CN116681436A

CN116681436A - Payment method, device, electronic equipment and medium

Info

Publication number: CN116681436A
Application number: CN202310651458.2A
Authority: CN
Inventors: 王文耀; 罗伟; 刘强; 徐玙萌
Original assignee: Industrial and Commercial Bank of China Ltd ICBC
Current assignee: Industrial and Commercial Bank of China Ltd ICBC
Priority date: 2023-06-02
Filing date: 2023-06-02
Publication date: 2023-09-01

Abstract

The payment method, the payment device, the electronic equipment and the medium can be applied to the technical field of the Internet of things and the financial field. The method is applied to first client equipment, the first client equipment comprises a main control chip, a display chip, a camera control module, a secure storage chip, a fingerprint identification module and a user identification card control module, and the method comprises the following steps: acquiring fingerprint information of a user; user identification verification is carried out, and transaction information of a payee is obtained based on the camera control module; acquiring payment supplementary information based on the secure storage chip, wherein the secure storage chip encrypts and signs the transaction information of the payee and the payment supplementary information to obtain an encrypted data packet; the user identification card control module sends the encrypted data packet to a mobile operator base station; obtaining a payment result message; outputting the transaction result.

Description

Payment method, device, electronic equipment and medium

Technical Field

The invention relates to the technical field of the internet of things and the financial field, in particular to a payment method, a payment device, electronic equipment and a payment medium.

Background

Mobile payment is a convenient payment method, and has penetrated into various payment scenes in China, including online shopping, offline physical shops, public transportation, parking payment, medical services and the like. Mobile payment allows a user to pay using a smart phone or other mobile device without carrying cash or a bank card, and the user can complete payment anytime and anywhere, saving time and experience. Meanwhile, mobile payment supports various payment modes, including two-dimensional code scanning, near field communication payment, facial recognition payment and the like. In addition, the mobile payment records the detailed information of each transaction, including time, place, amount and the like, so that the user can manage and track conveniently, and great convenience is provided for the user.

However, since the population of China is numerous and the level of cultural education is unbalanced, a large part of population is unfamiliar or mobile intelligent equipment cannot be used, and mobile payment cannot be used; in addition, in view of the current trend of aging becoming more and more serious, some old people have lower acceptance of mobile payment, and old people are also accustomed to using a bankbook, a magnetic stripe card or a composite card for payment, and the payment methods have inconvenience in daily life, and in most cases, small payment cannot be performed. For these people, the existing digital payment methods cannot meet the demands of the people, and the people cannot enjoy the convenience brought by mobile payment.

Further, due to the power consumption problem of the mobile intelligent device, the battery power consumption of the mobile intelligent device may occur during traveling, and mobile payment cannot be used; moreover, the coverage of the base station in the remote area is incomplete, which may cause poor mobile phone 4G signals and prevent mobile payment from being used, thereby affecting the payment experience of the mobile device user.

Therefore, there is a need for a method and apparatus that provides payment convenience for the population, such that payment operations can be easily performed for users who are unfamiliar or who do not use mobile smart devices, without relying on smart phones or applications; and, mobile smart devices that make mobile devices power-up or mobile network signals poor get payment solutions using the population.

Disclosure of Invention

In view of the above problems, according to a first aspect of the present invention, there is provided a payment method applied to a first client device, the first client device including a main control chip, a display chip, a camera control module, a secure storage chip, a fingerprint identification module and a user identification card control module, the method comprising: responding to the verification prompt information output by the display chip, and acquiring fingerprint information of a user; based on the secure memory chip and the fingerprint identification module, carrying out user identification verification on the fingerprint information, and determining whether to continue the transaction according to the result of the user identification verification and the number of attempts; if the decision is made to continue the transaction, acquiring collection information based on the camera control module, and acquiring collection party transaction information based on the collection information; acquiring payment supplementary information based on the secure storage chip, wherein the secure storage chip encrypts and signs the transaction information of the payee and the payment supplementary information to obtain an encrypted data packet; the user identification card control module sends the encrypted data packet to a mobile operator base station, so that the mobile operator base station forwards the encrypted data packet to a server side; the user identification card control module receives a return result of the mobile operator base station to obtain a payment result message, wherein the return result is returned to the mobile operator base station by a server side; and outputting a transaction result by the display chip based on the payment result message.

According to some exemplary embodiments, the main control chip is configured to control the payment information display module, the secure storage chip, the fingerprint identification module, the camera control module, and the user identification card control module to implement corresponding functions.

According to some exemplary embodiments, when the first client device is first used, payment account information of a user is acquired, initial fingerprint information of the user is acquired through the fingerprint identification module, and the payment account information and the initial fingerprint information are written into the secure storage chip through the main control chip.

According to some exemplary embodiments, the first client device further comprises a communication chip, wherein the communication chip is configured to obtain a system working time, and write the system working time into the secure storage chip through the main control chip.

According to some exemplary embodiments, the acquiring the collection information based on the camera control module, and acquiring the transaction information of the collection party based on the collection information specifically include: scanning a checkout code of a payee based on the camera control module; based on the cashing code, the main control chip analyzes user information of a cashing party through a first decoding algorithm to acquire request transaction information; and prompting a user to input an amount operation based on the request transaction information by the display chip so as to acquire the transaction information of the payee.

According to some example embodiments, the payment supplementary information includes: payment account information, system operating time, transaction reference number, and device ID.

According to a second aspect of the present invention, there is provided a payment method applied to a server-side device including a payment pre-service, a security authentication service and a banking core transaction system, the method comprising: obtaining a payment data packet, wherein the payment data packet is obtained by analyzing an encrypted data packet by the payment pre-service, wherein the encrypted data packet is obtained by converting collection information of a collection party and payment supplementary information of a user by a first client device, and forwarding the encrypted data packet to the payment pre-service by a mobile operator base station, and the first client device comprises: the device comprises a main control chip, a display chip, a camera control module, a safe storage chip, a fingerprint identification module and a user identification card control module; based on the payment data packet and the security authentication service, acquiring payment information and returning a verification result; acquiring a pre-processing result based on the verification result and the payment pre-service; based on the pre-processing result and the bank core transaction system, transaction verification and transaction processing operations are implemented, and a transaction result is returned.

According to a third aspect of the present invention, there is provided a payment apparatus for application to a first client device, the apparatus comprising: fingerprint identification module for: responding to the verification prompt information output by the display chip, and acquiring fingerprint information of a user; user identification verification is carried out on the fingerprint information; a secure storage module for: storing initial fingerprint information and payment supplementary information of a user; the main control module is used for: deciding whether to continue the transaction according to the user identification verification result and the try times; the camera control module is used for: if the decision is made to continue the transaction, acquiring collection information; the user identification card control module is used for: sending the encrypted data packet to a mobile operator base station, so that the mobile operator base station forwards the encrypted data packet to a server side through a gateway; the user identification card control module receives a return result of the mobile operator base station to obtain a payment result message, wherein the return result is returned to the mobile operator base station through a server side; the display chip outputs verification prompt information; outputting a transaction result based on the payment result message; the secure storage chip is also used for encrypting and signing the payment account information and the payment supplementary information to obtain an encrypted data packet; the main control chip is also used for acquiring transaction information of a payee based on the payee information; and controlling the payment information display module, the secure memory chip, the fingerprint identification module, the camera control module and the user identification card control module to realize corresponding functions.

According to a fourth aspect of the present invention, there is provided a payment apparatus applied to a server-side device, the apparatus comprising: a payment front-end service module for: obtaining a payment data packet, wherein the payment data packet is obtained by analyzing an encrypted data packet by the payment pre-service, wherein the encrypted data packet is obtained by converting collection information of a collection party and payment supplementary information of a user by a first client device, and forwarding the encrypted data packet to the payment pre-service by a mobile operator base station, and the first client device comprises: the system comprises a main control chip, a display chip, a camera control module, a safe storage chip, a fingerprint identification module and a user identification card control module, wherein based on the transaction information, the front-end payment operation is implemented, and a front-end processing result is obtained; a security verification service module for: acquiring payment information based on the payment data packet and returning a verification result; and a banking core transaction system module for: and based on the pre-processing result, carrying out transaction verification and transaction processing operation, and returning a transaction result.

According to a fifth aspect of the present invention, there is provided an electronic device comprising: one or more processors; and a storage device for storing one or more programs, wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to perform the method as described above.

According to a sixth aspect of the present invention there is provided a computer readable storage medium having stored thereon executable instructions which when executed by a processor cause the processor to perform the method as described above.

According to a seventh aspect of the present invention there is provided a computer program product comprising a computer program which, when executed by a processor, implements a method as described above.

One or more of the above embodiments have the following advantages or benefits: the payment method provided by the invention can provide payment convenience, expand payment range, strengthen payment safety and promote financial inclusion. Specifically, for users unfamiliar with or who cannot use the mobile intelligent device, the payment method provided by the invention can achieve more convenient payment experience, so that the users can easily carry out payment operation without depending on the mobile intelligent device or application program; for the situation that the mobile intelligent equipment signal is limited or the mobile intelligent equipment electric quantity is exhausted in some places or scenes, the payment method provided by the invention can pay through a wireless network, is not limited by regions or signals, and can cover wider payment scenes; furthermore, the payment method provided by the invention comprises a security chip and an encryption process, so that advanced payment security protection can be improved; in addition, the payment method provided by the invention enables users who are unfamiliar or who do not use the mobile intelligent device to participate in digital payment, thereby promoting the development of digital payment and financial inclusion.

Drawings

The foregoing and other objects, features and advantages of the invention will be apparent from the following description of embodiments of the invention with reference to the accompanying drawings, in which:

fig. 1 schematically illustrates an application scenario diagram of a payment method, apparatus, device, medium according to an embodiment of the invention.

Fig. 2 schematically shows a flow chart of a payment method according to an embodiment of the invention.

Fig. 3A schematically shows an external configuration diagram of a first client device according to an embodiment of the present invention.

Fig. 3B schematically shows an internal circuit configuration diagram of the first client device according to an embodiment of the present invention.

Fig. 4 schematically illustrates a flow chart of a method of acquiring payee transaction information according to an embodiment of the invention.

Fig. 5 schematically shows a flow chart of a payment method according to a further embodiment of the invention.

Fig. 6 schematically shows a block diagram of a payment device according to an embodiment of the present invention.

Fig. 7 schematically shows a structural diagram of a payment apparatus according to still another embodiment of the present invention.

Fig. 8 schematically shows a block diagram of an electronic device adapted to implement a payment method according to an embodiment of the invention.

Detailed Description

Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. It should be understood that the description is only illustrative and is not intended to limit the scope of the invention. In the following detailed description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding of the embodiments of the invention. It may be evident, however, that one or more embodiments may be practiced without these specific details. In addition, in the following description, descriptions of well-known structures and techniques are omitted so as not to unnecessarily obscure the present invention.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The terms "comprises," "comprising," and/or the like, as used herein, specify the presence of stated features, steps, operations, and/or components, but do not preclude the presence or addition of one or more other features, steps, operations, or components.

All terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. It should be noted that the terms used herein should be construed to have meanings consistent with the context of the present specification and should not be construed in an idealized or overly formal manner.

Where expressions like at least one of "A, B and C, etc. are used, the expressions should generally be interpreted in accordance with the meaning as commonly understood by those skilled in the art (e.g.," a system having at least one of A, B and C "shall include, but not be limited to, a system having a alone, B alone, C alone, a and B together, a and C together, B and C together, and/or A, B, C together, etc.).

In the technical scheme of the invention, the acquisition, storage, application and the like of the related personal information of the user accord with the regulations of related laws and regulations, necessary security measures are taken, and the public order harmony is not violated.

First, technical terms described herein are explained and illustrated as follows.

OTA: over The Air (OTA). Is a technology for remotely managing SIM card data and applications through an air interface of mobile communication (GSM or CDMA), and WAP, GPRS, CDMA X and short message technology can be adopted for the air interface. The application of OTA technology allows mobile communications to provide not only voice and data services, but also new traffic downloads.

Two-dimensional code: the two-dimensional bar code is a bar code with readability in another dimension which is expanded on the basis of the one-dimensional bar code, binary data is identified by using a black-white rectangular pattern, and information contained in the binary data can be acquired after the binary data is scanned by equipment.

The Internet of things: refers to a network where the internet interconnects and communicates with various items (e.g., sensors, actuators, smart devices, etc.). Through the internet of things, intelligent interaction and information sharing between objects and people can be realized, so that various intelligent devices, sensors, actuators and the like cooperate with each other to form an intelligent system, and more intelligent, efficient and convenient service experience is provided.

With the development of social economy, mobile payment is popular in China, cash usage occasions are gradually reduced, but for a user group who cannot use mobile payment, the user group is relatively limited in payment mode selection, and convenience and additional functions brought by mobile payment cannot be enjoyed; in addition, because the mobile terminal consumes fast electricity or the coverage of the base station in a remote area is incomplete, the mobile phone 4G signal is possibly poor, and a part of people cannot use mobile payment, so that inconvenience is caused.

Based on this, an embodiment of the present invention provides a payment method applied to a first client device, where the first client device includes a main control chip, a display chip, a camera control module, a secure storage chip, a fingerprint identification module, and a user identification card control module, and the method is characterized in that the method includes: responding to the verification prompt information output by the display chip, and acquiring fingerprint information of a user; based on the secure memory chip and the fingerprint identification module, carrying out user identification verification on the fingerprint information, and determining whether to continue the transaction according to the result of the user identification verification and the number of attempts; if the decision is made to continue the transaction, acquiring collection information based on the camera control module, and acquiring collection party transaction information based on the collection information; acquiring payment supplementary information based on the secure storage chip, wherein the secure storage chip encrypts and signs the transaction information of the payee and the payment supplementary information to obtain an encrypted data packet; the user identification card control module sends the encrypted data packet to a mobile operator base station, so that the mobile operator base station forwards the encrypted data packet to a server side; the user identification card control module receives a return result of the mobile operator base station to obtain a payment result message, wherein the return result is returned to the mobile operator base station by a server side; and outputting a transaction result by the display chip based on the payment result message. In the method according to the embodiment of the invention, through the payment method, a simple and visual interface and a payment mode can be provided for users unfamiliar with or not using the smart phone, the users can generate corresponding payment information data packets only by inputting money, and the corresponding payment information data packets are encrypted through the security chip and then sent to the mobile operator base station through the user identification card control module; for the situation that the mobile equipment is out of power or the mobile network signal is bad, the mobile payment system can be used as a supplement to mobile payment so as to solve the problem that the mobile payment system cannot pay.

It should be noted that the payment method, device, equipment and medium determined by the invention can be used in the technical field of the internet of things, can also be used in the financial field, and can also be used in various fields except the technical field of the internet of things and the financial field. The application fields of the payment method, the payment device, the payment equipment and the payment medium provided by the embodiment of the invention are not limited.

The two-dimensional code is used as the collection information in the present invention by way of example only, and is not intended to limit the type of collection information in the present invention. It should be understood that the collection information in the present invention may be other kinds besides two-dimensional codes, for example, one-dimensional bar codes, etc. For convenience of explanation, hereinafter, two-dimensional codes are taken as receipt information as an example

As shown in fig. 1, an application scenario 100 according to this embodiment may include terminal devices 101, 102, networks 103, 104, and servers 105 to 107. The network 103 is a medium used to provide communication links between the terminal devices 101, 102, 103 and the server 105; network 104 is used as a medium to provide communications links between servers 105-107. The networks 103, 104 may include various connection types, such as wired, wireless communication links, or fiber optic cables, among others.

A user may interact with the server 105 using the terminal device 101 through the mobile base station 108 and the network 103 to receive or send messages or the like.

A user may interact with terminal device 102 using terminal device 101, and may communicate and exchange data over a network.

A user may interact with the server 105 via the network 103 using the terminal devices 101, 102 to receive or send messages or the like. Various communication client applications may be installed on the terminal devices 101, 102, such as shopping class applications, web browser applications, search class applications, instant messaging tools, mailbox clients, social platform software, and the like (just examples).

The terminal device 101 may be a first client device according to an embodiment of the present invention, and may also be various electronic devices that have a display screen and support web browsing, including but not limited to smart phones, tablet computers, laptop and desktop computers, and so on.

The terminal device 102 may be various terminal devices having a two-dimensional code presenting function, including but not limited to a mobile smart terminal.

It should be noted that, the terminal device 102 shown in fig. 1 is only schematically, and the manner of presenting the two-dimensional code picture is not limited herein, and those skilled in the art should understand that the two-dimensional code picture may be directly provided instead of the terminal device 102.

The server 105 may be a server providing various services, such as a background management server (by way of example only) providing support for websites browsed by users using the terminal devices 101, 102, 103. The background management server may analyze and process the received data such as the user request, and feed back the processing result (e.g., the web page, information, or data obtained or generated according to the user request) to the terminal device.

It should be noted that, the payment method provided by the embodiment of the present invention may be generally executed by the terminal device 101; accordingly, the payment device provided in the embodiment of the present invention may be generally disposed in the terminal device 101. In addition, the payment method provided by the embodiment of the present invention may be executed by the servers 105 to 107 in general; accordingly, the payment device provided by the embodiments of the present invention may be generally disposed in the servers 105 to 107. The payment method provided by the embodiment of the present invention may also be performed by a server or a server cluster different from the terminal device 101 or the servers 105 to 107 and capable of communicating with the terminal devices 101, 102 and/or the servers 1 to 107. Accordingly, the payment apparatus provided by the embodiments of the present invention may also be provided in a server or server cluster different from the terminal device 101 or the servers 105 to 107 and capable of communicating with the terminal devices 101, 102 and/or the servers 105 to 107.

It should be understood that the number of terminal devices, networks and servers in fig. 1 is merely illustrative. There may be any number of terminal devices, networks, and servers, as desired for implementation.

The payment method provided by the embodiment of the present invention will be described in detail below with reference to the scenario described in fig. 1 through fig. 2 to 5.

In an embodiment of the present invention, the payment method 200 of this embodiment is applied to a first client device.

As shown in fig. 3A, in an embodiment of the present invention, the external structure of the first client device 101 may include a display 1011, a fingerprint recognition module 1012, a virtual keyboard area 1013, a camera 1014, and a power key (not shown in fig. 3A).

According to the embodiment of the invention, the power key is arranged on the side wall of the first client device 101 and can be used for starting and closing the first client device 101 in a long-press or short-press mode; the display screen 1011 is disposed in the front center of the first client device 101, and may be used for displaying prompt information; the fingerprint identification module 1012 is arranged on the display screen 1011 and is positioned in the center of the display screen 1011 for collecting the fingerprint of the client; the virtual keyboard region 1013 is disposed on the display 1011 and below the display 1011 for allowing a user to enter corresponding information.

In the embodiment of the present invention, the internal circuits of the first client device include a main control chip 111, a display chip 112, a power control chip 113, a camera control module 114, a secure memory chip 116, a fingerprint identification module 117, and a user identification card control module 118.

In an embodiment of the present invention, the power control chip 113 controls the first client device to be turned on and off based on the on and off signals of the power key. Specifically, the power button is electrically connected to the power control chip 113, and when the button is pressed, the power button sends an electrical signal to the power control chip 113.

In an embodiment of the present invention, the first client device employs a low power circuit for enabling long-term use of the device.

In the embodiment of the present invention, the main control chip 111 is used for controlling the display chip 112, the camera control module 114, the secure storage chip 116, the fingerprint identification module 117 and the user identification card control module 118 to realize corresponding functions.

In the embodiment of the present invention, the main control chip 111 controls each chip and module to realize respective functions through a communication interface with other chips. The general workflow is given below:

(1) The main control chip 111 transmits a display instruction to the display chip 112, and controls the operation of the display chip 112 through the display control interface, which may include transmitting text or image data to be displayed, and the display chip 112 displays corresponding contents on a display screen according to a designated format and display rules after receiving the instruction. Common display control interfaces include I2C (Inter-Integrated Circuit) and SPI (Serial Peripheral Interface), among others.

(2) The main control chip 111 sends an acquisition instruction to the camera control module 114, and the camera control module 114 starts to acquire image data according to the acquisition instruction sent by the main control chip 111, wherein the image data is a two-dimensional code picture according to the embodiment of the invention; and transmits the image data to the main control chip 111. This is typically achieved through SPI, I2C, etc. interfaces.

(3) Communication between the master chip 111 and the secure memory chip 116 typically involves access to secure keys and encryption and decryption operations. The main control chip 111 may generate a key storage request to the secure storage chip 116 and store or acquire a secure key at the secure storage chip 116. These keys are typically used for security operations such as digital signature or authentication. Common display control interfaces include I2C and SPI, among others, and specific interfaces, such as TPM (Trusted Platform Module).

(4) The main control chip 111 performs fingerprint recognition through a communication interface with the fingerprint recognition module 117. The main control chip 111 may send a fingerprint recognition instruction or request to the fingerprint recognition module 117 and receive fingerprint data from the module. The main control chip 111 can compare or verify fingerprint data, and typically uses an interface such as SPI, I2C, or UART.

(5) The main control chip 111 sends commands to the subscriber identity card control module 118, which typically employ a specific protocol, such as APDU (application protocol data unit) commands defined in the ISO 7816-3 standard, which may include read, write and verify, OTA, etc. After receiving the command, the subscriber identity module control module 118 performs the corresponding operation.

It should be noted that the types listed herein are only exemplary, and are not intended to limit the communication method between the main control chip and other chips in the embodiment of the present invention, that is, the communication method between the main control chip and other chips in the embodiment of the present invention may also include other methods.

Based on the first client device, the payment method 200 of the embodiment of the present invention may include operations S210 to S270, as shown in fig. 2.

In operation S210, fingerprint information of the user is acquired through the fingerprint recognition module 117 in response to the prompt information output from the display chip 112.

In the embodiment of the present invention, when the first client device is first used, it is required to acquire payment account information of the user, acquire initial fingerprint information of the user through the fingerprint identification module 117, and write the payment account information and the initial fingerprint information into the secure storage chip 116 through the main control chip 111.

In the embodiment of the invention, the first client equipment issuer needs to acquire personal information of the client when issuing to the client for the first time, and the user needs to perform some initial settings including prompting the user to input payment account information including bank account numbers, mobile phone numbers and the like, which is helpful for establishing association between the payment account of the user and the first client for payment transaction; further, the method also comprises the step of inputting initial fingerprint information for identity verification in subsequent use. Specifically, the fingerprint of the customer is collected by the fingerprint recognition module 117; the fingerprint information input by the client is converted into a format which can be stored, and is written into the secure memory chip 116 through the main control chip 111.

In the embodiment of the present invention, the first client device further includes a communication chip 115, where the communication chip 115 is configured to obtain the system working time, and write the system working time into the secure storage chip 116 through the main control chip 111. The system operation time is acquired through the communication chip 115 and is also written into the secure memory chip 116 through the main control chip 111.

In an embodiment of the present invention, the communication chip 115 may be a bluetooth communication chip, wherein the bluetooth communication chip needs to establish a bluetooth connection with a target system to obtain a system working time, which generally involves the processes of data transmission protocol, data interaction, data parsing and time conversion. In particular, existing standard protocols (such as GATT) or custom protocols may be chosen to ensure reliable transmission of data; acquiring working time data from the system using appropriate commands or requests, which may involve sending a request instruction to the target system and waiting for the target system to reply or transmit data; after receiving the response of the target system, analyzing the data received by the Bluetooth communication chip according to the communication protocol and the data format, and extracting time information; and converting the working time data into a readable time format according to the received data format and the coding rule.

In the embodiment of the present invention, when the first client device 101 is turned on for a subsequent payment operation, the main control chip 111 may control the prompt information output by the display chip 112, where the prompt information may be information capable of prompting the user to perform a verification operation, such as "please verify a fingerprint" or "please perform identity verification", and identify a verification location according to the location where the fingerprint identification module is located, so as to prompt the user to perform fingerprint identification.

In operation S220, user identification verification is performed on the fingerprint information based on the secure memory chip 116 and the fingerprint identification module 117, and whether to continue the transaction is determined according to the result of the user identification verification and the number of attempts.

In an embodiment of the present invention, the process of performing user identification verification on the fingerprint information may include: the fingerprint recognition module 117 compares the fingerprint sample provided by the user with the fingerprint information stored in the secure memory chip 116, and then returns the verification result to the main control chip 111.

In an embodiment of the present invention, the process of deciding whether to continue the transaction according to the result of the user identification verification and the number of attempts may include: the main control chip 111 records the number of attempts of the user, if the verification fails, the main control chip 111 increases the number counter, and when the number of attempts reaches a certain limit, the main control chip 111 can take corresponding security measures, such as locking the transaction function.

In operation S230, if it is decided to continue the transaction, the receipt information is acquired based on the camera control module 114, and the payee transaction information is acquired based on the receipt information.

In an embodiment of the present invention, the method for acquiring transaction information of a payee includes operations S410 to S430.

In operation S410, a checkout code of a payee is scanned based on the camera control module 114.

In operation S420, the main control chip 111 parses the payee user information through a first decoding algorithm to obtain the requested transaction information based on the payee code.

In the embodiment of the present invention, the main control chip 111 controls the camera control module 114 to scan the collection information, that is, the merchant can present the two-dimensional code information and scan by the camera control module 114. Based on the two-dimensional code information, the main control chip can decode the two-dimensional code information captured through a specific decoding algorithm to identify and extract the information in the two-dimensional code and obtain the request transaction information. Wherein, the request transaction information can comprise merchant identification, commodity information and the like.

In an embodiment of the present invention, the first decoding algorithm may include ZXing, openCV.

In operation S430, the display chip 112 prompts the user to perform an input amount operation based on the requested transaction information to acquire payee transaction information.

In the embodiment of the present invention, based on the requested transaction information, the main control chip 111 controls the display chip 112 to output a prompt word prompting the user to input information, such as "please input transaction amount" or "please input payment amount", so that the user finishes inputting numbers through the virtual keyboard area 1013 and performing operations of inputting amounts, such as confirmation, to acquire the payee transaction information. The payee transaction information may include merchant information, merchandise information, and merchandise amount.

In operation S240, payment supplementary information is acquired based on the secure memory chip, and the secure memory chip encrypts and signs the payee transaction information and the payment supplementary information to obtain an encrypted data packet.

In an embodiment of the invention, the payment supplementary information includes: payment account information, transaction reference number, system operating time, verification code, and device ID. The payment supplemental information contains data related to the security authentication and generates an identification for subsequent processing and tracking of the order.

In embodiments of the invention, encryption and signing are used to ensure confidentiality, integrity and monetary authenticability of data. Specifically, the encryption process may include: the secure memory chip 116 generates a key, which may be a symmetric key or an asymmetric key pair; providing data to be encrypted as input to an encryption algorithm; the secure memory chip 116 encrypts the input data using the generated key and a specific encryption algorithm, symmetric key encryption uses the same key for encryption and decryption, and asymmetric key encryption uses a public key for encryption and a private key for decryption. Specifically, the signing process may include: the secure memory chip 116 generates an asymmetric key pair comprising a public key and a private key; providing data to be signed as input to a signature algorithm; the signature algorithm carries out hash operation on the input data to generate a digest or a hash value of the data; the secure memory chip 116 encrypts the hash value using a private key and a specific signature algorithm to generate a digital signature; the generated digital signature is appended to the data to form signed data.

In operation S250, the subscriber identity card control module 118 transmits the encrypted data packet to the mobile operator base station 108, so that the mobile operator base station 108 forwards the encrypted data packet to a server side.

In an embodiment of the present invention, the subscriber identity card (SIM card) control module 118 may send the encrypted data packet to the mobile operator base station 108 via over-the-air (OTA) technology. In particular, the subscriber identity card control module 118 may establish an OTA communication connection through a communication interface (such as a wireless network or NFC) with the mobile operator base station 108 and may conduct an OTA session negotiation with the mobile operator base station 108 to ensure secure communications, which may involve key exchange and authentication procedures. After authentication, the subscriber identity card control module 118 sends the encapsulated encrypted data packet to the mobile operator base station 108 using the established OTA communication connection.

In operation S260, the subscriber identity module control module 118 receives a return result of the mobile operator base station 108, and obtains a payment result message, where the return result is returned to the mobile operator base station 108 by the server side.

In the embodiment of the invention, the payment result message is a data packet generated by the server side after the payment is completed and used for notifying the payment result. Specifically, the following information may be included: a transaction status, status identification indicating whether payment was successful or unsuccessful, e.g., success, failure, pending, etc.; an order number, a unique order identifier generated by the payment system, for associating the payment result with specific transaction information; a payment amount, indicating the amount actually paid, possibly including a currency type and a specific amount value; transaction time, recording a time stamp or date and time when payment is completed; a payment reference number, a reference number for uniquely identifying the payment transaction, typically generated by the payment system; merchant information: the method comprises the steps of including merchant numbers, merchant names or other merchant related information for identifying merchants to which payment transactions belong; payer information, payment initiator or payer identity information, which may include payer account number, name, cell phone number, etc.; payee information, identity information of the payee or merchant, possibly including a payee account number, merchant name, etc.; additional information, additional payment related information, such as merchandise description, notes, transaction details, etc.; signature or authentication information for verifying the integrity and authenticity of the payment result message.

In operation S270, the display chip 112 outputs a transaction result based on the payment result message.

In an embodiment of the present invention, based on the payment result message, the output of the transaction result by the display chip 112 may be "transaction success" or "transaction failure".

According to the embodiment of the invention, by the payment method, a simple and visual interface and a payment mode can be provided for users unfamiliar with or not using the smart phone, and the users can read the payment account only by verifying fingerprints so as to scan the two-dimension code to finish payment; for the situation that the mobile equipment is out of power or the mobile network signal is bad, the mobile payment system can be used as a supplement to mobile payment so as to solve the problem that the mobile payment system cannot pay.

In the embodiment of the present invention, the payment method 500 of the embodiment is applied to a server-side device, and may include operations S510 to S540.

In operation S510, a payment packet is acquired, wherein the payment packet is obtained by the payment pre-service 105 parsing an encrypted packet, wherein the encrypted packet is obtained by the first client device 101 converting the payment information of the payee and the payment supplementary information of the user, and forwarding the encrypted packet to the payment pre-service 105 by the mobile operator base station 108, the first client device comprising: the device comprises a main control chip, a display chip, a camera control module, a safe storage chip, a fingerprint identification module and a user identification card control module.

In operation S520, payment information is acquired and a verification result is returned based on the payment packet and the security authentication service 107.

In an embodiment of the invention, the secure authentication service 107 may be used to verify the identity of the first client device 101 as well as the user to ensure that only authorized devices and legitimate users can make payment operations, preventing unauthorized access and fraud.

In an embodiment of the present invention, the secure authentication service 107 may provide decryption and secure communication functions as a legitimate recipient. Specifically, the payment preamble service 14 parses the encrypted data packet, acquires the payment data packet, and transmits the payment data packet to the security authentication service 105 through the local area network 104, and the security authentication service 105 verifies the payment data packet and decrypts the acquired payment information.

In operation S530, a pre-processing result is acquired based on the verification result and the payment pre-service 105.

In an embodiment of the present invention, the payment facilitation service 105 is operated as an intermediary by a third party authority or platform prior to conducting the payment transaction, receives the user's legal request, and after verifying that it is legal, transfers funds from the user's account to the merchant's account to provide security for the merchant and consumer.

In operation S540, based on the pre-processing result and the banking core transaction system 106, transaction verification and transaction processing operations are performed, and a transaction result is returned.

In an embodiment of the present invention, the banking core transaction system 106 is configured to process various financial transactions, to verify the legitimacy of the transactions, and to check account balances, update account balances, transaction records, and the like.

The payment method provided by the embodiment of the invention has the following beneficial effects: the payment method can provide a simple and visual interface and operation mode for users unfamiliar with or who cannot use the smart phone, and the users can finish payment by only approaching the payment device to the collection terminal without complex operation and technical requirements; the mobile payment method has wide applicability, can be used as a supplement for mobile payment under the condition of mobile equipment electric quantity exhaustion or bad mobile network signals so as to solve the problem of incapacity of payment, and can be widely applied to various merchants and scenes; the security, because of adopting the security authentication mechanism, the security of payment can be further ensured, so that the payment information and personal data of a user can be effectively protected, and the payment risk and the possibility of fraudulent conduct are reduced; the popularization of the digital payment can promote more users unfamiliar with or not using the smart phone to participate in the digital payment, reduce the dependence on cash transaction and improve the payment convenience and the payment efficiency.

Based on the external structure of the first client device shown in fig. 1 and the internal circuit of the first client device shown in fig. 3, the payment apparatus 600 according to an embodiment of the present invention includes a fingerprint recognition module 610, a security storage module 620, a camera control module 630, a user identification card control module 640, a payment information display module 650, and a main control module 660.

The fingerprint identification module 610 may be configured to obtain fingerprint information of a user in response to the verification prompt information output by the display chip; and carrying out user identification verification on the fingerprint information. In an embodiment, the fingerprint recognition module 610 may be used to perform operations S210 to S220 described above, which are not described herein.

The secure storage module 620 may be used to store initial fingerprint information and payment supplemental information for a user; and encrypting and signing the payment account information and the payment supplementary information to obtain an encrypted data packet. In an embodiment, the secure storage module 620 may be configured to perform operations S220 and S240 described above, which are not described herein.

The camera control module 630 may be used to obtain payment information if it is decided to continue the transaction. In an embodiment, the camera control module 630 may be configured to perform the operation S230 described above, which is not described herein.

The subscriber identity module control module 640 may be configured to send the encrypted data packet to a mobile operator base station, so that the mobile operator base station forwards the encrypted data packet to a server through a gateway; and the user identification card control module receives a return result of the mobile operator base station to obtain a payment result message, wherein the return result is returned to the mobile operator base station through a server side. In an embodiment, the payment information generation module 640 may be configured to perform operations S250 to S260 described above, which are not described herein.

The payment information display module 650 may be configured to output verification prompt information; and outputting a transaction result based on the payment result message. In an embodiment, the payment information display module 650 may be configured to perform the operation S270 described above, which is not described herein.

The main control module 660 may be configured to determine whether to continue the transaction according to the result of the user identification verification and the number of attempts; and acquiring the transaction information of the payee based on the payee information. The main control module is configured to control the fingerprint identification module 610, the secure storage module 620, the camera control module 630, the user identification card control module 640, and the payment information display module 650 to implement corresponding functions. In an embodiment, the main control module 660 may be used to perform operations S220 to S230 described above, which are not described herein. In an embodiment, the main control module 660 may be configured to control the fingerprint identification module 610, the secure storage module 620, the magnetic stripe read-write module 630, the payment information generation module 640 and the payment information display module 650 to perform operations S210 to S270 described above, which are not described herein.

The payment apparatus 700 according to the embodiment of the present invention is applied to a server side, and includes: a payment pre-service module 710, a security verification service module 720, and a banking core transaction system module 730.

The payment pre-service module 710 may be configured to obtain a payment data packet, where the payment data packet is obtained by parsing an encrypted data packet by the payment pre-service, where the encrypted data packet is obtained by a first client device converting payment information of a payee and payment supplementary information of a user, and forwarding the encrypted data packet to the payment pre-service by a mobile operator base station, and the first client device includes: the device comprises a main control chip, a display chip, a camera control module, a safe storage chip, a fingerprint identification module and a user identification card control module. In an embodiment, the payment pre-service module 710 may be configured to perform operations S510 and S530 described above, which are not described herein.

The security verification service module 720 may be configured to obtain payment information based on the payment data packet and return a verification result. In an embodiment, the security verification service module 720 may be configured to perform the operation S520 described above, which is not described herein.

The banking core transaction system module 730 may be configured to perform transaction verification and transaction processing operations based on the pre-processing results, and return transaction results. In an embodiment, the banking core transaction system module 730 may be configured to perform the operation S540 described above, which is not described herein.

As shown in fig. 8, an electronic device 800 according to an embodiment of the present invention includes a processor 801 that can perform various appropriate actions and processes according to a program stored in a Read Only Memory (ROM) 802 or a program loaded from a storage section 808 into a Random Access Memory (RAM) 803. The processor 801 may include, for example, a general purpose microprocessor (e.g., a CPU), an instruction set processor and/or an associated chipset and/or a special purpose microprocessor (e.g., an Application Specific Integrated Circuit (ASIC)), or the like. The processor 801 may also include on-board memory for caching purposes. The processor 801 may comprise a single processing unit or multiple processing units for performing the different actions of the method flows according to embodiments of the invention.

In the RAM 803, various programs and data required for the operation of the electronic device 800 are stored. The processor 801, the ROM 802, and the RAM 803 are connected to each other by a bus 804. The processor 801 performs various operations of the method flow according to the embodiment of the present invention by executing programs in the ROM 802 and/or the RAM 803. Note that the program may be stored in one or more memories other than the ROM 802 and the RAM 803. The processor 801 may also perform various operations of the method flow according to embodiments of the present invention by executing programs stored in the one or more memories.

According to an embodiment of the invention, the electronic device 800 may further comprise an input/output (I/O) interface 805, the input/output (I/O) interface 805 also being connected to the bus 804. The electronic device 800 may also include one or more of the following components connected to the I/O interface 805: an input portion 806 including a keyboard, mouse, etc.; an output portion 807 including a display such as a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), and a speaker; a storage section 808 including a hard disk or the like; and a communication section 809 including a network interface card such as a LAN card, a modem, or the like. The communication section 807 performs communication processing via a network such as the internet. The drive 810 is also connected to the I/O interface 805 as needed. A removable medium 811 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is mounted on the drive 810 as needed so that a computer program read out therefrom is mounted into the storage section 808 as needed.

The present invention also provides a computer-readable storage medium that may be embodied in the apparatus/device/system described in the above embodiments; or may exist alone without being assembled into the apparatus/device/system. The computer-readable storage medium carries one or more programs which, when executed, implement methods in accordance with embodiments of the present invention.

According to embodiments of the present invention, the computer-readable storage medium may be a non-volatile computer-readable storage medium, which may include, for example, but is not limited to: a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. For example, according to embodiments of the invention, the computer-readable storage medium may include ROM 802 and/or RAM 803 and/or one or more memories other than ROM 802 and RAM 803 described above.

Embodiments of the present invention also include a computer program product comprising a computer program containing program code for performing the method shown in the flowcharts. The program code means for causing a computer system to carry out the methods provided by embodiments of the present invention when the computer program product is run on the computer system.

The above-described functions defined in the system/apparatus of the embodiment of the present invention are performed when the computer program is executed by the processor 801. The systems, apparatus, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the invention.

In one embodiment, the computer program may be based on a tangible storage medium such as an optical storage device, a magnetic storage device, or the like. In another embodiment, the computer program may also be transmitted, distributed, and downloaded and installed in the form of a signal on a network medium, and/or from a removable medium 811 via a communication portion 809. The computer program may include program code that may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the foregoing.

In such an embodiment, the computer program may be downloaded and installed from a network via the communication section 809, and/or installed from the removable media 811. The above-described functions defined in the system of the embodiment of the present invention are performed when the computer program is executed by the processor 801. The systems, devices, apparatus, modules, units, etc. described above may be implemented by computer program modules according to embodiments of the invention.

According to embodiments of the present invention, program code for carrying out computer programs provided by embodiments of the present invention may be written in any combination of one or more programming languages, and in particular, such computer programs may be implemented in high-level procedural and/or object-oriented programming languages, and/or in assembly/machine languages. Programming languages include, but are not limited to, such as Java, c++, python, "C" or similar programming languages. The program code may execute entirely on the user's computing device, partly on the user's device, partly on a remote computing device, or entirely on the remote computing device or server. In the case of remote computing devices, the remote computing device may be connected to the user computing device through any kind of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or may be connected to an external computing device (e.g., connected via the Internet using an Internet service provider).

The flowcharts and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams or flowchart illustration, and combinations of blocks in the block diagrams or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.

The embodiments of the present invention are described above. However, these examples are for illustrative purposes only and are not intended to limit the scope of the present invention. Although the embodiments are described above separately, this does not mean that the measures in the embodiments cannot be used advantageously in combination. Various alternatives and modifications can be made by those skilled in the art without departing from the scope of the invention, and such alternatives and modifications are intended to fall within the scope of the invention.

Claims

1. The payment method is applied to first client equipment, wherein the first client equipment comprises a main control chip, a display chip, a camera control module, a secure storage chip, a fingerprint identification module and a user identification card control module, and is characterized by comprising the following steps:

responding to the verification prompt information output by the display chip, and acquiring fingerprint information of a user through a fingerprint identification module;

based on the secure memory chip and the fingerprint identification module, carrying out user identification verification on the fingerprint information, and determining whether to continue the transaction according to the result of the user identification verification and the number of attempts;

if the decision is made to continue the transaction, acquiring collection information based on the camera control module, and acquiring collection party transaction information based on the collection information;

Acquiring payment supplementary information based on the secure storage chip, wherein the secure storage chip encrypts and signs the transaction information of the payee and the payment supplementary information to obtain an encrypted data packet;

the user identification card control module sends the encrypted data packet to a mobile operator base station, so that the mobile operator base station forwards the encrypted data packet to a server side;

the user identification card control module receives a return result of the mobile operator base station to obtain a payment result message, wherein the return result is returned to the mobile operator base station by a server side; and

and outputting a transaction result by the display chip based on the payment result message.

2. The method of claim 1, wherein the main control chip is configured to control the payment information display module, the secure storage chip, the fingerprint identification module, the camera control module, and the user identification card control module to implement corresponding functions.

3. The method according to claim 1 or 2, wherein when the first client device is first used, payment account information of a user is acquired, initial fingerprint information of the user is acquired through the fingerprint identification module, and the payment account information and the initial fingerprint information are written into the secure memory chip through the main control chip.

4. The method of claim 3, wherein the first client device further comprises a communication chip for acquiring a system operating time and writing to the secure memory chip via the master control chip.

5. The method according to claim 2, wherein the acquiring the collection information based on the camera control module and the collection party transaction information based on the collection information specifically comprise:

scanning a checkout code of a payee based on the camera control module;

based on the cashing code, the main control chip analyzes user information of a cashing party through a first decoding algorithm to acquire request transaction information; and

based on the request transaction information, the display chip prompts a user to input an amount operation so as to acquire the transaction information of the payee.

6. The method of claim 1, the payment supplemental information comprising: payment account information, system operating time, transaction reference number, and device ID.

7. A payment method applied to a server-side device, wherein the server-side device comprises a payment front-end service, a security authentication service and a banking core transaction system, and the method comprises the following steps:

Obtaining a payment data packet, wherein the payment data packet is obtained by analyzing an encrypted data packet by the payment pre-service, wherein the encrypted data packet is obtained by converting collection information of a collection party and payment supplementary information of a user by a first client device, and forwarding the encrypted data packet to the payment pre-service by a mobile operator base station, and the first client device comprises: the device comprises a main control chip, a display chip, a camera control module, a safe storage chip, a fingerprint identification module and a user identification card control module;

based on the payment data packet and the security authentication service, acquiring payment information and returning a verification result;

acquiring a pre-processing result based on the verification result and the payment pre-service;

based on the pre-processing result and the bank core transaction system, transaction verification and transaction processing operations are implemented, and a transaction result is returned.

8. A payment apparatus for use with a first client device, the apparatus comprising:

fingerprint identification module for: responding to the verification prompt information output by the display chip, and acquiring fingerprint information of a user; user identification verification is carried out on the fingerprint information;

A secure storage module for: storing initial fingerprint information and payment supplementary information of a user;

the main control module is used for: deciding whether to continue the transaction according to the user identification verification result and the try times;

the camera control module is used for: if the decision is made to continue the transaction, acquiring collection information;

the user identification card control module is used for: sending the encrypted data packet to a mobile operator base station, so that the mobile operator base station forwards the encrypted data packet to a server side through a gateway; the user identification card control module receives a return result of the mobile operator base station to obtain a payment result message, wherein the return result is returned to the mobile operator base station through a server side;

a display chip for: the output verification prompt information; outputting a transaction result based on the payment result message;

the secure storage chip is also used for encrypting and signing the payment account information and the payment supplementary information to obtain an encrypted data packet;

the main control chip is also used for acquiring transaction information of a payee based on the payee information; and controlling the payment information display module, the secure memory chip, the fingerprint identification module, the camera control module and the user identification card control module to realize corresponding functions.

9. A payment device for use with a server-side apparatus, the device comprising:

a payment front-end service module for: obtaining a payment data packet, wherein the payment data packet is obtained by analyzing an encrypted data packet by the payment pre-service, wherein the encrypted data packet is obtained by converting collection information of a collection party and payment supplementary information of a user by a first client device, and forwarding the encrypted data packet to the payment pre-service by a mobile operator base station, and the first client device comprises: the device comprises a main control chip, a display chip, a camera control module, a safe storage chip, a fingerprint identification module and a user identification card control module; based on the verification result, acquiring a pre-processing result;

a security verification service module for: acquiring payment information based on the payment data packet and returning a verification result; and

a bank core transaction system module for: and based on the pre-processing result, carrying out transaction verification and transaction processing operation, and returning a transaction result.

10. An electronic device, comprising:

one or more processors;

storage means for storing one or more programs,

Wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to perform the method of any of claims 1-7.

11. A computer readable storage medium having stored thereon executable instructions which, when executed by a processor, cause the processor to perform the method according to any of claims 1-7.

12. A computer program product comprising a computer program which, when executed by a processor, implements the method according to any one of claims 1 to 7.