WO2020237871A1 - 无卡交易方法、装置及服务器 - Google Patents

无卡交易方法、装置及服务器 Download PDF

Info

Publication number
WO2020237871A1
WO2020237871A1 PCT/CN2019/102991 CN2019102991W WO2020237871A1 WO 2020237871 A1 WO2020237871 A1 WO 2020237871A1 CN 2019102991 W CN2019102991 W CN 2019102991W WO 2020237871 A1 WO2020237871 A1 WO 2020237871A1
Authority
WO
WIPO (PCT)
Prior art keywords
user
password
fingerprint
transaction
terminal
Prior art date
Application number
PCT/CN2019/102991
Other languages
English (en)
French (fr)
Inventor
沙内瓦拉瑞迪•耶姆
朱虹
Original Assignee
上海箩箕技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 上海箩箕技术有限公司 filed Critical 上海箩箕技术有限公司
Publication of WO2020237871A1 publication Critical patent/WO2020237871A1/zh

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
    • G06Q20/108—Remote banking, e.g. home banking
    • G06Q20/1085—Remote banking, e.g. home banking involving automatic teller machines [ATMs]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4014—Identity check for transactions
    • G06Q20/40145—Biometric identity checks
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines

Definitions

  • the invention relates to the field of financial security, in particular to a cardless transaction method, device and server.
  • a new method is needed to improve the security of ATM machine operations and reduce user account security risks.
  • the embodiment of the present invention provides a cardless transaction method, which is suitable for terminals that can collect fingerprints on the screen.
  • the cardless transaction method includes: receiving transaction information input by a user; The identification of the second transaction, where the identification includes transaction information; presents the identification to the identification device of the ATM; authenticates the user, the authentication includes simultaneously verifying the password and fingerprint entered by the user; and if After identity verification, the transaction request information is displayed.
  • the identification mark includes a two-dimensional code or a barcode.
  • the transaction includes deposits and withdrawals.
  • the authentication of the user includes: receiving a digital password input by the user on the terminal screen; obtaining a user fingerprint while the user is inputting the digital password; sending the digital password input by the user to the server; Send the fingerprint of the user to the server; and determine whether the user passes the identity verification based on the verification confirmation information sent by the server.
  • acquiring the user fingerprint during the user inputting the digital password includes: acquiring the user fingerprint when the user inputs each digital password.
  • the acquired user fingerprint is the fingerprint of one finger or the fingerprints of multiple fingers of the user.
  • the authentication of the user includes: receiving a gesture graphic password input by the user by sliding a finger on the terminal screen; acquiring a user fingerprint during the user inputting the gesture graphic password; sending the gesture graphic password input by the user To the server; send the acquired fingerprint to the server; and determine whether the user passes the identity verification according to the verification confirmation information sent by the server.
  • acquiring the user's fingerprint during the user's input of the password includes: acquiring the user's fingerprint when the user starts to input the gesture graphic password or when the user ends the input of the gesture graphic password.
  • the embodiment of the present invention provides a cardless transaction method, which is suitable for a server that stores one or more fingerprint templates and passwords of a user.
  • the cardless transaction method includes: receiving a password and fingerprint acquired by a terminal, and the terminal acquires
  • the password includes a digital password or a gesture graphic password; verifies whether the password and fingerprint obtained by the terminal match the stored password and fingerprint template; and if they match, the transaction request success information is sent to the terminal.
  • the cardless transaction method further includes: receiving transaction request information sent by an ATM; and after completing identity verification and data processing, sending a transaction execution instruction to the ATM according to the transaction request information.
  • the verifying whether the password and fingerprint obtained by the terminal match the stored password and fingerprint template includes: verifying whether the obtained digital password matches the stored digital password and whether the obtained one or more fingerprints match One or more fingerprint templates of the user stored in the terminal match; or verify whether the obtained gesture graphic password matches the stored gesture graphic password and whether the obtained one or more fingerprints match the one or more fingerprint templates stored in the terminal. Multiple fingerprint templates match.
  • An embodiment of the present invention also provides a cardless transaction device, including a memory and a processor.
  • the memory stores a computer program that can run on the processor.
  • the processor implements the Steps in the cardless transaction method.
  • the embodiment of the present invention also provides a server, including a memory and a processor.
  • the memory stores a computer program that can run on the processor, and one or more fingerprint templates and passwords of the user.
  • the processing The steps in the cardless transaction method are implemented when the program is executed by the processor.
  • the user does not need to insert a card in the ATM machine or input a password on the ATM machine to realize operations such as depositing and withdrawing money.
  • the user is not required to carry a bank card when using the ATM machine, which improves the convenience of the ATM machine.
  • the user does not need to enter a password on the ATM machine. Therefore, the safety of the user operating the ATM machine is improved and the The user’s account security risks.
  • identity verification is performed on the user, and the identity verification includes simultaneously verifying the password and fingerprint input by the user.
  • the security of the cardless transaction method can be further improved by adopting the method of password and fingerprint double verification.
  • FIG. 1 is a schematic flowchart of a cardless transaction method provided by an embodiment of the present invention
  • FIG. 2 is a schematic flowchart of a cardless transaction method provided by an embodiment of the present invention.
  • FIG. 3 is a schematic structural diagram of a cardless transaction device provided by an embodiment of the present invention.
  • Fig. 4 is a schematic flowchart of a server provided by an embodiment of the present invention.
  • the terminal capable of fingerprint identification on the screen may include various types of mobile phones, tablet computers, personal digital assistants (Personal Digital Assistant, PDA), mobile Internet devices (Mobile Internet Device, MID), etc. smart device.
  • PDA Personal Digital Assistant
  • MID Mobile Internet Device
  • FIG. 1 is a schematic flowchart of an identity verification method provided by an embodiment of the present invention, and the method is applicable to the terminal side.
  • the terminal has a screen capable of fingerprint recognition, can run client software, and communicate with the bank server via the mobile Internet.
  • the ATM machine can communicate with the server through the bank's intranet.
  • the user inputs transaction information on the client software of the terminal. Specifically, the user logs in to his personal account on the client software of the terminal.
  • the personal account is the user's bank account and has a unique identification number; the client software can be a mobile banking, third-party payment platform or online wealth management account of a major bank.
  • a variety of transactions can be performed on the client, for example, transfer, deposit and withdrawal.
  • the user can choose to perform ATM withdrawal operations through the terminal and enter transaction information.
  • the transaction information entered by the user may include the transaction amount, such as 10,000 yuan, and the transaction information may also include whether to perform cross-banking Transaction and target transaction bank, etc.
  • an identification mark corresponding to this transaction is generated, and the identification mark includes transaction information.
  • the terminal may generate an identification mark based on the transaction information.
  • the identification mark may be a two-dimensional code or a barcode.
  • the transaction information may include the transaction amount input by the user, and may also include but is not limited to the user's personal account identification number, real-time time and other information.
  • the terminal may send transaction reference information including the transaction information to the back-end server, and the back-end server may send transaction feedback information to the terminal after receiving the transaction reference information.
  • the information includes at least transaction reference information and the identification number of the transaction. After that, the terminal generates an identification mark corresponding to the current transaction according to the transaction feedback information.
  • the terminal may generate different types of identification information for different transaction contents. For example, for peer withdrawal and inter-bank withdrawal, the terminal can generate identification information corresponding to different banks.
  • the identification mark is displayed to the identification device of the ATM machine.
  • the identification device may be a scanning module of the ATM machine, such as a camera, which can analyze the identification mark.
  • the ATM machine has a unique identification number.
  • the algorithm for parsing the identification mark by the ATM machine corresponds to the algorithm for generating the identification mark.
  • the user is authenticated, and the authentication includes simultaneously verifying the password and fingerprint input by the user.
  • the terminal authenticates the user before the ATM machine executes the transaction.
  • the identity verification step may be after the terminal produces the identification mark, or before the user inputs the transaction information, that is, the present invention does not limit the execution sequence of the identity verification step.
  • the password entered by the user may include a numeric password and a gesture graphic password.
  • the authentication of the user's identity includes: receiving a digital password input by the user on the terminal screen; obtaining a user fingerprint while the user is inputting the digital password; sending the digital password input by the user to the server; The obtained fingerprint is sent to the server; and according to the verification confirmation information sent by the server, it is determined whether the user passes the identity verification.
  • the user will enter a numeric password on the screen of the terminal, for example, "12345". Enter the digital password by clicking on the terminal screen, during which the terminal can obtain the user's fingerprint. Specifically, when the user inputs each digital password, the user's fingerprint is obtained. In other words, during the password input, each time the user taps the terminal screen, the terminal will collect the user's fingerprint.
  • the user fingerprint acquired by the terminal is the fingerprint of one finger or the fingerprints of multiple fingers of the user.
  • the user can input with one finger during the password input.
  • the user uses the index finger to input the five-digit password "12345".
  • the user can also input the password through multiple fingers, for example, the user uses the thumb to input "1", the index finger to input "2", etc.
  • the terminal can obtain the fingerprints of the user's multiple fingers.
  • the terminal obtains multiple fingerprints of the user for identity verification, which increases the difficulty for criminals to pass fingerprint verification by stealing user fingerprints, and further improves the security of smart terminal identity verification.
  • the digital password and fingerprint are sent to the server. And according to the verification confirmation information sent by the server to determine whether the user passed the identity verification.
  • the authenticating the user includes: receiving a gesture graphic password input by the user by sliding a finger on the terminal screen; acquiring a user fingerprint during the user inputting the gesture graphic password; and transmitting the gesture graphic input by the user
  • the password is sent to the server; the acquired fingerprint is sent to the server; and according to the verification confirmation information sent by the server, it is determined whether the user passes the identity verification.
  • the user When the user needs to perform identity verification, for example, when the user is performing operations such as payment or unlocking, the user will input a gesture pattern password on the screen of the terminal. Specifically, the user uses a finger to slide on the screen to form a gesture pattern.
  • acquiring the user fingerprint while the user is inputting the password includes: acquiring the user fingerprint when the user starts to input the gesture graphic password or when the user finishes inputting the gesture graphic password. Specifically, when the user inputs the gesture graphic password, the finger is in a sliding state. Therefore, the terminal acquires the user's fingerprint when starting or ending input of the gesture graphic password.
  • the gesture graphic password and fingerprint are sent to the server. And according to the verification confirmation information sent by the server to determine whether the user passed the identity verification.
  • the transaction request success information is displayed on the terminal screen.
  • FIG. 2 is a schematic flowchart of a cardless transaction method provided by an embodiment of the present invention, and the method is applicable to the server side.
  • the server stores one or more fingerprint templates and passwords of users.
  • the password and fingerprint acquired by the terminal are received, and the password acquired by the terminal includes a digital password or a gesture pattern password.
  • the server compares the digital password input by the user with the stored digital password to verify whether the digital password input by the user is correct.
  • the server compares the gesture graphic password input by the user with the stored gesture graphic password to verify whether the gesture graphic password input by the user is correct.
  • the server may verify whether the acquired one or more fingerprints match one or more fingerprint templates of the user stored in the terminal. Specifically, after acquiring the user's fingerprint, the server compares the acquired user's fingerprint with the stored fingerprint template, thereby verifying whether the fingerprint input by the user matches the fingerprint template corresponding to the user. If the fingerprints of multiple fingers of the user are obtained, the multiple fingerprints of the fingers must be compared with the corresponding fingerprint template one by one.
  • the server sends transaction request success information to the terminal. If the identity verification is not passed, sending a transaction request to the terminal fails, prompting the terminal to perform identity verification again, and after multiple verifications fail, stop the account from performing any operations within a certain period of time.
  • the cardless transaction method further includes: receiving transaction request information sent by an ATM; and after completing identity verification and data processing, sending a transaction execution instruction to the ATM according to the transaction request information.
  • the ATM machine analyzes the identification identifier, it sends transaction request information to the server.
  • the server After the server completes identity verification and data processing, it sends a transaction execution instruction to the ATM machine according to the transaction request information.
  • the data processing includes background financial accounting and authentication.
  • the ATM machine After receiving the transaction execution instruction, the ATM machine performs corresponding transaction operations, such as sending out 10,000 yuan banknotes.
  • FIG. 3 is a schematic structural diagram of a cardless transaction device according to an embodiment of the present invention.
  • the device includes a memory 31 and a processor 32.
  • the memory 31 stores a computer program that can run on the processor 32.
  • the feature is that the processor 32 implements the cardless Steps in the transaction method.
  • the memory 31 may include: ROM, RAM, magnetic disk or optical disk, and so on.
  • ROM read-only memory
  • RAM random access memory
  • magnetic disk or optical disk and so on.
  • FIG. 4 is a schematic flowchart of a server provided by an embodiment of the present invention. It includes a memory 41 and a processor 42.
  • the memory 41 stores a computer program that can run on the processor 42, and one or more fingerprint templates and passwords of the user. It is characterized in that the processor 42 executes The program implements the steps in the cardless transaction method.
  • the memory 41 may include: ROM, RAM, magnetic disk or optical disk, etc.
  • FIG. 2 for the steps of the cardless transaction method, please refer to the related description of FIG. 2 above, which will not be repeated here.

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Finance (AREA)
  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Economics (AREA)
  • Development Economics (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

一种无卡交易方法、装置及服务器，所述方法包括：接收用户输入的交易信息；生成对应本次交易的识别标识，所述识别标识包括交易信息；向ATM机的识别装置展示所述识别标识；对用户进行身份验证，所述身份验证包括同时验证用户输入的密码以及指纹；以及若通过身份验证，显示交易请求成功信息。一方面，在使用ATM机时并不要求用户携带银行卡，提升了ATM机的便利性，另一方面，用户无需在ATM机上输入密码，因此，提升了用户操作ATM机的安全性，降低了用户的账户安全风险。

Description

无卡交易方法、装置及服务器
本申请要求2019年5月24日提交中国专利局、申请号为201910443637.0、发明名称为“无卡交易方法、装置及服务器”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明涉及金融安全领域，具体地，涉及一种无卡交易方法、装置及服务器。
背景技术
目前，用户通过ATM机进行取款等操作时，必须先插入银行卡，并在机器上输入密码后，才能实现取款操作。而随着网络金融和移动互联网的快速发展，各大银行都推出了网络银行及手机银行等软件，用户可以通过上述软件也能实现转账等功能。
在现有技术中，用户在ATM上进行取款等操作时，需要在ATM机上输入密码，不法分子可能通过使用键盘膜等手段盗取用户的密码，因此会给用户的账户带来极大的风险。
需要一种新的方法提升ATM机操作的安全性并减少用户的账户安全风险。
发明内容
为提升ATM机操作的安全性，本发明实施例提供了一种无卡交易方法，适用于屏幕能够进行指纹采集的终端，所述无卡交易方法包 括：接收用户输入的交易信息；生成对应本次交易的识别标识，所述识别标识包括交易信息；向所述ATM机的识别装置展示所述识别标识；对用户进行身份验证，所述身份验证包括同时验证用户输入的密码以及指纹；以及若通过身份验证，显示交易请求成功信息。
可选地，所述识别标识包括二维码或条形码。
可选地，所述交易包括存取款。
可选地，针对不同的交易内容生成不同类型的标识信息。
可选地，所述对用户进行身份验证包括：接收用户在终端屏幕上输入的数字密码；在用户输入数字密码的期间获取用户指纹；将所述用户输入的数字密码发送至服务器；将所获取的指纹发送至服务器；以及根据服务器发送的验证确认信息判定用户是否通过身份验证。
可选地，在用户输入数字密码的期间获取用户指纹包括：在用户输入每个数字密码时，获取用户指纹。
可选地，所获取的用户指纹为用户一个手指的指纹或多个手指的指纹。
可选地，所述对用户进行身份验证包括：接收用户在终端屏幕上通过滑动手指输入的手势图形密码；在用户输入手势图形密码的期间获取用户指纹；将所述用户输入的手势图形密码发送至服务器；将所获取的指纹发送至服务器；以及根据服务器发送的验证确认信息判定用户是否通过身份验证。
可选地，在用户输入密码的期间获取用户指纹包括：在用户开始输入手势图形密码时或用户结束输入手势图形密码时，获取用户指纹。
本发明实施例提供了一种无卡交易方法，适用于存储有用户的一个或多个指纹模板和密码的服务器，所述无卡交易方法包括：接收终端获取的密码以及指纹，所述终端获取的密码包括数字密码或手势图 形密码；验证所述终端获取的密码以及指纹是否与存储的密码以及指纹模板匹配；以及若匹配，则向终端发送交易请求成功信息。
可选地，所述无卡交易方法还包括：接收ATM机发送的交易请求信息；以及完成身份验证以及数据处理后，根据所述交易请求信息，向所述ATM机发送交易执行指令。
可选地，所述验证所述终端获取的密码以及指纹是否与存储的密码以及指纹模板匹配包括：验证所获取的数字密码是否与存储的数字密码匹配以及所获取的一个或多个指纹是否与终端中存储的该用户的一个或多个指纹模板匹配；或验证所获取的手势图形密码是否存储的手势图形密码匹配以及所获取的一个或多个指纹是否与终端中存储的该用户的一个或多个指纹模板匹配。
本发明实施例还提供了一种无卡交易装置，包括存储器以及处理器，所述存储器上存储有可在所述处理器上运行的计算机程序，所述处理器执行所述程序时实现所述无卡交易方法中的步骤。
本发明实施例还提供了一种服务器，包括存储器以及处理器，所述存储器上存储有可在所述处理器上运行的计算机程序，以及用户的一个或多个指纹模板和密码，所述处理器执行所述程序时实现所述无卡交易方法中的步骤。
与现有技术相比，本发明实施例的技术方案具有以下优点：
在本发明实施例中，用户无需在ATM机中插入卡片或在ATM机上输入密码，即可实现存取款等操作。一方面，在使用ATM机时并不要求用户携带银行卡，提升了ATM机的便利性，另一方面，用户无需在ATM机上输入密码，因此，提升了用户操作ATM机的安全性，降低了用户的账户安全风险。
进一步，在无卡交易方法中，对用户进行身份验证，所述身份验证包括同时验证用户输入的密码以及指纹。通过采用密码加指纹双验证的方式，可以进一步提高所述无卡交易方法的安全性。
附图说明
图1是本发明实施例提供的一种无卡交易方法的流程示意图；
图2是本发明实施例提供的一种无卡交易方法的流程示意图；
图3是本发明实施例提供的一种无卡交易装置的结构示意图；以及
图4是本发明实施例提供的一种服务器的流程示意图。
具体实施方式
在本发明提供的实施例中，屏幕能够进行指纹识别的终端可以包括移动手机、平板电脑、个人数字助理(Personal Digital Assistant，PDA)、移动互联网设备(Mobile Internet Device，MID)等各种类型的智能设备。
参考图1，图1是本发明实施例提供的一种身份验证方法的流程示意图，所述方法适用于终端侧。在图1所示的实施例中，终端具有能够进行指纹识别的屏幕，能够运行客户端软件，并通过移动互联网与行服务器进行通信。ATM机可以通过银行内网与所述服务器进行通信。
在S11中，接收用户输入的交易信息。
在一些实施例中，用户在终端的客户端软件上输入交易信息。具体地，用户在终端的客户端软件上登陆个人账户，个人账户为用户的银行账户，具有唯一的标识号；客户端软件可以是个大银行的手机银行、第三方支付平台或网络理财账户，用户可在客户端上进行多种交易，例如，转账、存取款。
在一个实施例中，用户可以通过终端选择进行ATM取款的操作， 并输入交易信息，具体地，用户输入的交易信息可以包括交易金额，例如一万元，所述交易信息还可以包括是否进行跨行交易以及目标交易银行等。
在S12中，生成对应本次交易的识别标识，所述识别标识包括交易信息。
在一些实施例中，终端可以根据交易信息生成识别标识。具体地，所述识别标识可以是二维码或条形码。所述交易信息可以包括用户输入的交易金额，也可以包括但不限于用户的个人账户识别号，实时时间等信息。
在一些实施例中，终端在接收到用户输入的交易信息后，可以向后台服务器发送包括交易信息的交易参考信息，后台服务器接收到交易参考信息后可以向终端发送交易反馈信息，所述交易反馈信息至少包括交易参考信息以及本次交易的标识号。之后，终端根据所述交易反馈信息生成对应本次交易的识别标识。
在一些实施例中，终端可以针对不同的交易内容生成不同类型的标识信息。例如，对于同行取款以及跨行取款，终端可以生成对应于不同银行的标识信息。
在S13中，向ATM机的识别装置展示所述识别标识。
在一些实施例中，所述识别装置可以是所述ATM机的扫描模块，例如摄像头，可以解析所述识别标识。所述ATM机具有唯一识别号。
在一些实施例中，所述ATM机解析所述识别标识的算法与生成所述识别标识的算法时对应的。
在S14中，对用户进行身份验证，所述身份验证包括同时验证用户输入的密码以及指纹。
在一些实施例中，在所述ATM机执行交易前，终端对用户进行身份验证。具体而言，身份验证步骤可以在终端生产识别标识之后， 也可以在用户输入交易信息之前，也就是说，本发明并不对身份验证步骤的执行顺序作出限定。
用户输入的密码可以包括数字密码以及手势图形密码。
在一些实施例中，所述对用户进行身份验证包括：接收用户在终端屏幕上输入的数字密码；在用户输入数字密码的期间获取用户指纹；将所述用户输入的数字密码发送至服务器；将所获取的指纹发送至服务器；以及根据服务器发送的验证确认信息，则判定用户是否通过身份验证。
具体地，用户会在终端的屏幕上输入数字密码，例如，“12345”。通过在终端屏幕上点击的方式输入数字密码，在此期间，终端可以获取用户指纹。具体地，在用户输入每个数字密码时，获取用户指纹。也就是说，在输入密码期间，用户每次点击终端屏幕时，终端均会采集用户指纹。
在一些实施例中，终端所获取的用户指纹为用户一个手指的指纹或多个手指的指纹。具体地，用户在输入密码期间可以通过一个手指进行输入，例如，用户使用食指输入“12345”这五位密码。用户也可以通过多个手指输入密码，例如，用户使用大拇指输入“1”，食指输入“2”等等，此时，终端可以获取用户的多个手指的指纹。终端通过获取用户的多个指纹进行身份验证，增加了不法分子通过盗取用户指纹以通过指纹验证的难度，进一步提升了智能终端身份验证的安全性。
在获取用户输入的数字密码和指纹后，将所述数字密码以及指纹发送至服务器。并根据服务器发送的验证确认信息判定用户是否通过身份验证。
在一些实施例中，所述对用户进行身份验证包括：接收用户在终端屏幕上通过滑动手指输入的手势图形密码；在用户输入手势图形密码的期间获取用户指纹；将所述用户输入的手势图形密码发送至服务 器；将所获取的指纹发送至服务器；以及根据服务器发送的验证确认信息，则判定用户是否通过身份验证。
当用户需要进行身份验证时，例如用户在进行支付、解锁等操作的情况下，用户会在终端的屏幕上输入手势图形密码，具体地，用户使用手指在屏幕上滑动形成手势图形。
在一些实施例中，用户输入密码的期间获取用户指纹包括：在用户开始输入手势图形密码时或用户结束输入手势图形密码时，获取用户指纹。具体地，用户在输入手势图形密码时，手指处于滑动状态，因此，终端在开始输入或结束输入手势图形密码时获取用户指纹。
在获取用户输入的手势图形密码和指纹后，将所述手势图形密码以及指纹发送至服务器。并根据服务器发送的验证确认信息判定用户是否通过身份验证。
在S15中，若通过身份验证，显示交易请求成功信息。
若所述服务器发送的验证确认信息显示用户通过身份验证，并通过银行的后台财务核算与鉴权，则在终端屏幕上显示交易请求成功信息。
参考图2，图2是本发明实施例提供的一种无卡交易方法的流程示意图，所述方法适用于服务器侧。所述服务器存储有用户的一个或多个指纹模板和密码的服务器。
在S21中，接收终端获取的密码以及指纹，所述终端获取的密码包括数字密码或手势图形密码。
在S22中，验证所述终端获取的密码以及指纹是否与存储的密码以及指纹模板匹配。
具体地，验证所获取的数字密码是否与存储的数字密码匹配以及所获取的一个或多个指纹是否与终端中存储的该用户的一个或多个指纹模板匹配；或验证所获取的手势图形密码是否存储的手势图形密 码匹配以及所获取的一个或多个指纹是否与终端中存储的该用户的一个或多个指纹模板匹配。
在一些实施例中，在接收完成用户输入的数字密码后，所述服务器会将用户输入的数字密码与所存储的数字密码比对，从而验证用户输入的数字密码是否正确。
在一些实施例中，在接收完成用户输入的手势图形密码后，所述服务器会将用户输入的手势图形密码与所存储的手势图形密码比对，从而验证用户输入的手势图形密码是否正确。
在一些实施例中，所述服务器可以验证所获取的一个或多个指纹是否与终端中存储的该用户的一个或多个指纹模板匹配。具体地，在获取用户的指纹后，所述服务器会将所获取的用户的指纹与所存储的指纹模板比对，从而验证用户输入的指纹是否与该用户对应的指纹模板是否匹配。若获取了用户多个手指的指纹，则要将多个手指指纹与对应的指纹模板一一比对。
在S23中，若匹配，则向终端发送交易请求成功信息。
在一些实施例中，若匹配成功，通过身份验证，则所述服务器向终端发送交易请求成功信息。若未通过身份验证，则向所述终端发送交易请求失败，提示所述终端再次进行身份验证，多次验证未通过后，在一定时间内停止该账户进行任何操作。
在一些实施例中，所述无卡交易方法还包括：接收ATM机发送的交易请求信息；以及完成身份验证以及数据处理后，根据所述交易请求信息，向所述ATM机发送交易执行指令。
具体地，当所述ATM机解析所述识别标识后，向所述服务器发送交易请求信息。当所述服务器完成身份验证以及数据处理后，根据所述交易请求信息，向所述ATM机发送交易执行指令。所述数据处理包括后台财务核算与鉴权。所述ATM机收到交易执行指令后，进行对应的交易操作，例如送出一万元钞票。
参考图3，图3是本发明实施例提供的一种无卡交易装置的结构示意图。所述装置包括存储器31以及处理器32，所述存储器31上存储有可在所述处理器32上运行的计算机程序，其特征在于，所述处理器32执行所述程序时实现所述无卡交易方法中的步骤。所述存储器31可以包括：ROM、RAM、磁盘或光盘等。所述无卡交易方法的步骤请参见上文有关图1的相关描述，此处不再赘述。
参考图4，图4是本发明实施例提供的一种服务器的流程示意图。包括存储器41及处理器42，所述存储器41上存储有可在所述处理器42上运行的计算机程序，以及用户的一个或多个指纹模板和密码，其特征在于，所述处理器42执行所述程序时实现所述无卡交易方法中的步骤。所述存储器41可以包括：ROM、RAM、磁盘或光盘等。所述无卡交易方法的步骤请参见上文有关图2的相关描述，此处不再赘述。
虽然本发明披露如上，但本发明并非限定于此。任何本领域技术人员，在不脱离本发明的精神和范围内，均可作各种更动与修改，因此本发明的保护范围应当以权利要求所限定的范围为准。

Claims (14)

  1. 一种无卡交易方法，其特征在于，适用于屏幕能够进行指纹采集的终端，所述无卡交易方法包括：
    接收用户输入的交易信息；
    生成对应本次交易的识别标识，所述识别标识包括交易信息；
    向ATM机的识别装置展示所述识别标识；
    对用户进行身份验证，所述身份验证包括同时验证用户输入的密码以及指纹；以及
    若通过身份验证，显示交易请求成功信息。
  2. 根据权利要求1所述的无卡交易方法，其特征在于，所述识别标识包括二维码或条形码。
  3. 根据权利要求1所述的无卡交易方法，其特征在于，所述交易包括存取款。
  4. 根据权利要求1所述的无卡交易方法，其特征在于，针对不同的交易内容生成不同类型的标识信息。
  5. 根据权利要求1所述的无卡交易方法，其特征在于，所述对用户进行身份验证包括：
    接收用户在终端屏幕上输入的数字密码；
    在用户输入数字密码的期间获取用户指纹；
    将所述用户输入的数字密码发送至服务器；
    将所获取的指纹发送至服务器；以及
    根据服务器发送的验证确认信息判定用户是否通过身份验证。
  6. 根据权利要求5所述的无卡交易方法，其特征在于，在用户输入数字密码的期间获取用户指纹包括：
    在用户输入每个数字密码时，获取用户指纹。
  7. 根据权利要求5所述的无卡交易方法，其特征在于，所获取的用户指纹为用户一个手指的指纹或多个手指的指纹。
  8. 根据权利要求1所述的无卡交易方法，其特征在于，所述对用户进行身份验证包括：
    接收用户在终端屏幕上通过滑动手指输入的手势图形密码；
    在用户输入手势图形密码的期间获取用户指纹；
    将所述用户输入的手势图形密码发送至服务器；
    将所获取的指纹发送至服务器；以及
    根据服务器发送的验证确认信息判定用户是否通过身份验证。
  9. 根据权利要求8所述的无卡交易方法，其特征在于，在用户输入密码的期间获取用户指纹包括：
    在用户开始输入手势图形密码时或用户结束输入手势图形密码时，获取用户指纹。
  10. 一种无卡交易方法，其特征在于，适用于存储有用户的一个或多个指纹模板和密码的服务器，所述无卡交易方法包括：
    接收终端获取的密码以及指纹，所述终端获取的密码包括数字密码或手势图形密码；
    验证所述终端获取的密码以及指纹是否与存储的密码以及指纹模板匹配；以及
    若匹配，则向终端发送交易请求成功信息。
  11. 根据权利要求10所述的无卡交易方法，其特征在于，还包括：
    接收ATM机发送的交易请求信息；以及
    完成身份验证以及数据处理后，根据所述交易请求信息，向所述 ATM机发送交易执行指令。
  12. 根据权利要求10所述的无卡交易方法，其特征在于，所述验证所述终端获取的密码以及指纹是否与存储的密码以及指纹模板匹配包括：
    验证所获取的数字密码是否与存储的数字密码匹配以及所获取的一个或多个指纹是否与终端中存储的该用户的一个或多个指纹模板匹配；或验证所获取的手势图形密码是否存储的手势图形密码匹配以及所获取的一个或多个指纹是否与终端中存储的该用户的一个或多个指纹模板匹配。
  13. 一种无卡交易装置，包括存储器以及处理器，所述存储器上存储有可在所述处理器上运行的计算机程序，其特征在于，所述处理器执行所述程序时实现如权利要求1至9所述的无卡交易方法中的步骤。
  14. 一种服务器，包括存储器以及处理器，所述存储器上存储有可在所述处理器上运行的计算机程序，以及用户的一个或多个指纹模板和密码，其特征在于，所述处理器执行所述程序时实现如权利要求10至12所述的无卡交易方法中的步骤。
PCT/CN2019/102991 2019-05-24 2019-08-28 无卡交易方法、装置及服务器 WO2020237871A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201910443637.0A CN111985913A (zh) 2019-05-24 2019-05-24 无卡交易方法、装置及服务器
CN201910443637.0 2019-05-24

Publications (1)

Publication Number Publication Date
WO2020237871A1 true WO2020237871A1 (zh) 2020-12-03

Family

ID=73437021

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/102991 WO2020237871A1 (zh) 2019-05-24 2019-08-28 无卡交易方法、装置及服务器

Country Status (2)

Country Link
CN (1) CN111985913A (zh)
WO (1) WO2020237871A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI819765B (zh) * 2022-08-25 2023-10-21 合作金庫商業銀行股份有限公司 無卡式金融交易系統及主機伺服器

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070136582A1 (en) * 2005-12-13 2007-06-14 Giuseppe Longobardi Method and system for transaction validation
CN104951679A (zh) * 2015-06-17 2015-09-30 惠州Tcl移动通信有限公司 一种终端设备的解锁方法及解锁装置
CN105225359A (zh) * 2015-09-15 2016-01-06 中国联合网络通信集团有限公司 基于二维码的无卡取款方法和指纹认证服务器
CN106408291A (zh) * 2016-09-06 2017-02-15 深圳怡化电脑股份有限公司 一种无卡交易方法及系统
CN107393213A (zh) * 2017-06-29 2017-11-24 台山市金讯互联网络科技有限公司 一种无卡取款的方法
CN108053220A (zh) * 2018-01-11 2018-05-18 平安科技（深圳）有限公司 一种无卡取款的保护方法、设备及存储介质
CN207503364U (zh) * 2017-07-12 2018-06-15 深圳怡化电脑股份有限公司 Atm取款机和在atm取款机上实现无卡取款的系统

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104484804A (zh) * 2014-12-24 2015-04-01 福建联迪商用设备有限公司 一种安全指纹交易支付的方法及系统
CN106246012A (zh) * 2016-08-31 2016-12-21 张泽 智能锁及其开锁方法
CN109716374B (zh) * 2016-09-04 2023-12-29 万事达卡国际公司 用于经由移动设备进行无卡atm交易的方法和系统
CN106506496A (zh) * 2016-10-27 2017-03-15 宇龙计算机通信科技(深圳)有限公司 一种无卡取款的方法、装置和系统
CN106648125A (zh) * 2016-11-30 2017-05-10 上海斐讯数据通信技术有限公司 一种指纹键盘、基于指纹键盘的验证系统及方法
CN106934613A (zh) * 2017-03-02 2017-07-07 中国工商银行股份有限公司 无卡存取款自动柜员机、移动终端、服务器、系统及方法
CN108124490A (zh) * 2017-12-12 2018-06-05 深圳市汇顶科技股份有限公司 智能锁及解锁方法
CN108877098B (zh) * 2018-05-04 2021-07-27 平安科技（深圳）有限公司 无卡取款方法及装置、系统、存储介质和电子设备
CN109448271A (zh) * 2018-09-03 2019-03-08 深圳壹账通智能科技有限公司 一种无卡取款方法、计算机可读存储介质及服务器

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070136582A1 (en) * 2005-12-13 2007-06-14 Giuseppe Longobardi Method and system for transaction validation
CN104951679A (zh) * 2015-06-17 2015-09-30 惠州Tcl移动通信有限公司 一种终端设备的解锁方法及解锁装置
CN105225359A (zh) * 2015-09-15 2016-01-06 中国联合网络通信集团有限公司 基于二维码的无卡取款方法和指纹认证服务器
CN106408291A (zh) * 2016-09-06 2017-02-15 深圳怡化电脑股份有限公司 一种无卡交易方法及系统
CN107393213A (zh) * 2017-06-29 2017-11-24 台山市金讯互联网络科技有限公司 一种无卡取款的方法
CN207503364U (zh) * 2017-07-12 2018-06-15 深圳怡化电脑股份有限公司 Atm取款机和在atm取款机上实现无卡取款的系统
CN108053220A (zh) * 2018-01-11 2018-05-18 平安科技（深圳）有限公司 一种无卡取款的保护方法、设备及存储介质

Also Published As

Publication number Publication date
CN111985913A (zh) 2020-11-24

Similar Documents

Publication Publication Date Title
AU2018200898B2 (en) Authentication using biometric technology through a consumer device
US20150317638A1 (en) Methods, Devices and Systems for Transaction Initiation
Das et al. Designing a biometric strategy (fingerprint) measure for enhancing ATM security in Indian e-banking system
RU2397540C2 (ru) Способ и система для выполнения защищенной электронной транзакции, а также соответствующие носитель данных и терминал
US20150227937A1 (en) Random biometric authentication method and apparatus
CN110169032A (zh) 用于智能卡生物计量登记的系统和方法
US11552945B2 (en) Transaction authentication
CN109426963B (zh) 认证生物统计请求的生物统计系统
US11657682B2 (en) Securing a cardless ATM authentication through position detection
WO2020136763A1 (ja) 認証システム、認証装置、認証方法、及びプログラム
US20230020600A1 (en) System, Method, and Computer Program Product for Authenticating a Transaction
JP2007114911A (ja) Ｉｃカード内認証システム
JP2007164423A (ja) 個人認証システム及び個人認証方法
Onyesolu et al. Improving security using a three-tier authentication for automated teller machine (ATM)
WO2020237871A1 (zh) 无卡交易方法、装置及服务器
US11797974B2 (en) Systems and methods for securely generating and printing a document
JP4802670B2 (ja) カードレス認証システム及び該システムに用いられるカードレス認証方法、カードレス認証プログラム
TW202127341A (zh) 一種資料處理方法、裝置與系統
JP4834785B2 (ja) 現金自動預払システム及び装置
TWM556877U (zh) 登入驗證裝置及登入驗證系統
JP2002269052A (ja) 携帯端末認証システム、携帯端末認証方法ならびに携帯端末認証プログラムおよび該プログラムを記憶したコンピュータ読み取り可能な記録媒体
Ahamed et al. A review report on the fingerprint-based biometric system in ATM banking
US12099990B2 (en) Systems and methods for securely generating and printing a document
US11636464B2 (en) Systems and methods for securely generating and printing a document
Suruthi et al. Efficient handwritten passwords to overcome spyware attacks

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19930742

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 19930742

Country of ref document: EP

Kind code of ref document: A1