TWI780429B - Redemption system and redemption method - Google Patents

Abstract

A redemption system, comprises a mobile device and a bank server. The mobile device is configured to output a redemption command after receiving a prize notice. The bank server is in communication connection with the mobile device to receive the redemption command. The bank server is configured to determine whether the mobile device is a certified device according to a result of a safety control procedure after receiving the redemption command. The bank server outputs an identity verification information to a redemption institute server when the bank server determines the mobile device is the certified device. The redemption institute server verifies the identity verification information and transfers a prize money to a bank account relating to the identity verification information when the identity verification information is verified. The bank server outputs a redemption complete notice to the mobile device when determining the bank account relating to the identity verification information has received the prize money. The present disclosure further discloses a redemption method.

Description

Redemption System and Redemption Method

The present invention relates to a prize redemption system and a prize redemption method, in particular to a prize redemption system and a prize redemption method that can improve the security of verification data transmission.

In the current technology, utility charges (water charges, electricity charges), telecommunication charges, etc. can be set to be automatically withheld, and when the payment is successful, the invoice number of the withholding transaction will be received. And when the invoice number wins a prize, the user still needs to apply for receiving the prize after receiving the notification of the prize. However, when the user applies for winning prizes by himself, he still needs to bring paper invoices to redeem the prizes, and the application for collecting prizes still needs to be processed at supermarkets, post offices, etc., which consumes a lot of manpower and time.

In addition, although some merchants can save the invoice to the user's mobile device and redeem the prize by scanning, it still needs to perform a verification procedure when redeeming the prize, and still needs to transmit the account number and password during the verification process , ID number and other more confidential information for verification. Therefore, when a malicious person wants to steal data, not only may they take the opportunity to intercept the data during transmission, which will lead to data leakage, but the user may not even know that the data has been intercepted.

In view of the above, the present invention provides a prize redemption system and a prize redemption method that meet the above demands.

According to an embodiment of the present invention, the prize redemption system includes: a mobile device, which is used to output a prize redemption instruction after receiving a prize notification; and a bank server, connected to the mobile device to receive the prize redemption instruction, the bank The server is used to determine whether the mobile device is an authentication device according to the result of a security control program after receiving the reward instruction, and the bank server will correspond to the authentication device when determining that the mobile device is the authentication device The identity verification data of the prize redemption institution is output to the server of a prize redemption institution, and the server of the prize redemption institution verifies the identity verification data To transfer a winning amount to a financial account associated with the identity verification information when the identity verification information is verified, and the bank server determines that the financial account associated with the identity verification information has received the winning amount Outputting a prize redemption completion notification. Wherein, the safety control program is: the bank server outputs a verification message to the mobile device, and the mobile device decodes the verification message to generate a verification code when judging that the verification message corresponds to the prize redemption instruction. The device further outputs the verification code to the bank server, and the bank server determines that the mobile device is the verification device when judging that the verification code corresponds to the verification message.

According to an embodiment of the present invention, the prize redemption method includes: using a mobile device to output a prize redemption instruction to a bank server after receiving a prize winning notification; executing a security control program to determine whether the mobile device is an authentication device; and When the bank server judges that the mobile device is the authentication device, the bank server outputs an identity verification data corresponding to the authentication device to a prize redemption institution server, and the prize redemption institution server performs the identity verification data verifying that a winning amount is transferred to a financial account associated with the identity verification information when the identity verification information is verified, and the bank server determines that the winning amount has been received in the financial account associated with the identity verification information Outputting a prize redemption completion notification. Wherein, the safety control program is: using the bank server to output a verification message to the mobile device; using the mobile device to judge whether the verification message corresponds to the prize redemption instruction; When using the mobile device to decode the verification message to generate a verification code; use the mobile device to output the verification code to the bank server; use the bank server to determine whether the verification code corresponds to the verification message; and when the When the bank server judges that the verification code corresponds to the verification message, the bank server judges that the mobile device is the verification device.

To sum up, according to the prize redemption system and prize redemption method shown in one or more embodiments of the present invention, when the user executes the payment transaction with the financial account corresponding to the bank server, and the invoice of the transaction wins a prize, the user Just enter the prize redemption instruction, and the winning amount of the invoice can be transferred to the financial account that executes the payment transaction, so as to save the need for manual verification procedures every time the prize is redeemed. In addition, according to the prize redemption system and prize redemption method shown in one or more embodiments of the present invention, It is also possible to check whether the verified data is intercepted or leaked during the verification process, so as to strengthen the security of the data during the verification process, and when it is found that the data may be leaked, relevant records can be kept for the bank or the police. Unit check.

The above description of the disclosure and the following description of the implementation are used to demonstrate and explain the spirit and principle of the present invention, and provide a further explanation of the patent application scope of the present invention.

10:Mobile device

20: Bank server

Msg: Verification message

EC: encryption code

VC: Verification Coding

CmdR: reward command

CmdK: command keyword

FIG. 1 is a block diagram of a prize claiming system according to an embodiment of the present invention.

FIG. 2 is a flow chart of a prize claiming method according to an embodiment of the present invention.

FIG. 3 is a flowchart of a security control program according to an embodiment of the present invention.

FIG. 4 is a schematic diagram of a data transmission sequence between a mobile device and a bank server according to an embodiment of the present invention.

The detailed features and advantages of the present invention are described in detail below in the implementation mode, and its content is enough to make any person familiar with the related art understand the technical content of the present invention and implement it accordingly, and according to the content disclosed in this specification, the scope of the patent application and the drawings , anyone skilled in the art can easily understand the purpose and advantages of the present invention. The following examples are to further describe the concept of the present invention in detail, but not to limit the scope of the present invention in any way.

The prize redemption system and method shown in the present invention are used when the invoice wins a prize, and the user can redeem the prize through the prize redemption system and method shown in the present invention, so that the prize money won is directly transferred to the user's financial account.

Please refer to FIG. 1 . FIG. 1 is a block diagram of a reward system according to an embodiment of the present invention. The prize redemption system shown in the present invention includes a mobile device 10 and a bank server 20 , and the mobile device 10 is connected to the bank server 20 in communication.

The mobile device 10 shown in the present invention is, for example, a mobile phone, a notebook computer, a tablet The bank server 20 is preferably a server inside the bank or other computing devices with computing capability and signal transmission capability inside the bank.

For a more detailed description of the prize claiming system and prize claiming method disclosed in the present invention, please refer to FIG. 1 and FIG. 2 together, wherein FIG. 2 is a flow chart of the prize claiming method according to an embodiment of the present invention.

Please refer to step S10 in FIG. 2 : after receiving the winning notification, output a prize redemption instruction to the bank server.

The mobile device 10 preferably has a bank application program (for example, an online banking application program) built on the bank server 20, so that the user can input the reward redemption instruction into the bank application program, and pass the reward redemption instruction through the mobile device 10 output to the bank server 20. That is, the mobile device 10 will output a prize redemption instruction to the bank server 20 based on the prize winning notification after receiving the prize winning notification from the prize redemption institution. The mobile device 10 preferably outputs the coordinates of the mobile device 10 when outputting the prize claiming command for subsequent verification, that is, the bank server 20 preferably executes the subsequent step S20 after receiving the prize redeeming command and the coordinate position .

Step S20: Execute a security control program.

After the bank server 20 receives the prize redemption instruction, it executes a security control program to determine whether the mobile device 10 is an authentication device. The safety control procedure described in step S20 will be described in detail in the embodiment of FIG. 3 below.

Please continue to refer to step S30: outputting the identity verification data of the corresponding verification device to the prize redemption institution server.

After the bank server 20 judges that the mobile device 10 is an authentication device in step S20, the bank server 20 outputs the identity verification data of the corresponding authentication device (i.e., the authenticated mobile device 10) to the reward institution server, wherein the identity verification data is, for example, It is associated with the user's account number, password, ID number, etc.

That is to say, after the bank server 20 judges that the mobile device 10 is an authentication device, it will output the identity verification data of the corresponding authentication device to the prize redemption institution server for the prize redemption institution server The device verifies the identity verification information to transfer the reward amount to the corresponding financial account when the identity verification information is verified. The bank server 20 can further output a reward completion notification to the mobile device 10 when it is determined that the winning amount has been transferred to the financial account, so that the mobile device 10 can present a reward completion notification to notify the user that the winning amount has been transferred to the financial account.

It should be noted that, before the mobile device 10 receives the winning notification, the bank server 20 can further make payment from a financial account associated with the identity verification information based on a recurring payment item. Specifically, recurring payment items such as water bills, electricity bills and other public utility items, users can agree with the bank that the bank will pay these fees on their behalf, so the bank can regularly pay these fees from the user's financial account. And after paying the fee of the recurring payment item, if the invoice for the paid fee wins a prize, the mobile device 10 can receive the winning notice corresponding to the recurring payment item from the public institution, and the mobile device 10 can be tied to the receipt After receiving the winning notification, the prize redemption instruction is outputted, and the mobile device 10 may also display the prize winning notification after receiving the prize winning notification, so as to inform the user that the mobile device 10 has received the prize winning notification and can redeem prizes accordingly.

In addition, the recurring payment items may also be commodities and/or daily necessities purchased regularly or frequently by the user, and the present invention does not limit the types of recurring payment items. That is to say, the winning notice is not limited to the winning notice obtained from the invoice for payment of recurring payment items, and the winning notice may also be obtained from the invoice for purchasing other commodities.

Please refer to FIG. 1 and FIG. 3 together, wherein FIG. 3 is a flowchart of a security control program according to an embodiment of the present invention.

When the bank server 20 receives the prize redemption instruction, it means that the user requests to carry out the prize redemption procedure according to the prize winning notice, so the bank server 20 sends the identity verification data required by the prize redemption institution server to the prize redemption institution server before the bank server 20 20 will first implement security control procedures to prevent the winning amount from being transferred to the wrong financial account.

Therefore, when the bank server 20 receives the prize redemption instruction in step S10 of FIG. 2 , the bank server 20 then executes step S201 : outputting the verification message to the mobile device.

Specifically, the bank server 20 outputs the verification message to the mobile device 10, and then The bank server 20 may also output the verification message to the mobile device 10 for the mobile device 10 to perform subsequent verification based on the verification message. In addition, the mobile device 10 can display the received verification information through the bank application installed therein for the user to check, but the present invention does not limit whether the mobile device 10 presents the verification information.

In addition, the verification message output by the bank server 20 preferably includes an instruction keyword, and the instruction keyword is related to the aforementioned reward claiming instruction. For example, when the prize redemption instruction is "confirm and request to redeem the prize", the keyword of the instruction is "confirm the prize redemption", "the winning amount is 200 yuan", "the winning invoice number is AB-012345" and so on.

Next, after the mobile device 10 receives the verification message, the mobile device 10 executes step S202: judging whether the verification message corresponds to a prize redemption instruction.

Preferably, the mobile device 10 judges whether the verification message corresponds to a prize redemption command by judging whether the command keyword of the verification message corresponds to a prize redemption command. Taking the above redemption command as "confirmation request redemption" as an example, when the instruction keyword is "confirmation redemption", the mobile device 10 judges whether "confirmation redemption" (command keyword) corresponds to "confirmation request redemption" (reward instruction ). The manner in which the mobile device 10 determines whether the command keyword corresponds to the prize redemption command may be to judge whether the prize redemption command includes the command keyword.

In addition, the correspondence between the redemption command and the command keyword can also be a pre-stored correspondence, so the mobile device 10 can determine whether the command keyword corresponds to the redemption command according to the pre-stored correspondence.

For example, when the prize redemption instruction is "exchange 200 yuan for winning bonus", and the instruction keyword that has a pre-stored corresponding relationship with "exchange 200 yuan for winning bonus" is the above-mentioned "winning amount is 200 yuan", then when the mobile device 10. When the instruction keyword received is "the winning amount is 200 yuan", the mobile device 10 can determine that the instruction keyword corresponds to the prize redemption instruction.

Alternatively, the mobile device 10 may determine whether the command keyword corresponds to the prize redemption command by first searching for multiple keywords in the prize redemption command, and then judge whether the command keyword contains the same multiple keywords. When the mobile device 10 judges Command keywords include those related to the redemption command After a plurality of identical keywords are selected, the mobile device 10 can determine that the command keyword corresponds to a prize redemption command.

For example, when the prize redemption instruction is "redeem the winning invoice: AB-012345", the mobile device 10 first searches for the multiple keywords in the prize redemption instruction as "winning invoice" and "AB-012345", and when the mobile device 10 receives When the keyword of the command is "the winning invoice number is AB-012345", the mobile device 10 then judges whether the command keyword also includes the keywords of "winning invoice" and "AB-012345". When multiple keywords are the same as the prize redemption instruction, it is determined that the keyword of the instruction corresponds to the prize redemption instruction.

Please continue to refer to step S202 and also refer to step S203. When the mobile device 10 judges that the verification message does not correspond to a prize redemption command, it means that the command keyword contained in the verification message does not correspond to a prize redemption command. Therefore, the mobile device 10 can execute step S203: present Error notification.

That is to say, the mobile device 10 can judge based on the instruction keyword and the prize redemption command whether the prize redemption command output previously has been intercepted by an interested person. The presented error notification determines that the bank server 20 may have received a wrong award claiming instruction, and the user can re-input the award claiming instruction.

Please continue to refer to step S202 and also refer to step S204. When the mobile device 10 judges that the verification message corresponds to a prize redemption instruction, the mobile device 10 executes step S204: decoding the verification message to generate a verification code.

In addition to the instruction keyword, the verification message preferably further includes an encrypted code. The mobile device 10 can decode the encrypted code to generate the verification code, and the mobile device 10 can decode the encrypted code into the verification code according to a pre-stored rule. For example, the pre-stored rules such as "0" corresponds to the English letter "A"; "1" corresponds to the English letter "B"; "2" corresponds to the English letter "C"; "25" corresponds to the English letter "Z" and so on And so on. Therefore, when the encrypted code is "21.4.17.8", the mobile device 10 can decode the encrypted code into the verification code of "VERI". The aforementioned pre-stored rules are just examples. The number corresponding to the English letter can also be "25" corresponding to the English letter "A"; "24" corresponding to the English letter "B"; "23" corresponding to the English letter "C"; "0" corresponding to the English letter The letter "Z" and so on, or the encryption code is presented in English letters, and the verification code is represented by digital presentation. The mobile device 10 can also use arithmetic symbols, Roman numerals, colors, or multiple combinations thereof as encryption codes and verification codes, or use hash operations as pre-stored rules to decode encrypted codes into verification codes. There are no restrictions on the pre-stored rules, the correspondence between the encryption code and the verification code, and the way the mobile device 10 decodes the encryption code.

Please continue to refer to step S205: outputting the verification code to the bank server.

After the mobile device 10 decodes the verification message to generate a verification code (step S204 ), the mobile device 10 is about to output the verification code to the bank server 20 .

Step S206: Determine whether the verification code corresponds to the verification message.

That is, the bank server 20 determines whether the verification code received from the mobile device 10 corresponds to the previously output encryption code.

When the bank server 20 determines that the verification code received from the mobile device 10 does not correspond to the previously output encrypted code, the bank server 20 executes step S207: recording error data.

That is, the bank server 20 determines whether the mobile device 10 is an authentication device based on the authentication code and the encryption code. When the bank server 20 judges that the verification code does not correspond to the previously output encryption code, it means that the verification message output by the bank server 20 may be intercepted by an interested person, so the bank server 20 records the error data for the bank clerk or even For inspection by the police unit, the bank server 20 can also record error data to output a verification message containing multiple verification codes to the mobile device 10 when receiving another reward order from the mobile device 10 for more rigorous verification, wherein the error record is, for example, the number of the mobile device 10, the account password corresponding to the bank application program of the mobile device 10, and the coordinates that are output together when the mobile device 10 outputs a reward command.

Please continue to refer to step S206. When the bank server 20 judges that the verification code corresponds to the verification message, the bank server 20 can proceed to step S30: output the identity verification data corresponding to the verification device to the prize redemption institution server for the prize redemption institution server The server verifies the identity verification information, and when the identity verification information is verified, the winning amount is transferred to the account associated with the identity Financial account to verify profile.

Please refer to FIG. 1 and FIG. 4 together, wherein FIG. 4 is a schematic diagram of a data transmission sequence between a mobile device and a bank server according to an embodiment of the present invention.

In detail, after receiving the prize redemption command CmdR from the user, the mobile device 10 outputs the prize redemption command CmdR to the bank server 20 .

Then, the bank server 20 starts to execute the security control program after receiving the prize redemption command CmdR. That is, the bank server 20 generates a verification message Msg according to the received prize redemption command CmdR, and the verification message Msg includes the encryption code EC and the command keyword CmdK.

After receiving the verification message Msg, the mobile device 10 continues to execute the security control procedure. That is, the mobile device 10 first judges whether the command keyword CmdK corresponds to the previously output redemption command CmdR, so that the mobile device 10 can judge whether the bank server 20 has received the correct prize redemption command CmdR through the command keyword CmdK. And the mobile device 10 can directly command whether the keyword CmdK corresponds to the redemption command CmdR, without presenting the command keyword CmdK on the mobile device 10, but the mobile device 10 can also present the received command keyword CmdK for the user For reference, the present invention is not limited to whether the mobile device 10 presents the command keyword CmdK.

After the mobile device 10 determines that the command keyword CmdK corresponds to the previously output redemption command CmdR, the mobile device 10 further decodes the encrypted code EC of the verification message Msg to generate a verification code VC, and outputs the verification code VC to the bank server 20 , for the bank server 20 to judge whether the mobile device 10 is an authenticated device, and when the bank server 20 judges that the mobile device 10 is an authenticated device, output the identity verification data corresponding to the authentication device (mobile device 10) to the reward The institutional server is used for the prize redemption institutional server to verify the identity verification information, so as to transfer the winning amount to the financial account associated with the identity verification information. In addition, when the bank server 20 determines that the financial account associated with the identity verification information has received the winning amount, it can output a prize redemption completion notification to the mobile device 10 to inform the user that the prize redemption has been completed.

To sum up, according to the prize redemption system and the redemption system shown in one or more embodiments of the present invention The reward method, when the user executes the payment transaction with the financial account corresponding to the bank server, and the invoice of the transaction wins a prize, the user only needs to enter the reward redemption command, and the winning amount of the invoice can be transferred to the bank account for the payment transaction. Financial account, to save the manual verification process every time you claim a prize. In addition, according to the prize claiming system and prize claiming method shown in one or more embodiments of the present invention, the mobile device and the bank server can be authenticated to verify each other's authenticity, and the verified data can be checked during the verification process Whether it is intercepted or leaked to strengthen the security of the data in the verification process, and when it is found that the data may be leaked, relevant records can be kept for the bank or the police unit to check.

Although the present invention is disclosed by the aforementioned embodiments, they are not intended to limit the present invention. Without departing from the spirit and scope of the present invention, all changes and modifications are within the scope of patent protection of the present invention. For the scope of protection defined by the present invention, please refer to the appended scope of patent application.

10:Mobile device

20: Bank server

Claims (8)

A prize redemption system, comprising: a mobile device, used for outputting a prize redemption instruction after receiving a prize winning notice; Judging whether the mobile device is an authenticating device according to the result of a security control program after receiving the reward instruction, the bank server outputs an identity verification data corresponding to the authenticating device when judging that the mobile device is the authenticating device To a reward agency server, the prize agency server verifies the identity verification data to transfer a winning amount to a financial account associated with the identity verification data when the identity verification data is verified, and the bank server After judging that the financial account associated with the identity verification information has received the winning amount, outputting a prize redemption completion notice, wherein the security control program is: the bank server outputs a verification message to the mobile device, and the mobile device is in When it is judged that the verification message corresponds to the reward instruction, the verification message is decoded to generate a verification code, and the mobile device further outputs the verification code to the bank server, and the bank server determines that the verification code corresponds to the verification message At this time, it is determined that the mobile device is the authentication device. The prize redemption system as described in claim 1, wherein the verification message includes an instruction keyword, and the mobile device judges that the verification message corresponds to the prize redemption instruction: the mobile device judges that the instruction keyword corresponds to the prize redemption instruction. The prize claiming system as described in Claim 1, wherein the verification message includes an encrypted code, and the mobile device decodes the verification message to generate the verification code: the mobile device decodes the encrypted code into the verification code according to a pre-stored rule . The prize redemption system as described in claim 1, wherein before the mobile device receives the prize winning notification, the bank server further pays a fee based on a recurring payment item from a financial account associated with the identity verification information, the mobile device Receiving the winning notification means: the mobile device receives the winning notification corresponding to the regular payment item. A prize redemption method, comprising: using a mobile device to output a prize redemption instruction to a bank server after receiving a prize notification; executing a security control program to determine whether the mobile device is an authentication device; and using the bank server When the device judges that the mobile device is the authentication device, the bank server outputs an identity verification data corresponding to the authentication device to A reward agency server, which verifies the identity verification data to transfer a winning amount to a financial account associated with the identity verification data when the identity verification data is verified, and the bank server determines The financial account associated with the identity verification information has received the winning amount and then outputs a prize redemption completion notification, wherein the security control program is: the bank server outputs a verification message to the mobile device; the mobile device judges Whether the verification message corresponds to the prize redemption instruction; when the mobile device judges that the verification message corresponds to the prize redemption command, the mobile device decodes the verification message to generate a verification code; the mobile device outputs the verification code to the A bank server; judging by the bank server whether the verification code corresponds to the verification message; and when the bank server judges that the verification code corresponds to the verification message, judging by the bank server that the mobile device is the verification device. The prize redemption method as described in claim 5, wherein the verification message includes an instruction keyword, and using the mobile device to determine whether the verification message corresponds to the prize redemption instruction is: using the mobile device to judge whether the instruction keyword corresponds to the prize redemption instruction. The reward claiming method as described in claim 5, wherein the verification message includes an encrypted code, and the mobile device decodes the verification message to generate the verification Encoding system: using the mobile device to decode the encrypted code into the verification code according to a pre-stored rule. The prize redemption method as described in claim 5, wherein the prize winning notification corresponds to a regular payment item, and before the mobile device receives the prize winning notification, the prize redemption method further includes: using the bank server based on the regular payment item Payment is made from a financial account associated with the identity verification information.

Images