TWM613295U - Mobile verification device with coded middle platform structure - Google Patents

Abstract

A coded middle platform structure mobile verification device, including a mobile device, a management server, a verification platform data middle platform (Middle Platform), and a multimedia machine, which is composed of the management server and the verification platform data The five systems, including the platform, the multimedia machine, a digital deposit account upgrade application server, and a certificate verification center server, are connected to the verification service in a middle-station mode. In this way, the use of code technology (Tokenization) to avoid the risk of online transmission and storage of sensitive personal information, and at the same time, the introduction of the middle-station model as the hub of verification services, avoiding various front-end systems (such as digital deposit account platforms of various banks, multimedia machines, and certificates) Verification centers) are connected in series with each other one by one to reduce system workload and information security management and control. Through the use of separate e-commerce technology (Headless Architecture), the middle station is used as the back-end hub of the verification platform, and API and specific transmission modes are used. Connecting with front-end application systems (including multimedia machines) greatly improves the system's future scalability.

Description

Coded middle station structure mobile verification device

This creation is related to a coded mobile verification device for the middle station structure, especially involving a headless architecture that uses the middle station as the back-end hub of the verification platform, and uses APIs and specific transmission modes and front-ends. The application system is connected in series to greatly improve the future scalability of the system.

Banks are financial institutions that provide services such as payments, deposits, savings, loans, and wire transfers. To use the services provided by the bank, you usually need to open an account with the bank first.

Now you can open or upgrade your digital deposit account online through online banking or mobile banking. At present, the bank provides customers with the use of natural person certificates and other entities' digital certificate IC cards for online account opening or upgrade through the Taiwan Clearing House (hereinafter referred to as the Clearing House) for identity verification. The current operation mode of the ticket exchange must be connected with each contracted bank's special line, that is, each bank must sign a special line, and transmit data to the ticket exchange through the special line serial connection, and then the ticket exchange will be managed by the Ministry of Interior voucher management The center (MOICA) conducts natural person certificate verification. However, natural person certificates need to be read through a card reader, so that customers want to perform digital deposit account opening or upgrading, etc., still need to operate on a personal computer (PC); moreover, not all customers have a card reader. The PC that is used and connected to the card reader must be installed with a specific security element before the card can be inserted. If it is not installed or there is a problem with the installation, it cannot be used, causing inconvenience and trouble for customers. Therefore, the current shortcomings of the ticket exchange include: 1. It can only use a PC and a card reader for online authentication, cannot go to the supermarket for verification and is restricted by the card reader verification; and 2. It must use a dedicated line to contract with each bank Cascade.

Another bank proposed to combine natural person certificates with convenient super-business services to provide banks, securities The services of vouchers and telecommunications companies are online. Customers only need to go to the convenience store to use the multimedia server (for example: 7-ELEVEN's ibon device or FamilyMart's Famiport device) and insert natural person credentials to complete various identity verification applications. Take the ibon device as an example. The current operating mode of ibon must be signed with each bank, and the data dedicated line must be connected one by one to perform the identity verification operation. That is, each bank has to sign a dedicated line, which is very troublesome and each bank The rules are different and heavier system workload and information security control, so the cost is much higher. Therefore, the current disadvantages of ibon include: 1. Ibon needs to sign a contract with each bank; 2. It needs to be connected with each bank's dedicated line to carry out system development and testing one by one (including system security/firewall access settings); and 3 .The information flow of each bank operates independently, and there are risks and problems of system service interruption.

In view of this, it can be seen that there have been various online account opening or upgrade methods in the prior art for a long time, which may cause customers to be unable to complete the digital account (upgrade) application or have the problem of system service disconnection. Therefore, ordinary users cannot meet the requirements. It is necessary for actual use.

The main purpose of this creation is to overcome the above-mentioned problems encountered by the learned skills and provide a way to use code technology to avoid the risk of online transmission and storage of sensitive personal information. At the same time, the middle-station model is introduced as the verification service hub to avoid various front-end systems. (Such as digital deposit account platforms of various banks, multimedia machines, and credential verification centers) are connected to each other one by one to reduce system workload and information security control. Through the use of separate e-commerce technology, the middle station is used as the back of the verification platform. It uses API and specific transmission mode to connect with front-end application system (including multimedia machine), so that the future scalability of the system will be greatly improved. It is a coded middle-station structure mobile verification device.

Another purpose of this creation is to provide a kind of eDDA authorization for digital deposit account upgrade application and automatic debit payment, activated from the user’s mobile device, and the user only needs to go to the multimedia machine of the supermarket after receiving the SMS notification. Scan the QR Code in the newsletter and insert the card verification to complete To implement the mobile coded middle-station structure mobile verification device for user application.

In order to achieve the above purpose, this creation is a coded middle-station structure mobile verification device, which includes: a mobile device operated by a user and connected to a digital deposit account platform of a financial institution through which the mobile device passes The deposit account platform logs in to a digital deposit account upgrade application server and can communicate with the digital deposit account upgrade application server, and creates a case code linked to the user’s application for a digital deposit account upgrade case on the digital deposit account platform. As the basis for activating the online verification of the application for a digital deposit account upgrade case, the case code contains the bank code of the account, the deposit account code, and the application upgrade case code, and the deposit account code contains the mobile device held by the user Mobile phone number, where the digital deposit account upgrade application server stores the case information of the digital deposit account corresponding to the case code; a management server is used to provide the user through the digital deposit account via the mobile device The deposit account upgrade application server connects to the management server, receives the case code transmitted by the digital deposit account upgrade application server through the application programming interface (API), and generates a verification-specific case code based on the case code QR Code, and send a reminder notification to the user’s mobile device using this QR Code based on the user’s mobile phone number; a verification platform data middle platform (Middle Platform), which is connected to the digital via API The deposit account upgrade application server and the management server can communicate with the digital deposit account upgrade application server and the management server to connect to a certificate verification center (such as the Ministry of Home Affairs certificate management The central (MOICA) server verifies the natural person's certificate; and a multimedia machine, which is set in a physical space, interfaces with the verification platform data center via API or a specific transmission mode, and can communicate with the verification platform data center. The multimedia machine provides the user’s mobile device to scan the QR Code, and activate the verification platform data based on the case code to be verified in the QR Code. The middle station connects to the digital deposit account upgrade application server to access the case code Corresponding case information and transfer to the multimedia machine to display the case information, for the user to confirm and display a card insert prompt, insert the certificate IC card and enter the card PIN for the user After the code, the card's internal code and PIN code are sent to the verification platform data center, and the verification platform data center requests the digital deposit account upgrade operation accordingly. The application server sends the information requirements for verifying the user, and the verification platform data The central station then uploads the essentials and the internal code and PIN code of the card to the server of the certificate verification center, performs online natural person certificate verification, and sends the verification result to the digital deposit account through the verification platform data. The operation application server, the multimedia machine, and the management server.

In the above embodiment of this creation, the deposit account code is composed of the mobile phone number of the mobile device held by the user and the last 4 codes of the ID of the ID card.

In the above-mentioned embodiment of this creation, the personal information of the user is the ID of the person concerned and the date of birth.

In the above-mentioned embodiment of this creation, the case information is account data.

In the above-mentioned embodiment of this creation, the verification platform data center system includes a center station database, which is only used to record logs of case operations without storing specific account information.

In the above-mentioned embodiment of this creation, the mobile device may be a smart phone or a tablet computer.

In the above-mentioned embodiment of this creation, the verification platform data center station displays the case information on the multimedia machine in a partially masked manner.

In the foregoing embodiment of this creation, the reminder notification is a short message notification, an e-mail notification, an instant messaging software notification, a social network website notification, or an App notification.

In the above-mentioned embodiment of the present creation, the management server includes a management database for recording the verification result of the application for upgrading the digital deposit account.

In the above-mentioned embodiment of the present creation, the specific transmission mode is Hyperlink.

In the foregoing embodiment of this creation, the digital deposit account platform is a mobile application (APP), an Internet interactive platform (Network platform), or an Internet portal (Website).

In the above-mentioned embodiment of the present creation, the coded middle-stage structure mobile verification device can be extended to be applied to the authorization verification of the electronic direct debit authorization system (eDDA).

In the above-mentioned embodiment of this creation, the coded middle-stage structure mobile verification device can be extended to provide the contracted deduction service of the account link of the operator; and the initiator applies for authorized deduction.

In the above-mentioned embodiment of this creation, the agreed deduction service linked to the account of the company can be the automatic storage function of the card/e-ticket/e-payment provider’s account; the initiator's application for authorized deduction can be renewed by the insurance company Periodic premiums are automatically authorized for deduction.

In the above-mentioned embodiment of this creation, the agreed deduction service of the e-ticket/electronic payment provider account link is connected to the verification platform data center if the provider host is directly connected to a verification platform data center for eDDA verification EDDA verification server for bank account authorization, also known as eDDA verification server for financial industry account authorization.

1: mobile device

11: Digital deposit account platform

12: Initiator account platform

2: Management server

21: Management database

3: Verify platform data center

31: Central Taiwan database

4: Multimedia machine

5: Application server for digital deposit account upgrade

6: Certificate Verification Center Server

7: Bank account authorization eDDA verification server

8: The eDDA account authorization verification server of the original account bank

Figure 1 is a schematic diagram of the first implementation architecture of the mobile verification device for the middle station structure of the authoring and coding.

Figure 2 is a schematic diagram of the second implementation architecture of the mobile verification device for the middle station structure of the authoring and coding.

Please refer to "Figure 1 and Figure 2", which are the schematic diagram of the first implementation architecture of the mobile verification device for the authoring and coding mid-station structure, and the second implementation architecture of the mobile verification device for the authoring and coding mid-station structure. Schematic. As shown in the figure: this creation is a coded middle platform structure mobile verification device, including a mobile device 1, a management server 2, a verification platform data middle platform (Middle Platform) 3, and a multimedia machine 4 , The management server 2, the verification platform The data center 3, the multimedia machine 4, a digital deposit account upgrade application server 5, and a certificate verification center (such as the Ministry of the Interior Certificate Management Center (MOICA)) server 6 and other five systems are in the middle stage mode In-line verification service.

The aforementioned mobile device 1 can be a smart phone or a tablet computer, which is operated by a user and connected to a digital deposit account platform 11 of a financial institution, which can be a mobile phone application (APP) , Internet interactive platform (Network platform) or Internet portal (Website). The mobile device 1 logs into the digital deposit account upgrade application server 5 via the digital deposit account platform 11 and can communicate with the digital deposit account upgrade application server 5.

The management server 2 is a third-party service provider (Third-Party Service Providers, TSP) that provides system information flow services, and includes a management database 21. The management server 2 is used for providing the user to connect to the management server 2 through the application server 5 of the digital deposit account upgrade operation through the mobile device 1.

The verification platform data Zhongtai 3 includes a Zhongtai database 31. The verification platform data center 3 interfaces with the digital deposit account upgrade application server 5 and the management server 2 through an application programming interface (API), and can communicate with the digital deposit account upgrade application server 5 Communicate with the management server 2 and connect to the certificate verification center server 6 through the network.

The multimedia machine 4 is set in a physical space, and is connected to the verification platform data center 3 via API (or a specific transmission mode, such as Hyperlink) to communicate with the verification platform data center 3. If so, the above-disclosed device constitutes a brand new coded middle-station structure mobile verification device.

The mobile verification device with the coded middle-stage structure proposed in this creation provides the user to perform the verification operation of the digital deposit account upgrade (using a natural person certificate), as shown in Figure 1. In this embodiment, The mobile device 1 is a smartphone as an example. The connected digital deposit account platform 11 can be a digital deposit account app installed on the mobile device 1 or an online banking/pure online banking page. The multimedia machine 4 is based on 7- 11 ibon as an example.

When used, the user uses the mobile device 1 to log in to the digital deposit account upgrade application server 5 via the installed digital deposit account App or through the Internet connection to the online banking/pure online banking, and access the digital deposit account App or the The online banking/pure online banking creates a case code linked to the user’s application for a digital deposit account upgrade case as the basis for activating the online verification of the application for a digital deposit account upgrade case, and the digital deposit account upgrade application server 5 stores and The case information of the digital deposit account corresponding to the case code, that is, the account information. Among them, the case code contains the bank code of the account, the code of the deposit account, and the code of the application for upgrading the case, and the code of the deposit account is composed of the mobile phone number of the mobile device 1 held by the user and the last 4 codes of the ID card ID .

The management server 2 receives the case code transmitted by the application server 5 for upgrading the digital deposit account via the serial API, generates a QR Code for verification based on the case code, and converts it according to the user’s mobile phone number This QR Code uses a reminder notification to be sent to the mobile device 1 of the user. The reminder notification can be the SMS notification of this embodiment, or can be an e-mail notification, an instant messaging software notification, a social website notification, or an App notification.

The multimedia machine 4 provides the mobile device 1 of the user to scan the QR Code, and activate the verification platform data according to the case code to be verified in the QR Code. The platform 3 API is serially connected to the digital deposit account upgrade application server 5. Take the case information corresponding to the case code and transfer it to the multimedia machine 4 screen to display the case information in a partially masked manner, for the user to confirm and display a card insert prompt, insert the credential card and enter the card in the user After the PIN code, the internal code of the voucher card and its PIN code are sent to the verification platform data center 3, and the verification platform data center 3 requests the digital deposit account upgrade operation application server 5 to send verification of the user’s personal information accordingly. Essentials, including the person’s ID and date of birth. The platform 3 in the verification platform data then the key element and the internal code of the IC card of the certificate And its PIN code upload message to notify the certificate verification center server 6 to perform natural person certificate verification online, and the verification result is sent to the digital deposit account upgrade application server 5, the multimedia machine through the verification platform data center 3 4. And the management server 2, and the verification platform data center 3 only records the case operation log (Log) to the middle station database 31, and there is no need to store specific account information. Wherein, the management server records the verification result of the application for digital deposit account upgrade case to the management database 21.

The management server 2 uses code and a middle-office architecture to provide security action verification. The coded system information security and personal information protection functions are as follows:

1. Only the digital deposit account upgrade application server can save and access account information and user personal information.

2. The management server only uses tokens for system data connection (including QR Code operations).

3. The multimedia machine is only responsible for reading the QR Code, inserting the card and reading the PIN code of the natural person's credential.

4. Verification platform data The middle station only transfers the data required for upstream and downstream operations according to the case code; only records the case operation Logs to the middle station database without storing specific account information.

It can be seen that the characteristics of the mobile verification device for the coded middle station structure proposed in this creation include:

1. Use Tokenization to avoid the risk of online transmission and storage of sensitive personal information.

2. Introduce the middle station model as the hub of verification services to avoid the serial connection of front-end systems (such as bank digital deposit account platforms, multimedia machines, and credential verification centers) to each other, reducing system workload and information security management and control.

3. Using Headless Architecture (Headless Architecture), using the middle station as the back-end hub of the verification platform; and using APIs and specific transmission modes to connect with the front-end application system (including multimedia machines) to make the system scalable in the future Significantly improved. Among them: For the clearing house, only a verification platform data center needs to be built, and it is connected through API, and there is no need It is connected to the dedicated line of each contracted bank; and can be connected to the multimedia machine through API or a specific transmission mode, and provides the verification operation of the natural person certificate of each contracted bank. Break through the current restrictions on card reader verification.

For multimedia machines, it only needs to interface with the verification platform data center through API or a specific transmission mode. There is no need to sign a contract with each bank, and there is no need to interface with a data dedicated line one by one. It only needs to pass through the ticket exchange center. Relevant verification operations can be performed; users who need to upgrade can scan the QR Code at each store’s multimedia machine (no need to enter and search), that is, a natural person's certificate can be inserted into the card for verification; and through a single information flow operation in the middle station, it can reduce the amount of trouble There are nodes connected to the system, which greatly reduces the risk and problems of system service interruption.

The front-end systems of the verification platform data are operated in series with API or a specific transmission mode, including the management server connecting with each bank application system (that is, the application server for upgrading the digital deposit account) with the API, and receiving the case code, The QR Code is sent by SMS, and then the QR Code is scanned by the multimedia machine. According to the case code, the back-end middle station verification operation is initiated.

The coded middle-stage mobile verification device proposed in this creation can not only perform the verification of the above-mentioned digital deposit account upgrade (using natural person certificates), but also can be further extended to be applied to the electronic direct debit authorization system (eDDA). Authorization verification operation to facilitate users to apply for authorization deduction in a paperless manner (such as automatic authorization deduction for insurance company renewal premiums).

The coded middle-station structure mobile verification device proposed in this creation can also be further extended to provide account link (Account Link) agreed deduction services (such as the automatic storage function of e-ticket/e-payment account such as Youyou card/youyou payment) ).

As shown in Figure 2, comparing the above-mentioned digital deposit account upgrade model, the management server 2, the verification platform data center 3, the multimedia machine 4, a bank account authorization eDDA verification server 7, and an original account opening Run eDDA account authorization verification server 8 and other five systems to middle station The mode is connected to the verification service to perform eDDA verification.

When used, the pre-operations of eDDA are the same as the verification of the digital deposit account upgrade (natural person certificate). The user uses the mobile device 1 to log in to the initiator account platform 12 via the Internet (e.g., e-ticket/e-payment provider App platform) ), link to the bank account authorization eDDA verification server 7 of the initiating bank, and create a case code linked to the user's eDDA case online as the basis for initiating the online verification of the eDDA case application, and the bank account authorizes the eDDA verification server In 7, the case information of the bank account corresponding to the case code is stored. Wherein, the case code contains the launching bank code, user code, and eDDA case code, and the user code is composed of the mobile phone number of the mobile device 1 held by the user and the last 4 codes of the ID card ID.

The management server 2 is connected to the bank account authorization eDDA verification server 7 via API, receives the case code transmitted by the bank account authorization eDDA verification server 7, generates a verification QR Code based on the case code, and based on the user’s mobile phone The number sends this QR Code to the mobile device 1 of the user using a short message notification. The user scans the QR Code with the multimedia machine 4, and activates the verification platform data according to the case code to be verified in the QR Code. The platform 3 API is connected to the bank account authorization eDDA verification server 7 to access the case The case information corresponding to the code is transferred to the 4 screen of the multimedia machine to display the case information in a partial shading method for the user to confirm and display a card insert prompt. After the user inserts the financial card and enters the card PIN code, it will be sent The internal code of the financial card and its PIN code are sent to the verification platform data center 3, and the verification platform data center 3 requests the bank account to authorize the eDDA verification server 7 to transmit the eDDA account verification data accordingly. The verification platform data center 3 then informs the original account bank’s eDDA account authorization verification server 8 of the eDDA account verification data and the internal code of the financial card and its PIN code to perform eDDA verification operations online, and pass the verification results through the The verification platform data center 3 transmits to the bank account authorization eDDA verification server 7 and the multimedia machine 4.

If the insurance company is the initiator of the automatic deduction of eDDA, the account platform of the initiator 12 is an insurance company mobile insurance application or a designated launch authorization webpage, which links to the bank account authorization eDDA verification server of the launch bank 7.

To sum up, this creation is a coded middle station structure mobile verification device, which can effectively improve the various shortcomings of conventional use, use code technology to avoid the risk of online transmission and storage of sensitive personal information, and introduce the middle station mode as a verification service. Hub, avoid the front-end systems (such as bank digital deposit account platforms, multimedia machines, credential verification centers) one by one in series with each other, reduce system workload and information security control, through the use of separate e-commerce technology, As the back-end hub of the verification platform, it uses APIs and specific transmission modes to connect with the front-end application system (including multimedia machines), which greatly improves the future scalability of the system; this creation can also upgrade applications for digital deposit accounts, The authorization of eDDA and automatic transfer payment is initiated from the user’s mobile device. After receiving the SMS notification, the user only needs to scan the QR Code in the SMS and insert the card verification at the multimedia machine of the supermarket store to complete the application. The mobilization of this creation will make the creation of this creation more progressive, more practical, and more in line with the needs of users. It has indeed met the requirements of a new patent application, and a patent application is filed in accordance with the law.

However, the above are only the preferred embodiments of this creation, and should not be used to limit the scope of implementation of this creation; therefore, all simple equivalent changes and modifications made in accordance with the scope of the patent application for this creation and the content of the new specification , Should still be within the scope of this creation patent.

1: mobile device

11: Digital deposit account platform

2: Management server

21: Management database

3: Verify platform data center

31: Central Taiwan database

4: Multimedia machine

5: Application server for digital deposit account upgrade

6: Certificate Verification Center Server

Claims (15)

A coded middle station structure action verification device, which includes: A mobile device is operated by a user and is connected to a digital deposit account platform of a financial institution. The mobile device logs into a digital deposit account upgrade application server through the digital deposit account platform and can upgrade with the digital deposit account The application server communicates and establishes a case code linked to the user’s application for a digital deposit account upgrade case on the digital deposit account platform, as the basis for initiating the online verification of the application for a digital deposit account upgrade case, and the case code contains the bank code of the account , Deposit account code, and application upgrade case code, and the deposit account code contains the mobile phone number of the mobile device held by the user, where the digital deposit account upgrade application server stores the case code The case information of the corresponding digital deposit account; A management server for the user to connect to the management server through the digital deposit account upgrade application server through the mobile device, and receive the digital deposit account through a serial application programming interface (API) Upgrade the case code transmitted by the application server, generate a QR Code for verification based on the case code, and send a reminder notification of this QR Code to the user’s mobile device based on the user’s mobile phone number; A verification platform data middle platform (Middle Platform) interfaces the digital deposit account upgrade application server and the management server via API, and can communicate with the digital deposit account upgrade application server and the management server, Used to connect to a certificate verification center server to verify the natural person's certificate through the Internet; and A multimedia machine is set in a physical space, and can communicate with the verification platform data center via API or a specific transmission mode to interface with the verification platform data center. The multimedia machine provides the user's mobile device to scan the QR Code, according to the case code to be verified in the QR Code, activate the verification platform data center to connect to the application server of the digital deposit account upgrade operation, and fetch the case code corresponding to the case code The case information is transferred to the multimedia machine to display the case information for the user to confirm and display a card insert prompt. After the user inserts the certificate IC card and enters the card PIN code, the card’s internal code and PIN code are sent to the The verification platform data center, the verification platform data center requests the digital deposit account upgrade operation application server to transmit a key element for verifying the user, and the verification platform data center adds the key element to the card The code and PIN code are uploaded to the server of the certificate verification center, the natural person certificate verification is performed online, and the verification result is sent to the digital deposit account upgrade application server, the multimedia machine, and the management through the verification platform data center. server. According to the coded middle-station structure mobile verification device described in item 1 of the scope of patent application, the deposit account code is composed of the mobile phone number of the mobile device held by the user and the last 4 codes of the ID card ID. According to the coded middle station structure mobile verification device described in item 1 of the scope of patent application, the personal information of the user is the identity card ID of the party concerned and the date of birth. According to the coded middle station structure mobile verification device described in item 1 of the scope of patent application, the case information is account data. According to the coded middle station structure action verification device described in item 1 of the scope of patent application, the middle station of the verification platform data includes a middle station database, which is only used to record the logs of case operations without storing specific Account information. According to the coded middle-station structure mobile verification device described in item 1 of the scope of patent application, the mobile device can be a smart phone or a tablet computer. According to the coded middle station structure mobile verification device described in item 1 of the scope of patent application, the middle station of the verification platform data displays the case information on the multimedia machine in a partially masked manner. According to the coded middle-station structure mobile verification device described in item 1 of the scope of patent application, the reminder notification is SMS notification, e-mail notification, instant messaging software notification, social website notification, or App notification. According to the coded middle-station structure mobile verification device described in item 1 of the scope of patent application, the management server includes a management database for recording the verification result of the application for digital deposit account upgrade case. According to the coded middle-station structure mobile verification device described in item 1 of the scope of patent application, the specific transmission mode is Hyperlink. According to the coded middle-station structure mobile verification device described in item 1 of the scope of patent application, the digital deposit account platform is a mobile application (APP), an Internet interactive platform (Network platform) or an Internet portal ( Website). The coded middle-station structure mobile verification device described in item 1 of the scope of patent application can be extended to the authorization verification of the Electronic Direct Debit Authorization (eDDA) system. The coded middle-station structure mobile verification device described in item 1 of the scope of patent application can be extended to provide the agreed deduction service of the provider’s Account Link; and the initiator applies for authorized deduction. According to the coded middle-station structure mobile verification device described in item 13 of the scope of patent application, the agreed deduction service linked to the account of the company can be the automatic storage function of the card/e-ticket of the card/electronic payment company’s account ; The initiator can automatically authorize the deduction for the insurance company's renewal premium when applying for authorization deduction. According to the coded middle-station structure mobile verification device described in item 14 of the scope of patent application, the agreed deduction service of the e-ticket/electronic payment provider account link is directly connected to a verification platform data center by the provider host For eDDA verification, the bank account authorization eDDA verification server connected to the data center of the verification platform is also called the eDDA verification server for the financial industry account authorization.

Images