TW201725545A

TW201725545A - Mobile payment method that effectively overcomes the potential risk of financial information of the user being misappropriated

Info

Publication number: TW201725545A
Application number: TW105101302A
Authority: TW
Inventors: Tong-Yong Pan
Original assignee: T Wallet Co Ltd
Priority date: 2016-01-15
Filing date: 2016-01-15
Publication date: 2017-07-16

Abstract

A mobile payment method is disclosed, in which a user is linking to a network mechanism for transaction and authorize the transaction to an acquiring agent, and afterwards, the acquiring agent presents a payment website to the user. The user may operate his or her own mobile device to acquire a network transaction verification code and enter the verification code and the mobile phone number into the payment website. Afterwards, the acquiring agent transmits a payment notification to a server to allow the server to conduct a matching operation to determine if the verification code and the mobile phone number are correct. If the matching is successful, then the server transmits the payment notification to the mobile device of the user so that the user may use his or her own mobile device to carry out the payment. As such, this invention effectively overcomes the potential embezzlement risk of financial information of the user to thereby improve security of network payment.

Description

行動支付方法Mobile payment method

本發明係有關於一種行動支付方法，特別是一種透過網路交易驗證碼，以提高網路支付安全性之遠端行動支付方法。The present invention relates to a mobile payment method, and more particularly to a remote mobile payment method for improving the security of online payment by using a network transaction verification code.

按，隨著網際網路的發達以及通訊技術的蓬勃發展，現代人利用電視或網路進行購物，儼然已經成為現今社會極為常見的一種商業行為。其中，線上的購物網站數量與規模亦隨之發展，根據資策會產業情報研究所的統計，2006年台灣網路購物的市場規模約為新台幣1,341億元，到2010年攀升至新台幣2,597億元，至於2013年時則已突破5,000億元。由此觀之，網路購物每年具有20%以上的高度成長率，確實證明了網路購物市場的確具有其驚人的潛在商機，實屬不容小覷。According to the development of the Internet and the rapid development of communication technologies, modern people using TV or online shopping has become a very common business practice in today's society. Among them, the number and scale of online shopping websites have also developed. According to the statistics of the Industrial Information Research Institute of the Institute, the market size of online shopping in Taiwan in 2006 was about NT$134.1 billion, and it climbed to NT$2,597 in 2010. 100 million yuan, as of 2013, has exceeded 500 billion yuan. From this point of view, online shopping has a high growth rate of more than 20% per year, which proves that the online shopping market does have its amazing potential business opportunities, which is not to be underestimated.

更進一步而言，由於網際網路的普及化，隨之發展的商業模式或商品交易模式亦越發成熟，緣此，自動化交易以及C2C（Consumer to Consumer）的交易模式也越容易被現代人所接受。因此，類似的網路購物、網路拍賣等電子商務遂與日遽增，各家銀行業者亦陸續推出網路銀行的服務，俾利使用者可在不出門購物、不親臨櫃臺、不排隊等待的情況下，只需在家透過電腦登入購物網站或網路銀行，即可進行購物、付款、或轉帳等交易行為。Furthermore, due to the popularity of the Internet, the development of business models or commodity trading models has become more mature. Therefore, the more automated trading and C2C (Consumer to Consumer) trading models are accepted by modern people. . As a result, similar e-commerce such as online shopping and online auctions have increased, and various banking companies have also launched online banking services. Profit-seeking users can go shopping without visiting the counter or waiting in line. In this case, you can log in to the shopping website or online banking through your computer at home to make purchases, payments, or transfers.

然而，值得注意的是，利用網際網路進行線上交易模式的共通點，係為使用者皆必須輸入自身的金融資料，例如：***卡號、銀行帳號、登入帳號、密碼或其他相關交易資料等等，再透過網路傳輸到指定的***中心或網路銀行的伺服器完成交易。由此可以發現，在使用者享受網路所帶來便利性極高的交易模式時，同時亦存在著極大的風險，包括網路駭客帶來的威脅。舉例來說，一旦網路駭客入侵使用者所使用的電腦（尤其當此電腦並非使用者一人專屬，而為多個使用者共同使用的電腦時），則使用者的私人金融資料即很有可能輕易地被網路駭客所盜取，造成財務上嚴重的損失。However, it is worth noting that the common point of using the Internet for online trading mode is that users must enter their own financial information, such as credit card number, bank account number, login account number, password or other related transaction information, etc. And then through the network to the designated credit card center or online banking server to complete the transaction. It can be seen that there are also significant risks, including threats from Internet hackers, when users enjoy the highly convenient transaction mode brought by the Internet. For example, once a hacker invades a computer used by a user (especially when the computer is not exclusive to the user and is used by multiple users), the user's private financial information is very good. It may be easily stolen by Internet hackers, causing serious financial losses.

再者，不僅僅是使用者所操作之電腦可能具有安全性的疑慮，基於購物網站的管理不易，因此許多購物網站仍有可能因自身的疏忽或技術上的不足而遭駭客攻擊，造成使用者之會員帳號及資料被盜取的問題發生，因此對使用者而言，亦非足夠地安全。由此觀之，現今影響目前線上交易行為最關鍵的原因，即在於安全性的考量。緣是，為了解決上述習知技術存有的眾多缺失，本發明人係有感該些諸多缺點之可改善，且依據多年來從事此方面之相關經驗，悉心觀察且研究之，並配合學理之運用，而提出一種設計新穎且有效改善上述缺失之本發明，其係揭露一種可透過網路交易驗證碼，以提升網路支付安全性之行動支付方法，其係能輕易取代現有付款方法的交易模式，有關本發明具體之架構及實施方式將詳述於下。Moreover, not only the computer that the user operates may have security concerns, but the management based on the shopping website is not easy, so many shopping websites may still be attacked by hackers due to their own negligence or technical deficiencies, resulting in use. The problem of the member's account number and data being stolen occurs, so it is not sufficiently safe for the user. From this point of view, the most critical reason for the current online trading behavior is the security considerations. Therefore, in order to solve the many shortcomings of the above-mentioned prior art, the present inventors have felt that these various shortcomings can be improved, and based on the relevant experience in this field for many years, carefully observe and study, and cooperate with the theory. The present invention proposes an invention that is novel in design and effective in improving the above-mentioned deficiencies, and discloses an action payment method capable of improving the security of online payment through an online transaction verification code, which can easily replace the transaction of the existing payment method. Modes, specific architectures and embodiments of the present invention will be described in detail below.

為解決習知技術存在的問題，本發明之一目的係在於提供一種行動支付方法，其係針對現行常見的網路支付行為作一改良，此改良之處可大幅地助長於本發明有效提升網路支付安全性之較佳功效。此種行動支付方法，係主要利用網際網路所提供的網頁或手機應用程式等傳輸媒介，將付款資訊通知消費者，使得消費者可透過自身的手機卡片管理介面與相關安全元件進行溝通，藉此解決習知網路商店或金融機構可能持有消費者卡片資訊，而進而引發交易被盜用之風險。In order to solve the problems existing in the prior art, an object of the present invention is to provide a mobile payment method, which is an improvement on the current common online payment behavior, and the improvement can greatly contribute to the effective improvement of the present invention. The better function of road payment security. This kind of mobile payment method mainly uses the transmission medium such as a webpage or a mobile phone application provided by the Internet to notify the consumer of the payment information, so that the consumer can communicate with the relevant security component through the mobile phone card management interface. This solution may involve a consumer online store or financial institution that may hold consumer card information and thereby risk theft of the transaction.

承上所述，本發明係揭露一種行動支付方法，其係包括以下步驟：一使用者連線至一網路機構進行交易，網路機構之交易係授權至一收單代理機構；收單代理機構將一付款網頁呈現給使用者；使用者操作一行動裝置以取得一網路交易驗證碼，並將網路交易驗證碼及使用者之手機號碼輸入付款網頁；收單代理機構將一付款通知傳送至與使用者之行動裝置連線之一伺服器，並由伺服器比對使用者輸入之手機號碼與一網路交易驗證碼是否一致；以及，當比對結果相同時，由伺服器將付款通知傳送至使用者之行動裝置，以供使用者經由行動裝置執行付款。In view of the above, the present invention discloses a mobile payment method, which includes the following steps: a user connects to a network institution to conduct a transaction, and a transaction of a network institution is authorized to an acquiring agent; an acquiring agent The institution presents a payment webpage to the user; the user operates a mobile device to obtain an online transaction verification code, and inputs the online transaction verification code and the user's mobile phone number into the payment webpage; the acquiring agent notifies the payment notification Transmitting to one of the servers connected to the user's mobile device, and comparing the mobile phone number entered by the server with the online transaction verification code by the server; and when the comparison result is the same, the server will The payment notification is transmitted to the user's mobile device for the user to perform the payment via the mobile device.

其中，根據本發明之實施例，在使用者執行付款之流程中，更包括以下步驟：由使用者透過行動裝置之應用程式選擇支付方式及卡片；應用程式產生支付之相關資訊回傳至伺服器；以及，伺服器將支付之相關資訊傳送至收單代理機構，以供收單代理機構組成授權訊息予使用者的發卡行，以由發卡行進行授權作業。According to the embodiment of the present invention, in the process of the user performing the payment, the method further includes the following steps: the user selects the payment method and the card through the application of the mobile device; the application generates the relevant information of the payment and returns the information to the server. And, the server transmits the relevant information to the acquiring agent for the acquiring agent to form an authorization message to the issuing bank of the user for authorization work by the issuing bank.

另一方面而言，若伺服器比對失敗時，則伺服器係回應交易失敗，並停止傳送付款通知至使用者之行動裝置，以產生一失敗交易，在此情況下，使用者需重新執行操作。On the other hand, if the server fails, the server responds to the transaction failure and stops transmitting the payment notification to the user's mobile device to generate a failed transaction. In this case, the user needs to re-execute operating.

除此之外，本發明所揭露之行動支付方法，其中所述之網路交易驗證碼係可為使用者預先於其行動裝置之應用程式上註冊所輸入之手機號碼。在一實施例中，則此應用程式係可為一電子錢包（Wallet Client），與之連線之伺服器則係為一數位皮夾管理者（Wallet Server），以針對此電子錢包進行連線及訊息的傳遞。In addition, the mobile payment verification method disclosed in the present invention, wherein the online transaction verification code is used for the user to register the input mobile phone number on the application of the mobile device in advance. In one embodiment, the application can be an electronic wallet (Wallet Client), and the server connected thereto is a digital wallet manager (Wallet Server) to connect to the electronic wallet. And the delivery of the message.

底下藉由具體實施例配合所附的圖式詳加說明，當更容易瞭解本發明之目的、技術內容、特點及其所達成之功效。The purpose, technical contents, features and effects achieved by the present invention will be more readily understood by the detailed description of the embodiments and the accompanying drawings.

以上有關於本發明的內容說明，與以下的實施方式係用以示範與解釋本發明的精神與原理，並且提供本發明的專利申請範圍更進一步的解釋。有關本發明的特徵、實作與功效，茲配合圖式作較佳實施例詳細說明如下。The above description of the present invention is intended to be illustrative and illustrative of the spirit and principles of the invention, and to provide further explanation of the scope of the invention. The features, implementations, and utilities of the present invention are described in detail with reference to the preferred embodiments.

由於目前網路支付交易的方法，多是以消費者直接輸入***卡號或卡片相關資訊為主，在此種模式下消費者的金融資訊會易被網路上的商家或金融機構所取得，一旦這些網路特店或金融機構的安全機制發生異常時，則將使消費者的敏感性資訊曝露在外，進而引發交易遭受盜用之風險發生。為了解決現行的這些問題，本發明係針對該些缺失提出一種有效的改良方案，其係揭露一種行動支付方法，不僅可避免網路上的商家或金融機構持有消費者卡片資訊之風險，更可以進一步透過網路交易驗證碼的方式，來提高網路支付的安全層級，其實施之系統架構及步驟流程請參閱第1圖及第2圖所示。Because of the current methods of online payment transactions, consumers mainly input credit card numbers or card-related information directly. In this mode, consumers' financial information can be easily obtained by merchants or financial institutions on the network. When an abnormality occurs in the security mechanism of a network store or financial institution, the sensitive information of the consumer will be exposed, which may lead to the risk of the transaction being stolen. In order to solve the current problems, the present invention proposes an effective improvement solution for the shortcomings, which discloses a mobile payment method, which not only avoids the risk that the merchant or financial institution on the network holds the consumer card information, but also Further improve the security level of network payment by means of online transaction verification code. The system architecture and process flow of the implementation are shown in Figure 1 and Figure 2.

首先，第1圖係揭露本發明實施例系統架構之示意圖，根據本發明之實施例，此種行動支付方法係為一種透過業務邏輯進行遠端交易的操作流程，其中整個遠端交易的角色包括有：使用者100、網路機構200、收單代理機構300、發卡行400、授權轉接中心500、伺服器600及應用程式700。各個角色皆有其相對應之作業，本發明係先針對各個角色之作業分工說明如下。First, FIG. 1 is a schematic diagram showing a system architecture of an embodiment of the present invention. According to an embodiment of the present invention, the mobile payment method is an operation flow for remote transaction through a service logic, wherein the role of the entire remote transaction includes There are: user 100, network organization 200, acquiring agent 300, issuing bank 400, authorized transfer center 500, server 600 and application 700. Each role has its corresponding operation. The present invention first describes the division of work for each role as follows.

使用者100泛指一般卡片（例如***或金融卡）的持有者，在本發明所揭露的行動支付環境下，則原實體卡片可透過使用者100所持有之行動裝置（例如手機）中的應用程式700，而轉換為一虛擬卡片。在本發明之實施例中，應用程式700係為一電子錢包（例如：數位皮夾APP），其係連線至伺服器600，使得使用者100可透過伺服器600進行卡片操作或其他作業。在此情況下，伺服器600即可視為一數位皮夾管理者，以透過此角色進行電子錢包的連線與訊息傳遞。The user 100 generally refers to a holder of a general card (such as a credit card or a financial card). In the mobile payment environment disclosed in the present invention, the original physical card can pass through a mobile device (such as a mobile phone) held by the user 100. The application 700 is converted to a virtual card. In the embodiment of the present invention, the application 700 is an electronic wallet (for example, a digital wallet APP), which is connected to the server 600, so that the user 100 can perform card operations or other operations through the server 600. In this case, the server 600 can be regarded as a digital wallet manager to perform the connection and message transmission of the electronic wallet through the role.

網路機構200的種類例如可為：網路商店、網路購物中心、網路商城，以藉由販售商品來收取相對應的報酬。甚或，網路機構200亦可為一透過網際網路來進行金融交易的付款交易中心，例如：網路虛擬銀行、或網路ATM等等。一般而言，使用者100係可藉由透過一電腦主機（PC）、平板電腦（tablet）或手持的行動裝置（mobile device）而連線至網路機構200進行線上購物、線上轉帳、線上餘額查詢、線上繳費稅、行動提款等金融交易。The types of the network organizations 200 may be, for example, an online store, an online shopping mall, or an online shopping mall to collect corresponding rewards by selling goods. Or, the network organization 200 can also be a payment transaction center for conducting financial transactions through the Internet, such as a network virtual bank, or a network ATM. In general, the user 100 can connect to the network organization 200 for online shopping, online transfer, online balance by using a computer host (PC), a tablet or a mobile device. Financial transactions such as enquiries, online payment taxes, and action withdrawals.

收單代理機構300則係指與上述之網路機構200有合作關係之金融機構，其係集中收送該些網路機構200的授權交易，以透過此角色進行交易的繞送。發卡行400則為使用者100所持有卡片之發行者，例如各家銀行業者，其主要係針對交易進行相關的檢核作業，並且依據使用者100之交易行為進行後續的授權作業審核。其中，當收單代理機構300與使用者100之發卡行400若屬不同銀行時，則交易行為必須經由一授權轉接中心500來負責交易的繞送。相對地，若收單代理機構300與使用者100之發卡行400係隸屬於同一銀行時，則無須授權轉接中心500作為媒合的中介角色。The acquiring agent 300 refers to a financial institution that has a cooperative relationship with the above-mentioned network organization 200, and collects the authorized transactions of the network organizations 200 in order to carry out the transaction through the role. The issuer 400 is the issuer of the card held by the user 100, for example, each banker, which mainly performs related check operations for the transaction, and performs subsequent authorization operation review according to the transaction behavior of the user 100. Wherein, when the acquiring agent 300 and the issuing bank 400 of the user 100 are different banks, the transaction behavior must be responsible for the rounding of the transaction via an authorized transfer center 500. In contrast, if the acquiring agent 300 and the issuing bank 400 of the user 100 belong to the same bank, it is not necessary to authorize the transfer center 500 as an intermediary role of the matchmaking.

在解釋完本發明實施之系統架構中的各個角色後，本發明係接續針對使用者操作界面與交易流程之間的搭配進行更詳盡的說明，其中，有關本發明行動支付方法之實施流程步驟示意圖，請一併參閱第2圖所示。After explaining the various roles in the system architecture of the implementation of the present invention, the present invention provides a more detailed description of the collocation between the user operation interface and the transaction process, wherein the steps of the implementation process of the mobile payment method of the present invention are schematically illustrated. Please refer to Figure 2 together.

首先，請參考步驟S202所示，使用者100係經由網際網路連線至網路機構200進行交易，如前所述，此連線方式例如可透過一電腦主機（PC）、平板電腦（tablet）或手持的行動裝置（mobile device）而連線至網路機構200，以進行後續線上購物、線上轉帳、線上餘額查詢、線上繳費稅、行動提款等金融交易。在使用者100完成初步的購物或點選交易項目後，這些交易則會授權至收單代理機構300。之後，如步驟S204所示，收單代理機構300係呈現一付款網頁於使用者100所操作之電腦主機、平板電腦或手持裝置之頁面上，有關此付款網頁之資訊例如可參考第3圖所示，其係包括有網路機構200之名稱（例如：XXXX）、此筆交易之編號（例如訂單編號：dev2015012401）、交易金額（例如訂單金額：2999元）、電話號碼、網路交易驗證碼（容後詳述）及輸入圖框內所顯示之數字等欄位。之後，如步驟S206所示，使用者100必須操作一行動裝置，例如使用者本身的手機，以自其手機中的應用程式700取得一網路交易驗證碼。根據本發明之實施例，如第4圖所示，則當使用者100點擊其手機內之應用程式700（例如數位皮夾APP）後，該應用程式700的頁面上即會呈現出供此次交易使用之網路交易驗證碼，於本發明之此實施例中，本發明係以「9420」作為一示範例之說明。之後，在取得該網路交易驗證碼後，則使用者100再將此網路交易驗證碼連同使用者之手機號碼輸入第3圖的付款網頁中。First, referring to step S202, the user 100 connects to the network mechanism 200 via the Internet to perform the transaction. As described above, the connection mode can be, for example, a computer host (PC) or a tablet (tablet). Or a handheld mobile device to connect to the network organization 200 for subsequent online shopping, online transfer, online balance inquiry, online payment tax, mobile withdrawal and other financial transactions. These transactions are authorized to the acquiring agent 300 after the user 100 completes the initial shopping or clicking on the transaction. Then, as shown in step S204, the acquiring agent 300 presents a payment web page on a webpage of a computer host, a tablet computer or a handheld device operated by the user 100. For information about the payment webpage, for example, refer to FIG. The indication includes the name of the network organization 200 (for example: XXXX), the number of the transaction (for example, order number: dev2015012401), the transaction amount (for example, the order amount: 2999 yuan), the telephone number, and the online transaction verification code. (Detailed later) and the fields displayed in the input box. Thereafter, as shown in step S206, the user 100 must operate a mobile device, such as the user's own mobile phone, to obtain an internet transaction verification code from the application 700 in the mobile phone. According to an embodiment of the present invention, as shown in FIG. 4, when the user 100 clicks on the application 700 (for example, a digital wallet APP) in the mobile phone, the page of the application 700 is presented for the time. In the embodiment of the present invention, the present invention uses "9420" as an illustrative example. After the network transaction verification code is obtained, the user 100 then inputs the network transaction verification code together with the user's mobile phone number into the payment page of FIG.

之後，如步驟S208所示，在使用者完成輸入付款網頁之資訊後，收單代理機構300係將付款通知傳送至伺服器600，由於伺服器600係同步連線於使用者100之行動裝置，因此，如步驟S210所示，伺服器600係針對使用者100所輸入之手機號碼與一網路交易驗證碼進行比對。根據本發明之實施例，其中，此網路交易驗證碼係為使用者100預先於其行動裝置之應用程式700上註冊所輸入之手機號碼。因此，如步驟S212所示，當伺服器600比對使用者100於第3圖中所輸入之手機號碼與其預先註冊輸入之網路交易驗證碼相同時，則伺服器600辨識消費者係為同一使用者，故可安全地將付款通知傳送至使用者100之行動裝置，以供使用者100直接利用其行動裝置執行付款。至於，若比對失敗時，則基於安全性的考量，如步驟S214所示，伺服器600係回應交易失敗，並透過相對應的錯誤碼（error code）告知是驗證碼錯誤或手機號碼比對錯誤，在此情況下，則使用者100的手機即不會收到付款的通知訊息。此次交易將視為失敗交易，使用者100需重新操作一次。Then, as shown in step S208, after the user completes the information inputting the payment webpage, the acquiring agent 300 transmits the payment notification to the server 600, and the server 600 is connected to the mobile device of the user 100 synchronously. Therefore, as shown in step S210, the server 600 compares the mobile phone number input by the user 100 with an online transaction verification code. According to an embodiment of the present invention, the network transaction verification code is that the user 100 registers the entered mobile phone number in advance with the application 700 of the mobile device. Therefore, as shown in step S212, when the server 600 compares the mobile phone number entered by the user 100 in FIG. 3 with the online transaction verification code of the pre-registered input, the server 600 identifies that the consumer is the same. The user can safely transmit the payment notification to the mobile device of the user 100 for the user 100 to directly perform payment using his mobile device. As a result, if the comparison fails, based on the security considerations, as shown in step S214, the server 600 responds to the transaction failure and notifies the verification code error or the mobile phone number comparison through the corresponding error code. In this case, the user's 100 mobile phone will not receive the payment notification message. The transaction will be considered a failed transaction and the user 100 will need to re-operate once.

請參閱第5A圖及第5B圖，其係揭露本發明不同實施例之付款通知之示意圖，其中，當網路機構200係為一網路特店，例如：網路商店、網路購物中心或網路商城時，則此付款通知係如第5A圖所示，可包括有該網路特店的名稱（例如：小甜的店）、交易金額（2999元）、購買商品明細（例如：衛生紙、洗碗精、化妝水、洗衣精等）、以及交易日期與時間（2015/01/24 13：58：10）等訊息。而當網路機構200係為一付款交易中心，例如網路虛擬銀行或網路ATM時，則在此情況下，付款通知係如第5B圖所示，包括有此網路虛擬銀行或網路ATM之名稱（例如：國泰世華網路銀行）、交易金額（2999元）、交易明細（例如：非約定轉出交易）、以及交易日期與時間（2015/01/24 13：58：10）等訊息。因此，當使用者100利用其行動裝置成功接收到付款通知時，即可自行決定是否進行付款、何時進行付款、以及選擇自行想要進行付款的方式。Please refer to FIG. 5A and FIG. 5B, which are schematic diagrams of payment notifications of different embodiments of the present invention, wherein the network organization 200 is a network store, such as an online store, an online shopping mall, or In the online store, the payment notice is as shown in Figure 5A, which may include the name of the Internet store (for example: Xiaotian's store), the transaction amount (2,999 yuan), and the purchase details (for example: toilet paper) , dishwashing detergent, lotion, laundry detergent, etc., as well as the date and time of the transaction (2015/01/24 13:58:10) and other information. When the network organization 200 is a payment transaction center, such as a network virtual bank or a network ATM, in this case, the payment notification is as shown in FIG. 5B, including the network virtual bank or network. The name of the ATM (for example: Cathay Pacific Online Banking), the transaction amount (2,999 yuan), the transaction details (for example: non-contracted transfer transactions), and the date and time of the transaction (2015/01/24 13:58:10) Wait for the message. Therefore, when the user 100 successfully receives the payment notification using his mobile device, he or she can decide whether to make the payment, when to make the payment, and how to choose the payment.

更進一步而言，請參閱第1圖及第6圖所示，在使用者決定欲執行付款後，使用者100首先可透過行動裝置之應用程式700選擇欲支付方式及卡片（如步驟S602），其詳細之示意圖可參閱第7圖，使用者100可自行選擇欲使用VISA卡1、MASTER卡2、JCB卡3 、AE卡4、行動金融卡5、銀行帳戶6，並在點擊「使用」後成功選取該張卡片進行交易。之後，如步驟S604所示，再由應用程式700產生支付之相關資訊回傳至伺服器600，並如步驟S606所示，最後，由伺服器600將支付之相關資訊傳送至收單代理機構300，以供收單代理機構300組成授權訊息予使用者100的發卡行400，由發卡行400進行授權作業。值得說明的是，當收單代理機構300與使用者100之發卡行400隸屬於不同銀行時，則交易行為必須經由授權轉接中心500來負責交易的繞送。相對地，若收單代理機構300與使用者100之發卡行400係隸屬於同一銀行時，則授權訊息可直接傳送至使用者100之發卡行400，而無須授權轉接中心500作為媒合的中介角色。Further, referring to FIG. 1 and FIG. 6, after the user decides to perform the payment, the user 100 first selects the payment method and the card through the application 700 of the mobile device (step S602). For a detailed diagram, refer to FIG. 7. The user 100 can choose to use the VISA card 1, MASTER card 2, JCB card 3, AE card 4, mobile financial card 5, bank account 6, and after clicking "use" Successfully selected the card for trading. Then, as shown in step S604, the related information generated by the application 700 is returned to the server 600, and as shown in step S606, finally, the relevant information of the payment is transmitted by the server 600 to the acquiring agent 300. The issuing bank 400 forms an authorization message for the issuing bank 400 of the user 100, and the issuing bank 400 performs the authorization operation. It should be noted that when the acquiring agent 300 and the issuing bank 400 of the user 100 belong to different banks, the transaction behavior must be responsible for the routing of the transaction via the authorized transfer center 500. In contrast, if the acquiring agent 300 and the issuing bank 400 of the user 100 belong to the same bank, the authorization message can be directly transmitted to the issuing bank 400 of the user 100 without authorizing the transfer center 500 as a matchmaking. Mediation role.

之後，當發卡行400完成授權作業後，則網路機構200可接收到授權結果，在一實施例中，當網路機構200為購物商家時，則網路機構200即可根據授權結果將使用者所購買的商品配送出貨。在另一實施例中，若網路機構200係為一付款交易中心，則網路機構200在接收到授權結果後，便可根據授權結果而針對使用者之金融資訊進行轉帳、餘額查詢、繳費稅、行動提款等交易。最後，收單代理機構300係可透過伺服器600而將授權結果傳送至使用者100手機之應用程式700上，如第8圖所示，以確保交易完成。再者，使用者100亦可透過網路機構200進行後續的狀態查詢，以針對交易行為及後續處理進行有效追蹤。Thereafter, after the issuing bank 400 completes the authorization operation, the network organization 200 can receive the authorization result. In an embodiment, when the network organization 200 is a shopping merchant, the network organization 200 can use the authorization result according to the authorization result. The goods purchased by the seller are shipped and shipped. In another embodiment, if the network mechanism 200 is a payment transaction center, after receiving the authorization result, the network organization 200 can transfer, balance, and pay for the financial information of the user according to the authorization result. Taxes, action withdrawals, etc. Finally, the acquiring agent 300 can transmit the authorization result to the application 700 of the user 100 mobile phone through the server 600, as shown in FIG. 8, to ensure the completion of the transaction. Moreover, the user 100 can also perform subsequent status inquiry through the network mechanism 200 to effectively track the transaction behavior and subsequent processing.

是以，上述所言大抵為本發明所揭露之一種同步交易流程，其係與現行的交易流程類似，主要是指從發起端的網路機構、經由收單代理機構、伺服器、使用者端之應用程式、授權轉接中心，至最後的發卡行進行授權作業，整個交易流程從開始到結束，各系統單位之間必須相互等待回應訊息，最後在由收單代理機構將授權結果回應給相關系統。不過，另一方面而言，本發明亦同時提供一種非同步交易流程，與前述流程不同的是，在非同步交易流程中，伺服器在針對收單代理機構所傳送之付款通知進行比對後，係立即回應比對結果，並將比對結果正確或錯誤傳送至網路機構與使用者留存，完成此部分之連線交易。Therefore, the above-mentioned words are generally a synchronous transaction process disclosed by the present invention, which is similar to the current transaction process, mainly refers to the network mechanism from the originating end, through the acquiring agent, the server, and the user end. The application, the authorized transfer center, and the final issuing bank perform the authorization operation. The entire transaction process must wait for the response message from the beginning to the end, and finally the response result is returned to the relevant system by the acquiring agent. . However, on the other hand, the present invention also provides an asynchronous transaction flow, which is different from the foregoing process in that, in the asynchronous transaction process, the server compares the payment notifications transmitted by the acquiring agent. , immediately respond to the results of the comparison, and the correct or incorrect results are transmitted to the network and the user to complete the connection transaction.

之後，網路機構便可再透過網頁提醒使用者於應用程式（電子錢包或數位皮夾）進行付款作業，在此情況下，原先之購物或交易網頁並不會等待使用者完成付款。至於，後續的付款相關流程則如同前述第6圖所示，透過持卡人操作，選定支付工具與卡片，並經由應用程式產生與組成卡片及支付相關資訊回傳至伺服器，由伺服器產生新的連線訊息，將支付相關資訊回應給收單代理機構，由收單代理機構完成後續授權及付款作業，故就此部分不再進行重述。Afterwards, the network can then use the webpage to remind the user to make a payment operation in the application (e-wallet or digital wallet). In this case, the original shopping or trading webpage will not wait for the user to complete the payment. As for the subsequent payment related process, as shown in the above figure 6, the card holder operates, selects the payment instrument and the card, and generates and transmits the relevant information and the payment related information to the server via the application, and is generated by the server. The new connection message will respond to the receiving agent by paying relevant information, and the subsequent authorization and payment operations will be completed by the acquiring agent, so this part will not be repeated.

緣此，綜上所述，本發明所提出之行動支付方法，主要係透過使用者自身的行動裝置接收付款資訊，讓使用者可透過手機卡片管理之應用程式與相關安全元件進行溝通，完成購物或付款等交易。利用本發明所揭露之行動支付方法，消費者之金融資訊（包括***卡號、帳號、密碼等）皆無須留在網路機構上，也不至於有遭受網路駭客盜取之風險，不僅兼具保護消費者之敏感性資訊之優勢，更可有效率地提高網路支付之安全層級。是以，相較於習知技術，本發明所揭露之技術思想，顯然具有較佳之使用效率、產業發展性與廣於發展之潛力，應具備足夠之新穎性與進步性。Therefore, in summary, the mobile payment method proposed by the present invention mainly receives payment information through the user's own mobile device, so that the user can communicate with the relevant security component through the mobile phone card management application to complete the shopping. Or a transaction such as payment. By using the mobile payment method disclosed in the present invention, the financial information (including the credit card number, account number, password, etc.) of the consumer does not need to remain on the network organization, and there is no risk of being stolen by the network hacker. With the advantage of protecting consumers' sensitive information, it can effectively increase the security level of online payment. Therefore, compared with the prior art, the technical idea disclosed by the present invention obviously has the advantages of better use efficiency, industrial development and development, and should have sufficient novelty and progress.

以上所述之諸多實施例僅係為說明本發明之技術思想及特點，其目的在使熟習此項技藝之人士能夠瞭解本發明之內容並據以實施，當不能以之限定本發明之專利範圍，即大凡依本發明所揭示之精神所作之均等變化或修飾，仍應涵蓋在本發明之專利範圍內。The embodiments described above are merely illustrative of the technical spirit and characteristics of the present invention, and the objects of the present invention can be understood by those skilled in the art and are not limited thereto. Equivalent changes or modifications made by the spirit of the present invention should still be included in the scope of the present invention.

100‧‧‧使用者
200‧‧‧網路機構
300‧‧‧收單代理機構
400‧‧‧發卡行
500‧‧‧授權轉接中心
600‧‧‧伺服器
700‧‧‧應用程式
1‧‧‧VISA卡
2‧‧‧MASTER卡
3‧‧‧JCB卡
4‧‧‧AE卡
5‧‧‧行動金融卡
6‧‧‧銀行帳戶100‧‧‧Users
200‧‧‧Internet agencies
300‧‧‧Acquisition agency
400‧‧‧ Issuing bank
500‧‧‧Authorized Transfer Center
600‧‧‧Server
700‧‧‧Application
1‧‧‧VISA card
2‧‧‧MASTER card
3‧‧‧JCB card
4‧‧‧AE card
5‧‧‧ action financial card
6‧‧‧Bank account

第1圖係為根據本發明實施例之系統架構示意圖。第2圖係為根據本發明實施例行動支付方法之步驟流程圖。第3圖係為根據本發明實施例之付款網頁之示意圖。第4圖係為根據本發明實施例取得網路交易驗證碼之示意圖。第5A圖及第5B圖係為根據本發明實施例之付款通知之示意圖。第6圖係為根據本發明實施例使用者執行付款之步驟流程圖。第7圖係為根據本發明實施例選擇支付方式及卡片之示意圖。第8圖係為根據本發明實施例成功授權結果之示意圖。Figure 1 is a schematic diagram of a system architecture in accordance with an embodiment of the present invention. 2 is a flow chart showing the steps of a mobile payment method according to an embodiment of the present invention. Figure 3 is a schematic illustration of a payment web page in accordance with an embodiment of the present invention. Figure 4 is a schematic diagram of obtaining a network transaction verification code in accordance with an embodiment of the present invention. 5A and 5B are schematic diagrams of payment notifications in accordance with an embodiment of the present invention. Figure 6 is a flow diagram showing the steps of a user performing a payment in accordance with an embodiment of the present invention. Figure 7 is a schematic diagram of selecting a payment method and a card according to an embodiment of the present invention. Figure 8 is a schematic illustration of successful authorization results in accordance with an embodiment of the present invention.

Claims

一種行動支付方法，包括以下步驟：一使用者連線至一網路機構進行交易，該網路機構之交易係授權至一收單代理機構；該收單代理機構係將一付款網頁呈現給該使用者；該使用者操作一行動裝置以取得一網路交易驗證碼，並將該網路交易驗證碼及該使用者之手機號碼輸入該付款網頁；以及該收單代理機構將一付款通知傳送至與該使用者之該行動裝置連線之一伺服器，並由該伺服器比對該使用者輸入之該手機號碼與一網路交易驗證碼是否一致：當該使用者輸入之該手機號碼與該網路交易驗證碼相同時，該伺服器係將該付款通知傳送至該使用者之該行動裝置，以供該使用者執行付款；以及當該使用者輸入之該手機號碼與該網路交易驗證碼不同時，該伺服器係回應交易失敗，並停止傳送該付款通知至該使用者之該行動裝置。An action payment method includes the following steps: a user connects to a network institution to conduct a transaction, and the network institution's transaction is authorized to an acquiring agent; the acquiring agent presents a payment web page to the a user operating a mobile device to obtain a network transaction verification code, and inputting the network transaction verification code and the user's mobile phone number into the payment page; and the acquiring agent transmitting a payment notification And a server connected to the mobile device of the user, and the server compares the mobile phone number input by the server with an online transaction verification code: when the user inputs the mobile phone number When the network transaction verification code is the same, the server transmits the payment notification to the mobile device of the user for the user to perform payment; and when the user inputs the mobile phone number and the network When the transaction verification code is different, the server responds to the transaction failure and stops transmitting the payment notification to the mobile device of the user.

如請求項1所述之行動支付方法，其中在該使用者執行付款之步驟中，更包括：該使用者透過該行動裝置之應用程式選擇支付方式及卡片；由該應用程式產生支付之相關資訊回傳至該伺服器；以及該伺服器將支付之相關資訊傳送至該收單代理機構，以供該收單代理機構組成授權訊息予該使用者的發卡行，由該發卡行進行授權作業。The action payment method of claim 1, wherein the step of performing the payment by the user further comprises: the user selecting a payment method and a card through an application of the mobile device; and generating information related to the payment by the application Returning to the server; and the server transmits the relevant information of the payment to the acquiring agent, so that the acquiring agent forms an authorization message to the issuing bank of the user, and the issuing bank performs the authorization operation.

如請求項2所述之行動支付方法，其中該網路機構係可為一網路商店、網路購物中心或網路商城。The mobile payment method of claim 2, wherein the network institution is an online store, an online shopping mall, or an online shopping mall.

如請求項3所述之行動支付方法，其中在該發卡行進行授權作業後，該網路機構係接收一授權結果，以根據該授權結果將該使用者購買之商品配送出貨。The action payment method of claim 3, wherein after the issuing operation is performed by the issuing bank, the network institution receives an authorization result to deliver the goods purchased by the user according to the authorization result.

如請求項4所述之行動支付方法，其中該付款通知包括提供該網路商店、網路購物中心、或網路商城之名稱、交易金額、購買商品明細、以及交易時間之訊息。The mobile payment method of claim 4, wherein the payment notification includes providing a name of the online store, an online shopping mall, or an online shopping mall, a transaction amount, a purchase product detail, and a transaction time.

如請求項2所述之行動支付方法，其中該網路機構係可為一付款交易中心。The mobile payment method of claim 2, wherein the network institution is a payment transaction center.

如請求項6所述之行動支付方法，其中在該發卡行進行授權作業後，該網路機構係接收一授權結果，以根據該授權結果進行轉帳交易、餘額查詢交易、繳費稅、行動提款交易。The action payment method of claim 6, wherein after the issuing operation is performed by the issuing bank, the network institution receives an authorization result to perform a transfer transaction, a balance inquiry transaction, a payment tax, and an action withdrawal according to the authorization result. transaction.

如請求項7所述之行動支付方法，其中該付款通知包括提供該付款交易中心之名稱、交易金額、交易明細、以及交易時間之訊息。The action payment method of claim 7, wherein the payment notification includes a message providing the name of the payment transaction center, the transaction amount, the transaction details, and the transaction time.

如請求項1所述之行動支付方法，其中該使用者係可透過一電腦主機、一平板電腦或該行動裝置連線至該網路機構進行交易。The mobile payment method of claim 1, wherein the user can connect to the network through a computer host, a tablet or the mobile device for transaction.

如請求項1所述之行動支付方法，其中該網路交易驗證碼係為該使用者預先於該行動裝置之應用程式上註冊所輸入之手機號碼。The mobile payment verification method of claim 1, wherein the online transaction verification code is that the user registers the entered mobile phone number with the application of the mobile device in advance.

如請求項2所述之行動支付方法，其中該授權訊息係直接傳送或間接透過一授權轉接中心而傳送至該使用者之發卡行。The mobile payment method of claim 2, wherein the authorization message is transmitted directly or indirectly through an authorized transfer center to the card issuer of the user.

如請求項1所述之行動支付方法，其中在該伺服器完成比對該使用者輸入之該手機號碼與該網路交易驗證碼後，該伺服器係產生一比對結果，並將該比對結果傳送至該網路機構與該使用者留存。The action payment method of claim 1, wherein after the server completes the mobile phone number and the network transaction verification code input by the user, the server generates a comparison result, and the ratio is The results are transmitted to the network and retained with the user.

如請求項12所述之行動支付方法，其中該使用者更可透過該網路機構進行狀態查詢，以確保交易成功完成。The action payment method of claim 12, wherein the user is further queried by the network to ensure that the transaction is successfully completed.

如請求項2所述之行動支付方法，其中該行動裝置之應用程式係為一電子錢包。The mobile payment method of claim 2, wherein the application of the mobile device is an electronic wallet.

如請求項14所述之行動支付方法，其中該伺服器係為一數位皮夾管理者，其係進行電子錢包之連線及訊息傳遞。The mobile payment method according to claim 14, wherein the server is a digital wallet manager, which performs connection and message transmission of the electronic wallet.