TWI786039B - Offline payment method, terminal equipment, backstage payment device and offline payment system - Google Patents

Abstract

The present invention relates to an offline payment method, payment terminal equipment, backstage payment device and offline payment system, wherein the offline payment system includes: acquiring a challenge code, encrypting an account ID, and generating a token; utilizing the token and a transaction password to perform offline payment. In the present invention, the backstage payment device dynamically generates a series of challenge codes in each time transaction. The payment terminal equipment will encrypt the payment account information and the challenge codes into a token to replace the payment account information, and perform the front-stage and backstage transaction transmissions. The token is dynamically generates by the payment terminal equipment. Each time transaction will generate a different token, thus ensuring the safety of the account and transaction. The payment terminal equipment can be offline operated without a network, thus raising the probability of a successful transaction and improving the user experience.

Description

Offline payment method, terminal equipment, background payment device and offline payment system

The present invention relates to the technical field of mobile payment, in particular to an offline payment method, a terminal device, a background payment device and an offline payment system.

With the online and offline use of bank cards becoming more and more frequent, when users complete payment operations through POS, unscrupulous manufacturers steal user card information through skimming and other methods. serious risk issues.

Using transaction identification (Token) technology, by using payment identification instead of account information in transactions, the problem of bank card being skimmed can be avoided. For mobile payment offline transactions, if simply replacing the card number with Token cannot properly solve all problems:

1. If the Token is fixed and the security is not high, then the problem of Token being stolen is also faced.

2. If the Token is generated immediately, the mobile terminal must be connected to the Internet to communicate with the background payment device to generate a Token, so that the payment success rate will be greatly affected by the network environment, and the user experience is not good; and the bank card number, bank card verification The code is transmitted together with the dynamic two-dimensional code, and there is a problem of being stolen, so the security is not high.

The main purpose of the embodiment of the present invention is to propose an offline payment method, terminal equipment, background payment device and offline payment system. In the technical solution of the present invention, the background payment device dynamically generates a string of challenge codes (challenge) every transaction, The payment terminal device encrypts the payment account information and challenge code to form a transaction token (Token), which is used to replace the payment account information for front-end and back-end transaction transmission. Token is dynamically generated by the payment terminal equipment, and each transaction generates a different Token, which ensures the security of accounts and transactions. The payment terminal equipment operates offline without networking, which improves the transaction success rate and user experience.

To achieve the above object, the present invention provides an offline payment method, comprising: obtaining a challenge code; encrypting the challenge code and account ID to generate a transaction identifier; and using the transaction identifier and transaction password to perform offline payment.

In an embodiment of the present invention, the offline payment method further includes: generating an account ID according to bank card account information.

In another embodiment of the present invention, the challenge code is obtained through Bluetooth or NFC communication.

In another embodiment of the present invention, the transaction identifier is obtained through public key PK encryption.

In order to achieve the above object, the present invention provides another offline payment method, comprising: using transaction information to generate a challenge code, and transmitting the challenge code to the client; obtaining a transaction identifier from the client, decrypting the transaction identifier, and obtaining Challenge code, account ID; and offline payment using the challenge code and account ID.

In an embodiment of the present invention, the step of using the challenge code and the account ID for offline payment includes: verifying the challenge code; after passing the verification, using the account ID to obtain transaction bank card account information; and obtaining from the client Transaction password, verify the transaction password, and use the transaction bank card account information for offline payment after verification.

In an embodiment of the present invention, the challenge code and account ID are obtained by decrypting the private key SK.

Correspondingly, in order to achieve the above object, the present invention also provides a terminal device, including: an initialization unit, used to obtain a challenge code; an encryption unit, used to encrypt the challenge code and account ID to generate a transaction identifier; a payment unit, It is used for offline payment using transaction ID and transaction password.

In an embodiment of the present invention, the initialization unit is also used to generate an account ID according to bank card account information.

In an embodiment of the present invention, the initialization unit obtains the challenge code through Bluetooth or NFC communication.

In an embodiment of the present invention, the encryption unit encrypts with the public key PK to obtain the transaction identifier.

Correspondingly, in order to achieve the above object, the present invention also provides a background payment device, including: a challenge code generation unit, used to generate a challenge code using transaction information, and transmit the challenge code to the client; a decryption unit, used to obtain the challenge code from the The client obtains the transaction identifier, decrypts the transaction identifier, and obtains the challenge code and the account ID; and a payment unit, which is used for offline payment using the challenge code and the account ID.

In an embodiment of the present invention, the payment unit includes: a first verification module, used to verify the challenge code; a first payment module, used to use the account ID to obtain transaction bank card account information after passing the verification; The second verification module is used to obtain the transaction password from the client and verify the transaction password; and the second payment module is used to use the transaction bank card account information to perform offline payment after passing the verification.

In an embodiment of the present invention, the decryption unit decrypts through the private key SK to obtain the challenge code and the account ID.

To achieve the above object, the present invention also provides an offline payment system, comprising: the above-mentioned terminal equipment and the above-mentioned background payment device.

The above technical solutions can bring the following beneficial effects:

1. There is no need to provide a bank card for payment, and the bank card account information is not stored in the client to ensure the security of the bank card;

2. Customers do not need to log in to the Internet to conduct payment transactions offline, thus improving user experience;

3. Each transaction uses a different transaction ID to ensure transaction security;

4. The bank card account is only identified by the unique account ID, and is transmitted in the ciphertext. Even if the ciphertext is cracked, the bank card account information cannot be obtained to ensure safety; and

5. By setting a transaction password to ensure transaction security.

The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. It should be noted that the described embodiments are only part of the technical solutions of the present invention, not all of them. plan. The modifications/modifications made by those skilled in the art based on the embodiments of the present invention all belong to the protection scope of the present invention.

The working principle of this technical solution is: the background payment device dynamically generates a series of challenge codes (challenge) every time a transaction is made, and the acceptance terminal transmits it to the terminal device, and the terminal device encrypts the payment account information and challenge code to form a dynamic transaction Identification (Token). The payment logo is dynamically generated for each transaction, without the need for a mobile terminal to be connected to the Internet, which ensures transaction security and improves user experience.

Based on the above working principle, an embodiment of the present invention proposes an offline payment method, as shown in FIG. 1 . Include:

Step 101: Obtain a challenge code, wherein the challenge code is obtained through Bluetooth or NFC communication.

Step 102: Encrypt the challenge code and account ID to generate a transaction token, wherein the transaction token (Token) is obtained through public key PK encryption, and each transaction generates a different transaction token (Token).

Step 103: Use the transaction ID and transaction password to make offline payment.

Based on the above working principle, the embodiment of the present invention proposes another offline payment method, as shown in FIG. 2 . Include:

Step 201: Generate a challenge code using transaction information, and transmit the challenge code to the client;

Step 202: Obtain the transaction ID from the client, decrypt the transaction ID, and obtain the challenge code and account ID;

For step 202, the challenge code and account ID are obtained by decrypting the private key SK.

Step 203: Use the challenge code and account ID to make offline payment.

Wherein, for step 203, it includes: verifying the challenge code; after passing the verification, using the account ID to obtain the transaction bank card account information; and obtaining the transaction password from the client, verifying the transaction password, after passing the verification, Use the transaction bank card account information for offline payment.

Correspondingly, the embodiment of the present invention proposes a terminal device. As shown in FIG. 3, the terminal device 30 includes an initialization unit 301, an encryption unit 302, and a payment unit 303, wherein:

The initialization unit 301 is used to obtain the challenge code. Further, in the registration phase, the initialization unit 301 is also used to generate an account ID according to the bank card account information. In addition, the initialization unit 301 acquires the challenge code through Bluetooth or NFC communication.

The encryption unit 302 is used to encrypt the challenge code and the account ID to generate a transaction identifier, wherein the encryption unit 302 obtains the transaction identifier by encrypting with the public key PK.

The payment unit 303 is used for offline payment using transaction identification and transaction password.

Correspondingly, the embodiment of the present invention also provides a background payment device, as shown in FIG. 4 . The background payment device 40 includes a challenge code generation unit 401, a decryption unit 402, and a payment unit 403, wherein:

The challenge code generating unit 401 is used to generate a challenge code using transaction information, and transmit the challenge code to the client;

The decryption unit 402 is used to obtain the transaction ID from the client, and decrypt the transaction ID to obtain the challenge code and account ID; wherein, the decryption unit 402 decrypts through the private key SK to obtain the challenge code and account ID.

The payment unit 403 is used for offline payment using the challenge code and account ID.

FIG. 5 is a functional block diagram of the payment unit 403 in the background payment device according to an embodiment of the present invention. Including: the first verification module 4031, used to verify the challenge code; the first payment module 4032, used to obtain transaction bank card account information by using the account ID after passing the verification; the second verification module 4033, used to obtain the transaction bank card account information from The client terminal obtains the transaction password, and verifies the transaction password; and the second payment module 4034 is used to use the transaction bank card account information to perform offline payment after passing the verification.

As shown in Figure 6, it is a block diagram of an offline payment system provided by an embodiment of the present invention. Including: the terminal device 30 shown in FIG. 3, and the background payment device 40 shown in FIG. 4.

The technical solutions in the above-mentioned Fig. 1 to Fig. 6 will be described in detail below in conjunction with embodiments.

For this embodiment, the terminal device may be a mobile terminal, such as a mobile smart terminal device such as a mobile phone or an IPad.

In this embodiment, the entire payment process is divided into two parts:

Fig. 7 is a flow chart of mobile terminal installation and registration according to an embodiment of the present invention, including the following steps:

1. Download and install the client program.

2. User registration: Enter information such as mobile phone number, ID card, user login password/gesture, etc., and submit to the background to create a new user.

3. Related transaction bank card: the user associates the bank card account information with the user, and the background payment device generates a unique account ID according to the bank card account information, and sends it back to the client. To ensure security, the client retains the account ID and does not retain the original information of the bank card account. Customers can associate multiple bank cards as needed.

4. Key synchronization: Through an asymmetric algorithm, the server generates the private key SK and the public key PK, keeps the private key SK, and sends the public key PK to the client, and the client retains the public key PK.

5. Set the transaction password: the customer sets the transaction password P according to the needs. The transaction password P can be the same as or different from the bank card transaction password, and the server side reserves the transaction password P for transaction verification.

Fig. 8 is a transaction flow chart according to an embodiment of the present invention. During the payment process, the communication between the mobile terminal and the acceptance terminal can be through various methods, such as Bluetooth, NFC and so on. The mobile terminal can also communicate without being connected to the Internet, but the acceptance terminal and the background payment device need to be connected to the Internet. The process includes:

1. The cashier selects mobile Token payment through the acceptance terminal, and enters the transaction amount;

2. The acceptance terminal submits the transaction information to the background payment device, and the background payment device dynamically generates a series of challenge code C for this transaction and sends it back to the acceptance terminal;

3. The customer opens and logs in the mobile terminal, and selects the transaction bank card;

4. The mobile terminal application obtains the challenge code C from the acceptance terminal, and encrypts the account ID and challenge code C of the current bank card through the public key PK to form a transaction identification token for this transaction, and provides it to the acceptance terminal;

5. The customer enters the transaction password P through the keyboard of the acceptance terminal or mobile terminal. The acceptance terminal will obtain the transaction identification Token and transaction password P, and submit them to the background payment device;

6. The background payment device decrypts the transaction identification Token through the private key SK, obtains the account ID, challenge code C, and verifies whether the challenge code C is correct;

7. The background payment device obtains the bank card account information according to the account ID, and verifies whether the transaction password P is correct;

8. The background payment device completes the transaction and sends the transaction result back to the acceptance terminal;

9. The acceptance terminal sends back the transaction result to the mobile terminal.

It can be seen from the above embodiments that the background system dynamically generates a series of challenge codes (challenge) in each transaction of this technical solution, and the terminal device encrypts the payment account information and the challenge code to form a dynamic transaction token (Token), which is used to replace the payment account information , for front-end and back-end transaction transmission. The transaction ID is dynamically generated by the mobile phone, and each transaction generates a different transaction ID, which ensures the security of accounts and transactions. The terminal equipment operates offline without networking, which improves the transaction success rate and user experience. The above is only a preferred embodiment of the present invention, and all equivalent changes and modifications made according to the scope of the patent application of the present invention shall fall within the scope of the present invention.

101～103, 201～203‧‧‧step 30‧‧‧terminal device 301‧‧‧initialization unit 302‧‧‧encryption unit 303‧‧‧payment unit 40‧‧‧background payment device 401‧‧‧challenge code generation unit 402‧‧‧decryption unit 403‧‧‧payment unit 4031‧‧‧first verification module 4032‧‧‧first payment module 4033‧‧‧second verification module 4034‧‧‧second payment module

Figure 1 is a flowchart of an offline payment method according to an embodiment of the present invention. Fig. 2 is a flowchart of an offline payment method according to another embodiment of the present invention. FIG. 3 is a functional block diagram of a terminal device according to an embodiment of the present invention. FIG. 4 is a functional block diagram of a background payment device according to an embodiment of the present invention. FIG. 5 is a functional block diagram of the payment unit in the background payment device according to an embodiment of the present invention. Fig. 6 is a block diagram of an offline payment system according to an embodiment of the present invention. FIG. 7 is a flowchart of installation and registration of a mobile terminal according to an embodiment of the present invention. FIG. 8 is a transaction flow chart according to an embodiment of the present invention.

101~103‧‧‧Steps

Claims (9)

An offline payment method, which includes: generating the account ID according to bank card account information, and the account ID is associated with at least one bank card; obtaining a challenge code from an acceptance terminal through Bluetooth or NFC communication; the challenge code is generated in an instant Generated, and the challenge code is different each time; encrypt the challenge code and account ID, generate the transaction ID, and transmit the transaction ID to the acceptance terminal; the transaction ID is generated in real time, and each time The generated transaction identifiers are different; and the transaction identifier and transaction password are used for offline payment. The method as claimed in claim 1, wherein the transaction identifier is obtained through public key PK encryption. An offline payment method, comprising: using transaction information to generate a challenge code, and transmitting the challenge code to an acceptance terminal through Bluetooth or NFC communication; the challenge code is generated in real time, and the challenge code is different each time ; Obtain the transaction ID from the acceptance terminal, decrypt the transaction ID, and obtain the challenge code and account ID; the transaction ID is generated in real time, and the transaction ID is different each time; the account ID is associated with at least A bank card; use the challenge code and the account ID to make offline payment according to the following steps: verify the challenge code; after passing the verification, use the account ID to obtain the transaction bank corresponding to the at least one bank card card account information; obtain the transaction password from the acceptance terminal, verify the transaction password; and use the transaction bank card account information to make offline payment after passing the verification. The method according to claim 3, wherein the challenge code and account ID are obtained by decrypting the private key SK. A terminal device, which includes: an initialization unit, which is used to generate the account ID according to bank card account information, and the account ID is associated with at least one bank card; and is used to obtain a challenge code from an acceptance terminal through Bluetooth or NFC communication; the challenge The generation method of the code is real-time generation, and the challenge code is different each time; the encryption unit is used to encrypt the challenge code and account ID to generate the transaction identification; the generation method of the transaction identification is instant generation, and each time The transaction identification generated for the second time is different; and the payment unit is used for offline payment using the transaction identification and transaction password. The device according to claim 5, wherein the encryption unit obtains the transaction identifier by encrypting with the public key PK. A background payment device, which includes: a challenge code generation unit, which is used to generate a challenge code using transaction information, and transmit the challenge code to the client through Bluetooth or NFC communication; the challenge code is generated in real time, and every The challenge code generated for the second time is different; the decryption unit is used to obtain the transaction identifier from the client, decrypt the transaction identifier, and obtain The challenge code, account ID; the transaction identification is generated in real time, and the transaction identification is different each time; the account ID is associated with at least one bank card; the first verification module is used to verify the challenge code ; The first payment module is used to obtain the transaction bank card account information corresponding to the at least one bank card by using the account ID after passing the verification; the second verification module is used to obtain the transaction password from the client, The transaction password is verified; and the second payment module is used for offline payment using the transaction bank card account information after passing the verification. The background payment device according to claim 7, wherein the decryption unit obtains the challenge code and the account ID by decrypting through the private key SK. An offline payment system, comprising the terminal device described in Claim 5 or 6, and the background payment device described in Claim 7 or 8.

Images