TWM491892U - Transaction certification card - Google Patents

Description

Transaction authentication card

This creation relates to an authentication card, and more particularly to a transaction authentication card for authenticating a user's identity when using a remote network transaction.

With the rapid development of mobile communication technologies, such as 3G (3rd-Generation), WiMAX (Worldwide Interoperability for Microwave Access), LTE (Long Term Evolution) and other mobile communication technologies, as well as smart phones and tablets With the popularity of electronic devices, the business model of using portable electronic devices to conduct electronic transactions on the Internet has also flourished.

Generally, the portable electronic device is used for electronic transaction of the network, and only the user's account number and password are required to complete the transaction payment when the payment is made. However, such payment method has the risk that the account password is stolen by the interested person, so Developed a digital authentication carrier for use in online transactions. It is plugged into a portable electronic device and has a built-in identity key for a user. The digital authentication carrier is usually similar to a USB flash drive. An external hardware (such as the U-Shield issued by the Industrial and Commercial Bank of China) must be connected to the digital authentication carrier to conduct transactions when using the portable electronic device for online transactions. The transaction mechanism of the encrypted digital authentication carrier ensures the security of online transactions. Further, in order to have better security effects, the digital authentication carrier of the new generation has a physical button. During the electronic transaction of the network, in addition to authenticating the identity key in the digital authentication carrier, the user must press the button. The physical button is pressed to confirm the transaction process, so that the transaction process has two-factor authentication, thereby enhancing the security of the network transaction.

However, whether it is the first-generation digital authentication carrier or the new-generation digital authentication carrier, it is independent of the portable electronic device. If the user forgets to carry the digital authentication carrier, the network transaction cannot be performed. inconvenient.

One of the aims of this creation is to directly place it inside a portable electronic device through a miniaturized transaction authentication card for user convenience.

Another purpose of this creation is that the transaction authentication card needs to be authenticated by sensing physical actions to improve the security of online transactions.

A further object of the present invention is to provide a remote transaction authentication system that authenticates by sensing physical actions to improve the security of online transactions.

For the above purposes and other purposes, the present invention provides a transaction authentication card comprising a substrate and a transaction authentication card controller disposed on the substrate and a transaction authentication card standard connection terminal group, characterized in that the transaction authentication The card further includes a motion sensor and a smart authentication module. The motion sensor is disposed on the substrate, and responds to a sensing command to perform sensing of the motion state and generates an authentication action value; and the smart authentication module is disposed on the substrate and is associated with the transaction. The authentication card controller is connected to the action sensor, and the smart authentication module stores an authentication action condition, and the smart authentication module generates the sensing command in response to a request of a transaction authentication program, and compares the action The authentication action value received by the sensor and the stored action condition stored therein are used to generate an action authentication success instruction for the transaction authentication program to be interpreted when the comparison is matched.

In one embodiment, the motion sensor is an acceleration sensor or a gyroscope.

In an embodiment, the transaction authentication card standard connection terminal group conforms to a communication protocol of a Secure Digital Memory Card (SD card).

In an embodiment, the transaction authentication card standard connection terminal group conforms to a Subscriber Identity Module (SIM) communication protocol.

In one embodiment, the smart authentication module and the transaction authentication card controller are integrated into a single chip.

For the above purposes and other purposes, the present invention provides a remote transaction authentication system for authenticating a user's identity through a user-specific identity key and an authentication action condition. The remote transaction authentication system includes a Portable electronic device and a transaction authentication card. The portable electronic device has a casing and a slot for reading data. The portable electronic device performs a remote transaction through a network. The portable electronic device The device generates an authentication command during the remote transaction by the program that should be the remote transaction; and the transaction authentication card is pluggably inserted into the slot of the portable electronic device, and the transaction authentication card is stored The identity key and the authentication action condition, and the transaction authentication card returns to the authentication command to perform sensing of the motion state and accordingly generates an authentication action value, and the transaction authentication card compares the authentication action value with the authentication action The condition is that an instruction for successful authentication of the action is generated for the remote transaction program to be interpreted when the comparison is matched.

In one embodiment, the transaction authentication card includes a motion sensor that senses the motion state of the transaction authentication card.

In one embodiment, the motion sensor is an acceleration sensor or a gyroscope.

In one embodiment, the slot between the portable electronic device and the transaction authentication card communicates in accordance with a secure digital memory card (SD card) communication protocol.

In one embodiment, the slot of the portable electronic device communicates with the transaction authentication card in accordance with a Subscriber Identity Module (SIM) communication protocol.

In this way, the transaction authentication card of the creation can be integrated into the memory card or the SIM card, so that the user can directly insert the memory card or the SIM card with the transaction authentication card into the portable electronic device (for example, a mobile phone, On the tablet), it is more convenient for the user to use, and the action of the transaction authentication card is sensed through the action sensor built in the memory card or the SIM card to identify the user and the electronic The transaction content is double confirmed to enhance the security of online transactions.

In order to fully understand the purpose, features and effects of this creation, the following specific examples, together with the attached drawings, provide a detailed description of the creation, as explained below:

First, please refer to Fig. 1, which is a schematic diagram of the transaction authentication card 1 in an embodiment of the present invention. Generally speaking, the transaction authentication card is a user applying to a bank (such as China Construction Bank, Industrial and Commercial Bank of China, etc.) or an online payment platform operator (such as Alipay), and then by bank or online payment platform. The operator creates a transaction authentication card in which the identity key of one of the users is stored. The transaction authentication card 1 has a substrate 100 plus an outer casing to form a card product. The appearance of the transaction authentication card 1 can be various types of card products, as in the case of thickness. Take the Micro SD card as an example. In the embodiment of the present invention, the substrate 100 includes: a smart authentication module 110, a transaction authentication card controller 120, a transaction authentication card standard connection terminal group 122, a memory module 130, and a motion sensor 140.

In this embodiment, the transaction authentication card standard connection terminal group 122 is a standard connection terminal group conforming to a secure digital memory card (SD) card communication protocol, and is used when the transaction authentication card 1 is plugged into one The portable electronic device communicates with the portable electronic device when it is in the Micro SD slot of the portable electronic device (not shown). The transaction authentication card controller 120 is a memory card controller, and the transaction authentication card controller 120 is connected to the transaction authentication card standard connection terminal group 122 for receiving a control command issued by the portable electronic device. Performing the identity authentication function or performing the data access function of the original memory card accesses the data to the memory module 130.

The smart authentication module 110 is connected to the transaction authentication card controller 120. The smart authentication module 110 stores the identity key of the exclusive user, and further includes an authentication action condition as a condition for double confirmation of the user identity and the transaction content. The confirmation mode will be described in detail below. The action sensor 140 is connected to the smart authentication module 110, and is configured to sense the motion state of the transaction authentication card 1 to respond to one of the sensing commands issued by the smart authentication module 110, and generate the motion according to the motion. The status produces an authentication action value. In one embodiment, the motion sensor 140 can be an acceleration sensor or a gyroscope.

Please refer to Fig. 2, which is a schematic diagram of the transaction authentication card 1' in the second embodiment of the present invention. Compared with the transaction authentication card 1 of the first embodiment of the present invention, the transaction authentication card 1' of the second embodiment of the present invention is implemented on a Subscriber Identity Module (SIM) card, and the transaction authentication card is The standard connection terminal group 122' is a standard connection terminal group that conforms to the user identity module. In this embodiment, the transaction authentication card controller 120 is a SIM card controller, and the smart authentication module 110 and the transaction authentication card controller 120 are integrated in a single chip 150. To enhance the space utilization efficiency of the circuit layout, the chip 150 is configured to perform the identity authentication function or the function of the original SIM card according to the control command issued by the portable electronic device. As with the above embodiment, the smart authentication module 110 includes the authentication action condition as a condition for double confirmation of the user identity and the transaction content, which will be described in detail below. The action sensor 140 is connected to the smart authentication module 110, and is configured to sense the motion state of the transaction authentication card 1 to respond to one of the sensing commands issued by the smart authentication module 110, and generate the motion according to the motion. The status produces an authentication action value.

Figure 3 is a schematic diagram of the remote transaction authentication system of the present creation. The remote transaction authentication system includes a portable electronic device 2 and the transaction authentication card 1. In this embodiment, the portable electronic device 2 is a mobile phone, and the transaction authentication card 1 is in the form of a Micro SD card. The socket 20 is inserted into a slot 20 of the portable electronic device 2 . When the user conducts a network transaction by the portable electronic device 2, during the remote transaction, the remote transaction host first confirms the identity gold preloaded by the transaction authentication card 1. Whether the key is consistent with the identity of the account logged in in the transaction (pre-stored in the remote transaction host), and the first-stage identity authentication procedure is completed when the identity key matches the account being logged in. Before the user makes a payment, the portable electronic device 2 generates an authentication command to the transaction authentication card 1 to trigger the action sensor 140 of the transaction authentication card 1 to start sensing the transaction authentication card. The motion sensor 140 generates an authentication action value according to the motion state, and compares the authentication action value with the authentication action condition by the smart authentication module 110, and when the comparison is matched The instruction to generate a successful action authentication is to complete the second phase of the identity authentication process. It is to be noted that the authentication action condition may be that the portable electronic device 2 is simply shaken to link the transaction authentication card 1 to cause the transaction authentication card 1 to be shaken, and the portable electronic device 2 may be shaken in a specific manner. For example, holding the portable electronic device 2 to draw an "8" pattern in the air causes the transaction authentication card 1 to follow the "8" pattern.

In this embodiment, the transaction authentication card is shaken for a predetermined time as an example of the authentication action condition. When the user uses the portable electronic device 2 to perform online banking remittance, when the transaction process proceeds to remit the money. The portable electronic device 2 displays the account number, amount, and the like of the remittance on a display screen 21, and displays a message prompting the user to complete the authentication action condition, for example, when the display screen 21 is displayed. When the message "Please complete the authentication action within 2 seconds to confirm the remittance" is displayed, the user should shake the mobile phone 2 within 2 seconds after the message appears to link the transaction authentication card 1 to cause the transaction authentication card 1 The portable operating device 2 completes the remittance procedure after the authentication operation condition is met, and the portable electronic device 2 is suspended when the authentication operation condition is not met. / Suspend remittance and cannot complete the transaction process. On the other hand, when the portable electronic device 2 does not insert the transaction security card 1 and directly conducts a network transaction, the portable electronic device 2 cannot obtain the identity key and cannot perform the transaction process, or Even if the portable electronic device 2 is plugged with the transaction security card 1 and the user does not perform the correct authentication action, the transaction procedure is terminated. Under the operation of the two types of protection, once the user's portable electronic device 2 is When the transaction security card 1 is lost, the verification of the authentication action condition can be further provided, and the double confirmation mechanism can be used to improve the security of the network transaction.

Therefore, the transaction authentication card and the remote transaction authentication system of the present invention include the following advantages: (1) miniaturization and convenient carrying, by integrating the digital authentication carrier into the memory card or the SIM card, the user can directly It is plugged into the portable electronic device, which avoids the traditional digital authentication carrier and the portable electronic device, and can not carry out the network transaction when forgetting to carry the digital authentication carrier; (2). Double authentication, in addition to utilizing The hardware encryption key of the digital authentication carrier is used for remote authentication of the user's identity, and the authentication action condition is used as the second-level authentication of the near-end to re-confirm the user identity and the electronic transaction content to achieve the promotion. The effectiveness of online transaction security.

The present invention has been disclosed in the above preferred embodiments, and it should be understood by those skilled in the art that the present invention is only intended to depict the present invention and should not be construed as limiting the scope of the present invention. It should be noted that variations and permutations equivalent to those of the embodiments are intended to be included within the scope of the present invention. Therefore, the scope of protection of this creation is subject to the definition of the scope of patent application.

1, 1'‧‧‧ transaction authentication card
100‧‧‧Substrate
110‧‧‧Smart Certification Module
120‧‧‧Transaction Certification Card Controller
122, 122'‧‧‧Transaction certification card standard connection terminal group
130‧‧‧ memory module
140‧‧‧ motion sensor
150‧‧‧ wafer
2‧‧‧Portable electronic devices
20‧‧‧Slots
21‧‧‧ Display screen

Figure 1 is a schematic diagram of a first embodiment of a transaction authentication card of the present invention. Figure 2 is a schematic diagram of a second embodiment of the transaction authentication card of the present invention. Figure 3 is a schematic diagram of the remote transaction authentication system of the present creation.

1‧‧‧Transaction Certification Card

100‧‧‧Substrate

110‧‧‧Smart Certification Module

120‧‧‧Transaction Certification Card Controller

122‧‧‧Transaction certification card standard connection terminal group

130‧‧‧ memory module

140‧‧‧ motion sensor

Claims (10)

A transaction authentication card includes a substrate and a transaction authentication card controller disposed on the substrate and a transaction authentication card standard connection terminal group, wherein the transaction authentication card further comprises: a motion sensor, is set On the substrate, in response to a sensing command for sensing the motion state and generating an authentication action value; and a smart authentication module disposed on the substrate and the transaction authentication card controller and the motion sense The smart device is connected to the smart authentication module, and the smart authentication module generates the sensing command in response to a request from the transaction authentication program, and compares the authentication action received from the motion sensor. The value and the stored authentication action condition are used to generate an action authentication success instruction for the transaction authentication program to be interpreted when the comparison is matched. The transaction authentication card of claim 1, wherein the motion sensor is an acceleration sensor or a gyroscope. The transaction authentication card as claimed in claim 1 or 2, wherein the transaction authentication card standard connection terminal group conforms to a communication protocol of a Secure Digital Memory Card (SD card). The transaction authentication card as claimed in claim 1 or 2, wherein the transaction authentication card standard connection terminal group conforms to a Subscriber Identity Module (SIM) communication protocol. The transaction authentication card of claim 4, wherein the smart authentication module and the transaction authentication card controller are integrated in a chip. A remote transaction authentication system for authenticating a user by using a user-specific identity key and an authentication action condition, the remote transaction authentication system comprising: a portable electronic device having a housing and The housing is provided with a slot for reading data. The portable electronic device performs a remote transaction through a network, and the portable electronic device is returned to the remote transaction during the remote transaction. The program generates an authentication command; and a transaction authentication card is pluggably inserted into the slot of the portable electronic device, the transaction authentication card pre-stores the identity key and the authentication action condition, and the transaction The authentication card returns to the authentication command to perform sensing of the motion state and accordingly generates an authentication action value, and the transaction authentication card compares the authentication action value with the authentication action condition to generate a motion authentication success when the comparison is matched. The instructions are interpreted by the remote transaction program. The remote transaction authentication system of claim 6, wherein the transaction authentication card includes an action sensor that senses an authentication action value of the transaction authentication card. The remote transaction authentication system of claim 7, wherein the motion sensor is an acceleration sensor or a gyroscope. The remote transaction authentication system according to any one of claims 6 to 8, wherein the slot of the portable electronic device and the transaction authentication card are in compliance with a Secure Digital Memory Card (SD card). The communication protocol to communicate. The remote transaction authentication system according to any one of claims 6 to 8, wherein the slot of the portable electronic device and the transaction authentication card are in accordance with a Subscriber Identity Module (SIM). Communication protocol to communicate.