TWI628606B - Electronic charging method and system - Google Patents

Abstract

An electronic charging method includes: transmitting an encryption key to an electronic payment server and an entrance and exit verification device by a management server; and receiving the encryption key by an electronic payment server, transmitting the encryption key and the coded key to The communication device receives the transaction message by using the communication device, and generates the payment authorization transaction data corresponding to the transaction message by using the above-mentioned compression key and the encryption key; and transmitting the payment authorization transaction data to the entrance and exit by the communication device a verification device; determining, by the above-mentioned entrance and exit verification device, whether the payment authorization transaction data can be decrypted using the encryption key; and transmitting the notification message to the management when the above-mentioned entrance verification device can decrypt the payment authorization transaction data using the encryption key server.

Description

Electronic charging method and system

The present disclosure relates to an electronic charging method and system, and more particularly to an electronic charging method and system using multiple keys.

With the rapid development of transportation in recent years, most of the mass transportation can be operated in the mode of electronic ticket transaction payment.

An electronic ticket is a chip, card, voucher or other form of debt that stores money value in electronic, magnetic, or optical form and contains data storage or computing functions as a tool for multi-purpose payment.

However, there are still some troublesome places to use e-tickets. For example, it takes a lot of resources to make e-tickets, and users still have to spend extra money to purchase e-tickets. In addition, users must carry an electronic ticket at any time and go to a specific location to store the value in the electronic ticket. Once the electronic ticket is lost, any person who picks up can use the amount stored in the electronic ticket. For the user, the electronic ticket is not very safe and convenient.

With the emergence of mobile payment methods, users can complete the payment process to the payee through the mobile device. However, the current payment process for payment is still more time-consuming than using an electronic ticket. When there are a large number of passengers, especially during the peak of the crowd, the efficiency of passengers entering or leaving the station or getting on and off will be greatly reduced, and the transit time of the vehicles will be longer, which will not only cause passengers to be crowded, but also often Because other vehicles have longer waiting times, traffic congestion.

Therefore, there is a need for an electronic charging method and system to address the above disadvantages.

The following summary is merely exemplary and is not intended to be limiting in any way. In addition to the illustrative aspects, embodiments, and features, other aspects, embodiments, and features will be apparent from the accompanying drawings. That is, the following summary is provided to introduce concepts, concepts, advantages, and novel and non-obvious technical advantages described herein. Selected, not all, embodiments will be described in further detail below. Therefore, the following summary is not intended to be an essential feature of the claimed subject matter.

The invention provides an electronic charging method and system.

The invention provides an electronic toll collection system comprising an electronic payment server, a communication device, a first entrance and exit verification device and a management server. The communication device is coupled to the electronic payment server. A management server is coupled to the electronic payment server and the first access verification device. The management server transmits an encryption key to the electronic payment server and the first entrance and exit verification device; after receiving the encryption key, the electronic payment server transmits the encryption key and a pressure code key to the communication device. The communication device receives a first transaction message, and generates a first payment authorization transaction data corresponding to one of the first transaction messages by using the above-mentioned pressure code key and the encryption key; the communication device uses the first payment authorization transaction data Transmitting to the first portal verification device; the first portal verification device determines whether the first payment grant can be decrypted using the encryption key Transaction data; when the first gateway verification device can decrypt the first payment authorization transaction data by using the encryption key, transmitting a first notification message to the management server to notify the management server that the communication device has passed The first portal verification device; after receiving the first notification message, the management server forwards the first notification message to the electronic payment server; after receiving the first notification message, the electronic payment server uses the above The coded key and/or the above-mentioned encryption key decryption includes the first payment authorization transaction data of the first notification message to verify the first notification message; when the above-mentioned compression key and/or the encryption key can Decrypting the first payment authorization transaction data, the electronic payment server successfully verifying the first notification message; and when the electronic payment server successfully verifies the first notification message, transmitting a first pass message to the communication device, To indicate that the communication device has successfully passed the first entrance and exit verification device; The first notification message includes at least the first payment authorization transaction data and a first entry and exit information after the decryption and/or decryption, wherein the first entry and exit information is the first time through one of the first entrance and exit verification devices, and One of the first locations where the first entrance verification device is located.

In some embodiments, the charging system further includes: a second access verification device coupled to the management server to receive the encryption key transmitted by the management server; wherein the communication device has passed the foregoing After the entrance and exit verification device, the communication device receives a second transaction message, and generates a second payment authorization transaction data corresponding to the second transaction message by using the code key and the encryption key; the communication device Transmitting the transaction data to the second port entry verification device; the second port entry verification device determines whether the second payment authorization transaction data can be decrypted using the encryption key; When the second gateway verification device can decrypt the second payment authorization transaction data by using the encryption key, send a second notification message to the management server to notify the management server that the communication device has passed the second portal Verification device.

In some embodiments, after the management server receives the second notification message, the second notification message is forwarded to the electronic payment server; after receiving the second notification message, the electronic payment server verifies the above a second notification message; and after the electronic payment server verifies the successful second notification message, transmitting a second pass message to the communication device to indicate that the communication device has successfully passed the second port entry verification device.

In some embodiments, the second notification message includes at least the second payment authorization transaction data and a second entry and exit information, wherein the incoming and outgoing information is a second time through the second entrance and exit verification device, and the second The second location where the entrance and exit verification device is located.

In some embodiments, the second notification message includes at least the decrypted second payment authorization transaction data and a second entry and exit information, wherein the second incoming and outgoing information is one of the second time entry and exit verification devices. And one of the second locations where the second entrance verification device is located.

In some embodiments, the verifying the second notification message by the electronic payment server to decrypt the second payment authorization transaction data included in the second notification message by using the compression key and/or the encryption key; And when the above-mentioned compression key and/or the encryption key can decrypt the second payment authorization transaction data, the electronic payment server verifies the success of the second notification message.

In some embodiments, the second pass information system includes at least one Deduction information; the above deduction information includes at least one of the following: a user name, a deduction amount, and a deduction time.

In some embodiments, the first payment authorization transaction data is a graphic barcode, a Near Field Communicating (NFC) message, an audio signal, or a light wave signal.

In some embodiments, after the receiving, by the communication device, the first transaction message, the communication device determines whether the communication device is in an offline mode; when determining that the communication device is in the offline mode, determining that the previous payment is generated Whether the authorized transaction data is generated when the communication device is in the offline mode; the current payment authorization transaction data is not generated when the communication device is in the offline mode, and the above-mentioned compression key and the encryption key are used to generate the corresponding One of the first transaction messages is an offline payment authorization transaction data, and records an offline start time of generating one of the offline payment authorization transaction data; when the current payment authorization transaction data is generated by the communication device being in the offline mode, the communication device determines Whether the length of time from the offline start time to the current time of receiving one of the first transaction messages is within an offline period; and when the length of time is within the offline period, the communication device uses the above-mentioned compression key and the encryption key Generate corresponding to the above A transaction message of the above-mentioned off-line payment authorization transaction information; and when the above-mentioned period of time longer than the above offline, the communications device displays an error message.

In some embodiments, the management server updates the encryption key according to a preset time, and transmits the updated encryption key to the electronic payment server and the first portal verification device.

The invention provides an electronic charging method for use in an electronic charging system, comprising: transmitting an encryption key to an electronic payment server by a management server a server and a first gateway verification device; after receiving the encryption key by the electronic payment server, transmitting the encryption key and a pressure code key to a communication device; receiving a first transaction by using the communication device Transmitting, by using the above-mentioned code key and the above-mentioned encryption key, a first payment authorization transaction data corresponding to one of the first transaction messages; and transmitting, by the communication device, the first payment authorization transaction data to the first port verification Determining, by the first gateway verification device, whether the first payment authorization transaction data can be decrypted using the encryption key; and when the first portal verification device can decrypt the first payment authorization transaction data using the encryption key Transmitting a first notification message to the management server to notify the management server that the communication device has passed the first portal verification device; and after the management server receives the first notification message, by using the management server Transmitting the first notification message to the above electronic payment server; After receiving the first notification message, the electronic payment server decrypts the first payment authorization transaction data included in the first notification message by using the above-mentioned compression key and/or the encryption key to verify the first notification. a message; when the above-mentioned stamp key and/or the encryption key can decrypt the first payment authorization transaction data, the electronic payment server verifies the success of the first notification message; and when the electronic payment server successfully verifies the above After the notification message, transmitting a first pass message to the communication device to indicate that the communication device has successfully passed the first port entry verification device; wherein the first notification message includes at least the first payment authorization after undecryption and/or decryption The transaction data and a first entry and exit information, wherein the first entry and exit information is the first time through one of the first entrance and exit verification devices, and the first location of the first entrance verification device.

100‧‧‧Electronic payment system

110‧‧‧Electronic payment server

120‧‧‧Management Server

130‧‧‧Communication device

140A‧‧‧First entrance and exit verification device

140B‧‧‧Second entrance and exit verification device

150‧‧‧Network

200‧‧‧Electronic devices

202‧‧‧ Input device

204‧‧‧Output device

206‧‧‧Control circuit

208‧‧‧Central Processing Unit

210‧‧‧ memory

212‧‧‧ Code

214‧‧‧ transceiver

S305, S310, S315, S320, S325, S330, S335, S340, S345, S350, S355, S360, S365, S370, S375, S380, S385, S390‧‧

400‧‧‧ method

S405, S410, S415, S420, S425, S430, S435‧‧ steps

500‧‧‧ method

S505, S510, S515, S520, S525, S530‧‧ steps

600‧‧‧ method

S605, S610, S615, S620, S625, S630, S635‧‧ steps

700‧‧‧Form

The figures are included to provide a further understanding of the invention and are incorporated in and constitute a part of the disclosure. The drawings illustrate embodiments of the invention and, together with the description It is understood that the drawings are not necessarily to scale, and that some of the elements may be shown in the form of the actual embodiments to clearly illustrate the concept of the disclosure.

1 is a schematic diagram of an electronic toll collection system according to an embodiment of the present application.

FIG. 2 is a simplified functional block diagram of an electronic device according to an embodiment of the invention.

FIG. 3A is a message sequence diagram showing the electronic charging of the communication device through the first gateway verification device according to an embodiment of the present disclosure.

FIG. 3B is a message sequence diagram showing electronic charging by the communication device according to an embodiment of the present disclosure through the second gateway verification device.

4 is a flow chart showing a method of electronic charging according to an embodiment of the present disclosure.

Figure 5 is a flow chart showing a method of electronic charging according to an embodiment of the present disclosure.

Figure 6 is a flow chart showing a method of electronic charging in an offline mode according to an embodiment of the present disclosure.

7A-7B are diagrams showing a content table of payment authorization transaction materials according to an embodiment of the present disclosure.

Various aspects of the disclosure will be more fully described below with reference to the drawings. However, the disclosure may be embodied in many different forms and should not be construed as being limited to any particular structure or function presented. Rather, these aspects are provided so that this disclosure will be thorough and complete, and the disclosure will fully convey the scope of the disclosure. Based on the teachings herein, those skilled in the art will appreciate that the scope of the present disclosure is intended to cover any aspect disclosed herein, either alone or in combination with any other aspect disclosed herein. For example, any number of devices or methods of implementation presented herein can be used. In addition, the scope of the present disclosure is intended to cover an apparatus or method that is implemented using other structures, functions, or structures and functions, in addition to the various aspects disclosed herein. It should be understood that any aspect disclosed herein may be embodied by one or more elements of the patent application.

The word "exemplary" is used herein to mean "serving as an example, instance or description." Any aspect of the disclosure or a design described herein as "exemplary" is not necessarily to be construed as preferred or preferred.

Although specific aspects are described herein, many variations and permutations of these aspects are within the scope of the disclosure. While some of the benefits and advantages of the preferred aspects are mentioned, the scope of the disclosure is not intended to be limited only to the particular benefits, uses, or objectives. Rather, the aspects of the present disclosure are intended to be broadly applicable to different technologies, system configurations, networks, and protocols, some of which are illustrated by way of example in the drawings and the description of the preferred aspects. The detailed description and the accompanying drawings are intended to

FIG. 1 is an electronic toll collection system according to an embodiment of the present application. Schematic diagram of 100. The electronic payment system 100 includes an electronic payment server 110, a management server 120, a communication device 130, a first portal verification device 140A and a second portal authentication device 140B, and a network 150.

The electronic payment server 110 and the management server 120 can be or include any database capable of storing and/or providing access to information, such as an electronic database, a computer and/or a computerized server, a database server or a general A network host that can store data and connect to any type of data network. In addition, electronic payment server 110 and management server 120 can include or be part of a distributed network or cloud computing environment.

The electronic payment server 110 is mainly responsible for providing a third-party payment platform, such as the Ou Baobao payment platform, for the communication device 130 and the management server 120 to perform electronic commerce in an electronic payment manner. Specifically, the electronic payment server 110 receives the transaction or payment information transmitted by the management server 120, and then performs the electronic payment processing of the electronic payment according to the transaction or the payment information. For example, the electronic payment server 110 can be connected to the management server 120 via the network 150 to perform gold stream processing.

The management server 120 can be a management device of the operator, for example, a server set by the MRT, a server set by the bus terminal, or a server set by a movie theater or a playground. The management server 120 can be connected to the first entrance and exit verification device 140A and the second entrance and exit verification device 140B via a telecommunication network or a wireless network. The first entrance and exit verification device 140A and the second entrance and exit verification device 140B may be charging terminals or ticket checking terminals of the operator, for example, a bus charging device, a MRT station gate checking device, a movie theater ticket cutting device, and the like. In addition, the management server 120 can provide different payment providers with different encryption keys to verify the use of the first portal verification device 140A and the second portal authentication device 140B. It is worth noting that despite the entrance and exit verification installation The number of the devices is exemplified by two devices in Fig. 1, but the present invention should not be limited thereto.

The communication device 130 is used by a user, and can be an arithmetic device having a network communication function and a display function. The user can also download and install the transaction application developed by the management server 110 through the communication device 130 (for convenience of understanding, hereinafter referred to as a "transaction APP"). Through its display function, the communication device 130 can generate payment authorization transaction data related to a transaction, wherein the payment authorization transaction data can be a graphic barcode, a near field communication (NFC) message, an audio signal, a light wave signal, and the like. . In an embodiment, the graphic barcode may be a Quick Response Code (QR Code), a one-dimensional barcode, a two-dimensional barcode, a multi-dimensional barcode, and the like. Through the network communication function, the communication device 130 can be connected to the network 150 and the electronic payment server 110 for transaction. The communication device 130 can be a computer or a mobile device, such as a smart phone or a tablet computer, and can have the ability to run an application.

Network 150 can be any type of network familiar to those skilled in the art that can support data communication using any of a variety of communication-available protocols, including but not limited to TCP/IP and the like. For example, the network 150 can be a local area network (LAN), such as an Ethernet network, etc., a virtual network, including but not limited to a virtual private network (Virtual Private Network, VPN), the Internet, a wireless network, and/or any combination of these and/or other networks.

Next, referring to FIG. 2, FIG. 2 is a simplified functional block diagram of an electronic device 200 according to an embodiment of the invention. In FIG. 2, the electronic device 200 can be used to embody the electronic payment server 110 and the tube in FIG. The server 120, the communication device 130, the first entrance and exit verification device 140A, and the second entrance and exit verification device 140B. The electronic device 200 can include an input device 202, an output device 204, a control circuit 206, a central processing unit (CPU) 208, a memory 210, a code 212, and a transceiver 214. The control circuit 206 executes the program code 212 in the memory 210 through the central processing unit 208, and thereby controls the operations performed in the electronic device 200. The electronic device 200 can receive the user input signal by using the input device 202. The input device 202 can include a reading device for reading information such as an image (such as a quick response code), an NFC message, an audio signal, and a light wave signal. Images and sounds may also be output by output device 204, such as a screen or speaker. The transceiver 214 is here used to receive and transmit wireless signals, to send received signals to the control circuit 206, and to wirelessly output signals generated by the control circuit 206.

FIG. 3A is a message sequence diagram showing the electronic charging of the communication device through the first gateway verification device according to an embodiment of the present disclosure. It should be noted that this communication device has been pre-downloaded by the user and installed with its own trading application developed by the management server.

First, in step S305, the management server respectively transmits an encryption key to the electronic payment server and the first entrance and exit verification device. In an embodiment, the management server may update the encryption key according to a preset time, and transmit the updated encryption key to the electronic payment server and the first entrance and exit verification device, wherein the preset time is an example but not limited to 24 hour. The management server can also preset the activation time of the encryption key, such as the 48 hours after the update.

After receiving the encryption key, the electronic payment server transmits the encryption key and a Digest key to the communication device in step S310. The coded key is generated by an electronic payment server for use by the electronic payment provider to authenticate the use of the communication device. The user is a member of the electronic payment platform. Different payment platform operators can set their own compression method for the coded key. In some embodiments, although the electronic payment server only transmits the encryption key and the key code to the communication device, the electronic payment server can transmit more than two keys to the communication device for the communication device to encrypt. The operation is therefore not limited to the embodiment shown in FIG. 3A.

Next, in step S315, the communication device can receive one of the first transaction messages transmitted by the user, for example, the user selects the transaction APP before entering the MRT station. After receiving the first transaction message transmitted by the user, in step S320, the communication device generates the first payment authorization transaction data corresponding to the first transaction message by using the compression key and the encryption key, where the first payment authorization transaction data It can be a quick response code, near field communication message, audio signal, light wave signal and other data. In addition, the first payment authorization transaction material has a valid time, for example, 60 seconds. If the valid time is exceeded, the communication device will regenerate the payment authorization transaction data. In one embodiment, the communication device can encrypt the first payment authorization transaction data using an encryption algorithm such as a TDES (Triple DES) or AES (Advanced Encryption Standard) algorithm. Moreover, in another embodiment, the communication device can compress the first payment authorization transaction data using the SHA256 algorithm.

Then, in step S325, the communication device can transmit the first payment authorization transaction data to the first entrance and exit verification device. In an embodiment, the first access verification device may have a reading device for reading information generated by the communication device (such as a quick response code), an NFC message, an audio signal, a light wave signal, and the like. In step S330, the first gateway verification means determines whether the first payment authorization transaction data can be decrypted using the encryption key obtained from step S305.

If the first gateway verification device can decrypt the first payment using the encryption key In the license transaction data, in step S335, the first portal verification device transmits a first notification message to the management server to notify the management server that the communication device has passed the first portal authentication device. In an embodiment, the first notification message may include at least an undecrypted first payment authorization transaction data and a first entry and exit information, wherein the first incoming and outgoing information is the first time through the first entrance and exit verification device, and the first One of the first locations where the entrance verification device is located. In another embodiment, the first notification message may include at least the decrypted first payment authorization transaction data and the first incoming and outgoing information, wherein the first incoming and outgoing information is the first time of passing the first access verification device, and the first The first location where the entrance and exit verification device is located.

Conversely, if the first gateway verification device cannot decrypt the first payment authorization transaction data by using the encryption key, the first portal verification device displays an error message and transmits the error message to the management server to notify the management server. The decryption of this first payment authorization transaction data failed.

After the management server receives the first notification message, in step S340, the management server forwards the first notification message to the electronic payment server. After receiving the first notification message, the electronic payment server may verify the first notification message in step S345. In an embodiment, if the first notification message transmitted by the first gateway verification device includes the undecrypted first payment authorization transaction data, the electronic payment server decrypts the first payment by using the pressure key and the encryption key. Authorized transaction information. In another embodiment, if the first notification message transmitted by the first gateway verification device includes the first payment authorization transaction data that has been decrypted by the first gateway verification device through the encryption key, the electronic payment server only needs to The first payment authorization transaction data is decrypted using the overprint key. When the imprinting key and/or the encryption key can decrypt the first payment authorization transaction data, the electronic payment server verifies the success of the first notification message. In other words, Since the coded key is used by the electronic payment provider to authenticate the user who uses the communication device as a member of the electronic payment platform, if the electronic payment server can use the pressure key to decrypt the first payment authorization transaction data, it means electronic payment. The server confirms that the user using the communication device is a member of the electronic payment platform. When the payment authorization transaction data is tampered with or repeatedly transmitted, the electronic payment server can perform the operation after decryption.

Conversely, if the electronic payment server cannot decrypt the first payment authorization transaction data using the overprint key and the encryption key, the first notification message verification fails. The electronic payment server may transmit a failure message to the management server to notify the management server that the first notification message verification failed.

After the electronic payment server verifies the successful first notification message, in step S350, the electronic payment server may transmit a first pass information to the communication device to indicate that the communication device has successfully passed the first entrance and exit verification device.

In an embodiment, Figure 3A may be applicable to the use of a single payment authorization. For example, a user can enter a movie theater or take a bus in a single payment. In this case, the first pass information may include at least one charge information, and the charge information may include at least one of the following: a user name, a charge amount, and a chargeback time.

FIG. 3B is a message sequence diagram showing electronic charging by the communication device according to an embodiment of the present disclosure through the second gateway verification device. And Figure 3B can be continued after the step of Figure 3A. In other words, the user first passes the first entrance and exit verification device and then passes through the second entrance and exit verification device. For example, the user may first enter a MRT station through the first entrance and exit verification device, and then leave the other MRT station through the second entrance and exit verification device. As another example, the user can pass the first out The entrance verification device enters a playground and exits the playground through the second entrance verification device.

It should be noted that the first entrance and exit verification device may also be the second entrance and exit verification device. In other words, the user can enter/leave a location through the same entrance verification device. However, for convenience of description, the second port entry verification device is still described in FIG. 3B, but those skilled in the art can understand that the disclosure is not limited thereto.

As in Figure 3A, the communication device in Figure 3B has also been pre-downloaded by the user and installed with its proprietary transaction application developed by the management server.

First, in step S305 in FIG. 3A, the management server can respectively transmit an encryption key to the electronic payment server and the second entrance and exit verification device. It should be noted that the time point at which this step is performed may be the same as step S305 in FIG. 3A. In other words, the management server can transmit the encryption key to the electronic payment server, the first entrance and exit verification device, and the second entrance and exit verification device, respectively. In an embodiment, the management server may update the encryption key according to a preset time, and transmit the updated encryption key to the electronic payment server and the second entrance and exit verification device, wherein the preset time is an example but not limited to 24 hour. The management server can also preset the activation time of the encryption key, such as the 48 hours after the update.

In step S355, the communication device can receive a second transaction message transmitted by the user. For example, the user selects the transaction APP before leaving the MRT station. After receiving the second transaction message transmitted by the user, in step S360, the communication device generates a second payment authorization transaction data corresponding to the second transaction message by using the compression key and the encryption key, wherein the second payment authorization transaction data It can be a quick response code, near field communication message, audio signal, light wave signal and other data. In addition, this second payment is granted The rights transaction data has a valid time, for example, 60 seconds. If the valid time is exceeded, the communication device will regenerate the payment authorization transaction data.

Next, in step S365, the communication device may transmit the second payment authorization transaction data to the second portal verification device. In an embodiment, the second access verification device may have a reading device for reading information such as an image (such as a quick response code), an NFC message, an audio signal, and a light wave signal generated by the communication device. In step S370, the second gateway verification means determines whether the second payment authorization transaction data can be decrypted using the encryption key obtained from step S305.

If the first gateway verification device can decrypt the second payment authorization transaction data by using the encryption key, in step S375, the second portal verification device transmits a second notification message to the management server to notify the management server that the communication device has passed the Two entrance and exit verification devices. In an embodiment, the second notification message may include at least an undecrypted second payment authorization transaction data and a second entry and exit information, wherein the second entry and exit information is a second time through the second entrance and exit verification device, and The second location where the entrance and exit verification device is located. In another embodiment, the second notification message may include at least the decrypted second payment authorization transaction data and the second incoming and outgoing information, wherein the second incoming and outgoing information is the second time through the second entrance and exit verification device, and the second The second location where the entrance and exit verification device is located.

Conversely, if the second gateway verification device cannot decrypt the second payment authorization transaction data by using the encryption key, the second portal verification device displays an error message and transmits the error message to the management server to notify the management server. The decryption of this second payment authorization transaction data failed.

After the management server receives the second notification message, in step S380, the management server forwards the second notification message to the electronic payment server. pay online After receiving the second notification message, the server may verify the second notification message in step S385. In an embodiment, if the second notification message transmitted by the second gateway verification device includes the undecrypted second payment authorization transaction data, the electronic payment server decrypts the second payment by using the pressure key and the encryption key. Authorized transaction information. In another embodiment, if the second notification message transmitted by the second gateway verification device includes the second payment authorization transaction data that has been decrypted by the second portal authentication device through the encryption key, the electronic payment server only needs to The second payment authorization transaction data is decrypted using the stamp key. When the overprint key and/or the encryption key can decrypt the second payment authorization transaction data, the electronic payment server verifies that the second notification message is successful. In other words, since the coded key is used by the electronic payment provider to authenticate the user who uses the communication device as a member of the electronic payment platform, if the electronic payment server can decrypt the second payment authorization transaction data using the pressure key, The electronic payment server confirms that the user using the communication device is a member of the electronic payment platform.

Conversely, if the electronic payment server cannot decrypt the second payment authorization transaction data using the code key and the encryption key, the second notification message verification fails. The electronic payment server may transmit a failure message to the management server to notify the management server that the second notification message verification fails.

After the electronic payment server verifies the successful second notification message, in step S390, the electronic payment server may transmit a second pass information to the communication device to indicate that the communication device has successfully passed the second entrance and exit verification device, wherein the second pass The information may include at least one deduction information, and the deduction information may include at least one of the following: a user name, a deduction amount, and a deduction time. In another embodiment, the management server can transmit a payment information to the electronic payment server in a fixed period. After the electronic payment server receives the payment information, verify the payment information and return a Please send the results to the management server to notify the payment.

4 is a flow chart showing a method 400 of electronic charging according to an embodiment of the present disclosure, the method 400 of which can be used in the electronic toll collection system 100 of FIG. For example, FIG. 4 can be used when a user enters a place through the entrance and exit verification device by the communication device.

In step S405, the management server transmits an encryption key to the electronic payment server and the first entrance and exit verification device. In step S410, after receiving the encryption key, the electronic payment server transmits the encryption key and a pressure code key to the communication device. Next, in step S415, the communication device receives a first transaction message and generates a first payment authorization transaction data corresponding to one of the first transaction messages using the pin code key and the encryption key. In step S420, the communication device transmits the first payment authorization transaction data to the first entrance and exit verification device.

Further, in step S425, the first gateway verification means determines whether the first payment authorization transaction data can be decrypted using the encryption key. When the first portal verification device can decrypt the first payment authorization transaction data by using the encryption key (Yes in step S425), in step S430, a first notification message is transmitted to the management server to notify the management server. The above communication device has passed the first entrance and exit verification device. When the first portal verification device cannot decrypt the first payment authorization transaction data using the encryption key (NO in step S425), in step S435, the first portal verification device may display an error message and transmit the error message. To the management server to notify the management server that the first payment authorization transaction data decryption failed.

FIG. 5 is a flow chart showing a method 500 of electronic charging according to an embodiment of the present disclosure, the method 500 of which can be used in the electronic toll collection system 100 of FIG. It should be noted that, after the fifth picture is used in the process of FIG. 4, the user wants to use the communication device. The situation is left by another exit verification device. In other words, the communication device has received the encryption key and the coded key transmitted by the electronic payment server.

In step S505, the management server transmits an encryption key to the second gateway verification device. In step S510, after the communication device has passed the first gateway verification device, a second transaction message may be received, and the second payment authorization transaction data corresponding to one of the second transaction messages is generated using the code key and the encryption key.

Next, in step S515, the communication device transmits the second payment authorization transaction data to the second portal verification device. In step S520, the second gateway verification means determines whether the second payment authorization transaction data can be decrypted using the encryption key. When the second gateway verification device can decrypt the second payment authorization transaction data by using the encryption key (YES in step S520), in step S525, the second portal verification device transmits a second notification message to the management server. To notify the management server that the communication device has passed the second entrance and exit verification device. When the second gateway verification device cannot decrypt the second payment authorization transaction data using the encryption key (NO in step S520), in step S530, the second portal verification device may display an error message and transmit the error message. To the management server to notify the management server that the second payment authorization transaction data decryption failed.

6 is a flow chart showing a method 600 of electronic charging in an offline mode according to an embodiment of the present disclosure, the method 600 being applicable to the communication device 130 of FIG. The communication device can perform the steps of method 600 after receiving the first transaction message.

In step S605, the communication device determines whether it is in an offline mode. In other words, the communication device determines if it is not connected to the network. When it is judged that the communication device is in the offline mode (YES in step S605), in step S610, the judgment is made. Whether the one of the previous payment authorization transaction data is generated when the communication device is in the offline mode is generated. When it is determined that the communication device is in the offline mode (NO in step S605), in step S625, the communication device can directly generate one of the first payment authorization transactions corresponding to the first transaction message by using the pin code key and the encryption key. data.

When the currently generated payment authorization transaction data is generated when the communication device is in the offline mode (YES in step S610), in step S615, the communication device determines the offline start time to one of the current time of receiving the first transaction message. Whether the length of time is within an offline period. When the current payment authorization transaction data is not generated when the communication device is in the offline mode (NO in step S610), in step S630, the communication device generates the corresponding first transaction message by using the compression key and the encryption key. One of the offline payment authorization transaction data, and records the offline start time of one of the offline payment authorization transaction data generated.

When the length of time is within the offline period (YES in step S615), in step S620, the communication device generates the offline payment authorization transaction data corresponding to the first transaction message using the pin code key and the encryption key. When the length of time has exceeded the offline period (NO in step S615), in step S635, the communication device cannot generate the offline payment authorization transaction data corresponding to the first transaction message using the pin code key and the encryption key.

In more detail, the present disclosure provides a context in which a communication device can also use electronic payment in an offline mode. The communication device can generate offline payment authorization transaction data offline during one of the offline settings (one of the offline payment authorization transaction data offline start time to the current time). However, since the management server periodically updates the encryption key and transmits the updated encryption key to the electronic payment server and the first entrance and exit verification device. Therefore, the system can set an offline Buffer period. During this offline buffering period, the gateway verification device can store the updated encryption key and the unupdated encryption key to verify the offline payment authorization transaction data still encrypted with the unupdated encryption key. Through this method, the user's communication device does not need to be connected to the network, and the offline payment authorization transaction data can still be generated to pass the entrance and exit verification device. When the offline time set by the system is exceeded, the communication device cannot generate the offline payment authorization transaction data by using the unupdated encryption key to protect the security of the user and the system.

In addition to determining whether to generate an offline payment authorization transaction data corresponding to the first transaction message in an offline period in step S615, in another embodiment, the communication device may further encrypt the validity period of the key or generate an offline payment authorization. The number of transaction data is used to determine whether to generate offline payment authorization transaction data. For example, when the communication device receives the first transaction message in the offline mode, the communication device can determine whether the validity period of the encryption key has expired. If the validity period of the encryption key has not expired, the communication device may generate offline payment authorization transaction data corresponding to the first transaction message. As another example, when the communication device receives the first transaction message in the offline mode, the communication device can determine whether the number of times the offline payment authorization transaction data is currently generated exceeds a preset value (for example, 2 times). If the number of times the offline payment authorization transaction data is generated does not exceed the preset value, the communication device may generate an offline payment authorization transaction data corresponding to the first transaction message.

7A-7B are diagrams showing a content table 700 of payment authorization transaction data according to an embodiment of the present disclosure. As shown, the table 700 can include parameter fields, type fields, required fields, description fields, and remark fields. The parameter field may include at least a payer code (PayID) and an encrypted data (Data). The encrypted material content may include at least a payment provider member number (MerchantID), a time stamp (TimeStamp), Check code (CheckMacValue). In another embodiment, if the system is used in mass transit such as a MRT or a bus. The encrypted data content may further include an inbound station code (Inbound) and an inbound time stamp (InboundTimeStamp).

In addition, central processor 208 can also execute code 212 to present the acts and steps described in the above-described embodiments, or other descriptions of what is described in the specification.

Therefore, the electronic charging method and system proposed by the present disclosure can reduce the time for the user to pass the entrance and exit verification device because only one encryption key is needed to verify the payment authorization transaction data transmitted by the communication device. In addition, the disclosure further proposes a pressure-coded key for the communication device to press the payment authorization transaction data to avoid the tampering of the payment authorization transaction data, and the system security.

The above embodiments are described using a variety of angles. It will be apparent that the teachings herein may be presented in a variety of ways, and that any particular structure or function disclosed in the examples is merely representative. In light of the teachings herein, anyone skilled in the art will appreciate that the content presented herein can be independently rendered in various different types or in a variety of different forms. By way of example, it may be implemented by some means or by some means in any manner as mentioned in the foregoing. The implementation of one device or the execution of one mode may be implemented in any one or more of the types discussed above with any other architecture, or functionality, or architecture and functionality.

Those skilled in the art will understand that messages and signals can be presented in a variety of different technologies and techniques. For example, all of the data, instructions, commands, messages, signals, bits, symbols, and chips that may be referenced above may be volts, currents, electromagnetic waves, magnetic or magnetic particles, light fields or light particles, or more. Any combination is presented.

Those skilled in the art will appreciate that various illustrative descriptions are described herein. Logic blocks, modules, processors, devices, circuits, and computational steps are available to the electronic hardware available in the various situations disclosed above (eg, digital implementations using source coding or other techniques, analog implementations, or a combination of both) ), various forms of programs or design codes linked to instructions (referred to as "software" or "software modules" for convenience in the text), or a combination of the two. To clearly illustrate the interchangeability of the hardware and software, a variety of descriptive elements, blocks, modules, circuits, and steps are generally described above in terms of functionality. Whether this feature is presented in hardware or software, it will depend on the specific application and design constraints imposed on the overall system. The person skilled in the art can implement the described functions in a variety of different ways for each particular application, but the implementation of this decision should not be interpreted as deviating from the scope disclosed herein.

In addition, various illustrative logic blocks, modules, and circuits, and various aspects disclosed herein may be implemented in an integrated circuit (IC), an access terminal, an access point, or an integrated circuit. , access terminal, access point execution. The integrated circuit can be a general-purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a Field Programmable Gate Array (FPGA), or the like. Programmable logic device, discrete gate or transistor logic, discrete hardware components, electronic components, optical components, mechanical components, or any combination of the above to perform the functions described herein And may execute an execution code or instruction that exists in the integrated circuit, outside the integrated circuit, or both. A general purpose processor may be a microprocessor, but could be any conventional processor, controller, microcontroller, or state machine. The processor may be composed of a combination of computer devices, such as a combination of a digital signal processor (DSP) and a microcomputer, a plurality of microcomputers, a group of microcomputers, and a digital signal processor. Core, or any other similar configuration.

Any specific sequence or layering of the procedures disclosed herein is by way of example only. Based on design preferences, it must be understood that any specific order or hierarchy of steps in the program may be rearranged within the scope of the disclosure. The accompanying claims are intended to be illustrative of a

The use of ordinal numbers such as "first", "second", "third", etc., used to modify elements in the scope of the patent application does not imply any priority, prioritization, prioritization between elements, or method. The order of the steps, and only used as an identifier to distinguish different elements having the same name (with different ordinal numbers).

Although the disclosure has been described above by way of example, it is not intended to limit the scope of the present invention, and the scope of protection of the present invention can be made without departing from the spirit and scope of the disclosure. This is subject to the definition of the scope of the patent application.

Claims (20)

An electronic toll collection system comprising: an electronic payment server; a communication device coupled to the electronic payment server; a first access verification device; and a management server coupled to the electronic payment server and the An exit verification device; wherein the management server transmits an encryption key to the electronic payment server and the first portal verification device; and after receiving the encryption key, the electronic payment server transmits the encryption key and a pressure Transmitting a key to the communication device; the communication device receives a first transaction message, and generates a first payment authorization transaction data corresponding to one of the first transaction messages by using the code key and the encryption key; the communication device Transmitting the first payment authorization transaction data to the first port entry verification device; the first port entry verification device determines whether the first payment authorization transaction data can be decrypted by using the encryption key; and when the first port entry verification device can use the encryption When the key decrypts the first payment authorization transaction data, Sending a first notification message to the management server, the management server to notify the communications device has been verified through said first gate means, wherein said first notification message comprising at least the The first payment authorization transaction data; after receiving the first notification message, the management server forwards the first notification message to the electronic payment server; after receiving the first notification message, the electronic payment server uses the above The coded key and/or the above-mentioned encryption key decryption includes the first payment authorization transaction data of the first notification message to verify the first notification message; when the above-mentioned compression key and/or the encryption key can Decrypting the first payment authorization transaction data, the electronic payment server successfully verifying the first notification message; and when the electronic payment server successfully verifies the first notification message, transmitting a first pass message to the communication device, In order to display that the communication device has successfully passed the first portal verification device; wherein the first notification message includes at least the first payment authorization transaction data and a first entry and exit information after undecrypted and/or decrypted, wherein the first incoming and outgoing information system In order to pass the first time of the first entrance and exit verification device, the first time, and the first access One place where the first verification means. The electronic toll collection system of claim 1, wherein the charging system further comprises: a second access verification device coupled to the management server to receive the encryption key transmitted by the management server; After the communication device has passed the first entrance and exit verification device, The communication device receives a second transaction message, and generates a second payment authorization transaction data corresponding to one of the second transaction messages by using the above-mentioned compression key and the encryption key; the communication device transmits the second payment authorization transaction data To the second exit verification device; the second portal verification device determines whether the second payment authorization transaction data can be decrypted using the encryption key; and when the second portal verification device can decrypt the second payment using the encryption key When the transaction data is authorized, a second notification message is transmitted to the management server to notify the management server that the communication device has passed the second entrance verification device. The electronic charging system of claim 2, wherein after the management server receives the second notification message, forwarding the second notification message to the electronic payment server; the electronic payment server is receiving After the second notification message, verifying the second notification message; and after the electronic payment server successfully verifies the second notification message, transmitting a second pass message to the communication device to indicate that the communication device has successfully passed the above The second entrance and exit verification device. The electronic charging system of claim 2, wherein the second notification message includes at least the second payment authorization transaction data and a second entry and exit information, wherein the incoming and outgoing information is passed through the second entrance verification device. a second time, and the second exit verification device is located a second location. The electronic charging system of claim 2, wherein the second notification message includes at least the decrypted second payment authorization transaction data and a second entry and exit information, wherein the second entry and exit information is One of the two exit verification devices is second time, and one of the second locations where the second entrance verification device is located. The electronic charging system of claim 4, wherein the verifying the second notification message is performed by the electronic payment server using the above-mentioned compression key and/or the encryption key to be included in the second notification message. The second payment authorization transaction data; and when the above-mentioned compression key and/or the encryption key can decrypt the second payment authorization transaction data, the electronic payment server verifies the success of the second notification message. The electronic charging system of claim 2, wherein the second passing information includes at least one deduction information; wherein the debit information includes at least one of: a user name, a deduction amount, and a Deduction time. The electronic toll collection system of claim 1, wherein the first payment authorization transaction data is a graphic barcode, a Near Field Communicating (NFC) message, an audio signal or a light wave signal. The electronic charging system of claim 1, wherein after the receiving, by the communication device, the first transaction message, the communication device further determines whether the communication device is in an offline mode; When it is determined that the communication device is in the offline mode, determining whether the previous payment authorization transaction data is generated when the communication device is in the offline mode; the current generation of the payment authorization transaction data is not that the communication device is in the offline mode. When generated, generating the offline payment authorization transaction data corresponding to one of the first transaction messages by using the above-mentioned compression key and the encryption key, and recording an offline start time of generating the offline payment authorization transaction data; the current generation payment authorization When the transaction data is generated by the offline device in the offline mode, the communication device determines whether the time length of the offline start time to one of the current time of receiving the first transaction message is within an offline period; when the time length is in the offline period During the period, the communication device generates the offline payment authorization transaction data corresponding to the first transaction message by using the above-mentioned compression key and the encryption key; and when the length of time exceeds the offline period, the communication device displays an error message. The electronic toll collection system of claim 1, wherein the management server updates the encryption key according to a preset time, and transmits the updated encryption key to the electronic payment server and the first entrance and exit. Verification device. An electronic charging method for use in an electronic charging system includes: transmitting an encryption key to an electronic payment server by a management server And a first access verification device; after receiving the encryption key by the electronic payment server, transmitting the encryption key and a pressure code key to a communication device; and receiving, by the communication device, a first transaction message, And using the above-mentioned compression key and the encryption key to generate a first payment authorization transaction data corresponding to one of the first transaction messages; and transmitting, by the communication device, the first payment authorization transaction data to the first entrance verification device; Determining, by the first gateway verification device, whether the first payment authorization transaction data can be decrypted by using the encryption key; and when the first portal verification device can decrypt the first payment authorization transaction data by using the encryption key, transmitting one Transmitting the first notification message to the management server to notify the management server that the communication device has passed the first portal verification device, wherein the first notification message includes at least the first payment authorization transaction data; and receiving at the management server After the first notification message, the above management server is turned The first notification message is sent to the electronic payment server; after receiving the first notification message, the electronic payment server decrypts the first notification message by using the compression key and/or the encryption key. The first payment authorization transaction data to verify the first notification message; when the above-mentioned pressure key and/or the encryption key can decrypt the first payment When the transaction information is authorized, the electronic payment server successfully verifies the first notification message; and after the electronic payment server verifies the success of the first notification message, transmitting a first pass message to the communication device to display the communication device The first entry and exit verification device has been successfully passed; wherein the first notification message includes at least the first payment authorization transaction data and a first entry and exit information after the decryption and/or decryption, wherein the first entry and exit information is through the first One of the first time of the entrance and exit verification device, and one of the first locations where the first entrance verification device is located. The electronic charging method of claim 11, wherein the method further comprises: receiving, by a second gateway verification device, the encryption key transmitted by the management server; wherein the communication device has passed the above After the portal authentication device, the second communication message is received by the communication device, and the second payment authorization transaction data corresponding to the second transaction message is generated by using the compression key and the encryption key; The device transmits the second payment authorization transaction data to the second exit verification device; the second portal verification device determines whether the second payment authorization transaction data can be decrypted using the encryption key; and when the second portal verification device can Decrypt using the above encryption key When the second payment authorization transaction data is described, a second notification message is sent to the management server to notify the management server that the communication device has passed the second entrance verification device. The electronic charging method of claim 12, wherein after the management server receives the second notification message, the method further comprises: transferring the second notification message to the electronic payment by using the management server Serving the second notification message after receiving the second notification message by the electronic payment server; and transmitting a second notification message to the electronic payment server after the second notification message is successfully verified The communication device is configured to display that the communication device has successfully passed the second entrance and exit verification device. The electronic charging method of claim 12, wherein the second notification message includes at least the second payment authorization transaction data and a second entry and exit information, wherein the incoming and outgoing information is passed through the second entrance verification device. a second time, and one of the second locations where the second entrance verification device is located. The electronic charging method of claim 12, wherein the second notification message includes at least the decrypted second payment authorization transaction data and a second entry and exit information, wherein the second entry and exit information is One of the second entrance and exit verification devices, the second time, and the second entrance and exit Verify that the device is in one of the second locations. The electronic charging method of claim 14, wherein the step of verifying the second notification message is performed by the electronic payment server using the above-mentioned compression key and/or the encryption key to be included in the second And the second payment authorization transaction data of the notification message; and when the above-mentioned compression key and/or the encryption key can decrypt the second payment authorization transaction data, the electronic payment server verifies the success of the second notification message. The electronic charging method of claim 12, wherein the second passing information includes at least one deduction information; wherein the debit information includes at least one of: a user name, a deduction amount, and One deduction time. The electronic charging method according to claim 11, wherein the first payment authorization transaction data is a graphic barcode, a Near Field Communicating (NFC) message, an audio signal or a light wave signal. The electronic charging method of claim 11, wherein after the receiving the first transaction message, the method further comprises: determining, by the communication device, whether the device is in an offline mode; In the offline mode, determining whether one of the previous payment authorization transaction data is generated when the communication device is in the offline mode; when the current payment authorization transaction data is not generated when the communication device is in the offline mode, the pressure is used. Code key and the above encryption key Generating an offline payment authorization transaction data corresponding to one of the first transaction messages, and recording an offline start time of generating the offline payment authorization transaction data; when the current payment authorization transaction data is generated by the communication device being in the offline mode, The communication device determines whether the time length of the offline start time to the current time of receiving one of the first transaction messages is within an offline period; and when the length of time is within the offline period, the communication device uses the above-mentioned compression key and the above The encryption key generates the offline payment authorization transaction data corresponding to the first transaction message; and when the length of time exceeds the offline period, the communication device displays an error message. The electronic charging method of claim 11, wherein the management server updates the encryption key according to a preset time, and transmits the updated encryption key to the electronic payment server and the first entrance and exit. Verification device.