TWI753679B - Online transaction management method and system - Google Patents

Abstract

In an online transaction management method and system, when a proxy server receives a transaction identification code request from a client terminal and contains transaction content generated by executing a first application program, it stores the transaction content and the unique corresponding transaction identification code and transmits it. The transaction identification code is sent to the client terminal for its storage; the client terminal executes a second application program to transmit the transaction identification code, the identification material uniquely corresponding to the client, and the transaction content to the transaction server for its confirmation of the transaction The identification information and the transaction content; the transaction server processes the transaction according to the confirmation result and stores the transaction result data corresponding to the transaction identification code, which includes the transaction status indicating the success or failure of the transaction, and when the transaction status indicates The transaction details when the transaction is successful.

Description

Online transaction management method and system

The present invention relates to online transactions, in particular to an online transaction management method and system.

Existing online transaction management systems, such as a savings planning management system disclosed in Taiwan's new patent M589851, need to use a proxy server that communicates with a user device and a transaction server (such as an account server). The transaction information (such as transfer setting information and saving instruction) from the user device is sent to the transaction server, so that the transaction server can execute related transactions (such as transfer and savings) according to the transaction information. Please note that in the above transaction process, the proxy server must not only transmit account and transfer setting information, but also securely record or store the transaction information for subsequent management.

However, due to the current policy trend towards open banking, in order to ensure information security and avoid the risk of personal information leakage, for the third-party service provider (Third-Party Service Provider; hereinafter referred to as the proxy server in the above transaction management system) TSP operators), if they are in line with the current second-stage risk control of Open Banking, TSP operators must cooperate in physical security, sensitive data, operations, information security, network, life cycle, outsourcing operations, and legal compliance. Regulation processing. In this way, the threshold for cooperation between financial institutions and TSP operators will be greatly increased, which is not conducive to the promotion of open banking.

Therefore, how to devise an online transaction management method that can effectively avoid the risk of personal capital leakage, lower the cooperation threshold for TSP operators, and facilitate the promotion of open banking has become one of the urgent issues in financial services.

Therefore, the purpose of the present invention is to provide an online transaction management method and system, which can overcome at least one disadvantage of the prior art.

Therefore, an online transaction management method provided by the present invention utilizes at least an agent server provided by an agent, a transaction server provided by a banking institution, and a transaction server held by a client and connected with the agent server and the agent server. The transaction server is communicatively connected to a client terminal that stores a first application program provided by the agent and related to the agent's agency business and a first application program provided by the banking institution and related to transaction authorization. Two application programs, the online transaction management method includes the following steps: (A) the client terminal, by executing the first application program, generates and displays a user operation interface corresponding to the agency business, and transmits it to the agency server A transaction ID request for a transaction to be performed by the client, the transaction ID request including the transaction content generated by man-operating the user interface; (B) the proxy server responds to the request received from the client terminal The transaction identification code request generates a transaction identification code uniquely corresponding to the transaction, stores the transaction identification code and the transaction content with the corresponding relationship, and transmits the transaction identification code to the client terminal; (C) the client terminal When receiving the transaction identifier from the proxy server, store the transaction identifier and start executing the second application, and transmit a transaction request to the transaction server through the execution of the second application, the transaction The request includes the transaction identifier, the identification information uniquely corresponding to the client, and the transaction content; and (D) the transaction server confirms the identification information and the transaction content in response to the transaction request received from the client terminal , and process the transaction according to the confirmation result, so as to obtain and store a transaction result data corresponding to the transaction ID, the transaction result data includes the transaction status indicating that the transaction is successful or failed, and when the transaction status indicates that the transaction is successful transaction details at the time.

The online transaction management method of the present invention is also implemented by using a gateway server in communication with the proxy server and the transaction server, and further includes the following steps after step (D): (E) the client terminal via the The execution of the first application program sends a transaction inquiry request containing the transaction identification code to the proxy server; (F) the proxy server responds to the transaction inquiry request received from the client terminal through the gateway server , send a transaction result request containing the transaction identification code to the transaction server; (G) the transaction server responds to the transaction result request received, and transmits the transaction result data corresponding to the transaction identification code to the transaction result data. the gateway server; (H) the gateway server transmits a transaction result reply containing the transaction result information to the proxy server through an application programming interface compliant with the proxy server; and (I) the proxy When receiving the transaction result reply from the gateway server, the server transmits a transaction inquiry reply containing the transaction result data to the client terminal, so that the client terminal can display the transaction result data.

Therefore, an online transaction management system provided by the present invention includes a client terminal, an agent server, and a transaction server.

The client terminal is held by a client and stores a first application program provided by an agent and related to agency business and a second application program provided by a banking institution and related to transaction authorization.

The proxy server is provided by the proxy and communicates with the client terminal.

The transaction server is provided by the banking institution and communicates with the client terminal.

The client terminal, by executing the first application program, generates and displays a user operation interface corresponding to the agency business, and transmits a transaction identification code request related to a transaction that the client wants to perform to the agency server, the The transaction ID request includes transaction content generated by man-operating the user interface.

In response to the transaction ID request received from the client terminal, the proxy server generates a transaction ID uniquely corresponding to the transaction, stores the transaction ID and the transaction content having a corresponding relationship, and converts the transaction ID to the transaction ID. transmitted to the client terminal.

When the client terminal receives the transaction identification code from the proxy server, it stores the transaction identification code and starts to execute the second application, and sends a transaction request to the transaction server through the execution of the second application , the transaction request includes the transaction identification code, the identification data uniquely corresponding to the customer, and the transaction content.

In response to the transaction request received from the client terminal, the transaction server confirms the identity information and the transaction content, and processes the transaction according to the confirmation result, so as to obtain and store a transaction result data corresponding to the transaction identifier, The transaction result data includes a transaction status indicating that the transaction is successful or unsuccessful, and transaction details when the transaction status indicates that the transaction is successful.

The online transaction management system of the present invention further comprises a gateway server provided by the banking institution and in communication with the proxy server and the transaction server. The client terminal transmits a transaction inquiry request including the transaction identification code to the proxy server through the execution of the first application program. In response to the transaction inquiry request received from the client terminal, the proxy server sends a transaction result request including the transaction identification code to the transaction server via the gateway server. In response to the received transaction result request, the transaction server transmits the transaction result data corresponding to the transaction identifier to the gateway server. The gateway server transmits a transaction result reply containing the transaction result data to the proxy server through an application programming interface compliant with the proxy server. When receiving the transaction result reply from the gateway server, the proxy server transmits a transaction inquiry reply containing the transaction result data to the client terminal, so that the client terminal can display the transaction result data.

The effect of the present invention is: because the agent is only responsible for providing the agent server and the first application program stored in the client terminal, and the agent server only stores the de-identified transaction identification code and the corresponding transaction Therefore, for the proxy server, the risk of personal information leakage can be completely avoided, thus greatly reducing the cooperation threshold between the agency and the banking institution; and for the banking institution, it is easy to use the The gateway server establishes the communication between the transaction server and a plurality of proxy servers respectively provided by a plurality of other agencies that represent various agency services, so it is beneficial to the promotion of open banking.

Before the present invention is described in detail, it should be noted that in the following description, similar elements are designated by the same reference numerals.

Referring to FIG. 1, an online transaction management system according to an embodiment of the present invention is used to provide online transaction services and/or online inquiry services for one or more customers, and may include, for example, one or more proxy servers 2 (FIG. 1 only A proxy server is shown), one or more client terminals (only one client terminal is shown in FIG. 1), a transaction server 3, and a gateway server 4, wherein the transaction server 3 and the gateway The channel servers 4 are connected to each other, for example, via a communication network (not shown, such as the Internet or a local area network), and both are provided by a banking institution, for example, and can together form a bank server unit; each proxy server 21 is provided by a corresponding agent, and each client terminal 1 is held by a corresponding client and can be communicated with the transaction server 3 via, for example, a communication network (not shown). In this case, the banking institution may cooperate with the agent(s) to provide the client(s) with various types of banking-related transactions (eg, transfer transactions, time deposit transactions, fund transactions, etc.) online transaction services and/or online enquiry services.

In this embodiment, since each agency is dedicated to a specific agency business (for example, business related to transfer, fixed deposit or fund), the agency server 2 provided by it is used to process the specific agency business . It is worth noting that, before use, each agent must also provide a first application related to the specific agency business, and the banking institution must provide a second application related to transaction authorization.

In this embodiment, each client terminal 1 can be implemented by, for example, a mobile device (such as a smart phone or a tablet computer), and before use, must store the second application program, and one or more communication with the client The first application related to the desired online transaction. For example, if the online transaction that the client wants to conduct is only fund transaction, the client terminal 1 held by the client only needs to pre-store the (single) first application provided by the agent specializing in the fund business (see Figure 1); and if the online transaction that the customer wants to carry out includes transfer transaction and fixed deposit transaction, the client terminal 1 held must be pre-stored by (two) agents who are respectively dedicated to the transfer business and the fixed deposit business. (two) first applications provided (only one first application is shown in Figure 1). Therefore, for the client, the client terminal 1 held by the client can selectively install and store the required first application program according to his transaction requirements, so as to conduct subsequent online transactions. When in use, each client terminal 1 can establish a communication connection with the corresponding proxy server 2 through a communication network (not shown) by executing each first application, and can establish communication with the corresponding proxy server 2 by executing the second application. The communication connection of the transaction server 3.

The gateway server 4 is configured to provide an Application Programming Interface (API) conforming to each proxy server 2 for subsequent data transmission to the proxy server(s) 2 .

Hereinafter, referring to FIG. 1 and FIG. 2 , the online transaction for a customer (hereinafter, also referred to as a target customer) who wants to conduct a fixed deposit transaction such as a savings plan such as a zero deposit and lump sum payment will be exemplarily explained in detail. How to manage a client terminal 1 (ie, the client terminal held by the target client), a proxy server 2 (ie, the proxy server that handles the fixed deposit business) and the transaction server 3 in the management system. An online transaction program for (fixed deposit) transactions. The online transaction program may include, for example, the following steps S21 to S24.

First, in step S21, the client terminal 1 generates and displays a user interface corresponding to the agency business (ie, the fixed deposit business related to the savings plan) by executing the first application program, and then executes the The user operation interface is manually operated to generate desired transaction content (ie, fixed storage content), and a transaction identification code request relating to the transaction and including the transaction content is transmitted to the proxy server 2 . In this embodiment, the user operation interface may, for example, provide fixed deposit options of various contents related to the savings plan.

Then, in step S22, the proxy server 2 responds to the transaction ID request received from the client terminal 1, generates a transaction ID uniquely corresponding to the transaction, and stores the corresponding transaction ID and the transaction ID. transaction content, and transmit the transaction identification code to the client terminal 1 . It is worth noting that in this case, the proxy server 2 will only keep the transaction ID corresponding to the transaction and the transaction content corresponding to the transaction ID only, because the transaction ID and the transaction content do not contain Any personal information, so it can be regarded as a kind of de-identified information for malicious third parties (such as hackers).

When the client terminal 1 receives the transaction identification code from the proxy server 2, in step S23, the client terminal 1 stores the transaction identification code and starts to execute the second application through the execution of the first application program program, and transmit a transaction request to the transaction server 3 through the execution of the second application program, the transaction request includes, for example, the encrypted transaction identification code, the identification information uniquely corresponding to the target customer, the transaction content and Account information (for example, the account number from which the account was transferred).

When the transaction server 3 receives the transaction request from the client terminal 1, in step S24, the transaction server 3 responds to the transaction request, for example, confirms (decrypted) the identity information and the account information Check whether it is correct and confirm whether the account balance of the transfer account conforms to the transaction content, and process the transaction according to the confirmation result, so as to obtain and store a transaction result data corresponding to the transaction identification code. In this embodiment, the transaction result data includes, for example, a transaction status indicating a successful transaction or a failed transaction, and transaction details when the transaction status indicates a successful transaction. For example, if the transaction server 3 successfully confirms the identification information and the account information is correct and the account balance is consistent with the transaction content, the transaction result data will include the transaction status indicating that the transaction is successful, and the corresponding transaction. Details (eg, number of savings and total savings). At this point, the online transaction procedure is completed.

After executing the above-mentioned online transaction procedure, the online transaction management system can further provide online inquiry service to the target customer. Hereinafter, referring to FIG. 1 and FIG. 3 , how the online transaction management system executes a transaction inquiry procedure related to the (fixed deposit) transaction will be exemplarily described in detail. The transaction inquiry program includes the following steps S31 to S37.

First, in step S31, the client terminal 1 transmits a transaction inquiry request to the proxy server 2 through the execution of the first application program. The transaction inquiry request includes the transaction identification code stored in the above-mentioned online transaction program.

When the proxy server 2 receives the transaction inquiry request from the client terminal 1, in step S32, the proxy server 2 responds to the transaction inquiry request and sends a transaction result request containing the transaction identification code to The gateway server 4. Then, the gateway server 4 transmits the transaction result request from the proxy server 2 to the transaction server 3 (step S33).

When the transaction server 3 receives the transaction result request from the gateway server 4, in step S34, the transaction server 3 responds to the transaction result request and sends the transaction result corresponding to the transaction identification code The data is sent to the gateway server 4 .

Then, in step S35, the gateway server 4 converts the transaction result data from the transaction server 3 into the form or format required by the proxy server 2 through the API, and converts a data containing a The (transformed) transaction result reply of the transaction result data is sent to the proxy server 2 .

Then, in step S36, when the proxy server 2 receives the transaction result reply from the gateway server 4, it transmits a transaction inquiry reply containing the transaction result data to the client terminal 1. Therefore, the client terminal 1 can display the transaction result data from the proxy server 2 to the target client, so that the target client can obtain the execution status of the transaction. So far, the execution of the transaction query program is completed.

Please note that in the transaction inquiry procedure, although the client terminal 1 initiates a transaction inquiry request, the client terminal 1 only needs to provide the transaction identification code corresponding to the transaction, without involving any personal data transmission. The transaction result information obtained by the gateway server 4 from the transaction server also does not involve any personal information. Therefore, the online transaction management system can also avoid the risk of personal capital leakage during transaction inquiry.

To sum up, since each proxy party is only responsible for providing a corresponding proxy server 2 and the first application program stored in one (or more) client terminals 1, and when in use, each proxy server The server 2 will only store the de-identified transaction ID corresponding to each transaction and the corresponding transaction content (that is, will not store any personal information about the customer), so for each proxy server 2, the The risk of personal information leakage can be completely avoided, thus greatly reducing the cooperation threshold between the agent and the banking institution. In addition, for the banking institution, the transaction server 3 can be easily established through the gateway server 4 The communication connection with a plurality of proxy servers provided by a plurality of other agencies that represent various agency services is used to conduct transaction inquiry, which is beneficial to the promotion of open banking. Therefore, the online transaction management system of the present invention can indeed achieve the object of the present invention.

However, the above are only examples of the present invention, and should not limit the scope of implementation of the present invention. Any simple equivalent changes and modifications made according to the scope of the patent application of the present invention and the contents of the patent specification are still included in the scope of the present invention. within the scope of the invention patent.

1: Client terminal 2: Proxy server 3: Transaction Server 4: Gateway server S21-S24: Steps S31-S37: Steps

Other features and effects of the present invention will be clearly presented in the embodiments with reference to the drawings, wherein: 1 is a block diagram illustrating the architecture of an online transaction management system according to an embodiment of the present invention; FIG. 2 is a flow chart illustrating how a client terminal, a proxy server and a transaction server of this embodiment conduct an on-line transaction procedure for a transaction; and FIG. 3 is a flow chart illustrating how the embodiment performs a transaction inquiry procedure regarding the transaction.

1: Client terminal

2: Proxy server

3: Transaction Server

4: Gateway server

Claims (4)

An online transaction management method, at least utilizing an agent server provided by an agent, a transaction server provided by a banking institution, and a client held by a client and communicating with the agent server and the transaction server. The client terminal stores a first application provided by the agent and related to the agency business of the agent and a second application provided by the banking institution and related to transaction authorization. The transaction management method consists of the following steps: (A) The client terminal, by executing the first application program, generates and displays a user operation interface corresponding to the agency business, and transmits to the agency server a transaction identification code related to a transaction that the client wants to perform request, the transaction ID request includes transaction content generated by man-operating the user interface; (B) In response to the transaction identification code request received from the client terminal, the proxy server generates a transaction identification code uniquely corresponding to the transaction, stores the transaction identification code and the transaction content with a corresponding relationship, and stores the transaction identification code with the corresponding relationship. The transaction identification code is transmitted to the client terminal; (C) When the client terminal receives the transaction identification code from the proxy server, it stores the transaction identification code and starts to execute the second application, and sends the transaction server through the execution of the second application. a transaction request, the transaction request including the transaction identification code, the identification information uniquely corresponding to the customer, and the transaction content; and (D) In response to the transaction request received from the client terminal, the transaction server confirms the identity information and the transaction content, and processes the transaction according to the confirmation result, so as to obtain and store a transaction corresponding to the transaction identifier Result data, the transaction result data includes a transaction status indicating a successful transaction or a failed transaction, and transaction details when the transaction status indicates a successful transaction. The online transaction management method according to claim 1 is further implemented by using a gateway server in communication with the proxy server and the transaction server, and further comprises the following steps after step (D): (E) the client terminal transmits a transaction inquiry request containing the transaction identification code to the proxy server through the execution of the first application; (F) the proxy server, in response to the transaction inquiry request received from the client terminal, transmits a transaction result request containing the transaction identification code to the transaction server via the gateway server; (G) the transaction server transmits the transaction result data corresponding to the transaction identifier to the gateway server in response to the received transaction result request; (H) the gateway server transmits a transaction result reply containing the transaction result information to the proxy server through an application programming interface compliant with the proxy server; and (1) When receiving the transaction result reply from the gateway server, the proxy server transmits a transaction inquiry reply containing the transaction result data to the client terminal, so that the client terminal can display the transaction result data. An online transaction management system, including: a client terminal, held by a client and storing a first application program provided by an agent and related to agency business and a second application program provided by a banking institution and related to transaction authorization; a proxy server provided by the proxy and connected to the client terminal; and a transaction server provided by the banking institution and communicatively connected to the client terminal; The client terminal, by executing the first application program, generates and displays a user interface corresponding to the agency business, and transmits a transaction identification code request related to a transaction that the client wants to perform to the agency server , the transaction ID request includes transaction content generated by man-operating the user interface; The proxy server, in response to the transaction identification code request received from the client terminal, generates a transaction identification code uniquely corresponding to the transaction, stores the transaction identification code and the transaction content with a corresponding relationship, and converts the transaction identification code to the transaction. The identification code is transmitted to the client terminal; Wherein, when the client terminal receives the transaction identification code from the proxy server, it stores the transaction identification code and starts to execute the second application, and sends a message to the transaction server through the execution of the second application. A transaction request, which includes the transaction identification code, the identification information uniquely corresponding to the customer, and the transaction content; and The transaction server confirms the identity information and the transaction content in response to the transaction request received from the client terminal, and processes the transaction according to the confirmation result, so as to obtain and store a transaction result corresponding to the transaction identifier. Data, the transaction result data includes a transaction status indicating that the transaction is successful or unsuccessful, and the transaction details when the transaction status indicates that the transaction is successful. The online transaction management system according to claim 3, further comprising: a gateway server provided by the banking institution and connected to the proxy server and the transaction server; Wherein, the client terminal transmits a transaction inquiry request containing the transaction identification code to the proxy server through the execution of the first application program; Wherein, in response to the transaction query request received from the client terminal, the proxy server sends a transaction result request including the transaction identification code to the transaction server via the gateway server; Wherein, the transaction server transmits the transaction result data corresponding to the transaction identification code to the gateway server in response to the received transaction result request; wherein, the gateway server transmits a transaction result reply containing the transaction result information to the proxy server through an application programming interface conforming to the proxy server; and Wherein, when receiving the transaction result reply from the gateway server, the proxy server transmits a transaction inquiry reply containing the transaction result data to the client terminal, so that the client terminal can display the transaction result data.

Images