TW201303780A - System and method for applying financial certificate using a mobile telecommunication device - Google Patents

Abstract

A system and a method for applying a financial certificate using a mobile telecommunication device are disclosed, which include a mobile telecommunication device, a mobile telecommunication network provider, a cellular phone financial certificate management system, a telecommunication system, a financial system, a financial certificate registration center and a financial certificate management center. The mobile telecommunication device includes a subscriber identity module. A subscriber utilizes the mobile telecommunication device to online apply for a financial certificate from a cellular phone financial certificate management system. During the process of connecting the mobile telecommunication device with the cellular phone financial certificate management system, a mobile telecommunication device subscriber identity number is obtained from the mobile telecommunication network provider via a connected network. The cellular phone financial certificate management system would transmit the previously-obtained data to a telecommunication system and a financial system for performing dual certification. The mobile telecommunication device requests the financial certificate registration center to perform certificate registration according to an obtained serial number, and the registration center helps to obtain a certificate file from the financial certificate management center.

Description

System and method for applying for financial credentials using mobile communication device

The present invention is a system and method for applying for a financial voucher using a mobile communication device, in particular, providing an action user who can easily input his financial account number, identity card number, and voucher application related information through a mobile communication network. A mobile phone financial voucher management system assists in the processing of identity authentication and the processing of the voucher by a financial voucher registration center.

The digital certificate is issued by a credible third certification center, which is issued after checking the identity of the user. Its content is to recognize the identity and ability of the holder. The application of digital credentials in the network has become more and more common. The user's online ID card and digital seal are the most commonly used mechanisms for identifying identity on the Internet. The digital key infrastructure (PKI) technology has the characteristics of identity confirmation, data integrity, data confidentiality, and non-repudiation of transactions.

The financial voucher is issued by the voucher institution approved by the Ministry of Economic Affairs and issued by the competent authority of the Ministry of Finance to issue electronic certificates for the financial sector (such as online banking, securities ordering, etc.). Since the financial vouchers represent the identity of the user, applicants will be required to apply for the counter at the time of application. In addition to the application documents, they must also provide relevant documents (such as photo IDs, driver's licenses, etc.). ) and seals.

At present, the most common financial vouchers have been widely used in the financial securities industry. When a user wants to apply for a financial certificate from a financial securities industry, he must personally go to the securities company to fill out the form application and present the identity card certificate, in addition to the securities. The company will ask the user to personally open a new securities authorization debit account in person to the cooperative bank. Such a procedure is complicated and inconvenient.

Patent I340579 is a system for providing a computer for an electronic mobile device to apply for an electronic voucher and a secret key to a server; the voucher utilizes a computer with better electronic voucher management and network connection function. Applying for an electronic voucher to a server and requesting a secret key, the server then sends an identity verification request signal to the electronic mobile device for confirmation, and after confirmation, transmits an electronic voucher to the electronic mobile device. The patent I307235 transmits the content of the short message to the short message service communication system after the user inputs the telephone number, and the communication system verifies that the telephone of the source of the newsletter is consistent with the telephone number of the content of the newsletter, thereby completing the certificate application through the certification. However, this patent is based only on the authentication data when the user is required to apply for the mobile device. However, if anyone obtains the mobile phone, it can easily impersonate another person's application certificate, so it is obviously unable to meet the financial security application of higher security requirements.

The purpose of this patent is to provide an application system for online application for financial vouchers through a mobile communication device. It is not required to apply for identity card at a issuing unit as in the past application method, but through a mobile communication device. You can easily apply for a voucher and apply the financial voucher for application services such as trading or financial payment or payment.

Another purpose of this patent is to provide a mobile communication device for online application for financial credentials, and to reduce the risk of fraudulent use of mobile communication device data (including voucher data). This patent incorporates a user identification number (Personal Identity Number, PIN). International Mobile Equipment Identity Number (IMEI) and the International Mobile Subscriber Identity (IMSI) of the User Identity Module (IMS) for encryption protection The user data (including the voucher file, financial information, user basic data), that is, if the user PIN code cannot be obtained, the mobile communication device is obtained, or the SIM card applied for, the voucher placed on the mobile communication device cannot be accessed.

The purpose of this patent is to adopt a separate design to comply with the current financial document issuance operation principle, to provide a mobile phone voucher management system, to fully handle the mobile phone financial voucher application requirements and manage the financial voucher application function of the mobile phone, and to verify the mobile communication device users and finance. Account identity certification.

Another purpose of this patent is to adopt a separate design to comply with the current financial document issuance operation principle, and to provide another financial voucher registration management system, based on the authentication of the aforementioned mobile phone voucher management system, accepting a voucher application for a mobile phone, and transmitting the voucher application The voucher file to the phone.

To achieve the above-mentioned creative purpose, this patent adopts a separate architecture design and proposes an application system for providing online payment of financial documents in accordance with the principle of the current financial document issuance operation, and a mobile communication device and a mobile financial certificate management system. , a mobile communication network provider, a telecommunication system, at least one financial system, a financial voucher registration center, and a financial voucher management center.

The mobile communication device of the system of the present application provides the user to input and store the identity card number, the financial account number, and the user information required for the financial certificate application on the device, and then transmit the foregoing information through the mobile communication function of the device. After a mobile phone financial voucher management system, in the process of transmitting communication, the mobile phone financial voucher management system can obtain the communication user identification code (such as IMSI, or action) of the mobile communication device transmitting the communication process from a mobile communication network provider. After the telephone number, the mobile phone financial voucher management system will respectively transmit the user identity card number and the communication user identification code to a telecommunication system to verify whether the registrant of the communication user identification code is consistent with the identity card number, and transmit the user identity card number. Whether the name of the financial account to the financial system is consistent with the identity card number.

Furthermore, the mobile phone financial voucher management system will judge based on the data authentication results returned by the telecommunication system and the financial system. If both data authentication results are successful, the mobile financial voucher management system will generate a unique voucher application number as The serial number of the application is identified and used, and the voucher application number, the communication user identification code, the identity card number, the financial account number, and the user data required for the financial voucher application are recorded and stored in the database.

Then, the mobile phone financial voucher management system will separately transmit the voucher application number and the authentication result to the original mobile communication device, and synchronously transmit the voucher application number and the communication user identification code to a financial voucher registration center annotation, that is, notify the registration center that there is a The mobile communication device with the voucher application number has been verified by the telecommunication data and financial data of the mobile financial voucher management system, and the registration center will continue to accept the mobile communication user voucher application procedure.

After the mobile communication device receives the voucher application number and the authentication result returned by the mobile financial voucher management system, the mobile communication device randomly generates a set of PKI key pairs, and pairs the public key of the PKI key pair, and The previously stored identity card number, financial account number, and user data required for the financial certificate application are combined with a voucher application file, and the voucher application number or the communication user identification code of the mobile communication device is used as a key to make a one-way hash. After calculating the voucher application file to generate a message authentication code, the function transmits the financial voucher registration data (including the voucher application number or the communication user identification code, the voucher application file, and the message authentication code of the mobile communication device) to a financial voucher Registration center, the financial voucher registration process.

After receiving the correctness of the financial voucher registration data and the verification message authentication code transmitted by the mobile communication device, the financial voucher registration center (1) queries and logs in the mobile financial voucher management system database through the transmitted voucher application number. The communication user identification code corresponding to the voucher application number is used as the key by the identification code; or (2) the corresponding voucher application number is queried through the transmitted communication user identification code and the number is used as the key.

After the registration center queries the key, the same one-way hash function as the mobile communication device is used to calculate the voucher application file to generate another message authentication code, and then compare the message authentication code with the message authentication transmitted by the mobile communication device. The code is consistent. If the message authentication code is consistent, it means that the certificate application file received by the registration center has not been tampered with or impersonated by a third party, and then the registration center will transmit the financial account number and identity card number of the financial certificate registration data to a financial system verification. And after the registration center receives the verification and authorization result of the financial system return, the registration center will forward the voucher application file to a financial voucher management center for certificate issuance, and then forward the certificate file issued by the management center to the action. Communication device.

Please refer to the following detailed description of the invention and the accompanying drawings in order to provide a further understanding of the invention. However, the drawings attached to the present specification are for reference only, and are not intended to limit the invention.

Please refer to FIG. 1 , FIG. 2 and FIG. 5 , which are a system architecture diagram, a module diagram and a system operation diagram of a system for applying for a financial certificate by using a mobile communication device, wherein the mobile communication device 1 includes at least one mobile communication module. The group 11, a user identity module 12, and a voucher management module 13. The mobile communication module 11 is a mobile device having a mobile communication network function for receiving a vehicle from which a user inputs, calculates, and transmits data, and the module has an interface for placing a user identity module. 12. At least one unique International Mobile Subscriber Identity (IMSI) is stored in the Subscriber Identity Module (SIM), which is used by the telecommunications company to provide a communication network connection. The identity of the device is identified and used, and the access device communication service is provided after the identification is successful. Further, the telecommunications company can identify the application user identity of the access device (including the user identity module) through the IMSI. And the user's communication fee is charged and billed. The voucher management module 13 is illustrated in the operation flow of FIG. 5. First, in step S501, an external input (user input) financial voucher application data is obtained through the mobile communication module 11, wherein the financial voucher application data includes at least one identity identification data. (such as identity card number), a set of financial information (such as financial account number, e-wallet account), and user basic information (such as name, contact number, household borrowing, etc.); then step S502 is through the mobile communication module 11 The mobile communication network function transmits the application data to a mobile phone financial voucher management system for data authentication; and in step S503, receives the identity authentication result of the mobile financial certificate management system reply and the unique voucher application number of the voucher application Then, in step S504, the voucher management module 13 will generate a set of random PKI key pairs; and in step S505, the voucher management module 13 can provide a plurality of levels of encryption mechanism for the PKI key pair according to the financial transaction security level requirement. Encrypted storage protection, for example, a PIN code that can be additionally input by the user as an encryption key to restrict the certificate to only accept special The user uses; or uses the PIN code and IMSI combination input by the user as the encryption key, and restricts the certificate to only receive the specific user to use on the mobile communication device with the specified SIM card; or the PIN code input by the user. And the combination of the international mobile device identification code of the mobile communication device as the encryption key, restricting the voucher to only receive the specific user to use on the specific mobile communication device; or applying the PIN code input by the user and the voucher obtained by the foregoing return The combination of the number, IMSI, SIM card number, or IMEI is used as the encryption key; in step S506, the voucher management module 13 will produce a set of a voucher application file and a message authentication code (MAC) thereof, wherein The voucher application file is composed of the financial data of the previous identity authentication, the identity identification data, and the public key of the PKI key pair, and the message authentication code is calculated by an algorithm and an encryption key. Generated, wherein the algorithm can be an algorithm such as sha1, md5, DES, or 3DES, and the encryption key can be a voucher application number or an IMSI; When the application number is used as the encryption key, step S507 transmits the previously produced IMSI, the voucher application file, and the message authentication code thereof to the financial voucher registration center through the mobile communication network function of the mobile communication module 11 to perform the financial certificate. If the IMSI is used as the encryption key, step S507 transmits the previously generated voucher application number, voucher application file, and its message authentication code to a financial voucher through the mobile communication network function of the mobile communication module 11. The registration center performs registration of the financial certificate; finally, in step S508, the document file provided by the registration center is received and installed. In addition, the PIN code in the above step S505 may also be obtained by the user input in step S501; and the step S504 may be performed in advance in steps S501 to S503.

Referring to FIG. 6 , which is another embodiment of the credential management module 13 of the above-described inventive mobile communication device, first step S601 is to obtain an external input (user input) financial voucher application data through the mobile communication module 11 . The financial voucher application data includes at least one identification information (such as an identity card number), a set of financial information (such as a financial account number), and basic user information (such as name, contact number, household borrowing land, etc.); and then step S602 The application data is transmitted to a mobile phone financial voucher management system for data authentication through the mobile communication network function of the mobile communication module 11; and the identity authentication result and the current certificate of the mobile financial certificate management system are received in step S603. The application has a unique voucher application number; step S604 receives a One Time Password (OTP) transmitted from a financial voucher registration center in a short message manner; then in step S605, the voucher management module 13 will generate a random set of PKIs. Key pair; and in step S606, the voucher management module module 13 can provide multiple levels according to the financial transaction security level requirement. The encryption mechanism protects the PKI key pair by encrypting and storing. For example, the PIN code input by the user may be used as an encryption key to restrict the certificate from being accepted by a specific user; or the combination of the PIN code and the IMSI input by the user as the encryption key. Key, limit the certificate can only be used by a specific user on the mobile communication device with the specified SIM card; or use the PIN code input by the user and the international mobile device identification code combination of the mobile communication device as the encryption key, and limit the present The voucher can only be used by a specific user on a specific mobile communication device; or as an encryption key by using a PIN code input by the user, a voucher application number obtained by the above return, an IMSI, a SIM card number, or an IMEI; In step S607, the voucher management module 13 will produce a set of a voucher application file and a message authentication code thereof, wherein the voucher application file is a financial data, identity identification data, and a PKI key pair generated by the prior identity authentication. The public key is composed, and the message authentication code is a one-time password obtained by an algorithm and previous steps as an encryption key. The algorithm is generated by calculating the voucher application file, wherein the algorithm may be an algorithm such as sha1, md5, DES, or 3DES; and step S608 is to transmit the previously issued voucher application number through the mobile communication network function of the mobile communication module 11 And the voucher application file and the message authentication code to the financial voucher registration center to perform the financial voucher registration; finally, in step S609, the voucher file provided by the registration center is received and installed. In addition, the PIN code in the above step S606 may also be obtained by the user input in step S601; and step S605 may be performed in advance in steps S601 to S603.

Please refer to FIG. 3, which is a structural diagram of a mobile phone financial voucher management module of a system for applying for a financial voucher using a mobile communication device according to the present invention. The system includes at least one financial voucher application module 21, an identity authentication module 22, and a The financial voucher management system of the voucher registration center gateway module 23, the financial voucher application module 21 is configured to receive the financial voucher application data transmitted from the mobile communication device 1 of a mobile communication network - identity identification data (such as identity card number) , financial information (such as financial account, e-wallet account, etc.), and user basic information (such as name, contact number, household borrowing, etc.), etc., and from the mobile communication network of the communication source network of the mobile communication device 1 Obtaining a communication user identification code of the mobile communication device 1, wherein the communication user identification code may be an IMSI, a mobile phone number, an IMSI replacement code that converts the IMSI by a formula, or an action of converting a mobile phone number by a formula The phone number substitution code, and then the financial voucher application module 21 will transmit the financial voucher application data and the communication user identification code to the identity authentication module 22 And receiving the authentication result returned by the module 22, the module determines that if the authentication result fails, it is directly transmitted back to the source mobile communication device 1; if the authentication result is successful, the module will be assigned a unique one. The voucher application number is sent to the financial voucher application data, and the voucher application number and the authentication result are transmitted back to the mobile communication device 1 of the data source, and the financial voucher application module 21 provides the voucher application number and the communication user identification code to the voucher. The registration center gateway module 23 performs the data synchronization operation; finally, after receiving the voucher application number and the voucher registration result returned by the voucher registration center gateway module 23, the voucher application number is activated according to the voucher registration result. The corresponding user credential service function completes the voucher application procedure. The identity authentication module 22 is configured to receive the financial voucher application data and the communication user identification code transmitted by the financial voucher application module 21, and then transmit the identity identification data and financial information of the financial voucher application data to the financial system 5 for authentication. And transmitting the identity identification data of the financial voucher application data and the communication user identification code to the telecommunication system 4 for authentication; receiving and judging the authentication result of the telecommunication system and the authentication result of the financial system, and if both authentication results are successful, the reply is replied The successful result of the authentication is sent to the financial voucher application module 21, and vice versa, the result of the authentication failure is returned to the financial voucher application module 21. The voucher registration center gateway module 23 is configured to transmit the voucher application number and the communication user identification code to the financial voucher registration center 6 note, and receive the voucher application number of the registration center 6 and the voucher registration result thereof. And then transmitted back to the financial voucher application module 21; in addition, the communication user identification code transmitted by the module 23 to the financial voucher registration center 6 can be converted into an identification replacement code by an algorithm, or converted into a calculation The method replaces the communication user identification code and the system time calculation of the system to generate a verification replacement code for verifying the aging.

Please refer to FIG. 7 , which is a system flowchart for applying for a financial voucher using a mobile communication device according to the present invention. First, step S701 receives a financial voucher application data transmitted from a mobile communication device of a mobile communication network - identity identification information (such as identity). Certificate number), financial information (such as financial account number, e-wallet account number, etc.), and user basic information (such as name, ID number, contact number, household borrowing area, etc.); Step S702 The system will act from the mobile communication network The communication network provider obtains the communication user identification code of the mobile communication device of the application data source, and then in step S703, the system transmits the identity identification data and the communication user identification code to a telecommunication system for authentication and transmission of the user identity identification data, and the financial The data is authenticated to a financial system; after the system receives the authentication results of the telecommunication system and the financial system respectively in step S704; the authentication result is judged in step S705, and if the authentication result of the telecommunication system and the financial system fails, the device is terminated. Sub-financial voucher application operation, and vice versa, if the reply authentication result is If yes, proceed to step S706 to log in the identification information of the financial certificate application, the communication identity identification code, the financial information, and the user basic data, and generate a unique voucher application number; then return the voucher application number and certification in step S707. Resulting to the original mobile communication device; at the same time, in step S708, the system synchronizes data with a financial voucher registration center to provide the voucher application number and the communication identity identification code; and receives the financial voucher registration center returning in step S709. The voucher application number and the voucher registration result; in step S710, if the voucher registration result is successfully returned, the voucher service or function corresponding to the voucher application number is enabled; and finally, step S711 completes the financial voucher application procedure.

Please refer to FIG. 4, which is a structural diagram of a financial voucher registration center of a system for applying for a financial voucher using a mobile communication device, wherein one of the registration centers is implemented as follows: a financial voucher registration center 6 (ie, the aforementioned registration center) Receiving a voucher application number and a communication user identification code provided by a mobile phone financial voucher management system 3 as a method for identifying the financial voucher application number, wherein the communication user identification code can be an IMSI, or an IMSI that converts the IMSI by a formula If the registration center 6 receives the result of the successful return of the returned voucher of the financial voucher management center 7, the voucher application number and the voucher registration result will be transmitted back to the original mobile financial voucher management system 3. If the registration center 6 receives the voucher application number and voucher application file (including a financial data, a user basic data, and a PKI key pair public key) from a mobile communication device 1, and the message authentication code, After the communication user identification code corresponding to the voucher application number transmitted by the mobile communication device is queried from the data provided by the mobile phone financial voucher management system 3, the communication user identification code is used as the encryption key; The registration center 6 receives the IMSI (or IMSI replacement code) from a mobile communication device 1, the voucher application file (which includes a financial data, a user basic data, and a public key of a PKI key pair), and a message authentication code. Then, after querying the voucher application number corresponding to the IMSI (or IMSI replacement code) transmitted by the mobile communication device from the information provided by the mobile phone financial voucher management system 3, the voucher application number is used as the encryption key; After the encryption key is taken out, the voucher application file is calculated by an algorithm to generate another message authentication code, and compared with the message authentication code and the original mobile communication device 1 Whether the authentication code is the same, wherein the foregoing algorithm may be an algorithm such as sha1, md5, DES, or 3DES; in addition, if the registration center 6 receives a successful return of the certificate returned by the financial certificate management center 7, it will return A voucher application number and a voucher registration result are transmitted to the original mobile communication device 1. The registration center 6 is also connected to a financial system 5, that is, when the registration center 6 compares the message authentication code of the mobile communication device 1 successfully, the financial information of the voucher application file and the user basic data are transmitted to the financial system 5 for confirmation. Whether the financial information and the user basic data are the same user account, and receiving the verification result of the financial system 5. The registration center 6 is also interfaced with a financial voucher management center 7, that is, when the registration center 6 receives the successful verification of the financial information from a financial system 5, the registration center 6 will transmit its reception from the mobile communication device 1 The voucher application file to the financial voucher management center 7 performs voucher registration, and receives the voucher file returned by the management center 7.

In order to improve the security of the financial voucher application, another embodiment of the financial voucher registration center of the above invention, the financial voucher registration center 6 and the mobile financial voucher management system 3, the financial system 5, and the financial voucher management center 7 respectively The same as the previous embodiment; the difference lies in the content of the registration center 6 and the mobile communication device 1. First, the registration center 6 receives the voucher application number and the communication user identification code provided by the mobile phone financial voucher management system 3 (the communication user identification code in this embodiment can only be a mobile phone number), and then directly transmits the information in a short message. The password is sent to the mobile communication device 1, and the mobile communication device 1 uses the one-time password as the encryption key of the message authentication code; further, the registration center 6 will use the voucher application number received from the mobile communication device 1, The voucher application file (including a financial data, a user basic data, and a public key of a PKI key pair), and the generated message authentication code is calculated by using the previously obtained one-time password as a key, and is transmitted to the registration. After receiving the registration center 6, the registration center 6 queries the one-time password transmitted by the original short message and uses it as an encryption key to calculate the voucher application file by an algorithm to generate another After the message authentication code, the message authentication code transmitted by the original mobile communication device 1 is compared, wherein the algorithm may be an algorithm such as sha1, md5, DES, or 3DES.

Please refer to FIG. 1 , wherein the voucher application system includes a mobile communication device, a mobile phone financial voucher management system 2, a mobile communication network provider 3, a telecommunication system 4, a financial system 5, and a financial voucher registration. Center 6, and a financial voucher registration center 7; the following describes the interface of each system: the mobile communication device 1 is a mobile communication device having a user identity module (ie, SIM card) and a credential management function, and the mobile communication device 1 The relationship with other systems, centers, etc. is as follows: (1) receiving user input of a financial voucher application data - identity identification data, financial information, and user basic information; (2) through the mobile communication network 8 via the Internet The route 9 transmits the application materials to a mobile phone financial voucher management system 2 and receives the voucher application number and the authentication result returned by the voucher management system 2; (3) after generating a set of PKI key pairs, generating a group of financial information , the user basic data, and the voucher application file of the public key of the PKI key pair, and the unique message authentication code for generating the voucher application file by using an encryption key; (4) transmitting the certificate The certificate application number, the voucher application file and the message authentication code thereof to a financial voucher registration center 6 perform voucher registration; and receive the voucher registration result and the voucher file of the registration center 6.

The communication relationship between the mobile financial voucher management system 2 and other systems, centers, devices, etc. is as follows: (1) accepting the financial voucher application data transmitted by the mobile communication device 1 via the Internet 9 via the mobile communication network 8, and returning The voucher application number and the authentication result of the voucher application; (2) obtaining the communication user identification code requested by the mobile communication network provider 3 of the aforementioned mobile communication network 8; (3) transmitting the financial voucher application information (financial information) And the user basic information) to the financial system 5 for authentication, and receiving the authentication result of the financial system 5; (4) transmitting the communication user identification code and the authentication to the telecommunication system 4, and receiving the authentication result of the telecommunication system 4; (5) The voucher application number and the communication user identification code required for the voucher application are provided to a financial voucher registration center 6, and the voucher application number and the voucher registration result transmitted by the registration center 6 are received.

The mobile communication network provider 3 is a telecommunications provider that issues the SIM card of the mobile communication device 1. The purpose is to transmit the communication user identification code of the mobile communication device 1 requesting the financial voucher request from the mobile communication network 8 to the mobile financial certificate. Management System 3.

The telecommunication system 4 accepts the data authentication requirements of the financial voucher application data (identity identification data) and the communication user identification code from a mobile phone financial voucher management system 2, performs telecommunication device user identity verification and returns the authentication result.

The relationship between the financial system 5 and the mobile financial voucher management system 2 and the financial voucher registration center 6 is as follows: (1) receiving the financial voucher application data (identity identification data and financial information) from a mobile phone financial voucher management system 2 The certification requirements are to perform the financial user identity verification and return the certification result; (2) to receive the data verification request from the voucher application file of the financial certificate registration center 6, to verify the financial data and to return the verification result.

The relationship between the financial voucher registration center 6 and other systems, centers, devices, etc. is as follows: (1) receiving the voucher application number and communication user identification code from a mobile phone financial voucher management system 2; and replying to the mobile phone financial voucher management system 2 the voucher application number and the voucher registration result for notifying the management system 2 to initiate the voucher service; (2) accepting the voucher application number, the voucher application file, and the message authentication code transmitted by the mobile communication device 1 and verifying the message authentication code After the correctness, the voucher registration acceptance procedure is completed; and a voucher file and voucher registration result are transmitted to the mobile communication device 1; (3) the voucher application file is transmitted to a financial system 5 for financial data verification, and the return is received. The verification result is obtained; (4) transmitting the voucher application file to a financial voucher management center 7, requesting the management center 7 to issue a voucher file and return the voucher file.

After receiving the voucher application file from the financial voucher registration center 6, the financial voucher management center 7 issues a voucher file of the voucher application file and returns the voucher file.

Another embodiment B of the above-mentioned invention for providing a financial voucher application system on the mobile communication device differs from the above embodiment in that the registration center 6 of the foregoing embodiment receives the voucher application number provided from the mobile phone financial voucher management system 2. After the communication user identification code (here, the communication user identification code is limited to the mobile phone number), the registration center 6 will send a one-time password to the mobile communication device 1 by means of a short message, and then the mobile communication device 1 The one-time password is used as the encryption key to generate the message authentication code, and then the voucher application number, the voucher application file and the message authentication code thereof are transmitted to a financial voucher registration center 6 for voucher registration; this embodiment is the registration center 6 itself. Sending an encryption key to the mobile communication device 1 can prevent the mobile phone financial voucher management system 2 from providing the voucher application number or other information leakage, and the voucher application file is stolen by unscrupulous persons.

Another invention of the present specification is a method for applying for a financial certificate using a mobile communication device, and the steps of the implementation method are as follows:

Step 1: A mobile communication device provides and records the financial certificate application data input by the user, wherein the application data includes at least one identification information (such as an identity card number), a financial information (such as a financial account number), and basic user information (such as Applicant's name, contact number, address, etc.).

Step 2: The mobile communication device transmits the financial voucher application materials to a mobile phone financial voucher management system via a mobile communication network; meanwhile, the mobile phone financial voucher management system can receive the financial voucher application data from the mobile communication device. The network provider of the mobile communication network obtains the communication user identification code of the connected mobile communication device (this identification code can be an IMSI or a mobile phone number).

Step 3: The mobile phone financial voucher management system transmits the identity identification data of the communication user identification code and the financial voucher application data to a telecommunication system to request the telecommunication system to perform telecommunication device user data verification, and confirm that the communication user identification code belongs to Whether the sponsor matches the identity identification data; at the same time, the mobile phone financial voucher management system will transmit the identity identification information and financial information of the financial voucher application data to a financial system to request the financial system to check the financial account user data and confirm Whether the account person to which the financial account belongs is consistent with the identity identification information. If the telecom system and the financial system return the authentication result, the mobile financial credential management system judges according to the two authentication results: if both authentication results are successful, a unique set of voucher application numbers will be generated, and the voucher will be generated. The application number, the financial certificate application data, and the communication user identification code are stored in the database.

Step 4: The mobile phone financial voucher management system returns the voucher application number and the authentication result to the original mobile communication device; meanwhile, the mobile phone financial voucher management system transmits the voucher application number and the communication user identification code to the financial voucher registration center, or Receiving a financial voucher registration center to query the voucher application number and the communication user identification code data.

Step 5: After receiving the voucher application number and the authentication result returned by the mobile financial voucher management system, the mobile communication device randomly generates a set of PKI key pairs, and uses the IMSI of the mobile communication device as the secret of the message authentication code. The key, a set of voucher application files including the financial account, the user basic data, and the public key of the PKI key pair is calculated by a one-way hash algorithm to generate a message authentication code.

Step 6: The mobile communication device transmits the voucher application number, the voucher application file, and the message authentication code to a financial voucher registration center application voucher; and the financial voucher registration center receives the information from the mobile communication device, and then The voucher application number is the query condition, and the communication user identification code corresponding to the voucher application number is obtained from the voucher application number and the communication user identification code data previously obtained from the mobile financial voucher management system; or directly to the original mobile phone financial certificate After the management system queries the communication user identification code corresponding to the voucher application number; after extracting the communication user identification code, the communication user identification code is used as the key, and the same one-way hash algorithm is used to calculate the voucher application file to generate The message authentication code is compared with the message authentication code transmitted by the mobile communication device. If the two message authentication codes are the same, it indicates that the voucher application file is intact and has not been tampered with, and the voucher content is verified.

Step 7: The financial certificate registration center will transmit the financial account number and the user basic data to a financial system for data verification according to the financial account number of the voucher application file, and the financial system that receives the capital information will use the financial account to verify the financial account. Whether the name is the same as the user's basic information; if it is the same person, the financial system notes that the user applies for the financial account as the voucher transaction account, and replies the verification result to the financial certificate registration center.

Step 8: After receiving the successful return of the financial system, the financial certificate registration center forwards the voucher application file to a financial voucher management center, and asks the management center to issue a financial certificate.

Step 9: After receiving the voucher application file, the financial voucher management center will note the application file and issue a voucher file, and then return the voucher file to the financial voucher registration center; and the financial voucher registration center provides the mobile communication certificate Device.

The communication user identification code described in step 4 and step 6 above may be an international mobile subscriber identity code (IMSI) or a mobile phone number, and the communication subscriber identity may be converted into an algorithm to convert the communication subscriber identity into an identification alternative. The code, or an algorithm is used to replace the system time calculation of the communication user identification code and the voucher application module 21 to generate a verification replacement code for verifying the aging.

In a method for applying for a financial certificate by using a mobile communication device according to the above embodiment of the present invention, wherein the method is to ensure the security of the PKI key and the financial certificate application data, the method may provide user selection protection in step 1 or step 5. Mechanism to set the data access rights - that is, the mobile communication device will encrypt and store the above information with the PIN code typed by the user, or store the PIN code and the IMSI of the mobile communication device (the SIM card used to restrict the voucher) in combination with the encrypted storage. Data, or use the user to type the PIN code and the IMEI of the mobile communication device (the mobile phone used to restrict the voucher) to encrypt the above data, or to type the PIN code, IMSI and IMEI of the mobile communication device (the SIM card and mobile phone used to restrict the voucher) ) Combine the encryption to store the above data; this can effectively reduce the risk of theft of the voucher.

Another embodiment of the method for applying for a financial voucher using a mobile communication device according to the above invention is different in that the embodiment provides a mechanism for independently authenticating the mobile communication device of the financial voucher registration center, that is, the financial voucher at step 4 above. After the registration center receives the voucher application number and the communication user identification code provided by the mobile financial voucher management system (the communication user identification code in this embodiment is limited to the mobile phone number), a set of one-time password corresponding to the voucher application number will be randomly configured. And communicating the user identification code, and transmitting the one-time password to the mobile communication device to which the communication user identification code (ie, the mobile phone door number) belongs in a short message; and in step 5, the mobile communication device will ask the user to input the one-time password as The key of the message authentication code; finally, in step 6, the financial voucher registration center queries the configured one-time password from the voucher application number transmitted by the mobile communication device, and uses the one-time password to verify whether the message authentication code is correct.

The detailed description of the present invention is intended to be illustrative of a preferred embodiment of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

To sum up, this case is not only innovative in terms of technical thinking, but also has many of the above-mentioned functions that are not in the traditional methods of the past. It has fully complied with the statutory invention patent requirements of novelty and progressiveness, and applied for it according to law. Approved this invention patent application, in order to invent invention, to the sense of virtue.

1. . . Mobile communication device

11. . . Mobile communication module

12. . . User identity module

13. . . Voucher management module

2. . . Mobile financial voucher management system

twenty one. . . Financial certificate application module

twenty two. . . Identity authentication module

twenty three. . . Voucher Registration Center Gateway Module

3. . . Mobile communication network provider

4. . . Telecommunications system

5. . . Financial system

6. . . Financial certificate registration center

7. . . Financial certificate management center

8. . . Mobile communication network

9. . . Internet

S501~S508. . . Mobile communication device operation process steps

S601~S609. . . Mobile communication device operation process steps

S701~S711. . . Mobile financial voucher system process steps

Please refer to the detailed description of the present invention and the accompanying drawings, and the technical contents of the present invention and its effects can be further understood; the related drawings are:

FIG. 1 is a system architecture diagram of applying for a financial certificate by using a mobile communication device according to the present invention.

FIG. 2 is a system module diagram of applying for a financial certificate by using a mobile communication device according to the present invention.

FIG. 3 is a structural diagram of a mobile phone financial voucher management module of a system for applying for a financial voucher using a mobile communication device according to the present invention.

FIG. 4 is a structural diagram of a module of a financial voucher registration center of a system for applying for a financial certificate using a mobile communication device according to the present invention.

Figure 5 is a flow chart showing the operation of one of the systems for applying for financial documents by using a mobile communication device.

FIG. 6 is a flow chart of the second operation of the system for applying for financial documents by using a mobile communication device according to the present invention.

FIG. 7 is a system flow chart of applying for a financial certificate by using a mobile communication device according to the present invention.

1. . . Mobile communication device

2. . . Mobile financial voucher management system

3. . . Mobile communication network provider

4. . . Telecommunications system

5. . . Financial system

6. . . Financial certificate registration center

7. . . Financial certificate management center

8. . . Mobile communication network

9. . . Internet

Claims (53)

A system for applying for a financial voucher using a mobile communication device, wherein the mobile device comprises: a mobile communication module, which is a mobile device with mobile communication network; a user identity module, the user identity module is a telecommunication The user identity module of the communication service, the user identity module stores at least one set of communication user identification codes, and the user identity module is placed in the slot of the mobile communication module; a voucher management module The voucher management module is installed in the operating system of the mobile communication module, and is used for the financial voucher application data received by the mobile communication module from the outside, the data includes an identity identification data and a financial data. And the basic data of the user, the financial certificate application function of the mobile communication module is transmitted to the mobile financial certificate management system for data verification; and the verification result message of the mobile financial certificate management system is received. , with a unique voucher application number, the module is then personally recognized by the mobile communication module. The code is used as a voucher to encrypt a set of randomly generated digital voucher application key pairs by using a password to generate a voucher application file and calculate a message authentication code for generating the voucher application file, and the module transmits the voucher application file and its message authentication code to The financial certificate registration center performs verification and receives and installs the certificate file of the center. For example, the system for applying for a financial certificate by using a mobile communication device according to claim 1 of the patent scope, wherein the communication user identification code of the user identity module is an international mobile subscriber identity code or a mobile phone number. For example, the system for applying for a financial certificate by using the mobile communication device according to Item 1 of the patent application, wherein the identity identification data received by the mobile communication module from the outside is an individual identity card number, a health insurance card number, or a natural person certificate number. For example, the system for applying for a financial certificate by using a mobile communication device according to claim 1 of the patent scope, wherein the financial information received by the mobile communication module from the outside is a personal bank account number or an electronic wallet account number. For example, the system for applying for a financial certificate using the mobile communication device in the first application of the patent scope, wherein the basic data of the user received by the mobile communication module from the outside is required to meet the basic information of the financial certificate application. The system for applying for a financial certificate by using a mobile communication device according to claim 1, wherein the voucher application file transmitted by the voucher management module includes at least one financial material, one user basic data, and a digital certificate application key pair. Public key. For example, the system for applying for a financial certificate by using a mobile communication device according to claim 1 of the patent scope, wherein the voucher management module is based on a financial transaction security requirement, a user personal identification number and a voucher application number, a user personal identification number, and the user identity model. The communication user identification code, the user personal identification number and the card number of the user identity module, the international mobile device identification code of the user personal identification number and the mobile communication module, or the user personal identification number, the voucher application number, The user identity module international mobile user identification code, the user identity module card number and the international mobile device identification code of the mobile communication module are arranged and used as a voucher password to improve the security of the voucher. For example, in the system for applying for a financial certificate using the mobile communication device according to the first aspect of the patent application, wherein the mobile communication module is a mobile communication module having a near field communication chip module, the voucher management module is a user identification number. The unique identification code combination in the near field communication chip module is used as a voucher password to improve the security of the voucher. For example, the system for applying for a financial certificate by using a mobile communication device according to claim 1 of the patent scope, wherein the voucher management module is a voucher application number for replying to the mobile phone financial voucher management system by using a key for generating a message authentication code. The system for applying for a financial certificate by using a mobile communication device according to claim 9 of the patent application, wherein the voucher management module transmits to the financial voucher registration center, and the verification data includes a voucher application file, a message authentication code, and a communication of the user identity module. User ID. The system for applying for a financial certificate by using a mobile communication device according to claim 1, wherein the voucher management module uses a key for generating a message authentication code, and the financial voucher registration center obtains the voucher application number from the mobile phone financial voucher management system. Communication data with the mobile communication module, and the one-time password is sent by the registration center to the mobile communication module as the key of the message authentication code. The system for applying for a financial certificate by using a mobile communication device according to claim 10, wherein the communication user identification code of the user identity module converts the communication user identification code into an identification replacement code by an algorithm. For example, in the system for applying for a financial certificate using the mobile communication device according to claim 10, wherein the communication user identification code of the user identity module is calculated by an algorithm to calculate the communication user identification code and the system time of the mobile communication module. To generate a verification replacement code that validates the aging. The system for applying for a financial certificate by using a mobile communication device according to claim 11, wherein the certificate management module transmits to the financial certificate registration center, and the verification data system includes at least one voucher application file, a message authentication code, and a unique certificate. Application number. A system for applying for a financial voucher using a mobile communication device, wherein the mobile financial voucher management system comprises: a financial voucher application module, which receives a mobile communication device from the mobile communication network and transmits a personal identification information, a financial Information, and financial voucher application data of a user's basic data, and through the mobile communication network provider of the mobile communication device, obtain the communication user identification code of the mobile communication device of the communication source, and then transmit the financial voucher application data and After the communication user ID to the identity verification module performs the identity verification and receives the verification result, the unique voucher application number and the data verification result are transmitted to the mobile communication device, and the voucher application number and the communication user identification code are transmitted to the voucher registration. The central gateway module receives the voucher application number and the voucher registration result transmitted by the credential registration center gateway module, and enables the user credential service function corresponding to the voucher application number according to the voucher registration result; Receiving financial certificate After the module transmits one of the identity identification data, a financial data, and a financial certificate application data and a communication user identification code of the user basic data, the financial certificate application data and the communication user identification code are transmitted to the telecommunication system and the financial system. After performing the authentication and judging according to the authentication result returned by the telecommunication system and the financial system, the authentication result of the financial voucher application module is returned, and the voucher registration center gateway module transmits the voucher application number and the communication user. The identification code is added to the financial voucher registration center, and the voucher application number and the voucher registration result returned by the registration center are received, and then returned to the financial voucher application module. For example, the mobile phone financial voucher management system of claim 15 wherein the financial voucher application module is an identity identification number and a health insurance card for receiving financial certificate application data transmitted from a mobile communication device of the mobile communication network. No., or natural person certificate number. For example, the mobile phone financial voucher management system of claim 15 wherein the financial voucher application module is configured to receive financial account information transmitted from a mobile communication device of the mobile communication network, and the financial information may be an individual bank account number. Or an e-wallet account. For example, the mobile phone financial voucher management system of claim 15 wherein the financial voucher application module receives the communication user identification code provided by the mobile communication network provider may be an international mobile subscriber identity code or a mobile phone number. For example, in the mobile phone financial voucher management system of claim 15th, the authentication data transmitted by the identity verification module to the telecommunication system is the identity identification data and the communication user identification code of the financial voucher application data. For example, in the mobile phone financial voucher management system of claim 15, wherein the authentication data transmitted by the identity verification module to the financial system is the identity identification data and financial information of the financial voucher application data. A system for applying for a financial voucher using a mobile communication device, wherein the financial voucher registration center synchronizes data with a voucher application number of a mobile financial voucher management system and a communication user identification code, and receives a voucher application transmitted by the mobile communication device. a file, a message authentication code, and a voucher application number or a communication user identification code, verifying the correctness of the message authentication code by using one of the keys, and then transmitting the financial information and user basic information of the voucher application file to the financial The system verifies the identity of the voucher applicant account, and responds to the verification result according to the financial system to decide to transmit the voucher application file to a financial voucher management center, and receives the voucher file returned by the management center, and then returns the voucher file to the voucher file. The mobile communication device notifies the mobile phone financial voucher management system of the voucher registration result of the voucher application number. For example, the financial certificate registration center of claim 21, wherein the registration center receives the communication user identification code of the mobile financial certificate management system as an international mobile user identification code or a mobile phone number. For example, the financial certificate registration center of claim 21, wherein the registration center receives the communication user identification code of the mobile phone financial voucher management system to convert the international mobile subscriber identification code into an identification replacement code by an algorithm. For example, in the financial certificate registration center of claim 21, wherein the registration center receives the mobile communication device as a communication user identification code, the key of the message authentication code is provided in the data of the mobile financial certificate management system. The voucher application number corresponding to the communication user ID. For example, in the financial certificate registration center of claim 21, wherein the registration center receives the mobile communication device as a voucher application number, the key of the message authentication code is provided in the information provided by the mobile phone financial voucher management system and the voucher application The communication user ID corresponding to the number. For example, the financial certificate registration center of claim 21, wherein the key of the registration center receiving the message authentication code is a one-time password. For example, the financial certificate registration center of claim 26, wherein the one-time password is transmitted by the registration center according to the communication user identification code provided by the mobile phone financial certificate management system, and the password is transmitted to the communication user identification code. Mobile communication device. A system for applying for a financial voucher using a mobile communication device, wherein the system comprises: a mobile communication device, which is a mobile communication device having the user identity module and the credential management module function, wherein the system includes (1) utilizing The mobile communication network connection function of the mobile communication device transmits a set of financial voucher application data including at least one identity identification data, one financial data, and one user basic data to a mobile phone financial voucher management system, and receives the mobile phone financial voucher management system. Replying to one of the voucher application number and the data verification result, (2) the device uses a user personal identification number as the voucher to use the password and encrypts a set of randomly generated digital voucher application key pairs to generate a set of voucher application files and their message authentication. After the code, the voucher application number, the voucher application file, the message authentication code to the financial voucher registration center for the financial voucher application, and the installation and installation of the voucher file provided by the registration center are transmitted, and the mobile communication network provider provides the Mobile communication service provider of mobile communication equipment, and the service provider The communication device transmits the financial voucher application data to the mobile phone financial voucher management system through the mobile communication network, obtains the communication user identification code of the mobile communication device and provides the mobile phone financial voucher management system; and a mobile phone financial voucher management system (1) receiving a group of financial voucher application materials transmitted from one of the mobile communication networks, and receiving the communication user identification code of the mobile communication device from the mobile communication network provider, and (2) transmitting the financial voucher application data separately. The communication user identification code is verified by a telecommunication system and a financial system, and judged by the data verification result of the two systems, and returns a set of unique voucher application number and data verification result of the mobile communication device through the mobile communication network. Synchronizing with a financial voucher registration center to provide the voucher application number and the communication user identification code, and (3) receiving the voucher registration result and the voucher application number transmitted by the financial voucher registration center, and enabling the voucher registration result according to the voucher registration result Corresponding to the voucher application number a voucher service function; a telecommunication system for receiving and verifying one of the identification information of the financial voucher application data transmitted by a mobile phone financial voucher management system, the telecommunication identity data of a communication user identification code, and replying to the verification result; The system is to (1) receive and verify one of the identification documents of the financial certificate application data transmitted by a mobile financial certificate management system, the financial identity data of a financial data, reply to the verification result, and (2) receive a financial The voucher registration center transmits the voucher application file and replies to the voucher application result; a financial voucher registration center is (1) receiving a voucher application number and a communication user identification code data provided by a mobile phone financial voucher management system, and receiving an action After the communication device transmits one of the voucher application number, a voucher application file, and a message authentication code, the voucher application file and the message authentication code are verified to be correct, and (2) the financial information and the user basic data of the voucher application file are transmitted to one. The financial system verifies the identity of the applicant's account and responds to the verification result in accordance with the financial system. Determining to transmit the voucher application file to a financial voucher management center and receiving one of the voucher issuing results and a voucher file of the management center, and (3) returning the voucher application number and the voucher registration result to the same according to the voucher issuing result a mobile phone financial voucher management system, and providing a voucher file to the mobile communication device; and a financial voucher management center, receiving the voucher application file transmitted by the financial voucher registration center, issuing a voucher file and returning the voucher file and a The certificate is issued to the registry. For example, in the system for applying for a financial certificate using the mobile communication device, the identification information transmitted by the mobile communication device is an identity card number, a health insurance card number, or a natural person certificate number. For example, the system for applying for a financial certificate by using a mobile communication device in claim 28, wherein the financial information transmitted by the mobile communication device is an individual bank account number or an electronic wallet account number. For example, the system for applying for a financial certificate using a mobile communication device according to claim 28, wherein the communication user identifier provided by the mobile communication network provider is an international mobile subscriber identity code or a mobile telephone number. For example, the system for applying for a financial certificate using the mobile communication device of claim 28, wherein the basic information of the user received by the mobile communication device from the outside is in accordance with the basic data requirement of the financial certificate application. To apply for a system for applying for financial documents by using a mobile communication device as claimed in claim 28, wherein the voucher application file transmitted by the mobile communication device includes at least one financial material, one user basic data, and a digital certificate application key pair. Public key. For example, the system for applying for a financial certificate by using a mobile communication device according to claim 28, wherein the credential management module of the mobile communication device can identify the user's personal identification number and the voucher application number according to the financial transaction security requirement, and identify the user personally. The number and the user ID of the user identity module, the user identification number and the card number of the user identity module, or the user's personal identification number, the voucher application number, the international mobile subscriber identity of the user identity module, The user identity module card number and the international mobile device identification code of the mobile communication device are arranged and used as a voucher password to improve the security of the voucher. For example, in the system for applying for a financial certificate using a mobile communication device according to claim 28, wherein the mobile communication device is a mobile communication device having a near field communication chip module, the mobile communication device is identified by a user personal identification number and The unique identification code combination in the near field communication chip module is used as a voucher to use the password to improve the security of the voucher. The system for applying for a financial certificate by using a mobile communication device according to claim 28, wherein the key used by the mobile communication device to generate the message authentication code is a communication user identification code of the mobile communication device. The system for applying for a financial certificate by using a mobile communication device according to claim 36, wherein the registration center receives the voucher application number received from the mobile financial certificate management system by receiving the voucher application number transmitted from the mobile communication device. The communication user identification code corresponding to the voucher application number is used as a key in the communication user ID data to verify the correctness of the message authentication code. For example, the system for applying for a financial certificate by using a mobile communication device according to claim 28, wherein the key used by the mobile communication device to generate the message authentication code is a one-time password. The system for applying for a financial certificate by using a mobile communication device according to claim 38, wherein the one-time password is directly transmitted by the registration center to a mobile communication identifier provided by the mobile financial certificate management system. Device. A method for applying for a financial voucher using a mobile communication device, the method comprising: step a. A mobile communication device receives a user input of a financial voucher application data including at least one identity identification data, a financial data, and a user basic data; step b. The mobile communication device transmits the financial voucher application data to a mobile financial voucher management system through the mobile communication network, and in the foregoing transmission process, the mobile financial voucher management system can be obtained from the mobile communication network provider of the mobile communication device The communication user identification code of the mobile communication device; step c. The mobile phone financial voucher management system respectively transmits the financial voucher application data, the communication user identification code to the telecommunication system and the financial system for authentication, and receives and judges the certification of the telecommunication system and the financial system As a result, returning a voucher application number and a data verification result to the mobile communication device to which the communication user identification code belongs and performing data synchronization to provide the voucher application number and the communication user identification code to the financial voucher registration center; step d. Communication equipment Transmitting the voucher application number and a voucher application file, wherein the voucher application file includes at least a financial data, a user basic data, a public key of a digital voucher application key pair, and a message authentication code of the voucher application file to a financial Voucher registration center; step e. After verifying the correctness of the message authentication code transmitted by the mobile communication device, the financial voucher registration center transmits the financial information of the voucher application file and the user basic data to a financial system for data verification, and uses the financial system The verification result of the return is used as the judgment of transmitting the voucher application file to a financial voucher management center; step f. The financial voucher management center receives the voucher application file, issues a voucher file according to the voucher issuing procedure, and returns the voucher file to the financial voucher The registration center; and step g. After receiving the voucher file, the financial voucher registration center notifies the mobile phone financial voucher management system that the voucher application number of the voucher application number is successful, and provides the voucher to the mobile communication device. For example, the method for applying for a financial certificate by using a mobile communication device according to claim 40, wherein the identity identification data is an identity card number, a health insurance card number, or a natural person certificate number. The method for applying for a financial certificate by using a mobile communication device according to claim 40 of the patent scope, wherein the financial information is an individual bank account number and an electronic wallet account number. For example, the method for applying for a financial certificate by using a mobile communication device according to claim 40 of the patent scope, wherein the basic information of the user is in accordance with the basic data requirement of the financial certificate application. For example, the method for applying for a financial certificate by using a mobile communication device according to claim 40, wherein the mobile subscriber identifier obtained by the mobile network provider may be an international mobile subscriber identification code and a mobile telephone number. The method for applying for a financial voucher by using a mobile communication device according to claim 40, wherein the digital voucher application key pair encrypts the digital voucher application key pair by using a user personal identification number input by a user as a voucher. The method for applying for a financial voucher by using a mobile communication device according to claim 40, wherein the digital voucher application key pair is a user identification number input by the user and an international mobile user identification of the user identity module of the mobile communication device. The combination of the code, the user's personal identification number input by the user and the user identity module card number of the mobile communication device, the user's personal identification number input by the user and the mobile communication device IMEI, and the user's personal identification number input by the user And the voucher application number is used as a voucher to encrypt the digital voucher application key pair, or the user personal identification number, the voucher application number, the international mobile user ID of the user identity module of the mobile communication device, The mobile communication device uses the password combination of the user identity module card number and the mobile device identification code of the mobile communication device as a voucher password to improve the security of the voucher. The method for applying for a financial certificate by using a mobile communication device according to claim 40, wherein when the mobile communication device is a mobile communication device having a near field communication chip module, the digital certificate application key pair is user input. The user identification number and the unique identification code combination in the near field communication chip module are used as a voucher password to encrypt the digital certificate application key pair to improve the security of the voucher. The method for applying for a financial certificate by using a mobile communication device according to claim 40, wherein the key of the message authentication code is a communication user identification code of the mobile communication device. The method for applying for a financial certificate by using a mobile communication device according to claim 48, wherein the communication user identification code is converted into an identification replacement code by an algorithm. For example, the method for applying for a financial certificate by using a mobile communication device according to claim 48, wherein the communication user identification code is changed by an algorithm to calculate the system time of the communication user identification code and the mobile communication device to generate a verification time limit. Replace the replacement code to replace it. The method for applying for a financial certificate by using a mobile communication device according to claim 40, wherein the financial certificate registration center queries the voucher application number and the communication user identification code data provided by the mobile phone financial voucher management system, and queries the voucher application number Corresponding communication user identification code and using the communication user identification code as the key of the verification message authentication code. The method for applying for a financial certificate by using a mobile communication device according to claim 40, wherein the one-time password is directly transmitted by the registration center to the mobile communication device to which the communication user identification code belongs. The method for applying for a financial certificate by using a mobile communication device according to claim 51, wherein the financial certificate registration center queries the voucher application number, and the one-time password assigned to the voucher application number by the financial voucher registration center is used as a verification message. The key of the authentication code.