TWI678674B - Ticket top-up system, method and mobile apparatus - Google Patents

Abstract

The invention provides a ticket value-added system, method and mobile device. After the mobile device sends the value-added application data, the value-added code produced by the third-party code service provider is transmitted to the user's mobile device for storage via the network. The ticket operator can remotely open the ticket value-added function using the value-added code. After the activation is completed, the user can use the mobile device to add the value of the ticket, and the ticket transaction terminal will automatically add the value by combining the value-added code without going through the trust service management platform. It is very convenient for the public, and the transaction process does not retain or transmit sensitive information such as real financial cards or credit card numbers, thereby improving transaction security.

Description

Ticket value-added system, method and mobile device

The present invention relates to an electronic transaction technology, and in particular, to a ticket value-added system, method and mobile device.

As public transportation, convenience stores, hypermarkets and other various stores or governments widely use electronic ticket (for example, Youyou Card, All-in-One Card, Love Gold Card, etc.) systems, the public is gradually used to using electronic tickets for consumption. And when the balance of the electronic ticket is insufficient, the public will pay cash or use credit or debit cards to conduct value-added operations at business locations with value-added machines. Although bankers have launched joint ticket credit cards today, people can automatically add value to this credit card by inducting transaction terminals (such as MRT gates, ticket checkers, point of sales (POS), etc.), but people still You need to go to a specific place to add value, which is really inconvenient. Operators may also bear extra value-added handling fees, which will increase operating costs.

On the other hand, in recent years, many information security loopholes have appeared in society, which has generally caused people's distrust of electronic transactions. It can be seen that the information security of electronic transactions such as electronic tickets cannot be ignored.

In view of this, the present invention provides a ticket value-added system, method, and mobile device, which use a fairly popular mobile device combined with a security token authentication mechanism, so that the transaction process needs to be verified by the code, thereby improving security and confidentiality. Convenient for the public.

The ticket value-added system of the present invention includes a mobile device, a code service providing server, and a ticket management server. The mobile device includes a near field communication (NFC) module, and a secure element (Secure Element) that records ticket data and transaction card information. Mobile device sends transaction card information. The code service providing server obtains the value-added code according to the transaction card information, so that the value-added code is associated with the transaction card information, and the mobile device sends the value-added code and ticket data. The ticket management server associates the value-added code with the ticket data, so that the mobile device adds value to the electronic ticket corresponding to the ticket data based on the value-added code.

The ticket value-added method of the present invention includes the following steps. Send transaction card information, and the transaction card information is recorded in the secure element. Obtain the value-added code according to the bid request, and associate the value-added code with the transaction card information. Send the value-added code and ticket information, which is recorded in the secure element. Associate the value-added code with the ticket data to add value to the electronic ticket corresponding to the ticket data based on the value-added code.

The mobile device of the present invention includes a near field communication module, a security element, a network module, and a processor. The security element is coupled to the field communication module and records ticket information and transaction card information. The network module is connected to the Internet. The processor is coupled to the field communication module and the network module, and sends transaction card information through the network module. The processor receives the value-added code associated with the transaction card information through the network module, and sends the value-added code and ticket data through the network module to add value to the electronic ticket corresponding to the ticket data based on the value-added code.

Based on the above, the embodiment of the present invention uses a third-party code service provider (Token Service Provider (TSP)) to produce a value-added token (token), which is transmitted to the user's mobile device for storage via the network. The ticket operator remotely performs the ticket value-added function opening operation using the value-added code. After the activation is completed, the user can use the mobile device to add value to the ticket, and the value can still be automatically added at the ticket transaction terminal (such as a gate, POS, etc.). The value-added request is sent directly to the ticket provider without going through the Trusted Service Manager (TSM). It is very convenient for the public, and the transaction process does not retain or transmit sensitive information such as real financial cards or credit card numbers, thereby improving transaction security.

In order to make the above features and advantages of the present invention more comprehensible, embodiments are hereinafter described in detail with reference to the accompanying drawings.

FIG. 1 is a schematic diagram of a ticket value-added system 1 according to an embodiment of the present invention. Referring to FIG. 1, the ticket value-added system 1 includes a mobile device 100, a card issuing bank server 101, a financial transaction system 102, a code service providing server 103, and a ticket management server 104.

The mobile device 100 may be a portable device of a smart phone, a tablet, a wearable device, and includes at least but not limited to a near field communication (NFC) module 110, a secure element 120, a storage 130, a processor 140, and Network module 150.

The NFC module 110 may be a controller, chip, or circuit of a radio frequency identification (RFID) technology such as MIFARE, FeliCa, Legic, and TimeCOS.

The secure element 120 may be an NFC-Subscriber Identity Module (SIM), a Secure Digital (SD) card, a Universal Integrated Circuit Card (UICC) (or a chip card), or an internal Embedded in the NFC module 110. The secure element 120 is used to record information such as transaction cards (e.g., debit cards, credit cards, stored value cards, etc.) 122 (e.g., card number, expiration date, magnetic cardholder information, etc.), electronic tickets (e.g., Yoyo Card, All-in-One Card, Love Gold card, etc.) related ticket data 124 (for example, Mifare identification number (ID), card serial number, etc.), and these information or data are stored in an encrypted manner.

The storage 130 may be any type of fixed or removable random access memory (RAM), read-only memory (ROM), flash memory, traditional hard disk drive, solid state hard disk Disk (solid-state drive) or similar components, and is used to record software programs, data, or files such as APP 131. This value-added program is used to manage, register, and verify the value-added code, and its functions will be described in detail in subsequent embodiments.

The processor 140 is coupled to the NFC module 110 and the storage 130, and may be a central processing unit (CPU), or other programmable general purpose or special purpose microprocessor (Microprocessor), digital signal processor ( DSP), programmable controller, application-specific integrated circuit (ASIC), or other similar components or a combination of the above. In the embodiment of the present invention, the processing unit 140 is configured to execute all operations of the mobile device 100, and can access and execute the value-added programs recorded in the storage 130.

The network module 150 is coupled to the processor 140, and may be a chip, transceiver, or circuit that supports wireless communication technologies such as third-generation (3G), fourth-generation (4G) mobile communication, and Wi-Fi, and is used to connect Connect to the Internet.

The card issuing bank server 101 is a computer host or server that issues a transaction card unit corresponding to the transaction card information 122 stored in the secure element 120. It also records the transaction card information 122 and can identify the received transaction card information 122. verification.

The financial transaction system 102 is used to collectively refer to a computer host or server used by banks, merchants, companies, or government units to process transactions, transfers, and other businesses.

The code service providing server 103 is a computer host or server set up by the TSP, which is used to execute the production, verification, and management of value-added codes, and uses the value-added codes as proof of electronic ticket value-added verification.

The ticket management server 104 is a computer host or server set up by a physical ticket issuing unit, and records electronic card related information such as a card identification code, a corresponding balance, and a corresponding automatic value-added setting.

In order to facilitate understanding of the operation flow of the present invention, a number of embodiments will be described in detail below. In the following, the method described in the embodiment of the present invention will be described with each component and module of each device and mobile device 100 in the ticket value-added system 1. Each process of the method of the embodiment of the present invention can be adjusted according to the implementation situation, and is not limited to this.

The embodiment of the present invention is roughly divided into an activation stage and a value-added stage, and FIG. 2 is a schematic flowchart illustrating a ticket value-added method-opening stage according to an embodiment of the present invention. Referring to FIG. 2, the mobile device 100 detects a user's operation (for example, the value-added program 131 clicks the “new value-added code” option 132 on the user interface (UI) presented on the screen), and receives the designation. After inputting information such as the transaction card card number, expiration year, card verification code, and ticket data 124 (such as Mifare ID or ticket identification code, card number, etc.) for ticket value addition, the network module 150 is used. The transmission includes the transaction card information 122 (encrypted) to transmit the transaction card information 122 to the code service providing server 103 via the network (step S210). If necessary, the processor 140 also provides the software and hardware related information (for example, operating system version, hardware model, etc.) of the mobile device 100 through the network module 150 for the back end (for example, a code service providing server) 103, the ticket management server 104, or a telecommunications company, etc.) as a judgment basis for confirming whether the mobile device 100 is a value-added code related to installation of an electronic ticket.

After receiving the transaction card information 122, the code service providing server 103 will notify the card issuing bank server 101 corresponding to the transaction card to verify the identity of the transaction card holder (step S220). After the card-issuing bank server 101 passes the verification and verification of the transaction card information 122 (for example, confirms that the transaction card information 122 provided by the applicant is correct), it will request the code service providing server 103 to provide a value-added code (step S230). The code service providing server 103 receives the instruction from the card issuing bank server 101, and generates a value-added code according to the transaction card information 122, associates the value-added code with the transaction card information 122, and sends the value-added code (step S240) . Dedicated value-added codes are only available for specific ticket card numbers. After the value-added program 131 obtains the value-added code, the ticket data 124 and the value-added code are sent to the ticket management server 104 through the network module 150 (step S250). After the ticket management server 104 obtains the corresponding electronic ticket according to the ticket data 124, and verifies that the association between the electronic ticket and the value-added code is correct, it uses the NFC module with the application protocol data unit (APDU) command of the smart card. The group 110 and the ticket data 124 recorded by the secure element 120 remotely activate (or enable) the transaction card and the ticket value-added function of the value-added code (step S260).

After the mobile device 100 obtains the value-added code, in response to the selection operation of the "Enable Ticket Value-Added" option 133 on the UI presented by the value-added program 131, the value-added ticket setting can be performed to enable the value-added function. The value-added program 131 automatically checks the balance of the electronic ticket, and responds that the balance of the electronic ticket is insufficient. The value-added program 131 uses the value-added code to automatically add value to the electronic ticket. In addition, the value-added program 131 also provides a way to enter a value-added amount, and adds value to the electronic ticket according to the value-added amount input by the value-added operation. Alternatively, the value-added program 131 can also modify the conditions for automatic ticket value-added and execution, such as checking the scheduling period, the minimum balance for performing automatic value-added, the amount of automatic value-added, etc., in order to provide flexible adjustment functions and improve usage Experience.

Please refer to the schematic flow chart of the method for adding value to a ticket according to an embodiment shown in FIG. 3. In response to the insufficient balance of the electronic ticket or the value-added operation, the value-added program 131 will send a value-added request through the network module 150 (step S310). The value-added request includes an encrypted value-added code and ticket data 124. For example, the full encryption method used in this step can be encrypted using a key issued by TSP (for example, a Single Use Key, which expires after use), and is provided by the code service providing server 103 A new key is issued to the mobile device 100 as a value-added certificate. The ticket management server 104 verifies the availability of the electronic ticket corresponding to the ticket data 124, and the code service providing server 103 verifies the content of the value-added code. After the above two information are verified to be qualified, the financial transaction system 102 can use the value-added code. The corresponding transaction card corresponds to the account number or account, and the electronic ticket corresponding to the ticket data 124 recorded by the secure element 120 is added through the value-added program 131 (step S320). After the value-added is successful, the mobile device 100 can receive the value-added success notification message through the communication module 150, and the UI of the value-added program 131 can present the balance information of the electronic ticket before and after the value-added. In this way, the user can operate the value-added program 131 on the mobile device 100, and can easily complete the value-added ticket, without the need to visit the ticket transaction terminal to add value.

Of course, if the public is still used to going to the transaction terminal, the embodiment of the present invention can also implement value-added services using value-added codes. Please refer to the flow chart of the method for adding value of a ticket to a transaction terminal according to an embodiment shown in FIG. 4. The ticket value-added system 1 further includes a transaction terminal 105 (for example, a gate, a POS machine, etc.), and the transaction terminal 105 includes at least an NFC module 106 with a communication technology compatible with the NFC module 110. Assume that the value-added program 131 has been set to activate the ticket value-added function, and after the NFC module 106 receives the near-end sensing action of the NFC module 110 (step S410), it is reflected that the balance of the electronic ticket recorded by the mobile device 100 is insufficient, and the transaction The terminal 105 sends a value-added request to the ticket management server 104 (step S440). After the ticket management server 104 compares that the electronic ticket corresponding to the value-added request has been enabled for automatic value-added setting, the value-added code in the value-added request can be used to add value to the electronic ticket in the same or similar manner through step S320. (Step S430). After the value is added successfully, the mobile device 100 can receive the value added success notification message through the NFC module 110, and the UI of the value added program 131 can present the updated balance information.

To sum up, the embodiment of the present invention is that the mobile device transmits the verification application information (for example, financial card or credit card information) required for applying for a value-added code via a network. After being authenticated by a third-party code service provider and credit / financial card issuing bank, the third-party code service provider provides the value-added code required to issue the value-added. Then, the issued value-added code and ticket information are delivered to the ticket industry to enable the value-added code ticket value-added function, so that the specific ticket of the mobile device is converted into a function with value-added code. Then, the value-added program can detect the balance of the electronic ticket or add value to the electronic ticket with a value-added code in a timely manner according to the conditions set by the user. In addition, the induction method of the terminal transaction machine can also realize the value-added service of the value-added code.

In this way, the public does not need to specifically go to the designated value-added place, and can directly add value to the electronic ticket through the value-added program on the mobile device at any time or when the balance is insufficient. Compared with the current ticket industry, if you want to issue a mobile credit card with value-added functions, you need to issue it through the card factory Preload or through the Trust Service Management (TSM) platform to issue over-the-air OTA. The embodiments of the present invention allow ticket vendors to provide remote electronic ticket value-added activation services, and users can perform value-added operations according to personal needs.

On the other hand, the use of value-added codes can avoid the risk of direct exposure or theft of physical card numbers in transactions, and allow the entire transaction to operate under a secure mechanism. Through secure message transmission channels, combined with strict encryption and decryption authentication functions, as consumers and operators to create proper identity authentication measures, the main purpose is to solve the problem of identity authentication, confidentiality, data integrity, and insecurity in application systems. Denial. In addition, the special value-added code is used for a specific ticket card number. If the value-added code is stolen, the other party who obtains the value-added code will not be able to add value to other ticket card numbers.

Although the present invention has been disclosed as above with the examples, it is not intended to limit the present invention. Any person with ordinary knowledge in the technical field can make some modifications and retouching without departing from the spirit and scope of the present invention. The protection scope of the present invention shall be determined by the scope of the attached patent application.

1‧‧‧Ticket Value Added System

100‧‧‧ mobile device

101‧‧‧ Card issuing bank server

102‧‧‧Financial transaction system

103‧‧‧Code server

104‧‧‧Ticket Management Server

105‧‧‧Transaction Terminal

110, 106‧‧‧NFC Module

120‧‧‧Safety element

122‧‧‧Transaction Card Information

124‧‧‧Ticket Information

130‧‧‧Storage

131‧‧‧ Value Added Program

132‧‧‧New value-added code option

133‧‧‧Enable ticket premium option

140‧‧‧Processor

150‧‧‧ Network Module

S210 ~ S260, S310 ~ S320, S410 ~ S440‧‧‧Steps

FIG. 1 is a schematic diagram of a ticket value-added system according to an embodiment of the present invention. FIG. 2 is a schematic flowchart of a ticket value-added method-opening phase according to an embodiment of the present invention. FIG. 3 is a schematic flow chart of a method for adding value to a ticket according to an embodiment of the present invention. FIG. 4 is a schematic flow chart of a method for adding value to a ticket by a transaction terminal according to an embodiment of the present invention.

Claims (10)

A ticket value-added system includes: a mobile device including a Near Field Communication (NFC) module, and a security element recording a ticket data and a transaction card information, and the mobile device sends the transaction card information , Where the ticket information is related to an electronic ticket, and the transaction card information is related to a financial card, credit card, or stored value card; a token service providing server generates a value-added code based on the transaction card information, so that The value-added code is associated with the transaction card information and sends the value-added code, and the mobile device sends the value-added code and the ticket information; and a ticket management server that correlates the value-added code with the ticket information Link to make the mobile device add value to the electronic ticket corresponding to the ticket data based on the value-added code. The ticket value-added system described in item 1 of the scope of patent application, further includes: a card issuing bank server, verifying the transaction card information obtained by the code service providing server, and requesting the code service providing server to provide the value added Code. The ticket value-added system described in item 1 of the scope of patent application, further includes: a financial transaction system, wherein the mobile device sends a value-added request, the value-added request includes the encrypted value-added code and the ticket information, After the ticket management server verifies the ticket data and the code service providing server verifies the value-added code, the financial transaction system adds value to the electronic ticket. The ticket value-added system according to item 3 of the scope of the patent application, wherein the mobile device sends the value-added request in response to a shortage of the electronic ticket or a value-added operation. As described in the patent application scope item 3, the ticket value-added system further includes: a transaction terminal, after receiving the near-end sensing action of the near field communication module, responding to the insufficient balance of the electronic ticket, managing the ticket The server sends the value-added request. A ticket value-added method includes: a mobile device sends a transaction card information, and the transaction card information is recorded in a secure element, wherein the transaction card information is related to a financial card, a credit card, or a stored value card; a token The service providing server obtains a value-added code based on the transaction card information, associates the value-added code with the transaction card information, and sends the value-added code; the mobile device sends the value-added code and a ticket data, and the The ticket data is recorded in the security element, wherein the ticket data is related to an electronic ticket; and a ticket management server associates the value-added code with the ticket data according to the activation request, so that the mobile device pairs the value-based code with the value-added code. The electronic ticket corresponding to the ticket data is added. The ticket value-added method according to item 6 of the scope of patent application, wherein the step of adding value to the electronic ticket corresponding to the ticket data based on the value-added code includes: sending a value-added request, the value-added request includes an encrypted The value-added code and the ticket information; and after verifying the value of the ticket-data and the value-added code, add value to the electronic ticket. The method for adding value of a ticket as described in item 7 of the scope of patent application, wherein the step of sending the value-added request includes: sending a value-added through a value-added program in response to insufficient balance of the electronic ticket or a value-added operation request. The method for adding value of a ticket as described in item 7 of the scope of patent application, wherein the step of sending the value-added request includes: after receiving a near-end inductive action through a transaction terminal, in response to the insufficient balance of the electronic ticket, sending the value Value-added request. A mobile device includes: a near field communication module; a security element coupled to the near field communication module, and recording a ticket data and a transaction card information, wherein the ticket data is related to an electronic ticket, and the transaction The card information is related to a financial card, credit card, or stored value card; a network module connected to the Internet; and a processor coupled to the near field communication module and the network module, and through the The network module sends the transaction card information, receives a value-added code associated with the transaction card information through the network module, and sends the value-added code and the ticket data through the network module based on the added value The value code adds value to the electronic ticket corresponding to the ticket data.