TW201944311A - A system and a method for mobile transaction in enterprise - Google Patents

Abstract

A system for mobile transaction in enterprise is provided. A processing unit of the system obtains a bank account of a releaser and a mobile number of the releaser which are corresponding to a network account of the releaser. The processing unit further provides a setting page of transaction confirmation code. When receiving a transaction confirmation code, the processing unit stores the transaction confirmation code into a storage unit of the system, where the transaction confirmation code is corresponding to the network account of the releaser. The processing unit further provides a to-be-confirmed list when receiving a login information corresponding to the network account of the releaser and a password of the releaser. The processing unit further performs a transaction procedure when receiving a to-be-confirmed item and the transaction confirmation code.

Description

System and method applied to corporate mobile trading

The present invention relates to a digital financial transaction technology, and more particularly, to a system and method applied to corporate mobile transactions.

In the mobile banking of existing enterprises, only one entity time password (OTP) can be used, for example: entity dynamic password token (Token). However, the physical dynamic password vehicle needs to be purchased additionally, and it must be carried around when used, which not only reduces the convenience, but also increases the risk of losing the dynamic password vehicle. Therefore, how to improve the convenience of the enterprise mobile bank while maintaining the security of the enterprise mobile bank is a subject faced by those skilled in the art.

The invention provides a system and method applied to corporate mobile transactions, so as to provide corporate users to authorize transactions through mobile banks, and then complete the transactions.

The system applied in the enterprise mobile transaction disclosed in this disclosure has a communication unit, a storage unit, and a processing unit. The communication unit receives and transmits information. The storage unit stores a to-be-checked list, a passer network account number corresponding to the passer, a passer network password, and a passer bank account number. The processing unit is connected to the communication unit and the storage unit. The processing unit receives the login information corresponding to the passer's network account and the passer's network password through the communication unit, and determines that the passer's account is the first login, obtains the passer's bank account corresponding to the passer's online account, and the processing unit is connected Go to the bank database to obtain the mobile phone number of the passer from the bank database according to the bank account of the passer. The processing unit also sends the mobile phone verification code to the mobile phone number of the passer. Determine whether the received mobile phone verification code is the same as the transmitted mobile phone verification code. When the received mobile phone verification code is the same as the transmitted mobile phone verification code, the processing unit displays the transaction confirmation code setting page, and when the transaction confirmation code is received , Store the transaction confirmation code in the storage unit and correspond to the releaser's online account. The processing unit also provides a checklist when receiving login information corresponding to the passer's online account number and passer's password. The processing unit also executes the transaction procedure based on the items to be checked when it receives the items to be checked and the transaction confirmation code in the list to be checked.

The method applied to corporate mobile transactions disclosed in this disclosure is applicable to a system applied to corporate mobile transactions, where the system stores a checklist, a passer's online account number corresponding to the passer, a passer's network password, and a passer's bank account. This method has the steps of: receiving login information corresponding to the passer's network account and passer's network password; determining whether the passer's account is the first login; when the passer's account is the first time login, obtaining the passer corresponding to the passer's online account Bank account number and connect to the bank database to obtain the mobile phone number of the passer from the bank database according to the bank account of the passer; send the mobile phone verification code to the mobile phone number of the passer; when the mobile phone verification code is received, determine the received mobile phone Whether the verification code is the same as the verification code sent by the mobile phone; when the received verification code is the same as the verification code sent by the mobile phone, the transaction confirmation code setting page is displayed; when the verification code is received, the transaction confirmation code is stored in the system And associate the transaction confirmation code to the passer ’s online account, where when receiving corresponds to Walker Internet account, when released by the time of login password, provide a list to be nuclear, and when receiving the list to be the nucleus of the pending nuclear program and transaction confirmation code based nuclear program to be executed transaction procedures.

Based on the above, the disclosed system and method applied to corporate mobile transactions is to provide a passer to verify through a bank account, so as to extend the basis for verifying the user's identity to the verified data in the bank database, thereby increasing identity authentication. Reliability. Based on this, the enterprise side no longer needs to spend extra costs to purchase physical dynamic password tokens, and can still maintain the releaser to complete the transaction process using the security of the mobile bank.

In order to make the above features and advantages of the present invention more comprehensible, embodiments are hereinafter described in detail with reference to the accompanying drawings.

The disclosed system and method applied to corporate mobile transactions are used to provide enterprises with transaction authorization through mobile banks to perform transactions.

In detail, in order to assist enterprises with internal security control, in the use of corporate online banking, three roles of managerial level, releaser, and handling are set up. Under security considerations, administrator permissions and releaser permissions must be applied to the bank, and related permissions can only be set after passing the bank security check.

Accounts with administrator privileges can set the role of managing accounts. For example, when a company recruits a new employee in the accounting department, it can give the employee permission to handle it through an account with administrator authority.

Accounts with handling authority can set up various transactions for the enterprise, for example, set a transfer of 50,000 yuan in salary to account name A, account number OOOOOOO on April 2, 2018. However, after the transaction is set, the trading system will not actually execute the transaction procedure. The trading system will wait for this transaction program to release the transaction through an account with permission to execute the transaction program.

Accounts with permission to release only have permission to release transactions and do not have permission to set transactions. In other words, users with an account with permission to release can only agree to transactions or different transactions. The three roles of manager, releaser and manager are balanced to provide internal security control within the enterprise.

However, among these accounts, for an account with release authority, since the release transaction will substantially dispose of the company's assets, it is necessary to pay more attention to the safety of financial transactions required by the releaser when releasing the transaction. Based on this, the disclosed system and system applied to corporate mobile transactions not only provide a mechanism for passer authentication, but also take into account the convenience of the passer and then complete the transaction process.

FIG. 1 is a schematic diagram of a system for corporate mobile trading according to an embodiment of the disclosure. Referring to FIG. 1, a system 100 applied to a corporate mobile transaction includes a communication unit 110, a storage unit 120, and a processing unit 130.

The communication unit 110 is used for receiving and transmitting information, and is implemented by a communication chip. For example, the communication chip may be a Global System for Mobile communication (GSM), a Personal Handy-phone System (PHS), or a Code Division Multiple Access (CDMA) system. Wideband Code Division Multiple Access (WCDMA) system, Long Term Evolution (LTE) system, Worldwide interoperability for Microwave Access (WiMAX) system, Wireless Fidelity , Wi-Fi) system or Bluetooth signal transmission components.

The storage unit 120 stores various codes and data for running the system 100 applied to corporate mobile transactions. The storage unit 120 is, for example, any type of fixed or removable random access memory (RAM), read-only memory (ROM), flash memory (flash memory), and hard disk. (Hard Disk Drive, HDD), solid state drive (Solid State Drive, SSD) or similar components or a combination of the above components.

The processing unit 130 is connected to the communication unit 110 and the storage unit 120. The processing unit 130 may be a Central Processing Unit (CPU), or other programmable general purpose or special purpose microprocessor (Microprocessor), digital signal processor (DSP), or programmable Controller, Application Specific Integrated Circuit (ASIC) or other similar components or a combination of the above components, this disclosure is not limited to this.

It should be noted that, in the embodiment of the present disclosure, the storage unit 120 stores a passer network account number, a passer network password, and a passer bank account number corresponding to the passer. In detail, according to the foregoing, the authority of the releaser must be authorized by the assistance of the bank, so the online account of the releaser and the network password of the releaser will be set by the bank and stored in the storage unit 120 in advance.

The passer bank account number is entered by the administrator through the first electronic device and stored in the storage unit 120. That is, when a corporate customer wants to use the system 100 applied to corporate mobile transactions to execute the method applied to corporate mobile transactions, it is only necessary to enter and store the banker's bank account in the storage unit 120. In this embodiment, the first electronic device is a terminal device used by a user, such as a personal computer, a notebook computer, a handheld device, and the like, and does not restrict the model, brand, operating system, and the releaser's bank account is released Account of the current deposit opened by the individual in the bank.

In addition, in the embodiment of the present disclosure, the processing unit 130 accesses the bank database 20 through the communication unit 110. The bank database 20 stores basic data of each bank transaction object (for example, self-employed, business, etc.), such as: name, identity card number / unified number, telephone, business records, and the like. In this embodiment, the bank database 20 is independent of the system 100 applied to corporate mobile transactions. However, in other embodiments of the present disclosure, the bank database 20 may also be set up in the system 100 applied to corporate mobile transactions, and the present disclosure is not limited thereto.

Please further refer to FIG. 2. FIG. 2 is a flowchart illustrating a method for applying a system applied to an enterprise mobile transaction according to an embodiment of the present disclosure. The following describes the flow of the system operation method applied to the enterprise mobile transaction according to the disclosure applied to the enterprise mobile transaction in conjunction with FIG. 1 and FIG. 2.

In step S210, the processing unit 130 receives the login information corresponding to the passer network account and the passer network password through the communication unit 110. In detail, the passer enters the assigned passer network account number and passer network password through the mobile banking application of the second electronic device as the login information of the system 100 connected to the enterprise mobile transaction. After receiving the login information, the processing unit 130 determines whether the received passer network account and passer network password are the same as the passer network account and passer network stored in the storage unit 120 according to the passer network account. The passwords are the same. If not, the processing unit 130 sends a login failure message to the mobile banking application of the second electronic device to notify the user that the login event is rejected. If they match, the processing unit 130 proceeds to step S220.

It should be noted that, in the following description, the second electronic device represents the electronic device used by the lender to install the mobile banking application and log in to the system 100 applied to the enterprise mobile transaction. However, in actual operation, the releaser will also replace the device held by him due to actual needs, and this disclosure does not limit it. The type of the second electronic device is similar to that of the first electronic device, and details are not described herein.

In step S220, the processing unit 130 determines whether the passer account is the first login. In this embodiment, the first login means that the releaser has not completed the setup process of the first login. That is to say, no matter how many times the releaser logs in to the system 100 for corporate mobile transactions, as long as the releaser has not completed the first login setup flow, the processing unit 130 will consider the releaser to be the first login. For example, the setting process for the first login is, for example, setting a transaction confirmation code. When the transaction confirmation code is a null value or a preset value, the processing unit 130 determines that the releaser is logging in for the first time.

If the releaser is logging in for the first time, in step S230, the processing unit 130 reads the releaser bank account corresponding to the releaser's online account in the storage unit 120, and connects to the bank database 20 through the communication unit 110, in accordance with Releaser bank account to obtain releaser mobile phone number. In detail, after the manager inputs the passer bank account through the first electronic device, the processing unit 130 associates the passer bank account with the passer network account. Therefore, when the releaser logs in to the system 100 applied to corporate mobile transactions through the releaser's online account, the processing unit 130 can find the corresponding releaser's bank account through the releaser's online account.

In addition, the processing unit 130 may be connected to the bank database 20 through the communication unit 110. The bank database 20 stores the basic data of all the objects of business transactions. Therefore, the processing unit 130 can find the basic data corresponding to the bank account of the banker in the bank database 20 through the banker's bank account.

In step S235, the processing unit 130 further sends the mobile phone verification code to the mobile phone number of the mobile phone corresponding to the mobile phone number of the mobile phone banker in the bank database 20. In step S240, the processing unit 130 further receives the mobile phone verification code through the communication unit 110, and determines whether the received mobile phone verification code is consistent with the transmitted mobile phone verification code. In detail, after receiving the mobile phone verification code through the mobile phone number of the mobile phone registered in the banking system, the passer must re-enter the mobile phone verification code through the mobile banking application of the second electronic device to verify the identity of the passer. .

Since the basic data associated with the releaser stored in the bank database 20 is the data that the releaser has checked when opening the account, the mobile phone number of the releaser stored in the bank database 20 is reliable data. By using the releaser's bank account in the bank database 20 and the corresponding releaser's mobile phone number, the basis for verifying the user's identity can be further extended to the data that the bank database 20 has checked, thereby increasing the reliability of the identity verification.

If the received mobile phone verification code is inconsistent with the mobile phone verification code sent by the processing unit 130, the processing unit 130 determines that the mobile phone verification code has expired after a preset time (for example, 5 minutes), and ends the first login process. At this time, the setup process for the first login fails.

In step S245, if the received mobile phone verification code is consistent with the mobile phone verification code sent by the processing unit 130, the processing unit 130 will guide the second electronic device to display a transaction confirmation code setting page. The transaction confirmation code is a password set by the releaser and used to confirm the release. In order to ensure the security of the transaction, the releaser must enter the transaction confirmation code again before each release to increase the security of the transaction. The transaction confirmation code is, for example, a 6-digit password, an 8-digit alphanumeric password, etc., and the disclosure is not limited thereto.

In step S250, when receiving the transaction confirmation code through the communication unit 110, the processing unit 130 stores the transaction confirmation code in the storage unit 120 and corresponds to the passer's online account. After that, the passer can release the transaction by entering the transaction confirmation code.

It should be noted that, in another embodiment of the present disclosure, the processing unit 130 also generates a token according to the bank account of the releaser, and transmits the token to the second electronic device. After that, in addition to the passer having to enter a transaction confirmation code to release the transaction, the processing unit 130 also requests the second electronic device to return a message of a token. Since this token is only stored in the second electronic device, the processing unit 130 can further confirm the second electronic device held by the passer and used at the first login by checking the token held by the second electronic device. The same electronic devices are used to enhance the safety of release.

In another embodiment of the present disclosure, the processing unit 130 further generates a unique device identification code based on the hardware information of the second electronic device of the releaser, the installed mobile banking application, and the current system time, and records it in the In the storage unit 120. When the releaser then logs in to the system 100 applied to corporate mobile transactions through the second electronic device, the processing unit 130 further verifies that the source of this login information is consistent with the device identification code of the corresponding releaser recorded in the storage unit 120, thereby enhancing the release Security.

Please return to step S210 to step S220. When the user wants to enter the login information again to log in to the system 100 applied to the enterprise mobile transaction to release the transaction, in step S220, it is judged that the account of the releaser is not the first time to log in. Based on this, the processing unit 130 executes step S285.

In step S285, the processing unit 130 provides and displays the to-be-checked list in the second electronic device. The checklist has multiple items to be checked, and each item to be checked is a transaction item (for example: transfer, payment, etc.) established by a user with handling authority and transmitted to the system 100 applied to corporate mobile transactions through a third electronic device. Financial actions such as payroll, payroll, etc.), and transactions that are pending approval by the releaser. The releaser can click each item to be checked to view the transaction amount, transaction object, and transaction purpose of the transaction. In addition, each pending project has a corresponding release option. When the releaser selects one of the release options for the nuclear project, the mobile banking application of the second electronic device displays an input screen of the transaction confirmation code to prompt the releaser to enter the transaction confirmation code. The third electronic device uses hardware similar to the first electronic device and the second electronic device, and details are not described herein again.

In step S290, the processing unit 130 executes a transaction procedure according to the item to be checked when the item to be checked and the transaction confirmation code are received. Thereby, the processing unit 130 allocates the transaction amount of the selected pending item to the transaction object to complete the transaction procedure of the pending item. At the same time, the processing unit 130 will convert the pending items into the written-off items and provide a read-out page for the written-out items. Releasers, managers, or managers can view the items that have been written off through the page for viewing written items.

It is worth mentioning that when the permissions of the releaser are changed in the future, the user of the administrator's permission can remove the releaser's account link in the system 100 applied to corporate mobile transactions through the first electronic device, so as to use Facilitate internal control of the enterprise.

In summary, the disclosed system and method applied to corporate mobile transactions is to provide passers through bank account verification to extend the basis for verifying the identity of the user to the verified data in the bank database, thereby increasing Reliability of identity authentication. Not only that, in this disclosure, the system and method applied to corporate mobile transactions can further generate device verification codes and tokens, thereby binding the electronic devices of the passers to further enhance the security of the passers' financial transactions. . In addition, the releaser must further enter the transaction confirmation code before releasing the transaction to check the identity of the user again. Through the security mechanism of the above-mentioned system and method applied to corporate mobile transactions, the enterprise no longer needs to spend extra costs to purchase physical dynamic cryptographic tokens, but it can still complete the transaction while maintaining the security of the releaser using mobile banking. program.

Although the present invention has been disclosed as above with the examples, it is not intended to limit the present invention. Any person with ordinary knowledge in the technical field can make some modifications and retouching without departing from the spirit and scope of the present invention. The protection scope of the present invention shall be determined by the scope of the attached patent application.

20‧‧‧Bank Database

100‧‧‧ system applied to corporate mobile transactions

110‧‧‧ communication unit

120‧‧‧Storage unit

130‧‧‧processing unit

S210 ~ S290‧‧‧step

FIG. 1 is a schematic diagram of a system for corporate mobile trading according to an embodiment of the disclosure. FIG. 2 is a flowchart illustrating a method for applying a system applied to an enterprise mobile transaction according to an embodiment of the disclosure.

Claims (10)

A system applied to corporate mobile transactions includes: a communication unit that receives and transmits information; a storage unit that stores a checklist, a passer network account corresponding to a passer, a passer network password, and A passer bank account number; and a processing unit connected to the communication unit and the storage unit, the processing unit receives login information corresponding to the passer network account number and the passer network password through the communication unit, and judges When the passer account is the first time to log in, the passer bank account corresponding to the passer network account is obtained, and the processing unit is connected to a bank database to obtain a bank information from the bank database based on the passer bank account. The mobile phone number of the passer, wherein the processing unit also transmits a mobile phone verification code to the mobile phone number of the passer, and when the processing unit receives the mobile phone verification code through the communication unit, it determines that the received mobile phone verification code and the transmitted Whether the verification code of the mobile phone is consistent, and the processing unit is further configured to: When the security codes are consistent, the transaction confirmation code setting page is displayed, and when a transaction confirmation code is received, the transaction confirmation code is stored in the storage unit and corresponding to the passer's online account, where the processing unit is also in When receiving the login information corresponding to the passer's online account number and the passer's password, the check list is provided, and the processing unit also receives a check item in the check list and the transaction confirmation code. , Execute the transaction procedure based on the item to be checked. The system applied to a corporate mobile transaction as described in item 1 of the scope of patent application, wherein the releaser's bank account number is transmitted to the processing unit by a first electronic device through the communication unit, and the login information is transmitted by a second electronic The device is transmitted to the processing unit through the communication unit, wherein the first electronic device is different from the second electronic device. The system applied to a corporate mobile transaction as described in item 2 of the scope of patent application, wherein the processing unit further generates a token based on the lender's bank account and transmits the token to the second electronic device, When the processing unit receives the pending item, the transaction confirmation code, and the token, the processing unit executes a transaction procedure according to the pending item. The system applied to a corporate mobile transaction as described in item 2 of the patent application scope, wherein the processing unit is further based on hardware information of the second electronic device, a mobile banking application of the second electronic device, and the second electronic device Generates a device identification code at the system time of the device, and stores the device identification code in the storage unit, wherein the processing unit also receives the item to be checked, the transaction confirmation code, and the device identification code according to the item to be checked. Project execution trading procedures. The system for corporate mobile transactions described in item 1 of the scope of the patent application, wherein the processing unit establishes the pending item according to the transaction amount, the transaction object, and the transaction purpose transmitted by a third electronic device. A method applied to corporate mobile transactions is applicable to a system applied to corporate mobile transactions, where the system stores a checklist, a passer network account corresponding to a passer, a passer network password, and a The passer's bank account, the method includes: receiving login information corresponding to the passer's network account and the passer's network password; determining whether the passer's account is the first login, and when the passer's account is the first login, obtaining The releaser's bank account corresponding to the releaser's online account is connected to a bank database to obtain a releaser's mobile phone number in the bank's database based on the releaser's bank account; send a mobile phone verification code to the release The mobile phone number of the user; when the mobile phone verification code is received, determine whether the received mobile phone verification code is the same as the transmitted mobile phone verification code; when the received mobile phone verification code is the same as the mobile phone verification code transmitted, display Transaction confirmation code setting page; and when a transaction confirmation code is received, the transaction confirmation code is stored in the system, Correspond the transaction confirmation code to the passer's online account, where the checklist is provided when receiving login information corresponding to the passer's online account and the passer's password, and when the passer is received When a pending item in the checklist and the transaction confirmation code are executed, a transaction procedure is performed according to the pending item. The method for applying to enterprise mobile transactions according to item 6 of the scope of patent application, wherein the passer bank account number is from a first electronic device, the login information is from a second electronic device, and the first electronic device and the The second electronic device is different. The method applied to corporate mobile transactions as described in item 7 of the scope of patent application, wherein when the received mobile phone verification code is consistent with the transmitted mobile phone verification code, a generation token is also generated according to the lender's bank account And transmitting the token to the second electronic device; wherein when the pending item, the transaction confirmation code, and the token are received, a transaction procedure is also executed according to the pending item. The method applied to a corporate mobile transaction as described in item 7 of the scope of patent application, wherein when the received mobile phone verification code is consistent with the transmitted mobile phone verification code, it is also based on the hardware information of the second electronic device, the The mobile banking application of the second electronic device and the system time of the second electronic device generate a device identification code and store the device identification code in the system; wherein when the item to be verified, the transaction confirmation code, and When the device identification code is used, the transaction procedure is also executed according to the item to be checked. The method applied to a corporate mobile transaction as described in item 6 of the scope of patent application, further includes: when receiving the transaction amount, the transaction object, and the transaction purpose transmitted by a third electronic device, according to the transaction amount, the transaction object And the use of the transaction to establish the pending item.