TW202111577A - Data transmission method with code verification and system thereof - Google Patents

Abstract

A data transmission method with code verification and a system thereof are provided. The system provides an authentication server used to authenticate a user and generate a code that is verified for acquiring data within a deadline. In the data transmission method performed in the authentication server, a data provider firstly receives a data request, and then authenticates a user according to the data request. A code is generated after the user is authenticated. The code is configured to correspond to the data request and the data to be requested. After that, the code is provided to the user, and the user can provide the code to a data demander. The data demander then gets the data from the data provider after the code is delivered to the authentication server and the data provider approves the request. Therefore, a safe and convenient method to transmit the data can be achieved.

Description

Data transmission method and system using code verification

The present invention relates to a data transmission technology, in particular to a data transmission method and system using code verification in which a data provider provides a code verification service.

In today's society where personal privacy is increasingly valued, governments, companies, or organizations that master personal privacy seem to attach great importance to information security. Although personal information is protected, it also makes the transfer of personal data difficult and inconvenient to handle some things.

For example, when there is a need to handle financial matters, if personal privacy information is involved, the entire processing procedure will be more complicated to avoid data leakage or improper handling by unknown persons, or the parties need to be handled at the counter. . If the person involved is abroad, or it is not convenient to handle it at the counter, it may make the whole procedure impossible.

What's more, in some financial procedures that require individuals to issue sensitive information such as assets, loan certificates, and repayment certificates, if relevant units (such as banks) are required to assist in issuing certificates, the entire process is lengthy due to information security and data access It seems inefficient.

As such, the conventional technology does not provide a data transmission technology that is both safe and convenient. Even if the network is more convenient, the goal of effective data conversion cannot be achieved under the restriction of various sensitive data.

The disclosure discloses a data transmission method and system using code verification, and provides a secure and convenient data transmission technical solution, so that users can use the codes provided by the system to allow data demanders to smoothly obtain the data provided by the user.

The system implements a data provider with a verification server and a database (or a storage medium). The verification server is used to verify the identity of the user, generate a code with a data acquisition period, and execute a code verification Data transmission method.

According to the embodiment of the data transmission method using code verification, when a data provider receives a data request, a verification server can request the user to verify the identity of the user based on the user information associated with the data request. After verification, it also means that the user agrees to provide data. The verification server generates a code, where the code corresponds to the data request and the requested piece of data, and then provides the code to the user, and the user provides the code to a data requester.

After the data requester obtains the code, it is submitted to the verification server. After confirmation, the data provider can provide the corresponding data to the data requester according to the code, which completes the data transmission method based on the code.

Further, after the verification server requests the calculation code according to the data, the verification server can record the data corresponding to the code through a database or storage medium, so that when the data requester provides the code to the data provider, it can provide the corresponding data. data of.

According to an embodiment, the data request can be sent by the user to the data provider. After the user obtains the code, the code can be provided to the data requester, so that the data requester can obtain the corresponding data after verification by the verification server with the code. .

In another embodiment, the data request can be sent by the data requester, and the verification server knows the data to be obtained about a certain user. After the code is generated, the verification server provides the code to the user device, and then the user sends it The code is sent to the computer device of the data requester, so that the data requester can obtain the corresponding data after verification by the verification server with the code.

Further, when the verification server receives the code from the computer device of the data requester, it will also verify the identity of the data requester to determine whether to provide the data, or provide all or all of the data according to the authority of the data requester. section.

In order to further understand the features and technical content of the present invention, please refer to the following detailed description and drawings about the present invention. However, the provided drawings are only for reference and description, and are not used to limit the present invention.

The following are specific specific examples to illustrate the implementation of the present invention. Those skilled in the art can understand the advantages and effects of the present invention from the content disclosed in this specification. The present invention can be implemented or applied through other different specific embodiments, and various details in this specification can also be based on different viewpoints and applications, and various modifications and changes can be made without departing from the concept of the present invention. In addition, the drawings of the present invention are merely schematic illustrations, and are not drawn according to actual size, and are stated in advance. The following embodiments will further describe the related technical content of the present invention in detail, but the disclosed content is not intended to limit the protection scope of the present invention.

It should be understood that although terms such as "first", "second", and "third" may be used herein to describe various elements or signals, these elements or signals should not be limited by these terms. These terms are mainly used to distinguish one element from another, or one signal from another signal. In addition, the term "or" used in this document may include any one or a combination of more of the associated listed items depending on the actual situation.

The manual discloses a data transmission method and system using code verification. The proposed solution is mainly to allow users to conveniently and securely provide data to data demanders. The data is stored in the server system of a third-party data provider. Different from the traditional way of providing data (especially sensitive data) that requires the user to obtain it personally and then hand it to the data demander, the data transmission system using code verification can generate one-time data when the user agrees to provide the data to the data demander. The sex code is provided by the user to the data demander, so that the data demander can use this code to obtain the data from the data provider within a period of time.

The said data is mainly kept and stored by the data provider, for example, sensitive data such as financial certificates, deposit certificates, credit certificates that can be issued by banks, or tax payment records that can be provided by tax authorities, or academic certificates that can be provided by schools , Or personal sensitive data kept by public units, etc. These data are generally information that can only be provided after identification. When a person who needs data needs to ask the user for these data, he can make a request to the data provider. The data provider will confirm with the user and provide the user with the code corresponding to the data to be obtained this time, so that the user can provide this code For data requesters, after the data provider receives this code and verifies the code, the corresponding data can be provided to the data requester, eliminating the inconvenience of requiring users to obtain it personally and then giving it to the data requester.

For example, when a user needs to apply for a loan from Bank 1 (that is, the data demander), the bank 1 as a borrower needs the user to provide financial and deposit records, but these data are kept in Bank 2. At this time, the user can A data request is made to Bank 2 (the data provider), and the verification program in Bank 2 can generate a code based on this, so that the user can obtain it and provide it to Bank 1, so that Bank 1 can smoothly obtain financial resources and deposit records from Bank 2.

To cite another example, when a user applies for a job from a company (that is, the data demander), the company needs the user to provide a certificate of academic qualifications, and the company can directly request the school (that is, the data provider) to obtain the user’s academic certificate. In this case, the school first Confirm with the user, generate a one-time code after confirmation, and provide the code to the user. The user provides the code to the company, and the company can obtain the academic certificate from the school based on this code.

In the process, because the original owner of the data saved by the data provider is the user, when it is to be provided to the data demander, the user will be asked to confirm that it is generated and provided to the user through the security mechanism in the data transmission method using code verification The user’s one-time code, which is then provided by the user to the data requester, so that the data provider can provide the data to the data requester in a safe and secure manner.

FIG. 1 shows a schematic diagram of an embodiment of a data transmission system using code verification. The diagram shows three parties: a data provider 101, a data requester 103, and a user 105, each of which is implemented by a computer system and communicates via a network 10.

The data provider 101 has a verification server 111 implemented with software and hardware. The verification server 111 is used to verify the identity of the user and generate a code with a data acquisition period, especially for the one-time data in response to the request Code. The data provider 101 has a database 113 (which can be a variety of storage media). The database 113 or a specific storage medium is used to record the codes generated each time and the corresponding data. For example, the code generation is calculated by an algorithm each time. In addition, when the code generator 115 dynamically generates a code every time, a data acquisition period for obtaining the data can be set, and the code will become invalid when the period expires. The code generator 115 may be a software function running in the verification server 111.

The data provider 101 provides verification services for data transmission at each end through the network 10. According to the data transmission method using code verification disclosed in the disclosure, the data requester 103 can generate a request for data through computer software and send it through the network 10. Go to the data provider 101 and let the authentication server 111 and the user 105 verify their identities, and then confirm whether they agree to the data request of the data requester 103; or, the method can allow the user 105 to use computer software to send the data to the data provider 101 When sending a data request, the data provider 101 first verifies the user's identity, and then generates a code based on the data request after confirming the identity, and provides the code to the user 105 so that the user 105 can transfer the code to the data requester 103, and the data requester 103 The person 103 obtains the data from the data provider 101 with this code.

It is worth mentioning that all end users participating in the data service of the system can first become registered users of the data provider, so that the database 113 in the data provider 101 can record the user 105 or add the data requester 103. Identity data, therefore, the data provider 101 can verify the identity of the data request before providing the data. In addition, the data provider 101 can also set the scope of authority (including user authority, region, time, etc.) that users of each end can obtain data. When the data has multiple levels of sensitivity, it can be based on the identity of the data requester 103 Provide corresponding information with permissions.

Figure 2 shows a flowchart of an embodiment of a data transmission method using code verification.

In this process, starting with step S201, when a user (data owner) or a data requester makes a data request to the data provider, the data provider can pass the authentication server according to the data request and the user associated with the data request The device requires verification of the identity of the user or data requester. The user associated with the data request may be a user identification data recorded, proposed, or corresponding to a request message.

In step S203, after the data provider verifies the identity of each end user, a code can be generated corresponding to the data request. The generation of the code can be dynamically generated by an algorithm. The code corresponds to the current data request and a piece of data. And can set a time limit for obtaining data. Among them, the data is not limited to the number of documents, but can be transmitted one document at a time, or a combination of multiple documents, such as a deposit certificate, a loan certificate, and so on.

After that, whether it is a data request from the user or the data requester, in step S205, the code will be provided to the user first. The method of providing the code is, for example, sending by email, dictating the combination of alphanumeric code, or The code is sent with graphics (such as QR code), such as sending the code to the user device registered by the user. After that, the user can get the sending destination based on the information of the data requester who wants to obtain the data, and the user device sends the code to The computer device of the data requester.

Then, the data requester transmits the code to the verification server, in step S207, the verification server receives the code from the computer device of the data requester, and then in step S209, the data provider provides the corresponding data according to the code.

According to an embodiment, the data provider can generate a one-time code (OTP) based on the request dynamics sent by the user or the data demander or based on the content of the data request at the time. The one-time creation of this code corresponds to the data that the user can provide All or part of, in addition to obtaining the authority based on the data of the data requester, each time the user generates a data request, the software tool can be used to set the scope of the data obtained this time.

Moreover, the data provider’s server system can create a list of data demanders, and set the security level (identity and authority) for all kinds of data demanders. If necessary, authentication should be passed to target the data demanders’ computer equipment. Send data. The method of transferring data can be a direct file transfer service, such as FTP, or using e-mail, instant messaging software, cloud access to file services, etc.

Figure 3 schematically shows an embodiment of the process of obtaining data using code verification.

This example indicates from left to right that the first screen 31 is the end user (the user himself or the data requester) using the software program running in the computer device to set the content of the data request. For example, you can set (1) the user ( Such as user ID, name, account, etc.), (2) data requester (user ID, name, account, etc.), and (3) the content of the data to be requested.

After the data request is generated and sent to the data provider, the second screen 32 displays a schematic diagram of the code received by the user device. After the data provider generates the code according to the data request, it is sent to the user device. The QR Code ) Form (but not limited to this) display.

The third screen 33 shows that the data requester can scan the two-dimensional bar code displayed on the user’s device to obtain the code, but can still obtain the code in other ways (such as copying, one-dimensional bar code, wireless identification code), and send the code to the data after obtaining the code Provider for verification.

After the code and identity displayed on the fourth screen 34 are confirmed, the data provider can provide a data link to the data demander or directly send the data for the data demander to download.

4 schematically shows an embodiment of the flow of a data transmission method using code verification between the server system 41, the user device 42 and the data requester's requester device 43 running on the data provider side.

According to the content of the figure, at the beginning, the user device 42 sends a data request to the server system 41 (S401). The server system 41 can verify the user's identity according to the data request and the user associated with it, and dynamically generate a one-time code, and provide The code (email, dictation, or sending graphics) is sent to the user device 42 (S403), the user device 42 provides the code to the requester device 43 (S405), and the requester device 43 sends the code to the server 41 (S407), The data requester passes the server system (or verification server) verification by virtue of the code, verifies the code through the verification program in the server system 41, and obtains the corresponding data, and then sends the data itself or the data link to the requester device 43 ( S409). After that, the server system 41 can notify the user that the verification and data transmission has been completed.

It is mentioned here that in this embodiment, the user actively sends a data request to the server system 41, but it is still possible that the data demander requests data from the user, and the demander device 43 generates the data request. The user device 42 then forwards the data request to the server system 41.

FIG. 5 shows an embodiment of the flow of another data transmission method using code verification between the running server 41, the user device 42 and the customer device 43.

This process starts with the step of sending a data request (S501) from the requester device 43 to the server system 41. At this time, the server system 41 can obtain the identities of the user and the requester and the requested data from the data request, so that the user can The device 42 requests information that is authorized to provide data (S503). At this time, the user knows through the computer device that the data requester requests the data provider to provide the data, and the user can send the authorization confirmation message to the server system 41 based on the information (S505). Conversely, if the user does not agree to provide data, he can send a message that he does not agree to authorization to the server system 41.

Once the server 41 receives the information that the user authorizes to provide data, it generates a code according to the data request and provides it to the user device 42 (S507). In one case, or the user only agrees to provide part of the data to the data requester, software tools can be used to adjust the content of the data request.

When the user obtains the code, the code can be provided to the requester device 43 (S509). The method of providing the code between the two devices can be, for example, on-site, mail, text message, instant messaging, etc., and then the requester device 43 transmits the code To the server system 41 (S511), the data requester can use this code to pass the server (or verification server) verification, and after the server system 41 verifies the code and the data requester's authority, the data is sent to the requester device 43 (S513). In the step of transmitting the data, it can be judged whether to provide the data, or to provide all or part of the data according to the authority of the data requester.

It is mentioned here that in this embodiment, the data requester sends a data request to the server system 41 at the beginning, but it may still be generated by the user and provide the data request to the data requester. The requester device 43 forwards the data request to the data requester. The aforementioned data is requested to the servo system 41.

Further, in this embodiment, at the beginning, the user device 42 may provide a data request to the requester device 43 and provide the user's identity data, and the requester device 43 forwards the obtained data request and user identity data. To the server system (or authentication server) 41 to verify the identity of the user, the code is generated after the server system 41 is verified. In addition to providing the data to the user device 43 of the data demander, the code can also be sent to the user at the same time The user device 42 allows the user to query the content of the data.

In summary, according to the above embodiment, the data transmission method using code verification provides a solution for transferring data between users, especially user data that needs to be provided by a specific party, such as financial proof, education certificate, and family certificate For sensitive data such as data, the data demander can obtain a one-time code from the user to obtain the data from the data provider based on this code, so as to achieve the purpose of simple and secure data transmission.

The content disclosed above is only the preferred and feasible embodiments of the present invention, and does not limit the scope of the patent application of the present invention. Therefore, all equivalent technical changes made using the description and schematic content of the present invention are included in the application of the present invention. Within the scope of the patent.

10: Internet 101: data provider 111: Verify server 113: Database 115: code generator 103: Data Demanders 105: User 31: The first screen 32: Second screen 33: The third screen 34: Fourth screen 41: Servo system 42: User device 43: Demander's Device Steps S201～S209: One of the data transmission processes using code verification Steps S401～S409: The second data transmission process using code verification Steps S501～S513: The third data transmission process using code verification

Figure 1 shows a schematic diagram of an embodiment of a data transmission system using code verification;

Figure 2 shows a flowchart of an embodiment of a data transmission method using code verification;

Figure 3 schematically shows an embodiment of the process of obtaining data using code verification;

Figure 4 shows one of the process embodiments of the data transmission method using code verification;

Fig. 5 shows the second embodiment of the flow of the data transmission method using code verification.

S201: Request to verify the identity of a user

S203: After passing the identity verification, calculate a code corresponding to the data request

S205: Provide code to user device

S207: Receive code from a data requester

S209: Provide corresponding information according to the code

Claims (10)

A data transmission method using code verification, including: According to a data request and the data request associating a user, a verification server requests to verify the identity of the user; After verifying the identity of the user, a code is generated, where the code corresponds to a data request and a piece of data; The user associated with the data request provides the code to a user device, and the user device provides the code to a computer device of a data requester; The verification server receives the code from the computer device of the data requester; and According to the code, the corresponding data is provided to the computer device of the data requester. The data transmission method using code verification according to claim 1, wherein after the verification server verifies the user, the verification server records the data corresponding to the code through a database or a storage medium. The data transmission method using code verification as described in claim 2, wherein the data request is issued by the user device, and after the verification server verifies the user, the code is generated and provided to the user device. The user provides the code to the computer device of the data requester, so that the data requester can obtain the data after being verified by the verification server with the code. The data transmission method using code verification as described in claim 2, wherein the data requester issues the data request, the verification server generates the code, and then the user receives the code from the verification server, After confirming that the data can be provided, the code is provided to the computer device of the data requester, so that the data requester can obtain the data after being verified by the verification server with the code. The data transmission method using code verification as described in claim 2, wherein the user device provides the data request to the computer device of the data requester, and provides the user’s identity data, and the data requester’s The computer device forwards to the verification server to verify the identity of the user, generates the code after verification by the verification server, provides the data to the computer device of the data requester, and sends the code to the user device at the same time To query the content of the data. The data transmission method using code verification as described in claim 5, wherein when the verification server receives the code from the computer device of the data requester, it verifies the identity of the data requester, so as to be based on the data requester’s The authority determines whether to provide the data, or provide all or part of the data. For example, the data transmission method using code verification according to any one of request items 1 to 6, wherein the code is a dynamic or one-time code generated based on the content of the data request, and is provided with a data transmission method that can obtain the data Data acquisition period. A data transmission system using code verification, including: A verification server for verifying the identity of the user and generating a code with a data acquisition period; A database or a storage medium for recording the codes and corresponding data generated each time; Wherein, using the verification server to perform a data transmission method using code verification includes: According to a data request and a user associated with the data request, the verification server requires verification of the user's identity; After verifying the identity of the user, a one-time code is dynamically generated, and a data acquisition period for obtaining a piece of data is set, where the code corresponds to the data request and the piece of data; The user associated with the data request provides the code to a user device, and the user device provides the code to a computer device of a data requester; The verification server receives the code from the computer device of the data requester; and According to the code, the corresponding data is provided to the computer device of the data requester. The data transmission system using code verification according to claim 8, wherein the user sends the data request, and after the user obtains the code, the code is provided to the computer device of the data requester, so that the data The requester can obtain the data through the code, or provide all or part of the data according to the authority of the data requester. The data transmission system using code verification as described in claim 8, wherein the data requester issues the data request, and then the user receives the code from the verification server and confirms that the data can be provided. The code is sent to the computer device of the data demander, so that the data demander can obtain the data through the code, or provide all or part of the data according to the authority of the data demander.

Images