TWI657399B - Method for performing anti-counterfeiting authentication on transaction voucher by using ultrasonic verification code and transaction verification method - Google Patents

Abstract

A method and method for verifying transaction vouchers by using ultrasonic verification codes. When a transaction voucher host establishes a secure two-dimensional code based on transaction request data, the secure two-dimensional code contains an ultrasonic verification code. And a transaction serial number; before the terminal device reading the secure two-dimensional code executes the payment, it returns the transaction serial number to the transaction voucher host, so that the transaction voucher host retrieves the corresponding ultrasonic verification code according to the transaction serial number and Converted into an ultrasonic file, the terminal device restores the ultrasonic file to an ultrasonic verification code after receiving it, and compares it with the ultrasonic verification code contained in the secure two-dimensional code. When the two are compared When they are consistent, it is determined that the secure QR code is a real transaction certificate; thereby, the authenticity and validity of the transaction certificate in the asset transaction process can be ensured.

Description

Method for performing anti-counterfeiting authentication on transaction voucher by using ultrasonic verification code and transaction verification method

The invention relates to an anti-counterfeiting authentication technology, in particular to a method using ultrasonic waves as a method of performing secondary authenticity verification (2FA) on transaction vouchers.

In the process of asset transactions, assets can include valuables, claims, real estate, etc. The mode of transaction behavior has gradually evolved from physical channels to virtual channels, such as various electronic transactions conducted through the Internet. For both parties to a transaction, in order to improve the security and credibility of the transaction, a transaction certificate issued by a third party unit will be added during the transaction, so that the two parties to the transaction can successfully realize the purchase and sale of assets on the basis of trusting the transaction certificate.

It can be seen that "transaction vouchers" play an extremely important role in the entire transaction process. If anyone else easily forges transaction vouchers, it will cause great losses to both parties to the transaction and seriously affect the stability of the transaction market. Therefore, it is really necessary to identify and verify the authenticity of transaction vouchers.

An object of the present invention is to provide a method based on an ultrasonic verification code as a secondary anti-counterfeit authentication, and the ultrasonic verification code is used to identify the authenticity of a transaction voucher.

In order to achieve the foregoing object, the method for performing anti-counterfeit authentication of a transaction voucher using an ultrasonic verification code of the present invention is executed by a transaction voucher host. The method includes: receiving transaction request data sent by a first terminal device, wherein the transaction The requested information includes the transaction currency, transaction amount and transaction serial number; Use a private key to encrypt the transaction request data and an ultrasonic verification code to generate a secure two-dimensional code, and return the secure two-dimensional code to the first terminal device for the first terminal device to provide the secure two The dimension code is read to a second terminal device, wherein the secure two-dimensional code is used as a transaction voucher; a transaction serial number received by the second terminal device is received, and the transaction serial number is the second terminal device to interpret the secure two-dimensional device. It is obtained after the code; according to the transaction serial number received from the second terminal device, a corresponding ultrasonic verification code is taken from a database, an ultrasonic file is generated and transmitted to the second terminal device; After translating the ultrasonic document, the ultrasonic verification code is taken out, so that the second terminal device can compare whether the ultrasonic verification code taken out from the ultrasonic file is consistent with the ultrasonic verification code taken out from the secure two-dimensional code.

In the above method, the transaction certificate host generates a two-dimensional security code with the private key it owns, and the second terminal device holding the corresponding public key decrypts it to obtain the ultrasonic verification code. When the transaction certificate host receives the second terminal, When the transaction serial number sent by the device, the corresponding ultrasonic verification code is taken out and converted into an ultrasonic file and returned to the second terminal device, which can provide the basis for the second terminal device to perform secondary authentication and improve the credibility of the transaction certificate. degree.

Another object of the present invention is to provide a transaction verification method using an ultrasonic verification code, comprising: using a first terminal device to send a transaction request data to a transaction voucher host, wherein the transaction request data includes a transaction currency, a transaction Amount and transaction serial number; the transaction certificate host encrypts the transaction request data and an ultrasonic verification code according to a private key corresponding to the first terminal device to generate a secure two-dimensional code, and returns the secure two-dimensional code To the first terminal device, wherein the ultrasonic verification code is generated by the transaction voucher host, and the secure two-dimensional code is used as a transaction voucher; A second terminal device is used to read the secure two-dimensional code from the first terminal device, wherein the second terminal device uses a corresponding public key to decipher the secure two-dimensional code, and takes out the secure two-dimensional code. The transaction serial number and the ultrasonic verification code; the transaction serial number in the secure two-dimensional code is transmitted to the transaction voucher host by the second terminal device; the transaction voucher host takes out the corresponding ultrasonic wave according to the transaction serial number returned by the second terminal device A verification code, and convert the ultrasound verification code into an ultrasound document, and return the ultrasound document to a second terminal device; use the second terminal device to interpret the ultrasound document to obtain an ultrasound verification code, wherein, The second terminal device compares whether the ultrasonic verification code obtained from the ultrasonic file is consistent with the ultrasonic verification code obtained from the secure two-dimensional code. If the two are consistent, the transaction voucher is authentic. The ultrasonic verification code is consistent, and the second terminal device performs a payment operation to the first terminal device.

The transaction verification method using an ultrasonic verification code ensures the reliability of both the first terminal device and the second terminal device when performing asset transactions. The ultrasonic verification code is used to achieve secondary authentication purposes and protect the second terminal device during transactions. In the process, real transaction credentials are used to prevent malicious third parties from altering or tampering with the transaction credentials.

10‧‧‧First terminal device

20‧‧‧Second terminal device

30‧‧‧Transaction voucher host

31‧‧‧Database

40‧‧‧Security QR code

50‧‧‧ Ultrasonic File

Figure 1: Schematic diagram of the execution system of the authoring transaction voucher verification method.

Figure 2: The sequence diagram of the transaction certificate verification performed by this author.

Figure 3: Schematic diagram of how to generate the ultrasonic verification code in this creation.

Figure 4: Schematic diagram of how to generate the ultrasound file in this creation.

Please refer to FIG. 1, this method for authorizing anti-counterfeiting authentication is composed of a transaction voucher host 30, which can communicate with a first terminal device 10 and a second terminal device 20, wherein the first terminal device 10 and the second terminal device 20 are two devices for performing transactions. In this embodiment, the first terminal device 10 may be a payment device or mobile device of a merchant, and the second terminal device 20 may be a consumer. Owned payment terminal devices, such as the consumer ’s own mobile device.

The transaction voucher host 30 is used to issue a transaction voucher during a transaction. The first terminal device 10 and the second terminal device 20 may first register with the transaction voucher host 30 to obtain their respective public keys (for example, public). key), so that the first terminal device 10 and the second terminal device 20 store respective public keys, and the transaction certificate host 30 has private keys (for example, private keys) corresponding to the public keys. As a result, after the data issued by the transaction voucher host 30 is encrypted by the private key, only recipients with the corresponding public key can be decrypted and restored. Therefore, the first terminal device 10 or the second terminal device 20 receives the transaction voucher. After the data issued by the host 30 can be decrypted and restored with the corresponding public key, the data issued by the transaction certificate host 30 can be initially verified. This process of using public and private key encryption and decryption uses the RSA algorithm, which is an asymmetric encryption algorithm. Because it is not the technical focus of this creation, it will not be repeated here.

Further referring to FIG. 2, in order to explain the anti-counterfeiting authentication method of the present invention, a transaction process is used as an example to explain how to verify the transaction voucher when the first terminal device 10 and the second terminal device 20 want to perform transactions.

S11: The first terminal device 10 sends a transaction request data to the transaction voucher host 30 to request the transaction voucher host 30 to issue a transaction voucher, where the transaction request data will include the transaction currency of the transaction activity , Transaction amount and transaction serial number.

S12: According to the received transaction request data and an ultrasonic verification code generated by the transaction voucher host 30, the transaction voucher host 30 uses the private key corresponding to the first terminal device to process the transaction request data and the ultrasonic verification code. Encrypted to generate a secure QR code QRcode) 40, and transmits the secure two-dimensional code 40 to the first terminal device 10, where the secure two-dimensional code 40 is the transaction certificate of the transaction. In a database 31 of the transaction voucher host 30, the transaction serial number and the ultrasonic verification code in the transaction request data will be stored as the verification basis of the secure two-dimensional code 40. Please refer to FIG. 3 to explain the steps of generating the ultrasonic verification code. In step S12, the transaction voucher host 30 uses a specific time information as a source. For example, the specific time information may be sent by the first terminal device 10. The time of the transaction request data, or the time when the transaction voucher host 30 received the transaction request data; the specific time information is used as the source, and a specific random number generator is used to perform the specific time information The random number operation can generate a random number password, and the random number password is further subjected to a fast Fourier transform (FFT) to form the ultrasonic verification code.

S13: The second terminal device 20 reads the secure two-dimensional code 40, and unlocks the secure two-dimensional code 40 with the public key corresponding to the first terminal device, and obtains the transaction serial number therein. In one embodiment, the second terminal device 20 may directly scan the first terminal device 10 to read the secure two-dimensional code 40. In another embodiment, the first terminal device 10 is shared or transmitted. By way of example, the secure two-dimensional code 40 is transmitted to the second terminal device 20, so that the second terminal device 20 can read the secure two-dimensional code.

S14: The second terminal device 20 sends the acquired transaction serial number to the transaction voucher host 30.

S15: According to the transaction serial number received from the second terminal device 20, the transaction voucher host 30 retrieves the ultrasonic verification code corresponding to the transaction serial number from the database 31, and creates an ultrasonic file 50 and transmits it to the second terminal. The device 20 is an ultrasonic file 50 for converting a digital format ultrasonic verification code into an analog format. Please refer to FIG. 4 to explain the creation steps of the ultrasonic file 50. First, the ultrasonic verification code is converted into binary data (S151). This is because the efficiency and reliability of data transmission using binary is high. The original ultrasonic verification code is converted into binary data; the binary data is converted into a signal stream (S152). In this step, according to a preset encoding rule, the The high-frequency sound wave / low-frequency sound wave existing in a unit time respectively represents two kinds of binary 1/0 symbols, which is to define the mapping relationship between different frequency distributions and 1/0, so as to convert binary data into a signal stream. In a certain frequency range (18KHz ~ 20KHz), the signal stream can be divided into multiple channels for transmission at the same time to increase the information capacity within a unit time, thereby increasing the transmission speed; using the frequency offset modulation algorithm (FSK ) Digitally modulate the signal stream (S153), and convert it into a sine wave signal representing high frequency / low frequency respectively with the denseness of the carrier waveform, so as to represent two symbols of 1/0 of the binary symbol, resulting in densely spaced digits of the waveform. Signal; fast Fourier transform the digitally modulated signal to generate an ultrasound file 50 (S154). Since the sound wave transmission is susceptible to interference, the fast Fourier transform is used to transform the modulated signal into a signal that is not easily disturbed and can distinguish between binary The frequency values of 0 and 1 become the ultrasonic file 50 loaded with the ultrasonic verification code.

In order to explain the foregoing steps S151 to S153 in more detail, an example is used for explanation below. Assuming that the ultrasonic verification code to be transmitted is "1234", first in step S151, these four numbers are first converted into four sets of binary data "0001", "0010", "0011", and "0100".

In step S152, the pre-transmitted binary bits 0 and 1 can be converted into data that can be transmitted on different channels according to a preset set of encoding rules. As shown in Table 1 below, this creation uses the ultrasonic frequency between 18KHz ~ 20KHz as the data transmission frequency, and is divided into 4 transmission channels A, B, C, and D in the range of 18KHz ~ 20KHz. Each transmission channel A, B, C, D have their corresponding frequency distributions. In each transmission channel, binary 0s and 1s are represented at two different frequencies.

For example, in channel A, if the data to be transmitted is "0", it means that a sound wave with a frequency of 18.0K Hz should be transmitted; if the data to be transmitted is "1", it means that a sound wave with a frequency of 18.2K Hz is transmitted.

Each group of binary data "0001", "0010", "0011", and "0100" can be transmitted using different transmission channels A, B, C, and D, and preset transmission channels A, B, C, and D. The transmission order of B, C, D, for example, the transmission order can be preset to A, B, C, D; or preset to B, A, D, C, or other combinations. Here, take A, B, C, and D as an example. If the binary data "0001" is transmitted according to the encoding rules of Table 1 and transmitted in sequence on 4 transmission channels A, B, C, and D, the signal flow can be expressed. It is "0A 0B 0C 1D", which means that it will be sequentially encoded into four bands of 18.0K, 18.5K, 19.0K, and 19.7K in step S153. If different transmission orders are used, the same set of binary data "0001" will also become different combinations, so the signal flow obtained through step S152 can show the mapping relationship between different frequency distributions and 1/0.

Please refer to the second table below. The header and check code fields are added before and after the ultrasonic verification code to be transmitted to form a complete data packet.

The header field can be used as a separation symbol to define the starting position of receiving sound waves during a loop, and can also be used as a channel identifier to distinguish sound waves of different channels.It can also be defined as the distance between the transmitting end and the receiving end. Secret agreement. In this creation, a byte (1Byte) is used to define the information transmission order in the header. For example, hexadecimal 0 ~ F can represent multiple information transmission orders. For example, the header "A" means the transmission order is Channel B, Channel A, Channel D, Channel C, and the header "F" indicates that the transmission order is Channel A, Channel C, Channel D, Channel B; and the preset transmission order is only known to the sender and receiver. Therefore, even if a third person maliciously receives the ultrasound file 50, it cannot be decoded and restored immediately without knowing the transmission order of the channel. The data field in the middle of the data packet Lost ultrasonic verification code. The check code field at the end of the data packet is used to check the correctness and completeness of the ultrasonic verification code. In this embodiment, the CRC algorithm is used to calculate the bits used for the check, which will not be repeated here.

S16: The second terminal device 20 receives and interprets the ultrasound document 50, obtains the ultrasound verification code obtained after the ultrasound document 50 is interpreted, and mutually interacts with the ultrasound verification code extracted from the secure two-dimensional code 40. The comparison is based on the comparison result to determine the authenticity of the transaction voucher. If the comparison result is consistent, it means that the transaction voucher is true, otherwise it is not. Wherein, the second terminal device 20 performs an inverse Fourier transform (IFFT), so as to decode the ultrasonic document 50 into an ultrasonic verification code. When the second terminal device 20 is registered with the transaction voucher host 30, in addition to the corresponding public key, it also obtains the encoding rules and the order of the transmission channels of the transaction voucher host 30. Therefore, the ultrasonic verification code can be restored and solved.

S17: When the comparison of the ultrasonic verification code is passed, the payment is performed by the second terminal device 20. Otherwise, the transaction is suspended if the comparison fails.

S18: After the first terminal device 10 confirms the completion of the transaction, it will send a transaction completion message to the transaction voucher host 30.

S19: When the transaction voucher host 30 receives the transaction completion information, it updates the status of the transaction voucher in the database 31 to record that the transaction voucher has been used and cannot be reused for other transactions.

Therefore, for the transaction voucher host 30, a method for performing anti-counterfeit authentication of a transaction voucher using an ultrasonic verification code is performed, including the following steps: receiving transaction request data sent by a first terminal device 10, wherein the transaction The requested information includes the transaction currency, transaction amount, and transaction serial number; the transaction request data and an ultrasonic verification code are encrypted using a private key corresponding to the first terminal device 10 to generate a secure two-dimensional code 40, and Return the secure QR code to the first Terminal device 10 for the first terminal device 10 to provide the secure two-dimensional code to a second terminal device 20 for reading; receiving a transaction serial number issued by the second terminal device 20, the transaction serial number is the second terminal device 20 solution Obtained after translating the secure two-dimensional code 40; taking out the corresponding ultrasonic verification code from a database 31 according to the transaction serial number received from the second terminal device 20, creating an ultrasonic file 50 and transmitting it to the second terminal device 20; the ultrasonic verification code for the second terminal device after deciphering the acoustic file 50, so that the second terminal device 20 can compare the ultrasonic verification code taken from the ultrasonic file with the secure two-dimensional code Whether the ultrasonic verification code is consistent.

To sum up, this creation has carried out secondary anti-counterfeit authentication on transaction credentials. First, when the second terminal device can use the corresponding public key to unlock the secure QR code, it can be initially verified that the secure QR code should be a transaction. Issued by the certificate host; secondly, in order to ensure that the ultrasonic verification code contained in the secure two-dimensional code is genuine and has not been tampered with, the second terminal device may send the transaction serial number to the transaction certificate host to obtain an ultrasonic file, and An ultrasound verification code is interpreted according to the ultrasound document. If the ultrasound verification code contained in the secure two-dimensional code and the ultrasound verification code interpreted according to the ultrasound document are consistent with each other, the security is re-authenticated. The QR code is a legal transaction certificate. By this, the authenticity and uniqueness of the transaction certificate can be confirmed.

Claims (12)

A method for performing anti-counterfeiting authentication on a transaction voucher by using an ultrasonic verification code is performed by a transaction voucher host. The method includes: receiving transaction request data sent by a first terminal device, wherein the transaction request data includes a transaction currency. , The transaction amount and the transaction serial number; using a private key corresponding to the first terminal device to encrypt the transaction request data and an ultrasonic verification code to generate a secure two-dimensional code, and return the secure two-dimensional code to the A first terminal device for the first terminal device to provide the secure two-dimensional code to a second terminal device for reading, wherein the secure two-dimensional code serves as a transaction voucher; receiving a transaction serial number issued by the second terminal device, The transaction serial number is obtained by the second terminal device after interpreting the secure two-dimensional code; according to the transaction serial number received from the second terminal device, a corresponding ultrasonic verification code is taken from a database, and an ultrasonic file is generated and transmitted. To the second terminal device; for the second terminal device to interpret the sound wave file and take out an ultrasonic verification code, so that the second terminal device can be compared Whether the ultrasonic verification code obtained from the ultrasonic file is consistent with the ultrasonic verification code obtained from the secure two-dimensional code; wherein the step of establishing the ultrasonic verification code includes: using a time information as a source and generating it using a virtual random function A pseudo random number generator operates on the time information to generate a random number password; and performs a fast Fourier transform on the random number password to generate the ultrasonic verification code. . The method for performing anti-counterfeit authentication on a transaction voucher by using an ultrasonic verification code as described in claim 1, wherein the time information is the time when the first terminal device sends out the transaction request data. The method for performing anti-counterfeit authentication on a transaction voucher by using an ultrasonic verification code as described in claim 1, wherein the time information is a time when the transaction voucher host receives the transaction request data. The method for performing anti-counterfeiting authentication on a transaction voucher by using an ultrasonic verification code as described in claim 1, wherein in the step of generating the secure two-dimensional code, the transaction voucher host stores the transaction serial number and its corresponding Ultrasonic verification code. The method for performing anti-counterfeit authentication of a transaction voucher by using an ultrasonic verification code as described in claim 1, wherein the step of generating the ultrasonic document includes: converting the ultrasonic verification code into binary data; converting the binary data into a signal stream; using A frequency offset modulation algorithm (FSK) digitally modulates the signal stream and converts it into a binary sine wave signal; performs fast Fourier transform on the digitally modulated sine wave signal to generate an ultrasound file. A transaction verification method using an ultrasonic verification code includes: using a first terminal device to send a transaction request data to a transaction voucher host, wherein the transaction request data includes a transaction currency, a transaction amount, and a transaction serial number; the transaction voucher The host encrypts the transaction request data and an ultrasonic verification code according to a private key corresponding to the first terminal device to generate a secure two-dimensional code, and returns the secure two-dimensional code to the first terminal device, wherein The ultrasonic verification code is generated by the transaction voucher host, wherein the secure two-dimensional code is used as a transaction voucher; the second terminal device is used to read the secure two-dimensional code from the first terminal device, wherein the second The terminal device uses the corresponding public key to decipher the secure two-dimensional code, and takes out the transaction serial number and the ultrasonic verification code in the secure two-dimensional code; and transmits the transaction serial number in the secure two-dimensional code to the second terminal device to the Transaction voucher host; the transaction voucher host retrieves the corresponding ultrasonic verification code according to the transaction serial number returned by the second terminal device, and converts the ultrasonic wave The code becomes an ultrasound file and returns the ultrasound file to a second terminal device; the second terminal device is used to interpret the ultrasound file to obtain an ultrasound verification code, wherein the second terminal device compares with Whether the ultrasonic verification code obtained from the ultrasonic file is consistent with the ultrasonic verification code obtained from the secure two-dimensional code. If they are the same, it means that the transaction voucher is genuine; when the second terminal device is more consistent than the ultrasonic verification code A second terminal device performs a payment operation to the first terminal device. The step of establishing the ultrasonic verification code includes: using a time information as a source, and using a pseudo random number generator The time information is operated to generate a random number password; the random number password is subjected to fast Fourier transform to generate the ultrasonic verification code. The transaction verification method using an ultrasonic verification code as described in claim 6, wherein when the second terminal device finishes the payment action, the method further includes: sending a transaction completion information from the first terminal device to the transaction voucher host; The transaction voucher host receives the transaction completion information and updates the status of the transaction voucher to prohibit the transaction voucher from being reused. The transaction verification method using an ultrasonic verification code according to claim 6 or 7, wherein the time information is a time when the first terminal device sends out the transaction request data. The transaction verification method using an ultrasonic verification code as described in claim 6 or 7, wherein the time information is the time when the transaction voucher host receives the transaction request data. The transaction verification method using an ultrasonic verification code as described in claim 6 or 7, wherein in the step of generating the secure two-dimensional code, the transaction voucher host stores a transaction serial number and its corresponding ultrasonic wave in a database Verification code. The transaction verification method using an ultrasonic verification code as described in claim 6 or 7, wherein the step of generating the ultrasonic document includes: converting the ultrasonic verification code into binary data; converting the binary data into a signal stream; using a frequency offset Shift modulation algorithm (FSK) digitally modulates the signal stream and converts it into a binary sine wave signal; performs fast Fourier transform on the digitally modulated sine wave signal to generate an ultrasound file. The transaction verification method using an ultrasonic verification code according to claim 11, wherein the second terminal device performs an inverse Fourier operation on the ultrasonic document to interpret the ultrasonic verification code.