TWM640763U - Chip card transaction system based on transaction risk control - Google Patents

Abstract

A chip card transaction system based on transaction risk control, including a mobile device and a back-end server, the back-end server can calculate a risk score of the chip card, the mobile device installs or executes an application program (APP), which passes The configuration is to at least: drive the mobile device to use a first wireless communication protocol (such as the NFC protocol) to communicate with a chip card that is also located in the first communication range, to read a card information of the chip card, respond to the risk score to meet a decision Under the condition that the mobile device does not need to use the second wireless communication protocol to communicate with the back-end server through an Internet mode, the mobile device decides whether to allow the transaction request of the chip card; and drives the mobile device to use the first wireless communication protocol , after the transaction is completed, write an updated card information associated with the transaction request into the chip card.

Description

Chip card transaction system based on transaction risk control

This creation involves the technology of managing and verifying chip card transactions with wireless communication technology and mobile devices, especially a mobile device that can establish cooperation with the back-end server through an application program, and complete online or transaction transactions under controllable risks. Offline real-time chip card transactions, and in response to the transaction request being allowed, use a wireless communication protocol different from that used by the back-end server (such as NFC technology for mobile devices, Wi-Fi or mobile network protocols for back-end servers ), write the updated card information associated with the transaction request (such as the data including the card balance) into the chip card, so as to achieve "transaction-based risk control" that enables real-time chip card transactions regardless of time and place chip card transaction system".

With the frequency of electronic transactions, most people now use chip cards such as debit cards, credit cards, and traffic ticket cards to replace traditional cash payment methods. However, if consumers want to use chip cards in physical stores or online For consumption in stores, it is necessary to complete the transaction through the merchant terminal or the self-provided inductive/swipe card reader, and the transaction can only be completed in the connected state. Deduction transactions are also limited to stations, or merchants (such as supermarkets) equipped with inductive reading and writing equipment, which is quite inconvenient. Therefore, how to propose a method that can solve the aforementioned problems and under controllable risks It is a problem to be solved to achieve the "chip card transaction system based on transaction risk control" that chip card transactions can not be limited by time and field of use.

To achieve the above purpose, this creation discloses a chip card transaction system based on transaction risk control. The chip card transaction system includes a mobile device and a backend server. The mobile device includes a communication module, a processor and a memory, the processor is electrically connected to the communication module and the memory respectively, and the mobile device loads or executes an application program.

Continuing from the above, the application program is used to drive the communication module to use a first wireless communication protocol (such as NFC communication protocol) to communicate wirelessly with a chip card to read and write a card information of the chip card (such as including card ID, financial card number, etc.) , credit card number, card account balance, previous transaction record, current transaction record, card production date, card expiration date, card type, card issuer information, card transaction serial number, bank code, value-added transaction flag, plus Any combination of value transaction amount, value-added transaction date, message authentication code, card anti-counterfeiting verification code, card identity, identity expiration date, county and city code, depending on the transaction type and card type of the transaction request).

Continuing from the above, the communication module is also used to use a second wireless communication protocol (such as Wi-Fi, mobile communication, etc., whose communication distance/effective communication range is greater than that of the first wireless communication protocol) to communicate with a back-end server through an Internet way to communicate.

In different embodiments, both the mobile device and the backend server can decide whether to allow a transaction request of the chip card, and can also calculate a risk score of the chip card according to a risk parameter.

The key point of this invention is that when the chip card and the communication module are within a first communication range where they can communicate with each other using a first wireless communication protocol, the application program can respond to the risk score meeting a decision condition in the communication module The group does not need to be connected to the back-end server, or the communication module does not need to be connected to the Internet. In this offline mode, the transaction request of the chip card is allowed to generate a transaction request. result (such as successful deduction, successful value-added, successful card swiping), and make the communication module use the first wireless communication protocol to write the updated card information associated with the transaction request into the chip card.

Based on the above, the mobile device of this invention can establish cooperation with the back-end server through the application program, when the mobile device of this invention and the chip card are within the first communication range that can communicate with each other using the first wireless communication protocol, and When the risk is controllable, the mobile device can decide whether to allow the transaction request of the chip card (in offline mode) through the application program, and can respond to the transaction request result as permission, and the chip card and the mobile device first Within the scope of communication, use a wireless communication protocol/wireless communication technology different from that used by the back-end server to write the updated card information associated with the transaction request into the chip card using the NFC protocol, thereby achieving real-time transaction of the chip card The beneficial effect of not being limited by time and field of use effectively improves the convenience of chip card instant transactions.

This creation also proposes a computer-readable recording medium and a computer program product of a chip card transaction system based on transaction risk control.

In order to enable your review committee to clearly understand the purpose, technical features and effects of this creation, the following descriptions are provided with illustrations, please refer to it.

10: Chip card transaction system

101: Mobile Devices

1011: Processor

1012: Communication module

1013: memory

APP: application program

C_V: card verification result

T_A: transaction request result

P1: The first wireless communication protocol

P2: The second wireless communication protocol

C: chip card

T: transaction request

I: Card Information

I’: Card Information

I_U: Card information after update

R_S: Risk Score

W: Wallet account

102:Backend server

1021: Transaction Subsystem

1022: Card management subsystem

S: Implementation method of chip card transaction system

S1: The application program drives the communication module to use the first wireless communication protocol to verify whether the chip card is a valid card in response to the transaction request of the chip card

S2: The application program allows the card transaction request by the mobile device in response to the risk score meeting the decision condition and in the mode where the communication module is not connected to the backend server

S3: The application program responds to the risk score not meeting the decision-making conditions, and the back-end server allows the card transaction request in the mode where the communication module is connected to the back-end server

Fig. 1 is a schematic diagram (1) of a chip card transaction system according to an embodiment of the invention.

Fig. 2 is a schematic diagram (2) of the chip card transaction system of one embodiment of the invention.

Fig. 3 is a flow chart of the chip card transaction method of one embodiment of the invention.

Fig. 4 is a schematic diagram of the chip card transaction system of another embodiment (1) of the present invention.

Fig. 5 is a schematic diagram of the chip card transaction system of another embodiment (2) of the present invention.

Please refer to FIG. 1 and FIG. 2 , a chip card transaction system based on transaction risk control. The chip card transaction system 10 includes: a mobile device 101 and a backend server 102 .

Please refer to FIG. 1 , in one embodiment, the mobile device 101 includes a processor 1011 , a communication module 1012 and a memory 1013 , and the processor 1011 is electrically connected to the communication module 1012 and the memory 1013 respectively.

Please refer to FIG. 1 and FIG. 2. In one embodiment, the mobile device 101 installs or executes an application program APP, and the data of the application program APP (for example, multiple commands of the application program APP in the functions disclosed in this creation, and actions) Temporary data) generated by the device 101 after executing the application program APP are stored in the memory 1013 . The application program APP is configured to at least drive the communication module 1012 to communicate wirelessly with a chip card C using a first wireless communication protocol P1. The wireless communication protocol P1 enables communication within a first communication range. Then, the application program APP is configured to drive the communication module 1012 to read a card information I from the chip card C within the first communication range, and then make the processor 1011 executing the application program APP verify the chip based on the card information I Whether the card C is a valid card, and determine whether to allow a transaction request T of the chip card C. In addition, the application program APP can also be configured to drive the communication module 1012 to read and write the card information I of the chip card C based on the first wireless communication protocol P1. In this way, the mobile device 101 can allow the transaction request T of the chip card C within the first communication range through the application program APP, effectively improving the convenience of real-time transaction of the chip card.

Please refer to FIG. 1 and FIG. 2. In one embodiment, the mobile device 101 can store the card information I corresponding to the chip card C in the memory 1013 in order to enable the processor 1011 to verify the card information I through the application program APP. ', so that when the processor 1011 performs card verification, it can compare the card information I with the card information I' stored in the memory 1013, and after the verification is completed, the processor 1011 generates a card verification result C_V.

Wherein, as an example, the first wireless communication protocol P1 can be a near-field communication (NFC) protocol, a Bluetooth Low Energy (Bluetooth Low Energy, BLE), a high-speed Bluetooth communication protocol (Bluetooth HS), a ZigBee communication protocol, a Sub-1GHz communication protocol, a Z-Wave communication protocol, an ultra-wideband communication protocol (UWB), a Wi-Fi communication protocol, a HiperLAN communication protocol, or any combination thereof, but not limited to this .

Please refer to Fig. 1 and Fig. 2, in one embodiment, for the card information I that can be used to verify the validity of the card, or as a decision factor whether to allow chip card transactions, it can be a card data, a transaction data, One or a combination of verification data and identity data, but not limited thereto.

Wherein, as an example, the card information may include any combination of card ID, card account balance (Electronic Value, EV), card production date, card expiration date, card type, and card issuer information. In addition, if the chip card C is a debit financial card or a credit card, the card information may further include a financial card number or a credit card number.

Wherein, as an example, the transaction data may be previous transaction records, current transaction records, card transaction serial number, bank code (bank_code), value-added transaction flag (autoload enable flag), value-added transaction amount, value-added transaction Any combination of data for dates.

Wherein, as an example, the verification data may include a message authentication code (Message Authentication Code, referred to as MAC, also known as a message authentication code, a file message authentication code or a gold key code), a card counterfeit proof verification code (Counterfeit Proof Data, referred to as CPD) or both. In an embodiment, when the processor 1011 executing the application program APP can verify whether the chip card C is a valid card based on the card information I, the card information I required for verification should at least include the verification data.

Please refer to FIG. 1 and FIG. 2. In one embodiment, in addition to storing the message authentication code of the chip card C in the chip card C, the mobile device 101 can also calculate another message authentication code through the application program APP, When the processor 1011 for executing the application program APP verifies whether the chip card C is a valid card based on the card information I, the mobile device 101 and the chip card C can mutually check the information authentication sent to each other based on the first wireless communication protocol P1. Whether the codes are the same or correspond to each other, so as to ensure that the content of the message (Message, such as card ID, card expiration date, card production date, card type, etc.) Changed to achieve the purpose of verifying the card with two-way verification. Wherein, the message authentication code is generated by performing a MAC algorithm on the message with a key (Key), but not limited thereto.

Please refer to Figure 1 and Figure 2, in one embodiment, the card anti-counterfeiting verification code can be composed of several fields of the card information (such as card ID, card expiration date, card production date, card type) , is generated by calculating the message authentication code, and before executing/permitting each transaction request T, the mobile device 101 can check the card anti-counterfeit verification code through the application program APP to avoid the possibility of counterfeit cards.

Wherein, as an example, the identity data may include a card identity (such as ordinary, student, preferential status...etc.), an identity expiry date (special identity needs to be set), a county code (area_code) one of them or any combination thereof.

Please refer to FIG. 1 and FIG. 2, in one embodiment, the communication module 1012 can use a second wireless communication protocol P2 to communicate with the back-end server 102 through an Internet, and the back-end server 102 can include A transaction subsystem 1021 and a card management subsystem 1022 .

Wherein, as an example, the second wireless communication protocol P2 can be one of a Wi-Fi communication protocol, a HiperLAN communication protocol, and a mobile communication protocol (such as 2G, 2.5G, 3G, 3.5G, 4G LTE, 5G, etc.) or a combination thereof. Wherein, the mobile communication protocol refers to the communication means that the mobile device 101 can connect to the Internet through the base station of the carrier.

Please refer to Figure 1 and Figure 2, especially the dotted line in Figure 2. In one embodiment of this invention, the transaction subsystem 1021 of the backend server 102 can determine whether to allow the transaction request T of the chip card C to generate A transaction request result T_A. The card management subsystem 1022 is used to calculate a risk score R_S associated with the chip card C according to a risk parameter, and can also be used to verify whether the chip card C is a valid card to generate a card verification result C_V. The risk score R_S, the card verification result C_V and the transaction request result T_A can all be sent to the mobile device 101 through the Internet based on the second wireless communication protocol P2, to be regularly or irregularly updated in the memory 1013 of the mobile device 101, thereby , it can prevent the communication module 1012 from using the second wireless communication protocol P2 to receive the risk score R_S of the chip card C from the backend server 102 every time, effectively saving network transmission traffic.

Wherein, as an example, the risk parameter may be one of the card information of the card information I, the transaction information, the identity information, a historical transaction information, a credit limit, a credit score or any combination thereof, The historical transaction information may be historical transaction data and/or historical transaction behavior analysis data.

Please refer to Figure 1 and Figure 2. In one embodiment, the risk score R_S can be transmitted from the backend server 102 to the mobile device 101 through the application program APP based on the second wireless communication protocol P2, and can be based on the second wireless communication protocol. The protocol P2 is written by the mobile device 101 and stored in the chip card C. For example, if the transaction data of the risk parameter shows that the previous transaction was successful, the historical transaction information is normal, the identity data is normal, the card data is normal, and the transaction amount is displayed for small payment is easy, the backend server 102 can calculate a higher risk score R_S for the chip card C. On the contrary, if the transaction data of the risk parameter shows that the previous transaction failed, the historical transaction information has occasional abnormalities, the identity data shows that the card identity is not a student, although the card data is normal, and this transaction If the transaction amount is not a small transaction, the backend server 102 may calculate a lower risk score R_S for the chip card C, such as a risk score R_S <60, but the above is just an example and not limited thereto.

Please refer to FIG. 1 and FIG. 2. In one embodiment, for the above-mentioned mechanism of calculating the risk score R_S, the application program APP can also be connected to the backend server 102 or the communication module 1012 when the communication module 1012 is not connected. In a first mode (also called an offline state) that does not need to be connected to the Internet, the drive processor 1011 in this offline state calculates the risk score R_S of the chip card C according to the risk parameters, whereby the risk score The R_S can be sent by the communication module 1012 to the backend server 102 through the Internet based on the second wireless communication protocol P2, so as to update the memory of the backend server 102 regularly or irregularly.

Please refer to FIG. 1 and FIG. 2. In one embodiment, the application program APP can respond to the risk score R_S meeting a decision condition, and the communication module 1012 is not connected to the backend server 102, or the communication module The group 1012 does not need to be connected to the Internet in the first mode (i.e. offline state), in this offline state the transaction request T of the chip card C is allowed to make the processor 1011 generate the transaction request result T_A, and make the communication module 1012 Using the first wireless communication protocol P1, write the updated card information I_U associated with the transaction request T to the chip card C in an offline state, and allow the user to confirm the transaction request result T_A (such as transaction approval) in the application program APP . In this way, the mobile device 101 can allow the transaction request T of the chip card C in an offline state through the application program APP under the condition of controllable risks, which effectively improves the convenience of real-time transaction of the chip card. In addition, the transaction request T of the chip card C can be triggered by sending the chip card C to the communication module 1012 (that is, the chip card C is used as the initiator device, and the communication module 1012 is used as the slave device), but the transaction request T of the chip card C can also be It can be triggered by sending from the communication module 1012 to the chip card C (that is, the communication module 1012 acts as an initiating device, and the chip card C acts as a slave device).

Please refer to FIG. 1 and FIG. 2. In one embodiment, in order to determine whether the mobile device 101 allows the transaction request T of the chip card C, the processor 1011 can at least perform all the card information I in the first mode. The above verification data is verified to generate a card verification result C_V, but it is only an example and not limited thereto. In addition, the information that may be included in the verification data has been mentioned above and will not be repeated here.

Please refer to Figure 1 and Figure 2. In one embodiment, the card verification result C_V, transaction request result T_A and updated card information I_U generated by the mobile device 101 can be linked to the mobile device 101 after the transaction is completed. In the second mode to the back-end server 102 , the communication module 1012 sends to the back-end server 102 regularly or irregularly through the second wireless communication protocol P2 for updating.

Please refer to Fig. 1 and Fig. 2, in one embodiment, the communication distance/effective communication range (i.e. the aforementioned first communication range) of the wireless communication technology using the first wireless communication protocol P1 can be less than that used A second communication distance of the wireless communication technology of the second wireless communication protocol P2.

60，而在通訊模組1012未連線至後端伺服器102、或通訊模組1012毋須連結至網際網路的第一模式下(亦可稱離線狀態)，透過應用程式APP使處理器1011將儲存於記憶體1013的卡片資訊I’，與通訊模組1012基於第一無線通訊協定P1而從晶片卡C讀取的卡片資訊I進行比對，進而於離線狀態下達成驗證晶片卡C的功能，而由處理器1011生成卡片驗證結果C_V，更讓使用者可於應用程式APP確認卡片驗證結果C_V(例如卡片驗證成功)。藉此，可讓行動裝置101藉由應用程式APP，在風險可控的情況下(即風險較低)，達成離線驗證卡片有效性的技術手段。 Please refer to FIG. 1 and FIG. 2. In an embodiment, the application program APP may also respond to the risk score R_S meeting the decision condition, for example, the risk score R_S

60, and in the first mode in which the communication module 1012 is not connected to the backend server 102, or the communication module 1012 does not need to be connected to the Internet (also called an offline state), the processor 1011 is enabled through the application program APP The card information I' stored in the memory 1013 is compared with the card information I read by the communication module 1012 from the chip card C based on the first wireless communication protocol P1, and then the chip card C is verified offline. Function, and the card verification result C_V is generated by the processor 1011, so that the user can confirm the card verification result C_V in the application program APP (for example, the card verification is successful). In this way, the mobile device 101 can realize the technical means of verifying the validity of the card offline under the condition of controllable risk (that is, low risk) through the application program APP.

Please refer to FIG. 1 and FIG. 2. In one embodiment, after the transaction is completed, the card verification result C_V generated by the mobile device 101 can be communicated in the second mode in which the mobile device 101 is connected to the back-end server 102. The module 1012 sends to the backend server 102 regularly or irregularly through the second wireless communication protocol P2 for updating.

Please refer to FIG. 1 and FIG. 2, in one embodiment, the first wireless communication protocol P1 can be the near field communication (NFC) protocol, and the situation of this embodiment is that the communication module 1012 is not connected to The first mode of the backend server 102 (also called offline status). More specifically, when the application program APP of this embodiment needs to drive the communication module 1012 to use the first wireless communication protocol P1 to perform wireless communication with the chip card C, the chip card C needs to be located in the communication module 1012 that can realize near field communication. Within the communication range, for example, the location of the chip card C needs to be adjacent to the NFC sensing area of the mobile device 101 (not shown in the figure).

Please refer to Figure 3, which is the implementation method S of the chip card transaction system based on transaction risk control, which is applied to a mobile device 101 and a chip card C, and please refer to Figure 1 and Figure 2 together, The implementation method S of the chip card transaction system includes the following steps.

In step S1 (the application program drives the communication module to use the first wireless communication protocol to verify whether the chip card is a valid card in response to the transaction request of the chip card), an application program APP installed or executed on the mobile device 101 responds to A transaction request T from the chip card C drives the communication module 1012 to communicate with the chip card C using a first wireless communication protocol P1, reads a card information I from the chip card C, and drives the processor through the application program APP 1011 compares the card information I of the chip card C with the card information I' stored in the memory 1013 of the mobile device 101 to verify whether the chip card C is a valid card.

60)而在 通訊模組1012未連線至後端伺服器102、或通訊模組1012毋須連結至網際網路的一第一模式下(亦可稱離線狀態)，於此離線狀態下由行動裝置101的處理器1011允許晶片卡C的交易請求T而生成一交易請求結果T_A，以由通訊模組1012使用第一無線通訊協定P1，將關聯於交易請求T的更新後卡片資訊I_U寫入於晶片卡C。 In step S2 (the application program responds to the risk score meeting the decision-making conditions and the mobile device allows the card transaction request in the mode where the communication module is not connected to the back-end server), the application program APP responds to a chip card C The risk score R_S meets a decision condition (for example, the risk score R_S

60) In a first mode (also called an offline state) where the communication module 1012 is not connected to the back-end server 102, or the communication module 1012 does not need to be connected to the Internet, in this offline state the mobile The processor 1011 of the device 101 allows the transaction request T of the chip card C to generate a transaction request result T_A, so that the communication module 1012 uses the first wireless communication protocol P1 to write the updated card information I_U associated with the transaction request T. on chip card C.

In step S3 (the application program responds to the risk score not meeting the decision-making conditions, and the communication module is connected to the back-end server mode, and the back-end server allows the card transaction request), the application program APP responds to the chip card C The risk score R_S does not meet the decision-making condition (for example, the risk score R_S<60), and the driver communication module 1012 uses a second wireless communication protocol P2 to communicate with a back-end server 102 through an Internet, in order to In a second mode where the communication module 1012 is connected to the backend server 102, the transaction subsystem 1021 of the backend server 102 determines whether to allow the transaction request T of the chip card C.

Wherein, as an example, the mobile device 101, processor 1011, application program APP, communication module 1012, memory 1013, backend server 102, chip card C, Card information I, the risk parameters, risk score R_S, the first wireless communication protocol P1, the second wireless communication protocol P2, the functions and appearances of these technical features have been explained in the implementation of Figure 1 to Figure 2 example, which will not be repeated here.

Please refer to Figure 3. In one embodiment, the invention further provides a non-transitory computer-readable recording medium associated with at least one instruction to define the implementation method S of the aforementioned chip card transaction system, and the relevant description of each step The embodiment shown in FIG. 3 has been described in detail and will not be repeated here.

Please refer to Figure 3. In one embodiment, the invention further provides a computer-readable recording medium associated with at least one instruction to define the implementation method S of the aforementioned chip card transaction system. The relevant descriptions of each step have been described in detail. The embodiment shown in FIG. 3 will not be repeated here.

Please refer to Figure 3. In one embodiment, the invention further provides a computer program product. After the computer system loads multiple instructions of the computer program product, it can at least complete the implementation method of the aforementioned chip card transaction system. S. The relevant description of each step has been described in detail in the embodiment shown in FIG. 3 , and will not be repeated here.

Please refer to Figure 4, which is a schematic diagram of the chip card transaction system of another embodiment (1) of this creation, which is similar to the technology of the embodiment shown in Figures 1 to 3, and refer to Figures 1 to 3 for collocation 3, the main difference is that the transaction request T in this embodiment can be a value-added request or a deduction request. In this embodiment, the application program APP of this embodiment drives the communication module 1012 based on the first wireless communication protocol P1 (such as but not limited to the NFC protocol) to read the card containing the balance of the card account from the chip card C After the information I, in response to the risk score R_S meeting the decision-making condition, the processor 1011 allows the value addition request or the deduction request of the chip card C in the first mode (i.e. offline state), and makes the processor 1011 generates an updated balance data (which belongs to one of the forms of the card account balance), and makes the communication module 1012 use the first wireless communication protocol P1 to associate with the value addition request or the deduction request The updated balance data is written into an electronic wallet account W or a bank account (not shown in the figure) linked to the chip card C. In this way, the mobile device 101 can use the APP to realize the functions of one-click reloading or one-click deduction in the offline state under the condition of controllable risks, which effectively improves the convenience of real-time chip card transactions.

Please refer to Fig. 4 again, similarly, the application program APP of this embodiment can respond to the risk score R_S not meeting the decision-making condition, and in the second mode (that is, the situation where the mobile device needs to be connected to the Internet) from the following The end server 102 decides whether to allow the request of adding value or the request of debiting the chip card C.

Please refer to FIG. 4, in one embodiment, after the transaction is completed, the updated balance data generated by the mobile device 101 can be connected to the backend server 102 in the second mode of the mobile device 101, The communication module 1012 sends it to the backend server 102 regularly or irregularly through the second wireless communication protocol P2 for updating.

Please refer to FIG. 4. In one embodiment, if the transaction request T is the deduction request, the application program APP executed by the mobile device 101 verifies whether the chip card C is based on the card information I in the driver processor 1011. Before the valid card (that is, before step S1 in Fig. 3 is executed), the transaction data of the card information I read from the chip card C by driving the communication module 1012 may at least include: the previous transaction record, all One or a combination of the transaction record and the card transaction serial number. As for other data fields that may be included in the transaction data, they have been mentioned above and will not be repeated here.

Please refer to FIG. 4, in one embodiment, if the transaction request T is the deduction request, the application program APP executed by the mobile device 101, in order to drive the processor 1011 to verify whether the chip card C is based on the card information I For a valid card (that is, when step S1 in FIG. 3 is executed), the card information I read by the communication module 1012 of the mobile device 101 from the chip card C based on the first wireless communication protocol P1 may include the card data, all One or a combination of the transaction data, the verification data and the identity data (the types have been mentioned above, and will not be repeated here), in this embodiment, may at least include, for example, the card ID, the card Account balance (EV), the previous transaction record, the current transaction record, the card transaction serial number, the card anti-counterfeiting verification code, the card ID, the card expiration date, the county and city code, but only as an example and not as a limitation.

Please refer to FIG. 4 , in one embodiment, if the transaction request T is the added value request, then the application program APP executed by the mobile device 101 verifies whether the chip card C is based on the card information I in the driver processor 1011 Before the valid card (that is, before step S1 in Fig. 3 is executed), the transaction data of the card information I read from the chip card C by driving the communication module 1012 can at least include the previous transaction record, the This transaction record, the card transaction serial number, the bank code, the automatic add-on flag, the add-on value-added transaction amount, and the value-added transaction date. As for other data fields that may be included in the transaction data, they have been mentioned above and will not be repeated here.

Please refer to FIG. 4 , in one embodiment, if the transaction request T is the added-value request, then the application program APP executed by the mobile device 101, in order to drive the processor 1011 to verify whether the chip card C is based on the card information I For a valid card (that is, when step S1 in FIG. 3 is executed), the card information I read by the communication module 1012 of the mobile device 101 from the chip card C based on the first wireless communication protocol P1 may include the card data, all One or a combination of the transaction data, the verification data and the identity data (the types have been mentioned above, and will not be repeated here), in this embodiment, may include, for example, the card ID, the card account Balance (EV), the previous transaction record, the current transaction record, the card transaction serial number, the card anti-counterfeiting verification code, the card identity, the card expiration date, the county code , the bank code, the automatic value-added flag, the value-added transaction amount, and the value-added transaction date are for example only and not limited thereto.

Please refer to Figure 5, which is a schematic diagram of the chip card transaction system of another embodiment (2) of this creation, which is similar to the technology of the embodiment shown in Figures 1 to 3, and refer to Figures 1 to 3 for collocation 3, the main difference is that the card management subsystem 1022 of the backend server 102 in this embodiment is used to verify whether the chip card C is a valid card, and the card management subsystem 1022 stores card information corresponding to the chip card C I', in contrast, the memory 1013 of the mobile device 101 of this embodiment does not store the card information I', or does not store the complete card information I', so the mobile device 101 cannot verify whether the chip card C is valid card.

Please refer to Fig. 5, and please refer to Fig. 1 to Fig. 3 together. In this embodiment, the application program APP uses the first wireless communication protocol P1 to communicate with the chip card C in the drive communication module 1012 for wireless communication. After the chip card C reads the card information I, the application program APP needs to drive the communication module 1012 to use the second wireless communication protocol P2 to communicate with the back-end server 102 through the Internet to send at least one card chip verification request to the backend server 102, and then the backend server 102 can compare the received card information I with the card information I' stored in its own memory (not shown in the figure) to verify the chip Whether card C is a valid card. In this way, after the communication module 1012 receives the card verification result C_V in a second mode connected to the backend server 102, the user can confirm the card verification result C_V in the application program APP (for example, the card verification is successful).

Please refer to Figure 5, and please also refer to Figures 1 to 3. In this embodiment, the aforementioned technical means for card verification by the backend server 102 instead of the mobile device 101 can also be responded to in the application program APP Execute again when the risk score R_S does not meet the decision-making condition.

Please refer to Fig. 5 again, and please refer to Fig. 1 to Fig. 3 together. In this embodiment, the transaction subsystem 1021 of the backend server 102 can also be used to determine whether to allow the transaction request T of the chip card C, and The transaction subsystem 1021 stores the card information I' corresponding to the chip card C; in contrast, the memory 1013 of the mobile device 101 of this embodiment does not store the card information I', or does not store the complete card information I' , but cannot allow the transaction request T of the chip card C. More specifically, after the application program APP of this embodiment drives the communication module 1012 to use the first wireless communication protocol P1 to perform wireless communication with the chip card C to read the card information I from the chip card C, the application program APP drives The communication module 1012 uses the second wireless communication protocol P2 to communicate with the back-end server 102 through the Internet to send the transaction request T of the chip card C to the back-end server 102. Afterwards, the transaction subsystem 1021 can be based on the card The verification result C_V (no matter it is produced by the card management subsystem 1022 of the mobile device 101 or the back-end server 102), the risk score R_S and the card information I determine whether to allow the transaction request T. After that, the back-end server 102 can at least Send a transaction request result T_A to the communication module 1012, so that the communication module 1012 receives the transaction request result T_A in the second mode connected to the backend server 102, and then uses the first wireless communication protocol P1 to associate After the update of the transaction request T The card information I_U is written in the chip card C, so that the user can confirm the transaction request result T_A (such as transaction approval) in the application program APP.

Please refer to Fig. 5 again, and please refer to Fig. 1 to Fig. 3 together. In this embodiment, the backend server 102 rather than the mobile device 101 decides whether to allow the technical means of the transaction request T of the chip card C , may be executed again when the application program APP responds that the risk score R_S does not meet the decision condition.

Among them, as an example, the mobile device 101 of this creation can be a portable wireless communication device such as a smart phone, a tablet computer, a wearable device, and the operating system of the mobile device 101 can be an Android system or an iOS system, but this is not a limitation limit.

Wherein, as an example, the back-end server 102 of this creation can be one or more independent server computers that provide connection services, or a server running in the form of a virtual machine (Virtual Machine), or a virtual dedicated host (Virtual Dedicated Host) Private Server), or a public cloud, or a private cloud, etc., but not limited thereto.

Please refer to Figures 1 to 2, where, as an example, the application program APP of this creation can be a native application program (Native Mobile App) loaded on the mobile device 101, or can be executed/operated on the mobile device 101 A mobile web application (Web Mobile App) or a progressive web application (Progressive Web App, PWA), but both are not limited thereto.

Among them, as an example, the processor 1011 of the present invention has functions such as logic operation, temporary storage of operation results, storage of data operation instruction positions, etc., which may include but not limited to a single processor and the integration of multiple microprocessors, for example, it may include a Central Processing Unit (CPU), a Virtual Processor (vCPU), a Microprocessor (MPU), a Microcontroller (MCU), an Application Specific Integrated Circuit (ASIC), and a Programmable Logic Device (PLD) , a tensor processor (TPU), a digital signal processor (DSP), etc., but not limited thereto.

Wherein, as an example, the communication module 1012 of this invention can apply various communication service interfaces, for example, it can integrate a Bluetooth communication unit, a WLAN communication unit, a mobile communication unit, an NFC communication unit, a ZigBee communication unit, a One of the Z-Wave communication unit and a UWB communication unit or any combination thereof, wherein the mobile communication unit can apply 2G, 2.5G, 3G, 3.5G, 4G LTE, 5G wireless communication interfaces, but not This is the limit.

Wherein, as an example, the memory 1013 of this creation can be eMMC (embedded MultiMedia Card) flash memory, UFS (Universal Flash Storage) flash memory, NVMe (NVM Express) flash memory, solid-state drive (solid- state drive/disk), LPDDR (Low Power Random Access Memory) memory, dynamic random access memory (DRAM) or static random access memory (SRAM), as a non-transitory (non-transitory) computer can After reading the medium, the memory 1013 can further store at least one instruction related to the implementation method S of the aforementioned chip card transaction system, and the at least one instruction can be accessed and executed by the processor 1011.

Wherein, as an example, the chip card C of this invention can be a credit card, a cash stored-value card, a stored-value card with electronic payment account, a charge Financial card (debit card), one RFID chip card, one citizen card/one respect card/one love card/one love companion card/one digital student ID card issued by the county and city government with integrated stored-value card function, integrated stored-value card issued by the school function of a student ID card/a staff identification card, one of the chip cards of an identification card issued by an enterprise that integrates the stored value card function, and the chip card C can also be any chip card that meets the EMV standard.

60)，允許行動裝置在離線狀態(或是行動裝置在決定是否允許交易、及驗證晶片卡是否為有效時，毋需連線至後端伺服器的狀態下)，以應用程式(APP)完成晶片卡的線下交易(例如餘額加值/ 儲值、扣款交易、刷卡交易)，達到晶片卡交易可不受限於時間與使用場域的有益功效，有效提升晶片卡即時交易的便利性。 To sum up, it can be seen that after the implementation of this creation, at least under the condition of controllable risk (that is, the risk score meets the decision-making conditions, for example, the risk score R_S

60), allowing the mobile device to be completed in an offline state (or when the mobile device does not need to connect to the back-end server when deciding whether to allow the transaction and verifying whether the chip card is valid), it can be completed with an application program (APP) Offline transactions of chip cards (such as balance addition/stored value, deduction transactions, and card swiping transactions) achieve the beneficial effect that chip card transactions are not limited to time and use fields, and effectively enhance the convenience of chip card instant transactions.

The above are only the preferred embodiments of this creation, and are not intended to limit the scope of implementation of this creation; any equal changes and modifications made by those who are familiar with this skill without departing from the spirit and scope of this creation are all acceptable. It should be covered within the patent scope of this creation.

To sum up, this creation has the patent requirements of "industrial applicability", "novelty" and "progressiveness". The applicant submits an application for a new type patent to the Jun Bureau in accordance with the provisions of the Patent Law.

10: Chip card transaction system

101: Mobile Devices

1011: Processor

1012: Communication module

1013: Memory

APP: application program

P1: The first wireless communication protocol

P2: The second wireless communication protocol

C: chip card

102:Backend server

1021: Transaction Subsystem

1022: Card management subsystem

Claims (6)

A chip card transaction system based on transaction risk control, comprising: A mobile device executing an application program, which includes a communication module and a processor, the processor is electrically connected to the communication module; and The application program is used to drive the communication module to communicate with a chip card using a first wireless communication protocol to read card information from the chip card, the chip card is associated with a risk score based on a risk score generated by risk parameters; where the application for generating a transaction by the processor allowing a transaction request of the chip card in response to the risk score meeting a decision condition in a first mode in which the communication module does not need to be connected to an internet Request a result, and make the communication module use the first wireless communication protocol to write the updated card information associated with the transaction request into the chip card. The chip card transaction system based on transaction risk control of claim 1, wherein the card information is one or a combination of card data, transaction data, verification data, and identity data. The chip card transaction system based on transaction risk control of claim 2, wherein the risk parameter is one or a combination of the card data, the transaction data, the identity data and a historical transaction information of the chip card. For example, in the chip card transaction system based on transaction risk control of claim 3, wherein the transaction request is a value-adding request or a deduction request, the application program is further used to respond to the risk score meeting the decision-making condition, and in In the first mode, the processor allows the value-added request or the deduction request, and makes the communication module use the first wireless communication protocol to write an updated balance data into a chip card linked e-wallet account. The chip card transaction system based on transaction risk control of claim 3, wherein the application program is further used to make the communication module use a second wireless communication protocol to send a card verification request to a backend server through The Internet route verifies whether the chip card is valid by the back-end server, so that the communication module receives a card verification result in a second mode that needs to be connected to the back-end server. The chip card transaction system based on transaction risk control of claim 5, wherein the application program is further used to make the communication module use the second wireless communication protocol to send the transaction request to the back-end server according to the The card verification result and the risk score are routed through the Internet to the back-end server to determine whether to allow the transaction request, and for the communication module to use the first wireless network after receiving the transaction request result in the second mode. A communication protocol is used to write the updated card information into the chip card.

Images