TWI261451B - Transaction confirmation method and system transmitting on time password - Google Patents

Abstract

The present invention provides a transaction confirmation method and system transmitting on time password. The invented system includes a terminal, a remote end server, and a mobile communication device. The invented method comprises: using a terminal to read an ID verification code in a chip-type card; transmitting the code to a remote end server; searching for an address number corresponding to the ID verification code and generating an on time password; connecting to the address number and transmitting the on time password to the corresponding mobile communication device; allowing a user to enter the on time password to the terminal; determining whether the entered on time password is correct; if the entered on time password is correct, confirming the user's identity and completing a transaction; otherwise, terminating the transaction. This completes the objective of using on time password in performing a financial business transaction and effectively inhibits illegal transaction or withdrawal.

Description

1261451

V. INSTRUCTION DESCRIPTION OF THE INVENTION (1) Technical Field of the Invention The present invention relates to a method and system for confirming a transaction for transmitting a dynamic password, and more particularly to a method for transmitting a set of transaction dynamic rock horses using a mobile communication device as a credit card or Identification of the identity of the financial card at the time of transaction to prevent secondary use and stolen methods and systems. [Prior Art]

According to the rapid development of computer, network and communication technology, its influence has gradually deepened in people's lives. The business transaction type included is called e-commerce, which can be quickly adopted by computers, networks and communication technologies. And convenience: Y creates a virtual trading environment, but can quickly complete the actual trading behavior, forming a new borderless business market. 〃 However, this kind of e-commerce is more serious than the security mechanism of transactions. Therefore, in order to achieve transaction security, there is a so-called secure electronic transaction (Secure).

Electronic Transaction, SET) mechanism and the generation of the first payment system (FV) mechanism, in which the SET mechanism or Fv must additionally set up a complex authentication system, so the price is extremely high, and only the credit card through the network Trading, but not for the face, is not ideal. For example, it is easy to take a credit card as an example. The identity of the card user is no chip type credit card or as shown in the first figure, a dynamic password is generated, and the authenticity of the current credit card pseudo card is valid. Because of the financial card 10, the card uses the chip type card i 0 by inputting the dynamic compact card 1 〇 because the chip 11 replies 'the main reason is credit, the financial industry has proposed that an internal chip 1 1 is provided, Chip 11 town code can distinguish the single characteristics of the user, so forgery

Page 5 1261451 The containment film 10 needs to be solved by the mobile phone because of the environment, the password, the chip-mode cryptographic card that is quite unscrupulous, and the main mobile communication steps and information, such as mobile phones. Reasonable and only anti-counterfeiting, but it is impossible to prevent people from stealing the brush. There are still unsatisfactory £_, invention descriptions (2) quite difficult, but at the same time. The gastric wafer type card generates the dynamic password t «The machine generates different actuators 20, and the use of the above 1 ♦ home finance f has two or more or more ^ ^ & use wafer w can not be a large number of Pu, and, currently The communication technology of the mobile communication device user mobile phone, lost 'and because of direct, it is a set of [invention content] f invention and system, mainly directly to the Golden State law stolen brush using a dynamic wafer card 1 0 User information and the need to make it convenient. When the dynamic password type card is used, the cause is used if it is not used. The device (such as mobile phone) has a large transmission bandwidth to transmit the chip type. The above-mentioned traditional use of the dynamic password can effectively improve the upper password generator 20, and when it is used, every time it is used, etc., it is carried. The dynamic password generation generator 20 is incompatible, and the user must carry the inconvenience of the dynamic password generator. This is quite popular, and with the promotion, if the card's dynamic password can be used, The invention that the problem of the stolen brush is completely solved by the lack of the dynamic password generator. & Achieving the above-mentioned system provides a transaction confirmation method for transmitting dynamic passwords. The advantage of using a chip type card to generate a dynamic password is that the business transaction does not need to use a dynamic password generator to steal the effect. Purpose' The present invention mainly provides a method for transmitting dynamic passwords.

1261451 V. Description of invention (3) Confirmation method of transaction, on-chip authentication 'The subsequent remote code (such as mobile number) is connected to the dynamic password of the code to the user. In particular, in the first method, the user remote server is connected to the address number, the number, and the coded mobile communication device to transmit the mobile device that is the same as the code. a mobile communication device that completes the remote server and generates a dynamic password, and if the transmission is consistent, the invention further mentions the terminal, connects to a network system, or can directly and remotely servo at least one communication device. Using the remote to complete the transaction for a remote terminal to read the chip-type card code of one of the verification users to a remote server verification code - a dynamic communication device Further, a method is provided for transmitting a dynamic connection to a terminal to input a financial connection to the user, and whether the code is a special system, wherein the identity is integrated into the transaction, and the corresponding The address number of the mobile terminal matches, and the location includes a terminal verification code; and the storage has a certain address first by the code, and the server searches for the 'address number of the mobile terminal' to search for the code, and then, Receive the server by the sender, otherwise send the dynamic server and the password corresponding to the password of the financial account network authentication mode, and the passer will pass the password to the account code of the password in the 1J. If there is no such thing as the move, the transaction code is read by one of the interrupted passwords, and the connection code or the gold connection is used; if the address number used is received by the wireless transmission, the same is received. , broken the transaction. The transaction confirmation party transmits the password to the corresponding communication line of the service code to make the dynamic password input to the dynamic password. The transaction confirmation system is a communication device, and the chip type card is used for the terminal to generate the account code. The address number 5 tiger is input by the line to generate an action through the user's body.

Page 7 1261451

V. Description of the invention (4) After receiving the dynamic password, the dynamic communication device then turns the dynamic password into the terminal to confirm the transaction. [Embodiment] In order to enable the reviewing committee to further understand the techniques, means, and effects of the present invention for achieving the intended purpose, please refer to the following detailed description and drawings of the present invention, and the object and features of the present invention are believed to be The features of the present invention are to be understood by those skilled in the art, and are not intended to limit the invention. 7 is a schematic diagram of the system architecture of the present invention, and the third diagram is a schematic flowchart of the first embodiment of the present invention. The present invention mainly utilizes the advantages of a chip type credit card or a financial card (hereinafter referred to as a chip type card i 会) to generate a dynamic password (Οη ime P assw 〇rd), and solves the disadvantage of requiring a dynamic password generator. The kinetic energy password is received through the mobile communication device. The system architecture of the present invention includes a remote server 5 connected to a network system 60. The remote server 5 is provided with a database 51 storing at least one identity verification code 5 n of the chip type card 使用者 owned by the user, or the user's financial account code 5 1 2 The user's address number 51 3 (such as a mobile phone number) should be used, and the network system 6 can be a telecommunication network, an internet network or a wireless communication network. f The other end of the network system 60 can be connected to an Automata Teller Machine (ATM) 61 or a computer terminal: or a computer terminal set to the store operator β 2, or It can be a computer 63 with a network connection in the user's home, through the network system 6〇

1261451 V. Description of invention (5) " ----- Conduct e-commerce transactions. When a financial transaction for deposit, withdrawal or transfer is made through the financial unit's automatic depositing and dispensing machine (ATM) 61, or when the user conducts a credit card transaction on the computer of the store operator, The wafer card 10 of the user is input by the automatic cash dispenser 6 or the computer terminal 6 2 (hereinafter collectively referred to as the terminal), and the terminal device reads the identity verification code in the wafer card 丨Q. 511 (S1〇0), then the authentication code 511 is transmitted to the remote servo two 50 (S 1 0 2 ). The port is pre-stored with the user's authentication code 51 1 and the user's address number 513 in the database 51 of the remote server 50, when the remote server 500 receives the After the authentication code 5 11 , the address number 513 of the user corresponding to the authentication code 511 in the database 5 i is searched, and a dynamic password (s 1 〇 4 ) is generated by the remote server 50. The remote server 50 is further connected to the user mobile device of the address number 513, such as a mobile phone that dials the user, and transmits the dynamic password to the user's mobile communication device through the wireless communication system 53.丨〇6), the wireless mobile system can be such as GS system, GPRS system or 3G system. After the user's mobile communication device 70 receives the dynamic password/can be displayed on the display screen 71 of the mobile communication device 70, the user can further input the dynamic password (S1 08) by the terminal device to Confirm the identity of the user. At this time, the terminal will perform an action (S 1 1 〇) than the dynamic password. If the correct date is available, the user will become the parent (S11 2 ). If it is not correct, the transaction will be interrupted ($ 114). ). Therefore, when the chip type card is illegally stolen or stolen, the user's mobile communication device receives the correct dynamic password, because it cannot be used, so even the side

1261451 V. INSTRUCTIONS (6) Recording the account number and password of the chip-type card, the transaction cannot be completed, so it can really curb the illegal stealing or theft. Further, please refer to the fourth embodiment for a flow chart of the second embodiment of the present invention' and please refer to the second figure. The present invention can generate the dynamic password on the remote server 50, so it is not necessary to use the chip type card 10, and can be used in e-commerce transactions by the computer 63 in the home or any network connected network. The mobile communication device 70 receives the dynamic password to confirm the identity of the user, or can also enter a set of financial account codes 5 1 2 by the financial unit or the physical store to conduct the transaction. Therefore, the financial account code 5 1 2 can be an account of a financial unit, a credit card number, a person ID number or a telecommunication number, etc., and a group of numbers representing the user identity can be the financial account. code. The present invention is described by taking an online e-commerce transaction as an example. When a user enters a network electronic store through the electric 63, the financial account code 512 is input on the computer 63 and transmitted to the remote servo. 5 〇 (S2 〇〇). The user's financial account code 5 1 2 and the user's address number 5丨3 (such as a mobile phone number) are pre-stored in the database 51 of the remote server 50, when the remote server is After receiving the financial account code 5丨2, the device 5 searches for the address number 513 corresponding to the financial account code 51丨 in the database 51, such as the mobile phone number of the user, and the remote servo The device 5 generates a dynamic password (S 2 0 2 ). The remote server 50 then dials the address number 5丨3 of the user, and transmits the dynamic password to the mobile communication device 70 of the user via the wireless communication system 53 (S204). When the user's mobile communication device 7 receives the dynamic =

Page 10 1261451 Description of the invention (7) After the code ' can be displayed on the display screen 7 of the mobile communication device 7 。. > Therefore, the user can input the dynamic password (S2〇6) by the computer 63 to confirm the identity of the user. At this time, the computer 63 will transmit the dynamic password to α海远i and the servo is 50 ( S 2 0 8 ), an action (S2 1 0) is performed to determine whether the dynamic password is correct. If it is correct, the computer is returned to complete the transaction (S2丨2), and if not, the transaction is interrupted (S214). In the post, the present invention can provide a design that is quite different from the prior art by the above-mentioned disclosed technology, which can improve the overall use value, and the application is not found in the publication or public use, and has already complied with the invention patent. The essentials, 提出 filed an invention patent application in accordance with the law. However, the drawings and descriptions disclosed above are only examples of the present invention, and those skilled in the art can make other improvements according to the above description, and these changes still belong to the inventive spirit of the present invention and the following. Within the scope of the patent. 1 &

Page 11 1261451 Brief description of the diagram (1) Schematic description: The first diagram is a schematic diagram of a conventional wafer type card and a dynamic password generator; the second diagram is a schematic diagram of the system architecture of the present invention; A schematic flowchart of a first embodiment of the present invention; and a fourth diagram is a schematic flowchart of a second embodiment of the present invention. ) The main part of the symbol 10 Chip type card 11 Chip 20 Dynamic password generation 50 Remote server 51 Database 511 Data code 512 Financial account code 513 Address number 53 Wireless communication system 60 Network system 61 Mobile cash machine 62 computer terminal 70 mobile communication device 71 display screen

Page 12

Claims (1)

1261451 VI. Application Material mm -- 1. A transaction confirmation method for transmitting dynamic passwords (On Tlme Passw〇rd) is a transaction using a wafer type card, the method comprising: a. — the terminal machine reads the wafer type card One of the authentication codes; b) transmitting the authentication code to a remote feeding service; C. searching for the address number corresponding to the authentication code and generating a one-mode password; d. connecting to the address of the address The mobile communication device, α transmits the dynamic password to the mobile communication device; and e. after receiving the dynamic password, the mobile communication device inputs the final password to the end, and the code is correct to confirm the transaction. 2. For the transaction of transmitting dynamic password as described in item 1 of the scope of patent application: in the following, the terminal is an automatic deposit and withdrawal machine UUt〇matlC Teller Machine (ATM) or finance for storage, Financial transactions for withdrawals or transfers. (Jing Yiyi 4; Shen; special: the transaction of transmitting dynamic password as described in item 1 of the scope is true. IS is the store operator - the card reader is remote: ί ί; authentication of the chip type card The code pair should address the number in the recognition method, and the transaction of transmitting the dynamic password as described in item 1 of the first paragraph, 'Internet/wireless communication network. 3 Series transmission - electricity (4) Page 13 1261451 VI. Patent application scope 6. If the patent application method is applied, its d·stepping system, a GPRS 7. If the patent application method is applied, the e-step shows the ratio of the dynamic confidentiality indicated by the dynamic close transaction. The method of transmitting, the method comprising transmitting the dynamic password in the transaction confirmation of the dynamic password described in the first item of claim 1 through a GSM wireless communication system or a 3G wireless communication system. After the transaction of transmitting the dynamic password, it further includes: code = on the display screen of the mobile communication device; moving the compassion, the code is inserted into the terminal; and the code is correct, if it is correct, the transaction is completed, otherwise the confirmation is completed. Bad Time Code (On Time Password The transaction a) the user enters a financial account code in a terminal, transmits it to a remote server b β to search for the financial state password (0ΤΡ); c. connects to the mobile communication device d. The mobile communication to the terminal device transmits the correct address, carries the address number corresponding to the account code, and generates a mobile device with the address number, transmits the dynamic password to; and after receiving the dynamic password, the device inputs The dynamic password is sent to the back-end server, which is easier to confirm than the dynamic password. 9. The method for confirming the transaction of transmitting a dynamic password according to claim 8 of the patent application, in the step a, the terminal It is an Automatic Teller Machine (ATM) or a computer terminal located in a financial unit for financial transactions of deposit, withdrawal or transfer. Page 141261451 --------- Sixth, the scope of application for patent recognition 1 party G law such as 2 special cattle profit ^ the 81st member of the account said the transmission of the dynamic password transaction really hurts the machine, two The final machine is a computer set up in the store, and ιι is used for account transactions. The method is as follows: the transaction terminal that transmits the dynamic password as described in item 8 is transmitted through the second network, and the terminal is a computer connected to any network. Conduct e-commerce transactions. For the method, the transaction for transmitting the dynamic password as described in item 8 of the patent scope includes: The net account code corresponds to the address number of the remote server 1 3 · If the patent application method is applied, the a-step d: the transaction confirmation number for transmitting the dynamic password, the credit card number, and the account number system For a financial unit account 14. If you apply for a patent range = certificate number or a telecommunication number. Recognition method, in a. step, pass the reverse: the transaction that transmits the dynamic password is confirmed - 丨: the network or wireless communication network reads the poor code through the telecommunications network, ^ ^ ^, V〇. 11 J % ^ ^ ^ ^ ^ ^ , , -cm wireless communication - (10) wireless communication 6, as claimed in the scope of the patent; communication system. 1 method, after the step d, further includes the transaction dynamic password of the mobile state password on the display screen of the mobile communication device; read: "the dynamic password is input to the terminal; on the screen, ', machine Send the dynamic password to the remote server crying. And page 15 1261451 6. The patent application scope is correct whether the entered dynamic password is correct. If it is correct, reply to the message of completing the transaction, otherwise the transaction is interrupted. The transaction confirmation system for transmitting a dynamic password includes: a terminal device connected to a network system for reading a data type of a chip type card, or directly inputting a financial account code for performing a financial transaction with a remote end The server is connected to the terminal through the network system, and at least one user's data code or financial account code is stored therein, and corresponding to the address number, a dynamic password can be generated, and the address is connected. The mobile communication device of the number sends the dynamic password; and a mobile communication device receives the dynamic password and then inputs it to the terminal for confirmation of the transaction. The transaction confirmation system for transmitting a dynamic password according to claim 17 of the patent application, wherein the terminal is an automatic deposit and withdrawal machine (A u ΐ 〇 matic T e 1 1 er Machine, ATM) or A financial transaction for depositing, withdrawing, or transferring a computer terminal in a financial unit. 1 9. A transaction confirmation system for transmitting a dynamic password as described in claim 17 of the patent application, wherein the terminal is located at A computer terminal for a store operator to conduct a credit account transaction. 2 〇. A transaction confirmation system for transmitting a dynamic password as described in claim 17 of the patent application, wherein the terminal is a computer connected to any network connection E-commerce transaction through an Internet. 2 1. A transaction confirmation system for transmitting a dynamic password as described in claim 17 of the patent application, wherein the network system is a telecommunication network and an internet network. Page 16 1261451 VI. Application for patent scope or a wireless communication network. 2 2. The transaction confirmation system for transmitting a dynamic password according to claim 17, wherein the remote server is further connected to a database, and the user's authentication code or financial account code, and The corresponding address number is stored in the database. 2 3. The transaction confirmation system for transmitting a dynamic password as described in claim 17 wherein the remote server transmits a GS wireless communication system, a GPRS wireless communication system or a 3G wireless communication system. Send the dynamic password to the phone. 2 4. The transaction confirmation system for transmitting a dynamic password as described in claim 17 wherein the mobile communication device is provided with a display screen for displaying the dynamic password. Page 17