TW202101343A - GPS detection and warning method for user login location of mobile online banking applications capable of automatically using the geographical data of the user's current login to strengthen user's identity verification - Google Patents

Abstract

Disclosed is a GPS detection and warning method for user login location of mobile Internet banking applications, which can provide users with a security warning mechanism in addition to user accounts and passwords when logging in to the mobile online banking by means of mobile devices. The disclosed method can automatically use the geographical data of the user's current login to strengthen user's identity verification without the need to further verify another identity verification mechanism, In addition, it can notify the user that his mobile Internet banking is being attempted for logging in by an illegal user, and at the same time, enable an immediate receiving of the geographical data of the current login attempt by the illegal user, so as to provide the corroborating information to government agencies involved in cybercrime investigations.

Description

GPS detection and warning method for user login location of mobile online banking application

The present invention relates to a GPS detection and warning method for the user login location of a mobile online banking application, and particularly relates to a mobile device to log in to the mobile online banking. In particular, it can provide users with a user account and password. Security alert mechanism to strengthen user identity verifiers.

The convenience of mobile devices has greatly changed the lives of the new generation of people. In order to provide functions that are closer to the needs of people’s lives, mobile devices have relatively stored a large amount of personal confidential information, and more people use mobile devices as financial management tools. Log in to mobile internet banking to handle transfer and payment and other operations. The current mobile online banking provided by various financial institutions uses user ID and password as login requirements, and the security of information on mobile devices varies according to the habits of individual users. In other words, the user ID and password may be stolen by a deliberate person due to the installation of unknown software, causing loss of personal property or rights. At this stage, the mobile online banking applications (APP) provided by banks for customers will notify the applicant by e-mail or SMS when the customer enters the wrong user code or password. This allows the applicant to know and take precautions (for example, it is recommended to change the code or password as soon as possible). However, the applicant can only know that someone is trying to log in to his online bank account, but he has no way of knowing where he tried to log in, and he cannot provide supporting information as evidence by the relevant units involved in the investigation of cyber crimes. Therefore, ordinary users cannot meet the needs of users in actual use.

The main purpose of the present invention is to overcome the above-mentioned problems encountered by the prior art and provide a way for users to log in to mobile online banking with a mobile device. In addition to the user account and password, it also provides a user security warning mechanism, which automatically The user’s current login location data is used to strengthen the user’s identity verification. There is no need to re-authenticate other identity verification mechanisms. The user can be notified by a text message that his mobile Internet banking is being attempted to log in by an illegal user and immediately received The user’s current login location data can provide supporting information for government agencies involved in cybercrime investigations. The mobile online banking application's user login location GPS detection alert method. In order to achieve the above objectives, the present invention is a mobile online banking application user login location GPS detection and warning method, which at least includes the following steps: Step 1: Log in to the mobile online banking and store at least one user authentication data, The user identity verification data includes the mobile door number of the mobile device that registered the mobile online banking, and the user account and password for logging in to the mobile online banking; Step 2: Obtain the current location when logging in to the mobile online banking Geographic location data, and store the geographic location data of previous successful logins; Step 3: Set an error value for the geographic location of the login source and store it; Step 4: Every time the user logs in to the mobile online bank, After the user account and password are successfully verified, the geographic location data currently logged in is automatically compared with the stored location data of previous successful logins to generate a difference value, and the difference value is judged based on the stored error value Within the range of the error value; and Step 5: Determine whether to allow the user to log in based on the result of comparing the content production log-in location, and determine whether the user is allowed to log in according to the log-in location result, wherein, when the difference value is within the error value range, the When the user logs in, when the difference value is outside the range of the error value, a one-time password (One Time Password, OTP) is generated, and based on the mobile door number of the stored mobile device, the OTP password and the The geographic location data logged in now is sent to the mobile number registered by the user, so that illegal users cannot obtain the OTP password, and it is difficult to log in to the mobile online banking. Legal users can obtain the OTP password through the verification SMS and enter it. After verifying the identity of the user as a legitimate user through the OTP password, the user is allowed to log in, and the user is asked whether to save the geographic location data record that is currently logged in, and provide the legitimate user to discover the action through the verification SMS When online banking is being attempted to log in by illegal users, it can automatically generate notes and provide warnings to notify government units. In the above-mentioned embodiment of the present invention, it further includes a processing unit, a verification unit connected to the processing unit, a positioning unit connected to the processing unit, a login position error setting unit connected to the processing unit, and a processing unit connected to the processing unit. A storage unit, a position comparison unit connected to the processing unit, and a position result production unit connected to the processing unit. In the above embodiment of the present invention, the processing unit is a central processing unit, which can serve as the verification unit, the positioning unit, the login position error setting unit, the storage unit, the position comparison unit, and the position result production unit, Operation, control, processing, encoding, decoding and various driving commands are reached during operation. In the above embodiment of the present invention, the verification unit can verify the user account and password for logging in to the mobile online banking. In the above-mentioned embodiment of the present invention, the positioning unit can automatically detect the current geographic location data when logging in to the mobile Internet banking. The positioning unit is a global positioning system and can receive a satellite positioning signal. The processing unit is based on The satellite positioning signal is used to generate the current geographic location data, and the geographic location data includes attribute data of longitude and latitude. In the above-mentioned embodiment of the present invention, the processing unit automatically records the current geographic location data to the storage unit when receiving the registration information first transmitted by the mobile online banking application of the mobile device. In the above embodiment of the present invention, the log-in location error setting unit can be used to set an error value of the allowed log-in source geographic location, and the error value range is set to 30-200 meters. In the foregoing embodiment of the present invention, the storage unit includes at least a user and mobile device database, a geographic location database, and an allowable error value database, and the user and mobile device database can store registered mobile networks The mobile phone number of the bank’s mobile device, and the account and password for logging in to the mobile online bank. The geographic location database can store the current geographic location data, and the current geographic location data includes the geographic location of previous successful logins Data, the allowable error value database can store the error value of the allowable login source geographic location. In the above embodiment of the present invention, the location comparison unit can automatically compare the location data currently logged in with the location data of previous successful logins in the storage unit every time the user logs in to the mobile online banking. Generate a difference value, and determine whether the difference value is within the error value range according to the error value in the storage unit. In the above-mentioned embodiment of the present invention, the location result production unit includes at least a short message production module and an illegal mark production module. The short message production module can be based on the OTP password required by the user and the usage The user’s current login location data production system verification message, the illegal annotation production system module can mark the user as a legal user or an illegal user based on the verification message, and according to the annotation result, produce the illegal user current The geographical location data logged in, and the geographical location data currently logged in by illegal users of the production system are used as evidence to notify the government unit. In the above embodiment of the present invention, the location result production unit is based on the location comparison unit The result of comparing the content production system's login location, and determining whether the user is allowed to log in based on the login location result; based on the error value in the storage unit, when the difference value generated after the comparison is within the error value range, the When the user logs in, when the difference value is outside the range of the error value, an OTP password is generated, and the OTP password and the geographical location data of the current login are used in a verification message according to the mobile door number of the mobile device in the storage unit The mobile number sent to the user’s registration makes it difficult for illegal users to obtain the OTP password to log in to the mobile online banking, while legitimate users can obtain the OTP password through the verification SMS and enter it into the verification unit. The verification The unit verifies the user’s identity as a legal user through the OTP password, and then allows the user to log in, and at the same time asks the user whether to record the geographical location data currently logged in to the storage unit, and provide legal users with access When the verification message found that the mobile online bank was being attempted to log in by an illegal user, it could automatically generate a note and provide a warning to notify the government unit. In the above embodiment of the present invention, after the verification message is sent to the mobile number registered by the user, the processing unit instructs the verification unit to display a message verification code input page for the user to input the OTP password. In the above-mentioned embodiment of the present invention, the mobile device is a smartphone, tablet, notebook, or wearable device with Global Positioning System (GPS) function.

Please refer to "Figure 1 and Figure 2", which are schematic diagrams of the process of the present invention, And the block diagram of the present invention. As shown in the figure: The present invention is a GPS detection and warning method for user login location of mobile online banking application, which includes the following steps: Step one s1: Log in to mobile online banking and store at least one user identity verification data. The user identity verification data includes the mobile phone number of the mobile device that registered the mobile online bank and the user who logged in to the mobile online bank Account and password; where the mobile device can be a smartphone, tablet, notebook, or wearable device with Global Positioning System (GPS) function. Step two s2: Obtain the current geographic location data when logging in to the mobile online bank, and store the geographic location data of previous successful logins. Step 3 s3: Set an error value for the geographic location of the source to allow login, and store it Step 4: s4: Every time a user logs in to the mobile online banking, after the user account and password are successfully verified, the current location data of the login will be automatically compared with the stored location data of the previous successful logins. Generate a difference value, and judge whether the difference value is within the range of the error value according to the stored error value Step 5 s5: Determine whether to allow the user to log in according to the result of comparing the content production log-in location, and determine whether the user is allowed to log in according to the log-in location result. When the difference value is within the error value range, the user is allowed to log in. If the value is outside the range of the error value, a one-time password (One Time Password, OTP) is generated, and the OTP password and the geographic location data currently logged in are sent in a verification SMS based on the mobile number of the stored mobile device The mobile number registered by the user prevents illegal users from obtaining the OTP password, and it is difficult to log in to the mobile online banking. Legal users can obtain the OTP password through the verification SMS and enter it, and verify the use through the OTP password After the identity of the user is a legitimate user, the user is allowed to log in, and the user is asked whether to save the geographic location data record that is currently logged in, and provide the legal user with the verification SMS and found that the mobile online bank is being used illegally When the user tries to log in, it can automatically generate a note and provide a warning to notify the government unit. In a preferred embodiment of the present invention, it further includes a processing unit 1, a verification unit 2, a positioning unit 3, a login position error setting unit 4, a storage unit 5, a position comparison unit 6, and One location results in production unit 7. The processing unit 1 can be a central processing unit, used as the verification unit 2, the positioning unit 3, the login position error setting unit 4, the storage unit 5, the position comparison unit 6 and the position result production unit 7 ，Operation, control, processing, encoding, decoding and various driving commands during operation. The verification unit 2 is connected to the processing unit 1 for verifying the user account and password for logging in to the mobile online bank. The positioning unit 3 is connected to the processing unit 1, and is used to automatically detect the current geographic location data when logging in to the mobile online banking. The positioning unit 3 is a global positioning system for receiving a satellite positioning signal. The processing unit 1 generates the current geographic location data according to the satellite positioning signal. The geographic location data includes attribute data of longitude and latitude. The log-in position error setting unit 4 is connected to the processing unit 1 to set an error value of the allowable log-in source geographic location, and the error value range is set to 30-200 meters. The storage unit 5 is connected to the processing unit 1 and includes at least a user and mobile device database 51, a geographic location database 52, and an allowable error value database 53. The user and mobile device database 51 can store the mobile phone number of the mobile device registered for the mobile online bank, and the user account and password for logging in to the mobile online bank. The geographic location database 52 can store the current location Geographic location data, the allowable error value database 53 can store the error value of the allowable login source geographic location, where The current geographic location data includes the geographic location data of previous successful logins. The location comparison unit 6 is connected to the processing unit 1, and each time a user logs in to the mobile online banking, it automatically combines the geographical location data currently logged in with the geographical location data of the storage unit 5 for previous successful logins. Compare to generate a difference value, and determine whether the difference value is within the error value range. The location result production unit 7 is connected to the processing unit 1, and can compare the content production log-in location result of the location comparison unit 6 and determine whether the user is allowed to log in according to the log-in location result. The location result production unit 7 includes at least a short message production module 71 and an illegal annotation production module 72. When the difference value is within the error value range, the user is allowed to log in, and when the difference value is within the Outside the error range, the OTP password is generated, and based on the mobile door number of the mobile device in the storage unit, the SMS production module 71 will verify the user’s OTP password and the user’s current login location. The data produces a verification message, and the OTP password and the geographic location data currently logged in are sent to the mobile number registered by the user with the verification message. The processing unit 1 instructs the verification unit 2 to display the SMS verification code input page For the user to enter the OTP password, so that illegal users cannot obtain the OTP password and are difficult to log in to the mobile online bank, while legitimate users can obtain the OTP password through the verification SMS and enter it into the verification unit 2. The verification Unit 2 verifies the user’s identity as a legitimate user through the OTP password, and then allows the user to log in, and at the same time asks the user whether to record the geographical location data currently logged in to the storage unit 5. The illegally registered property The control module 72 can mark a warning that the user is a legal user or an illegal user based on the verification short message, and based on the result of the mark, produce the geographic location data currently logged in by the illegal user, and produce the illegal user The geographical location data currently logged in is used as evidence for notifying government units, so that when legitimate users discover that the mobile internet bank is being attempted to log in by illegal users through the verification message, it can automatically generate notes and provide warnings to notify government units. When the present invention is used, the user login location GPS detection and warning method of the mobile online banking application of the present invention can be implemented in a smart phone and connected with the mobile online banking, and the processing unit 1 is smart The central processing unit of the mobile phone, the verification unit 2, the positioning unit 3, the login position error setting unit 4, the storage unit 5, the position comparison unit 6, and the position result production unit 7 are programs in a smart phone , And stored in the memory, and the storage unit 5 can be a memory, and further has a touch screen for related output and operation. In actual use, when you first install the mobile online banking application (APP), you must agree to open the application to access GPS location information. When the user (user) logs into the mobile online banking with a smartphone for the first time, the processing unit 1 will automatically record the user's current geographic location data when it receives the registration information sent by the mobile online banking application for the first time. Storage unit 5, and the user can set the allowable error value (distance). Every time you log in to mobile online banking, after the user account and password are successfully verified by the verification unit 2, the location comparison unit 6 automatically compares the geographic location data currently logged in with the geographic location data of previous successful logins to generate a difference value. The location result production unit 7 compares the difference between the location data currently logged in and the location information of previous successful logins. If it is within the error value, the user is allowed to log in; if it is outside the error value, it will be used to verify the SMS and send the OTP password And the geographic location data logged in now to the mobile number registered by the user. At this time, after the legitimate user obtains the OTP password, he can log in normally after inputting it on the SMS verification code input page displayed by the verification unit 2. The present invention also asks whether to Record the geographic location data of the current login for future comparison when logging in. And illegal use Because they cannot obtain the OTP password, they cannot log in to mobile online banking. Therefore, the advantages and benefits of using this method are as follows: 1. In addition to user accounts and passwords, provide user safety alert mechanisms to strengthen user identity verification. 2. Every time you log in to mobile online banking, the user’s current login location data is automatically used as an enhanced verification mechanism, and there is no need to re-verify other identity verification mechanisms. 3. When there are illegal users in other countries or regions, trying to log in to others' mobile online banking , As a legitimate user of the original applicant, you can immediately receive a short notice with the geographical location information that is currently logged in, which can be used to provide corroborating information from the relevant government agencies involved in investigating cyber crimes. In summary, the present invention is a mobile online banking application user login location GPS detection and warning method, which can effectively improve the various shortcomings of conventional use, and can provide users with a mobile device to log in to mobile online banking, except for the user account In addition to passwords, it also provides a user security warning mechanism, which automatically uses the user’s current login location data as an enhanced user identity verification, without compulsory re-verification of other identity verification mechanisms, and can notify the user of the mobile online banking When an illegal user attempts to log in, he immediately receives the geographical location data of the illegal user’s current login, which can provide corroborating information for government agencies involved in cybercrime investigations, thereby making the invention more advanced, more practical and more practical. It meets the needs of the user and indeed meets the requirements of an invention patent application, and the patent application is filed in accordance with the law. However, the above are only preferred embodiments of the present invention, and should not be limited by this The scope of implementation of the invention; therefore, all simple equivalent changes and modifications made in accordance with the scope of the patent application for the invention and the content of the description of the invention should still fall within the scope of the patent for the invention. Inside.

1: processing unit 2: Verification unit 3: positioning unit 4: Login position error setting unit 5: Storage unit 51: User and mobile device database 52: Geographic location database 53: Allowable error value database 6: Position comparison unit 7: Location result production unit 71: SMS production module 72: Illegal annotation production module s1～s5: Step 1～Step 5

Figure 1 is a schematic diagram of the process of the present invention. Figure 2 is a block diagram of the present invention.

1: processing unit

2: Verification unit

3: positioning unit

4: Login position error setting unit

5: Storage unit

51: User and mobile device database

52: Geographic location database

53: Allowable error value database

6: Position comparison unit

7: Location result production unit

71: SMS production module

72: Illegal annotation production module

Claims (13)

A GPS detection and warning method for user login location of mobile online banking application, It includes at least the following steps: Step 1: Log in to mobile online banking and store at least one user identity verification data. The user identity verification data includes the mobile phone number of the mobile device registered with the mobile online banking and the user account for logging in to the mobile online banking And password; Step 2: Obtain the current geographic location data when logging in to the mobile online banking, and store the geographic location data of previous successful logins; Step 3: Set an error value of the geographic location of the allowed login source and store it; Step 4: Every time a user logs in to the mobile online banking, after the user account and password are successfully verified, the current location data is automatically compared with the stored location data of previous successful logins to generate A difference value, and judge whether the difference value is within the range of the error value according to the stored error value; and Step 5: Determine whether to allow the user to log in according to the result of comparing the content production log-in location, and determine whether the user is allowed to log in according to the log-in location result, wherein, when the difference value is within the error value range, the user is allowed to log in, when the difference value Outside the range of the error value, a one-time password (One Time Password, OTP) is generated, and based on the stored mobile device’s mobile door number, the OTP password and the currently logged-in geographic location data are sent to The mobile phone number registered by the user prevents illegal users from obtaining the OTP password, and it is difficult to log in to the mobile online banking. Legal users can obtain the OTP password through the verification SMS and enter it to verify the user through the OTP password. After the identity is a legitimate user, the user is allowed to log in, and the user is asked whether to save the geographic location data record that is currently logged in, and provide the legal user with the verification SMS to find that the mobile online bank is being an illegal user Try to log in At the time, it can automatically generate notes and provide warnings to notify government units. According to the user login of the mobile online banking application described in item 1 of the scope of patent application Location GPS detection and warning method, which further includes a processing unit, a verification unit connected to the processing unit, a positioning unit connected to the processing unit, a login position error setting unit connected to the processing unit, and a connection to the processing unit The storage unit, a position comparison unit connected to the processing unit, and a position result production unit connected to the processing unit. According to the user login of the mobile online banking application described in item 2 of the scope of patent application Position GPS detection and warning method, wherein the processing unit is a central processing unit, which can be used as the verification unit, the positioning unit, the login position error setting unit, the storage unit, the position comparison unit and the position result production unit ，Operation, control, processing, encoding, decoding and various driving commands during operation. According to the user login of the mobile online banking application described in item 2 of the scope of patent application Location GPS detection and warning method, wherein the verification unit can verify the user account and password for logging in to mobile online banking. According to the user login of the mobile online banking application described in item 2 of the scope of patent application Position GPS detection and warning method, wherein the positioning unit can automatically detect the current geographic location data when logging in to the mobile Internet bank, the positioning unit is a global positioning system, and can receive a satellite positioning signal, the processing unit According to the satellite positioning signal, the current geographic location data is generated, and the geographic location data includes attribute data of longitude and latitude. According to the user login of the mobile online banking application described in item 2 of the scope of patent application Position GPS detection and warning method, wherein the processing unit receives the mobile device When the mobile online banking application sends the registration information for the first time, it will automatically record the current geographic location data to the storage unit. According to the user login of the mobile online banking application described in item 2 of the scope of patent application The location GPS detection and warning method, wherein the log-in location error setting unit can be used to set an error value of the allowed log-in source geographic location, and the error value range is set to 30-200 meters. According to the user login of the mobile online banking application described in item 2 of the scope of patent application Location GPS detection and warning method, wherein the storage unit includes at least a user and mobile device database, a geographic location database, and an allowable error value database. The user and mobile device database can store registered mobile networks The mobile number of the mobile device of Bank of China, and the account and password for logging in to the mobile online bank. The geographic location database can store the current geographic location data, and the current geographic location data includes the geographic location of previous successful logins Location data, the allowable error value database can store the error value of the allowable login source geographic location. According to the user login of the mobile online banking application described in item 2 of the scope of patent application Location GPS detection and warning method, where the location comparison unit can automatically compare the location data currently logged in with the location data of previous successful logins in the storage unit every time the user logs into the mobile Internet banking To generate a difference value, and determine whether the difference value is within the error value range according to the error value in the storage unit. According to the user login of the mobile online banking application described in item 2 of the scope of patent application Incoming location GPS detection and warning method, wherein the location result production unit includes at least a short message production module and an illegal note production module, the short message production module can be based on the OTP password and The user’s current login location data production system verification short message, the illegal annotation production system module can use the authentication short message to indicate whether the user is a legal user or an illegal user, and produce illegal use based on the annotation result The geographical location data currently logged in by the user, and the geographical location data currently logged in by illegal users of the production system are used as evidence to notify the government. According to the user login of the mobile online banking application described in item 2 of the scope of patent application A method for detecting and alerting in-location GPS, wherein the location result production unit produces the log-in location result according to the content comparison of the location comparison unit, and determines whether the user is allowed to log in according to the log-in location result; When the difference value generated after the comparison is within the range of the error value, the user is allowed to log in. When the difference value is outside the range of the error value, the OTP password is generated and the operation in the storage unit is The mobile phone number of the device, send the OTP password and the geographical location data currently logged in to the mobile phone number registered by the user with a verification SMS, so that illegal users cannot obtain the OTP password to log in to the mobile online banking. A legitimate user can obtain the OTP password through the verification SMS and enter it into the verification unit. The verification unit verifies that the user is a legitimate user through the OTP password and then allows the user to log in and at the same time ask the user Whether to record the geographical location data currently logged in to the storage unit, and provide the legal user to automatically generate a note and provide a warning to notify the government unit when the legal user discovers that the mobile online bank is being attempted to log in by an illegal user through the verification SMS . Users of the mobile online banking application described in item 11 of the scope of patent application The login location GPS detection and warning method, wherein, after the verification short message is sent to the mobile number registered by the user, the processing unit instructs the verification unit to display a short message verification code input page for the user to input the OTP password. According to the user login of the mobile online banking application described in item 1 of the scope of patent application Incoming location GPS detection and warning method, wherein the mobile device is a global fixed Smartphones, tablets, notebooks, or wearable devices with Global Positioning System (GPS) function.

Images