TWI642010B - Electronic transaction password reset system and method thereof - Google Patents

Abstract

The invention provides a password reset system for electronic transaction and a method thereof, comprising a mobile device signal connection platform server and a card issuing server, firstly selecting a password forgetting or locking setting by using a mobile device, and the mobile device corresponding to the virtual card by using a preset virtual card Enter the verification data, transfer the verification data entered to the platform server, and confirm the verification data by the platform server and the card issuer server. After confirmation, the self-issued card server receives the password message, and enters the password message via the platform server and the card issuer. After the verification, the platform server starts the password reset and the new password is set by the mobile device. The invention utilizes a third-party platform server and a rigorous verification process to increase the security of the password when the password is forgotten or locked, and the virtual card is prevented from being stolen.

Description

Electronic transaction password reset system and method thereof

The present invention relates to a system having a reset password and a method thereof, and more particularly to a mobile device that can use a virtual card, which uses a signal connection with a card issuing server and a third-party platform server, and when the password is forgotten or locked The formed electronic transaction password reset system and method thereof.

Since the last century, after the global Internet has become popular, with the growth of technology products and the popularity of the Internet, new business models have emerged, such as the development of e-commerce. Selling goods online, making transactions, and completing payments, allowing users to browse products at home. Or with the popularity of mobile devices such as smart phones, combined with network transmission, to improve the way consumers spend shopping, such as e-wallet or cloud mobile payment, so that users do not have to bring too much cash and cards on their bodies. To avoid inconvenience and trouble when the user's wallet is lost.

Cloud mobile payment mainly utilizes the user's mobile device, through short-range wireless connection technology such as Neat Field Communication (NFC), combined with the network cloud to achieve near-end mobile payment, but using NFC technology , there is a lack of security. Therefore, a Host Card Emulation (HCE) system is generated, and the NFC standard communication method of ISO 14443 and ISO 7816 is provided. Although the information provided by the user's smart phone or the protection for mobile payment is limited, the HCE can With a powerful back-end server platform to reduce the amount of smart data stored on mobile phones, or limit the number of uses and time, use HCE's powerful back-end server platform for risk detection and control to reduce the security of mobile payments. risk.

Therefore, in view of the above advantages of HCE action payment, the present invention provides a password reset system for electronic transactions and a method thereof, and provides a more secure password reset method for mobile payment to avoid its own electronic transaction application. Passwords are easily stolen by people with a heart.

The main purpose of the present invention is to provide a password reset system for electronic transactions and a method thereof. When a user forgets a password or a password is locked, a third-party platform server is used as a mobile device and a card issuing unit of the user end. The communication bridge, and indeed the mobile device's message transmission to the card issuer, to become the management medium for password reset, through a layer of protection, to avoid the virtual card in the mobile device is easily stolen by the mind.

Another object of the present invention is to provide a password reset system for electronic transactions and a method thereof, which can utilize a personal telephone or an identity card such as a user when the user forgets the password or accidentally makes a mistake too many times. Personal verification data such as the font size and the password information of the card issuer, the user only needs to correctly input all the personal data on the mobile device, and then re-set the password to avoid the trouble of not using the virtual card for forgetting the password.

In order to achieve the above object, the present invention provides a password resetting system for electronic transactions, comprising a mobile device, wherein a virtual card is provided in the mobile device, and the mobile device can perform setting when the password is forgotten or locked, and input in the setting. a verification data; a platform server is connected to the mobile device and receives the verification data transmitted by the mobile device; and a card issuing server is connected to the platform server and the mobile device, and the card issuing server receives and confirms the transmission transmitted by the platform server. Verifying the data, and then transmitting a password message to the mobile device. After the mobile device enters the password message and returns it to the card issuing server through the platform server, the card issuing server causes the platform server to restart the password setting to make the action. The device can start setting a new password.

In order to achieve the above object, the present invention also provides a password resetting method for an electronic transaction, comprising the steps of: using a mobile device to select a password forgotten or locked setting, and the mobile device further inputs a corresponding virtual card by using a preset virtual card. Verification data, the input verification data is transmitted to a platform server, and the verification data is confirmed by the platform server and the card issuing server of the preset virtual card; the mobile device receives a password message from the server; the mobile device inputs The password message and the password message is transmitted to the platform server to verify the password message by the platform server and the card issuing server; after the card issuing server verifies the verification, the platform server starts the password resetting; finally, the mobile device uses the The platform server password is reset to set a new set of passwords.

In the mobile device of the present invention, an application is further provided, which is provided with a preset virtual card, and can perform setting of password forgetting or locking.

In the card issuing server of the present invention, the password message is directly transmitted to the mobile device, for example, in a short message.

At least one virtual card may be set in the mobile device of the present invention, and the first virtual card set by the mobile device may be regarded as a preset virtual card, or the mobile device may select a virtual card in the virtual card. As a preset virtual card.

The verification data of the present invention is provided by the card issuing server as information for verifying the identity of the user of the mobile device.

Before the step of inputting the verification data by the preset virtual card, the mobile device of the present invention further includes the following steps: determining whether the mobile device is provided with a virtual card, and if so, the mobile device directly inputs the verification data, if otherwise, the mobile device performs security problems. Check and judge whether the answer to the security question is correct. When the answer is correct, the platform server restarts the password setting and allows the mobile device to set a new password. If the answer is incorrect, re-register and obtain it from the platform server. A unique identifier.

The purpose, technical contents, features and effects achieved by the present invention will be more readily understood by the detailed description of the embodiments and the accompanying drawings.

Nowadays, the use of mobile devices for payment has become a trend of future consumer payments. In addition to using mobile devices as e-wallets for small payments, the HCE system can be used to transfer credit cards issued by banks or card issuers. The financial card or various stored value cards become virtual cards and are stored in the user's mobile device to form an innovative concept of a digital wallet, which reduces the number of objects that the user needs to carry on the body in the future, so the digital wallet In the middle, it is more important to keep the security of the virtual card.

First, referring to the first figure of the present invention, an electronic transaction password resetting system 10 includes a mobile device 12, wherein an application 122 is disposed, and the application 122 is provided with a virtual card 124, and the virtual card 124 is provided. The credit card, the financial card, the charge card, the stored value card or the electronic ticket smart card may be used. The present invention does not limit the number of the virtual card 124. In this embodiment, a virtual card 124 representing a credit card is taken as an example, and is preset. The virtual card 124, and the mobile device 12 is a smart phone and the application 122 is a mobile application (Mobile Application), but the creation does not limit whether the mobile device 12 is not a smart phone, or a tablet. A platform server 14 is connected to the mobile device 12 and a card issuing server 16. In this embodiment, the signal connection of the mobile device 12, the platform server and the card issuing server 16 is a wireless connection mode, and the card issuing server 16 is provided. As the server of the card issuing institution of the specific virtual card 124, if the virtual card 124 is issued by Yushan Bank, the card issuing server 16 is the server of Yushan Bank. In the present invention, it is not limited to which bank the virtual card 124 and the card issuing server 16 should provide.

In the above paragraph, the mobile device 12 can perform the setting of the password forgotten or the password is locked. For example, when the application 122 is used to use the preset virtual card, the password is logged in, and the user forgets the password of the application 122, or This application 122 has a password setting error for more than a few times to prevent the person from trying to crack the password. At this time, the user can enter the verification data to log in. The verification data is the identity information provided by the card issuing server 16 as the user of the verification mobile device 12, such as the date of birth of the user, the identity card number, or various self-identifications. Set data data. The platform server 14 can receive the verification data transmitted by the mobile device 12, and then transmit it to the card issuing server 16 for confirmation. After the card issuing server 16 confirms that the verification data is correct, a password message is transmitted to the mobile device 12, this embodiment The password information is a One Time Password (OTP), for example, can be transmitted to the mobile device 12 by means of a short message to notify the user of the password message, and the user inputs the password message from the mobile device 12 to the platform. The server 14 and the platform server 14 are sent back to the card issuing server 16 to confirm the password message, and then the card issuing server 16 notifies the platform server 14 to restart the setting of the password, and the user then knows through the platform server 14. A new password can be set on the mobile device 12.

After explaining the connection relationship and the operation method of the present invention, the password reset method for the electronic transaction of the present invention will be described in detail. Please refer to the second figure of the present invention, and refer to the first figure at the same time. When the user wants to use the preset virtual card 124 and forgets the password or the password is locked, first, as shown in step S10, the mobile device 12 is used to select a password forgotten or password lock setting, for example, when the password is forgotten, the action can be clicked. The password of the application 122 in the device 12 is forgotten, or when the wrong password is entered too many times, the password lock of the application 122 in the mobile device 12 can be clicked when the password is locked for the next step. As shown in step S12, the mobile device 12 inputs a verification data correspondingly by the preset virtual card 124. At this time, the verification data corresponding to the preset virtual card 124 is recorded in the application 122, for example, the user's identity card number, The preset telephone number or birthday data, etc., the present invention does not limit the number and content of the verification data. As shown in step S14, the user inputs the verification data through the mobile device 12, and then transmits the verification data to the platform server 14. Then, the platform server 14 and the card issuing server 16 confirm the verification data, and proceeds to the next step. As shown in step S16, when the card issuing server 16 confirms that the verification data is correct, a password message is directly transmitted to the mobile device 12. For example, the user can accept a group of short messages with a password message from the mobile device 12. As shown in step S18, after the user knows the password message, the password information can be input into the mobile device 12, input into the application 122 of the mobile device 12, and transmitted to the platform server 14, and then served by the platform servo. The device 14 and the card issuing server 16 verify the password message. After the verification of the card issuer server 16 as shown in step S20, the platform server 14 is notified to enable the platform server 14 to prepare for resetting the activation password. As shown in step S22, when the platform server 14 is ready to initiate a password reset, the user can set a new set of passwords on the mobile device 12 to resolve the dilemma when the password is forgotten or the password is locked.

The above embodiment is a method for explaining password forgetting or password locking when the application of the mobile device has a virtual card. The present invention updates a step of determining whether a virtual card is provided, please refer to the third figure of the present invention, and Please refer to the first figure and the second figure at the same time. Before step S12 and after step S10, there is a step S11. As shown in step S11, it is first determined whether or not the virtual card 124 is provided in the mobile device 12. If the virtual card 124 is not provided in the mobile device 12, the process proceeds to step S24. As shown in step S24, the user can check the security problem on the mobile device 12. For example, the application 122 may set one or more questions for the user to respond to, and determine whether the user has a security question. If the answer is correct, if yes, proceed to step S26, restart the password setting by the platform server 14, and then reset a new set of passwords via the mobile device 12; if the user does not answer correctly for the security question, the user enters In step S28, the user needs to re-register with the mobile device 12. Then, please go back to the above step S11. If there is a virtual card 124 in the mobile device 12, then the process goes to step S12, and the mobile device 12 inputs a verification data correspondingly by the preset virtual card 124, but the subsequent steps are as above. In the following paragraphs, the subsequent steps after step S12 are continued until a new set of passwords can be set on the mobile device 12, and will not be described here.

The upper part is taken to explain in detail the detailed steps of step S28 in the third figure to explain the method of re-registration, and please refer to the fourth figure of the present invention, and refer to the first figure at the same time. First, as shown in step S280, the user uses the mobile device 12 to input his own mobile phone number and transmits it to the platform server 14 to proceed to the next step. As shown in step S282, the platform server 14 uses the user's phone number to send a verification message to the mobile device 12 in a short message manner, thereby confirming whether the phone number input by the user is correct, and the verification in this embodiment. The message is a single valid password. As shown in step S284, the user replies to the verification message from the mobile device 12 and inputs the received set of numbers for transmission to the platform server 14. As shown in step S286, the platform server 14 verifies whether the received number is a verification message to verify the correctness of the user's mobile number. As shown in step S288, after the verification is completed, the user can set his own security question and registration password in the mobile device 12, and transmit the set security question and registration password to the platform server 14 to self-platform servo. The device 14 obtains the identification code belonging to the user's own uniqueness, and completes the procedure of re-registration.

The invention utilizes a series of verification methods to avoid the intention of the person who is continually trying to crack the user's password, and uses the verification data to prevent others from taking the user's mobile device, and can easily change the password to protect the virtual card. It was stolen and stolen. Alternatively, the present invention utilizes the setting of the cryptographic message, and when an attempted person attempts to use the hacking program to attempt to crack the user's verification data, the mobile device still needs the mobile device to learn the cryptographic message. The invention can manage the verification data of the preset virtual card via the setting of the platform server, and serves as a communication bridge between the virtual card and the card issuing server of the card issuing institution, and through the setting of one platform server, the host card simulation system is further made. One layer of protection enhances the safety of the digital wallet. The number of virtual cards mentioned above is one. When the user stores a plurality of virtual cards in the mobile device, the platform server is required to manage the cards, and different card issuing servers may have different card issuing servers. However, the method of setting the preset virtual card may use the first virtual card set by the user as the preset virtual card, or the user may select one of the multiple virtual cards as the preset virtual card. The invention does not limit the selection of the preset virtual card.

The embodiments described above are merely illustrative of the technical spirit and the features of the present invention, and the objects of the present invention can be understood by those skilled in the art, and the scope of the present invention cannot be limited thereto. That is, the equivalent variations or modifications made by the spirit of the present invention should still be covered by the scope of the present invention.

10‧‧‧ password reset system

12‧‧‧Mobile devices

122‧‧‧Application

124‧‧‧Virtual Card

14‧‧‧ Platform Server

16‧‧‧ card issuing server

The first figure is a block diagram of a password reset system for an electronic transaction of the present invention. The second figure is a flow chart of the steps of the method for resetting the password of the electronic transaction of the present invention. The third figure is a flow chart of the steps of determining whether there is a virtual card between step S10 and step S12 in the second figure of the present invention. The fourth figure is a flow chart showing the steps of step S28 of the third figure in detail in the present invention.

Claims (13)

A method for resetting a password of an electronic transaction, comprising the steps of: selecting a password forgotten or locked setting by using a mobile device; the mobile device can set at least one virtual card, and the mobile device is provided with an application, and the first set is set The virtual card is a preset virtual card, or the application of the mobile device can select a virtual card as the preset virtual card from the at least one virtual card, when the application of the mobile device When the program does not have the virtual card, check the security question first, and determine whether the security question is correct. If yes, restart the password setting by a platform server. Otherwise, you need to re-register. When the application of the mobile device is provided with any of the virtual cards, the application of the mobile device uses the preset virtual card and correspondingly inputs a verification data; and transmits the verified verification data to the platform. The server is confirmed by the platform server and the card issuing server of the preset virtual card; receiving a password message from the card issuing server; inputting the password message And transmitting to the platform server, and verifying the password message by the platform server and the card issuing server; the card issuing server is successfully verified, so that the platform server initiates resetting of the password; and the mobile device The application is reset by the password of the platform server to set A new password. The password reset method of the electronic transaction described in claim 1, wherein the mobile device is a smart phone or a tablet, and the application is a mobile application (Mobile Application). The method for resetting an electronic transaction according to claim 1, wherein the card issuing server directly transmits the password message to the mobile device. The password reset method of the electronic transaction as claimed in claim 1, wherein the virtual card can represent a credit card, a financial card, a charge card, a stored value card or an electronic ticket smart card. The method for resetting a password for an electronic transaction as claimed in claim 1, wherein the verification data is provided by the card issuing server as information for verifying the identity of the user of the mobile device. The method for resetting an electronic transaction according to claim 1, wherein the password message is a One Time Password (OTP). The method for resetting the password of the electronic transaction as described in claim 1, wherein the step of re-registering further comprises: inputting, by the mobile device, the mobile phone number of the user and transmitting to the platform server; the platform server sends Verifying the message to the mobile device; replying to the verification message by the mobile device; the platform server verifies the correctness of the mobile phone number; and setting a security question and a registration password by the mobile device from the platform server Get a unique identification code. An electronic transaction password resetting system includes: a mobile device having an application, wherein the application is selectively provided with a virtual card, and the application of the mobile device can execute a password forgotten or locked Setting, the first virtual card set by the application of the mobile device is a preset virtual card, or the application of the mobile device can select one virtual card from the at least one virtual card. The preset virtual card, and when the application of the mobile device is provided with any of the virtual cards, a verification data may be input, and when the application device of the mobile device has not provided the virtual card, the mobile device may First, the application checks the security question to determine whether the security question is correct. If yes, reset the password. Otherwise, the mobile device needs to be re-registered. A platform server connects the signal to the signal. a mobile device, and receiving the verification data transmitted by the mobile device, and restarting the setting of the password of the mobile device; and a card issuing server, The signal is connected to the platform server and the mobile device, and the card issuing server receives and confirms the verification data transmitted by the platform server, and transmits a password message to the mobile device, and the card issuing server inputs through the mobile device. After the password message is returned and determined by the platform server, the platform server is restarted to set the password to enable the mobile device to set a new password. The password resetting system of the electronic transaction of claim 8, wherein the mobile device, the platform server and the card issuing server are connected by a wireless connection. The password resetting system of the electronic transaction of claim 8, wherein the mobile device is intelligent The mobile phone or tablet, and the application is a mobile application (Mobile Application, Mobile App). The password resetting system of the electronic transaction of claim 8, wherein the verification data is provided by the card issuing server as identity data for verifying the user of the mobile device. The password reset system of the electronic transaction of claim 8, wherein the password message is a One Time Password (OTP). The password reset system of the electronic transaction of claim 8, wherein the virtual card can represent a credit card, a financial card, a charge card, a stored value card, or an electronic ticket smart card.