TWI801744B - Financial transaction device, method and system with non-contact authentication function - Google Patents

Abstract

A financial transaction device, a method and a system thereof with non-contact authentication function are provided. In the method, the financial transaction device receives a transaction data generated by a user’s operation, and activates a wireless sensing unit to sense an identification device held by a user and receive identification information therein. After verifying the user’s identity, a golden key can be retrieved from the identification device. A digital signature can be calculated using the key and an authentication data that is used to verify the user. After transmitting the transaction data signed with the digital signature to a financial transaction device server, authenticity of the transaction data can be confirmed when the digital signature is verified by an authentication server. Consequently, a financial server will treat the transaction data, and show a result to the user.

Description

Financial transaction device, method and system with contactless authentication

The specification discloses a financial transaction device and a method thereof, in particular, a financial transaction device, method and system with non-contact authentication.

General users operate financial transaction devices such as automatic teller machines (Automatic Teller Machine, ATM) to perform financial services such as deposits, withdrawals, transfers, and balance inquiries. Currently, common user identity authentication methods include using credit cards provided by banks or financial services. Card, or can use cardless deposit and withdrawal service, or automatic teller machine provides biometric function, the purpose is to confirm the identity of the user.

Once the identity authentication is completed, then the ATM is operated to select the service to be performed, and then the ATM and the bank-side system continue the background process, and finally the transaction result is displayed.

The description discloses a financial transaction device, method and system with non-contact authentication, wherein the financial transaction device has relevant circuits and functions of non-contact sensing, which can sense the identification device used to authenticate the user's identity, and process and use it accordingly After the transaction information generated by the operator operating the financial transaction device is safely calculated and processed, the transaction can be completed under security considerations.

According to an embodiment, the financial transaction method with non-contact authentication is implemented in a financial transaction device, and the main steps include using the financial transaction device to receive a transaction information generated by the user interface initiated by the user operating the financial transaction device, and then start The wireless induction unit is used to sense the identification device held by the user to receive the identification information in the wireless identification chip, and then can authenticate the user's identity according to the identification information, and then obtain a key of the identification device. In the financial transaction device, a digital signature is calculated with the key and an authentication information used for authenticating the identity of the user, and then the transaction information signed with the digital signature is sent to a financial transaction device server, and a verification server After verifying the digital signature, the server confirms the integrity of the transaction information, and finally receives a transaction result of processing the transaction information from a financial server.

Preferably, the authentication information used when authenticating the identity of the user is a password or biometric information required to be input by the user. The identity verification device can be a device with wireless sensing function, such as an authentication card issued by a financial institution held by the user or a user device authenticated by the financial institution.

The main circuit of the financial transaction device with non-contact authentication is the control circuit and the circuit components in the financial transaction device. The financial transaction device is equipped with a wireless sensing unit to sense the user's hand-held and close to the identity certificate of the financial transaction device. The device is a financial transaction service module, which is used to process the transaction information generated by the user's operation on the user interface, and a network unit for connecting to the server of the financial transaction device.

The financial transaction system with contactless authentication proposed in the disclosure mainly includes financial servers that operate independently or in a specific server system with software modules to provide financial services and financial transaction device servers to manage and processing the information generated by the financial transaction devices installed in each terminal, and a verification server for verifying the information transmitted by each financial transaction device.

The method is run in the financial transaction device installed in the terminal in the system.

In order to further understand the features and technical content of the present invention, please refer to the following detailed description and drawings related to the present invention. However, the provided drawings are only for reference and description, and are not intended to limit the present invention.

The implementation of the present invention is described below through specific specific examples, and those skilled in the art can understand the advantages and effects of the present invention from the content disclosed in this specification. The present invention can be implemented or applied through other different specific embodiments, and various modifications and changes can be made to the details in this specification based on different viewpoints and applications without departing from the concept of the present invention. In addition, the drawings of the present invention are only for simple illustration, and are not drawn according to the actual size, which is stated in advance. The following embodiments will further describe the relevant technical content of the present invention in detail, but the disclosed content is not intended to limit the protection scope of the present invention.

It should be understood that although terms such as "first", "second", and "third" may be used herein to describe various elements or signals, these elements or signals should not be limited by these terms. These terms are mainly used to distinguish one element from another element, or one signal from another signal. In addition, the term "or" used herein may include any one or a combination of more of the associated listed items depending on the actual situation.

Different from the user's operation and identity authentication (such as financial card password) on the known automatic teller machine (ATM) or specific financial service devices (collectively referred to as financial transaction devices), the disclosure discloses a contactless The authenticated financial transaction device, method, and system allow users to perform identity authentication on a financial transaction device that supports wireless identification technology with an identity verification device with a non-contact authentication function, and after completing the identity authentication, security information (such as a key) can be obtained. ) to continue the follow-up procedure.

The architecture of the financial transaction system can refer to the schematic diagram of an embodiment of the architecture shown in FIG. The transaction device 103 is equipped with a wireless module, which is used to implement the function of wireless identification. It can sense the identification device 101 held by the user and obtain the identification information in it. In addition to authenticating the user's identity, the security information stored therein ( Such as a key), which can be used as one of the parameters for the subsequent calculation of digital signatures.

The financial transaction device 103 is connected to the financial transaction device server 105 through the network 10, and the financial transaction device server 105 is used to manage and process the information generated by the financial transaction device 103 located at each terminal, the digital signature and the digital signature generated in the financial transaction device 103. The signed information (such as transaction information) can be transmitted to the financial transaction device server 105 through the network 10, and continue to transfer the digital signature to the verification server 107 for signature verification. After the verification is successful, the transaction information can be forwarded to the provider. A financial server 109 for financial services.

According to an embodiment, the verification server 107 may be an independently running server host, or a software module executed in a specific server to verify the information transmitted by each financial transaction device 103 . The financial server 109 can be a server in a financial institution (such as a bank) that provides financial services, can be a server host running independently, or a software service running on a specific host, and the financial services provided can be provided to A variety of service items selected by the user through the financial transaction device 103, such as balance inquiry, transfer, payment, withdrawal or deposit, etc., will generate a transaction message after selecting one of them. Taking cash withdrawal as an example, an account number and Withdrawal amount.

Before or after the user operates the financial transaction device 103 to generate transaction information, the financial transaction device 103 may require verification of the user's identity. In the financial transaction method with non-contact authentication, the wireless identity recognition function in the financial transaction device 103 Sensing the identity verification device 101 held by the user, it may require input of a password to authenticate the identification information therein, and obtain a key therein, and the key and the password may be used as parameters for calculating a digital signature with a specific certificate calculation method.

It is worth mentioning that the digital signature (Digital Signature) is a security mechanism to ensure the correctness of the data content (such as the transaction information), first using an irreversible algorithm (such as a hash algorithm (hash algorithm) , such as SHA1 or MD5) calculate a hash value, or hash summary (Digest), and then use the above key (a private key issued by a certification authority) to sign specific materials (such as transaction information) , to form a digital signature, that is, to sign the data to be protected (such as transaction information). After the digital signature is verified by the verification server 107 proposed in the above embodiment, the integrity of the data can be ensured, indicating that the data is not being transmitted The process was intercepted and tampered with. The method of verifying the digital signature is to use the same hash algorithm to calculate the hash value of the transaction information in the verification server 107, compare the hash value of the received digital signature decrypted (decrypted with the corresponding public key), and generate Validation results.

The description of the financial transaction device 103 can refer to the schematic diagram of a circuit module embodiment of a financial transaction device with contactless authentication shown in FIG. 2 .

The main circuit components of the financial transaction device 103 with non-contact authentication are shown in the figure, such as a control circuit 201. The control circuit 201 is electrically connected to each circuit component in the financial transaction device 103, or connected to each software module, and is the main control component. To process a non-contact authentication process performed in the financial transaction device 103 . The financial transaction device 103 includes a wireless sensing unit 203 electrically connected to the control circuit 201 for sensing the identity verification device 101 held by a user and approaching the financial transaction device 103 .

The identity verification device 101 is a device with a wireless sensing function, which can be an authentication card issued by a financial institution held by the user, which can contain a wireless identification chip 200 as identification information for authenticating the identity of the user; The certification device 101 can be a user device certified by a financial institution, such as a mobile phone, which carries an identification technology implemented by software, and generates identification information certified by a financial institution through software technology, so that the memory for storing the identification information The block implements the functions of the wireless identification chip 200 . That is, once the wireless sensing unit 203 of the financial transaction device 103 senses the identification device 101 , the identification information of the wireless identification chip 200 , whether implemented by hardware or software, can be obtained.

The financial transaction device 103 is a device for serving users to perform various financial services, and includes a financial transaction service module 207 for processing transaction information generated by users operating on a user interface 211 displayed on the display unit 209 . The financial transaction device 103 is provided with a network unit 205, which can be connected to the financial transaction device server 105 through the network, or can also be connected to the verification server 107 and the financial server 109 in the system architecture shown in Figure 1 .

Through the financial transaction device 103 described above, the process of the embodiment of the method for performing financial transactions as shown in Figure 3 is executed with a non-contact authentication method, wherein the detailed steps are executed by the financial transaction device 103 itself or in cooperation with the financial transaction device server 105 process.

At the beginning, the financial transaction device 103 displays a user interface that provides various financial service options according to the user's operation, and then generates a transaction information according to the user's selection and operation (step S301), at this time (it can be before or after step S301) , the financial transaction device 103 activates the wireless sensing unit therein to sense the identification device held by the user, so as to obtain the identification information stored therein (step S303), at this time, the user may be required to input an authentication information , such as a password for accessing the identification information in the identity verification device or a biometric data (such as fingerprint or face recognition technology on a mobile phone), the identification information can be obtained.

After the user's identity is authenticated, continue to obtain the key stored in the identity verification device (step S305), and use this key (or including the authentication information used when authenticating the user's identity) to form a digital signature on the transaction information (step S307 ), including transaction information, the financial transaction device 103 sends the transaction information signed by the digital signature to the financial transaction device server 105 (step S309), and then the verification server 107 verifies the digital signature, and obtains the verification result after verification (step S311) , if the verification fails, it means that the digital signature may have been tampered with, or the transaction information is abnormal, that is, the process is terminated, otherwise it will continue to request the financial server 109 to process the decrypted transaction information (step S313), after completion, The transaction result is received and displayed by the financial transaction device 103 (step S315 ).

According to the embodiment of the financial transaction method with wireless identification technology, the overall process can refer to the process shown in FIG. The flow chart of the embodiment of the financial transaction method between.

At the beginning of the process, the user operates the financial transaction device 103 to generate transaction information (step S401), such as transferring funds between the same or different banks (such as transfers between Bank A and Bank B, transfers between different people, etc.), The transaction information includes the account number of the transfer object and the transfer amount, and also includes the user's own transfer account, etc., and then requires the induction of the identity verification device (step S403). After the device is sensed, the input of authentication information, such as a password or biometric data, can be required , to agree to access the identification information, such as the ID number, after the financial transaction device 103 receives the input password (or biometric data) (step S405), obtains the key after authentication (step S407), and also establishes the A conference channel (session) between them.

In the financial transaction device 103, execute an algorithm, use the obtained key, or add authentication information to generate a digital signature for the generated transaction information (step S409), and then send the transaction information signed by the digital signature to The financial transaction device server 105 (step S411), and then the financial transaction device server 105 provides the digital signature to the verification server 107 (step S413), and the verification server 107 obtains another key corresponding to the key (such as a private key). A key (such as a public key) verifies the digital signature (step S415 ), and after the verification is completed, a verification result is generated. What is mentioned here is that the verification server 107 should connect to the third-party certification agency that issued the certificate at a fixed time to download the certificate cancellation file. After receiving the digital signature, it will check itself and the validity period of the previous certificate, and then check again Digital signature and check whether it is recorded in the certificate cancellation file, and the issuer of the top-level certificate.

Next, the verification server 107 can notify the financial transaction device server 105 of the verification result (step S417), and the financial transaction device server 105 sends the information of successful verification (including transaction information) to the financial server 109 responsible for processing financial services (step S417). S419), the financial server 109 processes the transaction information, such as successfully transferring the account from bank A to bank B (step S421), and generates a transaction result after completion, which can be sent back to the financial transaction device server 105 ( Step S423), then provide the financial transaction device 103 to display the transaction result (step S425).

According to the process described in FIG. 4 , an example is given here. At the beginning, the user carries the identity verification device 101 to the financial transaction device 103 of Bank A to perform a certain financial transaction, such as business application, transfer or remittance, or tax payment, etc. The financial transaction device 103 can generally refer to an ATM (automatic teller machine), VTM (remote video teller machine), KIOSK (public information machine), POS (terminal device), or a mobile device (such as a mobile phone), etc. At this time, the financial transaction device 103 In the above steps S405, S407 and S409, a digital signature is generated to sign the electronic application document submitted by the user. Afterwards, through the financial transaction device 103, Bank A sends the application documents and signature, and then sends them to Bank B through the financial company. At this time, Bank B verifies the digital signature through the verification server 107. Once it is confirmed that it is correct, the verification will be generated. Success information, and notify the financial server of Bank B to execute the transaction, that is, to execute a certain business application, transfer or remittance or tax payment between Bank A and Bank B.

To sum up, it can be known from the arrangement process of the above-mentioned financial transaction method with non-contact authentication that the financial transaction device 103 first authenticates the user with the non-contact authentication technology, and then uses the authentication issued by the financial institution held by the user to authenticate the user. The key in the card or user device is used to sign the transaction information, and the integrity of the transaction information can be confirmed. The method proposes that the financial transaction device (such as an automatic teller machine) is equipped with a reading device such as near-field communication (NFC) technology. The security credentials in the card machine should also be updated regularly. In this way, the use of wireless identification technology to transmit identification information and keys makes the financial transactions to be executed more secure and realizes a highly secure financial transaction mechanism.

The content disclosed above is only a preferred feasible embodiment of the present invention, and does not therefore limit the scope of the patent application of the present invention. Therefore, all equivalent technical changes made by using the description and drawings of the present invention are included in the application of the present invention. within the scope of the patent.

10: Internet 101: Identification device 103: Financial transaction device 105: financial transaction device server 107:Authentication server 109: Financial server 200: wireless identification chip 201: control circuit 203: Wireless induction unit 205: Network unit 207: Financial transaction service module 209: display unit 211: user interface Steps S301-S315: Flowchart of performing financial transactions with a non-contact authentication method Steps S401-S425: Flowchart of performing financial transactions by non-contact authentication method

Figure 1 shows a schematic diagram of an embodiment of the architecture of a financial transaction system;

Figure 2 shows a schematic diagram of an embodiment of a circuit module of a financial transaction device with contactless authentication;

Figure 3 shows a flowchart of an embodiment of a method of performing a financial transaction with a contactless authentication method; and

Fig. 4 shows a flow chart of an embodiment of a financial transaction method running between multiple terminals.

101: Identification device

200: wireless identification chip

103: Financial transaction device

201: control circuit

203: Wireless induction unit

205: Network unit

207: Financial transaction service module

209: display unit

211: user interface

105: financial transaction device server

Claims (5)

A financial transaction method with non-contact authentication, comprising: a financial transaction device receives a transaction information generated by a user operating a user interface initiated by the financial transaction device; the financial transaction device activates a wireless sensing unit to sense According to an identification device held by the user, a password or a biometric data input by the user is used to obtain identification information; the financial transaction device authenticates the user's identity based on the identification information, and then obtains the A key of the identity verification device; in the financial transaction device, a digital signature is calculated with the key and the password entered by the user when authenticating the user's identity or an authentication information formed by the biometric data; The financial transaction device sends the transaction information signed by the digital signature to a financial transaction device server, and after verifying the digital signature by a verification server, the integrity of the transaction information is confirmed; The financial server receives a transaction result of processing the transaction information; wherein, the financial server provides the user with the financial transaction device to select one of multiple financial services and input a requirement to form the transaction information; wherein, The identification device is a device with wireless sensing function, and is a verification card issued by a financial institution held by the user to verify the identity of the user, or a user device certified by the financial institution. The financial transaction method with non-contact authentication as described in Claim 1, wherein when the transaction information is generated, the wireless sensing unit in the financial transaction device is activated, and after being sensed by the identity verification device, the information stored therein is obtained. The identification information of a wireless identification chip. A financial transaction device with non-contact authentication, comprising: a control circuit, electrically connected to each circuit element in the financial transaction device, for processing a non-contact authentication process executed in the financial transaction device; a wireless sensing unit , electrically connected to the control circuit, used to sense an identity verification device held by a user and approaching the financial transaction device; a financial transaction service module, electrically connected to the control circuit, used to process the user in a use A transaction information generated by operating on the operator interface; and a network unit, electrically connected to the control circuit, and connected to a financial transaction device server through a network; wherein the non-contact authentication process includes: receiving the user through the The transaction information generated by the user interface; the identification device is sensed, and a password or a biometric data input by the user is obtained to obtain identification information; according to the identification information, the identity of the user is authenticated, and then the identification information is obtained. A key of the identity verification device; calculating a digital signature with the key and an authentication information used for authenticating the user's identity; sending the transaction information signed with the digital signature to the financial transaction device server, and by After verifying the digital signature, a verification server confirms the integrity of the transaction information; receives a transaction result of processing the transaction information from a financial server; and the financial server provides the user with multiple Select one of them in the financial service, and input a requirement to form the transaction information; the identity verification device is a device with a wireless sensing function, which is held by the user as a certificate issued by a financial institution to authenticate the user's identity. Authentication card, or a user device authenticated by the financial institution. The financial transaction device with non-contact authentication as described in claim 3, wherein when the transaction information is generated, the wireless sensing unit in the financial transaction device is activated, and after being sensed by the identity verification device, the information stored therein is obtained. The identification information of a wireless identification chip. A financial transaction system with non-contact authentication, including: a financial server for providing financial services; a financial transaction device server for managing and processing information generated by a financial transaction device installed in each terminal; a verification The server is used to verify the information transmitted by each financial transaction device; wherein the financial transaction device includes: a control circuit electrically connected to each circuit element in the financial transaction device, and is used to process a non-contact function executed in the financial transaction device authentication process; a wireless sensing unit, electrically connected to the control circuit, to sense an identity verification device held by a user and approaching the financial transaction device, wherein the identity verification device has a wireless identification chip; a financial transaction service a module, electrically connected to the control circuit, for processing a transaction information generated by the user operating on a user interface; and a network unit, electrically connected to the control circuit, and connected to the A financial transaction device server; wherein the non-contact authentication process includes: receiving the transaction information generated by the user through the user interface; sensing the identity verification device, so that the user enters a password or a biometric data to obtain a Identification information; authenticate the user's identity according to the identification information, and then obtain a key of the identification device; Calculating a digital signature with the key and authentication information used to authenticate the user; sending the transaction information signed with the digital signature to the financial transaction device server, and verifying the digital signature by the verification server After confirming the integrity of the transaction information; receiving a transaction result of processing the transaction information from the financial server; and the financial server providing the user with a choice of one of multiple financial services through the financial transaction device, And input a requirement to form the transaction information; the identity verification device is a device with wireless induction function, which is a verification card issued by a financial institution held by the user as a verification of the user's identity, or passed through the financial institution An authenticated user device.

Images