TW201317916A - Website and network object source verification method - Google Patents

Abstract

A website and network object source verification method provides a verification mark to various online auction and shopping platforms (C2C, B2C, and B2B2C) to guarantee the correctness and undeniability of production information so as to solve issues related to indefiniteness of online transaction credibility. When a supply end intends to sell products, signature for product information can be obtained from private keys of certificate issued by the government or organizations with authority, such as the citizen digital certificate issued by the Ministry of the Interior or the industrial and business certificate from the Ministry of Economic Affairs, so as to confirm the legality of individuals or industrial and business entities. The supply end should also provide legal warranty to the registered products, so as to change the disadvantaged minority of consumers in online transaction and promote the reliability of the supply end to consumers and consumer's rights and interests.

Description

Website and network object source certification method

The present invention relates to a method for authenticating a website and a network object source, and introducing a public key infrastructure (PKI) and related technologies for use in secure e-commerce transactions. Use the government-issued or credible organization to issue certificates, conduct identity verification and identification, and issue safety signs to improve the difficulty of the supplier's fake transaction records and eliminate the possibility of head-to-head. In addition, in addition to the signature and verification techniques, the addition of time stamp technology can confirm the time with a time stamp, which helps to clarify the responsibility.

In the past, e-commerce transactions or online shopping platforms focused on authentication or website transparency checks. Most of the technologies used were based on account password mechanism, mobile phone, credit card, Internet settings or manual review that met international standards. The identity authentication of the user end is not high, and the consumer has low trust in such a mechanism. The invention introduces a public key infrastructure (PKI) enhanced identity authentication technology, which not only improves the security level, but also the certificate endorsement level. Can be raised to the government department.

In the past, e-commerce transactions were less informative about the information content claimed by the product itself. The present invention is not only for identity authentication and website legality check, but also has special features for product information (including: specification, performance, appearance style, brand). , quality, commodity source, depreciation, with or without certification mark, quantity, price, installation fee, freight, gift, warranty, after-sales service, delivery or payment method, remittance account, etc.) to sign, to complete the information Sexual protection is used to ensure the correctness and undeniable content of the product information.

The purpose of the present invention is to provide a method for authenticating websites and network objects to improve the security of e-commerce transactions. In addition to the identity certification and website legality check, the product information is signed to ensure the integrity of the data, to ensure the correctness and undeniable content of the product information. The online transaction platform can also provide a secure transaction space and a shelf-up mode through the invention, and actively verify the certification mark of the supplier, and then issue a security commodity certificate with the security mechanism of the platform itself.

A method for authenticating a website and a network object source that achieves the above object of the invention, and provides various online auction and shopping platform (C2C, B2C, B2B2C) certification marks for ensuring the correctness and undeniable use of the product information content. Introduce public key infrastructure (PKI) and related technologies to apply to secure e-commerce transactions, including: (1) information flow of the overall relationship of e-commerce transactions; (2) website and network object services Architecture; (3) website and network object service process.

(1) The information flow of the overall relationship of e-commerce transactions can be roughly divided into website information, personnel information and product information; website information includes the correctness of website URLs, etc., personnel information includes purchase/seller registration information, credit rating, etc... Etc., the product information is the product description and price information, after-sales service, delivery or payment method for each publication, etc., which are all areas of information flow;

(2) Website and network object service architecture, including the overall architecture of the client, the online trading platform, the website and the network object source authentication service platform, and the credible and credible credential management mechanism;

(3) Website and network object service process, including the overall operation process of the client, website and network object source authentication service platform, online transaction platform and trusted certificate management center and personal or business related database.

Please refer to Figure 1 for an overview of the overall relationship and information flow of e-commerce transactions. The main scope of implementation is the information flow of e-commerce transactions, which refers to the sale and purchase of e-commerce through the online trading platform mechanism. Behavior, the invention is signed by the government department or a credible organization to allow the supplier to sign the merchandise information, and the invention passes the certificate verification and verification certificate to give the certification mark to supply To make their products more competitive.

Please refer to FIG. 2, for the website and network object service architecture diagram, the implementation group includes: client 21 (can be consumer 212 or delivery 211), network transaction platform 22, website and network The object source authentication service platform 23 has a credible and reliable credential management mechanism 24 .

The main structure of the present invention is an online transaction platform 22, and a website and network object source authentication service platform 23, which are described as follows:

(1) Internet Trading Platform 22:

For shopping websites or auction websites, it refers to existing shopping websites opened by Internet Service Companies (ISPs), general companies and individuals, or future emerging online shopping websites.

(2) Website and Internet Object Source Certification Service Platform 23:

When the delivery terminal 211 wants to publish the product information, the website 211 and the network object source authentication service platform 23 enable the delivery terminal 211 to sign the information to be published with its personal or business certificate and upload it to the online transaction platform 22 . After receiving the product information request from the delivery terminal 211, the online transaction platform 22 also immediately verifies the validity of the supplier certificate and the correctness of the signature through the service platform 23, and if verified, allows the product to be published on the certificate. On the internet trading platform 22, a security sign is issued to the item.

When the consumer 212 wants to purchase the product, in order to ensure the correctness of the logo, the online trading platform 22 will also send the supplier 211 and the product information to be inquired to the service platform 23, and the service platform 23 will use the certificate verification service. The validity of the verification voucher and the legality of the delivery end 211 can also be periodically verified to ensure that the security mark passed by the verification is still correct. In addition, the service platform 23 records all the processes of the system operation for future audit.

The main functions of the website and network object source authentication service platform 23 include: reading voucher function, electronic signature making function, electronic signature verification function, voucher validity checking function, and of course website and network object source authentication service platform 23 It can also be combined with other service systems to construct a more complete e-commerce transaction environment, such as: time stamp service system, deposit verification service system, voucher verification service system, etc. The functions are as follows:

a. Read the voucher function: This function is mainly used to read the personal or business certificate of the supplier, and the obtained voucher is used to verify the validity of the voucher and the identity authentication of the supplier, when there is a supplier to log in the product information and To issue a message signature, read the supplier certificate to verify identity and validity;

b. Electronic signature production function: This function mainly provides the electronic signature of the supplier using the personal or business certificate. When there is a supplier to log in the product information, if you want to issue the information signature, provide the supplier to make the electronic certificate. Signature function;

c. Electronic signature verification function: This function is mainly used to verify the correctness of the electronic signature. When the delivery side uploads the signed information to the online trading platform, the online trading platform receives the information. It will verify whether the uploaded signature information is correct through the service platform, or verify the correctness of the signature through the electronic signature verification function of the service platform when the consumer wants to purchase the product;

d. Voucher validity check function: This function is mainly used to check the validity of the voucher. When there is a supplier to log in the product information and want to sign the information, the validity of the voucher for the supplier voucher is checked, or it is consumed. When the person wants to purchase the goods, the validity of the voucher is also verified by the validity check component of the service platform.

Please refer to Figure 3 for the flow chart of website and network object service. The workflow can be analyzed by the consumer and supply side, the online trading platform and the website and network object source authentication service platform. The description is as follows:

(1) The operation process of the goods information registered by the supplier:

When registering each product information, the supplier can use the certificate issued by the government department or the credible organization to sign the registration content, and the delivery terminal provides the time stamp service system through the website and the network object source authentication service platform. Obtain the time stamp and post the product information to the online trading platform after signing the product with the product content to be published on the delivery side. See Figure 4 for detailed steps:

When there is a provider to log in to the online trading platform, the network object source authentication processing webpage connected to the online trading platform;

a. Perform network object source certification operations;

b. Import the connection to the website and the network object source authentication service platform;

c. Read the contents of the business certificate of the supplier and verify the validity of the certificate;

d. obtaining relevant information from the industrial and commercial database;

e. Fill in/import information about business and industry;

f. Sign the online store/commodity related information with the personal or business certificate of the supplier;

g. Website and network object source certification service platform requires verification and verification of documents;

h. Generate commodity safety signs and record safety sign information, supply side signature information, etc. to apply for certification process information in the database;

i. Inform the delivery end to complete the network object source certification operation;

I.j. Waiting for the delivery end to receive the network object source authentication security mark;

J.k. When the supplier receives the certification safety mark, enter the mark number;

K.l. After the mark number is confirmed, the certification safety mark is completed.

(2) The operation process of the online trading platform:

After the online trading platform receives the product information to be published by the supplier, the website and the network object source authentication service platform are used to verify the validity of the supplier certificate and the correctness of the signature. If the verification is passed, the security mark is passed. And allow the information to be posted on the website.

The online trading platform has the obligation and responsibility to maintain the correctness of the "verified safety signs" information. Therefore, the online trading platform should actively check the validity of the documents on a regular basis, or when there are consumers who want to purchase the goods, through the voucher. Verify the service to verify the validity of the voucher to ensure that the information the consumer sees is correct. See Figure 5 for details:

a. Perform network object source certification operations;

b. Import the connection to the website and the network object source authentication service platform;

c. Research and use the inspection or collection function, if it is the inspection function, provide business/commodity related information browsing; if it is to receive the logo function, continue to perform the following steps d~step h;

d. Use the collection mark function to enter the product safety mark number and collect the product safety mark from the online trading platform;

e. The online trading platform verifies the consistency of the product website and the identification number through the website and the network object source authentication service platform;

f. The online trading platform receives the product safety mark from the website and the network object source certification service platform;

g. Assign the commodity safety sign to the corresponding supplier;

h. Place the product safety logo image on the product URL page on the delivery side.

(3) Consumer browsing software process:

When a consumer browses the product to be purchased through the online trading platform, and can see through the online trading platform whether the product has a visual security mark verified by the website and the network object source certification service platform, and provides a view. The effective content of the safety sign. See Figure 6 for details:

a. The consumer enters the online trading platform;

b. Provide the consumer to select the product safety mark;

c. Import the connection to the website and the network object source authentication service platform;

d. Query the supply side data according to the product safety mark number to the website and the network object source certification service platform database;

e. Take out the business related information of the supplier;

f. Website and network object source certification service platform for consistency verification of product website and product safety mark number;

g. verify the validity of the voucher;

h. Obtain business-related information through business-related systems and databases;

i. Provide business/commodity related information to consumers for browsing.

(4) Website and network object source certification service platform operation process:

When the online trading platform provides the consumer browsing or the goods on the supply side, it will be directed to the website and the network object source certification service platform for processing, including the signing and verification of the signing procedures and the issuance of safety signs. The service platform will also be linked to a credible and credible voucher management mechanism and personal or business database. See Figure 7 for details:

a. The source end of the network object source authentication operation, from step b to step f; if the consumer side to query and browse the product safety signs, skip to step g;

b. When the goods are advertised on the supply side, the online store/commodity-related information is signed by the supplier's personal or business certificate;

c. Website and network object source certification service platform for verification and verification of documents;

d. Produce a product safety mark and record it in the database;

e. Inform the supplier to complete the network object source certification operation;

f. Website and Internet Object Source Certification Service Platform will issue the product safety mark to the supplier through the online trading platform;

g. Query the supplier data according to the product safety mark number to the website and the network object source certification service platform database;

h. Take out the business related information of the supply side;

i. verify the consistency of the product website and the product safety mark number;

j. verify the validity of the voucher;

k. Check the status of the business entity;

l. Provide business/commodity related information to the consumer.

The method for authenticating the website and the network object source provided by the invention has the following advantages when compared with other conventional technologies:

(1) The present invention enhances the credibility of the supplier or the business entity of the supplier, and uses the trustworthy certificate issued by the government or the credible organization to perform identity verification and identification.

(2) The invention enhances the purchase confidence of the consumer to the goods sold at the supply end, and uses the trustworthy certificate issued by the government or the credible organization to sign the merchandise, and sign and certificate the merchandise information. Sign to the delivery side.

(3) The invention enhances the willingness of the people to consume, and the e-commerce platform may issue a safety commodity certificate to the re-verified products on time, as a strong basis for enhancing the platform's credibility of the supply end.

(4) The invention introduces the public key infrastructure (PKI) technology applied to e-commerce transactions, in addition to the signature and verification technology, it can also add time stamp technology, multiple signature and verification technology.

(5) The present invention not only checks the identity authentication and the legality of the website, but also signs the product information to ensure the integrity of the data, and is used to ensure the correctness and undeniability of the product information content.

The detailed description of the present invention is intended to be illustrative of the invention, and is not intended to limit the scope of the invention.

In summary, this case is not only innovative in terms of technical application, but also can enhance the above-mentioned multiple functions compared with conventional articles. It should fully comply with the statutory invention patent requirements of novelty and progressiveness, and apply in accordance with the law. I urge you to approve this article. Invention patent application, in order to invent invention, to the sense of virtue.

11. . . Information flow of e-commerce transactions

twenty one. . . Client, including consumer and provider architecture

211. . . Supply side

212. . . Consumer

twenty two. . . Online trading platform

twenty three. . . Website and network object source certification service platform architecture

twenty four. . . Trustworthy credible management mechanism

31. . . Website and Internet Object Source Certification Service Platform

32. . . Online trading platform

33. . . Trusted voucher management center and personal or business related database

34. . . Client, including consumer and delivery processes

Please refer to the detailed description of the present invention and the accompanying drawings, and the technical contents of the present invention and its effects can be further understood; the related drawings are:

Figure 1 is an explanatory diagram of the overall relationship and information flow improvement of e-commerce transactions;

Figure 2 is a diagram of the website and network object service architecture;

Figure 3 is a flow chart of the website and network object services;

Figure 4 is a timing diagram of the operation of the goods registered on the delivery side;

Figure 5 is a timing diagram of the operation of the online trading platform;

Figure 6 is a timing diagram of the operation of the consumer browsing products;

Figure 7 is a timing diagram of the operation of the website and network object source authentication service platform.

twenty one. . . Client, including consumer and provider architecture

211. . . Supply side

212. . . Consumer

twenty two. . . Online trading platform

twenty three. . . Website and network object source certification service platform architecture

twenty four. . . Trustworthy credible management mechanism

Claims (8)

A website and network object source authentication structure mainly includes: a. An online trading platform: for a shopping website or an auction website, generally refers to a shopping website opened by an Internet service company (ISP), a general company, and an individual. , or future emerging online shopping sites; b. A website and network object source certification service platform: when a user wants to auction goods or purchase goods on the online trading platform, the service platform provides a secure and reliable user identity. Or source certification services for goods. For example, the website and the network object source certification structure mentioned in the first application of the patent scope, wherein the website and the network object source certification service platform are provided, and when the supplier wants to publish the product information, the supply is provided through the service platform. The terminal can use its personal or business certificate to sign the information to be published and upload it to the online trading platform. After receiving the product information request from the supplier, the online trading platform will immediately verify the supply through the service platform. The validity of the end certificate and the correctness of the signature, if verified, the goods are allowed to be published on the online trading platform, and a safety sign is issued to the goods. For example, the website and the network object source authentication structure described in the first application of the patent scope, wherein the website and the network object source authentication service platform are provided, and when the consumer wants to purchase the product, in order to ensure the correctness of the full logo, the network The trading platform will also send the supplier and product information to be queried to the service platform. The service platform will verify the validity of the voucher and the legality of the delivery end through the voucher verification service. It can also periodically verify the verification to ensure the verification. The safety mark is still correct. In addition, the service platform will record all the processes of the system operation for future audit. For example, the website and the network object source authentication structure described in claim 1, 2 or 3, wherein the main functions of the website and the network object source authentication service platform include: a. Reading credentials: This function is mainly used for Read the personal or business certificate of the supplier, and obtain the voucher to verify the validity of the voucher and the identity authentication of the supplier. When there is a supplier to log in the product information and want to sign the information, read the supply. End certificate, verify identity and validity; b. Electronic signature production: This function mainly provides the supplier to use the personal or business certificate to make an electronic signature. When there is a supplier to log in the product information, if you want to sign the information, Providing the delivery side with the voucher to create the electronic signature function; c. Electronic signature verification: This function is mainly used to verify the correctness of the electronic signature, when the supplier sends the signed information to the online trading platform After receiving the information, the online trading platform will verify whether the uploaded signature information is correct through the service platform, or through the electronic signature of the service platform when the consumer wants to purchase the product. The validity of the certificate verification signature; d. Document validity check: This function is mainly used to check the validity of the voucher. When there is a supplier to log in the product information and want to sign the information, the supplier certificate is checked. The validity of the voucher, or when the consumer wants to purchase the merchandise, also verifies the validity of the voucher through the voucher validity check component of the service platform. A method for authenticating a website and a network object source, which provides a method for operating a supplier to log in product information, and when the supplier logs in each product data, the registration content is performed by using a certificate issued by a government department or a credible organization. Signing, the supplier obtains the time stamp from the website and the network object source certification service platform to the time stamp service system, and signs the product information to the online trading platform after signing the product with the product content to be published on the delivery side. The steps are as follows: a. When the supplier logs into the online trading platform, the network object source authentication operation is performed; b. The connection is imported into the website and the network object source authentication service platform; c. The content of the business certificate of the supplier is read. And verify the validity of the voucher; d. obtain relevant information from the industrial and commercial database; e. fill in/import information related to industry and commerce; f. sign the online store/commodity related information with the personal or business certificate of the supplier; g. Website and network object source certification service platform requires verification and certificate verification; h. Generates product safety signs and records safety signs information, supply end-sign Information...such as applying for the certification process information in the database; i. informing the supplier to complete the network object source certification operation; j. waiting for the supplier to receive the network object source certification security mark; k. when the supplier receives the certification security mark When you need to enter the mark number; l. After the mark number is confirmed, the certification safety mark is completed. A method for authenticating a website and a network object source, which provides a method for operating a network transaction platform, the steps of which are as follows: a. when there is a consumer/supply terminal for network object source authentication operation; b. importing the connection to the website and the network Road object source certification service platform; c. Research use of inspection or collection function, if it is inspection function, provide business/commodity related information browsing; if it is to receive the flag function, continue to perform the following steps d~step h; d. The function needs to input the product safety mark number and collect the product safety mark from the online trading platform; e. The online trading platform verifies the consistency of the product website and the identification number through the website and the network object source authentication service platform; f. The trading platform receives the product safety mark from the website and the network object source certification service platform; g. assigns the product safety mark to the corresponding supply end; h. places the product safety mark picture on the product website page of the supply side. A website and network object source authentication method, which provides a platform for a consumer to browse a product flow. When a consumer browses an item to be purchased through an online transaction platform, the product can be seen through the online transaction platform. There are visual safety signs verified by the website and the network object source certification service platform, and provide effective content for viewing the security signs. The detailed operation steps are as follows: a. the consumer enters the online trading platform; b. provides the consumer terminal Select the product safety sign; c. Import the connection to the website and the network object source certification service platform; d. Search the supplier data according to the product safety mark number to the website and the network object source certification service platform database; e. Industry-related information on the goods terminal; f. Website and network object source certification service platform for the consistency verification of the product website and the product safety mark number; g. Validation of the certificate; h. Obtaining business through the industry-related system and database Related information; i. Provide business/commodity related information to consumers to browse. A method for authenticating a website and a network object source authentication service, the steps of which are as follows: a. The source side performs the network object source authentication operation, and proceeds from step b to step f; if the consumer side queries and browses the product safety sign, skip to Step g; b. When the goods are advertised on the supply side, the online store/commodity-related information is signed by the supplier's personal or business certificate; c. The website and the network object source certification service platform are checked and verified; d. Produce a product safety mark and record it in the database; e. Inform the supplier to complete the network object source certification operation; f. Website and network object source certification service platform to issue the product safety mark to the supply through the online trading platform g; Query the supplier data according to the product safety mark number to the website and the network object source certification service platform database; h. take out the business related information of the supplier; i. Align the product website with the product safety mark number Verify; j. verify the validity of the voucher; k. check the status of the business entity; l. provide business/commodity related information to the consumer.