CN103164796A - Payment method and system in e-commerce - Google Patents
Payment method and system in e-commerce Download PDFInfo
- Publication number
- CN103164796A CN103164796A CN2013100597094A CN201310059709A CN103164796A CN 103164796 A CN103164796 A CN 103164796A CN 2013100597094 A CN2013100597094 A CN 2013100597094A CN 201310059709 A CN201310059709 A CN 201310059709A CN 103164796 A CN103164796 A CN 103164796A
- Authority
- CN
- China
- Prior art keywords
- user
- credit card
- information
- commerce system
- card information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Abstract
The invention provides a payment method and a system in e-commerce. The e-commerce system comprises a human-computer interaction module, a payment server and a bank server. The human-computer interaction module is used for a user to input information of a user name. The payment server comprises a user identity authentication module and a credit card information retrieval module, wherein the user identity authentication module is used for carrying out authentication on the identity of the user according to the received information of the user name and a scheduled authentication algorithm, and the credit card information retrieval module is used for retrieving out credit card information of the user from a data bank according to the received information of the user name when the received information of the user name passes the authentication by the user identity authentication module. The bank server is used for carrying out the authentication and payment according to the credit card information received from the credit card information retrieval module.
Description
Technical field
The invention belongs to networking technology area, method of payment and system in a kind of ecommerce.
Background technology
Internet (Internet) is the International Computer Network that wide area network, LAN (Local Area Network) and unit form according to certain communications protocol.The internet starts from the research project of U.S. Department of Defense in 1969, and it occurs is the revolution of the communication technology.Although be the internet of developing for military purposes at first, be the mankind's interchange service from producing from it.
The internet is flourish in the nearest more than ten years, has obtained being widely used in the fields such as information, communication and ecommerce, and popularity rate is more and more higher.Along with the application of various internets is developed, the user can be by the Internet chat, play games, inspection information etc., can also do shopping, advertising and business transaction.And among the above-mentioned application of internet, ecommerce is a swift and violent field of development in recent years.
So-called ecommerce, the business activity of being undertaken by electronically exactly.Particularly, ecommerce is to utilize computer technology, network technology and telecommunication technique to realize a kind of business mode of the whole business procedure of electronization, digitizing and networking.
In e-commerce environment, the each side that concludes the business carries out business transaction by the virtual trading platform that above-mentioned technological means builds.Businessman and purchaser no longer are subjected to the restriction of region, need not meet, and can complete over comparatively numerous and diverse business activity in very simple and direct mode.This is undoubtedly to bringing great convenience property of business transaction.
But people also will face its respective risk of bringing in the while easily that the enjoyment ecommerce brings.Be appreciated that in traditional transaction way, generally speaking both parties are aspectant, therefore are easy to guarantee the security of process of exchange and set up trusting relationship.But in the ecommerce process, both parties are that the virtual trading platform by network struction contacts and concludes the business, so both parties face different security threats.
For example, there is very big difference in the E-Payment of adopting in ecommerce with traditional transaction way environment of living in and the problem faced, also thereby face larger security threat.
The credit card that extensively adopts in the ecommerce is paid by mails as example, generally speaking, the purchaser need to transfer to seller with credit card number and the corresponding additional information (for example only code of card back) of oneself, seller can will be confirmed according to this information and issuing bank, if confirm that credit card and consumption amount are effective, can ask to carry out payment process.
There are a lot of security breaches in above-mentioned payment process.At first, because whole purchase and payment process are undertaken by the network platform, the purchaser does not meet with seller, so seller can't carry out authentication to the purchaser, thereby confirms that it is the legal holder of credit card.In traditional process of exchange, seller for example can authenticate by signature and the relevant username information identity that holds to the purchaser that carries out Credit Card Payments, and this is difficult to realize in the ecommerce process.Therefore, seller can face the credit card robber brush of non-legal holden and the corresponding legal risk of therefore bringing.On the other hand, in the credit card electronic payment process of ecommerce, need to Enter Your Credit Card Information by certain user interface and with this communication to seller and issuing bank, in this input and transmitting procedure, credit card information may be revealed or be stolen, thereby brings economic loss to the holder.
Therefore, need a kind of safer method of payment and the system that are used for ecommerce.
Summary of the invention
Target of the present invention is to provide method of payment and the system in a kind of ecommerce, and its credit card information that can prevent the user is revealed, thereby provides higher security for e-commerce transaction.
For solving the problems of the technologies described above, the present invention adopts following technical scheme:
A kind of e-commerce system comprises:
Human-computer interaction module is used for the user and inputs username information;
Paying server, it comprises:
An authenticating user identification module authenticates for reach the identity of predetermined identifying algorithm to the user according to the username information that receives, and
A credit card information retrieval module retrieves user's credit card information according to the username information that receives when being used at described username information the authentication by the authenticating user identification module from a database; And
Bank server authenticates and pays according to the user credit card information that receives from the credit card information retrieval module.
Wherein, described human-computer interaction module be any can the user and e-commerce system between the hardware of information interaction or input equipment or the user interface of software form.
It, described username information is any only information that can identify this user identity.
Wherein, described username information is the form of numeral, character string, various spoken and written languages and combination thereof.
Wherein, described username information is different from described user's credit card number.
Wherein, described credit card information is described user's credit number, name, sex, identifying code and consumption amount.
Wherein, the data in described database are stored with the mode of encrypting.
Wherein, described database is administered and maintained by the third party outside the transaction litigant of described e-commerce system.
Wherein, the communication between described credit card information retrieval module and bank server carries out with cipher mode.
Method of payment in a kind of e-commerce system comprises:
Username information to user's input authenticates;
After authentication, according to the credit card information of described username information retrieval user; With
User's credit card center is sent to bank server pays.
Description of drawings
Fig. 1 is the composition schematic diagram of e-commerce system of the present invention;
Fig. 2 is the schematic diagram of the database structure on credit card server of the present invention; With
Fig. 3 is the process flow diagram according to method of payment in e-commerce system of the present invention.
Embodiment
With reference to figure 1, wherein show e-commerce system of the present invention.
As shown in Figure 1, e-commerce system 100 comprises human-computer interaction module 101, is used for user and other modules of e-commerce system and carries out information interaction.Human-computer interaction module 101 can be anyly can realize the hardware of above-mentioned purpose or input equipment or the user interface of software form.
Human-computer interaction module 101 allows the user to input predetermined username information, and above-mentioned username information can be any only information that can identify this user identity, includes but not limited to numeral, character string, various spoken and written languages and combination thereof etc.Only exception be that described username information is not advised the credit card number for being the user.Described username information is set in advance by the user, and is stored in paying server 102.
Human-computer interaction module 101 is sent to the username information that receives the authenticating user identification module 1021 of paying server 102.The username information that authentication module 1021 bases receive and predetermined identifying algorithm authenticate user's identity.Authentication is to confirm the common technology of user identity in computer network field, one of ordinary skill in the art will appreciate that, any suitable authentication algorithm may be used to the present invention, such as password (comprising dynamic password), password, biological characteristic (fingerprint, sound, signature and iris etc.) etc.Above-mentioned identifying algorithm is the state of the art, repeats no more herein.
When the user passed through the authentication of authentication module 1021, authentication module 1021 notice credit card information retrieval modules 1022 also were sent to credit card information retrieval module 1022 with above-mentioned username information.
A database can be set up and safeguard to e-commerce system 100, is used for storage user's username information and corresponding credit card information.
Fig. 2 is the schematic diagram of the database structure on credit card server of the present invention.As shown in Figure 2, when authentication module 1021 confirms that by identifying algorithm username information has passed through authentication for the user of " John_Wang ", credit card information retrieval module 1022 just can accessing database and is obtained this user's credit card information, such as its card number, name, sex, identifying code and consumption amount etc.Be appreciated that database information shown in Figure 2 is exemplary, the structure of flexible design database according to specific needs in implementing process of the present invention.
Credit card information retrieval module 1022 retrieves user's credit card information and sends it to issuing bank's server 103 according to the username information that receives.Be appreciated that issuing bank's server 103 after receiving described credit card information, will authenticate and determine whether to permit Credit Card Payments according to authentication result it.
Be appreciated that the data in above-mentioned database can store to improve its security with the mode of encrypting.Any existing encryption method may be used to the encryption of this database, repeats no more herein.In addition, above-mentioned database can be administered and maintained by the trusted third party outside the transaction litigant, thereby further strengthens the security of sensitive data.One of ordinary skill in the art will appreciate that, paying server 102 integral body can be managed by the trusted third party outside the transaction litigant, thereby further strengthen the security of payment process.
In addition, the communication between credit card information retrieval module 1022 and bank server 103 can carry out with cipher mode, thereby guarantees the security of user's credit card information.Any existing encrypted transmission method may be used to the encryption of this message transmitting procedure, repeats no more herein.
Can find out by above-mentioned explanation, in e-commerce system 100 of the present invention, the user only needs its username information that arranges arbitrarily in advance of input and carries out authentication based on this username information in the Credit Card Payments process.The user need not to input any sensitive information relevant to credit card, thereby has avoided its credit card information and steal and usurp in the input process of payment.User's credit card information is stored in independently in server with cipher mode, only has through after authentication, and server just directly is sent to bank server request payment with user's credit card information with cipher mode.Therefore, can greatly reduce the possibility that credit card information is stolen in transmitting procedure.
Fig. 3 is the process flow diagram according to method of payment in e-commerce system of the present invention.
As shown in Figure 3, comprise according to method of payment in e-commerce system of the present invention:
Step S301, the username information that the user is inputted authenticates;
Step S302 is after authentication, according to the credit card information of described username information retrieval user;
Step S303 is sent to bank server with user's credit card center and pays.
Be appreciated that when user in step S301 does not pass through authentication, can finish payment process or ask again to authenticate or adopt other reasonable manners to process in step S304.
Here description of the invention and application is all illustrative and schematic, is not to be to want with scope restriction of the present invention in the above-described embodiments.Here the distortion of disclosed embodiment and change is fully possible, and for those those of ordinary skill in the art, the various parts of the replacement of embodiment and equivalence are all known.Those skilled in the art also are noted that, in the situation that do not break away from spirit of the present invention or essential characteristic, the present invention can be with other form, structure, layout, ratio, and realize with other assembly, material and parts, and in the situation that do not break away from the scope of the invention and spirit, can carry out other distortion and change to disclosed embodiment here.
Claims (10)
1. an e-commerce system (100), is characterized in that, comprising:
Human-computer interaction module (101) is used for the user and inputs username information;
Paying server (102), it comprises:
An authenticating user identification module (1021) authenticates for reach the identity of predetermined identifying algorithm to the user according to the username information that receives, and
A credit card information retrieval module (1022), the username information that when being used at the described username information authentication by authenticating user identification module (1021), basis receives retrieves user's credit card information from a database; And
Bank server (103) authenticates and pays according to the user credit card information that receives from credit card information retrieval module (1022).
2. e-commerce system as claimed in claim 1 (100), wherein:
Described human-computer interaction module (101) be any can the user and e-commerce system (100) between the hardware of information interaction or input equipment or the user interface of software form.
3. e-commerce system as claimed in claim 1 (100), wherein:
Described username information is any only information that can identify this user identity.
4. e-commerce system as claimed in claim 3 (100), wherein:
Described username information is the form of numeral, character string, various spoken and written languages and combination thereof.
5. e-commerce system as claimed in claim 1 (100), wherein:
Described username information is different from described user's credit card number.
6. e-commerce system as claimed in claim 1 (100), wherein:
Described credit card information is described user's credit number, name, sex, identifying code and consumption amount.
7. e-commerce system as claimed in claim 1 (100), wherein:
Data in described database are stored with the mode of encrypting.
8. e-commerce system as claimed in claim 1 (100), wherein:
Described database is administered and maintained by the third party outside the transaction litigant of described e-commerce system.
9. e-commerce system as claimed in claim 1 (100), wherein:
Communication between described credit card information retrieval module (1022) and bank server (103) carries out with cipher mode.
10. the method for payment in an e-commerce system, is characterized in that, comprising:
Username information to user's input authenticates (S301);
After authentication, according to the credit card information (S302) of described username information retrieval user; With
User's credit card center is sent to bank server pays (S303).
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2013100597094A CN103164796A (en) | 2013-02-26 | 2013-02-26 | Payment method and system in e-commerce |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2013100597094A CN103164796A (en) | 2013-02-26 | 2013-02-26 | Payment method and system in e-commerce |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN103164796A true CN103164796A (en) | 2013-06-19 |
Family
ID=48587860
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2013100597094A Pending CN103164796A (en) | 2013-02-26 | 2013-02-26 | Payment method and system in e-commerce |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103164796A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111429124A (en) * | 2019-01-10 | 2020-07-17 | 达声蔚 | Transfer method, device, storage medium and terminal based on face recognition |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5903721A (en) * | 1997-03-13 | 1999-05-11 | cha|Technologies Services, Inc. | Method and system for secure online transaction processing |
| CN1465026A (en) * | 2001-06-11 | 2003-12-31 | 索尼公司 | Electronic commercial transaction support method |
| CN101051372A (en) * | 2006-04-06 | 2007-10-10 | 北京易富金川科技有限公司 | Method for safety verifying financial business information in electronic business |
-
2013
- 2013-02-26 CN CN2013100597094A patent/CN103164796A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5903721A (en) * | 1997-03-13 | 1999-05-11 | cha|Technologies Services, Inc. | Method and system for secure online transaction processing |
| CN1465026A (en) * | 2001-06-11 | 2003-12-31 | 索尼公司 | Electronic commercial transaction support method |
| CN101051372A (en) * | 2006-04-06 | 2007-10-10 | 北京易富金川科技有限公司 | Method for safety verifying financial business information in electronic business |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111429124A (en) * | 2019-01-10 | 2020-07-17 | 达声蔚 | Transfer method, device, storage medium and terminal based on face recognition |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11895225B2 (en) | Systems and methods for trustworthy electronic authentication using a computing device | |
| KR102052036B1 (en) | Method for obtaining data through searching and merging distributed data stored using blockchain | |
| AU2014308610B2 (en) | System and method for identity management | |
| Ahmed et al. | Security in next generation mobile payment systems: A comprehensive survey | |
| Windley | Digital Identity: Unmasking identity management architecture (IMA) | |
| US20170161726A1 (en) | Account provisioning authentication | |
| US20090172402A1 (en) | Multi-factor authentication and certification system for electronic transactions | |
| US20090106138A1 (en) | Transaction authentication over independent network | |
| US20130104214A1 (en) | Token based two factor authentication and virtual private networking system for network management and security and online third party multiple network management method | |
| WO2020107233A1 (en) | Blockchain-based wallet system, method of use of wallet and storage medium | |
| EP3183701B1 (en) | Client, computing platform, and methods for conducting secure transactions | |
| JP2009048627A (en) | Method and apparatus for performing delegated transaction | |
| US20120278876A1 (en) | System, method and business model for an identity/credential service provider | |
| CN109741800A (en) | The method for security protection of medical data intranet and extranet interaction based on block chain technology | |
| CN109660534A (en) | Safety certifying method, device, electronic equipment and storage medium based on more trade companies | |
| CN107240010A (en) | The method and system of digital cash is transferred to digital cash chip card | |
| Feng et al. | Research on mobile commerce payment management based on the face biometric authentication | |
| CN104935550A (en) | Intelligent electronic commerce user management system technique and operating method thereof | |
| Yohan et al. | A novel authentication protocol for micropayment with wearable devices | |
| Neeharika et al. | A Novel Interoperable Mobile Wallet Model with Capability Based Access Control Framework | |
| CN103164796A (en) | Payment method and system in e-commerce | |
| CN108446909A (en) | A kind of electronic signature method based on biological characteristic electronic business card | |
| US20080040784A1 (en) | Procedure and Multi-Key Card to Avoid Internet Fraud | |
| US10140611B1 (en) | Electronic device with light-generating sources to illuminate an indicium | |
| Mohanty et al. | Nfc featured triple tier atm protection |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20130619 |