TW201439934A - Authentication system using dynamic ciphertext and method thereof - Google Patents

Abstract

The present invention provides an authentication system using dynamic ciphertext and method thereof, which comprises an electronic device used by a consumer end, an authorized store transaction platform and an authentication host platform. In which, the electronic device is installed with a transaction program and can perform the transaction, billing and encrypting with the transaction program. Therefore, after the billing the transaction information is transmitted to the authorized store transaction platform, the authorized store transaction platform will issue an authentication request to the authentication host platform for encrypting the transaction information as encrypted ciphertext and then transmitting to the authorized store transaction platform to be provided to the consumer end by the authorized store transaction platform. Then, the consumer end may receive the encrypted ciphertext through the electronic device, and transmit to the authentication host platform after further encryption. Finally, the authentication host platform will perform the decryption to decrypt the encrypted ciphertext with twice encryption into the transaction information to confirm the completion of transaction.

Description

Dynamic ciphertext authentication system and method thereof

The invention relates to an authentication system using dynamic ciphertext and a method thereof, in particular to a method for encrypting transaction information generated by a consumer checkout to enhance transaction authentication and avoiding leakage of transaction information, and encrypting the ciphertext. Finally, it is transmitted to the certification unit and then decrypted to complete the final transaction.

In the era of rapid technological advancement, today's smart phones have become a part of life. With the popularity and multi-functionality of smart phones, more and more users are shopping through smart phones in their lives. The technology is used to enable users to use the smart phone as a shopping cart and scan the static bar code on the product poster to obtain the product's website address. After confirming, the product will be added to the smart phone shopping cart. Then, the smart phone will go through the subsequent checkout.

However, in the case of the checkout action, if the transaction information is directly transmitted without passing through the transaction content that is authorized for the merchant and whether it is recognized by the consumer, it is very likely that the consumer will have an unsafe transaction. , even lead to the leakage of transaction information; therefore, if the transaction information generated by the consumer checkout can be encrypted, and then the encrypted ciphertext is finally transmitted to the certification unit and then decrypted, to complete the final transaction, borrow This approach enhances transaction security and should be an optimal solution.

The present invention is to provide an authentication system using dynamic ciphertext and a method thereof, which are capable of encrypting transaction information generated by a consumer checkout, and transmitting the encrypted ciphertext to the authentication unit and then decrypting it to complete the finalization. Transaction, which will enhance the security of the transaction, and in order to increase convenience and security, the billing process of the original online transaction will be provided by the card number and the personal information (such as the address). , telephone, etc.), the electronic device on the user actively initiates the consumption message to the authentication terminal, which can reduce the chance of inputting important personal information on the shopping website, and reduce the transmission of the important card number through the online store. risk.

The above-mentioned authentication system and method for using the dynamic ciphertext can be implemented, comprising an electronic device, an authorized store trading platform and an authentication host platform, wherein the electronic device is installed with a transaction program, and the transaction program includes a transaction The checkout module is used by the consumer to make purchases through the network or using the electronic device, and after the consumer purchases, the transaction checkout module can request the checkout of an authorized store transaction platform, and Transaction information is transmitted to an authentication host platform; an encryption module is capable of receiving the first confidential ciphertext transmitted by the authorized store transaction platform, and re-encrypting the first using the consumer encryption key by the encryption module Transmitting the ciphertext to generate a second encrypted ciphertext; a transaction ciphertext transmission module is connected to the encryption module, and transmitting the second encrypted ciphertext to the authentication host platform through the network; The authorized store trading platform includes a certification information transmission module, which can provide authentication requirements for the authentication host platform; a transaction ciphertext receiving and processing module is used for Receiving the first transaction ciphertext transmitted by the authentication host platform, and then transmitting the first transaction ciphertext to the electronic device of the consumer terminal by the transaction ciphertext receiving and processing module; an authentication host platform, and the authorization The store's trading platform is connected, The authentication host platform includes a transaction ciphertext generating module for receiving transaction information transmitted by the transaction checkout module, and encrypting the transaction information by using a store key to generate a first transaction. a ciphertext transmission module, which is connected to the transaction ciphertext generation module, and the transaction ciphertext transmission module can transmit the first transaction ciphertext to the authorized store transaction platform through the network; The ciphertext decoding module is configured to receive the second encrypted ciphertext transmitted by the transaction ciphertext transmitting module, and decrypt the second encrypted ciphertext by using the consumer encryption key to obtain the first encrypted ciphertext, and then obtain the first encrypted ciphertext, and then Reusing the store key to unlock the first encrypted ciphertext to obtain transaction information; a transaction confirmation module is connected with the transaction ciphertext decoding module for receiving the decrypted transaction information and completing the transaction processing .

More specifically, the electronic device is a smart phone, a computer or a tablet.

More specifically, the transaction information is transaction time, shopping list number, store-side code, authentication mode, and consumption amount.

More specifically, the first transaction ciphertext and the second transaction ciphertext are one-time use and time-sensitive and cannot be modified.

More specifically, the transaction ciphertext transmission module of the transaction program is capable of transmitting the second encrypted ciphertext to the authentication host platform through an encrypted channel of the network.

More specifically, the consumer encryption key is a universal unique identifier, an international mobile device identifier, a user password, or a user encrypted credential.

More specifically, the authorized store trading platform can be used for a virtual storefront on a network line or a storefront with a physical store.

More specifically, the transaction ciphertext receiving and processing module can be barcoded, The transmission form of graphics, video, sound, radio waves or Near Field Communication (NFC) transmits the first transaction ciphertext to the electronic device of the consumer.

More specifically, the transaction confirmation module is connected to a payment gateway platform to complete the transaction after confirming the transaction information.

More specifically, the authentication host platform further includes an authorized store confirmation module connected to the authentication information transmission module for comparing whether the storefront of the transaction information is an authorized store.

More specifically, the authentication host platform further includes a store key module connected to the authorized store confirmation module and the transaction ciphertext generating module for generating or extracting a set of corresponding transaction information. Store key.

The authentication method using the dynamic ciphertext of the present invention is as follows: 1. After the consumer completes the shopping program on the network, the physical storefront or the electronic device, the authorized store transaction is performed to the storefront. The platform proposes the checkout requirement; 2. The authorized store transaction platform proposes the authentication requirement to the authentication host platform, and the client transmits the transaction information to the authentication host platform; 3. After the authentication host platform receives the transaction information, the store owner The key encrypts the transaction information into the first transaction ciphertext, and then transmits it to the authorized store transaction platform through the network; 4. After the authorized store transaction platform receives the first transaction ciphertext, the first transaction ciphertext is provided. The electronic device for the consumer; 5. The consumer can use the built-in transaction program to obtain the first transaction ciphertext of the transaction, and then encrypt the first ciphertext again using the consumer encryption key. After generating a second encrypted ciphertext, the second encrypted ciphertext is transmitted to the authentication host through the network. Finally, the authentication host platform can unlock the second encrypted ciphertext by the consumer encryption key to obtain the first encrypted ciphertext, and then use the store key to unlock the first encrypted ciphertext to obtain the transaction. After the information, the transaction is completed by the authentication host platform.

More specifically, the storefront is a virtual storefront on a network line or a storefront with a physical store.

More specifically, the transaction information is transaction time, shopping list number, store-side code, authentication mode, and consumption amount.

More specifically, the first transaction ciphertext and the second transaction ciphertext are single-use, time-sensitive, and cannot be modified.

More specifically, the electronic device provided by the first transaction ciphertext to the consumer is in the form of bar code, graphics, video, sound, radio wave or Near Field Communication (NFC).

More specifically, the consumer encryption key is a universal unique identifier, an international mobile device identifier, a user password, or a user encrypted credential.

More specifically, the authentication host platform can compare whether the storefront of the transaction information is an authorized store according to the transaction information, and generate or retrieve a set of store keys corresponding to the transaction information.

〔this invention〕

1‧‧‧Electronic device

11‧‧‧Transaction program

111‧‧‧Transaction Checkout Module

112‧‧‧Encryption Module

113‧‧‧Transaction ciphertext transmission module

2‧‧‧ Authorized store trading platform

21‧‧‧Certified Information Transfer Module

22‧‧‧Transaction ciphertext receiving and processing module

3‧‧‧Certified host platform

31‧‧‧Authorized store confirmation module

32‧‧‧Store Key Module

33‧‧‧Transaction ciphertext generation module

34‧‧‧Transaction ciphertext transmission module

35‧‧‧Transaction ciphertext decoding module

36‧‧‧Transaction Confirmation Module

4‧‧‧ Payment gateway platform

FIG. 1A is a schematic diagram showing the architecture of the authentication system and method using the dynamic ciphertext of the present invention.

FIG. 1B is a schematic diagram showing the internal structure of a transaction program using the dynamic ciphertext authentication system and the method thereof.

1C is a schematic diagram of the internal architecture of an authorized store trading platform using the dynamic ciphertext authentication system and method thereof.

The 1D figure is a schematic diagram of the internal architecture of the authentication host platform using the dynamic ciphertext authentication system and the method thereof.

2 is a flow chart of an authentication method using the dynamic ciphertext authentication system and method thereof.

The above and other technical contents, features and advantages of the present invention will be apparent from the following detailed description of the preferred embodiments.

Please refer to FIG. 1A, FIG. 1B, FIG. 1C and FIG. 1D, which are schematic diagrams of the architecture of the authentication system and method using the dynamic ciphertext, the internal architecture of the transaction program, the internal architecture diagram of the authorized store transaction platform and the authentication. A schematic diagram of the internal architecture of the host platform. As can be seen from the figure, the consumer can use the electronic device 1 (such as a smart phone, a computer or a tablet) and open the transaction program 11 installed in the electronic device 1 to use the transaction program 11 for shopping. And after the completion of the shopping to be settled, the transaction settlement module 111 can present a settlement request to the authorized store transaction platform 2, and then transfer the transaction information of the settlement to the transaction ciphertext generation module 33. And the authentication information transmission module 21 of the authorized store trading platform 2 will further request the authentication host platform 3.

The store owner must first apply for authorization with the authentication host platform 3, so when the transaction information is transmitted to the authentication host platform 3 and the authentication request is made, the authorized store confirmation module 31 of the authentication host platform 3 must first confirm whether the store owner is an authorized store. If the confirmation is correct, the store key module 32 generates or retrieves a set of store keys according to the transaction information, and the transaction ciphertext generation module 33 of the authentication host platform 3 can further use the store key. Add transaction information The encryption is the first transaction ciphertext, and then the transaction ciphertext transmission module 34 of the authentication host platform 3 receives the transaction ciphertext of the first transaction ciphertext to the authorized store transaction platform 2 through the network. Processing the module 22, and the transaction ciphertext receiving and processing module 22 can transmit the first transaction ciphertext to the electronic device 1 of the consumer terminal in the form of bar code, graphics, video, sound or short-range wireless communication, and The consumer can then open the transaction program 11 and receive the first transaction ciphertext, and the encryption module 112 will receive the first ciphertext transmitted by the authorized store transaction platform 2, and use the consumer encryption key (for example) The first secret ciphertext is again encrypted by the universal unique identifier, the international mobile device identifier, the user password or the user encrypted credential to generate the second encrypted ciphertext.

After the second encrypted ciphertext is generated, the transaction ciphertext transmission module 113 of the transaction program 11 can transmit the second encrypted ciphertext to the transaction ciphertext decoding module 35 of the authentication host platform 3 through the network. The transaction ciphertext decoding module 35 first unlocks the second encrypted ciphertext by the consumer encryption key to obtain the first encrypted ciphertext, and then uses the store key to unlock the first encrypted ciphertext to obtain the original The transaction information, if the decoding is successful, indicates that the authentication is successful, and the transaction confirmation module 36 receives the decrypted transaction information and connects to a payment gateway platform 4 to confirm the transaction information, and then completes the transaction.

It can be seen from the above description that, as can be seen from FIG. 2, the authentication method using the dynamic ciphertext of the present invention has the following authentication methods: 1. The built-in transaction program of the consumer on the network, the physical storefront or the electronic device. After the completion of the shopping, the checkout demand 201 is submitted to the authorized store trading platform of the store; 2. The authorized store trading platform then submits the authentication request to the authentication host platform, and the client transmits the transaction information to the authentication host platform 202; 3. After the authentication host platform receives the transaction information, the transaction information is entered by a store key. The line is encrypted into the first transaction ciphertext, and then transmitted to the authorized store trading platform 203 through the network; 4. After the authorized store trading platform receives the first transaction ciphertext, the first transaction ciphertext is provided to the consumer. The electronic device 204; 5. The consumer can use the built-in transaction program to obtain the first transaction ciphertext of the transaction, and then encrypt the first ciphertext again by using the consumer encryption key to generate After the second encrypted ciphertext, the second encrypted ciphertext is transmitted to the authentication host platform 205 through the network; 6. Finally, the authentication host platform can unlock the second encrypted ciphertext by using the consumer encryption key to obtain After encrypting the ciphertext first, and then using the store key to unlock the first encrypted ciphertext, to obtain the transaction information, the transaction 206 is completed by the authentication host platform.

The store side can be a virtual storefront on the Internet or a storefront with a physical store. Although the invention is described by a virtual storefront on the Internet, the storefront can also be a storefront with a physical store. After the consumer ends the checkout in the physical store, the store owner will also ask for certification requirements.

In addition, since the first transaction ciphertext generated is one-time use, time-sensitive and cannot be modified, the store side can only be used once, and the store side must once again submit the transaction checkout at the next consumer end. Propose certification requirements.

The invention provides an authentication system using dynamic ciphertext and a method thereof, and when compared with other conventional technologies, the advantages are as follows:

1. The invention is capable of secondarily encrypting the transaction information generated by the consumer checkout, and then transmitting the encrypted ciphertext to the authentication unit before decrypting to complete the final transaction, such as This will enhance the security and correctness of the transaction, as there are multiple layers of encryption confirmation by the authenticated end, store and consumer.

2. The present invention enables the store owner to submit the authentication request and generate the transaction ciphertext by the authentication host platform, and then the store owner provides the transaction to the consumer, so that the consumer can reconfirm the transaction information and encrypt again. It is transmitted to the authentication host platform for decryption, and the transaction is completed after the decryption is completed, so that the transaction can be completed with the confirmation of the consumer, and the leakage of the transaction information can be avoided.

The features and spirit of the present invention will be more apparent from the detailed description of the preferred embodiments. On the contrary, the intention is to cover various modifications and equivalents within the scope of the invention as claimed.

1‧‧‧Electronic device

11‧‧‧Transaction program

2‧‧‧ Authorized store trading platform

3‧‧‧Certified host platform

4‧‧‧ Payment gateway platform

Claims (18)

An authentication system using dynamic ciphertext includes: an electronic device, which is installed with a transaction program, and the transaction program includes: a transaction checkout module, which is used by the consumer to access the network or use the The electronic device performs consumer shopping, and after the consumer purchases, the transaction checkout module can present a checkout request to an authorized store transaction platform, and transmit the transaction information to an authentication host platform; an encryption module is capable of receiving the Authorizing the first confidential ciphertext transmitted by the store trading platform, and using the encryption module, encrypting the first secret ciphertext again by using the consumer encryption key to generate a second encrypted ciphertext; The text transmission module is connected to the encryption module and transmits the second encrypted ciphertext to the authentication host platform through the network; and an authorized store transaction platform includes: an authentication information transmission module, which is capable of The authentication host platform proposes an authentication requirement; a transaction ciphertext receiving and processing module is configured to receive the first transaction ciphertext transmitted by the authentication host platform, and then receive the transaction ciphertext And the processing module transmits the first transaction ciphertext to the electronic device of the consumer; an authentication host platform is connected to the authorized store transaction platform, and the authentication host platform comprises: a transaction ciphertext generation module For receiving the transaction information transmitted by the transaction checkout module, and encrypting the transaction information using a store key to generate a first transaction ciphertext; a transaction ciphertext transmission module, Transaction ciphertext generation module is connected, and the transaction The ciphertext transmission module can transmit the first transaction ciphertext to the authorized store transaction platform through the network; and the transaction ciphertext decoding module can receive the second encrypted ciphertext transmitted by the transaction ciphertext transmission module, and Unpacking the second encrypted ciphertext by the consumer encryption key to obtain the first encrypted ciphertext, and then using the store key to unlock the first encrypted ciphertext to obtain transaction information; a transaction confirmation module, The transaction ciphertext decoding module is connected to receive the decrypted transaction information and complete the transaction processing. The authentication system using dynamic ciphertext as described in claim 1 , wherein the electronic device is a smart phone, a computer or a tablet. As used herein the dynamic cipher text in item 1 patentable scope of the authentication system, wherein the transaction information is based transactions, shopping list number, stores terminal code, the authentication mode, the amount of consumption. As used herein the dynamic cipher text in item 1 patentable scope of the authentication system, wherein the first transaction and second transaction ciphertext ciphertext-based one-time use and can not be modified and timeliness. The authentication system using the dynamic ciphertext as described in claim 1 , wherein the transaction ciphertext transmission module of the transaction program is capable of transmitting the second encrypted ciphertext to the authentication host through an encrypted channel of the network. platform. The authentication system using dynamic ciphertext as described in claim 1 , wherein the consumer encryption key is a universal unique identification code, an international mobile device identification code, a user password, or a user encrypted certificate. For example, the authentication system using the dynamic ciphertext described in claim 1 of the patent scope, wherein the authorized store transaction platform can be used for a virtual storefront on a network line or a storefront with a physical store. The authentication system using dynamic ciphertext as described in claim 1 , wherein the transaction ciphertext receiving and processing module is capable of transmitting by bar code, graphics, video, sound, radio wave or short-range wireless communication (NFC). Form, the first transaction ciphertext is transmitted to the electronic device of the consumer. For example, the authentication system using the dynamic ciphertext described in claim 1 wherein the transaction confirmation module is connected to a payment gateway platform to confirm the transaction information, and then complete the transaction. The authentication system using the dynamic ciphertext as described in claim 1 , wherein the authentication host platform further includes an authorized store confirmation module, which is connected to the authentication information transmission module for comparing and transmitting transaction information. Whether the store is an authorized store. For example, the authentication system using the dynamic ciphertext described in claim 10 , wherein the authentication host platform further includes a store key module, which is connected to the authorized store confirmation module and the transaction ciphertext generation module. A store key used to generate or retrieve a set of corresponding transaction information. An authentication method using dynamic ciphertext, the authentication method is: after the consumer completes the shopping program built on the network, the physical storefront or the electronic device, the payment request is submitted to the authorized store transaction platform of the storefront; Then, the authorized store transaction platform proposes the authentication requirement to the authentication host platform, and the client transmits the transaction information to the authentication host platform; after the authentication host platform receives the transaction information, the transaction information is encrypted by a store key. Transmitting a ciphertext and then transmitting it to an authorized store trading platform through the network; after that, the authorized store trading platform receives the first transaction ciphertext and provides the first transaction ciphertext to the electronic device of the consumer; The consumer can use the built-in transaction program to obtain the first transaction ciphertext of the transaction, and then encrypt the first ciphertext again by using the consumer encryption key to generate a second encrypted ciphertext. And then transmitting the second encrypted ciphertext to the authentication host platform through the network; finally, the authentication host platform can unlock the second encrypted ciphertext by using the consumer encryption key to obtain the first encrypted ciphertext, and then use the store After the key unlocks the first encrypted ciphertext to obtain the transaction information, the transaction is completed by the authentication host platform. For example, the method for authenticating a ciphertext using the dynamic ciphertext described in claim 12 , wherein the storefront is a virtual storefront on a network line or a storefront with a physical store. For example, the method for authenticating a ciphertext using the dynamic ciphertext described in claim 12 , wherein the transaction information is a transaction time, a shopping list number, a store-side code, an authentication mode, or a consumption amount. The authentication method using a dynamic application of the ciphertext patentable scope of item 12, wherein the first transaction and second transaction ciphertext ciphertext-based one-time use, timeliness and can not be modified. The method for authenticating a ciphertext using the dynamic ciphertext described in claim 12 , wherein the electronic device provided by the first transaction ciphertext to the consumer is in the form of bar code, graphics, video, sound, radio wave or short-range wireless communication. (NFC). The method for authenticating a ciphertext using the dynamic ciphertext described in claim 12 , wherein the consumer encryption key is a universal unique identifier, an international mobile device identifier, a user password, or a user encrypted credential. For example, the method for authenticating a ciphertext using the dynamic ciphertext described in claim 12 , wherein the authentication host platform can compare whether the storefront of the transaction information is an authorized store according to the transaction information, and generate or retrieve a set of corresponding transaction information. Store key.