theft of any one of them does not affect the security of other keys.

[0015] As shown in FIG. 1, a first embodiment of the present invention provides a transaction verification method, which includes the following steps. [0016] Step S10. The card user and the digital certificate user interact with each other to generate transaction information for the first transaction. [0017] As an example, a card user may enter information in a web page provided by a digital voucher user to initiate a first transaction. The first transaction may be the first transaction between the card user and the digital certificate user, or the N-th transaction (N> 1) between the card user and the digital certificate user. [0018] Step S12. The digital voucher submits a first request to the digital voucher applicant. [0019] Wherein, the first request includes the first digital voucher and transaction information of the first transaction. The transaction information includes, for example, transaction time, transaction place, transaction amount, and identification information of the transaction parties. [0020] Specifically, the first digital voucher can be obtained through an independent digital voucher generation process: first, the digital voucher user sends a request to the digital voucher applicant with the account information of the card user, and then the digital voucher applies Send a request to the digital voucher provider. After the digital voucher provider passes the verification, the digital voucher applicant issues the first digital voucher to the digital voucher user. The digital voucher user may hold the first digital voucher and passively update the first digital voucher as appropriate. [0021] Step S14. The digital voucher application submits a second request to the digital voucher provider. [0022] Among them, the second request may be generated based on the first request, and the second request includes at least the identity information of the digital certificate user. The second request also includes the transaction information of the first transaction and the first digital voucher. [0023] Step S16. The digital certificate provider queries the first key based on the first digital certificate to obtain a second key, and encrypts the transaction information based on the second key to form the first dynamic information. [0024] Specifically, the digital certificate provider first identifies and verifies the identity information of the digital certificate applicant, and queries the first key based on the first digital certificate, and then uses the first key to disperse the identity information of the digital certificate user. In order to obtain the second key, the digital certificate provider encrypts the transaction information of the first transaction based on the second key to form the first dynamic information, and then transmits the first dynamic information to the digital certificate through the digital certificate applicant. Consumers. [0025] Among them, the first key may be stored in the digital certificate provider, or may be generated or updated by the digital certificate provider through other methods. The first digital voucher is generated by the digital voucher provider and issued to the digital voucher user via the digital voucher applicant. [0026] The digital voucher provider uses an algorithm to form a one-to-one correspondence between the first key and the first digital voucher, so that the corresponding relationship can be used to query the first key based on the first digital voucher. In the following, an example of how this correspondence is formed will be described. [0027] The digital certificate provider also uses the first key to disperse the identity information of the digital certificate user parsed from the second request to obtain the second key. Subsequently, the digital certificate provider encrypts the transaction information of the first transaction based on the second key, generates the first dynamic information and issues it. [0028] It can be understood that the second key is different from the first key. The second key is generated on the fly and used once, and is discarded after use. The digital certificate provider does not keep it for backup. Even if the first key is leaked or stolen, the second key is not affected. [0029] Step S18: The digital voucher verifies the second dynamic information, and instructs the second transaction to continue or terminate based on the verification result. [0030] Specifically, the digital voucher provider verifies the received second dynamic information sent by the digital voucher consumer in the second transaction to instruct the second transaction to proceed or terminate based on the verification result. The second dynamic information corresponds to the first dynamic information. [0031] It should be noted that the second transaction is the next transaction performed after the first transaction. Understandably, in the second transaction, the transaction information of the second transaction no longer needs to flow through the digital voucher applicant. In other words, step S18 may cover: (1). The cardholder and the digital voucher user conduct a second information interaction to generate transaction information for the second transaction, and (2). The digital voucher user directly or The transaction information of the second transaction is sent to the digital certificate provider together with the second dynamic information through other intermediaries. [0032] As described above, the digital voucher consumer has obtained the first dynamic information in the foregoing step S16, and the digital voucher consumer holds the first dynamic information. In the second transaction, the digital voucher user can directly send the first dynamic information as the second dynamic information, or the digital voucher user processes the first dynamic information and generates a second dynamic information corresponding to the one. Delivery. That is, the second dynamic information may be completely consistent with the first dynamic information, or correspond one-to-one. [0033] After the second dynamic information is verified, the digital voucher provider instructs the second transaction to proceed or terminate based on the verification result. In short, if the second dynamic information cannot correspond to the first dynamic information that was issued by the digital certificate provider to the same digital certificate user in the previous transaction and contains the encrypted first transaction transaction information, the second transaction will Rejected, which can effectively prevent counterfeit transactions. [0034] As a further improvement of the above-mentioned first embodiment, step S18 may include the following series of sub-steps: 1). The digital certificate user uses the second dynamic information, the first digital certificate, the identity information of the digital certificate user, and the first The transaction information of the second transaction is transmitted to the acquirer; 2). The transfer agency requests the digital certificate provider to verify the second dynamic information based on the request of the acquirer; and 3). The digital certificate provider verifies the second dynamic information, and Based on the verification result, the acquirer is instructed to continue the second transaction or reject the second transaction. [0035] In this improved embodiment, in the second transaction, the digital voucher user does not directly communicate with the digital voucher provider, but implements data and / or information interaction through the acquirer and the transfer agency. [0036] Preferably, the digital certificate provider verifies the second dynamic information as follows: I. Indexing based on the first digital certificate forwarded by the transfer mechanism to obtain the corresponding first key; II. Utilizing the first Key to disperse the identity information of the user of the digital certificate to obtain the second key; III. To perform a message digest algorithm on the transaction information of the second transaction based on the second key to generate the third dynamic information; and The dynamic information is compared with the second dynamic information to generate a verification result. [0037] Among them, the third dynamic information is generated by the digital voucher provider in real time after calculation, and the second dynamic information is uploaded by the digital voucher user for verification in the second transaction, and as described above, the third The second dynamic information may be completely consistent with or corresponding to the first dynamic information; if the third dynamic information is completely consistent with the second dynamic information or has another one-to-one correspondence relationship, the third dynamic information may be regarded as the first dynamic information A restored or reproduced version of, thereby again reflecting the correspondence between the second dynamic information and the first dynamic information. In this case, the second transaction is permitted to proceed; otherwise, it will be terminated. [0038] As a further optimization of the first embodiment, the transaction verification method further includes a registration phase and a digital credential generation phase. These two phases occur before the first transaction. As a preliminary phase, the digital voucher user, applicant, and provider mutually recognize each other. More importantly, the first digital voucher can correspond to the first account number of the card user. Information. [0039] Among them, the registration phase includes: r1), the digital certificate application submits business qualification information to the digital certificate provider; r2), the digital certificate provider reviews the business qualification information, and assigns a unique The identity information of the digital certificate applicant; r3), the digital certificate provider uses the third key to scatter the identity information of the digital certificate applicant to obtain the fourth key. [0040] Among them, the third key is held and managed by the digital certificate provider, and the fourth key is used as an intermediate product for one-time use. The digital certificate provider does not keep a copy or back it up. [0041] The digital voucher generation phase includes the following steps: s1), the card user submits the first account information to the digital voucher user; s2), the digital voucher is used to submit the first application to the digital voucher applicant; Including the first account information; s3), the digital voucher applicant identifies and verifies the identity information of the digital voucher user, and submits a second application to the digital voucher provider; wherein the second application request is generated based on the first application; s4) 2. The digital certificate provider identifies and verifies the identity information of the digital certificate applicant, generates a first digital certificate corresponding to the first account information, and returns the first digital certificate to the digital certificate user via the digital certificate applicant. [0042] Preferably, the above step s4) specifically includes: the digital voucher provider determines whether the digital voucher applicant has previously submitted a second application request corresponding to the first account information; if not, the digital voucher provider generates a response corresponding to The first digital certificate of the first account information, and the fourth key is used to disperse the first digital certificate to obtain the first key; if so, the digital certificate provider queries the corresponding first digital certificate that has been generated; and the digital certificate provides The party shall return the first digital voucher to the digital voucher user via the digital voucher applicant. [0043] The digital certificate provider uses the fourth key to disperse the first digital certificate to obtain the first key, which makes a one-to-one correspondence between the first key and the first digital certificate. Therefore, in the foregoing steps, In S16, the digital certificate provider can query the first key based on the first digital certificate. However, this is only an example of forming a correspondence relationship between the first key and the first digital certificate, and it is expected that other equivalent methods are also applicable. [0044] The above-mentioned first embodiment and improvement method uses digital vouchers to accelerate the process of transactions, and can be used any number of times after generating a digital voucher. Users do not need to provide card information when conducting future transactions, thereby providing users with Provide extremely convenient electronic payment methods. On the other hand, the merchant (that is, the user of the digital voucher) does not save the user's card information, and only uses the digital voucher to implement the transaction, thereby avoiding the possibility of the merchant leaking the user's information; in addition, the above embodiment also provides The transaction is verified with dynamic information that is difficult to crack, thereby further enhancing the security of the transaction. [0045] It can be understood that according to the optimized implementation of the improved embodiment described above, the digital certificate provider can use multiple different keys, such as the first, second, third, and fourth keys, and only maintain Third key. Specifically, the first key is stored in the digital certificate provider, but is generated or updated by the digital certificate provider, for example, the first key is updated every transaction or at regular intervals; the second and fourth are used as intermediate The product is generated on the fly, without copy or backup; the third key is held and maintained by the digital certificate provider, and the system administrator can replace the third key. [0046] As shown in FIG. 2, a second embodiment of the present invention provides a transaction verification system, which includes a digital voucher user 201, a digital voucher applicant 203, and a digital voucher provider 205. [0047] The digital certificate user 201 interacts with the card user to generate transaction information of the first transaction, and submits a first request to the digital certificate applicant 202; wherein the first request includes the first digital certificate and the first transaction Transaction information. [0048] The digital certificate applicant 202 identifies and verifies the identity information of the digital certificate user 201 to submit a second request to the digital certificate provider 203; wherein the second request includes at least the identity information of the digital certificate user. [0049] The digital certificate provider 203 identifies and verifies the identity information of the digital certificate applicant 202, queries the first key based on the first digital certificate, and uses the first key to disperse the identity information of the digital certificate user 201 to Obtain the second key, and also encrypt the transaction information of the first transaction based on the second key to form the first dynamic information, and transmit the first dynamic information to the digital certificate consumer 201 via the digital certificate applicant 202 . [0050] The digital voucher provider 203 is further configured to verify the received second dynamic information sent by the digital voucher user in the second transaction to instruct the second transaction to proceed or terminate based on the verification result. [0051] Among them, the second transaction is the next transaction that occurs after the first transaction. The second dynamic information may be completely consistent with the first dynamic information, or there may be a one-to-one correspondence between the two. The verification of the second dynamic information may be performed in a manner detailed in the first embodiment. [0052] As a further improvement, the system may optionally include an acquirer 212 and a transfer agency 214. In this case, the digital certificate user 201 is configured to: in the second transaction, the second dynamic information, the first The digital certificate, the identity information of the user of the digital certificate, and the transaction information of the second transaction are transmitted to the acquirer 212. The acquirer 212 is configured to initiate a verification request to the transfer agency 214 based on an instruction from the user of the digital voucher. The transfer mechanism 214 is configured to request the digital voucher provider 205 to verify the second dynamic information based on the verification request of the acquirer 212. And, the acquirer 212 is further configured to continue the second transaction or reject the second transaction based on the verification result of the second dynamic information by the digital voucher provider 205. [0053] The above description is only for the preferred embodiments of the present invention, and is not intended to limit the protection scope of the present invention. Those skilled in the art can make various modified designs without departing from the idea of the present invention and the scope of accompanying patent applications.

[0054]

S10, S12, S14, S16, S18‧‧‧ steps

201‧‧‧ Digital Voucher User

203‧‧‧ Digital Certificate Applicant

205‧‧‧ Digital Voucher Provider

212‧‧‧Acquirer

214‧‧‧Transfer agency

[0013] FIG. 1 is a schematic flowchart of a transaction verification method according to a first embodiment of the present invention. [0014] FIG. 2 shows a module diagram of a transaction verification system provided by a second embodiment of the present invention.

Claims (10)

A transaction verification method includes the following steps: a), the card user and the digital voucher interact with each other to generate the transaction information of the first transaction; b), the digital voucher is used by the digital voucher applicant to submit the first A request, the first request includes a first digital voucher and transaction information of the first transaction; c) the digital voucher applicant identifies and verifies the identity information of the digital voucher user to the digital voucher provider Submit a second request, the second request including at least the identity information of the digital certificate user; d), the digital certificate provider identifies and verifies the identity information of the digital certificate applicant, and is based on the first certificate A digital certificate to query a first key, and use the first key to disperse the identity information of the digital certificate user to obtain a second key, and the digital certificate provider is based on the second key Encrypting the transaction information of the first transaction to form the first dynamic information, and the digital voucher provider also converts the first dynamic information Transmitted by the digital voucher applicant to the digital voucher consumer; and e) the digital voucher provider verifies the second dynamic information received and sent by the digital voucher consumer in a second transaction To instruct the second transaction to proceed or terminate based on the verification result; wherein the second dynamic information corresponds to the first dynamic information. The method according to claim 1, wherein the step e) specifically includes: e1), the digital voucher consumer uses the second dynamic information, the first digital voucher, and the digital voucher consumer's The identity information and the transaction information of the second transaction are transmitted to the acquirer; e2), the transfer agency requests the digital voucher provider to verify the second dynamic information based on the request of the acquirer; and e3) 2. The digital voucher provider verifies the second dynamic information, and instructs the acquirer to continue the second transaction or reject the second transaction based on the verification result. The method according to claim 2, wherein the verification of the second dynamic information by the digital voucher provider specifically includes: 索引 indexing based on the first digital voucher forwarded by the transfer mechanism to obtain the corresponding the A first key; 分散 using the first key to disperse the identity information of the user of the digital certificate to obtain the second key; 进行 performing transaction information of the second transaction based on the second key A message digest algorithm to generate third dynamic information; and comparing the third dynamic information with the second dynamic information to generate the verification result. The method according to claim 1, further comprising a registration phase and a digital credential generation phase. The registration phase includes: r1), the digital credential application submits business qualification information to the digital credential provider; r2), The digital voucher provider reviews the business qualification information, and assigns the unique identity information of the digital voucher applicant to the digital voucher applicant after the verification is passed; r3), the digital voucher provider uses a third Key to disperse the identity information of the digital certificate applicant to obtain a fourth key; wherein the third key is held and managed by the digital certificate provider; 阶段 the digital certificate generation phase includes the following steps: s1), the card user submits the first account information to the digital voucher user; s2), the digital voucher user submits a first application to the digital voucher applicant; wherein the first application includes the First account information; s3), the digital voucher applicant identifies and verifies the digital voucher user's identity Information, and submit a second application to the digital voucher provider; wherein the second application request is generated based on the first application; s4), the digital voucher provider identifies and verifies the digital voucher applicant Generating the first digital voucher corresponding to the first account information, and returning the first digital voucher to the digital voucher consumer via the digital voucher applicant. The method according to claim 4, wherein the step s4) specifically includes: the digital voucher provider judges whether the digital voucher applicant has previously submitted the second corresponding to the first account information An application request; if not, the digital voucher provider generates the first digital voucher corresponding to the first account information, and uses the fourth key to scatter the first digital voucher to obtain the first A key; if yes, the digital voucher provider queries the corresponding first digital voucher that has been generated; and the digital voucher provider returns the first digital voucher to the via the digital voucher applicant Digital voucher consumer. The method of claim 5, wherein the digital certificate provider is configured to use a plurality of different keys while maintaining only one of the keys. The method according to claim 6, wherein the plurality of keys include at least the first key, the second key, the third key, and the fourth key, and one of the keys is the Third key. A transaction verification system includes: a digital voucher user, interacting with a card user to generate transaction information of a first transaction, and submit a first request to the digital voucher applicant; wherein the first request includes the first digital Voucher and transaction information of the first transaction; the digital voucher applicant, which identifies and verifies the identity information of the digital voucher user to submit a second request to the digital voucher provider; wherein the second request Including at least the identity information of the digital certificate user; and the digital certificate provider that identifies and verifies the identity information of the digital certificate applicant, and queries the first key based on the first digital certificate, and Using the first key to disperse the identity information of the user of the digital certificate to obtain a second key, and further encrypting the transaction information of the first transaction based on the second key to form a first key A dynamic information, and transmitting the first dynamic information to the digital certificate user via the digital certificate applicant; The digital voucher provider is further configured to verify the received second dynamic information sent by the digital voucher consumer in a second transaction to instruct the second transaction to proceed or based on the verification result. Terminate; wherein the second dynamic information corresponds to the first dynamic information. The system according to claim 8, further comprising an acquirer and a transfer agency, wherein the digital voucher user is configured to: In the second transaction, the second dynamic information, the The first digital certificate, the identity information of the digital certificate user, and the transaction information of the second transaction are transmitted to the acquirer; the acquirer is configured to: based on an instruction of the digital certificate user, Initiate a verification request to the transfer agency; the transfer mechanism is configured to: request the digital voucher provider to verify the second dynamic information based on the verification request of the acquirer; and the acquirer further It is configured to: 继续 continue the second transaction or reject the second transaction based on the verification result of the second dynamic information by the digital voucher provider. The system according to claim 9, wherein the digital voucher provider is configured to perform the following items to verify the second dynamic information: 索引 index based on the first digital voucher provided by the transfer mechanism to obtain a corresponding Using the first key; 分散 using the first key to disperse the identity information of the user of the digital certificate to obtain the second key; 消息 message the transaction information based on the second key A digest algorithm to generate third dynamic information; and comparing the third dynamic information with the second dynamic information to generate the verification result.