TWM601410U - System for completing account application by scanning code to verify identity - Google Patents

Abstract

A system that scans the code to complete the account application. It obtains the data to be verified through the mobile device from the ATM, and obtains the signature data through the certificate carrier after the data to be verified is confirmed by the digital bank server. After the signature data is verified by the verification server, the server uses the application data sent by the mobile device to carry out the corresponding technical means of account application. It can use the ATM to complete the identity confirmation of the account opening, and the account holder can choose freely Convenient time and place to complete the technical effect of identity verification.

Description

Scan the QR code to complete the account application system

A remote application system device for a digital account, in particular, a system device that scans a code to complete the account application.

Banks are financial institutions that provide services such as payments, deposits, savings, loans, and wire transfers. To use the services provided by the bank, you usually need to open an account with the bank first.

Although it is currently possible to open a digital account online through Internet banking or mobile banking, the method of opening such an account depends on the method of identity verification, and the level of the digital account opened is also different. Compared with the digital accounts opened for full identity verification, there are many restrictions, for example, some transactions cannot be executed or the amount that can be used during the transaction is lower. If you want to open a digital account with more complete functions, it is still the same as opening a general account. The bank's service staff must check the account opening information provided by the account holder at the counter to determine whether the account holder is allowed to open the account.

In order to allow account holders who open online accounts through online banking or mobile banking to not need to confirm their identity at the counter, at present, account holders can also upload ID copies or ID images during the online account opening process, so as to provide bank service personnel to judge Whether to allow account holders to open an account. However, such an account opening process needs to wait for bank service personnel to review, and it is impossible to open an account for the account holder immediately. In order to solve this problem, some banks also provide account holders to use digital certificates such as natural person certificates to conduct identity verification during the online account opening process. However, natural person certificates need to be read through a card reader, but not all account holders have a card reader to use, and even if the account holder has a card reader, it is often due to the operating system of the client device connected to the card reader The environment or the policy of the application or browser running in the operating system causes the situation that the card reader cannot be accessed or the digital certificate cannot be obtained through the card reader, causing inconvenience and trouble for the account holder.

In summary, it can be seen that there has been a long-standing problem in the prior art that various online account opening methods may cause account holders to fail to complete instant account applications. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the fact that various online account opening methods in the prior art may cause the account opener to be unable to complete the account application in real time, this creation reveals a system for scanning the code to complete the account application, including:

The system for scanning the code to complete the account application disclosed in this creation at least includes: a digital bank server; a mobile device for generating and sending application data to the digital bank server, and for receiving the data generated by the digital bank server Verify the serial number, and generate corresponding coded data based on the verified serial number; the ATM is used to obtain coded data through mobile devices and decode the coded data into pending data, and to send the pending data to the DDB server to enable DDB The server compares the data to be verified with the verification serial number, and determines whether the comparison result returned by the digital bank server indicates that the data to be verified is confirmed, and then connects to the certificate carrier and obtains the signature data through the certificate carrier; the verification server, Used to verify the signature data sent by the ATM, and send the corresponding verification result to the digital bank server, so that the digital bank server will determine that the signature data has passed the verification server verification, and then perform the corresponding account application based on the application data .

The system disclosed in this creation is as above. The difference between this creation and the previous technology is that this creation is obtained by the ATM through the mobile device to obtain the pending data, and after the pending data is confirmed by the digital bank server, it is obtained through the certificate carrier Signature data. After the signature data is verified by the verification server, the Digital Bank server performs the corresponding account application based on the application data sent by the mobile device, so as to solve the problems of the previous technology and achieve the account opening Free to choose a convenient time and place to complete the technical function of the account application.

The following will describe in detail the features and implementation of this creation in conjunction with the drawings and embodiments. The content is sufficient to enable anyone familiar with relevant skills to easily and fully understand the technical means used in this creation to solve technical problems and implement them accordingly. The achievable effect of this creation.

This creation allows the user (account opener) to use a mobile device to connect to the digital bank server to fill in the application information, and then use the certificate carrier to the ATM to complete the account application. Among them, the account application tasks mentioned in this creation, such as account opening or account upgrade, etc., but this creation is not limited to this.

The digital bank server mentioned in this creation includes, but is not limited to, online banking servers or mobile banking servers and other computing devices that provide services over the Internet; the certificate carrier mentioned in this creation can store digital certificates It can also execute hardware devices that can manage and use digital certificates such as Chip Operating System (COS) to encrypt data and/or sign data, such as chip cards (IC cards), but this creation does not Limited to this; the automated teller machines mentioned in this creation include but are not limited to automated devices such as Automated Teller Machine (ATM) or Automated Deposit Machine (Cash Deposit Machine, CDM) that provide one or more banking services .

The computing devices mentioned in this creation include but are not limited to one or more processors, one or more memory modules, and hardware components such as buses connecting different hardware components (including memory modules and processors) . Through the included multiple hardware components, the computing device can load and execute the operating system, make the operating system run on the computing device, and can also execute software or programs. In addition, the computing device also includes a housing, and the above-mentioned hardware components are arranged in the housing.

The bus of the computing device mentioned in this creation can include one or more types, for example, including data bus, address bus, control bus, and extended function bus ( expansion bus), and/or local bus (local bus). The bus bars of computing devices include but are not limited to the Industry Standard Architecture (ISA) bus, Peripheral Component Interconnect (PCI) bus, and the Video Electronics Standards Association (VESA) Bureau Domain bus, serial universal serial bus (Universal Serial Bus, USB), fast peripheral component interconnection (PCI Express, PCI-E/PCIe) bus, etc.

The processor of the computing device mentioned in this creation is coupled with the bus. The processor contains a register group or register space. The register group or register space can be completely set on the processing chip, or all or part of it can be set outside the processing chip and connected via a dedicated electrical connection And/or coupled to the processor via the bus. The processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and they are coupled and communicated through a bus. The processor can interpret a computer instruction or a series of multiple computer instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copy/move data, etc., to drive other hardware components in the computing device Or run the operating system or execute various programs and/or modules.

Computing equipment usually also contains one or more chipsets (Chipset). The processor of the computing device can be coupled to the chipset or electrically connected to the chipset through a bus. The chipset is composed of one or more integrated circuits (Integrated Circuit, IC), including memory controller and peripheral input/output (I/O) controller, that is, memory controller and peripheral input/output control The device can be included in one integrated circuit, or it can be implemented using two or more integrated circuits. Chipsets usually provide I/O and memory management functions, as well as multiple general and/or dedicated registers, timers, etc., among which the above-mentioned general and/or dedicated registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access the data in the memory module and the mass storage area installed on the computing device through the memory controller. The above-mentioned memory modules include any type of volatile memory (volatile memory) and/or non-volatile memory (NVRAM), such as static random access memory (SRAM) , Dynamic Random Access Memory (DRAM), Read-Only Memory (ROM), Flash memory, etc. The above-mentioned mass storage area can include any type of storage device or storage medium, such as hard disk drives, optical discs, flash drives, memory cards, and solid state disks. , SSD), or any other storage device, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drives, and solid state drives.

The processor of the computing device can also connect and communicate with peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers and other peripheral devices or interfaces through peripheral I/O controllers via peripheral I/O buses. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, touchpad, joystick, etc., the peripheral output device can be any type of output device, such as a display, a printer, etc., a peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface. The wireless communication interface can include support for wireless local area networks (such as Wi-Fi, Zigbee, etc.), Bluetooth, infrared, and near-field communication (NFC), 3G/4G/5G and other mobile communication network (cellular network) or other wireless data transmission protocol interface, wired communication interface can be Ethernet device, DSL modem, cable modem, asynchronous transmission Mode (Asynchronous Transfer Mode, ATM) devices, or optical fiber communication interfaces and/or components, etc. The processor can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data through various peripheral devices and interfaces, and can also communicate with another computing device with the hardware components described above. communication.

The following first uses the scan code mentioned in the creation of "Picture 1" to complete the structure diagram of the account application to illustrate the system operation of this creation. As shown in "Figure 1", the system of this creation includes a mobile device 110, an ATM 120, a certificate carrier 130, an authentication server 150, a digital bank server 170, and an additional identity verification server 160, relay Server 190. Among them, the mobile device 110, the automated teller machine 120, the verification server 150, the identity verification server 160, the digital bank server 170, and the relay server 190 are computing devices.

The mobile device 110 can be connected to the digital bank server 170 via a wireless network, and can send data or signals to the digital bank server 170, and can also receive data or signals sent by the digital bank server 170. The wireless network mentioned in this creation includes mobile communication network (cellular network) or wireless local area network.

The mobile device 110 is responsible for generating application data. Generally speaking, the mobile device 110 can provide a data input interface for the user to input application data. In this creation, the application information includes but is not limited to the user’s name, identification data, gender, birthday, address, communication data, etc., among which the user’s identification data is usually the ID number, passport number or visa number, etc. and the customer Data with a one-to-one relationship, but this creation is not limited to this; the user’s communication data includes, but is not limited to, mobile phone numbers, email accounts, instant messaging accounts, and other data that can be connected to customers. In some embodiments, the application data may also include a certificate image of an identity certificate held by the user. Among them, the user's identity document is usually an identity card, a driver's license, a health insurance card, and other documents that have the facial image of the account holder.

The mobile device 110 is also responsible for sending the generated application data to the digital bank server 170 and is responsible for receiving the verification serial number returned by the digital bank server 170. The mobile device 110 is also responsible for generating coded data corresponding to the received verification serial number. The coded data generated by the mobile device 110 is usually a two-dimensional bar code such as QR code, but this creation is not limited to this. For example, the coded data can also be a one-dimensional bar code or a set of characters, letters, numbers, and numbers. A string of arbitrary arrangement of symbols.

The ATM 120 can be connected to the verification server 150 and the digital bank server 170 via a wired or wireless network, and can send data or signals to the verification server 150 or the digital bank server 170, and can also receive the verification server 150 Or the data or signal sent by the digital bank server 170. The wired network mentioned in this creation is such as Ethernet or optical fiber network, but this creation is not limited to this.

The automated teller machine 120 may also provide a user interface for the user to input user identification data.

The automated teller machine 120 is responsible for obtaining coded data through the mobile device 110. Generally speaking, a scanning device (not shown in the figure) can be installed in the ATM 120 to obtain the coded data by scanning the coded data displayed by the mobile device 110 through the scanning device, but this creation is not limited to this, for example, automatic The teller machine 120 can also be provided with a near-end communication device (not shown in the figure), and the encoded data transmitted by the mobile device 110 can be received through the near-end communication device to obtain the encoded data. Among them, the near-end communication device may be a near-field communication device, or a wireless communication device such as Bluetooth or infrared, and there is no special restriction on this creation.

The automated teller machine 120 is also responsible for decoding the obtained encoded data into data to be verified, and is responsible for transmitting the data to be verified generated by the decoding to the digital bank server 170. In some embodiments, the automated teller machine 120 may also send the user's identification data and the data to be verified to the digital bank server 170 together.

The automated teller machine 120 is also responsible for receiving the comparison result sent by the digital bank server 170, and is responsible for determining whether the received comparison result indicates that the data to be inspected has passed the confirmation. The automated teller machine 120 is also responsible for connecting to the credential carrier 130 when it is judged that the comparison result indicates that the data to be checked is confirmed. Generally speaking, the automatic teller machine 120 can be provided with a connection interface for the certificate carrier 130, such as a chip card slot, a memory card slot, a USB slot, etc., so that the certificate carrier 130 can communicate with the automatic teller machine 120 through a corresponding connection interface. connection. For example, when the credential carrier 130 is a chip card, the connection interface may be a chip card slot.

The automated teller machine 120 is also responsible for obtaining signature data through the credential carrier 130. In this creation, the signature data may include the target data and the signature value generated by the certificate carrier 130 to sign the target data. In some embodiments, the signature data may also include the target data and/or the certificate carrier. 130 stored digital certificates. Generally speaking, the target data can include data generated by the ATM 120 to be sent to the digital bank server 170 through the verification server 150, such as customer identification data or randomly generated data of a specific length, but this creation does not This is limited.

Generally speaking, the ATM 120 can obtain the certificate password, and can execute the pre-stored or installed driver of the certificate carrier 130 to drive the certificate carrier 130, so that after the certificate carrier 130 is driven, the obtained certificate password And the target data are sent to the certificate carrier 130, and the signature data returned by the certificate carrier 130 is received. Among them, the automated teller machine 120 may display a password input interface for the user to input the certificate password to obtain the certificate password. In addition, in some embodiments, the ATM 120 can also be pre-installed with security components, and can execute the security components, so as to transmit the certificate password and target data to the certificate carrier 130 through the security components, and through the security components Receive the signature data returned by the certificate carrier 130. However, the manner in which the automated teller machine 120 obtains the signature data through the certificate carrier 130 is not limited to the above.

The automated teller machine 120 is also responsible for sending the signature data to the verification server 150. In some embodiments, the automated teller machine 120 may also send the identification data and the signature data to the verification server 150 together.

The ATM 120 can also receive the processing result or prompt message sent by the digital bank server 170, or can receive the verification result sent by the verification server 150, and can display the received processing result/prompt message/verification result . Furthermore, the ATM 120 can also play corresponding sounds or images according to the operation processing result/prompt message/verification result.

The certificate carrier 130 is responsible for storing a private key (private key) and a digital certificate. The private key is usually owned by the holder of the certificate carrier 130; the digital certificate includes a public key corresponding to the private key stored in the certificate carrier 130 and a certificate serial number.

The certificate carrier 130 can use the stored private key to encrypt or sign the target data. After the certificate carrier 130 signs the target data, it can generate signature data, and can transmit the generated signature data back to the ATM 120. Generally speaking, the private key stored in the certificate carrier 130 is encrypted, but this creation is not limited. The certificate carrier 130 can receive the certificate password sent by the automated teller machine 120 and use the obtained certificate password to decrypt the stored private key.

The authentication server 150 can be connected to the ATM 120, the digital bank server 170, and the identity verification server 160 through a wired or wireless network, and can receive the automatic teller machine 120, the digital bank server 170 and/or the identity verification server 160. The transmitted data or signal may also be transmitted to the automated teller machine 120, the digital bank server 170 and/or the identity verification server 160.

The verification server 150 is responsible for receiving the signature data sent by the ATM 120, and is responsible for verifying the received signature data to generate the corresponding verification result, and is responsible for sending the generated verification result to the digital bank server 170 ( And automatic teller machine 120). Generally speaking, the verification server 150 can obtain the user's public key from the digital certificate contained in the signature data in a conventional way of verifying the signature, and use the user's public key and the target contained in the signature data. Data verification signature data to generate verification results. When the signature data passes the verification, the verification result generated by the verification server 150 may include the target data in the signature data, but this creation is not limited to this.

The verification server 150 can also receive the identification data sent by the automated teller machine 120. In some embodiments, the verification server 150 can read the certificate serial number from the digital certificate included in the received signature data, and can generate the certificate confirmation data including the received identification data and the read certificate serial number , The generated certificate confirmation data can also be sent to the identity confirmation server 160.

The verification server 150 can also receive the identity verification result sent by the identity verification server 160, and can verify the received signature data by the verification server 150 itself and the received identity verification result represents the generated certificate Only when the verification data passes the verification of the identity verification server 160, a verification result indicating that the signature data has passed the verification is generated. On the contrary, if the signature data does not pass the verification of the verification server 150, or the identity verification result indicates that the certificate verification data does not pass the identity When verifying the verification by the server 160, the verification server 150 may generate a verification result indicating that the signature data has not passed the verification.

The identity verification server 160 can be connected to the verification server 150 via a wired or wireless network, and can receive data or signals sent by the verification server 150, and can also send data or signals to the verification server 150.

The identity verification server 160 can receive the credential verification data sent by the verification server 150, and it can be configured from a storage medium (not shown in the figure) or an external storage device connected to the identity verification server 160 ( (Not shown in the picture) Read out the relevant data of the digital voucher corresponding to the voucher serial number in the voucher confirmation data. The relevant data of the digital certificate read by the identity verification server 160 includes the identification data of the certificate owner.

The identity verification server 160 can also determine whether the identification data of the certificate owner contained in the relevant data of the digital certificate read out is consistent with the identification data in the certificate confirmation data, and generate a corresponding identity confirmation result, that is, a representation Whether the identification data in the certificate confirmation data is associated with the identity confirmation result of the digital certificate in the certificate confirmation data, and the generated identity confirmation result is returned to the authentication server 150. If the identification data of the certificate owner is the same as the identification data in the certificate confirmation data, the identity verification server 160 can confirm that the certificate confirmation data matches the owner of the digital certificate in the signature data received by the verification server 150. It is to confirm that the identification data in the certificate confirmation data is associated with the digital certificate in the certificate confirmation data. On the contrary, if the identification data of the certificate owner is different or inconsistent with the identification data in the certificate confirmation data, the identity confirmation server 160 can determine the certificate The confirmation data does not match the owner of the digital certificate, that is, the identification data in the certificate confirmation data is not related to the digital certificate in the certificate confirmation data.

The digital bank server 170 can be connected to the mobile device 110, the automated teller machine 120, and the verification server 150 via a wired or wireless network, and can receive data or signals sent by the mobile device 110, the automated teller machine 120 and/or the verification server 150 , It is also possible to send data or signals to the mobile device 110, the automated teller machine 120 and/or the verification server 150.

The digital bank server 170 is responsible for receiving the application data sent by the mobile device 110, and is responsible for generating a verification serial number corresponding to the received application data. The digital silver server 170 can use the serial number to generate the verification serial number, and can also perform specific operations on the application materials to generate the verification serial number. There is no special restriction on this creation. The above-mentioned specific operations such as hash operations, or combinations of characters in specific positions extracted from the application materials, but this creation is not limited to this.

The digital bank server 170 is also responsible for receiving the pending data sent by the ATM 120, and is responsible for comparing the received pending data with the generated verification serial number, and is responsible for comparing the generated pending data with the verification serial number Whether the comparison result is the same is transmitted to the automated teller machine 120. Wherein, the digital bank server 170 can receive the identification data sent by the ATM 120 together with the data to be inspected, and read the verification serial number according to the received identification data to compare whether the data to be inspected and the verification serial number are the same.

The digital bank server 170 is also responsible for receiving the verification result sent by the verification server 150, and is responsible for judging that the received verification result indicates that after the signature data has been verified, it performs the corresponding account application based on the application data sent by the mobile device 110 . The digital bank server 170 may also transmit the operation processing result of the account application operation to the automated teller machine 120. The job processing result may indicate that the account application job was successfully completed or that the account application job could not be completed. The job processing result may also include the reason why the account application job could not be completed, but this creation is not limited to this.

In addition, for security, management, scalability, and/or other considerations, the creation may also include a relay server 190. The relay server 190 can be connected to the ATM 120, the verification server 150, and the digital bank server 170 through a wired or wireless network, so that the ATM 120, the verification server 150, and the digital bank server 170 can send data or signals It can be forwarded through the relay server 190. For example, the relay server 190 can receive the pending data sent by the ATM 120 and send the received pending data to the digital bank server 170, or it can receive the digital bank server. The comparison result sent by the server 170 and the received comparison result are sent to the automatic teller machine 120, and it can also receive the signature data sent by the automatic teller machine 120 and send the received signature data to the verification server 150 , It can also receive the verification result sent by the verification server 150 and send the received verification result to the digital bank server 170 (and the automated teller machine 120), or receive the operation processing result generated by the digital bank server 170 and The job processing result is transmitted to the automated teller machine 120, etc.

It should be noted that if the creation includes a relay server 190, the ATM 120 can include a text gateway (not shown in the figure), and the text gateway can convert the data to be sent by the ATM 120 into a text Then send it to the relay server 190. The relay server 190 can restore the received message to the data to be sent by the ATM 120, and then forward it to the destination, which is the verification server 150 or the digital bank server. 170; the relay server 190 can also convert the telegram sent by the verification server 150 or the digital bank server 170 to the ATM 120 into a telegram and then send it to the ATM 120. The ATM 120 can receive the telegram after receiving the telegram. The received message is restored to the data sent by the verification server 150 or the digital bank server 170.

Next, an example is used to explain the operation process of this creation, and please refer to "Figure 2A" for the scan code mentioned in this creation to complete the flow chart of account application. In this embodiment, it is assumed that the mobile device 110 is a mobile phone, and the ATM 120, the verification server 150, and the digital bank server 170 transmit data or signals through the relay server 190, but this creation is not limited to this .

First, the user can operate the mobile device 110 to connect to the digital bank server 170, so that the mobile device 110 can generate application data and send the generated application data to the digital bank server 170 (step 210). In this embodiment, it is assumed that the user can operate the mobile device 110 to execute the mobile banking application. After the mobile banking application is executed, the user can select the "account opening" function in the initial screen of the mobile banking application or Select the "upgrade" function in the account setting interface of the mobile banking application. After that, the application data input interface provided by the mobile banking application. The user can enter application data in the application data input interface so that the mobile device 110 can obtain the application data .

After the digital bank server 170 receives the application data sent by the mobile device 110, the digital bank server 170 can generate a verification serial number corresponding to the received application data, and send the generated verification serial number to the mobile device 110 ( Step 221), and can store the received application data and verification serial number. In this embodiment, it is assumed that the digital bank server 170 can use the user identification data included in the application data as an index of the application data and the verification serial number when storing the application data and the verification serial number.

After the mobile device 110 receives the verification serial number returned by the digital bank server 170, it can generate encoded data corresponding to the received verification serial number (step 225). In this embodiment, it is assumed that the mobile device 110 receives the verification serial number from the mobile banking application and generates a QR code containing the verification serial number.

After the mobile device 110 generates the coded data (step 225), the automated teller machine 120 can obtain the coded data through the mobile device 110, and decode the coded data into the pending data (step 230). In this embodiment, after arriving at the ATM 120, the user can operate the mobile device 110 to execute the mobile banking application, so that the mobile banking application displays the generated QR code (or the user can also operate the mobile device 110 to display the mobile banking application The QR code image generated by the banking application), the user can also operate the ATM 120. If the operation interface 310 of the ATM 120 is as shown in "Figure 3A", the user can select the "Identity Verification" in the lower left corner The function option 311 enables the ATM 120 to display the input interface 330 as shown in "Figure 3B" to provide the user to enter the ID number (identification data), and to scan the display of the mobile device 110 through the barcode scanning device included in it QR code to obtain coding data.

After the automated teller machine 120 obtains the data to be inspected, the data to be inspected can be sent to the digital bank server 170. In this embodiment, it is assumed that the automated teller machine 120 can use the included text gateway (not shown in the figure) to transmit the identification data and the pending data to the digital bank server 170 through the relay server 190.

After receiving the identification data and the data to be verified from the ATM 120, the digital bank server 170 can compare whether the received data to be verified is the same as the previously generated verification serial number, and compare the generated phases. The corresponding comparison result is transmitted back to the ATM 120 (step 250). In this embodiment, it is assumed that the digital silver server 170 can read the previously generated verification serial number based on the received identification data, and then compare the received data to be verified with the read verification serial number to generate a corresponding The result of the comparison is sent back to the ATM 120 through the relay server 190.

After the automated teller machine 120 receives the comparison result sent by the digital bank server 170, it can determine whether the received comparison result indicates that the obtained data to be checked is confirmed by the digital bank server 170. If not, the ATM 120 can display the corresponding error message.

If the comparison result received by the automated teller machine 120 indicates that the acquired data for inspection is confirmed by the digital bank server 170, the automated teller machine 120 can prompt the user to connect the certificate carrier 130 and the automated teller machine 120, and use the connected The certificate carrier 130 obtains the signature data (step 260), and sends the signature data obtained through the certificate carrier 130 to the verification server 150. In this embodiment, it is assumed that as shown in the process shown in "Figure 2B", if the certificate carrier 130 held by the user is a physical natural person certificate, the automated teller machine 120 can execute the driver of the pre-installed natural person certificate And display the prompt message for inserting the natural person certificate. After the user inserts the natural person certificate into the chip card slot of the ATM 120 and connects the certificate carrier 130 and the ATM 120 (step 262), the password input interface of the certificate password can be displayed. And the certificate password can be obtained after the user enters the certificate password in the password input interface, and the target data and the obtained certificate password can be sent to the certificate carrier 130 through the security control component pre-installed in the ATM 120 (step 263) , So that the certificate carrier 130 can use the certificate password provided by the ATM 120 to decrypt the stored private key, and use the decrypted private key to sign the target data sent by the ATM 120 to generate signature data (step 265 ), the signature data is sent back to the ATM 120, so that the ATM 120 can receive the signature data generated by the credential carrier 130 through the security component (step 267), and can send the user's signature data through the relay server 190 The input identification data and the signature data generated by the certificate carrier 130 are sent to the verification server 150 (step 268).

After the verification server 150 receives the identification data and the signature data sent by the ATM 120, it can verify the received signature data to generate a corresponding verification result, and can send the generated verification result back to the digital bank Server 170 (step 270). In this embodiment, it is assumed that the verification server 150 can read the certificate serial number from the digital certificate in the signature data, and can obtain the corresponding public key according to the certificate serial number, and can use the obtained public key to verify the signature data. Generate a corresponding verification result, that is, whether the signature data is verified. The verification server 150 can also send the generated verification result to the digital bank server 170 through the relay server 190, or through the middle The server 190 then transmits the verification result to the automated teller machine 120 for display.

If the identity verification server 160 is also included in this embodiment, the verification server 150 can also send the received identification data and the read certificate serial number to the identity verification server 160 after the signature data is verified. , So that the identity verification server 160 can determine whether the digital certificate contained in the signature data received by the verification server 150 is owned by the holder of the certificate carrier 130, that is, the identity verification server 160 determines the received Is the identification data associated with the received certificate serial number to generate the corresponding identity verification result, and the identity verification result can be sent back to the verification server 150, and the verification server 150 can indicate the identity in the received identity verification result When the data is associated with the certificate serial number, the verification result indicating that the signature data has passed the verification is generated; but if the verification server 150 determines that the identity verification result indicates that the identification data is not associated with the certificate serial number, the verification server 150 can generate a verification result indicating that the signature data is not. The verification result that passed the verification. After that, the verification server 150 may send the generated verification result to the digital bank server 170 (and the ATM 120) through the relay server 190.

After the digital bank server 170 receives the verification result sent by the verification server 150, the digital bank server 170 can determine whether the signature data obtained by the ATM 120 is verified by the verification server 150 according to the verification result. If not, the digital bank server 170 may send a prompt message indicating that the verification of the signature data has failed to the ATM 120 for display through the relay server 190.

If the verification result indicates that the signature data obtained by the ATM 120 has been verified by the verification server 150, the DDB server 170 can store the verification result and perform the corresponding account application operation based on the application data received from the mobile device 110 (step 290). In this embodiment, it is an account opening or account upgrade operation, and the operation processing result can be transmitted to the ATM 120 through the relay server 190, so that the ATM 120 displays the operation processing result.

In this way, through this creation, the user can first fill in the application information through the mobile device, and then use the mobile device and the certificate carrier to confirm the identity of the ATM, so as to complete the account application that requires the counter.

In summary, it can be seen that the difference between this creation and the prior art is that the automated teller machine obtains the data to be verified through the mobile device, and after the data to be verified is confirmed by the digital bank server, the signature data is obtained through the certificate carrier , After the signature data is verified by the verification server, the digital bank server performs the corresponding technical means of account application based on the application data sent by the mobile device. This technical means can solve the current various existing technologies. Online account opening methods may lead to the problem that the account opener cannot complete the account application immediately, thereby achieving the technical effect of allowing the account opener to freely choose a convenient time and place to complete the account application.

Furthermore, the system for completing the account application by scanning the code in this creation can be implemented in hardware, software, or a combination of hardware and software.

Although the implementation of this creation is disclosed as above, the content described is not used to directly limit the scope of patent protection of this creation. Any person with ordinary knowledge in the technical field to which this creation belongs, without departing from the spirit and scope of this creation, makes some changes in the form and details of the implementation of this creation, all belong to the patent protection of this creation range. The scope of patent protection for this creation shall still be subject to the scope of the attached patent application.

110: mobile device 120: ATM 130: certificate carrier 150: verify server 160: Identity Confirmation Server 170: Digital Bank Server 190: Relay server 310: Operation interface 311: Function options 330: Input interface Step 210: The mobile device generates and sends the application data to the digital bank server Step 221: The digital bank server generates a verification serial number and sends it back to the mobile device Step 225: The mobile device generates corresponding coded data based on the verification serial number Step 230: The ATM obtains the coded data through the mobile device, and decodes the coded data into data to be verified Step 250: The digital bank server compares whether the data to be verified sent by the ATM is the same as the verification serial number, and sends the corresponding comparison result back to the ATM Step 260: The ATM judges that the comparison result indicates that the data to be verified is confirmed, connect to the certificate carrier, and obtain the signature data through the certificate carrier Step 262: Connect the voucher carrier to the ATM Step 263: The ATM obtains the certificate password and sends the certificate password to the certificate carrier through the security control component Step 265: The certificate carrier uses the certificate password to obtain a digital certificate, and uses the digital certificate to generate signature data Step 267: The ATM receives the signature data returned by the certificate carrier through the security control component Step 268: The ATM sends the signature data to the verification server Step 270: The verification server verifies the signature data sent by the ATM, and sends the corresponding verification result to the digital bank server Step 290: After the digital bank server determines that the signature data is verified by the verification server, it performs the corresponding account application based on the application data

The first picture is the structure diagram of the scan code mentioned in the creation to complete the account application. Figure 2A is the flow chart for completing the account application by scanning the code mentioned in the creation. Figure 2B is the flow chart of the creation of the ATM to obtain signature data through the voucher carrier. Figure 3A is a schematic diagram of the function selection interface mentioned in the creative embodiment. Figure 3B is a schematic diagram of the data input interface mentioned in the creation embodiment.

110: mobile device

120: ATM

130: certificate carrier

150: verify server

160: Identity Confirmation Server

170: Digital Bank Server

190: Relay server

Claims (10)

A system for scanning the code to complete the account application. The system includes at least: One-digit silver server; A mobile device for generating and transmitting an application data to the digital bank server, and for receiving a verification serial number generated by the digital bank server, and generating a corresponding code data according to the verification serial number; An automated teller machine for obtaining the coded data through the mobile device and decoding the coded data into a pending data, and for transmitting the pending data to the digital bank server so that the digital bank server compares the pending data Whether the verification data is the same as the verification serial number, and determining whether the data bank server returns a comparison result indicating that the data to be verified is confirmed, connect to a certificate carrier and obtain a signature data through the certificate carrier; and A verification server for verifying the signature data sent by the ATM, and sending a corresponding verification result to the digital bank server, so that the digital bank server determines that the signature data passes the verification server After verification, perform the corresponding account application operations based on the application materials. The system for completing account application by scanning code for body check as described in claim 1, wherein the automated teller machine scans the coded data displayed by the mobile device or receives the coded data transmitted by the mobile device to obtain the coded data. For example, the system for scanning the code to complete the account application as described in claim 1, wherein the digital bank server is used to read the verification serial number based on an identification data obtained by an ATM, so as to compare the data to be verified with the Verify that the serial numbers are the same. For example, the system for completing account application by scanning code for body check described in claim 1, wherein the ATM obtains a certificate password and transmits the certificate password to the certificate carrier through a security control component, so that the certificate carrier can use the certificate The certificate password obtains a digital certificate and uses the digital certificate to generate a signature data, and receives the signature data returned by the certificate carrier through the security control component. The system for completing account application by scanning a code for body verification as described in claim 4, wherein the system further includes an identity verification server for receiving an identification data sent by the verification server, and confirming the digital certificate and the Identify data associations. The system for completing account application by scanning code for body verification as described in request item 5, wherein the identity verification server is further used to receive a certificate confirmation data forwarded by the verification server from the ATM, and confirm the data according to the certificate The certificate serial number in reads a related data, and determines whether the identification data of the certificate owner contained in the related data matches the identification data in the certificate confirmation data to generate an identity confirmation indicating whether the identification data is associated with the digital certificate result. The system for completing account application by scanning a code for body verification as described in claim 6, wherein the verification server is further used to generate the verification result based on the identity verification result generated by the identity verification server. The system for completing account application by scanning the code for physical examination as described in claim 1, wherein the ATM is further used to receive a processing result generated by the digital bank server or to connect to the digital bank server or the verification server A prompt message generated by the device and used to display the processing result of the operation and the prompt message. For example, the system for scanning the body to complete the account application described in claim 8, wherein the automated teller machine is further used to play the corresponding sound or video when displaying the processing result of the operation or the prompt message. The system for completing account application by scanning the code for body verification as described in claim 8, wherein the digital bank server generates the verification serial number by a specific operation.

Images