TWI680413B - Payment system and payment method - Google Patents

Payment system and payment method Download PDF

Info

Publication number
TWI680413B
TWI680413B TW106123938A TW106123938A TWI680413B TW I680413 B TWI680413 B TW I680413B TW 106123938 A TW106123938 A TW 106123938A TW 106123938 A TW106123938 A TW 106123938A TW I680413 B TWI680413 B TW I680413B
Authority
TW
Taiwan
Prior art keywords
payment
information
server
payment server
code
Prior art date
Application number
TW106123938A
Other languages
Chinese (zh)
Other versions
TW201909060A (en
Inventor
吳慶陽
Ching-Yang Wu
翁嘉芳
Chia-Fang Weng
Original Assignee
兆豐國際商業銀行股份有限公司
Mega International Commercial Bank Co., Ltd.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 兆豐國際商業銀行股份有限公司, Mega International Commercial Bank Co., Ltd. filed Critical 兆豐國際商業銀行股份有限公司
Priority to TW106123938A priority Critical patent/TWI680413B/en
Publication of TW201909060A publication Critical patent/TW201909060A/en
Application granted granted Critical
Publication of TWI680413B publication Critical patent/TWI680413B/en

Links

Abstract

本揭露提供了一種繳費系統。此繳費系統包括繳費伺服器、繳費應用程式及交易系統。繳費伺服器是當加密資訊經由觸發動作而傳送至繳費伺服器時,繳費伺服器接收加密資訊,並執行第一驗證程序,以依據加密資訊獲取繳費資訊。繳費應用程式接收來自繳費伺服器傳送的繳費資訊,並將繳費資訊傳送至第三方帳務資訊系統,以使第三方帳務資訊系統回傳交易授權碼。交易系統接收來自繳費應用程式傳送的繳費資訊及交易授權碼,並依據繳費資訊及交易授權碼執行交易。本揭露另提供了對應的繳費方法。This disclosure provides a payment system. The payment system includes a payment server, a payment application and a transaction system. When the payment server sends encrypted information to the payment server through a trigger action, the payment server receives the encrypted information and executes a first verification process to obtain payment information based on the encrypted information. The billing application receives the billing information sent from the billing server and sends the billing information to the third-party billing information system so that the third-party billing information system returns a transaction authorization code. The transaction system receives the payment information and transaction authorization code sent from the payment application, and executes transactions based on the payment information and transaction authorization code. This disclosure also provides corresponding payment methods.

Description

繳費系統及繳費方法Payment system and payment method

本揭露是有關於一種繳費系統與繳費方法。This disclosure is about a payment system and payment method.

隨著電子化交易系統以及行動支付的普及,交易無卡化、無紙化的概念已落實於生活當中。然而,於交易無卡化、無紙化的同時,使用者需要自行輸入交易相關的資料,造成了使用者的不便。不僅如此,資料安全也是電子化交易的一大考量。因此,提供快速、安全又便利的交易系統為本領域技術人員長期致力的課題。With the popularization of electronic transaction systems and mobile payments, the concepts of cardless and paperless transactions have been implemented in life. However, while transactions are cardless and paperless, users need to enter transaction-related data by themselves, causing inconvenience to users. Not only that, data security is also a major consideration for electronic transactions. Therefore, providing a fast, secure, and convenient transaction system is a long-term subject for those skilled in the art.

本揭露提供一種繳費系統及繳費方法,以提供安全便利的整合繳費系統。This disclosure provides a payment system and payment method to provide a safe and convenient integrated payment system.

本揭露提供了一種繳費系統,此繳費系統具有繳費伺服器、繳費應用程式與交易系統。繳費伺服器是當加密資訊經由觸發動作而傳送至繳費伺服器時,繳費伺服器接收加密資訊,並執行第一驗證程序,以依據加密資訊獲取繳費資訊。繳費應用程式設於終端裝置並與繳費伺服器連接。繳費應用程式接收來自繳費伺服器傳送的繳費資訊,並將繳費資訊傳送至第三方帳務資訊系統,以使第三方帳務資訊系統回傳交易授權碼。交易系統與繳費應用程式連接。交易系統接收來自繳費應用程式傳送的繳費資訊及交易授權碼,並依據繳費資訊及交易授權碼執行交易。This disclosure provides a payment system, which includes a payment server, a payment application and a transaction system. When the payment server sends encrypted information to the payment server through a trigger action, the payment server receives the encrypted information and executes a first verification process to obtain payment information based on the encrypted information. The payment application is set on the terminal device and connected to the payment server. The billing application receives the billing information sent from the billing server and sends the billing information to the third-party billing information system so that the third-party billing information system returns a transaction authorization code. The transaction system is connected to a payment application. The transaction system receives the payment information and transaction authorization code sent from the payment application, and executes transactions based on the payment information and transaction authorization code.

本揭露亦提供了一種繳費方法。此繳費方法包括步驟繳費伺服器接收加密資訊。加密資訊是經由觸發動作而傳送至繳費伺服器。繳費伺服器執行第一驗證程序,以依據加密資訊獲取繳費資訊,並將繳費資訊傳送至繳費應用程式。繳費應用程式接收來自繳費伺服器傳送的繳費資訊,並將繳費資訊傳送至第三方帳務資訊系統,以使第三方帳務資訊系統回傳交易授權碼。繳費應用程式將繳費資訊及交易授權碼傳送至交易系統。交易系統接收來自繳費應用程式傳送的繳費資訊及交易授權碼,並依據繳費資訊及交易授權碼執行交易。This disclosure also provides a method of payment. This payment method includes the step of the payment server receiving encrypted information. The encrypted information is sent to the payment server through a trigger action. The payment server performs a first verification process to obtain payment information based on the encrypted information and sends the payment information to the payment application. The billing application receives the billing information sent from the billing server and sends the billing information to the third-party billing information system so that the third-party billing information system returns a transaction authorization code. The payment application sends payment information and transaction authorization codes to the transaction system. The transaction system receives the payment information and transaction authorization code sent from the payment application, and executes transactions based on the payment information and transaction authorization code.

基於上述,本揭露的繳費系統及繳費方法提供了使用者整合且便利的線上繳費方式。使用者選擇欲繳費的帳單,並輸入其所使用的付款方式與卡片後,此繳費系統即可自動完成繳費。此外,繳費系統於提供電子帳單時,是透過加密資訊進行資訊的交換,並於繳費時才經由解密加密資訊而獲取繳費資訊,因而提升了資料的安全性。Based on the above, the payment system and payment method disclosed in this disclosure provide users with an integrated and convenient online payment method. After the user selects the bill to be paid, and enters the payment method and card used by him, this payment system can automatically complete the payment. In addition, when the payment system provides electronic bills, it exchanges information through encrypted information, and only obtains payment information by decrypting the encrypted information at the time of payment, thus improving the security of the data.

為讓本揭露的上述特徵和優點能更明顯易懂,下文特舉實施例,並配合所附圖式作詳細說明如下。In order to make the above-mentioned features and advantages of the present disclosure more comprehensible, embodiments are described below in detail with reference to the accompanying drawings.

圖1繪示本揭露一實施例的繳費系統的架構圖。繳費系統100提供使用者於線上支付電子帳單的服務。此繳費系統100與第三方帳務資訊系統10連接。第三方帳務資訊系統10是第三方的金融平台,用以維護使用者的帳戶資訊。具體來說,使用者可以於第三方帳務資訊系統10中註冊多張金融卡,使用者即可透過終端裝置使用此金融卡進行交易,而不需攜帶實體的金融卡。而當繳費系統100呼叫第三方帳務資訊系統10,第三方帳務資訊系統10會回傳對應使用者選擇的金融卡授權碼,以使繳費系統100可以於金融卡、***中進行扣款。舉例來說,第三方帳務資訊系統10例如為台灣行動支付所提供的T-Wallet、T-Wallet+、蘋果公司所提供的Apple Pay、三星公司所提供的Samsung Pay、Pi錢包、歐付寶等任何與繳費系統100所屬的金融單位合作的行動支付單位,本揭露並不限定第三方帳務資訊系統10的種類與其實際運作的方式。FIG. 1 is a structural diagram of a payment system according to an embodiment of the disclosure. The payment system 100 provides a service for users to pay electronic bills online. The payment system 100 is connected to a third-party account information system 10. The third-party account information system 10 is a third-party financial platform for maintaining user account information. Specifically, the user can register multiple financial cards in the third-party account information system 10, and the user can use the financial card to conduct transactions through the terminal device without carrying a physical financial card. When the payment system 100 calls the third-party account information system 10, the third-party account information system 10 will return the authorization code corresponding to the financial card selected by the user, so that the payment system 100 can debit the financial card or credit card. For example, the third-party accounting information system 10, such as T-Wallet, T-Wallet + provided by Taiwan Mobile Payment, Apple Pay provided by Apple, Samsung Pay provided by Samsung, Pi Wallet, Opel, etc. The mobile payment unit cooperating with the financial unit to which the payment system 100 belongs, this disclosure does not limit the type of the third-party account information system 10 and the manner of its actual operation.

繳費系統100包括繳費伺服器110、繳費應用程式120、交易系統130。繳費伺服器110是用於處理與繳費資訊相關的產生、儲存及加解密等事項,而繳費資訊包括繳費編號及繳費金額。具體來說,為了避免繳費編號及繳費金額遭到惡意竄改,在產生並提供繳費資訊給使用者的過程中,繳費伺服器110僅會提供加密後的通用唯一識別碼(Universally Unique Identifier,UUID)給需要應用繳費資訊的單位,以維護資料的安全性。而於使用者欲透過繳費系統100繳費時,需要獲取完整繳費資訊的單位則會發送經加密後的通用唯一識別碼至繳費伺服器110,經由繳費伺服器110解密取得通用唯一識別碼後,繳費伺服器會於依據此通用唯一識別碼查詢對應的繳費資訊,並回傳繳費資訊至相關單位。The payment system 100 includes a payment server 110, a payment application 120, and a transaction system 130. The payment server 110 is used to process the generation, storage, encryption, and decryption of the payment information, and the payment information includes the payment number and the payment amount. Specifically, in order to avoid malicious alteration of the payment number and payment amount, in the process of generating and providing payment information to the user, the payment server 110 will only provide an encrypted Universal Unique Identifier (UUID) To the units that need to apply payment information to maintain the security of the data. When the user wants to pay through the payment system 100, the unit that needs to obtain complete payment information will send the encrypted universal unique identification code to the payment server 110, and after decrypting the payment server 110 to obtain the universal unique identification code, the payment will be made. The server will query the corresponding payment information according to this universal unique identifier, and return the payment information to the relevant unit.

繳費應用程式120是安裝於使用者終端裝置(例如:手機、平板電腦、個人電腦等)的應用程式,並可與繳費伺服器110連接。繳費應用程式120提供使用者與繳費系統100溝通的介面。當使用者透過繳費應用程式120進行繳費時,使用者可於繳費應用程式120中選擇付款方式,繳費應用程式120會依據使用者選擇的付款方式、電子帳單的內容而向繳費伺服器110及第三方帳務資訊系統10索取交易所需的資訊,並傳送給交易系統130,以進行交易。The payment application program 120 is an application installed on a user terminal device (for example, a mobile phone, a tablet computer, a personal computer, etc.) and can be connected to the payment server 110. The payment application program 120 provides an interface for the user to communicate with the payment system 100. When the user pays through the payment application 120, the user can select a payment method in the payment application 120, and the payment application 120 will make a payment to the payment server 110 and the payment server 110 according to the payment method selected by the user and the content of the electronic bill The third-party account information system 10 obtains the information required for the transaction and sends it to the transaction system 130 to perform the transaction.

交易系統130與繳費應用程式120相連接,交易系統130為執行交易的單位。交易系統130會根據繳費應用程式120提供的交易所需資訊,而對使用者的帳戶進行扣款,以完成繳費。The transaction system 130 is connected to the payment application 120, and the transaction system 130 is a unit that executes transactions. The transaction system 130 will debit the user's account according to the information required for the transaction provided by the payment application program 120 to complete the payment.

在本實施例中,繳費系統100更選擇性的設置了電子帳單系統140。電子帳單系統140會自動計算使用者的應付款項,以產生對應的應付金額,並傳送至繳費伺服器110。繳費伺服器110會依據電子帳單系統140所提供的使用者名稱及應付金額產生對應的繳費資訊,繳費伺服器110會將繳費資訊儲存於自身的儲存裝置中,並依據繳費資訊產生加密資訊,並將此加密資訊回傳至電子帳單系統140。電子帳單系統140再依據加密資訊產生電子帳單。In this embodiment, the payment system 100 is further provided with an electronic billing system 140. The electronic billing system 140 will automatically calculate the payable amount of the user to generate a corresponding payable amount and send it to the payment server 110. The payment server 110 generates corresponding payment information according to the user name and the amount payable provided by the electronic billing system 140. The payment server 110 stores the payment information in its own storage device and generates encrypted information based on the payment information. The encrypted information is returned to the electronic billing system 140. The electronic billing system 140 generates an electronic bill based on the encrypted information.

須說明的是,在本實施例中,繳費伺服器110、交易系統130及電子帳單系統140可由具備處理單元、儲存單元及通訊單元的裝置進行實作。處理單元可以是中央處理單元(Central Processing Unit,CPU),或是其他可程式化之一般用途或特殊用途的微處理器(Microprocessor)、數位信號處理器(Digital Signal Processor,DSP)、可程式化控制器、特殊應用積體電路(Application Specific Integrated Circuit,ASIC)或其他類似元件或上述元件的組合。通訊單元是以通訊晶片進行實作,通訊晶片可為支援全球行動通信(Global System for Mobile communication, GSM)、個人手持式電話系統(Personal Handy-phone System, PHS)、碼多重擷取(Code Division Multiple Access, CDMA)系統、寬頻碼分多址(Wideband Code Division Multiple Access, WCDMA)系統、長期演進(Long Term Evolution, LTE)系統、全球互通微波存取(Worldwide interoperability for Microwave Access, WiMAX)系統、無線保真(Wireless Fidelity, Wi-Fi)系統或藍牙的信號傳輸的元件。儲存單元為任何型態的固定或可移動隨機存取記憶體(Random Access Memory,RAM)、唯讀記憶體(Read-Only Memory,ROM)、快閃記憶體(flash memory)、硬碟(Hard Disk Drive,HDD)、固態硬碟(Solid State Drive,SSD)或類似元件或上述元件的組合。It should be noted that, in this embodiment, the payment server 110, the transaction system 130, and the electronic billing system 140 may be implemented by a device having a processing unit, a storage unit, and a communication unit. The processing unit can be a central processing unit (CPU), or other programmable general purpose or special purpose microprocessor (Microprocessor), digital signal processor (DSP), programmable Controller, Application Specific Integrated Circuit (ASIC) or other similar components or a combination of the above components. The communication unit is implemented by a communication chip. The communication chip can support Global System for Mobile Communication (GSM), Personal Handy-phone System (PHS), and Code Division Multiple Extraction (Code Division). Multiple Access (CDMA) system, Wideband Code Division Multiple Access (WCDMA) system, Long Term Evolution (LTE) system, Worldwide interoperability for Microwave Access (WiMAX) system, Wireless Fidelity (Wi-Fi) system or Bluetooth signal transmission component. The storage unit is any type of fixed or removable random access memory (RAM), read-only memory (ROM), flash memory, hard disk (Hard) Disk Drive (HDD), Solid State Drive (SSD) or similar components or a combination of the above components.

在本實施例中,使用者的終端裝置(例如:手機、平板電腦、個人電腦、筆記型電腦等)具有類似上述繳費伺服器110、交易系統130及電子帳單系統140的處理單元、儲存單元及通訊單元,於此即不再贅述。而繳費應用程式120是儲存於終端裝置的儲存單元中,並且由終端裝置的處理單元進行實作。In this embodiment, a user's terminal device (eg, a mobile phone, a tablet computer, a personal computer, a notebook computer, etc.) has a processing unit and a storage unit similar to the payment server 110, the transaction system 130, and the electronic billing system 140 And communication unit, will not repeat them here. The payment application 120 is stored in a storage unit of the terminal device, and is implemented by a processing unit of the terminal device.

為了提升使用者在繳費時的便利性,於本揭露中,繳費伺服器110會將加密資訊編碼成二維條碼,並傳送至電子帳單系統140,以使此二維條碼整合於電子帳單中。藉此,於使用者欲進行繳費時,使用者只要啟用此二維條碼所攜帶的加密資訊,並於繳費應用程式120中點選其所使用的繳費方式,其餘將由繳費系統100自動完成繳費。In order to improve the convenience of users when paying bills, in this disclosure, the billing server 110 encodes the encrypted information into a two-dimensional barcode and sends it to the electronic billing system 140, so that the two-dimensional barcode is integrated into the electronic bill in. Therefore, when the user wants to make a payment, the user only needs to enable the encrypted information carried by the two-dimensional barcode and select the payment method used in the payment application 120, and the remaining payment will be automatically completed by the payment system 100.

具體來說,請參照表一,表一是本揭露實施例的二維條碼所攜帶的加密資訊的格式。繳費伺服器110所生成的二維條碼具有五個欄位,分別為固定網址、通用唯一識別碼、第一加密識別碼、時間亂數以及欄位驗證碼。 表一:二維條碼的格式Specifically, please refer to Table 1. Table 1 is a format of the encrypted information carried by the two-dimensional barcode according to the embodiment of the present disclosure. The two-dimensional bar code generated by the payment server 110 has five fields, which are a fixed website address, a universal unique identification code, a first encrypted identification code, a random time number, and a field verification code. Table 1: Format of 2D barcode

固定網址的欄位記載了繳費檢查網頁平台的網址,以用於呼叫繳費檢查網頁平台。The field of the fixed website address records the website address of the payment inspection web platform for calling the payment inspection web platform.

通用唯一識別碼的欄位記載了經由加密系統中的第一加密程序後的通用唯一識別碼。繳費伺服器110可以於解碼後獲取通用唯一識別碼,並根據此通用唯一識別碼獲取繳費資訊。具體來說,於本揭露中,繳費伺服器110進一步呼叫加密系統,以加密通用唯一識別碼。加密系統為提供端點到端點加密服務(End-to-end encryption,E2EE)的加密系統,並且,適用於第一加密程序的第一金鑰儲存於加密系統中。在本揭露的實施例中,第一加密程序可以為對稱金鑰加密(Symmetric-key algorithm)進行加密及解密,例如,資料加密標準(Data Encryption Standard,DES)、三重資料加密演算法(Triple Data Encryption Algorithm,3DES)、進階加密標準(Advanced Encryption Standard,AES)、Blowfish演算法、國際資料加密演算法(International Data Encryption Algorithm,IDEA),本揭露並不限於此。The field of the universal unique identification code records the universal unique identification code after the first encryption program in the encryption system. The payment server 110 may obtain a universal unique identification code after decoding, and obtain payment information according to the universal unique identification code. Specifically, in the present disclosure, the payment server 110 further calls the encryption system to encrypt the universal unique identification code. The encryption system is an encryption system that provides end-to-end encryption (E2EE), and a first key suitable for a first encryption program is stored in the encryption system. In the embodiment of the present disclosure, the first encryption program may be symmetric key encryption (Symmetric-key algorithm) for encryption and decryption, for example, Data Encryption Standard (DES), Triple Data Encryption Algorithm (Triple Data Encryption Algorithm (3DES), Advanced Encryption Standard (AES), Blowfish algorithm, International Data Encryption Algorithm (IDEA), this disclosure is not limited to this.

第一加密識別碼的欄位記載了經加密的第一識別碼,此第一識別碼為加密系統中的唯一識別碼。繳費伺服器110將此第一識別碼傳送至加密系統中,以使加密系統依據此第一識別碼找到對應的適用於第一加密程序的第一金鑰。第一加密識別碼的產生方式是依據反轉規則將時間亂數欄位翻轉,以產生第一亂數。並且,將第一亂數經由加密而獲得的值,此處反轉規則可以依實際需求所設定反轉的欄位,而加密方式可以例如適用於第一加密程序的方式。The field of the first encrypted identification code records the encrypted first identification code, and the first identification code is a unique identification code in the encryption system. The payment server 110 transmits the first identification code to the encryption system, so that the encryption system can find a corresponding first key suitable for the first encryption program according to the first identification code. The first encryption identification code is generated by inverting the time random number field according to the inversion rule to generate the first random number. In addition, the value obtained by encrypting the first random number can be set according to actual requirements by the inversion rule here, and the encryption method can be applied to, for example, the first encryption program.

時間亂數是由產生時間亂數欄位時的時間,並結合亂數所組成的欄位。欄位驗證碼則是由固定網址的欄位資料相加,再經由壓碼演算法產生。欄位驗證碼是為了驗證網址的完整性,以避免網址被竄改。Time random number is a field composed of the time when the time random number field is generated and combined with the random number. The field verification code is added by the field data of the fixed URL, and then generated by the compression algorithm. Field verification codes are used to verify the integrity of the URL and prevent the URL from being tampered with.

須說明的是,本揭露的二維條碼的欄位僅為範例。於實際應用中,二維條碼的欄位內容、加密方式、擺置順序皆可因設計需求而有所調整。It should be noted that the fields of the two-dimensional barcode disclosed in this disclosure are only examples. In practical applications, the field content, encryption method, and placement order of the two-dimensional barcode can be adjusted according to design requirements.

以下將透過不同的實施例,詳述使用者如何透過二維條碼,以第三方帳務資訊系統10、繳費伺服器110、繳費應用程式120、交易系統130以及電子帳單系統140進行繳費。而於下述實施例所述之二維條碼的格式皆如表一所呈現的欄位。In the following, through different embodiments, it is described in detail how the user uses the two-dimensional bar code to pay with the third-party accounting information system 10, the payment server 110, the payment application 120, the transaction system 130, and the electronic billing system 140. The formats of the two-dimensional bar codes described in the following embodiments are the same as those shown in Table 1.

[第一實施例][First embodiment]

請同時參照圖1及圖2,圖2為本揭露實施例,使用者透過繳費系統100繳費的流程圖。在第一實施例中,二維條碼是透過繳費應用程式120而被啟用。具體來說,在本實施例中,繳費應用程式120具有自動分析檔案中是否有二維條碼的功能。當使用者點選繳費應用程式120中的繳交電子帳單選項時,首先,繳費應用程式120會提供多個付款方式,例如,使用行動金融卡、雲端支付等方式供使用者選擇。使用者選擇付款方式後,使用者即可透過繳費應用程式120開啟欲繳費的電子帳單或相關連的檔案。此時,繳費應用程式120會判斷使用者所開啟的檔案中是否包括合法的二維條碼。詳細地說,繳費應用程式120會先剖析檔案中是否有二維條碼。若檔案中具有二維條碼,繳費應用程式120會進一步判斷二維條碼是否包括所有必要欄位,即:表一的所有欄位。若是檔案中不具有二維條碼,或者是二維條碼中缺乏了必要欄位,繳費應用程式120會傳送錯誤訊息,以提示使用者繳費應用程式120不支援此檔案。Please refer to FIG. 1 and FIG. 2 at the same time. FIG. 2 is a flowchart of the embodiment of the disclosure in which a user pays a fee through the payment system 100. In the first embodiment, the two-dimensional barcode is enabled through the payment application 120. Specifically, in this embodiment, the payment application 120 has a function of automatically analyzing whether there is a two-dimensional barcode in the file. When the user clicks the electronic bill payment option in the payment application 120, first, the payment application 120 provides multiple payment methods, for example, using a mobile debit card, cloud payment, and other methods for the user to choose. After the user selects the payment method, the user can open the electronic bill or related file to be paid through the payment application 120. At this time, the payment application 120 determines whether the file opened by the user includes a valid two-dimensional barcode. In detail, the payment application 120 first analyzes whether there is a two-dimensional barcode in the file. If the file has a two-dimensional bar code, the payment application 120 will further determine whether the two-dimensional bar code includes all necessary fields, that is, all fields in Table 1. If the file does not have a two-dimensional bar code or the necessary fields are missing from the two-dimensional bar code, the payment application 120 will send an error message to remind the user that the payment application 120 does not support this file.

若是檔案中具有合法的二維條碼,則繳費應用程式120則判斷使用者執行了觸發動作。於步驟S210中,當使用者執行觸發動作,繳費應用程式120會傳送二維條碼所儲存的加密資訊至繳費伺服器110。在本實施例所述的加密資訊為二維條碼中的所有欄位資訊。If the file has a valid two-dimensional barcode, the payment application 120 determines that the user has performed a trigger action. In step S210, when the user performs a triggering action, the payment application 120 sends the encrypted information stored in the two-dimensional barcode to the payment server 110. The encrypted information described in this embodiment is all field information in the two-dimensional barcode.

於步驟S220,繳費伺服器110接收加密資訊後,繳費伺服器110會執行第一驗證程序,以依據加密資訊獲取繳費資訊。在本實施例中,繳費伺服器110是透過於繳費伺服器110中所架設的符合具象狀態傳輸應用程序接口(Representational State Transfer Application Programming Interface,RESTful API)的服務來執行第一驗證程序。In step S220, after the payment server 110 receives the encrypted information, the payment server 110 performs a first verification process to obtain the payment information based on the encrypted information. In this embodiment, the payment server 110 executes the first verification procedure through a service conforming to the Representational State Transfer Application Programming Interface (RESTful API) set up in the payment server 110.

請進一步參照圖3,圖3繪示本揭露第一實施例繳費伺服器110執行第一驗證程序的流程圖。在第一驗證程序中,繳費應用程式120除了傳送加密資訊至繳費伺服器110外,於步驟S310,繳費應用程式120更傳送了繳費應用程式資訊至繳費伺服器110。繳費應用程式資訊主要是用於驗證加密資訊的來源是否合法,以維護交易安全。在不同的作業系統中,繳費應用程式120所傳遞的繳費應用程式資訊並不相同。例如,安卓系統的繳費應用程式資訊為應用程式套件名稱(Package name)以及包版憑證安全雜湊(Secure Hash Algorithm,SHA)指紋。而於蘋果提供的行動裝置系統(iOS)中的繳費應用程式資訊則為應用程式唯一標示(bundle id)。Please further refer to FIG. 3, which is a flowchart illustrating a first verification procedure performed by the payment server 110 according to the first embodiment of the present disclosure. In the first verification process, in addition to the payment application 120 transmitting encrypted information to the payment server 110, in step S310, the payment application 120 further transmits the payment application information to the payment server 110. The payment application information is mainly used to verify that the source of encrypted information is legitimate to maintain transaction security. In different operating systems, the payment application information transmitted by the payment application 120 is not the same. For example, the payment application information of the Android system is the package name of the application and the Secure Hash Algorithm (SHA) fingerprint of the package certificate. The payment application information in the mobile device system (iOS) provided by Apple is the application ’s unique ID.

於繳費伺服器110接收到加密資訊以及繳費應用程式資訊後,於步驟S320,繳費伺服器110會驗證繳費應用程式資訊是否合法,藉此確認傳送加密資訊的來源是否為合法的來源。若此繳費應用程式資訊非為合法的繳費應用程式資訊,則繳費伺服器110會執行步驟S380,中斷第一驗證程序,並回傳繳費失敗的訊息。After the payment server 110 receives the encrypted information and the payment application information, in step S320, the payment server 110 verifies whether the payment application information is legal, thereby confirming whether the source transmitting the encrypted information is a legitimate source. If the payment application information is not legitimate payment application information, the payment server 110 executes step S380, interrupts the first verification process, and returns a message that the payment fails.

若繳費應用程式資訊為合法的繳費應用程式資訊,執行步驟S330,繳費伺服器110會依據加密資訊中的固定網址欄位以及欄位驗證碼欄位以驗證固定網址的欄位是否完整。If the payment application information is legal payment application information, step S330 is executed, and the payment server 110 verifies whether the fixed URL field is complete according to the fixed URL field and the field verification code field in the encrypted information.

具體來說,請參考圖4,圖4繪示本揭露第一實施例繳費伺服器110判斷固定網址欄位是否完整的流程圖。於判斷固定網址欄位是否完整時,首先,於步驟S422,繳費伺服器110會將固定網址欄位的資料相加總,以獲得暫時的驗證碼。接著,繳費伺服器110進一步比對暫時驗證碼及驗證碼的值是否相同。若兩者不同,則判斷固定網址並不完整,繳費伺服器110執行步驟S380,中斷第一驗證程序,並回傳繳費失敗的訊息至繳費應用程式120。Specifically, please refer to FIG. 4, which illustrates a flowchart of determining whether the fixed URL field is complete by the payment server 110 according to the first embodiment of the present disclosure. When determining whether the fixed URL field is complete, first, in step S422, the payment server 110 adds up the data of the fixed URL field to obtain a temporary verification code. Next, the payment server 110 further compares whether the values of the temporary verification code and the verification code are the same. If the two are different, it is determined that the fixed URL is incomplete, the payment server 110 executes step S380, interrupts the first verification process, and returns a message that the payment fails to the payment application 120.

回到圖3,若固定網址欄位為完整的,執行步驟S340,繳費伺服器110依據時間亂數欄位解碼第一加密識別碼欄位,以獲得第一識別碼。由於繳費伺服器110是以對稱於第一加密識別碼產生的方式進行解碼,此處即不再贅述。Returning to FIG. 3, if the fixed URL field is complete, step S340 is executed, and the payment server 110 decodes the first encrypted identification code field according to the random number field to obtain the first identification code. Since the payment server 110 decodes in a manner symmetrical to the generation of the first encrypted identification code, it will not be repeated here.

接著,於步驟S350中,繳費伺服器110依據第一識別碼於加密系統中取得第一金鑰。由於此第一識別碼為加密系統中的唯一識別碼,因此,繳費伺服器110可以於加密系統中,依據第一識別碼找到對應的的第一金鑰。Next, in step S350, the payment server 110 obtains the first key from the encryption system according to the first identification code. Since the first identification code is a unique identification code in the encryption system, the payment server 110 can find the corresponding first key in the encryption system according to the first identification code.

於繳費伺服器110獲取第一金鑰後,執行步驟S360,繳費伺服器110依據第一金鑰,於加密系統中,以對稱的方式解碼通用唯一識別碼的欄位。After the payment server 110 obtains the first key, step S360 is performed, and the payment server 110 decodes the field of the universal unique identification code in a symmetric manner in the encryption system according to the first key.

繳費伺服器110取得通用唯一識別碼後,於步驟S370,繳費伺服器110即可依據通用唯一識別碼,於繳費伺服器110中儲存的多筆繳費資訊中,找到對應通用唯一識別碼的繳費資訊。After the payment server 110 obtains the universal unique identification code, in step S370, the payment server 110 can find the payment information corresponding to the universal unique identification code among the multiple payment information stored in the payment server 110 based on the universal unique identification code. .

請回到圖2,於步驟S220,繳費伺服器110執行第一驗證程序,以依據加密資訊獲取繳費資訊後,繳費伺服器110執行步驟S230,傳送完整的繳費資訊至繳費應用程式120。Please return to FIG. 2. In step S220, the payment server 110 performs a first verification procedure to obtain payment information based on the encrypted information, and then the payment server 110 executes step S230 to send complete payment information to the payment application 120.

繳費應用程式120接收來自繳費伺服器110傳送的繳費資訊後,繳費應用程式120會把頁面導到繳費頁面,並讓使用者確認繳費資訊無誤後,於步驟S240,繳費應用程式120會將繳費資訊以及使用者的資訊傳送至第三方帳務資訊系統10。After the payment application 120 receives the payment information transmitted from the payment server 110, the payment application 120 guides the page to the payment page and allows the user to confirm that the payment information is correct. In step S240, the payment application 120 sends the payment information And the user's information is transmitted to the third-party accounting information system 10.

第三方帳務資訊系統10會依據使用者的資訊提供對應使用者的行動金融卡選項,以供使用者選擇。並且,於步驟S250中,第三方帳務資訊系統10會依據使用者所選擇的行動金融卡以及繳費資訊回傳交易授權碼至繳費應用程式120。於此,第三方帳務資訊系統10所回傳的交易授權碼為對應使用者選擇的行動金融卡的安控壓碼,例如:二代晶片金融卡授權碼(Transaction Authentication Code,TAC)。The third-party billing information system 10 provides a mobile financial card option corresponding to the user according to the user's information for the user to select. Furthermore, in step S250, the third-party account information system 10 returns a transaction authorization code to the payment application 120 according to the mobile financial card and payment information selected by the user. Here, the transaction authorization code returned by the third-party account information system 10 is a security control code corresponding to the mobile financial card selected by the user, such as a second-generation chip financial card authorization code (Transaction Authentication Code, TAC).

於繳費應用程式120收到來自第三方帳務資訊系統10所傳送的交易授權碼後,執行步驟S260,繳費應用程式120將繳費資訊及交易授權碼傳送至交易系統130。After the payment application program 120 receives the transaction authorization code transmitted from the third-party account information system 10, step S260 is executed, and the payment application program 120 transmits the payment information and the transaction authorization code to the transaction system 130.

於步驟S270,當交易系統130接收到繳費資訊及交易授權碼時,交易系統130會依據此繳費資訊及交易授權碼執行實際的金融交易,以於使用者的帳戶中扣掉對應繳費資訊的應付帳款。並且,於交易系統130確認扣款完成後,交易系統130會回傳並透過繳費應用程式120顯示繳費成功的訊息,以提示使用者交易完成。In step S270, when the transaction system 130 receives the payment information and the transaction authorization code, the transaction system 130 executes the actual financial transaction based on the payment information and the transaction authorization code to deduct the corresponding payment information from the user's account Accounts. In addition, after the transaction system 130 confirms that the debit is completed, the transaction system 130 will return and display a successful payment message through the payment application 120 to prompt the user that the transaction is complete.

於本實施例中,亦提供了電子帳單系統140,以產生、管理電子帳單。請同時參考圖1及圖5,圖5繪示本揭露一實施例電子帳單系統140產生電子帳單的流程圖。在本揭露的實施例中,電子帳單是透過繳費系統100中的電子帳單系統140所產生。惟須說明,本揭露並不限於此,電子帳單亦可以透過其他合作業者所提供的相容的電子帳單系統所產生。In this embodiment, an electronic billing system 140 is also provided to generate and manage electronic bills. Please refer to FIG. 1 and FIG. 5 at the same time. FIG. 5 shows a flowchart of generating an electronic bill by the electronic billing system 140 according to an embodiment of the present disclosure. In the embodiment of the present disclosure, the electronic bill is generated through the electronic billing system 140 in the payment system 100. It must be noted that this disclosure is not limited to this, and electronic billing can also be generated through compatible electronic billing systems provided by other partners.

當電子帳單系統140欲產生電子帳單給使用者,於步驟S510,電子帳單系統140會傳送對應使用者的應收帳款至繳費伺服器110。When the electronic billing system 140 wants to generate an electronic bill to the user, in step S510, the electronic billing system 140 sends the account receivable corresponding to the user to the payment server 110.

於步驟S520,繳費伺服器110會依據電子帳單系統140所傳送的應收帳款產生繳費資訊,即,產生通用唯一識別碼與繳費金額。In step S520, the payment server 110 generates payment information according to the account receivable transmitted by the electronic billing system 140, that is, generates a universal unique identification code and a payment amount.

於步驟S530,繳費伺服器110會將繳費資訊儲存於繳費伺服器110中,並加密通用唯一識別碼,以產生加密資訊。並且,於本實施例中,繳費伺服器110會將加密資訊編碼成二維條碼,並將此帶有加密資訊的二維條碼回傳至電子帳單系統140中。In step S530, the payment server 110 stores the payment information in the payment server 110 and encrypts the universal unique identification code to generate encrypted information. Moreover, in this embodiment, the payment server 110 encodes the encrypted information into a two-dimensional barcode, and returns the two-dimensional barcode with the encrypted information to the electronic billing system 140.

於步驟S540,當電子帳單系統140收到此二維條碼,電子帳單系統140會將此二維條碼整合於電子帳單中,並將此電子帳單傳送至使用者的終端裝置,以提供使用者繳費資訊。In step S540, when the electronic billing system 140 receives the two-dimensional bar code, the electronic billing system 140 integrates the two-dimensional bar code into the electronic bill, and transmits the electronic bill to the user's terminal device to Provide user payment information.

[第二實施例][Second embodiment]

在第二實施例中,二維條碼的啟用是透過光學辨識元件(例如:相機)掃描二維條碼,或者是藉由點擊二維條碼使得二維條碼被啟用。In the second embodiment, the activation of the two-dimensional barcode is to scan the two-dimensional barcode through an optical identification element (for example, a camera), or to enable the two-dimensional barcode by clicking the two-dimensional barcode.

請參照圖6,圖6繪示本揭露第二實施例的繳費系統的架構圖。在本實施例中,繳費系統100與第三方帳務資訊系統10連接,並具有繳費伺服器110、繳費檢查網頁平台115、繳費應用程式120、交易系統130以及電子帳單系統140。其中,繳費伺服器110、繳費應用程式120、交易系統130以及電子帳單系統140與第一實施例相同,於此即不再贅述。Please refer to FIG. 6, which is a schematic diagram of a payment system according to a second embodiment of the present disclosure. In this embodiment, the payment system 100 is connected to the third-party account information system 10, and has a payment server 110, a payment check web platform 115, a payment application 120, a transaction system 130, and an electronic billing system 140. The payment server 110, the payment application 120, the transaction system 130, and the electronic billing system 140 are the same as those in the first embodiment, and will not be described again here.

繳費檢查網頁平台115為使用者啟用二維條碼時,透過繳費檢查網頁平台115而與繳費伺服器110相連接的溝通平台。繳費檢查網頁平台115設於硬體結構與繳費伺服器110、繳費應用程式120、交易系統130以及電子帳單系統140相似的裝置中,此處即不再贅述。The payment check webpage platform 115 is a communication platform that is connected to the payment server 110 through the payment check webpage platform 115 when the user activates the two-dimensional barcode. The payment check webpage platform 115 is provided in a device with a hardware structure similar to the payment server 110, the payment application 120, the transaction system 130, and the electronic billing system 140, and details are not described herein again.

於本實施例中,使用者透過繳費系統100繳費的流程與第一實施例的流程類似。因此,請參考圖2繪示的使用者透過繳費系統100繳費的流程圖。第一實施例與第二實施例的差別在於,於第二實施例中,更設置了於繳費伺服器110與繳費應用程式120之間的繳費檢查網頁平台115。因此,於第二實施例的步驟S210,使用者執行觸發動作時,即透過光學辨識元件掃描二維條碼,或者是點擊二維條碼時,加密資訊會先被傳送到繳費檢查網頁平台115,再透過繳費檢查網頁平台115將加密資訊傳送至繳費伺服器110。In this embodiment, the flow of payment by the user through the payment system 100 is similar to the flow of the first embodiment. Therefore, please refer to the flowchart shown in FIG. 2 for the user to pay through the payment system 100. The difference between the first embodiment and the second embodiment is that in the second embodiment, a payment check webpage platform 115 between the payment server 110 and the payment application 120 is further provided. Therefore, in step S210 of the second embodiment, when a user performs a triggering action, that is, when scanning a two-dimensional bar code through an optical recognition element, or when clicking a two-dimensional bar code, the encrypted information is first transmitted to the payment check web platform 115, and then The encrypted information is transmitted to the payment server 110 through the payment check web platform 115.

而於步驟S220,繳費伺服器110收到加密資訊後所執行的第一驗證程序也因繳費檢查網頁平台115略為不同。In step S220, the first verification process performed by the payment server 110 after receiving the encrypted information is also slightly different due to the payment check web platform 115.

具體來說,以下將搭配圖7敘明繳費檢查網頁平台115於繳費系統100中,與繳費伺服器110、繳費應用程式120、交易系統130以及電子帳單系統140之間的作動。圖7繪示本揭露第二實施例繳費伺服器110執行第一驗證程序的流程圖。Specifically, the actions between the payment check webpage platform 115 and the payment server 110, the payment application 120, the transaction system 130, and the electronic billing system 140 in the payment system 100 will be described below with reference to FIG. FIG. 7 is a flowchart of a first verification procedure performed by the payment server 110 according to the second embodiment of the present disclosure.

於步驟S710中,加密資訊經由繳費檢查網頁平台115傳送至繳費伺服器110。此時,繳費伺服器110會驗證加密資訊的來源是否合法,即繳費檢查網頁平台115是否合法。具體來說,於繳費伺服器110中儲存了網頁白名單清單,繳費伺服器110會判斷繳費檢查網頁平台115是否為網頁白名單清單中。若否,繳費伺服器110會判斷加密資訊的來源並不合法,因而執行步驟S780,中斷第一驗證程序。In step S710, the encrypted information is transmitted to the payment server 110 via the payment check web platform 115. At this time, the payment server 110 verifies whether the source of the encrypted information is legal, that is, whether the payment check webpage platform 115 is legal. Specifically, the webpage whitelist list is stored in the payment server 110, and the payment server 110 determines whether the payment check webpage platform 115 is in the webpage whitelist list. If not, the payment server 110 determines that the source of the encrypted information is illegal, and therefore executes step S780 to interrupt the first verification process.

若加密資訊的來源為合法的,此時,繳費伺服器110執行步驟S730至S770,以判斷加密資訊的內容是否完整,並解密加密資訊的內容。由於步驟S730至S770與步驟S330至S370執行的內容都相同,都是針對加密資訊進行處理,此處即不再贅述。If the source of the encrypted information is legitimate, at this time, the payment server 110 executes steps S730 to S770 to determine whether the content of the encrypted information is complete and decrypt the content of the encrypted information. Since steps S730 to S770 and steps S330 to S370 are performed in the same way, they are performed on the encrypted information, which will not be repeated here.

請再回到圖2,於圖2的步驟S230中,繳費伺服器110傳送繳費資訊至繳費應用程式120時,亦會先傳送到繳費檢查網頁平台115。此時,繳費檢查網頁平台115會先檢查使用者所使用的終端裝置的作業系統為何,再依據使用者所使用的作業系統打開對應的繳費應用程式120。第二實施例中的其他步驟皆與第一實施例相同,於此即不再贅述。Please return to FIG. 2 again. In step S230 of FIG. 2, when the payment server 110 transmits the payment information to the payment application 120, it will also first transmit the payment information to the payment check webpage platform 115. At this time, the payment check webpage platform 115 first checks the operating system of the terminal device used by the user, and then opens the corresponding payment application program 120 according to the operating system used by the user. The other steps in the second embodiment are the same as those in the first embodiment, and will not be repeated here.

綜上所述,本揭露提供了一種繳費系統以及繳費方法,以提供使用者整合且便利的線上繳費方式。於使用者選擇欲繳費的帳單,並輸入其所使用的付款方式與卡片後,此繳費系統與繳費方法即可自動完成繳費。此外,於本揭露的繳費系統中,使用者更可以透過繳費應用程式直接讀取具有二維條碼的檔案直接進行繳費。因此,使用者不需額外的帳單、顯示裝置即可直接讀取二維條碼的資訊。並且,繳費系統是經由雙層加密的通用唯一識別碼生成電子帳單,並於繳費時才經由解密此通用唯一識別碼獲取繳費資訊,因而提升了資料的安全性。In summary, this disclosure provides a payment system and payment method to provide users with an integrated and convenient online payment method. After the user selects the bill to be paid and enters the payment method and card used by him, this payment system and payment method can automatically complete the payment. In addition, in the payment system disclosed in this disclosure, the user can directly read the file with the two-dimensional barcode through the payment application to directly pay. Therefore, the user can directly read the information of the two-dimensional barcode without an additional bill or display device. In addition, the payment system generates electronic bills through a universally unique identification code with double-layer encryption, and only obtains payment information by decrypting the universally unique identification code when paying, thereby improving the security of the data.

雖然本揭露已以實施例揭露如上,然其並非用以限定本發明,任何所屬技術領域中具有通常知識者,在不脫離本發明的精神和範圍內,當可作些許的更動與潤飾,故本揭露的保護範圍當視後附的申請專利範圍所界定者為準。Although the present disclosure has been disclosed above by way of example, it is not intended to limit the present invention. Any person with ordinary knowledge in the technical field can make some modifications and retouching without departing from the spirit and scope of the present invention. The scope of protection of this disclosure shall be determined by the scope of the attached patent application.

10‧‧‧第三方帳務資訊系統10‧‧‧ Third Party Accounting Information System

100‧‧‧繳費系統 100‧‧‧Payment System

110‧‧‧繳費伺服器 110‧‧‧Payment server

115‧‧‧繳費檢查網頁平台 115‧‧‧Payment Checking Web Platform

120‧‧‧繳費應用程式 120‧‧‧Payment App

130‧‧‧交易系統 130‧‧‧Transaction System

140‧‧‧電子帳單系統 140‧‧‧Electronic billing system

S210~S270‧‧‧使用者透過繳費系統繳費的步驟 S210 ~ S270‧‧‧Steps for users to pay through the payment system

S310~S380、S424~S426、S710~S780‧‧‧繳費伺服器執行第一驗證程序的步驟 S310 ~ S380, S424 ~ S426, S710 ~ S780‧‧‧The steps of the first verification procedure of the payment server

S510~S540‧‧‧電子帳單系統產生電子帳單的步驟 S510 ~ S540‧‧‧Electronic billing system steps to generate electronic bill

圖1繪示本揭露一實施例的繳費系統的架構圖。 圖2為本揭露實施例中,使用者透過繳費系統繳費的流程圖。 圖3繪示本揭露第一實施例繳費伺服器執行第一驗證程序的流程圖。 圖4繪示本揭露第一實施例繳費伺服器判斷固定網址欄位是否完整的流程圖。 圖5繪示本揭露一實施例電子帳單系統產生電子帳單的流程圖。 圖6繪示本揭露第二實施例的繳費系統的架構圖。 圖7繪示本揭露第二實施例繳費伺服器執行第一驗證程序的流程圖。FIG. 1 is a structural diagram of a payment system according to an embodiment of the disclosure. FIG. 2 is a flowchart of a user paying a fee through a payment system in an embodiment of the disclosure. FIG. 3 is a flowchart of a first verification procedure performed by a payment server according to the first embodiment of the disclosure. FIG. 4 shows a flowchart of the payment server determining whether the fixed website address field is complete according to the first embodiment of the disclosure. FIG. 5 is a flowchart of an electronic bill generation system according to an embodiment of the disclosure. FIG. 6 is a structural diagram of a payment system according to a second embodiment of the disclosure. FIG. 7 is a flowchart of a first verification procedure performed by a payment server according to a second embodiment of the disclosure.

Claims (9)

一種繳費系統,包括:繳費伺服器,當加密資訊經由觸發動作而傳送至該繳費伺服器時,該繳費伺服器接收該加密資訊,並執行第一驗證程序,以依據該加密資訊獲取繳費資訊,其中該加密資訊儲存於二維條碼中,該觸發動作為該二維條碼經由光學辨識元件被掃描、該二維條碼被觸擊或者經由該繳費應用程式讀取包括該二維條碼的檔案,其中該二維條碼所儲存的該加密資訊包括固定網址、通用唯一識別碼(Universally Unique Identifier,UUID)、第一識別碼、時間亂數及欄位驗證碼,且在該第一驗證程序中,該繳費伺服器依據該第一識別碼獲取第一金鑰,並依據該第一金鑰解密該通用唯一識別碼,以依據解密後的該通用唯一識別碼獲取該繳費資訊,該繳費伺服器還依據該欄位驗證碼驗證該固定網址的完整性;繳費應用程式,設於終端裝置並與該繳費伺服器連接,該繳費應用程式接收來自該繳費伺服器傳送的該繳費資訊,並將該繳費資訊以及被選擇用於支付的行動金融卡選項傳送至第三方帳務資訊系統,以使該第三方帳務資訊系統回傳相應該被選擇用於支付的行動金融卡選項的交易授權碼;以及交易系統,與該繳費應用程式連接,該繳費應用程式傳送該繳費資訊及該交易授權碼至該交易系統,以使該交易系統依據該繳費資訊及該交易授權碼執行交易。A payment system includes: a payment server, when encrypted information is transmitted to the payment server through a triggered action, the payment server receives the encrypted information and executes a first verification procedure to obtain payment information based on the encrypted information, The encrypted information is stored in a two-dimensional barcode, and the triggering action is that the two-dimensional barcode is scanned through an optical identification element, the two-dimensional barcode is struck, or a file including the two-dimensional barcode is read by the payment application, where The encrypted information stored in the two-dimensional barcode includes a fixed URL, a Universally Unique Identifier (UUID), a first identification code, a random number of time, and a field verification code, and in the first verification process, the The payment server obtains a first key according to the first identification code, and decrypts the universal unique identification code according to the first key, so as to obtain the payment information according to the decrypted universal unique identification code. The payment server also The field verification code verifies the integrity of the fixed URL; the payment application is located on the terminal device and is connected to the payment server , The payment application receives the payment information transmitted from the payment server, and transmits the payment information and the mobile financial card option selected for payment to a third-party account information system, so that the third-party account information The system returns the transaction authorization code corresponding to the mobile financial card option selected for payment; and the transaction system is connected to the payment application program, and the payment application program transmits the payment information and the transaction authorization code to the transaction system to The transaction system is executed according to the payment information and the transaction authorization code. 如申請專利範圍第1項所述的繳費系統,其中該加密資訊儲存於二維條碼中,該觸發動作為該二維條碼經由光學辨識元件被掃描、該二維條碼被觸擊或者經由該繳費應用程式讀取包括該二維條碼的檔案。The payment system according to item 1 of the scope of patent application, wherein the encrypted information is stored in a two-dimensional barcode, and the triggering action is that the two-dimensional barcode is scanned via an optical identification element, the two-dimensional barcode is struck, or the payment is made The application reads the file containing the two-dimensional barcode. 如申請專利範圍第2項所述的繳費系統,該繳費系統更包括:電子帳單系統,與該繳費伺服器連接,其中該電子帳單系統傳送該繳費資訊至該繳費伺服器,其中該繳費伺服器依據該繳費資訊產生該加密資訊,並依據該加密資訊產生該二維條碼,並將該二維條碼回傳至該電子帳單系統,其中該電子帳單系統將該二維條碼整合於對應該繳費資訊的電子帳單中,並將該電子帳單提供給使用者。According to the payment system described in item 2 of the patent application scope, the payment system further includes: an electronic billing system connected to the payment server, wherein the electronic billing system transmits the payment information to the payment server, wherein the payment The server generates the encrypted information according to the payment information, generates the two-dimensional barcode according to the encrypted information, and returns the two-dimensional barcode to the electronic billing system, where the electronic billing system integrates the two-dimensional barcode with Corresponding to the billing information and provide it to the user. 如申請專利範圍第2項所述的繳費系統,當該觸發動作為經由該繳費應用程式讀取包括該二維條碼的檔案時,於該第一驗證程序中,該繳費應用程式更傳送繳費應用程式資訊至該繳費伺服器,該繳費伺服器依據該繳費應用程式資訊驗證該繳費應用程式是否合法。According to the payment system described in item 2 of the scope of patent application, when the triggering action is to read a file including the two-dimensional barcode through the payment application, the payment application further transmits the payment application in the first verification procedure. The program information is sent to the payment server, and the payment server verifies whether the payment application is legal according to the payment application information. 如申請專利範圍第2項所述的繳費系統,該繳費系統更包括繳費檢查網頁平台,當該觸發動作為該二維條碼經由光學辨識元件被掃描或者該二維條碼被點擊時,該加密資訊經由該繳費檢查網頁平台傳送至該繳費伺服器,並且於該繳費伺服器執行該第一驗證程序中,該繳費伺服器更驗證該繳費檢查網頁是否合法。As in the payment system described in item 2 of the scope of patent application, the payment system further includes a payment check web platform. When the triggering action is that the two-dimensional barcode is scanned via an optical identification element or the two-dimensional barcode is clicked, the encrypted information It is transmitted to the payment server via the payment check web platform, and in the first verification process performed by the payment server, the payment server verifies whether the payment check web page is legal. 如申請專利範圍第5項所述的繳費系統,其中於該繳費伺服器傳送該繳費資訊至該繳費應用程式時,該繳費伺服器依據執行該觸發動作的該終端裝置開啟對應的該繳費應用程式。According to the payment system described in item 5 of the scope of patent application, when the payment server sends the payment information to the payment application, the payment server opens the corresponding payment application according to the terminal device that executes the trigger action . 如申請專利範圍第1項所述的繳費系統,其中於該繳費伺服器執行該第一驗證程序中,該繳費伺服器依據該固定網址與該欄位驗證碼檢查該固定網址的完整性,該繳費伺服器解碼該第一加密識別碼以獲得第一識別碼,該繳費伺服器於加密系統中使用該第一識別碼,以取得第一金鑰,該繳費伺服器使用該第一金鑰解碼該通用唯一識別碼,該繳費伺服器並使用經解碼的該通用唯一識別碼取得該繳費資訊。The payment system according to item 1 of the scope of patent application, wherein in the payment server executing the first verification procedure, the payment server checks the integrity of the fixed website according to the fixed website and the field verification code. The payment server decodes the first encrypted identification code to obtain a first identification code, the payment server uses the first identification code in an encryption system to obtain a first key, and the payment server uses the first key to decode The universal unique identification code, and the payment server uses the decoded universal unique identification code to obtain the payment information. 如申請專利範圍第7項所述的繳費系統,其中該繳費伺服器依據該固定網址與該欄位驗證碼檢查該固定網址的完整性中,該繳費伺服器加總該固定網址的欄位,以獲得暫時驗證碼,該繳費伺服器比對該暫時驗證碼及該驗證碼,若該暫時驗證碼與該驗證碼的值相同,該繳費伺服器判斷該固定網址為完整。According to the payment system described in item 7 of the scope of patent application, wherein the payment server checks the integrity of the fixed website according to the fixed website and the field verification code, the payment server adds up the fields of the fixed website, To obtain a temporary verification code, the payment server compares the temporary verification code with the verification code. If the value of the temporary verification code is the same as the verification code, the payment server determines that the fixed URL is complete. 一種繳費方法,包括:繳費伺服器接收該加密資訊,其中,該加密資訊是經由觸發動作而傳送至該繳費伺服器,其中該加密資訊儲存於二維條碼中,該觸發動作為該二維條碼經由光學辨識元件被掃描、該二維條碼被觸擊或者經由該繳費應用程式讀取包括該二維條碼的檔案,其中該二維條碼所儲存的該加密資訊包括固定網址、通用唯一識別碼(Universally Unique Identifier,UUID)、第一識別碼、時間亂數及欄位驗證碼,且在該第一驗證程序中,該繳費伺服器依據該第一識別碼獲取第一金鑰,並依據該第一金鑰解密該通用唯一識別碼,以依據解密後的該通用唯一識別碼獲取該繳費資訊,該繳費伺服器還依據該欄位驗證碼驗證該固定網址的完整性;該繳費伺服器執行第一驗證程序,以依據該加密資訊獲取繳費資訊,並將該繳費資訊傳送至繳費應用程式;該繳費應用程式接收來自該繳費伺服器傳送的該繳費資訊,並將該繳費資訊以及被選擇用於支付的行動金融卡選項傳送至第三方帳務資訊系統,以使該第三方帳務資訊系統回傳相應該被選擇用於支付的行動金融卡選項的交易授權碼;該繳費應用程式將該繳費資訊及該交易授權碼傳送至交易系統;以及該交易系統接收來自該繳費應用程式傳送的該繳費資訊及該交易授權碼,並依據該繳費資訊及該交易授權碼執行交易。A payment method includes: a payment server receives the encrypted information, wherein the encrypted information is transmitted to the payment server via a triggering action, wherein the encrypted information is stored in a two-dimensional bar code, and the triggering action is the two-dimensional bar code The file containing the two-dimensional barcode is scanned through the optical identification element, the two-dimensional barcode is touched, or the payment application program is read, wherein the encrypted information stored in the two-dimensional barcode includes a fixed website address, a universal unique identification code ( Universally Unique Identifier (UUID), first identification code, random time and field verification code, and in the first verification process, the payment server obtains a first key based on the first identification code, and according to the first A key decrypts the universal unique identification code to obtain the payment information according to the decrypted universal unique identification code. The payment server also verifies the integrity of the fixed URL according to the field verification code; the payment server executes the first A verification process to obtain payment information based on the encrypted information and send the payment information to the payment application; the payment should be The program receives the payment information transmitted from the payment server, and transmits the payment information and the mobile financial card option selected for payment to a third-party accounting information system, so that the third-party accounting information system returns the information The transaction authorization code of the mobile debit card option that should be selected for payment; the payment application transmits the payment information and the transaction authorization code to the transaction system; and the transaction system receives the payment information and the payment information transmitted from the payment application and The transaction authorization code, and execute the transaction according to the payment information and the transaction authorization code.
TW106123938A 2017-07-18 2017-07-18 Payment system and payment method TWI680413B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
TW106123938A TWI680413B (en) 2017-07-18 2017-07-18 Payment system and payment method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
TW106123938A TWI680413B (en) 2017-07-18 2017-07-18 Payment system and payment method

Publications (2)

Publication Number Publication Date
TW201909060A TW201909060A (en) 2019-03-01
TWI680413B true TWI680413B (en) 2019-12-21

Family

ID=66590310

Family Applications (1)

Application Number Title Priority Date Filing Date
TW106123938A TWI680413B (en) 2017-07-18 2017-07-18 Payment system and payment method

Country Status (1)

Country Link
TW (1) TWI680413B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI767258B (en) * 2020-06-19 2022-06-11 財金資訊股份有限公司 Payment QR code verification system

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120136780A1 (en) * 2010-08-27 2012-05-31 Khalid El-Awady Account number based bill payment platform apparatuses, methods and systems
CN102651107A (en) * 2011-02-25 2012-08-29 深圳市心艺来文化有限公司 Cell phone paying method through photographing codes
CN104484798A (en) * 2015-01-09 2015-04-01 国网重庆市电力公司客户服务中心 Payment method and device
CN105389695A (en) * 2015-10-27 2016-03-09 江西掌中无限网络科技股份有限公司 Multi-channel network payment method and system
TWM545316U (en) * 2017-03-29 2017-07-11 T Wallet Co Ltd Tax-paying system utilizing mobile device
TWM553026U (en) * 2017-07-18 2017-12-11 兆豐國際商業銀行股份有限公司 Payment system

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20120136780A1 (en) * 2010-08-27 2012-05-31 Khalid El-Awady Account number based bill payment platform apparatuses, methods and systems
CN102651107A (en) * 2011-02-25 2012-08-29 深圳市心艺来文化有限公司 Cell phone paying method through photographing codes
CN104484798A (en) * 2015-01-09 2015-04-01 国网重庆市电力公司客户服务中心 Payment method and device
CN105389695A (en) * 2015-10-27 2016-03-09 江西掌中无限网络科技股份有限公司 Multi-channel network payment method and system
TWM545316U (en) * 2017-03-29 2017-07-11 T Wallet Co Ltd Tax-paying system utilizing mobile device
TWM553026U (en) * 2017-07-18 2017-12-11 兆豐國際商業銀行股份有限公司 Payment system

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI767258B (en) * 2020-06-19 2022-06-11 財金資訊股份有限公司 Payment QR code verification system

Also Published As

Publication number Publication date
TW201909060A (en) 2019-03-01

Similar Documents

Publication Publication Date Title
US11640600B2 (en) Using on-demand applications to process encrypted data from a contactless card
AU2020241544B2 (en) Tap to copy data to clipboard via NFC
CN107077670B (en) Method and apparatus for transmitting and processing transaction message, computer readable storage medium
CN107925572B (en) Secure binding of software applications to communication devices
CN105741112B (en) Network-based authentication payment device, authentication payment method and authentication payment system
CN106875173B (en) Method for authenticating transaction
JP6021923B2 (en) Secure authentication method and system for online transactions
CN106716916B (en) Authentication system and method
JP6704009B2 (en) Mobile payment method using barcodes, device, and server for using the method
US20190188975A1 (en) Systems and methods for transferring resource access
US9965760B2 (en) Systems and methods for facilitating electronic transactions utilizing a mobile computing device
US20110131102A1 (en) Secure mobile payment processing
US20210250185A1 (en) System and method for software module binding
US20140040617A1 (en) Method for the generation of a code, and method and system for the authorization of an operation
US20220393874A1 (en) Techniques For Securely Performing Offline Authentication
WO2020119705A1 (en) Payment two-dimensional code secure payment method and system without two-step authentication
CN103281187A (en) Security authentication method, equipment and system
US20230020190A1 (en) Techniques For Performing Secure Operations
US20240127204A1 (en) Instant digital issuance
JP6462121B2 (en) Method for accessing services, corresponding first device, second device and system
TWM553026U (en) Payment system
TWI680413B (en) Payment system and payment method
CN112970234B (en) Account assertion
CA3220470A1 (en) Instant digital issuance
CN114169882A (en) Payment method, first service terminal, client and system