WO2014079347A1 - 一种动态口令牌及动态口令生成方法 - Google Patents

一种动态口令牌及动态口令生成方法 Download PDF

Info

Publication number
WO2014079347A1
WO2014079347A1 PCT/CN2013/087343 CN2013087343W WO2014079347A1 WO 2014079347 A1 WO2014079347 A1 WO 2014079347A1 CN 2013087343 W CN2013087343 W CN 2013087343W WO 2014079347 A1 WO2014079347 A1 WO 2014079347A1
Authority
WO
WIPO (PCT)
Prior art keywords
challenge code
dynamic password
transaction information
display screen
module
Prior art date
Application number
PCT/CN2013/087343
Other languages
English (en)
French (fr)
Inventor
李东声
Original Assignee
天地融科技股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 天地融科技股份有限公司 filed Critical 天地融科技股份有限公司
Publication of WO2014079347A1 publication Critical patent/WO2014079347A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
    • H04L9/3228—One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash

Definitions

  • the present invention relates to the field of electronic technologies, and in particular, to a dynamic port token and a dynamic password generating method. Background technique
  • the existing One Time Password (OTP) based on the challenge response mode generates a dynamic password according to the input challenge code, so as to use the dynamic password as the network transaction password to complete the network transaction.
  • OTP One Time Password
  • phishing websites are usually pretending to be bank or e-commerce websites, sending challenge codes containing transaction information to users through e-mail, mobile phone text messages, etc., and enticing users to generate dynamic passwords generated by OTP according to challenge codes. Feedback to the phishing website, the phishing website can use the dynamic password to steal the user's funds. Therefore, the existing OTP has great security risks. Summary of the invention
  • the present invention aims to solve the security problem of the existing dynamic password.
  • the main object of the present invention is to provide a dynamic port token.
  • the main object of the present invention is to provide yet another dynamic port token.
  • One aspect of the present invention provides a dynamic port token, where the dynamic port token includes: a parsing module, parsing the received challenge code to obtain identifiable transaction information, And outputting the transaction information to the display screen; and pressing, when the transaction information displayed on the display screen is correct, receiving the first confirmation instruction, and outputting the first confirmation instruction to the OTP generation module; the OTP generation module, according to the The first confirmation command of the button and the challenge code generate a dynamic password, and output the dynamic password to the display screen; the display screen displays the transaction information output by the parsing module and the dynamic password generated by the OTP generation module.
  • the dynamic port token further includes: a receiving module, receiving the input challenge code, and outputting to the display screen display; the button further receiving a second confirmation command when the challenge code displayed on the display screen is correct, and And outputting the second confirmation instruction to the receiving module; and the receiving module outputs the challenge code to the parsing module according to the second confirmation instruction.
  • the dynamic port token further includes: a storage module, configured to save at least one account information; the parsing module compares the obtained transaction information with the account information in the storage module, and if the comparison is inconsistent, the identifier information is also output The information is displayed on the display.
  • the receiving module is an NFC module, a Bluetooth module, or a radio frequency module.
  • the receiving module includes: a light receiving unit and a decoding unit; the decoding unit is connected to the light receiving unit and the display screen; and the light receiving unit converts the received optical signal into an electrical signal, and outputs the signal to the Decoding unit; the decoding unit decodes the electrical signal to obtain a challenge code, and outputs the challenge code to the display screen.
  • a dynamic port token including: a display screen, the dynamic port token further comprising: an analysis chip; the parsing chip is connected to the display screen; and the parsing chip parses the received challenge code to obtain The transaction information is identifiable, and the transaction information is output to the display screen.
  • the dynamic port token further includes: a confirmation key; the confirmation key receives a first confirmation instruction when the transaction information displayed on the display screen is correct; the dynamic port token is according to the first confirmation instruction and the The challenge code generates a dynamic password.
  • the transaction information includes at least a transaction account number and a transaction amount.
  • Another aspect of the present invention provides a dynamic password generating method, the method comprising: parsing a received challenge code to obtain identifiable transaction information; outputting the transaction information; determining whether the transaction information is correct; After the transaction information is correct, the first confirmation instruction is received; the dynamic password is generated according to the first confirmation instruction and the challenge code, and the dynamic password is output and displayed.
  • the method further includes: receiving an input challenge code; determining whether the challenge code is correct; and after determining that the challenge code is correct, receiving a second confirmation instruction; The second confirmation instruction performs the step of parsing the received challenge code.
  • the method further includes: storing at least one account information; after the step of obtaining the transaction information, the method further comprises: comparing the obtained transaction information with the stored account information, and if the comparison is inconsistent, outputting the display identifier information.
  • the transaction information includes at least a transaction account number and a transaction amount.
  • the present invention provides a dynamic port token and a dynamic password generating method, which can parse out key information of a transaction (such as an account number according to the input challenge code after detecting the input challenge code. And the amount), and displayed to the user, so that the user can understand the specific circumstances of the transaction, thereby preventing the dynamic password from being improperly used, resulting in insecure user account.
  • key information of a transaction such as an account number according to the input challenge code after detecting the input challenge code. And the amount
  • FIG. 1 is a schematic structural diagram of a dynamic port token according to Embodiment 1 of the present invention.
  • FIG. 2 is a schematic structural diagram of another dynamic port token according to Embodiment 1 of the present invention.
  • FIG. 3 is a flowchart of a dynamic password generating method according to Embodiment 1 of the present invention.
  • FIG. 4 is a schematic structural diagram of a dynamic port token according to Embodiment 2 of the present invention.
  • FIG. 5 is a flowchart of a method for generating a dynamic password according to Embodiment 2 of the present invention.
  • FIG. 6 is a schematic structural diagram of a dynamic port token according to Embodiment 3 of the present invention.
  • FIG. 7 is a schematic structural diagram of a receiving module of a dynamic port token according to Embodiment 3 of the present invention. detailed description
  • connection In the description of the present invention, it should be noted that the terms “installation”, “connected”, and “connected” are to be understood broadly, and may be fixed or detachable, for example, unless otherwise explicitly defined and defined. Connected, or connected integrally; can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components.
  • Connected, or connected integrally can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components.
  • the specific meaning of the above terms in the present invention can be understood in a specific case by those skilled in the art.
  • a dynamic port token 10 is provided.
  • the dynamic port token 10 includes: a parsing module 101, a button 102, an OTP generating module 103, and a display screen 104.
  • the user initiates a network transaction on the website.
  • the bank server calculates the transaction related data and generates a challenge code, and informs the user of the challenge code (for example: by SMS) or through wired/wireless communication.
  • the method is sent from the terminal (eg, PC, mobile terminal, mobile phone, PAD, etc.) to the dynamic port token 10.
  • the parsing module 101 After receiving the challenge code obtained by the user manually or through wired/wireless communication, the parsing module 101 parses the challenge code by using a pre-stored parsing algorithm matching the challenge code generation algorithm to obtain identifiable transaction information, and outputs Transaction information is sent to display 104.
  • the transaction information includes at least a transaction account number and a transaction amount.
  • the challenge code generation algorithm and the analysis algorithm use a symmetric algorithm or a reversible algorithm
  • the parsing module 101 can use the parsing algorithm to obtain transaction information when the challenge code is generated from the received challenge code, and the transaction information is intuitively available to the user.
  • identification for example: The user can intuitively identify the transaction account number and transaction amount from the transaction information.
  • the display 104 displays the transaction information (such as the transaction account number and the amount), the user confirms, for example, the transaction account number and the amount information by reading the transaction information, and if the user approves the transaction, press the confirmation button in the button 102. Confirming that the button 102 receives the first confirmation command, and outputs the first confirmation command to the OTP generation module 103; if the user does not approve the transaction, the dynamic password may not be generated without pressing the confirmation button in the button 102; The cancel button in the button 102 is pressed to not perform the dynamic password generating operation.
  • the transaction information such as the transaction account number and the amount
  • the OTP generation module 103 After receiving the first confirmation command input by the button 102, the OTP generation module 103 generates a dynamic password according to the pre-stored dynamic password generation algorithm and the challenge code, and outputs the dynamic password to the display screen 104 for the user to view.
  • the display screen 104 is used to display the transaction information output by the parsing module 101 and the dynamic password generated by the OTP generating module 103.
  • the embodiment further provides a dynamic port token 20, as shown in FIG. 2, comprising: a display screen 201, an analysis chip 202, and a confirmation key 203; and an analysis chip 202 connected to the display screen 201.
  • the user initiates a network transaction on the website.
  • the bank server calculates the transaction related data and generates a challenge code, and informs the user of the challenge code (for example: by SMS) or through wired/wireless communication.
  • the method is sent from the terminal (eg, PC, mobile terminal, mobile phone, PAD, etc.) to the dynamic port token 20.
  • the parsing chip 202 parses the challenge code by using a pre-stored parsing algorithm matched with the challenge code generation algorithm to obtain identifiable transaction information, and outputs
  • the transaction information is displayed on the display 201.
  • the transaction information includes at least a transaction account number and a transaction amount.
  • the challenge code generation algorithm and the analysis algorithm use a symmetric algorithm or a reversible algorithm
  • the parsing module 101 can use the parsing algorithm to obtain transaction information when the challenge code is generated from the received challenge code, and the transaction information is intuitively available to the user.
  • identification for example: The user can intuitively identify the transaction account number and transaction amount from the transaction information.
  • the display 201 displays the transaction information (such as the transaction account number and the amount), the user confirms, for example, the transaction account number and the amount information by reading the transaction information, and if the user approves the transaction, press the confirm button 203 to confirm.
  • the confirmation key 203 receives the confirmation command and outputs the confirmation command to the dynamic port token 20.
  • the dynamic port token 20 After receiving the confirmation command, the dynamic port token 20 generates a dynamic password according to the pre-stored dynamic password generation algorithm and the challenge code, and outputs the dynamic password to the display 201 for the user to view.
  • the dynamic port token shown in FIG. 2 is compared with the dynamic port token shown in FIG. 1.
  • the dynamic port token shown in FIG. 2 adopts an analysis chip, and implements the parsing challenge code to obtain identifiable transaction information and generate according to the challenge code. Dynamic passwords reduce hardware costs.
  • Step S101 Parse the received challenge code to obtain identifiable transaction information.
  • the challenge code is parsed by using a pre-stored parsing algorithm matching the challenge code generation algorithm to obtain identifiable transaction information.
  • the transaction information includes at least key information such as the transaction account number and transaction amount, so that the user can check the account number and the amount to prevent the dynamic password from being improperly used, resulting in insecure user funds.
  • Step S102 outputting display transaction information.
  • Step S103 determining whether the transaction information is correct
  • the user checks the displayed transaction information (for example: transaction account number and transaction amount) to determine whether it is correct. If yes, proceed to step S104; if not, terminate the operation.
  • the displayed transaction information for example: transaction account number and transaction amount
  • Step S104 after determining that the transaction information is correct, receiving a confirmation instruction.
  • Step S105 Generate a dynamic password according to the confirmation command and the challenge code, and output a dynamic password.
  • the dynamic port token after receiving the confirmation command, the dynamic port token generates a dynamic password according to the challenge code and the algorithm, and outputs a dynamic password.
  • the embodiment provides a dynamic port token and a dynamic password generating method, which can parse out key information (such as an account number and an amount) of a transaction that can be intuitively recognized by the user according to the input challenge code after detecting the input challenge code. And displayed to the user, so that the user can understand the specific circumstances of the transaction, thereby preventing the dynamic password from being improperly used, resulting in insecure user account.
  • key information such as an account number and an amount
  • a dynamic port token 30 is provided. As shown in FIG. 4, the dynamic port token 30 includes: an parsing module 301, a button 302, an OTP generating module 303, a display screen 304, and a receiving module 305.
  • the receiving module 305 receives the challenge code input by the user and outputs it to the display screen 304 for display, so that the user can check whether the challenge code displayed on the display screen 304 is correct. If the input is correct, the user presses the button 302 to confirm, and the button 302 receives the user's number. Second, the instruction is confirmed, and the second confirmation instruction is output to the receiving module 305, and the receiving module 305 outputs the challenge code to the parsing module 301 according to the second confirmation instruction.
  • the receiving module 305 can adopt a wireless communication module such as an NFC module, a Bluetooth module, or a radio frequency module, so that when the dynamic port token 30 and the terminal are within a reliable communication distance, the dynamic port token 30 can be directly accessed from the terminal by wireless (for example: The PC, mobile terminal, mobile phone, PAD, etc. receive the challenge code without manual input by the user, which reduces the cumbersome operation of the user and improves the speed and reliability of the process of generating the dynamic password.
  • a wireless communication module such as an NFC module, a Bluetooth module, or a radio frequency module
  • the parsing module 301 parses the challenge code by using a pre-stored parsing algorithm matching the challenge code generation algorithm to obtain identifiable transaction information, and outputs the transaction information to the display 304.
  • the transaction information includes at least a transaction account number and a transaction amount.
  • the challenge code generation algorithm and the analysis algorithm use a symmetric algorithm or a reversible algorithm, so that the parsing module 301 can recover the medium transaction information from the challenge code.
  • the display screen 304 displays the transaction information (such as the transaction account number and the amount), the user confirms, for example, the transaction account number and the amount information by reading the transaction information, and if the user approves the transaction, press the confirm button 302 in the button. Confirming, the button 302 receives the first confirmation command, and outputs the first confirmation command to the OTP generation module 303; if the user does not approve the transaction, the dynamic password may not be generated without pressing the confirmation button in the button 302; The cancel button in the button 102 is pressed to not perform the dynamic password generating operation.
  • the transaction information such as the transaction account number and the amount
  • the OTP generation module 303 After receiving the first confirmation command input by the button 302, the OTP generation module 303 generates a dynamic password according to the pre-stored dynamic password generation algorithm and the challenge code, and outputs the dynamic password to the display screen 304 for the user to view.
  • the display screen 304 is used to display the challenge code output by the receiving module 305, the transaction information output by the parsing module 301, and the dynamic password generated by the OTP generating module 303.
  • the dynamic port token 30 can also include a storage module 306.
  • the storage module 306 is configured to save at least one account information to store a trusted account list in the dynamic port token 30.
  • the parsing module 301 obtains the transaction information (for example, the transaction account number and the transaction amount) by parsing the challenge code, the obtained transaction account number is compared with the pre-stored account information in the storage module 306, and if the comparison is inconsistent, the identifier is also output.
  • the information display screen 304 is displayed. For example, when the acquired account to be traded is not in the storage module 306, the display screen 304 also outputs the words "the account is a non-trusted account" after outputting the transaction information.
  • Another embodiment of the present invention further provides a dynamic password generating method. As shown in FIG. 5, the method includes: Step S201: Receive an input challenge code.
  • the challenge code obtained by the user manually or obtained through wired/wireless communication is received.
  • Step S202 Determine whether the challenge code is correct.
  • step 203 if the user checks that the challenge code input is correct, step 203 is performed; if not, the process jumps to step S201. Step S203, after determining that the challenge code is correct, receiving a confirmation command.
  • step S204 step S205 is performed according to the confirmation instruction.
  • Step S205 Parse the received challenge code to obtain identifiable transaction information.
  • the challenge code is parsed by using a pre-stored parsing algorithm matching the challenge code generation algorithm to obtain identifiable transaction information.
  • the transaction information includes at least key information such as the transaction account number and transaction amount, so that the user can check the account number and the amount to prevent the dynamic password from being improperly used, resulting in insecure user funds.
  • step S206 the transaction information is displayed and displayed.
  • Step S207 Compare the obtained transaction information with the stored account information, and if the comparison is inconsistent, output display identification information.
  • At least one account information in the dynamic port token is used to save the trusted account list in the dynamic port token, and compare the obtained account information.
  • Step S208 determining whether the transaction information is correct
  • the user checks the displayed transaction information (for example: transaction account number and transaction amount) to determine whether it is correct. If yes, proceed to step S209; if not, terminate the operation.
  • the displayed transaction information for example: transaction account number and transaction amount
  • Step S209 after determining that the transaction information is correct, receiving a confirmation instruction.
  • the user confirms by pressing the button, and the dynamic port token receives the confirmation command.
  • Step S210 Generate a dynamic password according to the confirmation command and the challenge code, and output a dynamic password.
  • the dynamic port token after receiving the confirmation command, the dynamic port token generates a dynamic password according to the challenge code and the algorithm, and outputs a dynamic password.
  • the embodiment provides a dynamic port token and a dynamic password generating method.
  • the key information (such as an account number and an amount) of the transaction is parsed according to the input challenge code, and displayed to the user for the user. Being able to understand the specifics of the transaction, thereby preventing the dynamic password from being improperly used, resulting in insecure user account.
  • Example 3
  • the difference between the embodiment and the embodiment 2 is that the receiving module of the embodiment uses the optical transmission mode for information transmission.
  • the dynamic port token 40 is provided in this embodiment. As shown in FIG. 6, the dynamic port token 40 includes: a parsing module 401, a button 402, an OTP generating module 403, a display screen 404, and a receiving module 405.
  • the dynamic port token shown in FIG. 6 may further include a storage module 406.
  • connection relationship and structure of the parsing module, the button, the OTP generating module, and the display screen in the embodiment shown in FIG. 6 are the same as those in the embodiment shown in FIG. 4.
  • the storage module further included in the embodiment shown in FIG. 6 is shown in FIG.
  • the structure and the connection relationship of the storage module further included in the embodiment are the same, and the same portions are not described herein again.
  • the embodiment of the embodiment is different from the embodiment shown in FIG. 4, that is, the structure of the receiving module 405 is as follows:
  • the structure of the receiving module 405 is as shown in FIG. 7, and includes: a light receiving unit 4051 and a decoding unit 4052; and a decoding unit 4052. It is connected to the light receiving unit 4051 and the display screen 404.
  • the light receiving unit 4051 receives the optical signal including the challenge code information, and converts the optical signal into an electrical signal that can be transmitted on the line, and outputs it to the decoding unit 4052.
  • the decoding unit 4052 decodes the electrical signal to obtain a challenge code, and outputs the challenge code to the display screen 404 for display by the user.
  • the decoding unit 4052 may output the challenge code to the parsing module 401 according to the second confirmation instruction.
  • the light receiving unit 4051 enables the dynamic port token 40 to receive the challenge code directly from the terminal (eg, PC, mobile terminal, mobile phone, PAD, etc.) by optical transmission without requiring manual input by the user, thereby reducing the cumbersome operation of the user, and simultaneously Improves the speed and reliability of the process of generating dynamic passwords.
  • the optical transmission method has strong anti-interference ability, which improves transmission speed and reliability while reducing costs.
  • the embodiment provides a dynamic port token, which can parse out key information (such as account number and amount) of the transaction according to the input challenge code after detecting the input challenge code, since the input challenge code is a string of numbers, In the string number, the transaction information cannot be visually recognized. Through the parsing operation, the transaction information that can be directly recognized by the user can be obtained from the challenge code, and the output is displayed to the user, so that the user can understand the specific situation of the transaction, thereby preventing the dynamic password from being improperly used. , causing the user's fund account to be insecure.
  • key information such as account number and amount
  • portions of the invention may be implemented in hardware, software, firmware or a combination thereof.
  • multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system.
  • a suitable instruction execution system For example, if implemented in hardware, as in another embodiment, it can be implemented with any one or combination of the following techniques well known in the art: having logic gates for implementing logic functions on data signals Discrete logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.
  • each functional unit in each embodiment of the present invention may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module.
  • the above integrated modules can be implemented in the form of hardware or in the form of software functional modules.
  • the integrated modules, if implemented in the form of software functional modules and sold or used as separate products, may also be stored in a computer readable storage medium.
  • the above-mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like.
  • the description of the terms “one embodiment”, “some embodiments”, “example”, “specific example”, or “some examples” and the like means a specific feature described in connection with the embodiment or example.
  • a structure, material or feature is included in at least one embodiment or example of the invention.
  • the schematic representation of the above terms does not necessarily mean the same embodiment or example.
  • the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Finance (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Telephone Function (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

本发明提供了一种动态口令牌，该动态口令牌包括：解析模块，解析接收的挑战码以获得可识别的交易信息，并输出所述交易信息至显示屏；按键，在所述显示屏显示的交易信息正确时，接收第一确认指令，并输出所述第一确认指令至OTP生成模块；OTP生成模块，根据所述按键的第一确认指令及所述挑战码生成动态口令，并输出所述动态口令至显示屏；显示屏，显示所述解析模块输出的交易信息及所述OTP生成模块生成的动态口令。本发明提供的动态口令牌能够在检测到输入挑战码后，根据输入的挑战码解析出交易的关键信息（如帐号和金额），并显示给用户，以便用户能够了解交易的具体情况，从而防止动态口令被不当使用，造成用户资金账户的不安全。

Description

一种动态口令牌及动态口令生成方法
技术领域
本发明涉及电子技术领域， 尤其涉及一种动态口令牌及动态口令生成方法。 背景技术
现有的基于挑战应答模式的动态口令牌 （One Time Password, OTP) 根据输入的挑战 码生成动态口令， 以便利用该动态口令作为网络交易密码， 完成网络交易。
在现有的网络安全体制下， 钓鱼网站通常伪装成银行或电子商务网站， 通过电子邮件、 手机短信等渠道向用户发送包含交易信息的挑战码， 诱使用户将 OTP根据挑战码生成的动 态口令反馈给钓鱼网站， 钓鱼网站可利用该动态口令盗取用户的资金。 因此， 现有的 OTP 存在极大安全隐患。 发明内容
本发明旨在解决现有的动态口令的安全问题。
本发明的主要目的在于提供一种动态口令牌。
本发明的主要目的在于提供又一种动态口令牌。
本发明的主要目的在于还提供一种动态口令生成方法。
为达到上述目的， 本发明的技术方案具体是这样实现的： 本发明一方面提供了一种动 态口令牌， 该动态口令牌包括： 解析模块， 解析接收的挑战码以获得可识别的交易信息， 并输出所述交易信息至显示屏； 按键， 在所述显示屏显示的交易信息正确时， 接收第一确 认指令， 并输出所述第一确认指令至 OTP生成模块； OTP生成模块， 根据所述按键的第一 确认指令及所述挑战码生成动态口令， 并输出所述动态口令至显示屏； 显示屏， 显示所述 解析模块输出的交易信息及所述 OTP生成模块生成的动态口令。
此外， 该动态口令牌还包括： 接收模块， 接收输入的挑战码， 并输出至所述显示屏显 示； 所述按键还在所述显示屏显示的挑战码正确时， 接收第二确认指令， 并输出所述第二 确认指令至所述接收模块； 所述接收模块根据所述第二确认指令， 输出所述挑战码至所述 解析模块。
此外， 该动态口令牌还包括： 存储模块， 保存至少一个账号信息； 所述解析模块将获 得的交易信息与所述存储模块中的账号信息进行比对， 如果比对不一致， 则还输出标识信 息至所述显示屏显示。
此外， 所述接收模块为 NFC模块、 蓝牙模块或射频模块。
此外， 所述接收模块包括： 光接收单元及解码单元； 所述解码单元连接所述光接收单 元及所述显示屏； 所述光接收单元将接收到的光信号转换为电信号， 输出至所述解码单元; 所述解码单元对所述电信号进行解码获得挑战码， 输出所述挑战码至所述显示屏。
本发明另一方面又提供了一种动态口令牌， 包括： 显示屏， 该动态口令牌还包括： 解 析芯片； 所述解析芯片连接所述显示屏； 所述解析芯片解析接收的挑战码以获得可识别的 交易信息， 并输出所述交易信息至所述显示屏显示。
此外， 所述动态口令牌还包括： 确认键； 所述确认键在所述显示屏显示的交易信息正 确时， 接收第一确认指令； 所述动态口令牌根据所述第一确认指令及所述挑战码生成动态 口令。
此外， 所述交易信息至少包含交易账号和交易金额。
本发明另一方面还提供了一种动态口令生成方法， 该方法包括： 解析接收的挑战码， 获得可识别的交易信息； 输出显示所述交易信息； 判断所述交易信息是否正确； 在判断出 所述交易信息正确后， 接收第一确认指令； 根据所述第一确认指令及所述挑战码生成动态 口令， 并输出显示所述动态口令。
此外， 在所述解析接收的挑战码的步骤之前还包括： 接收输入的挑战码； 判断所述挑 战码是否正确； 在判断出所述挑战码正确后， 接收第二确认指令； 根据所述第二确认指令 执行所述解析接收的挑战码的步骤。
此外， 该方法还包括： 存储至少一个账号信息； 在所述获得交易信息的步骤之后还包 括： 将获得的交易信息与存储的所述账号信息进行比对， 如果比对不一致， 则输出显示标 识信息。
此外， 所述交易信息至少包含交易账号和交易金额。
由上述本发明提供的技术方案可以看出， 本发明提供了一种动态口令牌及动态口令生 成方法， 能够在检测到输入挑战码后， 根据输入的挑战码解析出交易的关键信息 （如帐号 和金额）， 并显示给用户， 以便用户能够了解交易的具体情况， 从而防止动态口令被不当使 用， 造成用户资金账户的不安全。 附图说明
为了更清楚地说明本发明实施例的技术方案， 下面将对实施例描述中所需要使用的附 图作简单地介绍， 显而易见地， 下面描述中的附图仅仅是本发明的一些实施例， 对于本领 域的普通技术人员来讲， 在不付出创造性劳动的前提下， 还可以根据这些附图获得其他附 图。
图 1为本发明实施例 1提供的动态口令牌的结构示意图；
图 2为本发明实施例 1提供的又一动态口令牌的结构示意图；
图 3为本发明实施例 1提供的动态口令生成方法流程图；
图 4为本发明实施例 2提供的动态口令牌的结构示意图；
图 5为本发明实施例 2提供的动态口令生成方法流程图；
图 6为本发明实施例 3提供的动态口令牌的结构示意图；
图 7为本发明实施例 3提供的动态口令牌的接收模块的结构示意图。 具体实施方式
下面结合本发明实施例中的附图， 对本发明实施例中的技术方案进行清楚、 完整地描 述， 显然， 所描述的实施例仅仅是本发明一部分实施例， 而不是全部的实施例。 基于本发 明的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例， 都属于本发明的保护范围。
在本发明的描述中， 需要理解的是， 术语"中心"、 "纵向"、 "横向"、 "上"、 "下"、 "前"、 "后"、 "左"、 "右"、 "竖直"、 "水平"、 "顶"、 "底"、 "内"、 "外"等指示的方位或位置关系为 基于附图所示的方位或位置关系， 仅是为了便于描述本发明和简化描述， 而不是指示或暗 示所指的装置或元件必须具有特定的方位、 以特定的方位构造和操作， 因此不能理解为对 本发明的限制。 此外， 术语"第一"、 "第二 "仅用于描述目的， 而不能理解为指示或暗示相 对重要性或数量或位置。
在本发明的描述中，需要说明的是，除非另有明确的规定和限定，术语"安装"、"相连"、 "连接 "应做广义理解， 例如， 可以是固定连接， 也可以是可拆卸连接， 或一体地连接； 可 以是机械连接， 也可以是电连接； 可以是直接相连， 也可以通过中间媒介间接相连， 可以 是两个元件内部的连通。 对于本领域的普通技术人员而言， 可以具体情况理解上述术语在 本发明中的具体含义。
下面将结合附图对本发明实施例作进一步地详细描述。 实施例 1
本实施例一方面提供了一种动态口令牌 10， 如图 1所示， 该动态口令牌 10包括： 解析模 块 101、 按键 102、 OTP生成模块 103、 以及显示屏 104。 用户在网站上发起一笔网络交易， 银行服务器在接收到交易数据后， 对交易的相关数 据进行运算并生成挑战码， 将挑战码告知用户 （例如： 通过手机短信方式） 或者通过有线 / 无线通信方式从终端 （例如： PC、 移动终端、 手机、 PAD等） 发送至动态口令牌 10。 解析 模块 101在接收到用户手动输入或者通过有线 /无线通信获得的挑战码后， 利用预存的与挑 战码生成算法相匹配的解析算法对挑战码进行解析， 以获得可识别的交易信息， 并输出交 易信息至显示屏 104。 其中， 交易信息至少包含交易账号和交易金额。
具体的， 挑战码生成算法和解析算法采用对称算法或可逆算法， 解析模块 101可以利用 该解析算法， 从接收到的挑战码中获得生成挑战码时的交易信息， 该交易信息可供用户直 观地进行辨认， 比如： 用户可从该交易信息中直观地辨认出交易账号和交易金额等信息。
当显示屏 104显示出交易信息 （如交易帐号和金额）后， 用户通过阅读交易信息， 对例 如交易帐号和金额信息等进行确认，如用户认可该笔交易则按下按键 102中的确认键进行确 认， 按键 102接收第一确认指令， 并将该第一确认指令输出至 OTP生成模块 103; 如用户不 认可该笔交易， 可以不按按键 102中的确认键， 则不会生成动态口令； 或者按下按键 102中 的取消键， 以不执行动态口令生成操作。
OTP生成模块 103收到按键 102输入的第一确认指令后， 根据预存的动态口令生成算法 及挑战码生成动态口令， 并输出动态口令至显示屏 104， 以便用户查看。
显示屏 104用于显示解析模块 101输出的交易信息及 OTP生成模块 103生成的动态口令。 本实施例又提供了一种动态口令牌 20， 如图 2所示， 包括： 显示屏 201、 解析芯片 202、 以及确认键 203; 解析芯片 202连接显示屏 201。
用户在网站上发起一笔网络交易， 银行服务器在接收到交易数据后， 对交易的相关数 据进行运算并生成挑战码， 将挑战码告知用户 （例如： 通过手机短信方式） 或者通过有线 / 无线通信方式从终端 （例如： PC、 移动终端、 手机、 PAD等） 发送至动态口令牌 20。 解析 芯片 202在接收到用户手动输入或者通过有线 /无线通信获得的挑战码后， 利用预存的与挑 战码生成算法相匹配的解析算法对挑战码进行解析， 以获得可识别的交易信息， 并输出交 易信息至显示屏 201显示。 其中， 交易信息至少包含交易账号和交易金额。
具体的， 挑战码生成算法和解析算法采用对称算法或可逆算法， 解析模块 101可以利用 该解析算法， 从接收到的挑战码中获得生成挑战码时的交易信息， 该交易信息可供用户直 观地进行辨认， 比如： 用户可从该交易信息中直观地辨认出交易账号和交易金额等信息。
当显示屏 201显示出交易信息 （如交易帐号和金额）后， 用户通过阅读交易信息， 对例 如交易帐号和金额信息等进行确认， 如用户认可该笔交易则按下按确认键 203进行确认， 确 认键 203接收确认指令并输出该确认指令至动态口令牌 20。 动态口令牌 20接收到确认指令后， 根据预存的动态口令生成算法及挑战码生成动态口 令， 并输出动态口令至显示屏 201， 以便用户查看。
图 2所示的动态口令牌与图 1所示的动态口令牌相比， 图 2所示的动态口令牌采用了一个 解析芯片， 实现了解析挑战码获得可识别的交易信息和根据挑战码生成动态口令， 降低了 硬件成本。
本实施例另一方面还提供了一种动态口令生成方法， 如图 3所示， 该方法包括： 步骤 S101 , 解析接收到的挑战码， 获得可识别的交易信息。
具体的， 利用预存的与挑战码生成算法相匹配的解析算法对挑战码进行解析， 获得可 识别的交易信息。 交易信息至少包含交易账号和交易金额等关键信息， 以便用户对帐号和 金额进行核对， 防止动态口令被不当使用， 造成用户资金的不安全。
步骤 S102, 输出显示交易信息。
步骤 S103, 判断交易信息是否正确；
具体的， 用户查看显示的交易信息 （例如： 交易账号和交易金额） ， 确定是否正确， 如正确则继续步骤 S104; 如不正确， 则终止操作。
步骤 S104, 在判断出交易信息正确后， 接收确认指令。
具体的， 用户在判断出交易信息正确后， 通过按键确认， 动态口令牌则接收确认指令。 步骤 S105, 根据上述确认指令及挑战码生成动态口令， 并输出显示动态口令。
具体的， 动态口令牌接收到确认指令后， 根据挑战码及算法生成动态口令， 并输出显 示动态口令。
本实施例提供了一种动态口令牌及动态口令生成方法， 能够在检测到输入挑战码后， 根据输入的挑战码解析出可供用户直观地辨认的交易的关键信息 （如帐号和金额） ， 并显 示给用户， 以便用户能够了解交易的具体情况， 从而防止动态口令被不当使用， 造成用户 资金账户的不安全。 实施例 2
本实施例一方面提供了一种动态口令牌 30， 如图 4所示， 该动态口令牌 30包括： 解析模 块 301、 按键 302、 OTP生成模块 303、 显示屏 304以及接收模块 305。
接收模块 305接收用户输入的挑战码， 并输出至显示屏 304显示， 以便用户查看显示屏 304显示的挑战码是否正确， 如输入无误， 则用户按下按键 302进行确认， 按键 302接收用户 的第二确认指令， 并输出该第二确认指令至接收模块 305， 接收模块 305根据第二确认指令， 输出挑战码至解析模块 301。 具体的， 接收模块 305可采用 NFC模块、 蓝牙模块或射频模块等无线通信模块， 以便当 动态口令牌 30与终端处于可靠通信距离内时， 动态口令牌 30可以通过无线方式直接从终端 (例如： PC、 移动终端、 手机、 PAD等） 接收到挑战码， 而不需要用户手动输入， 减少了 用户繁琐的操作， 同时提高了生成动态口令过程的速度和可靠性。
解析模块 301在接收到接收模块 305输出的挑战码后， 利用预存的与挑战码生成算法相 匹配的解析算法对挑战码进行解析， 以获得可识别的交易信息， 并输出交易信息至显示屏 304。 其中， 交易信息至少包括交易账号和交易金额。
具体的， 挑战码生成算法和解析算法采用对称算法或可逆算法， 以便解析模块 301可以 从挑战码中恢复中交易信息。
当显示屏 304显示出交易信息 （如交易帐号和金额）后， 用户通过阅读交易信息， 对例 如交易帐号和金额信息等进行确认，如用户认可该笔交易则按下按键中的确认键 302进行确 认， 按键 302接收第一确认指令， 并将该第一确认指令输出至 OTP生成模块 303; 如用户不 认可该笔交易， 可以不按按键 302中的确认键， 则不会生成动态口令； 或者按下按键 102中 的取消键， 以不执行动态口令生成操作。
OTP生成模块 303收到按键 302输入的第一确认指令后， 根据预存的动态口令生成算法 及挑战码生成动态口令， 并输出动态口令至显示屏 304， 以便用户查看。
显示屏 304用于显示接收模块 305输出的挑战码、解析模块 301输出的交易信息及 OTP生 成模块 303生成的动态口令。
优选地， 动态口令牌 30还可包含一个存储模块 306。
存储模块 306用于保存至少一个账号信息， 以便在动态口令牌 30中保存可信赖的帐号列 表。 当解析模块 301通过解析挑战码获得交易信息 （例如： 交易帐号和交易金额）后， 将获 得的交易帐号与存储模块 306中的预存的账号信息进行比对， 如果比对不一致， 则还输出标 识信息显示屏 304进行显示。 例如， 当获取的待交易帐号不在存储模块 306中时， 则显示屏 304在输出交易信息之后还输出 "该帐号为非可信帐号"等字样。
本实施例另一方面还提供了一种动态口令生成方法， 如图 5所示， 该方法包括： 步骤 S201 , 接收输入的挑战码。
具体的， 接收用户手动输入或者通过有线 /无线通信获得的挑战码。
步骤 S202, 判断挑战码是否正确。
具体的， 如用户查看挑战码输入无误， 则进行步骤 203; 如不正确则跳至步骤 S201。 步骤 S203， 在判断出挑战码正确后， 接收确认指令。
具体的， 用户在确认挑战码正确后， 通过按键来确认其正确性。 步骤 S204， 根据确认指令执行步骤 S205。
步骤 S205， 解析接收的挑战码， 获得可识别的交易信息。
具体的， 利用预存的与挑战码生成算法相匹配的解析算法对挑战码进行解析， 获得可 识别的交易信息。 交易信息至少包含交易账号和交易金额等关键信息， 以便用户对帐号和 金额进行核对， 防止动态口令被不当使用， 造成用户资金的不安全。
步骤 S206, 输出显示交易信息。
步骤 S207 , 将获得的交易信息与存储的所述账号信息进行比对， 如果比对不一致， 则 输出显示标识信息。
具体的， 动态口令牌中至少一个账号信息， 以便在动态口令牌中保存可信赖的帐号列 表， 在获取到帐号信息后进行比对。
步骤 S208, 判断交易信息是否正确；
具体的， 用户查看显示的交易信息 （例如： 交易账号和交易金额） ， 确定是否正确， 如正确则继续步骤 S209; 如不正确， 则终止操作。
步骤 S209, 在判断出交易信息正确后， 接收确认指令。
具体的， 用户通过按键确认， 动态口令牌则接收确认指令。
步骤 S210, 根据确认指令及挑战码生成动态口令， 并输出显示动态口令。
具体的， 动态口令牌接收到确认指令后， 根据挑战码及算法生成动态口令， 并输出显 示动态口令。
本实施例提供了一种动态口令牌及动态口令生成方法， 能够在检测到输入挑战码后， 根据输入的挑战码解析出交易的关键信息 （如帐号和金额） ， 并显示给用户， 以便用户能 够了解交易的具体情况， 从而防止动态口令被不当使用， 造成用户资金账户的不安全。 实施例 3
本实施例与实施例 2的不同之处在于接收模块的不同，本实施例的接收模块采用光传输 方式进行信息传输。
本实施例提供动态口令牌 40， 如图 6所示， 该动态口令牌 40包括： 解析模块 401、 按键 402、 OTP生成模块 403、 显示屏 404以及接收模块 405。
优选地， 图 6所示的动态口令牌中还可包含存储模块 406。
图 6所示实施例中的解析模块、 按键、 OTP生成模块及显示屏的连接关系和结构与图 4 所示实施例相同， 图 6所示实施例中进一步包括的存储模块与图 4所示实施例中进一步包括 的存储模块的结构和连接关系相同， 在此不再对上述相同的部分进行赘述， 仅对图 6所示实 施例与图 4所示实施例不同的部分， 即接收模块 405的结构进行说明， 具体如下： 接收模块 405的结构如图 7所示，包括：光接收单元 4051及解码单元 4052;解码单元 4052 连接至光接收单元 4051及显示屏 404。
光接收单元 4051接收包含挑战码信息的光信号， 并将该光信号转换为可以在线路传输 的电信号， 输出至解码单元 4052。
解码单元 4052对电信号进行解码从而获得挑战码，并输出该挑战码至显示屏 404进行显 示， 以便用户查看。
另外， 解码单元 4052可根据第二确认指令， 将挑战码输出至解析模块 401。
光接收单元 4051使得动态口令牌 40可以通过光传输方式直接从终端 （例如： PC、 移动 终端、 手机、 PAD等） 接收到挑战码， 而不需要用户手动输入， 减少了用户繁琐的操作， 同时提高了生成动态口令过程的速度和可靠性。 而且， 相较于 NFC、 蓝牙或射频等传输方 式而言， 采用光传输方式的抗干扰能力强， 提高了传输速度和可靠性， 同时降低了成本。
本实施例提供了一种动态口令牌， 能够在检测到输入挑战码后， 根据输入的挑战码解 析出交易的关键信息 （如帐号和金额） ， 由于输入的挑战码是一串数字， 从该串数字中无 法直观地辨认出交易信息， 通过解析操作能够从挑战码中获得可供用户直接辨认的交易信 息， 输出显示给用户， 以便用户能够了解交易的具体情况， 从而防止动态口令被不当使用， 造成用户资金账户的不安全。 流程图中或在此以其他方式描述的任何过程或方法描述可以被理解为， 表示包括一个 或更多个用于实现特定逻辑功能或过程的步骤的可执行指令的代码的模块、 片段或部分， 并且本发明的优选实施方式的范围包括另外的实现， 其中可以不按所示出或讨论的顺序， 包括根据所涉及的功能按基本同时的方式或按相反的顺序， 来执行功能， 这应被本发明的 实施例所属技术领域的技术人员所理解。
应当理解， 本发明的各部分可以用硬件、 软件、 固件或它们的组合来实现。 在上述实 施方式中， 多个步骤或方法可以用存储在存储器中且由合适的指令执行系统执行的软件或 固件来实现。 例如， 如果用硬件来实现， 和在另一实施方式中一样， 可用本领域公知的下 列技术中的任一项或他们的组合来实现： 具有用于对数据信号实现逻辑功能的逻辑门电路 的离散逻辑电路， 具有合适的组合逻辑门电路的专用集成电路， 可编程门阵列 （PGA) ， 现场可编程门阵列 （FPGA) 等。
本技术领域的普通技术人员可以理解实现上述实施例方法携带的全部或部分步骤是可 以通过程序来指令相关的硬件完成， 所述的程序可以存储于一种计算机可读存储介质中， 该程序在执行时， 包括方法实施例的步骤之一或其组合。
此外， 在本发明各个实施例中的各功能单元可以集成在一个处理模块中， 也可以是各 个单元单独物理存在， 也可以两个或两个以上单元集成在一个模块中。 上述集成的模块既 可以采用硬件的形式实现， 也可以采用软件功能模块的形式实现。 所述集成的模块如果以 软件功能模块的形式实现并作为独立的产品销售或使用时， 也可以存储在一个计算机可读 取存储介质中。
上述提到的存储介质可以是只读存储器， 磁盘或光盘等。
在本说明书的描述中， 参考术语"一个实施例"、 "一些实施例"、 "示例"、 "具体示例"、 或"一些示例"等的描述意指结合该实施例或示例描述的具体特征、 结构、 材料或者特点包 含于本发明的至少一个实施例或示例中。 在本说明书中， 对上述术语的示意性表述不一定 指的是相同的实施例或示例。 而且， 描述的具体特征、 结构、 材料或者特点可以在任何的 一个或多个实施例或示例中以合适的方式结合。
尽管上面已经示出和描述了本发明的实施例， 可以理解的是， 上述实施例是示例性的， 不能理解为对本发明的限制， 本领域的普通技术人员在不脱离本发明的原理和宗旨的情况 下在本发明的范围内可以对上述实施例进行变化、 修改、 替换和变型。 本发明的范围由所 附权利要求及其等同限定。

Claims

权利要求书
1、 一种动态口令牌， 其特征在于， 该动态口令牌包括：
解析模块， 解析接收的挑战码以获得可识别的交易信息， 并输出所述交易信息至显示 屏；
按键， 在所述显示屏显示的交易信息正确时， 接收第一确认指令， 并输出所述第一确 认指令至 OTP生成模块；
OTP生成模块， 根据所述按键的第一确认指令及所述挑战码生成动态口令， 并输出所 述动态口令至显示屏；
显示屏， 显示所述解析模块输出的交易信息及所述 OTP生成模块生成的动态口令。
2、 根据权利要求 1所述的动态口令牌， 其特征在于， 该动态口令牌还包括： 接收模块， 接收输入的挑战码， 并输出至所述显示屏显示；
所述按键还在所述显示屏显示的挑战码正确时， 接收第二确认指令， 并输出所述第二 确认指令至所述接收模块；
所述接收模块根据所述第二确认指令， 输出所述挑战码至所述解析模块。
3、 根据权利要求 1或 2所述的动态口令牌， 其特征在于， 该动态口令牌还包括： 存储模块， 保存至少一个账号信息；
所述解析模块将获得的交易信息与所述存储模块中的账号信息进行比对， 如果比对不 一致， 则还输出标识信息至所述显示屏显示。
4、 根据权利要求 2所述的动态口令牌， 其特征在于， 所述接收模块为 NFC模块、 蓝牙 模块或射频模块。
5、 根据权利要求 2所述的动态口令牌， 其特征在于， 所述接收模块包括： 光接收单元 及解码单元；
所述解码单元连接所述光接收单元及所述显示屏；
所述光接收单元将接收到的光信号转换为电信号， 输出至所述解码单元；
所述解码单元对所述电信号进行解码获得挑战码， 输出所述挑战码至所述显示屏。
6、 一种动态口令牌， 包括： 显示屏， 其特征在于， 该动态口令牌还包括： 解析芯片； 所述解析芯片连接所述显示屏；
所述解析芯片解析接收的挑战码以获得可识别的交易信息， 并输出所述交易信息至所 述显示屏显示。
7、 根据权利要求 6所述的动态口令牌， 其特征在于， 所述动态口令牌还包括： 确认键; 所述确认键在所述显示屏显示的交易信息正确时， 接收第一确认指令；
所述动态口令牌根据所述第一确认指令及所述挑战码生成动态口令。
8、 根据权利要求 1或 6所述的动态口令牌， 其特征在于， 所述交易信息至少包含交易账 号和交易金额。
9、 一种动态口令生成方法， 其特征在于， 该方法包括：
解析接收的挑战码， 获得可识别的交易信息；
输出显示所述交易信息；
判断所述交易信息是否正确；
在判断出所述交易信息正确后， 接收第一确认指令；
根据所述第一确认指令及所述挑战码生成动态口令， 并输出显示所述动态口令。
10、 根据权利要求 9所述的方法， 其特征在于， 在所述解析接收的挑战码的步骤之前还 包括：
接收输入的挑战码；
判断所述挑战码是否正确；
在判断出所述挑战码正确后， 接收第二确认指令；
根据所述第二确认指令执行所述解析接收的挑战码的步骤。
11、 根据权利要求 9或 10所述的方法， 其特征在于， 该方法还包括： 存储至少一个账号 信息；
在所述获得交易信息的步骤之后还包括： 将获得的交易信息与存储的所述账号信息进 行比对， 如果比对不一致， 则输出显示标识信息。
12、 根据权利要求 9或 10所述的方法， 其特征在于， 所述交易信息至少包含交易账号 和交易金额。
PCT/CN2013/087343 2012-11-22 2013-11-18 一种动态口令牌及动态口令生成方法 WO2014079347A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201210479318.3 2012-11-22
CN2012104793183A CN103023643A (zh) 2012-11-22 2012-11-22 一种动态口令牌及动态口令生成方法

Publications (1)

Publication Number Publication Date
WO2014079347A1 true WO2014079347A1 (zh) 2014-05-30

Family

ID=47971805

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2013/087343 WO2014079347A1 (zh) 2012-11-22 2013-11-18 一种动态口令牌及动态口令生成方法

Country Status (2)

Country Link
CN (1) CN103023643A (zh)
WO (1) WO2014079347A1 (zh)

Families Citing this family (106)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103023643A (zh) * 2012-11-22 2013-04-03 天地融科技股份有限公司 一种动态口令牌及动态口令生成方法
CN103259664A (zh) * 2013-05-08 2013-08-21 北京昆腾微电子有限公司 Nfc动态口令芯片及其工作方法
CN103312508A (zh) 2013-05-15 2013-09-18 飞天诚信科技股份有限公司 一种动态令牌的工作方法
CN103475479A (zh) * 2013-09-03 2013-12-25 天地融科技股份有限公司 智能密钥设备、移动终端以及动态口令的输出方法和系统
CN104424566A (zh) * 2013-09-11 2015-03-18 北京同方微电子有限公司 一种用于网上银行的电子动态口令装置及其交易方法
CN106506143B (zh) * 2016-09-27 2019-10-22 天地融科技股份有限公司 一种动态密码生成方法及装置
US10546444B2 (en) 2018-06-21 2020-01-28 Capital One Services, Llc Systems and methods for secure read-only authentication
US10771254B2 (en) 2018-10-02 2020-09-08 Capital One Services, Llc Systems and methods for email-based card activation
WO2020072694A1 (en) 2018-10-02 2020-04-09 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10909527B2 (en) 2018-10-02 2021-02-02 Capital One Services, Llc Systems and methods for performing a reissue of a contactless card
AU2019354421A1 (en) 2018-10-02 2021-04-29 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10607214B1 (en) 2018-10-02 2020-03-31 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10685350B2 (en) 2018-10-02 2020-06-16 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10949520B2 (en) 2018-10-02 2021-03-16 Capital One Services, Llc Systems and methods for cross coupling risk analytics and one-time-passcodes
US10542036B1 (en) 2018-10-02 2020-01-21 Capital One Services, Llc Systems and methods for signaling an attack on contactless cards
US10554411B1 (en) 2018-10-02 2020-02-04 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10581611B1 (en) 2018-10-02 2020-03-03 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10511443B1 (en) 2018-10-02 2019-12-17 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
WO2020072583A1 (en) 2018-10-02 2020-04-09 Capital One Services, Llc Systems and methods for establishing identity for order pick up
WO2020072474A1 (en) 2018-10-02 2020-04-09 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
AU2019351906A1 (en) 2018-10-02 2021-03-18 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
MX2021003217A (es) 2018-10-02 2021-05-12 Capital One Services Llc Sistemas y metodos para autentificacion criptografica de tarjetas sin contacto.
WO2020072552A1 (en) 2018-10-02 2020-04-09 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10565587B1 (en) 2018-10-02 2020-02-18 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
BR112021004710A2 (pt) 2018-10-02 2021-06-08 Capital One Services, Llc sistema e método para transmitir dados
US10992477B2 (en) 2018-10-02 2021-04-27 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10771253B2 (en) 2018-10-02 2020-09-08 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10579998B1 (en) 2018-10-02 2020-03-03 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10680824B2 (en) 2018-10-02 2020-06-09 Capital One Services, Llc Systems and methods for inventory management using cryptographic authentication of contactless cards
US10582386B1 (en) 2018-10-02 2020-03-03 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10592710B1 (en) 2018-10-02 2020-03-17 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US11210664B2 (en) 2018-10-02 2021-12-28 Capital One Services, Llc Systems and methods for amplifying the strength of cryptographic algorithms
US10489781B1 (en) 2018-10-02 2019-11-26 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10505738B1 (en) 2018-10-02 2019-12-10 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
CA3113101A1 (en) 2018-10-02 2020-04-09 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
WO2020072529A1 (en) 2018-10-02 2020-04-09 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US10783519B2 (en) 2018-10-02 2020-09-22 Capital One Services, Llc Systems and methods for cryptographic authentication of contactless cards
US20200226581A1 (en) 2019-01-11 2020-07-16 Capital One Services, Llc Systems and methods for touch screen interface interaction using a card overlay
US11037136B2 (en) 2019-01-24 2021-06-15 Capital One Services, Llc Tap to autofill card data
US11120453B2 (en) 2019-02-01 2021-09-14 Capital One Services, Llc Tap card to securely generate card data to copy to clipboard
US10467622B1 (en) 2019-02-01 2019-11-05 Capital One Services, Llc Using on-demand applications to generate virtual numbers for a contactless card to securely autofill forms
US10510074B1 (en) 2019-02-01 2019-12-17 Capital One Services, Llc One-tap payment using a contactless card
US10425129B1 (en) 2019-02-27 2019-09-24 Capital One Services, Llc Techniques to reduce power consumption in near field communication systems
US10523708B1 (en) 2019-03-18 2019-12-31 Capital One Services, Llc System and method for second factor authentication of customer support calls
US10535062B1 (en) 2019-03-20 2020-01-14 Capital One Services, Llc Using a contactless card to securely share personal data stored in a blockchain
US10438437B1 (en) 2019-03-20 2019-10-08 Capital One Services, Llc Tap to copy data to clipboard via NFC
US10984416B2 (en) 2019-03-20 2021-04-20 Capital One Services, Llc NFC mobile currency transfer
US10643420B1 (en) 2019-03-20 2020-05-05 Capital One Services, Llc Contextual tapping engine
US10970712B2 (en) 2019-03-21 2021-04-06 Capital One Services, Llc Delegated administration of permissions using a contactless card
US10467445B1 (en) 2019-03-28 2019-11-05 Capital One Services, Llc Devices and methods for contactless card alignment with a foldable mobile device
US11521262B2 (en) 2019-05-28 2022-12-06 Capital One Services, Llc NFC enhanced augmented reality information overlays
US10516447B1 (en) 2019-06-17 2019-12-24 Capital One Services, Llc Dynamic power levels in NFC card communications
US11392933B2 (en) 2019-07-03 2022-07-19 Capital One Services, Llc Systems and methods for providing online and hybridcard interactions
US11694187B2 (en) 2019-07-03 2023-07-04 Capital One Services, Llc Constraining transactional capabilities for contactless cards
US10871958B1 (en) 2019-07-03 2020-12-22 Capital One Services, Llc Techniques to perform applet programming
US10713649B1 (en) 2019-07-09 2020-07-14 Capital One Services, Llc System and method enabling mobile near-field communication to update display on a payment card
US10498401B1 (en) 2019-07-15 2019-12-03 Capital One Services, Llc System and method for guiding card positioning using phone sensors
US10885514B1 (en) 2019-07-15 2021-01-05 Capital One Services, Llc System and method for using image data to trigger contactless card transactions
US10733601B1 (en) 2019-07-17 2020-08-04 Capital One Services, Llc Body area network facilitated authentication or payment authorization
US11182771B2 (en) 2019-07-17 2021-11-23 Capital One Services, Llc System for value loading onto in-vehicle device
US10832271B1 (en) 2019-07-17 2020-11-10 Capital One Services, Llc Verified reviews using a contactless card
US11521213B2 (en) 2019-07-18 2022-12-06 Capital One Services, Llc Continuous authentication for digital services based on contactless card positioning
US10506426B1 (en) 2019-07-19 2019-12-10 Capital One Services, Llc Techniques for call authentication
US10541995B1 (en) 2019-07-23 2020-01-21 Capital One Services, Llc First factor contactless card authentication system and method
CN114746913A (zh) 2019-10-02 2022-07-12 第一资本服务有限责任公司 使用非接触式传统磁条数据的客户端设备认证
US10862540B1 (en) 2019-12-23 2020-12-08 Capital One Services, Llc Method for mapping NFC field strength and location on mobile devices
US11651361B2 (en) 2019-12-23 2023-05-16 Capital One Services, Llc Secure authentication based on passport data stored in a contactless card
US10657754B1 (en) 2019-12-23 2020-05-19 Capital One Services, Llc Contactless card and personal identification system
US11615395B2 (en) 2019-12-23 2023-03-28 Capital One Services, Llc Authentication for third party digital wallet provisioning
US10733283B1 (en) 2019-12-23 2020-08-04 Capital One Services, Llc Secure password generation and management using NFC and contactless smart cards
US10885410B1 (en) 2019-12-23 2021-01-05 Capital One Services, Llc Generating barcodes utilizing cryptographic techniques
US11113685B2 (en) 2019-12-23 2021-09-07 Capital One Services, Llc Card issuing with restricted virtual numbers
US11200563B2 (en) 2019-12-24 2021-12-14 Capital One Services, Llc Account registration using a contactless card
US10664941B1 (en) 2019-12-24 2020-05-26 Capital One Services, Llc Steganographic image encoding of biometric template information on a card
US10853795B1 (en) 2019-12-24 2020-12-01 Capital One Services, Llc Secure authentication based on identity data stored in a contactless card
US10909544B1 (en) 2019-12-26 2021-02-02 Capital One Services, Llc Accessing and utilizing multiple loyalty point accounts
US10757574B1 (en) 2019-12-26 2020-08-25 Capital One Services, Llc Multi-factor authentication providing a credential via a contactless card for secure messaging
US11038688B1 (en) 2019-12-30 2021-06-15 Capital One Services, Llc Techniques to control applets for contactless cards
US11455620B2 (en) 2019-12-31 2022-09-27 Capital One Services, Llc Tapping a contactless card to a computing device to provision a virtual number
US10860914B1 (en) 2019-12-31 2020-12-08 Capital One Services, Llc Contactless card and method of assembly
US11210656B2 (en) 2020-04-13 2021-12-28 Capital One Services, Llc Determining specific terms for contactless card activation
US10861006B1 (en) 2020-04-30 2020-12-08 Capital One Services, Llc Systems and methods for data access control using a short-range transceiver
US11030339B1 (en) 2020-04-30 2021-06-08 Capital One Services, Llc Systems and methods for data access control of personal user data using a short-range transceiver
US11222342B2 (en) 2020-04-30 2022-01-11 Capital One Services, Llc Accurate images in graphical user interfaces to enable data transfer
US10915888B1 (en) 2020-04-30 2021-02-09 Capital One Services, Llc Contactless card with multiple rotating security keys
US11823175B2 (en) 2020-04-30 2023-11-21 Capital One Services, Llc Intelligent card unlock
US10963865B1 (en) 2020-05-12 2021-03-30 Capital One Services, Llc Augmented reality card activation experience
US11100511B1 (en) 2020-05-18 2021-08-24 Capital One Services, Llc Application-based point of sale system in mobile operating systems
US11063979B1 (en) 2020-05-18 2021-07-13 Capital One Services, Llc Enabling communications between applications in a mobile operating system
US11062098B1 (en) 2020-08-11 2021-07-13 Capital One Services, Llc Augmented reality information display and interaction via NFC based authentication
US11482312B2 (en) 2020-10-30 2022-10-25 Capital One Services, Llc Secure verification of medical status using a contactless card
US11165586B1 (en) 2020-10-30 2021-11-02 Capital One Services, Llc Call center web-based authentication using a contactless card
US11373169B2 (en) 2020-11-03 2022-06-28 Capital One Services, Llc Web-based activation of contactless cards
US11216799B1 (en) 2021-01-04 2022-01-04 Capital One Services, Llc Secure generation of one-time passcodes using a contactless card
US11682012B2 (en) 2021-01-27 2023-06-20 Capital One Services, Llc Contactless delivery systems and methods
US11792001B2 (en) 2021-01-28 2023-10-17 Capital One Services, Llc Systems and methods for secure reprovisioning
US11562358B2 (en) 2021-01-28 2023-01-24 Capital One Services, Llc Systems and methods for near field contactless card communication and cryptographic authentication
US11687930B2 (en) 2021-01-28 2023-06-27 Capital One Services, Llc Systems and methods for authentication of access tokens
US11438329B2 (en) 2021-01-29 2022-09-06 Capital One Services, Llc Systems and methods for authenticated peer-to-peer data transfer using resource locators
US11777933B2 (en) 2021-02-03 2023-10-03 Capital One Services, Llc URL-based authentication for payment cards
US11637826B2 (en) 2021-02-24 2023-04-25 Capital One Services, Llc Establishing authentication persistence
US11245438B1 (en) 2021-03-26 2022-02-08 Capital One Services, Llc Network-enabled smart apparatus and systems and methods for activating and provisioning same
US11961089B2 (en) 2021-04-20 2024-04-16 Capital One Services, Llc On-demand applications to extend web services
US11935035B2 (en) 2021-04-20 2024-03-19 Capital One Services, Llc Techniques to utilize resource locators by a contactless card to perform a sequence of operations
US11902442B2 (en) 2021-04-22 2024-02-13 Capital One Services, Llc Secure management of accounts on display devices using a contactless card
US11354555B1 (en) 2021-05-04 2022-06-07 Capital One Services, Llc Methods, mediums, and systems for applying a display to a transaction card

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN202004768U (zh) * 2011-01-20 2011-10-05 深圳市文鼎创数据科技有限公司 物理认证装置及动态口令牌
CN102752311A (zh) * 2012-07-16 2012-10-24 天地融科技股份有限公司 一种认证方法、系统和装置
CN102769624A (zh) * 2012-07-24 2012-11-07 天地融科技股份有限公司 一种动态口令生成系统、装置及方法
CN103023643A (zh) * 2012-11-22 2013-04-03 天地融科技股份有限公司 一种动态口令牌及动态口令生成方法

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101567073A (zh) * 2008-04-24 2009-10-28 李东声 批量电子交易的实现方法、装置及系统
CN102447560A (zh) * 2011-12-30 2012-05-09 深圳市文鼎创数据科技有限公司 设置有光通信单元的动态令牌
CN102655454A (zh) * 2012-04-20 2012-09-05 深圳市文鼎创数据科技有限公司 动态令牌交易确认方法及装置
CN102752115B (zh) * 2012-07-04 2015-09-16 北京天龙融和软件有限公司 挑战码生成方法及装置、动态口令认证方法及系统

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN202004768U (zh) * 2011-01-20 2011-10-05 深圳市文鼎创数据科技有限公司 物理认证装置及动态口令牌
CN102752311A (zh) * 2012-07-16 2012-10-24 天地融科技股份有限公司 一种认证方法、系统和装置
CN102769624A (zh) * 2012-07-24 2012-11-07 天地融科技股份有限公司 一种动态口令生成系统、装置及方法
CN103023643A (zh) * 2012-11-22 2013-04-03 天地融科技股份有限公司 一种动态口令牌及动态口令生成方法

Also Published As

Publication number Publication date
CN103023643A (zh) 2013-04-03

Similar Documents

Publication Publication Date Title
WO2014079347A1 (zh) 一种动态口令牌及动态口令生成方法
US10177816B2 (en) Devices and methods for identification, authentication and signing purposes
US11410156B2 (en) NFC payment method and terminal
WO2018076604A1 (zh) 一种蓝牙配对方法以及终端设备
EP3401864A1 (en) Method for selecting transaction application, and terminal
US10911908B2 (en) Electronic device for processing message and method for operating same
US20140117075A1 (en) Mobile Device-Based Electronic Payment Systems and Methods
WO2015062268A1 (en) Method, apparatus, and system for information transmission
JP6032626B2 (ja) Ｎｆｃ認証カードを用いた認証方法
WO2015103886A1 (en) Numerical value transferring method, terminal, server, and system
KR20200028827A (ko) Uwb 트랜잭션을 위한 방법 및 전자 장치
US20220005046A1 (en) Payment method using biometric authentication and electronic device therefor
EP3944588A1 (en) Method for uwb transaction and electronic device therefor
WO2020122957A1 (en) Correction of errors in soft demodulated symbols using a crc
WO2014056399A1 (zh) 一种电子签名工具、系统和方法
WO2015070595A1 (en) Method, apparatus and system for mobile payment
AU2024200052A1 (en) Dynamic power levels in NFC card communications
US10476889B2 (en) Information interaction method, apparatus and system
WO2015032255A1 (zh) 智能密钥设备、移动终端以及动态口令的输出方法和系统
CN103684796A (zh) 一种用户身份识别模块卡及个人身份认证方法
KR101211900B1 (ko) 무선단말 기반 전자서명 처리 시스템
JP6309984B2 (ja) ユーザ入力に基づくアイコンの表示
US20160321645A1 (en) Transmission and processing of data relating to a contactless transaction
CN104933379A (zh) 身份证信息获取方法、装置及系统
WO2018166097A1 (zh) 一种支付方法、终端和服务器

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 13857528

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 13857528

Country of ref document: EP

Kind code of ref document: A1