TWM601411U - System for digital account application by using ATM to obtain authentication - Google Patents

Abstract

A system that uses an automated teller machine to obtain authentication for account application. After the automated teller machine is connected to the certificate carrier to obtain the signature data, the signature data is sent to the verification server for verification. When the signature data is verified, the data The silver server obtains the account application data based on the customer's basic information obtained by the ATM, and uses the technical means of account processing operations based on the account application data. It can use the ATM to complete the identity confirmation of the account opening, and achieve a convenient choice for the account opener Time and place to complete the technical effect of identity verification.

Description

A system that is authenticated by ATMs for account application

A digital account application system, in particular, a system that is authenticated by an automated teller machine to perform digital account application.

Banks are financial institutions that provide services such as payments, deposits, savings, loans, and wire transfers. To use the services provided by the bank, you usually need to open an account with the bank first.

Although it is currently possible to open a digital account online through Internet banking or mobile banking, the method of opening such an account depends on the method of identity verification, and the level of the digital account opened is also different. Compared with the digital accounts opened for full identity verification, there are many restrictions, for example, some transactions cannot be executed or the amount that can be used during the transaction is lower. If you want to open a digital account with more complete functions, it is still the same as opening a general account. The bank's service staff must check the account opening information provided by the account holder at the counter to determine whether the account holder is allowed to open the account.

In order to allow account holders who open online accounts through online banking or mobile banking to not need to confirm their identity at the counter, at present, account holders can also upload ID copies or ID images during the online account opening process, so as to provide bank service personnel to judge Whether to allow account holders to open an account. However, such an account opening process needs to wait for bank service personnel to review, and it is impossible to open an account for the account holder immediately. In order to solve this problem, some banks also provide account holders to use digital certificates such as natural person certificates to conduct identity verification during the online account opening process. However, natural person certificates need to be read through a card reader, but not all account holders have a card reader to use, and even if the account holder has a card reader, it is often due to the operating system of the client device connected to the card reader The environment or the policy of the application or browser running in the operating system causes the situation that the card reader cannot be accessed or the digital certificate cannot be obtained through the card reader, causing inconvenience and trouble for the account holder.

In summary, it can be seen that there has been a long-standing problem in the prior art that various online account opening methods may cause account holders to fail to complete instant account applications. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the fact that various online account opening methods in the prior art may cause the account opener to be unable to complete the account application in real time, this creation reveals a system that uses an ATM to obtain certification for account application. Among them:

The system disclosed in this creation for the application of a digital account through the authentication of an automatic teller machine, at least includes: a certificate carrier; the automatic teller machine is used to obtain basic customer information, and is used to connect to the certificate carrier through the certificate carrier Obtain signature data; verification server to verify the signature data sent by the ATM and generate corresponding verification results; digital bank server to receive basic customer data sent by the ATM, and to verify The verification result sent by the server indicates that when the signature data is verified, the account application data is obtained based on the customer's basic data, and the corresponding account processing operations are performed based on the account application data.

The system disclosed in this creation is as above. The difference between this creation and the previous technology is that after the creation is connected to the voucher carrier through the ATM to obtain the signature data, the signature data is sent to the verification server for verification. When the signature data is verified , The Digital Bank server obtains account application information based on the customer’s basic information obtained by the ATM, and performs account processing operations based on the account application information, so as to solve the problems of the previous technology and achieve a convenient time and The technical function of the location to complete the account application.

The following will describe in detail the features and implementation of this creation in conjunction with the drawings and embodiments. The content is sufficient to enable anyone familiar with relevant skills to easily and fully understand the technical means used in this creation to solve technical problems and implement them accordingly. The achievable effect of this creation.

This creation can provide users (account holders) to use the credential carrier to select the application account processing operation at the ATM, and then use the computer or mobile phone and other client devices to fill in the application information so that the digital bank server can complete the account processing operation. Among them, the account processing operations mentioned in this creation, such as account opening or account upgrade, etc., but this creation is not limited to this.

The certificate carrier mentioned in this creation is a hardware that can store digital certificates and can run such as Chip Operating System (COS) to encrypt data and/or sign data, which can manage and use digital certificates. Physical devices, such as chip cards (IC cards), etc., but this creation is not limited to this; the automated teller machines mentioned in this creation include but are not limited to automatic teller machines (Automated Teller Machine, ATM) or automatic deposit machines (Cash Deposit Machine, CDM) and other automated equipment that provide one or more banking services; the digital bank server mentioned in this creation includes, but is not limited to, online banking servers or mobile banking servers and other computing devices that provide services over the Internet .

The computing devices mentioned in this creation include but are not limited to one or more processors, one or more memory modules, and hardware components such as buses connecting different hardware components (including memory modules and processors) . Through the included multiple hardware components, the computing device can load and execute the operating system, make the operating system run on the computing device, and can also execute software or programs. In addition, the computing device also includes a housing, and the above-mentioned hardware components are arranged in the housing.

The bus of the computing device mentioned in this creation can include one or more types, for example, including data bus, address bus, control bus, and extended function bus ( expansion bus), and/or local bus (local bus). The bus bars of computing devices include but are not limited to the Industry Standard Architecture (ISA) bus, Peripheral Component Interconnect (PCI) bus, and the Video Electronics Standards Association (VESA) Bureau Domain bus, serial universal serial bus (Universal Serial Bus, USB), fast peripheral component interconnection (PCI Express, PCI-E/PCIe) bus, etc.

The processor of the computing device mentioned in this creation is coupled with the bus. The processor contains a register group or register space. The register group or register space can be completely set on the processing chip, or all or part of it can be set outside the processing chip and connected via a dedicated electrical connection And/or coupled to the processor via the bus. The processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and they are coupled and communicated through a bus. The processor can interpret a computer instruction or a series of multiple computer instructions to perform specific operations or operations, such as mathematical operations, logical operations, data comparison, copy/move data, etc., to drive other hardware components in the computing device Or run the operating system or execute various programs and/or modules.

Computing equipment usually also contains one or more chipsets (Chipset). The processor of the computing device can be coupled to the chipset or electrically connected to the chipset through a bus. The chipset is composed of one or more integrated circuits (Integrated Circuit, IC), including memory controller and peripheral input/output (I/O) controller, that is, memory controller and peripheral input/output control The device can be included in one integrated circuit, or it can be implemented using two or more integrated circuits. Chipsets usually provide I/O and memory management functions, as well as multiple general and/or dedicated registers, timers, etc., among which the above-mentioned general and/or dedicated registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access the data in the memory module and the mass storage area installed on the computing device through the memory controller. The above-mentioned memory modules include any type of volatile memory (volatile memory) and/or non-volatile memory (NVRAM), such as static random access memory (SRAM) , Dynamic Random Access Memory (DRAM), Read-Only Memory (ROM), Flash memory, etc. The above-mentioned mass storage area can include any type of storage device or storage medium, such as hard disk drives, optical discs, flash drives, memory cards, and solid state disks. , SSD), or any other storage device, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drives, and solid state drives.

The processor of the computing device can also connect and communicate with peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers and other peripheral devices or interfaces through peripheral I/O controllers via peripheral I/O buses. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, touchpad, joystick, etc., the peripheral output device can be any type of output device, such as a display, a printer, etc., a peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface. The wireless communication interface can include support for wireless local area networks (such as Wi-Fi, Zigbee, etc.), Bluetooth, infrared, and near-field communication (NFC), 3G/4G/5G and other mobile communication network (cellular network) or other wireless data transmission protocol interface, wired communication interface can be Ethernet device, DSL modem, cable modem, asynchronous transmission Mode (Asynchronous Transfer Mode, ATM) devices, or optical fiber communication interfaces and/or components, etc. The processor can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data through various peripheral devices and interfaces, and can also communicate with another computing device with the hardware components described above. communication.

The following describes the operation of this creation with the system architecture diagram mentioned in "Picture 1" of this creation that is certified by the ATM for account application. As shown in "Figure 1", the system of this creation includes an automated teller machine 110, a certificate carrier 120, a verification server 130, a digital bank server 170, and an additional identity verification server 150, a data server 160, and a client The device 180 and the relay server 190. Among them, the automated teller machine 110, the verification server 130, the identity verification server 150, the data server 160, the digital bank server 170, the client device 180, and the relay server 190 are computing devices.

The ATM 110 can be connected to the verification server 130 and the digital bank server 170 through a wired or wireless network, and can send data or signals to the verification server 130 or the digital bank server 170, and can also receive the verification server 130 Or the data or signal sent by the digital bank server 170. The wireless network mentioned in this creation includes mobile communication network (cellular network) or wireless local area network, etc.; the wired network mentioned in this creation is such as Ethernet or optical fiber network. However, the wired or wireless network mentioned in this creation is not limited to the above. .

The ATM 110 is responsible for obtaining basic customer information, and is responsible for transmitting the obtained basic customer information to the digital bank server 170. Generally speaking, the ATM 110 can provide a basic data input interface for the user to input basic customer data.

The basic customer information mentioned in this creation includes customer identification information and customer communication information. Among them, customer identification information is information that can indicate a specific customer, such as ID card number, passport number or visa number, and other information that usually has a one-to-one relationship with the customer; customer communication information is information that can be contacted with the customer, such as phone number or Email etc. However, customer identification data and customer communication data are not limited to the above.

The ATM 110 is also responsible for connecting with the credential carrier 120. Generally speaking, the ATM 110 can provide one or more connection interfaces, such as a chip card slot, a memory card slot, a USB slot, etc., so that the credential carrier 120 can be connected to the ATM 110 through a corresponding connection interface. For example, when the credential carrier 120 is a chip card, the connection interface may be a chip card slot of a card reader (not shown in the figure) provided on the ATM 110.

The automated teller machine 110 is also responsible for obtaining signature data through the credential carrier 120. In this creation, the signature data may include the target data and the signature value generated by the certificate carrier 120 on the target data. In some embodiments, the signature data may also include the target data and/or the certificate carrier 120 stored digital certificates. Generally speaking, the target data can include data generated by the ATM 110 to be sent to the digital bank server 170 through the verification server 130, such as customer identification data or randomly generated data of a specific length. However, this creation does not This is limited.

Generally speaking, the ATM 110 can obtain the certificate password, and can execute the pre-stored or installed driver of the certificate carrier 120 to drive the certificate carrier 120, so that after the certificate carrier 120 is driven, the obtained certificate password And the target data are sent to the certificate carrier 120, and the signature data returned by the certificate carrier 120 is received. Among them, the ATM 110 can display a password input interface for the user to enter the credential password to obtain the credential password. In addition, in some embodiments, the automated teller machine 110 can also be pre-installed with security control components and can execute the security control components through The security control component transmits the certificate password and target data to the certificate carrier 120, and receives the signature data returned by the certificate carrier 120 through the security control component. However, the manner in which the ATM 110 obtains the signature data through the certificate carrier 120 is not limited to the above.

The ATM 110 is also responsible for sending the obtained signature data to the verification server 130. In some embodiments, the automated teller machine 110 may also send the signature data and the customer identification data in the customer basic data to the verification server 130 together.

The ATM 110 can also receive the data use request sent by the digital bank server 170, and can display all or part of the data use request on the screen. Among them, the data use request may include a request for the user to authorize and agree to use data from other sources (for example, the user is stored in another server in the bank to which the ATM 110 belongs or stored outside of other units or institutions that cooperate with the bank to which the ATM 110 belongs. Data in the server, etc.).

The ATM 110 can also obtain a response message corresponding to the received data use request, and can send the obtained response message to the digital bank server 170. Generally speaking, the automated teller machine 110 may provide an authorization selection interface for the user to choose to agree to authorization or to reject the authorization, and generate a response message indicating agreement or rejection of authorization according to the user's selection in the selection interface.

In some embodiments, the automated teller machine 110 may also receive the account application data sent by the digital bank server 170 and display the received account application data. Among them, the account application materials mentioned in this creation include but are not limited to the customer's name, identification data, gender, birthday, address, communication data and other data items, but this creation is not limited to this. The account application data can also include the ID image of the user's identity certificate. Among them, the user's identity document is usually an identity card, a driver's license, a health insurance card, and other documents that have the facial image of the account holder.

The automated teller machine 110 can also generate a modification message, and can send the modification message back to the digital bank server 170. Among them, the ATM 110 can provide a data confirmation interface to the user to confirm whether the account application data is correct or need to be adjusted. If it is, it can generate a modification message indicating that the data is correct or the data has not been modified, etc., with the same or similar meaning; if not, it will automatically The teller machine 110 can provide the user to modify the received account application data in the data editing interface (that is, modify one or more data items in the account application data), and can generate a modification including the account application data modified by the user message.

The ATM 110 can also receive the operation processing result or prompt message sent by the digital bank server 170, or can receive the verification result sent by the verification server 130, and can display the received prompt message/operation processing result/verification result . Furthermore, the ATM 110 can also play the corresponding sound or video according to the prompt message/operation processing result/verification result.

The certificate carrier 120 is responsible for storing private keys and digital certificates. The private key is usually owned by the holder of the certificate carrier 120, and the digital certificate includes the public key corresponding to the private key stored in the certificate carrier 120 (Public key) and certificate serial number.

The certificate carrier 120 can use the stored private key to encrypt or sign the target data. After the certificate carrier 120 signs the target data, it can generate signature data, and can send the generated signature data back to the ATM 110. Generally speaking, the private key stored in the certificate carrier 120 is encrypted, but this creation is not limited to this. The certificate carrier 120 can receive the certificate password sent by the automated teller machine 110, and use the obtained certificate password to decrypt the stored private key.

The authentication server 130 can be connected to the ATM 110, the digital bank server 170, and the identity verification server 150 through a wired or wireless network, and can receive the automatic teller machine 110, the digital bank server 170, and/or the identity verification server 150. The transmitted data or signal may also be transmitted to the ATM 110, the digital bank server 170, and/or the identity verification server 150.

The verification server 130 is responsible for receiving the signature data sent by the ATM 110, and for verifying the received signature data to generate the corresponding verification result, and for sending the generated verification result to the digital bank server 170 ( And ATM 110). Generally speaking, the verification server 130 can obtain the user's public key from the digital certificate contained in the signature data as in the conventional way of verifying digital signatures, and use the user's public key and the signature data contained in the digital certificate. The target data verifies the signature data to generate verification results. When the signature data is verified, the verification result generated by the verification server 130 may include the target data in the signature data, but this creation is not limited to this.

The verification server 130 can also receive the customer identification data sent by the automated teller machine 110. In some embodiments, the verification server 130 can also read the certificate serial number from the digital certificate contained in the received signature data, and can generate a certificate containing the received customer identification data and the read certificate serial number The confirmation data, or the generated certificate confirmation data can be sent to the identity confirmation server 150.

The verification server 130 may also receive the identity verification result sent by the identity verification server 150, and may verify that the received signature data is verified by the verification server 130 itself and the received identity verification result represents the generated certificate Only when the verification data passes the verification of the identity verification server 150, a verification result indicating that the signature data has passed the verification is generated. On the contrary, if the signature data does not pass the verification of the verification server 130, or the identity verification result indicates that the certificate verification data does not pass the identity When verifying the verification by the server 150, the verification server 130 may generate a verification result indicating that the signature data has not passed the verification.

The identity verification server 150 can be connected to the verification server 130 via a wired or wireless network, and can receive data or signals sent by the verification server 130, and can also send data or signals to the verification server 130.

The identity verification server 150 can receive the certificate verification data sent by the verification server 130, and can use the storage medium (not shown in the figure) set in the identity verification server 150 or an external storage device connected to the identity verification server 150 ( (Not shown in the picture) Read out the relevant data of the digital voucher corresponding to the voucher serial number in the voucher confirmation data. The relevant data of the digital certificate read by the identity verification server 150 includes the identification data of the certificate owner.

The identity verification server 150 can also determine whether the identification data of the certificate owner contained in the relevant data of the digital certificate read out matches the customer identification data in the certificate confirmation data, and generate the corresponding identity confirmation result, that is, generate It indicates whether the customer identification data in the certificate confirmation data is associated with the digital certificate in the certificate confirmation data, and the result of the generated identity confirmation is returned to the authentication server 130. If the identification data of the certificate owner is the same as the customer identification data in the certificate confirmation data, the identity verification server 150 can confirm that the certificate confirmation data matches the owner of the digital certificate in the signature data received by the verification server 130. That is, the identification data in the certificate confirmation data is associated with the digital certificate in the certificate confirmation data. On the contrary, if the identification data of the certificate owner is different or inconsistent with the customer identification data in the certificate confirmation data, the identity confirmation server 150 can It is determined that the certificate confirmation data does not match the owner of the digital certificate, that is, the customer identification data in the certificate confirmation data is not related to the digital certificate in the certificate confirmation data.

The data server 160 can be connected to the digital bank server 170 via a wired or wireless network, and can receive data or signals sent by the digital bank server 170, and can also send data or signals to the digital bank server 170

The data server 160 can store customer data. The customer data stored in the data server 160 is the data of a provider (such as a bank) stored in the data server 160 in advance by the customer. Generally speaking, the data items of customer data include all data items of account application data.

The data server 160 can also receive the customer identification data sent by the digital bank server 170, and can read the corresponding customer data based on the received customer identification data, and can send the read customer data back to the digital bank Server 170.

The digital bank server 170 can be connected to the ATM 110, the authentication server 130, the data server 160, and the client device 180 through a wired or wireless network, and can receive the ATM 110, the authentication server 130, the data server 160 and/or Or the data or signal sent by the client device 180 can also send the data or signal to the ATM 110, the verification server 130, the data server 160 and/or the client device 180.

The digital bank server 170 is responsible for receiving basic customer information transmitted by the ATM 110. In some embodiments, the digital bank server 170 may also generate a serial number corresponding to the received customer basic data. Among them, the digital silver server 170 can use the serial number to generate the serial number, or perform specific operations on the customer's basic data to generate the serial number. There is no special restriction on this creation. The above-mentioned specific operations such as hash operations, or combinations of characters in specific positions extracted from the application materials, but this creation is not limited to this.

The digital bank server 170 is also responsible for receiving the verification result sent by the verification server 130, and is responsible for determining whether the received verification result indicates that the signature data generated by the ATM 110 has been verified. If the verification result indicates that the signature data has not passed the verification, the digital bank server 170 can generate a corresponding prompt message and send the generated prompt message to the ATM 110.

The digital bank server 170 is also responsible for obtaining account application data based on the received customer basic information when determining that the received verification result indicates that the signature data has passed verification, and performing corresponding account processing operations based on the obtained account application data . The digital bank server 170 may also transmit the operation processing result of the account processing operation to the automated teller machine 110. The job processing result may indicate that the account application job was successfully completed or that the account application job could not be completed. The job processing result may also include the reason why the account application job could not be completed, but this creation is not limited to this.

In some embodiments, the digital bank server 170 can send a data use request to the ATM 110, and can receive a response message from the ATM 110, and can select the method of obtaining account application information based on the received response message . For example, when the response message indicates that the customer does not agree to the authorization, the digital bank server 170 can choose to send data to the client device 180 based on the customer communication data in the received customer basic information, and receive the account sent by the client device 180 Application information. Among them, the digital bank server 170 can send the data filling message to the client device 180 by corresponding SMS, email, instant messaging, etc. according to the type of the client communication data.

When the response message indicates that the customer agrees to the authorization, the digital bank server 170 can choose to connect to the data server 160, and can download the corresponding customer data from the data server 160 based on the customer identification data in the basic customer data, and the basis The downloaded client information generates account application information. Among them, the digital bank server 170 can read out the data items contained in the account application data from the customer data, and generate account application data based on the read data items.

Furthermore, the digital bank server 170 can send the generated account application data to the ATM 110, and receive the modification message returned by the ATM 110. When the modification message indicates that the data is correct or the data has not been modified and has the same or similar meaning, the digital bank server 170 uses the generated account application data to perform the corresponding account processing operations; and when the modification message indicates that the data is incorrect, it means that the account is applied for When the data is modified, the digital bank server 170 can read the modified account application data from the modification message, and use the modified account application data to perform corresponding account processing operations.

The client device 180 can be connected to the digital bank server 170 via a wired or wireless network, and can send data or signals to the digital bank server 170, and can also receive data or signals sent by the digital bank server 170. For example, the client device 180 can receive the data filling message sent by the digital bank server 170, and can send account application data to the digital bank server 170.

In some embodiments, the data filling message may include the connection message of the digital bank server 170. The above connection message may be a website or link, so that the client device 180 can open and display the input interface of the account application data, and then The user can operate the client device 180 to fill in the account application information in the input interface.

In addition, for security, management, scalability, and/or other considerations, the creation may also include a relay server 190. The relay server 190 can be connected to the ATM 110, the verification server 130, and the digital bank server 170 through a wired or wireless network, so that the ATM 110, the verification server 130, and the digital bank server 170 send data or signals It can be forwarded through the relay server 190. For example, the relay server 190 can receive the signature data sent by the automated teller machine 110 and send the received signature data to the verification server 130, or it can receive the signature data sent by the automated teller machine 110. The basic customer data and modification message sent and the basic customer data/modification message received are sent to the digital bank server 170, and the verification result sent by the verification server 130 can also be received and the received verification result sent to The digital bank server 170 (and the automated teller machine 110) can also receive the account application data or operation processing result generated by the digital bank server 170 and send the account application data/operation processing result to the automatic teller machine 110, etc.

It should be noted that if the creation includes a relay server 190, the ATM 110 may include a text gateway (not shown in the figure), and the text gateway can convert the data to be sent by the ATM 110 into a text Then send it to the relay server 190. The relay server 190 can restore the received message to the data to be sent by the ATM 110, and then forward it to the destination, that is, the verification server 130 or the digital bank server. 170; the relay server 190 can also convert the telegrams sent by the verification server 130 or the digital bank server 170 to the ATM 110 into a telegram and then send it to the ATM 110. The ATM 110 can receive the telegram after receiving the telegram. The received message is restored to the data sent by the verification server 130 or the digital bank server 170.

Next, an embodiment is used to explain the operation of this creation, and please refer to the flowchart of the method of obtaining authentication by the ATM in the creation mentioned in "Figure 2A" for the application of account number. In this embodiment, it is assumed that the client device 180 is a mobile phone, and the ATM 110, the verification server 130, and the digital bank server 170 transmit data or signals through the relay server 190, but this creation is not limited to this .

First, the ATM 110 can obtain the basic customer information, and can send the obtained customer basic information to the digital bank server 170 (step 210). In this embodiment, it is assumed that the user can operate the automated teller machine 110. If the user interface 320 of the automated teller machine 110 is as shown in "Figure 3A", the user can select the "Business Application" option 322 in the middle of the bottom row , So that the ATM 110 can display the basic data input interface 330 such as "Figure 3B" to provide the user to input basic customer data, that is, to enter the ID number (customer identification data) and telephone number (customer communication data) and other information, And the inputted basic customer data can be sent to the digital bank server 170 through the relay server 190.

After the ATM 110 obtains the customer's basic information, the ATM 110 can prompt the user to connect the credential carrier 120 and the automated teller machine 110, and can obtain the signature data through the connected credential carrier 120 (step 230), and pass the credential The signature data obtained by the vehicle 120 is sent to the verification server 130. In this embodiment, it is assumed that as shown in the process of "Figure 2B", if the certificate carrier 120 held by the user is a physical natural person certificate, the ATM 110 can execute the driver for the pre-installed natural person certificate , And can display the prompt message for inserting the natural person certificate, and can display the password input of the certificate password after the user inserts the natural person certificate into the chip card slot of the ATM 110 and connects the certificate carrier 120 and the ATM 110 (step 232) Interface, and can obtain the certificate password entered by the user after the user enters the certificate password in the password input interface, and can send the target data and the obtained certificate password to the certificate through the security control component pre-installed in the ATM 110 The carrier 120 (step 233) enables the certificate carrier 120 to use the certificate password provided by the ATM 110 to decrypt the stored private key, and to use the decrypted private key to sign the target data sent by the ATM 110 After the signature data is generated (step 235), the signature data is sent back to the ATM 110, so that the ATM 110 can receive the signature data generated by the credential carrier 120 through the security component (step 237), and can send the user The input customer identification data and the signature data generated by the certificate carrier 120 are sent to the verification server 130 (step 238).

After the verification server 130 receives the identification data and the signature data sent by the ATM 110, it can verify the received signature data to generate a corresponding verification result, and can send the generated verification result back to the digital bank Server 170 (step 250). In this embodiment, it is assumed that the verification server 130 can read the certificate serial number from the digital certificate in the signature data, and can obtain the corresponding public key according to the certificate serial number, and can use the obtained public key to verify the signature data. Generate the corresponding verification result, that is, whether the signature data is verified or not. The verification server 130 can also send the generated verification result to the digital bank server 170 through the relay server 190, or through the middle The server 190 then transmits the verification result to the ATM 110 for display.

If the identity verification server 150 is also included in this embodiment, the verification server 130 may also send the received identification data and the read certificate serial number to the identity verification server 150 after the signature data is verified. , So that the identity verification server 150 can determine whether the digital certificate contained in the signature data received by the verification server 130 is owned by the holder of the certificate carrier 120, that is, the identity verification server 150 determines the received Is the identification data associated with the received certificate serial number to generate the corresponding identity verification result, and the identity verification result can be sent back to the verification server 130, and the verification server 130 can indicate the identity in the received identity verification result When the data is associated with the certificate serial number, the verification result indicating that the signature data has passed verification is generated; but if the verification server 130 determines that the identity verification result indicates that the identification data is not related to the certificate serial number, the verification server 130 can generate a verification result indicating that the signature data is not The verification result that passed the verification. After that, the verification server 130 may send the generated verification result to the digital bank server 170 (and the automated teller machine 110) through the relay server 190.

After the digital bank server 170 receives the verification result sent by the verification server 130, the digital bank server 170 can determine whether the signature data obtained by the ATM 110 passes the verification by the verification server 130 according to the verification result. If not, the digital bank server 170 may send a prompt message indicating that the verification of the signature data has failed to the ATM 110 through the relay server 190 for display.

If the verification result indicates that the signature data obtained by the ATM 110 is verified by the verification server 130, the digital bank server 170 can obtain the account application data according to the basic customer information sent by the ATM 110 (step 270). In this embodiment, it is assumed that the digital bank server 170 can generate a data use request when the verification result indicates that the signature data is verified, and can send the generated data use request to the ATM 110 through the relay server 190 (step 272).

After the automated teller machine 110 receives the data use request sent by the digital bank server 170, it can display the authorization selection interface 350 containing the authorization description 351 indicating that the data server 160 will obtain the customer data, and can provide the user with the option to agree to authorization or Disagree with the authorization, as shown in "Figure 3C". The automated teller machine 110 can generate a response message indicating approval or disapproval of authorization according to the user's selection, and can send the generated response message back to the digital bank server 170 through the relay server 190 (step 273).

After the digital bank server 170 receives the response message sent by the automated teller machine 110, it can select the method of obtaining account application information according to the received response message. In more detail, the digital bank server 170 can determine whether the response message indicates consent to authorization. If so, the digital bank server 170 can send the customer identification data in the basic customer data sent by the ATM 110 to the data server 160, thereby The data server 160 downloads the user's customer data previously stored in the bank, and can generate account application data based on the downloaded customer data; and if the data server 170 determines that the response message indicates that the authorization is not approved, the data server 170 The user can send data and fill in the message to the client device 180 based on the client communication data in the client’s basic data. In this way, after the user operates the client device 180 to open the input interface of the account application data based on the data fill in the information, the client device 180 can be operated The account application information is filled in the input interface, and the client device 180 can be operated to send the completed account application information to the digital bank server 170, so that the digital bank server 170 can receive the user-filled account application data sent by the client device 180 (Step 275).

Continue back to the "Figure 2A", after the digital bank server 170 obtains the account application data according to the basic customer information sent by the ATM 110 (step 270), the digital bank server 170 can proceed according to the obtained account application data The corresponding account application operation (step 290). In this embodiment, the account application operation performed by the digital bank server 170 is the account opening operation or the account upgrade operation. The digital bank server 170 can send the processing result of the operation to the ATM 110 through the relay server 190, so that the automatic The teller machine 110 can display the job processing result to the user.

In this way, through this creation, the user can use the voucher carrier to apply for account processing operations when using the ATM, and then operate the ATM to instruct the digital bank server to obtain account application information to complete the account application that requires a counter operation.

In the above embodiment, after the digital bank server 170 determines that the response message indicates that the authorization is approved and generates the account application data based on the customer data downloaded by the data server 160, the digital bank server 170 can use the relay server 190 to generate the account application data. The account application data of is sent to the ATM 110. After the ATM 110 receives the account application data sent by the digital bank server 170, it can display the data confirmation interface 360 containing the received account application data for the user to confirm, such as "Figure 3D" as shown. The automated teller machine 110 may generate a corresponding modification message according to the user's confirmation result, and may send the generated modification message to the digital bank server 170 through the relay server 190. Among them, when the user selects the confirmed function option 361, the ATM 110 can generate a modification message with the correct data, and when the user selects the re-entered function option 362, the ATM 110 can provide the user to modify the account application data, and Generate a modified message containing the user's modified account application information.

After the digital bank server 170 receives the modification message sent by the ATM 110, it can use the generated account application data for account processing when determining that the modification message indicates that the data is correct; it can also determine that the modification message indicates that the data is incorrect , That is, when the modified message contains the account processing data modified by the user, use the account application data in the modified message for account processing.

To sum up, it can be seen that the difference between this creation and the previous technology is that after the ATM is connected to the certificate carrier to obtain the signature data, the signature data is sent to the verification server for verification. When the signature data is verified, the data The silver server obtains the account application data based on the customer's basic information obtained by the ATM, and performs the account processing technical means based on the account application data. This technical means can solve the current existing technologies of various online account opening methods. This leads to the problem that the account opener cannot complete the account application immediately, thereby achieving the technical effect of allowing the account opener to freely choose a convenient time and place to complete the account application.

Furthermore, the method of applying for accounting by obtaining certification through an ATM in this creation can be implemented in hardware, software, or a combination of hardware and software.

Although the implementation of this creation is disclosed as above, the content described is not used to directly limit the scope of patent protection of this creation. Any person with ordinary knowledge in the technical field to which this creation belongs, without departing from the spirit and scope of this creation, makes some changes in the form and details of the implementation of this creation, all belong to the patent protection of this creation range. The scope of patent protection for this creation shall still be subject to the scope of the attached patent application.

110: ATM 120: Credential Carrier 130: Verification Server 150: Identity Confirmation Server 160: data server 170: Digital Bank Server 180: client device 190: Relay server 320: User Interface 322: function options 330: Basic data input interface 350: Authorization selection interface 351: Authorization Instructions 360: data confirmation interface 361: function options 362: function options Step 210: The ATM obtains the basic customer information and sends the basic customer information to the digital bank server Step 230: The ATM connects to the certificate carrier, and obtains the signature data through the certificate carrier Step 232: Connect the voucher carrier to the ATM Step 233: The ATM obtains the certificate password and sends the certificate password to the certificate carrier through the security control component Step 235: The certificate carrier uses the certificate password to obtain a digital certificate, and uses the digital certificate to generate signature data Step 237: The ATM receives the signature data returned by the certificate carrier through the security control component Step 238: The ATM sends the signature data to the verification server Step 250: The verification server verifies the signature data sent by the ATM, and sends the corresponding verification result to the digital bank server Step 270: After determining that the signature data is verified by the verification server, the digital bank server obtains account application data based on the customer's basic data Step 272: The digital bank server sends a data usage request to the ATM Step 273: The ATM obtains the response message and sends the response message to the digital bank server Step 275: According to the response message, the digital bank server chooses to connect to the data server to download the customer data based on the customer's basic data and generate account application data based on the customer data, or choose to send the data based on the customer's basic data to fill in the message to the client device and receive the customer Account application information sent by the device Step 290: The digital bank server performs the corresponding account application operation based on the account application information

Figure 1 is the framework of the creation of an automated teller machine to obtain certification for account application. Figure 2A is the flow chart of the creation of an automated teller machine to obtain certification for account application. Figure 2B is the flow chart of the creation of the signature data obtained by the ATM through the voucher carrier. Figure 2C is the flow chart of the creation of the digital bank server choosing to obtain account application information based on the response message. Figure 3A is a schematic diagram of the function selection interface mentioned in the creative embodiment. Figure 3B is a schematic diagram of the data input interface mentioned in the creation embodiment. Figure 3C is a schematic diagram illustrating data authorization mentioned in the creation embodiment. Figure 3D is a schematic diagram of confirming account application data mentioned in the creation embodiment.

110: ATM

120: Credential Carrier

130: Verification Server

150: Identity Confirmation Server

160: data server

170: Digital Bank Server

180: client device

190: Relay server

Claims (10)

A system that is authenticated by an automated teller machine for account application, the system includes at least: A certificate carrier; An automated teller machine for obtaining basic customer information and for connecting with the certificate carrier, and obtaining a signature data through the certificate carrier; A verification server for verifying the signature data sent by the ATM and generating a corresponding verification result; and A digital bank server for receiving the customer's basic data sent by the ATM, and for judging that the verification result sent by the verification server indicates that the signature data has passed the verification, and obtaining a data based on the customer's basic data Account application data, and perform corresponding account processing operations based on the account application data. As described in the request item 1, the system for obtaining the authentication by the ATM for account application, wherein the certificate carrier uses a certificate password to obtain a private key and then uses the private key to generate a signature data and then use the signature Data is returned to the ATM, which obtains the certificate password and transmits the certificate password to the certificate carrier through a security control component, and receives the signature data sent by the certificate carrier through the security control component. As described in the request item 1, the system for obtaining the authentication by the ATM for account application, wherein the ATM is further used to receive the data use request sent by the digital bank server and obtain a corresponding response message and send The response message is sent to the digital bank server, and the digital bank server selects the method of obtaining the account application information based on the customer's basic information based on the response message. As described in the request item 3, the system for obtaining the authentication by the ATM for account application, in which the digital bank server is connected to a data server to download according to the customer's basic information when the response message indicates that the authorization is approved A customer data and generate the account application data based on the customer data, or when the response message indicates that the authorization is disapproved, send the data based on the customer basic data to fill in the message to a client device and receive the account application data sent by the client device . As described in claim 3, the system for applying for accounts by obtaining authentication by an ATM, wherein the digital bank server is further used to send the account application data to the ATM, and the ATM is further used to display the account application Data, and used to obtain the modified account application data, and send the modified account application data to the digital bank server. As described in claim 1, the system for obtaining authentication through an automated teller machine for account application, wherein the system further includes an identity verification server for receiving one of the basic customer information sent by the verification server Data, and used to confirm that the digital certificate is associated with the identification data. As described in claim 6, the authentication server is used to obtain authentication for account application system, wherein the identity confirmation server is further used to receive a certificate confirmation data forwarded by the authentication server from the ATM, and based on the The certificate serial number in the certificate confirmation data reads a piece of relevant data, and determines whether the identification data of the certificate owner contained in the relevant data matches the identification data in the certificate confirmation data to generate an indication of whether the identification data is associated with the digital certificate The result of identity verification. As described in claim 7, in the system for obtaining authentication by an automated teller machine for account application, the verification server is further used to generate the verification result according to the identity verification result generated by the identity verification server. As described in claim 1, the system for obtaining authentication by an automatic teller machine for account application, wherein the automatic teller machine is further used to receive a processing result generated by the digital bank server or to connect to the digital bank server or A prompt message generated by the verification server and used to display the processing result of the operation and the prompt message. As described in claim 9 of the system for applying for accounting by obtaining authentication through an automated teller machine, the automated teller machine is further used to play the corresponding sound or video when displaying the processing result of the operation or the prompt message.

Images