TWM592134U - System for verifying identity for opening an account using a vehicle in an ATM - Google Patents

Abstract

A system for verifying identity by using a vehicle in an ATM to open an account. By installing a hardware vehicle driver in the ATM, the ATM can sign the account opening data through the hardware vehicle and sign the account opening data with The signature data is sent to the account opening server. After the account opening server can verify the signature data through the certificate verification server, the account opening data can be used to complete the account opening process. It can be used to open the account without going to the counter and achieve the right time for the account opener. Complete the technical effect of opening an account with the location.

Description

System for verifying identity using vehicle in ATM to open account

A remote account opening system, especially a system that uses a vehicle to verify identity in an ATM to open an account.

Banks are financial institutions that provide services such as payment, deposits, savings, loans, and wire transfers. To use the services provided by the bank, you usually need to open an account with the bank first.

Currently, opening an account at a bank usually needs to be done in the counter. The service staff examines the account opening information provided by the account opener, and asks the account opener one or more questions related to the account opener when necessary to determine whether the account opener is allowed to open the account.

However, the service hours of banks often overlap with the working hours of most people. Therefore, account holders need to take time off to open an account at the bank, causing inconvenience to the account holder.

In summary, it can be seen that the prior art has long had the problem of inconvenience in opening an account in order to open an account, so it is necessary to propose improved technical means to solve this problem.

In view of the prior art's problem that it is inconvenient to open an account to open an account, this creation discloses a system for using a vehicle to verify identity in an ATM to open an account, in which:

The system disclosed in this creation that uses a vehicle to verify identity in an ATM to open an account includes at least: a certificate verification server; a hardware vehicle to store private keys and digital certificates; an ATM to provide a hardware vehicle connection , Used to input account opening data, and used to drive the hardware vehicle and provide account opening data to the hardware vehicle, so that the hardware vehicle uses the private key to sign the account opening data to generate signature data, and transfer the signature data Back to the ATM, where the signature data contains digital certificates; the account opening server is used to receive the account opening data and signature data sent by the ATM, and send the account opening data and signature data to the certificate verification server to verify the server through the certificate Device to verify the signature data, and to use the account opening data to complete the account opening process after the signature data is verified by the certificate verification server.

The system disclosed in this creation is the same as above, and the difference between it and the previous technology is that this creation allows the ATM to sign the account opening data through the hardware vehicle and install the account by installing the hardware carrier driver in the ATM The data and signature data are sent to the account opening server. After the account opening server can verify the signature data through the certificate verification server, the account opening data can be used to complete the account opening process, so as to solve the problems in the previous technology and allow the account opener to choose the right Time and place to complete the technical effect of opening an account.

The following will describe the features and implementation of this creation in detail with reference to the drawings and examples. The content is sufficient for any person skilled in the relevant arts to easily fully understand and implement the technical means applied to solve the technical problems of this creation to implement accordingly, thereby realizing The effect that this creation can achieve.

This creation allows users to complete the account opening procedures of financial institutions such as banks through ATMs using hardware vehicles with digital certificates. Among them, the hardware carrier mentioned in this creation is a hardware device that can manage digital certificates and can encrypt data or sign data, such as chip cards (IC cards) or special pen drives, etc., but this creation does not use This is limited; the ATMs mentioned in this creation include but are not limited to Automated Teller Machine (ATM) or Cash Deposit Machine (CDM), etc.

The following first describes the system of the system of creation with the system architecture diagram of using the vehicle verification identity to open an account in the ATM, which is mentioned in the creation of "Picture 1". As shown in "Figure 1", the system of this creation includes a hardware carrier 110, an ATM 120, an account opening server 130, a certificate verification server 150, and an identity verification server 170 and a client 190 that can be attached. Among them, the ATM 120, the account opening server 130, the certificate verification server 150, the identity verification server 170, and the client 190 are all computing devices.

The computing devices mentioned in this creation include but are not limited to one or more processors, one or more memory modules, and buses that connect different components (including memory modules and processors). Through the included multiple components, the computing device can load and execute the operating system, so that the operating system runs on the computing device, and can also execute software or programs. In addition, the computing device also includes a housing, and the above-mentioned components are disposed in the housing.

The bus of the computing device mentioned in this creation may include one or more types, for example, including a data bus, an address bus, a control bus, and an extended function bus ( Expansion bus), and/or local bus (local bus) and other types of bus. Computing equipment buses include but are not limited to parallel industrial standard architecture (ISA) buses, peripheral component interconnect (PCI) buses, video electronics standards association (VESA) local buses, and serial universal serial buses (USB), fast peripheral component interconnect (PCI-E) bus, etc.

The processor of the computing device mentioned in this creation is coupled to the bus. The processor includes a register group or register space. The register group or register space can be completely set on the processing wafer, or all or part of it can be set outside the processing wafer and connected via a dedicated electrical connection. And/or coupled to the processor via a bus. The processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and are coupled and communicated through the bus. The processor can interpret a series of multiple instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copy/move data, etc., to run the operating system or execute various programs, modules, and/or element.

The processor of the computing device may be coupled to the chipset or electrically connected to the chipset through the bus. The chipset is composed of one or more integrated circuits (ICs), including a memory controller and peripheral I/O controller, that is, the memory controller and peripheral I/O controller can be included in Within an integrated circuit, two or more integrated circuits can also be used. The chipset usually provides I/O and memory management functions, and provides multiple general-purpose and/or dedicated registers, timers, etc. Among them, the above-mentioned general-purpose and/or dedicated registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access the data in the memory module and the mass storage area installed on the computing device through the memory controller. The above memory module includes any type of volatile memory (volatile memory) and/or non-volatile (non-volatile memory, NVRAM) memory, such as static random access memory (SRAM), dynamic random access Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The above-mentioned large-capacity storage area may include any type of storage device or storage medium, for example, a hard disk drive, an optical disc, a flash drive (flash memory), a memory card (memory card), a solid state drive (Solid State Disk, SSD), or any other storage device, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard drives, and solid state drives.

The processor of the computing device can also connect and communicate with peripheral devices or interfaces such as peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers through the peripheral input and output busses through the peripheral input and output controllers. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, trackpad, joystick, etc. The peripheral output device can be any type of output device, such as a display, printer, etc., peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface may include a wireless communication interface and/or a wired communication interface. The wireless communication interface may include a wireless communication network supporting Wi-Fi, Zigbee, etc., Bluetooth, infrared, near field communication (NFC), 3G/4G/5G and other mobile communication networks The interface of wireless communication or other wireless data transmission protocol, wired communication interface can be Ethernet device, asynchronous transmission mode (ATM) device, DSL modem, cable modem, etc. The processor can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data through the various peripheral devices and interfaces, and can also communicate with another computing device having the components described above.

The hardware carrier 110 is responsible for storing the private key and the digital certificate. The private key is usually owned by the account opener. The digital certificate includes the corresponding certificate serial number and the private key corresponding to the private key stored in the hardware carrier 110. Public key. In more detail, the hardware carrier 110 may be a hardware device capable of performing functions such as a chip operating system (COS) and having a function of managing digital certificates.

The hardware vehicle 110 may also use the stored private key to encrypt the target data or sign the target data. After the hardware vehicle 110 signs the target data, the signature data can be generated. In this creation, the signature data generated by the hardware carrier 110 may include target data and the signature value generated by the hardware carrier 110 to the target data signature, and the signature data may also include the hardware carrier 110 Stored digital certificate.

The ATM 120 can provide a hardware carrier 110 connection, and can drive the hardware carrier 110, so as to transmit data to the hardware carrier 110 after the hardware carrier 110 is driven, and receive the hardware carrier 110 transmitted data. Generally speaking, the ATM 120 may be provided with a connection interface (not shown), so that the hardware carrier 110 can be connected to the ATM 120 through the connection interface. The connection interface includes but is not limited to a chip card slot or a USB slot.

It should be noted that, when the ATM 120 drives the hardware carrier 110, it can first load the driver of the connection interface connected to the hardware carrier 110. When loading the driver of the connection interface, the ATM 120 usually searches for the driver of the connection interface in each access location according to the file access sequence preset in the ATM 120, that is, sequentially from the file access sequence. After searching for the driver of the connection interface in the defined access location, after the ATM 120 finds the driver of the connection interface, it will not search for the driver in other access locations. Since the conventional ATM/CDM and other ATMs 120 usually have a default driver for the connection interface installed or stored, the default driver usually only allows the conventional ATM 120 to drive the financial card, but it cannot drive the The hardware carrier 110, so in order to allow the conventional ATM 120 such as ATM/CDM to drive the hardware carrier 110 other than the financial card, the interface driver corresponding to the hardware carrier 110 connection interface can be installed Or stored in a custom access location prior to the default access location where the default driver installed or stored in the connection interface takes precedence, so that when the ATM 120 loads the driver for the connection interface, it accesses according to the file Prioritize the search for the interface driver of the connected interface to the self-storage location, and then load the interface driver instead of loading the default driver from the default access location where the default driver is installed or stored. In the case of the default driver, the ATM 120 can be loaded with an interface driver corresponding to the connection interface of the hardware carrier 110, and then communicate with the hardware carrier 110. Among them, the access location mentioned in this creation is usually a specific directory, for example, the custom access location is the installation directory of the interface driver, and the default access location is the operating system driver storage directory.

The ATM 120 is also responsible for inputting account opening information. The ATM 120 can display an input interface on a display such as a general screen or a touch screen, and provide an input device such as a touch screen or a keyboard for the account opener to input account opening data. The account opening information input by the ATM 120 includes but is not limited to the name, identification information, gender, birthday, address, mobile phone number, e-mail account number, etc. of the account opener, where the identification information of the account opener is usually an identity card number, passport number or visa Number, but this creation is not limited to this.

In some embodiments, the account opening data input by the ATM 120 may also include the identity image of the identity document held by the account opener. In some embodiments, the account opening data may also include the current image of the account opened by the account opener. (In this creation, it is also represented by "video of account opener"). Among them, the identity card of the account opener is usually an ID card, a driver's license, a health insurance card, etc., which has a facial image of the account opener, and the image of the account opener contains the complete face of the account opener.

The ATM 120 can use the same or different image capture modules (not shown in the figure) to capture the ID image and the account opener image. There is no particular limitation on this creation. Among them, the image capture module includes but is not limited to cameras, cameras, etc.

The ATM 120 is responsible for providing account opening data to the hardware carrier 110, so that the hardware carrier 110 uses the stored private key to sign the account opening data; the ATM 120 is also responsible for receiving the signature data returned by the hardware carrier 110 . In more detail, the ATM 120 can call the driver of the connection interface connecting the hardware carrier 110, and generate commands compatible with the hardware carrier 110 through the called driver, so as to use the generated commands and hardware The vehicle 110 communicates, and then transmits data to the hardware vehicle 110, executes instructions, and receives data from the hardware vehicle 110.

The ATM 120 can also be connected to the account opening server 130 or the client 190 through a wired or wireless network, and can receive data or signals transmitted by the account opening server 130/client 190, and can also transmit data or signals to the account opening server 130/Client 190. For example, the ATM 120 may transmit the entered account opening data and the signature data provided by the hardware carrier 110 to the account opening server 130.

In some embodiments, the ATM 120 may also determine whether the face of the facial image on the document image is the same as the account opener's face included in the account opener image when the account opening data entered includes the certificate image and the account opener image Match, and when the two match, send the account opening data and the signature data provided by the hardware carrier 110 to the account opening server 130, and when the ATM 120 judges the face of the facial image on the ID image and the account opener image If the face of the account opener does not match, the corresponding prompt message can be displayed on the display, and the account opening process can be ended. Among them, the ATM 120 can use face recognition technology to determine the facial features of the facial image on the ID image and the account opening in the account opener's image at the local end (the ATM 120 itself) or through a remote server (not shown). Whether the characteristics of the face of the user match, so as to determine whether the facial image on the ID image matches the image of the account opener, but this creation is not limited to this.

The ATM 120 can also receive and play the sound and/or image transmitted by the client 190, and can also receive the sound from the account opener and/or capture the real-time image of the account opener, thereby providing the account opener with the client 190 for instant communication .

The account opening server 130 can be connected to the ATM 120 and the certificate verification server 150 through a wired or wireless network, and can receive data or signals transmitted by the ATM 120/certificate verification server 150, and can also transmit data or signals to the automatic ATM 120/certificate verification server 150. For example, the account opening server 130 can receive the account opening data and signature data transmitted by the ATM 120, and can transmit the received account opening data and signature data to the certificate verification server 150, and can also receive the certificate verification server 150 The verification result transmitted.

The account opening server 130 is responsible for completing the account opening procedure using the account opening data received from the ATM 120 when the signature data transmitted by the ATM 120 passes the verification by the certificate verification server 150. Generally speaking, the account opening server 130 determines whether the signature data passes the verification of the certificate verification server 150 according to the verification result generated by the certificate verification server 150.

The certificate verification server 150 can be connected to the account opening server 130 and the identity verification server 170 through a wired or wireless network, and can receive the data or signals transmitted by the account opening server 130/identity verification server 170, and can also transmit data or The signal is given to the account opening server 130/identity verification server 170.

The certificate verification server 150 is responsible for receiving the account opening data and signature data transmitted by the account opening server 130, and is also responsible for generating the verification result of the received signature data, and is responsible for returning the generated verification result to the account opening server 130. Generally speaking, the certificate verification server 150 can obtain the public key of the account opener from the digital certificate included in the signature data as is conventionally used to verify the signature, and use the public key of the account opener and the account opening data to verify the signature data To produce the corresponding verification result.

In some embodiments, the certificate verification server 150 can also read the account opener identification data from the received account opening data, and read the certificate serial number from the digital certificate included in the received signature data, and can Generate the certificate confirmation data containing the read account opener identification data and certificate serial number, or you can send the generated certificate confirmation data to the identity verification server 170.

The certificate verification server 150 can also receive the identity verification result sent by the identity verification server 170, and can pass the verification of the certificate verification server 150 itself on the received signature data and the received identity verification result indicates that it is generated When the certificate confirmation data passes the verification of the identity verification server 170, the verification result indicating that the signature data passes the verification is generated, otherwise, if the signature data does not pass the verification of the certificate verification server 150, or the identity verification result indicates the certificate confirmation data When the verification by the identity verification server 170 is not passed, the certificate verification server 150 may generate a verification result indicating that the signature data has not passed the verification.

The identity verification server 170 may be connected to the certificate verification server 150 through a wired or wireless network, and may receive data or signals sent by the certificate verification server 150, or may send data or signals to the certificate verification server 150.

The identity verification server 170 can receive the certificate confirmation data sent by the certificate verification server 150, and can read out the relevant data of the corresponding digital certificate according to the certificate serial number in the certificate confirmation data. The data related to the digital certificate read by the identity verification server 170 includes owner identification data of the certificate owner.

The identity verification server 170 can also determine whether the owner identification data of the certificate owner included in the read data of the digital certificate is the same as the account opener identification data in the certificate verification data, and generates a corresponding identity verification result, And return the generated identity confirmation result to the certificate verification server 150. If the owner identification data is the same as the account opener identification data, the identity verification server 170 can confirm that the certificate verification data matches the owner of the digital certificate in the signature data received by the certificate verification server 150, otherwise, if the owner The identification data is different from the account opener identification data, and the identity verification server 170 can determine that the certificate verification data does not match the owner of the digital certificate.

The client 190 can be connected to the ATM 120 through a wired or wireless network, and can receive data or signals transmitted by the ATM 120, and can also transmit data or signals to the ATM 120.

The client 190 can receive the certificate image and the account opener image in the account opening data input by the ATM 120, and can display the certificate image and the account opener image to the service personnel, so that the service personnel can confirm the certificate image and the image displayed by the client 190 Account opener image, and judge whether the certificate image and the account opener image are consistent.

The client 190 can also provide service personnel using the client 190 to communicate with the account opener through real-time communication of text, sound and/or images, so that the service person can confirm the content of the account opening data with the account opener to confirm the account opener If the account opening information is correct, the service staff can also ask the account opener questions about account opening to understand the account opening motivation and purpose of the account opener.

Next, an embodiment is used to explain the operation of the system of this creation, and please refer to the flow chart of using the vehicle to verify the identity in the ATM mentioned in this creation in "Figure 2A" to open an account.

First, the ATM 120 can enter account opening information (step 210). In this embodiment, it is assumed that the ATM 120 is an ATM or CDM equipped with a touch screen, a camera, and an IC card reader. After the account opener clicks the account opening option on the touch screen, it can be displayed according to the touch screen Instructions, enter the name, identity card number, gender, address, mobile phone number, e-mail account in the ATM 120, and place the identity card and health insurance card at a designated location on the ATM 120 to provide a camera to take pictures, making the ATM 120 can enter account opening information including the data entered by the account opener and the image data on the front and back of the identity card and health insurance card.

After the ATM 120 enters the account opening data (step 210), the ATM 120 may prompt the user to insert the hardware carrier 110, thereby connecting the hardware carrier 110 and the ATM 120 (step 230). In this embodiment, it is assumed that the account opener uses a natural person certificate IC card as the hardware carrier 110, and inserts the natural person certificate IC card into the IC card reader of the ATM 120.

After the hardware carrier 110 is connected to the ATM 120 (step 230), the ATM 120 can drive the hardware carrier 110, and can provide the account opening data input to the hardware carrier 110 (step 241), the hardware After receiving the account opening data provided by the ATM 120, the vehicle 110 can use the stored private key to sign the received account opening data, and generate signature data containing the stored digital certificate (step 245), And send the generated signature data back to the ATM 120 (step 249). In this embodiment, it is assumed that the default driver of the IC card reader installed in the ATM 120 can only generate commands to communicate with general IC financial cards, that is, the ATM 120 cannot pass the IC card reader's default The driver communicates with the natural person certificate IC card. Therefore, the provider of the ATM 120 can install the ATM 120 in advance to allow the IC card reader to communicate with the general IC financial card and the natural person certificate IC card. The interface driver corresponding to the card allows the ATM 120 to load the driver of the IC card reader after the natural person certificate IC card is inserted into the IC card reader Set the storage location (that is, the directory where the interface driver is installed) to load the interface driver instead of loading the default driver from the directory where the default driver is stored, so that the ATM 120 can execute the IC card with the natural person certificate Corresponding to the interface driver, it generates instructions for the natural person certificate IC card to receive account opening data, sign the account opening data, and return the signing data generated by the signing.

After the ATM 120 receives the signature data returned by the hardware vehicle 110, the ATM 120 may transmit the entered account opening data and the received signature data to the account opening server 130 (step 250). After receiving the account opening data and signature data transmitted by the ATM 120, the account opening server 130 may send the received account opening data and signature data to the certificate verification server 150 for verification (step 260). In this embodiment, it is assumed that the certificate verification server 150 can first use the public key contained in the digital certificate in the received signature data to perform calculation on the received account opening data to generate a verification value and can compare If the generated verification value is different from the signature value in the signature data, the certificate verification server 150 may generate a verification result indicating that the verification has failed.

If the verification value generated by the certificate verification server 150 is the same as the signature value in the signature data, then the certificate verification server 150 can generate the verification result indicating that the verification is passed, or it can be as shown in the flow of "Figure 2B" As shown, the certificate confirmation data is generated, and the generated certificate confirmation data is sent to the identity confirmation server 170 (step 273). In this embodiment, assuming that the identity confirmation server 170 is a computing device that performs an identity confirmation service (ICS), the certificate verification server 150 can first read out the identity certificate number (account opener identification data) in the account opening data And the serial number of the certificate in the digital certificate, and sign the read identity certificate number and the certificate serial number, and then use the data generated by the signature as the certificate confirmation data, and send the certificate confirmation data to the identity confirmation server 170.

After the identity confirmation server 170 receives the certificate confirmation data sent by the certificate verification server 150, the identity confirmation server 170 can confirm whether the identity certificate number (account opener identification data) in the account opening data is in accordance with the received certificate confirmation data The owner of the digital certificate matches (step 275) and generates the corresponding verification result (step 277). For example, the identity verification server 170 can read the owner information of the owner of the digital certificate according to the certificate serial number, and compare whether the identity certificate number (owner identification data) in the owner message is the same as the identity certificate number in the account opening data , When the two are the same, the identity verification server 170 can generate a verification result indicating that the verification is successful, otherwise, if the owner identification data and the account opening identification data in the account opening data are different, the identity verification server 170 can generate a verification failure Validation results.

After the identity verification server 170 generates the verification result, the generated verification result can be returned to the certificate verification server 150. After receiving the verification result generated by the identity verification server 170, the certificate verification server 150 can determine whether the received verification result indicates that the verification is successful. The certificate verification server 150 may generate a verification result indicating that the signature data passes verification when the verification result indicates that the verification is successful, or may generate a verification result indicating that the signature data fails verification when determining that the verification result indicates that the verification fails.

After the certificate verification server 150 generates the verification result, the generated verification result can be returned to the account opening server 130. After the account opening server 130 receives the verification result generated by the certificate verification server 150, it can generate a corresponding response message when the verification result indicates that the signature data is not verified, and return the generated response message to the automatic The teller machine 120 causes the ATM 120 to display a response message to inform the account opener that the account has not been verified and the account opening has not been completed.

If the account opening server 130 judges that the received verification result indicates that the signature data passes the verification, the account opening server 130 may use the received account opening data to complete the account opening procedure (step 280), and may be generated after the account opening procedure is completed A response message indicating that the account opening is completed, and transmitting the generated response message back to the ATM 120, so that the ATM 120 displays the response message to notify the account opener that the account opening is completed. In this way, through this creation, an account opener can open an account through an automated teller machine everywhere, and no longer needs to cooperate with the business hours of financial institutions.

In the above embodiment, after the ATM 120 enters the account opening data (step 210), before connecting the ATM 120 and the hardware carrier 110 (step 230), the ATM 120 can also determine the image of the document contained in the input account opening data Whether the features of the facial image match the features of the account opener's face in the account opener image included in the account opening data, or can the identity image included in the account opening data and the account opener image be transmitted as shown in the "Figure 2C" process To the client 190 (step 221), after receiving the certificate image and the account opener image, the client 190 can display the received certificate image and the account opener image, so that the service personnel of the client 190 can display it through the client 190 The facial image in the ID image and the account opener's face included in the account opener image confirms whether the ID image and the account opener image match (step 223). When the service staff of the client 190 judges that the ID image matches the account opener's image based on the similarity between the facial image in the ID image and the account opener's face included in the account opener image, the service personnel can operate the client 190 to send a confirmation that the image matches Message to the ATM 120, so that the ATM 120 can prompt the account opener to connect the hardware carrier 110 and the ATM 120 (step 230) and continue the account opening procedure after receiving the confirmation message that the image matches, and when the client 190 When the service personnel judges that the ID image does not match the account opener's image based on the facial image in the ID image and the account opener's face contained in the account opener image, the service personnel can operate the client 190 to send a confirmation message that the image does not match to the ATM 120, After receiving the confirmation message that the image does not match, the ATM 120 may generate a prompt message to remind the account opener that the image of the certificate does not match the account opener, and may end the account opening service.

In summary, the difference between this creation and the previous technology is that it has a driver for installing a hardware carrier in the ATM, so that the ATM can sign the account opening data through the hardware carrier, and the account opening data and The signature data is sent to the account opening server. The account opening server can verify the signature data through the certificate verification server, and then use the account opening data to complete the account opening process. This technical method can solve the need of the previous technology to be in the cabinet. Opening an account leads to the problem of inconvenience in opening an account, thereby achieving the technical effect of allowing the account opener to choose an appropriate time and place to complete the account opening.

In addition, the system created by using the vehicle verification identity in the ATM to open an account can be implemented in hardware, software, or a combination of hardware and software, and can also be implemented in a centralized manner or with different components in a computer system. Distributed in several interconnected computer systems.

Although the embodiments disclosed in this creation are as above, the content described is not intended to directly limit the patent protection scope of this creation. Anyone with ordinary knowledge in the technical field to which this creation belongs, without departing from the spirit and scope disclosed in this creation, makes some modifications to the form and details of the implementation of this creation, which belongs to the patent protection of this creation range. The scope of patent protection for this creation must still be as defined in the scope of the attached patent application.

110: hardware vehicle 120: ATM 130: Account opening server 150: Certificate verification server 170: Identity confirmation server 190: Client Step 210: ATM input account opening information Step 221: The ATM transmits the ID image and account opener image in the account opening data to the client Step 223: The client confirms that the certificate image matches the account opener image Step 230: Connect the hardware vehicle to the ATM Step 241: ATM drives the hardware vehicle and provides account opening information to the hardware vehicle Step 245: The hardware vehicle uses the private key to sign the account opening data to generate the signature data Step 249: The ATM receives the signature data returned by the hardware vehicle Step 250: The ATM sends the account opening information and signature data to the account opening server Step 260: The account opening server sends the account opening data and signature data to the verification server for verification Step 273: The verification server generates the certificate confirmation data and sends it to the identity verification server Step 275: The identity confirmation server confirms whether the account opening identification data in the account opening data matches the owner of the digital certificate based on the certificate confirmation data Step 277: The verification server generates the verification result Step 280: The account opening server uses the account opening data to complete the account opening process after the signature data passes the verification of the verification server

Figure 1 is a system architecture diagram of using a vehicle to verify identity in an ATM to open an account for the creation. Figure 2A is a flow chart of using the vehicle to verify identity in the ATM to open an account as mentioned in the creation. Figure 2B is a flow chart of verification of signature data through identity verification server mentioned in the creation. Figure 2C is a flow chart of confirming the account opener through the client as mentioned in the creation.

110: hardware vehicle

120: ATM

130: Account opening server

150: Certificate verification server

170: Identity confirmation server

190: Client

Claims (8)

A system for verifying identity using a vehicle in an ATM to open an account. The system includes at least: A certificate verification server; A hardware carrier for storing a private key and a digital certificate; An automated teller machine that provides the hardware carrier connection to input an account opening data, and drives the hardware carrier and provides the account opening data to the hardware carrier, so that the hardware carrier uses the private key Sign the account opening data to generate a signing data, and return the signing data to the ATM, where the signing data includes the digital certificate; and An account opening server for receiving the account opening data and the signature data sent by the ATM, and sending the account opening data and the signature data to the certificate verification server to verify the signature through the certificate verification server The information, and used to complete the account opening process using the account opening data after the signature data is verified by the certificate verification server. As described in item 1 of the scope of the patent application, a system for using a vehicle to verify identity in an ATM to open an account, wherein the system further includes an identity confirmation server to receive the account opening data transmitted by the certificate verification server One of the certificate confirmation data and the certificate confirmation data used to confirm that the digital certificate owner matches. As described in item 2 of the patent application scope, a system for using a vehicle to verify identity in an ATM to open an account, where the certificate verification server reads an account opener identification data from the account opening data and the signature data The included digital certificate reads out a certificate serial number, and generates the certificate confirmation data including the account opener identification data and the certificate serial number. As described in item 2 of the scope of the patent application, a system for using a vehicle to verify identity in an ATM to open an account, wherein the identity verification server is further used to determine whether the owner of the digital certificate and the certificate confirmation data The account opener identification data in the same generates an identity confirmation result. The certificate verification server generates the signification data that indicates that the signature data passes the verification when the signature data passes the verification and the identity verification result indicates that the certificate confirmation data passes the verification. The verification result, and when the signature information fails the verification, or when the identity confirmation result indicates that the certificate confirmation data fails the verification, the verification result indicating that the signature information fails the verification is generated. As described in item 1 of the scope of the patent application, a system for using a vehicle to verify identity in an ATM to open an account, wherein the ATM is also used to install or store an interface driver corresponding to the hardware vehicle to a self-service A storage location is set, and the priority of the self-set storage location in a file access sequence set by the ATM has priority over the default storage location where the default driver is installed or stored, so that the ATM is based on the file access sequence It is preferred to load the interface driver from the self-set storage location to drive the hardware carrier. As described in item 1 of the scope of the patent application, a system for using a vehicle to verify identity in an ATM to open an account, wherein the system further includes a client for receiving a certificate image from the account opening data transmitted by the ATM And an account opener image, and to confirm that the certificate image is consistent with the account opener image. A system for using a vehicle to verify identity in an ATM to open an account as described in item 1 of the scope of the patent application, wherein the ATM is also used to determine whether the facial image on the document image included in the account opening data is the same as the account opening data The included image of the account opener matches. As described in item 1 of the patent application scope, a system for verifying identity using a vehicle in an ATM to open an account, wherein the ATM is a driver that calls a connection interface that connects to the hardware vehicle and generates it through the driver An instruction compatible with the hardware carrier, so as to use the instruction to communicate with the hardware carrier.

Images