TW201942829A - System and method for executing transaction based on a mobile communication device - Google Patents
System and method for executing transaction based on a mobile communication device Download PDFInfo
- Publication number
- TW201942829A TW201942829A TW107111503A TW107111503A TW201942829A TW 201942829 A TW201942829 A TW 201942829A TW 107111503 A TW107111503 A TW 107111503A TW 107111503 A TW107111503 A TW 107111503A TW 201942829 A TW201942829 A TW 201942829A
- Authority
- TW
- Taiwan
- Prior art keywords
- transaction
- unit
- mobile communication
- communication device
- signal
- Prior art date
Links
Landscapes
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
Description
本發明係關於一種交易的系統及其方法，特別是一種透過行動通訊裝置及執行交易的系統及其方法。The present invention relates to a system and method for transactions, and more particularly to a system and method for performing transactions through a mobile communication device.
遍布各地的ATM（Automated Teller Machine，自動櫃員機）滿足了一般民眾在銀行營業時間外的存款、提款或轉帳等金融業務的需求，特別是增加了現金流動的便利性。ATMs (Automated Teller Machines) all over the place meet the needs of the general public for financial services such as deposits, withdrawals or transfers outside bank hours, and especially increase the convenience of cash flow.
然而，傳統的自動櫃員機純係以卡片和數字密碼的形式作為交易認證的依據，而有諸多不便之處。例如：金融卡因其尺寸較小而容易遺失且不易尋回，一旦遺失則只能由使用者親至銀行櫃台，完成冗長的補辦手續後方可再度透過新取得的金融卡使用自動櫃員機；另外，仍有部分使用者習慣將密碼直接記錄在金融卡上，或是將密碼設定為關聯於個人資料的數字組合，（例如：電話號碼、出生年月日、身分證字號等）使得密碼容易被嘗試性地猜出；因此，一旦使用者的金融卡被熟識該使用者的有心人士取得，以傳統自動櫃員機、金融卡和密碼為主的交易系統並無法有效防堵這類型的盜領事件發生。換言之，僅以密碼和卡片作為自動櫃員機執行交易的認證方式實有諸多不足之處。However, traditional ATMs use purely cards and digital passwords as the basis for transaction authentication, and there are many inconveniences. For example: The financial card is easy to lose due to its small size and is not easy to retrieve. Once lost, the user can only go to the bank counter in person and complete the lengthy procedures to use the ATM again through the newly acquired financial card; in addition, Some users are still accustomed to recording the password directly on the debit card, or setting the password to a combination of numbers associated with personal data (such as: phone number, date of birth, identity card number, etc.) making passwords easy to try Guessing sexually; therefore, once a user's financial card is obtained by a person who is familiar with the user, a transaction system based on traditional ATMs, financial cards and passwords cannot effectively prevent this type of theft. In other words, authentication methods that use passwords and cards as ATMs to perform transactions have many shortcomings.
有鑑於此，本發明提出一種透過行動通訊裝置執行交易的系統及其方法，通過在交易過程中操作行動通訊裝置進行掃描特定訊號的認證方式，有效避免因為金融卡片遺失衍生的的各種不便之處，並且簡化了傳統以金融卡操作自動櫃員機的步驟，另外可透過行動通訊裝置本身具有的個人身分驗證方式，增加交易過程中的安全性與私密性。In view of this, the present invention proposes a system and method for performing a transaction through a mobile communication device. By operating the mobile communication device during a transaction and authenticating by scanning specific signals, various inconveniences caused by the loss of a financial card are effectively avoided. , And simplifies the traditional steps of operating ATMs with financial cards. In addition, the personal identity verification method of the mobile communication device can increase the security and privacy in the transaction process.
依據本發明一實施例所敘述的一種透過行動通訊裝置執行交易的系統，包括：自動櫃員機、行動通訊裝置以及驗證伺服器。所述的自動櫃員機包括觸發單元、控制單元、通訊單元、顯示單元及交易單元。觸發單元、通訊單元、顯示單元及交易單元皆電性連接至控制單元。觸發單元用以在被觸發時產生觸發訊號。控制單元根據觸發訊號產生交易啟動訊號。顯示單元顯示交易啟動訊號，所顯示的交易啟動訊號係快速響應矩陣圖碼。通訊單元發送交易啟動訊號。行動通訊裝置包括掃描單元、輸入單元及運算單元。掃描單元電性連接至運算單元並取得交易啟動訊號。輸入單元電性連接至運算單元並供輸入以產生交易內容。運算單元根據交易內容及交易啟動訊號運算產生驗證資訊並透過行動通訊裝置發送驗證資訊。驗證伺服器通訊連接自動櫃員機及行動通訊裝置。驗證伺服器分別接收交易啟動訊號及驗證資訊以據以執行判斷程序，並於驗證資訊中包括與交易啟動訊號相符之部分時，由驗證伺服器發送可續行訊號至自動櫃員機。自動櫃員機之交易單元根據可續行訊號執行交易操作。According to an embodiment of the present invention, a system for performing transactions through a mobile communication device includes an automatic teller machine, a mobile communication device, and an authentication server. The automatic teller machine includes a trigger unit, a control unit, a communication unit, a display unit and a transaction unit. The trigger unit, the communication unit, the display unit and the transaction unit are all electrically connected to the control unit. The trigger unit is used to generate a trigger signal when triggered. The control unit generates a transaction start signal according to the trigger signal. The display unit displays the transaction start signal, and the displayed transaction start signal is a quick response matrix diagram code. The communication unit sends a transaction start signal. The mobile communication device includes a scanning unit, an input unit and a computing unit. The scanning unit is electrically connected to the computing unit and obtains a transaction start signal. The input unit is electrically connected to the computing unit and used for input to generate transaction content. The calculation unit generates verification information according to the transaction content and the transaction start signal calculation and sends the verification information through the mobile communication device. Verify that the server communicates with the ATM and mobile communication device. The verification server receives the transaction initiation signal and the verification information to perform the judgment process accordingly, and when the verification information includes a part corresponding to the transaction initiation signal, the verification server sends a renewable signal to the ATM. The transaction unit of the ATM executes transaction operations based on the renewable signals.
依據本發明一實施例所敘述的一種透過行動通訊裝置執行交易的方法，包括：觸發自動櫃員機之觸發單元以產生觸發訊號；自動櫃員機至少根據觸發訊號產生交易啟動訊號；自動櫃員機之顯示單元顯示交易啟動訊號；自動櫃員機之通訊單元發送交易啟動訊號；透過行動通訊裝置之掃描單元掃描顯示單元所顯示之交易啟動訊號；在行動通訊裝置之輸入單元輸入交易內容；行動通訊裝置根據交易內容及交易啟動訊號產生並發送驗證資訊；驗證伺服器接收交易啟動訊號及驗證資訊並執行判斷程序，當判斷程序判斷驗證資訊中包括與交易啟動訊號相符之部分時，由驗證伺服器發送可續行訊號至自動櫃員機；以及自動櫃員機根據可續行訊號執行交易操作。A method for performing a transaction through a mobile communication device according to an embodiment of the present invention includes: triggering a trigger unit of an ATM to generate a trigger signal; the ATM generates a transaction start signal at least according to the trigger signal; and a display unit of the ATM displays a transaction The activation signal; the communication unit of the ATM sends a transaction activation signal; the transaction activation signal displayed on the display unit is scanned by the scanning unit of the mobile communication device; the transaction content is entered in the input unit of the mobile communication device; the mobile communication device is started according to the transaction content and the transaction The signal generates and sends verification information; the verification server receives the transaction initiation signal and the verification information and executes the judgment process. When the judgment process judges that the verification information includes a part consistent with the transaction activation signal, the verification server sends a renewable signal to the automatic ATMs; and ATMs perform trading operations based on renewable signals.
藉由上述架構，本發明所揭露的透過行動通訊裝置執行交易的系統及其方法，使用者無需透過傳統金融卡及輸入密碼的方式即可於銀行或郵局等金融機構所設置的自動櫃員機進行提款、存款或轉帳等常用的金融交易操作。從實際應用上，使用者僅需簡單地觸發自動櫃員機，然後透過本身持有的行動通訊裝置掃描自動櫃員機螢幕顯示的條碼，並且輸入交易內容，在銀行端或郵局端的驗證伺服器完成認證之後，使用者便可在自動櫃員機取得現鈔、存入現鈔或完成轉帳動作。整體流程簡便兼具安全性，並且有效避免了因為金融卡片遺失、遭竊且密碼被取得所帶來的各種不便之處。With the above-mentioned structure, the system and method for performing transactions through a mobile communication device disclosed in the present invention allows a user to carry out withdrawals at an automated teller machine provided by a financial institution such as a bank or a post office without using a traditional financial card and entering a password. Common financial transaction operations such as payment, deposit or transfer. From the practical application, the user only needs to simply trigger the ATM, and then scan the barcode displayed on the ATM screen through the mobile communication device held by him, and enter the transaction content. After the bank or post office authentication server completes the authentication, Users can get cash at the ATM, deposit cash, or complete transfers. The overall process is simple and secure, and it effectively avoids various inconveniences caused by lost, stolen financial cards and passwords.
以上之關於本揭露內容之說明及以下之實施方式之說明係用以示範與解釋本發明之精神與原理，並且提供本發明之專利申請範圍更進一步之解釋。The above description of the contents of this disclosure and the description of the following embodiments are used to demonstrate and explain the spirit and principle of the present invention, and provide a further explanation of the scope of the patent application of the present invention.
以下在實施方式中詳細敘述本發明之詳細特徵以及優點，其內容足以使任何熟習相關技藝者了解本發明之技術內容並據以實施，且根據本說明書所揭露之內容、申請專利範圍及圖式，任何熟習相關技藝者可輕易地理解本發明相關之目的及優點。以下之實施例係進一步詳細說明本發明之觀點，但非以任何觀點限制本發明之範疇。The detailed features and advantages of the present invention are described in detail in the following embodiments. The content is sufficient for any person skilled in the art to understand and implement the technical contents of the present invention. Anyone skilled in the relevant art can easily understand the related objects and advantages of the present invention. The following examples further illustrate the viewpoints of the present invention in detail, but do not limit the scope of the present invention in any way.
請參考圖1，其係繪示依據本發明一實施例所敘述的透過行動通訊裝置執行交易的系統架構圖，此系統包括自動櫃員機1、行動通訊裝置3及驗證伺服器5。自動櫃員機1通訊連接至驗證伺服器5，行動通訊裝置3通訊連接至驗證伺服器5。實務上，所述「通訊連接」係指通過有線或無線方式連接；有線通訊連接方式例如係透過電話線、通用序列匯流排（Universal Serial Bus，USB）、雙絞線、同軸電纜或光纖電纜等方式進行通訊連接；無線通訊連接方式例如係透過全球移動通訊系統（Global System for Mobile communications，GSM）、全球互通微波存取（Worldwide Interoperability for Microwave Access，WiMax）、分碼多重進接（Code Division Multiple Access，CDMA）、近場通訊（Near Field Communication，NFC）、藍牙或Wi-Fi等方式進行通訊連接。本發明對於通訊連線的種類不予限制。Please refer to FIG. 1, which is a diagram illustrating a system architecture for performing transactions through a mobile communication device according to an embodiment of the present invention. The system includes an automatic teller machine 1, a mobile communication device 3, and an authentication server 5. The ATM 1 is communicatively connected to the verification server 5, and the mobile communication device 3 is communicatively connected to the verification server 5. In practice, the "communication connection" refers to a connection through a wired or wireless method; the wired communication connection method is, for example, a telephone line, a universal serial bus (USB), a twisted pair cable, a coaxial cable, or an optical fiber cable. Wireless communication connection methods such as Global System for Mobile communications (GSM), Worldwide Interoperability for Microwave Access (WiMax), Code Division Multiple Access (CDMA), Near Field Communication (NFC), Bluetooth or Wi-Fi. The invention does not limit the type of communication connection.
自動櫃員機1包括觸發單元10、控制單元12、通訊單元14、顯示單元16以及交易單元18；其中，觸發單元10、通訊單元14、顯示單元16以及交易單元18皆電性連接至控制單元12，如圖1所示。The ATM 1 includes a trigger unit 10, a control unit 12, a communication unit 14, a display unit 16, and a transaction unit 18. Among them, the trigger unit 10, the communication unit 14, the display unit 16, and the transaction unit 18 are all electrically connected to the control unit 12, As shown in Figure 1.
請參考圖1。觸發單元10用以在被使用者觸發時產生一觸發訊號，觸發訊號用以取代傳統自動櫃員機以「***金融卡至插卡槽」作為啟動金融操作介面的動作。實務上，觸發單元10通常係以實體按鈕或觸控螢幕上的按鈕方塊實現。在本發明其他實施態樣中，觸發單元10亦可以是具有讀卡機模式（Reader/Writer mode）或對等模式（P2P mode）的NFC感應裝置，並且在使用者的行動通訊裝置3中具有可運行卡模擬模式（Card emulation mode）的NFC裝置、晶片或天線；藉此，使用者將行動通訊裝置3靠近自動櫃員機1的觸發單元10並透過NFC的感應技術以達成觸發效果，而不需實際以肢體觸碰觸發單元10。在又一實施態樣中，觸發單元10係指紋辨識裝置。當使用者以手指接觸觸發單元10時，觸發單元10取得使用者的指紋訊號並根據此指紋訊號查找一線上資料庫，當在資料庫中檢獲相符的指紋資料時，觸發單元10才發送觸發訊號。所述的線上資料庫係由使用者在銀行端開戶時預先留存的個人資訊所組成，其中包含使用者的指紋資料。在又一實施態樣中，藉由觸發單元10本身具有的驗證機制，可更進一步增進本發明所述透過行動通訊裝置執行交易的系統的安全性。另外必須特別說明的是，前述的指紋辨識亦可以臉部、靜脈、虹膜、聲紋等生物特徵辨識技術所取代，本發明對此不予限制。Please refer to Figure 1. The triggering unit 10 is used to generate a triggering signal when triggered by a user. The triggering signal is used to replace a traditional automatic teller machine with an "insert a financial card into a card slot" as an action for starting a financial operation interface. In practice, the trigger unit 10 is usually implemented by a physical button or a button box on a touch screen. In other embodiments of the present invention, the triggering unit 10 may also be an NFC sensing device having a reader / writer mode or a peer-to-peer mode (P2P mode), and is provided in the mobile communication device 3 of the user. NFC device, chip or antenna capable of running in card emulation mode; thereby, the user brings the mobile communication device 3 close to the trigger unit 10 of the ATM 1 and achieves the trigger effect through the NFC sensing technology without the need for The trigger unit 10 is actually touched with a limb. In another embodiment, the trigger unit 10 is a fingerprint recognition device. When the user touches the trigger unit 10 with a finger, the trigger unit 10 obtains the user's fingerprint signal and searches an online database based on the fingerprint signal. The trigger unit 10 only sends a trigger signal when the matching fingerprint data is detected in the database. . The online database is composed of personal information pre-saved by a user when opening an account at a bank, and includes fingerprint information of the user. In yet another aspect, the security of the system for performing transactions through the mobile communication device according to the present invention can be further improved by the verification mechanism of the triggering unit 10 itself. In addition, it must be particularly noted that the aforementioned fingerprint recognition can also be replaced by biometric recognition technology such as face, vein, iris, voiceprint, etc., which is not limited in the present invention.
請參考圖1。控制單元12例如係一般個人電腦之中央處理器（Central Processing Unit，CPU）、微處理器（Microprocessor）、數位信號處理器（Digital Signal Processor，DSP）、特殊應用積體電路（Application-Specific Integrated Circuit，ASIC）、其他類似元件或上述元件之組合，本發明並不限制控制單元12之硬體種類。控制單元12係用以根據觸發訊號產生一交易啟動訊號。換言之，當觸發單元10被使用者觸發時，控制單元12隨即產生一對應的交易啟動訊號。基於交易安全考量，所述的交易啟動訊號應具有唯一性及時效性。實務上，控制單元12根據觸發訊號、此觸發訊號產生的日期以及當前時間，運算得出一交易啟動訊號，所述的運算例如以前述日期時間作為輸入資訊，透過加密演算法執行數學運算以得出交易啟動訊號。上述係確保交易啟動訊號之唯一性，另關於交易啟動訊號的時效性，例如在控制單元12得出交易啟動訊號的同時，控制單元12啟動一倒數計時器，若在一預定時間內，控制單元12未接獲對應此交易啟動訊號的後續操作命令，則在倒數計時器計時結束後，控制單元12便不再執行對應此交易啟動訊號的任何後續操作命令，換言之，使用者必須在觸發觸發單元10的一預定時間之內使用行動通訊裝置3完成交易操作。在本發明另一實施例中，控制單元12除了基於前述以日期與時間運算得出交易啟動訊號之外，更包括根據自動櫃員機1的硬體識別代號產生交易啟動訊號。藉由上述將交易啟動訊號結合自動櫃員機1之硬體裝置或結合自動櫃員機之觸發時間的機制，可避免交易啟動訊號被複製而在自動櫃員機1設置地點以外的地方被盜用。Please refer to Figure 1. The control unit 12 is, for example, a central processing unit (CPU), a microprocessor (microprocessor), a digital signal processor (DSP), or an application-specific integrated circuit of a general personal computer. , ASIC), other similar components, or a combination of the above components, the present invention does not limit the type of hardware of the control unit 12. The control unit 12 is configured to generate a transaction start signal according to the trigger signal. In other words, when the trigger unit 10 is triggered by the user, the control unit 12 then generates a corresponding transaction start signal. Based on transaction security considerations, the transaction initiation signal should be unique and timely. In practice, the control unit 12 calculates a transaction start signal based on the trigger signal, the date generated by the trigger signal, and the current time. The operation uses the aforementioned date and time as input information, and performs mathematical operations through an encryption algorithm to obtain Out trading start signal. The above is to ensure the uniqueness of the transaction start signal. In addition, regarding the timeliness of the transaction start signal, for example, when the control unit 12 obtains the transaction start signal, the control unit 12 starts a countdown timer. 12 did not receive a subsequent operation command corresponding to the transaction start signal, the control unit 12 will no longer execute any subsequent operation command corresponding to the transaction start signal after the countdown timer expires, in other words, the user must trigger the trigger unit Use the mobile communication device 3 to complete the transaction operation within a predetermined time of 10. In another embodiment of the present invention, the control unit 12 includes generating a transaction start signal according to the hardware identification code of the ATM 1 in addition to the transaction start signal obtained based on the foregoing date and time calculation. With the above-mentioned mechanism of combining the transaction start signal with the hardware device of the ATM 1 or the trigger time of the ATM, it is possible to prevent the transaction start signal from being copied and misappropriated outside the place where the ATM 1 is installed.
請參考圖1。通訊單元14用以發送前述的交易啟動訊號。詳言之，在控制單元12產生交易啟動訊號的同時，控制單元12同步指示通訊單元14將此交易啟動訊號透過通訊連線發送至驗證伺服器5。Please refer to Figure 1. The communication unit 14 is configured to send the aforementioned transaction start signal. In detail, while the control unit 12 generates a transaction start signal, the control unit 12 synchronously instructs the communication unit 14 to send the transaction start signal to the verification server 5 through a communication connection.
請參考圖1。顯示單元16用以顯示控制單元12所產生的交易啟動訊號。詳言之，在控制單元12產生交易啟動訊號的同時，控制單元12同步操控顯示單元16呈現交易啟動訊號供使用者進行後續操作。請參考圖2，在本發明一實施例中，顯示單元16所顯示之交易啟動訊號係快速響應矩陣圖碼（Quick Response Code，QR Code），其中可包含觸發單元10被觸發的日期、時間及自動櫃員機1的硬體識別代號等資訊。在其他實施例中，所顯示的交易啟動訊號亦可以係PDF417或漢信碼等二維條碼。實務上，顯示單元16例如係電漿顯示器（Plasma Display Panel）、液晶顯示器（Liquid-Crystal Display，LCD）、薄膜電晶體液晶顯示器（Thin Film Transistor Liquid Crystal Display，TFT-LCD）、發光二極體顯示器（Light-Emitting Diode Display，LED Display）有機發光二極體顯示器（Organic Light-Emitting Diode，OLED）或其他具有相近功能的顯示裝置。Please refer to Figure 1. The display unit 16 is configured to display a transaction start signal generated by the control unit 12. In detail, while the control unit 12 generates a transaction start signal, the control unit 12 synchronously controls the display unit 16 to present the transaction start signal for the user to perform subsequent operations. Please refer to FIG. 2. In an embodiment of the present invention, the transaction start signal displayed by the display unit 16 is a Quick Response Code (QR Code), which may include the date, time and time when the trigger unit 10 was triggered. Information such as the hardware identification number of the ATM 1. In other embodiments, the displayed transaction activation signal may also be a two-dimensional barcode such as PDF417 or Hanxin code. In practice, the display unit 16 is, for example, a Plasma Display Panel, a Liquid-Crystal Display (LCD), a Thin Film Transistor Liquid Crystal Display (TFT-LCD), or a light-emitting diode. Display (Light-Emitting Diode Display, LED Display) Organic Light-Emitting Diode (OLED) or other display devices with similar functions.
請一併參考圖1及圖2，其中圖2係依據本發明一實施例所繪示透過行動通訊裝置3執行交易的系統的操作示意圖。行動通訊裝置3包括掃描單元32、輸入單元34及運算單元36。實務上，行動通訊裝置3係智慧型手機、平板電腦、筆記型電腦或穿戴式智慧型裝置。Please refer to FIG. 1 and FIG. 2 together. FIG. 2 is a schematic diagram illustrating an operation of a system for performing a transaction through the mobile communication device 3 according to an embodiment of the present invention. The mobile communication device 3 includes a scanning unit 32, an input unit 34 and a computing unit 36. In practice, the mobile communication device 3 is a smart phone, tablet, laptop, or wearable smart device.
掃描單元32電性連接至運算單元36並用以取得交易啟動訊號，實務上，掃描單元32係設置於智慧型手機或平板電腦上的攝像裝置，藉由拍攝自動櫃員機1的顯示單元16所呈現的交易啟動訊號以取得此交易啟動訊號的影像，並將此影像傳送至運算單元36進一步分析。The scanning unit 32 is electrically connected to the computing unit 36 and used to obtain a transaction start signal. In practice, the scanning unit 32 is a camera device provided on a smart phone or a tablet computer. The scanning unit 32 is displayed by the display unit 16 of the ATM 1 The transaction initiation signal is used to obtain an image of the transaction initiation signal, and the image is transmitted to the arithmetic unit 36 for further analysis.
輸入單元34電性連接至運算單元36並用以供輸入以產生交易內容，實務上，輸入單元34例如係智慧型手機或平板電腦的觸控螢幕，亦可以是行動通訊裝置3外接的鍵盤，本發明對此不予限制。所述的交易內容例如係存款金額、提款金額、轉帳之金額或轉帳之帳號等金融交易項目。The input unit 34 is electrically connected to the computing unit 36 and used for input to generate transaction content. In practice, the input unit 34 is, for example, a touch screen of a smart phone or a tablet computer, or a keyboard external to the mobile communication device 3. The invention does not limit this. The transaction content is, for example, financial transaction items such as a deposit amount, a withdrawal amount, a transfer amount, or a transfer account number.
運算單元36根據交易內容及交易啟動訊號執行運算產生驗證資訊並透過行動通訊裝置3發送此驗證資訊，實務上，運算單元36例如係微處理器、數位信號處理器、特殊應用積體電路、其他類似元件或上述元件之組合。上述驗證資訊的產生方式例如係運算單元36運行一應用程序（Application），所述的應用程序係由設置自動櫃員機1的可信賴之金融機構提供，此應用程序具有存取使用者的行動通訊裝置3的掃描單元32的權限。此應用程序提供一介面讓使用者透過輸入單元34設置交易內容，並基於交易內容及交易啟動訊號執行一加密演算法以產生所述的驗證資訊。並且，在使用者欲執行應用程序前，此應用程序可更包括透過智慧型手機或平板電腦的指紋辨識模組或臉孔辨識模組對使用者實施身分驗證，或是透過傳統的數字密碼、圖形密碼等方式對使用者實施身分驗證，藉以實現限制非帳戶本人對此應用程序的操作。因此，透過行動通訊裝置3以及運行於行動通訊裝置3上的應用程序取代傳統以金融卡啟用自動櫃員機金融操作功能的方式，可增進本發明一實施例所敘述的透過行動通訊裝置執行交易的系統之安全性。The calculation unit 36 performs calculations according to the transaction content and the transaction start signal to generate verification information and sends the verification information through the mobile communication device 3. In practice, the calculation unit 36 is, for example, a microprocessor, a digital signal processor, a special application integrated circuit, other Similar elements or combinations of the above. The above-mentioned method for generating the verification information is, for example, that the computing unit 36 runs an application program, which is provided by a trusted financial institution that sets up an ATM 1, and this application program has a mobile communication device for accessing the user 3 scanning unit 32 permissions. This application program provides an interface for the user to set the transaction content through the input unit 34, and execute an encryption algorithm based on the transaction content and the transaction activation signal to generate the verification information. In addition, before the user wants to execute the application, the application may further include performing identity verification on the user through the fingerprint recognition module or face recognition module of the smart phone or tablet, or traditional digital password, Graphic passwords and other methods are used to verify the identity of users, so as to restrict the operation of this application by non-account holders. Therefore, the mobile communication device 3 and the application program running on the mobile communication device 3 replace the traditional way of activating the ATM financial operation function with a financial card, which can enhance the system for performing transactions through the mobile communication device described in an embodiment of the present invention Security.
在本發明另一實施例所敘述的透過行動通訊裝置執行交易的系統中，行動通訊裝置3更包括定位單元38。定位單元38電性連接至運算單元36，定位單元38用以取得行動通訊裝置3之第一地理位置，且運算單元36更包括根據第一地理位置、交易內容及交易啟動訊號產生驗證資訊，並透過行動通訊裝置3發送此驗證資訊至驗證伺服器5。關於此第一地理位置的應用方式敘述如後文。In the system for performing a transaction through a mobile communication device according to another embodiment of the present invention, the mobile communication device 3 further includes a positioning unit 38. The positioning unit 38 is electrically connected to the computing unit 36. The positioning unit 38 is configured to obtain the first geographic location of the mobile communication device 3. The computing unit 36 further includes generating verification information according to the first geographic location, the transaction content, and the transaction start signal. The verification information is sent to the verification server 5 through the mobile communication device 3. The application of this first geographic location will be described later.
驗證伺服器5通訊連接自動櫃員機1及行動通訊裝置3，實務上，驗證伺服器5例如係直立式伺服器(Pedestal server)、機架伺服器(Rack server)或刀鋒伺服器(Blade server)，本發明對驗證伺服器5之硬體種類不予限制。驗證伺服器5係用以檢測自動櫃員機1及行動通訊裝置3兩者各自發送過來的訊號。具體而言，驗證伺服器5分別接收交易啟動訊號及驗證資訊，並針對交易啟動訊號及驗證資訊執行一判斷程序。所述的判斷程序係於驗證資訊中判斷是否具有與交易啟動訊號相符之部分，藉此確定自動櫃員機1所發送的交易啟動訊號確實是由操作行動通訊裝置3的使用者觸發而送出。所述的相符部分例如交易啟動訊號中所包含的日期時間等資訊。判斷程序比對自動櫃員機1發送的交易啟動訊號中的日期時間資訊與驗證訊號中所包含的日期時間等資訊兩者是否相同，以確認使用者觸發此交易操作的日期及時間。驗證伺服器5所運行的判斷程序更可以包括比對交易啟動訊號中的日期時間等資訊與驗證伺服器5接收到驗證資訊的日期、時間是否在一合理時間範圍之內，例如從使用者觸發自動櫃員機1的觸發單元10至行動通訊裝置發送驗證訊號的間隔時間在2分鐘之內則代表此交易操作為可續行之合理交易操作。當判斷程序判斷通過時，驗證伺服器5發送可續行訊號至自動櫃員機1。否則，驗證伺服器5發送一警報訊號，通知相關單位人員進行對應的處置。The authentication server 5 is connected to the ATM 1 and the mobile communication device 3 in communication. In practice, the authentication server 5 is, for example, a Pedestal server, a rack server, or a blade server. The invention does not limit the kind of hardware of the authentication server 5. The verification server 5 is used to detect signals sent by the ATM 1 and the mobile communication device 3 respectively. Specifically, the verification server 5 receives the transaction initiation signal and the verification information, and executes a judgment procedure for the transaction initiation signal and the verification information. The determination procedure is to determine whether there is a part corresponding to the transaction activation signal in the verification information, thereby determining that the transaction activation signal sent by the ATM 1 is indeed triggered by a user operating the mobile communication device 3 and sent. The matching part is information such as the date and time included in the transaction start signal. Determine whether the program compares the date and time information in the transaction start signal sent by the ATM 1 with the date and time information included in the verification signal to confirm the date and time when the user triggered the transaction operation. The judgment procedure run by the verification server 5 may further include comparing information such as the date and time in the transaction activation signal with whether the date and time when the verification server 5 received the verification information is within a reasonable time range, for example, triggered by the user. The interval between the trigger unit 10 of the ATM 1 and the mobile communication device sending the verification signal is within 2 minutes, which means that this transaction operation is a reasonable transaction operation that can be continued. When the judgment program judges that it passes, the verification server 5 sends a resumable signal to the ATM 1. Otherwise, the verification server 5 sends an alarm signal to notify the personnel of the relevant unit to take corresponding measures.
在本發明另一實施例中，交易啟動訊號中包括自動櫃員機1的硬體識別代號，且使用者的行動通訊裝置3包括定位單元38可取得此行動通訊裝置的第一地理位置，並於驗證訊號中加入此第一地理位置的資訊。因此，驗證伺服器5之判斷程序更包括根據自動櫃員機1之硬體識別代號查找資料庫以獲得自動櫃員機之第二地理位置，判斷程序可比對第一地理位置及第二地理位置是否在一合理距離範圍之內（例如：0~5公尺），當上述比對條件不相符時，驗證伺服器5發出警報訊號通知相關單位人員進行對應的處置。透過上述針對自動櫃員機1與行動通訊裝置3的操作地點進行驗證的方式，可進一步提升金融交易操作的安全性。In another embodiment of the present invention, the transaction activation signal includes the hardware identification code of the ATM 1 and the user's mobile communication device 3 includes a positioning unit 38 to obtain the first geographic location of the mobile communication device and verify the Information about this first geographic location is added to the signal. Therefore, the judgment procedure of the verification server 5 further includes searching the database according to the hardware identification code of the ATM 1 to obtain the second geographic location of the ATM. The judgment procedure can compare whether the first geographic location and the second geographic location are reasonable. Within the range (for example, 0 ~ 5 meters), when the above comparison conditions do not match, the verification server 5 sends an alarm signal to notify the personnel of the relevant unit to take corresponding measures. The above-mentioned verification method for the operating locations of the ATM 1 and the mobile communication device 3 can further improve the security of financial transaction operations.
在本發明又一實施例中，使用者亦可預先設置一第三地理位置並儲存於驗證伺服器5。在驗證伺服器5取得第一地理位置之後，驗證伺服器5之判斷程序計算第一地理位置及第三地理位置之間的距離，並根據此距離發送一可交易項目清單至行動通訊裝置3。所述的可交易項目清單包括複數個交易項目，並且這些交易項目根據距離的遠近有所不同。舉例來說：居住在台北市信義區的使用者可預先至銀行端將第三地理位置設置為台北市政府捷運站，並且設置其慣用的交易項目為「提款上限5000元」、「提款上限3000元」及「提款上限1000元」。因此，若使用者本次操作自動櫃員機1時所處的第一地理位置與使用者預先設定的第三地理位置兩者距離在500公尺之內，則驗證伺服器5提供上述三個交易項目供使用者選擇；而若驗證伺服器5測得兩者距離在500~1000公尺之間，則開放「提款上限3000元」及「提款上限1000元」兩個交易項目供使用者選擇；若測得兩者距離在1000公尺以上，則僅開放提款上限金額為1000元。基於上述以距離決定交易項目開放權限的機制，可進一步增進使用者透過行動通訊裝置3執行交易時的安全性。In another embodiment of the present invention, the user may set a third geographic location in advance and store it in the authentication server 5. After the verification server 5 obtains the first geographical position, the judgment process of the verification server 5 calculates the distance between the first geographical position and the third geographical position, and sends a list of tradable items to the mobile communication device 3 according to the distance. The list of tradable items includes a plurality of transaction items, and these transaction items are different according to the distance. For example: users living in Xinyi District, Taipei City can go to the bank to set the third geographic location as Taipei City Government MRT Station, and set their customary transaction items as "withdrawal limit of 5,000 yuan", "withdrawal "Up to 3000 yuan" and "Up to 1,000 yuan". Therefore, if the distance between the first geographic location where the user operates the ATM 1 and the third geographic location preset by the user is within 500 meters, the verification server 5 provides the above three transaction items For users to choose; and if the verification server 5 measures that the distance between them is between 500 and 1000 meters, two transaction items, "withdrawal limit of 3,000 yuan" and "withdrawal limit of 1,000 yuan", will be open for users to choose ; If the distance between the two is more than 1000 meters, only the withdrawal limit will be 1,000 yuan. Based on the above-mentioned mechanism for determining the open authority of a transaction item by distance, the security of a user when performing a transaction through the mobile communication device 3 can be further improved.
承上所述，當自動櫃員機1之控制單元12接收到來自驗證伺服器5的可續行訊號後，控制單元12指示交易單元18根據可續行訊號執行交易操作，例如根據使用者設定的交易內容提供現鈔給使用者。As mentioned above, when the control unit 12 of the ATM 1 receives a renewable signal from the verification server 5, the control unit 12 instructs the transaction unit 18 to perform a transaction operation based on the renewable signal, for example, according to the transaction set by the user The content provides cash to users.
請參考圖3，其係繪示本發明一實施例所敘述的一種透過行動通訊裝置執行交易的方法流程圖，此方法係應用於前述透過行動通訊裝置執行交易的系統。Please refer to FIG. 3, which illustrates a flowchart of a method for executing a transaction through a mobile communication device according to an embodiment of the present invention. This method is applied to the foregoing system for performing a transaction through a mobile communication device.
請參考步驟S1：產生觸發訊號；例如使用者按下自動櫃員機1上顯示為「無卡交易」的按鈕使得觸發單元10產生觸發訊號。Please refer to step S1: generating a trigger signal; for example, the user presses a button displayed as "no card transaction" on the ATM 1 to cause the trigger unit 10 to generate a trigger signal.
請參考步驟S2：發送交易啟動訊號；例如自動櫃員機1的控制單元12至少根據觸發訊號產生交易啟動訊號；控制單元12更可將觸發單元10被觸發的日期及時間以及自動櫃員機1本身的硬體識別代號整合至交易啟動訊號中並且透過自動櫃員機1的通訊單元14發送此交易啟動訊號。Please refer to step S2: send a transaction start signal; for example, the control unit 12 of the ATM 1 generates a transaction start signal at least according to the trigger signal; the control unit 12 can further determine the date and time when the trigger unit 10 is triggered and the hardware of the ATM 1 itself The identification code is integrated into the transaction initiation signal and the transaction initiation signal is transmitted through the communication unit 14 of the ATM 1.
請參考步驟S3：顯示交易啟動訊號；具體而言，此步驟係透過自動櫃員機1之顯示單元16以QR碼或其他二維條碼的形式呈現控制單元12產生的交易啟動訊號。必須特別說明的是：步驟S2與步驟S3兩者之執行先後順序並未特別限制。Please refer to step S3: display the transaction start signal; specifically, this step is to display the transaction start signal generated by the control unit 12 in the form of a QR code or other two-dimensional bar code through the display unit 16 of the ATM 1. It must be particularly noted that the execution order of steps S2 and S3 is not particularly limited.
請繼續參考圖3的步驟S4：掃描交易啟動訊號；例如使用者以行動通訊裝置3之掃描單元32（如智慧型手機的攝像元件）掃描自動櫃員機1之顯示單元16所顯示之交易啟動訊號（如ATM螢幕上的QR碼）。Please continue to refer to step S4 in FIG. 3: scan the transaction start signal; for example, the user scans the transaction start signal displayed on the display unit 16 of the ATM 1 with the scanning unit 32 of the mobile communication device 3 (such as the camera element of a smart phone) ( (Such as a QR code on an ATM screen).
請參考步驟S5：輸入交易內容，例如使用者透過智慧型手機執行金融機構發行的可信賴的應用程序，並且在通過此應用程序提供的安全機制（如指紋辨識、臉孔辨識、數字密碼輸入或圖形密碼輸入）驗證身分後，在此應用程序提供的操作介面中輸入提款金額作為交易內容。Please refer to step S5: Enter the transaction content, for example, the user executes a trusted application issued by a financial institution through a smart phone, and the security mechanism provided by this application (such as fingerprint recognition, face recognition, digital password input or Graphic password input) After verifying your identity, enter the withdrawal amount as the transaction content in the operation interface provided by this application.
請參考步驟S6：產生驗證訊號，例如以行動通訊裝置3的運算單元36根據從輸入單元34取得的交易內容以及從掃描單元32取得的交易啟動訊號產生並發送驗證資訊。在另一實施例中，前述的驗證資訊更包括透過行動通訊裝置3的定位單元38取得的第一地理位置。Please refer to step S6: generating a verification signal. For example, the arithmetic unit 36 of the mobile communication device 3 generates and sends verification information according to the transaction content obtained from the input unit 34 and the transaction start signal obtained from the scanning unit 32. In another embodiment, the aforementioned verification information further includes a first geographic location obtained through the positioning unit 38 of the mobile communication device 3.
請參考步驟S7：接收交易啟動訊號及驗證訊號；具體而言係驗證伺服器5分別透過與自動櫃員機1之間的通訊連線以及與行動通訊裝置3之間的通訊連線接收交易啟動訊號及驗證資訊。Please refer to step S7: receive the transaction start signal and the verification signal; specifically, the authentication server 5 receives the transaction start signal and the communication connection with the ATM 1 and the communication connection with the mobile communication device 3 respectively. Verification information.
請參考步驟S8：判斷程序通過；詳言之，當驗證伺服器5在步驟S7接獲交易啟動訊號以及驗證資訊後，隨即執行判斷程序。所述判斷通過的依據係驗證資訊中包括與交易啟動訊號相符之部分，例如驗證訊號中的日期時間資訊與交易啟動訊號中的日期時間資訊兩者相同，或是驗證訊號中包括的第一地理位置與交易啟動訊號中包括的自動櫃員機1之硬體識別代號經查找所獲得的第二地理位置兩者在一可容許的誤差距離範圍之內。Please refer to step S8: the judgment procedure is passed; in detail, when the verification server 5 receives the transaction start signal and the verification information in step S7, the judgment procedure is executed immediately. The basis for the judgment is that the verification information includes a portion that is consistent with the transaction start signal, for example, the date and time information in the verification signal and the date and time information in the transaction start signal are the same, or the first geographic information included in the verification signal The location and the second geographic position obtained by searching the hardware identification code of the ATM 1 included in the transaction start signal are within an allowable error distance range.
請參考步驟S9：發送可續行訊號；詳言之，當判斷程序判斷通過時，驗證伺服器5即發送可續行訊號至自動櫃員機1。在其他實施例中，此可續行訊號亦可再發送至行動通訊裝置3供使用者確認是否放行，並且在使用者確認放行後再由驗證伺服器5發送第二次可續行訊號至自動櫃員機1。本發明在此並未限制可續行訊號的發送次數。Please refer to step S9: sending a renewable signal; in detail, when the judging program judges that it is successful, the verification server 5 sends a renewable signal to the ATM 1. In other embodiments, the renewable signal may be sent to the mobile communication device 3 for the user to confirm whether the release is allowed, and after the user confirms the release, the verification server 5 sends a second renewable signal to the automatic ATM machine 1. The present invention does not limit the number of times of transmitting the continuous signal.
請參考步驟S11：執行交易操作；詳言之，當自動櫃員機1接收到可續行訊號後，控制單元12指示交易單元18根據可續行訊號執行對應的交易操作，例如執行吐鈔動作，發送交易內容所指示的提款金額。Please refer to step S11: Execute a transaction operation. In detail, when the ATM 1 receives a renewable signal, the control unit 12 instructs the transaction unit 18 to perform a corresponding transaction operation according to the renewable signal, such as executing a banknote dispensing operation and sending The withdrawal amount indicated by the transaction content.
請回顧步驟S9且一併參考步驟S10：發送警報訊息；詳言之，若前述的判斷程序不通過，例如使用者掃描到的QR碼與ATM提供的QR碼兩者不相符，或是行動通訊裝置3被定位的地點不在使用者預設的合法地點之中，抑或是行動通訊裝置3被定位的地點與被觸發的自動櫃員機1的設置地點兩者差距在一合理距離以外；當判斷程序判斷出上述情況，則由驗證伺服器5發送警報訊號以通知相關單位防範可能發生的不當金融交易操作。Please review step S9 and refer to step S10 together: send an alarm message; in detail, if the aforementioned judgment procedure fails, for example, the QR code scanned by the user does not match the QR code provided by the ATM, or mobile communication The location where the device 3 is located is not among the legal locations preset by the user, or is the distance between the location where the mobile communication device 3 is located and the location where the ATM 1 is triggered is a reasonable distance; Under the above circumstances, the verification server 5 sends an alarm signal to notify the relevant units to prevent possible improper financial transaction operations.
綜合以上所述，本發明所揭露的透過行動通訊裝置執行交易的系統及其方法，通過在交易過程中操作行動通訊裝置進行掃描交易啟動訊號的方式，有效避免因為金融卡片遺失衍生的的各種不便之處，並且簡化了傳統以金融卡操作自動櫃員機的步驟；另外可透過行動通訊裝置本身具有的個人身分驗證方式，增加交易過程中的安全性與私密性。進一步而言，使用者無需透過傳統金融卡及輸入密碼的方式即可於銀行或郵局設置的自動櫃員機進行提款、存款或轉帳等常用的金融交易操作。從實際應用上，使用者僅需簡單地觸發自動櫃員機，然後透過本身持有的行動通訊裝置掃描自動櫃員機螢幕顯示的條碼，並且輸入交易內容，待銀行端或郵局端的驗證伺服器完成認證之後，使用者便可在自動櫃員機取得現鈔、存入現鈔或完成轉帳動作。整體流程簡便兼具安全性。To sum up, the system and method for performing a transaction through a mobile communication device disclosed in the present invention, by operating the mobile communication device during a transaction to scan a transaction start signal, effectively avoid various inconveniences caused by the loss of a financial card. It also simplifies the traditional steps of operating ATMs with financial cards. In addition, the personal identity verification method of the mobile communication device can increase the security and privacy in the transaction process. Furthermore, users do not need to use traditional financial cards and input passwords to perform common financial transaction operations such as withdrawals, deposits, or transfers at an ATM set up by a bank or post office. From the practical application, the user only needs to simply trigger the ATM, and then scan the barcode displayed on the ATM screen through the mobile communication device held by him, and enter the transaction content, after the bank or post office verification server completes the authentication, Users can get cash at the ATM, deposit cash, or complete transfers. The overall process is simple and safe.
雖然本發明以前述之實施例揭露如上，然其並非用以限定本發明。在不脫離本發明之精神和範圍內，所為之更動與潤飾，均屬本發明之專利保護範圍。關於本發明所界定之保護範圍請參考所附之申請專利範圍。Although the present invention is disclosed in the foregoing embodiments, it is not intended to limit the present invention. Changes and modifications made without departing from the spirit and scope of the present invention belong to the patent protection scope of the present invention. For the protection scope defined by the present invention, please refer to the attached patent application scope.
1‧‧‧自動櫃員機1‧‧‧ ATM
10‧‧‧觸發單元10‧‧‧Trigger Unit
12‧‧‧控制單元12‧‧‧Control unit
14‧‧‧通訊單元14‧‧‧Communication Unit
16‧‧‧顯示單元16‧‧‧Display unit
18‧‧‧交易單元18‧‧‧Transaction Unit
3‧‧‧行動通訊裝置3‧‧‧ mobile communication device
32‧‧‧掃描單元32‧‧‧scanning unit
34‧‧‧輸入單元34‧‧‧Input unit
36‧‧‧運算單元36‧‧‧ Computing Unit
38‧‧‧定位單元38‧‧‧ positioning unit
5‧‧‧驗證伺服器5‧‧‧ authentication server
S1~S11‧‧‧步驟S1 ~ S11‧‧‧step
圖1係依據本發明一實施例所繪示透過行動通訊裝置執行交易的系統架構圖。 圖2係依據本發明一實施例所繪示透過行動通訊裝置執行交易的系統的操作示意圖。 圖3係依據本發明一實施例所繪示透過行動通訊裝置執行交易的方法流程圖。FIG. 1 is a system architecture diagram of a transaction performed by a mobile communication device according to an embodiment of the present invention. FIG. 2 is a schematic diagram illustrating an operation of a system for performing a transaction through a mobile communication device according to an embodiment of the present invention. FIG. 3 is a flowchart illustrating a method for executing a transaction through a mobile communication device according to an embodiment of the present invention.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| TW107111503A TWI696136B (en) | 2018-03-31 | 2018-03-31 | System and method for executing transaction based on a mobile communication device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| TW107111503A TWI696136B (en) | 2018-03-31 | 2018-03-31 | System and method for executing transaction based on a mobile communication device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| TW201942829A true TW201942829A (en) | 2019-11-01 |
| TWI696136B TWI696136B (en) | 2020-06-11 |
Family
ID=69184637
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| TW107111503A TWI696136B (en) | 2018-03-31 | 2018-03-31 | System and method for executing transaction based on a mobile communication device |
Country Status (1)
| Country | Link |
|---|---|
| TW (1) | TWI696136B (en) |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103942897B (en) * | 2014-04-23 | 2016-11-09 | 杭州电子科技大学 | A kind of method realizing withdrawing the money without card on ATM |
| CN104182874B (en) * | 2014-08-12 | 2019-03-19 | 北京橙鑫数据科技有限公司 | Multi-use card device, system and card information loading method |
| CN104809827A (en) * | 2015-05-23 | 2015-07-29 | 张萍 | Cash depositing and withdrawing system based on Internet of things |
| TWI615784B (en) * | 2015-07-16 | 2018-02-21 | 蓋特資訊系統股份有限公司 | Transaction method using a mobile device, and transaction system thereof |
| CN105096111A (en) * | 2015-08-31 | 2015-11-25 | 宇龙计算机通信科技(深圳)有限公司 | No-card account transfer or withdrawal protection method and mobile phone system |
-
2018
- 2018-03-31 TW TW107111503A patent/TWI696136B/en active
Also Published As
| Publication number | Publication date |
|---|---|
| TWI696136B (en) | 2020-06-11 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11829988B2 (en) | Systems and methods for transacting at an ATM using a mobile device | |
| CN106688004B (en) | Transaction authentication method and device, mobile terminal, POS terminal and server | |
| TWI508007B (en) | Secure electronic payment system and process | |
| US20180268415A1 (en) | Biometric information personal identity authenticating system and method using financial card information stored in mobile communication terminal | |
| US8836473B2 (en) | Dynamic keypad and fingerprinting sequence authentication | |
| US8910861B2 (en) | Automatic teller machine (“ATM”) including a user-accessible USB port | |
| US11552945B2 (en) | Transaction authentication | |
| US11308481B1 (en) | Cardless ATM authentication | |
| EP2713328B1 (en) | Validating a transaction with a secure input without requiring pin code entry | |
| US20160012399A1 (en) | Secure two-stage transactions | |
| TWM564228U (en) | System for executing transaction based on a mobile communication device | |
| JP6898536B1 (en) | Identity verification system, identity verification method, information processing terminal, and program | |
| JP7056027B2 (en) | Financial transaction methods, financial transaction systems, information processing equipment and financial transaction programs | |
| US11954668B2 (en) | Automatic teller machine system for authenticating a user device | |
| TWI696136B (en) | System and method for executing transaction based on a mobile communication device | |
| TWI748415B (en) | System and method for executing transaction based on a mobile communication device | |
| KR101502377B1 (en) | Mobile communication terminal with authentication function using registered security card, system for payment authentication using the mobile communication terminal, and method thereof | |
| WO2017024245A1 (en) | Systems and methods for interaction authentication using dynamic wireless beacon devices | |
| TWM603166U (en) | Financial transaction device and system with non-contact authentication function | |
| US20220405731A1 (en) | System and method for authenticating a user of a banking device | |
| JP2019219934A (en) | Financial transaction device | |
| TWI801744B (en) | Financial transaction device, method and system with non-contact authentication function | |
| KR20230058574A (en) | Method and system for authenticating for on-line financial transaction | |
| KR20050103642A (en) | Safety bank dealing method | |
| TW201738826A (en) | System for card-less automated teller transactions |