TW201816646A - Electronic transaction authentication method and system using mobile device application program providing high security in financial electronic transaction - Google Patents

Abstract

In an electronic transaction authentication method and system, when a mobile device executes a saved application program related to a financial transaction and determines that the obtained login authentication data is identical to the saved reference login authentication data related to a user, a login request comprising the account identification data related to the user is transmitted to a server for determining whether the mobile device is allowed to log in a user account assigned to the user. When the obtained transaction authentication data corresponding to an electronic transaction is identical to the saved reference transaction authentication data related to the user during the period of logging in the user account, a transaction request comprising the account identification data and transaction data is transmitted to the server for determining whether to execute the electronic transaction.

Description

Electronic transaction authentication method and system using mobile device application

The present invention relates to electronic transaction authentication, and particularly to an electronic transaction authentication method and system using a mobile device application.

With the rise of financial technology (FinTech), investors generally can perform financial-related operations by executing an application installed on a mobile device, such as online stock checking, electronic trading of electronic stock orders, and the like. During the execution of the application, before the user logs in to the user's electronic account or wants to conduct an electronic transaction, it is usually necessary to manually enter user-related information, such as the user's electronic account number and password, as a determination of whether to allow the user to log in. Electronic account or identification of the user who performed the electronic transaction. However, this manual input operation may cause dilemma due to unavoidable misoperations, such as password lock or inability to log in / transaction due to pressing the wrong input key. In this way, for the stock investor, for example, the above-mentioned user identity verification method may not meet the requirements of "speed", "security" and "convenience". Therefore, there is still room for improvement in existing user identity verification methods.

Therefore, an object of the present invention is to provide an electronic transaction authentication method, which can overcome at least one disadvantage of conventional techniques.

Therefore, the electronic transaction authentication method of the present invention is implemented by a mobile device, which belongs to a user and includes a storage module, a biometric acquisition unit, a user input-output unit, and a A communication module connected to a server via a communication network, and a processing unit electrically connected to the storage module, the biometric extraction unit, the user input-output unit and the communication module. The method includes the following steps: (A) using the processing unit to store an application program related to financial transactions, and account identification data, reference login authentication data, and reference transaction authentication data related to the user in the storage module, and the account identification data Pre-stored in the server and including a user account corresponding to a user account provided by the server and assigned to the user, and a password unique to the user account, the reference login authentication The data includes at least one of the account identification data and the login biometric data, and the login biometric data is related to at least one lifetime. Feature, the reference transaction authentication data includes at least one of the account identification data and the transaction biometric data, the transaction biometric data is related to at least one biometric; (B) by the processing unit, by executing the storage module The stored application program obtains login authentication data through operation of at least one of the user input-output unit and the biometric extraction unit, and determines the login authentication data and the reference login stored in the storage module. Whether the authentication information is the same; (C) by the processing unit, when it is determined that the login authentication data is the same as the reference login authentication data, through the execution of the application program, an account ID containing the account stored in the storage module is generated Data login request, and the login request is transmitted to the server through the communication network through the communication module, so that the server is based on the received login request from the mobile device and the stored account identification data , Decide whether to allow the mobile device to log in to the user account; (D) when logging in to the mobile device When the processing unit receives the transaction data of an electronic transaction related to the user account during the user account period, the processing unit, the execution of the application program, and the user input and output unit and the biometric feature The operation of at least one of the acquisition units obtains the transaction authentication data, and determines whether the transaction authentication data is the same as the reference transaction authentication data stored in the storage module; and (E) the processing unit determines When the transaction authentication data is the same as the reference transaction authentication data, a transaction request including the account identification data stored in the storage module and the received transaction data is generated through execution of the application, and the transaction request is generated. The communication module is transmitted to the server through the communication network, so that the server decides whether to execute the electronic transaction according to the transaction request received from the mobile device and the stored account identification data.

Therefore, another object of the present invention is to provide an electronic transaction authentication system that can overcome at least one of the disadvantages of conventional techniques.

Therefore, the electronic transaction authentication system of the present invention includes a mobile device, which belongs to a user, and includes a group of communication modules configured to connect to a server via a communication network, a storage module, and one that can be operated to generate A user input and output unit for inputting data, a biometric extraction unit that can be used to capture at least one person-related feature to generate corresponding biometric data, and a processing unit. The storage module is configured to store an application related to financial transactions, and account identification information, reference login authentication information, and reference transaction authentication information related to the user. The account identification data has been stored in the server in advance and Including a user account corresponding to a user account provided by the server and assigned to the user, and a password uniquely corresponding to the user account, the reference login authentication data including the account identification data and login At least one of the biometric data, the login biometric data is related to at least one biometric, the reference transaction authentication data includes at least one of the account identification data and the transaction biometric data, and the transaction biometric data is related to at least one biometric feature. The processing unit is electrically connected to the communication module, the storage module, the biometric extraction unit, and the user input-output unit, wherein when the processing unit executes the application program stored in the storage module, the processing The unit receives login authentication data from at least one of the user input-output unit and the biometric extraction unit and is generated by operations of the user input-output unit and the biometric extraction unit. And determine whether the login authentication data is the same as the reference login authentication data stored in the storage module, and when it is determined that the login authentication data is the same as the reference login authentication data, a storage file containing the storage module is generated. The login request of the account identification data, and the login request is transmitted to the server through the communication network through the communication module, so that the server is based on the received login request data from the mobile device and the stored The account identification information determines whether the mobile device is allowed to sign in to the user account. When the processing unit receives transaction data of an electronic transaction generated by the operation of the user input and output unit and related to the user account during the mobile device login to the user account, the processing unit receives the data from Transaction authentication data generated by the operation of at least one of the user input-output unit and the biometric extraction unit and the operation of the at least one of the user input-output unit and the biometric extraction unit, and determining the transaction Whether the authentication data is the same as the reference transaction authentication data stored in the storage module, and when it is determined that the transaction authentication data is the same as the reference transaction authentication data, an account identification data and The received transaction request of the transaction data, and the transaction request is transmitted to the server through the communication network through the communication module, so that the server according to the received transaction request from the mobile device and the stored Of the account identification information to determine whether to execute the electronic transaction.

The effect of the present invention is that before the mobile device sends the login / transaction request to the server, the processing unit of the mobile device must first execute the application to perform the identity verification procedure of the login / transactioner in order to be secure. And correctly verify user identity. In particular, in the identity verification procedure, the reference login / transaction authentication data used by the processing unit as a comparison target is in addition to the account identification data (i.e., the user account and the Password), it may also contain data related to at least one biometric, or it may contain not only the account identification data but also data related to at least one biometric, so before logging into the user account and executing the electronic transaction, Users can indeed be authenticated with a high degree of security.

Referring to FIG. 1, an electronic transaction authentication system 100 according to an embodiment of the present invention includes a mobile device 1 and a server 2. The mobile device 1 belongs to a user, and the user has a user account, such as a securities account, provided by a financial institution such as a securities company and assigned to the user. The server 2 belongs to the financial institution and can decide whether to allow the mobile device 1 to log in to the user account and whether to perform any transaction related to the user account.

The mobile device 1 includes a set of a communication module 11, a storage module 12, a user input-output unit 13, and a biometric acquisition unit that are connected to the server 2 via a communication network 200 such as the Internet. 14, and a processing unit 15. In this embodiment, the mobile device 1 may be implemented as, for example, a smart phone, and is not limited thereto. In other implementation forms, the mobile device 1 may also be implemented as a tablet computer.

The user input-output unit 13 may be operated to generate input data. In this embodiment, the user input-output unit 13 may be implemented as, for example, a touch display panel, but is not limited thereto.

The biometric extraction unit 14 can be used to acquire at least one human-related feature to generate corresponding biometric data. In this embodiment, the biological feature extraction unit 14 can capture features of multiple people, such as human voice, fingerprint face, and iris, and includes a radio module 141 for collecting audio signals of human voice, a The image capturing module 142 for capturing images such as faces and iris, and an image scanning module 143 for scanning images such as fingerprints are not limited thereto.

The processing unit 15 is electrically connected to the communication module 11, the storage module 12, the user input-output unit 13, and the biometric extraction unit 14.

In this embodiment, the server 2 has previously stored account identification data 3 related to the user, and the account identification data 3 includes, for example, a user account 31 corresponding to the user account and a unique corresponding account The password 32 of the user account 31, and the server 2 also provides an application 4 related to financial transactions.

The following will exemplarily explain how the electronic transaction authentication system 100 uses the application program 4 to execute an electronic transaction authentication procedure in conjunction with FIG. 1 and FIG. 2. The electronic transaction certification process includes the following steps.

In step S21, after establishing a connection between the communication module 11 and the server 2, the processing unit 15 downloads the application from the server 2 through the communication module 11 and through the communication network 200 Formula 4.

In step S22, the processing unit 15 initially executes the application 4 downloaded in step S21 to obtain the account identification data 3 through the operation of the user input-output unit 13 and via the user input-output unit 13 and the creature The operation of at least one of the feature extraction units 14 obtains the reference login authentication data 5 and the reference transaction authentication data 6, and obtains the account identification data 3, the reference login authentication data 5, the reference transaction authentication data 6 and the obtained The application program 4 is stored in the storage module 12. It is worth noting that the reference login authentication data 5 contains at least one of the account identification data 3 and the login biometric data, and the login biometric data is related to at least one biometric, and the reference transaction authentication data 6 contains the account At least one of the identification data 3 and the transaction biometric data, and the transaction biometric data is related to at least one biometric. In this embodiment, the at least one biometric related to the login biometric data is selected from any combination of, for example, a voice feature, a fingerprint feature, an iris feature, and a face feature. Similarly, the at least one biometric related to the transaction biometric data is selected from, for example, any combination of sound features, fingerprint features, iris features, and face features, but is not limited thereto.

More specifically, when the processing unit initially executes the application program 4, the user input-output unit 13 causes the account identification data 3 to be generated by human operation. It is worth noting that the password 32 of the account identification data 3 may be A password given by the server 2, or a password determined by the user. Therefore, when receiving the account identification data 3 generated by the user input-output unit 13, the processing unit 15 encrypts the received account identification data 3 before storing it in the storage module 12, in other words, the The processing unit 15 stores the account identification data 3 in an encrypted form, but not limited to this. In addition, according to the user's decision, the user input / output unit 13 or (and) the biometric extraction unit 14 (commonly) generates the reference login authentication data 122 and the reference transaction authentication data 123. For example, if the reference login authentication data includes only the login biometric data and the login biometric data is only related to a single biometric such as an iris feature, in this case, only the biometric acquisition unit is needed The image capture module 142 of 14 captures the eyes of the user to capture image data with iris characteristics as the login biometric data, and on the other hand, if the reference transaction authentication data includes the account identification data and the transaction biometrics When the transaction biometric data is related to two biometric features such as fingerprint characteristics and iris features, in this case, not only the account identification data 3 needs to be generated by the user input-output unit 13, but also by The image capturing module 142 of the biometric capturing unit 14 captures the eyes of the user to capture image data with iris characteristics and scans the user's fingerprint with the image scanning module 143 to capture fingerprints with fingerprint characteristics Data, in this case, the image data and the fingerprint data together constitute the transaction biometric data. Therefore, when receiving the reference login authentication data 122 and the reference transaction authentication data 123 (commonly) generated by the user input-output unit 13 or (and) the biometric extraction unit 14, the processing unit 15 changes the The reference login authentication data 122 and the reference transaction authentication data 123 are stored in the storage module 12.

From the above, it can be seen that steps S21 and S22 can be regarded as actually using the application 4 to perform pre-preparation procedures before logging into the user account. Authentication data to be used to authenticate the user during the process.

When a user wants to log in to the user account through the mobile device 1, in step S23, the processing unit 15 receives input from the user by executing the application 4 stored in the storage module 12. At least one of the output unit 13 and the biometric extraction unit 14 and login authentication data generated by the operation of the user input and output unit 13 and the at least one of the biometric extraction unit 14. According to the previous example, at this stage, similar to the reference login authentication data, the login authentication data received by the processing unit 15 includes, for example, only those who want to log in as captured by the image capture module 142 of the biometric capture unit 14 Eyes and captured image data with iris characteristics.

In step S24, the processing unit 15 determines whether the login authentication data is the same as the reference login authentication data 5 stored in the storage module 12. When the determination result is positive, the flow proceeds to step S25, otherwise the flow proceeds to step S26. More specifically, according to the previous example, if the processing unit 15 determines that the login authentication data (i.e., the image data having the iris characteristics of the user to be logged in) is the same as the reference login authentication data 5 (i.e. The image data), meaning that the identity of the user who wants to log in to the user account is successfully verified. Conversely, if the processing unit 15 determines that the login authentication data is different from the reference login authentication data 5, it means that the identity of the user who wants to log in is not successfully verified (that is, authentication fails). In this case, the process The unit 15 outputs an error message indicating the identity verification failure to the user input-output unit 13 and controls the user input-output unit 13 to display the error message (step S26).

In step S25, when the processing unit 15 determines that the login authentication data is the same as the reference login authentication data 5, it generates a login request including the account identification data 3 stored in the storage module 12, and sends the login The request is transmitted to the server 2 through the communication network 200 through the communication module 11. It is worth mentioning that, for transmission security, the account identification data 3 included in the login request may be in an encrypted form, for example, but not limited thereto.

In step S27 following step S25, when receiving the login request from the mobile device 1, the server 2 determines whether the account identification data 3 of the login request is the same as the stored account identification data 3. When the determination result is positive, the server 2 allows the mobile device 2 to log in to the user account (step S28), otherwise the flow proceeds to step S29. In this way, the server 2 can decide whether to allow the mobile device 1 to log in to the user account according to the received login request and the stored account identification data 3. It is worth mentioning that if the account identification data 3 of the login request is encrypted data, the server 2 must first decrypt the account identification data by a decryption method corresponding to the previous encryption method, and then compare them. Ideally, the account identification data 3 of the login request should be the same as the account identification data 3 stored by the server 2. However, if, for any reason, the account identification data 3 of the login request is defective during the data transmission process, the server 2 may determine that the account identification data 3 of the login request is different from that of the server 2. Stored account identification data 3. In this case, the server 2 sends an error message indicating the login failure to the mobile device 1 via the communication network 200 (step S29).

When the mobile device 1 logs in to the user account, when a user wants to perform an electronic transaction related to the user account, following step S30 in step S28, the processing unit 15 receives the information via the user After the transaction data of the electronic transaction generated by the operation of the input-output unit 13 is executed, the application program 4 stored in the storage module 12 is received from the user input-output unit 13 and the biometric extraction unit 14 At least one of them and transaction authentication data generated by the operation of the at least one of the user input-output unit 13 and the biometric extraction unit 14. According to the previous example, at this stage, similar to the reference transaction authentication data, the login authentication data received by the processing unit 15 includes, for example, not only the account data generated by the user input-output unit 13 but also the biometrics. The image data captured by the image capture module 142 of the capture unit 14 with the characteristics of iris captured by the eye of the trader, and the image scan module 142 scans the fingerprint of the desired trader and has fingerprint characteristics Fingerprint information.

In step S31, the processing unit 15 determines whether the transaction authentication data is the same as the reference transaction authentication data 6 stored in the storage module 12. When the determination result is positive, the flow proceeds to step 32, otherwise the flow returns to step S26. More specifically, according to the previous example, if the processing unit 15 determines that the login authentication data (that is, the account data, and the image data and the fingerprint data related to the trader) is the same as the reference transaction authentication data 6 (that is, the Account identification data, and the image data and the fingerprint data related to the user), it means that the identity of the user who wants to trade is successfully verified. Conversely, if the processing unit 15 determines that the login authentication data is different from the reference transaction authentication data 6, it means that the user identity of the intended trader has not been successfully verified (that is, the verification fails). In this case, the process The unit 15 outputs an error message indicating the identity verification failure to the user input-output unit 13 and controls the user input-output unit 13 to display the error message (step S26).

In step S32, when the processing unit 15 determines that the transaction authentication data is the same as the reference login authentication data 6, it generates a transaction request including the account identification data 3 and the transaction data stored in the storage module 12, The transaction request is transmitted to the server 2 via the communication network 200 through the communication module 11. It is worth mentioning that, for transmission security, the account identification data 3 and the transaction data included in the transaction request may be in an encrypted form, for example, but not limited thereto.

In step S33, when receiving the transaction request from the mobile device 1, the server 2 determines whether the account identification data 3 of the transaction request is the same as the stored account identification data 3. When the determination result is positive, the server 2 executes the electronic transaction (step S34), otherwise the flow proceeds to step S35. In this way, the server 2 can decide whether to execute the electronic transaction according to the received transaction request and the account identification data 3 stored. It is worth mentioning that if the account identification data 3 and the transaction data requested by the transaction are encrypted data, the server 2 must first decrypt the account identification data and the transaction by a decryption method corresponding to the previous encryption method. Data decryption. Ideally, the account identification data 3 of the transaction request should be the same as the account identification data 3 stored by the server 2. However, if there is a defect in the account identification data 3 of the login request during the data transmission process, the server 2 may determine that the account identification data 3 of the transaction request is different from that of the server 2 Stored account identification data 3. In this case, the server 2 sends an error message indicating the transaction failure to the mobile device 1 via the communication network 200 (step S35).

In addition, in addition, in this embodiment, the application 4 provides a function for changing the password. Therefore, when the user wants to update the password 32 of the account identification data 3, during the login of the user account by the mobile device 1, the processing unit is executed by the application 4 with an input from the user. The update password of the output unit 13 updates the account identification data 3 stored in the storage module 12, and uses the communication module 11 and the updated account identification stored in the storage module 12 through the communication network. Data 3 is sent to the server. Therefore, when the server 2 receives the account identification data 3 from the mobile device 1, the server 2 updates the stored account identification data 3 with the received account identification data 3.

In summary, before the mobile device 1 sends the login / transaction request to the server 2, the processing unit 15 of the mobile device 4 must first execute the application 4 to verify the identity of the login / trader Process to securely and correctly verify user identity. In particular, in the identity verification procedure, the login / transaction authentication data 5/6 used by the processing unit 15 as a comparison target is in addition to account information that can contain a conventional text form (that is, the user account 31 And the password 32), it may also contain data related to at least one biometric, or it may contain not only the account identification data but also data related to at least one biometric, so when logging in to the user account and executing the electronic Before the transaction, the user identity can be verified with a high degree of security. On the other hand, if the reference login / transaction authentication information 5/6 contains only information related to a single biological feature (such as iris feature or fingerprint feature), compared with the conventional practice, the user is required to manually enter account information (that is, the user Account and password), this identity verification procedure is not only relatively convenient for users, but also ensures a high degree of security and can be completed relatively quickly. Therefore, the purpose of the invention can be achieved.

However, the above are only examples of the present invention. When the scope of implementation of the present invention cannot be limited in this way, simple equivalent changes and modifications made according to the scope of the patent application and the content of the patent specification of the present invention are still Within the scope of the invention patent.

100‧‧‧ electronic transaction authentication system

1‧‧‧ mobile device

11‧‧‧Communication Module

12‧‧‧Storage Module

13‧‧‧User input and output unit

14‧‧‧Biometric Extraction Unit

141‧‧‧Radio Module

142‧‧‧Image shooting module

143‧‧‧Image Scanning Module

2‧‧‧Server

3‧‧‧Account Identification Information

31‧‧‧user account

32‧‧‧password

4‧‧‧ Apps

5‧‧‧Refer to login credentials

6‧‧‧ Reference transaction certification information

200‧‧‧Communication Network

S21 ~ S35‧‧‧step

Other features and effects of the present invention will be clearly presented in the embodiments with reference to the drawings, in which: FIG. 1 is a block diagram exemplarily illustrating an implementation of the electronic transaction authentication system using a mobile device application of the present invention Example; and FIG. 2 is a flow chart exemplifying how the embodiment uses a mobile device application to perform an electronic transaction authentication procedure.

Claims (12)

An electronic transaction authentication method is implemented by a mobile device, which belongs to a user and includes a storage module, a biometric acquisition unit, a user input-output unit, and a communication network. A communication module connected to a server, and a processing unit electrically connected to the storage module, the biometric extraction unit, the user input-output unit and the communication module. The method includes the following steps: (A) borrowing The processing unit stores an application program related to financial transactions, and account identification data, reference login authentication data, and reference transaction authentication data related to the user in the storage module, and the account identification data has been stored in advance The server also includes a user account corresponding to a user account provided by the server and assigned to the user, and a unique password corresponding to the user account, and the reference login authentication data includes the account At least one of identification data and registered biometric data, the registered biometric data is related to at least one biometric, and the parameter The test transaction authentication data includes at least one of the account identification data and the transaction biometric data, and the transaction biometric data is related to at least one biometric; (B) by the processing unit, executing the stored in the storage module An application, and obtains login authentication data through the operation of at least one of the user input-output unit and the biometric extraction unit, and determines whether the login authentication data and the reference login authentication data stored in the storage module are The same; (C) by the processing unit, when it is determined that the login authentication data is the same as the reference login authentication data, the execution of the application program generates a login containing the account identification data stored by the storage module Request, and the login request is transmitted to the server through the communication network through the communication module, so that the server determines whether to receive the login request from the mobile device and the account identification data stored Allow the mobile device to log in to the user account; (D) log in to the user account on the mobile device After the processing unit receives transaction data of an electronic transaction related to the user account, the processing unit executes the application program through the processing unit and the user input / output unit and the biometric extraction unit. At least one of the operations obtains the transaction authentication data, and determines whether the transaction authentication data is the same as the reference transaction authentication data stored in the storage module; and (E) the processing unit determines the transaction authentication When the data is the same as the reference transaction authentication data, a transaction request including the account identification data stored in the storage module and the received transaction data is generated through execution of the application, and the transaction request is passed through the application. The communication module transmits to the server through the communication network, so that the server decides whether to execute the electronic transaction according to the transaction request received from the mobile device and the stored account identification data. According to the electronic transaction authentication method described in claim 1, before step (A), the method further includes the following steps: (F) connecting the server through the communication module through the communication module; (G) using the processing Unit, downloading the application program from the server via the communication network and the communication module, and executing the application program to obtain the account identification data through the operation of the user input and output unit and via the user input and output unit And at least one operation of the biometric extraction unit obtains the reference login authentication data and the reference transaction authentication data. The electronic transaction authentication method according to claim 1, wherein, in step (A), the processing unit stores the account identification data in an encrypted form. The electronic transaction authentication method according to claim 1, wherein, in step (A), the password of the account identification data is a password given by the server, or a password determined by the user . The electronic transaction authentication method according to claim 1, wherein in step (A), the at least one biometric associated with the login biometric data is selected from the group consisting of a voice feature, a fingerprint feature, an iris feature, and a face feature. Any combination, and the at least one biometric associated with the transaction biometric data is selected from any combination of sound features, fingerprint features, iris features, and face features. An electronic transaction authentication system includes: a mobile device belonging to a user and including a communication module configured to connect to a server via a communication network, and a storage module configured to store a related financial transaction Application, and account identification information, reference login authentication information, and reference transaction authentication information related to the user, the account identification information has been stored in the server in advance and includes a corresponding one provided by the server and assigned A user account for the user's user account, and a password unique to the user account, the reference login authentication data including at least one of the account identification data and the login biometric data, the login biometric data Related to at least one biometric, the reference transaction authentication data includes at least one of the account identification data and transaction biometric data. The transaction biometric data is related to at least one biometric. A user input and output unit can be operated to Generate input data, a biometric capture unit that can be used to capture A feature related to a person to generate corresponding biometric data, and a processing unit electrically connected to the communication module, the storage module, the biometric extraction unit, and the user input-output unit; wherein when the When the processing unit executes the application program stored in the storage module, the processing unit receives at least one of the user input-output unit and the biometric extraction unit and passes the user input-output unit and the creature The feature authentication unit has the login authentication data generated by the operation of the at least one of them, and determines whether the login authentication data is the same as the reference login authentication data stored in the storage module, and determines that the login authentication data is the same as the When the reference login authentication data is the same, a login request containing the account identification data stored in the storage module is generated, and the login request is transmitted to the server through the communication network through the communication module, so that the server Based on the received login request data from the mobile device and the stored account identification data, Determine whether the mobile device is allowed to log in to the user account, and the processing unit receives an electronic generated by the operation of the user input and output unit and related to the user account during the time when the mobile device logs in to the user account After the transaction data of the transaction, the processing unit receives at least one of the user input-output unit and the biometric extraction unit and passes the at least one of the user input-output unit and the biometric extraction unit. The transaction authentication data generated by the operation, and determine whether the transaction authentication data is the same as the reference transaction authentication data stored in the storage module, and when it is determined that the transaction authentication data is the same as the reference transaction authentication data, a A transaction request containing the account identification data stored by the storage module and the received transaction data, and transmitting the transaction request to the server through the communication network through the communication module, so that the server Receiving the transaction request from the mobile device and the stored account identification information, Decide whether to execute the electronic transaction. The electronic transaction authentication system according to claim 6, further comprising the server, wherein the server provides the application, and the application stored in the storage module of the mobile device is downloaded from the server, When the processing unit initially executes the application program, the processing unit receives the account identification data from the user input-output unit and generated by the operation of the user input-output unit, as well as from the user input-output unit and the biometric feature. The reference login authentication data and the reference transaction authentication data generated by at least one of the acquisition units and generated by the operation of the user input-output unit and the at least one of the biometric extraction units, and the account identification data The reference login authentication information and the reference transaction authentication information are stored in the storage module. The electronic transaction authentication system according to claim 7, wherein: when the user wants to update the password of the account identification data, the processing unit executes the application via the application while the mobile device logs in to the user account, Updating the account identification data stored in the storage module with an update password from the user input and output unit, and using the communication module and the communication network to store the updated and stored The account identification data is transmitted to the server; and when the server receives the account identification data from the mobile device, the server uses the received account identification data to update the stored account identification data. The electronic transaction authentication system according to claim 7, wherein: when receiving the login request from the mobile device, the server determines whether the account identification data of the login request is the same as the stored account identification data, And when determining that the account identification information of the login request is the same as the stored account identification information, allowing the mobile device to log in to the user account; and when the server receives the transaction request from the mobile device, It is determined whether the account identification data of the transaction request is the same as the stored account identification data, and when it is determined that the account identification data of the transaction request is the same as the account identification data stored, the electronic transaction is executed. The electronic transaction authentication system according to claim 6, wherein the processing unit of the mobile communication device encrypts the received account identification data before storing it in the storage module. The electronic transaction authentication system according to claim 6, wherein the password of the account identification data is a password given by the server, or a password determined by the user. The electronic transaction authentication system according to claim 6, wherein: the at least one biometric related to the login biometric data is selected from any combination of a voice feature, a fingerprint feature, an iris feature, and a face feature, and the transaction The at least one biometric associated with the biometric data is selected from any combination of sound features, fingerprint features, iris features, and face features; and the biometric extraction unit of the mobile device includes a device for collecting audio signals. A radio module, an image capturing module for capturing images, and an image scanning module for scanning images.