TWI690869B - Message-based payment authentication method and authentication server - Google Patents

Abstract

The invention provides a message-based payment authentication method and authentication server. The method includes receiving a message-based payment authentication request from a wireless network interface, wherein the message-based payment authentication request corresponds to a product purchase operation performed by the payment phone number on a portal service website; retrieving a first location of an electronic device corresponding to the payment phone number and a second location of the wireless network interface in response to the message-based payment authentication request; in response to a device distance between the first location and the second location is less than a preset range, sending a payment confirmation message to the electronic device corresponding to the payment phone number according to the payment phone number; in response to the electronic device confirming the payment confirmation message, transmitting an authentication result to the portal service website to allow the product purchase operation.

Description

SMS payment authentication method and authentication server

The invention relates to a payment authentication method and authentication server, and in particular to a short message payment authentication method and authentication server.

In the current payment mechanism, users are often required to enter a One Time Password (OTP) to verify whether the user is legal. However, because the above-mentioned verification mechanism based on OTP is not secure enough, there is currently a mechanism for making small payments using telecommunication billing newsletters to strengthen security and prevent fraud. However, in the above mechanism, users need to set a set of payment passwords in advance, and each time they make a payment, they must be redirected to the telecom operator’s webpage to enter their ID number and payment password, which can be completed after replying to the two-way SMS authentication payment procedure. It can be seen that the flow of the above mechanism is too complicated to use.

In view of this, the present invention provides an SMS payment authentication method and authentication server, which can be used to solve the above technical problems.

The invention provides an SMS payment authentication method suitable for an authentication server, including: receiving an SMS payment authentication request from a wireless network interface, wherein the SMS payment authentication request corresponds to a payment gate number and is performed on an entrance service website A product purchase operation; acquiring a first geographic location of an electronic device corresponding to a payment gate number in response to a SMS payment authentication request, and acquiring a second geographic location of a wireless network interface; responding to the first geographic location and A device distance between the second geographic locations is less than a preset range, and a payment confirmation message is sent to the electronic device corresponding to the payment gate number according to the payment gate number; in response to the electronic device confirming the payment confirmation message, an authentication result is sent to the entrance Service websites to allow merchandise purchase operations.

The invention provides an authentication server, which includes a storage circuit and a processor. The storage circuit stores multiple modules. The processor is coupled to the storage circuit and accesses the aforementioned module to perform the following steps: receive a SMS payment authentication request from a wireless network interface, where the SMS payment authentication request corresponds to a payment gate number made on an entry service website A product purchase operation; obtaining a first geographic location of an electronic device corresponding to the payment gate number and a second geographic location of the wireless network interface in response to the SMS payment authentication request; A device distance between two geographic locations is less than a preset range, a payment confirmation message is sent to the electronic device corresponding to the payment gate number according to the payment gate number; in response to the electronic device confirming the payment confirmation message, an authentication result is sent to the entrance service Website to allow merchandise purchase operations.

Based on the above, the SMS payment authentication method and authentication server proposed by the present invention can determine whether the electronic device is wirelessly connected with the wireless device after receiving the SMS payment authentication request issued by the wireless network interface in response to the commodity purchase operation to be performed by the electronic device The network interface is close enough to authenticate whether the user of the electronic device is allowed to perform the above-mentioned commodity purchase operation. In this way, the security of the SMS payment can be strengthened, and the effect of simplifying the payment process by the user using SMS can be achieved.

In order to make the above-mentioned features and advantages of the present invention more obvious and understandable, the embodiments are specifically described below in conjunction with the accompanying drawings for detailed description as follows.

Please refer to FIG. 1, which is a schematic diagram of an SMS payment authentication system according to an embodiment of the present invention. In FIG. 1, the SMS payment authentication system 100 includes an authentication server 10, an electronic device 12 and a wireless network interface 14.

In this embodiment, the electronic device 12 is, for example, a smart phone, a tablet computer with a Subscriber Identity Module (SIM) card, or other smart devices with corresponding door numbers, but it is not limited thereto.

The wireless network interface 14 is, for example, a wireless network access point deployed by a store in a specific field, which can be used to enable the electronic device 12 when the electronic device 12 (or other similar smart device) is connected The portal service website provided by the store is displayed to the user of the electronic device 12 for viewing. In the embodiments of the present invention, the above-mentioned portal service website may be used to provide users with related merchandise sales services, but the present invention may not be limited to this.

In different embodiments, the specific field where the wireless network interface 14 is deployed may have a fixed location (for example, in a building), or belong to a mobile field (for example, in a train, high-speed rail, etc. In the carriage), but the invention may not be limited to this.

In an embodiment, if the user of the electronic device 12 wants to purchase goods from the above-mentioned store through the portal service website provided by the wireless network interface 14, he can enter the door number corresponding to the electronic device 12 in the portal service website (below Called payment gate number). Afterwards, the portal service website may generate the SMS payment authentication request TR accordingly, and send the SMS payment authentication request TR to the authentication server 10. In this case, the authentication server 10 may use the SMS payment authentication method of the present invention to assist the store to authenticate the use based on the SMS payment authentication request TR, and allow the user to perform the above-mentioned commodity purchase operation when it is determined that the user has passed the authentication. Relevant details will be further explained later.

In FIG. 1, the authentication server 10 includes a storage circuit 10a and a processor 10b. The storage circuit 10a is, for example, any type of fixed or removable random access memory (RAM), read-only memory (ROM), flash memory (Flash memory), hard disk Disk or other similar devices or a combination of these devices can be used to record multiple codes or modules.

The processor 10b is coupled to the storage circuit 10a, and may be a general-purpose processor, a special-purpose processor, a conventional processor, a digital signal processor, a plurality of microprocessors, one or more combined digital signal processing The core of the processor is the microprocessor, controller, microcontroller, application specific integrated circuit (ASIC), field programmable gate array (FPGA), any other kind of integrated circuit, State machine, processor based on Advanced Reduced Instruction Set Machine (Advanced RISC Machine, ARM) and similar products.

In the embodiment of the present invention, the processor 10b can load the program code or module recorded in the storage circuit 10a to execute the SMS payment authentication method proposed by the present invention, which will be further described below.

Please refer to FIG. 2, which is a flowchart of an image processing method according to an embodiment of the invention. The method of this embodiment may be performed by the authentication server 10 of FIG. 1, and the details of each step of FIG. 2 will be described below with the components shown in FIG. 1.

First, in step S210, the processor 10b may receive the SMS payment authentication request TR from the wireless network interface 14. In this embodiment, the SMS payment authentication request TR corresponds to the commodity purchase operation performed by the payment gate number PN on the portal service website. As mentioned in the previous embodiment, the payment gate number PN is, for example, the gate number of the electronic device 12, and the portal service website can provide, for example, a user who can input the payment gate number PN after the user selects the product to be purchased. The dialog box allows users to perform payment operations by entering the payment gate number PN.

After the user enters the payment gate number PN on the portal service website, the portal service website may generate the SMS payment authentication request TR accordingly. In different embodiments, the SMS payment authentication request TR may include at least one of the store code, product details, product amount, payment gate number PN, identity of the wireless network interface 14 and purchase time corresponding to the above-mentioned product purchase operation However, the present invention may not be limited to this. In addition, after the portal service website receives the payment gate number PN, the portal service website may first write the relevant order data in the local database, and then send the SMS payment authentication request TR to the authentication server 10. In addition, after the authentication server 10 successfully authenticates the user, the portal service website can perform processes such as subsequent services and product delivery, but the present invention is not limited thereto.

Then, in step S220, the processor 10b may obtain the first geographic location of the electronic device 12 corresponding to the payment gate number PN and the second geographic location of the wireless network interface 14 in response to the SMS payment authentication request TR.

In an embodiment, the processor 10b may perform a base station positioning operation on the electronic device 12 based on the payment gate number PN to obtain the first geographic location of the electronic device 12, but the present invention may not be limited thereto.

In an embodiment, the location type of the specific field where the wireless network interface 14 is deployed (ie, located in a fixed location or belonging to a mobile field) may be pre-recorded in the database of the authentication server 10. When the authentication server 10 receives the SMS payment authentication request TR from the wireless network interface 14, it may determine the method of obtaining the second geographic location of the wireless network interface 14 based on the location type of the wireless network interface 14.

For example, if the specific field has a fixed location, the processor 10b can query the store location information recorded in the database through the store code in the SMS payment authentication request TR to serve as the second of the wireless network interface 14 Geographic location. Alternatively, the processor 10b can also query the geographic location information of the wireless network interface 14 recorded in the database through the identity of the wireless network interface 14 as the second geographic location of the wireless network interface 14, but the present invention may not Limited to this.

As another example, if a specific field belongs to a mobile field (such as a train car), the Wi-Fi service provided to the customer in this specific field needs to be connected to the Internet, so that the shop of the portal service website can send SMS The payment request TR is submitted to the authentication server 10. In this case, the processor 10b can obtain the location of the specific field (ie, the second geographic location of the wireless network interface 14) through the Wi-Fi service interface connected to the Internet. For example, if Wi-Fi in a specific field is connected to the Internet through a SIM card of a telecommunications company, the processor 10b can obtain the geographic location information of the SIM card number through the base station positioning operation as a wireless The second geographic location of the network interface 14. In addition, the second geographic location of the wireless network interface 14 can be directly obtained through a global positioning (GPS) module installed in the wireless network interface 14, but the present invention is not limited thereto.

In one embodiment, before the authentication server 10 obtains the first geographic location and the second geographic location, it may first determine whether the portal service website belongs to the cooperative store of the authentication server 10 based on the SMS payment authentication request TR. If yes, the processor 10b can obtain the first geographic location and the second geographic location, otherwise, it can send an error message to the electronic device 12 corresponding to the payment gate number PN and the portal service website to suspend the product purchase operation. That is, the authentication server 10 can exclude requests from non-partners. This can reduce the security risks of hacker intrusion or DDoS attacks.

In one embodiment, the authentication server 10 can determine whether to allow the user to use the payment gate number PN as the above-mentioned commodity by determining whether the first geographical position of the electronic device 12 is close to the second geographical position of the wireless network interface 14 Payment tools for purchase operations.

Based on this, in step S230, in response to a device distance between the first geographic location and the second geographic location being less than a predetermined range, the processor 10b may send a payment confirmation message CM to the payment gate corresponding to the payment gate number PN PN的电子装置12。 The electronic device 12 PN. In different embodiments, the aforementioned predetermined range may be determined by the designer as an appropriate range according to requirements, and used as a basis for determining whether the electronic device 12 is sufficiently close to the wireless network interface 14. For example, the above-mentioned preset range may be determined based on information such as positioning accuracy, the effective range of the Wi-Fi signal provided by the wireless network interface 14, past success/failure cases, and the like, but it is not limited thereto. In addition, the payment confirmation message CM is, for example, a short message service (SMS) sent by the processor 10b to the payment gate number PN based on the payment gate number PN, but the present invention is not limited thereto.

In one embodiment, before sending the payment confirmation message CM to the electronic device 12, the processor 10b may first determine whether the remaining amount of the payment gate number PN is sufficient to pay for the commodity amount. If yes, the processor 10b may send a payment confirmation message CM to the electronic device 12 corresponding to the payment gate number PN, otherwise, it may send an error message to the electronic device 12 corresponding to the payment gate number PN and the above-mentioned portal service website to suspend the goods Purchase operation. In this way, users with insufficient payment ability can be prevented from purchasing goods on the portal service website, but the invention may not be limited to this. In different embodiments, the payment confirmation message CM may include at least one of a store code, product details, product amount, and one-time password corresponding to the above-mentioned product purchase operation. This allows users to confirm that the relevant payment information is correct.

In one embodiment, after the electronic device 12 receives the payment confirmation message CM, the user can confirm whether it correctly corresponds to the commodity purchase operation performed. If yes, the user can confirm the payment confirmation message CM through the electronic device 12 to pay the relevant payment for the purchased goods. On the other hand, if the user judges that the content of the payment confirmation message CM is wrong, the user may cancel the purchase operation of the product through other means, but the present invention may not be limited to this.

In step S240, in response to the electronic device 12 confirming the payment confirmation message CM, the processor 10b may send the authentication result to the portal service website to allow the commodity purchase operation. In one embodiment, the processor 10b may perform the billing operation after the electronic device 12 confirms the payment confirmation message CM, and informs the shop of the portal service website to perform subsequent services and product delivery processes through the above authentication result.

In an embodiment, before the processor 10b transmits the authentication result to the portal service website, it may first determine whether the electronic device 12 confirms the payment confirmation message CM within a time limit. If yes, the processor 10b may send the above-mentioned authentication result to the portal service website to allow the commodity purchase operation, otherwise, it may send an error message to the electronic device 12 corresponding to the payment gate number PN and the portal service website to suspend the commodity purchase operation. That is, the user needs to confirm the payment confirmation message CM within the time limit, otherwise the operation of purchasing the goods cannot be completed because the operation is overtime.

Please refer to FIG. 3, which is an application scenario diagram according to an embodiment of the present invention. In this embodiment, it is assumed that the portal service website 300 is displayed on the electronic device 12 after the user connects to the wireless network interface 14 with the electronic device 12 (the specific field where it is deployed is, for example, a high-speed railroad car). When the user wants to purchase the product "XX Story" (which is an e-book, for example) in the portal service website 300, the portal service website 300 may display a field 310 for the user to enter the payment gate number PN.

After the user enters the payment gate number PN in the field 310, the authentication server 10 may accordingly send a payment confirmation message CM to the electronic device 12 based on the payment gate number PN. As shown in FIG. 3, the payment confirmation message CM in this embodiment may include the product that the user wants to purchase, the amount, and the OTP (eg, "1324225") that the user is required to return via SMS, but it is not limited thereto. If the user believes that the information in the payment confirmation message CM is correct, he can return the specified OTP by SMS according to the instructions (ie, "1324225"). After the authentication server 10 determines that the OTP returned by the user is correct, the authentication server 10 can determine that the user has confirmed the payment confirmation message CM and allow the user to perform the product purchase operation.

In summary, the SMS payment authentication method and authentication server provided by the present invention can determine whether the electronic device is received after receiving the SMS payment authentication request issued by the wireless network interface in response to the commodity purchase operation to be performed by the electronic device It is close enough to the wireless network interface to authenticate whether the user of the electronic device is allowed to perform the above-mentioned commodity purchase operation. If the geographic location of the electronic device and the wireless network interface are consistent or close enough, the authentication server can provide a payment confirmation message to the electronic device for the user to confirm whether the content of the product purchase operation is correct. Moreover, after the payment confirmation message is confirmed, the authentication server can allow the above-mentioned commodity purchase operation. In this way, it can be used to prevent fraud, and save the user from entering the identity card number and the preset payment password and other steps, thereby strengthening the security of the SMS payment and simplifying the user's payment process using the SMS.

Although the present invention has been disclosed as above with examples, it is not intended to limit the present invention. Any person with ordinary knowledge in the technical field can make some changes and modifications without departing from the spirit and scope of the present invention. The scope of protection of the present invention shall be subject to the scope defined in the appended patent application.

100: SMS payment authentication system

10: Authentication server

10a: storage circuit

10b: processor

12: Electronic device

14: wireless network interface

300: Portal service website

310: field

CM: payment confirmation message

PN: payment gate number

S210~S240: Steps

TR: SMS payment authentication request

FIG. 1 is a schematic diagram of a SMS payment authentication system according to an embodiment of the invention. FIG. 2 is a flowchart of an image processing method according to an embodiment of the invention. FIG. 3 is an application scenario diagram according to an embodiment of the invention.

S210~S240: Steps

Claims (11)

An SMS payment authentication method, applicable to an authentication server, includes: receiving a SMS payment authentication request from a wireless network interface, wherein the SMS payment authentication request corresponds to a payment gate number made on an entry service website Commodity purchase operation; acquiring a first geographic location of an electronic device corresponding to the payment gate number in response to the SMS payment authentication request, and acquiring a second geographic location of the wireless network interface; reacting to the first geographic location A device distance between the location and the second geographic location is less than a preset range, a payment confirmation message is sent to the electronic device corresponding to the payment gate number according to the payment gate number; and the electronic device confirms the payment Confirm the message and send an authentication result to the portal service website to allow the purchase operation of the product. The method as described in item 1 of the patent application scope, wherein the SMS payment authentication request includes the store code, product details, product amount, the payment gate number, the identity of the wireless network interface, the purchase time corresponding to the product purchase operation At least one of them. The method as described in item 1 of the patent application scope, wherein the first geographic location of the electronic device corresponding to the payment gate number is acquired in response to the SMS payment authentication request, and the first location of the wireless network interface is acquired Before the second geographic location step, it further includes: Determine whether the portal service website belongs to a partner store of the certification server based on the SMS payment certification request; in response to the portal service website belonging to the partner store of the certification server, obtain the electronic device corresponding to the payment gate number The first geographic location, and the second geographic location to obtain the wireless network interface; and the partner store that responds to the portal service website that does not belong to the authentication server, sends an error message to the payment gate number The electronic device and the portal service website to suspend the purchase of the goods. The method as described in item 1 of the patent application scope, wherein the SMS payment authentication request includes the commodity amount corresponding to the commodity purchase operation and the payment gate number, and the payment confirmation message is sent to the payment gate number corresponding to the payment gate number Before the step of the electronic device, it further includes: determining whether a remaining amount of the payment gate number is sufficient to pay the amount of the commodity; if so, sending the payment confirmation message to the electronic device corresponding to the payment gate number; and if not, sending a An error message is sent to the electronic device and the portal service website corresponding to the payment gate number to suspend the purchase of the goods. The method as described in item 1 of the patent application scope, wherein the wireless network interface is deployed in a specific field to provide the entrance service to the electronic device when the electronic device is connected to the wireless network interface The website provides a merchandise sales service. The method as described in item 5 of the patent application scope, wherein if the specific field has a fixed location previously recorded in a database, the step of obtaining the second geographic location of the wireless network interface includes: querying the The database obtains the fixed location, and uses the fixed location as the second geographic location. The method according to item 5 of the patent application scope, wherein if the specific field is a mobile field, the step of obtaining the second geographic location of the wireless network interface includes: based on the corresponding wireless network interface A Subscriber Identity Module (SIM) card for a base station positioning operation on the wireless network interface, or access a global positioning module corresponding to the wireless network interface to obtain the second Geographic location. The method as described in item 1 of the patent application scope, wherein the step of obtaining the first geographic location of the electronic device corresponding to the payment gate number includes: performing a base station positioning operation on the electronic device based on the payment gate number, To obtain the first geographic location. The method as described in item 1 of the patent application scope, wherein the payment confirmation message includes at least one of a store code, product details, product amount, and one-time password corresponding to the product purchase operation. The method as described in item 1 of the patent application scope, wherein before the step of transmitting the authentication result to the portal service website to allow the purchase operation of the goods, the method further includes: Determine whether the electronic device confirms the payment confirmation message within a time limit; if so, send the authentication result to the portal service website to allow the purchase operation of the commodity; and if not, send an error message to the payment corresponding to the payment gate number Electronic devices and the portal service website to suspend the purchase of the goods. An authentication server includes: a storage circuit storing a plurality of modules; and a processor coupled to the storage circuit, accessing the modules to perform the following steps: receiving a short message from a wireless network interface Payment authentication request, wherein the SMS payment authentication request corresponds to a product purchase operation performed on a portal service website with a payment gate number; in response to the SMS payment authentication request, an electronic device corresponding to the payment gate number is acquired A first geographic location, and a second geographic location to obtain the wireless network interface; reflecting that a device distance between the first geographic location and the second geographic location is less than a predetermined range, and is sent according to the payment gate number A payment confirmation message to the electronic device corresponding to the payment gate number; and in response to the electronic device confirming the payment confirmation message, sending an authentication result to the portal service website to allow the commodity purchase operation.

Images