TWI874795B - Method and system for inspecting and authorizing transactions with virtual credit card numbers - Google Patents

Abstract

The present invention provides a system for inspecting and authorizing transactions with virtual credit card numbers, comprising an inspection module, a storage module and an authorization module. Also provided is a method for inspecting and authorizing transactions with virtual credit card numbers, comprising receiving an authorization request and obtaining a first virtual card number, a first device ID and a first IP address, and storing the same in a storage module; receiving a transaction request and obtaining a second virtual card number, searching in the storage module and obtaining a second device ID and a second IP address; and inspecting whether the second device ID or the second IP address present in a blacklist, and rejecting the transaction request if affirmative.

Description

Virtual card number transaction verification and authorization method and system

The present invention relates to a credit card virtual card number transaction verification and authorization method, and a credit card virtual card number transaction verification and authorization system.

In current mobile payment methods, credit cards can be loaded onto multiple mobile devices, and a mobile device can load multiple credit cards with different card numbers. Counterfeit groups usually load multiple credit cards onto a mobile device for fraudulent transactions.

The current preventive measure in the industry is to control the credit cards that have been used for counterfeit transactions. However, this approach has the following disadvantages: (1) Counterfeit groups can use a single mobile device to continuously swipe multiple credit cards, causing banks to be caught off guard; (2) While controlling credit cards to prevent counterfeit transactions from continuing to occur, it will affect the rights of customers to use the cards and violate the principle of fair treatment of customers; and (3) The number of counterfeit cases involving credit cards loaded on mobile phone transactions is increasing day by day, which will generate huge card replacement costs.

Therefore, there is still an urgent need for a virtual card number transaction verification and authorization method and system, which can effectively prevent the occurrence of counterfeit/swiping transactions and at the same time meet the demand that credit card transactions must be completed in a very short time.

In view of the above-mentioned problems in the prior art, the present invention provides a virtual card number transaction verification and authorization system, which includes: a verification module; a storage module connected to the verification module and storing a blacklist; and an authorization module connected to the verification module and the storage module; wherein: the verification module receives an authorization request and obtains the first virtual card number, the first mobile device ID and the first IP address which are mutually associated therewith, and sends the authorization request to the verification module; The first virtual card number, the first mobile device ID and the first IP address are stored in the storage module; the verification module receives a transaction request and obtains the second virtual card number therefrom, and searches the storage module to obtain the second mobile device ID and the second IP address associated with the second virtual card number; the authorization module compares whether the second mobile device ID or the second IP address appears in the blacklist, and if so, rejects the transaction request.

In some specific embodiments of the present invention, the virtual card number transaction verification and authorization system further includes a blacklist parsing and setting module, which is used to generate the blacklist.

In some specific embodiments of the present invention, the first mobile device ID and the first IP address are associated with a first mobile device.

According to a specific embodiment, the first mobile device ID includes the IMEI, MEID, SEID or a combination thereof of the first mobile device.

According to a specific embodiment, the first IP address is the IP address of the first mobile device when sending the authorization request.

The present invention also provides a virtual card number transaction verification and authorization method, which includes: receiving an authorization request and obtaining a first virtual card number, a first mobile device ID and a first IP address that are mutually associated therefrom, and storing the first virtual card number, the first mobile device ID and the first IP address in a storage module; receiving a transaction request and obtaining a second virtual card number therefrom, querying the storage module for a second mobile device ID and a second IP address associated with the second virtual card number; and comparing whether the second mobile device ID or the second IP address appears in a blacklist stored in the storage module, and if so, rejecting the transaction request.

In some specific embodiments of the present invention, the virtual card number transaction verification and authorization method further includes: providing a blacklist parsing and setting module, which is used to generate the blacklist.

In some specific embodiments of the present invention, the first mobile device ID and the first IP address are associated with a first mobile device, wherein the first mobile device ID may include the IMEI, MEID, SEID or a combination thereof of the first mobile device, and the first IP address is the IP address of the first mobile device when sending the authorization request.

Other purposes and advantages of the present invention are partially described in the following description, or can be understood through the embodiments of the present invention. It should be understood that the above invention content and the following embodiments are only exemplary and explanatory descriptions, and do not limit the present invention as the scope of the patent application.

Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs.

The terms "a" or "an" as used herein, unless otherwise specified, refer to a quantity of at least one (one or more than one).

In one aspect, the present invention provides a virtual card number transaction verification and authorization system, which comprises: A verification module; A storage module connected to the verification module and storing a blacklist; and An authorization module connected to the verification module and the storage module; Wherein: The verification module receives an authorization request and obtains the first virtual card number, the first mobile device ID and the first IP address associated with each other, and stores the first virtual card number, the first mobile device ID and the first IP address in the storage module; The verification module receives a transaction request and obtains the second virtual card number from it, and queries the storage module to obtain the second mobile device ID and the second IP address associated with the second virtual card number; The authorization module compares whether the second mobile device ID or the second IP address appears in the blacklist, and if so, rejects the transaction request.

The virtual card number transaction verification and authorization system of the present invention mainly includes three modules: verification module, storage module and authorization module. The three modules can be implemented by hardware circuits only, or by software and hardware circuits.

According to some specific embodiments of the present invention, the verification module, storage module and authorization module can be set in a server. In a specific embodiment, the server includes a plurality of hardware circuits connected to each other, which are configured to be configured into a plurality of modules, and the modules include the verification module, storage module and authorization module.

The term "connection" used herein includes but is not limited to: electrical connection, signal connection and communication connection. In addition, the connection can be a direct connection or an indirect connection.

The term "obtain" used herein includes but is not limited to: query, analyze, resolve, read and combinations thereof.

On the other hand, the present invention provides a virtual card number transaction verification and authorization method, which includes: receiving an authorization request and obtaining a first virtual card number, a first mobile device ID and a first IP address that are mutually associated therewith, and storing the first virtual card number, the first mobile device ID and the first IP address in a storage module; receiving a transaction request and obtaining a second virtual card number therefrom, querying the storage module for a second mobile device ID and a second IP address associated with the second virtual card number; and comparing whether the second mobile device ID or the second IP address appears in a blacklist stored in the storage module, and if so, rejecting the transaction request.

According to the present invention, the storage module may include one or more databases. In addition, the storage module may store a blacklist and a plurality of mutually associated virtual card numbers, mobile device IDs and IP addresses. In one piece of data, the mobile device ID and the IP address are associated with a mobile device, which is held by a customer and uses the mobile device to send an authorization request for a credit card virtual card number. The mobile device has a device ID, and the IP address is the IP address of the mobile device when sending the authorization request.

In some specific embodiments of the present invention, the virtual card number transaction verification and authorization system is connected to a credit card issuing organization server, and the authorization request is transmitted to the virtual card number transaction verification and authorization system via the credit card issuing organization server. The issuing organization is, for example, VISA or MasterCard.

The "mobile device" mentioned in this article includes but is not limited to: smart wearable devices, smartphones and tablet computers.

The "mobile device ID" or "device ID" mentioned herein includes but is not limited to: IMEI (International Mobile Equipment Identity), MEID (Mobile Equipment Identifier), SEID (Secure Element Identifier) and a combination thereof. Preferably, the mobile device ID is unique.

The virtual card number transaction verification and authorization system of the present invention may further include: a blacklist parsing and setting module, which is used to generate the blacklist. Similarly, the virtual card number transaction verification and authorization method of the present invention may further include: providing a blacklist parsing and setting module, which is used to generate the blacklist.

According to the present invention, the blacklist analysis and setting module can add high-risk mobile device IDs and/or IP addresses to the blacklist by analyzing transaction-related data that has been confirmed as counterfeit transactions. The blacklist analysis and setting module can also provide a user interface for bank operators to add specific mobile device IDs and/or IP addresses to the blacklist.

A specific implementation example of the virtual card number transaction verification and authorization system of the present invention is described below with reference to FIG. 1 .

As shown in FIG1 , the virtual card number transaction verification and authorization system 100 includes a verification module 110, a storage module 120, an authorization module 130, and a blacklist parsing and setting module 140. The storage module 120 is signal-connected to the verification module 110 and stores a blacklist. The authorization module 130 is signal-connected to the verification module 110 and the storage module 120, respectively. In addition, the virtual card number transaction verification and authorization system 100 is communicatively connected to the card issuing organization server 200, for example, via an Internet connection.

For each electronic message sent from the card issuing organization server 200 and generated when the credit card is loaded on the mobile device, the verification module 110 reads and pre-retains the device ID of the mobile device written in the electronic message and the IP address of the location at the time of loading, and marks the device ID and IP address data.

Subsequently, when a virtual card number transaction occurs (i.e., when a transaction request is received), the verification module 110 uses the tag index to concatenate the device ID and IP address retained during loading to perform a blacklist comparison. The authorization module 130 compares whether at least one of the device ID or IP address appears in the blacklist. If so, the virtual card number transaction is rejected.

A specific embodiment of the virtual card number transaction verification and authorization method of the present invention is described below with reference to FIG. 2 .

The provided virtual card number transaction verification and authorization method can be performed as follows. As a preparatory operation or basic operation, for each electronic message generated when a credit card is loaded on a mobile device, the device ID of the mobile device written in the electronic message and the IP address of the location at the time of loading are read and reserved in advance (i.e., an authorization request is received and the first virtual card number, the first mobile device ID and the first IP address associated with each other are obtained therefrom, and the first virtual card number, the first mobile device ID and the first IP address are stored in a storage module) (not shown in the figure). When there is an actual transaction with a virtual card number, the second virtual card number is obtained from the transaction request, and the second mobile device ID and the second IP address associated with the second virtual card number are queried in the storage module (in the form of KEY value index concatenation) (step S110). Then, the second mobile device ID or the second IP address is compared to see whether it appears in a blacklist stored in the storage module. If so, the transaction request is rejected, otherwise, the transaction request is approved.

Accordingly, by pre-reading and accessing the information when the virtual card number is loaded, and establishing a KEY value index to connect transactions for verification, not only does it break through the problem of no device ID or IP address in the virtual card number transaction message for verification, but it also meets the requirement that each credit card transaction must be completed in a very short time. In addition, since the device ID of each mobile device cannot be changed at will, once the device ID is controlled, the counterfeit group will face the problem of increased device replacement costs. Therefore, the device ID control measures can effectively curb the occurrence of fraudulent transactions, and the use of the IP address verification concept can prevent fraudulent losses in areas where counterfeiting is rampant on a large scale.

100: Virtual card number transaction verification and authorization system 110: Verification module 120: Storage module 130: Authorization module 140: Blacklist analysis and setting module 200: Card issuing organization server S110~S120: Steps

FIG. 1 is a system architecture diagram illustrating a specific embodiment of the virtual card number transaction verification and authorization system of the present invention.

FIG. 2 is a flow chart illustrating a specific embodiment of the virtual card number transaction verification and authorization method according to the present invention.

100: Virtual card number transaction verification and authorization system

110: Verification module

120: Storage module

130: Authorization module

140: Blacklist parsing and setting module

200:Card issuing organization server

Claims (10)

A virtual card number transaction verification and authorization system, comprising: a verification module; a storage module connected to the verification module and storing a blacklist, the blacklist substantially consisting of a plurality of mobile device IDs and a plurality of IP addresses; and an authorization module connected to the verification module and the storage module; Wherein: the verification module receives an authorization request and obtains the first virtual card number, the first mobile device ID and the first IP address which are associated with each other, and stores the first virtual card number, the first mobile device ID and the first IP address in association in the storage module; the verification module receives a transaction request and obtains the second virtual card number, and queries the storage module to obtain the second mobile device ID and the second IP address associated with the second virtual card number; the authorization module compares whether the second mobile device ID or the second IP address appears in the blacklist, and if so, rejects the transaction request, and if not, approves the transaction request. The virtual card number transaction verification and authorization system of claim 1 further includes a blacklist parsing and setting module for generating the blacklist. A virtual card number transaction verification and authorization system as claimed in claim 1, wherein the first mobile device ID and the first IP address are associated with a first mobile device. A virtual card number transaction verification and authorization system as claimed in claim 3, wherein the first mobile device ID includes the IMEI, MEID, SEID or a combination thereof of the first mobile device. As in the virtual card number transaction verification and authorization system of claim 3, wherein the first IP address is the IP address of the first mobile device when sending the authorization request. A virtual card number transaction verification and authorization method, comprising: Receiving an authorization request and obtaining a first virtual card number, a first mobile device ID and a first IP address associated with each other therefrom, and storing the first virtual card number, the first mobile device ID and the first IP address in association in a storage module; Receiving a transaction request and obtaining a second virtual card number therefrom, querying the storage module for a second mobile device ID and a second IP address associated with the second virtual card number; and Comparing whether the second mobile device ID or the second IP address appears in a blacklist stored in the storage module, if so, rejecting the transaction request, if not, approving the transaction request; The blacklist is actually composed of multiple mobile device IDs and multiple IP addresses. The virtual card number transaction verification and authorization method of claim 6 further includes: providing a blacklist parsing and setting module for generating the blacklist. A virtual card number transaction verification and authorization method as in claim 6, wherein the first mobile device ID and the first IP address are associated with a first mobile device. A virtual card number transaction verification and authorization method as claimed in claim 8, wherein the first mobile device ID includes the IMEI, MEID, SEID or a combination thereof of the first mobile device. As in the virtual card number transaction verification and authorization method of claim 8, wherein the first IP address is the IP address of the first mobile device when sending the authorization request.