WO2005008549A1

WO2005008549A1 - A safe transaction system for finance authentication

Info

Publication number: WO2005008549A1
Application number: PCT/CN2004/000114
Authority: WO
Inventors: Chongyu Yao; Jize Li
Original assignee: Chongyu Yao; Jize Li
Priority date: 2003-07-16
Filing date: 2004-02-11
Publication date: 2005-01-27
Also published as: CN1570928A

Abstract

The present invention provides a safe transaction system for finance authentication wherein two stage trade mode is made up of the payer and payee's transaction flow to improve the safety of financial transaction and add manifold server functions. The system includes independent finance authentication center to establish authentication and management server for payer and payee's application, the finance authentication center and the payer's authorized bank and the credit card combination center make up a information communication authentication system to contact the information of finance authentication's process, payer and payee have communicators which transmit transaction information be combined with the finance authentication center, begin with consumption, the payee transmits the authorized amount to the finance authentication center via wireline or wireless line or network to affirm the authorized amount, then financial authorized cipher generated by computer processing in the finance authentication center is transmited to and displayed in the payer's communicator, then payer sends the cipher to the payee to affirm it, finally the authorized bank can appropriate fouds according to the protocol to complete the financial transaction safely.

Description

Financial certification secure transaction system

The invention relates to a financial electronic transaction system, and in particular to a financial authentication secure transaction system that can effectively improve the security and service performance of financial transactions. Background technique

The existing financial electronic transaction system, as shown in FIG. 1, mainly includes a three-way one-way transaction process for consumers, stores, and credit card issuers. When consumers go to the store with a card or conduct transactions online, the store is the only one. The protective measures that can be done are to first confirm the identity of the cardholder and obtain the authorization code of the credit card issuing bank by phone to complete the transaction. This transaction process is commonly known as the one-stage shopping method. During the transaction process, the store may sometimes neglect the verification of the consumer ’s identity, or it may be difficult to verify it, especially during long-distance transactions through the e-commerce network. Therefore, it often happens that the card-issuing bank refuses to pay after the transaction is completed. Happening. In recent years, the number of counterfeit credit cards on the trading market has been widespread. Many of them have been committed by criminal syndicates, illegal shops, or unscrupulous financial companies, or they have colluded with each other. Or stealing money, etc., which often causes major property losses in the store; and the precautionary measures that the card-issuing bank can take in such a transaction mechanism can only ask consumers if the transaction abnormality is found through a voice call from the customer service staff. Consumption of this amount, however, these are post-notifications, and they are not of any help to the security of the transaction; so whether the credit card is lost or the card number is stolen and the amount is stolen, whether the loss amount is tolerated or not often results Disputes between consumers, shops, and banks can even be heard in public places, and so on. The reason should be attributed to the current financial electronic transaction system of the shopping method. The method itself is a wrong method, because any voucher can be forged, even if it is the most refined IC credit card with anti-counterfeiting performance. Credit cards can still be stolen when they fall into the hands of others. Therefore, the transaction mechanism solely based on transaction vouchers is unreliable, which can easily cause property loss. In addition, in the past, credit cards or debit cards and other transaction methods have also been used to allow The financial transaction mechanism has always been confined to the narrow credit card consumer market space.

In view of this, the present inventors continue to study the various shortcomings of the financial electronic transaction system of the current stage of the shopping method in order to improve the security, broadness, and broad service of the financial transaction mechanism, and finally design a highly practical Value of the invention. Content of the invention

The main purpose of the present invention is to overcome the above-mentioned shortcomings of the existing financial electronic transaction system, and provide a financial authentication secure transaction system, which adopts a two-stage shopping method and uses a random combination of financial card authorization passwords generated in real time, directly from consumption. The person (payer) confirms, and then returns to the store (payee), and finally confirms the transaction twice to complete the financial transaction mechanism for the safest consumption. It uses a composite financial card to authorize the password combination function to realize the financial market. Authorize banks and consumers and stores for a win-win maximum protection function; the generation of transactions is not limited to the credit card transaction mechanism. You only need to verify the identity of the consumer in the system, and you can complete the transaction alone, making the application of the financial transaction system more broad.

The object of the present invention is achieved by the following technical solutions.

The financial authentication security transaction system of the present invention includes: at least one independent financial authentication center. The financial authentication center establishes an electronic database with a protective device. The electronic database is provided to consumers (payers) and stores (receivers). ) Apply for the establishment of authentication to provide management services. The electronic database is also provided with a system program for independent calculations processed by the computer. A random set of unique financial authorization passwords is generated instantly by the random random arrangement of the program, and the password is transmitted to consumers. (Payer) to enable consumers (payers) to conduct transactions based on this; the financial certification center and the authorized banks of the consumers (payers) and credit card joint centers each form an information connection certification system to provide financial transaction process information. Need to contact information; The consumer (payer) and the store (receiver) are equipped with at least one messaging device that can send and receive messages. Online transmission and transmission of transaction data; a two-stage shopping method constructed by the above Internet The transaction process is initiated by the consumer (payer) to the store (receiver). The store (receiver) first passes the amount of data authorized by the consumer (payer) through the Internet (or wired and wireless) ) To confirm to the financial certification center, and the financial authorization password generated by the financial certification center through computer processing is immediately transmitted to the consumer (payer) messaging device, and then the consumer (payer) transmits the financial authorization password to The store (beneficiary) confirms that the authorized bank can verify the funding according to the contract and complete the secure financial transaction. '-.

In the aforementioned financial authentication secure transaction system, the financial authorization password is preferably 8 to 16 digits. In the aforementioned financial authentication secure transaction system, the communication device between the consumer and the store is a PDA (wireless area network, GSM, PHS), a mobile phone (GSM, GPRS), or a computer (Internet, GSM, PHS).

The aforementioned financially-certified secure transaction system, in which the consumer (payer) authenticates the credentials during the transaction It is sufficient to provide the number of credit card number, debit card number, ID card number, and passport card number that can be traded by the financial certification center to verify the identity of the trader.

The financial authentication security transaction system of the present invention comprises: at least one independent financial authentication center, the financial authentication center establishes an electronic database with a protective device, and the electronic database is provided to consumers (payers) and stores (payees) Apply for the establishment of certification to provide management services and issue a functional cipher box with multiple sets of functional parameters to the consumer (payer) at the same time; the database is also provided with an independent computing system program processed by the computer, and the program is randomly and randomly compiled A set of "multiple space staggered" authorization password is generated immediately, and the authorization password is transmitted to the consumer (payer) for the consumer (payer) to fill in the blank with the preset functional password box to form a transaction by themselves The required compound financial authorization password is used to conduct transactions according to the compound financial authorization password. The financial authentication center and the authorized bank of the consumer (payer) and the credit card joint center mutually form an information connection authentication system to provide the financial transaction process. Need to contact information; consumers (payers) and stores (payees) Do n’t have at least one messaging device for sending and receiving messages. The messaging device sends transaction data online to the financial certification center through the Internet (or wired and wireless). The above-mentioned internet is used to construct a two-stage shopping transaction process. The process is initiated by the consumer (payer) to the store (receiver). The store (receiver) first transmits the amount of data authorized by the consumer (payer) to the financial certification through the Internet (or wired and wireless) Confirmed by the center; The financial authorization password generated by the financial certification center through computer processing is immediately transmitted to the messaging device of the consumer (payer), and then a functional password box selected by the consumer (payer) by itself, A group of compound financial authorization passwords are compounded and transmitted to the store (receiver) for confirmation. The payer authorizes the bank to verify the funds according to the contract and complete the secure financial transaction.

The aforementioned financial authentication secure transaction system, wherein the financial authorization password is preferably 8 to 16 digits, and multiple staggered spaces of the authorization password are used for sequentially filling the password of the functional password box.

In the aforementioned financial authentication secure transaction system, the authentication credentials of the consumer (payer) during the transaction are the numbers of the credit card number, debit card number, ID card number, and passport card number that are sufficient for the financial authentication center to be able to conduct transactions.

In the aforementioned financial authentication secure transaction system, the functional password box is preset by the financial authentication center as a parameter with a specific authorized service instruction, and this parameter is combined with the gold card authorization password to form a specified transaction required by the consumer (payer). content. .

The foregoing financial authentication secure transaction system is characterized in that the functional password box includes a The group is preset by the financial certification center as a parameter with an alarm emergency rescue instruction. This parameter is used to complete the transaction process when the consumer (payer) is held hostage. The customer service staff of the financial certification center notifies the military police unit to go to the trading place to rescue it quickly. . Brief description of the drawings.

Figure 1 is a schematic diagram of the transaction flow of the existing financial electronic trading system.

FIG. 2 is a block diagram of a financial authentication secure transaction system according to the present invention.

Figure 3 is a block diagram of the system authentication operation of the present invention.

FIG. 4 is a schematic flowchart of a two-stage shopping operation according to the present invention.

FIG. 5 is a schematic diagram of the operation flow of the two-stage password combination of the present invention.

FIG. 6 is a schematic flowchart of a rescue mechanism related to non-spontaneous transactions according to the present invention.

FIG. 7 is a schematic flowchart of a temporary authorization mechanism according to the present invention.

1-Consumer (or payer), 2- Store (or payee), 1A-messaging device, 2A-messaging device, 3-Internet, 4-financial certification center, 4A- computer processing, A-finance certificate Card authorization password, 5-authorized bank, 6-credit card joint center, 7-functional password box, 8-military police unit. Best Mode for Implementing the Invention

As shown in FIG. 2, the financial authentication secure transaction system of the present invention mainly passes transactions between consumers (payers) 1 and stores (receivers) 2 through the Internet (or wired and wireless) 3 and an independent financial authentication Center 4 and each authorized bank 5 and credit card joint center 6 constitute a two-stage shopping method of financial transaction mechanism to improve the security of financial transactions and increase the versatility of its use; of which, the financial certification center 4 is established An electronic database with protective devices is provided to provide management services for consumers (payers) 1 and stores (receivers) 2 to apply for the establishment of authentication. The database is provided with a computer program that processes 4A independent operations. The program's random digital arrangement generates a unique set of financial authorization passwords A that are immediately communicated to the consumer (payer) 1 to conduct transactions; and the financial card authorization password A is preferably 8 to 16 digits. '

The financial authentication center 4 and the authorized bank 5 of the consumer (payer) 1 and the credit card joint center 6 form an information connection authentication system with each other to provide contact information required for the financial transaction process.

The consumer (payer) 1 and the store (payee) 2 each have at least one set of Messaging devices 1A and 2A, the messaging devices 1A and 2A can transmit transaction data online with the financial certification center 4 through the Internet (or wired and wireless) 3; among them, the messaging devices 1A and 2A can be PDA (wireless area network, GSM , PHS), mobile phone (GSM, GPRS) or computer (Internet, GSM, PHS).

A two-stage shopping transaction process is constructed by the above Internet. The process starts from the consumer (payer) 1 to the store (receiver) 2 and the store (receiver) 2 first sends the consumer (payment Party 1) The amount of authorized data is transmitted to the financial certification center 4 through the Internet 3. After confirmation, the financial certification center 4 processes the unique financial card authorization password A generated by the computer 4A and then transmits the message appearing to the consumer (payer) 1. The device 1A, and then the consumer (payer) 1 transmits the authorized financial card authorization password A to the store (receiver) 2 to prevent theft of the password during the transaction. Once the transaction is confirmed, the transaction is completed. The authorized bank 5 can verify the appropriation according to the contract; it is learned that this system uses a two-stage double confirmation transaction mode, which can effectively prevent the fraud of stolen amounts, because the password for each transaction is not fixed ( The computer randomly encodes random numbers), and must complete the final transaction process after the user ’s real identity is confirmed, so it can ensure the entire transaction. Mechanisms of absolute security. ·

Regarding the above-mentioned application for the certification of the financial certification center 4 is for multi-directional users, please cooperate with Figure 3, and the users include consumers (payers) 1, stores (receivers) 2 and other objects who want to trade through the financial system. Before use, you must first register with the financial certification center 4, including: identity authentication (person, organization, company, line number, etc.), authorization limit authentication (bank deposit, financial proof), password reception authentication (message device registration ), Business status certification (operating project), transaction mechanism certification (messaging device registration), etc., relevant certification filing information can be adjusted according to the operation requirements of the financial certification center 4 when the user (user) completes the registration and financial registration The center 4 approves and issues to the consumer (payer) 1 a set of functional cipher boxes 7 including multiple function parameters for backup, and sends to the store (receiver) 2 — the unique coding code of the transaction unit, the relevant consumer ( The operation and use of multiple sets of functional code boxes 7 will be described later.

As mentioned earlier, since the financial certification center 4 issues a functional password box 7 for the consumer (payer) 1 with multiple sets of functional parameters to be used for certification, the following security can be selected for the operation of the system's transaction process. A higher mode of operation is carried out, as shown in Figure 4, which is detailed as follows: The operation of this system is also a two-stage shopping method transaction process constructed by the above-mentioned Internet. This process is also performed by the consumer (payer). Store (receiver) 2 Start transaction after consumption, store (receiver) 2 First transfer consumer (payer) 1 authorization information and the amount to be transacted through the Internet (or wired and wireless) After confirmation to the financial certification center 4, the financial certification center 4 generates a 16-digit digital financial authorization password A with several spaces staggered as shown in the square of FIG. 5 by computer processing, and immediately transmits it to the consumer ( The communication device 1A of the payer) 1 is composed of a set of functional cipher boxes 7 determined by the consumer (payer) 1 to form a complete set of financial authorization passwords. Then the consumer (payer) 1 The authorized compound financial authorization password A is transmitted to the store (payee) 2 to prevent the password from being stolen during the transaction. Once the transaction is confirmed, the transaction is completed and the authorized bank 5 can check the funds according to the contract.

-It is learned that in addition to using the same two-stage double-confirmation transaction mode described above, the system can effectively prevent the fraud of stolen amounts, because the password for each transaction is not fixed (they are randomly randomized by computer programs) (Instantly edited), and at the same time the complete compilation of the final composite financial authorization password A still requires a set of parameter combinations of the functional password box 7 owned by the consumer (payer) 1 itself, so the master of the authorized password Control is completely under the control of the consumer (payer) 1. Only after the identity of the real user is verified can the final transaction process be completed, absolutely avoiding the occurrence of misappropriation, and effectively ensuring the absolute security of the entire transaction mechanism.

The aforementioned composite financial card authorization password A is composed of a consumer (payer) 1 and a preset functional password box 7, which is composed in two phases. The functional password box 7 is developed in advance in the financial certification center 4 It is set to different parameters and each has a specific function instruction according to the contract. The operation method is listed as follows:

First, referring to FIG. 5, a consumer (payer) 1 receives a financial authorization password A transmitted from a financial authentication center 4 by a messenger 1A that can be used to send and receive messages. The group of financial authorization passwords A is The box shown in the figure is a 16-bit space, which shows the 12 random random number codes generated by the instant operation of the financial authorization password A system program; for example, "1-3 678901_3-56" shown in the legend, The code is staggered with a blank space, that is, a functional password box with a four-digit parameter that provides the consumer (payer) 1 with the necessary input function parameters; for example, "0517" shown in the legend, The consumer (payer) 1 composes a complete 567890113Z56 "complete compound financial authorization password A by himself, and the compound financial authorization password A is then transmitted to the store (payee) through the messenger 1A carried by him 2, or Enter the confirmation directly through the messaging device 2A of the store (payee) 2 so that the transaction is completed, and the authorized bank 5 can check the appropriation according to the contract.

Secondly, referring to FIG. 6, the parameters of the functional password box 7 can also be set to a “special emergency rescue code” function, for example, “0000” is displayed in the legend; that is, when the consumer (payer) 1 Personal thieves are restricted to the store (receiver) 2 Extortion and forced involuntary withdrawals At the time of birth, although the consumer (payer) 1 also received the same set of financial authorization password A with twelve digits "1 3-5678901_3-56" and staggered four blank spaces as before, but due to the final composite code The controlling power of the user (payer) 1 is controlled by the consumer (payer) 1. Therefore, the consumer (payer) 1 enters a blank cell with the emergency rescue parameter "0000" in the case where the robber is hosted, etc. Rescue instruction "1Q3½678901Q3 £ 56" composite financial authorization password A, although the financial certification center 4 will confirm the completion of the transaction and appropriate to the other party; however, during the transaction, the financial certification center 4 learns that the consumer (payment At the same time, it will immediately contact the nearest military police unit 8 where the transaction store is located and go to the rescue process as soon as possible, so it can greatly improve the personal safety of the consumer (payer) 1 transaction.

Further, as shown in FIG. 7, the parameters of the functional password box 7 can also be set as the function of “urgently increasing the authorized amount,” for example, “0911” is displayed in the legend; that is, when the consumer ( The payer) 1 is in the airport terminal and wants to take a transportation or other special occasions, and he finds that the authorized amount may be insufficient, the consumer (payer) 1 although he also received the "1-3—5678901—3—56" Financial card authorization password A, but because the consumer (payer) 1 himself enters the parameter "0911" for urgently increasing the authorization amount, it can constitute an emergency authorization instruction "1 ^ 567890U3156" financial card authorization password A, The financial certification center 4 will still agree to complete the transaction and allocate funds to the other party. However, afterwards, the financial certification center 4 will increase the authorized service fee.

The parameter design examples of the functional cipher box and the transaction process of the "two-stage shopping method" listed above can be performed by technical personnel in the industry according to the spirit and function of the present invention, in terms of service parameters, instructions, The system is merged or subdivided, and various operation methods and processes are simplified or complicated to make application changes. However, these possible equivalent changes belong to the design concept of the present invention; according to the financial certification center of the present invention The service centers established by the spirit of the systematic execution method are all included in the protection scope of the patent application of the present invention.

The above are only the preferred embodiments of the present invention, and are not intended to limit the present invention in any form. Any simple modifications, equivalent changes, and modifications made to the above embodiments in accordance with the technical essence of the present invention are still It belongs to the scope of the technical solution of the present invention. Industrial applicability

The beneficial effects of the present invention are: it includes at least one independent financial certification center, which establishes an electronic database with protective devices for consumers (payers) and stores (payees) to apply for establishment of certification Management service. The database is equipped with a computer program for processing independent calculations. The program randomly generates a unique set of financial card authorization passwords and passes them to consumers (payers) through random random number encoding and distribution of the program to conduct transactions; The financial authentication center also needs to establish an information connection authentication system with the authorized bank of the consumer (payer) and the credit card joint center to provide the information required for the financial transaction process; the consumer (payer) and the store (receive the payment) Party) are provided with at least one messaging device that can send and receive messages, and the messaging device can transmit transaction data online with the financial certification center through the Internet (or wired and wireless); the above-mentioned Internet constitutes a two-stage shopping transaction The process is initiated by the consumer (payer) to the store (receiver). The store (receiver) first transmits the amount of data authorized by the consumer (payer) through the Internet (or wired and wireless). Confirm to the financial certification center, the financial certification center's computer-generated financial card authorization password is transmitted immediately and appears in the The consumer (payer) 's messaging device, and then the consumer (payer) transmits the authorization code of the financial card to the store (receiver) for confirmation, and the authorized bank completes the financial security according to the agreement transaction. The financial authentication and secure transaction system of the present invention constitutes a new transaction mechanism and process, which can overcome the shortcomings of the existing one-stage shopping method. Among them, the authentication credentials of a consumer (payer) during a transaction are exemplified by credit card numbers and financial card numbers. , ID card number, passport card number, and other financial certification center certification numbers are available for transactions, there is no doubt that the financial certification security transaction system of the present invention has a very wide use space, not limited to credit card consumption behavior; furthermore, this The invention adopts a two-stage shopping method, which uses a random combination of irreplaceable financial card passwords to double-check to complete the transaction, and has become the most secure financial transaction mechanism for consumption today. In addition, the present invention can adopt a composite finance with a combination of functional parameters The password of the card can achieve the maximum protection function of the win-win between the store, the authorized bank and the consumer in the financial market; it has high industrial application value.

Claims

Rights request

1. A financial authentication security transaction system, comprising: at least one independent financial authentication center, the financial authentication center establishes an electronic database with a protective device, and the electronic database is applied to payers and payees Establish authentication and provide management services. The electronic database is also provided with a system program for independent calculations processed by a computer. A random set of random digital assignments of the program is used to generate a set of unique financial authorization passwords in real time. The payer conducts transactions based on this; The financial certification center and the authorised bank of the payer and the credit card joint center form an information connection authentication system to provide the information required for the financial transaction process; the payer and the payee separately prepare There is at least one messaging device that can send and receive messages. The messaging device communicates transaction data online with the financial certification center through the Internet. The above-mentioned Internet constitutes a two-stage shopping method transaction process. When consumption starts, the payee will pay first The amount of the authorized data of the party is transmitted to the financial certification center for confirmation through the Internet. The financial certification center immediately processed the financial authorization password generated by the computer and then transmitted to the messaging device of the payer. Party confirmed that the authorized bank can verify the appropriation according to the contract and complete the secure financial transaction.

2. The financial authentication secure transaction system according to claim 1, wherein the financial authorization password is preferably 8 to 16 digits.

3. The financial authentication secure transaction system according to claim 1, wherein the communication device between the consumer and the store is a PM wireless area network, a mobile phone, or a computer.

4. The financial authentication security transaction system according to claim 1, wherein the authentication credentials of the payer during the transaction are a credit card number, a financial card number, and an identity sufficient to provide a financial authentication center to authenticate the identity of the trader, that is, to be able to conduct transactions. ID number, passport ID number.

5. A financial certification secure transaction system, comprising: at least one independent financial certification center, the financial certification center establishes an electronic database with a protective device, and the electronic database applies to the payer and payee for establishment Authentication provides management services and a functional password box with multiple sets of functional parameters to the payer at the same time when the case is registered; the database also has an independent computing system program processed by the computer, and a random random digital arrangement of the program generates a group immediately " A multi-space staggered "authorization password" is transmitted to the payer for the payer to fill in the blank with the preset functional password box to form a composite financial authorization password required for a transaction. According to the composite finance Authorized password for transaction; The financial certification center and the authorizing bank of the payer and the credit card joint center each form an information connection authentication system to provide the information required for the financial transaction process; the payer and the payee each have at least one group A messaging device for sending and receiving messages. The messaging device communicates transaction data online with a financial certification center via the Internet; a two-stage shopping process is constructed from the above-mentioned Internet. First, the amount of authorized data of the payer is transmitted to the financial certification center via the Internet for confirmation; the financial authorization password generated by the financial certification center through computer processing is immediately transmitted to the messaging device of the payer, and then the payer selects a set of parameters The functional password box is composed of a set of composite financial authorization passwords, which are transmitted to the payee for confirmation. The payer authorizes the bank to verify the appropriation according to the contract and complete the secure financial transaction.

6. The financial authentication and secure transaction system according to claim 5, wherein the financial authorization password is preferably 8 to 16 digits, and a plurality of staggered spaces of the authorization password are provided for the function password box password. Orderly fill in the combination.

7. The financial authentication secure transaction system according to claim 5, wherein the authentication credentials of the payer during the transaction are credit card numbers, financial card numbers, ID numbers, Passport number.

8. The financial authentication secure transaction system according to claim 5, wherein the functional password box is preset by a financial authentication center as a parameter with a specific authorized service instruction, and the parameter is combined with a financial card authorization password , Constituting the specified transaction content required by the payer.

9. The financial authentication secure transaction system according to claim 5, wherein the functional password box includes a set of parameters preset by a financial authentication center to have an alarm emergency rescue instruction, and the parameters are provided to the person of the payer. When being held, the transaction process was completed, and the customer service staff of the Financial Certification Center informed the military and police units to quickly go to the transaction site for rescue.