TW201351312A - Third party authentication method for cloud transaction system - Google Patents

Abstract

A third party authentication method for a cloud transaction system includes the following steps: (a) a terminal unit encrypting a sole identification code into a first encryption data which is transmitted to an authentication host; (b) the authentication host decrypting the first encryption data to obtain the sole identification code, and transmitting a shopping webpage with a merchandise hyperlink and its corresponding second encryption data to the terminal unit; (c) the terminal unit displaying the shopping webpage and transmitting the second encryption data of the merchandise hyperlink to a corresponding manufacture host; (d) the manufacture host transmitting the second encryption data to the authentication host; (e) the authentication host decrypting the second encryption data and returning a confirmation signal to the manufacture host if the data has been confirmed to be legitimate; and (f) the manufacture host returning a processing signal to the terminal unit. The method increases the transaction safety.

Description

Third-party authentication method for cloud trading system

The present invention relates to an authentication transaction system, and more particularly to a third party authentication method for a cloud transaction system.

With the popularity of smart phones and the development of cloud operating systems, more and more consumers are making online transactions via mobile phones, personal computers, or tablets.

For example, if a consumer uses a mobile phone to enter an online application store and selects a favorite application, the application can be downloaded using the mobile phone, and the online application store operator immediately follows the consumer's personal data and mobile phone number. And requesting a corresponding consumption amount from the telecommunications operator to which the mobile phone number belongs, and the telecommunications operator collects the consumption amount and then debits the account with the operator.

Or, the consumer uses a personal computer and logs in to a shopping website with a set of registered personal data or member accounts, selects the desired product, and then reads the credit card or financial card information with the card reader to make the The shopper of the shopping site is able to make a payment to the financial institution to complete the shopping action.

However, such a transaction mode stores the personal data input by the consumer in the online application store or the server of the shopping website, and the personal data stored by the server may be hacked during the transaction. Stealing, perhaps afterwards, will be maliciously drained by the industry, and expose the consumer's personal data to risk, becoming a big security corner for online transactions.

In addition, the online application store or shopping website does not have A rigorous member authentication mechanism, the illegal group may also use only a few personal data of the consumer, such as name and credit card number, to register the member account of the shopping website, and then use the member account to conduct online shopping and stealing, so that I do not know Consumers in love suffer losses.

Accordingly, it is an object of the present invention to provide a third party authentication method for a cloud transaction system that enhances data security during the sale and purchase process.

Therefore, the third-party authentication method of the cloud transaction system of the present invention is applicable to an authentication host connected to the terminal unit, a signal connected to the terminal unit, and a manufacturer connected between the authentication host and the terminal unit of the terminal unit. For consumers to conduct consumer transactions. The consumer has a wafer containing a unique identification code.

The third-party authentication method includes the following steps: (a) the terminal unit reads the unique identification code of the chip, encrypts the unique identification code into a first encrypted data by using a first key, and transmits the first encrypted data. Up to the authentication host; (b) the authentication host decrypts the first encrypted data by using the first key to obtain the unique identification code, and when the unique identification code is confirmed to be registered, respectively encrypting a plurality of commodity hyperlinks into multiple a second encrypted data, and transmitting a shopping webpage having the commodity hyperlink and the corresponding second encrypted material to the terminal unit; (c) the terminal unit displays the shopping webpage for browsing by the consumer, and When one of the product hyperlinks of the shopping webpage is selected, the second encrypted data of the product hyperlink is transmitted to the corresponding vendor host; (d) the manufacturer host transmits the second encrypted data to the authentication host; (e) When the authentication host decrypts the second encrypted data and confirms that it is legal, it returns a confirmation signal. And to the manufacturer host; and (f) the manufacturer host returns a processing signal corresponding to the hyperlink of the product to the terminal unit according to the confirmation signal.

The beneficial effect of the present invention is that the security of the consumer data during the transaction process can be ensured through the cooperative operation of the terminal unit, the authentication host and the vendor host.

The above and other technical contents, features and advantages of the present invention will be apparent from the following detailed description of the preferred embodiments.

Referring to FIG. 1 and FIG. 2, a preferred embodiment of the third-party authentication method of the cloud transaction system of the present invention is applicable to an authentication host 2 that is connected to the terminal unit 1 in a terminal unit 1, and a signal, and a signal. Connected between the terminal unit 1 and the vendor host 3 of the authentication host 2 for consumer transactions.

The consumer has a wafer 4 containing a unique identification code. In this embodiment, the wafer 4 is disposed on a wafer smart card not shown in the figure. The consumer needs to hold the wafer smart card when conducting a transaction, but the aspect of the wafer 4 is not limited when implemented. For example, the wafer 4 can also be implanted in the body of the consumer.

The terminal unit 1 is a personal computer capable of transmitting and receiving information on the Internet, and includes a card reader 11 for reading a unique identification code of the wafer 4, a display 12 for displaying a picture, and a An input device 13 operated by the consumer, the terminal unit 1 can encrypt the unique identification code and transmit it to the authentication host 2. The terminal unit 1 can also be a smart phone or a flat The tablet computer and the display 12 and the input device 13 are correspondingly integrated into a touch display panel. In this embodiment, the card reader 11 is a unique identification code for reading the wafer 4 by using a radio frequency technology (RFID). Of course, the implementation does not need to be limited. For example, the card reader 11 may also be a smart card by the chip. The wafer 4 is read by contact and inserted.

The authentication host 2 is connected to the terminal unit 1 through a network communication protocol, and stores a plurality of registered unique identification codes, and a plurality of commodity hyperlinks, and the authentication host 2 can decrypt a group through the terminal unit. 1 encrypted data, the plurality of different second keys may also be used to separately encrypt the commodity hyperlink, or one of the unique identifiers may be used to encrypt the commodity hyperlink with the second key.

The manufacturer host 3 is separately connected to the terminal unit 1 and the authentication host 2 through a network communication protocol, and has a vendor profile for recognizing the identity of the manufacturer. The vendor host 3 is used to provide the consumer purchase. The item and process the message from the terminal unit 1. The number of the vendor hosts 3 may be two or more in the implementation, but the preferred embodiment is described by only one of the vendor hosts 3.

It should be noted that, before the implementation of the present invention, in order to ensure that the authentication host 2 can decrypt the data encrypted by the terminal unit 1, a first first issued by the authentication host 2 can be installed in the terminal unit 1. The key, or both the terminal unit 1 and the authentication host 2 are installed with a set of security programs, and the same first key is generated by the security program.

The third party authentication method of the present invention comprises the following steps. First, as shown in step 61, the terminal unit 1 reads the unique identification code of the wafer 4, and A first key encrypts the unique identification code into a first encrypted data, and transmits the first encrypted data to the authentication host 2. For example, the consumer wants to use the shopping website to purchase goods, and then reads the wafer 4 of the wafer smart card by using the card reader 11 of the terminal unit 1, and the terminal unit 1 then encrypts the unique one with the first key. The identification code becomes the first encrypted data, and the first encrypted data is transmitted to the authentication host 2.

Next, as shown in step 62, the authentication host 2 decrypts the first encrypted data with the first key to obtain the unique identification code, and when it is confirmed that the unique identification code is registered, respectively encrypts multiple product hyperlinks. And a plurality of second encrypted data, and transmitting a shopping webpage having the commodity hyperlink and the corresponding second encrypted data to the terminal unit 1. For example, the authentication host 2 decrypts the first encrypted data by using the first key to obtain the unique identifier, and compares with the stored plurality of registered unique identifiers to confirm whether the unique identifier is If the result of the determination is that the registration result is registered, the authentication host 2 encrypts the product hyperlink with a plurality of different second keys to become a plurality of second encrypted data, and hyperlinks the product and the corresponding The two encrypted data are integrated into a shopping webpage, and then the shopping webpage is transmitted to the terminal unit 1.

Then, as shown in step 63, the terminal unit 1 displays the shopping webpage for the consumer to browse, and when the one of the product hyperlinks of the shopping webpage is clicked, the second encrypted data of the commodity hyperlink is transmitted to Corresponding vendor host 3. For example, after the terminal unit 1 receives the shopping webpage from the authentication host 2, the shopping webpage is displayed by the display 12 for browsing by the consumer, and the consumer can use the input device 13 to select any favorite quotient. When the product hyperlink is tapped, the terminal unit 1 transfers the link to the corresponding vendor host 3, and transmits the second encrypted data to the vendor host 3 according to the product hyperlink. The product in this embodiment is an application, and the content of the product hyperlink may be requested to download or execute the product; of course, the product may also be a video material or a physical item, and the content of the product hyperlink is Request a trial or purchase of this item.

Next, as shown in step 64, the vendor host 3 transmits the second encrypted data to the authentication host 2. For example, after the manufacturer host 3 receives the second encrypted data transmitted by the terminal unit 1, in order to ensure that the second encrypted data is from the legally secure terminal unit 1, the second encrypted data is transmitted to the authentication host. 2.

Then, as shown in step 65, the authentication host 2 decrypts the second encrypted data and confirms that it is legal, and returns a confirmation signal to the vendor host 3. For example, after receiving the second encrypted data from the vendor host 3, the authentication host 2 decrypts the second encrypted data by using one of the corresponding second keys to obtain the commodity hyperlink, and the second gold is obtained. After the key and the product hyperlink are respectively compared, after the confirmation is legal, the confirmation signal is returned to the manufacturer host 3.

Then, as shown in step 66, the manufacturer host 3 returns a processing signal corresponding to the hyperlink of the product to the terminal unit 1 according to the confirmation signal. For example, the manufacturer host 3 receives the confirmation signal from the authentication host 2, and thus can confirm that the second encrypted data and the terminal unit 1 are legal and secure, so the return is based on the confirmation signal and the content of the product hyperlink. A corresponding processing signal is sent to the terminal unit 1. If the product hyperlink is used for please To download an application, the content of the processed signal is the file of the application. If the product hyperlink is used to request execution of the application, the content of the processing signal is the result of the vendor 3 executing the application.

Therefore, by the setting of the authentication host 2 and the dual authentication of the first key and the second key, transaction security between the consumer and the manufacturer can be ensured. In addition, in the step 62, the authentication host 2 can also use the unique identifier obtained by the decryption to cooperate with the second key to encrypt multiple products to be hyperlinked into a plurality of second encrypted data, respectively. In the step 65, the authentication host 2 decrypts the second encrypted data by using the unique identifier and one of the corresponding second keys, so as to improve the security of the data and prevent the second encrypted data from being transmitted. The process is cracked and forged, because the counterfeit manufacturer host 3 wants to forge a customer's shopping record, not only has to have the complete second key, but also has to hold the consumer's wafer 4 unique The identification code can be used to create the second encrypted data recognized by the authentication host 2, and the difficulty can be said to be quite high.

In addition, when the third-party authentication method of the present invention is implemented, the authentication host 2 may also store a plurality of registered vendor data. In the step 64, the vendor host 3 also transmits the vendor data to the authentication host 2, In the step 65, the authentication host 2 returns the confirmation signal to the vendor host 3 after the vendor data is confirmed as being registered, so that the authentication host 2 can better control the vendor. The authenticity of the host 3 avoids returning the confirmation signal to the counterfeit vendor host 3.

Referring to FIG. 1 and FIG. 3, if the unique identification code of the wafer 4 has not been registered in the authentication host 2, the following steps are further included between step 62 and step 63. Step.

As shown in step 71, the authentication host 2 decrypts the first encrypted data with the first key to obtain the unique identification code, and transmits a registration webpage to the terminal unit 1 when it is confirmed that the unique identification code is unregistered. For example, the authentication host 2 decrypts the first encrypted data by using the first key, and when the unique identifier is obtained and it is determined that the unique identifier is not yet registered, a registration webpage is transmitted to the terminal unit 1.

Next, as shown in step 72, the terminal unit 1 displays the registration web page for the consumer to operate, and transmits a registration data entered by the consumer and having a set of mobile phone numbers to the authentication host 2. For example, after the terminal unit 1 receives the registration webpage from the authentication host 2, the display 12 displays the registration webpage, and the consumer operates the inputter 13 according to the instruction of the registration webpage and inputs a set of mobile phone numbers. The registration data is sent to the terminal unit 1, and the terminal unit 1 immediately transmits the registration data to the authentication host 2.

Then, as shown in step 73, the authentication host 2 transmits an authentication short message with authentication data to a communication device 5 provided with the mobile phone number based on the registration data. For example, after the authentication host 2 receives the registration data from the terminal unit 1, in order to ensure that the registration data of the consumer is correct, the authentication message containing the authentication data is transmitted according to the mobile phone number of the registration data. The communication device 5 is provided with the mobile phone number. The communication device 5 can be a mobile phone or a tablet computer.

Next, as shown in step 74, the terminal unit 1 transmits the authentication material input by the consumer to the authentication host 2. For example, the consumption The communication device 5 provided with the mobile phone number receives the authentication message and reads the authentication data, and then operates the input device 13 to input the authentication data, and the terminal unit 1 then transmits the authentication data to the authentication host 2 .

Then, as shown in step 75, when the authentication host 2 confirms that the authentication data is correct, the registration stores the registration data and the unique identification code, and classifies the unique identification code as registered, and encrypts multiple products separately. The hyperlink is a plurality of second encrypted data, and a shopping webpage having the commodity hyperlink and the corresponding second encrypted material is transmitted to the terminal unit 1. For example, after the authentication host 2 receives the authentication data from the terminal unit 1 and confirms that the authentication data is correct, the authentication data is paired and stored, and the unique identification code is classified as registered, and then Encrypting the commodity hyperlink to become a plurality of second encrypted data, and returning a shopping webpage having the commodity hyperlink and the corresponding second encrypted material to the terminal unit 1. After completing step 75, the foregoing steps 63 to 66 are continued (see Fig. 2).

When the third-party authentication method of the present invention is implemented, the registration data of the consumer is stored in the authentication host 2, and is not stolen by the manufacturer host 3, and the consumer is the unique identification code of the wafer 4. In addition, the mobile phone number is registered on the authentication host 2, and the transaction process must use the unique identification code as a pass, so the identity is correct and reliable, and it is not easy for the fraud group to spoof the consumer's data to deceive the authentication host 2. On the other hand, the manufacturer host 3 and the terminal unit 1 communicate through the encrypted second encrypted data and the product hyperlink, without involving the consumer's registration data, the unique identifier, or the manufacturer. Vendor data of the host 3, and the second encrypted data can only be encrypted and sent out by the authentication host 2, There is more stringent protection for the confidentiality of the information of both buyers and sellers.

In summary, the third-party authentication method of the cloud transaction system of the present invention can avoid many security concerns generated in the past transaction process, and can effectively prevent cybercrime, so it can achieve the purpose of the present invention.

The above is only the preferred embodiment of the present invention, and the scope of the invention is not limited thereto, that is, the simple equivalent changes and modifications made by the scope of the invention and the description of the invention are All remain within the scope of the invention patent.

1‧‧‧terminal unit

11‧‧‧ card reader

12‧‧‧ display

13‧‧‧ Inputs

2‧‧‧Authorized host

3‧‧‧Manufacturer host

4‧‧‧ wafer

5‧‧‧Communication device

61~66‧‧‧Steps

71~75‧‧‧Steps

1 is a functional block diagram showing the connection relationship of devices in a preferred embodiment of the third party authentication method of the cloud transaction system of the present invention; FIG. 2 is a flowchart illustrating the implementation steps of the preferred embodiment; Figure 3 is a flow chart further illustrating the detailed implementation steps of the preferred embodiment.

61~66‧‧‧Steps

Claims (12)

A third-party authentication method for a cloud transaction system, which is suitable for implementing an authentication host connected to the terminal unit in a terminal unit and a signal, and a signal connection between the authentication host and the manufacturer host of the terminal unit for the consumer Performing a consumer transaction, the consumer having a wafer containing a unique identification code, the third party authentication method comprising the steps of: (a) the terminal unit reads the unique identification code of the wafer and encrypts it with a first key The unique identification code becomes a first encrypted data, and the first encrypted data is transmitted to the authentication host; (b) the authentication host decrypts the first encrypted data by using the first key to obtain the unique identification code, and confirms When the unique identifier is registered, each of the plurality of products is super-linked into a plurality of second encrypted data, and a shopping webpage having the commodity hyperlink and the corresponding second encrypted data is transmitted to the terminal unit; The terminal unit displays the shopping webpage for browsing by the consumer, and transmits the hyperlink of the commodity when one of the product hyperlinks of the shopping webpage is selected 2. Encrypting the data to the corresponding manufacturer host; (d) the manufacturer host transmits the second encrypted data to the authentication host; (e) the authentication host decrypts the second encrypted data and confirms that it is legal, and returns a confirmation signal And to the manufacturer host; and (f) the manufacturer host returns a processing signal corresponding to the hyperlink of the product to the terminal unit according to the confirmation signal. According to the third-party authentication method of the cloud trading system described in claim 1 of the patent application, the following steps are also included between the step (b) and the step (c): (g) the authentication host decrypts the first encrypted data with the first key to obtain the unique identification code, and transmits a registration webpage to the terminal unit when confirming that the unique identification code is unregistered; (h) the terminal The unit displays the registration webpage for the consumer to operate, and transmits a registration data entered by the consumer and having a set of mobile phone numbers to the authentication host; (1) the authentication host transmits a registration message according to the registration data. a certification message having authentication data to a communication device provided with the mobile phone number; (j) the terminal unit transmits the authentication data input by the consumer to the authentication host; and (k) the authentication host When confirming that the authentication data is correct, the pairing stores the registration data and the unique identification code, and classifies the unique identification code as registered, and separately encrypts multiple items of hyperlinks into a plurality of second encrypted materials, and transmits one a shopping webpage having the product hyperlink and the corresponding second encrypted material to the terminal unit. According to the third party authentication method of the cloud transaction system according to claim 1, wherein in the step (b), the authentication host encrypts a plurality of commodity hyperlinks into a plurality of different second keys. The second encrypted data, in the step (e), the authentication host decrypts the second encrypted data by using one of the corresponding second keys. According to the third party authentication method of the cloud transaction system according to the first aspect of the patent application, in the step (b), the authentication host encrypts each of the unique identifiers with a plurality of different second keys respectively. The product hyperlink is a plurality of second encrypted data, and the authentication host in the step (e) The second encrypted data is decrypted by the unique identification code and one of the corresponding second keys. According to the third party authentication method of the cloud trading system according to the first or second aspect of the patent application, wherein the manufacturer host has a vendor data, and in the step (d), the vendor host further transmits the vendor data to the certification. The host, in the step (e), the authentication host also returns the confirmation signal to the vendor host after confirming that the vendor data is registered. The third party authentication method of the cloud transaction system according to the first or the second aspect of the patent application, wherein the product hyperlink is used to request to download an application, and the content of the processing signal is the file of the application. . The third party authentication method of the cloud transaction system according to the first or the second aspect of the patent application, wherein the product hyperlink is used to request execution of an application, and the content of the processing signal is to execute the application. result. According to the third-party authentication method of the cloud transaction system described in claim 2, in the step (k), the authentication host encrypts a plurality of commodity hyperlinks into a plurality of different second keys. The second encrypted data, in the step (e), the authentication host decrypts the second encrypted data by using one of the corresponding second keys. According to the third-party authentication method of the cloud transaction system described in claim 2, wherein the authentication host in the step (k) encrypts the plurality of different second keys separately with the unique identification code. The product hyperlink is a plurality of second encrypted data, and the authentication host in the step (e) The second encrypted data is decrypted by the unique identification code and one of the corresponding second keys. The third party authentication method of the cloud transaction system according to claim 2, wherein the communication device is a mobile phone or a tablet computer. The third-party authentication method of the cloud transaction system according to claim 1 or 2, wherein the chip is disposed on a chip smart card, and the terminal unit is through a card reader in the step (a) Read the unique identification code of the wafer. The third party authentication method of the cloud transaction system according to claim 11, wherein the card reader in the step (a) is a unique identification code for sensing the wafer by using a radio frequency technology.