TWM578411U - System for assisting a financial card holder in setting password for the first time - Google Patents
System for assisting a financial card holder in setting password for the first time Download PDFInfo
- Publication number
- TWM578411U TWM578411U TW107217505U TW107217505U TWM578411U TW M578411 U TWM578411 U TW M578411U TW 107217505 U TW107217505 U TW 107217505U TW 107217505 U TW107217505 U TW 107217505U TW M578411 U TWM578411 U TW M578411U
- Authority
- TW
- Taiwan
- Prior art keywords
- financial card
- password
- authentication
- app
- code
- Prior art date
Links
Landscapes
- Storage Device Security (AREA)
Abstract
Description
本創作係關於一種用於幫助持卡人首次設定金融卡密碼之系統,特別係關於一種無需紙本金融卡密碼函的系統。This creation is about a system for helping cardholders to first set a financial card password, especially for a system that does not require a paper currency card cryptogram.
現行金融卡密碼函係由金融卡系統相關功能產出密碼檔後,由特定安管人員於指定環境下,以人工操作指定機器設備與交易功能,完成金融卡密碼函列印作業;之後,經由專人打包、運送、郵遞到各指定分行;最後,由各分行指定專人清點收妥後入庫、儲藏、保管;於客戶到分行臨櫃辦理新金融卡申請時,再經指定專人於主管審核後,自保險庫取得該金融卡之密碼函,連同新申請之金融卡一起交付持卡人簽收。After the current financial card password function is generated by the financial card system related function, the specific security personnel can manually specify the machine equipment and transaction function in the specified environment, and complete the financial card password letter printing operation; Special personnel shall be packaged, transported and mailed to the designated branches; in the end, the designated branches of each branch shall be inspected and put into storage, storage and storage; when the customer applies for the new financial card to the branch, the designated person shall be examined by the supervisor after the appointment. The cryptogram of the financial card is obtained from the vault and delivered to the cardholder for signing together with the newly applied financial card.
因此,對於金融業者而言,仍需要一種系統或方法,以取代現行通過人工操作列印密碼函的繁瑣程序,節省其間配套的相關人工作業、環境設施、列印機器、紙張、郵遞、保管儲存、資安控管及風險稽查等等作業成本負擔。此外,若能消除紙本金融卡密碼函之使用,亦能達到節能減碳的效果,有助於地球之環境保護。Therefore, for financial operators, there is still a need for a system or method to replace the current cumbersome procedures for printing cryptographic functions by manual operation, saving related manual work, environmental facilities, printing machines, paper, postal, storage and storage. Cost of operation, such as security control and risk auditing. In addition, if the use of the paper financial card password letter can be eliminated, the effect of energy saving and carbon reduction can be achieved, which contributes to the environmental protection of the earth.
有鑑於此,本創作提供用於幫助持卡人首次設定金融卡密碼之系統及其方法,其無需紙本金融卡密碼函即可完成金融卡密碼之首次設定,並能兼顧密碼設定之安全性。In view of this, the present invention provides a system and method for helping a cardholder to first set a financial card password, which can complete the first setting of the financial card password without the need for a paper financial card password, and can balance the security of the password setting. .
在一方面,本創作揭示一種用於幫助持卡人首次設定金融卡密碼之系統,包含: 一第一伺服器,設有一密碼設定模組,其包括一儲存子模組; 一第二伺服器,與該第一伺服器電性連接,並設有一金融卡管理模組; 一軟體產品(App),與該第一伺服器通訊連接,該App係安裝於該持卡人所持有的一行動裝置,且該App係經該密碼設定模組認證;以及 一認證裝置,與該第二伺服器通訊連接,該認證裝置具有一顯示元件、一輸入元件及一金融卡讀寫元件; 其中: 該密碼設定模組於一預先註冊程序中:接收一第一認證資料,其係由該行動裝置的識別資訊以及該持卡人的個人資訊所組成,並將該第一認證資料儲存於該儲存子模組;以及,接收一第二認證資料,其為一自選文摘,並將該第二認證資料儲存於該儲存子模組; 該認證裝置藉由該金融卡讀寫元件讀取該金融卡,並藉由該顯示元件提供一第一使用者介面,顯示首次設定金融卡密碼之選項,該選項經選擇後,該認證裝置向該金融卡管理模組發送首次設定金融卡密碼之請求; 該金融卡管理模組將該首次設定金融卡密碼之請求傳送予該密碼設定模組; 該密碼設定模組:根據一組合方法組合該第一認證資料,以產生一第一金鑰,其中,該組合方法係隨機挑選自複數個組合方法,並具有一第一編號;將該第一編號儲存於該儲存子模組;基於該第一金鑰對一原碼內容進行加密,產生一二維條碼,其中,該原碼內容包括該自選文摘;將該二維條碼傳送予該認證裝置; 該認證裝置藉由該顯示元件於該第一使用者介面顯示該二維條碼; 該App於啟動後自動觸發一事件,要求輸入個人資訊及金融卡之帳號,並將輸入之個人資訊及帳號傳送予該密碼設定模組; 該密碼設定模組於確認該App合法性後:根據儲存在儲存子模組中的第一編號,使用對應的組合方法組合該第一認證資料,以產生一第二金鑰;自複數個加密方法中隨機挑選一加密方法,該加密方法具有一第二編號;以及,向該App傳送該第一編號,及基於該第二金鑰加密後的確認資料,該確認資料包括一加密資訊,其中,該加密資訊包括該第二編號,及一開始取樣位置; 該App自該行動裝置取得該行動裝置的識別資訊以及該持卡人的個人資訊,並根據該第一編號所對應的組合方法,組合所述識別資訊及個人資訊,以產生一第三金鑰; 經由該行動裝置掃描讀取顯示於該認證裝置的該顯示元件上的該二維條碼後,該App使用該第三金鑰解譯該二維條碼得到該原碼內容,並根據該第二編號所對應的加密方法及該開始取樣位置,對該自選文摘進行加密,得到一加密值;以及,基於該第三金鑰對該加密值進行加密後傳送予該密碼設定模組; 該密碼設定模組於確認該加密值的正確性後,向該金融卡管理模組發送取得認證碼之請求,並取得一認證碼;以及,產生一認證碼圖像,並傳送予該App; 該App顯示該認證碼圖像,以供該持卡人藉由認證裝置首次設定該金融卡之密碼時使用;以及 該認證裝置藉由該顯示元件於該第一使用者介面顯示欄位,供該持卡人藉由該輸入元件輸入該認證碼以及該金融卡之新密碼,以完成首次密碼設定。In one aspect, the present disclosure discloses a system for assisting a cardholder to first set a financial card password, comprising: a first server having a password setting module including a storage sub-module; a second server And the first server is electrically connected, and is provided with a financial card management module; a software product (App) is connected to the first server, and the app is installed on the card holder. a mobile device, wherein the app is authenticated by the password setting module; and an authentication device communicatively coupled to the second server, the authentication device having a display component, an input component, and a financial card reading and writing component; The password setting module is configured to receive a first authentication data, which is composed of the identification information of the mobile device and the personal information of the card holder, and stores the first authentication data in the storage. a sub-module; and receiving a second authentication data, which is an optional digest, and storing the second authentication data in the storage sub-module; the authentication device is read by the financial card reading and writing component The financial card provides a first user interface through the display component to display an option for first setting a financial card password. After the option is selected, the authentication device sends the first time setting the financial card password to the financial card management module. Requesting; the financial card management module transmits the request for setting the financial card password for the first time to the password setting module; the password setting module: combining the first authentication data according to a combination method to generate a first key, The combination method randomly selects a plurality of combination methods and has a first number; stores the first number in the storage submodule; and encrypts an original code content based on the first key to generate a a two-dimensional barcode, wherein the original code content includes the optional abstract; the two-dimensional barcode is transmitted to the authentication device; the authentication device displays the two-dimensional barcode on the first user interface by the display component; Automatically trigger an event after startup, request to input personal information and financial card account number, and transfer the entered personal information and account number to the password setting module; After the setting module confirms the validity of the application: combining the first authentication data by using a corresponding combination method according to the first number stored in the storage sub-module to generate a second key; from the plurality of encryption methods Randomly selecting an encryption method, the encryption method having a second number; and transmitting the first number to the App, and based on the second key encrypted data, the confirmation data includes an encrypted information, wherein the The encrypted information includes the second number and a sampling location at the beginning; the App obtains the identification information of the mobile device from the mobile device and the personal information of the cardholder, and according to the combination method corresponding to the first number, the combination Determining the information and the personal information to generate a third key; after the mobile device scans and reads the two-dimensional barcode displayed on the display component of the authentication device, the App uses the third key to interpret the information The two-dimensional barcode obtains the content of the original code, and encrypts the optional abstract according to the encryption method corresponding to the second number and the starting sampling position to obtain an encrypted value. And encrypting the encrypted value based on the third key and transmitting the encrypted value to the password setting module; after confirming the correctness of the encrypted value, the password setting module sends the obtained authentication code to the financial card management module. Requesting and obtaining an authentication code; and generating an authentication code image and transmitting the image to the App; the App displaying the authentication code image for the card holder to first set the password of the financial card by the authentication device And the authentication device displays the field in the first user interface by the display component, and the cardholder inputs the authentication code and the new password of the financial card by the input component to complete the first password setting.
在本創作之部分具體實施例中,該密碼設定模組提供一第二使用者介面,供該金融卡之發卡方作業人員輸入該第一認證資料及該第二認證資料。In some embodiments of the present invention, the password setting module provides a second user interface for the card issuer operator of the financial card to input the first authentication data and the second authentication data.
在本創作之部分具體實施例中,該App要求一啟動密碼。In some embodiments of the present creation, the App requires a activation password.
在本創作之部分具體實施例中,該認證裝置的該第一使用者介面要求輸入認證碼及新密碼,以及該個人資訊的至少一部分,並基於所輸入的資料向該金融卡管理模組發送設定新密碼之請求。在特定具體實施例中,該金融卡管理模組確認接收到的認證碼及個人資料無誤後,取得經亂碼化的新密碼,並傳送予該認證裝置,供其藉由該金融卡讀寫元件寫入該經亂碼化的新密碼至該金融卡。In some embodiments of the present invention, the first user interface of the authentication device requires input of an authentication code and a new password, and at least a portion of the personal information, and sends the financial card management module to the financial card management module based on the input data. A request to set a new password. In a specific embodiment, after the financial card management module confirms that the received authentication code and personal data are correct, the cryptographic new password is obtained and transmitted to the authentication device for reading and writing components by the financial card. The garbled new password is written to the financial card.
另一方面,本創作提供一種用於幫助持卡人首次設定金融卡密碼之方法,包含: 提供一第一伺服器,設有一密碼設定模組,其包括一儲存子模組; 一第二伺服器,與該第一伺服器電性連接,並設有一金融卡管理模組;一軟體產品(App),與該第一伺服器通訊連接,該App係安裝於該持卡人所持有的一行動裝置,且該App係經該密碼設定模組認證;以及一認證裝置,與該第二伺服器通訊連接,該認證裝置具有一顯示元件、一輸入元件及一金融卡讀寫元件; 該密碼設定模組於一預先註冊程序中:接收一第一認證資料,其係由該行動裝置的識別資訊以及該持卡人的個人資訊所組成,並將該第一認證資料儲存於該儲存子模組;以及,接收一第二認證資料,其為一自選文摘,並將該第二認證資料儲存於該儲存子模組; 該認證裝置藉由該金融卡讀寫元件讀取該金融卡,並藉由該顯示元件提供一第一使用者介面,顯示首次設定金融卡密碼之選項,該選項經選擇後,該認證裝置向該金融卡管理模組發送首次設定金融卡密碼之請求; 該金融卡管理模組將該首次設定金融卡密碼之請求傳送予該密碼設定模組; 該密碼設定模組:根據一組合方法組合該第一認證資料,以產生一第一金鑰,其中,該組合方法係隨機挑選自複數個組合方法,並具有一第一編號;將該第一編號儲存於該儲存子模組;基於該第一金鑰對一原碼內容進行加密,產生一二維條碼,其中,該原碼內容包括該自選文摘;將該二維條碼傳送予該認證裝置; 該認證裝置藉由該顯示元件於該第一使用者介面顯示該二維條碼; 該App於啟動後自動觸發一事件,要求輸入個人資訊及金融卡之帳號,並將輸入之個人資訊及帳號傳送予該密碼設定模組; 該密碼設定模組於確認該App合法性後:根據儲存在儲存子模組中的第一編號,使用對應的組合方法組合該第一認證資料,以產生一第二金鑰;自複數個加密方法中隨機挑選一加密方法,該加密方法具有一第二編號;以及,向該App傳送該第一編號,及基於該第二金鑰加密後的確認資料,該確認資料包括一加密資訊,其中,該加密資訊包括該第二編號,及一開始取樣位置; 該App自該行動裝置取得該行動裝置的識別資訊以及該持卡人的個人資訊,並根據該第一編號所對應的組合方法,組合所述識別資訊及個人資訊,以產生一第三金鑰; 經由該行動裝置掃描讀取顯示於該認證裝置的該顯示元件上的該二維條碼後,該App使用該第三金鑰解譯該二維條碼得到該原碼內容,並根據該第二編號所對應的加密方法及該開始取樣位置,對該自選文摘進行加密,得到一加密值;以及,基於該第三金鑰對該加密值進行加密後傳送予該密碼設定模組; 該密碼設定模組於確認該加密值的正確性後,向該金融卡管理模組發送取得認證碼之請求,並取得一認證碼;以及,產生一認證碼圖像,並傳送予該App; 該App顯示該認證碼圖像,以供該持卡人藉由認證裝置首次設定該金融卡之密碼時使用;以及 該認證裝置藉由該顯示元件於該第一使用者介面顯示欄位,供該持卡人藉由該輸入元件輸入該認證碼以及該金融卡之新密碼,以完成首次密碼設定。On the other hand, the present invention provides a method for helping a cardholder to first set a financial card password, comprising: providing a first server, providing a password setting module, including a storage submodule; and a second servo The device is electrically connected to the first server, and is provided with a financial card management module; a software product (App) is connected to the first server, and the application system is installed on the card holder. a mobile device, wherein the app is authenticated by the password setting module; and an authentication device communicatively coupled to the second server, the authentication device having a display component, an input component, and a financial card reading and writing component; The password setting module is configured to receive a first authentication data, which is composed of the identification information of the mobile device and the personal information of the card holder, and stores the first authentication data in the storage device. And receiving a second authentication data, which is a self-selected abstract, and storing the second authentication data in the storage sub-module; the authentication device reads the gold by the financial card reading and writing component Melting the card, and providing a first user interface by the display component, displaying an option for first setting a financial card password, after the option is selected, the authentication device sends a request for setting the financial card password to the financial card management module for the first time. The financial card management module transmits the request for setting the financial card password for the first time to the password setting module; the password setting module: combining the first authentication data according to a combination method to generate a first key, wherein The combination method randomly selects a plurality of combination methods and has a first number; stores the first number in the storage submodule; and encrypts an original code content based on the first key to generate one or two a barcode, wherein the content of the original code includes the optional abstract; the two-dimensional barcode is transmitted to the authentication device; the authentication device displays the two-dimensional barcode on the first user interface by the display component; Automatically trigger an event, requesting the input of personal information and financial card account number, and transmitting the entered personal information and account number to the password setting module; After confirming the legality of the application, the module combines the first authentication data by using a corresponding combination method according to the first number stored in the storage submodule to generate a second key; randomly from the plurality of encryption methods Selecting an encryption method, the encryption method having a second number; and transmitting the first number to the App, and based on the second key encrypted data, the confirmation data includes an encrypted information, wherein the encryption The information includes the second number and a sampling location at the beginning; the App obtains the identification information of the mobile device from the mobile device and the personal information of the cardholder, and combines the combination according to the combination method corresponding to the first number Identifying the information and the personal information to generate a third key; after the mobile device scans and reads the two-dimensional barcode displayed on the display component of the authentication device, the App uses the third key to interpret the second The dimension barcode obtains the content of the original code, and encrypts the optional abstract according to the encryption method corresponding to the second number and the starting sampling location to obtain an encrypted value; And encrypting the encrypted value according to the third key, and transmitting the encrypted value to the password setting module; after confirming the correctness of the encrypted value, the password setting module sends a request for obtaining the authentication code to the financial card management module. And obtaining an authentication code; and generating an authentication code image and transmitting the image to the App; the App displaying the authentication code image for use by the card holder by first setting the password of the financial card by the authentication device And the authentication device displays the field in the first user interface by the display component, for the cardholder to input the authentication code and the new password of the financial card by the input component to complete the first password setting.
在本創作之部分具體實施例中,該密碼設定模組提供一第二使用者介面,供該金融卡之發卡方作業人員輸入該第一認證資料及該第二認證資料。In some embodiments of the present invention, the password setting module provides a second user interface for the card issuer operator of the financial card to input the first authentication data and the second authentication data.
在本創作之部分具體實施例中,該App要求一啟動密碼。In some embodiments of the present creation, the App requires a activation password.
在本創作之部分具體實施例中,該認證裝置的該第一使用者介面要求輸入認證碼及新密碼,以及該個人資訊的至少一部分,並基於所輸入的資料向該金融卡管理模組發送設定新密碼之請求。在特定具體實施例中,該金融卡管理模組確認接收到的認證碼及個人資料無誤後,取得經亂碼化的新密碼,並傳送予該認證裝置,供其藉由該金融卡讀寫元件寫入該經亂碼化的新密碼至該金融卡。In some embodiments of the present invention, the first user interface of the authentication device requires input of an authentication code and a new password, and at least a portion of the personal information, and sends the financial card management module to the financial card management module based on the input data. A request to set a new password. In a specific embodiment, after the financial card management module confirms that the received authentication code and personal data are correct, the cryptographic new password is obtained and transmitted to the authentication device for reading and writing components by the financial card. The garbled new password is written to the financial card.
本創作之其他目的及優點一部分記載於下述說明中,或可透過本創作的實施例而理解。應了解前文之創作內容及下文之實施方式僅為例示性及闡釋性之說明,而非如申請專利範圍般限定本創作。Other objects and advantages of the present invention are described in the following description or may be understood by the embodiments of the present invention. It is to be understood that the foregoing description of the present invention and the following description of the present invention are intended to be illustrative and illustrative only.
需注意的是,除非另有指明,所有在此處使用的技術性和科學性術語具有如同本創作所屬技術領域中之通常技術者一般所瞭解的意義。再者,本說明書所使用的「一」乙詞,如未特別指明,係指至少一個(一個或一個以上)之數量,合先說明。It is to be noted that all technical and scientific terms used herein have the meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise indicated. In addition, the word "a" used in the specification, unless otherwise specified, means the quantity of at least one (one or more).
在一方面,本創作提供一種用於幫助持卡人首次設定金融卡密碼之系統。所述系統包含:一第一伺服器、一第二伺服器、一軟體產品(App)以及一認證裝置。In one aspect, the present disclosure provides a system for assisting a cardholder in setting a financial card password for the first time. The system comprises: a first server, a second server, a software product (App) and an authentication device.
該第一伺服器設有一密碼設定模組,其包括一儲存子模組。The first server is provided with a password setting module, which includes a storage sub-module.
該第二伺服器係與該第一伺服器電性連接,並設有一金融卡管理模組。The second server is electrically connected to the first server and is provided with a financial card management module.
根據本創作之較佳具體實施例,該第一及第二伺服器係設於該金融卡的發卡方。According to a preferred embodiment of the present invention, the first and second servers are provided to the card issuer of the financial card.
該軟體產品(App)係與該第一伺服器通訊連接,並安裝於該持卡人所持有的一行動裝置,且該App係經該密碼設定模組認證。根據本創作,該行動裝置包括但不限於一平板電腦或一智慧型手機,且較佳為一智慧型手機。該行動裝置較佳不包括一筆記型電腦。所述通訊連接較佳為藉由一網際網路通訊連接。根據本創作,該軟體產品較佳係為一行動軟體產品(mobile application)。根據本創作,該行動裝置可包含一儲存單元,儲存有該軟體產品之程式碼,以及一處理單元,用於執行該軟體產品之程式碼。The software product (App) is communicatively connected to the first server, and is installed on a mobile device held by the card holder, and the app is authenticated by the password setting module. According to the present creation, the mobile device includes but is not limited to a tablet computer or a smart phone, and is preferably a smart phone. Preferably, the mobile device does not include a notebook computer. Preferably, the communication connection is via an internet communication connection. According to the present creation, the software product is preferably a mobile application. According to the present invention, the mobile device can include a storage unit storing the code of the software product, and a processing unit for executing the code of the software product.
該認證裝置係與該第二伺服器通訊連接,且其具有一顯示元件、一輸入元件及一金融卡讀寫元件。在本創作之部分具體實施例中,該認證裝置為一自動櫃員機或一自動存提款機。根據本創作,該認證裝置較佳係藉由一專屬網路與該第二伺服器通訊連接。The authentication device is communicatively coupled to the second server and has a display component, an input component, and a financial card read/write component. In some embodiments of the present invention, the authentication device is an automated teller machine or an automatic depositing and dispensing machine. According to the present invention, the authentication device is preferably in communication with the second server via a dedicated network.
在一預先註冊程序中,該密碼設定模組接收一第一認證資料及一第二認證資料,並將該第一及第二認證資料儲存於該儲存子模組。該第一認證資料係由該行動裝置的識別資訊以及該持卡人的個人資訊所組成,該第二認證資料則為一自選文摘。在該預先註冊程序中,該密碼設定模組可提供一第二使用者介面,以供該金融卡之發卡的方作業人員輸入該第一認證資料及該第二認證資料。前述識別資訊包含IMEI、UDID、鑰匙圈(Keychain)、MAC位址或其組合。該自選文摘可由該持卡人自行提供、或由該作業人員自該儲存子模組的資料庫中挑選、或由該密碼設定模組隨機自該儲存子模組的資料庫中挑選。In a pre-registration process, the password setting module receives a first authentication data and a second authentication data, and stores the first and second authentication data in the storage sub-module. The first authentication data is composed of the identification information of the mobile device and the personal information of the card holder, and the second authentication data is an optional digest. In the pre-registration process, the password setting module can provide a second user interface for the operator of the card issuing the financial card to input the first authentication data and the second authentication data. The aforementioned identification information includes an IMEI, a UDID, a keychain, a MAC address, or a combination thereof. The self-selected digest may be provided by the card holder or selected by the operator from the database of the storage sub-module or randomly selected by the password setting module from the database of the storage sub-module.
該認證裝置藉由 該金融卡讀寫元件讀取該金融卡,並藉由該顯示元件提供一第一使用者介面,顯示首次設定金融卡密碼之選項,該選項經選擇後,該認證裝置向該金融卡管理模組發送首次設定金融卡密碼之請求。The authentication device reads the financial card by the financial card reading and writing component, and provides a first user interface by the display component to display an option for first setting a financial card password. After the option is selected, the authentication device The financial card management module sends a request to set a financial card password for the first time.
該金融卡管理模組將該首次設定金融卡密碼之請求傳送予該密碼設定模組。接著,該密碼設定模組執行以下步驟:(1) 根據一組合方法組合該第一認證資料,以產生一第一金鑰,其中,該組合方法係隨機挑選自複數個組合方法,並具有一第一編號;(2) 將該第一編號儲存於該儲存子模組;(3) 基於該第一金鑰對一原碼內容進行加密,產生一二維條碼,其中,該原碼內容包括該自選文摘;以及(4) 將該二維條碼傳送予該認證裝置。根據本創作,所述組合方法包括但不限於:對該第一認證資料的單一欄位、或多個欄位的完整資料進行組合、或對該第一認證資料的多個欄位之部份資料進行組合、或對該第一認證資料的同一欄位資料進行多次組合。The financial card management module transmits the request for setting the financial card password for the first time to the password setting module. Then, the password setting module performs the following steps: (1) combining the first authentication data according to a combination method to generate a first key, wherein the combining method randomly selects a plurality of combining methods and has a a first number; (2) storing the first number in the storage sub-module; (3) encrypting an original code content based on the first key to generate a two-dimensional barcode, wherein the original code content includes The optional digest; and (4) transmitting the two-dimensional barcode to the authentication device. According to the present invention, the combined method includes, but is not limited to, combining a single field of the first authentication material, or a complete data of multiple fields, or a part of multiple fields of the first authentication data. The data is combined or the same field data of the first authentication material is combined multiple times.
然後,該認證裝置會藉由該顯示元件於該第一使用者介面顯示該二維條碼。根據本創作的較佳具體實施例,該二維條碼為一QR碼。Then, the authentication device displays the two-dimensional barcode on the first user interface by using the display component. According to a preferred embodiment of the present invention, the two-dimensional barcode is a QR code.
該App於啟動後會自動觸發一事件,要求輸入個人資訊及金融卡之帳號,並將輸入之個人資訊及帳號傳送予該密碼設定模組。根據本創作的較佳具體實施例,該App要求一啟動密碼,驗證啟動密碼為正確後才會啟動該App。所述啟動密碼包括但不限於:圖形密碼、按鍵式密碼、指紋辨識或臉部辨識。After the launch, the app will automatically trigger an event, requesting the entry of personal information and financial card account, and transmitting the entered personal information and account number to the password setting module. According to a preferred embodiment of the present invention, the App requires a boot password to verify that the boot password is correct before launching the App. The activation password includes, but is not limited to, a graphic password, a push-tone password, fingerprint recognition, or face recognition.
該密碼設定模組於確認該App合法性後,執行以下步驟:(1) 根據儲存在儲存子模組中的第一編號,使用對應的組合方法組合該第一認證資料,以產生一第二金鑰;(2) 自複數個加密方法中隨機挑選一加密方法,該加密方法具有一第二編號;以及,(3) 向該App傳送該第一編號,及基於該第二金鑰加密後的確認資料,該確認資料包括一加密資訊,其中,該加密資訊包括該第二編號,及一開始取樣位置。所述開始取樣位置係用於指示加密方法從該自選文摘的哪個位置的文字開始取樣進行加密。After confirming the legality of the application, the password setting module performs the following steps: (1) combining the first authentication data by using a corresponding combination method according to the first number stored in the storage sub-module to generate a second Keys; (2) randomly selecting an encryption method from a plurality of encryption methods, the encryption method having a second number; and, (3) transmitting the first number to the App, and encrypting the second key based on the second key The confirmation data includes an encrypted information, wherein the encrypted information includes the second number and a sampling position at the beginning. The start sampling location is used to indicate that the encryption method samples from the text of the optional digest to perform encryption.
接著,該App自該行動裝置取得該行動裝置的識別資訊以及該持卡人的個人資訊,並根據該第一編號所對應的組合方法,組合所述識別資訊及個人資訊,以產生一第三金鑰。該持卡人的個人資訊可由該持卡人自行登錄並儲存於該行動裝置。Then, the App obtains the identification information of the mobile device and the personal information of the card holder from the mobile device, and combines the identification information and the personal information according to the combination method corresponding to the first number to generate a third Key. The cardholder's personal information can be logged in and stored by the cardholder on the mobile device.
經由該行動裝置掃描讀取顯示於該認證裝置的該顯示元件上的該二維條碼後,該App使用該第三金鑰解譯該二維條碼得到該原碼內容,並根據該第二編號所對應的加密方法及該開始取樣位置,對該自選文摘進行加密,得到一加密值;然後,該App基於該第三金鑰對該加密值進行加密後傳送予該密碼設定模組。After the mobile device scans and reads the two-dimensional barcode displayed on the display component of the authentication device, the App uses the third key to interpret the two-dimensional barcode to obtain the original code content, and according to the second number The corresponding encryption method and the starting sampling location encrypt the optional digest to obtain an encrypted value; then, the App encrypts the encrypted value based on the third key and transmits the encrypted value to the password setting module.
該密碼設定模組則於確認該加密值的正確性後,向該金融卡管理模組發送取得認證碼之請求,並取得一認證碼;以及,產生一認證碼圖像,並傳送予該App。所述認證碼較佳為6至8碼的隨機數字,但不以此為限。在本創作之一具體實施例中,採用視覺密碼學理論方法對該認證碼加密產出所述認證碼圖像,使其明碼值需要人工以眼睛目視方式才能正確讀取。After confirming the correctness of the encrypted value, the password setting module sends a request for obtaining an authentication code to the financial card management module, and obtains an authentication code; and generates an authentication code image and transmits the image to the App. . The authentication code is preferably a random number of 6 to 8 codes, but is not limited thereto. In a specific embodiment of the present invention, the authentication code is encrypted by using a visual cryptography theory method to generate the authentication code image, so that the clear code value needs to be manually visually read by the eye.
接著,該App會顯示該認證碼圖像,以供該持卡人藉由認證裝置首次設定該金融卡之密碼時使用。Then, the App displays the authentication code image for use by the card holder when the authentication device first sets the password of the financial card.
最後,該認證裝置藉由該顯示元件於該第一使用者介面顯示欄位,供該持卡人藉由該輸入元件輸入該認證碼以及該金融卡之新密碼,以完成首次密碼設定。Finally, the authentication device displays the field in the first user interface by the display component, and the cardholder inputs the authentication code and the new password of the financial card by the input component to complete the first password setting.
在本創作之部分具體實施例中,該認證裝置的該第一使用者介面要求輸入認證碼及新密碼,以及該個人資訊的至少一部分,並基於所輸入的資料向該金融卡管理模組發送設定新密碼之請求。在特定具體實施例中,該金融卡管理模組確認接收到的認證碼及個人資料無誤後,取得經亂碼化的新密碼,並傳送予該認證裝置,供其藉由該金融卡讀寫元件寫入該經亂碼化的新密碼至該金融卡。In some embodiments of the present invention, the first user interface of the authentication device requires input of an authentication code and a new password, and at least a portion of the personal information, and sends the financial card management module to the financial card management module based on the input data. A request to set a new password. In a specific embodiment, after the financial card management module confirms that the received authentication code and personal data are correct, the cryptographic new password is obtained and transmitted to the authentication device for reading and writing components by the financial card. The garbled new password is written to the financial card.
另一方面,本創作提供一種用於幫助持卡人首次設定金融卡密碼之方法,包含: 提供一第一伺服器,設有一密碼設定模組,其包括一儲存子模組; 一第二伺服器,與該第一伺服器電性連接,並設有一金融卡管理模組;一軟體產品(App),與該第一伺服器通訊連接,該App係安裝於該持卡人所持有的一行動裝置,且該App係經該密碼設定模組認證;以及一認證裝置,與該第二伺服器通訊連接,該認證裝置具有一顯示元件、一輸入元件及一金融卡讀寫元件; 該密碼設定模組於一預先註冊程序中:接收一第一認證資料,其係由該行動裝置的識別資訊以及該持卡人的個人資訊所組成,並將該第一認證資料儲存於該儲存子模組;以及,接收一第二認證資料,其為一自選文摘,並將該第二認證資料儲存於該儲存子模組; 該認證裝置藉由該金融卡讀寫元件讀取該金融卡,並藉由該顯示元件提供一第一使用者介面,顯示首次設定金融卡密碼之選項,該選項經選擇後,該認證裝置向該金融卡管理模組發送首次設定金融卡密碼之請求; 該金融卡管理模組將該首次設定金融卡密碼之請求傳送予該密碼設定模組; 該密碼設定模組:根據一組合方法組合該第一認證資料,以產生一第一金鑰,其中,該組合方法係隨機挑選自複數個組合方法,並具有一第一編號;將該第一編號儲存於該儲存子模組;基於該第一金鑰對一原碼內容進行加密,產生一二維條碼,其中,該原碼內容包括該自選文摘;將該二維條碼傳送予該認證裝置; 該認證裝置藉由該顯示元件於該第一使用者介面顯示該二維條碼; 該App於啟動後自動觸發一事件,要求輸入個人資訊及金融卡之帳號,並將輸入之個人資訊及帳號傳送予該密碼設定模組; 該密碼設定模組於確認該App合法性後:根據儲存在儲存子模組中的第一編號,使用對應的組合方法組合該第一認證資料,以產生一第二金鑰;自複數個加密方法中隨機挑選一加密方法,該加密方法具有一第二編號;以及,向該App傳送該第一編號,及基於該第二金鑰加密後的確認資料,該確認資料包括一加密資訊,其中,該加密資訊包括該第二編號,及一開始取樣位置; 該App自該行動裝置取得該行動裝置的識別資訊以及該持卡人的個人資訊,並根據該第一編號所對應的組合方法,組合所述識別資訊及個人資訊,以產生一第三金鑰; 經由該行動裝置掃描讀取顯示於該認證裝置的該顯示元件上的該二維條碼後,該App使用該第三金鑰解譯該二維條碼得到該原碼內容,並根據該第二編號所對應的加密方法及該開始取樣位置,對該自選文摘進行加密,得到一加密值;以及,基於該第三金鑰對該加密值進行加密後傳送予該密碼設定模組; 該密碼設定模組於確認該加密值的正確性後,向該金融卡管理模組發送取得認證碼之請求,並取得一認證碼;以及,產生一認證碼圖像,並傳送予該App; 該App顯示該認證碼圖像,以供該持卡人藉由認證裝置首次設定該金融卡之密碼時使用;以及 該認證裝置藉由該顯示元件於該第一使用者介面顯示欄位,供該持卡人藉由該輸入元件輸入該認證碼以及該金融卡之新密碼,以完成首次密碼設定。On the other hand, the present invention provides a method for helping a cardholder to first set a financial card password, comprising: providing a first server, providing a password setting module, including a storage submodule; and a second servo The device is electrically connected to the first server, and is provided with a financial card management module; a software product (App) is connected to the first server, and the application system is installed on the card holder. a mobile device, wherein the app is authenticated by the password setting module; and an authentication device communicatively coupled to the second server, the authentication device having a display component, an input component, and a financial card reading and writing component; The password setting module is configured to receive a first authentication data, which is composed of the identification information of the mobile device and the personal information of the card holder, and stores the first authentication data in the storage device. And receiving a second authentication data, which is a self-selected abstract, and storing the second authentication data in the storage sub-module; the authentication device reads the gold by the financial card reading and writing component Melting the card, and providing a first user interface by the display component, displaying an option for first setting a financial card password, after the option is selected, the authentication device sends a request for setting the financial card password to the financial card management module for the first time. The financial card management module transmits the request for setting the financial card password for the first time to the password setting module; the password setting module: combining the first authentication data according to a combination method to generate a first key, wherein The combination method randomly selects a plurality of combination methods and has a first number; stores the first number in the storage submodule; and encrypts an original code content based on the first key to generate one or two a barcode, wherein the content of the original code includes the optional abstract; the two-dimensional barcode is transmitted to the authentication device; the authentication device displays the two-dimensional barcode on the first user interface by the display component; Automatically trigger an event, requesting the input of personal information and financial card account number, and transmitting the entered personal information and account number to the password setting module; After confirming the legality of the application, the module combines the first authentication data by using a corresponding combination method according to the first number stored in the storage submodule to generate a second key; randomly from the plurality of encryption methods Selecting an encryption method, the encryption method having a second number; and transmitting the first number to the App, and based on the second key encrypted data, the confirmation data includes an encrypted information, wherein the encryption The information includes the second number and a sampling location at the beginning; the App obtains the identification information of the mobile device from the mobile device and the personal information of the cardholder, and combines the combination according to the combination method corresponding to the first number Identifying the information and the personal information to generate a third key; after the mobile device scans and reads the two-dimensional barcode displayed on the display component of the authentication device, the App uses the third key to interpret the second The dimension barcode obtains the content of the original code, and encrypts the optional abstract according to the encryption method corresponding to the second number and the starting sampling location to obtain an encrypted value; And encrypting the encrypted value according to the third key, and transmitting the encrypted value to the password setting module; after confirming the correctness of the encrypted value, the password setting module sends a request for obtaining the authentication code to the financial card management module. And obtaining an authentication code; and generating an authentication code image and transmitting the image to the App; the App displaying the authentication code image for use by the card holder by first setting the password of the financial card by the authentication device And the authentication device displays the field in the first user interface by the display component, for the cardholder to input the authentication code and the new password of the financial card by the input component to complete the first password setting.
在該預先註冊程序中,該密碼設定模組可提供一第二使用者介面,以供該金融卡之發卡的方作業人員輸入該第一認證資料及該第二認證資料。前述識別資訊包含IMEI、UDID、鑰匙圈(Keychain)、MAC位址或其組合。該自選文摘可由該持卡人自行提供、或由該作業人員自該儲存子模組的資料庫中挑選、或由該密碼設定模組隨機自該儲存子模組的資料庫中挑選。In the pre-registration process, the password setting module can provide a second user interface for the operator of the card issuing the financial card to input the first authentication data and the second authentication data. The aforementioned identification information includes an IMEI, a UDID, a keychain, a MAC address, or a combination thereof. The self-selected digest may be provided by the card holder or selected by the operator from the database of the storage sub-module or randomly selected by the password setting module from the database of the storage sub-module.
在本創作之部分具體實施例中,該App要求一啟動密碼。所述啟動密碼包括但不限於:圖形密碼、按鍵式密碼、指紋辨識或臉部辨識。In some embodiments of the present creation, the App requires a activation password. The activation password includes, but is not limited to, a graphic password, a push-tone password, fingerprint recognition, or face recognition.
在本創作之部分具體實施例中,該認證裝置的該第一使用者介面要求輸入認證碼及新密碼,以及該個人資訊的至少一部分,並基於所輸入的資料向該金融卡管理模組發送設定新密碼之請求。在特定具體實施例中,該金融卡管理模組確認接收到的認證碼及個人資料無誤後,取得經亂碼化的新密碼,並傳送予該認證裝置,供其藉由該金融卡讀寫元件寫入該經亂碼化的新密碼至該金融卡。In some embodiments of the present invention, the first user interface of the authentication device requires input of an authentication code and a new password, and at least a portion of the personal information, and sends the financial card management module to the financial card management module based on the input data. A request to set a new password. In a specific embodiment, after the financial card management module confirms that the received authentication code and personal data are correct, the cryptographic new password is obtained and transmitted to the authentication device for reading and writing components by the financial card. The garbled new password is written to the financial card.
現配合 圖 1及 圖 2說明本創作之幫助持卡人首次設定金融卡密碼之系統及方法的特定較佳具體實施例。 Now with FIG. 1 and FIG. 2 illustrates a first cardholder to help the creation of systems and methods for setting passwords debit card specific preferred embodiments.
首先請參見 圖 1,所示為本創作之一具體實施例之幫助持卡人首次設定金融卡密碼之系統。在本具體實施例中,幫助持卡人首次設定金融卡密碼之系統 1包含一第一伺服器 10、一第二伺服器 20、一軟體產品(App) 30以及一認證裝置 40。該軟體產品 30可為一行動軟體產品,例如,金融業者發行之App。 First, see Figure 1, shown to help cardholders example of one particular implementation of the first set based authoring system debit card passwords. In the specific embodiment, the system 1 for assisting the cardholder to set the financial card password for the first time includes a first server 10 , a second server 20 , a software product (App) 30, and an authentication device 40 . The software product 30 can be an action software product, such as an app issued by a financial industry.
該第一伺服器 10設有一密碼設定模組 12,其包括一儲存子模組 122。 該第二伺服器 20係與該第一伺服器 10電性連接,並設有一金融卡管理模組 22。該第一及第二伺服器 10及 20可設於該金融卡的發卡方。 The first server 10 is provided with a password setting module 12 , which includes a storage sub-module 122 . The second server 20 is electrically connected to the first server 10 and is provided with a financial card management module 22 . The first and second servers 10 and 20 can be located on the card issuer of the financial card.
該App 30係與該第一伺服器 10通訊連接,並安裝於該持卡人所持有的一行動裝置 70,且該App 30係經該密碼設定模組 12認證。該行動裝置 70可為一平板電腦或一智慧型手機,較佳為一智慧型手機。 The App 30 is communicatively coupled to the first server 10 and installed in a mobile device 70 held by the card holder, and the App 30 is authenticated by the password setting module 12 . The mobile device 70 can be a tablet computer or a smart phone, preferably a smart phone.
該認證裝置 40藉由一專屬網路與該第二伺服器 20通訊連接,且其具有一顯示元件 42、一輸入元件 44及一金融卡讀寫元件 46。在部分實例中,該認證裝置 40為一自動櫃員機或一自動存提款機。 The authentication device 40 is communicatively coupled to the second server 20 via a dedicated network and has a display component 42 , an input component 44, and a financial card read/write component 46 . In some examples, the authentication device 40 is an automated teller machine or an automated teller machine.
在一預先註冊程序中,該密碼設定模組 12接收一第一認證資料及一第二認證資料,並將該第一及第二認證資料儲存於該儲存子模組 122。該第一認證資料係由該行動裝置 70的識別資訊以及該持卡人的個人資訊所組成,該第二認證資料則為一自選文摘。該文摘之位元數較佳係介於512位元至1024位元之間。 In a pre-registration process, the password setting module 12 receives a first authentication data and a second authentication data, and stores the first and second authentication data in the storage sub-module 122 . The first authentication data is composed of the identification information of the mobile device 70 and the personal information of the card holder, and the second authentication data is an optional digest. The number of bits in the abstract is preferably between 512 and 1024 bits.
該認證裝置 40藉由該金融卡讀寫元件 46讀取該金融卡,並藉由該顯示元件 42提供一第一使用者介面,顯示首次設定金融卡密碼之選項,該選項經選擇後,該認證裝置 40向該金融卡管理模組 22發送首次設定金融卡密碼之請求。該金融卡管理模組 22將該首次設定金融卡密碼之請求傳送予該密碼設定模組 12。接著,該密碼設定模組 12執行以下步驟:(1) 根據一組合方法組合該第一認證資料,以產生一第一金鑰,其中,該組合方法係隨機挑選自複數個組合方法,並具有一第一編號;(2) 將該第一編號儲存於該儲存子模組 122;(3) 基於該第一金鑰對一原碼內容進行加密,產生一二維條碼,其中,該原碼內容包括該自選文摘;以及(4) 將該二維條碼傳送予該認證裝置 40。 The authentication device 40 reads the financial card by the financial card reading and writing component 46 , and provides a first user interface by the display component 42 to display an option for setting the financial card password for the first time. After the option is selected, the option is selected. The authentication device 40 transmits a request for the first time setting of the financial card password to the financial card management module 22 . The financial card management module 22 transmits a request for setting the financial card password for the first time to the password setting module 12 . Then, the password setting module 12 performs the following steps: (1) combining the first authentication data according to a combination method to generate a first key, wherein the combining method randomly selects a plurality of combining methods, and has a first number; (2) storing the first number in the storage sub-module 122 ; (3) encrypting an original code content based on the first key to generate a two-dimensional barcode, wherein the original code The content includes the optional digest; and (4) transmitting the two-dimensional barcode to the authentication device 40 .
然後,該認證裝置 40會藉由該顯示元件 42於該第一使用者介面顯示該二維條碼,其較佳為一QR碼。 Then, the authentication device 40 displays the two-dimensional barcode by the display component 42 on the first user interface, which is preferably a QR code.
另外,該App 30於啟動後會自動觸發一事件,要求輸入個人資訊及金融卡之帳號,並將輸入之個人資訊及帳號傳送予該密碼設定模組 22。該密碼設定模組 22於確認該App 30的合法性後,執行以下步驟:(1) 根據儲存在儲存子模組 122中的第一編號,使用對應的組合方法組合該第一認證資料,以產生一第二金鑰;(2) 自複數個加密方法中隨機挑選一加密方法,該加密方法具有一第二編號;以及,(3) 向該App 30傳送該第一編號,及基於該第二金鑰加密後的確認資料,該確認資料包括一加密資訊,其中,該加密資訊包括該第二編號,及一開始取樣位置,其係用於指示加密方法從該自選文摘的哪個位置的文字開始取樣進行加密。 In addition, the App 30 automatically triggers an event after activation, requires input of personal information and a financial card account number, and transmits the entered personal information and account number to the password setting module 22 . After confirming the legality of the App 30 , the password setting module 22 performs the following steps: (1) combining the first authentication data by using a corresponding combination method according to the first number stored in the storage submodule 122 , Generating a second key; (2) randomly selecting an encryption method from the plurality of encryption methods, the encryption method having a second number; and, (3) transmitting the first number to the App 30 , and based on the The second key encrypted confirmation data, the confirmation data includes an encrypted information, wherein the encrypted information includes the second number, and a sampling location at the beginning, which is used to indicate the location of the encryption method from the selected abstract. Start sampling for encryption.
接著,該App 30自該行動裝置取得該行動裝置 70的識別資訊以及該持卡人的個人資訊,並根據該第一編號所對應的組合方法,組合所述識別資訊及個人資訊,以產生一第三金鑰。此時,該持卡人可使用該行動裝置 70掃描讀取顯示於該認證裝置 40的該顯示元件 42上的該二維條碼,之後,該App 30藉由該第三金鑰解譯該二維條碼得到該原碼內容,並根據該第二編號所對應的加密方法及該開始取樣位置,對該自選文摘進行加密,得到一加密值。然後,該App 30基於該第三金鑰對該加密值進行加密後傳送予該密碼設定模組 12。 Then, the App 30 obtains the identification information of the mobile device 70 and the personal information of the card holder from the mobile device, and combines the identification information and the personal information according to the combination method corresponding to the first number to generate a The third key. At this time, the card holder can use the mobile device 70 to scan and read the two-dimensional barcode displayed on the display component 42 of the authentication device 40 , after which the App 30 interprets the two by using the third key. The dimension barcode obtains the content of the original code, and encrypts the optional digest according to the encryption method corresponding to the second number and the starting sampling location to obtain an encrypted value. Then, the App 30 encrypts the encrypted value based on the third key and transmits the encrypted value to the password setting module 12 .
該密碼設定模組 12於確認該加密值的正確性後,向該金融卡管理模組 22發送取得認證碼之請求,取得一認證碼,並產生一認證碼圖像傳送予該App 30。接著,該App 30顯示該認證碼圖像,以供該持卡人藉由認證裝置 40首次設定該金融卡之密碼時使用。 After confirming the correctness of the encrypted value, the password setting module 12 transmits a request for obtaining the authentication code to the financial card management module 22 , obtains an authentication code, and generates an authentication code image for transmission to the App 30 . Next, the App 30 displays the authentication code image for use by the card holder when the authentication device 40 first sets the password of the financial card.
最後,該認證裝置 40藉由該顯示元件 42於該第一使用者介面顯示欄位,供該持卡人藉由該輸入元件 44輸入該認證碼以及該金融卡之新密碼,以完成首次密碼設定。 Finally, the authentication device 40 displays the field in the first user interface by the display component 42 for the cardholder to input the authentication code and the new password of the financial card by the input component 44 to complete the first password. set up.
另一方面,本創作提供一種幫助持卡人首次設定金融卡密碼之方法。請參見 圖 2,其為本創作之幫助持卡人首次設定金融卡密碼之方法的一具體實施例之流程圖。如圖所示,該方法包含下列步驟:( S110)提供一第一伺服器,設有一密碼設定模組,其包括一儲存子模組; 一第二伺服器,與該第一伺服器電性連接,並設有一金融卡管理模組;一軟體產品(App),與該第一伺服器通訊連接,該App係安裝於該持卡人所持有的一行動裝置,且該App係經該密碼設定模組認證;以及一認證裝置,與該第二伺服器通訊連接,該認證裝置具有一顯示元件、一輸入元件及一金融卡讀寫元件;( S120)該密碼設定模組於一預先註冊程序中:接收一第一認證資料,其係由該行動裝置的識別資訊以及該持卡人的個人資訊所組成,並將該第一認證資料儲存於該儲存子模組;以及,接收一第二認證資料,其為一自選文摘,並將該第二認證資料儲存於該儲存子模組;( S210)該認證裝置藉由該金融卡讀寫元件讀取該金融卡,並藉由該顯示元件提供一第一使用者介面,顯示首次設定金融卡密碼之選項,該選項經選擇後,該金融卡管理模組確認該金融卡之狀態,接著向該金融卡管理模組發送首次設定金融卡密碼之請求;( S220)該金融卡管理模組將該首次設定金融卡密碼之請求傳送予該密碼設定模組;( S230)該密碼設定模組:根據一組合方法組合該第一認證資料,以產生一第一金鑰,其中,該組合方法係隨機挑選自複數個組合方法,並具有一第一編號;將該第一編號儲存於該儲存子模組;基於該第一金鑰對一原碼內容進行加密,產生一二維條碼,其中,該原碼內容包括該自選文摘;將該二維條碼傳送予該認證裝置;( S240)該認證裝置藉由該顯示元件於該第一使用者介面顯示該二維條碼;( S310)該App於啟動後自動觸發一事件,要求輸入個人資訊及金融卡之帳號,並將輸入之個人資訊及帳號傳送予該密碼設定模組;( S320)該密碼設定模組於確認該App合法性後:根據儲存在儲存子模組中的第一編號,以對應的組合方法組合該第一認證資料,以產生一第二金鑰;自複數個加密方法中隨機挑選一加密方法,該加密方法具有一第二編號;以及,向該App傳送該第一編號,及基於該第二金鑰加密後的確認資料,該確認資料包括一加密資訊,其中,該加密資訊包括該第二編號,及一開始取樣位置;( S330)該App自該行動裝置取得該行動裝置的識別資訊以及該持卡人的個人資訊,並根據該第一編號所對應的組合方法,組合所述識別資訊及個人資訊,以產生一第三金鑰;( S340)經由該行動裝置掃描讀取顯示於該認證裝置的該顯示元件上的該二維條碼後,該App使用該第三金鑰解譯該二維條碼得到該原碼內容,並根據該第二編號所對應的加密方法及該開始取樣位置,對該自選文摘進行加密,得到一加密值;以及,基於該第三金鑰對該加密值進行加密後傳送予該密碼設定模組;( S410)該密碼設定模組於確認該加密值的正確性後,向該金融卡管理模組發送取得認證碼之請求,並取得一認證碼;以及,產生一認證碼圖像,並傳送予該App;( S510)該App顯示該認證碼圖像,以供該持卡人藉由認證裝置首次設定該金融卡之密碼時使用;以及( S610)該認證裝置藉由該顯示元件於該第一使用者介面顯示欄位,供該持卡人藉由該輸入元件輸入該認證碼以及該金融卡之新密碼,以完成首次密碼設定。 On the other hand, this creation provides a way to help cardholders set the financial card password for the first time. Refer to the flowchart of Figure 2, which is oriented to help create the cardholder for the first time setting method debit card passwords of a specific implementation. As shown in the figure, the method includes the following steps: ( S110 ) providing a first server, providing a password setting module, comprising a storage submodule; a second server, electrically connected to the first server Connected and provided with a financial card management module; a software product (App) is connected to the first server, the app is installed on a mobile device held by the card holder, and the App is The password setting module is authenticated; and an authentication device is communicably connected to the second server, the authentication device has a display component, an input component, and a financial card reading and writing component; ( S120 ) the password setting module is in advance In the registration process, receiving a first authentication data, which is composed of the identification information of the mobile device and the personal information of the card holder, and storing the first authentication data in the storage sub-module; and receiving one a second authentication material, which is an optional digest, and stores the second authentication data in the storage sub-module; ( S210 ) the authentication device reads the financial card by the financial card reading and writing component, and by using the display The component provides a first user interface, and displays an option for first setting a financial card password. After the option is selected, the financial card management module confirms the status of the financial card, and then sends the first set financial card to the financial card management module. a request for a password; ( S220 ) the financial card management module transmits a request for first setting a financial card password to the password setting module; ( S230 ) the password setting module: combining the first authentication data according to a combination method, To generate a first key, wherein the combining method randomly selects a plurality of combining methods and has a first number; storing the first number in the storage submodule; and based on the first key pair The original code content is encrypted to generate a two-dimensional barcode, wherein the original code content includes the optional abstract; the two-dimensional barcode is transmitted to the authentication device; ( S240 ) the authentication device is used by the display component in the first use who interface displays the two-dimensional bar; (S310) the App automatically trigger an event after the start, asked to enter personal information and financial card account number and enter the personal And transmitting account information to the password setting module; after (S320) the password setting module to confirm the legitimacy of the App: The first number stored in the storage submodule in combination in a corresponding method of combining the first authentication Data to generate a second key; randomly selecting an encryption method from the plurality of encryption methods, the encryption method having a second number; and transmitting the first number to the App and encrypting based on the second key After the confirmation data, the confirmation data includes an encrypted information, wherein the encrypted information includes the second number, and a sampling location at the beginning; ( S330 ) the App obtains the identification information of the mobile device from the mobile device and the card The personal information of the person, and combining the identification information and the personal information according to the combination method corresponding to the first number to generate a third key; ( S340 ) scanning and reading the display on the authentication device via the mobile device After the two-dimensional barcode on the display component, the App uses the third key to interpret the two-dimensional barcode to obtain the original code content, and according to the second number corresponding to the addition The method and the sampling start position, the encrypted digest managed to obtain an encrypted value; and, after the third key is encrypted to the encrypted value based on the transmitted password setting module; (S410) the password setting module After confirming the correctness of the encrypted value, sending a request for obtaining an authentication code to the financial card management module, and obtaining an authentication code; and generating an authentication code image and transmitting the image to the App; ( S510 ) the App Displaying the authentication code image for use by the card holder when the authentication device first sets the password of the financial card; and ( S610 ) the authentication device displays the field in the first user interface by the display component, The cardholder inputs the authentication code and the new password of the financial card by the input component to complete the first password setting.
本創作之幫助持卡人首次設定金融卡密碼之方法可配合或不配合前述之幫助持卡人首次設定金融卡密碼之系統 1完成。 The method of assisting the cardholder to set the financial card password for the first time may or may not be completed in conjunction with the aforementioned system 1 for helping the cardholder to first set the financial card password.
藉由以下實例更詳細地描述本創作的具體實施方式,但本創作並不受限於其中提供的特定配置、條件及方法。The specific embodiments of the present work are described in more detail by the following examples, but the present invention is not limited to the specific configurations, conditions, and methods provided therein.
實例Instance 11 :前置作業: Front work
金融業者提供一管理伺服器(第一伺服器),其安裝有密碼設定模組,供行員為申請辦理新金融卡的使用者(金融卡持卡人,在實例中以「使用者」稱之),註冊登錄所約定的認證資料,該註冊資料儲存於密碼設定模組的資料庫內。其相關交易功能及註冊內容如下:The financial provider provides a management server (first server) with a password setting module for the operator to apply for a new financial card (financial card holder, in the example "user" ), register and log in the agreed authentication data, and the registration data is stored in the database of the password setting module. Its related trading functions and registration contents are as follows:
1. 綁定使用者行動裝置設備認證資料(第一認證資料): a. 登錄IMEI/UDID/Keychain/MAC/身份證號/生日/手機電話號碼/等認證資料。 此處可由辦理新金融卡的使用者先到金融業者之分行櫃檯或預先在官方網站,自所屬手機查得IMEI/UDID/Keychain/MAC等資料後填入申請表單,行員配合申請單填寫內容將資料登錄系統。前述認證資料可與使用者的身份證號綁定。 b. 第一認證資料之使用: (1) 於綁定第一認證資料時,密碼設定模組當下自動隨機亂數指定其組合方法之初始值,並將該組合方法儲存於資料庫(3個Bytes)。 (2) 該組合方法係用於將IMEI/UDID/Keychain/MAC/身份證號/生日/手機電話號碼/等欄位資料做隨機組合。 (3) 在資料庫儲存的「組合方法」(3個Bytes),實質是個數字,資料庫不 儲存經組合後的資料原始內容。此處資料庫儲存的「組合方法」值,僅為一個初始值,密碼設定模組於每次受理請求須產出二維條碼(在本實例中為QR碼)之前,應重新自動隨機亂數產出「組合方法」值,以新的「組合方法」值更新資料庫該欄值。 (4) 經組合後的資料原始內容,後續以「Current_key」(此處為第一金鑰)稱之,其長度應至少128個Bytes。此「Current_key」即為後續欲對敏感性資料以進階加密標準(AES)加密時的金鑰。欲知Current_key需先知它的「組合方法」以及其相對應程式碼,當原註冊登錄綁定的第一認證資料外洩時,亦未直接暴露該使用者的Current_key內容。1. Bind the user mobile device device authentication data (first authentication data): a. Log in to IMEI/UDID/Keychain/MAC/ID number/birthday/mobile phone number/etc. Here, the user who handles the new financial card can go to the branch counter of the financial industry or pre-registered on the official website to find the IMEI/UDID/Keychain/MAC and other information from the mobile phone. The application form will be filled in with the application form. Data login system. The aforementioned authentication information can be bound to the user's ID number. b. Use of the first authentication data: (1) When binding the first authentication data, the password setting module automatically assigns the initial value of the combination method to the current random random number, and stores the combined method in the database (3 Bytes). (2) This combination method is used to randomly combine IMEI/UDID/Keychain/MAC/ID number/Birthday/Mobile phone number/etc. (3) The "combination method" (3 Bytes) stored in the database is essentially a number. The database does not store the original content of the combined data. The "combination method" value stored in the database here is only an initial value. The password setting module should re-automatic random random number before each request is required to produce a two-dimensional barcode (QR code in this example). The "combination method" value is output, and the column value of the database is updated with the new "combination method" value. (4) The original content of the combined data, which is subsequently referred to as "Current_key" (here the first key), shall be at least 128 Bytes in length. This "Current_key" is the key to subsequent encryption of sensitive data with Advanced Encryption Standard (AES). In order to know that Current_key needs to know its "combination method" and its corresponding code, when the first authentication data of the original registration login is leaked, the user's Current_key content is not directly exposed.
2. 綁定使用者識別資料(第二認證資料): 行員為申辦新金融卡的使用者登錄自選文摘1則(512 Bytes≦ 文摘 ≦1024 Bytes)。第二認證資料亦可與使用者的身份證號綁定。該自選文摘可由使用者提供、或由行員、或由系統隨機自資料庫為使用者挑選。 a. 系統產出QR碼的內容:系統依據資料庫儲存該使用者的「組合方法」,以使用者原始綁定之行動裝置認證資料產出「Current_key」,再使用相對應加解密程式碼以「Current_key」AES(網頁識別碼 + 自選文摘 + SHA-256 (「Current_key」))加密產出QR 碼亂碼化後之內容。欲知QR碼原碼內容,唯有使用正確的交易裝置掃描讀取QR碼、以正確的「組合方法」產出正確的「Current_key」,以相對應加解密程式碼才能解譯出QR碼的原碼內容。 (1) 解譯後QR碼原碼內容 =網頁識別碼 +自選文摘 + SHA-256 (Current_key)。 (2) 解譯前QR碼內容 =以「Current_key」AES(網頁識別碼 +自選文摘 + SHA-256(Current_key))。 (3) QR碼原碼內容需要經由「組合方法」之相對應加解密程式碼篩選 處理產出「Current_key」內容之後,始能據之解譯出來。 b. 系統產出QR碼的時機:金融卡持卡人在自動存提款機操作特定交易,於上行電文經由金融卡管理模組對密碼設定模組發動交易當下密碼設定模組產出包含「QR碼圖像」的下行電文回覆給金融卡管理模組;密碼設定模組另須將該上行電文內容等資訊儲存於資料庫: (1) 上行電文內容包括:金融卡帳號、交易日期、交易時間、ATM機號、ATM交易序號等資料。 (2) 以身份證號、網頁識別碼等值作為金鑰,將該上行電文內容儲存於密碼設定模組的資料庫(儲存子模組)。網頁識別碼為密碼設定模組、「初始密碼應用程式」(軟體產品(App))、金融卡管理模組等多方系統針對同一請求交易的共同識別序號,網頁識別碼值由初始密碼函系統(密碼設定模組)產生。網頁識別碼值生命週期,於金融卡系統(金融卡管理模組)向初始密碼函系統發動「QR碼圖像」請求時產生、於初始密碼應用程式取得認證碼值圖像、持卡人操作自動存提款機(認證裝置)特定功能完成金融卡新密碼設定後結束。 (3) 將上行電文內容儲存於資料庫的目的: (i) 供後續交易裝置之初始密碼應用程式於讀取「QR碼圖像」之後,對初始密碼函系統發動取得認證碼請求交易時,初始密碼函系統將之做為對交易勾稽核驗之用; (ii) 當資料庫無該金融卡帳號資料時,拒絕該交易需求,要求金融卡持卡人先持新申請金融卡操作自動存提款機,於自動存提款機介面顯示「QR碼圖像」後,再操作執行App;及 (iii) 當資料庫有該金融卡帳號資料,但已逾時(例如,10分鐘以上),則可拒絕該App之交易請求。2. Bind user identification data (second authentication data): The clerk logs in the optional digest 1 (512 Bytes ≦ Digest ≦ 1024 Bytes) for the user who applies for the new financial card. The second authentication material can also be bound to the user's ID number. The self-selected abstracts may be provided by the user, or selected by the staff member, or by the system randomly from the database for the user. a. The content of the system output QR code: the system stores the user's "combination method" according to the database, and outputs the "Current_key" by the user's original bound mobile device authentication data, and then uses the corresponding encryption and decryption code to "Current_key" AES (Web Page ID + Optional Digest + SHA-256 ("Current_key")) encrypts the content of the QR code garbled. For the content of the QR code, only the correct transaction device is used to scan and read the QR code, and the correct "combination method" is used to output the correct "Current_key", so that the QR code can be interpreted by corresponding encryption and decryption code. Original code content. (1) QR code original code content after interpretation = web page identification code + optional digest + SHA-256 (Current_key). (2) QR code content before interpretation = "Current_key" AES (Web Page ID + Optional Digest + SHA-256 (Current_key)). (3) The content of the QR code original code needs to be filtered by the corresponding encryption and decryption code of the "combination method". After the content of "Current_key" is output, it can be interpreted according to the content. b. The timing of the system output QR code: the financial card cardholder operates the specific transaction at the automatic depositing and dispensing machine, and the upstream message is activated by the financial card management module to the password setting module. The downlink message of the QR code image is returned to the financial card management module; the password setting module must also store the information such as the uplink message content in the database: (1) The uplink message content includes: financial card account number, transaction date, transaction Time, ATM number, ATM transaction number, etc. (2) The ID card number and the web page identifier are used as the key, and the content of the uplink message is stored in the database (storage submodule) of the password setting module. The webpage identification code is a common identification number of the same request transaction by a multi-party system such as a password setting module, an "initial password application" (software product (App)), a financial card management module, and the webpage identification code value is initialized by the initial password function system ( The password setting module is generated. The webpage identification code value life cycle is generated when the financial card system (financial card management module) initiates a "QR code image" request to the initial password function system, obtains an authentication code value image in the initial password application, and the cardholder operates The automatic deposit and withdrawal machine (authentication device) specific function completes the financial card new password setting. (3) The purpose of storing the contents of the uplink message in the database: (i) After the initial password application for the subsequent transaction device reads the "QR code image", when the initial password system is activated to obtain the authentication code request transaction, The initial password system uses it as a check for the transaction; (ii) when the database does not have the financial card account information, the transaction request is rejected, and the financial card holder is required to automatically apply for the new financial card operation. The machine displays the "QR code image" on the automatic depositing and dispensing machine interface, and then executes the App; and (iii) when the database has the financial card account information, but has expired (for example, 10 minutes or more), The application request for the app can be rejected.
使用者於前述作業註冊資料完成後,即可操作交易裝置,從網路環境(Internet)下載/安裝「初始密碼應用程式」(軟體產品(App)),於完成安裝作業後,始告前置作業完成:After the user has completed the registration of the above-mentioned job, the user can operate the transaction device and download/install the "initial password application" (software (App)) from the network environment (Internet), and after the installation is completed, the pre-installation is started. Job completion:
1. App須強制提供圖形密碼、按鍵式密碼、指紋辨識、或臉部辨識等選項,供使用者設定App的啟動密碼。1. The app must be forced to provide graphical password, touch-tone password, fingerprint identification, or face recognition options for the user to set the startup password of the app.
2. 使用者於每次執行該App時,App須要求使用者輸入使用者身份證號、生日、及金融卡帳號,並即時發送上行電文給密碼設定模組完成初步鑑別使用者身份。 a. 上行電文內容需包含身份證號、生日、金融卡帳號、及App的版號、日期等資訊。 b. 伺服器端的密碼設定模組鑑別使用者身份及其行動裝置設備無誤之後,須儲存該App的版號、日期、本次申請金融卡帳號等上行電文資訊,供未來在交易作業階段鑑別App合法性之用。 c. 該「金融卡帳號」須為新申請且尚未變更金融卡初始密碼之金融卡帳號。2. Each time the user executes the app, the app must ask the user to enter the user ID number, birthday, and financial card account number, and immediately send the uplink message to the password setting module to complete the initial identification of the user identity. a. The content of the uplink message must include the ID number, birthday, financial card account number, and the version number and date of the app. b. After the password setting module of the server end authenticates the user identity and the mobile device device is correct, the app's version number, date, and the application for the financial card account and other uplink message information must be stored for future identification in the transaction operation phase. Use for legality. c. The “Financial Card Account Number” must be a new financial card account that has not yet changed the initial password of the financial card.
3. 初始密碼應用程式於取得初始密碼函系統下行電文回覆鑑別無誤之後,即直接顯示讀取QR碼的準備畫面於交易裝置(使用者之個人裝置)介面,等待使用者人工操作交易裝置,對準顯示在自動存提款機上的「QR碼圖像」,掃描讀取QR碼內容。3. After the initial password application obtains the initial password function, the downlink message reply is correct, that is, the preparation screen for reading the QR code is directly displayed on the transaction device (user's personal device) interface, waiting for the user to manually operate the transaction device, The "QR code image" displayed on the automatic depositing and dispensing machine is scanned and the QR code content is scanned.
實例Instance 22 :交易作業: Trading assignments
1. 使用者以新申請實體金融卡***自動存提款機(認證裝置)並操作特定交易,自動存提款機隨即發動上行電文,經由金融卡系統主機(第二伺服器)傳遞到初始密碼函系統主機(第一伺服器),初始密碼函系統(密碼設定模組)除了將該上行電文內容儲存於資料庫(儲存子模組)外,並產出、回覆「QR碼圖像」等下行電文資料,經金融卡系統(金融卡管理模組)將「QR碼圖像」等下行電文資料回覆給自動存提款機;自動存提款機將「QR碼」顯示於自動存提款機介面。 a. 較佳地,禁止使用者同時在多部自動存提款機操作多張新申請金融卡交易。 b. 初始密碼函系統以身份證號、網頁識別碼等值作為金鑰將上行電文內容儲存於資料庫。 (1) 該金融卡帳號須為新申請且尚未變更金融卡初始密碼之金融卡帳號。 (2) 網頁識別碼為初始密碼函系統、初始密碼應用程式(App)、金融卡系統等多方系統針對同一請求交易的共同識別序號,網頁識別碼值由初始密碼函系統產生。網頁識別碼值生命週期,於金融卡系統向初始密碼函系統發動「QR碼圖像」請求時產生、於初始密碼應用程式(App)取得認證碼值圖像、及完成金融卡新密碼設定後結束。 c. 初始密碼函系統將上行電文內容儲存於資料庫之目的: (1) 供後續使用者啟動交易裝置之初始密碼APP,於登錄身份資料後,供初始密碼函系統確認使用者是否已先以新申請實體金融卡***自動存提款機,完成操作特定交易,取得「QR碼圖像」。 (2) 供後續交易裝置之初始密碼應用程式於掃描讀取「QR碼圖像」之後、對初始密碼函系統發動取得認證碼請求交易時,初始密碼函系統將之做為對交易勾稽核驗之用。 (a) 當資料庫無該金融卡帳號資料時,拒絕App的交易需求,要求金融卡持卡人先持新申請金融卡操作自動存提款機,於自動存提款機介面顯示「QR碼圖像」後,再操作執行App。 (b) 當資料庫有該金融卡帳號資料、但已逾時(例如,10分鐘以上),同前述說明拒絕App之交易需求。 d. 初始密碼函系統於當下須先自動隨機亂數產出「組合方法」值並更新資料庫該欄值,之後,以該「組合方法」值執行其相對應程式碼(將原登錄綁定行動裝置認證資料做組合),產出組合後的資料原始內容即為「Current_key」(第一金鑰)。前述「組合方法」值於交易當下隨機亂數產出,此隨機亂數值較佳係異於前三次記錄。 e. 初始密碼函系統於當下再以該「Current_key」、以及使用者所綁定的識別資料(自選文摘),產出QR碼內容、「QR碼圖像」、以及下行電文等資料(含「QR碼圖像」)。 (1) QR碼原碼內容 = 網頁識別碼 +自選文摘 + SHA-256(Current_key)。 (2) QR碼亂碼內容 = 「QR碼圖像」內容 = 以「Current_key」AES(網頁識別碼 +自選文摘 + SHA-256(Current_key)) ,其中,SHA-256為一雜湊函式。 (3) 欲解譯QR碼原碼內容,需先經「組合方法」之相對應程式碼產出「Current_key」內容,之後,始能以「Current_key」解譯出QR碼原碼內容。 f. 「QR碼圖像」等下行電文資料,經金融卡系統回覆給自動存提款機之後;自動存提款機即將「QR碼圖像」顯示於自動存提款機介面,供後續使用者人工手持交易裝置(行動裝置)掃描讀取QR碼內容。 g. 金融卡系統應檢核上行電文內容,若不符合條件,應拒絕該交易請求: (1) 確認該金融卡為有效卡、而且初始密碼尚未被變更完成。 (2) 確認該金融卡持卡人已經綁定行動裝置設備認證資料及使用者識別資料。1. The user inserts the automatic depositing and dispensing machine (authentication device) with the new application entity financial card and operates the specific transaction, and the automatic depositing and dispensing machine then launches the uplink message and transmits it to the initial password via the financial card system host (second server). The host system (first server), the initial password system (password setting module), in addition to storing the contents of the uplink message in the database (storage sub-module), and outputting and replying to the "QR code image" The downlink message data is returned to the automatic depositing and withdrawing machine by the financial card system (financial card management module), such as "QR code image"; the automatic depositing and dispensing machine displays the "QR code" in the automatic deposit and withdrawal Machine interface. a. Preferably, the user is prohibited from operating a plurality of newly applied financial card transactions at a plurality of automatic depositing and dispensing machines at the same time. b. The initial password system uses the ID number and the webpage identifier as the key to store the content of the uplink message in the database. (1) The financial card account number must be a new financial card account that has not yet changed the initial password of the financial card. (2) The webpage identification code is a common identification number of the same request transaction by the multi-party system such as the initial password function system, the initial password application (App), the financial card system, and the webpage identification code value is generated by the initial password function system. The webpage identification code value life cycle is generated when the financial card system initiates a "QR code image" request to the initial password function system, obtains an authentication code value image after the initial password application (App), and completes the financial card new password setting. End. c. The initial password system stores the contents of the uplink message in the database for the purpose of: (1) The initial password APP for the subsequent user to activate the transaction device, after the identity information is registered, the initial password system confirms whether the user has The newly applied entity financial card is inserted into the automatic depositing and dispensing machine, and the operation of the specific transaction is completed, and the "QR code image" is obtained. (2) When the initial password application for the subsequent transaction device scans and reads the "QR code image" and initiates the transaction request for the initial password system to obtain the authentication code, the initial password system will check it as a transaction check. use. (a) When the database does not have the financial card account information, it rejects the trading demand of the app, and requires the financial card cardholder to first operate the automatic depositing and dispensing machine with the new financial card, and display the QR code in the automatic depositing and dispensing machine interface. After the image, execute the app again. (b) When the database has the financial card account information, but has expired (for example, more than 10 minutes), the above description indicates the transaction demand of the App. d. The initial password function system must first automatically generate the "combination method" value and update the column value of the database in the current random number. Then, execute the corresponding code with the "combination method" value (bind the original login) The mobile device authentication data is combined. The original content of the combined data is "Current_key" (first key). The aforementioned "combination method" value is generated by random random number in the transaction, and the random chaotic value is better than the first three records. e. The initial password function system uses the "Current_key" and the identification data (selected abstracts) bound by the user to generate QR code content, "QR code image", and downlink message (including " QR code image"). (1) QR code original code content = Web page identification code + optional digest + SHA-256 (Current_key). (2) QR code garbled content = "QR code image" content = "Current_key" AES (web page identifier + SHA-256 (Current_key)), where SHA-256 is a hash function. (3) In order to interpret the content of the QR code, the content of the "Current_key" must be generated by the corresponding code of the "combination method". After that, the content of the QR code can be interpreted by "Current_key". f. The downlink message data such as "QR code image" will be returned to the automatic depositing and withdrawing machine after the financial card system; the automatic depositing and dispensing machine will display the "QR code image" on the automatic depositing and dispensing machine interface for subsequent use. The manual handheld transaction device (mobile device) scans and reads the QR code content. g. The financial card system shall check the content of the uplink message. If the condition is not met, the transaction request shall be rejected: (1) Confirm that the financial card is a valid card and the initial password has not been changed. (2) Confirm that the financial card holder has bound the mobile device device authentication data and user identification data.
2. 使用者在交易裝置介面登入「啟動密碼」後啟動如實例1之App,App要求使用者輸入身份鑑別資訊: a. App於個人裝置介面顯示訊息,要求輸入使用者身份證號、生日、及金融卡帳號。 b. 上行電文關鍵內容包括:身份證號、生日、金融卡帳號、以及安裝該App之版號與日期等資訊。 c. 上行電文訊息經防火牆(Web AP F/W)解譯SSL加密內容後傳遞給密碼設定模組主機。 d. 密碼設定模組依據上行電文訊息審核該使用者所安裝App的合法性、以及確認使用者是否已先以新申請實體金融卡***自動存提款機操作特定交易。 (1) 以身份證號、網頁識別碼等值作為金鑰查詢資料庫,當資料庫無該帳號資料時,拒絕App的交易需求,要求金融卡持卡人先持新申請金融卡操作自動存提款機,於自動存提款機介面顯示「QR Code圖像」後,再操作執行App。 (2) 當資料庫有該帳號資料、但已逾時(例如,10分鐘以上),同前述說明拒絕App之交易需求。 (3) 於鑑別使用者身份(身份證號、生日)不符合時,密碼設定模組須同步透過簡訊、電子郵件等通報持卡人。於累積錯誤次數超過4次時,系統應拒絕交易,並請使用者聯繫客服人員審核使用者身份之後重設累積錯誤次數。 e. 密碼設定模組審核上行電文訊息無誤後,產出下行電文回覆App: (1) 系統依據資料庫儲存該使用者的「組合方法」,以使用者原始綁定之行動裝置認證資料產出「Current_key」(第二金鑰)。 (2) 下行電文關鍵內容 = 網頁識別碼 + 組合方法 + 以「Current_key」AES(加密方法 + SHA-256(「Current_key」(第二金鑰))) + App合法性鑑別結果,其中,SHA-256為一雜湊函式。 (a) 「加密方法」欄共計10個Bytes,前3個Bytes放置產出「Current_key」的「組合方法」、第4~6個Bytes放置當次加密方法項目、末4個Bytes放置當次加密時「自選文摘」的開始取樣位置。 (b) 上述「加密方法」值及「開始取樣位置」值均於交易當下隨機亂數產出,此隨機亂數值較佳係異於前三次記錄。 f. 將前述上行電文及下行電文內容儲存於密碼設定模組的資料庫,供後續交易鑑別勾稽使用者身份之用。2. After the user logs in the "Startup Password" on the trading device interface, the App starts as shown in Example 1. The App asks the user to enter the identity authentication information: a. The App displays a message on the personal device interface, asking for the user ID number, birthday, And financial card account number. b. The key content of the uplink message includes: ID number, birthday, financial card account number, and the version number and date of installing the app. c. The uplink message is interpreted by the firewall (Web AP F/W) and transmitted to the password setting module host. d. The password setting module reviews the legality of the user-installed App according to the uplink message, and confirms whether the user has previously inserted the automatic depositing machine into the automatic depositing machine to operate the specific transaction. (1) Using the ID number and web page identification code as the key query database, when the database does not have the account information, the application demand of the app is rejected, and the financial card holder is required to automatically save the new application for the financial card operation. The cash machine displays the "QR Code image" on the automatic depositing and dispensing machine interface, and then executes the App. (2) When the database has the account information but has expired (for example, more than 10 minutes), the above description indicates the transaction demand of the App. (3) When the identity of the user (ID number, birthday) is not met, the password setting module must simultaneously notify the cardholder via SMS, email, etc. When the cumulative number of errors exceeds 4 times, the system should reject the transaction, and ask the user to contact the customer service staff to review the user's identity and reset the cumulative number of errors. e. After the password setting module verifies that the uplink message is correct, it outputs the downlink message reply App: (1) The system stores the user's "combination method" according to the database, and the user's original binding mobile device authentication data is output. "Current_key" (second key). (2) Downstream message key content = Web page identification code + combination method + "Current_key" AES (encryption method + SHA-256 ("Current_key" (second key))) + App legality identification result, where SHA- 256 is a hash function. (a) The "Encryption Method" column has a total of 10 Bytes. The first 3 Bytes are placed with the "Current_key" "Combination Method", the 4th to 6th Bytes are placed for the next encryption method item, and the last 4 Bytes are placed for the next encryption. The sampling position at the beginning of "Self-Selected Digest". (b) The above "encryption method" value and the "start sampling position" value are all randomly generated in the transaction, and the random chaotic value is better than the first three records. f. Store the foregoing uplink message and the downlink message content in the database of the password setting module for subsequent transaction identification to identify the identity of the user.
3. App於收到密碼設定模組的下行電文後: a. 當下行電文內容之「App合法性鑑別結果」值是成功時,依據下行電文之「組合方法」值(下行電文之「加密方法」欄的前3個Bytes值),自使用者的行動裝置取得該裝置資料(包含IMEI/UDID/ Keychain/MAC等資訊),以及該使用者的個人資訊(身份證號/生日等資訊,可由該使用者自行登錄並儲存於該行動裝置),以 產出「Current_key」(第三金鑰)(亦即,該App內建有複數個組合方法,可依據所接獲的編號來確定使用的組合方法),一來對下行電文之「加密方法」欄做解密,取得當次「加密方法」明碼值;二來鑑別下行電文之SHA-256 (「Current_key」)欄值的一致性(鑑別當下App所連結之密碼設定模組主機的合法性)。 b. App於交易裝置介面顯示可掃描讀取QR碼的環境,指示持卡人持交易裝 置對自動存提款機的「QR碼圖像」掃描讀取其內容。 c. App掃描讀取「QR碼圖像」,並解譯其原始內容: (1) 使用上述「Current_key」(第三金鑰)解譯「QR 碼圖像」之原始內容。 (a) QR碼原碼內容=網頁識別碼 + 自選文摘 + SHA-256 (「Current_key」)。 (b) QR碼亂碼內容=「QR碼圖像」內容 = 以「Current_key」AES(網頁識別碼 +自選文摘 + SHA-256(Current_key)) (2) 解譯後再以交易裝置本機產出的Current_key驗證該QR碼內容之 SHA-256(「Current_key」)值的一致性(鑑別當下該「QR碼圖像」的合法性)。 d. 再次產出上行電文,對初始密碼函系統發動請求取得使用者認證碼值: (1) 上行電文關鍵內容 = 網頁識別碼 + Mobile值 + Verify值 + 前述各步驟上下行電文的部份資料。 (a) Mobile值 = SHA-256(從交易裝置本機產出的「Current_key」 (b) Verify值 = 以「Current_key」AES{(依加密方法對「解譯後的QR碼內容」內容做加密) + SHA-256(「解譯後的QR碼內容)} 。此處的「解譯後的QR碼內容」係指經解譯後的「自選文摘」原始內容。App依據前述下行電文取得的「加密方法」值,以所指定「自選文摘」的「開始取樣位置」值做開始取樣、以所指定的「加密方法」編號值執行對應的加密用程式碼,經加密後產出x值,其長度應至少128個Bytes。之後,再以「Current_key」(第三金鑰)AES加密保護該x值以及相關雜湊函數值。 (2) App將本次上行電文經SSL加密後,傳送給初始密碼函系統主機。3. After receiving the downlink message of the password setting module: a. When the “App legality identification result” value of the downlink message content is successful, according to the “combination method” value of the downlink message (the encryption method of the downlink message) The first three Bytes values in the column), the device data (including IMEI/UDID/Keychain/MAC information) obtained from the user's mobile device, and the user's personal information (ID number/birthday, etc.) The user logs in and stores the mobile device in order to produce "Current_key" (ie, the third key is built in the app), that is, the app has a plurality of combined methods, which can be determined according to the received number. The combination method), first decrypts the "encryption method" column of the downlink message, obtains the current "encryption method" clear code value; second, identifies the consistency of the SHA-256 ("Current_key") column value of the downlink message (identification of the present The password linked to the app sets the legality of the module host). b. The App displays an environment in which the QR code can be scanned and read on the transaction device interface, and instructs the card holder to hold the transaction device to scan the contents of the "QR code image" of the automatic depositing and dispensing machine. c. The App scans the "QR code image" and interprets its original content: (1) Interpret the original content of the "QR code image" using the above "Current_key" (third key). (a) QR code original code content = web page identifier + optional digest + SHA-256 ("Current_key"). (b) QR code garbled content = "QR code image" content = "Current_key" AES (web page ID + SHA-256 (Current_key)) (2) Interpreted and then produced by the trading device The Current_key verifies the consistency of the SHA-256 ("Current_key") value of the QR code content (identifying the validity of the current "QR code image"). d. Generate the uplink message again, and send the user authentication code value to the initial password function system: (1) The key content of the uplink message = Web page identification code + Mobile value + Verify value + Part of the data of the uplink and downlink messages in the above steps . (a) Mobile value = SHA-256 (Current_key) generated from the local device of the transaction device (b) Verify value = Encrypted with "Current_key" AES{ (encrypted method for "interpreted QR code content") + SHA-256 ("interpreted QR code content"}. The "interpreted QR code content" here refers to the original content of the "self-selected abstracts" after interpretation. App obtained according to the aforementioned downlink message The "encryption method" value starts sampling with the "start sampling position" value of the specified "choice digest", and executes the corresponding encryption code with the specified "encryption method" number value, and outputs an x value after being encrypted. The length should be at least 128 Bytes. After that, the value of the x value and the associated hash function are protected by the "Current_key" AES encryption. (2) The App encrypts the current message by SSL and transmits it to the initial The cryptographic system host.
4. 密碼設定模組於收到App的上行電文(請求取得認證碼)後: a. 依據該使用者本次交易資訊,檢核App的本次上行電文內容,鑑別該行動裝置設備內容(IMEI/UDID/Keychain/MAC)、該使用者的個人資訊(身份證號/生日)等資料的合法性、以及所安裝App的正確性,從而達到鑑別使用者身份的目的。 b. 於鑑別使用者身份不符合時,密碼設定模組須同步透過簡訊、電子郵件等通報持卡人。於累積錯誤次數超過4次時,系統應拒絕交易,並請使用者聯繫客服人員審核使用者身份之後重設累積錯誤次數。 c. 於鑑別使用者身份符合後,密碼設定模組產出上行電文內容,向金融卡系統主機(第二伺服器)發動請求取得當次認證碼值。 (1) 上行電文內容包括:網頁識別碼、金融卡帳號、交易日期、交易時間、ATM機號、ATM交易序號、認證碼值(此處為空白值)等資料。 (2) 金融卡系統(金融卡管理模組)核驗上行電文無誤後,隨機產出「認證碼值」並回覆給密碼設定模組。 (a)「認證碼」係為後續供持卡人以新申請實體金融卡***自動存提款機(認證裝置)並操作特定交易、完成金融卡新密碼設定作業時,做為金融卡系統對持卡人身份鑑別之用。 (b) 金融卡管理模組每次動態隨機產出的「認證碼」,有效期10分鐘、認證碼值為6~8碼隨機數字。 (c) 金融卡管理模組儲存此交易需求內容,供後續持卡人以新申請實體金融卡***自動存提款機並操作特定交易、完成金融卡新密碼設定作業時,做為金融卡系統對持卡人身份鑑別之用。 d. 密碼設定模組於收妥認證碼值後,先採「視覺密碼學理論方法」對金融卡初始密碼值明碼 產出「認證碼值圖像」,之後再產出下行電文(含加密後認證碼值圖像),經SSL加密後回覆給App。 (1) 採「視覺密碼學理論方法」加密產出「認證碼值圖像」: (a) 步驟一:隨機取得底圖或底色 (b) 步驟二:在背景產製數條干擾線(線條顏色、粗細、長短、位置均隨機產生) (c) 步驟三:產製數字(隨機數字顏色、字體、字形、向不同方向(PIXEL)移位產製多 次相同數字) (d) 步驟四:在前景產製數條干擾線(線條顏色、粗細、長短、位置均隨機產生) (e) 步驟五:產生JPEG圖檔 (f) 經此方法將密碼值明碼做妥適加密保護之後,該圖像之明碼值需要人工以眼睛目視方式才能正確讀取。 (2) 下行電文關鍵內容:網頁識別碼、認證碼值圖像、App合法性鑑別結果等資料。 (3) 密碼設定模組更新資料庫之該使用者本次交易處理狀況與身份鑑別結果等資訊。 (4) 本次下行電文內容除了包含認證碼值圖像,另應包含通知持卡人儘速在限時內(例如,10分鐘) 操作自動存提款機特定功能完成金融卡新密碼設定。 (5) 密碼設定模組須同步透過簡訊、電子郵件通知持卡人:認證碼值完成交付,請持卡人儘速在限時內操作自動存提款機特定功能完成金融卡新密碼設定等訊息。4. After receiving the uplink message of the App (requesting the authentication code): a. According to the transaction information of the user, check the content of the uplink message of the App to identify the device content of the mobile device (IMEI) /UDID/Keychain/MAC), the legality of the user's personal information (ID number/birthday), and the correctness of the installed app, so as to identify the user. b. When the identity of the user is not met, the password setting module must simultaneously notify the cardholder via SMS, email, etc. When the cumulative number of errors exceeds 4 times, the system should reject the transaction, and ask the user to contact the customer service staff to review the user's identity and reset the cumulative number of errors. c. After the identity of the user is verified, the password setting module outputs the uplink message content, and sends a request to the financial card system host (the second server) to obtain the current authentication code value. (1) The content of the uplink message includes: web page identification code, financial card account number, transaction date, transaction time, ATM machine number, ATM transaction serial number, authentication code value (here, blank value) and other data. (2) After verifying that the uplink message is correct, the financial card system (financial card management module) randomly generates the "authentication code value" and replies to the password setting module. (a) "Authentication Code" is used as a financial card system for subsequent cardholders to insert a new application entity financial card into an automatic depositing machine (authentication device) and operate a specific transaction and complete the new password setting operation of the financial card. Cardholder identity identification. (b) The "authentication code" of the financial card management module for each dynamic random output, valid for 10 minutes, and the authentication code value is 6~8 code random numbers. (c) The financial card management module stores the content of the transaction request for subsequent cardholders to use the new application entity financial card to insert the automatic deposit and withdrawal machine and operate the specific transaction, complete the financial card new password setting operation, as the financial card system For the identification of cardholders. d. After receiving the authentication code value, the password setting module first adopts the "visual cryptography theory method" to produce the "authentication code value image" for the initial password value of the financial card, and then outputs the downlink message (including the encrypted message). The authentication code value image) is encrypted and then replied to the App. (1) Encrypted the "Certificate Code Value Image" using the "Visual Cryptography Theory Method": (a) Step 1: Randomly obtain the basemap or background color (b) Step 2: Produce several interference lines in the background ( Line color, thickness, length, position are randomly generated) (c) Step 3: Production number (random number color, font, glyph, shifting in different directions (PIXEL) multiple times the same number) (d) Step 4 : Produce several interference lines in the foreground (line color, thickness, length, position are randomly generated) (e) Step 5: Generate JPEG image file (f) After this method is used to properly encrypt and encrypt the password value, The clear value of the image needs to be manually visually read by the eye. (2) The key content of the downlink message: webpage identification code, authentication code value image, App legality identification result and other data. (3) The password setting module updates the information of the transaction processing status and the identity identification result of the user of the database. (4) In addition to the image of the authentication code value, the content of the downlink message should include notifying the cardholder to operate the automatic cash register specific function within the time limit (for example, 10 minutes) to complete the new password setting of the financial card. (5) The password setting module must simultaneously notify the cardholder via SMS or email: the authentication code value is delivered. Please wait for the cardholder to operate the automatic depositing machine specific function within the time limit to complete the financial card new password setting and other information. .
5. App於收到密碼設定模組的下行電文(含認證碼值圖像)後: a. 顯示認證碼值圖像於個人裝置介面。 b. 顯示通知持卡人儘速在限時內操作自動存提款機特定功能完成金融卡新密碼設定等訊息於個人裝置介面。 c. App將本筆交易選擇重點資料儲存於個人裝置設備端的加密型檔案。該檔 案採先進先出法,最多儲存十筆交易記錄軌跡。5. After receiving the downlink message (including the authentication code value image) of the password setting module: a. Display the authentication code value image on the personal device interface. b. Display the notification cardholder to operate the ATM function in the limited time as soon as possible to complete the financial card new password setting and other information in the personal device interface. c. The App stores the key selection data of this transaction in the encrypted file on the device side of the personal device. The file adopts the first-in, first-out method and stores up to ten transaction record tracks.
6. 使用者(持卡人)於取得認證碼後,須在限時內,以新申請實體金融卡***自動存提款機(認證裝置)並操作特定交易,完成金融卡新密碼的設定作業。 a. 認證裝置的特定交易功能: (1) 該特定交易功能係參照現行分行櫃檯「金融卡重設密碼」交易功能(非金融卡密碼變更交易),供持卡人以新申請實體金融卡***自動存提款機、在自動存提款機介面輸入當次認證碼值、以及自行設定的金融卡新密碼值,完成金融卡新密碼的設定作業。 (2) 特定交易功能資料處理流程: (a) 特定交易功能連線呼叫實體金融卡晶片內軟體,請其隨機產出一組亂數。 (b) 產出上行電文,向金融卡管理模組發動產出該金融卡新密碼值請求。上行電文關鍵資料:金融卡帳號、認證碼、金融卡新密碼、金融卡晶片軟體當次產出之亂數值等資料。 (c) 金融卡管理模組審核上行電文無誤後,連線呼叫實體亂碼化設備(Hardware DES)產出經亂碼化後的金融卡新密碼值。 (d) 金融卡管理模組產出下行電文(內含「經亂碼化後的金融卡新密碼值」)回覆給自動存提款機特定交易功能。 (e) 特定交易功能連線呼叫實體金融卡晶片內軟體,請其解鎖卡片、以及寫入「經亂碼化後的金融卡新密碼值」至晶片。 b. 金融卡管理模組每次動態隨機產出的「認證碼」,其具有特定有效時限,持卡人須在限時內)完成設定金融卡新密碼。 c. 當該金融卡已完成新密碼設定作業,自動存提款機應拒絕持卡人重覆執行特定交易功能。6. After obtaining the authentication code, the user (cardholder) must insert the new application physical financial card into the automatic depositing and dispensing machine (authentication device) and operate the specific transaction within the time limit to complete the setting of the new financial card password. a. Specific transaction function of the authentication device: (1) The specific transaction function refers to the current branch counter "Financial Card Reset Password" transaction function (non-financial card password change transaction) for the cardholder to insert the new application entity financial card The automatic depositing and dispensing machine, inputting the current authentication code value in the automatic depositing and dispensing machine interface, and the new financial card password value set by itself, complete the setting operation of the new financial card password. (2) Specific transaction function data processing flow: (a) The specific transaction function connects the software in the physical financial card chip, and asks it to randomly generate a random number. (b) Produce an uplink message and initiate a request for the new password value of the financial card to the financial card management module. The key information of the uplink message: the financial card account number, the authentication code, the new password of the financial card, and the chaotic value of the financial chip chip software output. (c) After the financial card management module verifies that the uplink message is correct, the connected call entity garbled device (Hardware DES) outputs the garbled financial card new password value. (d) The financial card management module outputs a downlink message (including the "new password value of the garbled financial card") to the automatic deposit and withdrawal machine specific transaction function. (e) The specific transaction function connects to the software in the physical financial card chip, please unlock the card and write the "garbled new financial card password value" to the chip. b. Each time the financial card management module randomly generates an "authentication code" with a specific valid time limit, the cardholder must complete the new financial card password within a limited time. c. When the financial card has completed the new password setting operation, the automatic depositing machine should refuse the cardholder to repeatedly perform the specific transaction function.
7. 當使用者(持卡人)忘記認證碼值時,使用者須重新執行交易作業(上述步驟1.~6.)的完整程序,以取得新的認證碼值。7. When the user (cardholder) forgets the authentication code value, the user must re-execute the complete procedure of the transaction operation (steps 1. to 6. above) to obtain a new authentication code value.
8. 當使用者(持卡人)未能在限時內從自動存提款機完成金融卡新密碼設定時,當次認證碼將逾時失效,使用者須重新執行交易作業(上述步驟1.~6.)的完整程序,以取得新的認證碼值。8. When the user (cardholder) fails to complete the new financial card password setting from the automatic cash dispenser within the time limit, the current authentication code will expire and the user must re-execute the transaction (step 1. above). The complete procedure of ~6.) to obtain a new authentication code value.
綜上所述,本創作在交易裝置(行動裝置設備)及認證裝置(自動存提款機)兩個實體裝置相互分離下,藉由持卡人以人工操作行動裝置,對準顯示在自動存提款機介面的「QR碼圖像」做掃描讀取,促使兩個實體裝置分工處理同一筆交易請求,限時限次的完成身份勾稽暨鑑別程序,讓持卡人可及時手持金融卡在自動存提款機操作完成金融卡新密碼的設定作業。此等多因子交易安全模式,不僅符合主管機關對於交易安全設計應具使用「兩項(含)以上技術」的要求、更可確保該電子交易為人工操作完成,完全防範木馬程式自遠端操控交易的風險。In summary, the author separates the two physical devices of the transaction device (mobile device device) and the authentication device (automatic depositing and dispensing device), and the card holder manually operates the mobile device to align the display in the automatic storage. The "QR code image" of the cash dispenser interface is scanned and read, which causes the two physical devices to process the same transaction request, and completes the identity check and identification process within a limited time, so that the card holder can hold the financial card in time. The deposit and withdrawal machine operation completes the setting operation of the new password of the financial card. These multi-factor transaction security modes not only meet the requirements of the competent authority for the use of "two or more technologies" for transaction security design, but also ensure that the electronic transaction is completed manually, completely preventing the Trojan from remotely controlling. The risk of trading.
本創作係採二階段身份鑑別模式(包含對使用者個資資料、對所綁定的交易裝置認證資料及使用者識別資料、對交易是否為人工操作),有別於往常以「密碼」為唯一鑑別模式,對於使用者身份鑑別的交易安全門檻,可收到全面性的、實質性的強化效果。This creative department adopts a two-stage identification mode (including the user's personal information, the binding transaction device authentication data and the user identification data, and whether the transaction is manual operation), which is different from the usual "password". The unique authentication mode, for the security threshold of user identification, can receive comprehensive and substantial enhancement effects.
本創作之交易框架的操作行為,需要使用者手持實體金融卡片***自動存提款機取得「QR碼圖像」、需要使用者手持已綁定的實體行動裝置掃描讀取「QR碼圖像」。縱使交易裝置被植入遠端操控型(monitoring remote programs)木馬程式,駭客仍無法自遠端操控完成上述人工操作行為來取得認證碼值。The operation behavior of the transaction framework of this creation requires the user to insert the physical financial card into the automatic depositing and withdrawing machine to obtain the "QR code image", and the user needs to hold the bound physical mobile device to scan and read the "QR code image". . Even if the transaction device is implanted with a remote remote trojan, the hacker is still unable to remotely manipulate the manual operation to obtain the authentication code value.
對於使用者而言,可排除紙本密碼函之相關保管、遺失、遭竊的負擔與風險。對於歹徒、駭客而言,需要同時取得使用者的實體金融卡、綁定的實體行動裝置、App的「啟動密碼」以及使用者個資之後,才有機會取得認證碼值 ,並需在限時內完成金融卡新密碼的設定作業。較諸往常只要取得紙本密碼函及實體金融卡後就可犯案,其防範門檻已明顯提昇。For the user, the burden and risk of keeping, losing, and stolen the paper password letter can be ruled out. For gangsters and hackers, it is necessary to obtain the user's physical financial card, the bound physical mobile device, the App's "start password" and the user's personal capital before they have the opportunity to obtain the authentication code value. Complete the setting of the new password for the financial card. As long as you can obtain a paper password letter and a physical financial card, you can commit crimes, and the threshold for prevention has been significantly improved.
對於金融機構而言,本創作除了確保資訊安全門檻提昇外,可為金融機構取代現行人工操作列印密碼函的繁瑣程序,節省其間配套的相關人工作業、環境設施、列印機器、紙張、郵遞、保管儲存、資安控管及風險稽查等等作業成本負擔,並能達到節能減碳的效果。For financial institutions, in addition to ensuring the improvement of the information security threshold, this creation can replace the cumbersome procedures of the current manual operation of printing password letters for financial institutions, saving related manual work, environmental facilities, printing machines, paper, and postal services. The cost of operation, such as storage and storage, security control and risk auditing, can achieve the effect of energy saving and carbon reduction.
1‧‧‧用於幫助持卡人首次設定金融卡密碼之系統 1 ‧‧‧System for helping cardholders to set the financial card password for the first time
10‧‧‧第一伺服器 10 ‧‧‧First server
12‧‧‧密碼設定模組 12 ‧‧‧ password setting module
122‧‧‧儲存子模組 122 ‧‧‧Storage submodule
20‧‧‧第二伺服器 20 ‧‧‧Second server
22‧‧‧金融卡管理模組 22 ‧‧‧Financial Card Management Module
30‧‧‧軟體產品 30 ‧‧‧Software products
40‧‧‧認證裝置 40 ‧‧‧Certified device
42‧‧‧顯示元件 42 ‧‧‧Display components
44‧‧‧輸入元件 44 ‧‧‧Input components
46‧‧‧金融卡讀寫元件 46 ‧‧‧Financial card reading and writing components
70‧‧‧行動裝置 70 ‧‧‧ mobile devices
S110~S610‧‧‧步驟流程 S110~S610 ‧‧‧Step process
圖 1係繪示本創作之一具體實施例之系統之方塊圖。 Figure 1 is a block schematic diagram of one embodiment of a system of the present embodiment DETAILED creation.
圖 2係繪示本創作之一具體實施例之方法之流程圖。 FIG 2 shows a flowchart of a method of the system of one embodiment according to the present embodiment DETAILED creation.
Claims (5)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
TW107217505U TWM578411U (en) | 2018-12-22 | 2018-12-22 | System for assisting a financial card holder in setting password for the first time |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
TW107217505U TWM578411U (en) | 2018-12-22 | 2018-12-22 | System for assisting a financial card holder in setting password for the first time |
Publications (1)
Publication Number | Publication Date |
---|---|
TWM578411U true TWM578411U (en) | 2019-05-21 |
Family
ID=67353783
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
TW107217505U TWM578411U (en) | 2018-12-22 | 2018-12-22 | System for assisting a financial card holder in setting password for the first time |
Country Status (1)
Country | Link |
---|---|
TW (1) | TWM578411U (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
TWI677842B (en) * | 2018-12-22 | 2019-11-21 | 台新國際商業銀行股份有限公司 | System for assisting a financial card holder in setting password for the first time and method thereof |
-
2018
- 2018-12-22 TW TW107217505U patent/TWM578411U/en unknown
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
TWI677842B (en) * | 2018-12-22 | 2019-11-21 | 台新國際商業銀行股份有限公司 | System for assisting a financial card holder in setting password for the first time and method thereof |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US10475015B2 (en) | Token-based security processing | |
CN105608577B (en) | Method for realizing non-repudiation, payment management server and user terminal thereof | |
CN106688004B (en) | Transaction authentication method and device, mobile terminal, POS terminal and server | |
AU2011205391B2 (en) | Anytime validation for verification tokens | |
CN113170299A (en) | System and method for password authentication of contactless cards | |
US10045210B2 (en) | Method, server and system for authentication of a person | |
US9847874B2 (en) | Intermediary organization account asset protection via an encoded physical mechanism | |
CN105027153A (en) | Methods, devices, and systems for secure provisioning, transmission, and authentication of payment data | |
WO2008004312A1 (en) | Net settlement assisting device | |
CN101340294A (en) | Cipher keyboard apparatus and implementing method thereof | |
CN101335754B (en) | Method for information verification using remote server | |
CN105184557B (en) | Payment authentication method and system | |
KR20120108599A (en) | Credit card payment service using online credit card payment device | |
US7340773B2 (en) | Multi-stage authorisation system | |
US11907932B2 (en) | Augmented reality card activation experience | |
US11615395B2 (en) | Authentication for third party digital wallet provisioning | |
TW201640409A (en) | System and method for communicating credentials | |
US20170154329A1 (en) | Secure transaction system and virtual wallet | |
JP6760631B1 (en) | Authentication request system and authentication request method | |
US9929859B2 (en) | Account asset protection via an encoded physical mechanism | |
TWI677842B (en) | System for assisting a financial card holder in setting password for the first time and method thereof | |
TWM578411U (en) | System for assisting a financial card holder in setting password for the first time | |
TWM578432U (en) | System for assisting a financial card holder in setting password for the first time | |
TWM580720U (en) | System for assisting a network service user in setting password for the first time | |
TWI679603B (en) | System for assisting a financial card holder in setting password for the first time and method thereof |