TWM600899U

TWM600899U - Financial business system

Info

Publication number: TWM600899U
Application number: TW109207157U
Authority: TW
Inventors: 葉智淵
Original assignee: 合作金庫商業銀行股份有限公司
Priority date: 2020-06-08
Filing date: 2020-06-08
Publication date: 2020-09-01

Abstract

A financial business system includes a host system, a client device and a certificate unit. The host system stores multiple client data. The certificate unit stores certification data. The client device is configured to read the certification data by near-field communication, and receive identity data input by users. The host system is configured to send a certification request to the client device in response of the financial request. The client device is configured to send data of certification to the host system in response of the certification request, and the certification request includes identity data and certification data. If the host system verifies the data of certification matching the client data, the host system carries out financial operation corresponding to the financial request.

Description

金融業務系統 Financial Business System

本揭示內容是關於一種金融業務系統，特別是關於透過非接觸式晶片卡作為憑證的一種金融業務系統。 The present disclosure is about a financial business system, especially a financial business system that uses a contactless chip card as a certificate.

現有的網路銀行金融業務中，大額轉帳均須透過金融XML(Financial XML)憑證認證交易，客戶必須將讀卡機接到個人電腦來讀取金融XML憑證來進行轉帳，造成客戶許多不便，例如需要額外購買讀卡機或是外出時無法進行大額轉帳。 In the existing online banking financial services, large-value transfers must be authenticated through financial XML (Financial XML) certificate transactions. Customers must connect a card reader to a personal computer to read the financial XML certificate for transfer, causing many inconveniences to customers. For example, you need to purchase an additional card reader or you cannot make large transfers when you are out.

本揭示文件提供一種金融業務系統，其包含主機端系統、客戶端裝置以及憑證單元。主機端系統存有複數筆客戶資料。憑證單元儲存有憑證資料。客戶端裝置用於藉由近場通訊讀取憑證資料，且用於接收使用者輸入的身分資料，其中主機端系統用於回應於金融業務要求而傳送認證要求至客戶端裝置，其中客戶端裝置用於回應於認證要求，而將認證資料傳送至主機端系統，且認證資料包含憑證資料與身分資料，其中，若主機端系統判定認證資料符合上述客戶資料時，主機端系統執行對應於金融業務要求的金融業務操作。 The present disclosure provides a financial business system, which includes a host system, a client device, and a credential unit. The host-side system stores multiple client data. The certificate unit stores certificate data. The client device is used for reading the credential data through near field communication and is used for receiving the identity data input by the user. The host system is used for sending the authentication request to the client device in response to the financial business request, and the client device It is used to send the authentication data to the host-side system in response to the authentication request, and the authentication data includes certificate data and identity data. If the host-side system determines the authentication data When the above customer information is met, the host-side system executes financial business operations corresponding to financial business requirements.

上述的金融業務系統的優點之一，是能夠方便客戶使用行動裝置與銀行進行業務約定事項來往以及大額轉帳，解決外出時無法進行大額轉帳的不便。 One of the advantages of the above-mentioned financial business system is that it is convenient for customers to use mobile devices to exchange business agreements with banks and transfer large amounts of money, and solve the inconvenience that large amounts of money cannot be transferred when going out.

100:金融業務系統 100: Financial business system

101:主控裝置 101: Master control device

110:主機端系統 110: host system

112:客戶資料 112: Customer Information

120:客戶端裝置 120: client device

125:交易應用程式 125: Trading Application

130:憑證單元 130: voucher unit

140:網路 140: Network

121:記憶體 121: memory

122:處理器 122: processor

123:天線 123: Antenna

124:近場通訊模組 124: Near Field Communication Module

131:晶片 131: Chip

132:感應線圈 132: induction coil

S310,S320,S330,S340,S350,S360,S370,S380:流程 S310, S320, S330, S340, S350, S360, S370, S380: Process

Fq:金融業務要求 Fq: Financial business requirements

Dct:認證資料 Dct: certification information

Cq:認證要求 Cq: Certification requirements

第1圖為根據一些實施例所繪示的金融業務系統示意圖。 Figure 1 is a schematic diagram of a financial business system according to some embodiments.

第2圖為根據一些實施例所繪示的憑證單元示意圖。 Figure 2 is a schematic diagram of a voucher unit according to some embodiments.

第3圖為根據一些實施例所繪示的金融業務系統操作流程圖。 Figure 3 is a flowchart of the operation of the financial business system according to some embodiments.

下文係舉實施例配合所附圖式作詳細說明，但所描述的具體實施例僅僅用以解釋本創作，並不用來限定本創作，而結構操作之描述非用以限制其執行之順序，任何由元件重新組合之結構，所產生具有均等功效的裝置，皆為本創作揭示內容所涵蓋的範圍。 The following is a detailed description of the embodiments in conjunction with the accompanying drawings, but the specific embodiments described are only used to explain the creation, not to limit the creation, and the description of the structural operations is not to limit the order of its execution. The structure of the recombination of the components produces the devices with equal effects, which are all covered by the content of this creative disclosure.

在全篇說明書與申請專利範圍所使用之用詞(terms)，除有特別註明外，通常具有每個用詞使用在此領域中、在此揭露之內容中與特殊內容中的平常意義。某些用以描述本揭露之用詞將於下或在此說明書的別處討論，以提供本領域技術人員在有關本揭露之描述上額外的引導。 Unless otherwise specified, the terms used in the entire specification and the scope of the patent application usually have the usual meaning of each term used in the field, in the content disclosed here, and in the special content. Certain terms used to describe this disclosure will be discussed below or elsewhere in this specification. To provide those skilled in the art with additional guidance on the description of the present disclosure.

此外，在本文中所使用的用詞『包含』、『包括』、『具有』、『含有』等等，均為開放性的用語，即意指『包含但不限於』。此外，本文中所使用之『及/或』，包含相關列舉項目中一或多個項目的任意一個以及其所有組合。 In addition, the terms "include", "include", "have", "contain", etc. used in this article are all open terms, meaning "including but not limited to". In addition, the "and/or" used in this article includes any one of one or more of the related listed items and all combinations thereof.

第1圖為根據一些實施例所繪示的金融業務系統100示意圖。金融業務系統100包含主機端系統110、客戶端裝置120以及憑證單元130。主機端系統110存有複數筆客戶資料，在一些實施例中，主機端系統110為銀行端的伺服器，而上述客戶資料112包含了各種銀行客戶留存於銀行系統上的個人資料，如出生年月日、身份證字號、帳戶密碼、印鑑或是指紋和臉孔等用於辨識客戶身分的資料。 Figure 1 is a schematic diagram of a financial business system 100 according to some embodiments. The financial business system 100 includes a host system 110, a client device 120, and a credential unit 130. The host-side system 110 stores a plurality of customer data. In some embodiments, the host-side system 110 is a bank-side server, and the above-mentioned customer data 112 includes various bank customers' personal data stored in the banking system, such as the date of birth. Date, ID number, account password, seal or fingerprint and face and other data used to identify customers.

客戶端裝置120包含了記憶體121、處理器122、天線123以及近場通訊(Near-Field communication，NFC)模組124。在一些實施例中，記憶體121用以儲存交易應用程式125(例如網路銀行APP)，而處理器122用以執行交易應用程式125。近場通訊模組124與天線123耦接，當客戶端裝置120啟動近場通訊功能時，近場通訊模組124用以透過天線123與憑證單元130進行無線資料傳輸。 The client device 120 includes a memory 121, a processor 122, an antenna 123, and a Near-Field communication (NFC) module 124. In some embodiments, the memory 121 is used to store a transaction application 125 (for example, an online banking APP), and the processor 122 is used to execute the transaction application 125. The near field communication module 124 is coupled to the antenna 123. When the client device 120 activates the near field communication function, the near field communication module 124 is used for wireless data transmission through the antenna 123 and the credential unit 130.

在一些實施例中，客戶端裝置120透過執行交易應用程式125以透過網路140與主機端系統110及/或主控裝置101進行資料通訊，藉以操作如大額轉帳、約定轉帳以及線上繳款等金融業務。實作上，網路140可以是無線網路、有線網路或前述兩者的組合。 In some embodiments, the client device 120 executes the transaction application 125 to communicate with the host system 110 and/or the main control device 101 via the network 140, so as to perform operations such as large-value transfer, agreed transfer, and online payment. And other financial services. In practice, the network 140 may be a wireless network, a wired network, or a combination of the two.

在一些實施例中，客戶端裝置120為具有近場通訊功能的智慧型手機或平板電腦。在另一些實施例中，主控裝置101為個人電腦或筆記型電腦。 In some embodiments, the client device 120 is a smart phone or tablet computer with a near field communication function. In other embodiments, the main control device 101 is a personal computer or a notebook computer.

第2圖為根據一些實施例所繪示的憑證單元130示意圖。憑證單元130包含晶片131以及感應線圈132，其中晶片131用於儲存憑證資料133。在一些實施例中，憑證單元130為非接觸式晶片卡。 FIG. 2 is a schematic diagram of the voucher unit 130 according to some embodiments. The credential unit 130 includes a chip 131 and an induction coil 132. The chip 131 is used to store credential data 133. In some embodiments, the credential unit 130 is a contactless chip card.

在一些實施例中，晶片131位於憑證單元130的內部夾層而非位於表層。在另一些實施例中，憑證資料133為金融XML憑證(Financial XML)。 In some embodiments, the chip 131 is located on the inner interlayer of the voucher unit 130 instead of on the surface layer. In other embodiments, the credential data 133 is a financial XML credential (Financial XML).

在一些實施例中，憑證單元130符合ISO14443 Type A、ISO14443 Type B以及Felica規範規格中的一或多者。不同規範規格具有不同的調變、編碼方式或是不同的感應時間。舉例來說，遵守ISO14443 Type A規範的憑證單元130採取修正米勒編碼(Miller code)，遵守ISO14443 Type B規範的憑證單元130則採取非歸零編碼NRZ。 In some embodiments, the credential unit 130 complies with one or more of ISO14443 Type A, ISO14443 Type B, and Felica specifications. Different specifications have different modulation, encoding methods or different induction times. For example, the voucher unit 130 that complies with the ISO14443 Type A standard adopts the modified Miller code, and the voucher unit 130 that complies with the ISO14443 Type B standard adopts the non-return-to-zero code NRZ.

第3圖為根據一些實施例所繪示的金融業務系統100與主控裝置101的協同操作流程圖。為了方便說明，第3圖之操作流程係參照第1圖來做說明，但不以其為限。在第3圖所繪示的流程圖中，位於一特定裝置所屬欄位中的流程，即代表由該特定裝置所進行的流程。例如，標記在「主機端系統110」欄位中的流程，則代表由主機端系統110所進行的流程；標記在「客戶端裝置120」欄位中的流程，代表由客戶端裝置120所進行的流程，依此類推。 FIG. 3 is a flowchart of the cooperative operation of the financial business system 100 and the main control device 101 according to some embodiments. For convenience, The operation flow of Fig. 3 is explained with reference to Fig. 1, but is not limited to it. In the flowchart shown in Fig. 3, the process in the column of a specific device represents the process performed by the specific device. For example, the process marked in the "host-side system 110" field represents the process performed by the host system 110; the process marked in the "client device 120" field represents the process performed by the client device 120 The process, and so on.

於流程S310，主控裝置101登入網路銀行網頁或網路銀行電腦應用程式以透過網路140傳送金融業務要求Fq至主機端系統110。當主機端系統110接收到金融業務要求Fq時，主機端系統110便於流程S320中傳送認證選項至主控裝置101，以提示使用者選擇多種認證方式的其中之一以認證金融業務要求Fq。在一些實施例中，認證選項可用各種合適的使用者介面(例如，下拉式選單或多個可勾選的選項)來實現，以供使用者選擇利用讀卡機配合憑證單元130的傳統認證方式，或選擇利用客戶端裝置120配合憑證單元130的認證方式。 In the process S310, the main control device 101 logs on the online banking webpage or the online banking computer application to transmit the financial business request Fq to the host system 110 via the network 140. When the host-side system 110 receives the financial service request Fq, the host-side system 110 facilitates the process S320 to transmit the authentication option to the main control device 101 to prompt the user to select one of multiple authentication methods to authenticate the financial service request Fq. In some embodiments, the authentication options can be implemented using various suitable user interfaces (for example, a drop-down menu or multiple checkable options) for the user to choose a traditional authentication method using a card reader and the credential unit 130 , Or choose the authentication method using the client device 120 and the credential unit 130.

若使用者選擇利用客戶端裝置120進行認證，主機端系統110會執行流程S330以發送認證要求Cq至客戶端裝置120。例如，主機端系統110可以透過網路140發送包含認證要求Cq的封包至客戶端裝置120。 If the user chooses to use the client device 120 for authentication, the host system 110 executes the process S330 to send the authentication request Cq to the client device 120. For example, the host system 110 may send a packet containing the authentication request Cq to the client device 120 via the network 140.

在一些實施例中，金融業務系統100包含多個客戶端裝置120，且主機端系統110於流程S320中不但會將認證選項傳送至客戶端裝置120，也會將身分選項傳送至客戶端裝置120。身分選項可用各種合適的使用者介面(例如，下拉式選單或多個可勾選的選項)來實現。當使用者於認證選項中選擇利用客戶端裝置120的認證方式後，使用者可進一步於身分選項中指定一特定客戶身分以選擇多個客戶端裝置120中對應於該特定客戶身分的一者進行認證。當主機端系統110接收到使用者選擇之特定客戶身分時，主機端系統110會於流程S330中將該特定客戶身分與客戶資料112進行比對，以傳送認證要求Cq至多個客戶端裝置120中對應於該特定客戶身分的一者。例如，若使用者為企業用戶，則使用者可於身分選項中選擇特定之授權主管，主機端系統110會傳送認證要求Cq至該授權主管之客戶端裝置120，以利用該授權主管之客戶端裝置120進行認證。 In some embodiments, the financial business system 100 includes a plurality of client devices 120, and the host system 110 not only transmits the authentication option to the client device 120, but also transmits the identity option in the process S320. Sent to the client device 120. The identity options can be implemented using various suitable user interfaces (for example, a drop-down menu or multiple checkable options). After the user selects the authentication method using the client device 120 in the authentication options, the user can further specify a specific customer identity in the identity options to select one of the multiple client devices 120 corresponding to the specific customer identity. Certification. When the host-side system 110 receives the specific client ID selected by the user, the host-side system 110 compares the specific client ID with the client data 112 in the process S330 to send the authentication request Cq to the plurality of client devices 120 One that corresponds to the specific customer identity. For example, if the user is an enterprise user, the user can select a specific authorized supervisor in the identity options, and the host-side system 110 will send the authentication request Cq to the authorized supervisor's client device 120 to use the authorized supervisor's client The device 120 performs authentication.

當客戶端裝置120接收到認證要求Cq時，其會執行流程S340以顯示推播通知，進而提示使用者於客戶端裝置120上執行交易應用程式125。當客戶端裝置120執行交易應用程式125時，客戶端裝置120會接著執行流程S350。在一些實施例中，交易應用程式125會先進行登入驗證(例如要求使用者輸入帳號密碼、指紋圖像以及臉孔圖像中至少一者)，待使用者登入成功後客戶端裝置120才會接著執行流程S350。 When the client device 120 receives the authentication request Cq, it executes the process S340 to display the push notification, and then prompts the user to execute the transaction application 125 on the client device 120. When the client device 120 executes the transaction application 125, the client device 120 will then execute the process S350. In some embodiments, the transaction application 125 will first perform login verification (for example, requiring the user to enter at least one of the account password, fingerprint image, and face image), and the client device 120 will not be until the user logs in successfully. Then, the process S350 is executed.

於流程S350中，客戶端裝置120會致能近場通訊模組124和天線123以讀取憑證單元130中的憑證資料133。客戶端裝置120還會要求其使用者輸入身分資料(例如，帳號密碼、指紋圖像以及臉孔圖像中至少一者)。接著，客戶端裝置120會將憑證資料133與身分資料包裝為認證資料Dct，並將認證資料Dct透過網路140傳送至主機端系統110。 In the process S350, the client device 120 will enable the near field communication module 124 and the antenna 123 to read the credential data 133 in the credential unit 130. The client device 120 also asks its user to enter the identity information Data (for example, at least one of account password, fingerprint image, and face image). Then, the client device 120 packages the certificate data 133 and the identity data into authentication data Dct, and transmits the authentication data Dct to the host system 110 through the network 140.

於流程S360中，主機端系統110會比對客戶資料112與接收到的認證資料Dct。若客戶資料112與認證資料Dct相符合時，主機端系統110接著執行流程S370。反之，主機端系統110接著執行流程S380。 In the process S360, the host-side system 110 compares the client data 112 with the received authentication data Dct. If the client data 112 matches the authentication data Dct, the host system 110 then executes the process S370. Otherwise, the host system 110 then executes the process S380.

於流程S370，主機端系統110會執行對應於金融業務要求Fq之金融業務，並可以傳送代表交易完成之訊息給主控裝置101及/或客戶端裝置120。例如，當金融業務要求Fq為大額轉帳要求時，若主機端系統110於流程S360判斷此大額轉帳要求已獲得授權，主機端系統110會於流程S370完成對應的轉帳交易。 In process S370, the host-side system 110 executes the financial service corresponding to the financial service requirement Fq, and can send a message representing the completion of the transaction to the main control device 101 and/or the client device 120. For example, when the financial business request Fq is a large-value transfer request, if the host-side system 110 determines in the process S360 that the large-value transfer request is authorized, the host-side system 110 will complete the corresponding transfer transaction in the process S370.

於流程S380，主機端系統110會拒絕執行對應於金融業務要求Fq之金融業務，且主機端系統110可以傳送代表交易失敗之訊息給主控裝置101及/或客戶端裝置120。 In the process S380, the host-side system 110 will refuse to execute the financial service corresponding to the financial service requirement Fq, and the host-side system 110 may send a message representing the transaction failure to the main control device 101 and/or the client device 120.

前述各流程圖中的流程執行順序，只是示範性的實施例，而非侷限本創作的實際實施方式。例如，在前述的各流程圖中，流程308可和流程310同時進行。另外，在一些實施例中，流程S310和流程S312可以省略，此時可以由使用者決定是否將指紋辨識裝置100切換至休眠狀態。 The execution sequence of the processes in the foregoing flowcharts is only an exemplary embodiment, and does not limit the actual implementation of this creation. For example, in the foregoing flowcharts, the process 308 and the process 310 may be performed simultaneously. In addition, in some embodiments, the process S310 and the process S312 may be omitted. In this case, the user may decide whether to switch the fingerprint recognition device 100 to the sleep state.

雖然本揭示內容已以實施方式揭露如上，然其並非用以限定本揭示內容，任何本領域具通常知識者，在不脫離本揭示內容之精神和範圍內，當可作各種之更動與潤飾，因此本揭示內容之保護範圍當視後附之申請專利範圍所界定者為準。 Although the content of this disclosure has been disclosed in the above manner, it is not intended to limit the content of this disclosure. Anyone with ordinary knowledge in the field can make various changes and modifications without departing from the spirit and scope of this disclosure. Therefore, the scope of protection of this disclosure shall be subject to the scope of the attached patent application.

100:金融業務系統 100: Financial business system

101:主控裝置 101: Master control device

110:主機端系統 110: host system

112:客戶資料 112: Customer Information

120:客戶端裝置 120: client device

125:交易應用程式 125: Trading Application

130:憑證單元 130: voucher unit

140:網路 140: Network

121:記憶體 121: memory

122:處理器 122: processor

123:天線 123: Antenna

124:近場通訊模組 124: Near Field Communication Module

Fq:金融業務要求 Fq: Financial business requirements

Dct:認證資料 Dct: certification information

Cq:認證要求 Cq: Certification requirements

Claims

一種金融業務系統，包含： A financial business system, including:

一主機端系統，存有複數筆客戶資料； A host-side system with multiple client data;

一憑證單元，儲存有一憑證資料； A voucher unit, storing a voucher data;

一客戶端裝置，用於藉由近場通訊讀取該憑證資料，且用於接收一使用者輸入的一身分資料，其中該主機端系統用於回應於一金融業務要求而傳送一認證要求至該客戶端裝置， A client device is used to read the certificate data through near field communication and is used to receive an identity data input by a user, wherein the host system is used to send an authentication request to a financial service request The client device,

其中，該客戶端裝置用於回應於該認證要求，而將一認證資料傳送至該主機端系統，且該認證資料包含該憑證資料與該身分資料， Wherein, the client device is used to respond to the authentication request and send an authentication data to the host system, and the authentication data includes the certificate data and the identity data,

其中，若該主機端系統判定該認證資料符合該些客戶資料時，該主機端系統執行對應於該金融業務要求的一金融業務操作。 Wherein, if the host system determines that the authentication data conforms to the customer data, the host system executes a financial business operation corresponding to the financial business requirement.

如請求項1所述之金融業務系統，其中該金融業務操作包含大額轉帳、約定轉帳以及線上繳款中的至少一者。 The financial business system according to claim 1, wherein the financial business operation includes at least one of large-value transfer, agreed transfer, and online payment.

如請求項1所述之金融業務系統，其中該客戶端裝置包含： The financial service system according to claim 1, wherein the client device includes:

一天線；以及 An antenna; and

一近場通訊(Near-Field communication,NFC)模組，用以藉由該天線與該憑證單元進行資料通訊以接收該憑證資料。 A Near-Field Communication (NFC) module for data communication with the credential unit through the antenna to receive the Credential information.

如請求項3所述之金融業務系統，其中該客戶端裝置更包含： The financial service system according to claim 3, wherein the client device further includes:

一記憶體，用以儲存一交易應用程式；以及 A memory for storing a trading application; and

一處理器，用以執行該交易應用程式，其中藉由該處理器執行該交易應用程式以將該組認證資料傳送至該主機端系統，並比對該些客戶資料與該組認證資料。 A processor for executing the transaction application program, wherein the transaction application program is executed by the processor to transmit the set of authentication data to the host-side system, and compare the customer data with the set of authentication data.

如請求項4所述之金融業務系統，其中當該客戶端裝置接收到該認證要求時，該客戶端裝置顯示一推播通知以提示使用者執行該交易應用程式。 The financial service system according to claim 4, wherein when the client device receives the authentication request, the client device displays a push notification to prompt the user to execute the transaction application.

如請求項3所述之金融業務系統，其中該憑證單元包含一晶片以及一感應線圈，該晶片利用該感應線圈輸出該憑證資料。 The financial business system according to claim 3, wherein the voucher unit includes a chip and an induction coil, and the chip uses the induction coil to output the voucher data.

如請求項1所述之金融業務系統，其中該憑證單元符合ISO14443 Type A、ISO14443 Type B與Felica規範規格中的一或多者。 The financial business system according to claim 1, wherein the credential unit complies with one or more of ISO14443 Type A, ISO14443 Type B, and Felica specifications.

如請求項1所述之金融業務系統，其中該憑證單元為非接觸式晶片卡。 The financial business system according to claim 1, wherein the credential unit is a contactless chip card.

如請求項1所述之金融業務系統，其中該身分資料包含一組帳號密碼、指紋圖像以及臉孔圖像中至少一者。 The financial service system according to claim 1, wherein the identity data includes at least one of a set of account passwords, fingerprint images, and facial images.

如請求項1所述之金融業務系統，其中該客戶端裝置為具有近場通訊功能的行動裝置或平板電腦。 The financial business system according to claim 1, wherein the client device is a mobile device or a tablet computer with a near field communication function.