CN104376464A - Safe code scanning payment method - Google Patents

Safe code scanning payment method Download PDF

Info

Publication number
CN104376464A
CN104376464A CN201410665315.8A CN201410665315A CN104376464A CN 104376464 A CN104376464 A CN 104376464A CN 201410665315 A CN201410665315 A CN 201410665315A CN 104376464 A CN104376464 A CN 104376464A
Authority
CN
China
Prior art keywords
payment
information
code
commodity
intelligence
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201410665315.8A
Other languages
Chinese (zh)
Inventor
聂明
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
CHINA SMARTCITY TECHNOLOGY Co Ltd
Original Assignee
CHINA SMARTCITY TECHNOLOGY Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by CHINA SMARTCITY TECHNOLOGY Co Ltd filed Critical CHINA SMARTCITY TECHNOLOGY Co Ltd
Priority to CN201410665315.8A priority Critical patent/CN104376464A/en
Publication of CN104376464A publication Critical patent/CN104376464A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327Short range or proximity payments by means of M-devices
    • G06Q20/3274Short range or proximity payments by means of M-devices using a pictured code, e.g. barcode or QR-code, being displayed on the M-device
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327Short range or proximity payments by means of M-devices
    • G06Q20/3276Short range or proximity payments by means of M-devices using a pictured code, e.g. barcode or QR-code, being read by the M-device
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction

Abstract

The invention discloses a safe code scanning payment method. A merchant prints commodity information on corresponding positions of commodities in an intelligent code mode or uploads the commodity information to corresponding positions of a website of the merchant; after a customer enters the shop, commodity intelligent codes of purchased commodities are scanned; after the customer has chosen the commodities, a secret key carrier is inserted or a payment APP is used, and a payment intelligent code is generated and includes commodity prices and/or customer account information and/or the commodity information; the payment intelligent code is scanned by the merchant, and a part of content of the payment intelligent code is decrypted and analyzed and transmitted to an account manager; a bank or a third party payment platform completes money deduction and account entry procedures according to information of the payment intelligent code, meanwhile, transaction success information is fed back to the merchant, and verification information is given to the customer; a transaction is completed. According to the safe code scanning payment method, customers can select and purchase commodities by themselves and place orders to generate payment intelligent codes; information is encrypted in the whole process, and the payment process is safe and reliable; payment is convenient, simple and direct; both merchants and customers can complete transactions quickly.

Description

A kind of safe barcode scanning mode of payment
Technical field
The present invention relates to a kind of safe barcode scanning mode of payment, be applicable to market, hotel, tourism, food and drink or other fields that barcode scanning can be used to pay the bill.
Background technology
Along with the development of economy, in payment, paid under upper thread by traditional, progressively move towards the line by internet pays.Along with the continuous progress of science and technology, IC industry obtains develop rapidly, and from strength to strength, volume is more and more less for IC chip functions, and price is more and more lower.Meanwhile, mechanics of communication is also in very fast development, and the application of smart mobile phone is very general, and the processing speed of smart mobile phone is also more and more faster, and function also from strength to strength.And wireless network covering is also progressively increase with the service traffics that can support.The development of these basic technologies, has promoted the further change of the modes of payments, based on the mode of mobile terminal payment, has been accepted gradually.
Along with popularizing of mobile payment mode, there is the method for sweeping Quick Response Code payment, there are two risks in this method: 1. client is before sweeping Quick Response Code, the information of not knowing Quick Response Code code, if this Quick Response Code occurs the disadvantageous information of client or behavior, client is ignorant in advance, such as has virus, and client just can know after barcode scanning; 2. the information of businessman or client is easily obtained by the mode of barcode scanning by other people.
Summary of the invention
Based on the demand, the present invention proposes a kind of safe barcode scanning mode of payment, the method can realize the patron self-service free choice of goods and place an order generating payment intelligence code; The encryption of information whole process, payment process is safe and reliable; Payment facilitates simple and direct; Businessman and client can complete transaction very soon.
Technical scheme of the present invention is as follows:
A safe barcode scanning mode of payment, comprises the following steps:
Step one, merchandise news is printed on commodity correspondence position with the form of intelligence code by hotel owner, or uploads to the correspondence position of its website;
Step 2, after client enters trade company, scans the commodity intelligence code of the commodity chosen;
Step 3, after client completes and chooses, inserts cipher key carrier or with payment APP, generates payment intelligence code, includes commodity price and/or clients account information and/or merchandise news in intelligence of paying the bill code;
Step 4, trade company's scanning payment intelligence code, deciphering and parsing payment in part intelligence digital content, pass to account management side by above-mentioned information;
Step 5, bank or Third-party payment are according to the information of payment intelligence code, and complete flow process of withholing and keep accounts, feedback trading successful information is to trade company simultaneously, and check information is to client;
Step 6, transaction completes.
Its further technical scheme is: the trade company in described step 2 is virtual trade company or entity trade company.
Its further technical scheme is: need deciphering in described step 4 and resolve merchandise news and price, and the accounts information of client can be selected non-decrypting.
Its further technical scheme is: the account management side in described step 4 is bank or Third-party payment.
Its further technical scheme is: the flow process that keeps accounts in described step 5 can postpone.
Advantageous Effects of the present invention is:
(1) after realizing client's free choice of goods, according to merchandise news, the APP automatically on the intelligent terminal of client generates payment intelligence code; Client's free choice of goods can be that line is chosen, also can be choose under line, after having chosen, client can use the APP of intelligent terminal to generate payment intelligence code, also payment intelligence code can be generated by cipher key carrier, because cipher key carrier is independent of intelligent terminal, cipher key carrier is therefore used to generate payment intelligence code safer.
(2) and this payment intelligence code validity sometimes, out-of-date invalid in official hour effectively, need to regenerate; Payment intelligence code comprises userspersonal information, accounts information, and free choice of goods information, and payment intelligence code has ageing, within the time of agreement effectively, out-of-date invalid, needs to regenerate, further increases payment security.
(3) businessman uses intelligent pos or intelligent terminal, scanning payment intelligence code, obtains clients account information and commodity and pricing information; Businessman can use intelligent pos or intelligent terminal, scanning payment intelligence code, obtain clients account information and commodity and pricing information, can decipher on the intelligent pos of businessman and resolve, or part be deciphered and parsing (such as only decipher commodity and pricing information, and the accounts information of client is non-decrypting and resolve, directly pass to background account manager, such as bank, Third-party payment, completes accounts information deciphering and resolves).
(4) payment process is convenient, can not need to input password, does not need bank card; In the process paid, due to whole process encryption, encrypted by cipher key carrier or APP, particularly adopt cipher key carrier encryption, client can not need password to complete payment, and whole process does not need bank card, also inputs account without client.
(5) information whole process encryption, payment process is safe and reliable; At employing payment intelligence code, or time intelligent terminal and crypto carrier or APP encryption pay, the encryption of payment process whole process, safe and reliable.
Accompanying drawing explanation
Fig. 1 is the cipher key carrier structural drawing in the present invention.
Fig. 2 is the trade company's scanning payment intelligence code process flow diagram in the present invention.
Embodiment
Below in conjunction with accompanying drawing, the specific embodiment of the present invention is described further.
The present invention proposes a kind of safe barcode scanning mode of payment, the method relates to the intelligent terminal of client, cipher key carrier, represents the ciphering two-dimension code (intelligence code of namely paying the bill) of clients account and free choice of goods information, the intelligent pos of businessman or intelligent terminal, and supports the Hardware & software system of said system.
Cipher key carrier structure as shown in Figure 1, comprises microprocessor, safety chip (comprising security logic, self-destruction unit), I/O interface (comprising USB/ serial ports/audio port), random access memory ram, read only memory ROM, the electronics formula of erasing can make carbon copies ROM (read-only memory) EEPROM.
The course of work of cipher key carrier comprises the steps:
Step one, by I/O interface (USB/ serial ports/audio port), or other safe read-write mouths, working procedure is solidificated in ROM in binary form, and the pseudo-random sequence that chaotic maps produces, fascination key, and private key is solidificated in the security logic of safety chip all in binary form;
Step 2, after having solidified, activation of microprocessor, RAM, ROM, EEPROM, security logic and self-destruction unit;
Step 3, is connected cipher key carrier with terminal, provides working power by I/O interface, and then starts microprocessor;
Step 4, is delivered to working procedure in microprocessor and RAM from ROM;
Step 5, reads in the information of the user spy in EEPROM, and the information that user is special is passed to security logic;
Step 6, the information of security logic to user spy identifies, completes authentication, and the work of information encryption and decryption;
Step 7, by I/O interface, is obtained external information, carries out encryption and decryption work, and result exported by I/O interface at security logic to external information;
Step 8, if continuous several times is not all by authentication in security logic, then thinks and None-identified user start self-destruction unit immediately, EEPROM is used for store the distinctive information of user all to destroy, meanwhile, in order to prevent reverse engineering, when continuous several times is not by authentication, start fascination key, follow-up authentication is all use fascination key to carry out authentication, even if reverse engineering success, the key obtained also is false.
As shown in Figure 2, step is as follows for scanning payment process of the present invention:
Step one, merchandise news is printed on commodity correspondence position with the form of intelligence code by hotel owner, or uploads to the correspondence position of its website;
Step 2, after client enters trade company (virtual trade company or entity trade company), scans the commodity intelligence code of the commodity chosen;
Step 3, after client completes and chooses, inserts cipher key carrier or with payment APP, generates payment intelligence code, includes commodity price and/or clients account information and/or merchandise news in intelligence of paying the bill code;
Step 4, trade company's scanning payment intelligence code, deciphering and parsing payment in part intelligence digital content, such as, decipher and resolve merchandise news and price, and the accounts information of client can be selected non-decrypting; Above-mentioned information is passed to account management side, such as bank or Third-party payment;
Step 5, bank or Third-party payment are according to the information of payment intelligence code, and complete flow process of withholing and keep accounts (flow process that keeps accounts can postpone), feedback trading successful information is to trade company simultaneously, and check information is to client;
Step 6, transaction completes.
Private key in cipher key carrier, adds the random series that produced by the chaotic maps secret variable as each private key combination in " the complex encryption computing " of the process produced at key, improves the ability of resistance against colluders.And Chaotic map sequence and private key are bundled in private key background data base.
" complex encryption computing ", includes the calculating of identity private key (isk), and the calculating of identity private key (isk) is carried out at KMC.If the i-th row row-coordinate wi used represents, make identity private key be isk, so private key realizes with the multiple addition on Galois field territory, then private key is:
isk = Σ i = 1 32 Sc i × r w i , i mod n
Sc ibe the pseudo-random sequence produced by chaotic maps, to be also the present invention be improves security performance, and prevent the measure of collusion attack, in systems in practice, can not have completely random sequence, be all pseudo-random sequence, and the pseudo-random sequence correlativity of different identification is the smaller the better.Due to the existence of Lyapunov exponent positive in chaos system, thus the fine difference between original state is amplified rapidly, finally become completely uncorrelated, therefore, by chaotic maps, such as logistic maps, according to the different id of user, configure different coefficients, produce different user, the pseudo-random sequence that cross correlation is minimum.
Sc icarry out dot product with the element in " private key matrix ", get the mould of n after cumulative, n is the parameter representing exponent number.
Same, PKI calculates and realizes with the doubly some addition on elliptic curve E, and corresponding PKI is:
IPK = Σ i = 1 32 Sc i × R w i , i (point adds)
By different chaotic maps, according to user ID, the extraordinary Sc of correlativity can be obtained ipseudo-random sequence.Bind with private key, these sequences are solidificated on private key carrier.
Above-described is only the preferred embodiment of the present invention, the invention is not restricted to above embodiment.Be appreciated that the oher improvements and changes that those skilled in the art directly derive without departing from the spirit and concept in the present invention or associate, all should think and be included within protection scope of the present invention.

Claims (5)

1. a barcode scanning mode of payment for safety, is characterized in that, comprise the following steps:
Step one, merchandise news is printed on commodity correspondence position with the form of intelligence code by hotel owner, or uploads to the correspondence position of its website;
Step 2, after client enters trade company, scans the commodity intelligence code of the commodity chosen;
Step 3, after client completes and chooses, inserts cipher key carrier or with payment APP, generates payment intelligence code, includes commodity price and/or clients account information and/or merchandise news in intelligence of paying the bill code;
Step 4, trade company's scanning payment intelligence code, deciphering and parsing payment in part intelligence digital content, pass to account management side by above-mentioned information;
Step 5, bank or Third-party payment are according to the information of payment intelligence code, and complete flow process of withholing and keep accounts, feedback trading successful information is to trade company simultaneously, and check information is to client;
Step 6, transaction completes.
2. safe barcode scanning mode of payment according to claim 1, is characterized in that: the trade company in described step 2 is virtual trade company or entity trade company.
3. safe barcode scanning mode of payment according to claim 1, is characterized in that: need deciphering in described step 4 and resolve merchandise news and price, and the accounts information of client can be selected non-decrypting.
4. safe barcode scanning mode of payment according to claim 1, is characterized in that: the account management side in described step 4 is bank or Third-party payment.
5. safe barcode scanning mode of payment according to claim 1, is characterized in that: the flow process that keeps accounts in described step 5 can postpone.
CN201410665315.8A 2014-11-19 2014-11-19 Safe code scanning payment method Pending CN104376464A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410665315.8A CN104376464A (en) 2014-11-19 2014-11-19 Safe code scanning payment method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410665315.8A CN104376464A (en) 2014-11-19 2014-11-19 Safe code scanning payment method

Publications (1)

Publication Number Publication Date
CN104376464A true CN104376464A (en) 2015-02-25

Family

ID=52555357

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410665315.8A Pending CN104376464A (en) 2014-11-19 2014-11-19 Safe code scanning payment method

Country Status (1)

Country Link
CN (1) CN104376464A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106920088A (en) * 2017-01-24 2017-07-04 深圳市广和通无线股份有限公司 Method of payment and device
CN109255620A (en) * 2018-09-28 2019-01-22 努比亚技术有限公司 Encrypting payment method, mobile terminal and computer readable storage medium
CN110322237A (en) * 2019-05-23 2019-10-11 平安银行股份有限公司 A kind of method, apparatus and storage medium generating transaction code

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101299286A (en) * 2007-04-30 2008-11-05 胡红雨 Method and system for using phone to generate authentication pattern to perform POS payment as well as mobile phone
CN102842081A (en) * 2011-06-23 2012-12-26 上海易悠通信息科技有限公司 Method for generating two-dimensional code and implementing mobile payment by mobile phone
CN102982448A (en) * 2011-09-06 2013-03-20 上海博路信息技术有限公司 Code scanning payment method of mobile terminal
CN103765453A (en) * 2011-02-16 2014-04-30 维萨国际服务协会 Snap mobile payment apparatuses, methods and systems
KR20140095260A (en) * 2013-01-24 2014-08-01 박희광 Hybrid payment system and method in mobile terminal based on QR member
CN104077511A (en) * 2014-07-09 2014-10-01 上海象形通讯科技有限公司 Non-contact processor card based on combined public key authentication and use method

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101299286A (en) * 2007-04-30 2008-11-05 胡红雨 Method and system for using phone to generate authentication pattern to perform POS payment as well as mobile phone
CN103765453A (en) * 2011-02-16 2014-04-30 维萨国际服务协会 Snap mobile payment apparatuses, methods and systems
CN102842081A (en) * 2011-06-23 2012-12-26 上海易悠通信息科技有限公司 Method for generating two-dimensional code and implementing mobile payment by mobile phone
CN102982448A (en) * 2011-09-06 2013-03-20 上海博路信息技术有限公司 Code scanning payment method of mobile terminal
KR20140095260A (en) * 2013-01-24 2014-08-01 박희광 Hybrid payment system and method in mobile terminal based on QR member
CN104077511A (en) * 2014-07-09 2014-10-01 上海象形通讯科技有限公司 Non-contact processor card based on combined public key authentication and use method

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106920088A (en) * 2017-01-24 2017-07-04 深圳市广和通无线股份有限公司 Method of payment and device
CN109255620A (en) * 2018-09-28 2019-01-22 努比亚技术有限公司 Encrypting payment method, mobile terminal and computer readable storage medium
CN109255620B (en) * 2018-09-28 2023-09-08 努比亚技术有限公司 Encryption payment method, mobile terminal and computer readable storage medium
CN110322237A (en) * 2019-05-23 2019-10-11 平安银行股份有限公司 A kind of method, apparatus and storage medium generating transaction code

Similar Documents

Publication Publication Date Title
US11880829B2 (en) Provisioning of access credentials using device codes
van den Breekel et al. EMV in a nutshell
CN104376462A (en) Safe code scanning payment method
US11544707B2 (en) Systems and methods for cryptographic authentication of contactless cards
CN105593883B (en) Method for verifying a transaction
US9864983B2 (en) Payment method, payment server performing the same and payment system performing the same
JP4874251B2 (en) Method and apparatus for authenticating a transaction using a dynamic authentication code
US20150324800A1 (en) System and Method of Processing PIN-Based Payment Transactions via Mobile Devices
US20140279558A1 (en) Two-Way, Token-Based Validation for NFC-Enabled Transactions
KR101138283B1 (en) Method and system of mobile payment
US20020128977A1 (en) Microchip-enabled online transaction system
CN107210918A (en) Use the token and password of transaction-specific information
TWI734764B (en) Multi-dimensional barcode mobile payment method
US20170103389A1 (en) Electronic Payment Validation and Authorization System
TWI684152B (en) Payment method and device
US10296905B2 (en) Method and system using quantum random generator
CN104318437B (en) Payment system and its method of payment in a kind of virtual prepayment card line
CN104240074A (en) Prepaid card online payment system based on identity authentication and payment method of prepaid card online payment system
KR20160021292A (en) Method for securing a validation step of an online transaction
CN104376465A (en) Safe mobile payment method
CN103959312A (en) Method of paying for a product or service on a commercial website via an internet connection and a corresponding terminal
CN104376464A (en) Safe code scanning payment method
El Madhoun et al. The EMV Payment System: Is It Reliable?
Hnaif et al. Mobile payment method based on public-key cryptography
CN104268780A (en) Trade order confirmation method and device and server

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20150225

RJ01 Rejection of invention patent application after publication