TWM573868U - Online banking system using bar code technology for identity verification - Google Patents

Abstract

An online banking system includes a bank host and an online banking server. The network banking server generates a login serial number, and generates a code image according to the login serial number, and transmits a barcode notification including the barcode image to the first electronic device, and the barcode notification causes the first electronic device to pass the browsing Displaying the barcode image, and after the second electronic device scans the barcode image through the predetermined application to obtain the login serial number, the second electronic device transmits a user identification data and a The first submission serial number data verification request is sent to the online banking server. The online banking server determines whether the first submission serial number matches the login serial number, and if so, transmits a user data request to the banking host.

Description

Verify the identity of the online banking system using bar code technology

The present invention relates to a banking system, and more particularly to an online banking system.

In the past, when bank customers wanted to apply for financial services to banks, most of them needed to be handled by the counter. With the development of Internet communication, more and more banks have developed online banking systems. More and more financial services projects are not required to be handled by customers. Customers only need to log in to the network through computers connected to the Internet or smart phones. The road banking system can handle it, thus improving convenience. Unlike other network systems, online banking systems require a high level of security because of the flow of money involved. How to improve security in the program of logging in to the system is a topic to be further explored by this novel.

Therefore, the purpose of the present invention is to provide an online banking system.

Therefore, the new network banking system is adapted to communicate with a first electronic device and a second electronic device, the first electronic device is equipped with a browser, and the second electronic device is installed with a predetermined application, the online banking The system includes a bank host and an online banking server. The online banking server is electrically connected to the bank host.

When the online banking server receives a code entry request from the first electronic device and transmitted through the browser, the online banking server generates a login serial number, and generates a code image according to the login serial number, and transmits Transmitting, to the first electronic device, a bar code including the bar code image, the bar code notification causing the first electronic device to display the bar code image through the browser, and causing the second electronic device to scan the bar code image through the predetermined application program After obtaining the login serial number, the second electronic device transmits a data verification request including a user identification data and a first submission serial number to the online banking server through the predetermined application.

When the online banking server receives the data verification request transmitted from the second electronic device and transmitted through the predetermined application and including the user identification data and the first submission serial number, the online banking server determines the first Whether the submitted serial number matches the login serial number.

When the online banking server determines that the first submission serial number matches the login serial number, the online banking server transmits a user profile request corresponding to the user identification data to the banking host.

When the bank host receives the user profile request, the bank host transmits a user profile corresponding to the user identification data to the online banking server.

When the online banking server receives the user profile, the online banking server generates a login webpage according to the user profile, and transmits the login webpage to the first electronic device.

In some implementations, the online banking system further includes a login database server electrically connected to the online banking server, and a bank electrically connected to the online banking server and the bank host. Security server.

When the online banking server receives the barcode login request from the first electronic device and transmitted through the browser, the online banking server further generates a first public key corresponding to the login serial number, and a corresponding The first private key of the login serial number, and storing the first public key and the login serial number to the login database server.

When the online banking server and the browser of the first electronic device end, the online banking server deletes the first private key.

The barcode image is generated by the online banking server according to the login serial number and the first public key, and the data verification request transmitted by the second electronic device through the predetermined application program further includes a submit public key.

When the network banking server receives the data verification request transmitted from the second electronic device and transmitted through the predetermined application, the online banking server determines whether the first submission serial number matches the login serial number, and determines the Whether the submitted public key matches the first public key.

After the online banking server determines that the first submission serial number matches the login serial number, and the submitted public key matches the first public key, the bank security control server transmits a one-time password to the online banking server. Device.

When the online banking server receives the one-time password from the bank security server, the online banking server encrypts the one-time password using the first public key, and encrypts the one-time password The login database server is stored, and the one-time password is corresponding to the login serial number.

Before the online banking server sends the user profile corresponding to the user identification data to the bank host, the online banking server first accesses the one-time corresponding to the login serial number corresponding to the verification serial number in the login database server. a password, and decrypting the one-time password by using the first private key corresponding to the login serial number corresponding to the verification serial number, and the user data request transmitted by the online banking server to the bank host includes the decrypted one-time password .

When the bank host receives the user profile request, the bank host first transmits the one-time request containing the user profile information before transmitting the user profile corresponding to the user identification data to the online banking server. The password verification request for the password is given to the bank security server.

When the bank security server receives the password verification request from the bank host, the bank security server determines whether the one-time password of the password verification request matches the one-time password stored by the bank security server. .

When the bank security server determines that the one-time password of the password verification request matches the one-time password stored by the bank security server, the bank security server transmits a confirmation notification to the bank host.

The bank host transmits the user profile corresponding to the user identification data to the online banking server after receiving the confirmation notification.

In some implementations, the bank security server stores a plurality of second public keys, and a plurality of pre-stored binding sequence numbers respectively corresponding to the second public keys.

The data verification request transmitted by the second electronic device through the predetermined application program further includes an electronic signature associated with the first submission serial number and the submitted public key and a submission binding serial number associated with the electronic signature.

After the online banking server determines that the first submission serial number matches the login serial number, and the submitted public key matches the first public key, the online banking server will include the electronic signature and the submission The signed verification request of the serial number is transmitted to the bank security server.

When the bank security server receives the signature verification request from the online banking server, the bank security server determines whether the submitted binding sequence number matches one of the pre-stored binding sequence numbers.

When the bank security server determines that the submitted binding sequence number matches one of the pre-stored binding sequence numbers, the bank security control server corresponds to the pre-stored binding sequence number corresponding to the submitted binding sequence number. The second public key verifies whether the electronic signature is valid.

When the bank security server verifies that the electronic signature is valid according to the second public key corresponding to the pre-stored binding sequence number corresponding to the submitted binding sequence number, the bank security server transmits the one-time password to The online banking server.

In some implementations, when the online banking server receives the barcode login request from the first electronic device and transmitted through the browser, the online banking server further generates a webpage corresponding to the login serial number. Identifying the code, and storing the webpage identification code to the login database server, and transmitting a first identification code notification including the webpage identification code to the first electronic device, the first identification code notifying the first The electronic device displays the webpage identification code through the browser.

After the second electronic device obtains the login serial number by scanning the barcode image through the predetermined application, the second electronic device further transmits an identifier containing the login serial number to the online banking server through the predetermined application. .

When the network banking server receives the identification code request from the second electronic device and including the login serial number, the online banking server transmits a second identification code notification including the webpage identification code to the first The second electronic device, the second identification code notification causes the second electronic device to display the webpage identification code through the predetermined application.

The effect of the present invention is that the first electronic device transmits the barcode image to the first electronic device through the browser, and the first electronic device displays the barcode image through the browser for the user to use. The second electronic device scans the barcode image to obtain the login serial number, and transmits the data verification request to the online banking server through the predetermined application program, thereby improving the security of the login system; and further, by using the first The public key and the first private key encrypt and decrypt the one-time password, which can further improve the security of the login system. Furthermore, the bank security control server verifies that the electronic signature is valid only once. The password is transmitted to the online banking server, which further enhances the security of the login system.

Referring to FIG. 1, an embodiment of the new network banking system is adapted to be associated with a first electronic device 5 (such as a smart phone, a tablet computer, a desktop computer or a laptop computer) and a second electronic device 6 ( For example, a smart phone or a tablet computer, the first electronic device 5 is equipped with a browser, and the second electronic device 6 is installed with a predetermined application, but in another embodiment, the first electronic device 5 and the The second electronic device 6 may also be an electronic device (such as a smart phone or a tablet) in which the browser and the predetermined application are installed at the same time. The online banking system includes a bank host 1, a login database server 2, a bank security server 3, and an online banking server 4. The online banking server 4 is electrically connected to the bank host 1, the login database server 2, and the bank security server 3. The bank host 1 is electrically connected to the bank security server 3.

Referring to Figures 1 and 2, the steps of the online banking system executing a code entry procedure are described below. First, as shown in step S01, when the online banking server 4 receives a code entry request from the first electronic device 5 and transmitted through the browser, the online banking server 4 generates a login serial number, a a first public key corresponding to the login serial number, a first private key corresponding to the login serial number, and a webpage identification code corresponding to the login serial number.

Then, as shown in step S02, the online banking server 4 stores the first public key, the login serial number and the webpage identification code to the login database server 2. It is worth mentioning that the first private key is only temporarily stored in the online banking server 4, and the chat between the online banking server 4 and the browser of the first electronic device 5 ends. (For example, the browser is closed by the user), the online banking server 4 deletes the first private key, thereby improving security.

Then, as shown in step S03, the online banking server 4 generates a code image according to the login serial number and the first public key. In this embodiment, the barcode image is a QR Code image, but is not limited thereto.

Then, as shown in step S04, the online banking server 4 transmits a barcode notification including the barcode image and a first identification code including the webpage identification code to the first electronic device 5. The identification code notification causes the first electronic device 5 to display the webpage identification code through the browser. The barcode notification causes the first electronic device 5 to display the barcode image through the browser, and after the second electronic device 6 scans the barcode image through the predetermined application to obtain the login serial number and the first public key, The second electronic device 6 transmits, via the predetermined application, a user identification data (such as an identity card number), a first submission serial number, a submission public key, a related first serial number, and the submitted public key. The electronic signature and a data verification request relating to the submission binding serial number of the electronic signature are sent to the online banking server 4. In this embodiment, after the second electronic device 6 scans the barcode image by the predetermined application to obtain the login serial number and the first public key, the second electronic device 6 executes the predetermined application program first. Application login procedure (for example, the user needs to input the user identification data, a preset login password, or fingerprint identification, or face recognition), and then transmit the data verification request to the network through the predetermined application Road Bank Server 4.

After the second electronic device 6 scans the barcode image by the predetermined application to obtain the login serial number and the first public key, the second electronic device 6 transmits an identifier including the login serial number through the predetermined application program. The code is requested to the online banking server 4.

Then, as shown in step S05, when the online banking server 4 receives the identification code request from the second electronic device 6 and including the login serial number, the online banking server 4 will include the webpage identification. The second identification code notification of the code is transmitted to the second electronic device 6, and the second identification code notification causes the second electronic device 6 to display the webpage identification code through the predetermined application, thereby operating the first electronic device 5. And the user of the second electronic device 6 can confirm whether the first electronic device 5 and the webpage identification code displayed by the first electronic device 5 are the same as the webpage identification code displayed by the second electronic device 6. The second electronic device 6 is executing the same barcode entry procedure.

Then, as shown in step S06, when the online banking server 4 receives the data verification request transmitted from the second electronic device 6 and transmitted through the predetermined application, the online banking server 4 determines the first submission. Whether the serial number matches the login serial number, and determining whether the submitted public key matches the first public key. If not, executing step S07, outputting an error notification to the second electronic device 6, and if yes, executing step S08.

Step S08: After the online banking server 4 determines that the first submission serial number matches the login serial number, and the submitted public key matches the first public key, the online banking server 4 will include the electronic signature. The chapter and the signature verification request of the submission binding sequence number are transmitted to the bank security server 3.

Then, as shown in step S09, the bank security server 3 stores a plurality of second public keys, and a plurality of pre-stored binding serial numbers respectively corresponding to the second public keys, and when the bank security control server 3, receiving the signature verification request from the online banking server 4, the bank security server 3 determines whether the submitted binding serial number matches one of the pre-stored binding serial numbers, and if not, performs the step S10, outputting an error notification to the second electronic device 6, and if yes, executing step S11.

Step S11 is when the bank security server 3 determines that the submitted binding sequence number is consistent with one of the pre-stored binding sequence numbers, and the bank security control server 3 is based on the pre-stored binding sequence number corresponding to the submitted binding sequence number. The corresponding second public key verifies whether the electronic signature is valid. If not, step S12 is executed to output an error notification to the second electronic device 6. If yes, step S13 is performed.

Step S13 is that when the bank security control server 3 verifies that the electronic signature is valid according to the second public key corresponding to the pre-stored binding sequence number corresponding to the submitted binding sequence number, the bank security server 3 will once The sexual password is transmitted to the online banking server 4. In other words, by confirming that the second electronic device 6 is a pre-bound electronic device, the one-time password is transmitted to the online banking server 4, which can improve the security of the login system. The second electronic device 6 is pre-bound, the second electronic device 6 obtains a second private key for generating the electronic signature and the corresponding pre-stored binding serial number, and the bank security server 3 The second public key and the corresponding pre-stored binding sequence number are stored.

Then, as shown in step S14, when the online banking server 4 receives the one-time password from the bank security server 3, the online banking server 4 uses the first public key to the one-time password. Encrypting, and storing the encrypted one-time password to the login database server 2, and making the one-time password correspond to the login serial number.

Then, as shown in step S15, the online banking server 4 accesses the one-time password corresponding to the login serial number corresponding to the verification serial number in the login database server 2, and uses the login serial number corresponding to the verification serial number. The first private key is decrypted corresponding to the first private key. It is to be noted that, in this embodiment, after displaying the webpage identification code and the barcode image through the browser (refer to step S04), the first electronic device 5 transmits a relevant registration number every predetermined time. And the password access request of the one-time password to the online banking server 4, the password access request causes the online banking server 4 to confirm whether the one-time password has been stored in the login database server 2, Therefore, after the execution of step S14 (after the encrypted one-time password is stored to the login database server 2), step S15 is then executed.

Next, as shown in step S16, the online banking server 4 transmits a user profile request corresponding to the user identification data to the bank host 1, and the user profile request includes the decrypted one-time password.

Next, as shown in step S17, when the bank host 1 receives the user profile request, the bank host 1 transmits a password verification request containing the one-time password of the user profile request to the bank security server 3.

Then, as shown in step S18, when the bank security server 3 receives the password verification request from the bank host 1, the bank security server 3 determines the one-time password of the password verification request and the bank security. Whether the one-time password stored by the control server 3 matches, if not, executing step S19, outputting an error notification to the first electronic device 5, and if yes, executing step S20.

Step S20: when the bank security server 3 determines that the one-time password of the password verification request matches the one-time password stored by the bank security server 3, the bank security server 3 transmits a confirmation notification to the Bank host 1.

Next, as shown in step S21, when the bank host 1 receives the confirmation notification, the bank host 1 transmits a user profile corresponding to the user identification data to the online banking server 4.

Finally, as shown in step S22, when the online banking server 4 receives the user profile, the online banking server 4 generates a login webpage based on the user profile, and transmits the login webpage to the first page. The electronic device 5 is configured to display, by the first electronic device 5, the login webpage through the browser.

In summary, the new online banking system transmits the barcode containing the barcode image to the first electronic device 5 by the network banking server 4, so that the first electronic device 5 displays the same through the browser. a barcode image for the user to use the second electronic device 6 to scan the barcode image to obtain the login serial number, and transmit the data verification request to the online banking server 4 through the predetermined application program, thereby improving the security of the login system. Further, by encrypting and decrypting the one-time password by using the first public key and the first private key, the security of the login system can be further improved, and further, the bank security server 3 verifies When the electronic signature is valid, the one-time password is transmitted to the online banking server 4, thereby further improving the security of the login system, and thus the purpose of the novel can be achieved.

However, the above is only the embodiment of the present invention, and when it is not possible to limit the scope of the present invention, all the simple equivalent changes and modifications according to the scope of the patent application and the contents of the patent specification are still This new patent covers the scope.

1‧‧‧Bank host

2‧‧‧Login database server

3‧‧‧Bank Security Server

4‧‧‧Internet Banking Server

5‧‧‧First electronic device

6‧‧‧Second electronic device

S01~S22‧‧‧Steps

Other features and effects of the present invention will be apparent from the following description of the drawings, wherein: FIG. 1 is a schematic diagram of a hardware connection relationship of an embodiment of the novel network banking system; and FIG. 2 2A and 2B) are a flow chart of this embodiment.

Claims (4)

An online banking system is adapted to communicate with a first electronic device and a second electronic device. The first electronic device is installed with a browser. The second electronic device is installed with a predetermined application. The online banking system includes: a bank host; and an online banking server electrically connected to the bank host; when the online banking server receives a code entry request from the first electronic device and transmitted through the browser, the online banking The server generates a login serial number, and generates a code image according to the login serial number, and transmits a barcode notification containing the barcode image to the first electronic device, the barcode notification causing the first electronic device to display the barcode through the browser And the second electronic device transmits a user identification data and a first submission serial number through the predetermined application program after the second electronic device scans the barcode image to obtain the login serial number through the predetermined application program. Data verification request to the online banking server; when the online banking server receives the second electrical And the network banking server determines whether the first submission serial number matches the login serial number; and when the network device transmits the data identification request transmitted by the predetermined application and includes the user identification data and the first submission serial number; The bank server determines that the first submission serial number matches the login serial number, and the online banking server transmits a user profile request corresponding to the user identification data to the bank host; when the bank host receives the user profile request The bank host transmits a user profile corresponding to the user identification data to the online banking server; when the online banking server receives the user profile, the online banking server generates a user profile according to the user profile After logging in to the webpage, the webpage after login is transmitted to the first electronic device. The online banking system of claim 1, further comprising a login database server electrically connected to the online banking server, and a bank security control electrically connected to the online banking server and the bank host a server; when the network banking server receives the barcode login request from the first electronic device and transmitted through the browser, the online banking server further generates a first public key corresponding to the login serial number, And a first private key corresponding to the login serial number, and storing the first public key and the login serial number to the login database server; when the online banking server and the browser of the first electronic device After the one-to-one negotiation ends, the online banking server deletes the first private key; the barcode image is generated by the online banking server according to the login serial number and the first public key, and the second electronic device transmits The data verification request transmitted by the predetermined application program further includes a submitting public key; when the online banking server receives the data verification request transmitted from the second electronic device and transmitted through the predetermined application, The online banking server determines whether the first submission serial number matches the login serial number, and determines whether the submitted public key matches the first public key; and the online banking server determines the first submission serial number and the login serial number After the submission, and the submitting public key matches the first public key, the bank security server transmits a one-time password to the online banking server; when the online banking server receives the security control from the bank The one-time password of the device, the online banking server encrypts the one-time password by using the first public key, and stores the encrypted one-time password to the login database server, and makes the one-time password Corresponding to the login serial number; the online banking server accessing the login data corresponding to the verification serial number in the login database server before transmitting the user data request corresponding to the user identification data to the banking host The one-time password corresponding to the serial number, and decrypting the one-time password by using the first private key corresponding to the login serial number corresponding to the verification serial number, the online banking server The user profile request transmitted to the bank host includes the decrypted one-time password; when the bank host receives the user profile request, the bank host transmits the user profile corresponding to the user identification data to the network Before the bank server, the password verification request containing the one-time password of the user data request is first transmitted to the bank security server; when the bank security server receives the password verification request from the bank host The bank security server determines whether the one-time password of the password verification request matches the one-time password stored by the bank security server; when the bank security server determines the one-time password of the password verification request Corresponding to the one-time password stored by the bank security server, the bank security server sends a confirmation notification to the bank host; the bank host will not correspond to the user identification data after receiving the confirmation notification. The user profile is transmitted to the online banking server. The online banking system of claim 2, wherein the bank security server stores a plurality of second public keys, and a plurality of pre-stored binding serial numbers respectively corresponding to the second public keys; The data verification request transmitted by the electronic device through the predetermined application program further includes an electronic signature associated with the first submission serial number and the submitted public key and a submission binding serial number associated with the electronic signature; After the bank server determines that the first submission serial number matches the login serial number, and the submit public key matches the first public key, the online banking server will include the electronic signature and the signature of the submitted binding serial number. The verification request is transmitted to the bank security server; when the bank security server receives the signature verification request from the online banking server, the bank security server determines whether the submission binding sequence number is One of the pre-stored binding sequence numbers is consistent; when the bank security server determines that the submitted binding sequence number matches one of the pre-stored binding sequence numbers, the bank security server is bound according to the submission sequence Corresponding to the second public key corresponding to the pre-stored binding sequence number, whether the electronic signature is valid; when the bank security server is in accordance with the pre-stored binding sequence number corresponding to the submitted binding sequence number, the second The public key verifies that the electronic signature is valid, and the bank security server transmits the one-time password to the online banking server. The online banking system of claim 3, wherein when the online banking server receives the barcode login request from the first electronic device and transmitted through the browser, the online banking server further generates a Corresponding to the webpage identification code of the login serial number, and storing the webpage identification code to the login database server, and transmitting a first identification code notification including the webpage identification code to the first electronic device, the first The identification code notification causes the first electronic device to display the webpage identification code through the browser; after the second electronic device scans the barcode image through the predetermined application to obtain the login serial number, the second electronic device further transmits the predetermined The application transmits an identifier requesting the login serial number to the online banking server; and when the online banking server receives the identification code request from the second electronic device and including the login serial number, the network The bank server transmits a second identification code notification including the webpage identification code to the second electronic device, and the second identification code notifies the second electronic device App display the page through the predetermined identification code.