TW201933171A - Card reading transaction system and method for operating a card reading transaction system - Google Patents

Abstract

A card reading transaction system includes a transaction control device, an intermediate server, a smart card server, an internet dongle, and a card reader. The transaction control device transmits a first transaction message according to a transaction type and a transaction amount. The intermediate server generates a transaction request message according to the first transaction message. The smart card server generates a transaction confirmation message according to the transaction request message. A smart card transaction application interface of the intermediate server generates a first card reader operation message according to the transaction confirmation message. An intermediate application interface of the intermediate server converts a transmission format of the first card reader operation message to generate a second card reader operation message. The internet dongle receives the second card reader operation message through internet and converts a transmission format of the second card reader operation message to generate a third card reader operation message for the card reader to debit or credit the transaction amount.

Description

Card reading transaction system and method of operating card reading transaction system

The present invention relates to a card reading transaction system, and more particularly to a card reading transaction system capable of utilizing an intermediary server to simplify the hardware required by the client.

The paperless trading model provides consumers with convenient choices, but for many merchants, in order to provide a variety of different paperless transactions, such as credit cards, smart cards (free cards) or mobile payments, etc., often There is a need to connect to financial services providers who provide services through different electronic devices. Since the equipment device needs to bear additional costs and needs to apply to the financial industry, it is inconvenient for the merchant.

For example, in the prior art, in order to provide a smart card, such as a leisure card or a card transaction service, in addition to setting a card reader, a merchant needs to apply to a provider providing financial services to connect with a transaction server. Sales device. The sales device can make a transaction request with the remote financial server, and after the transaction request is confirmed, control the card reader to debit or add value to the smart card. That is to say, the merchant must connect to the transaction server through the sales device provided by the financial industry to complete the transaction, so it is less flexible in use.

An embodiment of the present invention provides a card reading transaction system, which includes a transaction control device, an intermediary server, a smart card server, a network converter, and a card reader.

The transaction control device transmits the corresponding first transaction message according to the specified transaction type and the specified transaction amount. The mediation server includes a smart card transaction program interface and an intermediary program interface. The smart card transaction program interface generates a transaction request message based on the first transaction message.

After verification, the smart card server generates a transaction confirmation message to the mediation server based on the transaction request message. After receiving the transaction confirmation message, the smart card transaction program interface generates a first card reader operation message according to the transaction confirmation message, and the intermediary program interface converts the transmission format of the first card reader operation message to generate a second card reader operation message. And transmitting the second card reader operation message via the Internet.

The network converter receives the second card reader operation message and converts the transmission format of the second card reader operation message to generate a third card reader operation message. The card reader performs a deduction operation or a value-adding operation on the smart card located within the effective distance of the card reader according to the third card reader operation message.

Another embodiment of the present invention provides a method for operating a card reading transaction system. The card reading transaction system includes a transaction control device, an intermediary server, a smart card server, a network converter, and a card reader. The mediation server includes an intermediary program. Interface and smart card trading program interface.

The method for operating the card reading transaction system comprises the transaction control device transmitting the corresponding first transaction message according to the specified transaction type and the specified transaction amount, and the smart card transaction program interface generates the transaction request message according to the first transaction message, and after the verification, the smart card servo The device generates a transaction confirmation message according to the transaction request message to the mediation server. After receiving the transaction confirmation message, the smart card transaction program interface generates the first card reader operation message according to the transaction confirmation message, and the intermediary program interface converts the first card reader operation. The transmission format of the message is to generate a second card reader operation message, the intermediary program interface transmits the second card reader operation message via the Internet, and after receiving the second card reader operation message, the network converter converts the second card reader The transmission format of the operation message is to generate a third card reader operation message, and the card reader performs a deduction operation or a value-adding operation on the smart card located within the effective distance of the card reader according to the third card reader operation message.

1 is a schematic diagram of a card reading transaction system 100 in accordance with an embodiment of the present invention. The card reading transaction system 100 includes a transaction control device 110, a network converter 120, a card reader 130, an intermediary server 140, and a smart card server 150.

The transaction control device 110 can be, for example, a smart phone, a tablet, or a point of sale (POS). The user can specify the transaction type and the transaction amount through the transaction control device 110, and the transaction control device 110 can transmit the corresponding first transaction message A1 according to the specified transaction type selected by the user and the specified transaction amount.

The mediation server 140 includes a smart card transaction program interface 142 and an intermediary interface 144. The smart card transaction program interface 142 can generate a transaction request message B1 according to the first transaction message A1 and transmit it to the smart card server 150. In some embodiments of the present invention, the transaction control device 110 may register on the mediation server 140 in advance and transmit the first transaction message A1 through an interface and transmission format compatible with the mediation server 140. For example, the transaction control device 110 can connect to the mediation server 140 by opening the corresponding transaction application page, and can log in through the previously registered account password to ensure the authenticity and security of the transaction message. In some embodiments of the present invention, the mediation server 140 may also include other security mechanisms to filter out noise and attacks on the network. For example, the mediation server 140 may be configured with a demilitarized zone (DMZ). Use Error Detection Code (EDC) and Error Correction Code (ECC) to ensure the security and stability of network communication.

The smart card server 150 is a server that provides smart card financial services. After the smart card server 150 performs verification, the transaction confirmation message C1 can be generated based on the transaction request message B1 to the mediation server 140. That is to say, in the prior art, the store owner must apply to obtain the connection device from the financial institution before being able to connect to the smart card server 150 to confirm the transaction proceeding. However, in the card reading transaction system 100, the store only needs to go online. When the intermediary server 140 performs registration and login, the smart card transaction program interface 142 in the mediation server 140 can be connected to the smart card server 150 for transaction without additional hardware.

After the smart card transaction program interface 142 receives the transaction confirmation message C1, the first card reader operation message D1 can be generated according to the transaction confirmation message C1, so that the card reader 130 can perform the corresponding deduction or value-adding operation. In some embodiments of the present invention, since the smart card transaction program interface 142 is compatible with the smart card server 150, the format of the input information and the output information is limited. In order to transmit the operation information of the card reader through the Internet, the mediation interface 144 can convert the transmission format of the first card reader operation message D1 to generate the second card reader operation message D2, and transmit the second message via the Internet. The card reader operates message D2.

The network converter 120 can receive the second card reader operation message D2 and convert the transmission format of the second card reader operation message D2 to generate a third card reader operation message D3, so that the card reader 130 can be read according to the third reading. The card machine operation message D3 performs a deduction operation or a value-adding operation on the smart card S1 located within an effective distance of one of the card readers 130. In some embodiments of the present invention, the smart card S1 may include an electronic tag and a corresponding line, and the card reader 130 can contact the smart card S1 in a contactless manner, such as a near field communication (NFC) communication standard. For reading and writing operations, for example, the smart card S1 can be, for example, a leisure card and a card.

That is to say, the network converter 120 can be, for example, an Internet of Things (IoT) system, and a wireless network module (Wi-Fi dongle) that enables the appliance to have a networking function. In this way, the mediation server 140 can be used to control the card reader 130 in a remote manner. In some embodiments of the present invention, the card reader 130 and the network converter 120 can transmit information using the recommended standard RS232 of the American Electronics Industry Association. In this case, the network converter 120 must be The second card reader operation message D2 transmitted in the packet format is converted into a third card reader operation message D3 supporting the RS232 transmission standard.

After the execution of the deduction operation or the value-adding operation is completed, the card reader 130 may transmit the first operation confirmation message E1. After receiving the first operation confirmation message E1, the network converter 120 may convert the transmission format of the first operation confirmation message E1 to generate a second operation confirmation message E2, and transmit the second operation confirmation message E2 via the Internet. After receiving the second operation confirmation message E2, the mediation interface 144 can convert the transmission format of the second operation confirmation message E2 to generate a third operation confirmation message E3, so that the smart card transaction program interface 142 can parse the third operation confirmation message, and Confirm that the transaction is complete.

In some embodiments of the invention, the mediation server 140 may also include a memory 146. The mediation server 140 can store the transaction record in the memory 146 for later query. For example, the mediation server 140 may store the specified transaction type and the specified transaction amount corresponding to the first transaction message A1 in the memory 146 in an Extensible Markup Language (XML) format. In addition, the mediation server 140 may also transmit the transaction result and details to the transaction control device 110 for confirmation by the user after the confirmation transaction is completed.

In addition, in order to ensure the security of the transaction, in some embodiments of the present invention, the mediation server 140 and the network switch 120 can pass the Transport Layer Security (TLS) protocol and the secure communication end layer ( At least one of the Secure Sockets Layer (SSL) protocol, the AES encryption algorithm, and the RSA encryption algorithm encrypts and decrypts the transmitted message to ensure network transmission security. For example, in the above embodiment, the first transaction message A1, the second card reader operation message D2, and the second operation confirmation message E2 can be encrypted in the above manner.

For example, the network converter 120 can also perform authentication login in the mediation server 140 beforehand, and can connect with the mediation server 140 when booting up and obtain the corresponding encryption key after verification to make the network The transmission is more secure.

In addition, in some embodiments of the present invention, the card reader 130 may have a physical security access module (SAM) provided by the smart card server 150 to ensure that the card reader 130 can obtain verification and The smart card S1 operates. However, the invention is not limited thereto. In other embodiments of the present invention, the card reading transaction system 100 may also include a virtual security access module 160, which can replace the entity by obtaining the time-limited key required to operate the card reader 130 to the smart card server 150. Secure access module. In the embodiment of FIG. 1, the virtual secure access module 160 can be disposed in the mediation server 140. However, in other embodiments, the virtual secure access module 160 can also be disposed in other devices, such as the network switch 120 or the transaction control device 110. In this way, the merchant only needs the general card reader 130 to provide the smart card transaction service, and does not need to apply for the hardware device and the physical security access module to the financial industry individually, thereby greatly improving the flexibility of use.

2 is a flow diagram of a method 200 of operating a card reading transaction system 100, the method 200 including steps S210 through S284.

S210: The transaction control device 110 transmits the corresponding first transaction message A1 according to the specified transaction type and the specified transaction amount;

S220: The smart card transaction program interface 142 generates a transaction request message B1 according to the first transaction message A1;

S230: After performing verification, the smart card server 150 generates a transaction confirmation message C1 to the mediation server 140 according to the transaction request message B1;

S240: After receiving the transaction confirmation message C1, the smart card transaction program interface 142 generates a first card reader operation message D1 according to the transaction confirmation message C1;

S242: The mediation program interface 144 converts the transmission format of the first card reader operation message D1 to generate a second card reader operation message D2;

S244: The mediation program interface 144 transmits the second card reader operation message D2 via the Internet;

S246: After receiving the second card reader operation message D2, the network converter 120 converts the transmission format of the second card reader operation message D2 to generate a third card reader operation message D3;

S250: The card reader 130 performs a deduction operation or an adding operation on the smart card S1 located within the effective distance of the card reader 130 according to the third card reader operation message D3;

S260: After performing the deduction operation or the value-adding operation is completed, the card reader 130 transmits a first operation confirmation message E1;

S270: The network converter 120 receives the first operation confirmation message E1;

S280: The network converter 120 converts the transmission format of the first operation confirmation message E1 to generate a second operation confirmation message E2;

S282: The network converter 120 transmits a second operation confirmation message E2 via the Internet;

S284: After receiving the second operation confirmation message E2, the mediation interface E2 converts the transmission format of the second operation confirmation message E2 to generate a third operation confirmation message E3, so that the smart card transaction program interface 142 parses the third operation confirmation message E3. .

In some embodiments of the present invention, the mediation server 140 may further include a memory 146. The method 200 may further include storing the specified transaction type corresponding to the first transaction message A1 and the specified transaction amount in the memory 146 as a transaction. The record is for the user to check in later.

In addition, in order to increase the security of the network transmission, in some embodiments of the present invention, the method 200 may further include using at least one of a transport layer security protocol, a secure communication end layer protocol, an AES encryption algorithm, and an RSA encryption algorithm. The step of encrypting the first transaction message A1 and the second card reader operation message D2. That is to say, the card reading transaction system 100 can use one or more encryption methods to encrypt the data transmitted by the network according to actual needs, so as to ensure the security and stability of the transaction process. In some embodiments of the present invention, the mediation server 140 may also update the key required for encryption after each transaction is completed, so that the intermediary server 140 and the network converter 120 can be maintained. Network transmission security.

Moreover, the method 200 can also include causing the virtual secure access module 160 to register with the smart card server 150 to obtain the time-limited key required to operate the card reader 130. That is to say, the card reading transaction system 100 can obtain the time-sensitive key through the virtual security access module 160, and can use the card reader 130 to operate the smart card S1 within the aging period. In this way, not only can the security of the transaction be maintained, but also the hardware devices required by the user can be simplified, and the flexibility of use is greatly improved.

In summary, the card reading transaction system and the method for operating the card reading transaction system provided by the embodiments of the present invention can connect the card reader to the mediation server through the network converter and connect through the mediation server. To the smart card server that provides trading services. Therefore, the user only needs to complete the registration on the mediation server, and can provide the smart card transaction service without having to apply for or set up a hardware device compatible with the smart card server, which greatly improves the convenience and the use. elasticity. The above are only the preferred embodiments of the present invention, and all changes and modifications made to the scope of the present invention should be within the scope of the present invention.

100‧‧‧Reading Card Trading System

110‧‧‧Transaction control device

120‧‧‧Network converter

130‧‧‧ card reader

140‧‧‧Intermediary server

142‧‧‧Smart Card Trading Program Interface

144‧‧‧Intermediary interface

146‧‧‧ memory

150‧‧‧Smart Card Server

160‧‧‧Virtual Security Access Module

A1‧‧‧First trading message

B1‧‧‧Transaction request message

C1‧‧‧Transaction Confirmation Message

D1‧‧‧First card reader operation message

D2‧‧‧Second card reader operation message

D3‧‧‧ Third card reader operation message

E1‧‧‧First operation confirmation message

E2‧‧‧Second operation confirmation message

E3‧‧‧ Third operation confirmation message

S1‧‧‧Smart Card

200‧‧‧ method

Steps S210 to S284‧‧

FIG. 1 is a schematic diagram of a card reading transaction system according to an embodiment of the present invention. Figure 2 is a flow chart showing the method of operating the card reading transaction system of Figure 1.

Claims (12)

A card reading transaction system, comprising: a transaction control device, configured to transmit a corresponding one of the first transaction messages according to a specified transaction type and a specified transaction amount; and an intermediary server, comprising: a smart card transaction program interface, Generating a transaction request message according to the first transaction message; and an intermediary program interface; a smart card server, configured to generate a transaction confirmation message to the mediation server according to the transaction request message after verification, wherein: The smart card transaction program interface is further configured to generate a first card reader operation message according to the transaction confirmation message after receiving the transaction confirmation message; the intermediary program interface is configured to convert one of the first card reader operation messages Formatting to generate a second card reader operation message, and transmitting the second card reader operation message via an internet; a network converter for receiving the second card reader operation message and converting the second a card reader operation message transmission format to generate a third card reader operation message; and a card reader for use according to the third card reader For performing a post-debit operation or a value located within a smart card reader that one effective distance. The card reading transaction system of claim 1, wherein the transaction control device is a smart phone, a tablet computer or a point of sale (POS). The card reading transaction system of claim 1, wherein the mediation server further comprises a memory for storing the specified transaction type corresponding to the first transaction message and the specified transaction amount. The card reading transaction system of claim 1, wherein: the card reader is further configured to transmit a first operation confirmation message after performing the deduction operation or the value-adding operation is completed; the network converter is additionally used Receiving the first operation confirmation message, converting a transmission format of the first operation confirmation message to generate a second operation confirmation message, and transmitting the second operation confirmation message via the Internet; and the intermediary program interface is additionally used Receiving the second operation confirmation message, and converting one of the second operation confirmation message transmission formats to generate a third operation confirmation message, so that the smart card transaction program interface parses the third operation confirmation message. The card reading transaction system of claim 1, wherein the first transaction message and the second card reader operation message utilize a Transport Layer Security (TLS) protocol and a secure communication layer (Secure Sockets Layer). At least one of the SSL) protocol, the AES encryption algorithm, and the RSA encryption algorithm are encrypted to ensure the security of the network transmission. The card reading transaction system of claim 1, further comprising a virtual security access module (SAM) for obtaining, from the smart card server, a time-limited key required for operating the card reader . The card reading transaction system of claim 6, wherein the virtual security access module is disposed in the mediation server, the network converter, or the transaction control device. A method for operating a card reading transaction system, the card reading transaction system comprising a transaction control device, an intermediary server, a smart card server, a network converter and a card reader, the mediation server including a mediation interface And a smart card transaction program interface, the method comprising: the transaction control device transmitting a corresponding one of the first transaction messages according to a specified transaction type and a specified transaction amount; the smart card transaction program interface generates a transaction request according to the first transaction message After the verification, the smart card server generates a transaction confirmation message to the mediation server according to the transaction request message; after receiving the transaction confirmation message, the smart card transaction program interface generates a message according to the transaction confirmation message. a first card reader operation message; the mediation interface converts a transmission format of the first card reader operation message to generate a second card reader operation message; the mediation interface transmits the second read via an internet network Card machine operation message; after receiving the second card reader operation message, the network converter converts the first a second card reader operation message transmission format to generate a third card reader operation message; and the card reader according to the third card reader operation message to a smart card located within an effective distance of the card reader Perform a chargeback operation or a bonus operation. The method of claim 8, wherein the mediation server further comprises a memory, and the method further comprises the mediation server storing the specified transaction type corresponding to the first transaction message and the specified transaction amount in the Memory. The method of claim 8, further comprising: after performing the deduction operation or the value-adding operation is completed, the card reader transmits a first operation confirmation message; after receiving the first operation confirmation message, the connection The network converter converts one of the first operation confirmation messages to generate a second operation confirmation message; the network converter transmits the second operation confirmation message via the Internet; and after receiving the second operation confirmation message The mediation interface converts one of the second operation confirmation messages to generate a third operation confirmation message for the smart card transaction program interface to parse the third operation confirmation message. The method of claim 1, further comprising: utilizing at least a Transport Layer Security (TLS) protocol, a Secure Sockets Layer (SSL) protocol, an AES encryption algorithm, and an RSA encryption algorithm. The first transaction message is encrypted; and at least the Transport Layer Security (TLS) protocol, the Secure Sockets Layer (SSL) protocol, the AES encryption algorithm, and the RSA encryption algorithm are used. One encrypts the second card reader operation message. The method of claim 1, wherein the card reading transaction system further comprises a virtual security access module (SAM), the method further comprising: the virtual security access module registering with the smart card server Get one of the time-limited keys needed to operate the card reader.