TWI709097B - Online banking login system and method thereof - Google Patents

Abstract

An online banking login system having a communication unit, a storage unit and a processing unit is provided. The online banking system provides an online banking login page of an electronic device having a login barcode, wherein the login barcode includes a first login identification code. The processing unit receives the first login identification code through the communication unit. The processing unit receives a login request having a second login identification code and a verification result. The processing unit determines that whether the first login identification code is the same as the second login identification code. The processing unit provides an online banking service according to the user account when the first login identification code is the same as the second login identification code and the verification result is legal.

Description

Online banking login system and method

The present invention relates to digital financial technology, in particular to an online banking login system and method.

With the online banking services and the operating environment of different users, banks have more and more channels to provide digital financial services. For example, customers can use digital financial services in different ways, such as mobile banking applications and online banking in the form of web pages. However, mobile banking applications and online banking mostly use independent logins. In other words, if a user logs in to the mobile banking application, he still has to log in again when he wants to use online banking, which causes trouble for customers to log in. In particular, considering that customers mostly use personal computers, notebook computers and other personal devices when using online banking, it is quite inconvenient to use the method of entering account and password when designing the login interface of online banking.

The invention provides an online bank login system and a bank login method to provide a more convenient online bank login method.

The online banking login system of an embodiment of the present invention is communicatively connected to the electronic device and the handheld device, and the handheld device corresponds to the user account. The online banking login system has a communication unit, a storage unit and a processing unit. The communication unit is communicatively connected to the electronic device and the handheld device to send and receive information. The storage unit is used to store information. The processing unit is connected to the communication unit and the storage unit. The processing unit provides an electronic device online banking login page, wherein the online banking login page has a login barcode, and the login barcode includes a first login identification code. When receiving the second login identification code from the handheld device through the communication unit, the processing unit determines whether the second login identification code is consistent with the first login identification code. The processing unit further guides the handheld device to display the handheld device login page when the second login identification code is consistent with the first login identification code, so as to receive the login request through the handheld device login page. The login request has a user account and a biometric verification result. The processing unit judges whether the biometric verification result is legal, and the processing unit also provides corresponding online banking services in the electronic device according to the user account number when the biometric verification result is legal.

An online banking login method according to an embodiment of the present invention provides the following steps: providing an electronic device online banking login page, where the online banking login page includes a login barcode, and the login barcode includes a first login identification code; receiving a login request from a handheld device, where login The request includes the user account, the second login identification code, and the biometric verification result, and the handheld device corresponds to the user account; determines whether the biometric verification result is legal; and when the biometric verification result is legal, finds the corresponding according to the second login identification code And provide corresponding online banking services based on the first login identification code and the corresponding user account.

Based on the above, the online banking login system and online banking login method provided in this disclosure simplify the steps of logging in to the online banking. And from the user's point of view, you can log in to online banking by scanning the login barcode provided by the online banking system with a handheld device, instead of re-entering the user's account and password on the interface of online banking, which improves login to online banking The convenience.

In order to make the above-mentioned features and advantages of the present invention more comprehensible, the following specific embodiments are described in detail in conjunction with the accompanying drawings.

FIG. 1 is a system diagram of an online banking login system according to an embodiment of the disclosure. Please refer to FIG. 1, in an embodiment of the present disclosure, the online banking login system 100 will be communicatively connected (for example, wired or wirelessly connected) to the electronic device 10 and the handheld device 20, so that the user can operate The electronic device 10 and the handheld device 20 use various financial services on the Internet. In an embodiment of the present invention, the electronic device 10 is, for example, a personal computer, a notebook computer, a tablet computer, or other devices with a browser installed and capable of opening an online banking login webpage suitable for a computer interface. The handheld device 20 has the function of biometric recognition, such as fingerprint recognition, face recognition, pupil recognition, vein recognition, voiceprint recognition, etc. The present disclosure does not limit the types of biometric recognition. In an embodiment of the present disclosure, the handheld device 20 is a smart phone, a tablet computer, or other banking applications that can be installed on mobile devices with biometric identification. The disclosure does not limit the types of the electronic device 10 and the handheld device 20.

The online banking login system 100 of an embodiment of the present disclosure has a communication unit 110, a storage unit 120 and a processing unit 130. The communication unit 110 is used for transmitting and receiving information. In particular, the online banking login system 100 exchanges information with the electronic device 10 and the handheld device 20 through the communication unit 110. The electronic device 10 can be connected (for example, connected via a wired network, a wireless network or a telecommunications network) to the online banking login system 100, and perform a login operation on the online banking login page, and then use the online banking login system 100 provides various financial services, such as transfer services, transaction record query services, foreign exchange services, financial management services, etc. This disclosure does not limit the types of financial services.

In an embodiment of the present disclosure, the communication unit 110 may be implemented using various types of communication chips. For example, the communication chip may be a global system for mobile communication (GSM), personal handheld phone system. (Personal Handy-phone System, PHS), Code Division Multiple Access (CDMA) system, Wideband Code Division Multiple Access (WCDMA) system, Long Term Evolution (LTE) system , Worldwide interoperability for Microwave Access (WiMAX) system, Wireless Fidelity (Wi-Fi) system or Bluetooth signal transmission components, but this disclosure is not limited to this.

The storage unit 120 is used for storing information. The storage unit 120 is, for example, the storage unit 120 can adopt any type of fixed or removable random access memory (Random Access Memory, RAM), read-only memory (Read-Only Memory, ROM), flash memory ( Flash memory), hard disk (Hard Disk Drive, HDD), solid state drive (Solid State Drive, SSD) or similar components or a combination of the above components are implemented, and the present disclosure is not limited thereto.

The processing unit 130 is connected to the communication unit 110 and the storage unit 120 to perform necessary functions of the automatic transfer system 100. The processing unit 130 is, for example, a central processing unit (CPU), or other programmable general-purpose or special-purpose microprocessor (Microprocessor), digital signal processor (DSP), or programmable The present disclosure is not limited to the integrated controller, Application Specific Integrated Circuit (ASIC) or other similar components or a combination of the above components.

FIG. 2 shows a flowchart of an online banking login method according to an embodiment of the disclosure. This online banking login method is at least applicable to the online banking login system 100 of the embodiment in FIG. 1, but is not limited to this. Hereinafter, the operation mode of the online banking login system 100 and the flow of the online banking login method will be described with reference to FIGS. 1 and 2.

In step S210, the processing unit 130 provides the online banking login page of the electronic device 10 through the communication unit 110. In this embodiment, the online banking login page has a login barcode, and the login barcode has a first login identification code. In this embodiment, the login barcode is implemented in the form of various types of 2-Dimensional Bar Code (2-Dimensional Bar Code), such as QR code, Chinese Xin code, PDF417 code, etc. The disclosure is not limited to this. The first login identification code corresponds to a unique value. For example, the processing unit 130 retrieves and analyzes the packet transmitted by the electronic device 10 through the communication unit 110, thereby obtaining the information when the electronic device 10 is logged into the online banking login system 100 Internet Protocol Address (IP Address, hereinafter referred to as IP address), Media Access Control Address (MAC address), current date (ie, access to the network through the communication unit 110 At least one or more of the current date of the bank login system 100) and the current time (that is, the current time of accessing the online banking login system 100 through the communication unit 110), that is, the processing unit 130 is generating the first login identification Code time is dynamic. However, the basis used by the processing unit 130 to generate the first login ID is not limited to this. Others, such as the user's account, device ID, and various algorithms used to generate random numbers, can be individually or combined. Applied in this embodiment.

In an embodiment of the present disclosure, the processing unit 130 uses a randomly generated unique serial number based on the IP address, current date and current time of the electronic device 10 obtained when the electronic device 10 accesses the online banking login system 100 Randomize the numbers to calculate a set of serial numbers as the first login identification code. The advantage of generating the first login identification code through the IP address is that it can prevent malicious users from intercepting the packets sent when the electronic device 10 accesses the online banking login system 100, or by tampering with the IP address. Financial information flows into the hands of other malicious users.

In an embodiment of this disclosure, the online banking login page also provides a traditional login method, that is, logging in to the online banking by entering a user account and password. Therefore, the processing unit 130 provides two different options for the customer to choose from the traditional login option corresponding to the input of the account password and the quick login corresponding to the disclosed online banking login method on the online banking login page. The disclosure is not limited to this.

In step S220, the processing unit 130 receives the second login identification code from the handheld device 20 through the communication unit 110. In an embodiment of the present disclosure, the customer first installs a mobile banking application in the handheld device 20 to interact with the online banking login system 100 through the mobile banking application. In addition, customers will first log in with their user account in the mobile banking application to enable various financial service options in the mobile banking application. In an embodiment of the present disclosure, the customer can log in through a user account, password, or graphic password, or alternatively, the customer can log in through a biometric identification bound to a specific user account. The disclosure is not limited to this.

The second login ID is transmitted by the handheld device 20 and corresponds to the information of the first login ID. In detail, in an embodiment of the present disclosure, the customer can call the camera of the handheld device 20 from the mobile banking application to scan and read the login barcode with the camera of the handheld device 20 and read the login barcode. The first login identification code contained in the barcode is used to generate the second login identification code.

In step S230, the processing unit 130 determines whether the second login identification code is consistent with the first login identification code. In detail, the second login identification code is generated by the handheld device 20 scanning and reading the first login identification code in the login barcode. Therefore, the second login ID obtained by the handheld device 20 will be the same as the first login ID. Based on this, the processing unit 130 can associate the login information and pages of the electronic device 10 and the handheld device 20 with each other through the same first login identification code and second identification code.

In step S240, when the second login identification code is consistent with the first login identification code, the processing unit 130 guides the handheld device 20 to display the handheld device login page to receive the login request through the handheld device login page. Moreover, the login request has at least a user account and a verification result.

In step S250, the processing unit 130 determines whether the verification result is legal.

Specifically, in an embodiment of the present disclosure, the verification result may be a biological verification result or a graphic verification result.

The handheld device login page provides biometric login and graphic recognition login. If the customer chooses to log in by pattern recognition, the customer needs to store the logon pattern in the handheld device 20 in advance. Or, in another embodiment of the present disclosure, the mobile banking application program will require the user to authorize access to the preset graphic information in the handheld device 20 to set the default graphic information as the login graphic.

In this way, the mobile banking program will determine whether the graphic password entered by the user is consistent with the login graphic. If they are consistent, the mobile banking program will return the graphic verification result as legal to the processing unit 130.

Specifically, in an embodiment of the present disclosure, the customer will store biometrics in the handheld device 20 in advance. The biometric feature is, for example, at least one of a fingerprint verification result, a voiceprint verification result, a face recognition verification result, a pupil recognition verification result, and a vein verification result. If the customer has not set the biometrics, the mobile banking application will first prompt the user to set the biometrics, and use the hardware of the handheld device 20, such as fingerprint reader, camera, microphone, etc., to record the biometrics of the customer, and This biological characteristic is stored in the handheld device 20 as a preset biological characteristic value.

Or, in another embodiment of the present disclosure, the mobile banking application will require the user to authorize access to the biometric information in the handheld device 20. That is to say, after the user is authorized, the mobile banking application can obtain and use the biometric information in the handheld device 20 as the default biometric value for comparison when the user wants to log in and input biometrics in the future source.

When the handheld device 20 displays the handheld device login page, the mobile banking application also prompts the customer to enter further biometrics through the screen of the handheld device 20, voice playback device, etc., to obtain the biometric verification result. The biometric verification result is obtained by comparing the preset biometric value with the biometric input by the customer, for example, corresponding to the fingerprint verification result, voiceprint verification result, facial recognition verification result, pupil recognition verification result, and vein verification result at least one.

Or, in another embodiment of the present disclosure, the mobile banking program will request the user to authorize the activation of the biometric module in the handheld device 20. That is to say, when the user wants to log in, the mobile banking application will call the biometric recognition module in the handheld device 20 (for example, a fingerprint reader, camera, microphone, etc.) and a biometric recognition module formed by the cooperation of the processor. Group), the biometric identification module will compare the biometrics entered by the customer according to the preset biometric values in its memory, and after the biometric verification is completed, the biometric verification results will be returned to the mobile banking application. In other words, unlike the previous embodiment, the mobile banking application executes the relevant procedures of biometric identification. In this embodiment, the mobile banking application only obtains the biometric verification result of the biometric identification module, which does not involve biometrics. verification. In addition, the mobile banking application will also prompt the customer to further input biometrics through the screen of the handheld device 20, voice playback device, etc., to obtain the biometric verification result. The biometric verification result is obtained by comparing the preset biometric value with the biometric input by the customer, for example, corresponding to the fingerprint verification result, voiceprint verification result, facial recognition verification result, pupil recognition verification result, and vein verification result at least one. The method of obtaining the biometric verification result has been described in the front, and will not be repeated here.

It is worth mentioning that, in the embodiment of the disclosure, the handheld device 20 will execute the biometric and/or graphic recognition process to generate the biometric verification result and/or the graphic verification result. Moreover, only the biometric verification result and/or the graphic verification result are sent when the login request is sent. In other words, the online banking login system 100 will not learn the biometric information and login patterns of the customer. Therefore, even if a malicious third party intercepts or eavesdrops on the packet, the biometric information and login information of the customer will not be outflowed. Based on this, the online banking login system 100 can extend the biometric login method of the mobile banking application to the online banking, so as to enhance the security of login by means of two-factor authentication. At the same time, it also protects customers' personal biometric information and verification information from being stolen by others.

In step S260, the processing unit 130 also provides corresponding online banking services in the electronic device 10 according to the user account when the biometric verification result is legal.

After the processing unit 130 provides the corresponding online banking service to the electronic device 10 according to the user account, it indicates that the login operation of the online banking has been completed. At this time, in an embodiment of the present disclosure, if the mobile banking application of the handheld device 20 has a login session (Session), the mobile banking application will be forced to log out to maintain the security of the network service .

It is worth mentioning that, in some embodiments of this disclosure, in order to enhance security, the customer will also bind the handheld device in advance in the online banking login system 100 or other servers provided by the bank, so that the bank information The library contains the device identification code of the mobile banking application of the handheld device 20. The bound handheld device 20 represents that it is a legal device that has been confirmed by the customer, and therefore can open a higher financial service authority. However, in other embodiments of the present disclosure, the handheld device 20 can also identify whether the handheld device 20 is a legitimate device of the corresponding client through other methods, such as the phone number of the handheld device 20, and the disclosure is not limited to this.

Since the handheld device 20 will be regarded as a legal device corresponding to the customer, if the biometric verification result is legal, the operator will be regarded as the customer himself. That is to say, in this embodiment, the customer does not simply log in to online banking. Compared with the traditional way of inputting account and password, the online banking login system 100 further uses the cooperation of the handheld device 20 to realize the biometric method. Introduce online banking login to verify the identity of users.

In addition, in addition to authenticating the customer through the handheld device 20, in an embodiment of the present invention, the processing unit 130 also extracts the IP address of the electronic device 10 from the first login ID and the first login ID to generate the current The current date and current time. In this way, the processing unit 130 determines the geographic location of the corresponding electronic device 10 according to the IP address.

On the other hand, the processing unit 130 will also obtain the location of the handheld device 20 and the request date and time of sending the login request according to the login request. In an embodiment of the present disclosure, the processing unit 130 determines the location of the handheld device 20 based on the IP address of the source of the login request. Alternatively, the mobile banking application will determine the GPS location of the handheld device 20 or correspond to it. The location location of is included in the login request, so that the processing unit 130 obtains the location location of the handheld device 20.

Based on this, the processing unit 130 further compares the geographic location of the electronic device 10 of the electronic device 10 and the positioning location of the handheld device 20, the current date and the request date, and the current time and the request time. If the geographic location of the location address of the handheld device 20 and the IP address of the corresponding electronic device 10 is less than the preset distance, it means that the locations of the electronic device 10 and the handheld device 20 are nearby and are regarded as being operated by the same person. In the embodiment of the present disclosure, the predetermined distance is, for example, within 10 kilometers, and both distances are located in the same city and the same country, but the present disclosure is not limited to this.

In addition, the processing unit 130 will further determine whether the request date and the current date are less than the preset date interval, and determine whether the request time and the current time are less than the preset time interval. If the location of the handheld device 20 corresponds to the Internet protocol address of the electronic device 10 and the geographic location is greater than the preset distance, the request date and time of the handheld device 20 are the same as the current date of the electronic device 10 or the current time. If the interval is greater than any one of the preset time intervals, the processing unit 130 will not provide corresponding online banking services based on the user account. Furthermore, in other embodiments of the present disclosure, the processing unit 130 will also stop the login operation of the user account, and send a warning notification based on the customer's phone number pre-registered in the database.

In an embodiment of the present disclosure, in addition to comparing the location, date and time, the processing unit 130 further determines whether the device identification code of the handheld device 20 is stored in the online banking login system 100. Specifically, as described above, in some embodiments of the present disclosure, the customer must bind the handheld device in advance, so the online banking login system 100 stores multiple bound registration device identification codes. In one embodiment of this disclosure, the online banking login system 100 will store the registered device identification code, but in other embodiments of this disclosure, the online banking login system 100 will store the registered device identification code in other bank information In the database, the registration device identification code can be obtained by accessing the bank database.

In addition, the mobile banking application of the handheld device 20 will further entrain the device identification code in the login request when sending the login request, and send it to the online banking login system 100. When the network receives the login request, it will further determine whether the device identification code of the handheld device 20 is one of the registered device identification codes. If the online banking login system 100 determines that the device identification code of the handheld device 20 is not one of the registered device identification codes, the corresponding online banking service is not provided. That is, in this embodiment, only the registered handheld device 20 can be applied to this online banking login method. In this way, to enhance the security of online banking login.

In summary, the online banking login system and online banking login method provided in this disclosure provide simplified steps for logging in to online banking. Especially, from the user's point of view, you can log in to online banking by scanning the login barcode with a handheld device, instead of having to re-enter the user's account password on the online banking interface, which improves the convenience of logging in to online banking . Not only that, the advantages of biometric features of existing mobile banks can continue to be extended to electronic devices. Through bound mobile devices and biometrics, online banking logins are more bound to biometrics, and thus have the security of two-factor authentication.

Although the present invention has been disclosed in the above embodiments, it is not intended to limit the present invention. Anyone with ordinary knowledge in the technical field can make some changes and modifications without departing from the spirit and scope of the present invention. The scope of protection of the present invention shall be determined by the scope of the attached patent application.

10: Electronic device 20: Handheld device 100: Online banking login system 110: Communication unit 120: Storage unit 130: Processing unit S210~S260: Steps

FIG. 1 is a system schematic diagram of an online banking login system according to an embodiment of the disclosure; FIG. 2 is a flowchart of an online banking login method according to an embodiment of the disclosure.

10: Electronic device

20: Handheld device

100: Online banking login system

110: Communication unit

120: storage unit

130: processing unit

Claims (12)

An online banking login system, which is communicatively connected to an electronic device and a handheld device, wherein the handheld device corresponds to a user account, the system includes a communication unit, which is communicatively connected to the electronic device and the handheld device to transmit and receive information; A storage unit for storing information; and a processing unit connected to the communication unit and the storage unit to provide the electronic device online banking login page, wherein the online banking login page includes a login barcode, and the login barcode includes a first login identification code, Wherein, when the processing unit receives the second login identification code from the handheld device through the communication unit, it determines whether the second login identification code is consistent with the first login identification code, and the processing unit further identifies the second login identification code. When the code is consistent with the first login identification code, guide the handheld device to display a handheld device login page to receive a login request through the handheld device login page, wherein the login request includes the user account and the verification result, and the processing unit determines Whether the verification result is legal, the processing unit also provides corresponding online banking services in the electronic device based on the user account when the verification result is legal, wherein the login barcode is determined by the online banking system based on the electronic device Generated by the Internet Protocol address (IP address), current date, and current time, where The processing unit also obtains the Internet Protocol address (IP Address), current date, and current time of the electronic device according to the first login identification code from the electronic device, and the processing unit also obtains the login request Acquire the location location, request date, and request time of the handheld device, the processing unit also determines whether the location location of the handheld device and the geographic location corresponding to the Internet protocol address of the electronic device are less than a preset distance, the processing The unit also determines whether the request date and the current date are less than a preset date interval, the processing unit also determines whether the request time and the current time are less than a preset time interval, and the processing unit combines the positioning position of the handheld device and the electronic When the geographic location corresponding to the Internet protocol address of the device is greater than the preset distance, and the request time and the current time are greater than the preset time interval, the corresponding online banking service is not provided based on the user account. In the online banking login system described in item 1 of the scope of patent application, the second login identification code is obtained by the handheld device reading the login barcode. For example, in the online banking login system described in item 1 of the scope of patent application, the verification result is a biometric verification result or a graphic recognition result. For example, the online banking login system described in item 3 of the scope of patent application, wherein the biometric verification result is that the handheld device receives a biometric feature and compares whether the biometric feature matches the preset biometric value stored in the handheld device Acquired. As described in item 3 of the scope of patent application, the biometric verification result corresponds to at least one of a fingerprint verification result, a voiceprint verification result, a facial recognition verification result, a pupil recognition verification result, and a vein verification result. For example, in the online banking login system described in claim 1, wherein the storage unit also stores a plurality of registered device identification codes, and the login request includes the device identification code corresponding to the handheld device, and the processing unit further receives the When a login request is made, it is determined whether the device identification code of the handheld device belongs to one of the registered device identification codes, and the processing unit further determines whether the device identification code of the handheld device does not belong to one of the registered device identification codes For a while, the corresponding online banking service is not provided based on the user account. An online banking login method is suitable for an online banking login system including a processing unit. The online banking login method includes: through the processing unit: providing an electronic device online banking login page, wherein the online banking login page includes a login barcode, and The login barcode includes a first login identification code; receiving a login request from a handheld device, wherein the login request includes a user account, a second login identification code, and a biometric verification result, and the handheld device corresponds to the user account; determining the Whether the verification result is legal; when the verification result is legal, find the corresponding first login ID according to the second login ID, and according to the first login ID and the corresponding user The account provides corresponding online banking services; the login barcode is generated based on the Internet protocol address, current date, and current time of the electronic device; the Internet of the electronic device is obtained based on the first login identification code from the electronic device Internet Protocol address (IP address), current date, and current time; obtain the location, request date, and request time of the handheld device according to the login request; determine the location of the handheld device and the Internet of the electronic device The geographic location corresponding to the network protocol address is less than the preset distance; determine whether the requested date and the current date are less than the preset date interval; determine whether the requested time and the current time are less than the preset time interval; and on the handheld device When the location location of the electronic device and the corresponding geographic location of the Internet protocol address of the electronic device are greater than the preset distance, and the request time and the current time are greater than the preset time interval, the corresponding user account is not provided Of this online banking service. For example, the online banking login method described in item 7 of the scope of patent application further includes: reading the login barcode to obtain the second login identification code. For example, the online banking login method described in item 7 of the scope of patent application, wherein the verification result is a biometric verification result or a graphic recognition result. For example, the online banking login method described in item 9 of the scope of patent application further includes: receiving a biometric feature and comparing whether the biometric feature matches the preset biometric value stored in the handheld device to obtain the biometric verification result . As described in item 9 of the scope of patent application, the biometric verification result corresponds to at least one of fingerprint verification result, voiceprint verification result, facial recognition verification result, pupil recognition verification result, and vein verification result. For example, the online banking login method described in item 7 of the scope of patent application further includes: storing a plurality of registered device identification codes, wherein the login request includes the device identification code corresponding to the handheld device; upon receiving the login request, determining the Whether the device identification code of the handheld device belongs to one of the registered device identification codes; and when the device identification code of the handheld device does not belong to one of the registered device identification codes, it is not provided based on the user account The corresponding online banking service.

Images