513680 經濟部智慧財產局員工消費合作社印制衣 A7 B7 五、發明說明（/ ) ⑴發明的領域 本發明是關於有助於與現有金融服務網路整合的電子 支付系統’用以施彳了國內及國際的資金轉帳父易’不論是 企業對企業的轉帳、企業對消費者的轉帳（反之亦可），及 消費者對消費者的轉帳。尤其本發明（雖非唯一的）是與達 成電子資金轉帳有關的方法及裝置’類似電匯，其使用一 種全球公用的通訊網路（例如“網際網路”)和商業中樞，用 來整合信用卡支付配置及金融機構使用的金融網路。不同 貨幣的交易也可採用本發明的電子付款系統。 (Π)背景技術的討論 現有用來啓用資金轉帳的配置通常包含一個企業或消 費者經由分行提供指示給金融機構，上述作業可能透過本 人或以書面文件，或直接經由設在企業辦公室、提供專用 工作站的金融金構。人工準備指示不但慢而且沒效率，而 不論消費者、企業，或是金融機構用來建置及維護專用的 工作站的成本將會非常驚人。消費者和企業係包含想要交 易貨物或服務的當事人、以及任何可能想要匯出資金給其 它當事人的人，或是環境所需、那些當事人相關的授權簽 名人。 目前當金融機構代表付款當事人(付款人）執行跨界支 付(cross border payments)時，該當事人的付款指示通常會 由付款人的金融機構人工轉換成一種訊息，然後傳送至收 款當事人（領款人）。此種訊息通常必須是依據特定的協定 組合而成，如SWIFT，通常這些協定爲可被銀行及其它金 4 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） --------------------訂--------* 線 (請先閱讀背面之注意事項再填寫本頁) 經濟部智慧財產局員工消費合作社印製 513680 A7 ' _ B7 .....— 五、發明說明（2 ) 融機構辨識及接受的。如果付款人的金融機構及領款人的 金融機構沒有互相維繫特定的關係’則額外的訊*息就必須 送至付款人金融機構的往來金融機構。 SWIFT金融網路的作用是在會員金融機構（通常是銀 行）之間安排路徑給訊息。其中會執行一些資料的驗證動作 ，但是這種驗證通常不包含與交易相關資訊的驗證，諸如 付款人在付款金融機構的帳號，因爲像SWIFT的金融網路 並不維護這樣的資訊。會員金融機構爲個別的交易彼此支 付，如果往來的金融機構也被包含在內，則需要多重的支 付“過程”(legs)。支付必須爲每筆交易執行，這會增加服務 成本，也可能會造成資金傳送的延遲。 當金融機構想要提供不同的外幣服務時，它必須爲它 們想提供的每一種貨幣在每一處維護個別的關係。當支付 是發生在付款被授權數日後，外幣的支付人也會承受到不 適宜的匯率變動風險。 本發明的摘要 ⑴本發明的目的 本發明的主要目的是提供一種用來達成電子資金轉帳 的裝置和方法，如同電匯一樣，俚是與傳統資金轉帳配置 比較’它提供更加快速又經濟的處理付款的方法。 本發明的另一個目的是提供一種用來達成電子資金轉 帳的裝置和方法，它可以透過與現有金融網路的整合，尤 其是用作信用卡支付目的的網路和配置而快速與方便地建 置。 5 ^紙張尺度適用中國國家標準（cns)a4規格（210 X 297公釐） """""""" (請先閱讀背面之注意事項再填寫本頁)513680 Intellectual Property Bureau, Ministry of Economic Affairs, Employees ’Cooperatives, printed clothing A7 B7 V. Description of Invention (/) ⑴ Field of Invention The present invention relates to an electronic payment system that facilitates integration with existing financial services networks. And international fund transfers, Father Easy ', whether it is business-to-business transfers, business-to-consumer transfers (and vice versa), and consumer-to-consumer transfers. In particular, the present invention (though not unique) is a method and device related to achieving electronic fund transfers, similar to a wire transfer, which uses a global public communication network (such as the "Internet") and a business hub to integrate credit card payment configurations And financial networks used by financial institutions. The transaction of different currencies can also use the electronic payment system of the present invention. (Π) Discussion of the background technology Existing configurations for enabling fund transfers usually involve an enterprise or consumer providing instructions to a financial institution via a branch. The above operations may be provided in person or in writing, or directly through a corporate office, providing dedicated Workstation financial structure. Manually preparing instructions is slow and inefficient, and the cost of building and maintaining dedicated workstations for consumers, businesses, or financial institutions will be prohibitive. Consumers and businesses include parties who want to trade in goods or services, and anyone who may want to remit funds to other parties, or those who are required by the environment and who are authorized signers. At present, when a financial institution performs cross border payments on behalf of a payment party (payer), the payment instruction of the party is usually manually converted into a message by the payer's financial institution, and then transmitted to the receiver (receipt) people). Such messages must usually be combined according to specific agreements, such as SWIFT. These agreements are usually bankable and other gold. 4 paper sizes are applicable to China National Standard (CNS) A4 specifications (210 X 297 mm) --- ----------------- Order -------- * line (please read the precautions on the back before filling this page) 513680 A7 '_ B7 ..... — V. Description of the invention (2) Identification and acceptance of financial institutions. If the financial institution of the payer and the financial institution of the payee do not maintain a specific relationship with each other ’, additional information * must be sent to the financial institution of the payer's financial institution. The role of the SWIFT financial network is to route information between member financial institutions (usually banks). Some data verification actions are performed, but such verification usually does not include verification of transaction-related information, such as the payer's account number at the payment financial institution, because financial networks like SWIFT do not maintain such information. Member financial institutions pay each other for individual transactions. If financial institutions are also included, multiple payment “legs” are required. Payments must be executed for each transaction, which increases service costs and may cause delays in the transfer of funds. When a financial institution wants to provide different foreign currency services, it must maintain a separate relationship for each currency they want to provide in each place. When the payment takes place several days after the payment is authorized, the payer of the foreign currency will also bear the risk of inappropriate exchange rate changes. Summary of the invention 的 Objective of the present invention The main purpose of the present invention is to provide a device and method for achieving electronic funds transfer. As with wire transfer, it is compared with the traditional fund transfer configuration, which provides faster and more economical payment processing. Methods. Another object of the present invention is to provide a device and method for achieving electronic funds transfer, which can be quickly and easily established through integration with existing financial networks, especially networks and configurations used for credit card payment purposes. . 5 ^ The paper size applies the Chinese National Standard (cns) a4 specification (210 X 297 mm) " " " " " " " " (Please read the precautions on the back before filling this page)
513680 A7 B7 五、發明說明（3 ) 本發明更進一步的目的是提供一種用來達成電子資金 轉帳的裝置和方法，它可以實質地降低外幣匯兌的風險。 本發明更進一步的目的是提供一種用來達成電子資金 轉帳的裝置和方法，它允許支付人遠端、安全的電子起始 ’且採用付款的線上追蹤和確認。 本發明更進一步的目的是提供一種用來電子資金轉帳 的系統，它改善並更妥善地分擔了與透過網際網路進行的 金融交易相關的風險。 (Π)本發明的揭示 本發明在與典型商業交易相關的第一種模式中，存在 於在付款人與領款人帳之戶間，達成電子資金轉帳的一種 方法，在其中付款人帳戶與領款人帳戶分別由與金融支付 網路有關的金融機構內的各別當事人所持有；以上所述之 方法包含以下步驟： (a) 付款人提供訂購單給領款人，其中訂購單能讓領款 人確認付款人的身份； (b) 領款人在收到付款人的訂購單之後會提供發票給付 款人，該發票會確認領款人的帳戶，用以在轉帳時用於獲 得資金； (c) 付款人爲回應已收到發票及在轉帳認可之後，會傳 送一個安全的付款指示至一個付款閘道器，上述的付款指 示會確認付款人帳號用於記爲借方； (d) 付款閘道器爲回應已收到安全的付款指示及在確認 付款指示的真實性之後，爲付款者的金融機構產生一個付 6 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） ------------—裝 (請先閱讀背面之注意事項再填寫本頁)513680 A7 B7 V. Description of the invention (3) A further object of the present invention is to provide a device and method for achieving electronic funds transfer, which can substantially reduce the risk of foreign currency exchange. A further object of the present invention is to provide a device and method for achieving electronic funds transfer, which allows the payer to remotely and securely initiate the electronic payment 'and use online tracking and confirmation of payment. It is a further object of the present invention to provide a system for electronic funds transfer, which improves and more appropriately shares the risks associated with financial transactions through the Internet. (Π) Disclosure of the present invention In the first mode related to typical business transactions, the present invention exists in a method for achieving electronic funds transfer between payer and payee accounts, in which the payer's account and The payee account is held by each party in the financial institution associated with the financial payment network; the method described above includes the following steps: (a) The payer provides a purchase order to the payee, where the purchase order can Let the payee confirm the identity of the payer; (b) The payee will provide an invoice to the payer after receiving the payer's purchase order, which will confirm the payee's account and use it to obtain Funds; (c) The payer will send a secure payment instruction to a payment gateway in response to the receipt of the invoice and after the transfer is approved; the above payment instruction will confirm the payer's account number for debiting; (d) ) The payment gateway responds to the receipt of a secure payment instruction and after confirming the authenticity of the payment instruction, generates a payment for the financial institution of the payer. S) A4 size (210 X 297 mm) ------------— install (please read the precautions on the back before filling this page)
訂----------線I 經濟部智慧財產局員工消費合作社印製 513680 A7 B7 五、發明說明（f) 款請求的訊息’然後傳送該付款請求給金融支付，網路；M 且 (e)付款閘道器爲回應傳自付款人的金融機構的付款授 權訊息，會通知付款認可給付款人並傳送一個支付訊息至 金融支付網路’因此支付網路助於建立在有付款人的金融 機構和受款人的金融機構的網路基礎上的轉帳的支付。 較佳的是，付款人透過一個商業中樞或商業入口’藉 由傳送已言明之訂購單來提供訂購單給領款人。 較佳的是，付款人透過一個商業中樞或商業入口，藉 由傳送已言明之發票來提供發票給領款人。 合適的當事人被分別分配給一個在付款閘道器註冊的 獨特的辨識標記。 每個當事人獨特的辨識標記最好是藉由與最少一個金 融機構的帳戶有關的付款閘道器註冊。 一個當事人可能依要求註冊一個以販賣爲目的之零售 商帳戶和(或)一^個以購貝爲目的的借方帳戶。 每一個借方帳戶可以與至少一個在所信任的單位註冊 的簽名人相關聯，以維護安全。 較合適的情況是，每個金融機構都被分配一個在付款 閘道器註冊的獨特的識別標記。以銀行的情況來說，一家 銀行的代碼(BIN)可構成金融機構的識別標記。 較佳的是，訂購單包含了付款人的識別標記和想要購 買的物品或服務的描述。 較合適的情況是，發票包含了領款人的識別標記，且 7 &氏張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） (請先閱讀背面之注意事項再填寫本頁) -------訂---------線一 經濟部智慧財產局員工消費合作社印製 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 五、發明說明（f ) 領款人的帳戶是選自在付款閘道器註冊的零售商帳戶。 較佳的是，付款人藉由進入商業中樞來產生一個付款 指示、從在付款閘道器註冊的借方帳戶選擇一個付款人帳 戶，然後指示付款的貨幣和金額。 付款人可自金融機構指定的牌告匯率中選擇一種外匯 〇 一個經認可的簽名人在傳送到付款閘道器之前對於付 款指示施加安全防護手段。 較好的情況是，付款人在付款閘道器中爲每一個借方 帳戶維護一個經認可的簽名人的簽名矩陣。 較佳的是，付款閘道器藉由檢查對經認可的已註冊之 借方帳號簽名人的安全手段來確保付款指示的真實性。 付款請求最好是由重新格式化在付款指示中所內含的 資訊而建立，其包含與付款人的金融機構相符之付款人帳 戶和識別標記。 付款請求可能是一個送至金融網路的SMS 0200金融 交易請求訊息，其中包含一個信用卡支付網路。 較佳的是，金融網路至少每天會傳送支付訊息至金融 機構。 支付訊息可能是一個Base II的支付訊息。 在支付時，付款人和領款人（選擇性的）會被通知資金 的轉帳。 最好的情況是，金融網路透過至少一個支付金融機構 ，在以國內及國際交易的網路基礎上支付付款交易。 8 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） "" --------^---------線 (請先閱讀背面之注意事項再填寫本頁) 513680 五、發明說明U ) 一個代理的金融機構會依需求助於與付款人的金融機 構及/或領款人的金融機構之外幣支付。 (請先閱讀背面之注意事項再填寫本頁) 本發明的另外一個模式是合適於電子商務，存在於一 個電子資金轉帳裝置，用來達成在付款人帳戶及領款人帳 戶之間的資金轉帳，其中付款人帳戶及領款人帳戶分別由 與金融支付網路相關的金融機構內各別的當事人所保有， 上述所說的裝置包括： (a) —個具有付款網頁伺服器的付款閘道器和一個付款 代理處，其中付款網頁伺服器與當事人溝通，而付款代理 處與不同的金融機構溝通； (b) 付款網頁伺服器能提供付款服務給不同的當事人， 其中付款人在收到領款人的發票之後會傳送安全的付款指 示至付款閘道器，其中發票會確認在轉帳中的領款人帳戶 用於獲得資金；並且 (c) 付款代理處能處理上述的安全的付款指示，其中的 指示會確認借方的付款人帳戶，這是藉由建立金融支付網 路的訊息，要求來自付款人帳戶的支付確認，及起始以付 款人及領款人各別的金融機構的網路基礎的轉帳的支付。 經濟部智慧財產局員工消費合作社印製 較佳的情況是，付款網頁伺服器包含一個整合的模組 ，用以經由最少一個的商業中樞或商業入口，提供付款服 務給付款人和領款人。 較合適的情況是，發票是經由上述的最少一個的商業 中樞或商業入口，由領款人傳送給付款人。 最佳的情況是，付款網頁伺服器包含付款安全配置， 9 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） 513680 經濟部智慧財產局員工消費合作社印制衣 A7 B7 五、發明說明（q ) 用來保全提供給上述的最少一個的商業中樞或商業入口的 資訊。 較佳的情況是，付款保全配置包含一個安全代理伺服 器(proxy)，用來保全辨識付款人帳戶、領款人帳戶及欲轉 帳的資金的資訊。 較佳的情況是，付款代理處包含一個管理模組，用來 註冊想要藉分配一個獨特的識別標誌給每一當事人來達成 資金轉帳的當事人。 最佳的情況是，付款代理處包含一個付款引擎，用來 處理受保全的付款指示和建立爲金融支付網路而格式化的 訊息。 較佳的情況是，付款網頁伺服器經由公共通訊網路(如 網際網路），與上述的最少一個的商業中樞和商業入口及已 註冊的當事人溝通。 較佳的情況是，付款代理處更進一步包含介面機構， 其可透過金融支付網路來溝通經確認的請求訊息及金融機 構的支付訊息。 較合適的情況是，金融支付網路包含信用卡網路。 較佳的情況是，付款代理處更進一步包含一個安全伺 服器，用來確認使用預先設定的安全機構的通訊。 較佳的情況是，透過公共通訊網路用來通訊的預先設 定的保全機構，包含藉由受信任的機構（如認證機構）分配 給已註冊當事人的數位認證和私密金鑰。 最好是金融支付網路至少每天傳送支付訊息給網路內 10 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） ： --------^--------- (請先閱讀背面之注意事項再填寫本頁) 513680 A7 B7 五、發明說明（s ) 的金融機構。 本發明的電子資金系統提供數個優於傳統如SWIFr的 付款系統。虽事人註用程序減少了當在產生和接收付款時 之錯誤率，因爲系統能在每一筆交易建立之時立即執行當 事人驗證。這種驗證會藉由當每一筆付款指示被審核同意 時，所取得之金融機構認證訊息所強化。因此減低了錯誤 發生率，這在以前的系統中就需要被修復，因而本發明的 系統能降低處理的成本。 本發明也爲在信用卡支付網路中的所有金融機構的當 事人，提供了一種直接的介面。金融機構不需要花費金錢 和資源來發展專屬的工作站來支援當事人。 當事人能透過一個網頁應用程式即可操作它們在不同 金融機構內的不同的帳戶，而且如果大多數相關的金融機 構都採用此系統則會產生經濟規模。針對金融機構之當事 人的建立和維護之網頁應用程式的成本會比金融機構的專 屬系統還低。 付款人的付款指不被此系統轉換成一種支付訊息，其 可在信用卡網路上被載送。金融機構不須任何人工作業， 因此能更進一步地節省成本。信用卡網路能方便地提供企 業對企業交易路徑及處理服務。 許多金融機構已經擁有支援信用卡網路所須的基礎建 設。金融機構可以網路爲基礎上支付，而非以每一筆交易 爲基礎，這可降低支付金融機構所需維護的收支。 金融機構需要一種與一家國內或國家的支付(NNS)金 11 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） <請先閱讀背面之注意事項再填寫本頁) II---------^---------線. 經濟部智慧財產局員工消費合作社印製 經濟部智慧財產局員工消費合作社印製 513680 A7 B7 五、發明說明（7 ) 融機構和一家國際的支付(INS)金融機構的關係。信用卡網 路已有一個建立基礎的金融機構和企業與消費者消費者， 因此提供了經濟規模。 圖式的簡要說明 圖1是顯示一個依據本發明的第一實施例之在一個電 子資金轉帳所包含物件的圖示； 圖2是說明第一實施例之電子資金轉帳的一種方法之 步驟的圖示； 圖3是說明第一實施例之電子資金轉帳裝置的圖示； 圖4是說明第一實施例之電子轉帳系統的安全配置的 圖示；並且 圖5A和5B都是說明第二實施例之電子資金轉帳裝置 的架構細節之圖示。 主要代表符號之簡要說明 1〇〇電子資金轉帳系統 101付款人 102領款人 103商業中樞(商業入口） 104付款閘道器 105、106商業入口 107領款人銀行 108代理銀行 109公共通訊網路 110認證機構 12 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐) --------^--------- (請先閱讀背面之注意事項再填寫本頁) 經濟部智慧財產局員工消費合作社印製 513680 A7 B7_ 五、發明說明（/。） Π1付款人帳戶 112領款人帳戶 200訂購單 201發票 202付款指示 203確證 204付款授權請求訊息 206a付款人通知 2〇6b領款人通知 300電子資金轉帳裝置 301付款閘道器 302認證授權系統 303消費者/商業(當事人)電腦系統 304商業中樞 305網際網路 306 VISANET 網路 307加値網路 308付款銀行 309收款銀行 310付款網頁伺服 311整合的模組 312 B2B中樞的網頁 313付款安全代理伺服器子模組 314付款代理處 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） -----------4-------- 訂---------線Φ (請先閱讀背面之注意事項再填寫本頁) 經濟部智慧財產局員工消費合作社印製 513680 A7 B7 五、發明說明（丨丨） 315安全伺服器 316付款引擎 317付款記錄 318管理子模組 319加値服務子模組 320 VISANET 介面 321加値網路介面 322付款服務強化套件 3 2 3金融機構系統後贿 324瀏覽器 3 2 5智慧卡插入組件 401使用者 402中樞 403付款閘道器 404當事人 406認證機構 500資金轉帳系統 501伺服器場 502資料庫 504閉迴路 510伺服器場 511 WAP伺服器 512防火牆伺服器 513路由器 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） --------------------訂---------線 (請先閱讀背面之注意事項再填寫本頁) 513680 A7 B7 五、發明說明（a ) 514電子郵件伺服器 515虛擬私有網路伺服器 516認證授權伺服器 517金鑰管理伺服器 520金融機構主機系統 521服務強化套件系統 較佳實施例之詳細說明 圖1說明了本發明之第一實施例的電子資金轉帳系統 100在運作上的組成實體與組件的一個範例。在這個範例 中，付款人1〇1(如買方)想要取得特定物品或服務，而領款 人102(如賣方)則提供物品或服務以供出售。付款人和領款 人可能經由商業中樞或商業入口 103之介紹而彼此認識， 其中商業中樞或商業入口 103與付款閘道器104有關聯。 在這個例子中，入口 103允許企業能提供藉由其它有特定 需求、且已利用入口來搜尋和取得所需物品或服務之細節 的企業以直接電子訂購的物品和服務。 付款人101和領款人102能藉由公共通訊網路109(如 網際網路)與入口 103和付款閘道器104溝通。該系統100 典型上允許額外的商業入口 105和106,就如同入口 103 一樣，它們也可藉由網際網路與付款閘道器104通訊。然 而爲求淸楚起見，在圖例中只有顯示一位付款人和一位領 款人，將可理解的是這樣的商業入口或中樞每個都能提供 允許多位領款人與更多的潛在的付款人互動的裝置。例如 ，入口可能會與特定相關的企業部門合作。 15 本紙張尺度適用中國國家標準（CNS)A4規格（210 x 297公釐） -------------裝 (請先閱讀背面之注意事項再填寫本頁) 訂---------線1 經濟部智慧財產局員工消費合作社印製 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 五、發明說明（ί)) 付款閘道器104提供一個進入支付網路105的介面， 在此爲信用卡網路，其係利用特定的通訊協定來連結付款 人金融機構(如付款人銀行106)及領款人金融機構(如領款 人銀行107)，及代理金融機構(如代理銀行108)。在此實 施例中，金融網路包含一個可連結會員金融機構的私有安 全通訊網路，其目的是爲維護像VISANET的信用卡交易 。再次地，雖然有許多金融機構都是相關信用卡聯盟的會 員，但是只有(付款人101的）付款人銀行106和(領款人 102的)領款人銀行在圖中有表示。在其它實施例中，付款 閘道器的處理能力或選定模組的處理能力可能位於一個選 定的金融機構。 爲了使用該實施例的電子資金轉帳系統100，每一個 當事人可能會被配置一個獨一無二的組態，無論這個當事 人是一個付款人101或領款人102，或兩者皆是。這將最 少包含付款人帳戶111的細節，而領款人帳戶112若有需 要也會被包含。商業實體的當事人也可以建立使用者群組 以定義在商業實體中的個別使用者進入系統的功能性存取 及資料存取權限。每一個商業實體也可能擁有來自多個金 融機構、用以存取多個帳戶的權利，因此金融機構帳戶被 對應至特定的當事人。依上所述，若當事人爲商業實體， 則設定程序也包含了指定簽名人及指派每一個帳戶給經認 可的簽名人。 在一種配置中，付款人帳戶與一個簽名矩陣相關聯， 在其中當事人是商業實體的簽名單位係在資金轉帳系統中 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公爱） --------^--------- (請先閱讀背面之注意事項再填寫本頁) 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 五、發明說明（w) 被賦予特定的存取權限。針對消費者的數位簽章，不論是 付款人或是付款商業實體的員工，會被核發至帳戶簽名單 位。核發給消費者的數位簽章會被多個帳戶所用到，但是 通常是特定的金融機構。消費者用戶因而能透過一個受信 任的認證機構110啓動他們的數位簽章。較佳的情況是， 每一個當事人能負責其內部所有的安全事項。電子系統的 經授權的簽章在處理過程中將會執行到期的注意檢查(以下 會更進一步說明）。然而，在此種配置中，處理前的欺騙的 責任通常爲付款人所承擔的。 爲了建立配置，金融機構需爲每一個付款人建立卡片 帳戶，然後分配該卡片帳戶號碼給付款人。類似地，一個 共同的、受信任的認證機構應被諸金融機構同意。受信任 單位110最好是獨立且是外部的，而且會透過諸如數位簽 章機制的安全配置擔負起簽章機構的註冊和認證之責。一 個與付款閘道器104相連結的資料庫儲存著必要當事人、 帳戶及金融機構的資訊，這部份會在下面詳述。 第一實施例的一種達成電子資金轉帳的方法將以圖2 來說明。在此實施例中，付款當事人將已經在付款閘道器 1〇4中註冊過了。付款人101在此例中已事先透過網際網 路登入至一個商業中樞，如企業對企業(B2B)入口 103,而 且已經決定購買由領款人102所提供的特定物品或服務。 付款人101透過B2B入口 1〇3傳送一個訂購單200至領款 人。在接收到訂購單後，領款人102會建立一張發票201 ，其可爲此購買辨識一個領款人貸方資金的帳戶112。該 17 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公爱） --------------------^---------線 (請先閱讀背面之注意事項再填寫本頁) 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 五、發明說明（c) 帳戶最好是從一個已在閘道器104註冊完成的領款人帳戶 淸單中選出，因此就可以減少不正確的資訊的可能性(這會 造成延遲支付）。該發票會透過B2B入口 103被送至付款 人。必須了解的是，在本發明的其它變化中，訂購單及發 票可能透過郵寄在紙張上或透過用電話以口頭方式提供。 在收到發票201後，在付款人商業機構中的付款人 101或一個合適的簽名人，會檢查及藉由建立一個付款指 示202來認可該訂購。該付款人將會在發票與其它發票批 次處理以受認可之前，選擇用何種貨幣和那個帳戶號碼來 付款。B2B入口也可允許付款人或是經理人或其它付款人 是商業實體的簽名人藉由付款閘道器登入來審查，並在個 別或批次的基礎上分別認可付款。付款人也可以自普遍通 用的牌告匯率或是請求資金詢價來設定外匯規則。 雖然付款人持續與B2B入口 103互動，付款指示當完 成時，會與辨識領款人及交易的資訊一同被傳送至付款閘 道器104。帶有付款指示的資訊(會被加密及由付款人數位 簽章)會適當地包含領款人姓名、帳號、發票號碼、訂購單 號碼、付款金額及貨幣，如同B2B入口 103所提供的。必 須注意的是，若付款人是商業實體，可能會有許多簽名人 可被以下描述的簽名矩陣所提供。 付款閘道器104解密付款指示202並與付款人的簽名 矩陣交互檢查該指示。這適當地包含與受信任的認證機構 11〇的確證203。若數位簽章被確認，付款指示202立即被 重新格式化成爲一個適合金融網路105的付款授權請求訊 18 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） --------^---------線 (請先閱讀背面之注意事項再填寫本頁) 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 五、發明說明（（㈠ 息204。在此實施例的方法中，一個包含付款人金融機構 ID的Base I 0100訊息會被建立，然後傳至VISANET網路 。在替代的配置中，一個SMS 0200訊息可能會被建立。 金融網路105接著轉送付款請求訊息204至付款人銀 行106。付款人銀行在傳回一個付款授權訊息205，諸如一 個Base I 0110訊息或是一個SMS 210訊息，透過金融網 路105傳到付款閘道器104前，將會檢查可用餘額。 付款閘道器104將會重新格式化付款授權訊息並更新 有關交易的B2B入口訊息，例如由〇11〇(或可由SMS0210 替代)回應所提供之付款授權碼可能會附加在付款請求之後 ，用以使付款人和領款人能透過網際網路來檢視付款的狀 態。付款閘道器1〇4將會傳送一個付款人通知206a給付款 人該付款已經透過B2B入口或直接透過網際網路審核同意 。付款人1〇1能藉由即時或是批次的方式被通知。付款閘 道器如果須要的話，能提供額外的資料以使付款人能更新 他們的企業資源規劃(ERP)系統或是企業的主機系統。 類似地，付款閘道器104將會傳送一個領款人通知 206b給領款人102該付款已經透過B2B入口或透過網際網 路審核问思。τιΐ或人藉由即時或是批次的方式被通知。 閘道器如果須要的話，能再次提供額外的資料以使領款人 能更新他們的企業資源規劃(ERP)系統或是企業的主機系統 〇 在一天至少一次的基礎上，信用卡支付網路，在此以 VISANET爲例，將會爲國內及國際交易在網路基礎上來支 19 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） --------------------訂---------線 (請先閱讀背面之注意事項再填寫本頁) 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 五、發明說明（β) 付交易。一個代理的金融機構108，例如一個主要的國際 銀行，將會達成與代表VISA的VISA會員金融機構的金融 支付。 本發明的第一實施例的一種電子資金轉帳裝置300的 槪觀圖繪製於圖3。此裝置包含一個付款閘道器301，其與 例示的受信任的認證授權系統302、消費者/商業（當事人) 電腦系統303及商業中樞304透過網際網路3〇5來溝通。 付款閘器303也透過包含VISANET網路306和加値網路 (VAN)307的金融網路與金融電腦設備溝通。例示性的金融 系統設備包含爲付款銀行308和收款銀行309所有的設備 〇 付款閘器301包含一個付款網頁伺服器310，它存放 由此實施例的系統所提供的所有服務的網頁前端，包括核 心的付款服務及其它加値服務。由網頁伺服器310所提供 的功能包含： •支援付款人的付款起始和付款指示的進入，如有需 要可以爲付款人採批次付款； •爲付款人爲商業實體支援多重授權矩陣簽名； •允許付款人自一份事先註冊的付款金融機構和帳戶 淸單中選擇來付款； •允許領款人從一份預先註冊的收款金融機構和帳戶 淸單，透過B2B中樞指示貸方帳戶； •支援安全的查詢和透過網際網路回報下載給付款人 和零售商； 20 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） --------------------訂--------- (請先間讀背面之注意事項再填寫本頁) 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 五、發明說明（（》） •爲零售商、付款人、電子商務中樞、金融機構在定 期或是要求查詢的基礎上’執行系統報告的查詢和下載’ 包括已認可的付款報告、被拒絕的付款、例外情況、交易 明細及交易摘要。 付款網頁伺服器310也包含了一個整合的模組311 ’ 用以內嵌在企業對企業(B2B)中樞304的網頁。這個模組提 供了網頁、小程式以供透過B2B中樞網頁前端的付款服務 。雖然網頁服務是存放在付款網頁伺服器310上，但是也 可以整合至B2B中樞的網頁312中，給予一致的外觀和感 覺。這允許了 B2B中樞快速地提供電子資金轉帳付款服務 ，並以最少的成本來整合。整合模組311也包含了一個付 款安全代理伺服器子模組313，用以針對例如在資料進入 點的帳號之敏感的資訊加以加密。像這樣加密過的機密資 訊最好只由付款金融機構內的整合套件來解密。如此能在 進入點和資訊請求的進入點之間傳輸及儲存資料時能確保 機密資訊的隱私。 付款閘道器301也包含了一個付款代理處314，它是 所有電子資金轉帳服務及功能的處理模組。付款代理處有 許多子模組，包含一個安全伺服器315、一個付款引擎316 、一個付款記錄317、一個管理子模組318、一個 ''加 値服務〃子模組319、以及針對不同網路的一個VISANET 介面320和一個加値網路(VAN)介面321。 安全伺服器315提供數位認證授權給付款閘道器301 、B2B中樞304和付款金融機構308之間的點對點連接； 21 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐) . " 裝--------訂---------線 (請先閱讀背面之注意事項再填寫本頁) 經濟部智慧財產局員工消費合作社印製 513680 A7 B7 五、發明說明（I?) 也提供數位認證確證給付款人當事人；以及提供密碼服務 用來解密傳自付款人入口的資料，包括付款人ID、發票號 碼、金額、付款金融機構、付款人帳號、領款金融機構和 領款人帳號。 付款引擎316這個模組執行所有付款相關的處理。付 款引擎管理付款確證流程，透過VISANET發出確證請求 或在引擎內起始確證處理功能。付款引擎管理付款訊息流 程，包含付款訊息處理、起始和轉送的順序和狀態。付款 訊息格式化也由付款引擎來處理’包含付款訊息解譯和起 始對當事人的回應。付款引擎管理一個簽名矩陣資料庫並 且執行簽名矩陣之驗證。 付款記錄子模組317記錄著所有付款活動，包含付款 人的輸入、付款訊息和對當事人303的回應，這些記錄是 用作會計和追蹤用途。管理子模組318爲付款人和領款人( 或零售商)處理註冊和組態兩者的設定。爲付款閘道器操作 員（如銀行及其它金融機構）的應用管理也被容易化，包含 使用者存取、管理、安全設定和類似給操作員的A家管〃 功能。付款人、零售商、操作員的管理活動的記錄也會被 執行。 加値服務子模組319提供不同的查詢和報告功能，包 括付款查詢、給付款人和零售商的摘要與細節付款報告、 AR與AP調和、企業資源規劃(ERP)整合、忠誠度點數策 略管理及消費者資料建檔。 VISANET介面320及VAN介面321分SU爲各另!1的金 22 (請先閱讀背面之注意事項再填寫本頁)Order ---------- Line I Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economy 513680 A7 B7 V. Description of the invention (f) Request message 'Then send the payment request to financial payment, Internet; M and (e) The payment gateway responds to the payment authorization message sent from the financial institution of the payer, and will notify the payment approval to the payer and send a payment message to the financial payment network. Therefore the payment network helps to establish Payer's financial institution and payee's financial institution's network based payment transfer. Preferably, the payer provides the purchase order to the payee through a commercial hub or commercial portal 'by transmitting the stated purchase order. Preferably, the payer provides the invoice to the payee through a commercial hub or commercial portal by transmitting the stated invoice. The appropriate parties are each assigned a unique identification mark that is registered with the payment gateway. Each party's unique identification mark is preferably registered with a payment gateway associated with at least one financial institution's account. A party may, upon request, register a retailer account for the purpose of selling and / or a debit account for the purpose of buying shellfish. Each debit account can be associated with at least one signer registered with a trusted organization to maintain security. It is more appropriate that each financial institution is assigned a unique identification mark that is registered with the payment gateway. In the case of a bank, the code of a bank (BIN) can constitute the identification mark of a financial institution. Preferably, the purchase order contains the payer's identification mark and a description of the item or service that he wants to purchase. It is more appropriate that the invoice contains the payee's identification mark, and the 7 & s scale is applicable to the Chinese National Standard (CNS) A4 specification (210 X 297 mm) (Please read the precautions on the back before filling in this Page) ------- Order --------- Line 1 Printed by the Consumer Cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs 513680 Printed by the Consumer Cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 ) The payee's account is selected from the retailer account registered with the payment gateway. Preferably, the payer generates a payment instruction by entering the business hub, selects a payer account from the debit account registered with the payment gateway, and then indicates the currency and amount of the payment. The payer can choose a foreign exchange rate from the exchange rate specified by the financial institution. An approved signatory applies security measures to the payment instructions before transmitting to the payment gateway. Preferably, the payer maintains a signature matrix of approved signers in the payment gateway for each debit account. Preferably, the payment gateway ensures the authenticity of the payment instruction by checking the security measures against the signer of the registered registered debit account. The payment request is preferably created by reformatting the information contained in the payment instruction, which contains the payer's account and identification mark in accordance with the financial institution of the payer. The payment request may be an SMS 0200 financial transaction request message sent to the financial network, which includes a credit card payment network. Preferably, the financial network sends payment messages to financial institutions at least daily. The payment message may be a Base II payment message. At the time of payment, the payer and payee (optional) are notified of the transfer of funds. At best, the financial network uses at least one payment financial institution to pay for payment transactions on the basis of domestic and international transactions. 8 This paper size applies to China National Standard (CNS) A4 specification (210 X 297 mm) " " -------- ^ --------- line (Please read the note on the back first Please fill out this page again) 513680 V. Description of the invention U) An agent's financial institution will assist the payer's financial institution and / or the payee's financial institution in foreign currency payment as required. (Please read the notes on the back before filling out this page) Another mode of the present invention is suitable for e-commerce, which exists in an electronic fund transfer device and is used to achieve fund transfer between the payer account and the payee account Among them, the payer account and the payee account are held by respective parties in the financial institution related to the financial payment network. The above-mentioned devices include: (a) a payment gateway with a payment web server And a payment agent, where the payment web server communicates with the parties, and the payment agency communicates with different financial institutions; (b) the payment web server can provide payment services to different parties, where the payer is receiving The payer's invoice will then send a secure payment instruction to the payment gateway, where the invoice confirms that the payee account in the transfer is used to obtain funds; and (c) the payment agent can process the secure payment instruction described above, The instructions will confirm the borrower ’s payer account, which is a message from the payer by setting up a financial payment network Payment confirmation households, and start to network infrastructure payer and payee respective financial institutions to pay transfer. Printed by the Consumer Cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs. Preferably, the payment web server contains an integrated module for providing payment services to payers and payees through at least one commercial hub or business portal. It is more appropriate that the invoice is transmitted from the payee to the payer via at least one of the aforementioned commercial hubs or commercial portals. In the best case, the payment web server includes a payment security configuration. 9 This paper size applies the Chinese National Standard (CNS) A4 specification (210 X 297 mm). 513680 The Intellectual Property Bureau of the Ministry of Economic Affairs, the Consumer Cooperative, printed clothing A7 B7, 5 Invention description (q) is used to keep information provided to at least one of the commercial hubs or commercial portals mentioned above. Preferably, the payment security configuration includes a secure proxy server to maintain information identifying the payer account, payee account, and funds to be transferred. Preferably, the payment agent contains a management module for registering parties who wish to effect a fund transfer by assigning a unique identification mark to each party. In the best case, the payment agent contains a payment engine that processes the secured payment instructions and establishes messages formatted for the financial payment network. Preferably, the payment web server communicates with at least one of the aforementioned business hubs and business portals and registered parties via a public communication network (such as the Internet). Preferably, the payment agency further includes an interface agency, which can communicate the confirmed request message and the payment message of the financial institution through the financial payment network. More suitably, the financial payment network includes a credit card network. Preferably, the payment agent further includes a security server for confirming communication using a preset security mechanism. Preferably, a pre-established security authority used for communication over a public communication network includes digital certificates and private keys assigned to registered parties by a trusted authority, such as a certification authority. It is best that the financial payment network sends at least 10 payments per day to the network. The paper size is applicable to the Chinese National Standard (CNS) A4 specification (210 X 297 mm): -------- ^ ---- ----- (Please read the precautions on the back before filling out this page) 513680 A7 B7 V. Financial Institution of the Invention (s). The electronic funds system of the present invention provides several payment systems that are superior to traditional payment systems such as SWIFr. Although the client's application procedure reduces the error rate when making and receiving payments, the system can perform party verification immediately when each transaction is established. This verification is strengthened by the financial institution certification information obtained when each payment instruction is reviewed and approved. Therefore, the error rate is reduced, which needs to be repaired in the previous system, so the system of the present invention can reduce the processing cost. The invention also provides a direct interface for parties to all financial institutions in a credit card payment network. Financial institutions do not need to spend money and resources to develop dedicated workstations to support the parties. The parties can operate their different accounts in different financial institutions through a web application, and if most relevant financial institutions adopt this system, it will generate economic scale. The cost of building and maintaining a web application for parties to a financial institution is lower than that of a financial institution's proprietary system. The payment by the payer is not converted into a payment message by this system, which can be carried on the credit card network. Financial institutions do not need any manual work, so they can further save costs. Credit card networks can easily provide business-to-business transaction paths and processing services. Many financial institutions already have the infrastructure required to support a credit card network. Financial institutions can pay on a network basis, rather than on a per-transaction basis, which can reduce the revenue and expenditures that financial institutions need to maintain. Financial institutions need a domestic or national payment (NNS) gold 11 This paper size is applicable to China National Standard (CNS) A4 (210 X 297 mm) < Please read the notes on the back before filling this page) II --------- ^ --------- line. Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs Printed by the Employee Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs Printed 513680 A7 B7 V. Description of the invention (7 ) Financial institution and an international payment (INS) financial institution. Credit card networks already have a foundation of financial institutions and businesses and consumers, and thus provide economies of scale. Brief Description of the Drawings FIG. 1 is a diagram showing objects included in an electronic funds transfer according to a first embodiment of the present invention; FIG. 2 is a diagram illustrating the steps of a method of electronic funds transfer according to the first embodiment 3 is a diagram illustrating the electronic funds transfer device of the first embodiment; FIG. 4 is a diagram illustrating the security configuration of the electronic transfer system of the first embodiment; and FIGS. 5A and 5B are both illustrating the second embodiment An illustration of the architectural details of the electronic funds transfer device. Brief description of the main representative symbols 100 electronic fund transfer system 101 payer 102 payee 103 commercial hub (commercial entrance) 104 payment gateway 105, 106 commercial entrance 107 payee bank 108 agent bank 109 public communication network 110 Certification body 12 This paper size is applicable to China National Standard (CNS) A4 specification (210 X 297 mm) -------- ^ --------- (Please read the precautions on the back before filling (This page) Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs 513680 A7 B7_ V. Description of the invention (/.) Π1 Payer account 112 Payee account 200 Order form 201 Invoice 202 Payment instruction 203 Confirmation 204 Payment authorization request message 206a Payment Person notice 206b Payee notice 300 Electronic funds transfer device 301 Payment gateway 302 Authentication and authorization system 303 Consumer / commercial (party) computer system 304 Commercial hub 305 Internet 306 VISANET network 307 plus network 308 Paying bank 309 Receiving bank 310 Payment web server 311 Integrated module 312 B2B hub web page 313 Payment security agent server sub-module 314 Payment agency This paper standard applies to China Home Standard (CNS) A4 Specification (210 X 297 mm) ----------- 4 -------- Order --------- Line Φ (Please read first Note on the back, please fill out this page) Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs 513680 A7 B7 V. Invention Description (丨 丨) 315 Security Server 316 Payment Engine 317 Payment Record 318 Management Submodule 319 Add Service Sub Module 320 VISANET interface 321 plus network interface 322 payment service enhancement package 3 2 3 financial institution system bribe 324 browser 3 2 5 smart card insertion module 401 user 402 hub 403 payment gateway 404 client 406 certification authority 500 Fund transfer system 501 server farm 502 database 504 closed loop 510 server farm 511 WAP server 512 firewall server 513 router This paper standard applies to China National Standard (CNS) A4 specification (210 X 297 mm) ---- ---------------- Order --------- line (please read the precautions on the back before filling this page) 513680 A7 B7 V. Description of the invention (a) 514 Email server 515 Virtual private network server 516 Authentication and authorization server 517 Key management server 520 Financial institution host Detailed Description of embodiments of the system 521 service system kit reinforced preferred embodiment illustrates an example of an electronic funds transfer system of the first embodiment of the present invention in the operation 100 and the assembly component entities. In this example, the payer 101 (e.g., the buyer) wants to obtain a particular item or service, and the payee 102 (e.g., the seller) provides the item or service for sale. The payer and payee may know each other through the introduction of a commercial hub or commercial portal 103, where the commercial hub or commercial portal 103 is associated with the payment gateway 104. In this example, portal 103 allows businesses to provide goods and services that are directly electronically ordered by other businesses that have specific needs and have used the portal to search for and obtain details of the required goods or services. The payer 101 and the payee 102 can communicate with the portal 103 and the payment gateway 104 through a public communication network 109 such as the Internet. The system 100 typically allows additional commercial portals 105 and 106, which, like portal 103, can also communicate with the payment gateway 104 via the Internet. However, for the sake of clarity, only one payer and one payee are shown in the illustration. It will be understood that such business entrances or hubs can each provide multiple payees and more Potential payer interaction device. For example, portals may work with specific relevant business units. 15 This paper size applies to China National Standard (CNS) A4 (210 x 297 mm) ------------- installed (please read the precautions on the back before filling this page) Order- ------- Line 1 Printed by the Consumer Cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs 513680 Printed by the Consumer Cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 V. Description of the Invention (ί)) Payment gateway 104 provides an access to the payment network The interface of Road 105, here is the credit card network, which uses a specific communication protocol to connect the payer financial institution (such as payer bank 106) and the payee financial institution (such as payee bank 107), and the agent finance Institutions (such as correspondent banks 108). In this embodiment, the financial network includes a private security communication network that can connect to member financial institutions, the purpose of which is to maintain credit card transactions like VISANET. Again, although many financial institutions are members of the relevant credit card alliances, only the payer bank 106 (of the payer 101) and the payee bank (of the payee 102) are shown in the figure. In other embodiments, the processing capacity of the payment gateway or the processing capacity of the selected module may be located in a selected financial institution. In order to use the electronic funds transfer system 100 of this embodiment, each party may be configured with a unique configuration, whether the party is a payer 101 or payee 102, or both. This will include at least the details of the payer account 111, and the payee account 112 if necessary. The parties of a business entity can also create user groups to define the functional access and data access rights of individual users in the business entity to the system. Each business entity may also have the right to access multiple accounts from multiple financial institutions, so financial institution accounts are mapped to specific parties. As mentioned above, if the parties are commercial entities, the set-up procedure also includes designating signers and assigning each account to an authorized signer. In one configuration, the payer account is associated with a signature matrix, in which the signing unit of which the party is a commercial entity is in the fund transfer system. This paper size applies the Chinese National Standard (CNS) A4 specification (210 X 297 public love)- ------- ^ --------- (Please read the notes on the back before filling out this page) 513680 Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 V. Invention Description (w) Granted specific access rights. Digital signatures for consumers, whether they are payers or employees of the paying business entity, are issued to the account signing unit. Digital signatures issued to consumers are used by multiple accounts, but are usually specific financial institutions. Consumer users can then initiate their digital signature through a trusted certification authority 110. Preferably, each party is responsible for all internal security matters. The electronic system's authorized signatures will be checked for expiration due to processing (explained further below). However, in this configuration, the liability for pre-processing fraud is usually borne by the payer. To establish the configuration, the financial institution needs to establish a card account for each payer, and then assign the card account number to the payer. Similarly, a common, trusted certification body should be agreed by financial institutions. The trusted unit 110 is preferably independent and external, and will assume the responsibility of registration and certification of the signing agency through a security configuration such as a digital signing mechanism. A database linked to the payment gateway 104 stores the information of the necessary parties, accounts and financial institutions, which will be detailed below. A method for achieving electronic funds transfer in the first embodiment will be described with reference to FIG. 2. In this embodiment, the payment party will already be registered in the payment gateway 104. In this example, the payer 101 has previously logged in to a business hub, such as a business-to-business (B2B) portal 103, via the Internet, and has decided to purchase specific goods or services provided by the payee 102. The payer 101 transmits a purchase order 200 to the payee through the B2B entry 103. After receiving the purchase order, the payee 102 creates an invoice 201 which can be used to identify an account 112 of the payee's lender funds for this purchase. The 17 paper sizes are applicable to China National Standard (CNS) A4 specifications (210 X 297 public love) -------------------- ^ -------- -Line (Please read the notes on the back before filling this page) 513680 Printed by the Consumers' Cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 V. Description of Invention (c) The account is preferably registered from a gateway 104 The beneficiary account is selected from the list, so the possibility of incorrect information is reduced (this will cause delayed payments). The invoice is sent to the payer through B2B entry 103. It must be understood that in other variations of the present invention, the purchase order and invoice may be provided by mail on paper or by phone orally. Upon receipt of the invoice 201, the payer 101 or a suitable signatory in the payer's business establishment will check and approve the order by creating a payment instruction 202. The payer will choose which currency and that account number to pay before the invoice and other invoices are processed for approval. The B2B portal may also allow payers or managers or other payers who are signers of business entities to review through a payment gateway login and approve payments on an individual or batch basis. The payer can also set the foreign exchange rules from the commonly used exchange rate or request a capital inquiry. Although the payer continues to interact with the B2B portal 103, when the payment instruction is completed, it will be transmitted to the payment gateway 104 along with information identifying the payee and the transaction. The information with payment instructions (which will be encrypted and signed by the payee) will appropriately include the payee name, account number, invoice number, purchase order number, payment amount and currency, as provided by B2B portal 103. It must be noted that if the payer is a commercial entity, there may be many signers that can be provided by the signature matrix described below. The payment gateway 104 decrypts the payment instruction 202 and checks the instruction with the payer's signature matrix. This appropriately includes confirmation 203 with a trusted certification authority. If the digital signature is confirmed, the payment instruction 202 is immediately reformatted into a payment authorization request suitable for the financial network 105. This paper size applies the Chinese National Standard (CNS) A4 specification (210 X 297 mm) --- ----- ^ --------- line (Please read the precautions on the back before filling this page) 513680 Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 V. Description of the invention ((㈠ 信息204. In the method of this embodiment, a Base I 0100 message containing the financial institution ID of the payer is created and then transmitted to the VISANET network. In an alternative configuration, an SMS 0200 message may be created. Financial Network Road 105 then forwards the payment request message 204 to the payer bank 106. The payer bank is returning a payment authorization message 205, such as a Base I 0110 message or an SMS 210 message, to the payment gateway via the financial network 105 The available balance will be checked before 104. The payment gateway 104 will reformat the payment authorization message and update the B2B entry information about the transaction, for example, provided by 〇11〇 (or can be replaced by SMS0210) in response A payment authorization code may be appended to the payment request to enable the payer and payee to view the status of the payment through the Internet. The payment gateway 104 will send a payer notification 206a to the payer that The payment has been approved through the B2B portal or directly through the Internet. The payer 101 can be notified in real time or in batches. If needed, the payment gateway can provide additional information to enable the payer to Update their enterprise resource planning (ERP) system or the host system of the enterprise. Similarly, the payment gateway 104 will send a payee notification 206b to the payee 102 that the payment has been through a B2B portal or through the Internet Review questions. Τιΐ or people are notified in real-time or in batches. If needed, the gateway can provide additional information to enable payees to update their enterprise resource planning (ERP) system or Enterprise's mainframe system 〇 On the basis of at least once a day, the credit card payment network. Here, VISANET is used as an example. It will be used for domestic and international transactions on the Internet basis. 19 This paper size applies to China National Standard (CNS) A4 specification (210 X 297 mm) -------------------- Order --------- line (Please read the notes on the back before filling out this page) 513680 Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 V. Invention Description (β) Payment transactions. An agency financial institution 108, such as a major international bank, A financial payment with a VISA member financial institution representing VISA will be reached. A schematic view of an electronic funds transfer device 300 according to the first embodiment of the present invention is drawn in FIG. 3. This device includes a payment gateway 301 which communicates with the exemplary trusted authentication and authorization system 302, consumer / commercial (party) computer system 303, and business hub 304 via the Internet 305. The payment gate 303 also communicates with financial computer equipment through a financial network including a VISANET network 306 and a Canadian network (VAN) 307. The exemplary financial system equipment includes the equipment owned by the payment bank 308 and the beneficiary bank 309. The payment gate 301 includes a payment web server 310, which stores the web front end of all services provided by the system of this embodiment, including Core payment services and other enhanced services. The functions provided by the web server 310 include: • Supporting the payment initiation and payment instruction entry of the payer, if necessary, batch payments can be made for the payer; • Supporting multiple authorization matrix signatures for the payer for the business entity; • Allow the payer to choose from a pre-registered payment financial institution and account statement; • Allow the payee to instruct the credit account through a B2B hub from a pre-registered receiving financial institution and account statement; Supports secure inquiries and downloads to payers and retailers via Internet reports; 20 paper sizes are applicable to China National Standard (CNS) A4 (210 X 297 mm) ------------ -------- Order --------- (Please read the notes on the back before filling this page) 513680 Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 V. Description of the invention ( (》) • 'Perform query and download of system reports' for retailers, payers, e-commerce hubs, financial institutions on a regular or requested basis, including approved payment reports, rejected payments, exceptions, Easy details and transaction summary. The payment web server 310 also includes an integrated module 311 'for embedding the web page in the business-to-business (B2B) hub 304. This module provides web pages and applets for passing through B2B The front-end payment service of the central web page. Although the web service is stored on the payment web server 310, it can also be integrated into the web page 312 of the B2B hub to give a consistent look and feel. This allows the B2B hub to quickly provide electronic funds transfer The payment service is integrated with the least cost. The integration module 311 also includes a payment security proxy server sub-module 313 to encrypt sensitive information such as the account number at the data entry point. It is best to decrypt the confidential information only by the integration package in the payment financial institution. This can ensure the confidentiality of confidential information when transferring and storing data between the entry point and the entry point of the information request. The payment gateway 301 also includes A payment agent 314, which is a processing module for all electronic funds transfer services and functions. The payment agent has a license Sub-module, including a security server 315, a payment engine 316, a payment record 317, a management sub-module 318, a `` plus service '' sub-module 319, and a VISANET interface 320 for different networks And a VAN interface 321. The security server 315 provides digital authentication and authorization to the point-to-point connection between the payment gateway 301, the B2B hub 304, and the payment financial institution 308; 21 This paper standard applies Chinese national standards ( CNS) A4 specification (210 X 297 mm). &Quot; Packing -------- Order --------- line (Please read the precautions on the back before filling this page) Wisdom of the Ministry of Economic Affairs Printed by the Consumer Cooperative of the Property Bureau 513680 A7 B7 5. The invention description (I?) Also provides digital authentication to confirm to the payer; and provides a password service to decrypt the information passed from the payer's entry, including the payer ID, invoice number , Amount, payment financial institution, payer account, payee financial institution, and payee account. The Payment Engine 316 module performs all payment related processing. The payment engine manages the payment confirmation process, sends a confirmation request through VISANET, or initiates the confirmation processing function in the engine. The payment engine manages the payment message process, including the order and status of payment message processing, initiation, and forwarding. The payment message formatting is also handled by the payment engine ’, which includes the interpretation of the payment message and initiates a response to the party. The payment engine manages a signature matrix database and performs verification of the signature matrix. The payment record sub-module 317 records all payment activities, including input by the payer, payment messages, and responses to the parties 303. These records are used for accounting and tracking purposes. The management sub-module 318 handles both registration and configuration settings for the payer and payee (or retailer). Application management for payment gateway operators (such as banks and other financial institutions) is also facilitated, including user access, management, security settings and similar A-housekeeping functions for operators. Records of payer, retailer, and operator management activities are also performed. Plus service sub-module 319 provides different query and reporting functions, including payment query, summary and detailed payment reports to payers and retailers, AR and AP reconciliation, enterprise resource planning (ERP) integration, loyalty point strategy Management and archiving of consumer data. VISANET interface 320 and VAN interface 321 points SU are each separately! 1 gold 22 (Please read the precautions on the back before filling this page)
. I II 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 發明說明（/) 融網路通訊系統執行訊息格式化與通訊協定處理。 爲金融機構308及309所作的每一次安裝最好包含一 個付款服務強化套件322。這個套件可用最少的發展需求 提供輕易地採用電子資金轉帳付款服務，也可以使付款金 融機構308和領款金融機構309以最短的時間上線服務。 付款服務強化套件322與現有金融機構系統後端323整合 ，以合適地提供付款人確證、訊息傳遞、加値服務作業的 整體解決方案。 本發明希望金融機構能負責在付款閘道器301上建立 他們自己消費者，以提供電子資金轉帳服務。一個當事人 的資料會藉由使用管理子模組318來爲每一當事人建立， 以儲存當事人資訊並取得一個獨一無二的當事人ID。在此 實施例中，現存的當事人帳戶、信用卡帳戶接著被對應至 當事人ID。付款閘道器也會產生使用者管理ID，以允許 當事人執行使用者管理。安全伺服器315接著爲每一個帳 戶建立簽名矩陣，而當事人已被認可的簽名人的數位簽章 被對應至特定的帳戶。典型的情況是’金融機構會傳送一 個包含所有相關組件的電子資金轉帳服務套件給每一個當 事人。 依序進行的是，在付款閘道器301 —些建置的動作必 須在從當事人的金融機構收到套件時由當事人來進行。個 別的使用者資料會爲有付款閘道器301存取權的付款人而 產生。個別的使用者最好被分派至與他們在付款人商業機 構內的功能性責任相符的使用者群組中。經授權的簽名人 23 本紙張尺度適用中國國冢標準(CNS)A4規格（21〇 χ 297公釐） ------------衣--------訂---------線 (請先閱讀背面之注意事項再填寫本頁) 513680 經濟部智慧財產局員工消費合作社印製 Α7 Β7 五、發明說明（w ) 必須透過適當的受信任的認證機構302啓動他們的數位簽 章。一個是商業實體的當事人可能會爲交易啓始建立一個 階層式的簽名人，其最好是以矩陣爲基礎。每一個簽名確 認矩陣會被分配給一個特定的帳號。一般而言，一個商業 當事人會有三個簽名人群組，而平均來說，需要兩個簽名 。考慮一個假想的帳戶，其可由三個使用者群組A，B，C的 簽名人來操作，如以下的表一所描述的： 帳號 群組 A B C 本身 10 20 30 A 40 50 60 B 70 80 ------1 C 90 表1 ·簽名矩陣 一位來自帳戶的使用者群組A的個人能透過本身簽名 達10次，若與另一個分配至同一帳戶的群組A的會員則 可到4〇，若與一個分配至帳戶的群組C的會員則可到 60...等等，如上表所描述的。電子交易的簽章不需依附在 公司及由金融機構所控制的帳戶委任。各別的配置也可以 定義在被公司管理委員會所同意的電子商務(EB)協議中。 再看電子資金轉帳系統3〇〇的當事人端，—個商業入 口功能是透過內嵌在商業中樞3〇4的網頁311所提供。入 口的功能係包括使領款人建立發票和付款人付款變得容易 24 ^紙張尺度UiT國國家標準（CNS)A4規格（210 X 297 ϋΤ --------------------訂----------線 (請先閱讀背面之注意事項再填寫本頁) 經濟部智慧財產局員工消費合作社印製 513680 A7 B7_ 五、發明說明（θ ) 。當事人的電腦系統303透過網際網路305使用傳統的網 頁瀏覽器 324(如 Microsoft Internet Explorer 或 Netscape Navigator)來存取B2B中樞3〇4。當事人的瀏覽器最好包含 智慧卡插入組件325，因爲本發明希望由受信任的認證當 事人102所發出的用以確認簽名人的認證和私密金鑰被儲 存在一張智慧卡上。 當在全球分散式環境、使用網際網路、與外部當事人 連結（包括金融網路，如VISANET ;商業中樞及金融機構 ，如銀行)的網頁爲主應用程式下操作時，有關電子資金轉 帳系統300操作時的安全考慮原則最好爲·· •確保資料傳輸的機密性， •確證所有包含在交易中當事人的身份，並且 •確保資料在傳輸過程的完整性。 在現在這個實施例中，確證付款系統中領款人的身份 和確證付款人對領款人的身份是B2B中樞的責任。B2B中 樞會識別付款人能與那位零售商安全地進行電子商務。零 售商註冊程序係排除了要確認零售商身份的必要。在電子 資金轉帳系統註冊確保了零售商與金融機構有關聯，以使 其能收到電子付款。 當B2B中樞網頁應用程式312啓始了付款服務，付款 人ID、領款人ID、發票資訊及B2B中樞的數位簽章會被 傳至付款閘道器301。B2B應用程式使用B2B中樞的私密 金鑰簽署此資料，之後透過虛擬私有網路(VPN)通道加密 。這可確保資料在傳輸過程中的機密性和完整性。使用 25 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） --------------------^---------線 (請先閱讀背面之注意事項再填寫本頁) 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 五、發明說明（w ) B2B中樞的私密金鑰的加密也確保了資料在傳輸過程的不 可否認性。付款閘道器系統解密資料，並使用受信任的認 證機構所核發的附加的數位認證來確證B2B中樞的身份。 當付款人完成並送出付款指示時，付款指示的細節及 SHA1雜亂信號將使用付款人的私密金鑰加密。付款人的 數位認證和付款人的私密金鑰儲存在由付款人保管的智慧 卡中。這能確保付款指示的不可否認性及資料的完整性。 加密的封包會透過使用SSL的網際網路305傳送至付款閘 道器301，以確保機密性。在付款閘道器中的安全伺服器 315會解密該資料。 安全伺服器315將會用一個合適的確證機構來確證付 款人的身份。確證機構可能是付款金融機構308、付款閘 道器301或是受信任的認證機構(CA)302。因此，電子資金 轉帳系統300確保了透過付款系統的每一筆資料傳輸的每-一過程之付款資料的機密性和完整性。每一筆資料只可由 必要的當事人存取。舉例而言，付款人的帳戶資料只會被 付款閘道器、付款人的金融機構、領款人的金融機構知道 ，但是不會被領款人或B2B中樞知道。 電子資金轉帳系統300能執行與通訊工業標準相容的 各種現在可用的保護機制。系統能配置而相容的標準包括 ·· 168 位元的 Triple-DES，1024 位元的 RSA，MD5，SHA1， Χ·509, 128位元的SSL ν·3,以及IPSec。這些機制的進一步 細節能透過相關的標準文件找尋到。 適用在本發明的第一實施例的安全部署配置現在用如 26 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） ' --------1---------- (請先閱讀背面之注意事項再填寫本頁) 經濟部智慧財產局員工消費合作社印製 513680 B7 五、發明說明（蚪） 下的圖4來說明。安全機制可能會以像Baltimore J/PKI+的 安全工具組來實行，其可保全繪於圖上之敘述於下的通訊 點。使用者到交易中樞402的連結1係包含當事人或、、使 用者〃 401，登入到中樞402去檢視目錄、傳送訂購請求、 建立發票、及執行付款請求。交易中樞402需要使用數位 認證或使用者ID及密碼來確證使用者的身份。基本的密碼 規則必需被執行。只有當需要時，一個128位元加密的 SSL(安全插座層)連線會被用以維護資訊傳輸的機密性。除 非必要，否則不需加密目錄來增加負載。使用者401必須 使用他們自已的數位簽名在訂單及發票上簽名。 使用者到付款閘道器的連線2包括含有金融資訊的付 款指示的傳輸。交易中樞的身份將會藉使用數位認證的付 款閛道器來確證。使用者401將必須使用可能經由受信任 的認證機構(CA)4〇6認證的數位簽章機制在付款指示上數 位簽名。Java小程式會被用來簽署會被傳遞的資料。SSL ν·3會保全傳輸到付款閘道器403的加密資料。 父易中樞到付款閘道器的連線3包含付款通知與付款 同意之間的通訊。中樞402和付款閘道器403在資料訊息 中交換數位認證以作身份確認。在當事人雙方的安全通訊 使用點對點連結加密或虛擬私有網路(VPNs)，如有需要會 連同雜亂信號的功能。 付款閘道器到付款閘道器的連結4包括含有金融資訊 的付款指示。在403、404雙方當事人的通訊是在專線上 (leased line)使用點對點連結加密。 27 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） - ^ -----------------線 (請先閱讀背面之注意事項再填寫本頁) 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 五、發明說明（η) 付款閘道器到金融機構的連線5包括含有金融資訊的 付款指示。在當事人雙方的安全通訊使用點對點連結加密 或虛擬私有網路(VPNs)，連同雜亂信號的功能。 付款閘道器到受信任的CA連結6包含取回用來解密 的公開金鑰。此連結沒有安全上的風險，因爲公開金鍮是 公開的資訊。 付款閘道器到VISANET的連結7包括含有VISA Base I及11訊息的資料。確證閘道器會有VISA核發的Station IDs用以確認身份。與viSANET 407之間安全的通訊是藉 由Visa存取點(VAP)介面。 爲更一步協助了解本發明，本發明的第二實施例之電 子資金轉帳系統的槪要圖係繪製於圖5A和5B。系統500 爲關鍵任務的商業對商業付款提供一個高可靠度和可預期 的服務。其可在24x7x365全年無休的持續運轉基礎上承受 高容量的線上即時交易。第二實施例的系統每日的預估交 易處理容量大約是1.8百萬。而網頁點選率大約一天30萬 次。 若電子資金轉帳商業預期有高容量且網際網路相關作 業的動態成長，則主要的付款代理處應用組件將會使用第 一伺服器場（Server Farm)510來運轉，例如用4台有14顆 CPU的Sun Enterprise 4500伺服器，每台的儲存容量有 30TB。伺服器場501之間將會以高頻寬背板的高速交換式 集線器互相連接，並透過閉迴路504與資料庫502及 GSM-SMS/電子郵件/傳真通道溝通。 28 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公爱） --------^---------- (請先閱讀背面之注意事項再填寫本頁) A7 B7 五、發明說明（d) 類似地，第二個網路伺服器的伺服器場510，例如 Sun Enterprise 450伺服器，能應付網際網路的運載量需求 ’連同一個無線應用協定(WAP)伺服器5 u，其可透過一 對防火牆伺服器512和一對高效能的路由器513(例如 Cisco所製造的）連結至網際網路。包含在此圖中的還有一 台電子郵件伺服器514、一台虛擬私有網路(VPN)伺服器 515、一台認證授權伺服器516(給金融機構使用）、以及一 台金鑰管理伺服器517。網頁伺服器場510藉由更進一步 的一對防火牆伺服器508連接至付款代理處伺服器場501 〇 金融機構主機系統520可以藉由服務強化套件系統 521，透過一個VPN閘道伺服器和網際網路(見圖5A)，或 如有需要，直接到閉迴路504(見圖5B)，而連接至電子資 金轉帳系統500。 爲確保系統有能力依容量的成長而調整其規模，有兩 個策略是必要的。第一是採用一個能升級至更高處理量和 更高儲存容量的作業平台，第二是提供一個伺服器場的規 劃，其具有相對應的應用軟體架構、應用軟體功能及資料 庫分割設計來支援。應用軟體架構和應用軟體功能設計將 在不同伺服器上存取不同分割資料庫的支援功能執行良好 的負載平衡和協調作業。資料庫將依付款金融機構的群組 加以分割。 所期望的是建立一個能監控系統效能及容量使用率的 程序，以預測未來的容量需求。這樣的系統典型將包含大 29 ΐ紙張尺度適用中國國家標ί(CNS)A4規格（210 x 297公釐） ~ <請先閲讀背面之注意事項再填寫本頁) --------訂---------線- 經濟部智慧財產局員工消費合作社印製 513680 經濟部智慧財產局員工消費合作社印製 A7 B7 五、發明說明（V]) 量的相互連接的容量元件，包含處理器元件、I/O元件、 網路元件和儲存元件。整個系統容量模式的複雜性需要容 量規劃和模擬工具被使用。一個高度自動化的系統管理和 監控應用軟體最好被用到，以確保有效率、可靠及持續地 系統運作，來符合系統運轉時的高容量及關鍵任務需求。 系統500所使用的大量處理器和其它系統元件表示自 動化的系統管理及監控是很重要的。部份light out的運 作將是目標。有鑑於地理上的分佈，跨邊界的監控和管理 以檢視全球付款服務是所需的，但需緊密整合的運作機構 。一組多系統的管理及監控工具，像Tivoli，可能會被用 來作整合系統的骨架和中控台。一套通訊管理工具，像惠 普公司提供的HP Openview，將會是這個實施例系統的網 路元件的中央控制及監控工具。I II This paper size is in accordance with China National Standard (CNS) A4 (210 X 297 mm) 513680 Printed by A7 B7, Employee Consumer Cooperative of Intellectual Property Bureau of the Ministry of Economics. Protocol processing. Each installation for financial institutions 308 and 309 preferably includes a payment service enhancement kit 322. This suite can provide easy use of electronic funds transfer payment services with minimal development needs, and can also make payment financial institutions 308 and collection financial institutions 309 go online in the shortest time. The payment service enhancement kit 322 is integrated with the existing back-end system 323 of the financial institution system to appropriately provide a complete solution for payer verification, message transmission, and enhanced service operations. The present invention hopes that financial institutions will be responsible for establishing their own consumers on the payment gateway 301 to provide electronic funds transfer services. A party's profile is created for each party by using the management sub-module 318 to store party information and obtain a unique party ID. In this embodiment, the existing party account and credit card account are then mapped to the party ID. The payment gateway also generates a user management ID to allow the parties to perform user management. The security server 315 then creates a signature matrix for each account, and the digital signatures of the signers whose parties have been approved are mapped to specific accounts. Typically, a ‘financial institution’ sends an electronic funds transfer service suite with all relevant components to each party. Sequentially, the payment gateway 301 must be set up by the parties when they receive the kit from the party's financial institution. Individual user data is generated for payers who have access to the payment gateway 301. Individual users are best assigned to groups of users that align with their functional responsibilities within the payer's business organization. Authorized signatory 23 This paper size is applicable to China National Tomb Standard (CNS) A4 specification (21〇χ 297 mm) ------------ clothing -------- order- -------- Line (Please read the notes on the back before filling this page) 513680 Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs Α7 Β7 5. The invention description (w) must pass the appropriate trusted certification Agency 302 initiates their digital signature. One is that the parties to a business entity may establish a hierarchical signatory for the initiation of a transaction, preferably on a matrix basis. Each signature confirmation matrix will be assigned to a specific account. In general, a business party will have three signer groups, and on average, two signatures will be required. Consider a hypothetical account that can be operated by the signers of three user groups A, B, and C, as described in Table 1 below: Account group ABC itself 10 20 30 A 40 50 60 B 70 80- ----- 1 C 90 Table 1 · Signature matrix An individual from the user group A of the account can sign up to 10 times by himself. If he is with another member of the group A who is assigned to the same account, he can go to 40. If you are a member of group C assigned to the account, you can go to 60 ... and so on, as described in the table above. Electronic transaction signatures do not need to be attached to the company and accounts controlled by financial institutions. Individual configurations can also be defined in an Electronic Commerce (EB) agreement agreed by the company's management committee. Looking at the client side of the electronic fund transfer system 300, a business entry function is provided through a web page 311 embedded in the business center 3004. The function of the entrance includes making it easy for the payee to set up the invoice and the payer to pay. 24 ^ Paper size UiT National Standard (CNS) A4 Specification (210 X 297 ϋΤ -------------- ------ Order ---------- line (Please read the notes on the back before filling this page) Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs 513680 A7 B7_ V. Description of the invention (θ The client's computer system 303 uses a traditional web browser 324 (such as Microsoft Internet Explorer or Netscape Navigator) to access the B2B hub 304 via the Internet 305. The client's browser preferably includes a smart card insertion component 325, Because the present invention hopes that the authentication and private keys issued by the trusted authentication party 102 to confirm the signatory are stored on a smart card. When in a globally distributed environment, using the Internet, and connecting with external parties ( Including financial networks (such as VISANET; business hubs and financial institutions, such as banks) when operating under the main application, the security considerations for the operation of the electronic funds transfer system 300 are best to ... Confidentiality, • Confirm the identity of all parties involved in the transaction, and • Ensure the integrity of the data during transmission. In this embodiment, confirm the identity of the payee in the payment system and verify the payer ’s identity to the payee. Identity is the responsibility of the B2B hub. The B2B hub recognizes that the payer can securely conduct e-commerce with that retailer. The retailer registration process eliminates the need to confirm the identity of the retailer. Registration with the electronic funds transfer system ensures that the retailer It is associated with financial institutions so that they can receive electronic payments. When the B2B Hub web application 312 starts the payment service, the payer ID, payee ID, invoice information and digital signature of the B2B hub will be passed to Payment gateway 301. The B2B application uses the private key of the B2B hub to sign this data, and then encrypts it through a virtual private network (VPN) tunnel. This ensures the confidentiality and integrity of the data during transmission. Use 25 copies Paper size applies to China National Standard (CNS) A4 (210 X 297 mm) -------------------- ^ --------- line ( Please read the note on the back first Please fill in this page for further information.) 513680 Printed by the Consumer Cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 V. Description of the invention (w) The encryption of the private key of the B2B hub also ensures the non-repudiation of the data during transmission. Payment gateway The system decrypts the information and uses additional digital certificates issued by a trusted certification authority to confirm the identity of the B2B hub. When the payer completes and sends the payment instruction, the details of the payment instruction and the SHA1 clutter will use the payer's private money Key encryption. The payer's digital authentication and the payer's private key are stored in a smart card held by the payer. This ensures the non-repudiation of payment instructions and the integrity of the information. Encrypted packets are transmitted to the payment gateway 301 via the Internet 305 using SSL to ensure confidentiality. The security server 315 in the payment gateway decrypts the data. The security server 315 will use a suitable verification authority to verify the identity of the payer. The certification authority may be a payment financial institution 308, a payment gateway 301, or a trusted certification authority (CA) 302. Therefore, the electronic funds transfer system 300 ensures the confidentiality and integrity of the payment information of each and every process transmitted through each data transmission of the payment system. Each piece of information can only be accessed by the necessary parties. For example, the payer's account information will only be known by the payment gateway, the payer's financial institution, and the payee's financial institution, but not by the payee or B2B hub. The electronic funds transfer system 300 can implement various protection mechanisms now available that are compatible with the communications industry standards. The system's configurable and compatible standards include: · 168-bit Triple-DES, 1024-bit RSA, MD5, SHA1, χ · 509, 128-bit SSL ν · 3, and IPSec. Further details of these mechanisms can be found in the relevant standard documents. The security deployment configuration applicable to the first embodiment of the present invention is now used as 26 paper standards applicable to the Chinese National Standard (CNS) A4 specification (210 X 297 mm) '-------- 1 ---- ------ (Please read the notes on the back before filling out this page) Printed by the Consumer Cooperative of the Intellectual Property Bureau of the Ministry of Economic Affairs 513680 B7 V. Description of Invention (发明) Figure 4 below. The security mechanism may be implemented by a security tool set like Baltimore J / PKI +, which can secure the communication points depicted in the figure and described below. The link 1 from the user to the transaction center 402 includes the parties or users 〃 401, log in to the center 402 to view the directory, send order requests, create invoices, and execute payment requests. The transaction hub 402 needs to use digital authentication or user ID and password to confirm the identity of the user. Basic password rules must be enforced. Only when required, a 128-bit encrypted SSL (Secure Socket Layer) connection is used to maintain the confidentiality of information transmission. Unless necessary, there is no need to encrypt the directory to increase the load. User 401 must use their own digital signature to sign orders and invoices. User connection 2 to the payment gateway includes the transmission of payment instructions containing financial information. The identity of the transaction hub will be verified by using a digitally authenticated payment gateway. User 401 will have to digitally sign the payment instructions using a digital signature mechanism that may be certified by a trusted certification authority (CA) 406. Java applets are used to sign the data that will be passed. SSL ν · 3 secures the encrypted data transmitted to the payment gateway 403. The connection from the parent hub to the payment gateway 3 contains communication between payment notification and payment consent. The hub 402 and the payment gateway 403 exchange digital authentication in the data message for identity verification. Secure communications between the parties use point-to-point encryption or virtual private networks (VPNs), with clutter functions if needed. The link 4 of the payment gateway to the payment gateway includes a payment instruction containing financial information. At 403 and 404, communications between the parties are encrypted using a point-to-point link on the leased line. 27 This paper size applies to China National Standard (CNS) A4 (210 X 297 mm)-^ ----------------- line (please read the precautions on the back before filling (This page) 513680 Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 V. Description of the invention (η) The connection between the payment gateway and the financial institution 5 includes payment instructions containing financial information. Secure communication between the parties uses point-to-point encryption or virtual private networks (VPNs), along with clutter functions. The payment gateway to the trusted CA link 6 contains the public key retrieved for decryption. There is no security risk in this link, because the public money is public information. Link 7 of the payment gateway to VISANET includes data containing VISA Base I and 11 messages. Confirm that the gateway will have Station IDs issued by VISA to confirm identity. The secure communication with viSANET 407 is via the Visa Access Point (VAP) interface. To further understand the present invention, the essential diagram of the electronic funds transfer system of the second embodiment of the present invention is drawn in Figs. 5A and 5B. System 500 provides a highly reliable and predictable service for mission-critical business-to-business payments. It can withstand high-capacity online real-time transactions on the basis of 24x7x365 continuous operation all year round. The system of the second embodiment has an estimated daily transaction processing capacity of approximately 1.8 million. The page click rate is about 300,000 times a day. If the electronic funds transfer business is expected to have high capacity and the dynamic growth of Internet-related operations, the main payment agent application components will use the first server farm (Server Farm) 510 to run, for example, 14 with 4 The Sun Enterprise 4500 server with CPU has a storage capacity of 30TB each. The server farms 501 will be connected to each other by a high-speed switching hub with a high-bandwidth backplane, and communicate with the database 502 and the GSM-SMS / email / fax channel through a closed loop 504. 28 This paper size applies to China National Standard (CNS) A4 specification (210 X 297 public love) -------- ^ ---------- (Please read the precautions on the back before filling in this (Page 7) A7 B7 5. Description of the invention (d) Similarly, the server farm 510 of the second network server, such as the Sun Enterprise 450 server, can handle the Internet's carrying capacity requirements, together with a wireless application protocol ( WAP) server 5 u, which can be connected to the Internet through a pair of firewall servers 512 and a pair of high-performance routers 513 (such as those manufactured by Cisco). Also included in this figure is an email server 514, a virtual private network (VPN) server 515, an authentication and authorization server 516 (for financial institutions), and a key management server 517. The web server farm 510 is connected to the payment agent server farm 501 through a further pair of firewall servers 508. The financial institution host system 520 can use the service enhancement suite system 521 through a VPN gateway server and the Internet (See FIG. 5A), or if necessary, directly to the closed loop 504 (see FIG. 5B) and connected to the electronic funds transfer system 500. To ensure that the system has the capacity to adjust its size as the capacity grows, two strategies are necessary. The first is to adopt an operating platform that can be upgraded to higher throughput and higher storage capacity, and the second is to provide a server farm plan with corresponding application software architecture, application software functions, and database partition design. support. Application software architecture and application software functional design will support access to different partitioned databases on different servers to perform good load balancing and coordination. The database will be divided by groups of payment financial institutions. What is desired is to establish a program that can monitor system performance and capacity utilization to predict future capacity requirements. Such a system will typically contain a large 29ΐ paper size applicable to the Chinese National Standard (CNS) A4 specification (210 x 297 mm) ~ < Please read the precautions on the back before filling this page) ------- -Order --------- Line-Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs 513680 Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs A7 B7 V. Description of the Invention (V)) Interconnected capacity Components, including processor components, I / O components, network components, and storage components. The complexity of the entire system capacity model requires capacity planning and simulation tools to be used. A highly automated system management and monitoring application software is best used to ensure efficient, reliable and continuous system operation to meet the high capacity and mission-critical requirements of the system during operation. The large number of processors and other system components used by the system 500 indicates that automated system management and monitoring is important. Part of the light out operation will be the goal. Given the geographical distribution, cross-border monitoring and management to review global payment services is required, but requires tightly integrated operations. A set of multi-system management and monitoring tools, such as Tivoli, may be used as the backbone and center console for integrated systems. A set of communication management tools, such as HP Openview provided by HP, will be the central control and monitoring tool for the network components of the system of this embodiment.
Sun管理伺服器、BMC工具和一套元件特定的工具能 涵蓋系統其餘元件的管理和監控，包含爲Oracle 8i、Sun’s Solaris作業系統、網頁伺服器、儲存系統、系統安全、工 作管制、應用軟體、變更管理、網路效能監控/管理、應用 程式效能監控/管理以及應用程式及服務的可行性管理的裝 置。監控裝置可以記錄元件及系統的效能，將其與基準線 比較，找出錯誤，並預估明顯的錯誤。記錄下來的資料、 警告和警示能藉由公司的電子郵件閘道器505、傳呼/SMS 506、傳真機507，透過電子郵件傳送給相關的當事人。這 樣的自動化能使系統操作員事先知道問題所在，並在最短 的時間內修復錯誤。 30 本紙張尺度適用中國國家標準（CNS)A4規格（210 X 297公釐） --------^--------- (請先閱讀背面之注意事項再填寫本頁) 513680 A7 B7 五、發明說明（d) 雖然本發明的圖示實施例及其許多修正版已經參照圖 式作很詳細的說明，必須了解的是，本發明並不限於如此 精確的實施利和所描述的修改版，並且各種的變更和更進 一步的修改，在不離開如同附記的申請專利範圍所述的本 發明精神範圍內，可以由熟習此技術的人達成。 -----------------^.^wi (請先閱讀背面之注意事項再填寫本頁) 經濟部智慧財產局員工消費合作社印製 11 3 本紙張尺㈣(CN^)A4規格\210 X 297公釐）Sun management server, BMC tools and a set of component-specific tools can cover the management and monitoring of the remaining components of the system, including Oracle 8i, Sun's Solaris operating system, web server, storage system, system security, job control, application software, Device for change management, network performance monitoring / management, application performance monitoring / management, and feasibility management of applications and services. Monitoring devices can record the performance of components and systems, compare them to baselines, identify errors, and estimate obvious errors. The recorded information, warnings and alerts can be transmitted to the relevant parties via email via the company's email gateway 505, paging / SMS 506, and fax machine 507. Such automation enables system operators to know the problem in advance and fix errors in the shortest possible time. 30 This paper size applies to China National Standard (CNS) A4 (210 X 297 mm) -------- ^ --------- (Please read the precautions on the back before filling this page ) 513680 A7 B7 V. Description of the invention (d) Although the illustrated embodiment of the present invention and its many modified versions have been described in detail with reference to the drawings, it must be understood that the present invention is not limited to such precise implementation. Modified versions described, and various changes and further modifications can be achieved by those skilled in the art without departing from the spirit of the invention as described in the appended patent application scope. ----------------- ^. ^ wi (Please read the notes on the back before filling out this page) Printed by the Consumer Cooperatives of the Intellectual Property Bureau of the Ministry of Economic Affairs 11 3 This paper size (CN ^) A4 size \ 210 X 297 mm)