TWI545512B - Transaction method and transaction security system with authentication using personal device, and computer-readable medium - Google Patents

Description

Personalized device verification transaction method, transaction security system and computer readable storage device

The invention is a transaction method and system, in particular a transaction method and related transaction security system for performing identity verification using a personalization device.

ATMs or cash machines, often referred to as ATM (automatic teller machine), allow users to easily withdraw cash, but when they withdraw cash, they also create opportunities for gangsters, for example, if there are gangsters At this time, the ATM card is robbed, and at the same time, the withdrawal password is acquired, and cash is obtained. It is too simple and safe to use the security and confidentiality of the cash withdrawal card with a few yards of passwords.

In order to enhance the security at the time of transaction, including general shopping transactions, automatic teller withdrawals, etc., the present invention proposes a transaction method using personalized device verification and related systems, one of the purposes of which is to carry the user through the transaction before the transaction is completed. The device performs a verification procedure, and the transaction is completed after the third-party verification unit proves the identity, which can improve the transaction security, and even if any of the devices is lost or stolen, the property can be ensured without loss.

According to an embodiment of a transaction method using personalized device verification, in this method, in a transaction program for processing an amount, a transaction code displayed on a transaction device is first read by a personalization device, and the transaction code is generated. Based on the transaction amount to be processed, the program executed in the personalization device generates a verification code, which is related to the value generated when the original verification service is registered, so that the authentication can be processed accordingly. Then, the verification code is transmitted to a verification server, and the verification server extracts a server end value according to the value of the personalized device, performs a symmetric operation on the verification code, and verifies the personalized device according to the operation result. If the verification is successful, the transaction can be completed; if the verification fails, a message indicating verification failure is displayed on the transaction device.

Taking the premise of the ATM as an example, when the user outputs the withdrawal amount on the ATM, the ATM will generate a transaction code based on some transaction information, such as displaying the QR code, and the user can read the QR by using a personalization device. The code reads the transaction information and generates a verification code for verifying the identity. The verification server authenticates the user identity, completes the transaction after successful verification, and outputs cash.

In another embodiment, the transaction method using the personalized device verification includes first reading, by the personalization device, the transaction code generated by the transaction device according to the transaction amount and the like, and generating a verification code on the personalized device, and transmitting the verification code to the verification device. The server performs verification. At this time, when the verification is successful, the verification server generates an authorization code and transmits it to the personalization device and displays it on one of the display devices of the personalization device.

Then, the authorization code provides a one-time password that the user inputs to the transaction device again, and the transaction device then uses the authorization code to authenticate the server, and the verification server performs verification according to the received authorization code, and if the verification is successful again, Seal the deal.

According to the embodiment disclosed in the disclosure, the transaction security system using the personalized device verification mainly has a program carried in the personalization device, and the program is a transaction program for processing the personalized device, which mainly includes reading the transaction device display. a transaction code reading instruction of the transaction code, a device side display instruction for displaying the transaction code and the transaction amount, and a verification code generation index for generating a verification code transmitted to the verification server make. In an embodiment, the foregoing program may further include an authorization code acquisition instruction, and the self-authentication server may obtain an authorization code for continuing to complete the transaction.

The transaction system in the transaction security system includes a system-side display module for generating a transaction amount input interface displayed on the transaction device and displaying the transaction code; the system includes a transaction amount acquisition module, which is a transaction amount. The input interface obtains the transaction amount; the system includes a transaction code generation module, and the transaction code can be generated according to the transaction amount calculation; the system includes a verification processing module for obtaining the verification result from the verification server, wherein the verification server receives the personalization The verification device generates a verification code to verify the personalized device; the system includes an output module, which can output a success or failure message after the verification server obtains the verification result. In another embodiment, the transaction system further includes an authorization code processing module for receiving the authorization code of the user of the personalized device and transmitting the authorization code to the verification server to ensure security through the authorization code.

In order to further understand the technology, method and effect of the present invention in order to achieve the intended purpose, reference should be made to the detailed description and drawings of the present invention. The drawings are to be considered in all respects as illustrative and not restrictive

10‧‧‧Automatic Teller Machine

101‧‧‧2D barcode

103‧‧‧ Code

105‧‧‧Withdrawal export

12‧‧‧ Personalized device

121‧‧‧2D barcode

123‧‧‧1D barcode

14‧‧‧ cash register

141‧‧‧ transaction amount

143‧‧‧1D barcode

20‧‧‧ trading device

201‧‧‧ transaction amount

203‧‧‧ transaction bar code

205‧‧‧Transaction number

207‧‧‧Authorization code

209‧‧‧Verification message

Step S301~S311‧‧‧ transaction process

41‧‧‧personalized device

42‧‧‧ trading device

43‧‧‧Transaction Service Host

44‧‧‧Verification server

401‧‧‧ Fill in the amount

402‧‧‧Read transaction code

403‧‧‧Transfer transaction information

404‧‧‧Transfer verification code

405‧‧‧Reply verification results

406‧‧‧Confirm transaction

407‧‧‧Transaction success

501‧‧‧ Fill in the amount

502‧‧‧Transfer transaction information

503‧‧‧ Generate transaction code

504‧‧‧Read transaction code

505‧‧‧Transfer verification code

506‧‧‧Reply verification results

507‧‧‧Confirm transaction

508‧‧‧Transaction success

601‧‧‧ Fill in the amount

602‧‧‧Transfer transaction information

603‧‧‧ Generate transaction code

604‧‧‧Read transaction code

605‧‧‧Transfer verification code

606‧‧‧ Generate authorization code

607‧‧‧ Fill in the authorization code

608‧‧‧Transfer authorization code

609‧‧‧Transfer authorization code

610‧‧‧Reply verification results

611‧‧‧Confirm transaction

612‧‧‧Transaction success

71‧‧‧Verification server

72‧‧‧ trading system

721‧‧‧System-side display module

722‧‧‧ transaction amount acquisition module

723‧‧‧transaction code generation module

724‧‧‧Verification processing module

725‧‧‧Output module

726‧‧‧Authorization code processing module

73‧‧‧personalized device

731‧‧‧Device display module

732‧‧‧transaction code reading module

733‧‧‧Verification Code Generation Module

734‧‧‧Authorization code acquisition module

1A is a schematic diagram showing an embodiment of a related apparatus for a transaction security system using a personalized device verification according to the present invention; FIG. 1B is a schematic diagram showing a second embodiment of a related apparatus for a transaction security system using the personalized device verification of the present invention; FIG. 2A to FIG. 2D shows an embodiment of the present invention using a personalization device to verify the operation of the transaction security system; FIG. 3 shows one of the flowcharts of an embodiment of the transaction method using the personalized device verification of the present invention; and FIG. 4 shows the verification of the present invention using a personalized device. Embodiment flow of the transaction method FIG. 5 shows a third flowchart of an embodiment of a transaction method using the personalized device verification method of the present invention; FIG. 6 shows a fourth flowchart of an embodiment of the transaction method using the personalized device verification method of the present invention; FIG. The present invention employs a functional block diagram of a transaction security system verified by a personalization device.

In view of the prior art, the credit card shopping, online transactions, and ATM (automatic teller machine) transaction procedures can only be verified by account number, password, or with a cash card. Providing effective and high-security measures, the present invention proposes a transaction method using personalized device verification, and a transaction security system, which can perform identity verification through a personalized device carried by the user, and cooperate with a third-party verification means to provide High-security transaction security measures can avoid partial loss of property damage in the transaction process when information is captured or stolen.

BRIEF DESCRIPTION OF THE DRAWINGS Referring to the usage context diagram presented in Figures 1A and 1B, there is shown a schematic representation of the associated use of the transaction security system of the present invention using personalized device verification.

As shown in FIG. 1A, there is shown an automatic teller machine 10. When a user wants to execute a transaction through the automatic teller machine 10, such as a withdrawal, deposit, transfer, etc., when an amount is input through the interface, the automatic teller machine 10 A transaction code generated based on this amount or the current transaction information operation, such as a transaction code generated based on the transaction amount, the code of the transaction device (the identification code of the automated teller machine 10), and a session code, will be presented. This example is presented in the form of a two-dimensional barcode 101, but is not limited to the form of a two-dimensional barcode. The transaction code can be represented by one-dimensional barcode, wireless signal transmission (such as NFC), and alphanumeric code.

In this example, the transaction code is represented by a two-dimensional barcode 101, and can still be represented by a string code 103, so that the user device cannot read the two-dimensional barcode 101. After the user operates the personalization device 12, the relevant verification program is executed, the camera module is turned on, the two-dimensional barcode 101 is captured, and the two-dimensional barcode 121 displayed on the display of the device 12 is generated (or displayed only when shooting, but the scanning result is not displayed). The software can identify the information contained in it. The subsequent procedure includes generating a verification code based on the transaction information in the two-dimensional barcode 121 and transmitting it to the verification server, and after the verification is successful, the withdrawal may be made from the money discharge outlet 105. Details will be described below.

In another embodiment, as shown in FIG. 1B, the transaction security system of the present invention using personalized device verification can be applied to a transaction procedure in general shopping payment. This example shows a consumer or a cashier in a transaction device (such as a POS). The cash register device 14) inputs a transaction amount 141, and the device 14 displays the transaction amount 141 and generates a one-dimensional barcode 143 generated according to the transaction amount 141 and the related transaction information, and then the consumer confirms the transaction amount 141. The one-dimensional bar code 143 displayed on the program of the personalization device 12 in the personalization device 12 is formed in the one-dimensional bar code 123 presented by the personalization device 12 (or may not be displayed). Subsequent procedures include generating a verification code based on the transaction information contained in the one-dimensional barcode 123, transmitting the verification code, and verifying by the verification server. After the verification is successful, the transaction is established.

2A through 2D are diagrams showing an embodiment of the operation of the transaction security system in accordance with the present invention using personalized device verification.

2A shows an interface for generating an input amount on the display of a transaction device 20. After the user inputs the transaction amount 201, as shown in FIG. 2B, the operation program in the transaction device 20 is based on the transaction amount 201 and the current transaction information. For example, the transaction time, the device code, or / and a session code indicating the transaction at this stage are calculated to obtain a transaction code. This example represents the transaction bar code 203 and the transaction number 205. The transaction code provides the user to operate the personalized device to read. The transaction information read by the personalization device continues to calculate to form a verification code, which serves as the basis for the security verification of the transaction. After the verification by the verification server is successful Only complete the transaction.

In another embodiment, after the verification server receives the verification code transmitted by the personalization device, it continues to generate an authorization code, which can be expressed in a string, such as a one-time password, transmitted to the personalization device, and used by The reader reads and re-enters the interface generated by the transaction device 20, as in Figure 2C, the field of the authorization code 207 is filled. After receiving the authorization code 207, the transaction device 20 will transmit to the verification server to confirm the security of the transaction. If any of the links cannot be verified successfully, the transaction will fail; this example is shown in Figure 2D. A verification message 209 for completing the transaction or the like is completed.

It is worth mentioning that in order to implement the transaction method using personalization device verification disclosed in the disclosure, the user needs to use a personalization device with arithmetic processing, communication, display and camera functions, detailing, personalization The device should be a mobile device capable of reading 1D barcode, 2D barcode or wireless signal. The device performs an initialization process prior to operation, including installing a program for performing transaction verification on the personalization device, and registering a verification server.

The seed used by the personalization device to generate the verification code is the personalized value generated by the verification server (or other authorized host) during the verification server registration. According to an embodiment, upon registration, the authentication server will ask the user to transmit personalized information, such as hardware information of the mobile communication device used by the user, such as a hardware related code (such as a phone number, an international mobile device identification code ( International Mobile, Equipment Identity, IMEI, etc.), network hardware information, etc., can also be the communication data of the near field communication (NFC) circuit supported by the mobile communication device; the personalized information does not exclude the general information provided by the user. Information, such as user profiles, or a set of pin codes, can be a source of information that produces a seed.

The value generated by using personalized information is therefore unique. Different devices or users will obtain different kinds of values, and they are not portable, that is, they cannot be used after changing devices. The values can be a string that is generated by the authentication server (or other host) and stored in the personalization device and the authentication server.

The verification code generated by the personalization device can be stored in the personalized device according to the current transaction information, and can be composed of a string, which contains information that can identify the source of the verification code (ie, the personalized device). The verification server can obtain the corresponding seed value, and the corresponding verification server will perform a symmetric operation on the verification code through the value of the server end, so that it can be verified according to the operation result whether the verification code is from an authorized personalization device. .

According to the example set forth in the embodiment, if the personalization device supports near-field communication (NFC), the storage method of the seed value can be protected by the communication information of the near field communication circuit. When the personalization device receives the transaction code, the communication information of the near field communication circuit in the device can be turned on to generate a verification code. For example, if the user holds a near field authentication vehicle for near field communication, the near field communication information generated by the proximity communication device will be used to obtain authorization and open the preloaded value.

It is worth mentioning that the transaction method used in the present invention will be implemented according to the verification code generated by the program in the personalization device or other information, and the applied personalization device should carry the application program provided by the system, such as wisdom. An application (APP) contained in a mobile phone or tablet. This application is used to obtain the value, obtain the system information, generate the verification code, receive the message, scan the transaction code generated by the transaction device, and receive the authorization code. For example, the function of transmitting related information, etc., and obtaining the message pushed by the system side, decrypting the seed value, and providing an interface for inputting the content through the message system.

Figure 3 shows one of the flow charts of an embodiment of the transaction method of the present invention using personalized device verification. This example describes the flow of the transaction, including initially filling in the transaction amount at a transaction device (automated teller machine, cash register, online shopping interface, etc.) as in step S301; then, in step S303, the transaction is executed by the program in the transaction device. The amount and the current transaction information calculation generate a transaction code and display it on the display.

The user activates the program in the personalization device at this time (or before), reads (or is filled in by the user according to the transaction code), in step S305, and according to the personalization Confirm the content by displaying the displayed transaction information (such as the amount, transaction related content). After confirming, in step S307, the verification code is generated by the program in the personalization device by the seed value generated by the registration, wherein the verification code can be obtained according to the current transaction information.

In step S309, the verification code is transmitted to the verification server, and the verification server verifies whether the information is from the authorized authorized personalization device according to the corresponding system end value calculation, that is, verifying the identity of the user of the personalized device. Then, in step S311, the verification result will transmit the relevant message to the transaction device, and if the verification is successful, the transaction is completed; otherwise, the transaction failure message will be generated.

4 shows an embodiment flow of a transaction method, which is a security verification process running between the personalization device 41, the transaction device 42, the transaction service host 43 and the verification server 44, wherein the personalization device 41 is a computer held by a user. The system, wherein the executed program cooperates with the transaction device 42 and the transaction service host 43 to form the transaction security system of the present invention, and the verification server 44 can provide a host for the authentication service to the third party, but does not exclude that it can be located in the transaction service host 43. Hardware or software module.

At the beginning of the process, the user (or another service person, cashier) fills in the amount (401) on the transaction device 42, and the transaction device 42 calculates the transaction code based on the transaction amount and/or the current transaction related information, and is personalized. The device 41 reads the transaction code (402), such as reading a one-dimensional barcode, a two-dimensional barcode, or a wireless signal; if the transaction code displayed in the string is taken as an example, the transaction code can be transcribed and input to the personalization device 41 by the user. At the same time, the transaction device 42 also transmits the transaction code or related transaction information (transaction amount, transaction device code, time, chat identification code, etc.) to the transaction service host 43 (403). The transaction service host 43 may simultaneously serve a plurality of transaction devices 42 located at various locations, so that it is necessary to obtain relevant information of the transaction before the source of the transaction can be identified.

When the personalization device 41 reads the transaction code, confirms the transaction related information, uses the program to take out the value, and uses the value to talk to the specific personalized information (such as user information, transaction amount, transaction device code). Identification code) The verification code is transmitted to the verification server 44 (404), which carries the identification information of the personalization device 41, so that the verification server 44 can identify the source of the verification code. Then, the verification server 44 receives the verification code transmitted by the personalization device, and obtains the identification data of the personalized device end, such as the seed value and the device hardware information, from the verification code, so that the server end value can be correspondingly obtained. The server end value performs a symmetric operation on the verification code, and the personalization device 41 is verified based on the operation result. Thereafter, the verification result is transmitted to the transaction service host 43 (405). If the verification is successful, the transaction service host 43 transmits the message confirming the transaction (406) to the transaction device 42, and the user of the personalization device 41 completes the transaction after the verification is successful (407); otherwise, when the verification fails, the transaction is not Successful, and the transaction device will display a message that the verification failed.

Unlike the flow shown in FIG. 4, the transaction code is generated by the transaction device 42. The flowchart of the embodiment shown in FIG. 5 indicates that the transaction service host 43 performs the operation to generate the transaction code.

Similarly, the transaction amount (501) is filled in before the transaction device 42, and the transaction information is transmitted by the transaction device 42 to the transaction service host 43 (502), and the transaction service host 43 generates the transaction code based on the transaction information, and first transmits the transaction code to the corresponding Transaction device 42 (503), displayed, is read (504) by personalization device 41. The transaction code is processed by a one-dimensional or two-dimensional barcode, or transmitted by a wireless signal, and is read by the relevant communication module of the personalization device 41, and then decoded by the program to form a message for providing the user with confirmation of the transaction content. .

After the user confirms the transaction content, the personalization device 41 takes out the seed value, generates a verification code for the related personalized information operation, and transmits the verification code to the verification server 44 (505), and the verification server 44 obtains the individual carried in the verification code. The identification information of the device 41 can obtain the corresponding system end value, perform a symmetric operation according to the corresponding seed value to verify the information source, and then reply the verification result (506) to the transaction service host 43, and the transaction service host 43 carries according to the information. The information (such as device related information, the transaction related information, etc.) determines the corresponding transaction device 42 and notifies the transaction device 42 to confirm the transaction (507), and displays the message indicating that the transaction was successful (508). Conversely, if the verification fails, a message indicating that the transaction failed is displayed.

6 is a flow chart showing still another embodiment of the transaction method of the present invention, which also operates between the personalization device 41, the transaction device 42, the transaction service host 43, and the verification server 44.

To start a transaction procedure, an amount (601) needs to be filled into a transaction device 42. In this example, the transaction device 42 transmits the transaction information, including device-related identification information, to the transaction service host 43 (602), by the transaction service host. 43 generates a transaction code and returns it to the transaction device 42 (603). The transaction code is represented, for example, by a two-dimensional bar code such as a QR code, displayed on the display by the transaction host 42, read by the personalization device 41 (604), and transmitted through Display the transaction content for the user to confirm.

Wherein, if the ATM is taken as an example, it is not excluded that the ATM (ie, the transaction device) or the ATM host (ie, the transaction service host) is calculated according to the ATM device code, the transaction amount, and the session ID (work ID) working on behalf of this stage. Transaction code, transaction code can be represented by 2D barcode, 1D barcode or wireless signal, and the personalization device should read these messages with the corresponding program instructions.

After reading the transaction code and confirming the transaction amount, the personalization device 41 will use the program to generate the verification code, and the verification code is generated by using the device end value, that is, the encryption type value generated by the verification server registration before the transaction, The identification code of the transaction device 42, the transaction amount and the conversation identification code are encoded along with the seed value, a verification code is generated, and the verification code is transmitted to the verification server 44 (605), and the verification server 44 performs security verification.

After the verification succeeds, this embodiment indicates that the authentication server 44 generates an authorization code generated according to the current information, and the authorization code is generated as a one-time password (OTP), for example, generated according to a time information, and generated dynamically. The method can also be generated according to the transaction device machine identification code, the transaction amount, the conversation identification code, and/or the time information, and the authorization code can be transmitted to the personalization device 41 (606) through the network, and displayed. The user sees that the user re-fills the authorization code to the input interface on the transaction device 42 (607). The representation of the authorization code is displayed in addition to the personalization The word string on the device 41 is not excluded from being presented in the form of a bar code or a wireless signal, and is read by the transaction device 42 to install the reader.

After obtaining the authorization code by the transaction device 42, it is transmitted to the verification server 44 (609) via the transaction service host 43 (608), so that the verification server 44 can compare the previously generated authorization code and perform secondary verification accordingly. The verification result (610) is replied again, and after the verification is successful, the confirmation transaction (611) information is transmitted to the transaction host 42 via the transaction service host 43 to complete the transaction (612).

Figure 7 is a diagram showing an embodiment of a functional block of a transaction security system using the personalized device verification of the present invention.

This illustration shows that at least one verification server 71 is required to complete the transaction program of the present invention, and the verification server 71 does not exclude software functions that may be carried in a particular host or transaction system 72; the transaction security system includes a transaction system 72, a transaction system 72. The transaction device and the transaction service host are configured as in the foregoing embodiment; the transaction security system is installed on the personalization device 73 with a software program for processing the verification function in the transaction program.

Here, the transaction security system using the personalized device verification includes a program loaded in the memory of the personalization device 73. The program mainly executes the transaction program of the present invention at the end of the personalization device 73, and the related software module is as shown in the display device. The display module 731 displays a command as shown in a device. After executing the program, the displayed transaction code and the transaction amount are displayed on the display of the device. The user can confirm whether the content is correct according to the displayed transaction content, and whether the content continues. transaction. The device side display command may also prompt the user to perform various steps in the transaction, including the authorization code received in a particular embodiment, such as the process described in FIG.

The software module in the program is, for example, a transaction code reading module 732, such as a transaction code reading instruction. When the transaction device generates a transaction code according to the transaction information, the program executed by the personalization device can read the transaction code displayed by the transaction device. And can read the function according to the transaction code. For example, if the transaction code is represented by one-dimensional or two-dimensional bar code, the transaction code reading command can activate the camera module to scan the barcode; if the transaction code is presented by wireless signal, the transaction The code read command will activate the wireless communication module in the device (eg NFC) is used to read the wireless signal; if the transaction code is a string displayed on the transaction device side, the transaction code reading instruction generates an input field to provide a user input string.

The program includes a verification code generation module 733, and the related instruction, such as a verification code generation instruction, is used to generate a verification code and transmitted to the verification server. In this instruction, including extracting the seed value stored in the personalization device, the verification code can be generated according to the current transaction information such as the transaction amount, the transaction device code and the conversation identification code.

In an embodiment, the program of the personalization device 73 is provided with an authorization code acquisition module 734, such as an authorization code acquisition command, for obtaining an authorization code for continuing the transaction from the verification server, as described in FIG. In an embodiment, after the verification server verifies the personalization device, the server generates an authorization code such as a one-time password, transmits it to the personalization device 73, and displays it on the personalization device 73, the purpose of which is to be completed. Before the transaction, it is confirmed again whether the user is in front of the transaction device, and the user can input the string that can be displayed according to the authorization code to the transaction device, and finally the verification server can perform the verification after receiving the authorization code, in order to complete the transaction accordingly.

The transaction security system includes a transaction system 72, which includes functional modules implemented by software or hardware, such as a system-side display module 721, which includes software and hardware for forming display content, and a display screen for presenting content. The system side display module 721 is configured to generate a transaction amount input interface displayed on the transaction device, and display the transaction code generated by the operation, and may include receiving a relevant interface for inputting the authorization code by the user.

The transaction system 72 includes a transaction amount obtaining module 722 for obtaining the transaction amount input by the user or the related person from the transaction amount input interface, and then the transaction system 72 generates the transaction code according to the transaction code, including a transaction code. The generating module 723 can generate a transaction code according to at least the transaction amount calculation. The operation of the transaction code is mainly based on the input amount, or can be calculated by referring to the information of the transaction device and the conversation identification code.

The transaction system 72 includes a verification processing module 724 that can obtain the verification result of the verification code transmitted by the verification server 71 according to the personalization device 73, and the transaction system 72 will determine whether to complete the transaction based on the verification result.

The transaction system 72 is provided with an output module 725, which is mainly capable of outputting a successful or failed message according to the verification result. In a particular embodiment, the output module 725, in addition to being able to output a message of a successful or failed transaction, also outputs cash in an embodiment of the withdrawal.

In an embodiment, corresponding to the authorization code obtaining module 734 in the personalization device 73, the transaction system 72 further includes an authorization code processing module 726, and the user who can receive the personalized device 73 fills in the transaction device. The authorization code is transmitted to the verification server 71.

The invention further relates to a computer readable storage device for processing the above transaction program, wherein a code for a transaction method for verification by a personalized device executed by a processor in the computer system is stored. The computer system is implemented by a personalization device, wherein the executed code includes at least an instruction for reading a transaction code displayed on the transaction device, an instruction for generating a verification code according to the current transaction information operation, and an instruction for transmitting the verification code to the verification server. . It may also include an instruction to receive an authorization code generated by the verification server, an instruction to display the authorization code, and the like.

Therefore, the transaction method using personalized device verification described in the above disclosure, and the related transaction security system, which are mainly applied to the authentication process in the transaction program, include actions that can be applied to ATM withdrawal, deposit, transfer, etc. The verification procedure can also be applied to the verification procedure in the general shopping transaction, so that the transaction procedure has high security, and no password, credit card or ATM card is needed except the personalization device, so as to avoid being stolen. In particular, during the transaction process, the transaction code is generated by the transaction device, read by the personalization device, and the verification code generated by the program is used by the third-party verification unit to perform identity verification. By the operation of the present invention, a highly secure transaction program can be provided.

However, the above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Therefore, equivalent structural changes that are made by using the specification and the contents of the present invention are equally included in the present invention. Within the scope, it is combined with Chen Ming.

S301‧‧‧ Fill in the transaction amount

S303‧‧‧ Display transaction code

S305‧‧‧Read the transaction code and confirm the content

S307‧‧‧ Generate verification code

S309‧‧‧Transfer verification code

S311‧‧‧Complete the transaction after successful verification

Claims (20)

A transaction method for verifying by using a personalized device, comprising: reading, by a personalization device, a transaction code displayed on a transaction device, the transaction code being generated according to at least one transaction amount; and the personalization device generating a The verification code is obtained by calculating the verification code according to the current transaction information by a value stored in the personalization device; transmitting the verification code to a verification server; and then the verification server is taken out according to the value of the personalized device a server end value, performing a symmetric operation on the verification code, and verifying the personalized device according to the operation result; wherein, if the verification is successful, the user of the personalization device completes the transaction after the verification succeeds; if the verification fails, The transaction device displays a message that the verification failed. The transaction method using personalization device verification as claimed in claim 1, wherein the transaction code is determined by the transaction device or a transaction service host connected to the transaction device according to the transaction amount, the transaction device code, and a conversation identification code. The operation is generated. The transaction method using personalization device verification according to claim 1, wherein the transaction code is formed by a one-dimensional barcode, a two-dimensional barcode, a string or a wireless signal, and one of the programs is executed by the personalization device. Take the transaction code. The transaction method using the personalized device verification as claimed in claim 1, wherein the current transaction information on which the verification code is generated includes the transaction amount, the code of the transaction device, and a conversation identification code. The transaction method using personalization device verification according to claim 4, wherein the verification server obtains the transaction amount, the transaction device code and the conversation identification code carried by the verification code via the symmetric operation, and according to The code of the transaction device transmits a verification success or failure message to the corresponding transaction device via a transaction service host. The transaction method using the personalized device verification method according to any one of claims 1 to 5, wherein the transaction device is an automatic teller machine, and after the verification is successful, the transaction is completed, and cash is output. A transaction method for verifying by using a personalized device, comprising: reading, by a personalization device, a transaction code displayed on a transaction device, the transaction code being generated according to at least one transaction amount; and the personalization device generating a The verification code is obtained by calculating the verification code according to the current transaction information by a value stored in the personalization device; transmitting the verification code to a verification server; and the verification server then extracting the value corresponding to the personalized device. a server end value, performing a symmetric operation on the verification code, and verifying the personalized device according to the operation result; if the verification is successful, the verification server generates an authorization code; transmitting the authorization code to the personalized device, and displaying Displaying the screen on one of the personalization devices; then, after the user of the personalization device fills in the authorization code on the transaction device, the transaction device transmits the authorization code to the verification server, and the verification server The verification is performed according to the authorization code received; if the verification is successful again, the user of the personalization device completes the transaction after successful verification; The validation fails, displays an authentication failure message to the transaction device. The transaction method using personalization device verification according to claim 7, wherein the transaction code is determined by the transaction device or a transaction service host connected to the transaction device according to the transaction amount, the transaction device code and a conversation identification code. The operation is generated. The transaction method using personalization device verification according to claim 7, wherein the transaction code is formed by a one-dimensional barcode, a two-dimensional barcode, a string or a wireless signal, and one of the programs is executed by the personalization device. Take the transaction code. The transaction method using personalization device verification according to claim 7, wherein the current transaction information on which the verification code is generated includes the transaction amount, the code of the transaction device, and a conversation identification code. The transaction method using personalization device verification according to claim 10, wherein the verification server obtains the transaction amount, the transaction device code and the conversation identification code carried by the verification code via the symmetric operation, and according to The code of the transaction device transmits a verification success or failure message to the corresponding transaction device via a transaction service host. The transaction method using personalization device verification according to any one of claims 7 to 11, wherein the transaction device is an automatic teller machine, and after completing the transaction after the verification is successful, cash is output. A transaction security system using personalization device verification, comprising: a program stored in a memory of a humanized device, the program comprising: a transaction code reading instruction for reading a transaction code displayed by a transaction device; The device side displays an instruction for displaying the transaction code and a transaction amount; a verification code generation instruction is used to generate a verification code transmitted to a verification server; and a transaction system includes: a system-side display module a transaction amount input interface displayed on the transaction device, and displaying the transaction code; a transaction amount acquisition module, the transaction amount is obtained from the transaction amount input interface; a transaction code generation module, Generating the transaction code according to at least the transaction amount calculation; wherein the transaction code is provided by the personalization device: a verification processing module obtains a verification result from the verification server; wherein the verification server receives the transaction The test produced by the device After verifying the code, verifying the personalization device, the verification code is obtained by calculating the value of the personalized device according to the current transaction information; and an output module is configured to successfully output the transaction after the verification server obtains the verification result. Or a failure message; wherein the verification server takes a server end value corresponding to the seed value of the personalization device, performs a symmetric operation on the verification code, and verifies the personalized device according to the operation result; if the verification is successful, The user of the personalization device completes the transaction after the verification is successful; if the verification fails, the transaction device displays a message that the verification failed. The transaction security system using the personalized device verification according to claim 13, wherein: the program further comprises: an authorization code acquisition instruction, and obtaining, from the verification server, an authorization code for continuing to complete the transaction; the transaction system further The method includes: an authorization code processing module, wherein the user who receives the personalized device fills in the authorization code and transmits the authorization code to the verification server; wherein the authorization code is originally generated by the verification server, and then transmitted to the Personalizing the device and displaying it on the personalization device; the verification server performs verification after receiving the authorization code. The transaction security system using the personalized device verification as claimed in claim 14, wherein the authorization code is a one-time password generated by the verification server according to a time information. The transaction security system using the personalized device verification as claimed in claim 13, wherein the transaction code is identified by the transaction device or a transaction service host connected to the transaction device according to the transaction amount, the code of the transaction device, and a conversation. Generated by code operations. The transaction security system using the personalized device verification according to claim 13, wherein the transaction code is formed by a one-dimensional barcode, a two-dimensional barcode, a string or a wireless signal, and the program is executed by the personalization device. Read the transaction code. A transaction security system using personalized device verification as claimed in any one of claims 13 to 17, wherein the personalization device is a mobile device having the capability of reading a one-dimensional barcode, a two-dimensional barcode or a wireless signal. The transaction security system using personalization device verification according to any one of claims 13 to 17, wherein the transaction device is an automatic teller machine, and after the verification is successful, the transaction is completed, and cash is output. A computer readable storage device storing a program code executed by a processor for a transaction method verified by a personalization device as claimed in claim 1 or 7.