TWM581251U - Netwok bank system - Google Patents

Abstract

An online banking system includes an online banking server, a push server, and a mobile device. When the mobile device establishes a connection with the online banking server and transmits a push verification request including an identity account to the online banking server, the online banking server determines the request according to the push. The push server is caused to transmit a push message to the mobile device. Then, in a push application, the mobile device generates a dynamic password according to a transaction password input by a user, and transmits the dynamic password to the push server. After verifying that the dynamic password is correct, the push server notifies the online banking server that the verification is successful, so that the online banking server provides the online banking service to the mobile device.

Description

Online banking system

The present invention relates to an online banking system, and more particularly to an online banking system that facilitates user login.

The current online banking service uses the unified number (identity number), user code, and user password as the means of login verification in both personal and corporate online banking services. However, the rules and lengths of the code and password of each bank are different. For the customer, in addition to having to remember a bunch of code and password, you must also enter the verification code to prevent the hacker from logging in during login. It is difficult for the customer to control the remote end, but it also causes the customer to be troubled in use. In addition, since the virtual keyboard on the mobile device is not as easy to operate as the physical keyboard of the conventional computer, when the user code and the user password are input, the input is unsuccessful or mis-filled, and the customer is inconvenient. . Therefore, these phenomena have become a problem to be solved.

Therefore, the purpose of the present invention is to provide an online banking system that facilitates user login.

Thus, the novel online banking system includes an online banking server, a push server, and a mobile device.

The online banking server is used to provide an online banking service. The push server is electrically connected to the online banking server.

The mobile device stores a device token corresponding to an identity account and installs a push application. Wherein, when the mobile device establishes a connection with the online banking server and transmits a push verification request including the identity account to the online banking server, the online banking server verifies according to the push broadcast The request causes the push server to transmit a push message to the mobile device. Then, the mobile device generates a dynamic password according to a transaction password input by the user in the push application, and transmits the dynamic password to the push server. After the push server verifies that the dynamic password is correct, the network banking server provides the mobile banking service to the mobile device.

In some implementations, wherein the online banking server provides the online banking service to the mobile device via a Responsive web design (RWD) webpage, the identity account number is a unified number or A mobile phone number, the mobile device inputs the unified number or the identity card number in the webpage, and selects to generate the push verification request.

In other implementations, the transaction password is pre-set by the user in the push application.

In other implementations, the mobile device is a smart phone, a tablet computer, or other electronic device with communication and networking functions.

In other implementations, the online banking system also includes a computer host. Wherein, when the computer host establishes a connection with the online banking server and transmits the push verification request including the identity account to the online banking server, the online banking server verifies according to the push broadcast The request causes the push server to transmit the push message to the mobile device. Then, the mobile device generates the dynamic password according to the transaction password input by the user in the push application, and transmits the dynamic password to the push server. After verifying that the dynamic password is correct, the push server enables the online banking server to provide the online banking service to the host computer.

In some implementations, wherein the identity account is a unified number or a ID number, the online banking server provides the online banking service to the computer host by using a webpage, where the computer host is in the webpage Enter the unified number or the ID card number and choose to generate the push verification request. The transaction password is pre-set by the user in the push application.

In other implementations, the mobile device includes an image capture unit, and the computer host includes a display unit. When the computer host establishes a connection with the online banking server and transmits a two-dimensional barcode verification request to the online banking server, the online banking server notifies the push according to the two-dimensional barcode verification request. The broadcast server generates a two-dimensional barcode, and the push server transmits the two-dimensional barcode to the online banking server, and the online banking server transmits the two-dimensional barcode to the host computer, so that the display The unit displays the two-dimensional barcode.

The mobile device captures the two-dimensional barcode on the display unit by the image capturing unit, and generates the dynamic password according to the transaction password input by the user, by using the The user inputs the dynamic password to the host computer and transmits the push password to the push server via the online banking server. After verifying that the dynamic password is correct, the push server enables the online banking server to provide the online banking service to the host computer.

In some implementations, the online banking server provides the online banking service to the computer host via a webpage, and the computer host selects to generate the two-dimensional barcode verification request in the webpage.

In some implementations, the transaction password is pre-set by the user in the push application.

In other implementations, wherein the computer host is a desktop computer.

The utility model has the following advantages: the mobile device generates the push verification request including the identity account number such as a uniform number or an identity card number, and the push server transmits the push broadcast message to the mobile device, and according to the transaction The password is correct to generate the dynamic password, so that the user only needs to input the unified number or the identity card number and the customized transaction password, so that the online banking server can successfully log in to use the mobile device. Online banking services, which greatly enhance the convenience of use.

Before the present invention is described in detail, it should be noted that in the following description, similar elements are denoted by the same reference numerals.

Referring to FIG. 1, a first embodiment of the novel online banking system includes an online banking server 2, a push server 3, and a mobile device 1. In this embodiment, the mobile device 1 is a smart phone, and in other embodiments, the mobile device 1 can also be a tablet computer or other electronic device with communication and networking functions.

The online banking server 2 is electrically connected to the push server 3, for example, to establish a connection in a wired manner, and belongs to a bank, and is used to provide an online banking service of the bank. In this embodiment, the push server 3 belongs to the bank, that is, it is built by the bank. In other embodiments, the push server 3 can also belong to a cloud server of a third-party company.

When a customer (ie, a user) of the bank wants to use the online banking service provided by the bank, the customer needs to go to one of the bank's branches to install a push application on the mobile device 1 of the customer. Program (APP), and register a personal account number and a device account (Token) corresponding to the identity account and the mobile device 1. The mobile device 1 stores the device token to enable the push server 3 to provide a push service to the mobile device 1. In addition, in other embodiments, the client may also apply to install the push application on the mobile device 1 online, for example, in the form of a wafer financial card verification.

When the client wants to use the online banking service in the mobile device 1, the client connects to a response webpage provided by the online banking server 2 via a browser of the mobile device 1 (Responsive web) The webpage of design, RWD), and enters the identity account in the webpage, and selects a push verification method, and the mobile device 1 generates a push verification request. The mobile device 1 also transmits the push verification request to the online banking server 2. In this embodiment, when the customer is a natural person, the identity account number is the customer's personal identification number. When the customer is a legal person, the identity account number is a unified number, but not limited thereto.

Upon receiving the push verification request, the online banking server 2 causes the push server 3 to transmit a push message to the mobile device 1 according to the push verification request. Then, after the client views the push message, the mobile device 1 inputs a transaction password preset by the client in the push application. The push application thereby generates a dynamic password and transmits the dynamic password to the push server 3. After verifying that the dynamic password is correct, the push server 3 notifies the online banking server 2 that the verification is successful, so that the online banking server 2 provides the mobile banking service to the mobile device 1. In more detail, when the user first sets the transaction password, the push application generates a seed according to the identity account, a device serial number of the mobile device 1, and the like, and the seed is stored in the seed. The device of the mobile device 1 is recorded in the push server 3. The dynamic password is generated according to the transaction password, a transaction data, and the seed operation, and the push server 3 can verify whether the dynamic password is based on the dynamic password, the transaction data, and the seed operation. correct.

In addition, it should be added that the dynamic password is generated by a technology that pushes one-time password (OTP), that is, a symmetric seed encryption method is used to generate an encrypted seed (Seed) for each registration. User. In other words, the push application on the mobile device 1 of each user has a unique device token and is prohibited from being installed on the mobile device 1 of the hack (Root or JB). The push server 3 can verify the correctness of the dynamic password according to time, for example, the time generated by the push message, the time when the dynamic password is generated, and the like. Therefore, it has higher security than other verification technologies that do not have device symbols such as graphic locks and fingerprint recognition.

Referring to FIG. 2, a second embodiment of the new online banking system includes an online banking server 2, a push server 3, a mobile device 1, and a computer host 4. In this embodiment, the computer main unit 4 is a desktop computer, but is not limited thereto. The online banking server 2, the push server 3, and the mobile device 1 are all the same as the first embodiment.

When the client wants to use the online banking service on the computer host 4, the client connects to a webpage provided by the online banking server 2 through a browser of the computer host 4, and is in the webpage. Entering the identity account and selecting a push verification method, the computer host 4 generates the push verification request. The host computer 4 also transmits the push verification request to the online banking server 2. In this embodiment, when the customer is a natural person, the identity account number is the customer's personal identification number. When the customer is a legal person, the identity account number is a unified number, but not limited thereto.

Upon receiving the push verification request, the online banking server 2 causes the push server 3 to transmit the push message to the mobile device 1 based on the push verification request. Then, after the client views the push message, the mobile device 1 inputs the transaction password preset by the client in the push application. The push application thereby generates the dynamic password and transmits the dynamic password to the push server 3. After verifying that the dynamic password is correct, the push server 3 notifies the online banking server 2 that the verification is successful, so that the online banking server 2 provides the online banking service to the host computer 4.

Referring to FIG. 2, a third embodiment of the present invention is substantially the same as the second embodiment. The difference is that the mobile device 1 includes an image capturing unit 11, such as a photography module or A camera module, the computer host 4 includes a display unit 41, such as a screen.

When the client wants to use the online banking service on the computer host 4, the client connects to the webpage provided by the online banking server 2 by using the browser of the computer host 4, and selects a second type. In the manner of the barcode verification, the computer host 4 generates the two-dimensional barcode verification request. The host computer 4 also transmits the two-dimensional barcode verification request to the online banking server 2.

When receiving the two-dimensional barcode verification request, the online banking server 2 notifies the push server 3 to generate a two-dimensional barcode, and the push server 3 transmits the two-dimensional barcode to the online banking servo. The online banking server 2 transmits the two-dimensional barcode to the computer host 4, so that the display unit 41 displays the two-dimensional barcode. The image capture unit 11 of the mobile device 1 captures the two-dimensional barcode displayed by the display unit 41 in the push application, and generates the transaction password according to the transaction password input by the user. The dynamic password is transmitted to the push server 3 by the two-dimensional barcode and the dynamic password. After verifying that the dynamic password is correct, the push server 3 notifies the online banking server 2 that the verification is successful, so that the online banking server 2 provides the online banking service to the host computer 4.

In summary, the user (ie, the customer) only needs to input the identity account (such as a uniform number or an identity card number) by using the push verification or the two-dimensional barcode verification provided by the online banking system. Customizing the transaction password, or simply entering the transaction password without entering the identity account, can conveniently and quickly log into the online banking service. In addition, the verification method of the dynamic password is also encrypted and protected during the data transmission process to ensure and enhance the security and privacy of the data, so the purpose of the novel can be achieved.

However, the above is only the embodiment of the present invention. When the scope of the novel implementation cannot be limited thereto, all simple equivalent changes and modifications according to the scope of the patent application and the contents of the patent specification are still This new patent covers the scope.

1‧‧‧ mobile device  11‧‧‧Image capture unit  2‧‧‧Internet Banking Server  3‧‧‧Pushing server  4‧‧‧Computer host  41‧‧‧Display unit

Other features and effects of the novel will be apparent from the embodiments of the drawings, in which:  1 is a block diagram showing a first embodiment of the novel online banking system; and  2 is a block diagram showing a second embodiment and a third embodiment of the novel online banking system.  

Claims (10)

An online banking system comprising:  An online banking server for providing an online banking service;  a push server that electrically connects to the online banking server; and  a mobile device, storing a device token corresponding to an identity account, and installing a push application, wherein when the mobile device establishes a connection with the online banking server, and includes an identity account When the push verification request is transmitted to the online banking server, the online banking server causes the push server to transmit a push message to the mobile device according to the push verification request, and then the mobile device In the push application, a dynamic password is generated according to a transaction password input by a user, and the dynamic password is transmitted to the push server, after the push server verifies that the dynamic password is correct, The online banking server is caused to provide the online banking service to the mobile device.   The online banking system of claim 1, wherein the online banking server provides the online banking service to the mobile device via a webpage of a Responsive web design (RWD), the identity account Is a unified number or a ID number, the mobile device inputs the unified number or the identity card number in the webpage, and selects to generate the push verification request. The online banking system of claim 1, wherein the transaction password is pre-set by the user in the push application. The online banking system of claim 1, wherein the mobile device is a smart phone, a tablet computer, or other electronic device having communication and networking functions. The online banking system of claim 1, further comprising a computer host, wherein the computer host establishes a connection with the online banking server, and transmits the push verification request including the identity account to the computer The online banking server transmits the push message to the mobile device according to the push verification request, and then the mobile device is in the push application. Generating the dynamic password according to the transaction password input by the user, and transmitting the dynamic password to the push server, and the push server makes the online banking server pair after verifying that the dynamic password is correct. The computer host provides the online banking service. The online banking system of claim 5, wherein the identity account is a unified number or a ID number, and the online banking server provides the online banking service to the computer host by using a webpage, the computer The host enters the unified number or the identity card number in the webpage, and selects to generate the push verification request, and the transaction password is preset by the user in the push application. The online banking system of claim 5, wherein the mobile device comprises an image capturing unit, the computer host includes a display unit, and the computer host establishes a connection with the online banking server, and When the two-dimensional barcode verification request is transmitted to the online banking server, the online banking server notifies the push server to generate a two-dimensional barcode according to the two-dimensional barcode verification request, and the push server performs the second Transmitting the barcode to the online banking server, and the online banking server transmits the two-dimensional barcode to the computer host, so that the display unit displays the two-dimensional barcode.  The mobile device captures the two-dimensional barcode on the display unit by the image capturing unit, and generates the dynamic password according to the transaction password input by the user, by using the The user inputs the dynamic password to the host computer, and transmits the push password to the push server via the online banking server, after the push server verifies that the dynamic password is correct, the online banking server causes the online banking server to The computer host provides the online banking service.   The online banking system of claim 7, wherein the online banking server provides the online banking service to the computer host via a webpage, and the computer host selects to generate the two-dimensional barcode verification request in the webpage. . The online banking system of claim 8, wherein the transaction password is pre-set by the user in the push application. The online banking system of claim 5, wherein the computer host is a desktop computer.