TWI767254B - Authorization system and method thereof - Google Patents

Abstract

An authorization system comprises a transaction server end, a certification server end and a user end unit. The user end unit obtains first identity data from a first chip card, and transfers an authorization request to the certification server end according to the first identity data. Upon the certification server receiving and determining the authorization request conforms to an authorization required condition, the certification server end outputs an authorization demand notification which can be read by the user end unit. The user end unit obtains second identity data from a second chip card, and transfers an authorization agreement indication corresponding to the authorization request to the certification server end according to the second identity data. Upon the certification server end determining the authorization agreement indication conforms to an authorization qualification condition, the certification server end outputs an authorized accomplished notification to the transaction server end, so that the transaction server end executes an online financial service process.

Description

Financial Services Processing System and Method

The present invention relates to a financial service processing system and method, in particular to a financial service processing system and method using a chip card for authorization.

In the modern society with developed network communication, users can easily conduct various online transactions through electronic devices such as computers or mobile phones. However, for underage users, if they use online transaction services without the knowledge of their guardians, many disputes may arise in the future. Therefore, how to prevent the aforementioned situation has become the purpose of this case. issue.

One of the objects of the present invention is to provide a financial service processing system which can improve the inconvenience of the prior art.

The financial service processing system of the present invention is suitable for a first chip card and a second chip card; the financial service processing system comprises a transaction server, an authentication server electrically connected to the transaction server, and an authentication server for electrically connecting the transaction server end-use unit. The user unit obtains a first identity data from the first chip card after sending a financial service request to the transaction server, and generates and provides an authorization request including the first identity data to the authentication server. When the authentication server receives the authorization request and determines that the authorization request meets an authorization requirement, it outputs an authorization requirement notification that can be read by the user unit. The user-end unit obtains a second identity data from the second chip card, and generates and provides a pair of consent authorization instructions corresponding to the authorization request and including the second identity data to the authentication server. When the authentication server receives the consent and authorization instruction and determines that the consent and authorization instruction meets an authorization qualification condition related to the first identity data, it outputs an authorization completion notification to the transaction server, so that the transaction server Execute a pair of online financial service programs in response to the financial service request according to the authorization completion notification.

In some implementation aspects of the financial service processing system of the present invention, the consumer unit includes a first consumer for electrically connecting to the transaction server, and a second consumer for electrically connecting to the transaction server. The first identity information is obtained from the first chip card by the first user, and the authorization request is generated by the first user and transmitted to the authentication server via the transaction server. The authorization requirement notification output by the authentication server can be read by the second user. The second identity information is obtained by the second user terminal from the second chip card, and the consent authorization instruction is generated by the second user terminal and transmitted to the authentication server through the transaction server.

In some implementation aspects of the financial service processing system of the present invention, the authorization requirement includes that a current age indicated by the first identity information does not reach a predetermined age threshold, and the authorization qualification includes the second identity An identification data included in the data matches a guardian data included in the first identity data.

In some implementation aspects of the financial service processing system of the present invention, the authorization request further includes a first input identification code generated by the user unit according to the user's input, and the first identity information includes a stored in the The first identification code of the first chip card. The authentication server only outputs the authorization request notification when it determines that the authorization request meets a first check condition and the authorization-required condition, wherein the first check condition includes the first input identification code. A first reference portion corresponds to a first target portion of the first ID. The consent authorization instruction further includes a second input identification code generated by the user-end unit according to the user's input, and the second identity data includes a second identification code stored in the second chip card. The authentication server only outputs the authorization completion notification to the transaction server when it determines that the consent and authorization instruction meets a second check condition and the authorization qualification condition, wherein the second check condition includes the second check condition A second reference portion of the input identification code corresponds to a second target portion of the second identity identification code.

In some implementation aspects of the financial service processing system of the present invention, the authorization request further includes a first signature result generated by the first chip card at least according to the first identity information, and the first verification condition It also includes that the first signature result can be used to determine that the first identity data included in the authorization request has data integrity and non-repudiation. The consent authorization instruction further includes a second signature result generated by the second chip card based on at least the second identity information, and the second verification condition further includes that the second signature result can be used to determine The second identity information contained in the consent authorization instruction has data integrity and non-repudiation.

Another object of the present invention is to provide a financial service processing method implemented by the financial service processing system.

The financial service processing method of the present invention is implemented by a financial service processing system, the financial service processing system is suitable for a first chip card and a second chip card, and includes a transaction server, an authentication server and a user unit; The financial service processing method includes: (A) after the user unit transmits a financial service request to the transaction server, obtains a first identity data from the first chip card, and generates and provides a data containing the first identity The authorization request for the data is sent to the authentication server; (B) when the authentication server receives the authorization request and determines that the authorization request meets a required authorization condition, it outputs an authorization request that can be read by the user unit Notify; (C) the user-end unit obtains a second identity data from the second chip card, and generates and provides a consent authorization instruction corresponding to the authorization request and including the second identity data to the authentication server; (D ) When the authentication server receives the consent and authorization instruction and determines that the consent and authorization instruction meets an authorization qualification condition related to the first identity data, it outputs an authorization completion notification to the transaction server, so that the transaction server The terminal executes a pair of online financial service programs in response to the financial service request according to the authorization completion notification.

In some implementation aspects of the financial service processing method of the present invention, the consumer unit includes a first consumer electrically connected to the transaction server, and a second consumer electrically connected to the transaction server. In step (A), the first identity information is obtained by the first user from the first chip card, and the authorization request is generated by the first user and sent to the authentication via the transaction server server side. In step (B), the authorization requirement notification output by the authentication server can be read by the second user. In step (C), the second identity information is obtained by the second user terminal from the second chip card, and the consent authorization instruction is generated by the second user terminal and transmitted to the transaction server through the transaction server Authentication server.

In some implementation aspects of the financial service processing method of the present invention, in step (B), the authorization requirement includes that a current age indicated by the first identity data does not reach a predetermined age threshold, and in step (B) In D), the authorization qualification condition includes that an identification data contained in the second identity data matches a guardian data contained in the first identity data.

In some implementation aspects of the financial service processing method of the present invention, in step (A), the authorization request further includes a first input identification code generated by the user unit according to the user's input, and the first input identification code is The identity data includes a first identity code stored in the first chip card. In step (B), the authentication server only outputs the authorization request notification when it determines that the authorization request meets a first check condition and the authorization-needed condition, wherein the first check condition includes the first check condition. A first reference portion of an input identification code corresponds to a first target portion of the first identity identification code. In step (C), the consent and authorization instruction further includes a second input identification code generated by the user-end unit according to the user's input, and the second identity data includes a stored in the second chip card. Secondary ID. In step (D), the authentication server only outputs the authorization completion notification to the transaction server when it determines that the consent authorization instruction meets a second check condition and the authorization qualification condition, wherein the second The check condition includes that a second reference part of the second input ID matches a second target part of the second ID.

In some implementation aspects of the financial service processing method of the present invention, in step (A), the authorization request further includes a first signature result generated by the first chip card at least according to the first identity information. In step (B), the first verification condition further includes that the first signature result can be used to determine that the first identity data included in the authorization request has data integrity and non-repudiation. In step (C), the consent authorization instruction further includes a second signature result generated by the second chip card at least according to the second identity information. In step (D), the second verification condition further includes that the second signature result can be used to determine that the second identity data included in the consent authorization instruction has data integrity and non-repudiation.

The effect of the present invention is that the consumer unit of the financial service processing system can first generate and transmit the authorization request to the authentication server by using the first chip card, and then generate and transmit the consent authorization instruction by using the second chip card to The authentication server, and the transaction server will execute the online financial service program corresponding to the financial service request only after the authentication server determines that the consent authorization instruction meets the authorization qualification conditions, whereby the financial service The processing system helps to ensure that the online financial service program is executed only after being authorized by the licensor to treat the licensor, and can avoid subsequent disputes, so it can effectively improve the inconvenience of the existing technology.

Before the present invention is described in detail, it should be noted that the "electrical connection" mentioned in this patent specification generally refers to a wired electrical connection between a plurality of electronic devices/devices/elements connected through conductive materials, as well as through wireless communication. Technology A radio connection for wireless signal transmission. In addition, the "electrical connection" mentioned in this patent specification also generally refers to the "direct electrical connection" formed by the direct connection between two electronic devices/devices/components, and the two electronic devices/devices/components are also connected through An "indirect electrical connection" formed by connecting other electronic equipment/devices/components.

Referring to FIG. 1 , a first embodiment of a financial service processing system 1 of the present invention is suitable, for example, for a first chip card 101 corresponding to a person to be authorized, and a second chip card 102 corresponding to an authorized person. In the application of this embodiment, the person to be authorized may be, for example, a user whose current age is under the age of majority, and the person to be authorized may be, for example, the guardian of the person to be authorized (for example, the father or mother of the person to be authorized) ), and the first chip card 101 and the second chip card 102 are, for example, divided into a digital identity card (also called New eID) of the person to be authorized, and a digital identity of the authorized person identification card, but not limited to this.

The financial service processing system 1 includes a transaction server 10, an authentication server 11 electrically connected to the transaction server 10, and an authentication server 11 for electrically connecting via a communication network (such as the Internet, not shown in the figure). The user unit 12 of the transaction server 10 . In this embodiment, the transaction server 10 and the authentication server 11 may be managed by, for example, a financial institution, but not limited thereto. On the other hand, the user end unit 12 may include, for example, a first user end 121 for electrically connecting to the authentication server 11 , and a second user end 122 for electrically connecting the authentication server 11 . The first user terminal 121 may be, for example, held by the person to be authorized, and the first user terminal 121 may be implemented, for example, as a smart electronic device (such as a smart phone or a tablet computer) or a computer device (such as a tablet or desktop computer). On the other hand, the second user terminal 122 can be, for example, held by the licensor, and the second user terminal 122 can be implemented as an intelligent electronic device or a computer device, for example.

Referring to FIG. 2 (composed of FIGS. 2A and 2B ), the following exemplarily describes in detail how the financial service processing system 1 of the present embodiment implements a financial service processing method.

First, in step S1 , the first user 121 generates and transmits a financial service request to the transaction server 10 according to the operation of the user (for example, the operation by the person to be authorized). In this embodiment, the financial service request indicates, for example, a financial service item (eg, opening a digital deposit account), but not limited thereto. Next, the flow proceeds to step S2.

In step S2, when the transaction server 10 receives the financial service request from the first user 121, and determines that the financial service item indicated by the financial service request needs to be authenticated by the authentication server 11 When the user is an adult, the transaction server 10 generates and transmits an authorization data input notification to the first user terminal 121 for the first user terminal 121 to display the authorization data input notification, thereby prompting the user to use the authorization data input notification. A chip card 101 and the first user terminal 121 input relevant data for authentication. Next, the flow proceeds to step S3.

In step S3, the first user terminal 121 establishes an electrical connection with the first chip card 101 according to the operation of the user (eg, the operation by the person to be authorized). More specifically, in this embodiment, the first user terminal 121 may establish a radio connection with the first chip card 101 through its own near field communication function (ie, Near Field Communication, NFC for short), for example, A wired electrical connection with the first chip card 101 can also be established, for example, through a card reader (not shown). Next, the flow proceeds to step S4.

In step S4, when the first user end 121 is electrically connected to the first chip card 101, when the first user end 121 receives a first input password and a first input identification code When logging in data, the first user terminal 121 transmits the first input password to the first chip card 101 for a processor (not shown) of the first chip card 101 to determine the first Is the password entered correctly. It should be added that the first login data is generated by the first user terminal 121 according to the manual input of the user (for example, the person to be authorized), and the first input identification code can be generated by the person to be authorized, for example. The ID number of the first user terminal 121 is manually input according to the guidance of the interface displayed by the first user terminal 121, but not limited thereto. Next, the flow proceeds to step S5.

In step S5 , when the processor of the first chip card 101 determines that the first input password is correct, the first user 121 obtains a first identity information and a first signature from the first chip card 101 Chapter results. In this embodiment, the first identity information includes, for example, a first identity code, a date of birth and two pieces of guardian information stored in the first chip card 101 , and the first signature result is, for example, It is generated by the processor of the first chip card 101 according to at least the first identity information and a private key stored in the first chip card 101, but not limited thereto. More specifically, the first identity code can be, for example, the identity card number of the person to be authorized stored in the first chip card 101 , and the date of birth can be, for example, stored in the first chip card 101 The birthday of the person to be authorized, and the two guardian data can be, for example, a father's name and a mother's name of the person to be authorized stored in the first chip card 101, respectively, but not limited thereto . Next, the flow proceeds to step S6.

In step S6, the first user 121 generates and provides an authorization request to the authentication server 11 according to the operation of the person to be authorized, for example, and the authorization request in this embodiment includes, for example, the first identity information, The first signature result and the first input identification code. It should be added that, in this embodiment, the first user 121 provides the authorization request to the authentication server 11, for example, the authorization request is first transmitted to the transaction server 10, and then the transaction The server 10 transmits the authorization request to the authentication server 11 through the internal network of the financial institution, but is not limited thereto. Next, the flow proceeds to step S7.

In step S7, when the authentication server 11 receives the authorization request from the first user 121, the authentication server 11 determines whether the authorization request complies with a first check condition and an authorization requirement.

Specifically, in this embodiment, the first check condition includes, for example, that a first reference part of the first input identification code of the authorization request matches a first identification code of the authorization request. The first target part and the first signature result of the authorization request can be used to determine that the first identity information of the authorization request has data integrity and non-repudiation, but is not limited thereto.

In this embodiment, the first reference part may be, for example, the last four codes of the first input identification code, and the first target part may be, for example, the last four codes of the first identification code, but not limited. In other words, if the first reference part matches the first target part, it means that the last four codes of the identity card number entered by the user (for example, the person to be authorized) are stored in the first chip card 101 The last four digits of the ID number are the same.

Moreover, in this embodiment, the authentication server 11 may, for example, utilize public key encryption standards (ie Public Key Cryptography Standards, referred to as PKCS), public key infrastructure (ie Public Key Infrastructure, referred to as PKI), X. 509. Verify the first signature result using at least one of international standards such as Certificate Revocation List (Certificate Revocation List, CRL for short) and Online Certificate Status Protocol (OCSP for short), etc. To determine whether the first identity data included in the authorization request has data integrity and non-repudiation, but not limited thereto.

On the other hand, in this embodiment, the authorization requirement includes, for example, that a current age indicated by the date of birth of the first identity data does not reach a predetermined age threshold, and the predetermined age threshold can be set, for example, by Implemented as an age of majority value (eg, 18), but not limited to this.

If the authentication server 11 determines that the authorization request does not meet any one of the first checking condition and the authorization-needing condition, the process proceeds to step S8. On the other hand, if the authentication server 11 determines that the authorization request complies with the first verification condition and the authorization-required condition, the flow proceeds to step S9.

In step S8 following step S7, once the authentication server 11 determines that the authorization request does not meet any one of the first verification condition and the authorization-required condition, the authentication server 11 generates and transmits a The authorization request failure notification is notified to the first user terminal 121, so that the first user terminal 121 outputs the authorization request failure notification for the user (eg, the person to be authorized) to refer to.

In step S9 following step S7, once the authentication server 11 determines that the authorization request complies with the first verification condition and the authorization requirement, the authentication server 11 generates and outputs an output that can be used by the second The authorization requirement notification read by the terminal 122. Specifically, the authorization requirement notification can be implemented, for example, as an email that can be read by the second consumer 122, a notification message sent to the second consumer 122, or a notification sent to the second consumer 122. The application program of the second user terminal 122 is pushed, but not limited to this. Next, the flow proceeds to step S10.

In step S10 , the second user terminal 122 communicates with the second chip according to the user's operation (for example, after the licensor reads the authorization requirement notification through the second user terminal 122 ) and the second chip Card 102 establishes an electrical connection. In this embodiment, similar to the first user end 121 , the second user end 122 can be wirelessly connected to the second chip card 102 through its own near field communication function, or it can also be through A card reader (not shown) is wired and electrically connected to the second chip card 102 . Next, the flow proceeds to step S11.

In step S11, when the second user terminal 122 is electrically connected to the second chip card 102, when the second user terminal 122 receives a first input code including a second input password and a second input identification code When logging in the data, the second user terminal 122 transmits the second input password to the second chip card 102 for a processor (not shown) of the second chip card 102 to determine the second Is the password entered correctly. It should be added that the second login information is generated by the second user terminal 122 according to the manual input of the user (for example, the authorizable person), and the second input identification code can be, for example, the authorizable person. The ID number of the second user terminal 122 is manually input according to the guidance of the interface displayed by the first user terminal 121, but not limited thereto. Next, the flow proceeds to step S12.

In step S12 , when the processor of the second chip card 102 determines that the second input password is correct, the second user terminal 122 obtains a second identity information and a second signature from the second chip card 102 Chapter results. In this embodiment, the second identity data includes, for example, a second identity code and an identification data stored in the second chip card 102, and the second signature result is, for example, obtained from the second chip card The processor of 102 is generated at least according to the second identity data, but not limited thereto. More specifically, the second identification code can be, for example, the identity card number of the authorized person stored in the second chip card 102 , and the identification data can be, for example, stored in the second chip card 102 but not limited to the name of the licensor within. Next, the flow proceeds to step S13.

In step S13 , the second user 122 generates and provides an authorization instruction corresponding to the authorization request to the authentication server 11 , for example, according to the operation of the licensor, and the authorization instruction includes the second identity, for example data, the second signature result and the second input identification code. It should be added that, in this embodiment, the second user 122 provides the consent and authorization instruction to the authentication server 11, for example, firstly transmits the consent and authorization instruction to the transaction server 10, and then sends the consent and authorization instruction to the transaction server 10. The transaction server 10 transmits the consent and authorization instruction to the authentication server 11 through the internal network of the financial institution, but is not limited thereto. Next, the flow proceeds to step S14.

In step S14, when the authentication server 11 receives the consent authorization instruction from the second user 122, the authentication server 11 determines whether the consent authorization instruction complies with a second check condition and an authorization qualification condition.

Specifically, in this embodiment, the second check condition includes, for example, that a second reference part of the second input identification code of the consent authorization instruction matches that of the first identification code of the consent authorization instruction A second target part of the consent and authorization instruction, and the second signature result of the consent authorization instruction can be used to determine the data integrity and non-repudiation of the second identity information of the consent authorization instruction, but not limited thereto.

In this embodiment, the second reference part may be, for example, the last four digits of the second input identification code, and the second target part may be, for example, the last four digits of the second identification code, but not limited. In other words, if the second reference part matches the second target part, it means that the last four codes of the identity card number input by the user (eg, the authorized person) and stored in the second chip card 102 The last four digits of the ID number are the same. In addition, the authentication server 11 can, for example, utilize at least one of the public key encryption standard, the public key infrastructure, X.509, the certificate revocation list and the online certificate status agreement to obtain the second signature result. Verification is performed to determine whether the second identity information included in the consent and authorization instruction has data integrity and non-repudiation, but not limited thereto.

On the other hand, in this embodiment, the authorization qualification condition includes, for example, that the identification data of the second identity data (that is, the name of the authorizable person) matches the data of the two guardians of the first identity data (that is, the name of the authorizable person). one of the father’s name and the mother’s name). However, in other embodiments, the authorization qualification condition may also represent, for example, that a current age indicated by the second identity data has reached the predetermined age threshold, which is not limited to this embodiment.

If the authentication server 11 determines that the authorization approval instruction does not meet any one of the second verification condition and the authorization qualification condition, the process proceeds to step S15 . On the other hand, if the authentication server 11 determines that the authorization approval instruction complies with the second verification condition and the authorization qualification condition, the flow proceeds to step S16.

In step S15 subsequent to step S14, once the authentication server 11 determines that the approval authorization instruction does not meet any one of the second verification condition and the authorization qualification condition, the authentication server 11 generates and transmits An authorization failure notification is sent to the second user terminal 122, so that the second user terminal 122 outputs the authorization failure notification for the user (eg, the licensor) to refer to.

In step S16 following step S14, once the authentication server 11 determines that the approval authorization instruction meets the second verification condition and the authorization qualification condition, the authentication server 11 generates and transmits a corresponding financial service request The authorization completion notification is sent to the transaction server 10 . Next, the flow proceeds to step S17.

In step S17, when the transaction server 10 receives the authorization completion notification from the authentication server 11, the transaction server 10 executes an online financial service program corresponding to the financial service request according to the authorization completion notification. For example, the online financial service program opens a digital deposit account belonging to the person to be authorized, but not limited thereto.

The above is the financial service processing method implemented by the financial service processing system 1 of this embodiment. It should be supplemented that this embodiment can also be used in applications requiring multiple authentifiers to perform multiple authorizations. More specifically, in the financial service processing method, the financial service processing system 1 may further use the chip cards of other licensors through the consumer unit 12 to repeatedly perform the authorization process of steps S10 to S14.

The present invention also provides a second embodiment of the financial service processing system 1 . Different from the first embodiment, in the second embodiment, the user unit 12 is implemented as a single user end shared by the person to be authorized and the authorized person, for example, and in the second embodiment In the financial service processing method, the consumer can implement each step performed by the first consumer 121 and the second consumer 122 in the first embodiment. Therefore, the financial service processing system 1 and the financial The specific implementation aspect of the service processing method is not limited to the first embodiment. Moreover, in a further implementation aspect, when the authentication server 11 receives the authorization request and the consent authorization instruction, it may, for example, further query an identity database (not shown) to confirm the authorization request. Whether the first identity information and the second identity information of the consent authorization instruction are correct, wherein, the identity database may be, for example, a financial joint credit information center or a government agency (such as a household registration office or by the National Development Commission) management, but not limited to this.

The present invention also provides a third embodiment of the financial service processing system 1 . Different from the first embodiment, since the legal guardian of the person to be authorized is not necessarily a parent, in step S5 of the financial service processing method of the third embodiment, the first identity information does not include the first identity information. The two guardian data described in the embodiment. Moreover, in step S7 of the third embodiment, when the authentication server 11 receives the authorization request, the authentication server 11, for example, further sends an instant message to a user according to the first identity code included in the authorization request. The identity database queries a proxy guardian of the person to be authorized, and obtains the identity card number and name of the proxy guardian from the identity database. Wherein, the identity database may be managed by, for example, a financial joint credit information center or a government agency, but it is not limited thereto. In addition, in step S14 of the third embodiment, the authorization qualification condition is, for example, that the second identification code representing the consent authorization instruction and the identification data correspond to the ID number and name of the proxy guardian, respectively.

To sum up, by implementing the financial service processing method, the first user 121 of the financial service processing system 1 can first generate and transmit the authorization request to the authentication server 11 by using the first chip card 101, and then, The second user 122 then uses the second chip card 102 to generate and transmit the consent and authorization instruction to the authentication server 11 , and the transaction server 10 will determine in the authentication server 11 that the consent and authorization instruction conforms to the The online financial service program corresponding to the financial service request is executed only after the second checking condition and the authorization qualification condition, whereby the financial service processing system 1 helps to ensure that the online financial service program is treated by an authorized person Only the authorization of the licensor is executed, and subsequent disputes can be avoided, so the purpose of the present invention can indeed be achieved.

However, the above are only examples of the present invention, and should not limit the scope of the present invention. Any simple equivalent changes and modifications made according to the scope of the application for patent of the present invention and the content of the patent specification are still within the scope of the present invention. within the scope of the invention patent.

1: Financial Services Processing System 10: Transaction Server 11: Authentication server 12: Use end unit 121: The first user end 122: The second user terminal 101: The first chip card 102: Second chip card S1~S17: Steps

Other features and effects of the present invention will be clearly presented in the embodiments with reference to the drawings, wherein: FIG. 1 is a schematic block diagram of a first embodiment of a financial service processing system of the present invention; and FIG. 2 (consisting of FIGS. 2A and 2B ) is a flow chart illustrating how the first embodiment implements a financial services processing method.

1: Financial Services Processing System

10: Transaction Server

11: Authentication server

12: Use end unit

121: The first user end

122: The second user terminal

101: The first chip card

102: Second chip card

Claims (10)

A financial service processing system is applicable to a first chip card and a second chip card; the financial service processing system includes: a transaction server; an authentication server, electrically connected to the transaction server; and a user-end unit for electrically connecting the transaction server; in: After sending a financial service request to the transaction server, the user unit obtains a first identity data from the first chip card, and generates and provides an authorization request including the first identity data to the authentication server; When the authentication server receives the authorization request and determines that the authorization request meets an authorization requirement, it outputs an authorization requirement notification that can be read by the user unit; The user-end unit obtains a second identity data from the second chip card, and generates and provides a pair of consent authorization instructions that respond to the authorization request and include the second identity data to the authentication server; When the authentication server receives the consent and authorization instruction and determines that the consent and authorization instruction meets an authorization qualification condition related to the first identity data, it outputs an authorization completion notification to the transaction server, so that the transaction server Execute a pair of online financial service programs in response to the financial service request according to the authorization completion notification. The financial services processing system of claim 1, wherein: The user-end unit includes a first user-end for electrically connecting to the transaction server, and a second user-end for electrically connecting to the transaction server; the first identity data is obtained by the first user from the first chip card, and the authorization request is generated by the first user and sent to the authentication server via the transaction server; The authorization request notification output by the authentication server can be read by the second user; and The second identity information is obtained by the second user terminal from the second chip card, and the consent authorization instruction is generated by the second user terminal and transmitted to the authentication server through the transaction server. The financial service processing system of claim 1, wherein the authorization requirement includes that a current age indicated by the first identity information does not reach a predetermined age threshold, and the authorization qualification includes the second identity An identification data included in the data matches a guardian data included in the first identity data. The financial services processing system of claim 3, wherein: The authorization request further includes a first input identification code generated by the user unit according to the user's input, and the first identity data includes a first identification code stored in the first chip card; The authentication server only outputs the authorization request notification when it determines that the authorization request meets a first check condition and the authorization-required condition, wherein the first check condition includes the first input identification code. a first reference portion corresponds to a first target portion of the first ID; The consent authorization instruction further includes a second input identification code generated by the user-end unit according to the user's input, and the second identity data includes a second identification code stored in the second chip card; and The authentication server only outputs the authorization completion notification to the transaction server when it determines that the consent and authorization instruction meets a second check condition and the authorization qualification condition, wherein the second check condition includes the second check condition A second reference portion of the input identification code corresponds to a second target portion of the second identity identification code. The financial services processing system of claim 4, wherein: The authorization request further includes a first signature result generated by the first chip card based on at least the first identity information, and the first verification condition further includes that the first signature result can be used to determine the that the primary identity data included in the authorization request is data integrity and non-repudiation; and The consent authorization instruction further includes a second signature result generated by the second chip card based on at least the second identity information, and the second verification condition further includes that the second signature result can be used to determine The second identity information contained in the consent authorization instruction has data integrity and non-repudiation. A financial service processing method is implemented by a financial service processing system, the financial service processing system is suitable for a first chip card and a second chip card, and includes a transaction server, an authentication server and a user unit; This financial services processing method includes: (A) After sending a financial service request to the transaction server, the user unit obtains a first identity information from the first chip card, and generates and provides an authorization request including the first identity information to the authentication server side; (B) when the authentication server receives the authorization request and determines that the authorization request meets an authorization requirement, it outputs an authorization requirement notification that can be read by the user unit; (C) the user-end unit obtains a second identity data from the second chip card, and generates and provides a consent authorization instruction that includes the second identity data in response to the authorization request to the authentication server; and (D) When the authentication server receives the consent and authorization instruction and determines that the consent and authorization instruction meets an authorization qualification condition related to the first identity data, it outputs an authorization completion notification to the transaction server, so that the The transaction server executes an online financial service program corresponding to the financial service request according to the authorization completion notification. The financial service processing method as claimed in claim 6, wherein: The user-end unit includes a first user-end for electrically connecting to the transaction server, and a second user-end for electrically connecting to the transaction server; In step (A), the first identity information is obtained by the first user from the first chip card, and the authorization request is generated by the first user and sent to the authentication via the transaction server server side; In step (B), the authorization request notification output by the authentication server can be read by the second user; and In step (C), the second identity information is obtained by the second user terminal from the second chip card, and the consent authorization instruction is generated by the second user terminal and transmitted to the transaction server through the transaction server Authentication server. The financial service processing method according to claim 6, wherein, in step (B), the authorization requirement includes that a current age indicated by the first identity data does not reach a preset age threshold, and in step (B) In D), the authorization qualification condition includes that an identification data contained in the second identity data matches a guardian data contained in the first identity data. The financial service processing method as claimed in claim 8, wherein: In step (A), the authorization request further includes a first input identification code generated by the user unit according to the user's input, and the first identity data includes a first ID stored in the first chip card. an identity code; In step (B), the authentication server only outputs the authorization request notification when it determines that the authorization request meets a first check condition and the authorization-needed condition, wherein the first check condition includes the first check condition. A first reference portion of an input identifier corresponds to a first target portion of the first identity identifier; In step (C), the consent and authorization instruction further includes a second input identification code generated by the user-end unit according to the user's input, and the second identity data includes a stored in the second chip card. secondary identity code; and In step (D), the authentication server only outputs the authorization completion notification to the transaction server when it determines that the consent authorization instruction meets a second check condition and the authorization qualification condition, wherein the second The check condition includes that a second reference part of the second input ID matches a second target part of the second ID. The financial service processing method as claimed in claim 9, wherein: In step (A), the authorization request further includes a first signature result generated by the first chip card at least according to the first identity information; In step (B), the first verification condition further includes that the first signature result can be used to determine that the first identity data included in the authorization request has data integrity and non-repudiation; In step (C), the consent authorization instruction further includes a second signature result generated by the second chip card based on at least the second identity information; and In step (D), the second verification condition further includes that the second signature result can be used to determine that the second identity data included in the consent authorization instruction has data integrity and non-repudiation.

Images