創新支付系統研究與實作

Abstract

隨著互聯網的蓬勃發展，在台灣每年電子商務的市場規模已經破兆，大多數國人在過去一年內有網購，其中又以行動購物成長最快。然而，信用卡網路盜刷案例層出不窮，網購的安全性一直是消費民眾最擔憂的問題之一。目前台灣電商的線上支付流程大多沒有採用驗證機制，少部分採用OTP驗證。台灣近年因手機簡訊的驗證機制遭到破解，手機小額付費盜用案例、金額創新高。簡單來說，目前網銀、網購中普遍使用的手機簡訊 OTP 驗證碼，是由業者發送一組驗證到消費者手機，再從電腦填寫回傳，只要手機遺失或是被植入木馬程式，駭客輕易能夠從中攔截驗證碼進而盜用。 本研究透過創新發想，提出一套全新的身份驗證機制。成立第三方身份驗證平台，透過 RFID 識別以及生物識別技術中的指紋識別，認證使用者的身份。強化網路交易的安全性，讓消費者能以更方便、快捷、安全的新付款模式交易。 除了提出創新構想外，本研究也著重實作。在研究中實際開發此創新驗證機制，並制定 API 介面。此外，本研究亦實作了一電子商務平台銜接 API，作為整套系統流程的示範。 本研究的結論總結創新支付系統的優點，以及目前技術上的限制。期許未來系統能夠繼續發展，帶給消費者更便利、安全的網購環境。

Following the flourishing development of internet shopping, in Taiwan each year the ecommerce market size exceeds a trillion dollars . Most of Taiwanese within last year did online shopping, among which mobile shopping had the fastest growth. However, there were many cases of online credit card fraud. The security of internet shopping is the most worrisome concern for consumers. Currently, many of Taiwan’s ecommerce businesses do not adopt a verification mechanism for online payment procedures, while a few adopt OTP verification. Because the verification system for SMS in Taiwan was cracked in recent years, the amount and cases of small mobile payment thefts reached a new high. Simply put, the merchant sends a set of SMS OTP verification codes, which are widely used in internet banking and internet shopping, to the consumers’ mobile phones, and the computer fills in the codes and returns SMS. The hacker only needs to steal the phone or implant a Trojan to easily intercept and steal a verification code. This study through innovative thinking, proposed a set of completely new verification mechanisms. The establishment of third-party authentication platform, through RFID identification and fingerprint identification in biometric identification technology can verify the user’s identity. The strong security of online transactions lets consumers conduct a new payment mode of transactions that is more convenient, faster, and safer. In addition to proposing a new concept, this study also focused on implementation. In developing an innovative verification mechanism, this study also developed the API interface. This study also implemented an API-linked ecommerce platform as the scope of the whole system process. This study’s conclusion summarizes the advantages of the innovative payment system and the limitations of the current technology. Perhaps in the future the system can continue to be developed, giving consumers a more convenient and secure internet shopping environment.