TWI431539B - Online payment method and system (1) - Google Patents

Description

Online payment method and system (1)

The present invention relates to a payment method and system, and more particularly to an online payment method and system for collecting payment by telephone bill.

With the rise of the home economy, merchants have set up web pages to provide sales of physical goods or virtual goods such as online games. At present, online payment methods, in addition to online credit card, remittance, cash on delivery, and the use of telephone bills to collect transaction fees, such as Taiwan's 513651 invention patent "shopping electronic payment method." However, Taiwan No. 513651 needs to reply through the newsletter to confirm that there are doubts that users need to pay by mobile phone and have poor security.

Therefore, the applicant has proposed in Taiwan, No. I309392 invention patent "Internet payment method and system" to provide a transaction authentication code after preliminary verification of the data network, and can use a home phone or mobile phone to dial an authentication phone to enter the transaction authentication. After the code is verified again, the transaction is completed.

However, financial fraud has been a bit of a concern. Previous phone payment methods were difficult to prevent deliberate online scams, such as defrauding others to make phone calls, or stealing other people’s calls for frequent consumption. A financial transaction such as a mature credit card first evaluates the transaction risk when it receives the transaction authorization request and then decides whether to approve the authorization to reduce the chance of bad debts.

Accordingly, it is an object of the present invention to provide a more secure online payment method and system.

Another object of the present invention is to provide an online payment method and system that can effectively reduce the risk of financial fraud.

The inventor of this case thought of integrating the transaction risk assessment into the telephone payment mechanism, and changing the transmission of the authentication transaction code to a more flexible telecommunications network to take advantage of the three-stage authentication method to ensure safer and effective prevention. The occurrence of financial fraud.

Thus, the online transaction payment method of the present invention comprises the following steps:

(A) if a telephone number is received via the data network, verify that the telephone number passes a transaction risk assessment;

(B) if the authentication is passed, an authentication telephone number is provided via the data network and the authentication telephone number is requested to be obtained by the telecommunication network to obtain a transaction authentication code reply, and if the authentication fails, the transaction is terminated;

(C) when the authentication telephone is turned on, the telephone number of the authenticated telephone dialed by the authentication matches the previously received telephone number, and correspondingly generates a transaction authentication code and is notified by voice when the authentication is correct;

(D) If the transaction authentication code is received via the data network, the transaction authentication code is authenticated and the transaction is completed when the authentication is correct.

Furthermore, in order to confirm the identity of the user, it is also possible to authenticate the user-specific identity identification data at least one of the data network authentication transaction risk assessment or the telephone number dialed by the telecommunications network authentication. The identification data may be the user's identity card number or the agreed password or birthday, and the like.

The above and other technical contents, features and advantages of the present invention will be apparent from the following detailed description of the preferred embodiments of the invention.

Referring to Figure 1, the online transaction payment system 1 of the present invention cooperates with the Internet merchant 2 and the carrier 3 to allow the user terminal 4 to pay for the payment by telephone payment. The online merchant 2 can be, for example, an online game website or a shopping website, and the like, and a web payment program connected to the transaction payment system 1 via the data network is embedded in the webpage of the online merchant 2 for selection by the user terminal 4. When the telephone payment is made, a telephone payment request can be generated to the online transaction payment system 1 and linked to the online transaction payment system 1 for evaluation of payment by the online transaction payment system 1, and the telephone payment request includes the user terminal 4. Product information, such as merchants, merchandise items, and amounts, have been selected. The data network can be a data transmission architecture in 3G, 3.5G and 4G for ADSL networks, data lines, WiFi, WiMAX or mobile phone systems.

The user terminal 4 has an electronic device capable of connecting the data network and the telecommunication network. For convenience of description, the user terminal 4 in the embodiment has a connectable data network for data transmission, and the terminal device 41 and the A telephone 42 (such as a home phone or a mobile phone) connected to the telecommunication network is taken as an example. Of course, the user terminal 4 can also use other electronic devices to make payment for the phone, for example, a wired data network and a telecommunication network. For the smart mobile phone of the road, the terminal device 41 can be a connectable data network such as a desktop computer, a portable computer, a personal digital assistant (PDA), a smart mobile phone, etc. for the terminal device 41. Electronic equipment.

The online transaction payment system 1 is formed by a server and can connect to the telecommunication network and the data network. The online transaction payment system 1 generally has a communication unit 11, a transaction risk assessment unit 12, a verification unit 13, a account unit 14, a user database 15, a transaction database 16, and a transaction database 17. .

The communication unit 11 is used to connect the internet and the telecommunication network to receive or transmit data via the internet or telecommunication network. The communication unit 11 stores one or more sets of exclusive authentication telephone numbers, which are telephone numbers rented by the carrier, so that the dialed telephone can be dialed to the communication unit via the telecommunication network when the authenticated telephone is dialed. 11. The communication unit 11 receives the data via the internet or telecommunication network and transmits the data to the corresponding unit, such as the transaction risk evaluation unit 12, the verification unit 13, and the like.

The user database 15 stores the user data of each user terminal 4. Each user data contains a telephone number and identity identification data provided by the operator to the user 4, and the identity identification data can be the user's identity card number or birthday. Or agree on a password and so on.

The transaction database 16 stores relevant transaction information, including the transaction relay data generated by each transaction and the transaction records generated after each transaction is completed. The transaction relay data contains transaction authentication code, product information and telephone number. Each transaction record includes transaction time, identity identification data, payment phone number, product information, and IP usage of the transaction using the terminal, etc., for analysis and use by the transaction risk assessment unit 12.

The account database 17 stores a plurality of pen account information, each account information contains consumer product information, telephone numbers and user identification data, etc., to be provided to the telecommunications operator 3 for account payment and payment for the network Road business 2 and other purposes.

The transaction risk assessment unit 12 requests the user terminal 4 to provide a telephone number upon receipt of a telephone payment request, and then conducts a transaction risk assessment based on the telephone number and the historical transaction record in the transaction database 16. The transaction risk assessment unit 12 performs risk analysis according to a pre-built predetermined rule, which is an evaluation rule analyzed in the previous financial fraud, for example, the transaction density is too high, and the same phone number is used by a plurality of different IPs within a certain period of time. Use, the same IP is used by a number of different phone numbers in a certain period of time, the phone number is accumulated over a certain period of time, and so on. The transaction risk evaluation unit 12 determines that the risk is higher than the predetermined value and judges that it is not passed, and ends the transaction. On the other hand, if the transaction risk assessment unit 12 evaluates, the notification verification unit 13 performs subsequent authentication and integrates the product information and the telephone number into a transaction relay data stored in the transaction database 16 for use by the verification unit 13 or the accounting unit 14.

The verification unit 13 continues the authentication upon receipt of the notification from the transaction risk assessment unit 12. The verification unit 13 first provides a message requesting the user terminal 4 to dial an authentication phone by using a phone number previously inputting the phone number to obtain a transaction authentication code, and provides an interface for the user terminal 4 to input the authenticated phone. Transaction authentication code. The authentication telephone of the communication unit 11 is transmitted to the verification unit 13 via the telecommunication network, and the verification unit 13 first confirms whether the telephone number of the dialing terminal matches the previously entered telephone number, and then generates a transaction authentication code to voice back. Passed to user terminal 4, and vice versa. If it does not match, the transaction ends. In this embodiment, the transaction authentication code is a randomly generated one-time password, and the verification unit 13 further integrates the transaction verification code into the corresponding transaction relay data for subsequent authentication.

Moreover, in order to increase the security, the verification unit 13 further requests the user terminal 4 to provide an identity identification material, such as an identity card number or an appointment password, etc., to use the user database 15 before generating the transaction authentication code. The data is verified, and after the double verification is performed by using the telephone number and the identity identification data, the transaction authentication code is provided to the user terminal 4 to input the interface. The verification unit 13 receives the transaction authentication code input by the user terminal 4 and compares it with the previously generated transaction authentication code, and when coincident, notifies the accounting unit 14 and generates a new transaction record according to the transaction relay data. Save to transaction database 16.

After receiving the notification from the verification unit 13, the account unit 14 uses the transaction relay data to form a piece of account information, so as to provide the telecommunication provider 3 with the account payment and payment for the online merchant 2 And informing the network merchant 2 that the transaction completion can provide the product purchased by the user terminal 4 to the user terminal 4.

According to the above architecture, the execution flow of the online transaction payment system 1 of the present embodiment will be described with reference to FIG.

In the following description, it is assumed that the user terminal 4 browses the network merchant 2 via the data network with the terminal device 41 and decides to purchase a specific item, such as points of online games, physical goods, and the like. At this moment, the webpage of the web merchant 2 will display a plurality of payment methods for the user 3 to select, one of which is a telephone payment option. If the option is clicked, a telephone payment request is generated to the online transaction payment system 1 and the user terminal 4 is directed to connect the terminal device 41 via the data network to the online transaction payment system 1. The telephone payment request includes the selected Product information. In the following description of the embodiment, it is assumed that the communication unit 11 of the online transaction payment system 1 has received the telephone payment request from the network merchant 2, and the communication unit 11 transmits the telephone payment request to the transaction risk evaluation unit 12.

First, in step 201, the transaction risk assessment unit 12 displays an interface (not shown) on the webpage of the online service website 2 to request the user terminal 4 to input the preparation by the terminal device 41 via the data network. The telephone number of the bill payment, it is assumed here that the user terminal 4 inputs the telephone number of his telephone 42.

Next, in step 201, the transaction risk assessment unit 12 stores the product information and the input telephone number in the telephone payment request as transaction relay data in the transaction database 16, and according to the historical transaction in the telephone number and transaction database 16 The record is subjected to a transaction risk assessment by a predetermined rule, and when the evaluation fails, the communication unit 11 notifies the network merchant 2 and the user terminal 4 that the transaction has not been completed. Conversely, the transaction risk assessment unit 12 evaluates the pass-time notification verification unit 13 to proceed to step 203.

In step 203, the verification unit 13 displays through the data network via the data network to the terminal device 41 of the user terminal 4 via an interface (not shown) to request the user terminal 4 to dial an authentication with the phone that previously entered the phone number. Telephone, to obtain a transaction authentication code and then return via the network. The interface further provides a field for the user terminal 4 to input the obtained transaction authentication code. At this point, the verification unit 13 retrieves the corresponding transaction relay data from the transaction database 16 for subsequent authentication and waits for the authentication phone to be turned on.

Then, in step 204, the user terminal 4 dials the verification telephone number with the telephone 42 to connect to the communication unit 11 via the telecommunication network, and the communication unit 11 connects the telephone to the verification unit 13.

When the authentication telephone is turned on, the verification unit 13 first performs step 205 to determine whether the telephone number of the user terminal 4 of the dialing terminal matches the telephone number of the telephone in the transaction relay data. If the determination in step 205 is met, step 206 is continued. On the other hand, if the step 205 determines that the match does not match, the user terminal 4 is notified of the failure of the transaction with the online merchant 2 and the transaction is terminated.

In step 206, the verification unit 13 further requests the user terminal 4 to provide identity identification information, such as an identity card number or an appointment password. Next, in step 207, the verification unit 13 compares the received identity identification data with the corresponding identity identification data in the user database 15 to confirm the correctness of the data.

If the step 207 judges that there is no match, the verification unit 13 accumulates the number of errors and performs step 211 to determine whether the number of errors exceeds a predetermined value (for example, three times). If the determination in step 211 is YES, the verification unit 13 replies to the message that the transaction has failed to the user terminal 4 and interrupts the call to end the transaction. On the other hand, if the determination in step 211 is negative, the verification unit 13 jumps back to step 206 to request that the identity identification material be provided again.

If the determination in step 207 is met, the verification unit 13 performs step 208 to correspondingly generate a transaction authentication code and transmit the voice to the telephone 42 of the user terminal 4, and further reminds the user terminal 4 to return to the webpage of the online transaction payment system 1 for input. This transaction authentication code. At this point, the verification unit 13 further integrates the transaction authentication code into the previous transaction relay data and stores it in the transaction database 16 to wait for the user terminal 4 to return the confirmation.

Then, in step 209, the verification unit 13 confirms whether the transaction authentication code received from the user terminal 4 via the data network matches the previously generated transaction authentication code. If the determination in step 209 is met, the accounting unit 14 is notified to complete the transaction. Similarly, if the determination in step 209 is unsatisfactory, the process proceeds to step 210 to first determine whether the number of errors exceeds a predetermined value (for example, three times). If the determination in step 210 is no, the verification unit 13 performs step 212 to request to re-enter the transaction authentication code, and then jump back to step 209 to reconfirm. On the other hand, if the determination in step 210 is YES, the transaction is terminated and the message that the network merchant 2 fails to trade with the user terminal 4 is notified.

After receiving the notification that the verification unit 13 is successful in the transaction, the account unit 14 retrieves the transaction relay data from the transaction database 16 to form a piece of account information, so as to provide the telecommunications provider 3 with the account request for inclusion in the telephone 42. The phone bill is used to pay the money to the online merchant 2 and inform the online merchant 2 that the transaction is successful.

Thus, in this embodiment, through the three-stage authentication, the first stage (step 202) uses the telephone number to conduct a transaction risk assessment to reduce the chance of financial fraud and to allow the loss to be maintained within a controllable range; (Step 205) Requiring the user terminal 4 to dial the authentication phone by entering the phone number to confirm the validity of the input phone number of the user terminal 4, and after confirming, the transaction authentication password is provided via the telecommunication network, because the telecommunication network line The characteristics of the transaction authentication password transmission can be ensured to reduce the chance of others stealing. Finally, in the third stage, the transaction authentication password returned by the data network is confirmed to ensure that the replying user terminal 4 should be Have this phone 42 at hand to improve transaction security. At the same time, this three-stage verification uses data networks and telecommunication networks alternately to ensure transaction security. Furthermore, in order to ensure that the user of the user terminal 4 is indeed the real user who owns the phone, in the second stage, in addition to confirming the authenticity of the phone number, it is further required to verify the identity identification data (steps 206-207). It can also improve transaction security.

Of course, the identity identification data can also be authenticated at other stages. In the second embodiment of FIG. 3, the identity identification data is changed to the first stage certification.

After receiving the telephone payment request, in step 301, the transaction risk assessment unit 12 requests the user terminal 4 to provide the telephone number and the identity identification information, and the transaction risk assessment unit 12 confirms in step 302 whether the telephone number can pass the transaction risk. Evaluation. If step 302, it is determined that the transaction has not been completed. If the risk assessment unit 12 determines in step 302, the product information, the phone number and the identity identification data are stored as transaction relay data in the transaction database 16 and notified to the verification unit 13, and the verification unit 13 executes step 303 to perform identity identification data. confirm. If the determination in step 303 is correct, the verification unit 13 requests the user terminal 4 to dial an authentication phone by entering the phone number in step 301 to obtain a transaction authentication code and then return it via the network. On the other hand, if the error is determined in step 303, the verification unit 13 also confirms whether the number of errors exceeds the preset value through steps 304, 305, and 303. If not, the user terminal 4 is required to re-enter the identity identification data and re-confirm. End the transaction.

Then, the verification of the second stage is performed. After the authentication unit is turned on in step 307, the verification unit 13 confirms whether the connected telephone matches the previously input telephone number in step 308, and terminates the transaction if it does not match, if it matches, it also Step 309 generates a transaction authentication code and informs the voice through the telecommunication network to wait for the user terminal 4 to transmit back through the data network. Finally, the third stage of verification is performed, and the verification unit 13 confirms the user terminal 4 through steps 310-312. Whether the data network backhaul transaction authentication code is correctly input within the number of times that the preset value is not exceeded, if the confirmation is that the verification unit 13 notifies the accounting unit 14 to complete the transaction for accounting processing, and if the confirmation exceeds, the transaction is terminated.

In summary, the present invention conducts transaction risk assessment by telephone number through a data network, and after confirming the validity of the telephone number via the telecommunication network, the transaction authentication code is provided by voice over the telecommunication network, so that the user 3 can use Various telephones to pay, such as home phones, to achieve more convenience; finally, the correctness of the return transaction authentication code is confirmed through the Internet to effectively reduce the risk of financial fraud and improve the security of transactions.

The above is only the preferred embodiment of the present invention, and the scope of the invention is not limited thereto, that is, the simple equivalent changes and modifications made by the scope of the invention and the description of the invention are All remain within the scope of the invention patent.

1. . . Online transaction payment system

11. . . Communication unit

12. . . Transaction risk assessment unit

13. . . Verification unit

14. . . Accounting unit

15. . . User database

16. . . Transaction database

17. . . Accounting database

2. . . Online business

3. . . Telecommunications operator

4. . . User terminal

41. . . Terminal Equipment

42. . . phone

201~212, 301~312. . . step

1 is a preferred embodiment of an online transaction payment system of the present invention;

2 is a flow chart of an embodiment of an online transaction payment method of the present invention;

3 is a flow chart of another embodiment of the online transaction payment method of the present invention.

201~212. . . step

Claims (12)

An online transaction payment method comprising: (A) if a telephone number is received via the data network, whether the telephone number is authenticated by a transaction risk assessment; (B) if the authentication is passed, providing an authentication telephone number and requesting the telecommunications network The road dials the authentication phone to obtain the transaction authentication code reply, and terminates the transaction if the authentication fails; (C) when the authentication phone is connected, the telephone number of the authenticated telephone dialed by the authentication matches the received telephone number, and Corresponding to generate and notify the transaction authentication code by voice when the authentication is correct; and (D) if the transaction authentication code is received via the data network, the transaction authentication code is authenticated and the transaction is completed when the authentication is correct. According to the online transaction payment method described in claim 1, wherein the method further comprises a step (E) before the step (A), and if the data network receives a telephone payment request, the input is required. A phone number. According to the online transaction payment method described in claim 2, in the step (C), when the authentication phone is connected, it is further required to provide a user-specific identity identification data for authentication, and The transaction authentication code is generated when the telephone number of the authenticated telephone number dialed and the identity identification data are verified to be correct. According to the online transaction payment method described in claim 2, in the step (E), it is further required to input a user-specific identification data, and the step (A) further authenticates the identity identification data. The certification is passed when it matches. The online transaction payment method according to claim 3 or 4, wherein the identity identification data is a personal identification number or an agreed password. The online transaction payment method according to claim 5, wherein the telephone number is a home phone number or a mobile phone number. According to the online transaction payment method described in claim 6, wherein the payment request includes a product information having an amount, and in the step (D), if the verification is correct, the amount is included in the telephone number. bill. An online transaction payment system comprising: a transaction database storing a plurality of transaction records generated after each transaction is completed, each transaction record containing transaction time, identity identification information and payment telephone number; a communication unit Transmitting and receiving data from a data network and a telecommunications network; a transaction risk evaluation unit, after receiving the telephone number from a user terminal via the communication unit and the data network, confirming according to the transaction record in the transaction database Whether the phone number passes a transaction risk assessment; a verification unit provides an authentication phone number to the user terminal when the phone number passes the aforementioned transaction risk assessment and requests the phone to provide the phone number to obtain the phone number Transaction authentication code, the verification unit notifies the transaction authentication code by voice when the authentication telephone is turned on, and confirms that the telephone number of the authenticated telephone dialed matches the received telephone number, and the verification unit confirms the data. The network return transaction authentication code corresponds to the voice notification transaction authentication code. Health a transaction message; and an accounting unit, based on the received accounting for the transaction processing completion message to complete the transaction. According to the online transaction payment system described in claim 8 of the patent application, the verification unit further forms a transaction record corresponding to the transaction completion message to be stored in the transaction database. The online transaction payment system according to claim 9 further includes a user database for storing user-specific identity identification data, and the verification unit further corresponds to the identity identification data required to be input and the user database. The data matches to generate the transaction authentication code. The online transaction payment system according to claim 10, wherein the identity identification data is a personal identification number or an agreed password. The online transaction payment system according to claim 11, wherein the telephone number is a home phone number or a mobile phone number.