CN105956844B

CN105956844B - Payment method and system

Info

Publication number: CN105956844B
Application number: CN201610158231.4A
Authority: CN
Inventors: 李明
Original assignee: 李明
Current assignee: Tendyron Corp
Priority date: 2016-03-18
Filing date: 2016-03-18
Publication date: 2020-01-21
Anticipated expiration: 2036-03-18
Also published as: CN105956844A

Abstract

The invention provides a payment method and a payment system, wherein the method comprises the following steps: after detecting that a biological limb carrying or internally provided with a payer device is contacted with the payee device or after detecting that the payer device sends a signal through the biological limb, the payee device establishes human body communication connection with the payer device through the biological limb; the payee device receives matching information transmitted by the payer device through the human body communication connection, and establishes a first wireless communication connection with the payer device by using the matching information; the payee device receives first authentication information including digital authentication information transmitted by the payer device through a first wireless communication connection, and the payee device acquires biological characteristic information of a biological limb during a continuous period when the payer device establishes a human body communication connection with the payee device through the biological limb; the payee device executes the payment transaction if the authentication result of the authentication of the digital authentication information and the biometric information is that the authentication is passed.

Description

Payment method and system

Technical Field

The invention relates to the technical field of electronics, in particular to a payment method and a payment system.

Background

Compared with cash payment, electronic payment has the advantages of safety, rapidness, reliability and the like. POS, as a payment terminal, is widely used in electronic payment. The existing POS machine reads magnetic stripe information of a card holder of a bank card through a card reader, an operator of the POS machine inputs transaction amount, the card holder swipes a bank card on the POS machine, then a password is input, and the POS machine uploads the information to a bank background to complete online transaction. Therefore, in the existing electronic payment process, a user needs to execute two operations, the bank card is put on the POS machine for the first time to be connected with the POS machine, the user needs to input a password for the second time, and the operation process is complex.

Disclosure of Invention

The present invention is directed to solving one of the problems set forth above.

The invention mainly aims to provide a payment method.

It is another object of the present invention to provide a payment system.

In order to achieve the purpose, the technical scheme of the invention is realized as follows:

scheme 1, a payment method, comprising: after detecting that a biological limb carrying or internally provided with a payer device is contacted with the payee device or after detecting that the payer device sends a signal through the biological limb, the payee device establishes human body communication connection with the payer device through the biological limb; the payer device transmitting matching information to the payee device through the human body communication connection; the payee device receives the matching information transmitted by the payer device through the human body communication connection, and establishes a first wireless communication connection with the payer device by using the matching information; the payer device sending first authentication information to the payee device over the first wireless communication connection, wherein the first authentication information includes: digital authentication information; the payee device receiving the first authentication information transmitted by the payer device over the first wireless communication connection; the payee device collecting biometric information of the biological limb for the duration of the human body communication connection established by the payer device with the payee device via the biological limb; the payee device obtains an authentication result for authenticating the digital authentication information and the biological characteristic information; the payee device performs a payment transaction if the authentication result is authentication pass.

Scheme 2, the method of scheme 1, the matching information at least includes: the MAC address of the payer device and the identity of the payer device; the payee device establishing a first wireless communication connection with the payer device using the matching information, including: after the payee device receives the matching information through the human body communication connection, a connection request for establishing the first wireless communication connection is initiated to the payer device through the human body communication connection according to the MAC address; the payee device receives a confirmation response of the payer device through the human body communication connection, and establishes the first wireless communication connection with the payer device.

Scheme 3, the method of scheme 2, where the payee device initiates a connection request to the payer device to establish the first wireless communication connection through the human body communication connection according to the MAC address, includes: and the payee equipment matches the identity with an identity stored locally in the payee equipment, if the matching is unsuccessful, a request for establishing the first wireless communication connection is initiated to the payer equipment through the human body communication connection according to the MAC address, and the matching information is stored.

Scheme 4 the method of any of schemes 1 to 3, the first wireless communication connection comprising: bluetooth connection, WIFI connection, flux connection, or RFID connection.

Scheme 5, the method of any of schemes 1 to 4, further comprising, after the payee device completes execution of the payment transaction: the payee device disconnects the first wireless communication connection with the payer device.

Scheme 6, the method of scheme 5, after the payee device disconnects the first wireless communication connection with the payer device, the method further comprising: and judging whether the biological limb is not in a preset range of the payee equipment, and/or judging whether the time length from the current time to the end of the transaction reaches a preset threshold value, and if so, deleting the matching information.

Scheme 7, the method of any of schemes 1-6, further comprising, before the payer device sends the first authentication information to the payee device over the first wireless communication connection: the payee device sending transaction information to the payer device via the first wireless communication connection; the payer device receiving the transaction information; the payer device extracting key information from the transaction information; the payer device prompts the key information and waits for user confirmation; and after receiving a confirmation instruction of the user, the payer equipment executes the step of sending the first authentication information to the payee equipment by the payer equipment through the first wireless communication connection.

Scheme 8 the method of any of schemes 1 to 7, wherein the biometric information comprises: fingerprint information and/or vein information; the acquiring the biological characteristic information of the biological limb comprises: collecting the biometric information of a contact location of the biological limb with the payee device when the biological limb is in contact with the payee device.

Scheme 9, the method of any of schemes 1 to 8, wherein the digital authentication information comprises at least one of: electronic signature information, ciphertext information obtained by using symmetric key calculation and a dynamic password.

Scheme 10, a payment system, comprising: a payee device and a payer device, wherein: the payee device is used for establishing human body communication connection with the payer device through the biological limb after detecting that the biological limb carrying or internally provided with the payer device is contacted with the payee device or detecting that the payer device sends a signal through the biological limb; the payer device is used for transmitting matching information to the payee device through the human body communication connection; the payee device is also used for receiving the matching information transmitted by the payer device through the human body communication connection and establishing a first wireless communication connection with the payer device by utilizing the matching information; the payer device is further configured to send first authentication information to the payee device via the first wireless communication connection, where the first authentication information includes: digital authentication information; the payee device is further configured to receive the first authentication information transmitted by the payer device via the first wireless communication connection; collecting biometric information of the biometric limb for the duration that the payer device establishes a human body communication connection with the payee device via the biometric limb; and obtaining an authentication result for authenticating the digital authentication information and the biological characteristic information; and executing the payment transaction under the condition that the authentication result is authentication pass.

Scheme 11, the system according to scheme 10, the matching information at least includes: the MAC address of the payer device and the identity of the payer device; the payee device is further configured to establish a first wireless communication connection with the payer device using the matching information, including: the payee device is further configured to initiate a connection request for establishing the first wireless communication connection to the payer device through the human body communication connection according to the MAC address after receiving the matching information through the human body communication connection; the payer device is further configured to establish the first wireless communication connection with the payee device after receiving the connection request through the human body communication connection.

Scheme 12, the system according to scheme 11, the payee device further configured to initiate a connection request for establishing the first wireless communication connection to the payer device through the human body communication connection according to the MAC address, including: and the payee equipment matches the identity with an identity stored locally in the payee equipment, if the matching is unsuccessful, a request for establishing the first wireless communication connection is initiated to the payer equipment through the human body communication connection according to the MAC address, and the matching information is stored.

Scheme 13 the system of any one of schemes 10 to 12, the first wireless communication connection comprising: bluetooth connection, WIFI connection, flux connection, or RFID connection.

Scheme 14, the system of any of schemes 10 to 13, the payee device further configured to disconnect the first wireless communication connection with the payer device after the execution of the payment transaction is completed.

Scheme 15, the system according to scheme 14, wherein the payee device is further configured to determine whether the biological limb is not within a preset range of the payee device after disconnecting the first wireless communication connection with the payer device, and/or determine whether a time length from a current time to the end of the transaction reaches a preset threshold, and if so, delete the matching information.

Case 16, the system of any of cases 10 to 15, wherein the payer device is further configured to receive the transaction information sent by the payee device via the first wireless communication connection before sending the first authentication information to the payee device via the first wireless communication connection; extracting key information from the transaction information; prompting the key information and waiting for confirmation of a user; and after receiving a confirmation instruction of the user, executing the operation of sending the first authentication information to the payee device through the first wireless communication connection.

Scheme 17, the system of any of schemes 10 to 16, the biometric information comprising: fingerprint information and/or vein information; the payee device being further configured to collect biometric information of the biological limb including: the payee device collects the biometric information of the contact portion of the biological limb and the payee device when the biological limb is in contact with the payee device.

Scheme 18, the system according to any one of schemes 10 to 17, the digital authentication information including at least one of: electronic signature information, ciphertext information obtained by using symmetric key calculation and a dynamic password.

According to the technical scheme provided by the invention, the payment method and the payment system are provided, the matching information is transmitted by utilizing human body communication, wireless communication such as WIFI, Bluetooth and the like is established through the matching information, user intervention is not needed, the process of establishing the wireless communication connection is short in time consumption, and the user experience is improved. And because the matching information of the payee device needs to be transmitted through human body communication, the matching information of the payee device can be acquired only under the condition of meeting the human body communication, and further the potential safety hazard that the matching information of the existing wireless device is easily acquired is avoided. In addition, the transaction information and the information to be authenticated are transmitted through the wireless communication connections, the transmission rate of the transaction information and the information to be authenticated is far higher than that of transmission through human body communication, and payment is completed after the information to be authenticated is authenticated, so that payment can be completed without a user carrying a bank card, meanwhile, the digital authentication information and the biological characteristic information are acquired at one time, the payment is fast and convenient, and the transaction information and the information to be authenticated can be safer and more reliable through double authentication of the digital authentication information and the biological characteristic information, the probability that a real and legal user is identified and failed is reduced, and the user experience is improved.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on the drawings without creative efforts.

Fig. 1 is a flowchart of a payment method provided in embodiment 1 of the present invention;

fig. 2 is a schematic structural diagram of a payment system provided in embodiment 2 of the present invention.

Detailed Description

The technical solutions in the embodiments of the present invention are clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments of the present invention without making any creative effort, shall fall within the protection scope of the present invention.

In the description of the present invention, it is to be understood that the terms "center", "longitudinal", "lateral", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", and the like, indicate orientations or positional relationships based on those shown in the drawings, and are used only for convenience in describing the present invention and for simplicity in description, and do not indicate or imply that the referenced devices or elements must have a particular orientation, be constructed and operated in a particular orientation, and thus, are not to be construed as limiting the present invention. Furthermore, the terms "first," "second," and the like are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or quantity or location.

In the description of the present invention, it should be noted that, unless otherwise explicitly specified or limited, the terms "mounted," "connected," and "connected" are to be construed broadly, e.g., as meaning either a fixed connection, a removable connection, or an integral connection; can be mechanically or electrically connected; they may be connected directly or indirectly through intervening media, or they may be interconnected between two elements. The specific meanings of the above terms in the present invention can be understood in specific cases to those skilled in the art.

Embodiments of the present invention will be described in further detail below with reference to the accompanying drawings.

Example 1

Human body communication is an emerging short-distance communication technology which is started in recent years, and is mainly used for solving the communication problem of a body area network which takes a human body as a carrier. The human body is used as a transmission medium of electric signals, and information interaction of medical care equipment on the body surface, in the body and around the human body (3-5 meters) is achieved. Compared with the traditional wireless communication technologies such as Bluetooth, WIFI, radio frequency and infrared, signals are transmitted through the human body in the human body communication process, so that the electromagnetic noise has little influence on the signals, and the method has the advantages of low power consumption, high confidentiality, lower human body damage and the like. In addition, the problem of efficiency reduction in multi-person communication does not exist, and the problem of redundant connection in a wired communication mode can be avoided. Based on the above, the invention provides a payment method, which utilizes human body communication to transmit matching information, establishes wireless communication such as WIFI, Bluetooth and the like through the matching information, does not need user intervention, has short time consumption in the process of establishing the wireless communication connection, and improves user experience. And because the matching information of the payee device needs to be transmitted through human body communication, the matching information of the payee device can be acquired only under the condition of meeting the human body communication, and further the potential safety hazard that the matching information of the existing wireless device is easily acquired is avoided. In addition, the transaction information and the information to be authenticated are transmitted through the wireless communication connections, the transmission rate of the transaction information and the information to be authenticated is far higher than that of transmission through human body communication, payment is completed after the information to be authenticated is authenticated, only one-time operation is performed on the user, the payee device simultaneously acquires the digital authentication information and the biological characteristic information at one time, the operation is fast and convenient, and through double authentication of the digital authentication information and the biological characteristic information, the operation is safer and more reliable, the probability that a real and legal user is identified and failed is reduced, and the user experience is improved.

The present embodiment provides a payment method, as shown in fig. 1, the payment method includes the following steps S100 to S112:

s100: after detecting that a biological limb carrying or internally provided with a payer device is contacted with the payee device or after detecting that the payer device sends a signal through the biological limb, the payee device establishes human body communication connection with the payer device through the biological limb;

in this embodiment, the biological limb generally refers to a human body, the biological limb carries or is internally provided with a payer device, the payee device may be a POS machine, a code scanning terminal such as a pay application, a mobile terminal, a PDA, a desktop, a notebook, or a payment terminal that can be networked with a background, the payer device may be a device implanted in the human body, worn on the human body, or placed in clothing worn, the device implanted in the human body may be a sensor such as a blood flow sensor, a pulse sensor, a body temperature sensor, or implanted in the human body, and the device worn on the human body may be an electronic device worn on the user such as a bracelet, a wristwatch, a necklace, a ring, a belt, or the like. In the case of a device worn on a human body, although the device is not in direct contact with the surface of the human body, the distance between the device and the surface (such as skin) of the human body cannot exceed a preset distance, such as several millimeters, so that communication can be performed through the human body within the preset distance, and the communication quality is ensured. Because a Body Area Network (BAN for short) is a communication Network that is centered on a human Body and is composed of Network elements related to the human Body (including personal terminals, sensors and networking devices that are distributed on the human Body, on clothing, within a certain distance range around the human Body, such as within 3-5 meters, even inside the human Body), and the like, a human Body communication connection of the Body Area Network can be established only when the Network elements related to the human Body enter the preset range of the payee device, for example, the human Body carrying or having the payer device built therein contacts the payee device, or the payer device can detect a signal sent by the payee device.

As an optional implementation manner in this embodiment, the payee device may establish a communication connection with the payer device through the biological limb in a wired manner and a wireless manner, and specifically, may be implemented in at least one of the following two manners:

wired system (i.e., contact system):

the payee device and the payer device are each provided with an electrode, and when the payee device is brought into contact with a living body (human body) carrying or incorporating the payer device (for example, a user wearing a wristwatch brings his finger into contact with a POS machine), the human body is used as a conductor, and the electrodes of both devices are communicated with each other to form a passage in the human body, that is, a so-called wired communication connection. In this manner, the payee device needs to be in contact with a human body carrying or having a payer device built therein, and the payer device establishes a human body communication connection with the payee device through the biological limb after detecting that the human body carrying or having the payer device built therein is in contact with the payee device.

Wireless system (i.e., detection signal system):

in a wireless mode, a payee device (such as a POS machine) may be set to broadcast matching information, a payer device (such as a wristwatch) may be set to a receiving state, the payer device may detect whether a signal transmitted from the payee device is detected through the biological limb, and the payer device may detect the signal transmitted from the payee device through the biological limb and may establish a human body communication connection with the payee device, under the condition that a distance between the payee device and a human body carrying or having the payer device built therein is within a human body communication allowable range. In this mode, the payee apparatus does not need to be in contact with the human body carrying or having the payer apparatus built therein, and the human body communication connection can be established as long as the distance between the payee apparatus and the human body carrying or having the payer apparatus built therein is within the range permitted for human body communication.

The human body is used as a transmission medium of the electric signals in the mode, and information interaction of equipment on the body surface, in the body and around the human body (3-5 m) is achieved. Because information is transmitted through the human body in the human body communication process, the electromagnetic noise has little influence on the information, and the method has the advantages of low power consumption, high confidentiality, lower human body damage and the like. In addition, the problem of efficiency reduction in multi-person communication does not exist, and the problem of redundant connection in a wired communication mode can be avoided.

S102: the payer device transmits matching information of the payer device to the payee device through the human body communication connection;

wherein the matching information of the payer device at least includes: the MAC address of the payer device and the identity of the payer device; wherein, through the MAC address of the payer device, the payee device may determine an object to initiate the first wireless communication connection to the payer device, the first wireless communication connection including, but not limited to, one of: bluetooth connection, WIFI connection, flux connection, or RFID connection. In addition, the identity of the payer device can be identified by the payee device through the identity of the payer device, so as to judge whether the payer device is allowed to establish the first wireless communication connection with the payee device.

Compared with the mode of acquiring the matching information by broadcasting or scanning a two-dimensional code and the like in the prior art, in the embodiment, the matching information is transmitted by utilizing human body communication connection, and due to the particularity of human body communication, the matching information of the payer equipment can be detected by the payee equipment only when a human body carrying or internally provided with the payer equipment meets the condition of contacting with the payee equipment or entering a preset communication range of the payee equipment, so that the potential safety hazard that the matching information of the existing wireless equipment is easily acquired is avoided. Moreover, the human body communication has the advantages of low power consumption, high confidentiality, lower human body damage and the like, so that the safety of the acquisition of the matching information is improved.

S104: the payee device receives the matching information transmitted by the payer device through the human body communication connection, and establishes a first wireless communication connection with the payer device by using the matching information;

in step S104, the step of establishing, by the payee device, the first wireless communication connection with the payer device by using the matching information specifically includes:

s104 a: after receiving the matching information of the payer equipment through the human body communication connection, the payee equipment initiates a connection request for establishing a first wireless communication connection to the payer equipment through the human body communication connection according to the MAC address;

in specific implementation, after the payee device completes the payment operation, the payer device may be located within a preset communication range of the payee device, the payee device may always receive matching information broadcasted by the payer device that has completed the payment transaction, and at the same time, receive matching information broadcasted by the payer device that is ready to perform the initial payment transaction and initially enters the preset communication range of the payee device, and in order to ensure that the payee device does not repeatedly initiate a connection request to the payer device that has completed the payment transaction, as an optional implementation manner, in this step S104a, the payee device initiates a connection request for establishing the first wireless communication connection to the payer device according to the MAC address through the human body communication connection, which specifically includes: and the payee equipment matches the received identity with the identity in the matching information locally stored in the payee equipment, if the matching is unsuccessful, a connection establishment request is initiated to the payer equipment through the human body communication connection according to the MAC address, and the received matching information is stored.

In this embodiment, after the payee device initiates a connection request to the payer device, matching information of the payer device is stored, where the matching information at least includes: an identification of the payer device, which may include but is not limited to: the identity of the payer device, the device identity of the user name, etc. may uniquely identify the identity of the payer device. Optionally, the payee device may locally establish a matching information list for storing the MAC address and the identity of the payer device that has requested the payment transaction, and by matching the identity received from the payer device with the identities in the identity list, it is queried whether the received identity exists in the identity list, if so, the matching is successful, otherwise, if the matching is successful, it is determined that the payer device is within the preset communication range of the payee device, but the payment transaction has been completed, and then the payee device does not initiate a connection request to the payer device; if the matching is unsuccessful, the payer device is indicated to enter the preset communication range of the payee device for the first time to prepare for the first payment transaction, and then the payee device initiates a connection request to the payer device performing the first payment transaction, so that the payee device can judge that the payer device has completed payment or has performed the payment transaction for the first time, and the payee device is ensured not to repeatedly initiate a connection request to the payer device completing the payment transaction.

In specific implementation, after the payee device finishes executing the payment transaction, the method provided in this embodiment further includes: the payee device disconnects the first wireless communication connection with the payer device, thereby providing the payer device, who is later queued for payment, with an opportunity to establish the first wireless communication connection.

In addition, in actual implementation, there is also a case that the payer device that has completed the payment transaction does need to initiate a re-payment transaction, and in order to avoid that the payee device refuses to initiate a connection request to the payer device, the payee device may delete the stored matching information under certain conditions. In an optional implementation manner of this embodiment, after the payee device disconnects the first wireless communication connection from the payer device, the method provided in this embodiment further includes: and judging whether the biological limb is not in a preset range of the payee device, and/or judging whether the current time distance and the transaction finishing time length of the payer device reach a preset threshold value, and if so, deleting the matching information corresponding to the payer device. Judging whether the biological limb of the carrying or built-in payer device is not in the preset range of the payee device or not means that if the payee device can not receive the signal sent by the payer device through the biological limb any more, the biological limb of the carrying or built-in payer device is out of the preset range of the payee device for communication; in addition, the present embodiment sets a time interval (i.e. a preset threshold) during which the payer device that has completed the payment transaction may re-establish the first wireless communication connection with the payee device after the transaction is ended, for example, the payer device may establish the first wireless communication connection with the payee device again 10s after the transaction is ended. The present embodiment may delete the matching information by double determination of the distance and time of the payer device that has completed payment. Once the matching information of the payer device is deleted, even if the payer device is within the preset communication range of the payee device, the payee device can initiate a connection request to the payer device again, so that the problem that the payer device which has completed the payment transaction does need to initiate a payment transaction again but is rejected by the payee device is solved.

S104 b: and the payee device receives the confirmation response of the payer device through the human body communication connection and establishes the first wireless communication connection with the payer device.

In this embodiment, after receiving the connection request initiated by the payee device, the payer device returns a confirmation response to the payee device, and establishes the first wireless communication connection with the payee device. From this, payer's equipment and payee's equipment can utilize first wireless communication to connect and carry out data transmission, compare in directly with human body communication transmission data, utilize first wireless communication to connect (like WIFI connect, bluetooth connect, magnetic flux connect, RFID connect etc.) transmission data can improve transmission rate greatly, and user's payment process is faster, has improved user experience, and the efficiency of payment operation is higher.

Compared with the establishment mode that wireless connection such as Bluetooth and WIFI needs to display a connection list to a user and needs the user to input a connection key in the prior art, in the embodiment, the payer device acquires matching information of the payee device through human body communication connection, the participation of the user is not needed, the user does not need to input any information, the access authentication can be directly completed by the payee device, the first wireless communication connection is directly established, the time consumption of the process of establishing the first wireless communication connection is short, and the user experience is improved; in addition, due to the particularity of human body communication, the payer equipment can receive the matching information broadcasted by the payee equipment only when a human body carrying or internally provided with the payer equipment meets the condition of contacting with the payee equipment or entering a preset communication range of the payee equipment, and therefore the potential safety hazard that the matching information of the existing wireless equipment is easily acquired is avoided. Moreover, the human body communication has the advantages of low power consumption, high confidentiality, lower human body damage and the like, so that the safety of the acquisition of the matching information is improved.

S106: the payer device sends the first authentication information to the payee device via a first wireless communication connection;

in this embodiment, the first authentication information includes: digital authentication information; the digital authentication information includes at least one of: electronic signature information, ciphertext information and a dynamic password. The electronic signature information is signature data obtained by signing the data to be signed by the payer device by using a private key of the payer device, and the data to be signed comprises: the method comprises the steps that single authentication data, authentication identification information and the like are obtained, when the electronic signature information is authenticated, a public key of the payer equipment is obtained, the public key is used for verifying the electronic signature information, if the verification passes, the authentication passes, and the method is an asymmetric authentication mode; the cryptograph information is an MAC value obtained by calculating data to be encrypted by the payer equipment by using a symmetric key negotiated with the payee equipment, when the cryptograph information is authenticated, a verification MAC value is obtained by calculating the data to be encrypted by using the symmetric key, the cryptograph information is compared with the verification MAC value, if the cryptograph information is consistent with the verification MAC value, the authentication is passed, and the authentication is a symmetric authentication mode; the dynamic password is a cipher text generated by a dynamic password token (OTP) based on a seed key, when the dynamic password is authenticated, a verification value is obtained by using the seed key in the same way, the dynamic password is compared with the verification value, and if the dynamic password is consistent with the verification value, the authentication is passed, which is a token authentication mode. In this embodiment, the authentication of the digital authentication information can be implemented in any of the 3 ways described above to ensure the validity of the payer device.

In an optional implementation manner of this embodiment, the first authentication information may further include: authenticating the identification information; the authentication identification information can be, for example, information that can uniquely identify the user identity, such as a device identifier of the payer device, a user ID, etc., and can be uniquely associated with an authentication factor that is used by the payer user to authenticate the digital authentication information and the biometric information, so that the digital authentication information and the biometric information are doubly authenticated by using the authentication factor, and thus, after the double authentication is passed, it can be determined that the biometric information and the digital authentication information are both from the same user, and the validity of the user is ensured.

In specific implementation, in the case of micropayment, as long as the upper limit set by the payer device is not exceeded, the payer device may send the first authentication information to the payee device through the first wireless communication connection, and after the authentication of the first authentication information is passed, the payment transaction may be completed.

In a specific implementation, in the case of a large amount of payment, in order to ensure the security of the transaction, the payer device needs to prompt the user with transaction information, and after the confirmation of the user, the subsequent payment operation is allowed, specifically, before step S106, the method provided in this embodiment further includes:

s105 a: the payee device sends transaction information to the payer device through a first wireless communication connection;

in this embodiment, the transaction information may include: when a large amount of transaction occurs, the payee device must send the transaction information to the payer device so as to prompt the user, and after the user confirms, subsequent authentication and payment processes can be executed. This embodiment is through first wireless communication connection transmission transaction information such as WIFI, bluetooth, magnetic flux, RFID, and transmission rate is faster to payment speed has been improved, user experience has been improved.

In addition, in practical implementation, the payer device may be one device, such as a wristwatch, or two devices, such as a wristwatch and an electronic signature device (e.g., a U-shield, a farm Key treasure, or a smart card with signature function).

S105 b: the method comprises the steps that a payer device receives transaction information, and extracts key information from the transaction information;

in this embodiment, the payer device may extract key information, such as a transaction amount, or a name of a payee, a name of a payer, and the like, from the transaction information without prompting all contents of the transaction information, specifically, the transaction information may be prompted in a display screen display or voice playing manner, and in particular, a small device having a small display screen, such as a wristwatch, may be small in display screen and may not display all contents of the transaction information, but may play a role of prompting a user as long as the key contents are displayed.

S105 c: the payer equipment prompts key information, waits for confirmation of the user, and executes the step S106 after receiving a confirmation instruction of the user;

in this embodiment, a user confirmation step is added to improve the security of the transaction, and only after the user confirms and presses the confirmation key, the subsequent operation can be performed. In particular, if the payer device is two devices, the user may be prompted on either device, preferably, of course, on the electronic signature device, when prompted.

Therefore, the transaction security of the large payment is ensured through the confirmation of the user.

S108: the payee device receives first authentication information transmitted by the payer device through a first wireless communication connection; the method comprises the steps that during the duration that the payer device establishes human body communication connection with the payee device through a biological limb, the payee device collects biological characteristic information of the biological limb;

wherein the biometric information includes at least one of: fingerprint information, iris information, face information, and vein information. In this embodiment, the payee device collects biometric information of a human body while receiving the first authentication information sent by the payer device, for example, within a short time (e.g., 3 seconds) when a finger of a user touches a touch part of the POS device, the POS device establishes a communication connection with a wristwatch worn by the user through the human body, and transmits the first authentication information through the communication connection, and meanwhile, the touch part of the POS device collects fingerprint information, and for example, during a period when the wristwatch of the user establishes a human body communication connection with a payment terminal (the payment terminal has a photographing function and can be used for collecting face information), the face information is collected through the payment terminal, so that the payee device can obtain digital authentication information and biometric information at one time, and the operation is convenient and fast.

In this embodiment, the biometric information may be collected during a duration that the payer device establishes the human body communication connection with the payee device through the biological limb, and the biometric information may be collected before the communication connection is established, or may be collected during or after the communication connection is established.

In this step, particularly in the case where the biometric information is collected by contacting the body limb with the payee device, the biometric information includes, as an optional embodiment: fingerprint information and/or vein information; the collecting of the biometric information of the biological limb comprises: and collecting the biological characteristic information of the contact part of the biological limb and the payee device under the condition that the biological limb is in contact with the payee device.

Compared with the mode of inputting the fingerprint and the PIN code on the POS machine in the prior art, the POS machine prompts the user to input fingerprint information, collect the fingerprint and then prompts the user to input the PIN code, and the user needs to interact with the POS machine twice to finish the input of the fingerprint and the PIN code, so that the input of the first authentication information and the collection of the biological characteristic information can be finished at one time by one action, and the method is convenient and quick.

S110: the payee device acquires an authentication result for authenticating the digital authentication information and the biological characteristic information;

in this embodiment, the authentication result for authenticating the digital authentication information and the biometric information is the authentication result for acquiring the authentication factor and the biometric verification information according to the authentication identification information, authenticating the digital authentication information by using the authentication factor and authenticating the biometric information by using the biometric verification information, where the authentication factor mainly includes verification information for verifying the digital authentication information, and the authentication factor and the biometric verification information are uniquely associated with the authentication identification information, so that the authentication factor and the biometric verification information corresponding to the user can be uniquely queried according to the authentication identification information, so that after the dual authentication of the digital authentication information and the biometric information is passed, the validity of the user can be ensured.

In this step, the authentication of the digital authentication information by using the authentication factor at least includes one of the following modes:

the first method is as follows: an asymmetric authentication method. In this aspect, the digital authentication information includes: electronic signature information; the authentication factor comprises a public key for verifying the electronic signature information; alternatively, the first and second electrodes may be,

the second method comprises the following steps: and (4) a symmetric authentication mode. In this aspect, the digital authentication information includes: ciphertext information obtained by using the symmetric key calculation; the authentication factor comprises a symmetric key; alternatively, the first and second electrodes may be,

the third method comprises the following steps: and (4) token authentication mode. In this aspect, the digital authentication information includes: a dynamic password; the authentication factor includes a seed key that verifies the dynamic password.

In step S106, three authentication methods for the digital authentication information have been described, and are not described herein again.

The authenticating the digital authentication information by using the authentication factor and the biometric information by using the biometric verification information includes: and when the digital authentication information passes the authentication and the matching rate of the biological characteristic verification information and the biological characteristic information is greater than the first preset value, the authentication of the digital authentication information and the biological characteristic information is confirmed to pass.

The first preset value is smaller than a second preset value, and the second preset value is used for indicating the matching rate of two pieces of biological characteristic information which are the same biological characteristic information; in practical implementation, the second preset value may be a similarity to be achieved when two pieces of biometric information are perfectly matched theoretically, for example, 99%, and the first preset value may be smaller than the second preset value, so that by reducing the matching rate, the probability that a real and legitimate user is identified in the biometric information authentication technology is reduced.

In the prior art, the biometric information authentication technology has the probability that a real and legal user is identified unsuccessfully and the probability that an illegal user is identified successfully, taking fingerprint identification as an example, the fingerprint of the user is real in many times, but the authentication device identifies wrongly and identifies the fingerprint of the user as a false fingerprint by mistake, so that the authentication cannot be passed and payment transaction cannot be realized; sometimes, the fingerprint of the illegal user is definitely false, but the authentication device passes the authentication, so that economic loss is caused to the legal user, and the probability of the situations is very high. The embodiment can avoid the condition that the illegal user is successfully identified through double authentication of the digital authentication information and the biological characteristic information, and can reduce the condition that the real and legal user is unsuccessfully identified. Firstly, through the 3 kinds of authentication on the digital authentication information, the user can be determined to be a legal user, if the user is an illegal user, the digital authentication cannot be passed, the operation of false fingerprint authentication cannot be performed, and the condition that the illegal user is successfully identified is avoided; secondly, in the case of ensuring that the user is a legitimate user, the authentication apparatus may reduce the similarity of matching two pieces of biometric information to reduce the probability of the true legitimate user failing to be identified, for example, theoretically, two pieces of biometric information should be completely matched, the similarity of which at least reaches 99% (the second preset value), and if the authentication apparatus finds that the similarity is only 90%, the two pieces of biometric information are identified as mismatched and not authenticated, and a case of identifying a true fingerprint as a false fingerprint occurs, in the present invention, since the digital authentication has ensured that the user is a legitimate user, the similarity of the complete match may be reduced to 80% (the first preset value), that is, as long as the similarity reaches 80% (the first preset value), the match is considered, and therefore, when the similarity of the two pieces of biometric information is 90%, the authentication may be passed, therefore, the situation that the real and legal user is identified unsuccessfully can not occur, and the probability that the real and legal user is identified unsuccessfully in the biometric information authentication technology is reduced.

S112: and the payee equipment executes the payment transaction under the condition that the authentication result is authentication pass.

According to the payment method provided by the embodiment, the matching information is transmitted through human body communication, wireless communication such as WIFI and Bluetooth is established through the matching information, user intervention is not needed, the time consumption of the process of establishing the wireless communication connection is short, and the user experience is improved. And because the matching information of the payee device needs to be transmitted through human body communication, the matching information of the payee device can be acquired only under the condition of meeting the human body communication, and further the potential safety hazard that the matching information of the existing wireless device is easily acquired is avoided. In addition, the transaction information and the information to be authenticated are transmitted through the wireless communication connections, the transmission rate of the transaction information and the information to be authenticated is far higher than that of transmission through human body communication, and payment is completed after the information to be authenticated is authenticated, so that payment can be completed without a user carrying a bank card, meanwhile, the digital authentication information and the biological characteristic information are acquired at one time, the payment is fast and convenient, and the transaction information and the information to be authenticated can be safer and more reliable through double authentication of the digital authentication information and the biological characteristic information, the probability that a real and legal user is identified and failed is reduced, and the user experience is improved.

Example 2

The present embodiment provides a payment system, as shown in fig. 2, including: payee device 10 and payer device 20, wherein:

the payee device 10 is configured to establish a human body communication connection with the payer device 20 through a biological limb when detecting that the biological limb carrying or having the payer device 20 built therein is in contact with the payee device 10, or after detecting that the payer device 20 sends a signal through the biological limb; the payer device 20 is configured to transmit matching information to the payee device 10 through the human body communication connection; the payee device 10 is further configured to receive the matching information transmitted by the payer device 20 through the human body communication connection, and establish a first wireless communication connection with the payer device 20 by using the matching information; the payer device 20 is further configured to send first authentication information to the payee device 10 through the first wireless communication connection, where the first authentication information includes: digital authentication information; the payee device 10 further configured to receive the first authentication information transmitted by the payer device 20 via the first wireless communication connection; collecting biometric information of the biometric limb for the duration that the payer device 20 establishes a human body communication connection with the payee device 10 via the biometric limb; and obtaining an authentication result for authenticating the digital authentication information and the biological characteristic information; and executing the payment transaction under the condition that the authentication result is authentication pass.

Through the payment system that this embodiment provided, utilize human communication transmission matching information, establish wireless communication such as WIFI, bluetooth through matching information, need not user intervention, the process of establishing these wireless communication connection is consuming time weak, has improved user experience. And because the matching information of the slave equipment needs to be transmitted through human body communication, the matching information of the slave equipment can be acquired only under the condition of meeting the human body communication, and further the potential safety hazard that the matching information of the existing wireless equipment is easily acquired is avoided. In addition, the transaction information and the information to be authenticated are transmitted through the wireless communication connections, the transmission rate of the transaction information and the information to be authenticated is far higher than that of transmission through human body communication, payment is completed after the information to be authenticated is authenticated, only one-time operation is performed on the user, the payee device 10 simultaneously acquires the digital authentication information and the biological characteristic information at one time, the operation is fast and convenient, and through double authentication of the digital authentication information and the biological characteristic information, the operation is safer and more reliable, the probability that a real and legal user is identified and failed is reduced, and the user experience is improved.

In this embodiment, the biological limb generally refers to a human body, the biological limb carries or is internally provided with a payer device, the payee device 10 may be a POS machine, a code scanning terminal such as a pay bank application, a mobile terminal, a PDA, a desktop, a notebook, or a payment terminal that can be networked with a background, the payer device 20 may be a device implanted in the human body, worn on the human body, or placed in clothing worn on the human body, the device implanted in the human body may be a sensor such as a blood flow sensor, a pulse sensor, a body temperature sensor, or implanted in the human body, and the device worn on the human body may be an electronic device worn on the user body such as a bracelet, a wristwatch, a necklace, a ring, or a belt. In the case of a device worn on a human body, although the device is not in direct contact with the surface of the human body, the distance between the device and the surface (such as skin) of the human body cannot exceed a preset distance, such as several millimeters, so that communication can be performed through the human body within the preset distance, and the communication quality is ensured. Since a Body Area Network (BAN for short) is a communication Network that is centered on a human Body and is composed of Network elements related to the human Body (including personal terminals, sensors and networking devices that are distributed on the human Body, on clothing, within a certain distance range around the human Body, such as within 3-5 meters, even inside the human Body), and the like, the human Body communication connection of the Body Area Network can be established only when the Network elements related to the human Body enter the preset range of the payee device 10.

As an alternative implementation manner in this embodiment, the payee device 10 may establish a communication connection with the payer device 20 through the biological limb in a wired manner and a wireless manner, and specifically, may be implemented in at least one of the following two manners:

the wired mode comprises the following steps: (i.e., contact mode):

both the payee device 10 and the payer device 20 are provided with electrodes, and when the payee device 10 detects that the biological limb carrying or incorporating the payer device 20 is in contact with the first counterpart device (i.e., the payee device 10) (for example, a user wearing a wristwatch brings his finger into contact with a POS machine), the electrodes of both parties are connected to each other to form a passage in the body, that is, a so-called wired communication connection. In this manner, the payee apparatus 10 needs to be in contact with the human body on which the payer apparatus 20 is worn.

Wireless system (i.e., detection signal system):

in a wireless manner, a payer device (e.g., a wristwatch) may be set to broadcast matching information, a payee device (e.g., a POS machine) may be set to a receiving state, payee device 10 may detect a signal transmitted from payer device 20 through a human body, and payee device 10 may detect a signal transmitted from payer device 20 through a human body and may establish a human body communication connection with payer device 20, in a case where a distance between payee device 10 and a human body carrying or having payer device 20 built therein is within a range allowed for human body communication. In this mode, the payee apparatus 10 does not need to be in contact with the human body carrying or incorporating the payer apparatus 20, and a human body communication connection can be established as long as the distance between the payee apparatus 10 and the human body carrying or incorporating the payer apparatus 20 is within the range permitted for human body communication.

The human body is used as a transmission medium of the electric signals in the mode, and information interaction of equipment on the body surface, in the body and around the human body (3-5 m) is achieved. Compared with the traditional wireless communication technologies such as Bluetooth, WIFI, radio frequency and infrared, signals are transmitted through the human body in the human body communication process, so that the electromagnetic noise has little influence on the signals, and the method has the advantages of low power consumption, high confidentiality, lower human body damage and the like. In addition, the problem of efficiency reduction in multi-person communication does not exist, and the problem of redundant connection in a wired communication mode can be avoided.

In this embodiment, the payer device 20 is configured to transmit matching information of the payer device to the payee device through the human body communication connection, and compared with a method of acquiring matching information through broadcasting or scanning a two-dimensional code or the like in the prior art, in this embodiment, matching information is transmitted by using the human body communication connection, and due to the particularity of human body communication, when only a human body carrying or incorporating the payer device 20 meets a condition of contacting with the payee device 10 or entering a preset communication range of the payee device 10, the payer device 20 can receive the matching information broadcasted by the payee device 10, thereby avoiding a potential safety hazard that matching information of an existing wireless device is easily acquired. Moreover, the human body communication has the advantages of low power consumption, high confidentiality, lower human body damage and the like, so that the safety of the acquisition of the matching information is improved.

As another optional implementation manner in this embodiment, the method may include setting the payer device 20 to broadcast matching information, setting the payee device 10 to a receiving state, and initiating a process of establishing a first wireless communication connection after the payee device 10 receives matching information transmitted by the payer device 20 through the human body communication connection, where specifically, the payee device 10 is further configured to establish the first wireless communication connection with the payer device 20 by using the matching information of the payer device, and the method includes: the payee device 10 is further configured to initiate a connection request for establishing a first wireless communication connection to the payer device 20 according to the MAC address through the human body communication connection after receiving the matching information of the payer device through the human body communication connection; the payer device 20 is further configured to establish a first wireless communication connection with the payee device 10 after receiving the connection request through the body communication connection. From this, payer equipment 20 and payee equipment 10 can utilize first wireless communication to connect and carry out data transmission, compare and directly transmit data with human body communication, utilize first wireless communication to connect (like WIFI connect, bluetooth connect, magnetic flux connect, RFID connect etc.) transmission data can improve transmission rate greatly, and user's payment process is faster, has improved user experience, and the efficiency of payment operation is higher.

In this optional embodiment, the matching information of the payer device includes at least: the MAC address of the payer device 20 and the identity of the payer device 20; wherein, through the MAC address of the payer device 20, the payee device 10 may determine the object to initiate the first wireless communication connection to the payer device 20, the first wireless communication connection including, but not limited to, one of: bluetooth connection, WIFI connection, flux connection, or RFID connection. Further, the identity of payer device 20 may enable payee device 10 to identify the identity of payer device 20, thereby determining whether payer device 20 is allowed to establish the first wireless communication connection with itself.

Compared with the mode of acquiring matching information by broadcasting or scanning a two-dimensional code and the like in the prior art, in the embodiment, the matching information is transmitted by using human body communication connection, and due to the particularity of human body communication, when only a human body carrying or internally provided with the payer device 20 meets the condition of contacting with the payee device 10 or entering a preset communication range of the payee device 10, the payee device 10 can receive the matching information of the payer device 20, so that the potential safety hazard that the matching information of the existing wireless device is easily acquired is avoided. Moreover, the human body communication has the advantages of low power consumption, high confidentiality, lower human body damage and the like, so that the safety of the acquisition of the matching information is improved.

In specific implementation, after the payee device 10 completes the payment operation, the payer device 20 may be located within a preset communication range of the payee device 10, the payee device 10 may always receive matching information broadcasted by the payer device 20 that has completed the payment transaction, and at the same time, may also receive matching information broadcasted by the payer device 20 that is initially entered into the preset communication range of the payee device 10 and is ready to perform an initial payment transaction, in order to ensure that the payee device 10 does not repeatedly initiate a connection request to the payer device 20 that has completed the payment transaction, as an optional implementation manner, the payee device 10 is further configured to initiate a connection request for establishing a first wireless communication connection to the payer device 20 according to the MAC address through a human body communication connection, and specifically includes: the payee apparatus 10 matches the received identification with an identification in matching information locally stored in the payee apparatus 10, and if the matching is unsuccessful, initiates a request for establishing connection to the payer apparatus 20 through human body communication connection according to the MAC address, and stores the received matching information.

In this alternative embodiment, after the payee device 10 initiates the connection request to the payer device 20, matching information of the payer device 20 is stored, which at least includes: identification of payer device 20, which may include but is not limited to: the device identification, user name, etc. of the payer device 20 may uniquely identify the identity of the payer device 20. Optionally, the payee device 10 may locally establish a matching information list for storing the MAC address and the identity of the payer device 20 that has requested the payment transaction, and by matching the identity received from the payer device 20 with the identities in the identity list, it is queried whether the received identity exists in the identity list, if so, the matching is successful, otherwise, the matching is unsuccessful, if the matching is successful, it indicates that the payer device 20 is within the preset communication range of the payee device 10, but the payment transaction has been completed, and then the payee device 10 does not initiate a connection request to the payer device 20 any more; if the matching is unsuccessful, it indicates that the payer device 20 is initially within the preset communication range of the payee device 10 to prepare for the initial payment transaction, the payee device 10 initiates a connection request to the payer device 20 performing the initial payment transaction, so that the payee device 10 may determine that the payer device 20 has completed the payment or initially performs the payment transaction, thereby ensuring that the payee device 10 does not repeatedly initiate a connection request to the payer device 20 having completed the payment transaction.

In particular embodiments, the payee device 10 is further configured to disconnect the first wireless communication connection from the payer device 20 after the execution of the payment transaction is completed, thereby providing the payer device 20, who is later queued for payment, with an opportunity to establish the first wireless communication connection.

In addition, in actual implementation, there is also a case where the payer device 20 that has completed the payment transaction does need to initiate a re-payment transaction, and in order to avoid that the payee device 10 refuses to initiate a connection request to the payer device 20, the payee device 10 may delete the stored matching information under certain conditions. In an optional implementation manner of this embodiment, the payee device 10 is further configured to determine, after disconnecting the first wireless communication connection with the payer device 20, whether the biological limb is not within a preset range of the payee device 10, and/or determine whether a time length between a current time and a transaction end of the payer device reaches a preset threshold, and if so, delete the matching information corresponding to the payer device. Determining whether the biological limb carrying or incorporating the payer device is not within the preset range of payee device 10 means that if payee device 10 cannot receive the signal sent by payer device 20 through the biological limb any more, it indicates that the biological limb carrying or incorporating the payer device is out of the preset range in which payee device 10 can communicate; furthermore, the present embodiment sets a time interval (i.e. a preset threshold) during which the payer device 20, having completed the payment transaction, may re-establish the first wireless communication connection with the payee device 10 after the transaction is ended, e.g. the payer device 20 may establish the first wireless communication connection with the payee device 10 again after the transaction is ended for 10 s. The present embodiment can delete the matching information by double determination of the distance and time of the payer device 20 that has completed the payment. Once the matching information of the payer device 20 is deleted, even if the payer device 20 is within the preset communication range of the payee device 10, the payee device 10 initiates a connection request to the payer device 20 again, thereby solving the problem that the payer device 20 that has completed the payment transaction does need to initiate a further payment transaction, but is rejected by the payee device 10.

In specific implementation, in the case of micropayment, as long as the upper limit set by the payer device 20 is not exceeded, the payer device 20 may send the first authentication information to the payee device 10 through the first wireless communication connection, and after the authentication of the first authentication information is passed, the payment transaction may be completed.

In specific implementation, in the case of a large amount payment, in order to ensure the security of the transaction, the payer device 20 needs to prompt the user with transaction information, and after the confirmation of the user, the subsequent payment operation is allowed, specifically, the payer device 20 is further configured to receive the transaction information sent by the payee device 10 through the first wireless communication connection before the first authentication information is sent to the payee device 10 through the first wireless communication connection; extracting key information from the transaction information; prompting key information and waiting for confirmation of a user; after receiving the confirmation instruction of the user, the operation of transmitting the first authentication information to the payee apparatus 10 via the first wireless communication connection is performed.

In this embodiment, the transaction information may include: the transaction amount, payee account information, and payer account information, when a large amount transaction occurs, the payee device 10 must send the transaction information to the payer device 20 in order to prompt the user, and after the user confirms, the subsequent authentication and payment process can be performed. In addition, in practical implementation, the payer device 20 may be one device, such as a wristwatch, or two devices, such as a wristwatch and an electronic signature device (e.g., a U-shield, a farm Key treasure, or a smart card with signature function).

In this embodiment, the payer device 20 may extract key information from the transaction information, such as the transaction amount, or the name of the payee, the name of the payer, and the like, without prompting all contents of the transaction information, specifically, the transaction information may be prompted in a display screen display or voice playing manner, and in particular, a small device with a small display screen, such as a wristwatch, may be small and may not display all contents of the transaction information, but may play a role of prompting the user as long as the key contents are displayed.

In this embodiment, the payer device 20 is further configured to prompt key information and add a step of user confirmation to improve security of the transaction, and only after the user confirms and presses the confirmation key, the subsequent operation can be performed. In particular, if the payer device 20 is two devices, the user may be prompted on either device, preferably, of course, on the electronic signature device, when prompted.

In this embodiment, the first authentication information includes: digital authentication information; the digital authentication information includes at least one of: electronic signature information, ciphertext information and a dynamic password. The electronic signature information is signature data obtained by the payer device 20 signing the data to be signed by using a private key of the payer device, and the data to be signed includes: the single authentication data, the authentication identification information and the like, when the electronic signature information is authenticated, the public key of the payer device 20 is obtained, the public key is used for verifying the electronic signature information, if the verification passes, the authentication passes, which is an asymmetric authentication mode; the cipher text information is an MAC value calculated by the payer device 20 on the data to be encrypted by using a symmetric key negotiated with the payee device 10, when the cipher text information is authenticated, a verification MAC value is calculated by using the symmetric key on the data to be encrypted, the cipher text information and the verification MAC value are compared, if the cipher text information is consistent with the verification MAC value, the authentication is passed, and the authentication is a symmetric authentication mode; the dynamic password is a cipher text generated by a dynamic password token (OTP) to a seed key, when the dynamic password is authenticated, a verification value is obtained by using the seed key in the same way, the dynamic password is compared with the verification value, and if the dynamic password is consistent with the verification value, the authentication is passed, which is a token authentication mode. In the present embodiment, the authentication of the digital authentication information may be achieved in any of the 3 ways described above to ensure the validity of the payer device 20.

In this embodiment, as an optional implementation manner, the first authentication information may further include: authenticating the identification information; the authentication identification information may be, for example, information that can uniquely identify the user identity, such as the device identifier of the payer device 20, the user ID, etc., and may be uniquely associated with an authentication factor that is used by the payer user to authenticate the digital authentication information and the biometric information, so as to perform dual authentication on the digital authentication information and the biometric information by using the authentication factor, thereby determining that the biometric information and the digital authentication information are both from the same user after the dual authentication is passed, and ensuring the validity of the user.

In this embodiment, the payee device 10 is further configured to collect biometric information of the biological limb during a duration that the biological limb enters a preset range of the payee device 10; wherein the biometric information includes at least one of: fingerprint information, iris information, face information, and vein information. In this embodiment, the payee device 10 collects biometric information of a human body while receiving the first authentication information sent by the payer device 20, for example, during a short time (e.g. 3 seconds) when a finger of a user touches a touch part of the POS device, the POS device establishes a communication connection with a wristwatch worn by the user through the human body and transmits bluetooth pairing information through the human body communication connection, the POS device establishes a bluetooth connection with the wristwatch worn by the user and transmits the first authentication information through the bluetooth connection, and simultaneously, the touch part of the POS device collects fingerprint information, for example, during a time when the wristwatch of the user establishes a human body communication connection with a payer payment terminal (the payment terminal has a photographing function and can be used for collecting face information), the payee device 10 can simultaneously obtain the first authentication information and the biometric information by the user operating once, the operation is convenient and fast.

In this embodiment, the biometric information may be collected only during the duration that the biological limb enters the preset range of the payee device 10, and may be collected before the establishment of the communication connection, or may be collected during or after the establishment of the communication connection.

In particular, in the case where a human body limb is required to contact the payee device 10 to collect biometric information, the biometric information includes, as an alternative embodiment: fingerprint information and/or vein information; payee device 10 is also configured to collect biometric information of the biological limb including: in the case where the biological limb is in contact with the transferee device 10, the transferee device 10 collects biometric information of the contact portion of the biological limb with the transferee device 10.

In this embodiment, the authentication result for authenticating the digital authentication information and the biometric information is the authentication result for acquiring the authentication factor according to the authentication identification information and authenticating the digital authentication information and the biometric information by using the authentication factor, where the authentication factor mainly includes biometric verification information and verification information for verifying the digital authentication information, and the authentication factor is uniquely associated with the authentication identification information, so that the authentication factor corresponding to the user can be uniquely queried according to the authentication identification information, so that after the dual authentication using the digital authentication information and the biometric information passes, the validity of the user can be ensured.

In an optional implementation manner of this embodiment, the authentication of the digital authentication information by using the authentication factor at least includes one of the following manners:

Three authentication methods for the digital authentication information have been described above, and are not described herein again.

As an optional implementation, the authenticating the digital authentication information by using the authentication factor and the authenticating the biometric information by using the biometric verification information include: and when the digital authentication information passes the authentication and the matching rate of the biological characteristic verification information and the biological characteristic information is greater than the first preset value, the authentication of the digital authentication information and the biological characteristic information is confirmed to pass. As another optional implementation, authenticating the digital authentication information and the biometric information by using the authentication factor includes: the digital authentication information is authenticated by using the authentication factor, and whether the matching rate of the biological characteristic verification information and the biological characteristic information is greater than a first preset value or not is judged after the authentication is passed; and when the matching rate of the biological characteristic verification information and the biological characteristic information is greater than a first preset value, confirming that the digital authentication information and the biological characteristic information are authenticated.

The first preset value is smaller than a second preset value, and the second preset value is used for indicating the matching rate of two pieces of biological characteristic information which are the same biological characteristic information; in practical implementation, the second preset value may be a similarity to be achieved when the two pieces of biometric information are perfectly matched theoretically, for example, 99%, and the first preset value may be smaller than the second preset value, so that the probability that a real and legitimate user is identified in the biometric information authentication technology is reduced.

In the prior art, the biometric information authentication technology has the probability that a real and legal user is identified unsuccessfully and the probability that an illegal user is identified successfully, taking fingerprint identification as an example, the fingerprint of the user is real in many times, but the authentication device identifies wrongly and identifies the fingerprint of the user as a false fingerprint by mistake, so that the authentication cannot be passed and payment transaction cannot be realized; sometimes, the fingerprint of the illegal user is definitely false, but the authentication device passes the authentication, so that economic loss is caused to the legal user, and the probability of the situations is very high. The embodiment can avoid the condition that the illegal user is successfully identified through double authentication of the digital authentication information and the biological characteristic information, and can reduce the condition that the real and legal user is unsuccessfully identified. Firstly, through the 3 kinds of authentication on the digital authentication information, the user can be determined to be a legal user, if the user is an illegal user, the digital authentication cannot be passed, the operation of false fingerprint authentication cannot be performed, and the condition that the illegal user is successfully identified is avoided; secondly, in the case of ensuring that the user is a legitimate user, the authentication apparatus may reduce the similarity of matching two pieces of biometric information to reduce the probability of the true legitimate user failing to be identified, for example, theoretically, two pieces of biometric information should be completely matched, the similarity of which at least reaches 99% (the second preset value), and if the authentication apparatus finds that the similarity is only 90%, the two pieces of biometric information are identified as mismatched and not authenticated, and a case of identifying a true fingerprint as a false fingerprint occurs, in the present invention, since the digital authentication has ensured that the user is a legitimate user, the similarity of the complete match may be reduced to 80% (the first preset value), that is, as long as the similarity reaches 80% (the first preset value), the match is considered, and therefore, when the similarity of the two pieces of biometric information is 90%, the authentication may be passed, therefore, the situation that the real and legal user is identified unsuccessfully is avoided, and the probability that the real and legal user is identified unsuccessfully in the biometric information authentication technology is reduced.

Any process or method descriptions in flow charts or otherwise described herein may be understood as representing modules, segments, or portions of code which include one or more executable instructions for implementing specific logical functions or steps of the process, and alternate implementations are included within the scope of the preferred embodiment of the present invention in which functions may be executed out of order from that shown or discussed, including substantially concurrently or in reverse order, depending on the functionality involved, as would be understood by those reasonably skilled in the art of the present invention.

It should be understood that portions of the present invention may be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, the various steps or methods may be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, any one or combination of the following techniques, which are known in the art, may be used: a discrete logic circuit having a logic gate circuit for implementing a logic function on a data signal, an application specific integrated circuit having an appropriate combinational logic gate circuit, a Programmable Gate Array (PGA), a Field Programmable Gate Array (FPGA), or the like.

It will be understood by those skilled in the art that all or part of the steps carried by the method for implementing the above embodiments may be implemented by hardware related to instructions of a program, which may be stored in a computer readable storage medium, and when the program is executed, the program includes one or a combination of the steps of the method embodiments.

In addition, functional units in the embodiments of the present invention may be integrated into one processing module, or each unit may exist alone physically, or two or more units are integrated into one module. The integrated module can be realized in a hardware mode, and can also be realized in a software functional module mode. The integrated module, if implemented in the form of a software functional module and sold or used as a stand-alone product, may also be stored in a computer readable storage medium.

The storage medium mentioned above may be a read-only memory, a magnetic or optical disk, etc.

In the description herein, references to the description of the term "one embodiment," "some embodiments," "an example," "a specific example," or "some examples," etc., mean that a particular feature, structure, material, or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the invention. In this specification, the schematic representations of the terms used above do not necessarily refer to the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.

Although embodiments of the present invention have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting the present invention, and that variations, modifications, substitutions and alterations can be made in the above embodiments by those of ordinary skill in the art without departing from the principle and spirit of the present invention. The scope of the invention is defined by the appended claims and equivalents thereof.

Claims

1. A payment method, comprising:

after detecting that a biological limb carrying or internally provided with a payer device is contacted with the payee device or after detecting that the payer device sends a signal through the biological limb, the payee device establishes human body communication connection with the payer device through the biological limb;

the payer device transmits matching information to the payee device through the human body communication connection, wherein the matching information includes: the MAC address of the payer device and the identity of the payer device; the identity of the payer includes: a device identification and/or username of the payer device;

the payee device receives the matching information transmitted by the payer device through the human body communication connection, matches the received identity of the payer with the identity in the locally stored identity list, and inquires whether the received identity of the payer exists in the identity list, if so, the matching is successful, otherwise, the matching is failed; if the matching is successful, the payment device is in the preset communication range of the payee device, but the payment transaction is completed, the payee device does not initiate a connection request to the payer device any more, if the matching is failed, the payer device enters the preset communication range of the payee device for the first time to prepare for the first payment transaction, the payee device initiates a connection request for establishing a first wireless communication connection to the payer device according to the MAC address and stores the matching information, and the payee device receives a confirmation response of the payer device through the human body communication connection and establishes the first wireless communication connection with the payer device;

the payer device sending first authentication information to the payee device over the first wireless communication connection, wherein the first authentication information includes: digital authentication information;

the payee device receiving the first authentication information transmitted by the payer device over the first wireless communication connection;

the payee device collecting biometric information of the biological limb for the duration of the human body communication connection established by the payer device with the payee device via the biological limb;

the payee device obtains an authentication result for authenticating the digital authentication information and the biological characteristic information;

the payee device executes a payment transaction if the authentication result is authentication pass;

the payee device disconnecting the first wireless communication connection with the payer device;

and judging whether the biological limb is not in a preset range of the payee equipment, and/or judging whether the time length from the current time to the end of the transaction reaches a preset threshold value, and if so, deleting the matching information.

2. The method of claim 1,

the first wireless communication connection comprises: bluetooth connection, WIFI connection, flux connection, or RFID connection.

3. The method of claim 1, wherein prior to the payer device sending the first authentication information to the payee device over the first wireless communication connection, the method further comprises:

the payee device sending transaction information to the payer device via the first wireless communication connection;

the payer device receiving the transaction information;

the payer device extracting key information from the transaction information;

the payer device prompts the key information and waits for user confirmation;

and after receiving a confirmation instruction of the user, the payer equipment executes the step of sending the first authentication information to the payee equipment by the payer equipment through the first wireless communication connection.

4. The method of claim 2, wherein prior to the payer device sending the first authentication information to the payee device over the first wireless communication connection, the method further comprises:

the payer device receiving the transaction information;

the payer device extracting key information from the transaction information;

the payer device prompts the key information and waits for user confirmation;

5. The method of claim 1,

the biometric information includes: fingerprint information and/or vein information;

the acquiring the biological characteristic information of the biological limb comprises: collecting the biometric information of a contact location of the biological limb with the payee device when the biological limb is in contact with the payee device.

6. The method of claim 2,

7. The method of claim 3,

8. The method of claim 4,

9. The method according to any one of claims 3 to 8,

the digital authentication information includes at least one of: electronic signature information, ciphertext information obtained by using symmetric key calculation and a dynamic password.

10. A payment system, comprising: a payee device and a payer device, wherein:

the payee device is used for establishing human body communication connection with the payer device through the biological limb after detecting that the biological limb carrying or internally provided with the payer device is contacted with the payee device or detecting that the payer device sends a signal through the biological limb;

the payer device is configured to transmit matching information to the payee device through the human body communication connection, where the matching information includes: the MAC address of the payer device and the identity of the payer device; the identity of the payer includes: a device identification and/or username of the payer device;

the payee device is further configured to receive the matching information transmitted by the payer device through the human body communication connection, match the received identifier of the payer with an identifier in an identifier list stored locally, and query whether the received identifier of the payer exists in the identifier list, where if yes, the matching is successful, and if not, the matching is failed; if the matching is successful, the payment device is in the preset communication range of the payee device, but the payment transaction is completed, the payee device does not initiate a connection request to the payer device any more, if the matching is failed, the payer device enters the preset communication range of the payee device for the first time to prepare for the first payment transaction, and the payee device initiates a connection request for establishing a first wireless communication connection to the payer device according to the MAC address and stores the matching information; receiving a confirmation response of the payer device through the human body communication connection, and establishing the first wireless communication connection with the payer device;

the payer device is further configured to send first authentication information to the payee device via the first wireless communication connection, where the first authentication information includes: digital authentication information;

the payee device is further configured to receive the first authentication information transmitted by the payer device via the first wireless communication connection; collecting biometric information of the biometric limb for the duration that the payer device establishes a human body communication connection with the payee device via the biometric limb; and obtaining an authentication result for authenticating the digital authentication information and the biological characteristic information; executing a payment transaction if the authentication result is authentication pass;

the payee device further configured to disconnect a first wireless communication connection with the payer device; and judging whether the biological limb is not in a preset range of the payee equipment, and/or judging whether the time length from the current time to the end of the transaction reaches a preset threshold value, and if so, deleting the matching information.

11. The system of claim 10,

12. The system of claim 10,

the payer device is further configured to receive transaction information sent by the payee device via the first wireless communication connection before the first authentication information is sent to the payee device via the first wireless communication connection; extracting key information from the transaction information; prompting the key information and waiting for confirmation of a user; and after receiving a confirmation instruction of the user, executing the operation of sending the first authentication information to the payee device through the first wireless communication connection.

13. The system of claim 11,

14. The system of claim 10,

the payee device being further configured to collect biometric information of the biological limb including:

the payee device collects the biometric information of the contact portion of the biological limb and the payee device when the biological limb is in contact with the payee device.

15. The system of claim 11,

16. The system of claim 12,

17. The system of claim 13,

18. The system according to any one of claims 10-17,