CN107194695A

CN107194695A - Transaction code is generated and end of scan, transaction code generation and method of commerce

Info

Publication number: CN107194695A
Application number: CN201710279230.XA
Authority: CN
Inventors: 杨贤伟; 李美祥; 虞欢
Original assignee: Nationz Technologies Inc
Current assignee: Nationz Technologies Inc
Priority date: 2017-04-25
Filing date: 2017-04-25
Publication date: 2017-09-22

Abstract

The present invention provides a kind of transaction code generation and end of scan, transaction code generation and method of commerce, the security module obtained from trusted third party is provided with transaction code generation terminal and transaction code end of scan at least one party, the security module of setting is all financial security management hardware chip；Transaction request can be digitally signed with security module in process of exchange, only the corresponding payment platform of trusted third party could carry out follow-up transaction process flow to corresponding digital signature identification after, namely the present invention is digitally signed in both parties using safety chip, so that Quick Response Code, which is paid, is provided simultaneously with the convenience that the security and moving 2 D code of POS payments are paid, the risk and potential safety hazard of process of exchange are reduced as far as possible, lift the satisfaction of Consumer's Experience.

Description

Transaction code is generated and end of scan, transaction code generation and method of commerce

Technical field

The present invention relates to mobile payment field, more particularly to a kind of generation of transaction code and end of scan, transaction code generation and Method of commerce.

Background technology

Current Intelligent mobile equipment (such as smart mobile phone) had been provided with various lines/line under payment function, it is such as micro- Letter, Alipay etc. realize mobile payment by scanning Quick Response Code, and people can be directly in convenience store, public service, chain department store etc. Place completes transaction payment by sweeping Quick Response Code.It is due to ordinary two dimensional code although Quick Response Code is upper very convenient in use Authenticity can not ensure, it is easy to forge and be counterfeited, and user can not differentiate the 2 D code information content true and false or publisher's Identity information so that Quick Response Code is swept with mobile phone and is acted as excessive risk, therefore the security of ordinary two dimensional code is relatively low, using common There is certain payment risk in the payment application of Quick Response Code, so being only used for small amount payment at present, and it, which is used, is limited to, shadow Ring the satisfaction of Consumer's Experience.

The content of the invention

The present invention provides a kind of transaction code generation and end of scan, transaction code generation and method of commerce, to solve existing use It is low in the two-dimension code safe of payment, cause transaction to there is payment risk and be only used for small amount payment, satisfaction of users Low the problem of.

In order to solve the above technical problems, the present invention uses following technical scheme:

A kind of transaction code generates terminal, including the first trade management module, the first security module and Quick Response Code output mould Block, first security module is the first hardware security module obtained from trusted third party, its first key that is stored with；

First payment management module is used to obtain the first Transaction Information, and the first Transaction Information of acquisition is issued into institute State the first security module, and for receiving the transaction Quick Response Code of the first security module feedback and to issue the Quick Response Code defeated Go out module, first Transaction Information at least includes the first Transaction Account number that transaction code generates terminal；

First security module is used to be digitally signed first Transaction Information using the first key To the first digital signature, and based on first Transaction Information and first digital signature generation transaction Quick Response Code；

The Quick Response Code output module is used to carry out being displayed for the scanning of transaction code end of scan by the transaction Quick Response Code.

Further, first security module is to be built in the first safe core that the transaction code generates terminal inner Piece, or to support the first Subscriber Identity Module of short-range communication or supporting the first storage card of short-range communication；

Or,

The transaction code generation terminal is outer and support is generated eventually with the transaction code to be placed on for first security module The financial security smart card communicated is held, or to be arranged in the wearable device that terminal pairing is generated with the transaction code First safety chip, the first Subscriber Identity Module or the first storage card for supporting short-range communication.

Further, the transaction code generation terminal is payer terminal, and transaction Quick Response Code is payment Quick Response Code；Or,

The transaction code generation terminal is beneficiary terminal, and the transaction Quick Response Code is gathering Quick Response Code.

A kind of transaction code end of scan, it is characterised in that including the second trade management module, the second security module, two dimension Code scan module and communication module, second security module are the second hardware security module obtained from trusted third party, Its second key that is stored with；

The Response Code scan module is used to be scanned the transaction Quick Response Code shown in transaction code generation terminal, and will The 2 D code information that scanning is obtained issues second trade management module；

Second trade management module at least obtains the first Transaction Account number and first for parsing the 2 D code information Digital signature, the first Transaction Account number and the first digital signature based on acquisition obtain the second Transaction Information, the second transaction letter The second Transaction Account number comprising dealing money and transaction code end of scan in breath；And for receiving second safety After the second digital signature and transaction request of module feedback, second digital signature and the transaction request are passed through described logical Letter module issues the corresponding Third-party payment platform of the trusted third party to carry out payment authentication.

Second security module is used to generate transaction request according to second Transaction Information, uses second key The transaction request is digitally signed and obtains the second digital signature, and by second digital signature and the transaction request Issue second trade management module.

Further, second security module is to be built in the second safe core inside the transaction code end of scan Piece, or to support the second user identification card of short-range communication or supporting the second storage card of short-range communication；

Or,

The transaction code end of scan is outer and support is scanned eventually with the transaction code to be placed on for second security module The financial security smart card communicated is held, or to be arranged in the wearable device matched with the transaction code end of scan Second safety chip, the second user identification card or the second storage card for supporting short-range communication.

Further, second trade management module is additionally operable to parse the 2 D code information acquisition dealing money, and The second Transaction Account number of transaction code end of scan is obtained, according to the dealing money of acquisition, the first Transaction Account number, the first numeral Signature and the second Transaction Account number obtain the second Transaction Information；

Or,

Second trade management module is used to obtain dealing money and the second Transaction Account number from transaction code end of scan, Second transaction letter is obtained according to the dealing money of acquisition, the first Transaction Account number, the first digital signature and the second Transaction Account number Breath.

One kind transaction code generating method, including：

The first Transaction Information is obtained, and the first Transaction Information of acquisition is issued into the first safe mould that transaction code generates terminal Block, first Transaction Information at least include transaction code generate terminal the first Transaction Account number, first security module be from The first hardware security module that trusted third party obtains, its first key that is stored with；

First security module is digitally signed using the first key to first Transaction Information obtains One digital signature, and based on first Transaction Information and first digital signature generation transaction Quick Response Code；

The transaction Quick Response Code is carried out being displayed for the scanning of transaction code end of scan.

Or,

A kind of transaction code end of scan, including the 3rd trade management module, the 3rd security module, Response Code scan module with And communication module；3rd security module is the 3rd hardware security module obtained from trusted third party, and it is stored with the 3rd Key；

The Response Code scan module is used to be scanned the transaction Quick Response Code shown in transaction code generation terminal, and will The 2 D code information that scanning is obtained, which is issued, does not include digital signature letter in the 3rd trade management module, the transaction Quick Response Code Breath；

3rd trade management module at least obtains the first Transaction Account number and first for parsing the 2 D code information Digital signature, the first Transaction Account number and the first digital signature based on acquisition obtain the 3rd Transaction Information, the 3rd transaction letter The 3rd Transaction Account number comprising dealing money and transaction code end of scan in breath；And for receiving the 3rd safety After the 3rd digital signature and transaction request of module feedback, the 3rd digital signature and the transaction request are passed through described logical Letter module issues the corresponding Third-party payment platform of the trusted third party to carry out payment authentication；

3rd security module is used to generate transaction request according to the 3rd Transaction Information, uses the 3rd key The transaction request is digitally signed and obtains the 3rd digital signature, and by the 3rd digital signature and the transaction request Issue the 3rd trade management module.

A kind of transaction code end of scan, including the 4th trade management module, Response Code scan module and communication module；

The Response Code scan module is used to be scanned the transaction Quick Response Code shown in transaction code generation terminal, and will The 2 D code information that scanning is obtained issues the 4th trade management module；

4th trade management module at least obtains the first Transaction Account number and first for parsing the 2 D code information Digital signature, the first Transaction Account number and the first digital signature generation transaction request based on acquisition, the transaction request is passed through The communication module issues the corresponding Third-party payment platform of trusted third party to carry out payment authentication, and the transaction request includes First Transaction Account number, the first digital signature, the 4th Transaction Account number of dealing money and transaction code end of scan.

A kind of method of commerce, including：

The transaction Quick Response Code shown in terminal is generated to transaction code to be scanned；

Parse the 2 D code information and at least obtain the first Transaction Account number and the first digital signature, first based on acquisition is handed over Easy account and the first digital signature obtain the second Transaction Information and issue the second security module of transaction code end of scan, and described the The second Transaction Account number comprising dealing money and transaction code end of scan in two Transaction Informations, second security module be from The second hardware security module that trusted third party obtains, its second key that is stored with；

Second security module generates transaction request according to second Transaction Information, using second key to institute State transaction request and be digitally signed and obtain the second digital signature；

Second digital signature and the transaction request are issued into the corresponding Third-party payment of the trusted third party to put down Platform is to carry out payment authentication.

Or,

Beneficial effect

Transaction code generation and end of scan, transaction code generation and method of commerce that the present invention is provided, in the friendship of both parties At least one party of easy code generation terminal and transaction code end of scan is respectively arranged with the security module obtained from trusted third party, should Security module is all financial security management hardware chip；Security module can be used to enter line number to transaction request in process of exchange Word is signed, and only the corresponding Third-party payment platform of trusted third party could be carried out to corresponding digital signature identification after Follow-up transaction process flow, namely the present invention are digitally signed in both parties using safety chip so that Quick Response Code branch Pay be provided simultaneously with POS payment security and moving 2 D code pay convenience, as far as possible reduce process of exchange risk and Potential safety hazard, lifts the satisfaction of Consumer's Experience.

Further, between the first payment management module and the first security module in transaction code generation terminal of the present invention Information can specifically complete to interact by communication, and such as the first security module can be by bluetooth by the two dimension of generation Code data are sent to the second payment management module and the second security module in the first payment management module, transaction code end of scan Between information can also by communication complete interact, the advantage of this mode is big data can be supported to transmit, The task of transmission interaction data and two-dimensional code data in a short time can be met, it is ensured that the real-time that transaction is completed, further carried Rise the satisfaction of Consumer's Experience.

Brief description of the drawings

Fig. 1 is the move transaction system structure diagram that the embodiment of the present invention one is provided；

Fig. 2 is the transaction code generation terminal structure schematic diagram that the embodiment of the present invention one is provided；

Fig. 3 is the transaction code end of scan structural representation that the embodiment of the present invention one is provided；

Fig. 4 is the payment code generating method schematic flow sheet that the embodiment of the present invention three is provided；

Fig. 5 is the method for commerce schematic flow sheet that the embodiment of the present invention three is provided；

Fig. 6 is the transaction code end of scan structural representation that the embodiment of the present invention five is provided；

Fig. 7 is another transaction code end of scan structural representation that the embodiment of the present invention five is provided.

Embodiment

The present invention is described in further detail below by embodiment combination accompanying drawing.

Embodiment one：

The move transaction system that the present embodiment is provided is shown in Figure 1, and it at least includes transaction code generation terminal 1, transaction Code end of scan 2 and the corresponding Third-party payment platform 3 of trusted third party, wherein transaction code generation terminal 1 and transaction code are swept Retouch terminal 2 and be respectively arranged with the first security module and the second security module obtained from trusted third party, the two security modules All it is financial level security management hardware chip；The first security module and the second security module can be used respectively in process of exchange Transaction request is digitally signed, only Third-party payment platform 3 can just be entered to the digital signature identification of both sides after The follow-up transaction process flow of row so that what the security and moving 2 D code that Quick Response Code payment is provided simultaneously with POS payments were paid Convenience.Structure and concrete function the progress example for generating terminal 1 and transaction code end of scan 2 to transaction code separately below are said It is bright.

The transaction code generation generation transaction Quick Response Code of terminal 1 in the present embodiment, but it is to be understood that, in practical application In, payer terminal and beneficiary terminal can generate transaction Quick Response Code, therefore the transaction code generation terminal 1 in the present embodiment Both specifically it can also can flexibly be used according to current transaction scene as beneficiary terminal as payer terminal. Shown in Figure 2, transaction code generation terminal 1 includes the first trade management module 11, the first security module 12 and Quick Response Code Output module 13, the first security module 12 is the first hardware security module obtained from trusted third party, and it is stored with first close Key, its can also store transaction code generation terminal 1 the corresponding Transaction Account number information of user；

First payment management module 11 can specifically generate the various payment client terminals realization in terminal 1 by transaction code, It is used to obtain the first Transaction Information, and the first Transaction Information of acquisition is issued into first security module 12, and is used for Receive the transaction Quick Response Code of the feedback of the first security module 12 and issue the Quick Response Code output module 13；First payment management First Transaction Information of module generation at least includes the first Transaction Account number that transaction code generates terminal.First in the present embodiment Transaction interface can specifically be provided for user's selection or input Transaction Account number information by paying management module 11, and the Transaction Account number of input The account that information is supported by the first security module 12, such as when the transaction code generation terminal 1 that is stored with the first security module 12 User's corresponding Transaction Account number information when, the first payment management module 11 can point out user from the first peace on transaction interface One account of selection is traded in the account that full module 12 is stored, or judges that user selects or the account of input is not the first peace Pointed out during the account that full module 12 is supported.

Certainly, in a kind of example, however not excluded that the first security module 12 can support any account, now then need the 3rd Square payment platform can be across any backstage payment management platform；The first security module 12 can not store transaction in this case Account information.

In addition, it is to be understood that when the first payment management module 11 obtains the first Transaction Information, transaction can also be provided Interface for users inputs dealing money, and the first Transaction Information now obtained can then include dealing money；Certainly the step is not The step of must carrying out, can also be traded the setting of the amount of money by the opposing party of transaction, specifically can be according to specific friendship Easy scene is flexibly set.

First security module 12 is used to receive the first Transaction Information that the first payment management module 11 is sent, using inside it The first key of storage is digitally signed to first Transaction Information and obtains the first digital signature, is then based on received Then the transaction Quick Response Code of generation is fed back to first by one Transaction Information and the first obtained digital signature into transaction Quick Response Code Pay management module 11.

It should be appreciated that the first security module 12 is being digitally signed it to the first Transaction Information in the present embodiment Before, legitimacy verifies can also be carried out to the first Transaction Information according to default verification rule, be performed again after verifying successfully follow-up Digital signature procedure, further to lift security.

Simultaneously, it should be appreciated that the first security module 12 is based on the first Transaction Information received and obtain first It is not limited to generate Quick Response Code when digital signature is into transaction code, it can also generate the code information that other are used to be paid, but These modes and the mode substantial equivalence of generation Quick Response Code, therefore fall within protection scope of the present invention.First security module 12 After generation transaction Quick Response Code, it can also directly issue Quick Response Code output module 13 and be shown.

The first security module 12 in the present embodiment can be to be built in the first safe core inside transaction code generation terminal 1 Piece, or to support the first Subscriber Identity Module of short-range communication or supporting the first storage card of short-range communication.

Such as the first security module 12 is specifically as follows the first peace directly set on the mainboard of transaction code generation terminal 1 Full chip；In another example the first security module 12 is specifically as follows the Subscriber Identity Module or storage card for possessing function of Bluetooth communication, should Subscriber Identity Module or storage card are all built-in with the finance and managing chip of trusted third party's granting, now the first payment management module Then interacting for data can be completed by Bluetooth communication between 11 and the first security module 12.Being certainly not limited to bluetooth, this is a kind of Short-range communication mode, it would however also be possible to employ the various short-range communication modes such as infrared, NFC complete the interaction of the information, can also The interaction of above- mentioned information is realized by wired mode.Completing interaction by Bluetooth wireless communication mode can support big data to pass It is defeated, the task of transmission interaction data and two-dimensional code data in a short time can be met, it is ensured that the real-time that transaction is completed.

First security module 12 is that the Subscriber Identity Module can be general when supporting the first Subscriber Identity Module of short-range communication Logical Subscriber Identity Module or miniature Subscriber Identity Module；Domestic consumer's identification card include but is not limited to common SIM cards, common UIM cards or The common usim card of person.Miniature Subscriber Identity Module includes but is not limited to compact SIM card, miniature UIM cards or miniature usim card.Its In, compact SIM card, miniature UIM cards or miniature usim card can be respectively Micro SIM cards, Nano SIM cards, Micro UIM cards, Nano UIM cards or Micro usim cards, Nano usim cards etc. have unified design standard (such as size, shape Deng) compact SIM card, miniature UIM cards or miniature usim card；Common SIM cards, common UIM cards or common usim card can be with For using Uniting standard (such as size, shape) be made as Plug-in types SIM card, Plug-in type UIM cards or Standard SIM card, standard UIM cards or the standard usim card of the types such as Plug-in type usim cards.First security module 12 is support During the first storage card of short-range communication, the storage card can be with common SD card, or miniature SD card (MicroSD).

First security module 12 can also be to be placed on outside transaction code generation terminal 1 and support to enter with transaction code generation terminal The financial security smart card of row communication, or for be arranged at generated with the transaction code in the wearable device that terminal 1 is matched the One safety chip, the first Subscriber Identity Module or the first storage card for supporting short-range communication.Financial security smart card refers to can be solely Vertical work and the various financial smart cards communicated with transaction code generation terminal 1, it is internal real with finance and safety chip The safety managements such as existing digital signature.Wearable device in the present embodiment can be intelligent watch, intelligent ring, Intelligent bracelet, The various wearable devices such as intelligent necklace, can be by setting the first safety chip, supporting the first of short-range communication inside it Subscriber Identity Module or the first storage card realize safety management, and set-up mode can be similar with the interior setting of transaction code generation terminal 1, It will not be repeated here.

Quick Response Code output module 13 be then used for the transaction Quick Response Code that sends the first payment management module 11 shown with For the scanning of transaction code end of scan.The display screen that Quick Response Code output module 13 can specifically generate terminal 1 by transaction code is realized.

As shown in upper analysis, transaction code generates terminal 1 can be as payer terminal, now in some usage scenarios The transaction Quick Response Code of first security module 12 generation can carry dealing money to pay Quick Response Code, inside it, can not also carry And be configured by beneficiary terminal；Transaction code generation terminal 1 can also be as beneficiary terminal in some usage scenarios, this When the first security module 12 generation transaction Quick Response Code for gathering Quick Response Code, dealing money can be similarly carried inside it, can also Do not carry and be configured by payer terminal.

It is shown in Figure 2, in some instances, transaction code generation terminal 1 can also include with transaction code end of scan or Third party's communications platform carries out the various first communication modules 14 of telecommunication, and certain first communication module 14 is also non-essential Module.

Transaction code end of scan in the present embodiment interacts completion as with Third-party payment platform in this example The side finally merchandised, similarly it should be understood that it can be beneficiary terminal, or payer terminal, dealing money It can also can be set by its setting by the opposing party merchandised.It is shown in Figure 3, the transaction code end of scan in the present embodiment 2, including the second trade management module 21, the second security module 22, Response Code scan module 23 and communication module are (below referred to as For communication module 24), wherein the second security module 22 is also the second hardware security module obtained from trusted third party, it is stored There is the second key, can be with the account information of store transaction code end of scan 2；

Response Code scan module 23, specifically can be by the shooting of transaction code end of scan 2 as Quick Response Code input port Head is realized, is scanned for generating the transaction Quick Response Code shown in terminal 1 to transaction code, and the Quick Response Code for scanning acquisition is believed Breath issues the second trade management module 21；

Second trade management module 21 at least obtains the first Transaction Account number and the first numeral label for parsing 2 D code information Name, the first Transaction Account number and the first digital signature based on acquisition obtain the second Transaction Information, the second resulting Transaction Information In the second Transaction Account number comprising dealing money and transaction code end of scan；And for receiving the second security module 22 After the second digital signature and transaction request of feedback, the second digital signature and transaction request are issued the 3rd by communication module 24 Square payment platform 3 is to carry out payment authentication.

Second payment management module 21 can specifically be realized by various payment client terminals on transaction code end of scan 2, Second payment management module 21 can specifically provide transaction interface and Transaction Account number information, and the friendship of input are selected or inputted for user The account that easy account information is supported by the second security module 22, such as when the transaction code scanning that is stored with the second security module 22 During the corresponding Transaction Account number information of the user of terminal 2, the second payment management module 21 can be pointed out on transaction interface user from One account of selection is traded in the account of second security module 22 storage, or judges that user's selection or the account inputted are not Pointed out during the account that the second security module 22 is supported.

Certainly, in a kind of example, any account can be supported by being also not excluded for the second security module 22, now then need Tripartite's payment platform can be across any backstage payment management platform；The second security module 22 can not store friendship in this case Easy account information.

In addition, it is to be understood that when the second payment management module 21 obtains the second Transaction Information, transaction can also be provided Interface for users inputs dealing money, and the step of certain step is not required to carry out can also be entered by the opposing party of transaction The setting of row dealing money, specifically can flexibly set according to specific transaction scene.

Second security module 22 is used to generate transaction request according to the second Transaction Information, using the second key to transaction request It is digitally signed and obtains the second digital signature, and second digital signature and transaction request are issued into second transaction and manages Manage module 21.

It should be appreciated that in the present embodiment the second security module 22 before being digitally signed to transaction request, Legitimacy verifies can be carried out to the second Transaction Information according to default verification rule, perform follow-up numeral after verifying successfully again Signature process.

The second security module 22 in the present embodiment can be to be built in the second safe core inside transaction code end of scan 2 Piece, or to support the second user identification card of short-range communication or supporting the second storage card of short-range communication.

Such as the second security module 22 is specifically as follows the second peace directly set on the mainboard of transaction code end of scan 2 Full chip；In another example the second safety chip is specifically as follows the Subscriber Identity Module or storage card for possessing function of Bluetooth communication, the use Family identification card or storage card are all built-in with the finance and managing chip of trusted third party's granting, now the second payment management module 21 Then interacting for data can be completed by Bluetooth communication between the second security module 22.Being certainly not limited to bluetooth, this is a kind of near Distance communication mode, it would however also be possible to employ the various short-range communication modes such as infrared, NFC complete the transaction of the information, can also lead to Cross the interaction that wired mode realizes above- mentioned information.

Second security module 22 is that the Subscriber Identity Module can be general when supporting the second user identification card of short-range communication Logical Subscriber Identity Module or miniature Subscriber Identity Module；Domestic consumer's identification card include but is not limited to common SIM cards, common UIM cards or The common usim card of person.Miniature Subscriber Identity Module includes but is not limited to compact SIM card, miniature UIM cards or miniature usim card.Its In, compact SIM card, miniature UIM cards or miniature usim card can be respectively Micro SIM cards, Nano SIM cards, Micro UIM cards, Nano UIM cards or Micro usim cards, Nano usim cards etc. have unified design standard (such as size, shape Deng) compact SIM card, miniature UIM cards or miniature usim card；Common SIM cards, common UIM cards or common usim card can be with For using Uniting standard (such as size, shape) be made as Plug-in types SIM card, Plug-in type UIM cards or Standard SIM card, standard UIM cards or the standard usim card of the types such as Plug-in type usim cards.Second security module 22 is support During the second storage card of short-range communication, the storage card can be with common SD card, or miniature SD card (MicroSD).

Second security module 22 can also be to be placed on outside transaction code end of scan 2 and support to enter with transaction code end of scan The financial security smart card of row communication, or for be arranged in the wearable device matched with the transaction code end of scan 2 the Two safety chips, the second user identification card or the second storage card for supporting short-range communication.Financial security smart card refers to can be solely Vertical work and the various financial smart cards communicated with transaction code end of scan 2, it is internal real with finance and safety chip The safety managements such as existing digital signature.Wearable device in the present embodiment can be intelligent watch, intelligent ring, Intelligent bracelet, The various wearable devices such as intelligent necklace, can be by setting the second safety chip, supporting the second of short-range communication inside it Subscriber Identity Module or the second storage card realize safety management, and set-up mode can be similar with the interior setting of transaction code end of scan 2, It will not be repeated here.

As it appears from the above, in a kind of example, dealing money is included in the first Transaction Information, the second trade management module 21 is also Dealing money is obtained for parsing 2 D code information, and obtains the second Transaction Account number of transaction code end of scan, according to acquisition The dealing money, the first Transaction Account number, the first digital signature and the second Transaction Account number obtain the second Transaction Information；

In a kind of example, dealing money can not be included in the first Transaction Information, now the second trade management module 21 For obtaining dealing money and the second Transaction Account number from transaction code end of scan, according to the dealing money of acquisition, first Transaction Account number, the first digital signature and the second Transaction Account number obtain the second Transaction Information.

Third-party payment platform 3 is received after the transaction request and the second digital signature of the transmission of transaction code end of scan 2, first The side of transaction code end of scan 2 digital signature of public key verifications second corresponding with the second key is first used, if after correct, reusing friendship Easy code generates the side of terminal 1 digital signature of public key verifications first corresponding with first key, please according to transaction if checking is also correct The accounts information of dealing money and both sides in asking completes follow-up flow of withholing.

Further, Third-party payment platform 3 can also notify client to be confirmed, Yong Hu before completing to withhold Carried out on client terminal after confirmation operation, Third-party payment platform is just performed and remitted money, and payment result is notified in both sides At least one party.

It should be appreciated that the Third-party payment platform in the present embodiment can support both parties in same payment platform Situation about being contracted, can also support situation about being contracted in different payment platforms, specific digital signature and process of exchange It will not be repeated here.

The present embodiment is digitally signed in the safety chip that both parties are provided using Third-party payment platform so that two Dimension code, which is paid, is provided simultaneously with the convenience that the security and moving 2 D code of POS payments are paid, and process of exchange is reduced as far as possible Risk and potential safety hazard, lift the satisfaction of Consumer's Experience.

Second embodiment：

The present embodiment is respectively that merchant tenninal and client terminal are illustrated as example using both parties' terminal.

Credible and secure module (the i.e. second safe mould that the present embodiment passes through built-in trusted third party's distribution in merchant tenninal Block or the first security module) realize accepting terminal security function so that mobile payment of the merchant tenninal equivalent to a safety Accepting terminal is used, credible and secure module (the i.e. first safe mould of built-in credible trusted third party's distribution on client terminal Block or the second security module) realize Payment Card security function so that and client terminal is equivalent to various mobile payment cards, such as bank Card etc..Different from traditional POS mode, the present embodiment directly carries out safe mobile branch by Quick Response Code barcode scanning mode Pay " swiping the card ", including the gathering of merchant tenninal barcode scanning and client terminal barcode scanning payment two ways.Because merchant tenninal and client are whole All be built-in with the credible and secure module of credible trusted third party distribution on end, credible and secure module be not only built-in with trade company and/or The true identity information of client, and its security function supports a variety of cryptographic algorithms, the scattered and a variety of safeguard protection of multistage key Mechanism, can provide safety guarantee to the transaction authenticity of 2 D code information, integrality and the confidentiality of generation, therefore, and common Quick Response Code pays and compared, and the present embodiment substantially increases payment safety while providing and paying convenience, and with traditional POS Swipe the card and compare, ease of use is substantially increased while security is guaranteed payment.

The mobile-payment system that the present embodiment is provided at least includes：The trusted third party of mobile payment management and service is provided Third-party payment platform, support the merchant tenninal of trade company end mobile payment application function, support client mobile payment application The client terminal of function.

Merchant tenninal is at least shown by completion Quick Response Code and Quick Response Code I/O modules, the completion accepting terminal of barcode scanning processing are pacified Full Featured credible and secure module, mobile payment module (i.e. the second payment management module for completing trade company's end payment transaction processing Or first payment management module) and the part such as communication module for carrying out remote interaction with Third-party payment platform constitute. The credible and secure module is built in merchant tenninal as standalone module, and associated safety work(is provided by the credible and secure module Energy.The credible and secure module in trade company end is got and installed from Third-party payment platform in trade company and is registered as Third-party payment platform Contractor after, its intelligent terminal can turn into merchant tenninal described in the present embodiment, built in the credible and secure module in trade company end There are the true identity information of the trade company, unified social credibility code, shroff account number, registration address, the contact method of such as enterprise Effective identity information, and trade company's digital certificate etc..

The client terminal at least shows the Quick Response Code I/O modules handled with barcode scanning by completion Quick Response Code, completes mobile branch Pay the credible and secure module (i.e. the first payment management module or the second payment management module) of card security function, complete client branch Pay the part such as the mobile payment module of trading processing and the communication module for carrying out remote interaction with Third-party payment platform Composition.The credible and secure module is built in client terminal as standalone module, provides various by the credible and secure module Mobile payment card security function.The credible and secure module of client is got and installed from trusted third party in user and is registered as After the signing card user of tripartite's payment platform, its smart mobile phone can turn into client terminal described in the present embodiment, and client can Letter security module is built-in with the true identity information of the individual subscriber, such as ID card No., payment account number, home address, contact The effectively identity information such as mode, and the personal digital certificate of client etc..

Merchant tenninal described in the present embodiment and the client terminal can be smart mobile phone, or IPad etc. other possess The mobile intelligent terminal equipment of shoot function and network savvy, and the credible and secure module is usually the independent mould of terminal built-in Block, such as bluetooth SIM card, bluetooth SD card, the interaction of transaction data and two-dimensional code data is realized by bluetooth, exist it is low in energy consumption, Can be the advantages of transmitted data amount be big and transmission rate meets transactions demand；Or credible and secure module is the external independence of terminal Safety means such as safe bracelet, safe finger ring etc., or can also be built-in security chip being integrated on terminal mainboard etc..

The corresponding Third-party payment platform of the trusted third party can be telecom operators, business bank, the card of city one Payment platform of logical and other trusted third party operation etc..The credible and secure module can be only by a trusted third party Vertical distribution is jointly issued by Duo Jia trusted third party.Obviously, user gets and installed described credible and secure from publishing platform After module, contractor and/or the signing card user of many Third-party payment platforms can be registered as simultaneously so that an intelligence Mobile phone can not only support many Third-party payment platforms, but also both can be used when merchant tenninal, and when user terminal is used.

Mobile-payment system described in the present embodiment supports trade company's end barcode scanning gathering and client barcode scanning two kinds of payers of payment Formula.

First, the basic transaction flow of trade company end barcode scanning gathering is as follows：

Secure payment Quick Response Code is generated and shown on client terminal：

(1) using the digital certificate of client, to this payment transaction information, (i.e. first hands over the credible and secure module of client terminal Easy information) it is digitally signed；

(2) the credible and secure module generation secure payment Quick Response Code of client terminal, the secure payment Quick Response Code is comprised at least The information such as customer payment account and consumer digital signature；

(3) secure payment Quick Response Code described in client terminal screen display is for trade company's barcode scanning.

Secure payment Quick Response Code is scanned using merchant tenninal, transaction request is generated：

(1) the secure payment Quick Response Code shown on client terminal is scanned using merchant tenninal, parsing obtains customer payment account Number and consumer digital signature etc. information；

(2) the credible and secure module of merchant tenninal carries out digital label using trade company's digital certificate to the transaction request information of generation Name, the transaction request information at least includes customer payment account, consumer digital signature and trade company's shroff account number, trade gold Volume etc.；

(3) transaction request information and trade company's digital signature are submitted Third-party payment platform by merchant tenninal together.

3rd, merchant tenninal and Third-party payment platform carry out remote interaction, complete to withhold：

(1) Third-party payment platform separately verify trade company's signature and customer signature it is all correct after, according in transaction request Dealing money complete remitting money from customer payment account to trade company's shroff account number；

(2) the Third-party payment platform result that will remit money notifies merchant tenninal and/or client terminal.

In above process, the digital signature of client ensure that the authenticity of paying party and its Quick Response Code, and represent this Transaction request obtains the license of customer；And the digital signature of trade company ensure that the authenticity of this transaction request information, and Represent that this transaction request obtains the license of trade company.

2nd, the basic transaction flow of client barcode scanning payment is as follows：

Secure payment Quick Response Code is generated and shown in merchant tenninal：

(1) using trade company's digital certificate, to this payment transaction information, (i.e. first merchandises the credible and secure module of merchant tenninal Information) it is digitally signed；

(2) the credible and secure module generation secure payment Quick Response Code of merchant tenninal, the secure payment Quick Response Code is comprised at least The information such as trade company's shroff account number and trade company's digital signature；

(3) secure payment Quick Response Code described in merchant tenninal screen display is for client's barcode scanning.

Secure payment Quick Response Code is scanned using client terminal, transaction request is generated：

(1) the secure payment Quick Response Code shown in merchant tenninal is scanned using client terminal, parsing obtains trade company's gathering account Number and the information such as trade company's digital signature；

(2) the credible and secure module of client terminal carries out digital label using consumer digital certificate to the transaction request information of generation Name, the transaction request information at least includes trade company's shroff account number, trade company's digital signature and customer payment account, trade gold Volume etc.；

(3) transaction request information and consumer digital signature are submitted Third-party payment platform by client terminal together.

Client terminal carries out remote interaction with Third-party payment platform, completes to withhold：

(1) Third-party payment platform separately verify customer signature and trade company's signature it is all correct after, according in transaction request Dealing money complete remitting money from customer payment account to trade company's shroff account number；

(2) the Third-party payment platform result that will remit money notifies client terminal and/or merchant tenninal.

In above process, the digital signature of trade company ensure that the authenticity of beneficiary and its Quick Response Code, and represent this Transaction request obtains the license of trade company；And the digital signature of client ensure that the authenticity of this transaction request information, and table Show that this transaction request obtains the license of client.

Mobile-payment system shown in the present embodiment includes trade company's end barcode scanning gathering and client barcode scanning payment two ways, The convenience that the security and mobile phone two-dimension code of POS payments are paid can be provided simultaneously with.

3rd embodiment

It should be appreciated that in actual applications, be able to can also be passed through by payer terminal generation transaction Quick Response Code Beneficiary terminal generation transaction Quick Response Code, refers to the transaction code generating method in Fig. 4, the present embodiment, including：

S401：The first Transaction Information is obtained, and the first Transaction Information of acquisition is issued the first of transaction code generation terminal Security module.

The first Transaction Information at least includes the first Transaction Account number that transaction code generates terminal, the first security module in the step For the first hardware security module obtained from trusted third party, its first key that is stored with；It can also store transaction code generation end The corresponding Transaction Account number information of user at end 1.

It should be appreciated that when obtaining the first Transaction Information, transaction interface can also be provided and input dealing money for user, The first Transaction Information now obtained can then include dealing money；The step of certain step is not required to carry out, can also lead to The opposing party for crossing transaction is traded the setting of the amount of money, specifically can flexibly be set according to specific transaction scene.

S402：First security module is digitally signed using first key to the first Transaction Information obtains the first numeral label Name, and based on the first Transaction Information and the first digital signature generation transaction Quick Response Code.

It should be appreciated that in the present embodiment before being digitally signed to the first Transaction Information, can also be according to pre- If verification rule to the first Transaction Information carry out legitimacy verifies, follow-up digital signature procedure is performed after verifying successfully again, Further to lift security.

Do not limited into during transaction code with the first obtained digital signature based on the first Transaction Information received in the step In generation Quick Response Code, it can also generate the code information that other are used to be paid, but these modes and the side of generation Quick Response Code Formula substantial equivalence, therefore fall within protection scope of the present invention.

S403：Obtained transaction Quick Response Code is carried out to be displayed for the scanning of transaction code end of scan, specifically can be by handing over The display module of easy code generation terminal is shown to transaction Quick Response Code.

The first security module in the present embodiment can be to be built in the first safety chip that transaction code generates terminal inner, Or to support the first Subscriber Identity Module of short-range communication or supporting the first storage card of short-range communication.First security module Can be to be placed on outside transaction code generation terminal and support to generate the financial security smart card that terminal is communicated with transaction code, or To be arranged at the first safety chip generated with the transaction code in the wearable device that terminal is matched, supporting short-range communication First Subscriber Identity Module or the first storage card.Financial security smart card refers to work independently and carried out with transaction code generation terminal There is finance and safety chip to realize the safety managements such as digital signature for the various financial smart cards of communication, its inside.The present embodiment In wearable device can be the various wearable devices such as intelligent watch, intelligent ring, Intelligent bracelet, intelligent necklace, can lead to Cross inside it and the first safety chip is set, supports the first Subscriber Identity Module or the first storage card of short-range communication to realize safety Management.

As shown in upper analysis, transaction code generates terminal can be as payer terminal, now in some usage scenarios The transaction Quick Response Code of first security module generation can carry dealing money to pay Quick Response Code, inside it, can not also carry and It is configured by beneficiary terminal；Transaction code generates terminal can also be as beneficiary terminal, now in some usage scenarios The transaction Quick Response Code of first security module generation is gathering Quick Response Code, and dealing money can be similarly carried inside it, can not also be taken Band and be configured by payer terminal.

Transaction code end of scan in the present embodiment is in this example as Third-party payment corresponding with trusted third party Platform interacts the side for completing finally to merchandise, similarly it should be understood that it can be beneficiary terminal, or pay Money side's terminal, dealing money can also can be set by its setting by the opposing party merchandised.Shown in Figure 5, the present embodiment is carried A kind of method of commerce supplied includes：

S501：The transaction Quick Response Code shown in terminal is generated to transaction code and is scanned acquisition transaction 2 D code information.

S502：Parsing 2 D code information at least obtains the first Transaction Account number and the first digital signature, and first based on acquisition Transaction Account number and the first digital signature obtain the second Transaction Information and issue the second security module of transaction code end of scan.

The second transaction account comprising dealing money and transaction code end of scan in the second Transaction Information that the step is obtained Number, the second security module is the second hardware security module obtained from trusted third party, and its second key that is stored with can also be deposited Store up the account information of transaction code end of scan.

It should be appreciated that when obtaining the second Transaction Information, transaction interface can also be provided and input dealing money for user, The step of certain step is not required to carry out, the setting of the amount of money can also be traded by the opposing party of transaction, specifically may be used Flexibly to be set according to specific transaction scene.

As it appears from the above, in a kind of example, dealing money is included in the first Transaction Information, now parse 2 D code information and obtain Dealing money is taken, and obtains the second Transaction Account number of transaction code end of scan, according to the dealing money of acquisition, the first transaction The second Transaction Information that account, the first digital signature and the second Transaction Account number are obtained；

In a kind of example, dealing money can not be included in the first Transaction Information, is now obtained from transaction code end of scan Take dealing money and the second Transaction Account number, according to the dealing money of acquisition, the first Transaction Account number, the first digital signature and Second Transaction Account number obtains the second Transaction Information.

S503：Second security module generates transaction request according to the second Transaction Information, using the second key to transaction request It is digitally signed and obtains the second digital signature.

The second security module, can also be according to default school before being digitally signed to transaction request in the present embodiment Test rule and legitimacy verifies are carried out to the second Transaction Information, perform follow-up digital signature procedure after verifying successfully again.

The second security module in the present embodiment can be to be built in the second safe core inside transaction code end of scan 2 Piece, or to support the second user identification card of short-range communication or supporting the second storage card of short-range communication.Second safe mould Block can also be to be placed on outside transaction code end of scan and support the financial security intelligence communicated with transaction code end of scan Card, or be the second safety chip being arranged in the wearable device matched with the transaction code end of scan, support closely The second user identification card or the second storage card of communication.Financial security smart card refers to work independently and scanned eventually with transaction code The various financial smart cards communicated are held, there is finance and safety chip to realize the safety managements such as digital signature for its inside.

S504：Obtained the second digital signature and transaction request are issued into the Third-party payment platform to carry out payment to recognize Card.

Third-party payment platform is received after the transaction request and the second digital signature of the transmission of transaction code end of scan, first Using the transaction code end of scan side digital signature of public key verifications second corresponding with the second key, if after correct, reusing transaction The code generation terminal side digital signature of public key verifications first corresponding with first key, if checking is also correct, according to transaction request In dealing money and the accounts information of both sides complete follow-up flow of withholing.Third-party payment platform complete withhold before, Can also client be notified to be confirmed, user is carried out after confirmation operation on the client terminal, Third-party payment platform is just performed Remit money, and payment result is notified at least one party in both sides.

Fourth embodiment

The present embodiment is with the first security module and the second security module all for bluetooth SIM (Subscriber Identification Module client identification modules) card illustrated for example.

It is used as a kind of embodiment of mobile-payment system, it is assumed that the contractor and label in same payment platform occur for transaction About between card user, collected money using merchant tenninal barcode scanning, and the typing dealing money in merchant tenninal, embodiments thereof is as follows：

1st, operation client terminal APP (the first payment management module), the payment for pointing out customer selecting bluetooth SIM card to be supported The transaction data such as card account (can need not select payment account number when using default payment account) obtain the first Transaction Information, then First Transaction Information is sent to by bluetooth SIM card by bluetooth connection, bluetooth SIM card is using client private key to described first Transaction Information is digitally signed, and is generated secure payment Quick Response Code based on first Transaction Information and its digital signature and is returned To APP, then APP using Quick Response Code I/O modules and shows the secure payment Quick Response Code by terminal screen.

2nd, operation merchant tenninal APP (the second payment management module), the information such as typing dealing money uses merchant tenninal two Dimension code I/O modules scan the secure payment Quick Response Code that shows on client terminal by camera, parsing obtain payment account number and its The paying party information such as digital signature, then APP payment account number and its digital signature, dealing money etc. will be included by bluetooth connection The second Transaction Information be sent to bluetooth SIM card；Bluetooth SIM card generates transaction request according to the second Transaction Information, uses trade company Private key is digitally signed to the transaction request, and the transaction request and its digital signature are returned into APP, then APP The transaction request and its digital signature are sent to by Third-party payment platform by communication module.

3rd, Third-party payment platform is received after the transaction request and its digital signature of merchant tenninal submission, first by the label The about public key verifications trade company digital signature of trade company, if after correct, reusing institute in the public key verifications transaction request of signing card user Whether the consumer digital signature of carrying is correct, if after both verifying correctly, being completed subsequently to withhold according to transaction request.

Further, payment platform informs about client and confirmed, user is in client mobile phone before completing to withhold After upper progress confirmation operation, payment platform is performed and remitted money, and payment result is notified into client terminal and/or merchant tenninal.

As another embodiment of the mobile-payment system, also assume that the signing business in same payment platform occurs for transaction Between family and signing card user, but paid the bill using client terminal barcode scanning, and the typing dealing money in merchant tenninal.Its embodiment party Formula is as follows：

1st, operation merchant tenninal APP (the first payment management module), the information such as typing dealing money, and pass through bluetooth connection The first Transaction Information comprising information such as the dealing money, shroff account numbers is sent to bluetooth SIM card (when using merchant tenninal Shroff account number, which can need not be sent, during acquiescence shroff account number gives bluetooth SIM card), bluetooth SIM card is using trade company's private key to including gathering First Transaction Information of the information such as account, dealing money is digitally signed, based on first Transaction Information and its numeral label Name generation secure payment Quick Response Code simultaneously returns to APP, then shows the safety by terminal screen using Quick Response Code I/O modules Pay Quick Response Code.

2nd, operation client terminal APP (second pair of management module), camera is passed through using client terminal Quick Response Code I/O modules The secure payment Quick Response Code shown on scanning trade company mobile phone, parsing obtains the letter such as shroff account number, dealing money and its digital signature Breath, then the Transaction Information of shroff account number, dealing money and its digital signature etc. second is sent to bluetooth by APP by bluetooth connection SIM card, bluetooth SIM card generates transaction request according to the second Transaction Information, and the transaction request at least includes shroff account number, transaction The information such as the amount of money and its digital signature, payment account number, bluetooth SIM card carries out digital label to the transaction request using client private key Name, and returns to APP by the transaction request and its digital signature, then using communication module by the transaction request and its number Word signature is sent to the 3rd payment platform.

3rd, the 3rd payment platform is received after the transaction request and its digital signature of client terminal submission, first by the signing The public key verifications consumer digital signature of card user, if after correct, reusing entrained in the public key verifications transaction request of trade company Whether trade company's digital signature is correct, after both verifying correctly, is completed subsequently to withhold according to transaction request.

Further, payment platform can notify client to be confirmed, user is in client mobile phone before completing to withhold After upper progress confirmation operation, payment platform is performed and remitted money, and payment result is notified into client mobile phone and/or trade company's end mobile phone.

In above example, the public key digital certificate of signer can be also accompanied with behind digital signature, with digital signature one Transmission is played, so that either party verifies the correctness of signature, the public key digital certificate using the signer public key in certificate Generally by trusted third party, CA is signed.

It is understood that in above implementation process, either using trade company's end barcode scanning gathering mode or client Barcode scanning payment method, can on client terminal typing dealing money.

It is understood that being further the first transaction for improving signature safety, being signed in above implementation process Can also be generated in information comprising Quick Response Code can also wrap in time and/or the first random number, the second Transaction Information being signed Time and/or the second random number are generated containing transaction request.

Further, no matter more than which kind of situation, merchant tenninal and client terminal can be belonging respectively to different third parties The contractor of payment platform and signing card user, now merchant tenninal or client terminal need to only sign transaction request and its numeral The payment platform that name is submitted to oneself signing goes to complete subsequently to remit money.

5th embodiment：

In the present embodiment, security module only can be set in transaction code generation terminal, only can also be scanned in transaction code Terminal sets security module, and the digital signature when being traded only to a side carries out safety certification, and this processing mode is relative Existing nil signature authentication mode, also can largely lift the security of transaction.Separately below with only in payer Terminal sets security module and only sets security module to be illustrated for example in beneficiary terminal.

Only when transaction code end of scan sets security module, transaction code generation terminal now can be directly using existing Various transaction codes generation terminal, it is got after the first Transaction Information, can directly according to the first Transaction Information generation transaction Quick Response Code is simultaneously exported, and the first Transaction Information at least includes the first Transaction Account number that transaction code generates terminal.Transaction code now End of scan is similar with the transaction code end of scan shown in the various embodiments described above, and shown in Figure 6, it includes：

Including the 3rd trade management module 61, the 3rd security module 62, Response Code scan module 63 and communication module 64； 3rd security module 62 is the 3rd hardware security module obtained from trusted third party, its 3rd key that is stored with；

Response Code scan module 63 is used to be scanned the transaction Quick Response Code shown in transaction code generation terminal, and will sweep The 2 D code information for retouching acquisition issues the 3rd trade management module, and digital signature information is not included in the transaction Quick Response Code, Also it is common transaction Quick Response Code；

3rd trade management module 61 at least obtains the first Transaction Account number and the first numeral label for parsing 2 D code information Name, the first Transaction Account number and the first digital signature based on acquisition are obtained in the 3rd Transaction Information, the 3rd Transaction Information comprising friendship 3rd Transaction Account number of the easy amount of money and transaction code end of scan；And for receiving the of the 3rd security module 62 feedback After three digital signature and transaction request, the 3rd digital signature and transaction request are issued the credible 3rd by the communication module The corresponding Third-party payment platform in side is to carry out payment authentication；

3rd security module is used to generate transaction request according to the 3rd Transaction Information, please to the transaction using the 3rd key Ask to be digitally signed and obtain the 3rd digital signature, and the 3rd digital signature and transaction request are issued into the 3rd trade management mould Block.

Third-party payment platform now is received after the 3rd digital signature and transaction request, is scanned eventually first by transaction code End side's digital signature of public key verifications the 3rd corresponding with the 3rd peace key, if after correct, the trade gold in transaction request Volume and the accounts information of both sides complete follow-up flow of withholing.

Only when transaction code generation terminal sets security module, transaction code generation terminal now and the various embodiments described above institute The terminal shown is similar, will not be repeated here, and transaction code end of scan now is shown in Figure 7, including the 4th trade management mould Block 71, Response Code scan module 72 and communication module 73；

Response Code scan module 72 is used to be scanned the transaction Quick Response Code shown in transaction code generation terminal, and will sweep The 2 D code information for retouching acquisition issues the 4th trade management module 71；

4th trade management module 71 at least obtains the first Transaction Account number and the first number for parsing the 2 D code information Word is signed, the first Transaction Account number and the first digital signature generation transaction request based on acquisition, and the transaction request is passed through into institute State communication module 73 and issue the corresponding Third-party payment platform of trusted third party to carry out payment authentication, the transaction request includes First Transaction Account number, the first digital signature, the 4th Transaction Account number of dealing money and transaction code end of scan.

Third-party payment platform is received after the transaction request of transaction code end of scan transmission, and terminal is generated using transaction code Side's digital signature of public key verifications first corresponding with first key, if checking is correct, the dealing money in transaction request Follow-up flow of withholing is completed with the accounts information of both sides.Third-party payment platform can also notify client before completing to withhold End is confirmed that user is carried out after confirmation operation on the client terminal, and Third-party payment platform is just performed and remitted money, and will be paid As a result at least one party in both sides is notified.

The present embodiment carries out numeral in the safety chip that at least one party of both parties is provided using Third-party payment platform Signature so that Quick Response Code, which is paid, is provided simultaneously with the convenience that the security and moving 2 D code of POS payments are paid, and reduces as far as possible The risk and potential safety hazard of process of exchange, lift the satisfaction of Consumer's Experience.

Sixth embodiment：

It should be appreciated that in actual applications, only can then set security module in payer terminal, can also only exist Beneficiary terminal sets security module, and the digital signature when being traded only to a side carries out safety certification, this processing side The relatively existing nil signature authentication mode of formula, also can largely lift the security of transaction.Separately below only to exist Payer terminal sets security module and only sets security module to be illustrated for example in beneficiary terminal.

In the present embodiment, illustrated by payer terminal generation transaction Quick Response Code for example, it should be appreciated that The process for generating transaction Quick Response Code by beneficiary terminal is similar with the process that Quick Response Code of merchandising is generated by payer terminal, This is repeated no more.

In a kind of example, and security module, transaction two-dimensional code generation method now, bag only are set in payer terminal Include：

The first Transaction Information is obtained, and the first Transaction Information of acquisition is issued into transaction code generation terminal (payer terminal) The first security module.The first Transaction Information at least includes the first Transaction Account number that transaction code generates terminal, first in the step Security module is the first hardware security module obtained from trusted third party, its first key that is stored with；It can also store transaction The corresponding Transaction Account number information of user of code generation terminal.It should be appreciated that when obtaining the first Transaction Information, can also provide Transaction interface inputs dealing money for user, and the first Transaction Information now obtained can then include dealing money；Certain step The step of being not required to carry out, can also be traded the setting of the amount of money by the opposing party of transaction, specifically can be according to specific Transaction scene flexibly set.

First security module is digitally signed to the first Transaction Information using first key and obtains the first digital signature, and Based on the first Transaction Information and the first digital signature generation transaction Quick Response Code.It should be appreciated that to first in the present embodiment Before Transaction Information is digitally signed, legitimacy school can also be carried out to the first Transaction Information according to default verification rule Test, perform follow-up digital signature procedure after verifying successfully again, further to lift security.Based on receiving in the step First Transaction Information with the first obtained digital signature into transaction code when be not limited to generate Quick Response Code, it can also generate other For the code information paid, but these modes are with generating the mode substantial equivalence of Quick Response Code, therefore fall within the present invention's Protection domain.

Obtained transaction Quick Response Code is carried out to be displayed for the scanning of transaction code end of scan, can specifically be given birth to by transaction code Display module into terminal is shown to transaction Quick Response Code.The first security module in the present embodiment can be to be built in transaction First safety chip of code generation terminal inner, or to support the first Subscriber Identity Module of short-range communication or supporting closely to lead to First storage card of letter.First security module can also be to be placed on outside transaction code generation terminal and support to generate eventually with transaction code The financial security smart card communicated is held, or to be arranged in the wearable device that terminal pairing is generated with the transaction code First safety chip, the first Subscriber Identity Module or the first storage card for supporting short-range communication.Financial security smart card refers to energy Work independently and generate the various financial smart cards that terminal is communicated with transaction code, it is internal real with finance and safety chip The safety managements such as existing digital signature.Wearable device in the present embodiment can be intelligent watch, intelligent ring, Intelligent bracelet, The various wearable devices such as intelligent necklace, can be by setting the first safety chip, supporting the first of short-range communication inside it Subscriber Identity Module or the first storage card realize safety management.

Transaction code end of scan in this example is flat as Third-party payment corresponding with trusted third party in this example Platform interacts the side for completing finally to merchandise, and now it is beneficiary terminal, and it realizes that the process of gathering is as follows：

The transaction Quick Response Code shown in terminal is generated to transaction code and is scanned acquisition transaction 2 D code information.

Parsing 2 D code information at least obtains the first Transaction Account number and the first digital signature, the first transaction account based on acquisition Number and the first digital signature obtain the second Transaction Information.It should be appreciated that when obtaining the second Transaction Information, friendship can also be provided Easy interface for users input dealing money, the step of certain step is not required to carry out can also be by the opposing party of transaction The setting of the amount of money is traded, specifically can flexibly be set according to specific transaction scene.

As it appears from the above, in a kind of example, dealing money is included in the first Transaction Information, now parse 2 D code information and obtain Dealing money is taken, and obtains the 4th Transaction Account number of transaction code end of scan, according to the dealing money of acquisition, the first transaction The second Transaction Information that account, the first digital signature and the 4th Transaction Account number are obtained；In a kind of example, in the first Transaction Information Dealing money can not included, now dealing money and the 4th Transaction Account number are obtained from transaction code end of scan, according to acquisition The dealing money, the first Transaction Account number, the first digital signature and the 4th Transaction Account number obtain the second Transaction Information.

Issue the Third-party payment platform to carry out payment authentication according to the second Transaction Information generation transaction request.

In another example of the present embodiment, and security module, transaction Quick Response Code now only are set in beneficiary terminal Generation method, including：

The first Transaction Information is obtained, according to the first Transaction Information generation transaction Quick Response Code.First Transaction Information in the step At least include the first Transaction Account number that transaction code generates terminal.It should be appreciated that when obtaining the first Transaction Information, can also carry Dealing money is inputted for user for transaction interface, the first Transaction Information now obtained can then include dealing money；Certain step The step of rapid not necessary progress, the setting of the amount of money can also be traded by the opposing party of transaction, specifically can be according to tool The transaction scene of body is flexibly set.

Obtained transaction Quick Response Code is carried out to be displayed for the scanning of transaction code end of scan, can specifically be given birth to by transaction code Display module into terminal is shown to transaction Quick Response Code.

Transaction code end of scan in this example is flat as Third-party payment corresponding with trusted third party in this example Platform interacts the side for completing finally to merchandise, and now it is beneficiary terminal, and its memory setting has the 3rd security module, its Realize that the process of gathering is as follows：

Parsing 2 D code information at least obtains the first Transaction Account number, and the first Transaction Account number based on acquisition obtains the 3rd and merchandised Information.It should be appreciated that when obtaining three Transaction Informations, transaction interface can also be provided and input dealing money for user, when The step of right step is not required to carry out, can also be traded the setting of the amount of money by the opposing party of transaction, specifically can be with Flexibly set according to specific transaction scene.

As it appears from the above, in a kind of example, dealing money is included in the first Transaction Information, now parse 2 D code information and obtain Dealing money is taken, and obtains the 3rd Transaction Account number of transaction code end of scan, according to the dealing money of acquisition, the first transaction The 3rd Transaction Information that account, the first digital signature and the 3rd Transaction Account number are obtained；In a kind of example, in the first Transaction Information Dealing money can not included, now dealing money and the 3rd Transaction Account number are obtained from transaction code end of scan, according to acquisition The dealing money, the first Transaction Account number, the first digital signature and the 3rd Transaction Account number obtain the 3rd Transaction Information.

3rd Transaction Information is issued into the 3rd security module；

3rd security module generates transaction request according to the 3rd Transaction Information, and transaction request is carried out using the 3rd peace key Digital signature obtains the 3rd digital signature.The 3rd security module is to transaction request before being digitally signed in the present embodiment, Legitimacy verifies can also be carried out to the 3rd Transaction Information according to default verification rule, perform follow-up number after verifying successfully again Word signature process.The 3rd security module in the present embodiment can be to be built in the second safe core inside transaction code end of scan Piece, or to support the second user identification card of short-range communication or supporting the second storage card of short-range communication.3rd safe mould Block can also be to be placed on outside transaction code end of scan and support the financial security intelligence communicated with transaction code end of scan Card, or be the second safety chip being arranged in the wearable device matched with the transaction code end of scan, support closely The second user identification card or the second storage card of communication.Financial security smart card refers to work independently and scanned eventually with transaction code The various financial smart cards communicated are held, there is finance and safety chip to realize the safety managements such as digital signature for its inside.

Obtained the 3rd digital signature and transaction request are issued the Third-party payment platform to carry out payment authentication.

Third-party payment platform is received after the transaction request and the 3rd digital signature of the transmission of transaction code end of scan, first Using the transaction code end of scan side digital signature of public key verifications the 3rd corresponding with the 3rd peace key, if after correct, according to friendship The accounts information of dealing money and both sides easily in request completes follow-up flow of withholing.

Above content is to combine specific embodiment further description made for the present invention, it is impossible to assert this hair Bright specific implementation is confined to these explanations.For general technical staff of the technical field of the invention, do not taking off On the premise of from present inventive concept, some simple deduction or replace can also be made, the protection of the present invention should be all considered as belonging to Scope.

Claims

1. a kind of transaction code generates terminal, it is characterised in that including the first trade management module, the first security module and two dimension Code output module, first security module is the first hardware security module obtained from trusted third party, and it is stored with first Key；

First payment management module is used to obtain the first Transaction Information, and the first Transaction Information of acquisition is issued into described the One security module, and for receiving the transaction Quick Response Code of the first security module feedback and issuing the Quick Response Code output mould Block, first Transaction Information at least includes the first Transaction Account number that transaction code generates terminal；

First security module, which is used to be digitally signed first Transaction Information using the first key, obtains the One digital signature, and based on first Transaction Information and first digital signature generation transaction Quick Response Code；

2. transaction code as claimed in claim 1 generates terminal, it is characterised in that first security module is described to be built in Transaction code generates the first safety chip of terminal inner, or to support the first Subscriber Identity Module of short-range communication or supporting low coverage From the first storage card of communication；

Or,

The transaction code generation terminal is outer and support is entered with transaction code generation terminal to be placed on for first security module The financial security smart card of row communication, or to be arranged at first in the wearable device with transaction code generation terminal pairing Safety chip, the first Subscriber Identity Module or the first storage card for supporting short-range communication.

3. transaction code as claimed in claim 1 or 2 generates terminal, it is characterised in that the transaction code generation terminal is payment Square terminal, transaction Quick Response Code is payment Quick Response Code；

Or,

4. a kind of transaction code end of scan, it is characterised in that including the second trade management module, the second security module, Quick Response Code Scan module and communication module, second security module are the second hardware security module obtained from trusted third party, its Be stored with the second key；

The Response Code scan module is used to be scanned the transaction Quick Response Code shown in transaction code generation terminal, and will scanning The 2 D code information of acquisition issues second trade management module；

Second trade management module at least obtains the first Transaction Account number and the first numeral for parsing the 2 D code information Signature, the first Transaction Account number and the first digital signature based on acquisition are obtained in the second Transaction Information, second Transaction Information The second Transaction Account number comprising dealing money and transaction code end of scan；And for receiving second security module After the second digital signature and transaction request of feedback, second digital signature and the transaction request are passed through into the communication mould Block issues the corresponding Third-party payment platform of the trusted third party to carry out payment authentication；

Second security module is used to generate transaction request according to second Transaction Information, using second key to institute State transaction request and be digitally signed and obtain the second digital signature, and second digital signature and the transaction request are issued Second trade management module.

5. transaction code end of scan as claimed in claim 4, it is characterised in that second security module is described to be built in The second safety chip inside transaction code end of scan, or to support the second user identification card of short-range communication or supporting low coverage From the second storage card of communication；

Or,

The transaction code end of scan is outer and support is entered with the transaction code end of scan to be placed on for second security module The financial security smart card of row communication, or to be arranged at second in the wearable device with transaction code end of scan pairing Safety chip, the second user identification card or the second storage card for supporting short-range communication.

6. the transaction code end of scan as described in claim 4 or 5, it is characterised in that second trade management module is also used Dealing money is obtained in parsing the 2 D code information, and obtains the second Transaction Account number of transaction code end of scan, according to acquisition The dealing money, the first Transaction Account number, the first digital signature and the second Transaction Account number obtain the second Transaction Information；

Or,

Second trade management module is used to obtain dealing money and the second Transaction Account number from transaction code end of scan, according to The dealing money, the first Transaction Account number, the first digital signature and the second Transaction Account number obtained obtains the second Transaction Information.

7. a kind of transaction code end of scan, it is characterised in that including the 3rd trade management module, the 3rd security module, Quick Response Code Scan module and communication module；3rd security module is the 3rd hardware security module obtained from trusted third party, its Be stored with the 3rd key；

The Response Code scan module is used to be scanned the transaction Quick Response Code shown in transaction code generation terminal, and will scanning The 2 D code information of acquisition, which is issued, does not include digital signature information in the 3rd trade management module, the transaction Quick Response Code；

3rd trade management module at least obtains the first Transaction Account number and the first numeral for parsing the 2 D code information Signature, the first Transaction Account number and the first digital signature based on acquisition are obtained in the 3rd Transaction Information, the 3rd Transaction Information The 3rd Transaction Account number comprising dealing money and transaction code end of scan；And for receiving the 3rd security module After the 3rd digital signature and transaction request of feedback, the 3rd digital signature and the transaction request are passed through into the communication mould Block issues the corresponding Third-party payment platform of the trusted third party to carry out payment authentication；

3rd security module is used to generate transaction request according to the 3rd Transaction Information, using the 3rd key to institute State transaction request and be digitally signed and obtain the 3rd digital signature, and the 3rd digital signature and the transaction request are issued 3rd trade management module.

8. a kind of transaction code end of scan, it is characterised in that including the 4th trade management module, Response Code scan module and logical Believe module；

The Response Code scan module is used to be scanned the transaction Quick Response Code shown in transaction code generation terminal, and will scanning The 2 D code information of acquisition issues the 4th trade management module；

4th trade management module at least obtains the first Transaction Account number and the first numeral for parsing the 2 D code information Signature, the first Transaction Account number and the first digital signature generation transaction request based on acquisition, the transaction request is passed through described Communication module issues the corresponding Third-party payment platform of trusted third party to carry out payment authentication, and the transaction request includes described First Transaction Account number, the first digital signature, the 4th Transaction Account number of dealing money and transaction code end of scan.

9. one kind transaction code generating method, it is characterised in that including：

The first Transaction Information is obtained, and the first Transaction Information of acquisition is issued into the first security module that transaction code generates terminal, First Transaction Information at least includes the first Transaction Account number that transaction code generates terminal, and first security module is from credible The first hardware security module that third party obtains, its first key that is stored with；

First security module is digitally signed to first Transaction Information using the first key and obtains the first number Word is signed, and based on first Transaction Information and first digital signature generation transaction Quick Response Code；

10. code generating method of merchandising as claimed in claim 9, it is characterised in that first security module is is built in The first safety chip that transaction code generates terminal inner is stated, or to support the first Subscriber Identity Module of short-range communication or supporting near First storage card of distance communication；

Or,

11. a kind of method of commerce, it is characterised in that including：

Parse the 2 D code information and at least obtain the first Transaction Account number and the first digital signature, the first transaction account based on acquisition Number and the first digital signature obtain the second Transaction Information and issue the second security module of transaction code end of scan, it is described second hand over The second Transaction Account number comprising dealing money and transaction code end of scan in easy information, second security module is from credible The second hardware security module that third party obtains, its second key that is stored with；

Second security module generates transaction request according to second Transaction Information, is handed over using second key described Easily request, which is digitally signed, obtains the second digital signature；

By second digital signature and the transaction request issue the corresponding Third-party payment platform of the trusted third party with Carry out payment authentication.

12. method of commerce as claimed in claim 11, it is characterised in that second security module is to be built in the transaction The second safety chip inside code end of scan, or to support the second user identification card of short-range communication or supporting closely to lead to Second storage card of letter；

Or,