TWM659947U - Transaction Verification System - Google Patents

Abstract

A transaction verification system is provided, which is set in a transaction server. The transaction verification system includes the following hardware modules. The setting module receives the verification setting of the customer transmitted from the online banking application of the mobile device, sets the internal file or external file of the customer's mobile device as the first verification file, and generates the first verification information. The encryption module receives the first verification information from the setting module, encrypts the first verification information, and generates the first file characteristic value. The verification module receives and stores the first file characteristic value from the encryption module. When the customer uses the online banking application to send a transaction request, the verification module verifies the second file characteristic value of the second verification file newly input by the customer. The transaction is allowed to proceed only when the first file characteristic value and the second file characteristic value are the same.

Description

Transaction verification system

This novel invention relates to a transaction system, and in particular to a transaction verification system.

Currently, some mobile device applications only use account and password for transaction verification, or require users to download and install certificate files to complete transactions, such as when placing securities orders. However, this method has some risks.

First, if the user's account and password are stolen, a malicious third party can easily access the user's account and perform unauthorized transactions or other operations. Second, even if a certificate file is used for verification, if the certificate file is stored in a specific path or has a file name that is easily stolen, it may lead to the theft or leakage of the certificate file. In this way, attackers can use these certificate files to enter the system and perform unauthorized operations, resulting in loss of user information and property.

Therefore, a more powerful and flexible transaction verification system is needed to address these issues, improve security and protect user information.

Therefore, the present invention provides a transaction verification system to prevent the risk of unauthorized operations caused by stolen credentials.

According to one aspect of the present invention, the transaction verification system is set in a transaction server, which is connected to a mobile device of a customer, wherein the mobile device has an online banking application of a bank installed. The transaction verification system includes a plurality of hardware modules composed of a plurality of hardware circuits electrically connected to each other, and the hardware modules include a setting module, an encryption module and a verification module.

The setting module receives a verification setting of the customer transmitted by the online banking application of the mobile device, sets an internal file or an external file of the mobile device as a first verification file, and generates a first verification information of the first verification file according to the verification setting, wherein the external file is located in an external server, and the online banking application accesses the external file through a communication module of the mobile device. The encryption module is electrically connected to the setting module, receives the first verification information from the setting module, and encrypts the first verification information to generate a first file characteristic value. The verification module is electrically connected to the encryption module, receives and stores the first file characteristic value from the encryption module.

When the customer uses the online banking application to send a transaction request to the verification module, the verification module sends a verification request to the online banking application, so that the online banking application sends a second verification file of the customer to the setting module. The setting module generates a second verification information of the second verification file to the encryption module, so that the encryption module encrypts the second verification information to obtain a second file characteristic value. The verification module compares the first file characteristic value and the second file characteristic value. When the first file characteristic value and the second file characteristic value are the same, the verification module sends the transaction request to a transaction module of the transaction server to execute the transaction request.

According to an embodiment of the present invention, the first verification information includes the file content, file size, storage path, storage date, or any combination of the foregoing of the first verification file, and the second verification information includes the file content, file size, storage path, storage date, or any combination of the foregoing of the second verification file.

According to an embodiment of the present invention, the encryption module uses a hash function to perform encryption calculation on the first verification information or the second verification information to obtain the first file characteristic value or the second file characteristic value.

According to another aspect of the present invention, the transaction verification system is set in a transaction server, which is connected to a mobile device of a customer in communication, wherein the mobile device has an online banking application of a bank installed. The transaction verification system includes a plurality of hardware modules composed of a plurality of hardware circuits electrically connected to each other, and the hardware modules include a setting module, an encryption module and a verification module.

The setting module receives a verification setting and a first encryption password of the customer transmitted by the online banking application of the mobile device, sets an internal file or an external file of the mobile device as a first verification file, and generates a first verification information of the first verification file according to the verification setting, wherein the external file is located in an external server, and the online banking application accesses the external file through a communication module of the mobile device. The encryption module is electrically connected to the setting module, receives the first verification information and the first encryption password from the setting module, encrypts the first verification information, generates a first file characteristic value, and then encrypts the first file characteristic value and the first encryption password together to generate a first encrypted characteristic value. The verification module is electrically connected to the encryption module, and receives and stores the first encryption characteristic value from the encryption module.

When the customer uses the online banking application to send a transaction request to the verification module, the verification module sends a verification request to the online banking application, so that the online banking application sends a second verification file and a second encrypted password of the customer to the setting module. The setting module generates a second verification information of the second verification file, and sends the second verification information and the second encrypted password to the encryption module, so that the encryption module encrypts the second verification information to obtain a second file characteristic value, and then encrypts the second file characteristic value and the second encrypted password together to obtain a second encrypted characteristic value. The verification module compares the first encrypted characteristic value with the second encrypted characteristic value. When the first encrypted characteristic value and the second encrypted characteristic value are the same, the verification module transmits the transaction request to a transaction module of the transaction server to execute the transaction request.

According to an embodiment of the present invention, the first verification information includes the file content, file size, storage path, storage date, or any combination of the foregoing of the first verification file, and the second verification information includes the file content, file size, storage path, storage date, or any combination of the foregoing of the second verification file.

According to an embodiment of the present invention, the encryption module uses a first hash function to perform encryption calculation on the first verification information or the second verification information to obtain the first file characteristic value or the second file characteristic value.

According to an embodiment of the present invention, the encryption module uses a second hash function to encrypt the first file characteristic value and the first encryption password together to obtain the first encrypted characteristic value, or uses the second hash function to encrypt the second file characteristic value and the second encryption password together to obtain the second encrypted characteristic value.

According to an embodiment of the present invention, the first hash function and the second hash function are different.

As can be seen from the above, the transaction verification system combines account password verification and arbitrary file verification to improve transaction security. Users must provide specific files for verification, which prevents the risk of certificate files being stolen. At the same time, a multi-verification mechanism is provided, which not only enhances the security of the system, but also provides a more flexible and personalized security solution, making it more difficult for malicious attackers to perform unauthorized operations, effectively protecting the user's information security.

The above novel contents are intended to provide a simplified summary of the contents of the novel so that readers can have a basic understanding of the contents of the novel. This novel content is not a complete overview of the contents of the novel, and its intention is not to point out the important/key elements of the embodiments of the novel or to define the scope of the novel. After reading the implementation method below, a person with ordinary knowledge in the technical field to which the novel belongs should be able to easily understand the basic spirit and other novel purposes of the novel, as well as the technical means and implementation aspects adopted by the novel.

100: Trading server

110: Transaction verification system

112: Setting module

114: Encryption module

116: Verification module

120: Trading module

200: Mobile device

210: Online banking application

220: Internal files

230: Communication module

300: External server

310: External files

In order to make the above and other purposes, features, advantages and embodiments of the present invention more clearly understood, the attached drawings are described as follows.

Figure 1 is a functional architecture diagram of a transaction verification system according to an embodiment of the present invention.

Based on the above, a transaction verification system is provided. This transaction verification system can combine account password verification and arbitrary file verification to improve the security of transactions. In the following description, the exemplary functional architecture of the above transaction verification system and its exemplary execution method will be introduced. In order to easily understand the embodiments, many technical details will be provided below. Of course, not all embodiments require these technical details. At the same time, some well-known structures or components will only be drawn in the attached drawings in a schematic manner to appropriately simplify the contents of the attached drawings.

In order to make the description of the content of the new invention more detailed and complete, the following provides an illustrative description of the implementation aspects and specific embodiments of the new invention; however, this is not the only form of implementing or using the specific embodiments of the new invention. The implementation method covers the features of multiple specific embodiments and the method steps and their sequence for constructing and operating these specific embodiments. However, other specific embodiments can also be used to achieve the same or equal functions and step sequences.

For the convenience of description, the following devices are described by being divided into various units according to their functions. Of course, when implementing the present invention, the functions of each unit can be implemented in the same or multiple software and/or hardware. The present invention is described with reference to the flow charts and/or block diagrams of the methods, equipment (or devices or systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and/or box in the flow chart and/or block diagram, as well as the combination of the processes and/or boxes in the flow chart and/or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for implementing the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.

FIG1 is a functional architecture diagram of a transaction verification system according to an embodiment of the present invention. In FIG1, the transaction verification system 110 is set in a transaction server 100, and the transaction server 100 is connected to a mobile device 200 of a customer, wherein the mobile device 200 has an online banking application 210 of a bank installed. The transaction verification system 110 includes a plurality of hardware modules composed of a plurality of hardware circuits electrically connected to each other, and the hardware modules include a setting module 112, an encryption module 114, and a verification module 116.

According to the first aspect of the present invention, the transaction verification system 110 uses the first method to execute it. The first method is described in detail as follows.

The setting module 112 receives the verification setting of the customer transmitted by the online banking application 210 of the mobile device 200, sets the internal file 220 or the external file 310 of the mobile device 200 as the first verification file and generates the first verification information of the first verification file according to the verification setting. The external file 310 is located in the external server 300, and the online banking application 210 can access the external file 310 through the communication module 230 of the mobile device 200.

According to an embodiment of the present invention, the first verification information includes the file content, file size, storage path, storage date, or any combination of the foregoing of the first verification file, and the second verification information includes the file content, file size, storage path, storage date, or any combination of the foregoing of the second verification file.

The encryption module 114 is electrically connected to the setting module 112 and receives the first verification information from the setting module 112. The encryption module 114 encrypts the first verification information to generate a first file characteristic value. According to an embodiment of the present invention, the encryption module 114 uses a hash function to perform encryption calculation on the first verification information or the second verification information to obtain the first file characteristic value or the second file characteristic value. For example, the hash function may be a SHA256 function in the Secure Hash Algorithm (SHA) family.

Hash function is a common technique in data processing. It maps input data into a string of fixed length, called a hash value. Hash function has the following characteristics. Since a string of fixed length can be obtained regardless of the input value, it is deterministic. Since even changing only one bit in the input will result in a completely different hash value, it has an avalanche effect. Moreover, a good hash function makes it extremely difficult for attackers to find a way to find different inputs corresponding to the same hash value, so it is also collision-resistant. Therefore, hash functions are often used to verify data integrity, encryption and decryption, and the authenticity of data.

The verification module 116 is electrically connected to the encryption module 114, and receives and stores the first file characteristic value from the encryption module 114.

When the customer uses the online banking application 210 to send a transaction request to the verification module 116, the verification module 116 sends a verification request to the online banking application 210, so that the online banking application 210 sends the customer's second verification file to the setting module 112. Then, the setting module 112 generates the second verification information of the second verification file to the encryption module 114, so that the encryption module 114 encrypts the second verification information to obtain a second file feature value. Then, the verification module 116 compares the first file feature value with the second file feature value. When the first file characteristic value and the second file characteristic value are the same, the verification module 116 transmits the transaction request to the transaction module 120 of the transaction server 100 to execute the transaction request.

According to the second aspect of the present invention, the transaction verification system 110 uses the second method to execute it. The difference between the second method and the first method is that the customer can also set an encryption password, encrypt it together with the file feature value, obtain the encrypted feature value, and provide it to the verification module 116 for verification. The second method is described in detail as follows, and the same content as the first method will be appropriately omitted to increase the readability of the content.

In addition to receiving the customer's verification settings transmitted by the online banking application 210 of the mobile device 200, the setting module 112 also receives the first encrypted password. The setting module 112 Sets the internal file 220 or the external file 310 of the mobile device 200 as the first verification file, and generates the first verification information of the first verification file according to the verification settings.

The encryption module 114 is electrically connected to the setting module 112, and receives the first verification information and the first encryption password from the setting module 112. The encryption module 114 encrypts the first verification information to generate a first file characteristic value. The encryption module 114 then encrypts the first file characteristic value and the first encryption password together to generate a first encrypted characteristic value.

The verification module 116 is electrically connected to the encryption module 114, and receives and stores the first encryption characteristic value from the encryption module 114.

When the customer uses the online banking application 210 to send a transaction request to the verification module 116, the verification module 116 sends a verification request to the online banking application 210, so that the online banking application 210 sends the customer's second verification file and the second encrypted password to the setting module 112. Then, the setting module 112 generates the second verification information of the second verification file, and sends the second verification information and the second encrypted password to the encryption module 114, so that the encryption module 114 encrypts the second verification information to obtain a second file feature value. Then, the second file feature value and the second encrypted password are encrypted together to obtain a second encrypted feature value. The verification module 116 compares the first encrypted feature value with the second encrypted feature value. When the first encrypted characteristic value and the second encrypted characteristic value are the same, the verification module 116 transmits the transaction request to the transaction module 120 of the transaction server 100 to execute the transaction request.

According to an embodiment of the present invention, the encryption module 114 uses a first hash function to perform encryption calculation on the first verification information or the second verification information to obtain the first file characteristic value or the second file characteristic value.

According to an embodiment of the present invention, the encryption module 114 uses a second hash function to encrypt the first file characteristic value and the first encryption password to obtain the first encrypted characteristic value, or uses the second hash function to encrypt the second file characteristic value and the second encryption password to obtain the second encrypted characteristic value.

According to an embodiment of the present invention, the first hash function and the second hash function are different. For example, the first hash function may be a SHA256 function, and the second hash function may be a SHA1 function.

Let's take an example of the second method. When the customer specifies the first verification file, the encryption module 114 can use the SHA256 function to encrypt the verification information of the verification file, and obtain a hash value (i.e., the file characteristic value of the above verification information) of "2A2F0E859495CAED". In addition, the encryption password set by the customer is "123456", and the encryption module 114 can use the SHA1 function to encrypt "2A2F0E859495CAED123456" to obtain a new hash value (i.e., the above encryption characteristic value) "X".

From the above, it can be seen that the transaction verification system provided by this new model has at least the following advantages.

Enhanced security: By using any file for transaction verification, the system adds an additional factor to the verification process, improving security. In addition to traditional account password verification, users must provide specific files for verification, making it difficult for malicious attackers to crack or imitate.

Prevent credential file theft: Compared with the traditional credential file verification method, this system uses any file for verification, which reduces the risk of credential file theft. Because even if the credential file is stolen, the attacker still needs to know the specific file and corresponding information to verify.

Two-factor or multi-factor authentication: Combining account password authentication and arbitrary file authentication can be considered as part of two-factor or multi-factor authentication. Such a combination increases the security of the system because attackers need to crack multiple levels of authentication to perform unauthorized operations.

Improved user control: Users can choose the files they want to verify, which increases their control over the security of their information. Users can choose files they think are safe to verify, making the system more in line with users' personal preferences and security needs.

Combining the above advantages, this new transaction verification system not only improves security, but also provides a more flexible and powerful verification method, which helps prevent malicious attacks and protect user information security.

Although the present invention has been disclosed in the form of implementation as above, it is not intended to limit the present invention. Anyone familiar with this art can make various changes and modifications without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the scope of the patent application attached hereto.

100: Trading server

110: Transaction verification system

112: Setting module

114: Encryption module

116: Verification module

120: Trading module

200: Mobile device

210: Online banking application

220: Internal files

230: Communication module

300: External server

310: External files

Claims (8)

A transaction verification system is provided in a transaction server, the transaction server is in communication with a mobile device of a customer, wherein the mobile device has an online banking application of a bank installed thereon, and the transaction verification system comprises a plurality of hardware modules composed of a plurality of hardware circuits electrically connected to each other, the hardware modules comprising: a setting module, receiving a verification message of the customer transmitted by the online banking application of the mobile device; The first verification file is set to an internal file or an external file of the mobile device as a first verification file, and a first verification information of the first verification file is generated according to the verification setting, wherein the external file is located in an external server, and the online banking application accesses the external file through a communication module of the mobile device; an encryption module is electrically connected to the setting module, receives the first verification information from the setting module, and the encryption module The encryption module encrypts the first verification information to generate a first file characteristic value; a verification module is electrically connected to the encryption module, receives and stores the first file characteristic value from the encryption module, and when the customer uses the online banking application to send a transaction request to the verification module, the verification module sends a verification request to the online banking application, so that the online banking application sends a second verification file of the customer to the setting module. The setting module generates a second verification information of the second verification file to the encryption module, and the encryption module encrypts the second verification information to obtain a second file characteristic value. The verification module compares the first file characteristic value and the second file characteristic value. When the first file characteristic value and the second file characteristic value are the same, the verification module transmits the transaction request to a transaction module of the transaction server to execute the transaction request. A transaction verification system as described in claim 1, wherein the first verification information includes the file content, file size, storage path, storage date, or any combination of the foregoing of the first verification file, and the second verification information includes the file content, file size, storage path, storage date, or any combination of the foregoing of the second verification file. The transaction verification system as described in claim 1, wherein the encryption module uses a hash function to perform encryption calculation on the first verification information or the second verification information to obtain the first file characteristic value or the second file characteristic value. A transaction verification system is provided in a transaction server, the transaction server is in communication with a mobile device of a customer, wherein the mobile device has an online banking application of a bank installed thereon, and the transaction verification system comprises a plurality of hardware modules composed of a plurality of hardware circuits electrically connected to each other, the hardware modules comprising: a setting module, receiving a verification setting and a first encryption password of the customer transmitted by the online banking application of the mobile device, converting an internal file or an external file of the mobile device into a setting module; The configuration module is configured as a first verification file, and a first verification information of the first verification file is generated according to the verification configuration, wherein the external file is located in an external server, and the online banking application accesses the external file through a communication module of the mobile device; an encryption module is electrically connected to the configuration module, receives the first verification information and the first encryption password from the configuration module, and the encryption module encrypts the first verification information to generate a first file characteristic value, and then encrypts the first file characteristic value and the first encryption password. The first encrypted characteristic value is encrypted together with the encryption code; a verification module is electrically connected to the encryption module, receives and stores the first encrypted characteristic value from the encryption module, When the customer uses the online banking application to send a transaction request to the verification module, the verification module sends a verification request to the online banking application, so that the online banking application sends a second verification file and a second encrypted password of the customer to the setting module, and the setting module generates a second verification information of the second verification file, and The second verification information and the second encrypted password are transmitted to the encryption module, and the encryption module encrypts the second verification information to obtain a second file characteristic value, and then the second file characteristic value and the second encrypted password are encrypted together to obtain a second encrypted characteristic value. The verification module compares the first encrypted characteristic value and the second encrypted characteristic value. When the first encrypted characteristic value and the second encrypted characteristic value are the same, the verification module transmits the transaction request to a transaction module of the transaction server to execute the transaction request. A transaction verification system as described in claim 4, wherein the first verification information includes the file content, file size, storage path, storage date, or any combination of the foregoing of the first verification file, and the second verification information includes the file content, file size, storage path, storage date, or any combination of the foregoing of the second verification file. A transaction verification system as described in claim 4, wherein the encryption module uses a first hash function to perform encryption calculation on the first verification information or the second verification information to obtain the first file characteristic value or the second file characteristic value. A transaction verification system as described in claim 6, wherein the encryption module uses a second hash function to encrypt the first file characteristic value and the first encryption password together to obtain the first encrypted characteristic value, or uses the second hash function to encrypt the second file characteristic value and the second encryption password together to obtain the second encrypted characteristic value. A transaction verification system as described in claim 7, wherein the first hash function and the second hash function are different.

Images