TW202201322A - System for using automation machine to scan barcode and verify identity for applying account and method thereof - Google Patents

Abstract

A system for using an automation machine to scan a barcode and verify identity for applying an account and a method thereof are provided. By obtaining a pending data from a mobile by an automation machine, obtaining a signature data from a certificate carrier by the automation machine after the pend data is confirmed by a digital bank server, and executing an account applying operation based on an applying data transmitted from the mobile by the digital bank server after the signature data is verified by a verification server, the system and the method can use automation machine to complete identity verification of open bank account, and can achieve the effect of choosing time and place suited for account holder to complete identity verification.

Description

System and method for completing account application by scanning QR code through ATM

A system and method for remote application of digital account, in particular, a system and method for completing account application by scanning QR code through an automatic teller machine.

Banks are financial institutions that provide payments, deposits, savings, loans, wire transfers, and more. To use the services provided by the bank, you usually need to open an account with the bank first.

At present, although it is possible to open a digital account online through internet banking or mobile banking, the method of opening such an account depends on the method of identity confirmation, and the level of the digital account opened is also different. Compared with the digital account opened with full identity verification, there are many restrictions, for example, some transactions cannot be executed or the amount that can be used in the transaction is lower. If you want to open a digital account with more complete functions, it is still the same as opening a general account. You need to check the account opening information provided by the account holder at the counter to determine whether the account holder is allowed to open an account.

In order to prevent the account holders who open an account online through Internet banking or mobile banking from needing to confirm their identity at the counter, it is also possible to allow the account holder to upload a photocopy or image of the certificate during the online account opening process, so as to provide the bank's service personnel with judgment. Whether to allow the account holder to open an account. However, such an account opening process needs to wait for the bank service personnel to review, and it is impossible to open an account for the account holder immediately. In order to solve this problem, some banks also provide account holders to use digital certificates such as natural person certificates to conduct identity verification during the online account opening process. However, the natural person certificate needs to be read through a card reader, but not all account holders have a card reader that can be used. The environment or the policy of the application or browser running in the operating system makes it impossible to access the card reader or obtain a digital certificate through the card reader, causing inconvenience and trouble for the account holder.

To sum up, it can be seen that there has been a long-standing problem in the prior art that various online account opening methods may cause the account holder to fail to complete the instant account application. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the problem in the prior art that various online account opening methods may cause the account holder to be unable to complete the account application in real time, the present invention discloses a system and method for completing the account application by scanning a QR code through an ATM, wherein:

The system for completing account application through ATM scan code verification disclosed in the present invention at least includes: a digital banking server; a mobile device for generating and transmitting application data to the digital banking server, and for receiving the digital banking server The verification serial number generated by the device, and the corresponding coded data is generated according to the verification serial number; the automatic teller machine is used to obtain the coded data through the mobile device and decode the coded data into the data to be verified, and to transmit the data to be verified to the digital silver server, Make the digital bank server compare the data to be verified with the verification serial number, and judge whether the comparison result returned by the digital bank server indicates that the data to be verified is confirmed, then connect to the certificate carrier and obtain the signature data through the certificate carrier; verify The server is used to verify the signature data sent by the ATM, and send the corresponding verification results to the digital bank server, so that the digital bank server can determine that the signature data has been verified by the verification server, and then perform corresponding processing according to the application data. Account application job.

The method disclosed by the present invention for completing the account application through ATM scanning code verification, the steps at least include: the mobile device generates and transmits the application data to the digital banking server; the digital banking server generates a verification serial number and transmits it back to the mobile device; The mobile device generates the corresponding coded data according to the verification serial number; the ATM obtains the coded data through the mobile device and decodes the coded data into the data to be verified; the ATM sends the data to be verified to the digital server; the digital server compares the data to be verified with the data to be verified. Verify whether the serial numbers are the same, and send the corresponding comparison result back to the ATM; the ATM judges that the comparison result indicates that after the data to be verified has been confirmed, connect the certificate carrier and obtain the signature data through the certificate carrier; the ATM sends the signature The signature data is sent to the verification server; the verification server verifies the signature data, and sends the corresponding verification result to the digital bank server; after the digital bank server judges that the signature data is verified by the verification server, the corresponding account is established according to the application data Apply for a job.

The system and method disclosed in the present invention are as above, and the difference between the system and the prior art is that the present invention obtains the data to be verified from the ATM through the mobile device, and obtains the data to be verified through the certificate carrier after the data to be verified is confirmed by the digital silver server Signature data, after the signature data is verified by the verification server, the digital bank server will perform the corresponding account application operation according to the application data sent by the mobile device, so as to solve the problems existing in the prior art, and to allow the account opener The technical effect of freely choosing a convenient time and place to complete the account application.

The features and implementations of the present invention will be described in detail below in conjunction with the drawings and examples, and the content is sufficient to enable any person skilled in the relevant art to easily and fully understand the technical means applied to solve the technical problems of the present invention and implement them accordingly, thereby achieving The effect that the present invention can achieve.

The present invention allows the user (account opener) to first use the mobile device to connect to the digital banking server to fill in the application information, and then use the certificate carrier to complete the account application operation to the ATM. Among them, the account application operation mentioned in the present invention, such as account opening or account upgrade, etc., but the present invention is not limited to this.

The digital banking server mentioned in the present invention includes, but is not limited to, computing devices that provide services through the Internet, such as an online banking server or a mobile banking server; the certificate carrier mentioned in the present invention is capable of storing digital certificates. And can implement such as chip operating system (Chip Operating System, COS) to encrypt data and/or sign data and other hardware devices that can manage and use digital certificates, such as chip cards (IC cards), etc., but the present invention does not This is the limit; the ATMs mentioned in the present invention include but are not limited to automatic teller machines (Automated Teller Machines, ATMs) or automatic deposit machines (Cash Deposit Machines, CDMs) that provide one or more types of banking services. .

The computing device mentioned in the present invention includes, but is not limited to, one or more processors, one or more memory modules, and hardware components such as bus bars connecting different hardware components (including memory modules and processors). . Through the multiple hardware components included, the computing device can load and execute the operating system, so that the operating system runs on the computing device, and can also execute software or programs. In addition, the computing device also includes a housing, and each of the above-mentioned hardware components is disposed in the housing.

The bus of the computing device mentioned in the present invention may include one or more types, such as a data bus, an address bus, a control bus, an extended function bus ( expansion bus), and/or local bus type bus. The bus bars of computing equipment include, but are not limited to, Industry Standard Architecture (ISA) bus bars, Peripheral Component Interconnect (PCI) bus bars, Video Electronics Standards Association (VESA) bureaus Domain bus, as well as serial Universal Serial Bus (USB), Express Peripheral Component Interconnect (PCI Express, PCI-E/PCIe) bus, etc.

The processor of the computing device of the present invention is coupled to the bus. The processor contains a register bank or register space, which may be located entirely on the processing die, or wholly or partially located off the processing die and via dedicated electrical connections and/or coupled to the processor via a bus. A processor may be a processing unit, microprocessor or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and are coupled and communicated through a bus. A processor can interpret a computer instruction or a series of multiple computer instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copy/move data, etc., so as to drive other hardware components in the computing device Or run the operating system or execute various programs and/or modules.

Computing devices usually also contain one or more chipsets. The processor of the computing device may be coupled to the chip set or electrically connected to the chip set through a bus bar. Chipset is composed of one or more integrated circuits (Integrated Circuit, IC), including memory controller and peripheral I/O controller, that is to say, memory controller and peripheral I/O controller The device may be included in one integrated circuit or implemented using two or more integrated circuits. Chip sets usually provide I/O and memory management functions, and provide a plurality of general-purpose and/or special-purpose registers, timers, etc., wherein the above-mentioned general-purpose and/or special-purpose registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access data in the memory modules and mass storage areas installed on the computing device through the memory controller. The above-mentioned memory modules include any type of volatile memory (volatile memory) and/or non-volatile memory (NVRAM), such as Static Random Access Memory (SRAM) , Dynamic random access memory (Dynamic Random Access Memory, DRAM), read-only memory (Read-Only Memory, ROM), flash memory (Flash memory), etc. The above-mentioned mass storage area can include any type of storage device or storage medium, such as hard disk drive, optical disc, flash drive, memory card, Solid State Disk , SSD), or any other storage device, etc. That is, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drive, and solid state hard disk.

The processor of the computing device can also connect and communicate with peripheral devices or interfaces such as peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers through peripheral I/O buses through peripheral I/O controllers. The peripheral input device can be any type of input device, such as keyboard, mouse, trackball, touchpad, joystick, etc. The peripheral output device can be any type of output device, such as a monitor, printer, etc., the peripheral input device The peripheral output device can also be the same device, such as a touch screen. The communication interface may include a wireless communication interface and/or a wired communication interface, and the wireless communication interface may include support for wireless local area networks (such as Wi-Fi, Zigbee, etc.), Bluetooth, infrared, Near-field communication (NFC), 3G/4G/5G and other mobile communication network (cellular network) or other wireless data transmission protocol interface, wired communication interface can be Ethernet device, DSL modem, cable (Cable) modem, asynchronous transmission Mode (Asynchronous Transfer Mode, ATM) devices, or optical fiber communication interfaces and/or components, etc. The processor can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data through various peripheral devices and interfaces, and can also communicate with another computing device having the hardware components described above. communication.

The system operation of the present invention will be described below with reference to "Fig. 1" of the system architecture diagram of the present invention for completing the account application through the ATM scanning QR code verification. As shown in "FIG. 1", the system of the present invention includes a mobile device 110, an ATM 120, a certificate carrier 130, a verification server 150, a digital silver server 170, and an additional identity verification server 160, a relay Server 190. The mobile device 110 , the ATM 120 , the verification server 150 , the identity verification server 160 , the digital silver server 170 and the relay server 190 are computing devices.

The mobile device 110 can be connected to the digital silver server 170 through a wireless network, and can transmit data or signals to the digital silver server 170 , and can also receive data or signals sent by the digital silver server 170 . The wireless network mentioned in the present invention includes a mobile communication network (cellular network) or a wireless local area network.

The mobile device 110 is responsible for generating the application data. Generally speaking, the mobile device 110 can provide a data input interface for the user to input application data. In the present invention, the application data includes but is not limited to the user's name, identification data, gender, birthday, address, communication data, etc., wherein the user's identification data is usually an ID card number, passport number or visa number, etc. and the customer Data with a one-to-one relationship, but the present invention is not limited to this; the user's communication data includes but is not limited to mobile phone numbers, email accounts, instant messaging accounts, and other data that can communicate with customers. In some embodiments, the application data may also include a certificate image of the identity certificate held by the user. Among them, the user's ID card is usually an ID card, driver's license, health insurance card, etc., which have the facial image of the account holder.

The mobile device 110 is also responsible for transmitting the generated application data to the digital banking server 170 , and is responsible for receiving the verification serial number returned by the digital banking server 170 . The mobile device 110 is also responsible for generating the encoded data corresponding to the received verification serial number. The encoded data generated by the mobile device 110 is usually a two-dimensional barcode such as a QR code, but the present invention is not limited to this. For example, the encoded data can also be a one-dimensional barcode or a set of characters, letters, numbers, A string of arbitrary arrangements of symbols.

The ATM 120 can be connected to the verification server 150 and the digital silver server 170 through a wired network or a wireless network, and can transmit data or signals to the verification server 150 or the digital silver server 170 , and can also receive the verification server 150 Or the data or signal sent by the digital silver server 170 . The wired network mentioned in the present invention is, for example, an Ethernet network or an optical fiber network, but the present invention is not limited thereto.

The ATM 120 may also provide a user interface for the user to input the user's identification information.

The ATM 120 is responsible for obtaining the encoded data through the mobile device 110 . Generally speaking, a scanning device (not shown in the figure) may be installed in the ATM 120, so as to obtain the coded data by scanning the coded data displayed on the mobile device 110 through the scanning device, but the present invention is not limited to this, for example, automatic A near-end communication device (not shown in the figure) may also be installed in the teller machine 120, and the encoded data is obtained by receiving the encoded data transmitted by the mobile device 110 through the near-end communication device. The near-end communication device may be a near-field communication device or a wireless communication device such as Bluetooth or infrared, which is not particularly limited in the present invention.

The ATM 120 is also responsible for decoding the obtained encoded data into the data to be verified, and is responsible for transmitting the decoded data to be verified to the digital silver server 170 . In some embodiments, the ATM 120 may also transmit the user's identification data and the data to be verified to the digital silver server 170 .

The ATM 120 is also responsible for receiving the comparison result sent by the digital silver server 170, and is responsible for judging whether the received comparison result indicates that the data to be checked has been confirmed. The ATM 120 is also responsible for connecting the certificate carrier 130 when it is determined that the comparison result indicates that the data to be verified has been confirmed. Generally speaking, the ATM 120 can be provided with a connection interface of the certificate carrier 130 , such as a chip card slot, a memory card slot, a USB slot, etc., so that the certificate carrier 130 can be connected to the ATM 120 through the corresponding connection interface. connect. For example, when the credential carrier 130 is a chip card, the connection interface may be a chip card slot.

The ATM 120 is also responsible for obtaining the signature data through the voucher carrier 130 . In the present invention, the signature data may include the target data and the signature value generated by the certificate carrier 130 for signing the target data. In some embodiments, the signature data may also include the target data and/or the certificate carrier 130 stored digital credentials. Generally speaking, the target data can include the data generated by the ATM 120 that is to be transmitted to the digital banking server 170 through the authentication server 150, such as customer identification data or randomly generated data of a specific length, but the present invention does not This is limited.

Generally speaking, the ATM 120 can obtain the certificate password, and can execute the pre-stored or installed driver program of the certificate carrier 130 to drive the certificate carrier 130, so that after the certificate carrier 130 is driven, the obtained certificate password and the target data are sent to the certificate carrier 130 , and the signature data returned by the certificate carrier 130 is received. The ATM 120 may display a password input interface for the user to input the certificate password to obtain the certificate password. In addition, in some embodiments, the ATM 120 may also be pre-installed with a security control component, and may execute the security control component, so as to transmit the certificate password and target data to the certificate carrier 130 through the security control component, and through the security control component Receive the signature data returned by the certificate carrier 130 . However, the manner in which the ATM 120 obtains the signature data through the certificate carrier 130 is not limited to the above.

The ATM 120 is also responsible for transmitting the signature data to the verification server 150 . In some embodiments, the ATM 120 may also transmit the identification data and the signature data to the verification server 150 together.

The ATM 120 can also receive the operation processing result or prompt message sent by the digital silver server 170, or can receive the verification result sent by the verification server 150, and can display the received operation processing result/prompt message/verification result . Even, the ATM 120 can play the corresponding sound or image according to the operation processing result/prompt message/verification result.

The credential carrier 130 is responsible for storing private keys and digital credentials. The private key is usually owned by the holder of the certificate carrier 130 ; the digital certificate includes a public key and a certificate serial number corresponding to the private key stored in the certificate carrier 130 .

The certificate carrier 130 can encrypt or sign the target data using the stored private key. After the certificate carrier 130 signs the target data, it can generate the signature data, and can transmit the generated signature data back to the ATM 120 . Generally speaking, the private key stored in the certificate carrier 130 is encrypted, but the invention is not limited thereto. The credential carrier 130 can receive the credential password transmitted by the ATM 120, and decrypt the stored private key using the obtained credential password.

The authentication server 150 can be connected to the ATM 120 , the digital banking server 170 and the identity verification server 160 through a wired or wireless network, and can receive information from the ATM 120 , the digital banking server 170 and/or the identity verification server 160 . The transmitted data or signal may also be transmitted to the ATM 120 , the digital banking server 170 and/or the identity verification server 160 .

The verification server 150 is responsible for receiving the signature data sent by the ATM 120, and is responsible for verifying the received signature data to generate a corresponding verification result, and is responsible for transmitting the generated verification result to the digital silver server 170 ( and ATM 120). Generally speaking, the verification server 150 can obtain the user's public key from the digital certificate included in the signature data, and use the user's public key and the target included in the signature data, as in the conventional signature verification method. Data verification and seal data to generate verification results. When the signature data is verified, the verification result generated by the verification server 150 may include the target data in the signature data, but the invention is not limited to this.

The authentication server 150 may also receive the identification data transmitted by the ATM 120 . In some embodiments, the verification server 150 may read the certificate serial number from the digital certificate contained in the received signature data, and may generate certificate confirmation data including the received identification data and the read certificate serial number , and the generated credential verification data can also be sent to the identity verification server 160 .

The authentication server 150 can also receive the identity confirmation result sent by the identity confirmation server 160, and can pass the authentication of the authentication server 150 itself in the received signature data and the received identity confirmation result represents the generated certificate When the confirmation data is verified by the identity confirmation server 160, the verification result indicating that the signature data has passed the verification is generated. On the contrary, if the signature data fails the verification by the verification server 150, or the identity confirmation result indicates that the certificate confirmation data has not passed the identity verification When the verification of the verification server 160 is confirmed, the verification server 150 may generate a verification result indicating that the signature data has not passed verification.

The identity verification server 160 can be connected to the verification server 150 through a wired or wireless network, and can receive data or signals sent by the verification server 150 , and can also transmit data or signals to the verification server 150 .

The identity confirmation server 160 can receive the certificate confirmation data sent by the authentication server 150, and can use the storage medium (not shown in the figure) set in the identity confirmation server 160 or an external storage device (not shown in the figure) connected to the identity confirmation server 160. (not shown in the figure) read out the relevant data of the digital voucher corresponding to the voucher serial number in the voucher confirmation data. The relevant data of the digital certificate read by the identity verification server 160 includes the identification data of the certificate owner.

The identity verification server 160 can also determine whether the identification data of the certificate owner contained in the relevant data of the read digital certificate is consistent with the identification data in the certificate confirmation data, and generate a corresponding identity confirmation result, that is, to generate an indication of Whether the identification data in the certificate confirmation data is associated with the digital certificate in the certificate confirmation data is an identity confirmation result, and the generated identity confirmation result is sent back to the verification server 150 . If the identification data of the certificate owner is the same as the identification data in the certificate confirmation data, the identity confirmation server 160 can confirm that the certificate confirmation data is consistent with the owner of the digital certificate in the signature data received by the authentication server 150, and also It is to confirm that the identification data in the certificate confirmation data is associated with the digital certificate in the certificate confirmation data. On the contrary, if the identification data of the certificate owner is different or inconsistent with the identification data in the certificate confirmation data, the identity confirmation server 160 can determine the certificate. The confirmation data does not match the owner of the digital certificate, that is, the identification data in the confirmation certificate confirmation data is not related to the digital certificate in the certificate confirmation data.

The digital silver server 170 can be connected to the mobile device 110 , the ATM 120 , and the authentication server 150 through a wired or wireless network, and can receive data or signals sent by the mobile device 110 , the ATM 120 and/or the authentication server 150 , and may also transmit data or signals to the mobile device 110 , the ATM 120 and/or the authentication server 150 .

The digital silver server 170 is responsible for receiving the application data sent by the mobile device 110, and is responsible for generating a verification serial number corresponding to the received application data. The digital silver server 170 can use the serial number to generate the verification serial number, and can also perform specific operations on the application data to generate the verification serial number, which is not particularly limited in the present invention. The above-mentioned specific operations are, for example, hash operations, or combination of characters in specific positions extracted from the application data, but the present invention is not limited thereto.

The digital silver server 170 is also responsible for receiving the data to be verified sent by the ATM 120, and is responsible for comparing whether the received data to be verified is the same as the generated verification serial number, and is responsible for comparing the generated verification data with the verification serial number Whether the comparison result is the same or not is transmitted to the ATM 120 . The digital silver server 170 can receive the identification data sent by the ATM 120 together with the data to be verified, and read the verification serial number according to the received identification data, so as to compare whether the verification data and the verification serial number are the same.

The digital silver server 170 is also responsible for receiving the verification result sent by the verification server 150, and is responsible for judging that the received verification result indicates that after the signature data has passed the verification, the corresponding account application operation is performed according to the application data sent by the mobile device 110. . The digital silver server 170 may also transmit the operation processing result of the account application operation to the ATM 120 . The job processing result may indicate that the account application operation is successfully completed or that the account application operation cannot be completed, and the job processing result may also include the reason why the account application operation cannot be completed, but the present invention is not limited thereto.

In addition, the present invention may further include a relay server 190 for security, management, scalability and/or other considerations. The relay server 190 can be connected to the ATM 120, the verification server 150 and the digital silver server 170 through a wired or wireless network, so that the ATM 120, the verification server 150 and the digital silver server 170 send data or signals It can be forwarded through the relay server 190. For example, the relay server 190 can receive the data to be verified from the ATM 120 and transmit the received data to the digital server 170, and can also receive the digital server The comparison result sent by the machine 170 and the received comparison result are sent to the ATM 120 , and the signature data sent by the ATM 120 can also be received and the received signature data are sent to the verification server 150 , can also receive the verification result sent by the verification server 150 and transmit the received verification result to the digital silver server 170 (and the ATM 120 ), or receive the operation processing result generated by the digital silver server 170 and The job processing result is transmitted to the automatic teller machine 120 or the like.

It should be noted that, if the relay server 190 is included in the present invention, the ATM 120 may include a message gateway (not shown in the figure), and the message gateway can convert the data to be transmitted by the ATM 120 into messages Then, it is sent to the relay server 190. The relay server 190 can restore the received message to the data to be sent by the ATM 120, and then forward it to the destination, that is, the verification server 150 or the digital silver server. 170; the relay server 190 can also convert the message sent by the verification server 150 or the digital silver server 170 to the ATM 120 into a message and then send it to the ATM 120. After receiving the message, the ATM 120 can The received message is restored to the data sent by the verification server 150 or the digital silver server 170 .

Next, an embodiment is used to explain the operation system and method of the present invention, and please refer to "Fig. 2A" for the flow chart of the method of the present invention for completing the account application by scanning the QR code through the ATM. In this embodiment, it is assumed that the mobile device 110 is a mobile phone, and the ATM 120 , the verification server 150 and the digital silver server 170 transmit data or signals through the relay server 190 , but the present invention is not limited to this. .

First, the user can operate the mobile device 110 to connect to the digital silver server 170, so that the mobile device 110 can generate application data and can transmit the generated application data to the digital silver server 170 (step 210). In this embodiment, it is assumed that the user can operate the mobile device 110 to execute the mobile banking application. After the mobile banking application is executed, the user can select the function of "opening an account" on the initial screen of the mobile banking application or can Select the "upgrade" function in the account setting interface of the mobile banking application. After that, the mobile banking application can provide an application data input interface. The user can input application data in the application data input interface, so that the mobile device 110 can obtain the application data. .

After the digital banking server 170 receives the application data sent by the mobile device 110, the digital banking server 170 can generate a verification serial number corresponding to the received application data, and transmit the generated verification serial number to the mobile device 110 ( Step 221), and can store the received application data and verification serial number. In this embodiment, it is assumed that the digital silver server 170 can use the identification data of the user included in the application data as an index of the application data and the verification serial number when storing the application data and the verification serial number.

After the mobile device 110 receives the verification serial number returned by the digital silver server 170, it can generate encoded data corresponding to the received verification serial number (step 225). In this embodiment, it is assumed that the mobile device 110 receives the verification serial number from the mobile banking application and generates a QR code including the verification serial number.

After the mobile device 110 generates the encoded data (step 225 ), the ATM 120 can obtain the encoded data through the mobile device 110 , and decode the encoded data into the data to be verified (step 230 ). In this embodiment, after the user arrives at the ATM 120, the user can operate the mobile device 110 to execute the mobile banking application, so that the mobile banking application displays the generated QR code (or the user can also operate the mobile device 110 to display the generated QR code) QR code image generated by the banking application), the user can also operate the ATM 120. If the operation interface 310 of the ATM 120 is as shown in “Figure 3A”, the user can select the “Identity Verification” icon in the lower left corner. The function option 311 enables the ATM 120 to display the input interface 330 as shown in "Figure 3B" to provide the user to input the ID number (identification data), and to scan the displayed information on the mobile device 110 through the barcode scanning device included in the ATM 120 QR code to get coded data.

After the ATM 120 obtains the data to be verified, the data to be verified can be sent to the digital silver server 170 . In this embodiment, it is assumed that the ATM 120 can transmit the identification data and the data to be verified to the digital silver server 170 through the relay server 190 by using the included message gateway (not shown in the figure).

After receiving the identification data and the data to be verified from the ATM 120, the digital silver server 170 can compare whether the received data to be verified is the same as the previously generated verification serial number, and compare the generated data. The corresponding comparison result is transmitted back to the ATM 120 (step 250). In this embodiment, it is assumed that the digital silver server 170 can read the previously generated verification serial number according to the received identification data, and then compare the received data to be verified with the read verification serial number to generate a corresponding verification number. The comparison result is sent back to the ATM 120 through the relay server 190 .

After receiving the comparison result sent by the digital silver server 170 , the ATM 120 can determine whether the received comparison result indicates that the obtained data to be verified has been confirmed by the digital silver server 170 . If not, the ATM 120 may display a corresponding error message.

If the comparison result received by the ATM 120 indicates that the obtained data to be verified has been confirmed by the digital silver server 170, the ATM 120 may prompt the user to connect the certificate carrier 130 and the ATM 120, and through the connected The certificate carrier 130 obtains the signature data (step 260 ), and transmits the signature data obtained through the certificate carrier 130 to the verification server 150 . In the present embodiment, it is assumed that as shown in the flow of "Fig. 2B", if the certificate carrier 130 held by the user is an actual natural person certificate, the ATM 120 can execute the driver for the pre-installed natural person certificate and display a prompt message for inserting the natural person certificate, and after the user inserts the natural person certificate into the chip card slot of the ATM 120 and connects the certificate carrier 130 and the ATM 120 (step 262 ), the password input interface for the certificate password can be displayed, and can obtain the certificate password after the user enters the certificate password in the password input interface, and can transmit the target data and the obtained certificate password to the certificate carrier 130 through the security control element pre-installed in the ATM 120 (step 263 ). , so that the certificate carrier 130 can use the certificate password provided by the ATM 120 to decrypt the stored private key, and can use the decrypted private key to sign the target data sent by the ATM 120 to generate signature data (step 265 ). ), send the signature data back to the ATM 120 , so that the ATM 120 can receive the signature data generated by the certificate carrier 130 through the security control element (step 267 ), and can transmit the user’s signature data through the relay server 190 . The input identification data and the signature data generated by the certificate carrier 130 are transmitted to the authentication server 150 (step 268).

After the verification server 150 receives the identification data and the signature data sent by the ATM 120, it can verify the received signature data to generate a corresponding verification result, and can send the generated verification result back to the digital bank Server 170 (step 270). In this embodiment, it is assumed that the verification server 150 can read the certificate serial number from the digital certificate in the signature data, obtain the corresponding public key according to the certificate serial number, and can use the obtained public key to verify the signature data to Generate a corresponding verification result, that is, generate a verification result of whether the signature data has passed the verification, and the verification server 150 can transmit the generated verification result to the digital silver server 170 through the relay server 190, or through the middle Next, the server 190 transmits the verification result to the ATM 120 for display.

If the identity verification server 160 is also included in this embodiment, the verification server 150 can also transmit the received identification data and the read certificate serial number to the identity verification server 160 after the signature data is verified. , so that the identity verification server 160 can determine whether the digital certificate included in the signature data received by the verification server 150 is owned by the holder of the certificate carrier 130 , that is, the identity verification server 160 determines whether the received digital certificate is Whether the identification data is associated with the received certificate serial number to generate a corresponding identity confirmation result, and the identity confirmation result can be sent back to the verification server 150, and the verification server 150 can indicate the identification in the received identity confirmation result When the data is associated with the certificate serial number, a verification result indicating that the signature data has passed the verification is generated; however, if the verification server 150 determines that the identity verification result indicates that the identification data is not associated with the certificate serial number, the verification server 150 may generate a verification result indicating that the signature data is not Validation result of passing validation. Afterwards, the verification server 150 can transmit the generated verification result to the digital silver server 170 (and the ATM 120 ) through the relay server 190 .

After the digital silver server 170 receives the verification result sent by the verification server 150 , the digital silver server 170 can determine whether the signature data obtained by the ATM 120 has passed the verification of the verification server 150 according to the verification result. If not, the digital silver server 170 may send a prompt message indicating that the verification of the signature data fails to the ATM 120 for display through the relay server 190 .

If the verification result indicates that the signature data obtained by the ATM 120 has been verified by the verification server 150, the digital banking server 170 can store the verification result and perform the corresponding account application operation according to the application data received from the mobile device 110 (step 290). In this embodiment, it is an account opening or account upgrading operation, and the operation processing result can be transmitted to the ATM 120 through the relay server 190, so that the ATM 120 displays the operation processing result.

In this way, through the present invention, the user can first fill in the application information through the mobile device, and then use the mobile device and the certificate carrier to confirm the identity of the ATM, so as to complete the account application operation that needs to be at the counter.

From the above, it can be seen that the difference between the present invention and the prior art is that the ATM obtains the data to be verified through the mobile device, and after the data to be verified is confirmed by the digital silver server, the signature data is obtained through the certificate carrier , after the signature data is verified by the verification server, the digital silver server performs the corresponding account application operation according to the application data sent by the mobile device. By this technical means, it can solve the various existing problems in the prior art. The online account opening method may cause the problem that the account holder cannot complete the account opening application immediately, thereby achieving the technical effect of allowing the account holder to freely choose a convenient time and place to complete the account application.

Furthermore, the method of the present invention for completing the account application by scanning the QR code through the ATM can be implemented in hardware, software or a combination of hardware and software, and can also be implemented in a computer system in a centralized manner or with different components. A decentralized implementation spread over several interconnected computer systems.

Although the embodiments disclosed in the present invention are as above, the above-mentioned contents are not intended to directly limit the scope of the patent protection of the present invention. Any person with ordinary knowledge in the technical field to which the present invention pertains, without departing from the spirit and scope disclosed by the present invention, makes slight modifications to the form and details of the implementation of the present invention, all belong to the patent protection of the present invention Scope. The scope of patent protection of the present invention shall still be defined by the appended patent application scope.

110: Mobile Devices 120: ATM 130: Credential Vehicle 150:Authentication server 160: Identity Verification Server 170: Counting Silver Server 190: Relay server 310: Operation interface 311: Function Options 330: Input interface Step 210: The mobile device generates and transmits the application data to the digital silver server Step 221: The digital silver server generates a verification serial number and sends it back to the mobile device Step 225: The mobile device generates the corresponding coded data according to the verification serial number Step 230: The ATM obtains the encoded data through the mobile device, and decodes the encoded data into the data to be verified Step 250: The digital silver server compares whether the data to be verified sent by the ATM is the same as the verification serial number, and sends the corresponding comparison result back to the ATM Step 260: After the ATM determines that the comparison result indicates that the data to be verified is confirmed, connect the certificate carrier, and obtain the signature data through the certificate carrier Step 262: ATM connection to credential carrier Step 263: The ATM obtains the certificate password, and transmits the certificate password to the certificate carrier through the security control element Step 265: The certificate carrier uses the certificate password to obtain the digital certificate, and uses the digital certificate to generate the signature data Step 267: The ATM receives the signature data returned by the certificate carrier through the security control element Step 268: The ATM sends the signature data to the verification server Step 270: The verification server verifies the signature data sent by the ATM, and sends the corresponding verification result to the digital silver server Step 290: After the digital bank server determines that the signature data is verified by the verification server, it performs the corresponding account application operation according to the application data

Fig. 1 is a system structure diagram of the present invention for completing the account application through the ATM scanning QR code verification. Figure 2A is a flow chart of the method for completing the account application through the ATM scanning QR code provided by the present invention. FIG. 2B is a flow chart of the method for obtaining the signature data from the ATM through the certificate carrier according to the present invention. FIG. 3A is a schematic diagram of a function selection interface according to an embodiment of the present invention. FIG. 3B is a schematic diagram of a data input interface according to an embodiment of the present invention.

Step 210: The mobile device generates and transmits the application data to the digital silver server

Step 221: The digital silver server generates a verification serial number and sends it back to the mobile device

Step 225: The mobile device generates the corresponding coded data according to the verification serial number

Step 230: The ATM obtains the encoded data through the mobile device, and decodes the encoded data into the data to be verified

Step 250: The digital silver server compares whether the data to be verified sent by the ATM is the same as the verification serial number, and sends the corresponding comparison result back to the ATM

Step 260: After the ATM determines that the comparison result indicates that the data to be verified is confirmed, connect the certificate carrier, and obtain the signature data through the certificate carrier

Step 270: The verification server verifies the signature data sent by the ATM, and sends the corresponding verification result to the digital silver server

Step 290: After the digital bank server determines that the signature data is verified by the verification server, it performs the corresponding account application operation according to the application data

Claims (10)

A method for completing an account application by scanning a code through an automatic teller machine, the method at least includes the following steps: A mobile device generates and transmits an application data to a digital server; The digital silver server generates a verification serial number and sends it back to the mobile device; The mobile device generates a corresponding encoded data according to the verification serial number; An automatic teller machine obtains the encoded data through the mobile device and decodes the encoded data into a pending data; the ATM transmits the pending data to a digital server; The digital silver server compares whether the data to be verified is the same as the verification serial number, and sends a corresponding comparison result back to the ATM; After the ATM determines that the comparison result indicates that the data to be verified is confirmed, it connects to a certificate carrier and obtains a signature data through the certificate carrier; the ATM transmits the signature data to a verification server; the verification server verifies the signature data, and transmits a corresponding verification result to the digital silver server; and After the digital silver server determines that the signature data has been verified by the verification server, it performs the corresponding account application operation according to the application data. The method for completing an account application by scanning a code through an ATM as described in claim 1, wherein the step of obtaining the coded data by the ATM through the mobile device is that the ATM scans the coded data displayed or transmitted by the mobile device . The method for completing an account application by scanning a code through an ATM as described in claim 1, wherein the digital silver server further includes that the digital silver server is based on the The step of reading the verification serial number from an identification data obtained by the ATM. The method for completing the account application by scanning the QR code through the ATM as described in claim 1, wherein the step of the ATM obtaining the signature information through the certificate carrier further comprises the ATM obtaining a certificate password and passing a security code to the ATM. The control element transmits the certificate password to the certificate carrier, so that the certificate carrier uses the certificate password to obtain a digital certificate and uses the digital certificate to generate the signature data, and the ATM receives the signature data through the security control element steps. According to the method for completing account application through ATM scanning code verification as described in claim 4, the step of verifying the signature data by the verification server further comprises the verification server sending the identification information to an identity verification server for confirmation The step of associating the digital certificate with the identification data. A system for completing account application through ATM scan code verification, the system at least includes: a number of silver servers; a mobile device for generating and transmitting an application data to the digital banking server, and for receiving a verification serial number generated by the digital banking server, and generating a corresponding coded data according to the verification serial number; an automatic teller machine, used for obtaining the encoded data through the mobile device, decoding the encoded data into a pending data, and sending the pending data to the digital server, so that the digital server compares the data to be verified Whether the verification data is the same as the verification serial number, and judging that a comparison result returned by the digital banking server indicates that the data to be verified is confirmed, connect a certificate carrier and obtain a signature data through the certificate carrier; and a verification server for verifying the signature data sent by the ATM, and sending a corresponding verification result to the digital silver server, so that the digital silver server determines that the signature data has passed the verification server After verification, perform the corresponding account application operation according to the application data. The system for completing an account application by scanning a code through an ATM as described in claim 6, wherein the ATM scans the coded data displayed by the mobile device or receives the coded data sent by the mobile device to obtain the coded data. As stated in claim 6, the system for completing account application through ATM scan code verification, wherein the digital silver server is further used to read the verification serial number according to an identification data obtained by the ATM, so as to compare the pending verification Whether the information is the same as the verification serial number. The system for completing account application by scanning QR code through an ATM as described in claim 6, wherein the ATM obtains a certificate password and transmits the certificate password to the certificate carrier through a security control element, so that the certificate can be loaded into the certificate carrier. The device uses the certificate password to obtain a digital certificate, uses the digital certificate to generate a signature data, and receives the signature data returned by the certificate carrier through the security control element. The system for completing account application through ATM scan code verification as described in claim 9, wherein the system further comprises an identity verification server for receiving an identification data sent by the verification server and confirming the digit A credential is associated with this identifying material.

Images