TWI833313B - Chip card transaction system based on transaction risk control and its implementation method - Google Patents

Abstract

A chip card transaction system based on transaction risk control includes a mobile device and a back-end server. The back-end server can calculate a risk score of the chip card. The mobile device installs or executes an application program (APP), which is Configured to at least: drive the mobile device to use a first wireless communication protocol (such as NFC protocol) to communicate with a chip card also located in the first communication range, to read a card information of the chip card, and to respond to a risk score in accordance with a decision Under the condition that the mobile device does not need to use the second wireless communication protocol to communicate with the back-end server through an Internet, the mobile device determines whether to allow the transaction request of the chip card; and drives the mobile device to use the first wireless communication protocol , after the transaction is completed, an updated card information associated with the transaction request is written to the chip card. The present invention also provides an implementation method of a chip card transaction system.

Description

Chip card transaction system based on transaction risk control and its implementation method

The present invention relates to the technology of using wireless communication technology and mobile devices to manage and verify chip card transactions. In particular, it refers to a mobile device that can establish cooperation with a back-end server through an application, and complete online or Offline real-time chip card transactions, and use a wireless communication protocol different from that used by the back-end server in response to the transaction request result (for example, the mobile device uses NFC technology, the back-end server uses Wi-Fi or mobile network protocol ), writes the updated card information (such as information including card balance) associated with the transaction request to the chip card, thereby achieving "transaction risk control based on transaction risk control" that enables real-time chip card transactions regardless of time and location. Chip card transaction system and its implementation method."

With the frequency of electronic transactions, most people now use chip cards such as debit cards, credit cards, and transportation ticket cards to replace the traditional cash payment method. However, if consumers want to use chip cards in physical stores or online For purchases in stores, transactions must be completed through the merchant's end or a self-prepared proximity/swipe card reader and must be online. In addition, for transportation ticket cards, if consumers want to make value-added transactions, The use of debit transactions is also limited to stations or merchants (such as supermarkets) equipped with induction reading and writing equipment, which is quite inconvenient. Therefore, how to come up with a method that can solve the aforementioned problems while keeping risks under control? "A chip card transaction system and its implementation method based on transaction risk control" is a problem that needs to be solved so that chip card transactions are not limited by time and usage areas.

In order to achieve the above object, the present invention discloses a chip card transaction system based on transaction risk control. The chip card transaction system includes a mobile device and a back-end server. The mobile device includes a communication module, a processor and a memory. The processor is electrically connected to the communication module and the memory respectively. The mobile device loads or executes an application program.

Following the above, the application is used to drive the communication module to use a first wireless communication protocol (such as NFC communication protocol) to conduct wireless communication with a chip card to read and write card information of the chip card (such as card ID, financial card number, etc.) , credit card number, card account balance, previous transaction record, current transaction record, card issuance date, card expiration date, card type, card issuer information, card transaction serial number, bank code, value-added transaction flag, add Any combination of value transaction amount, value-added transaction date, message authentication code, card anti-counterfeiting verification code, card identity, identity expiration date, county and city code, depending on the transaction type and card type of the transaction request).

Following the above, the communication module is also used to use a second wireless communication protocol (such as Wi-Fi, mobile communication, etc. whose communication distance/effective communication range is greater than the first wireless communication protocol) and a back-end server through an Internet road for communication.

In different embodiments, both the mobile device and the backend server can decide whether to allow a transaction request of the chip card, and can also calculate a risk score of the chip card based on a risk parameter.

The key to the present invention is that when the chip card and the communication module are in a first communication range that can communicate with each other using the first wireless communication protocol, the application program can further respond to the risk score meeting a decision condition and perform the communication in the communication module. In a mode where the group does not need to be connected to the back-end server, or the communication module does not need to be connected to the Internet, in this offline mode, transaction requests from the chip card are allowed to generate a transaction request result (such as successful deduction, successful top-up) , the card is swiped successfully), and the communication module uses the first wireless communication protocol to write the updated card information associated with the transaction request into the chip card.

Based on the above, the mobile device of the present invention can establish cooperation with the back-end server through the application. When the mobile device of the present invention and the chip card are within the first communication range that can communicate with each other using the first wireless communication protocol, and When the risk is controllable, the mobile device can decide through the application whether to allow the transaction request of the chip card (in offline mode), and can respond to the transaction request result as allowed, and the first communication between the chip card and the mobile device Within the communication range, a wireless communication protocol/wireless communication technology different from that used by the back-end server is used to write the updated card information associated with the transaction request to the chip card using, for example, the NFC protocol, thereby achieving real-time transactions with the chip card. The beneficial effects are not limited by time and usage areas, effectively improving the convenience of instant transactions with chip cards.

The invention also proposes an implementation method of a chip card transaction system based on transaction risk control, a computer-readable recording medium and a computer program product.

In order to enable you, the review committee, to clearly understand the purpose, technical features and effectiveness of the present invention, the following description is provided with illustrations, please refer to it.

Please refer to Figures 1 and 2, a chip card transaction system based on transaction risk control. The chip card transaction system 10 includes: a mobile device 101 and a back-end server 102.

Please refer to Figure 1. In one embodiment, the mobile device 101 includes a processor 1011, a communication module 1012 and a memory 1013. The processor 1011 is electrically connected to the communication module 1012 and the memory 1013 respectively.

Please refer to Figures 1 and 2. In one embodiment, the mobile device 101 installs or executes an application APP. The data of the application APP (such as multiple commands and actions of the application APP in the functions disclosed in the present invention) Temporary data generated after the device 101 executes the application program APP) is stored in the memory 1013. The application APP is configured to at least drive the communication module 1012 to use a first wireless communication protocol P1 to perform wireless communication with a chip card C. It should be noted that at this time, the communication module 1012 and the chip card C are in the first state where they can use each other. The wireless communication protocol P1 enables communication within a first communication range. Next, the application APP is configured to drive the communication module 1012 to read a piece of card information I from the chip card C within the first communication range, and then cause the processor 1011 executing the application APP to verify the chip based on the card information I. Whether the card C is a valid card and whether to allow a transaction request T of the chip card C is determined. In addition, the application APP can also be configured to drive the communication module 1012 to read and write the card information I of the chip card C based on the first wireless communication protocol P1. In this way, the mobile device 101 can allow the transaction request T of the chip card C within the first communication range through the application APP, effectively improving the convenience of real-time transactions with the chip card.

Please refer to Figures 1 and 2. In one embodiment, the mobile device 101 allows the processor 1011 to verify the card information I through the application APP, and can store the card information I corresponding to the chip card C in the memory 1013. ', so that when the processor 1011 performs card verification, it can compare the card information I with the card information I' stored in the memory 1013, and after the verification is completed, the processor 1011 generates a card verification result C_V.

As an example, the first wireless communication protocol P1 can be a near field communication (NFC) protocol, a Bluetooth Low Energy (BLE), a high-speed Bluetooth communication protocol (Bluetooth HS), or a ZigBee communication protocol. protocol, a Sub-1GHz communication protocol, a Z-Wave communication protocol, an Ultra-Wideband communication protocol (UWB), a Wi-Fi communication protocol, a HiperLAN communication protocol, or any combination thereof, but not limited to this .

Please refer to Figures 1 and 2. In one embodiment, the card information I that can be used to verify the validity of the card, or as a decision factor for whether to allow a chip card transaction, can be a card data, a transaction data, One or a combination of one verification information and one identity information, but is not limited to this.

As an example, the card information may include any combination of card ID, card account balance (Electronic Value, EV), card issuance date, card expiration date, card type, and card issuer information. In addition, if the chip card C is a debit card or a credit card, the card information may further include a debit card number or a credit card number.

As an example, the transaction data may be the previous transaction record, this transaction record, card transaction serial number, bank code (bank_code), value-added transaction flag (autoload enable flag), value-added transaction amount, value-added transaction Any combination of dates.

Wherein, as an example, the verification information may include a message authentication code (Message Authentication Code, referred to as MAC, also known as a message authentication code, a file message authentication code or a key code), a card anti-counterfeiting verification code (Counterfeit Proof Data (CPD for short) or one of the two. In one embodiment, when the processor 1011 executing the application APP can verify whether the chip card C is a valid card based on the card information I, the card information I required for verification should at least include the verification data.

Please refer to Figures 1 and 2. In one embodiment, in addition to storing the message authentication code of the chip card C in the chip card C, the mobile device 101 can also calculate another message authentication code through the application 101. When the processor 1011 for executing the application APP verifies whether the chip card C is a valid card based on the card information I, the mobile device 101 and the chip card C can mutually check the message authentication sent to each other based on the first wireless communication protocol P1. Whether the codes are the same or corresponding to each other, so as to ensure that the content of the message (Message, such as card ID, card expiration date, card production date, card type, etc.) during the transmission process between the chip card C and the mobile device 101 has not been Changed to achieve the purpose of verifying the card with two-way authentication. The message authentication code is generated by executing a MAC algorithm on the message using a key, but is not limited to this.

Please refer to Figures 1 and 2. In one embodiment, the card anti-counterfeiting verification code can be determined by several fields of the card information (such as card ID, card expiration date, card production date, card type) , generated by calculating the message authentication code, and before executing/allowing each transaction request T, the mobile device 101 can check the card anti-counterfeiting verification code through the application APP to avoid the possibility of counterfeit cards.

As an example, the identity information may include one of a card identity (such as ordinary, student, preferential status, etc.), an identity expiration date (only needs to be set for special identities), and a county or city code (area_code) or any combination thereof.

Please refer to Figures 1 and 2. In one embodiment, the communication module 1012 can use a second wireless communication protocol P2 to communicate with the back-end server 102 through an Internet. The back-end server 102 can include A transaction subsystem 1021 and a card management subsystem 1022.

As an example, the second wireless communication protocol P2 can be one of a Wi-Fi communication protocol, a HiperLAN communication protocol, and a mobile communication protocol (such as 2G, 2.5G, 3G, 3.5G, 4G LTE, 5G, etc.) or combination thereof. Wherein, the mobile communication protocol refers to the communication method by which the mobile device 101 can connect to the Internet through the base station of a telecommunications operator.

Please refer to Figures 1 and 2, especially the dotted line part of Figure 2. In one embodiment of the present invention, the transaction subsystem 1021 of the back-end server 102 can determine whether to allow the transaction request T of the chip card C to generate A transaction request result T_A. The card management subsystem 1022 is used to calculate a risk score R_S associated with the chip card C based on a risk parameter, and can also be used to verify whether the chip card C is a valid card and generate a card verification result C_V. The risk score R_S, the card verification result C_V and the transaction request result T_A can all be sent to the mobile device 101 through the Internet based on the second wireless communication protocol P2, and updated in the memory 1013 of the mobile device 101 regularly or irregularly. , it can be avoided that the communication module 1012 needs to use the second wireless communication protocol P2 to receive the risk score R_S of the chip card C from the back-end server 102 every time, effectively saving network transmission traffic.

Wherein, as an example, the risk parameter may be one of the card information, the transaction information, the identity information, a historical transaction information, a credit limit, a credit score of the card information I, or any combination thereof, The historical transaction information may be historical transaction data and/or historical transaction behavior analysis data.

Please refer to Figures 1 and 2. In one embodiment, the risk score R_S can be based on the second wireless communication protocol P2 and transmitted from the backend server 102 to the mobile device 101 through the application APP. It can also be based on the second wireless communication protocol P2. The communication protocol P1 is written by the mobile device 101 and stored in the chip card C. For example, if the transaction information of the risk parameters shows that the previous transaction was successful, the historical transaction information has no abnormalities, the identity information has no doubts, the card information has no abnormalities, and the amount of this transaction is displayed. If the transaction is a small amount, the backend server 102 can calculate a higher risk score R_S for the chip card C. On the contrary, if the transaction information of the risk parameters shows that the previous transaction failed, the historical transaction information has occasional abnormalities, the identity information shows that the card identity is student, the card information is not abnormal, and the current transaction If the transaction amount is not a small-amount transaction, the backend server 102 may calculate a lower risk score R_S for the chip card C, for example The risk score R_S is, but the above is only an example and is not limited to this.

Please refer to Figures 1 and 2. In one embodiment, for the aforementioned mechanism of calculating the risk score R_S, the application APP can also be connected to the backend server 102 or the communication module 1012 when the communication module 1012 is not connected. In a first mode that does not need to be connected to the Internet (also called an offline state), the offline state drives the processor 1011 to calculate the risk score R_S of the chip card C based on the risk parameter, whereby the risk score R_S can be sent to the backend server 102 by the communication module 1012 through the Internet based on the second wireless communication protocol P2, so as to be updated in the memory of the backend server 102 regularly or irregularly.

Please refer to Figures 1 and 2. In one embodiment, the application APP can further respond to the risk score R_S meeting a decision condition when the communication module 1012 is not connected to the backend server 102, or the communication module The group 1012 does not need to be connected to the Internet in the first mode (i.e., offline state). In this offline state, the transaction request T of the chip card C is allowed to cause the processor 1011 to generate the transaction request result T_A, and the communication module 1012 Using the first wireless communication protocol P1, the updated card information I_U associated with the transaction request T is written to the chip card C in an offline state, and the user can confirm the transaction request result T_A (such as transaction permission) in the application APP. . In this way, the mobile device 101 can use the application APP to allow the transaction request T of the chip card C in an offline state under controllable risks, effectively improving the convenience of real-time transactions with the chip card. In addition, the transaction request T of the chip card C can be triggered by the chip card C sending to the communication module 1012 (that is, the chip card C serves as the initiating device and the communication module 1012 serves as the slave device), but the transaction request T of the chip card C can also be triggered by the communication module 1012. The module 1012 is triggered by sending to the chip card C (that is, the communication module 1012 serves as the initiating device and the chip card C serves as the slave device).

Please refer to Figures 1 and 2. In one embodiment, in order to determine whether to allow the transaction request T of the chip card C, the mobile device 101 can process at least all of the card information I in the first mode. The above verification data is used for verification, and a card verification result C_V is generated, but this is only an example and is not limited to this. In addition, the information that may be included in the verification data has been mentioned above and will not be described again here.

Please refer to Figures 1 and 2. In one embodiment, the card verification result C_V, the transaction request result T_A and the updated card information I_U generated by the mobile device 101 can all be linked to the mobile device 101 after the transaction is completed. In the second mode of the back-end server 102, the communication module 1012 sends it to the back-end server 102 regularly or irregularly through the second wireless communication protocol P2 for updating.

Please refer to Figures 1 and 2. In one embodiment, the communication distance/effective communication range of the wireless communication technology using the first wireless communication protocol P1 (i.e., the aforementioned first communication range) can be smaller than that of the wireless communication technology using the first wireless communication protocol P1. A second communication distance of the wireless communication technology of the second wireless communication protocol P2.

Please refer to Figures 1 and 2. In one embodiment, the application APP can also respond to the risk score R_S to meet the decision-making condition, for example, the risk score R_S , and in the first mode (which can also be called offline state) in which the communication module 1012 is not connected to the back-end server 102, or the communication module 1012 does not need to be connected to the Internet, the processor 1011 is caused by the application APP to The card information I' stored in the memory 1013 is compared with the card information I read from the chip card C by the communication module 1012 based on the first wireless communication protocol P1, thereby achieving the function of verifying the chip card C in an offline state. , and the processor 1011 generates the card verification result C_V, and allows the user to confirm the card verification result C_V (for example, the card verification is successful) in the application APP. In this way, the mobile device 101 can use the application APP to achieve a technical means of offline verification of card validity under a controllable risk situation (that is, the risk is low).

Please refer to Figures 1 and 2. In one embodiment, after the transaction is completed, the card verification result C_V generated by the mobile device 101 can be communicated through the second mode in which the mobile device 101 is connected to the back-end server 102. The module 1012 sends the information to the backend server 102 regularly or irregularly through the second wireless communication protocol P2 for updating.

Please refer to Figures 1 and 2. In one embodiment, the first wireless communication protocol P1 can be the near field communication (NFC) protocol, and the situation in this embodiment is that the communication module 1012 is not connected to The first mode (also called offline state) of the backend server 102. More specifically, when the application APP of this embodiment needs to drive the communication module 1012 to use the first wireless communication protocol P1 to perform wireless communication with the chip card C, the chip card C needs to be located in the communication module 1012 to achieve near field communication. Within the communication range, for example, the location of the chip card C needs to be close to the NFC sensing area of the mobile device 101 (not shown in the figure).

Please refer to Figure 3, which shows the implementation method S of the chip card transaction system based on transaction risk control of the present invention, which is applied to a mobile device 101 and a chip card C. Please refer to Figures 1 and 2 in conjunction. The implementation method S of the chip card transaction system includes the following steps.

In step S1 (the application drives the communication module to use the first wireless communication protocol in response to the transaction request of the chip card to verify whether the chip card is a valid card), an application APP installed or executed on the mobile device 101 responds to A transaction request T of the chip card C drives the communication module 1012 to communicate with the chip card C using a first wireless communication protocol P1, and reads a card information I from the chip card C, and can drive the processor through the application program APP 1011 Compare the card information I of the chip card C with the card information I' stored in the memory 1013 of the mobile device 101 to verify whether the chip card C is a valid card.

In step S2 (the application responds to the risk score meeting the decision conditions and allows the card transaction request from the mobile device in the mode where the communication module is not connected to the back-end server), the application APP responds to a The risk score R_S meets a decision condition (for example, the risk score R_S ) and in a first mode (also called an offline state) in which the communication module 1012 is not connected to the backend server 102, or the communication module 1012 does not need to be connected to the Internet, in this offline state, the mobile device The processor 1011 of 101 allows the transaction request T of the chip card C to generate a transaction request result T_A, so that the communication module 1012 uses the first wireless communication protocol P1 to write the updated card information I_U associated with the transaction request T in Chip card C.

In step S3 (the application responds to the risk score not meeting the decision conditions and allows the card transaction request from the backend server in the mode where the communication module is connected to the backend server), the application APP responds to the chip card C The risk score R_S does not meet the decision conditions (for example, the risk score R_S ), and the driving communication module 1012 uses a second wireless communication protocol P2 to communicate with a back-end server 102 through an Internet, so as to connect the communication module 1012 to a second mode of the back-end server 102 Next, the transaction subsystem 1021 of the backend server 102 determines whether to allow the transaction request T of the chip card C.

Among them, as an example, the mobile device 101, processor 1011, application program APP, communication module 1012, memory 1013, back-end server 102, chip card C, The card information I, the risk parameters, the risk score R_S, the first wireless communication protocol P1, the second wireless communication protocol P2, the functions and aspects of these technical features have been explained in Figures 1 to 2. For example, we won’t go into details here.

Please refer to Figure 3. In one embodiment, the present invention further provides a non-transitory computer-readable recording medium associated with at least one instruction to define the implementation method S of the aforementioned chip card transaction system, and relevant descriptions of each step. The embodiment shown in Figure 3 has been described in detail and will not be described again here.

Please refer to Figure 3. In one embodiment, the present invention further provides a computer-readable recording medium associated with at least one instruction to define the implementation method S of the aforementioned chip card transaction system. The relevant descriptions of each step have been described in detail. The embodiment shown in Figure 3 will not be described again here.

Please refer to Figure 3. In one embodiment, the present invention further provides a computer program product. When the computer system loads a plurality of instructions of the computer program product, it can at least complete the implementation method of the chip card transaction system as mentioned above. S. Relevant descriptions of each step have been described in detail in the embodiment shown in Figure 3 and will not be repeated here.

Please refer to Figure 4, which is a schematic diagram of a chip card transaction system according to another embodiment (1) of the present invention. The technology is similar to that of the embodiment shown in Figures 1 to 3. Please refer to Figures 1 to 3 together. As can be seen from Figure 3, the main difference is that the transaction request T in this embodiment can be a value-adding request or a debit request. In this embodiment, the application APP of this embodiment drives the communication module 1012 to read the card containing the card account balance from the chip card C based on the first wireless communication protocol P1 (such as but not limited to the NFC protocol). After receiving the information I, in response to the risk score R_S meeting the decision conditions, the processor 1011 allows the recharge request or the debit request of the chip card C in the first mode (ie, offline state), and allows the processor 1011 generates an updated balance data (which belongs to one of the aspects of the card account balance), and causes the communication module 1012 to use the first wireless communication protocol P1 to associate it with the value-adding request or the debit request. The updated balance information is written into an electronic wallet account W or a bank account (not shown in the figure) linked to the chip card C. In this way, the mobile device 101 can use the application APP to achieve the function of one-click value-adding or one-click deduction of money in the offline state under controllable risks, effectively improving the convenience of real-time transactions with chip cards.

Please refer to Figure 4 again. Similarly, the application APP of this embodiment can further respond to the risk score R_S not meeting the decision conditions, and then in the second mode (that is, the situation where the mobile device needs to be connected to the Internet). The terminal server 102 determines whether to allow the value-adding request or the debit request of the chip card C.

Please refer to Figure 4. In one embodiment, after the transaction is completed, the updated balance data generated by the mobile device 101 can be used by the communication module in the second mode in which the mobile device 101 is connected to the backend server 102. 1012 is sent to the backend server 102 regularly or irregularly through the second wireless communication protocol P2 for update.

Please refer to Figure 4. In one embodiment, if the transaction request T is the deduction request, the application program APP executed by the mobile device 101 verifies whether the chip card C is based on the card information I in the driver processor 1011. Before the card is valid (that is, before step S1 in Figure 3 is executed), the transaction data of the card information I read from the chip card C by driving the communication module 1012 may at least include: the previous transaction record, all One or a combination of the transaction record and the card transaction serial number. As for other data fields that may be included in the transaction data, they have been mentioned above and will not be described again.

Please refer to Figure 4. In one embodiment, if the transaction request T is the deduction request, the application program APP executed by the mobile device 101 verifies whether the chip card C is based on the card information I in order to drive the processor 1011. When the card is valid (that is, when step S1 in Figure 3 is executed), the communication module 1012 of the mobile device 101 reads the card information I from the chip card C based on the first wireless communication protocol P1. One or a combination of the transaction information, the verification information and the identity information (the types have been mentioned above and will not be repeated here), in this embodiment, may at least include, for example, the card ID, the card Account balance (EV), the previous transaction record, the current transaction record, the card transaction serial number, the card anti-counterfeiting verification code, the card identity, the card expiration date, the county and city The code is for example only and is not limited to this.

Please refer to Figure 4. In one embodiment, if the transaction request T is the value-added request, the application program APP executed by the mobile device 101 verifies whether the chip card C is based on the card information I in the driver processor 1011. Before the card is valid (that is, before step S1 in Figure 3 is executed), the transaction data of the card information I read from the chip card C by driving the communication module 1012 may include at least the previous transaction record, the This transaction record, the card transaction serial number, the bank code, the automatic recharge flag, the recharge transaction amount, and the recharge transaction date. As for other data fields that may be included in the transaction data, they have been mentioned above and will not be described again.

Please refer to Figure 4. In one embodiment, if the transaction request T is the value-added request, the application program APP executed by the mobile device 101 verifies whether the chip card C is based on the card information I in order to drive the processor 1011. When the card is valid (that is, when step S1 in Figure 3 is executed), the communication module 1012 of the mobile device 101 reads the card information I from the chip card C based on the first wireless communication protocol P1. One or a combination of the transaction information, the verification information and the identity information (the types have been mentioned above and will not be repeated here). In this embodiment, it may include, for example, the card ID, the card account Balance (EV), the previous transaction record, the current transaction record, the card transaction serial number, the card anti-counterfeiting verification code, the card identity, the card expiration date, the county and city code , the bank code, the automatic top-up flag, the top-up transaction amount, and the top-up transaction date, but are only examples and are not limited to this.

Please refer to Figure 5, which is a schematic diagram of a chip card transaction system according to another embodiment (2) of the present invention. The technology is similar to that of the embodiment shown in Figures 1 to 3. Please refer to Figures 1 to 3 together. As can be seen from Figure 3, the main difference is that the card management subsystem 1022 of the backend server 102 in this embodiment is used to verify whether the chip card C is a valid card, and the card management subsystem 1022 stores card information corresponding to the chip card C. I', in contrast, the memory 1013 of the mobile device 101 in this embodiment does not store the card information I', or does not store the complete card information I', so the mobile device 101 cannot verify whether the chip card C is valid. card.

Please refer to Figure 5, and please refer to Figures 1 to 3 together. In this embodiment, the application APP uses the first wireless communication protocol P1 to communicate wirelessly with the chip card C in the driver communication module 1012 to from After the chip card C reads the card information I, the application APP needs to drive the communication module 1012 to use the second wireless communication protocol P2 to communicate with the back-end server 102 through the Internet to send at least one card verification request to the back-end. Server 102. Subsequently, the back-end server 102 can compare the received card information I with the card information I' stored in its own memory (not shown in the figure) to verify whether the chip card C is a valid card. . Thereby, after the communication module 1012 receives the card verification result C_V in a second mode connected to the backend server 102, the user can confirm the card verification result C_V in the application APP (for example, the card verification is successful).

Please refer to Figure 5, and please refer to Figures 1 to 3 together. In this embodiment, the aforementioned technical means of performing card verification by the back-end server 102 instead of the mobile device 101 can also be responded to in the application APP Execute when the risk score R_S does not meet the decision-making conditions.

Please refer to Figure 5 again, and please refer to Figures 1 to 3 in conjunction. In this embodiment, the transaction subsystem 1021 of the backend server 102 can also be used to determine whether to allow the transaction request T of the chip card C, and The transaction subsystem 1021 stores the card information I' corresponding to the chip card C; in contrast, the memory 1013 of the mobile device 101 in this embodiment does not store the card information I', or does not store the complete card information I'. , and the transaction request T of chip card C cannot be allowed. More specifically, after the application APP of this embodiment drives the communication module 1012 to use the first wireless communication protocol P1 to perform wireless communication with the chip card C to read the card information I from the chip card C, the application APP then drives The communication module 1012 uses the second wireless communication protocol P2 to communicate with the back-end server 102 through the Internet to send the transaction request T of the chip card C to the back-end server 102. Thereafter, the transaction subsystem 1021 can perform the transaction according to the card. The verification result C_V (whether generated by the mobile device 101 or the card management subsystem 1022 of the backend server 102), the risk score R_S and the card information I determine whether to allow the transaction request T. Afterwards, the backend server 102 can at least Send a transaction request result T_A to the communication module 102, so that the communication module 1012 receives the transaction request result T_A in the second mode connected to the backend server 102, and then uses the first wireless communication protocol P1 to associate After the update of the transaction request T, the card information I_U is written to the chip card C, and the user can confirm the transaction request result T_A (for example, transaction permission) in the application APP.

Please refer to Figure 5 again, and please refer to Figures 1 to 3 in conjunction. In this embodiment, the aforementioned technical means of deciding whether to allow the transaction request T of the chip card C is determined by the back-end server 102 instead of the mobile device 101 , can be executed again when the application APP responds that the risk score R_S does not meet the decision-making conditions.

As an example, the mobile device 101 of the present invention can be a portable wireless communication device such as a smart phone, a tablet computer, a wearable device, etc., and the operating system of the mobile device 101 can be an Android system or an iOS system, but this is not the case. limit.

Among them, as an example, the backend server 102 of the present invention can be one or more independent server computers that provide connection services, or a server running in the form of a virtual machine (Virtual Machine), or a virtual dedicated host (Virtual Machine). A server running in the form of Private Server), or a public cloud, or a private cloud, etc., but is not limited to this.

Please refer to Figures 1 to 2. As an example, the application APP of the present invention can be a native application (Native Mobile App) loaded on the mobile device 101, or it can be executed/run on the mobile device 101. A mobile web application (Web Mobile App) or a progressive web application (Progressive Web App, PWA), but are not limited to this.

Among them, as an example, the processor 1011 of the present invention has functions such as logical operations, temporary storage of operation results, and saving of data operation instruction locations. It can include but is not limited to a single processor and the integration of multiple microprocessors. For example, it can include a A central processing unit (CPU), a virtual processor (vCPU), a microprocessor (MPU), a microcontroller (MCU), an application special integrated circuit (ASIC), a programmable logic device (PLD) , a tensor processing unit (TPU), a digital signal processor (DSP), etc., but are not limited to this.

Among them, as an example, the communication module 1012 of the present invention can apply various communication service interfaces. For example, it can integrate a Bluetooth communication unit, a WLAN communication unit, a mobile communication unit, an NFC communication unit, a ZigBee communication unit, a One of a Z-Wave communication unit and a UWB communication unit or any combination thereof. The mobile communication unit can apply 2G, 2.5G, 3G, 3.5G, 4G LTE, 5G wireless communication interfaces, but not This is the limit.

Among them, as an example, the memory 1013 of the present invention can be eMMC (embedded MultiMedia Card) flash memory, UFS (Universal Flash Storage) flash memory, NVMe (NVM Express) flash memory, solid-state drive (solid-state drive). state drive/disk), LPDDR (Low Power Random Access Memory) memory, dynamic random access memory (DRAM) or static random access memory (SRAM), if used as a non-transitory computer, it can After reading the media, the memory 1013 can further store at least one instruction related to the implementation method S of the aforementioned chip card transaction system, and the at least one instruction can be accessed and executed by the processor 1011.

Among them, as an example, the chip card C of the present invention can be a credit card that uses the first wireless communication protocol P1 to perform wireless communication with the mobile device 101, a cash stored-value card, a stored-value card with an electronic payment account, and a spending card. Debit Card, an RFID chip card, a citizen card issued by the county and city government that integrates the function of a stored value card/a senior card/a love card/a love companion card/a digital student ID card, an integrated stored value card issued by the school It is a chip card that functions as a student ID card/a staff identification card or an enterprise-issued identification card that integrates the function of a stored-value card. The chip card C can also be any chip card that complies with the EMV standard.

In summary, it can be seen that after the present invention is implemented, it can at least be achieved under the condition that the risk is controllable (that is, the risk score meets the decision-making conditions, such as the risk score R_S ), allowing the mobile device to complete the chip processing using the application (APP) in an offline state (or when the mobile device does not need to connect to the back-end server when deciding whether to allow the transaction and verify whether the chip card is valid). Offline card transactions (such as balance top-up/stored value, debit transactions, card swipe transactions) achieve the beneficial effect of chip card transactions being not limited by time and usage area, effectively improving the convenience of instant chip card transactions.

The above are only preferred embodiments of the present invention, and are not intended to limit the scope of the present invention. Anyone skilled in the art may make equal changes and modifications without departing from the spirit and scope of the present invention. should be covered by the patent scope of the present invention.

To sum up, the invention has patent requirements such as "industrial applicability", "novelty" and "progressivity"; the applicant has submitted an invention patent application to the Jun Bureau in accordance with the provisions of the Patent Law.

10 Chip card transaction system 101 Mobile Devices 1011 Processor 1012 Communication module 1013 Memory APP APPLICATION C_V Card verification result T_A Transaction request result P1 The first wireless communication protocol P2 The second wireless communication protocol C Chip Card T Transaction Request I Card Information I’ Card information I_U Updated card information R_S Risk score W E-Wallet Account 102 Back-end server 1021 Trading subsystem 1022 Card management subsystem S? S1 The application responds to the transaction request of the chip card and drives the communication module to use the first wireless communication protocol to verify whether the chip card is a valid card. S2 The application allows the card transaction request from the mobile device in response to the risk score meeting the decision criteria in a mode where the communication module is not connected to the backend server. S3 The application allows the card transaction request from the back-end server in response to the risk score not meeting the decision criteria while the communication module is connected to the back-end server.

Figure 1 is a schematic diagram (1) of a chip card transaction system according to an embodiment of the present invention.

Figure 2 is a schematic diagram (2) of a chip card transaction system according to an embodiment of the present invention.

Figure 3 is a flow chart of a chip card transaction method according to an embodiment of the present invention.

Figure 4 is a schematic diagram of a chip card transaction system according to another embodiment (1) of the present invention.

Figure 5 is a schematic diagram of a chip card transaction system according to another embodiment (2) of the present invention.

10 Chip card transaction system 101 Mobile Devices 1011 Processor 1012 Communication module 1013 Memory APP APPLICATION P1 The first wireless communication protocol P2 The second wireless communication protocol C Chip card 102 Back-end server 1021 Trading subsystem 1022 Card management subsystem

Claims (10)

A chip card transaction system based on transaction risk control, including: A mobile device that executes an application program, which includes a communication module and a processor, the processor is electrically connected to the communication module; and The application is used to drive the communication module to communicate with a chip card using a first wireless communication protocol to read card information from the chip card. The chip card is associated with a risk score, and the risk score is based on a Generated from risk parameters; where The application is configured to allow the processor to generate a transaction by allowing a transaction request of the chip card in a first mode in which the communication module does not need to be connected to an Internet in response to the risk score meeting a decision condition. request result, and cause the communication module to use the first wireless communication protocol to write the updated card information associated with the transaction request into the chip card. For example, the chip card transaction system based on transaction risk control of claim 1, wherein the card information is one or a combination of card information, transaction information, verification information and identity information. For example, the chip card transaction system based on transaction risk control of claim 2, wherein the risk parameter is one or a combination of the card information, the transaction information, the identity information and a historical transaction information of the chip card. For example, the chip card transaction system based on transaction risk control of claim 3, wherein the transaction request is a value-added request or a debit request, the application is further used to respond that the risk score meets the decision condition, and in In the first mode, the processor allows the recharge request or the debit request, and causes the communication module to use the first wireless communication protocol to write updated balance data into a link connected to the chip card. Wallet account. For example, the chip card transaction system based on transaction risk control of claim 3, wherein the application is further used to cause the communication module to use a second wireless communication protocol to send a card verification request to a back-end server through The Internet router verifies whether the chip card is valid by the back-end server, so that the communication module receives a card verification result in a second mode that needs to be connected to the back-end server. For example, the chip card transaction system based on transaction risk control of claim 5, wherein the application is further used to cause the communication module to use the second wireless communication protocol to send the transaction request to the back-end server according to the The card verification result and the risk score are used to determine whether to allow the transaction request through the Internet routing back-end server, and the communication module uses the first wireless device after receiving the transaction request result in the second mode. Communication protocol, write the updated card information to the chip card. An implementation method of a chip card transaction system based on transaction risk control, applied to a mobile device and a chip card, including: An application program executed on the mobile device drives a communication module to communicate with the chip card using a first wireless communication protocol in response to a transaction request of the chip card, and reads card information from the chip card; as well as The application is generated by the mobile device in response to a risk score of the chip card meeting a decision condition and allowing the transaction request of the chip card in a first mode in which the communication module does not need to be connected to an Internet. A transaction request result, and the communication module uses the first wireless communication protocol to write the updated card information associated with the transaction request into the chip card. The implementation method of a chip card transaction system based on transaction risk control as claimed in claim 7, wherein the application program responds to the risk score meeting the decision condition and is permitted by the mobile device in the first mode to be a value-added The transaction request or a debit request causes the communication module to use the first wireless communication protocol to write updated balance information into an electronic wallet account linked to the chip card. For example, the implementation method of the chip card transaction system based on transaction risk control of request item 7 further includes the following steps: the application responds to the risk score of the chip card not meeting the decision condition, and drives the communication module to use a The second wireless communication protocol communicates with a back-end server through the Internet, so that in a second mode in which the communication module needs to be connected to the back-end server, the back-end server determines whether to allow The transaction request for the chip card. For example, the implementation method of the chip card transaction system based on transaction risk control in request item 9 further includes the following steps before the back-end server decides whether to allow the transaction request: the application causes the communication module to use the second The wireless communication protocol sends a card verification request to the backend server to verify whether the chip card is valid, so that the communication module receives a card verification result in the second mode.