TWI691863B - Conversational online bank system and executing method for supplying safety financial service - Google Patents

Abstract

This disclosure provides an executing method for supplying financial service, which comprises the following steps. A first interface triggers a second interface to send a verification signal at least including device information to a first server through a network, and the first server determines whether a first database comprises customer data corresponding to the verification signal. When the first database comprises customer data, the first server sends a confirmation signal to the second interface, and the second interface triggers the first interface to send an execution signal to a second server. After the second server receives the execution signal, the first server determines whether the confirmation signal is sent during a preset period. When the first server sends the confirmation signal during the preset period, the second server executes a financial transaction corresponding to the execution signal. On the contrary, the first server sends a warning signal to the second server.

Description

Dialogue mobile banking system and execution method for providing secure financial services

The invention relates to a system and execution method for providing financial services, in particular to a conversational mobile banking system and execution method for providing secure financial services based on mobile devices.

Today, due to the popularity of mobile devices, and the advantages of mobile devices that are easy to carry and easy to operate; therefore, many financial institutions use mobile applications (APP) to provide financial services, allowing users to use mobile devices and Internet can complete financial transactions such as foreign exchange or transfer. Generally speaking, the above-mentioned way of providing financial services can be called "mobile banking".

From the above, we can see that the financial services provided by "Mobile Banking" all need to be performed through the Internet, so the relevant security verification mechanism is even more important. However, the current mobile banks are all designed with the security verification mechanism and financial services on the same mobile application, and do data transmission with the same terminal host. Therefore, when the above-mentioned unique data transmission path is intercepted, the user's personal information and transaction password are likely to be leaked as a result, thereby causing serious security problems.

Therefore, there is still a need for a conversational mobile banking system and execution method for providing secure financial services to improve the above problems.

The present invention is to provide a conversational mobile banking system and execution method for providing secure financial services, respectively designing different data transmission paths for financial services and security verification to improve the problems mentioned in the prior art.

The invention provides an execution method for providing secure financial services, including: triggering a second interface of a mobile device with a first interface of a mobile device to transmit a verification signal including at least one device information to a first interface through a network A terminal host; use the first terminal host to determine whether a first database contains a customer data corresponding to the verification signal; when the first terminal host determines that the first database contains the customer data, use the first terminal The host sends a confirmation signal to the second interface; the second interface receiving the confirmation signal triggers the first interface to send an execution signal to a second terminal host; after the second terminal host receives the execution signal , The first terminal host determines whether to send the confirmation signal within a preset time period; when the first terminal host sends the confirmation signal within the preset time period, the second terminal host executes the finance corresponding to the execution signal Transaction; and when the first terminal host does not send the confirmation signal within the preset time period, the first terminal host sends a warning signal to the second terminal host, the warning signal includes the verification signal; in the second After receiving the warning signal, the terminal host generates a reconfirmation signal with the second terminal host, and sends the reconfirmation signal according to the device information in the verification signal; and when the first terminal host determines that the first database is not Containing the customer data, the first terminal host sends a rejection message to the second interface.

The present invention provides a conversational mobile banking system for providing secure financial services, including: a mobile device including a first interface, a second interface, and an audio transceiver, wherein the first interface generates an execution after being triggered Signal; the second interface is electrically connected to the first interface, when the second interface is triggered by the first interface, the second interface generates a verification signal including at least a device information, and receives a confirmation signal and triggers The first interface generates the execution signal, the audio transceiver is electrically connected to the first interface, and after receiving a voice message, the first interface is triggered to cause the second interface to generate the verification including at least the device information Signal; a first terminal host that is in communication with the second interface to receive the verification signal, and the first terminal host includes a first database that stores multiple pieces of customer data; when the first terminal host determines the first A database stores the customer data corresponding to the verification signal, and the first terminal host sends the confirmation signal to the second interface; when the first terminal host determines that the first database does not contain the customer data, the first A terminal host sends a rejection message to the second interface; and a second terminal host connects to the first terminal host to receive a warning signal, and communicates with the first interface to receive the execution signal; After the second terminal host receives the execution signal, the first terminal host determines whether to send the confirmation signal within the preset time period; when the first terminal host sends the confirmation signal within the preset time period, the second terminal host Perform financial transactions corresponding to the execution signal; when the first terminal host does not send the confirmation signal within the preset time period, the first terminal host transmits the warning signal to the second terminal host; wherein the verification signal further includes One person's information for the first terminal host to determine whether the customer data matches the personal information; when the customer data matches the personal information, the first terminal host sends the confirmation signal to the second interface; when the customer data does not match For the personal information, the first terminal host sends the rejection message to the second interface.

The present invention provides a conversational mobile banking system for providing secure financial services, including: a mobile device including a first interface, a second interface, and a memory, wherein the first interface generates an execution signal after being triggered The second interface is electrically connected to the first interface. When the second interface is triggered by the first interface, the second interface generates a verification signal including at least device information, and receives a confirmation signal and triggers the The first interface generates the execution signal; the memory is electrically connected to the second interface, and the memory system stores the device information, and provides the device information to the first interface after the second interface is triggered by the first interface Two interfaces; a first terminal host, which is in communication with the second interface to receive the verification signal, and the first terminal host includes a first database storing multiple pieces of customer data; when the first terminal host determines the The first database stores the customer data corresponding to the verification signal, and the first terminal host sends the confirmation signal to the second interface; when the first terminal host determines that the first database does not contain the customer data, the The first terminal host sends a rejection message to the second interface; and a second terminal host connects to the first terminal host to receive a warning signal, and communicates with the first interface to receive the execution signal; wherein After the second terminal host receives the execution signal, the first terminal host determines whether to send the confirmation signal within a preset period; when the first terminal host sends the confirmation signal within the preset period, the second terminal The host executes the financial transaction corresponding to the execution signal; when the first terminal host does not send the confirmation signal within the preset period of time, the first terminal host sends the warning signal to the second terminal host; wherein the verification signal is changed Contains a person's information for the first terminal host to determine whether the customer data matches the personal information; when the customer data matches the personal information, the first terminal host sends the confirmation signal to the second interface; when the customer data is not According to the personal information, the first terminal host sends the rejection message to the second interface.

The present invention is to provide a conversational mobile banking system and execution method for providing secure financial services, design different data transmission paths for financial services and security verification, complicate the security verification mechanism, and effectively reduce the risk of data interception , And improve the security of using mobile devices to perform financial transactions.

The above description of the disclosure and the following description of the embodiments are used to demonstrate and explain the spirit and principle of the present invention, and provide a further explanation of the scope of the patent application of the present invention.

The following describes in detail the detailed features and advantages of the present invention in the embodiments. The content is sufficient for any person skilled in the relevant art to understand and implement the technical content of the present invention, and according to the contents disclosed in this specification, the scope of patent application and the drawings Anyone skilled in the relevant art can easily understand the purpose and advantages of the present invention. The following examples further illustrate the views of the present invention in detail, but do not limit the scope of the present invention in any way.

Please refer to FIG. 1, which is a structural diagram of a conversational mobile banking system that provides secure financial services according to an embodiment of the present invention. The above system is composed of a mobile device 1 and a terminal device 2, and the two are connected through network communication, wherein the network can be realized by the Internet. The mobile device 1 includes a first interface 11, a second interface 12, and a memory 13, and a sound transceiver 14 can be configured as required; wherein the second interface 12 is electrically connected between the first interface 11 and the memory 13, and When the mobile device 1 is equipped with the audio transceiver 14, the first interface 11 is electrically connected between the second interface 12 and the audio transceiver 14. In detail, the first interface 11 is used to provide financial services, such as online account opening, transfer or currency exchange; the second interface 12 is used to provide the security verification mechanism required by the above financial services. For example, the second interface 12 can obtain the device information of the mobile device 1 and bind the mobile device 1 accordingly, and transmit the above device information to the terminal device 2 for the terminal device 2 to store the device information. When the user is using the first interface 11, the second interface 12 can be triggered to send the device information to the terminal device 2 for the terminal device 2 to confirm whether the device information matches the previously stored data. On the other hand, the memory 13 can be used to store the above device information for the second interface 12 to perform security verification. In addition, the sound transceiver 14 is used to provide the function of voice operation of the first interface 11. The user can tell the voice transceiver 14 the financial services needed to generate a voice message, and the voice message is sent to the first interface 11. The first interface 11 can analyze the financial transaction to be performed by the voice message through the semantic analysis function, and further trigger the second interface 12 to send a signal to the terminal device 2 to perform security verification. It should be noted that when the environmental sound is too noisy, the user can also use manual input or other methods to select the desired financial service, which is not limited in this embodiment. The above-mentioned mobile device 1 can be implemented by a mobile phone, a tablet computer, or other devices that can install a mobile application (mobile application, APP).

To explain the terminal device 2, please continue to refer to FIG. The terminal device 2 includes a first terminal host 21 and a second terminal host 22, wherein the first terminal host 21 further includes a first database 211. The first terminal host 21 and the second terminal host 22 can be connected by local area network (LAN) communication, or can be erected on the same rack and electrically connected to each other. The present invention does not treat the first terminal host 21 The configuration with the second terminal host 22 is restricted. In detail, the first database 211 of the first terminal host 21 stores the bound device information, and can communicate with the second interface 12 through the network to perform a security verification mechanism. On the other hand, the second terminal host 22 communicates with the first interface 11 via the network to execute the financial service selected by the user.

To specifically describe the operation flow of the above system, please refer to FIG. 2 and refer to FIG. 1 together. 2 is a flowchart of an execution method of providing a secure financial service according to an embodiment of the present invention. When the user performs financial services through the first interface 11 of the mobile device 1, please refer to step S10: the first interface 11 triggers the second interface 12 to send an authentication signal ES including at least device information to the first terminal host 21 via the network; Of device information is associated with mobile device 1. After the first terminal host 21 receives the verification signal ES, please refer to step S11: the first terminal host 21 determines whether the first database 211 contains customer data corresponding to the verification signal ES. When the first terminal host 21 determines that the first database 211 does not contain customer data, please proceed to step S12: the first terminal host 21 sends a rejection message RM to the second interface 12 to end the current authentication process. Conversely, when the first terminal host 21 determines that the first database 211 contains customer data, please proceed to step S13: the first terminal host 21 sends a confirmation signal CS to the second interface 12 so that the second interface 12 can be triggered accordingly The first interface 11 performs the following steps. After the second interface 12 receives the confirmation signal CS, please proceed to step S14: the second interface 12 triggers the first interface 11 to send the execution signal PS to the second terminal host 22, so that the first interface 11 presents to the second terminal host 22 This financial service request; where the execution signal PS includes the confirmation signal CS, device information, and related data required to execute this financial service. Specifically, because the execution signal PS contains the user's financial information (for example: account number), when the execution signal PS sent by the first interface 11 has a higher risk of being intercepted by hackers and modifying the financial data (for example: modifying the transfer The transaction is transferred to the account) before it is received by the second terminal host 22. Therefore, when the execution signal PS includes the complete confirmation signal CS, the second terminal host 22 can recognize whether the execution signal PS is generated by the first terminal host 21 to increase the security of financial transactions.

Please continue to refer to Figure 2 and refer to Figure 1 as well. As mentioned above, after the second terminal host 22 receives the execution signal PS, in order to further confirm whether the execution signal PS is transmitted by the mobile device 1, please refer to step S15: the first terminal host 21 determines whether it is in the preset A confirmation signal CS is sent during the period. Specifically, when the second terminal host 22 receives the execution signal PS, the second terminal host 22 can obtain the time point of sending the confirmation signal CS from the first terminal host 21, and calculate the second terminal host 22 to receive the execution signal PS and the second A terminal host 21 sends a confirmation signal CS, the time difference between the two events. When the above time difference does not exceed the preset time period, it means that the financial transaction to be executed is triggered by the mobile device 1; otherwise, when the above time difference exceeds the preset time period, it is necessary to further confirm whether the execution signal PS is from the mobile device 1 sent. Generally speaking, when the preset time period is set too short, the second terminal host 22 may misjudge that the first terminal host 21 did not send the confirmation signal CS within the preset time period due to an abnormal delay in network transmission; on the other hand, When the preset time period is set too long, it will not only increase the calculation time of the second terminal host 22, the second terminal host 22 also has a higher probability to mistake the confirmation signal CS sent by the first terminal host 21 in the previous few times as The confirmation signal CS this time further reduces the security. Therefore, the preset time period may be set between five minutes and ten minutes, so that the second terminal host 22 can efficiently determine whether the above-mentioned time difference exceeds the preset time period. When the first terminal host 21 sends the confirmation signal CS within the preset time period, please proceed to step S16: the second terminal host 22 executes the financial transaction corresponding to the execution signal PS, wherein the financial transaction is selected by the user through the first interface 11 Financial services. Conversely, when the first terminal host 21 does not send the confirmation signal CS within the preset time period, please proceed to step S17: the first terminal host 21 transmits a warning signal WS to the second terminal host 22, where the warning signal WS includes the aforementioned Verification signal ES. In this case, it means that the execution signal PS sent by the first interface 11 is likely to be intercepted during data transmission, and its signal transmission content is also modified. Therefore, the first terminal host 21 needs to send a warning signal WS to the second terminal host 22 To inform the user of the mobile device 1 through the second terminal host 22. In addition, optionally, after receiving the warning signal WS, the second terminal host 22 may further perform step S18: the second terminal host 22 generates a reconfirmation signal RCS, and sends the reconfirmation signal RCS according to the device information in the verification signal ES . In detail, in this case, because the execution signal PS is likely to be intercepted during data transmission and its signal content is modified, the second terminal host 22 needs to first find out the mobile device 1 to which the user is bound according to the device information , And sends the re-confirmation signal RCS to the user's mobile device 1 in order to confirm that the mobile device sending out the execution signal PS is indeed the mobile device 1 verified by the first terminal host 21. It should be added that the mobile device 1 can receive the re-confirmation signal RCS through the first interface 11 and remind the user by text message, sound or vibration.

In another embodiment of the present invention, in step S12 shown in FIG. 2, the rejection message RM may further include some financial service items, and the aforementioned partial financial service items may be transmitted to the first interface 11 through the second interface 12 , So that the first interface 11 provides the above-mentioned partial financial service items to the second terminal host 22. When the second terminal host 22 determines that the financial service selected by the mobile device 1 is included in some of the financial service items described above, the second terminal host 22 executes the financial service. Specifically, in this step, since the first database 211 has not yet stored the customer data corresponding to the mobile device 1, the financial service items that can be selected by the mobile device 1 can be limited to those who need to provide personal data such as opening an account and applying for a credit card. Service items so that the first database 211 can obtain and store the user's customer data through this service.

To illustrate the detailed operation of step S11 in FIG. 2, please refer to FIG. 3, and refer to FIG. 1 together. FIG. 3 is a detailed flowchart of an execution method of a conversational mobile banking system for providing secure financial services according to an embodiment of the invention. Please refer to step S111: the first terminal host 21 judges whether the customer data conforms to personal information, wherein the personal information is included in the verification signal ES. Specifically, the personal information is generated by the first interface 11 and is associated with the financial service selected by the user, for example: the transfer-out account required for the transfer (ie, the user’s financial account), and the identity card required for account opening Number, etc. When the customer information does not match the personal information, please proceed to step S12: the first terminal host 21 sends a rejection message RM to the second interface 12. In this case, because the first database 211 does not store the corresponding customer data, the identity verification process is ended by sending a rejection message RM to the second interface 12. Conversely, when the customer data matches the personal information, please proceed to step S13: the first terminal host 21 sends a confirmation signal CS to the second interface 12. Since step S13 has been described in FIG. 2, the description will not be repeated here.

In summary, the present invention is to provide a conversational mobile banking system and execution method for providing secure financial services, designing different data transmission paths for financial services and security verification, which complicates the security verification mechanism and effectively reduces The risk of data being intercepted and enhance the security of using mobile devices to execute financial transactions.

Although the present invention is disclosed as the foregoing embodiments, it is not intended to limit the present invention. Without departing from the spirit and scope of the present invention, all modifications and retouching are within the scope of patent protection of the present invention. For the protection scope defined by the present invention, please refer to the attached patent application scope.

1: mobile device 11: The first interface 12: Second interface 13: Memory 14: voice transceiver 2: terminal device 21: the first terminal host 211: The first database 22: Second terminal host ES: Verification signal CS: confirmation signal PS: execution signal RCS: reconfirm the signal WS: Warning signal RM: rejection message

FIG. 1 is a structural diagram of an interactive mobile banking system for providing secure financial services according to an embodiment of the present invention. 2 is a flowchart of an execution method of providing a secure financial service according to an embodiment of the present invention. FIG. 3 is a detailed flowchart of an execution method of providing a secure financial service according to an embodiment of the present invention.

Claims (3)

An execution method for providing secure financial services includes: triggering a second interface of a mobile device with a first interface of a mobile device to send a verification signal including at least a device information to a first terminal host via a network; The first terminal host determines whether a first database contains a client data corresponding to the verification signal; when the first terminal host determines that the first database contains the client data, the first terminal host sends a confirmation Signal to the second interface; the second interface to receive the confirmation signal, triggering the first interface to send an execution signal to a second terminal host; after the second terminal host receives the execution signal, the second interface A terminal host determines whether to send the confirmation signal within a preset time period; when the first terminal host sends the confirmation signal within the preset time period, the second terminal host executes the financial transaction corresponding to the execution signal; when the The first terminal host does not send the confirmation signal within the preset time period, and the first terminal host sends a warning signal to the second terminal host, the warning signal includes the verification signal; the second terminal host receives the verification signal After the warning signal, the second terminal host generates a reconfirmation signal and sends the reconfirmation signal according to the device information in the verification signal; and when the first terminal host determines that the first database does not contain the customer data, The first terminal host sends a rejection message to the second interface. A conversational mobile banking system for providing secure financial services, including: a mobile device including a first interface, a second interface, and an audio transceiver, wherein the first interface generates an execution signal after being triggered; The second interface is electrically connected to the first interface. After the second interface is triggered by the first interface, the second interface generates a verification signal including at least device information, and receives a confirmation signal to trigger the first interface The interface generates the execution signal, the sound transceiver is electrically connected to the first interface, and after receiving a voice message, the first interface is triggered to cause the second interface to generate the verification signal including at least the device information; The first terminal host is in communication connection with the second interface to receive the verification signal, and the first terminal host includes a first database storing a plurality of customer data; when the first terminal host judges the first database The client data corresponding to the verification signal is stored, and the first terminal host sends the confirmation signal to the second interface; when the first terminal host determines that the first database does not contain the client data, the first terminal host Send a rejection message to the second interface; and a second terminal host connected to the first terminal host to receive a warning signal, and communicated with the first interface to receive the execution signal; wherein at the second terminal After the host receives the execution signal, the first terminal host determines whether to send the confirmation signal within a preset period; when the first terminal host sends the confirmation signal within the preset period, the second terminal host executes the corresponding Perform financial transactions of the signal; when the first terminal host does not send the confirmation signal within the preset time period, the first terminal host sends the warning signal to the second terminal host; wherein the verification signal further includes a person's information, For the first terminal host to determine whether the customer data matches the personal information; when the customer data matches the personal information, the first terminal host sends the confirmation signal to the second interface; when the customer data does not match the personal information , The first terminal host sends the rejection message to the second interface. A conversational mobile banking system for providing secure financial services, including: a mobile device including a first interface, a second interface, and a memory, wherein the first interface generates an execution signal after being triggered; the first The two interfaces are electrically connected to the first interface. When the second interface is triggered by the first interface, the second interface generates a verification signal including at least a device information, and receives a confirmation signal to trigger the first interface Generating the execution signal; the memory is electrically connected to the second interface, and the memory system stores the device information, and provides the device information to the second interface after the second interface is triggered by the first interface; A first terminal host is in communication connection with the second interface to receive the verification signal, and the first terminal host includes a first database storing multiple pieces of customer data; when the first terminal host judges the first data The database stores the customer data corresponding to the verification signal, and the first terminal host sends the confirmation signal to the second interface; when the first terminal host determines that the first database does not contain the customer data, the first terminal The host sends a rejection message to the second interface; and a second terminal host connects to the first terminal host to receive a warning signal, and communicates with the first interface to receive the execution signal; where the second After the terminal host receives the execution signal, the first terminal host determines whether to send the confirmation signal within a preset time period; when the first terminal host sends the confirmation signal within the preset time period, the second terminal host performs The financial transaction of the signal should be performed; when the first terminal host does not send the confirmation signal within the preset period of time, the first terminal host sends the warning signal to the second terminal host; wherein the verification signal further includes a person's information , For the first terminal host to determine whether the customer data matches the personal information; when the customer data matches the personal information, the first terminal host sends the confirmation signal to the second interface; when the customer data does not match the individual Information, the first terminal host sends the rejection message to the second interface.

Images