TW202025051A - System for assisting a financial card holder in setting password for the first time and method thereof - Google Patents

Abstract

Disclosed is a system for assisting a financial card holder in setting password for the first time, and a method thereof. Said system comprises a first sever configured with a password setting module including a storage submodule; a second sever electrically connected to the first sever and configured with a financial card management module; an App communicatively connected to the first sever and installed on a mobile device possessed by the financial card holder, the App being authenticated by the password setting module; and a authentication device communicatively connected to the second sever and having a display component, an input component and a financial card reading and writing component.

Description

System and method for helping cardholder to set financial card password for the first time

The present invention relates to a system and method for helping a cardholder to set a financial card password for the first time, and particularly relates to a system and method that does not require a paper financial card password letter.

The current financial card cipher letter is generated by the relevant functions of the financial card system, and the designated security personnel will manually operate the designated machinery and transaction functions in a designated environment to complete the printing of the financial card cipher letter; Special personnel will pack, transport and post to designated branches; finally, the designated personnel of each branch will check the receipt and put them in the warehouse, store and keep them; when the customer goes to the branch to apply for a new financial card, it will be reviewed by the designated personnel in the supervisor. Obtain the cipher letter of the financial card from the safe, and deliver it to the cardholder for signature along with the newly applied financial card.

Therefore, for the financial industry, there is still a need for a system or method to replace the current cumbersome procedures for printing cipher letters through manual operations, and save the related manual operations, environmental facilities, printing machines, paper, mailing, storage and storage. , Information security control and risk inspection, etc. operating cost burden. In addition, if the use of paper financial card cipher letters can be eliminated, the effect of energy saving and carbon reduction can also be achieved, which will contribute to the environmental protection of the earth.

In view of this, the present invention provides a system and method for helping cardholders to set the financial card password for the first time, which can complete the first setting of the financial card password without a paper financial card password letter, and can take into account the security of the password setting .

In one aspect, the present invention discloses a system for helping a cardholder to set a financial card password for the first time, comprising: a first server, provided with a password setting module, which includes a storage sub-module; a second server , Which is electrically connected to the first server, and is provided with a financial card management module; a software product (App), which communicates and connects to the first server, and the App is installed in a card held by the cardholder A mobile device, and the App is authenticated by the password setting module; and an authentication device, which is in communication with the second server, and the authentication device has a display element, an input element, and a financial card read-write element; where: The password setting module is in a pre-registration process: receiving a first authentication data, which is composed of the identification information of the mobile device and the personal information of the cardholder, and storing the first authentication data in the storage Sub-module; and, receiving a second authentication data, which is a self-selected digest, and storing the second authentication data in the storage sub-module; the authentication device reads the financial card through the financial card reading and writing component , And provide a first user interface through the display element to display the option of setting the financial card password for the first time. After the option is selected, the authentication device sends a request for the first setting of the financial card password to the financial card management module; The financial card management module transmits the request to set the financial card password for the first time to the password setting module; the password setting module: combines the first authentication data according to a combination method to generate a first key, wherein the The combination method is randomly selected from a plurality of combination methods and has a first number; the first number is stored in the storage sub-module; an original code content is encrypted based on the first key to generate a two-dimensional barcode , Wherein the content of the original code includes the self-selected abstract; the two-dimensional barcode is sent to the authentication device; the authentication device displays the two-dimensional barcode on the first user interface through the display element; the App is automatically activated after activation Trigger an event that requires the input of personal information and the account number of the financial card, and sends the entered personal information and account number to the password setting module; after the password setting module confirms the legality of the App: according to the storage submodule Using the corresponding combination method to combine the first authentication data to generate a second key; randomly select an encryption method from a plurality of encryption methods, and the encryption method has a second number; and The App transmits the first number and the confirmation data encrypted based on the second key. The confirmation data includes encrypted information, where the encrypted information includes the second number and the initial sampling position; the App starts from the The mobile device obtains the identification information of the mobile device and the personal information of the cardholder, and combines the identification information and the personal information according to the combination method corresponding to the first number to generate a third key; After the device scans and reads the two-dimensional barcode displayed on the display element of the authentication device, the App uses the third key to interpret the two-dimensional barcode to obtain the original code content, and according to the second number corresponding Encryption method and The start sampling position encrypts the self-selected abstract to obtain an encrypted value; and, based on the third key, encrypts the encrypted value and sends it to the password setting module; the password setting module confirms the encrypted value After the correctness of the authentication code, a request for obtaining an authentication code is sent to the financial card management module, and an authentication code is obtained; and an authentication code image is generated and sent to the App; the App displays the authentication code image to For the cardholder to use the authentication device to set the password of the financial card for the first time; and the authentication device uses the display element to display a field on the first user interface for the cardholder to input through the input element The authentication code and the new password of the financial card are used to complete the first password setting.

In some specific embodiments of the present invention, the password setting module provides a second user interface for an operator of the financial card issuer to input the first authentication data and the second authentication data.

In some specific embodiments of the present invention, the App requires an activation password.

In some specific embodiments of the present invention, the first user interface of the authentication device requires the input of an authentication code and a new password, as well as at least a part of the personal information, and sends to the financial card management module based on the input data Request to set a new password. In a specific embodiment, after confirming that the received authentication code and personal data are correct, the financial card management module obtains a garbled new password and sends it to the authentication device for it to use the financial card to read and write components Write the garbled new password to the financial card.

On the other hand, the present invention provides a method for helping a cardholder to set a financial card password for the first time, including: providing a first server with a password setting module, which includes a storage sub-module; a second server The device is electrically connected to the first server, and is provided with a financial card management module; a software product (App), which is in communication with the first server, and the App is installed in the card holder’s possession A mobile device, and the App is authenticated by the password setting module; and an authentication device communicating with the second server, the authentication device having a display element, an input element, and a financial card read-write element; The password setting module is in a pre-registration process: receives a first authentication data, which is composed of the identification information of the mobile device and the cardholder’s personal information, and stores the first authentication data in the storage Module; and, receiving a second authentication data, which is a self-selected digest, and storing the second authentication data in the storage submodule; the authentication device reads the financial card through the financial card reading and writing component, A first user interface is provided by the display element to display the option to set the financial card password for the first time. After the option is selected, the authentication device sends a request to set the financial card password for the first time to the financial card management module; The card management module transmits the request to set the financial card password for the first time to the password setting module; the password setting module: combines the first authentication data according to a combination method to generate a first key, wherein the combination The method is to randomly select a plurality of combination methods and have a first number; store the first number in the storage submodule; encrypt the content of an original code based on the first key to generate a two-dimensional barcode, Wherein, the content of the original code includes the self-selected abstract; the two-dimensional barcode is sent to the authentication device; the authentication device displays the two-dimensional barcode on the first user interface through the display element; the App is automatically triggered after activation An event requires the input of personal information and the account number of the financial card, and sends the entered personal information and account number to the password setting module; the password setting module confirms the legality of the App: according to the storage sub-module Using the corresponding combination method to combine the first authentication data to generate a second key; randomly select an encryption method from a plurality of encryption methods, and the encryption method has a second number; and The App transmits the first number and the confirmation data encrypted based on the second key. The confirmation data includes encrypted information, where the encrypted information includes the second number and the initial sampling location; the App starts from the action The device obtains the identification information of the mobile device and the personal information of the cardholder, and combines the identification information and personal information according to the combination method corresponding to the first number to generate a third key; via the mobile device After scanning and reading the two-dimensional bar code displayed on the display element of the authentication device, the App uses the third key to interpret the two-dimensional bar code to obtain the original code content, and encrypts the content according to the second number Method and what to start In such a position, the self-selected abstract is encrypted to obtain an encrypted value; and the encrypted value is encrypted based on the third key and then sent to the password setting module; the password setting module confirms that the encrypted value is correct After verification, send a request to obtain an authentication code to the financial card management module, and obtain an authentication code; and, generate an authentication code image and send it to the App; the App displays the authentication code image for the The cardholder uses the authentication device to set the password of the financial card for the first time; and the authentication device uses the display element to display a field on the first user interface for the cardholder to input the authentication through the input element And the new password of the financial card to complete the first password setting.

In some specific embodiments of the present invention, the password setting module provides a second user interface for an operator of the financial card issuer to input the first authentication data and the second authentication data.

In some specific embodiments of the present invention, the App requires an activation password.

In some specific embodiments of the present invention, the first user interface of the authentication device requires the input of an authentication code and a new password, as well as at least a part of the personal information, and sends to the financial card management module based on the input data Request to set a new password. In a specific embodiment, after confirming that the received authentication code and personal data are correct, the financial card management module obtains a garbled new password and sends it to the authentication device for it to use the financial card to read and write components Write the garbled new password to the financial card.

Other objects and advantages of the present invention are partially described in the following description, or can be understood through the embodiments of the present invention. It should be understood that the foregoing invention content and the following embodiments are only illustrative and explanatory descriptions, rather than limiting the present invention as in the scope of the patent application.

It should be noted that, unless otherwise specified, all technical and scientific terms used herein have the meaning generally understood by those skilled in the art to which the present invention belongs. Furthermore, the word "一" and B used in this manual, unless otherwise specified, refers to at least one (one or more) quantity, which shall be explained first.

In one aspect, the present invention provides a system for helping a cardholder to set a financial card password for the first time. The system includes: a first server, a second server, a software product (App), and an authentication device.

The first server is provided with a password setting module, which includes a storage sub-module.

The second server is electrically connected with the first server, and is provided with a financial card management module.

According to a preferred embodiment of the present invention, the first and second servers are located at the issuer of the financial card.

The software product (App) communicates with the first server and is installed on a mobile device held by the cardholder, and the App is authenticated by the password setting module. According to the present invention, the mobile device includes but is not limited to a tablet computer or a smart phone, and preferably a smart phone. The mobile device preferably does not include a notebook computer. The communication connection is preferably via an Internet communication connection. According to the present invention, the software product is preferably a mobile application. According to the present invention, the mobile device may include a storage unit storing the program code of the software product, and a processing unit for executing the program code of the software product.

The authentication device is in communication connection with the second server, and it has a display element, an input element and a financial card read-write element. In some specific embodiments of the present invention, the authentication device is an automatic teller machine or an automatic deposit and withdrawal machine. According to the present invention, the authentication device preferably communicates with the second server via a dedicated network.

In a pre-registration process, the password setting module receives a first authentication data and a second authentication data, and stores the first and second authentication data in the storage submodule. The first authentication data is composed of the identification information of the mobile device and the personal information of the cardholder, and the second authentication data is an optional abstract. In the pre-registration procedure, the password setting module can provide a second user interface for the operator of the issuing party of the financial card to input the first authentication data and the second authentication data. The aforementioned identification information includes IMEI, UDID, Keychain, MAC address or a combination thereof. The self-selected digest can be provided by the cardholder, or selected by the operator from the database of the storage sub-module, or randomly selected by the password setting module from the database of the storage sub-module.

The authentication device reads the financial card through the financial card reading and writing component, and provides a first user interface through the display component, which displays the option to set the financial card password for the first time. After this option is selected, the authentication device The financial card management module sends a request to set the financial card password for the first time.

The financial card management module transmits the request to set the financial card password for the first time to the password setting module. Then, the password setting module performs the following steps: (1) Combine the first authentication data according to a combination method to generate a first key, wherein the combination method is randomly selected from a plurality of combination methods, and has a A first number; (2) The first number is stored in the storage submodule; (3) An original code content is encrypted based on the first key to generate a two-dimensional barcode, wherein the original code content includes The self-selected abstract; and (4) transmitting the two-dimensional barcode to the authentication device. According to the present invention, the combination method includes, but is not limited to: combining the complete data of a single field or multiple fields of the first authentication data, or a part of multiple fields of the first authentication data Combine data, or combine data in the same field of the first authentication data multiple times.

Then, the authentication device displays the two-dimensional barcode on the first user interface through the display element. According to a preferred embodiment of the present invention, the two-dimensional bar code is a QR code.

After the App is activated, an event will be automatically triggered to request the input of personal information and the account number of the financial card, and the entered personal information and account number will be sent to the password setting module. According to a preferred embodiment of the present invention, the App requires an activation password, and the App can be activated only after verifying that the activation password is correct. The activation password includes, but is not limited to: a graphic password, a key-press password, fingerprint recognition or facial recognition.

After confirming the validity of the App, the password setting module performs the following steps: (1) According to the first number stored in the storage sub-module, use the corresponding combination method to combine the first authentication data to generate a second Key; (2) randomly select an encryption method from a plurality of encryption methods, the encryption method has a second number; and, (3) send the first number to the App, and encrypt based on the second key The confirmation data includes an encrypted information, wherein the encrypted information includes the second number and the initial sampling position. The start sampling position is used to indicate the position of the text in the self-selected abstract from which the encryption method starts sampling for encryption.

Then, the App obtains the identification information of the mobile device and the personal information of the cardholder from the mobile device, and combines the identification information and personal information according to the combination method corresponding to the first number to generate a third Key. The personal information of the cardholder can be registered by the cardholder and stored in the mobile device.

After scanning and reading the two-dimensional barcode displayed on the display element of the authentication device through the mobile device, the App uses the third key to interpret the two-dimensional barcode to obtain the original code content, and according to the second number The corresponding encryption method and the start sampling position encrypt the self-selected digest to obtain an encrypted value; then, the App encrypts the encrypted value based on the third key and sends it to the password setting module.

After confirming the correctness of the encrypted value, the password setting module sends a request for obtaining an authentication code to the financial card management module, and obtains an authentication code; and, generates an authentication code image, and sends it to the App . The authentication code is preferably a random number of 6 to 8, but is not limited to this. In a specific embodiment of the present invention, the authentication code is encrypted to produce the authentication code image by using the method of visual cryptography theory, so that the clear code value can be read correctly by human eyes.

Then, the App will display the authentication code image for the cardholder to use the authentication device to set the password of the financial card for the first time.

Finally, the authentication device displays a field on the first user interface through the display element, so that the cardholder can input the authentication code and the new password of the financial card through the input element to complete the first password setting.

In some specific embodiments of the present invention, the first user interface of the authentication device requires the input of an authentication code and a new password, as well as at least a part of the personal information, and sends to the financial card management module based on the input data Request to set a new password. In a specific embodiment, after confirming that the received authentication code and personal data are correct, the financial card management module obtains a garbled new password and sends it to the authentication device for it to use the financial card to read and write components Write the garbled new password to the financial card.

On the other hand, the present invention provides a method for helping a cardholder to set a financial card password for the first time, including: providing a first server with a password setting module, which includes a storage sub-module; a second server The device is electrically connected to the first server, and is provided with a financial card management module; a software product (App), which is in communication with the first server, and the App is installed in the card holder’s possession A mobile device, and the App is authenticated by the password setting module; and an authentication device communicating with the second server, the authentication device having a display element, an input element, and a financial card read-write element; The password setting module is in a pre-registration process: receives a first authentication data, which is composed of the identification information of the mobile device and the cardholder’s personal information, and stores the first authentication data in the storage Module; and, receiving a second authentication data, which is a self-selected digest, and storing the second authentication data in the storage submodule; the authentication device reads the financial card through the financial card reading and writing component, A first user interface is provided by the display element to display the option to set the financial card password for the first time. After the option is selected, the authentication device sends a request to set the financial card password for the first time to the financial card management module; The card management module transmits the request to set the financial card password for the first time to the password setting module; the password setting module: combines the first authentication data according to a combination method to generate a first key, wherein the combination The method is to randomly select a plurality of combination methods and have a first number; store the first number in the storage submodule; encrypt the content of an original code based on the first key to generate a two-dimensional barcode, Wherein, the content of the original code includes the self-selected abstract; the two-dimensional barcode is sent to the authentication device; the authentication device displays the two-dimensional barcode on the first user interface through the display element; the App is automatically triggered after activation An event requires the input of personal information and the account number of the financial card, and sends the entered personal information and account number to the password setting module; the password setting module confirms the legality of the App: according to the storage sub-module Using the corresponding combination method to combine the first authentication data to generate a second key; randomly select an encryption method from a plurality of encryption methods, and the encryption method has a second number; and The App transmits the first number and the confirmation data encrypted based on the second key. The confirmation data includes encrypted information, where the encrypted information includes the second number and the initial sampling location; the App starts from the action The device obtains the identification information of the mobile device and the personal information of the cardholder, and combines the identification information and personal information according to the combination method corresponding to the first number to generate a third key; via the mobile device After scanning and reading the two-dimensional bar code displayed on the display element of the authentication device, the App uses the third key to interpret the two-dimensional bar code to obtain the original code content, and encrypts the content according to the second number Method and what to start In such a position, the self-selected abstract is encrypted to obtain an encrypted value; and the encrypted value is encrypted based on the third key and then sent to the password setting module; the password setting module confirms that the encrypted value is correct After verification, send a request to obtain an authentication code to the financial card management module, and obtain an authentication code; and, generate an authentication code image and send it to the App; the App displays the authentication code image for the The cardholder uses the authentication device to set the password of the financial card for the first time; and the authentication device uses the display element to display a field on the first user interface for the cardholder to input the authentication through the input element And the new password of the financial card to complete the first password setting.

In the pre-registration procedure, the password setting module can provide a second user interface for the operator of the issuing party of the financial card to input the first authentication data and the second authentication data. The aforementioned identification information includes IMEI, UDID, Keychain, MAC address or a combination thereof. The self-selected digest can be provided by the cardholder, or selected by the operator from the database of the storage sub-module, or randomly selected by the password setting module from the database of the storage sub-module.

In some specific embodiments of the present invention, the App requires an activation password. The activation password includes, but is not limited to: a graphic password, a key-press password, fingerprint recognition or facial recognition.

In some specific embodiments of the present invention, the first user interface of the authentication device requires the input of an authentication code and a new password, as well as at least a part of the personal information, and sends to the financial card management module based on the input data Request to set a new password. In a specific embodiment, after confirming that the received authentication code and personal data are correct, the financial card management module obtains a garbled new password and sends it to the authentication device for it to use the financial card to read and write components Write the garbled new password to the financial card.

Now with FIGS. 1 and 2 to help illustrate the present invention and a method setting system Cardholder first debit card passwords specific preferred embodiments.

First, see FIG. 1, the present invention is shown in one particular embodiment the first cardholder help embodiments set passwords debit card system. In this embodiment, the system 1 for helping a cardholder to set a financial card password for the first time includes a first server 10 , a second server 20 , a software product (App) 30, and an authentication device 40 . The software product 30 may be a mobile software product, for example, an App issued by a financial industry.

The first server 10 is provided with a password setting module 12 , which includes a storage sub-module 122 . The second server 20 is electrically connected to the first server 10 , and is provided with a financial card management module 22 . The first and second servers 10 and 20 can be installed in the issuer of the financial card.

The App 30 is in communication with the first server 10 and is installed on a mobile device 70 held by the cardholder, and the App 30 is authenticated by the password setting module 12 . The mobile device 70 can be a tablet computer or a smart phone, preferably a smart phone.

The authentication device 40 communicates with the second server 20 via a dedicated network, and it has a display element 42 , an input element 44, and a financial card reader/writer element 46 . In some examples, the authentication device 40 is an automatic teller machine or an automatic cash deposit machine.

In a pre-registration process, the password setting module 12 receives a first authentication data and a second authentication data, and stores the first and second authentication data in the storage submodule 122 . The first authentication data is composed of the identification information of the mobile device 70 and the personal information of the cardholder, and the second authentication data is an optional digest. The number of bits in the abstract is preferably between 512 bits and 1024 bits.

The authentication device 40 reads the financial card through the financial card read-write element 46 , and provides a first user interface through the display element 42 to display the option of setting the financial card password for the first time. After the option is selected, the The authentication device 40 sends a request to set the financial card password for the first time to the financial card management module 22 . The financial card management module 22 transmits the request to set the financial card password for the first time to the password setting module 12 . Then, the password setting module 12 performs the following steps: (1) Combine the first authentication data according to a combination method to generate a first key, wherein the combination method is randomly selected from a plurality of combination methods, and has A first number; (2) store the first number in the storage submodule 122 ; (3) encrypt the content of an original code based on the first key to generate a two-dimensional barcode, wherein the original code The content includes the self-selected abstract; and (4) the two-dimensional barcode is transmitted to the authentication device 40 .

Then, the authentication device 40 displays the two-dimensional barcode on the first user interface through the display element 42 , which is preferably a QR code.

In addition, the App 30 will automatically trigger an event after activation, requesting the input of personal information and the account number of the financial card, and sending the entered personal information and account number to the password setting module 22 . After the password setting module 22 confirms the legality of the App 30 , it performs the following steps: (1) According to the first number stored in the storage sub-module 122 , use a corresponding combination method to combine the first authentication data to Generate a second key; (2) randomly select an encryption method from a plurality of encryption methods, the encryption method has a second number; and (3) send the first number to the App 30 , and based on the first number Two key-encrypted confirmation data, the confirmation data includes an encrypted information, where the encrypted information includes the second number, and the initial sampling position, which is used to indicate the encryption method from which position of the text in the self-selected abstract Start sampling for encryption.

Then, the App 30 obtains the identification information of the mobile device 70 and the personal information of the cardholder from the mobile device, and combines the identification information and personal information according to the combination method corresponding to the first number to generate a The third key. At this time, the cardholder can use the mobile device 70 to scan and read the two-dimensional barcode displayed on the display element 42 of the authentication device 40 , and then the App 30 uses the third key to interpret the two-dimensional barcode. The dimensional barcode obtains the original code content, and encrypts the self-selected abstract according to the encryption method corresponding to the second number and the start sampling position to obtain an encrypted value. Then, the App 30 encrypts the encrypted value based on the third key and sends it to the password setting module 12 .

After confirming the correctness of the encrypted value, the password setting module 12 sends a request for obtaining an authentication code to the financial card management module 22 , obtains an authentication code, and generates an authentication code image to send to the App 30 . Then, the App 30 displays the authentication code image for the cardholder to use the authentication device 40 to set the password of the financial card for the first time.

Finally, the authentication device 40 displays a field on the first user interface through the display element 42 for the cardholder to input the authentication code and the new password of the financial card through the input element 44 to complete the first password set up.

On the other hand, the present invention provides a method for helping the cardholder to set the financial card password for the first time. See flowchart of FIG. 2, which helps the present invention a method of setting the first cardholder financial card of a particular embodiment of a password. As shown in the figure, the method includes the following steps: ( S110 ) a first server is provided, and a password setting module is provided, which includes a storage sub-module; a second server is electrically connected to the first server Is connected with a financial card management module; a software product (App) communicates with the first server, the App is installed on a mobile device held by the cardholder, and the App is Password setting module authentication; and an authentication device communicating with the second server, the authentication device having a display element, an input element, and a financial card reading and writing element; ( S120 ) the password setting module is in a preset During the registration process: receiving a first authentication data, which is composed of the identification information of the mobile device and the personal information of the cardholder, and storing the first authentication data in the storage submodule; and receiving a The second authentication data, which is a self-selected abstract, and stores the second authentication data in the storage submodule; ( S210 ) the authentication device reads the financial card through the financial card reading and writing component, and uses the The display element provides a first user interface that displays the option to set the financial card password for the first time. After this option is selected, the financial card management module confirms the status of the financial card, and then sends the financial card management module the first set of financial Card password request; ( S220 ) the financial card management module transmits the request to set the financial card password for the first time to the password setting module; ( S230 ) the password setting module: combining the first authentication data according to a combination method , To generate a first key, wherein the combination method is randomly selected from a plurality of combination methods, and has a first number; the first number is stored in the storage submodule; based on the first key pair An original code content is encrypted to generate a two-dimensional bar code, wherein the original code content includes the self-selected abstract; the two-dimensional bar code is sent to the authentication device; ( S240 ) the authentication device uses the display element in the first The user interface displays the two-dimensional bar code; ( S310 ) After the App is activated, an event is automatically triggered to request the input of personal information and the account number of the financial card, and the entered personal information and account number are sent to the password setting module; ( S320) ) After the password setting module confirms the validity of the App: according to the first number stored in the storage submodule, combine the first authentication data with the corresponding combination method to generate a second key; An encryption method is randomly selected among the encryption methods, and the encryption method has a second number; and, the first number is sent to the App, and the confirmation data encrypted based on the second key, the confirmation data includes an encryption information, Wherein, the encrypted information includes the second number and the initial sampling location; ( S330 ) the App obtains the identification information of the mobile device and the personal information of the cardholder from the mobile device, and corresponds to the first number The combination method of combining the identification information and personal information to generate a third key; ( S340 ) scanning and reading the display on the certificate through the mobile device After the 2D barcode on the display element of the device, the App uses the third key to interpret the 2D barcode to obtain the original code content, and according to the encryption method corresponding to the second number and the start sampling position, Encrypting the self-selected digest to obtain an encrypted value; and, encrypting the encrypted value based on the third key and sending it to the password setting module; ( S410 ) the password setting module confirms that the encrypted value is correct After verification, send a request to obtain an authentication code to the financial card management module, and obtain an authentication code; and, generate an authentication code image and send it to the App; ( S510 ) the App displays the authentication code image, For the cardholder to use the authentication device to set the password of the financial card for the first time; and ( S610 ) the authentication device uses the display element to display a field on the first user interface for the cardholder to use The input component inputs the authentication code and the new password of the financial card to complete the first password setting.

The method of the present invention for helping the cardholder to set the financial card password for the first time can be completed with or without the aforementioned system 1 for helping the cardholder to set the financial card password for the first time.

The specific embodiments of the present invention are described in more detail with the following examples, but the present invention is not limited to the specific configurations, conditions and methods provided therein.

Instance 1 : Pre-work

The financial industry provider provides a management server (the first server), which is installed with a password setting module for the bank staff to apply for a new financial card user (the financial card holder, in the example referred to as "user" ), the authentication data agreed by the registration and login, the registration data is stored in the database of the password setting module. The related transaction functions and registration content are as follows:

1. Binding the user’s mobile device authentication data (first authentication data): a. Log in the IMEI/UDID/Keychain/MAC/ID number/birthday/mobile phone number/and other authentication data. Here, the user who applies for the new financial card can first go to the branch counter of the financial company or on the official website in advance, and fill in the application form after checking the IMEI/UDID/Keychain/MAC information from their mobile phone. Data logging system. The aforementioned authentication data can be bound with the user's ID number. b. Use of the first authentication data: (1) When binding the first authentication data, the password setting module will now automatically randomize the initial value of the combination method and store the combination method in the database (3 Bytes). (2) This combination method is used to randomly combine IMEI/UDID/Keychain/MAC/ID number/birthday/mobile phone number/ etc. column data. (3) The "combination method" (3 Bytes) stored in the database is essentially a number, and the database does not store the original content of the combined data. The "Combination Method" value stored in the database here is only an initial value. The password setting module should automatically randomize random numbers before generating a two-dimensional barcode (QR code in this example) every time a request is accepted. Generate the value of "Combination Method" and update the column value in the database with the new "Combination Method" value. (4) The original content of the combined data will be referred to as "Current_key" (here, the first key), and its length should be at least 128 Bytes. This "Current_key" is the key for subsequent encryption of sensitive data using Advanced Encryption Standard (AES). To know Current_key, you need to know its "combination method" and its corresponding code. When the first authentication data bound to the original registration and login is leaked, the user's Current_key content is not directly exposed.

2. Binding user identification data (second authentication data): The operator logs in 1 self-selected abstract (512 Bytes≦Abstract≦1024 Bytes) for the user applying for a new financial card. The second authentication data can also be bound with the user's ID number. The self-selected digest can be provided by the user, or selected by the operator, or randomly selected by the system from the database. a. The content of the QR code generated by the system: the system stores the user’s "combination method" based on the database, generates the "Current_key" from the user’s original mobile device authentication data, and then uses the corresponding encryption and decryption code to "Current_key" AES (webpage identification code + self-selected digest + SHA-256 ("Current_key")) encrypts the content of QR code garbled. To know the original content of the QR code, only use the correct transaction device to scan and read the QR code, use the correct "combination method" to generate the correct "Current_key", and use the corresponding encryption and decryption code to decode the QR code. Original code content. (1) The content of the original QR code after interpretation = webpage identification code + self-selected abstract + SHA-256 　(Current_key). (2) QR code content before interpretation = "Current_key" AES (webpage identification code + self-selected abstract + 　SHA-256(Current_key)). (3) The original QR code content needs to be screened by the corresponding encryption and decryption code of the "Combination Method", and then the content of the "Current_key" can be generated before it can be interpreted. b. The timing of the QR code generated by the system: the financial card holder performs a specific transaction at the ATM, and initiates the transaction via the financial card management module to the password setting module in the uplink message. The current password setting module output contains " The “QR code image” of the downlink message will reply to the financial card management module; the password setting module must also store the content of the uplink message in the database: (1) The content of the uplink message includes: financial card account number, transaction date, transaction Time, ATM machine number, ATM transaction serial number, etc. (2) Using the ID number, webpage identification code, etc. as the key, store the content of the uplink message in the database (storage submodule) of the password setting module. The webpage identification code is the common identification number of the password setting module, "initial password application" (software product (App)), financial card management module and other multi-party systems for the same transaction request. The webpage identification code value is determined by the initial password letter system ( Password setting module) generated. The life cycle of the webpage identification code value is generated when the financial card system (financial card management module) sends a "QR code image" request to the initial password letter system, the authentication code value image is obtained from the initial password application, and the cardholder operates The specific function of the automatic cash deposit machine (authentication device) is finished after the new password setting of the financial card is completed. (3) The purpose of storing the content of the uplink message in the database: (i) After reading the "QR code image" for the initial password application of the subsequent transaction device, when the initial password letter system is issued to obtain the authentication code to request a transaction, The initial cipher letter system uses it as a transaction check and verification; 　　　　(ii) When the database does not have the financial card account information, the transaction request is rejected, and the financial card holder is required to operate the automatic deposit and withdrawal with the new application financial card For the cash machine, after displaying the "QR code image" on the ATM interface, operate and execute the App; and (iii) when the bank has the financial card account information, but it has expired (for example, more than 10 minutes), You can reject the transaction request of the App.

The user can operate the transaction device after completing the above-mentioned registration information, download/install the "initial password application" (software product (App)) from the network environment (Internet). After the installation is completed, the notification Assignment completed:

1. App must provide graphical password, key-press password, fingerprint recognition, or face recognition options for the user to set the activation password of the App.

2. Every time the user runs the App, the App must ask the user to enter the user's ID number, birthday, and financial card account number, and immediately send an uplink message to the password setting module to complete the initial authentication of the user's identity. a. The content of the uplink message must include information such as ID number, birthday, financial card account number, and App version number and date. b. After the password setting module on the server side authenticates the user's identity and the correct mobile device equipment, it must store the version number, date, and the financial card account number of this application, and other upstream text information for future transaction identification. The use of legality. c. The "financial card account number" must be a newly applied financial card account number that has not yet changed the initial password of the financial card.

3. After the initial password application program obtains the initial password letter, the system will directly display the preparation screen for reading the QR code on the interface of the transaction device (user’s personal device), and wait for the user to manually operate the transaction device. Scan and read the QR code image on the "QR code image" displayed on the ATM.

Instance 2 : Trading operations

1. The user inserts the newly applied physical financial card into the ATM (authentication device) and performs a specific transaction. The ATM immediately sends an uplink message, which is transmitted to the initial password via the financial card system host (second server) The host of the letter system (first server), the initial password letter system (password setting module) saves the content of the uplink message in the database (storage submodule), and generates and responds to "QR code images", etc. Downlink message data, through the financial card system (financial card management module), reply the "QR code image" and other downlink message data to the ATM; the ATM will display the "QR code" on the automatic deposit and withdrawal Machine interface. a. Preferably, users are prohibited from operating multiple newly applied financial card transactions at multiple ATMs at the same time. b. The initial cipher letter system uses the ID number, webpage identification code, etc. as the key to store the content of the uplink message in the database. (1) The financial card account must be a newly applied financial card account that has not changed the initial password of the financial card. (2) The webpage identification code is the common identification serial number of the initial password letter system, initial password application (App), financial card system and other systems for the same request transaction. The webpage identification code value is generated by the initial password letter system. The life cycle of the webpage identification code value is generated when the financial card system sends a "QR code image" request to the initial password letter system, after obtaining the authentication code value image from the initial password application (App), and after completing the new password setting of the financial card End. c. The purpose of the initial password letter system to store the contents of the uplink message in the database: (1) For subsequent users to activate the initial password APP of the transaction device, after logging in the identity data, the initial password letter system can confirm whether the user has first Insert the newly applied physical financial card into the automatic deposit and withdrawal machine, complete the operation specific transaction, and obtain the "QR code image". (2) After the initial password application program of the subsequent transaction device scans and reads the "QR code image", when the initial password letter system is launched to obtain the authentication code to request a transaction, the initial password letter system will use it as a transaction check check use. (a) When the database does not have the financial card account information, the App’s transaction request is rejected, and the financial card holder is required to operate the ATM with the newly applied financial card, and display the "QR code" on the interface of the ATM "Image", then operate and execute the App. (b) When the financial card account information is available in the database, but the time has expired (for example, more than 10 minutes), the transaction request of the App is rejected as described above. d. The initial password letter system must first automatically generate a random random number and update the value of the column in the database, and then execute its corresponding code with the value of the “combination method” (bind the original login Mobile device authentication data is combined), the original content of the combined data is "Current_key" (the first key). The aforementioned "combination method" value is generated at a random random number at the moment of the transaction, and this random random number is preferably different from the previous three records. e. The initial password letter system now uses the "Current_key" and the identification data bound to the user (optional digest) to generate QR code content, "QR code image", and downlink text and other data (including " QR code image"). (1) The content of the original QR code = webpage identification code + self-selected abstract + SHA-256 (Current_key). (2) QR code garbled content = "QR code image" content = "Current_key" AES (webpage identification code + self-selected abstract + SHA-256(Current_key)), where SHA-256 is a hash function. (3) To interpret the content of the original QR code, you must first generate the content of the "Current_key" through the corresponding code of the "Combination Method", and then use the "Current_key" to interpret the original content of the QR code. f. After the “QR code image” and other downlink text data are replied to the ATM through the financial card system; the ATM will display the “QR code image” on the ATM interface for subsequent use The user manually holds the transaction device (mobile device) to scan and read the QR code content. g. The financial card system should check the content of the uplink message, and if the conditions are not met, the transaction request should be rejected: (1) Confirm that the financial card is a valid card and the initial password has not been changed. (2) Confirm that the financial card holder has bound mobile device authentication data and user identification data.

2. After the user logs in the "activation password" on the transaction device interface, the app like example 1 is activated. The app asks the user to enter the identification information: a. The app displays a message on the personal device interface, asking for the user's ID number, birthday, And financial card account number. b. The key content of the uplink message includes: ID number, birthday, financial card account number, and information such as the version number and date of installation of the App. C. The uplink message is decoded by the firewall (Web AP F/W) and then sent to the password setting module host. d. The password setting module checks the legality of the app installed by the user based on the uplink message, and confirms whether the user has inserted the newly applied physical financial card into the ATM to perform a specific transaction. (1) Use the ID number, webpage identification code, etc. as the key to query the database. When the database does not have the account information, the App’s transaction requirements are rejected, and the financial card holder is required to automatically deposit the new application financial card. At the cash machine, after the "QR Code image" is displayed on the interface of the cash machine, operate the App. (2) When the account data is available in the database, but the time has expired (for example, more than 10 minutes), the transaction request of the App is rejected as described above. (3) When the identification of the user's identity (ID number, birthday) does not match, the password setting module must simultaneously notify the cardholder through SMS, email, etc. When the cumulative number of errors exceeds 4, the system should reject the transaction and ask the user to contact customer service to verify the user's identity and reset the cumulative number of errors. e. After the password setting module verifies that the upstream telegram message is correct, it will generate a downstream telegram response App: (1) The system stores the user's "combination method" based on the database, and generates the authentication data of the mobile device originally bound to the user "Current_key" (second key). (2) The key content of the downlink message = webpage identification code + combination method + "Current_key" AES (encryption method + SHA-256 ("Current_key" (second key)))) + App legality verification result, where SHA- 256 is a hash function. (a) The "Encryption Method" column has a total of 10 Bytes, the first 3 Bytes are placed in the "Combination Method" that produces "Current_key", the 4th to 6th Bytes are placed in the current encryption method item, and the last 4 Bytes are placed in the current encryption The start sampling position of the "Optional Digest" at the time. (b) The above-mentioned "Encryption Method" value and "Start Sampling Position" value are both random random numbers generated at the moment of the transaction, and this random random value is preferably different from the previous three records. f. Store the contents of the aforementioned uplink messages and downlink messages in the database of the password setting module for subsequent transaction identification and verification of user identity.

3. After the app receives the downlink message from the password setting module: a. When the value of the "App legitimacy authentication result" of the downlink message content is successful, it will be based on the value of the "combination method" of the downlink message (the "encryption method of the downlink message" The first 3 Bytes values in the "column), the device data (including IMEI/UDID/Keychain/MAC and other information) and the user’s personal information (ID number/birthday and other information can be obtained from the user’s mobile device) The user logs in and saves it on the mobile device to generate the "Current_key" (third key) (that is, the App has multiple combination methods built in, which can be determined according to the received number Combination method), firstly, decrypt the "Encryption Method" column of the downlink message to obtain the clear value of the current "Encryption Method"; secondly, verify the consistency of the SHA-256 ("Current_key") column value of the downlink message (identify the current The validity of the password setting module host connected by the App). b. The App displays the environment where the QR code can be scanned and read on the transaction device interface, instructing the cardholder to hold the transaction device to scan the "QR code image" of the ATM to read its content. c. App scans and reads "QR code image" and interprets its original content: (1) Use the above "Current_key" (third key) to interpret the original content of "QR code image". (a) The original QR code content = webpage identification code + self-selected digest + SHA-256 ("Current_key"). (b) QR code garbled content = "QR code image" content = "Current_key" AES (webpage identification code + self-selected abstract + SHA-256(Current_key)) (2) After interpretation, it will be generated locally by the transaction device Current_key verifies the consistency of the SHA-256 ("Current_key") value of the QR code content (identifies the validity of the current "QR code image"). d. Generate the uplink message again, and send a request to the initial password letter system to obtain the user authentication code value: (1) The key content of the uplink message = web page identification code + Mobile value + Verify value + partial data of the uplink and downlink messages in the previous steps . (a) Mobile value = SHA-256 ("Current_key" generated locally from the transaction device (b) Verify value = "Current_key" AES{ (encryption of the contents of "Interpreted QR Code" according to the encryption method ) + SHA-256("Interpreted QR code content)}. The "interpreted QR code content" here refers to the original content of the "self-selected abstract" after interpretation. The App is obtained based on the aforementioned downlink message The value of "Encryption Method" starts sampling with the value of "Start Sampling Position" of the specified "Selected Digest", executes the corresponding encryption code with the specified "Encryption Method" number value, and generates x value after encryption, Its length should be at least 128 Bytes. After that, the value of x and the related hash function value are protected by "Current_key" (third key) AES encryption. 　 (2) The App will send this uplink message to the original after SSL encryption Password letter system host.

4. After the password setting module receives the uplink message from the App (request to obtain the authentication code): a. Based on the user’s current transaction information, check the content of the App’s current uplink message and identify the content of the mobile device (IMEI) /UDID/Keychain/MAC), the legality of the user’s personal information (ID/Birthday) and the correctness of the installed App, so as to achieve the purpose of authenticating the user’s identity. b. When identifying the user's identity as inconsistent, the password setting module must simultaneously notify the cardholder through SMS, email, etc. When the cumulative number of errors exceeds 4, the system should reject the transaction and ask the user to contact customer service to verify the user's identity and reset the cumulative number of errors. c. After verifying the user's identity, the password setting module generates the content of the uplink message and sends a request to the financial card system host (second server) to obtain the current authentication code value. (1) The content of the uplink message includes: webpage identification code, financial card account number, transaction date, transaction time, ATM machine number, ATM transaction serial number, authentication code value (blank value here), etc. (2) After the financial card system (financial card management module) verifies that the uplink message is correct, it randomly generates an "authentication code value" and responds to the password setting module. (a) The "Authentication Code" is for the cardholder to insert the newly applied physical financial card into the automatic deposit and withdrawal machine (authentication device) and operate a specific transaction, complete the financial card new password setting operation, as the financial card system For the identification of cardholders. (b) The "Authentication Code" dynamically and randomly generated by the financial card management module each time, the validity period is 10 minutes, and the authentication code value is 6-8 random numbers. (c) The financial card management module stores the content of the transaction requirements for subsequent cardholders to use the newly applied physical financial card to insert the automatic deposit and withdrawal machine and operate specific transactions, complete the financial card new password setting work, as a financial card system For the identification of cardholders. d. After the password setting module receives the authentication code value, it first uses the "visual cryptography theory method" to produce the "authentication code value image" for the initial password value of the financial card, and then generates the downlink message (including encrypted Authentication code value image), and reply to App after SSL encryption. (1) Adopt the "visual cryptography theory method" to encrypt and produce the "authentication code value image": (a) Step 1: Obtain the base map or background color randomly (b) Step 2: Generate several interference lines in the background ( Line color, thickness, length, and position are randomly generated) (c) Step 3: Generate numbers (random number color, font, font, shift to different directions (PIXEL) to produce the same number multiple times) (d) Step 4 : Produce several interference lines in the foreground (line color, thickness, length, and position are randomly generated) (e) Step 5: Generate JPEG image file (f) After the password value is properly encrypted and protected by this method, the The clear code value of the image needs to be read by human eyes. (2) The key content of the downlink message: webpage identification code, authentication code value image, App legitimacy authentication result, etc. (3) The password setting module updates the user's current transaction processing status and identity authentication result in the database. (4) In addition to the image of the authentication code value, the content of this downlink message should also include informing the cardholder to operate the specific function of the automatic cash deposit machine within a limited time (for example, 10 minutes) to complete the new password setting of the financial card. (5) The password setting module must synchronously notify the cardholder via SMS or email: the authentication code value is delivered, please operate the specific function of the automatic deposit machine as soon as possible within a limited time to complete the new password setting of the financial card and other information .

5. After the App receives the downlink message (including the authentication code value image) from the password setting module: a. Display the authentication code value image on the personal device interface. b. Display and inform the cardholder to operate the specific functions of the ATM within a limited time to complete the new password setting of the financial card and other messages on the personal device interface. c. App stores the key data of this transaction selection in an encrypted file on the personal device. The file adopts the first-in-first-out method and stores up to ten transaction records.

6. After obtaining the authentication code, the user (cardholder) must insert the newly applied physical financial card into the ATM (authentication device) and perform specific transactions within a limited time to complete the setting of the new financial card password. a. The specific transaction function of the authentication device: (1) The specific transaction function refers to the current branch counter "Financial Card Reset Password" transaction function (non-financial card password change transaction), for cardholders to insert a new physical financial card application Automatic deposit and withdrawal machine, enter the current authentication code value in the automatic deposit and withdrawal machine interface, and the new password value of the financial card set by yourself to complete the setting of the new password of the financial card. (2) Specific transaction function data processing flow: (a) The specific transaction function calls the software in the physical financial card chip, and asks it to randomly generate a set of random numbers. (b) Generate an uplink message and send a request to the financial card management module to generate a new password value for the financial card. Key information of the uplink message: financial card account number, authentication code, new financial card password, random value generated by financial card chip software at the time, etc. (c) After the financial card management module verifies that the uplink message is correct, the hardware DES connected to the calling entity will generate a new password value of the financial card that has been garbled. (d) The financial card management module generates a downlink message (containing "the new password value of the financial card after garbled code") to reply to the specific transaction function of the ATM. (e) The specific transaction function connects to the software in the chip of the physical financial card. Please unlock the card and write "the new password value of the financial card after garbled" to the chip. b. The "Authentication Code" dynamically and randomly generated by the financial card management module each time has a specific valid time limit, and the cardholder must complete the setting of a new financial card password within the time limit. c. When the financial card has completed the new password setting operation, the ATM should refuse the cardholder to repeat the specific transaction function.

7. When the user (cardholder) forgets the authentication code value, the user must re-execute the complete procedure of the transaction operation (the above steps 1.～6.) to obtain a new authentication code value.

8. When the user (cardholder) fails to complete the new password setting of the financial card from the ATM within the time limit, the authentication code will expire after the time limit, and the user must perform the transaction again (step 1. above. ~6.) to obtain the new authentication code value.

To sum up, in the present invention, the transaction device (mobile device) and the authentication device (automated deposit and withdrawal machine) are separated from each other, and the cardholder manually operates the mobile device to align the display on the automatic depositor. The "QR code image" on the ATM interface is scanned and read, prompting the two physical devices to divide the labor to process the same transaction request, and complete the identity verification and authentication procedures within a limited time, so that the cardholder can hold the financial card in time The operation of the deposit and withdrawal machine completes the setting of the new password of the financial card. These multi-factor transaction security models not only meet the requirements of the competent authority for the use of "two (including) more than two technologies" in transaction security design," but also ensure that the electronic transaction is completed manually, completely preventing the remote control of Trojan horse programs. The risk of trading.

The present invention adopts a two-stage identity authentication mode (including the personal information of the user, the authentication data of the binding transaction device and the user identification data, and whether the transaction is manual operation), which is different from the usual "password" The unique authentication mode can receive a comprehensive and substantive strengthening effect on the transaction security threshold of user identity authentication.

The operating behavior of the transaction framework of the present invention requires the user to hold the physical financial card into the ATM to obtain the "QR code image", and the user needs to hold the bound physical mobile device to scan and read the "QR code image" . Even if the transaction device is implanted with monitoring remote programs (monitoring remote programs) Trojan horse programs, hackers are still unable to remotely control to complete the above manual operations to obtain the authentication code value.

For users, the burden and risk related to storage, loss, and theft of the paper cipher can be eliminated. For gangsters and hackers, they need to obtain the user’s physical financial card, the bound physical mobile device, the App’s "activation password" and the user’s personal information at the same time before they have the opportunity to obtain the authentication code value, and within a limited time Complete the setting operation of the new password of the financial card. Compared with the usual cases, you can commit crimes only after obtaining the paper code letter and the physical financial card, and the threshold for prevention has been significantly improved.

For financial institutions, in addition to ensuring an increase in the threshold of information security, the present invention can replace the current cumbersome procedures of manual printing of cipher letters for financial institutions, saving related manual operations, environmental facilities, printing machines, paper, and mailing. , Storage, information security control and risk inspection, etc. operating cost burden, and can achieve the effect of energy saving and carbon reduction.

1 : A system for helping cardholders to set a financial card password for the first time 10 First server 12 : Password setting module 122 : Storage sub-module 20 : Second server 22 : Financial card management module 30 : Software product 40 : Authentication device 42 : Display element 44 : Input element 46 : Financial card reader/writer element 70 : Mobile device S110~S610 : Step flow

Fig. 1 is a block diagram of a system according to a specific embodiment of the present invention.

Fig. 2 is a flowchart showing a method according to a specific embodiment of the present invention.

no

1 : A system used to help cardholders set up a financial card password for the first time

10 : First server

12 : Password setting module

122 : Storage submodule

20 : second server

22 : Financial card management module

30 : Software products

40 : authentication device

42 : Display element

44 : Input components

46 : Financial card reading and writing components

70 : mobile device

Claims (10)

A system for helping a cardholder to set a financial card password for the first time, comprising: a first server, provided with a password setting module, which includes a storage sub-module; a second server, and the first server It is electrically connected and is provided with a financial card management module; a software product (App), which communicates with the first server, the App is installed on a mobile device held by the cardholder, and the App is It is authenticated by the password setting module; and an authentication device is in communication with the second server. The authentication device has a display element, an input element and a financial card reading and writing element; wherein: the password setting module is in a In the pre-registration procedure: receiving a first authentication data, which is composed of the identification information of the mobile device and the personal information of the cardholder, and storing the first authentication data in the storage submodule; and, receiving A second authentication data, which is an optional digest, and stores the second authentication data in the storage sub-module; the authentication device reads the financial card through the financial card read-write element, and uses the display element A first user interface is provided, displaying the option of setting the financial card password for the first time. After this option is selected, the authentication device sends a request for the first setting of the financial card password to the financial card management module; The request to set the financial card password for the first time is sent to the password setting module; the password setting module: combines the first authentication data according to a combination method to generate a first key, wherein the combination method is randomly selected from the plural A combination method, and has a first number; the first number is stored in the storage submodule; an original code content is encrypted based on the first key to generate a two-dimensional barcode, wherein the original code content Including the self-selected digest; sending the two-dimensional barcode to the authentication device; the authentication device displays the two-dimensional barcode on the first user interface through the display element; the App automatically triggers an event after activation, requesting the input of personal Information and financial card account numbers, and send the entered personal information and account numbers to the password setting module; after the password setting module confirms the legality of the App: use it according to the first number stored in the storage sub-module The corresponding combination method combines the first authentication data to generate a second key; randomly selects an encryption method from a plurality of encryption methods, the encryption method having a second number; and, transmits the first number to the App , And based on the confirmation data encrypted by the second key, the confirmation data includes encrypted information, where the encrypted information includes the second number and the initial sampling location; the App obtains the mobile device’s Identify the identification information and the personal information of the cardholder, and combine the identification information and the personal information according to the combination method corresponding to the first number to generate a third key; scanned and read by the mobile device and displayed on the After authenticating the two-dimensional bar code on the display element of the device, the App uses the third key to interpret the two-dimensional bar code to obtain the original code content, and according to the encryption method corresponding to the second number and the start sampling position For the The self-selected digest is encrypted to obtain an encrypted value; and the encrypted value is encrypted based on the third key and then sent to the password setting module; the password setting module confirms the correctness of the encrypted value and sends it to the The financial card management module sends a request for an authentication code and obtains an authentication code; and, generates an authentication code image and sends it to the App; the App displays the authentication code image for the cardholder to use The authentication device is used when the password of the financial card is set for the first time; and the authentication device uses the display element to display a field on the first user interface for the cardholder to input the authentication code and the financial card through the input element To complete the first password setting. For example, the system for helping the cardholder to set the financial card password for the first time in request 1, wherein the password setting module provides a second user interface for the financial card issuer operator to input the first authentication data and the The second certification information. For example, the system for helping the cardholder to set a financial card password for the first time in Request 1, where the App requires an activation password. For example, the system for helping the cardholder to set a password for a financial card for the first time in request 1, wherein the first user interface of the authentication device requires the input of an authentication code and a new password, and at least a part of the personal information, and is based on the input Send a request to set a new password to the financial card management module. For example, the system for helping the cardholder to set the password of a financial card for the first time in request item 4, where the financial card management module confirms that the received authentication code and personal data are correct, obtains a new garbled password, and sends it to the The authentication device is used for writing the garbled new password to the financial card through the financial card reading and writing component. A method for helping a cardholder to set a financial card password for the first time, comprising: providing a first server with a password setting module, which includes a storage sub-module; a second server, and the first server The device is electrically connected with a financial card management module; a software product (App) is connected to the first server, the App is installed on a mobile device held by the cardholder, and the App It is authenticated by the password setting module; and an authentication device is in communication with the second server. The authentication device has a display element, an input element and a financial card reading and writing element; the password setting module is in a preset During the registration process: receiving a first authentication data, which is composed of the identification information of the mobile device and the personal information of the cardholder, and storing the first authentication data in the storage submodule; and receiving a The second authentication data, which is a self-selected abstract, and stores the second authentication data in the storage submodule; the authentication device reads the financial card through the financial card read-write element, and is provided by the display element A first user interface displays the option to set the financial card password for the first time. After this option is selected, the authentication device sends a request to the financial card management module to set the financial card password for the first time; The request for setting the password of the financial card is sent to the password setting module; the password setting module: combines the first authentication data according to a combination method to generate a first key, wherein the combination method is randomly selected from a plurality of The combination method has a first number; the first number is stored in the storage sub-module; an original code content is encrypted based on the first key to generate a two-dimensional barcode, wherein the original code content includes The self-selected digest; send the two-dimensional bar code to the authentication device; the authentication device displays the two-dimensional bar code on the first user interface through the display element; the App automatically triggers an event after activation, requesting the input of personal information And the account number of the financial card, and send the entered personal information and account number to the password setting module; after the password setting module confirms the legality of the App: according to the first number stored in the storage sub-module, use the corresponding The combination method combines the first authentication data to generate a second key; randomly selects an encryption method from a plurality of encryption methods, the encryption method having a second number; and, transmits the first number to the App, And based on the confirmation data encrypted by the second key, the confirmation data includes encrypted information, where the encrypted information includes the second number and the initial sampling location; the App obtains the identification of the mobile device from the mobile device Information and the cardholder’s personal information, and according to the combination method corresponding to the first number, combine the identification information and personal information to generate a third key; scan and read through the mobile device and display it in the certificate After the 2D barcode on the display element of the device, the App uses the third key to interpret the 2D barcode to obtain the original code content, and according to the encryption method corresponding to the second number and the start sampling position, Extract from this optional article Encrypt the encrypted value to obtain an encrypted value; and, based on the third key, encrypt the encrypted value and send it to the password setting module; after confirming the correctness of the encrypted value, the password setting module sends it to the financial card The management module sends a request to obtain an authentication code and obtains an authentication code; and, generates an authentication code image and sends it to the App; the App displays the authentication code image for the cardholder to use the authentication device It is used when the password of the financial card is set for the first time; and the authentication device uses the display element to display a field on the first user interface for the cardholder to input the authentication code and the new financial card through the input element Password to complete the first password setting. For example, the method for helping a cardholder to set a financial card password for the first time in request 6, wherein the password setting module provides a second user interface for the financial card issuer operator to input the first authentication data and the second Certification information. For example, the method for helping the cardholder to set a financial card password for the first time in request 6, wherein the App requires an activation password. For example, the method for assisting the cardholder to set a financial card password for the first time in claim 6, wherein the first user interface of the authentication device requires the input of an authentication code and a new password, and at least a part of the personal information, and is based on the input Send a request to set a new password to the financial card management module. For example, request item 9 is used to help the cardholder to set a financial card password for the first time. After confirming that the received authentication code and personal data are correct, the financial card management module obtains a garbled new password and sends it to the The authentication device is used for writing the garbled new password to the financial card through the financial card reading and writing component.

Images