TWI529640B - Action payment method and action payment equipment - Google Patents

Action payment method and action payment equipment Download PDF

Info

Publication number
TWI529640B
TWI529640B TW104105399A TW104105399A TWI529640B TW I529640 B TWI529640 B TW I529640B TW 104105399 A TW104105399 A TW 104105399A TW 104105399 A TW104105399 A TW 104105399A TW I529640 B TWI529640 B TW I529640B
Authority
TW
Taiwan
Prior art keywords
payment
computer device
institution server
code
session
Prior art date
Application number
TW104105399A
Other languages
Chinese (zh)
Other versions
TW201631529A (en
Inventor
jian-gang Yang
Original Assignee
jian-gang Yang
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by jian-gang Yang filed Critical jian-gang Yang
Priority to TW104105399A priority Critical patent/TWI529640B/en
Priority to EP15178696.9A priority patent/EP3057050A1/en
Application granted granted Critical
Publication of TWI529640B publication Critical patent/TWI529640B/en
Publication of TW201631529A publication Critical patent/TW201631529A/en

Links

Landscapes

  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Description

行動支付方法及行動支付設備 Mobile payment method and mobile payment device

本發明是有關於一種行動支付方法及行動支付設備,特別是指一種使用近場通訊實現交易安全支付的行動支付方法及行動支付設備。 The present invention relates to a mobile payment method and an action payment device, and more particularly to an action payment method and a mobile payment device for realizing transaction security payment using near field communication.

電子錢包或塑膠貨幣如銀行卡、信用卡、簽帳卡或智慧卡等,皆須用到計算機系統及數位儲值系統來達到加值及轉帳等功能。由於使用電子錢包或塑膠貨幣可以減少顧客在購物時隨身攜帶太多現金之必要,且店家也不必在客戶付款時當場點收現金之金額正確與否,故,可提升交易行為之效率及便利性。因而近年來,電子錢包廣泛地被接受與使用。 Electronic wallets or plastic money such as bank cards, credit cards, charge cards or smart cards must use computer systems and digital stored value systems to achieve functions such as value-added and transfer. Since the use of electronic wallet or plastic currency can reduce the need for customers to carry too much cash when shopping, and the store does not have to pay the amount of cash on the spot when the customer pays, it can improve the efficiency and convenience of the transaction. . Thus, in recent years, electronic wallets have been widely accepted and used.

然而,現有傳統非接觸型之儲值智慧卡通常缺乏卡片認證的功能,或卡片認證措施不足。卡片一旦被偽造,店家只能自行承擔損失的風險。 However, the existing traditional non-contact type of stored value smart card usually lacks the function of card authentication, or the card authentication measures are insufficient. Once the card is forged, the store can only bear the risk of loss.

此外,當使用該傳統非接觸型之儲值智慧卡購物付款時,每一筆購物所產生的交易紀錄通常會被儲存在店家端,但此交易紀錄並沒有隨即被傳送至卡片發行單位或支付機構來驗證該儲值智慧卡之真偽,再請求付款。而 是在結束一個營業日後,才會把整批的交易紀錄傳送給卡片發行單位或支付機構請求付款,此亦即整批結算。當該整批結算的程序不夠即時時,致使店家在未能經卡片發行單位或支付機構驗證該每一筆購物所使用之儲值智慧卡之真偽時,而完成交易,此情形將使店家暴露在損失的風險當中。 In addition, when using the traditional non-contact type of stored value smart card to make payment, the transaction record generated by each purchase is usually stored at the storefront, but the transaction record is not immediately transmitted to the card issuing unit or payment institution. To verify the authenticity of the stored value smart card, and then request payment. and After the end of one business day, the entire batch of transaction records will be transmitted to the card issuing unit or the payment institution for payment, which is the whole batch settlement. When the batch settlement procedure is not enough, the store will not complete the transaction when the card issuer or the payment institution fails to verify the authenticity of the stored value smart card used in each purchase, which will expose the store. Among the risks of loss.

因此,本發明之目的,即在提供一種允許及時處理交易且確保交易安全的行動支付方法及行動支付設備。 Accordingly, it is an object of the present invention to provide an action payment method and an action payment device that allow for timely processing of transactions and secure transactions.

於是,本發明行動支付方法,由一電腦裝置執行,該電腦裝置能與一具有一支付卡的行動裝置互動,該電腦裝置與一支付機構伺服器通訊。所述的行動支付方法包含:接收一交易清單,該交易清單相關於一交易及一關於該交易的支付;與該行動裝置建立一無線短距離通訊;經由該無線短距離通訊傳送該交易清單到該行動裝置;經由該無線短距離通訊接收一來自該行動裝置的支付指令,該支付指令是該行動裝置基於至少該交易清單所產生;與該支付機構伺服器建立一會話機制,該會話機制提供一在該電腦裝置與該支付機構伺服器之間的安全 通訊通道;在該會話機制下傳送該支付指令到該支付機構伺服器,該支付指令使該支付機構伺服器在收到該支付指令時基於該支付指令識別該支付卡的正確性,且在該支付機構伺服器識別該支付卡為正確之後,該支付指令還使該支付機構伺服器根據該支付指令所包括之該交易清單處理該支付;及在該會話機制下接收來自該支付機構伺服器的一支付結果,該支付結果是在完成該支付之後由該支付機構伺服器所產生。 Thus, the mobile payment method of the present invention is performed by a computer device capable of interacting with a mobile device having a payment card, the computer device being in communication with a payment institution server. The action payment method includes: receiving a transaction list related to a transaction and a payment regarding the transaction; establishing a wireless short-range communication with the mobile device; transmitting the transaction list via the wireless short-range communication to The mobile device receives, via the wireless short-range communication, a payment instruction from the mobile device, the payment instruction being generated by the mobile device based on at least the transaction list; establishing a session mechanism with the payment institution server, the session mechanism providing a security between the computer device and the payment institution server a communication channel that transmits the payment instruction to the payment institution server under the session mechanism, the payment instruction causing the payment institution server to identify the correctness of the payment card based on the payment instruction upon receiving the payment instruction, and After the payment institution server identifies the payment card as correct, the payment instruction further causes the payment institution server to process the payment according to the transaction list included in the payment instruction; and receive the payment from the payment institution server under the session mechanism As a result of the payment, the payment result is generated by the payment institution server after the payment is completed.

本發明行動支付方法,由一具有一支付卡的行動裝置執行,該行動裝置能與一電腦裝置互動。該行動裝置及該電腦裝置與一支付機構伺服器通訊。所述的行動支付方法包含:與該電腦裝置建立一無線短距離通訊;經由該無線短距離通訊接收一來自該電腦裝置的交易清單,該交易清單相關於一交易及一關於該交易的支付;基於至少該交易清單產生一支付指令,並經由該無線短距離通訊傳送該支付指令給該電腦裝置,該支付指令由該電腦裝置提供給該支付機構伺服器,且該支付指令使該支付機構伺服器在收到該支付指令時基於該支付指令識別該支付卡的正確性,且在該支付機構伺服器識別該支付卡為正確之後,該支付指令還使該支付機構伺服器根 據該支付指令所包括之該交易清單處理該支付;及接收來自該支付機構伺服器的一支付結果,該支付結果是在完成該支付之後由該支付機構伺服器所產生。 The mobile payment method of the present invention is performed by a mobile device having a payment card that can interact with a computer device. The mobile device and the computer device communicate with a payment institution server. The mobile payment method includes: establishing a wireless short-range communication with the computer device; receiving, via the wireless short-range communication, a transaction list from the computer device, the transaction list being related to a transaction and a payment regarding the transaction; Generating a payment instruction based on at least the transaction list, and transmitting the payment instruction to the computer device via the wireless short-range communication, the payment instruction being provided by the computer device to the payment institution server, and the payment instruction causing the payment institution to servo The device identifies the correctness of the payment card based on the payment instruction upon receipt of the payment instruction, and after the payment institution server recognizes that the payment card is correct, the payment instruction further causes the payment institution server root Processing the payment according to the transaction list included in the payment instruction; and receiving a payment result from the payment institution server, the payment result being generated by the payment institution server after the payment is completed.

本發明行動支付設備,能與一電腦裝置互動,該電腦裝置與一支付機構伺服器通訊,所述的行動支付設備包含一行動裝置,該行動裝置包括一處理器、一記憶體單元、一卡片插槽、一短距離通訊單元及一通訊單元。該記憶體單元耦接於該處理器且儲存有一支付軟體。該卡片插槽耦接於該處理器,且可移除地插設有一支付卡,藉此使用該行動裝置能存取該支付卡。該短距離通訊單元耦接於該處理器,且能與該電腦裝置通訊。該通訊單元耦接於該處理器,且能與該支付機構伺服器通訊。當該處理器執行該支付軟體時,該支付軟體使該行動支付設備:與該電腦裝置建立一無線短距離通訊,經由該無線短距離通訊接收一來自該電腦裝置的交易清單,該交易清單相關於一交易及一關於該交易的支付,基於至少該交易清單產生一支付指令,並經由該無線短距離通訊傳送該支付指令給該電腦裝置,該支付指令由該電腦裝置提供給該支付機構伺服器,且該支付指令使該支付機構伺服器在收到該支付指令時基於該支付指令識別該支付卡的正確性,且在該支付機構伺服器識別該支付卡為正確之後,該支付指令還使該支付機構伺服器根 據該支付指令所包括之該交易清單處理該支付,及接收來自該支付機構伺服器的一支付結果,該支付結果是在完成該支付之後由該支付機構伺服器所產生。 The mobile payment device of the present invention can interact with a computer device that communicates with a payment mechanism server, the mobile payment device including a mobile device, the mobile device including a processor, a memory unit, and a card A slot, a short-range communication unit, and a communication unit. The memory unit is coupled to the processor and stores a payment software. The card slot is coupled to the processor and is removably inserted with a payment card, whereby the payment card can be accessed using the mobile device. The short-range communication unit is coupled to the processor and can communicate with the computer device. The communication unit is coupled to the processor and can communicate with the payment institution server. When the processor executes the payment software, the payment software causes the mobile payment device to establish a wireless short-range communication with the computer device, and receive a transaction list from the computer device via the wireless short-range communication, the transaction list is related Transmitting, by a transaction, a payment instruction based on at least the transaction list, and transmitting the payment instruction to the computer device via the wireless short-range communication, the payment instruction being provided by the computer device to the payment institution servo And the payment instruction causes the payment institution server to identify the correctness of the payment card based on the payment instruction upon receiving the payment instruction, and after the payment institution server recognizes that the payment card is correct, the payment instruction further Make the payment institution server root The payment is processed according to the transaction list included in the payment instruction, and a payment result from the payment institution server is received, the payment result being generated by the payment institution server after the payment is completed.

本發明的功效在於藉由基於行動裝置產生的支付指令識別支付卡的正確性,能偵測出使用偽卡(fake card)的支付行為。再者,藉由即時傳送對應交易清單的支付指令給支付機構伺服器,各交易的支付可以被及時處理。如此一來,可以避免詐騙支付或交易紀錄不對應所造成的損失。 The effect of the present invention is that the payment behavior using the fake card can be detected by recognizing the correctness of the payment card based on the payment instruction generated by the mobile device. Moreover, by instantly transmitting the payment instruction of the corresponding transaction list to the payment institution server, the payment of each transaction can be processed in time. In this way, it is possible to avoid the loss caused by fraud payment or transaction record non-correspondence.

100‧‧‧系統 100‧‧‧ system

1‧‧‧電腦裝置 1‧‧‧Computer equipment

11‧‧‧處理模組 11‧‧‧Processing module

12‧‧‧記憶體模組 12‧‧‧ memory module

120‧‧‧交易軟體 120‧‧‧ transaction software

121‧‧‧安控元件 121‧‧‧Security components

13‧‧‧近場通訊模組 13‧‧‧ Near Field Communication Module

14‧‧‧輸入/輸出模組 14‧‧‧Input/Output Module

15‧‧‧通訊模組 15‧‧‧Communication module

2‧‧‧行動支付設備 2‧‧‧Mobile payment equipment

20‧‧‧行動裝置 20‧‧‧ mobile devices

21‧‧‧處理器 21‧‧‧ Processor

22‧‧‧支付卡 22‧‧‧Payment Card

220‧‧‧控制模組 220‧‧‧Control Module

221‧‧‧金融晶片 221‧‧‧Financial Chip

222‧‧‧控制器晶片 222‧‧‧ Controller chip

223‧‧‧應用程式介面 223‧‧‧Application interface

224‧‧‧控制韌體 224‧‧‧Control firmware

225‧‧‧儲存單元 225‧‧‧ storage unit

226‧‧‧系統部分 226‧‧‧System section

227‧‧‧儲存部分 227‧‧‧Storage section

228‧‧‧隱密資料區 228‧‧‧Hidden Information Area

229‧‧‧可視區 229‧‧‧visible area

23‧‧‧近場通訊單元 23‧‧‧ Near Field Communication Unit

24‧‧‧輸入/輸出單元 24‧‧‧Input/output unit

25‧‧‧通訊單元 25‧‧‧Communication unit

26‧‧‧卡片插槽 26‧‧‧ card slot

27‧‧‧記憶體單元 27‧‧‧ memory unit

270‧‧‧支付軟體 270‧‧‧Payment software

271‧‧‧個人化應用程式 271‧‧‧ Personalized application

3‧‧‧平台端伺服器 3‧‧‧ platform server

4‧‧‧支付機構系統 4‧‧‧Payment agency system

5‧‧‧支付機構伺服器 5‧‧‧Payment agency server

S11~S18‧‧‧流程步驟 S11~S18‧‧‧ Process steps

S21~S29‧‧‧流程步驟 S21~S29‧‧‧ Process steps

S31~S35‧‧‧流程步驟 S31~S35‧‧‧ Process steps

A1~A8‧‧‧流程步驟 A1~A8‧‧‧ Process steps

B1~B10、B7’、B10’‧‧‧流程步驟 B1~B10, B7’, B10’‧‧‧ process steps

本發明之其他的特徵及功效,將於參照圖式的實施方式中清楚地呈現,其中:圖1是一方塊圖,說明一系統包括一電腦裝置及一行動支付設備;圖2是一示意圖,說明該行動支付設備能與不同的電腦裝置通訊;圖3A到圖3C是一流程圖,說明本發明行動支付方法的流程步驟;及圖4到圖12繪示多種在行動支付方法的不同階段中由電腦裝置的輸入/輸出模組及行動裝置的輸入/輸出單元輸出的訊息。 Other features and effects of the present invention will be apparent from the following description of the drawings. FIG. 1 is a block diagram illustrating a system including a computer device and a mobile payment device; FIG. Illustrating that the mobile payment device can communicate with different computer devices; FIG. 3A to FIG. 3C are flowcharts illustrating the flow steps of the mobile payment method of the present invention; and FIGS. 4 to 12 illustrate various stages in the mobile payment method. The message output by the input/output module of the computer device and the input/output unit of the mobile device.

在本發明被詳細描述之前,應當注意在以下的說明內容中,類似的元件是以相同的編號來表示。 Before the present invention is described in detail, it should be noted that in the following description, similar elements are denoted by the same reference numerals.

參閱圖1,一系統100適於執行一行動支付方法,該行動支付方法處理相關於一交易的一支付。系統100包括一電腦裝置1及一行動支付設備2,舉例來說,電腦裝置1是由一店家持有,行動支付設備2是由一消費者持有。行動支付設備2包括一行動裝置20及一支附卡22,支付卡22可移除地插設於行動裝置20的一卡片插槽26中。電腦裝置1能與該具有支付卡22的行動裝置20互動。電腦裝置1及行動裝置20能與一支付機構伺服器5通訊。 Referring to Figure 1, a system 100 is adapted to perform a mobile payment method that processes a payment associated with a transaction. The system 100 includes a computer device 1 and a mobile payment device 2. For example, the computer device 1 is held by a store and the mobile payment device 2 is held by a consumer. The mobile payment device 2 includes a mobile device 20 and an add-on card 22 that is removably inserted into a card slot 26 of the mobile device 20. The computer device 1 can interact with the mobile device 20 having the payment card 22. The computer device 1 and the mobile device 20 can communicate with a payment mechanism server 5.

在本實施例中,電腦裝置1可以是個人電腦、筆記型電腦、平板電腦、智慧型手機及行動電子裝置(參閱圖2)等其中一者。電腦裝置1需要具備網路連線功能以執行一交易軟體120,該交易軟體120能使電腦裝置1執行本發明行動支付方法。 In this embodiment, the computer device 1 may be one of a personal computer, a notebook computer, a tablet computer, a smart phone, and a mobile electronic device (see FIG. 2). The computer device 1 is required to have a network connection function to execute a transaction software 120, which enables the computer device 1 to execute the mobile payment method of the present invention.

支付機構伺服器5受向消費者發行支付卡的支付機構操作。在本實施中,支付機構伺服器5包括一平台端伺服器3及一支付機構系統4,平台端伺服器3用於與電腦裝置1及行動裝置20通訊,支付機構系統4耦接於平台端伺服器3。在不同的實施態樣中,平台端伺服器3及支付機構系統4可以整合成一元件(例如一伺服器),或者,可以是以二分離的元件實施,該二分離的元件經由一專用的通道或會話機制通訊。以前述兩種實施態樣之後者為例,平台端伺服器3可以是受一第三方操作(而非支付機構)。 The payment institution server 5 is operated by a payment institution that issues a payment card to a consumer. In this implementation, the payment mechanism server 5 includes a platform server 3 and a payment mechanism system 4. The platform server 3 is used for communication with the computer device 1 and the mobile device 20. The payment mechanism system 4 is coupled to the platform. Server 3. In different implementations, the platform server 3 and the payment mechanism system 4 may be integrated into one component (for example, a server), or may be implemented as two separate components, and the two separate components pass through a dedicated channel. Or session mechanism communication. Taking the latter two embodiments as an example, the platform server 3 may be operated by a third party (not a payment mechanism).

參閱圖1,電腦裝置1包括儲存有該交易軟體120的一記憶體模組12、一近場通訊模組13、一輸入/輸出模組14、一通訊模組15,及一耦接於記憶體模組12、近場通訊模組13、輸入/輸出模組14與通訊模組15之處理模組11。 Referring to FIG. 1, the computer device 1 includes a memory module 12 storing the transaction software 120, a near field communication module 13, an input/output module 14, a communication module 15, and a memory coupled to the memory. The body module 12, the near field communication module 13, the input/output module 14 and the processing module 11 of the communication module 15.

在本實施例中,具有近場通訊模組13之電腦裝置1具備了近場通訊功能,且近場通訊模組13是一連接於電腦裝置1的外部裝置,例如外接式USB近場通訊裝置(dongle)或一USB近場通訊讀取器(reader)。在另一實施態樣中,近場通訊模組13可以是一嵌入電腦裝置1的內建模組。輸入/輸出模組14可以包括一滑鼠/鍵盤、一觸控螢幕或一揚聲器/顯示器等,但不以此為限。通訊模組15使電腦裝置1與支付機構伺服器5能建立通訊。 In this embodiment, the computer device 1 having the near field communication module 13 has a near field communication function, and the near field communication module 13 is an external device connected to the computer device 1, such as an external USB near field communication device. (dongle) or a USB near field communication reader (reader). In another embodiment, the near field communication module 13 can be an internal modeling group embedded in the computer device 1. The input/output module 14 can include a mouse/keyboard, a touch screen, or a speaker/display, but is not limited thereto. The communication module 15 enables the computer device 1 to establish communication with the payment institution server 5.

行動支付設備2能與電腦裝置1互動。行動支付設備2的行動裝置20可以是一智慧型手機或一平板電腦等。行動裝置20包括一記憶體單元27、一卡片插槽26、一輸入/輸出單元24、一短距離通訊單元(如一近場通訊單元23)、一通訊單元25,及一耦接於近場通訊單元23、輸入/輸出單元24、通訊單元25、卡片插槽26與記憶體單元27之處理器21。記憶體單元27儲存有一支付軟體270與一個人化應用程式271。卡片插槽26供支付卡22可移除地插設,使行動裝置20能存取支付卡22。近場通訊單元23能與電腦裝置1通訊。通訊單元25能與支付機構伺服器5通訊。在另一實施態樣中,支付卡22可以是耦接於一介面 裝置,以使行動裝置20能經由該介面裝置存取支付卡22該介面裝置是經由行動裝置20的一USB介面耦接於行動裝置20。 The mobile payment device 2 can interact with the computer device 1. The mobile device 20 of the mobile payment device 2 can be a smart phone or a tablet computer or the like. The mobile device 20 includes a memory unit 27, a card slot 26, an input/output unit 24, a short-range communication unit (such as a near-field communication unit 23), a communication unit 25, and a coupling to the near field communication. The unit 23, the input/output unit 24, the communication unit 25, the card slot 26 and the processor 21 of the memory unit 27. The memory unit 27 stores a payment software 270 and a personalization application 271. Card slot 26 is removably inserted into payment card 22 to enable mobile device 20 to access payment card 22. The near field communication unit 23 can communicate with the computer device 1. The communication unit 25 can communicate with the payment institution server 5. In another implementation, the payment card 22 can be coupled to an interface. The device is configured to enable the mobile device 20 to access the payment card 22 via the interface device. The interface device is coupled to the mobile device 20 via a USB interface of the mobile device 20.

在本實施例中,近場通訊單元23支援近場通訊功能。輸入/輸出單元24可以包括一滑鼠/鍵盤、一觸控螢幕或一揚聲器/顯示器等,但不以此為限。行動裝置20的處理器21執行儲存於記憶體單元27的支付軟體270,支付軟體270使行動裝置20協同配合支附卡22執行本發明行動支付方法。 In the present embodiment, the near field communication unit 23 supports the near field communication function. The input/output unit 24 may include a mouse/keyboard, a touch screen or a speaker/display, etc., but is not limited thereto. The processor 21 of the mobile device 20 executes the payment software 270 stored in the memory unit 27, and the payment software 270 causes the mobile device 20 to cooperate with the support card 22 to perform the mobile payment method of the present invention.

當為了進行近場通訊支付而使電腦裝置1與行動裝置20彼此鄰近時,電腦裝置1與行動裝置20能經由近場通訊模組13及近場通訊單元23建立無線短距離通訊(如近場通訊)。 When the computer device 1 and the mobile device 20 are adjacent to each other for the near field communication payment, the computer device 1 and the mobile device 20 can establish wireless short-range communication (such as near field) via the near field communication module 13 and the near field communication unit 23. communication).

在本實施例中,支附卡22以一SD卡實施。支附卡22包括一控制模組220、一金融晶片221及一儲存單元225。金融晶片221符合FISC II規範。 In the present embodiment, the add-on card 22 is implemented as an SD card. The support card 22 includes a control module 220, a financial chip 221, and a storage unit 225. The financial chip 221 complies with the FISC II specification.

控制模組220包括一控制器晶片222、一載於ROM(read-only memory,圖未示)的控制韌體224及一應用程式介面(application program interface;API)223。前述控制器晶片222及ROM可以使用積體電路封裝整合,且與儲存單元225並列。 The control module 220 includes a controller chip 222, a control firmware 224 loaded in a ROM (read-only memory), and an application program interface (API) 223. The controller chip 222 and the ROM may be integrated using an integrated circuit package and juxtaposed with the storage unit 225.

當支附卡22插入卡片插槽26,處理器21能經由控制韌體224存取金融晶片221及儲存單元225。應用程式介面223及控制韌體224能根據支付軟體270或個人化 應用程式271的指令運作。應用程式介面223能使用3DES(Triple Data Encryption Algorithm symmetric-key block cipher)、AES(Advanced Encryption Standard)或RSA等演算法進行加密。 When the add-in card 22 is inserted into the card slot 26, the processor 21 can access the financial chip 221 and the storage unit 225 via the control firmware 224. Application interface 223 and control firmware 224 can be based on payment software 270 or personalized The instructions of the application 271 operate. The application interface 223 can perform encryption using a 3DS (Triple Data Encryption Algorithm symmetric-key block cipher), AES (Advanced Encryption Standard), or RSA algorithm.

儲存單元225包括一系統部分226及一儲存部分227。系統部分226內建基本操作資訊(basic operation information)。儲存部分227包括一隱密資料區228及一可視區229。可視區229允許被行動裝置20的作業系統(OS)存取。以Android®系統舉例來說,可視區229能被檔案管理程式(file management program)存取。 The storage unit 225 includes a system portion 226 and a storage portion 227. The system portion 226 has built-in basic operation information. The storage portion 227 includes a hidden data area 228 and a visible area 229. The viewable area 229 allows access by the operating system (OS) of the mobile device 20. For example, in the Android® system, the viewable area 229 can be accessed by a file management program.

作業系統無法存取隱密資料區228,且無法對隱密資料區228的檔案進行讀取、寫入或修改。相反的,只有在特定授權順序完成之後,支付軟體270或個人化應用程式271才能經由控制韌體224存取隱密資料區228。當支附卡22插設於行動裝置20的卡片插槽26時,控制韌體224只對作業系統回報可視區229。因此,作業系統不會顯示隱密資料區228給使用者。只有當使用者執行支付軟體270或個人化應用程式271且通過所述授權順序時,隱密資料區228才能被存取。 The operating system cannot access the hidden data area 228 and cannot read, write or modify the file of the hidden data area 228. Conversely, payment software 270 or personalized application 271 can access hidden material area 228 via control firmware 224 only after a particular authorization sequence is completed. When the add-on card 22 is inserted into the card slot 26 of the mobile device 20, the control firmware 224 reports only the viewable area 229 to the operating system. Therefore, the operating system does not display the hidden data area 228 to the user. The secret data area 228 can only be accessed when the user executes the payment software 270 or the personalized application 271 and passes the authorization sequence.

隱密資料區228儲存有相關於一支付機構帳號的一虛擬帳號,該支付機構帳號相關於支附卡22的持有者與操作支付機構伺服器5的支付機構(例如銀行)。與支付機構帳號相關的資料儲存於金融晶片221。隱密資料區228可以儲存複數個分別對應複數個支付機構帳號的虛擬帳號 。 The secret information area 228 stores a virtual account number associated with a payment institution account number associated with the holder of the support card 22 and the payment authority (e.g., bank) operating the payment institution server 5. The information related to the payment institution account number is stored on the financial chip 221. The hidden data area 228 can store a plurality of virtual accounts corresponding to a plurality of payment institution accounts respectively. .

當行動裝置20不具有近場通訊單元23,行動裝置20本身不具有近場通訊功能,支付卡22則可以被設計為具有近場通訊功能。在其他實施態樣中,支付卡22包括複數個近場通訊接腳,且包含一近場通訊天線,且能以支援近場通訊功能的SDIO(Secure Digital Input Output)卡實施。 When the mobile device 20 does not have the near field communication unit 23, the mobile device 20 itself does not have a near field communication function, the payment card 22 can be designed to have a near field communication function. In other implementations, the payment card 22 includes a plurality of near field communication pins and includes a near field communication antenna and can be implemented with a SDIO (Secure Digital Input Output) card that supports near field communication.

因此,在其他實施態樣中,卡片插槽26包括複數個近場通訊端子。近場通訊端子符合近場通訊規範(由SD協會發佈)。當支付卡22插入卡片插槽26時,該等近場通訊端子分別與支付卡22的該等近場通訊接腳電連接。藉此,支付卡22能與行動裝置20互動,以使行動裝置20支援近場通訊功能。 Thus, in other implementations, card slot 26 includes a plurality of near field communication terminals. The near field communication terminal complies with the Near Field Communication Specification (published by the SD Association). When the payment card 22 is inserted into the card slot 26, the near field communication terminals are electrically coupled to the near field communication pins of the payment card 22, respectively. Thereby, the payment card 22 can interact with the mobile device 20 to enable the mobile device 20 to support the near field communication function.

參閱圖3A,以下說明行動支付方法之實施例,其處理關於一交易的一支付。下述中的電腦裝置1可以是一電腦,行動裝置20可以是一插有支付卡22的智慧型手機,該交易是自一書店購買一書本。 Referring to Figure 3A, an embodiment of a mobile payment method that processes a payment for a transaction is described below. The computer device 1 described below may be a computer, and the mobile device 20 may be a smart phone with a payment card 22 inserted, which is a book purchased from a bookstore.

首先,書店的商人使用電腦裝置1執行交易軟體120(參閱圖4)。 First, the merchant of the bookstore executes the transaction software 120 using the computer device 1 (see Fig. 4).

於步驟S11,電腦裝置1的處理模組11執行儲存於記憶體模組12的交易軟體120。 In step S11, the processing module 11 of the computer device 1 executes the transaction software 120 stored in the memory module 12.

交易軟體120提供商人一用於輸入交易清單的介面(參閱圖5),該交易清單相關於該交易及該支付。在此,該交易清單包括購買該書本的細目(例如店家編號、 交易日期、支付號碼及交易金額等)。 The transaction software 120 provides an interface for the merchant to enter a list of transactions (see Figure 5) that is relevant to the transaction and the payment. Here, the list of transactions includes a breakdown of the purchase of the book (eg, store number, Transaction date, payment number and transaction amount, etc.).

於步驟S12,處理模組11接收相關於該交易及該支付的交易清單。舉例來說,該交易清單可以是透過掃描貨品及/或服務的條碼輸入電腦裝置1。或者,交易清單可以是消費者使用電腦裝置1輸入。 In step S12, the processing module 11 receives a transaction list related to the transaction and the payment. For example, the transaction list may be entered into the computer device 1 by scanning a barcode of the goods and/or services. Alternatively, the transaction list may be entered by the consumer using the computer device 1.

於步驟S13,處理模組11執行交易軟體120的一安控元件121以產生一要被押碼的資料。 In step S13, the processing module 11 executes a security component 121 of the transaction software 120 to generate a data to be hacked.

於步驟S14,處理模組11鎖定交易清單。 In step S14, the processing module 11 locks the transaction list.

更明確的說,要被押碼的資料包括交易清單,且於步驟S14之後,商人不能改變該交易清單。值得注意的是,步驟S13及步驟S14的先後順序可以互換,或者同時執行。 More specifically, the information to be escorted includes a list of transactions, and after step S14, the merchant cannot change the list of transactions. It should be noted that the order of steps S13 and S14 may be interchanged or performed simultaneously.

於步驟S15,處理模組11經由輸入/輸出模組14輸出交易清單(參閱圖6)供該要購買書本的消費者確認。 In step S15, the processing module 11 outputs a transaction list (see FIG. 6) via the input/output module 14 for consumer confirmation of the book to be purchased.

於步驟S16,處理模組11產生一指示(參閱圖7)以提示消費者將具有支付卡22的行動裝置20靠近一支付感測區域(如電腦裝置1的近場通訊模組13)。當處理模組11經由近場通訊模組13偵測到行動裝置20時,處理模組11經由近場通訊模組13與行動裝置20建立無線短距離通訊,且接著執行步驟S17。否則,處理模組11閒置直到偵測到行動裝置20。更明確地說,當電腦裝置1及行動裝置20彼此鄰近時,處理模組11自動與行動裝置20建立作為無線短距離通訊之近場通訊。 In step S16, the processing module 11 generates an indication (see FIG. 7) to prompt the consumer to bring the mobile device 20 having the payment card 22 close to a payment sensing area (such as the near field communication module 13 of the computer device 1). When the processing module 11 detects the mobile device 20 via the near field communication module 13, the processing module 11 establishes wireless short-range communication with the mobile device 20 via the near field communication module 13, and then proceeds to step S17. Otherwise, the processing module 11 is idle until the mobile device 20 is detected. More specifically, when the computer device 1 and the mobile device 20 are adjacent to each other, the processing module 11 automatically establishes near field communication with the mobile device 20 as wireless short-range communication.

另一方面,當消費者欲使用行動支付設備2(如行動裝置20與支付卡22結合)完成購買書本的支付時,消費者使用行動裝置20執行支付軟體270(參閱圖8)。 On the other hand, when the consumer wants to complete the payment for purchasing the book using the mobile payment device 2 (e.g., the mobile device 20 is combined with the payment card 22), the consumer executes the payment software 270 using the mobile device 20 (see Fig. 8).

因此,於步驟S21,行動裝置20的處理器21執行儲存於記憶體單元27的支付軟體270。 Therefore, in step S21, the processor 21 of the mobile device 20 executes the payment software 270 stored in the memory unit 27.

支付軟體270提供消費者多種付款方式(例如近場通訊支付或貨到付款)。在此,使用者選擇近場通訊支付進行支付。 Payment software 270 provides consumers with multiple payment methods (eg, near field communication payments or cash on delivery). Here, the user selects the near field communication payment to make the payment.

於步驟S22,處理器21被指示消費者選擇近場通訊支付。 At step S22, the processor 21 is instructed to select a near field communication payment by the consumer.

於步驟S23,處理器21輸出一指示以提示使用者輸入一相關於支付卡22的存取密碼(參閱圖9)。 In step S23, the processor 21 outputs an indication to prompt the user to input an access code associated with the payment card 22 (see Fig. 9).

於步驟S24,當收到存取密碼時,處理器21接著經由卡片插槽26傳送該存取密碼給支付卡22。 At step S24, upon receipt of the access code, processor 21 then transmits the access code to payment card 22 via card slot 26.

於步驟S31,支付卡22驗證該存取密碼。當支付卡22驗證該存取密碼為正確時,支付卡22傳送一存取同意指令給行動裝置20,且流程接著執行步驟S25。否則,流程接著執行步驟S32。 In step S31, the payment card 22 verifies the access code. When the payment card 22 verifies that the access password is correct, the payment card 22 transmits an access consent command to the mobile device 20, and the flow then proceeds to step S25. Otherwise, the flow then proceeds to step S32.

於步驟S32,支付卡22傳送一存取拒絕指令給行動裝置20,且行動裝置20經由輸入/輸出單元24通知使用者該存取密碼不正確。支付卡22計數接收到錯誤存取密碼的連續次數。 In step S32, the payment card 22 transmits an access rejection command to the mobile device 20, and the mobile device 20 notifies the user via the input/output unit 24 that the access password is incorrect. The payment card 22 counts the number of consecutive times the wrong access password was received.

於步驟S33,支付卡22判斷前述計數的次數大於或等於一門檻值(例如3次)。當計數的次數不大於等於 該門檻值,流程回到步驟S23以讓消費者能輸入其他存取密碼。否則,流程接著執行步驟S34。 In step S33, the payment card 22 determines that the number of times of the foregoing counting is greater than or equal to a threshold (for example, three times). When the number of counts is not greater than or equal to The threshold value, the flow returns to step S23 to enable the consumer to input other access codes. Otherwise, the flow then proceeds to step S34.

於步驟S34,支付卡22被鎖定且禁止存取。 At step S34, the payment card 22 is locked and access is prohibited.

於步驟S25,行動裝置20的處理器21清除在步驟S24接收並暫存的存取密碼。此步驟用於避免存取密碼被其他人取得。 In step S25, the processor 21 of the mobile device 20 clears the access password received and temporarily stored in step S24. This step is used to prevent access passwords from being obtained by others.

值得注意的是,當使用電子錢包進行小額支付時,便利性為主要的考量。因此,步驟S23到步驟S25及步驟S31到步驟S34可以被省略以加速支付的過程。 It is worth noting that convenience is a major consideration when using e-wallets for small payments. Therefore, steps S23 to S25 and steps S31 to S34 can be omitted to speed up the process of payment.

於步驟S26,行動裝置20的處理器21啟動近場通訊單元23以起始近場通訊功能。 At step S26, the processor 21 of the mobile device 20 activates the near field communication unit 23 to initiate the near field communication function.

接著,參閱圖10,行動裝置20提示消費者將行動裝置20靠近支付感測區域(例如電腦裝置1的近場通訊模組13)。 Next, referring to FIG. 10, the mobile device 20 prompts the consumer to bring the mobile device 20 close to the payment sensing area (for example, the near field communication module 13 of the computer device 1).

之後,於步驟S27,當行動裝置20與電腦裝置1相互鄰近時,行動裝置20的處理器21經由近場通訊單元23自動與電腦裝置1建立無線短距離通訊(例如近場通訊)。 Thereafter, in step S27, when the mobile device 20 and the computer device 1 are adjacent to each other, the processor 21 of the mobile device 20 automatically establishes wireless short-range communication (for example, near field communication) with the computer device 1 via the near field communication unit 23.

於步驟S17,在電腦裝置1(步驟S16)與行動裝置20(步驟S27)之間的近場通訊建立之後,電腦裝置1的處理模組11經由近場通訊傳送要被押碼的資料給行動裝置20。 In step S17, after the near field communication between the computer device 1 (step S16) and the mobile device 20 (step S27) is established, the processing module 11 of the computer device 1 transmits the data to be hacked to the action via near field communication. Device 20.

於步驟S28,於近場通訊中,行動裝置20的處理器21傳送要被押碼的資料給支付卡22。 In step S28, in the near field communication, the processor 21 of the mobile device 20 transmits the data to be debited to the payment card 22.

於步驟S35,支付卡22基於要被押碼的資料且使用一儲存於的支付卡22的秘鑰產生一交易押碼,且將該交易押碼傳送給行動裝置20。 In step S35, the payment card 22 generates a transaction code based on the data to be charged and uses the key of the stored payment card 22, and transmits the transaction code to the mobile device 20.

更明確的說,支付卡22儲存一對應用於支付的虛擬帳戶之秘鑰,且是儲存於金融晶片及隱密資料區228其中一者。藉此,支付卡22基於該虛擬帳號取得該秘鑰以產生該交易押碼。值得注意的是,支付機構伺服器5的支付機構系統4具有對應該虛擬帳號的相同秘鑰以識別支付卡22的正確性。 More specifically, the payment card 22 stores a pair of keys for the virtual account applied to the payment and is stored in one of the financial chip and the hidden data area 228. Thereby, the payment card 22 obtains the secret key based on the virtual account number to generate the transaction charge code. It is worth noting that the payment institution system 4 of the payment institution server 5 has the same secret key corresponding to the virtual account number to identify the correctness of the payment card 22.

於步驟S29,執行支付軟體270的的行動裝置20之處理器21使用交易押碼組成支付指令。支付指令至少包括虛擬帳號、交易清單及交易押碼,且是被加密的。行動裝置20接著經由近場通訊傳送支付指令給電腦裝置1。 In step S29, the processor 21 of the mobile device 20 executing the payment software 270 forms a payment instruction using the transaction charge code. The payment instruction includes at least a virtual account number, a transaction list, and a transaction charge code, and is encrypted. The mobile device 20 then transmits a payment instruction to the computer device 1 via near field communication.

於步驟S18,電腦裝置1的處理模組11經由近場通訊接收來自行動裝置20的支付命令。 In step S18, the processing module 11 of the computer device 1 receives the payment command from the mobile device 20 via the near field communication.

值得一提的是,前述步驟S17、S28、S35、S29及S18是在近場通訊中執行,且在這些步驟執行完畢之後,電腦裝置1及行動裝置至少其中一者可以提供一指示以提醒消費者將行動裝置20自鄰近電腦裝置1的位置移開。 It is worth mentioning that the foregoing steps S17, S28, S35, S29 and S18 are performed in the near field communication, and after the execution of these steps, at least one of the computer device 1 and the mobile device can provide an indication to remind the consumption. The mobile device 20 is removed from the position of the adjacent computer device 1.

參閱圖3B,於步驟S18之後,電腦裝置1嘗試與支付機構伺服器5的平台端伺服器3建立一會話機制(session)。會話機制用於提供一在電腦裝置1與平台端伺服器3之間的安全通訊通道。且用於識別電腦裝置1的正確性。 Referring to FIG. 3B, after step S18, the computer device 1 attempts to establish a session with the platform server 3 of the payment institution server 5. The session mechanism is used to provide a secure communication channel between the computer device 1 and the platform server 3. And used to identify the correctness of the computer device 1.

於步驟A1,執行交易軟體120之電腦裝置1的處理模組11傳送一會話請求給平台端伺服器3。 In step A1, the processing module 11 of the computer device 1 executing the transaction software 120 transmits a session request to the platform server 3.

於步驟A2,當平台端伺服器3接收到會話請求時,平台端伺服器3產生一會話識別碼,並將會話識別碼傳送給電腦裝置1。 In step A2, when the platform server 3 receives the session request, the platform server 3 generates a session identifier and transmits the session identifier to the computer device 1.

於步驟A3,電腦裝置1的處理模組11接收會話識別碼。 In step A3, the processing module 11 of the computer device 1 receives the session identification code.

於步驟A4,處理模組11基於接收到的會話識別碼及一預存於電腦裝置1的第一識別金鑰產生一第一鑑別代碼。 In step A4, the processing module 11 generates a first authentication code based on the received session identification code and a first identification key pre-stored in the computer device 1.

於步驟A5,處理模組11傳送第一鑑別代碼給平台端伺服器3。 In step A5, the processing module 11 transmits the first authentication code to the platform server 3.

於步驟A6,平台端伺服器3尋找一預存於平台端伺服器3的第二識別金鑰,第二識別金鑰對應於第一識別金鑰。平台端伺服器3接著基於會話識別碼及第二識別金鑰產生一第二鑑別代碼。 In step A6, the platform server 3 searches for a second identification key pre-stored on the platform server 3, and the second identification key corresponds to the first identification key. The platform side server 3 then generates a second authentication code based on the session identification code and the second identification key.

於步驟A7,平台端伺服器3判斷接收自電腦裝置1(步驟A5)的第一鑑別代碼與步驟S6產生的第二鑑別代碼是否相同。當判斷結果為是時,流程接著執行步驟A8。否則,平台端伺服器3判定支付卡22無法產生正確的第一鑑別代碼,且流程結束。 In step A7, the platform server 3 determines whether the first authentication code received from the computer device 1 (step A5) is the same as the second authentication code generated in step S6. When the result of the determination is YES, the flow then proceeds to step A8. Otherwise, the platform side server 3 determines that the payment card 22 cannot generate the correct first authentication code, and the flow ends.

於步驟A8,平台端伺服器3傳送一會話回應給電腦裝置1,以建立該會話機制並允許交易進行。 In step A8, the platform server 3 transmits a session response to the computer device 1 to establish the session mechanism and allow the transaction to proceed.

參閱圖3C,於平台端伺服器3允許交易進行之 後,在步驟B1,處理模組11在該會話機制下經由通訊模組15傳送在步驟S18接收到的支付指令給平台端伺服器3。更明確的說,前述傳送的動作是使用SSL(Secured Sockets Layer)協定執行。 Referring to FIG. 3C, the server 3 allows the transaction to be performed on the platform side. Then, in step B1, the processing module 11 transmits the payment instruction received in step S18 to the platform server 3 via the communication module 15 under the session mechanism. More specifically, the aforementioned transfer operation is performed using the SSL (Secured Sockets Layer) protocol.

於步驟B2,平台端伺服器3經由專用的通道依序傳送支付指令給支付機構系統4。 In step B2, the platform server 3 sequentially transmits payment instructions to the payment institution system 4 via a dedicated channel.

於步驟B3,支付機構系統4在接收到支付指令時,支付機構系統4能將接收到的支付指令解密,並能基於該支付指令識別支付卡22的正確性。更明確的說,支付機構系統4基於支付指令中要被押碼的資料且使用儲存於支付卡22中(例如金融晶片或隱密資料區)相同的秘鑰產生一確認碼。在一些實施態樣中,用於產生確認碼之秘鑰可以被包括在支付指令內,且被平台端伺服器3傳送到支付機構系統4。 At step B3, upon receipt of the payment instruction, payment institution system 4 can decrypt the received payment instruction and can identify the correctness of payment card 22 based on the payment instruction. More specifically, the payment institution system 4 generates a confirmation code based on the information to be riddend in the payment instruction and using the same key stored in the payment card 22 (e.g., financial chip or secret data area). In some implementations, the key used to generate the confirmation code can be included in the payment instruction and transmitted by the platform server 3 to the payment mechanism system 4.

支付機構系統4接著比較交易押碼及確認碼。當確認碼與交易押碼相同時,支付機構系統4判斷支付卡22正確,且交易清單在傳輸過程中沒有被改變。流程接著執行步驟B4。否則,流程接著執行步驟B8。 The payment institution system 4 then compares the transaction charge code with the confirmation code. When the confirmation code is the same as the transaction charge code, the payment institution system 4 judges that the payment card 22 is correct, and the transaction list is not changed during the transmission. The flow then proceeds to step B4. Otherwise, the flow then proceeds to step B8.

於步驟B4,支付機構系統4能根據支付指令中的交易清單處理該支付。在本實施例中,虛擬帳號代表的支付機構帳號扣款該書本的金額(500元),且該金額被轉帳到該書店擁有的一帳號。 At step B4, the payment institution system 4 can process the payment in accordance with the transaction list in the payment instruction. In this embodiment, the payment institution account represented by the virtual account account deducts the amount of the book (500 yuan), and the amount is transferred to an account owned by the bookstore.

於步驟B5,支付機構系統4產生一指示該交易已經處理完成的支付結果,且傳送該支付結果到平台端伺 服器3。 In step B5, the payment institution system 4 generates a payment result indicating that the transaction has been processed, and transmits the payment result to the platform terminal. Server 3.

於步驟B6,平台端伺服器3傳送該支付結果給電腦裝置1。支付結果的傳輸是在會話機制下且使用SSL協定。此外,平台端伺服器3還傳送該支付結果給行動裝置20。 In step B6, the platform server 3 transmits the payment result to the computer device 1. The transmission of the payment result is under the session mechanism and uses the SSL protocol. In addition, the platform server 3 also transmits the payment result to the mobile device 20.

接著,於步驟B7,當接收到支付結果,電腦裝置1的處理模組11經由輸入/輸出模組14輸出該支付結果(參閱圖11)以告知店家該支付的結果。如此一來,該支付完成,且顧客可以獲得貨品/服務(例如書本)。 Next, in step B7, upon receiving the payment result, the processing module 11 of the computer device 1 outputs the payment result (see FIG. 11) via the input/output module 14 to inform the store of the result of the payment. In this way, the payment is completed and the customer can obtain the goods/services (such as books).

相似地,於於步驟B7’,當接收到支付結果,行動裝置20的處理器21經由輸入/輸出單元24輸出支付結果(參閱圖12)以告知顧客該支付的結果。 Similarly, in step B7', upon receiving the payment result, the processor 21 of the mobile device 20 outputs the payment result (see Fig. 12) via the input/output unit 24 to inform the customer of the result of the payment.

於步驟B3,當確認碼與交易押碼不同時,支付機構系統4判斷支付卡22不正確,或交易清單在傳輸過程中被改變。因此,於步驟B8,支付機構系統4產生並傳送一錯誤訊息給平台端伺服器3。 In step B3, when the confirmation code is different from the transaction charge code, the payment institution system 4 judges that the payment card 22 is incorrect, or the transaction list is changed during the transmission. Therefore, in step B8, the payment institution system 4 generates and transmits an error message to the platform server 3.

於步驟B9,平台端伺服器3傳送錯誤訊息給電腦裝置1,電腦裝置1在步驟B10輸出該錯誤訊息。 In step B9, the platform server 3 transmits an error message to the computer device 1, and the computer device 1 outputs the error message in step B10.

相似地,於步驟B9’,平台端伺服器3傳送錯誤訊息給行動裝置20,行動裝置20在步驟B10’輸出該錯誤訊息。因此,該交易不會完成。 Similarly, in step B9', the platform server 3 transmits an error message to the mobile device 20, and the mobile device 20 outputs the error message at step B10'. Therefore, the transaction will not be completed.

在一個例子中,該方法是應用於貨品/服務是經由運送的方式交付給顧客,且支付是在貨品/服務送達時才完成(例如貨到付款)。送貨員可以攜帶安裝有交易軟體120 的電腦裝置1,且在顧客確認貨品/服務之後,送貨員可以操作電腦裝置1執行行動支付方法。因此,送貨員在進行送貨時不用攜帶現金。 In one example, the method is applied to the goods/services delivered to the customer via shipping, and the payment is completed when the goods/services are delivered (eg, cash on delivery). The deliveryman can carry the transaction software 120 installed The computer device 1 and after the customer confirms the goods/services, the delivery person can operate the computer device 1 to perform the action payment method. Therefore, the deliveryman does not need to carry cash when delivering.

該行動支付方法也能應用在藉由販賣機提供貨品/服務給顧客。在步驟B7(完成支付)之後,販賣機提供貨品給顧客。 The mobile payment method can also be applied to the customer by providing goods/services through the vending machine. After step B7 (complete payment), the vending machine provides the goods to the customer.

再者,本發明行動支付方法還能應用於使用兩個行動裝置進行轉帳。舉例以使用兩個智慧型手機進行轉帳來說明,收款人操作一第一智慧型手機執行交易軟體120,使該第一智慧型手機執行前述關於電腦裝置1的步驟,匯款人操作一第二智慧型手機執行支付軟體270,使該第二智慧型手機執行前述關於行動裝置20及支付卡22的步驟,藉此,只要將兩個智慧型手機彼此靠近或接觸就可達成使用兩個行動裝置進行轉帳作業。 Furthermore, the mobile payment method of the present invention can also be applied to transfer using two mobile devices. For example, by using two smart phones for transfer, the payee operates a first smart phone to execute the transaction software 120, so that the first smart phone performs the aforementioned steps about the computer device 1, and the remitter operates a second. The smart phone executes the payment software 270, so that the second smart phone performs the aforementioned steps about the mobile device 20 and the payment card 22, whereby two mobile devices can be achieved by bringing the two smart phones close to each other or contacting each other. Make a transfer job.

綜上所述,藉由基於行動裝置20產生的支付指令識別支付卡22的正確性,能偵測出使用偽卡(fake card)的支付行為。再者,藉由即時傳送對應交易清單的支付指令給支付機構伺服器5,各交易的支付可以被及時處理。如此一來,可以避免詐騙支付或交易紀錄不對應所造成的損失。 In summary, by identifying the correctness of the payment card 22 based on the payment instruction generated by the mobile device 20, the payment behavior using the fake card can be detected. Further, by paying the payment instruction of the corresponding transaction list to the payment institution server 5 in real time, the payment of each transaction can be processed in time. In this way, it is possible to avoid the loss caused by fraud payment or transaction record non-correspondence.

惟以上所述者,僅為本發明之實施例而已,當不能以此限定本發明實施之範圍,即大凡依本發明申請專利範圍及專利說明書內容所作之簡單的等效變化與修飾,皆仍屬本發明專利涵蓋之範圍內。 However, the above is only the embodiment of the present invention, and the scope of the present invention is not limited thereto, that is, the simple equivalent changes and modifications made by the patent application scope and the patent specification of the present invention are still It is within the scope of the patent of the present invention.

S11~S18‧‧‧流程步驟 S11~S18‧‧‧ Process steps

S21~S29‧‧‧流程步驟 S21~S29‧‧‧ Process steps

S31~S35‧‧‧流程步驟 S31~S35‧‧‧ Process steps

A1~A8‧‧‧流程步驟 A1~A8‧‧‧ Process steps

B1~B10、B7’、B10’‧‧‧流程步驟 B1~B10, B7’, B10’‧‧‧ process steps

Claims (11)

一種行動支付方法,由一電腦裝置執行,該電腦裝置能與一具有一支付卡的行動裝置互動,該電腦裝置與一支付機構伺服器通訊,所述的行動支付方法包含:接收一交易清單,該交易清單相關於一交易及一關於該交易的支付;與該行動裝置建立一無線短距離通訊;經由該無線短距離通訊傳送該交易清單到該行動裝置;經由該無線短距離通訊接收一來自該行動裝置的支付指令,該支付指令是該行動裝置基於至少該交易清單所產生;與該支付機構伺服器建立一會話機制,該會話機制提供一在該電腦裝置與該支付機構伺服器之間的安全通訊通道;在該會話機制下傳送該支付指令到該支付機構伺服器,該支付指令使該支付機構伺服器在收到該支付指令時基於該支付指令識別該支付卡的正確性,且在該支付機構伺服器識別該支付卡為正確之後,該支付指令還使該支付機構伺服器根據該支付指令所包括之該交易清單處理該支付;及在該會話機制下接收來自該支付機構伺服器的一支付結果,該支付結果是在完成該支付之後由該支付機構伺服器所產生; 其中,所述建立該會話機制的步驟包括下列子步驟:傳送一會話請求給該支付機構伺服器,該會話請求使該支付機構伺服器在接收到該會話請求時產生一會話識別碼,並傳送該會話識別碼給該電腦裝置;在接收該會話識別碼之後,基於該會話識別碼及一預存於該電腦裝置的第一識別金鑰產生一第一鑑別代碼;傳送該第一鑑別代碼給該支付機構伺服器,該第一鑑別代碼使該支付機構伺服器尋找一預存於該支付機構伺服器且對應於該電腦裝置的該第一識別金鑰之第二識別金鑰,且使該支付機構伺服器基於該會話識別碼及該第二識別金鑰產生一第二鑑別代碼,且使該支付機構伺服器判斷所述接收自該電腦裝置的第一鑑別代碼與所述第二鑑別代碼是否相同,且使該支付機構伺服器在判斷所述第一鑑別代碼與所述第二鑑別代碼相同時傳送一會話回應給該電腦裝置以建立該會話機制。 An action payment method is performed by a computer device capable of interacting with a mobile device having a payment card, the computer device communicating with a payment institution server, the mobile payment method comprising: receiving a transaction list, The transaction list is related to a transaction and a payment for the transaction; establishing a wireless short-range communication with the mobile device; transmitting the transaction list to the mobile device via the wireless short-range communication; receiving a request via the wireless short-range communication a payment instruction of the mobile device, the payment instruction being generated by the mobile device based on at least the transaction list; establishing a session mechanism with the payment institution server, the session mechanism providing a relationship between the computer device and the payment institution server a secure communication channel for transmitting the payment instruction to the payment institution server under the session mechanism, the payment instruction causing the payment institution server to identify the correctness of the payment card based on the payment instruction upon receipt of the payment instruction, and After the payment institution server recognizes that the payment card is correct, the payment instruction is still The payment institution server processes the payment according to the transaction list included in the payment instruction; and receives a payment result from the payment institution server under the session mechanism, the payment result being the payment institution after completing the payment Generated by the server; The step of establishing the session mechanism includes the following sub-steps: transmitting a session request to the payment institution server, the session request causing the payment institution server to generate a session identification code upon receiving the session request, and transmitting Sending the session identification code to the computer device; after receiving the session identification code, generating a first authentication code based on the session identification code and a first identification key pre-stored in the computer device; transmitting the first authentication code to the a payment institution server, the first authentication code causing the payment institution server to find a second identification key pre-stored in the payment institution server and corresponding to the first identification key of the computer device, and causing the payment institution The server generates a second authentication code based on the session identification code and the second identification key, and causes the payment institution server to determine whether the first authentication code received from the computer device is the same as the second authentication code And causing the payment institution server to transmit a session response to the computer when determining that the first authentication code is the same as the second authentication code Set to establish a mechanism for the session. 如請求項1所述的行動支付方法,其中,該電腦裝置及該行動裝置具有近場通訊能力,所述建立該無線短距離通訊之步驟包括:當該電腦裝置及該行動裝置彼此鄰近時,該電腦裝置自動與該行動裝置建立一作為該無線短距離通訊之 近場通訊。 The mobile payment method of claim 1, wherein the computer device and the mobile device have near field communication capability, and the step of establishing the wireless short distance communication comprises: when the computer device and the mobile device are adjacent to each other, The computer device automatically establishes with the mobile device as the wireless short-range communication Near field communication. 如請求項2所述的行動支付方法,在所述建立該無線短距離通訊的步驟之前,還包含:產生一要被押碼的資料,該要被押碼的資料包括該交易清單;其中,所述傳送該交易清單的步驟包括經由該近場通訊傳送該要被押碼的資料給該行動裝置;其中,在所述經由該近場通訊接收該支付指令的步驟中,該要被押碼的資料使該行動裝置傳送該要被押碼的資料給該支付卡,且使該支付卡基於該要被押碼的資料產生一交易押碼並將該交易押碼傳送給該行動裝置,且使該行動裝置使用該交易押碼組成該支付指令並經由該近場通訊傳送該支付指令給該電腦裝置。 The action payment method of claim 2, before the step of establishing the wireless short-range communication, further comprising: generating a data to be hacked, the information to be hacked including the transaction list; wherein The step of transmitting the transaction list includes transmitting, by the near field communication, the information to be debited to the mobile device; wherein, in the step of receiving the payment instruction via the near field communication, the code is to be debited The information causes the mobile device to transmit the information to be debited to the payment card, and cause the payment card to generate a transaction code based on the data to be debited and transmit the transaction code to the mobile device, and The mobile device is caused to use the transaction code to form the payment instruction and transmit the payment instruction to the computer device via the near field communication. 如請求項3所述的行動支付方法,其中,在所述經由該近場通訊接收該支付指令的步驟中,該要被押碼的資料還使該支付卡使用一儲存於該支付卡內的秘鑰產生該交易押碼;其中,在所述傳送該支付指令的步驟中,該支付指令還使該支付機構伺服器基於該支付指令所包括之該要被押碼的資料使用相同的秘鑰產生一確認碼,且使該支付機構伺服器比較該交易押碼及該確認碼以識別該支付卡的正確性。 The mobile payment method of claim 3, wherein in the step of receiving the payment instruction via the near field communication, the data to be plucked further causes the payment card to be stored in the payment card. The secret key generates the transaction charge code; wherein, in the step of transmitting the payment instruction, the payment instruction further causes the payment institution server to generate a message based on the data to be ridden included in the payment instruction using the same key Confirming the code and causing the payment institution server to compare the transaction charge code with the confirmation code to identify the correctness of the payment card. 如請求項1所述的行動支付方法,在所述接收該交易清單的步驟之後,還包含: 鎖定該交易清單。 The action payment method according to claim 1, after the step of receiving the transaction list, further comprising: Lock the list of transactions. 一種行動支付方法,由一具有一支付卡的行動裝置執行,該行動裝置能與一電腦裝置互動,該行動裝置及該電腦裝置與一支付機構伺服器通訊,所述的行動支付方法包含:與該電腦裝置建立一無線短距離通訊;經由該無線短距離通訊接收一來自該電腦裝置的交易清單,該交易清單相關於一交易及一關於該交易的支付;基於至少該交易清單產生一支付指令,並經由該無線短距離通訊傳送該支付指令給該電腦裝置,該支付指令由該電腦裝置提供給該支付機構伺服器,且該支付指令使該支付機構伺服器在收到該支付指令時基於該支付指令識別該支付卡的正確性,且在該支付機構伺服器識別該支付卡為正確之後,該支付指令還使該支付機構伺服器根據該支付指令所包括之該交易清單處理該支付;及接收來自該支付機構伺服器的一支付結果,該支付結果是在完成該支付之後由該支付機構伺服器所產生;其中,該支付指令是由該電腦裝置在一建立於該電腦裝置與該支付機構伺服器之間的會話機制下傳送給該支付機構伺服器;所述建立該會話機制的步驟包括下列子步驟:該電腦裝置傳送一會話請求給該支付機構伺服 器,該會話請求使該支付機構伺服器在接收到該會話請求時產生一會話識別碼,並傳送該會話識別碼給該電腦裝置;該電腦裝置在接收該會話識別碼之後,基於該會話識別碼及一預存於該電腦裝置的第一識別金鑰產生一第一鑑別代碼;該電腦裝置傳送該第一鑑別代碼給該支付機構伺服器,該第一鑑別代碼使該支付機構伺服器尋找一預存於該支付機構伺服器且對應於該電腦裝置的該第一識別金鑰之第二識別金鑰,且使該支付機構伺服器基於該會話識別碼及該第二識別金鑰產生一第二鑑別代碼,且使該支付機構伺服器判斷所述接收自該電腦裝置的第一鑑別代碼與所述第二鑑別代碼是否相同,且使該支付機構伺服器在判斷所述第一鑑別代碼與所述第二鑑別代碼相同時傳送一會話回應給該電腦裝置以建立該會話機制。 An action payment method is performed by a mobile device having a payment card, the mobile device being capable of interacting with a computer device, the mobile device and the computer device communicating with a payment institution server, the mobile payment method comprising: The computer device establishes a wireless short-range communication; receiving, via the wireless short-range communication, a transaction list from the computer device, the transaction list being related to a transaction and a payment regarding the transaction; generating a payment instruction based on at least the transaction list Transmitting, by the wireless short-range communication, the payment instruction to the computer device, the payment instruction is provided by the computer device to the payment institution server, and the payment instruction causes the payment institution server to be based on receiving the payment instruction The payment instruction identifies the correctness of the payment card, and after the payment institution server identifies the payment card as correct, the payment instruction further causes the payment institution server to process the payment according to the transaction list included in the payment instruction; And receiving a payment result from the payment institution server, the payment result is After the payment is generated by the payment institution server; wherein the payment instruction is transmitted by the computer device to the payment institution server under a session mechanism established between the computer device and the payment institution server; The step of establishing the session mechanism includes the following sub-step: the computer device transmits a session request to the payment institution servo The session request causes the payment institution server to generate a session identification code upon receiving the session request, and transmits the session identification code to the computer device; after receiving the session identification code, the computer device identifies the session identifier based on the session identifier The code and a first identification key pre-stored in the computer device generate a first authentication code; the computer device transmits the first authentication code to the payment institution server, the first authentication code causing the payment institution server to find a a second identification key pre-stored in the payment institution server and corresponding to the first identification key of the computer device, and causing the payment institution server to generate a second based on the session identification code and the second identification key Identifying the code, and causing the payment institution server to determine whether the first authentication code received from the computer device is identical to the second authentication code, and causing the payment institution server to determine the first authentication code and When the second authentication code is the same, a session response is transmitted to the computer device to establish the session mechanism. 如請求項6所述的行動支付方法,其中,該電腦裝置及該行動裝置具有近場通訊能力,所述建立該無線短距離通訊之步驟包括:當該電腦裝置及該行動裝置彼此鄰近時,該行動裝置自動與該電腦裝置建立一作為該無線短距離通訊之近場通訊。 The mobile payment method of claim 6, wherein the computer device and the mobile device have near field communication capability, and the step of establishing the wireless short distance communication comprises: when the computer device and the mobile device are adjacent to each other, The mobile device automatically establishes a near field communication with the computer device as the wireless short-range communication. 如請求項7所述的行動支付方法,其中,所述接收該交易清單的步驟包括經由該近場通訊接收一來自該電腦 裝置之要被押碼的資料,該要被押碼的資料是由該電腦裝置產生且包括該交易清單;其中,所述產生該交易指令的步驟包括:該行動裝置傳送該要被押碼的資料給該支付卡;該支付卡基於該要被押碼的資料產生一交易押碼並將該交易押碼傳送給該行動裝置;及該行動裝置使用該交易押碼組成該支付指令,並經由該近場通訊傳送該支付指令給該電腦裝置。 The mobile payment method of claim 7, wherein the step of receiving the transaction list comprises receiving a computer from the computer via the near field communication And the data to be hacked by the device, the data to be hacked is generated by the computer device and includes the transaction list; wherein the step of generating the transaction instruction comprises: the mobile device transmitting the code to be hacked Giving the payment card to the mobile phone; the payment card generates a transaction code based on the data to be hacked and transmits the transaction code to the mobile device; and the mobile device uses the transaction code to form the payment instruction, and The near field communication transmits the payment instruction to the computer device. 如請求項8所述的行動支付方法,其中,所述產生該支付指令的步驟還包括該支付卡使用一儲存於該支付卡內的秘鑰產生該交易押碼;其中,該支付指令還使該支付機構伺服器基於該支付指令所包括之該要被押碼的資料且使用相同的秘鑰產生一確認碼,且使該支付機構伺服器比較該交易押碼及該確認碼以識別該支付卡的正確性。 The action payment method of claim 8, wherein the step of generating the payment instruction further comprises the payment card generating the transaction charge code using a key stored in the payment card; wherein the payment instruction further The payment institution server generates a confirmation code based on the information to be debited included in the payment instruction and uses the same key to generate a confirmation code, and causes the payment institution server to compare the transaction charge code and the confirmation code to identify the payment card. Correctness. 如請求項6所述的行動支付方法,在所述建立該無線短距離通訊的步驟之前還包含:該行動裝置輸出一指示以提示使用者輸入一啟動密碼;該行動裝置於接收到該啟動密碼時傳送該啟動密碼給該支付卡;該支付卡驗證該啟動密碼,且當該啟動密碼是正確時,該支付卡傳送一存取同意指示給該行動裝置;及 該行動裝置於接收到該存取同意指示時清除該啟動密碼。 The action payment method of claim 6, before the step of establishing the wireless short-range communication, the method further comprises: the mobile device outputting an indication to prompt the user to input a startup password; the mobile device receives the startup password Transmitting the activation password to the payment card; the payment card verifies the activation password, and when the activation password is correct, the payment card transmits an access consent indication to the mobile device; and The mobile device clears the activation password upon receiving the access consent indication. 一種行動支付設備,能與一電腦裝置互動,該電腦裝置與一支付機構伺服器通訊,所述的行動支付設備包含:一行動裝置,包括一處理器,一記憶體單元,耦接於該處理器且儲存有一支付軟體,一卡片插槽,耦接於該處理器,且可移除地插設有一支付卡,藉此使用該行動裝置能存取該支付卡,一短距離通訊單元,耦接於該處理器,且能與該電腦裝置通訊,及一通訊單元,耦接於該處理器,且能與該支付機構伺服器通訊;其中,當該處理器執行該支付軟體時,該支付軟體使該行動支付設備:與該電腦裝置建立一無線短距離通訊,經由該無線短距離通訊接收一來自該電腦裝置的交易清單,該交易清單相關於一交易及一關於該交易的支付,基於至少該交易清單產生一支付指令,並經由該無線短距離通訊傳送該支付指令給該電腦裝置,該支付指令由該電腦裝置提供給該支付機構伺服器,且該支付指 令使該支付機構伺服器在收到該支付指令時基於該支付指令識別該支付卡的正確性,且在該支付機構伺服器識別該支付卡為正確之後,該支付指令還使該支付機構伺服器根據該支付指令所包括之該交易清單處理該支付,及接收來自該支付機構伺服器的一支付結果,該支付結果是在完成該支付之後由該支付機構伺服器所產生;其中,該支付指令是由該電腦裝置在一建立於該電腦裝置與該支付機構伺服器之間的會話機制下傳送給該支付機構伺服器;所述建立該會話機制的步驟包括下列子步驟:該電腦裝置傳送一會話請求給該支付機構伺服器,該會話請求使該支付機構伺服器在接收到該會話請求時產生一會話識別碼,並傳送該會話識別碼給該電腦裝置;該電腦裝置在接收該會話識別碼之後,基於該會話識別碼及一預存於該電腦裝置的第一識別金鑰產生一第一鑑別代碼;該電腦裝置傳送該第一鑑別代碼給該支付機構伺服器,該第一鑑別代碼使該支付機構伺服器尋找一預存於該支付機構伺服器且對應於該電腦裝置的該第一識別金鑰之第二識別金鑰,且使該支付機構伺服器基於該會話識別碼及該第二識別金鑰產生一第二鑑別代碼,且使該支付機構伺服器判斷所述接 收自該電腦裝置的第一鑑別代碼與所述第二鑑別代碼是否相同,且使該支付機構伺服器在判斷所述第一鑑別代碼與所述第二鑑別代碼相同時傳送一會話回應給該電腦裝置以建立該會話機制。 An action payment device capable of interacting with a computer device, the computer device being in communication with a payment mechanism server, the mobile payment device comprising: a mobile device, comprising a processor, a memory unit coupled to the processing And storing a payment software, a card slot coupled to the processor, and removably inserting a payment card, thereby using the mobile device to access the payment card, a short-distance communication unit, coupled Connected to the processor and capable of communicating with the computer device, and a communication unit coupled to the processor and capable of communicating with the payment institution server; wherein, when the processor executes the payment software, the payment The software causes the mobile payment device to establish a wireless short-range communication with the computer device, via the wireless short-range communication, to receive a transaction list from the computer device, the transaction list being related to a transaction and a payment regarding the transaction, based on At least the transaction list generates a payment instruction, and transmits the payment instruction to the computer device via the wireless short-range communication, the payment instruction is performed by the computer Home available to the paying agent server, and refers to the payment And causing the payment institution server to identify the correctness of the payment card based on the payment instruction upon receipt of the payment instruction, and after the payment institution server recognizes that the payment card is correct, the payment instruction further causes the payment mechanism to serve Processing the payment according to the transaction list included in the payment instruction, and receiving a payment result from the payment institution server, the payment result being generated by the payment institution server after completing the payment; wherein the payment The instruction is transmitted by the computer device to the payment institution server under a session mechanism established between the computer device and the payment institution server; the step of establishing the session mechanism includes the following sub-steps: the computer device transmits a session request to the payment institution server, the session request causing the payment institution server to generate a session identification code upon receiving the session request, and transmitting the session identification code to the computer device; the computer device is receiving the session After the identification code, generating a message based on the session identification code and a first identification key pre-stored in the computer device An authentication code; the computer device transmits the first authentication code to the payment institution server, the first authentication code causing the payment institution server to find a first one pre-stored in the payment institution server and corresponding to the computer device Identifying a second identification key of the key, and causing the payment institution server to generate a second authentication code based on the session identification code and the second identification key, and causing the payment institution server to determine the connection Whether the first authentication code received from the computer device is the same as the second authentication code, and causing the payment institution server to transmit a session response to the first authentication code when determining that the first authentication code is the same as the second authentication code A computer device to establish the session mechanism.
TW104105399A 2015-02-16 2015-02-16 Action payment method and action payment equipment TWI529640B (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
TW104105399A TWI529640B (en) 2015-02-16 2015-02-16 Action payment method and action payment equipment
EP15178696.9A EP3057050A1 (en) 2015-02-16 2015-07-28 Mobile payment method and mobile payment apparatus

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
TW104105399A TWI529640B (en) 2015-02-16 2015-02-16 Action payment method and action payment equipment

Publications (2)

Publication Number Publication Date
TWI529640B true TWI529640B (en) 2016-04-11
TW201631529A TW201631529A (en) 2016-09-01

Family

ID=56361450

Family Applications (1)

Application Number Title Priority Date Filing Date
TW104105399A TWI529640B (en) 2015-02-16 2015-02-16 Action payment method and action payment equipment

Country Status (1)

Country Link
TW (1) TWI529640B (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI661366B (en) * 2017-01-12 2019-06-01 財金資訊股份有限公司 Method and system for electronic payment
TWI751553B (en) * 2020-05-11 2022-01-01 財金資訊股份有限公司 Method and system for paying digital currency

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI661366B (en) * 2017-01-12 2019-06-01 財金資訊股份有限公司 Method and system for electronic payment
TWI751553B (en) * 2020-05-11 2022-01-01 財金資訊股份有限公司 Method and system for paying digital currency

Also Published As

Publication number Publication date
TW201631529A (en) 2016-09-01

Similar Documents

Publication Publication Date Title
US20190073678A1 (en) Systems, methods, and computer program products providing payment in cooperation with emv card readers
US9473295B2 (en) Virtual transportation point of sale
EP3232386B1 (en) Method of performing transactions with contactless payment devices using pre-tap and two-tap operations
US10108958B2 (en) Method for processing a payment, and system and electronic device for implementing the same
US9311636B2 (en) Mobile payment method and mobile payment apparatus
CN109564659B (en) Sharing data with a card issuer via a wallet application in a payment-enabled mobile device
CN107466409B (en) Binding process using electronic telecommunication devices
AU2013289925B2 (en) Virtual transportation point of sale
US10019704B2 (en) Personal point of sale
JP2016076262A (en) Method of paying for product or service in commercial website via internet connection and corresponding terminal
WO2017036249A1 (en) Method and device using mobile terminal to make payment
TWI625684B (en) Mobile payment method and mobile payment device
EP2854087A1 (en) Method for processing a payment
US9659291B2 (en) Method for processing a payment
US9589265B2 (en) Mobile payment method
TWM507553U (en) Mobile payment device
TWI529640B (en) Action payment method and action payment equipment
JP5981507B2 (en) How to process payments
CN106157037B (en) Mobile payment method and mobile payment equipment
TWM502910U (en) Mobile payment device
EP2873024B1 (en) Virtual transportation point of sale
Alliance Module 6/P: Smart Card Usage Models—Payments and Financial Transactions
EP3082087B1 (en) Mobile payment method
EP3057050A1 (en) Mobile payment method and mobile payment apparatus
KR20090072551A (en) System and method for reinforcing transaction information security in virtual access transactions