WO2015096754A1 - Smart device-based payment platform system and payment method - Google Patents

Abstract

Provided are a smart device-based payment platform system and payment method; by means of a coordination of a smart device with an external mPOS, and with the aid of the strong processing capacity of the smart device, a good user interface, remote communication capacity, and commercial mPOS secure payment capacity, mPOS and transaction communication costs are reduced, the application of digital signatures is further integrated, and transaction printing costs are lowered. The design of the functions of remote download of the terminal master key and remote update of apps reduces operation and maintenance costs. Merchants are provided with a low-cost, secure mobile payment solution with service management application and electronic payment application integration and information flow and resource flow integration.

Description

Intelligent device-based payment platform system and payment method

Technical field

The invention relates to the field of payment based on smart devices, in particular to a payment device system based on smart device and a payment method.

Background technique

Traditional POS There are several problems in the use of the terminal:

High terminal cost

Traditional POS The terminal needs to configure the communication module and the printing module, and the terminal cost is high.

High transaction costs

Traditional POS Generally adopted PSTN , GPRS , CDMA The network connection method is connected to the acquiring system for transaction, and each transaction generates communication fee. The completion of the transaction requires the printing of a paper transaction receipt, which increases the investment in printing supplies.

High operating cost

Traditional POS When the terminal application is upgraded, it is necessary to manually upgrade to the terminal deployment point or build it one by one. TMS The terminal management system is remotely upgraded, and the terminal master key is manually injected, and the operation and maintenance cost is high.

Application function is single, serious homogenization

Subject to terminal hardware (especially display) and underlying systems, traditional POS Just a simple payment tool, the terminal application function is homogenized seriously, and there is no business management system with the merchant. ( Such as insurance marketing industry system, logistics management system, etc. ) Integration or poor compatibility, easy to be used by other acquirers POS Terminal replacement, merchant viscosity is low, which is not conducive to the expansion of new merchants and the maintenance of stock merchants.

In summary, due to tradition POS The terminal cost is high, the transaction cost is high, and the operation and maintenance cost is high. The acquirer is often more willing to POS The terminal is deployed to large and medium-sized quality merchants that can bring better returns. due to POS Terminal homogeneity is serious, it is not integrated with the business management system, and it is very easy to be replaced. In order to seize a limited number of high-quality merchants, the acquiring institution often fights the price war on the processing fee. On the other hand, a large number of small and micro businesses are difficult to apply for. POS The terminal has affected the expansion of bank card acceptance channels in small and micro merchants. A large number of small and micro merchants cannot accept bank cards for payment settlement, which in turn affects cardholders' card enthusiasm.

Summary of the invention

The object of the present invention is to overcome the above drawbacks, and to provide a payment device system and a payment method based on a smart device.

The object of the present invention is achieved by the present invention: a smart device-based payment method, characterized in that it comprises the steps,

), the user logs in from the application of the smart device, performs a business management operation, and when payment is required, the smart device sends the payment information including the transaction type and the transaction amount to mPOS ;

), mPOS Receiving the transaction amount and displaying, after the user card information is read and the user password is received, the organization forms a transaction request message and sends it to the smart device;

), smart device VPN The access gateway initiates a connection request. After the handshake, the two parties establish a session key based on the negotiation. VPN aisle;

The smart device encrypts the transaction request message by using the session key, and sends the encrypted transaction request message to VPN Access gateway

), VPN The access gateway decrypts the received encrypted transaction request message and forwards it to the transaction processing system;

The transaction processing system preprocesses the transaction request message and forwards it to the back office of the acquirer, and the back office system of the acquirer performs the transaction processing of the transaction and returns the transaction success. / The transaction response message of the failure code; the pre-processing includes transaction legality check, transaction risk monitoring, transaction location monitoring, message format conversion, password-to-encryption, and recording transaction log;

The transaction processing system performs subsequent processing of the transaction according to the response result of the back office system of the acquirer, and forwards the transaction response message to VPN Access gateway

), VPN The access gateway encrypts the transaction response message by using the session key, and then forwards the encrypted transaction response message to the smart device;

The smart device decrypts the received encrypted transaction response message and sends it to mPOS ;

), mPOS Returning the transaction result to the smart device according to the transaction response message;

The smart device performs subsequent processing according to the transaction result. If the transaction fails, the failure information is displayed. If the transaction is successful, the cardholder is prompted to sign, and after obtaining the electronic signature, the Unicom transaction element is compressed and calculated. Hash After the value is combined with other transaction elements, the message string is sent. mPOS The transaction elements include the cardholder's main account, transaction date, transaction time, transaction type and transaction amount;

, mPOS Calculate the received message string MAC Return to the smart device;

Smart device will compress the electronic signature with MAC Organize into an electronic signature request message, encrypt it with the session key, and send it to VPN Access gateway

, VPN The access gateway decrypts the electronic signature request message encrypted by using the session key, and then forwards the electronic signature request message to the transaction processing system;

The transaction processing service forwards the electronic signature request message to the electronic signature system;

, the electronic signature system verifies the electronic signature request message MAC If the verification is passed through the feedback electronic signature response message to the transaction processing system, and the electronic signature is decompressed, and the decompressed electronic signature and other transaction elements are saved to the designated location according to the set purchase order format;

The transaction processing system forwards the electronic signature response message to VPN Access gateway

, VPN The access gateway encrypts the electronic signature response message by using the session key, and sends the response message to the smart device;

After receiving the electronic signature response message, the smart device decrypts the message and performs corresponding processing according to the response result.

Wherein the steps S1 Previously included smart device mPOS Initiating a remote download request for the terminal master key, mPOS Interact with the transaction processing system through the smart device, after two-way authentication, mPOS Securely obtain the terminal master key; mPOS Initiate a check-in request, mPOS Interact with the transaction processing system through the smart device, synchronize the transaction serial number, the work key, and obtain the configuration of the terminal in the background. APP The steps of the information.

Wherein the steps S1 Application access after the user logs in from the smart device application APP The management system detects whether the versions are consistent. APP The management system initiates a request to download an application.

among them , Said step S16 The decompressed electronic signature and the other transaction elements are combined with the other transaction elements to be saved to the specified location.

among them , Said step S16 It also includes the step of returning a portal URL that can access the electronic purchase order.

among them , it includes mPOS , smart device, mobile payment platform and bank host system; mPOS , smart devices, mobile payment platforms between the Internet and / Or mobile communication network to exchange data;

The mobile payment platform includes VPN Access gateway, electronic signature system, transaction processing system, and acquiring institution back-office system;

Said mPOS With the smart device through the audio port, USB Or Bluetooth and mPOS connection;

The smart device, as mPOS The interaction medium with the mobile payment platform is provided by the application software, including: after the user login verification, the business management operation needs to be paid, the payment transaction amount is input, and the payment transaction amount is sent to mPOS ;Roger that mPOS After sending the transaction request message, it will be sent to the mobile payment platform. VPN The access gateway initiates a connection request to be established. VPN After the channel, the session key is used to encrypt the transaction request message and sent to VPN Access gateway; decrypts the received encrypted transaction response message and sends it to mPOS According to the transaction result, the subsequent processing is performed. If the transaction fails, the failure information is displayed. If the transaction is successful, the cardholder is prompted to sign, and the electronic signature is obtained, compressed and calculated. Hash After the value is combined with other transaction elements, the message string is sent. mPOS ;receive mPOS return MAC And composing an electronic signature request message with the compressed electronic signature, and encrypting with the session key and then sending it to VPN Access gateway VPN After the electronic signature response message sent by the access gateway is decrypted, it is processed according to the response result;

Said mPOS , for receiving the transaction amount sent from the smart device and displaying, after reading the information on the user card, accepting the user password input, organizing the transaction request message to be sent to the smart device; and transmitting the message to the smart device according to the transaction response message Feedback transaction results; calculation of the received message string MAC Return to the smart device;

Said VPN The access gateway is used on the smart device after receiving the smart device connection request VPN The session key negotiation is completed between the access gateways. VPN Channel; the encrypted transaction request message sent by the receiving smart device is decrypted and forwarded to the transaction processing system; after receiving the transaction response message sent by the transaction processing system, the session key is used to encrypt, and then the encrypted transaction response message is forwarded to the smart The device receives the encrypted electronic signature request message sent by the smart device, decrypts it, and forwards it to the transaction processing system; receives the electronic signature response message forwarded by the transaction processing system, encrypts it by using the session key, and sends the message to the smart device;

The transaction processing system for VPN The transaction request message forwarded by the access gateway is pre-processed and forwarded to the back-office system of the acquiring institution. The pre-processing includes transaction legality check, transaction risk monitoring, transaction location monitoring, message format conversion, password-to-encryption, and record transaction. Log; follow-up processing of the transaction according to the response result of the acquirer back-end system, and forwarding the transaction response message to VPN Access gateway; will VPN The electronic signature request message forwarded by the access gateway is forwarded to the electronic signature system; the electronic signature response message fed back by the electronic signature system is received and forwarded to VPN Access gateway

The acquiring institution back-office system is configured to perform transaction processing on the transaction request message sent by the transaction processing system;

The electronic signature system is configured to receive an electronic signature request message forwarded by the transaction processing system, and first verify the MAC If the verification is passed through the feedback electronic signature response message to the transaction processing system, and the electronic signature is decompressed, and the decompressed electronic signature and other transaction elements are saved to the designated location according to the set purchase order format.

Wherein, the mobile payment platform further includes APP Management system, said APP Management system for comparing application versions during the transaction process, if the smart device is in use version APP Remind the smart device when the application configuration on the management system does not match APP The management system initiates an application update request.

The mobile payment platform further includes a transfer monitoring system, and the transfer monitoring system is configured to receive the base position information of the smart device and the base station information of the transaction location uploaded by the transaction processing system, and then the distance between the two locations After the calculation, compare whether the distance is beyond the allowable range, thus monitoring mPOS Whether a transfer occurred.

The mobile payment platform further includes a service management server; the service management server is configured to be responsible for maintaining and managing basic information such as merchant data, terminal data, and card table information in the system, system parameter setting, and transaction statistical analysis.

Compared to common based POS The payment platform of the terminal, the beneficial effect of the invention is that the smart device and the external device mPOS Collaboration, with powerful processing power, good user interface, remote communication capabilities, and commercial mPOS Safe payment ability, reduced mPOS Cost and transaction communication costs, combined with the application of electronic signatures, reduce the cost of transaction receipt printing. Remote download of terminal master key, APP The remote update function design reduces operating and maintenance costs. A low-cost secure mobile payment solution that provides merchants with business management applications and electronic payment application convergence, information flow and capital flow integration.

DRAWINGS

The specific structure of the present invention is described in detail below with reference to the accompanying

Figure 1 A flowchart of a method of the present invention;

Figure 2 It is a topology diagram of the payment platform system of the present invention.

detailed description

The detailed description of the technical contents, structural features, and the objects and effects of the present invention will be described in detail below with reference to the accompanying drawings.

Please refer to the picture 1 The present invention relates to a smart device-based payment method, which includes the steps,

), the user logs in from the application of the smart device, performs a business management operation, and when payment is required, the smart device sends the payment information including the transaction type and the transaction amount to mPOS ;

), mPOS Receiving the transaction amount and displaying, after the user card information is read and the user password is received, the organization forms a transaction request message and sends it to the smart device;

), smart device VPN The access gateway initiates a connection request. After the handshake, the two parties establish a session key based on the negotiation. VPN aisle;

The smart device encrypts the transaction request message by using the session key, and sends the encrypted transaction request message to VPN Access gateway

), VPN The access gateway decrypts the received encrypted transaction request message and forwards it to the transaction processing system;

The transaction processing system preprocesses the transaction request message and forwards it to the back office of the acquirer, and the back office system of the acquirer performs the transaction processing of the transaction and returns the transaction success. / The transaction response message of the failure code; the pre-processing includes transaction legality check, transaction risk monitoring, transaction location monitoring, message format conversion, password-to-encryption, and recording transaction log;

The transaction processing system performs subsequent processing of the transaction according to the response result of the back office system of the acquirer, and forwards the transaction response message to VPN Access gateway

Here, the transaction processing system performs transaction follow-up processing according to the response result of the acquirer back-end system. If the acquirer background return code indicates that the transaction fails, a transaction response message containing the return code is generated, and the message is sent to VPN Access gateway; if the acquirer background return code indicates that the transaction is successful, a transaction response message containing the transaction success return code is generated, and the message is forwarded to VPN Access gateway.

), VPN The access gateway encrypts the transaction response message by using the session key, and then forwards the encrypted transaction response message to the smart device;

The smart device decrypts the received encrypted transaction response message and sends it to mPOS ;

), mPOS Returning the transaction result to the smart device according to the transaction response message;

The smart device performs subsequent processing according to the transaction result. If the transaction fails, the failure information is displayed. If the transaction is successful, the cardholder is prompted to sign, obtain the electronic signature, compress and calculate Hash After the value is combined with the transaction element, the message string is sent. mPOS The transaction elements include the cardholder's primary account number, transaction date, transaction time, transaction type, and transaction amount;

, mPOS Calculate the received message string MAC Return to the smart device;

Smart device will compress the electronic signature with MAC Organize into an electronic signature request message, encrypt it with the session key, and send it to VPN Access gateway

, VPN The access gateway decrypts the electronic signature request message encrypted by using the session key, and then forwards the electronic signature request message to the transaction processing system;

The transaction processing service forwards the electronic signature request message to the electronic signature system;

, the electronic signature system verifies the electronic signature request message MAC If the verification is passed through the feedback electronic signature response message to the transaction processing system, and the electronic signature is decompressed, and the decompressed electronic signature and other transaction elements are saved to the designated location according to the set purchase order format;

Specifically, in this step, if the verification is passed, the electronic signature system generates an electronic signature response message including the success response code, and then sends the electronic signature response message to the transaction processing system, and performs electronic signature decompression, and The decompressed electronic signature and other transaction elements are saved to the designated location according to the set purchase order format; if the verification fails, the electronic signature system generates an electronic signature response message containing the failure response code and sends it to the transaction processing system.

The transaction processing system forwards the electronic signature response message to VPN Access gateway

, VPN The access gateway encrypts the electronic signature response message by using the session key, and sends the response message to the smart device;

After receiving the electronic signature response message, the smart device decrypts the message and performs corresponding processing according to the response result.

The response results here have a variety of settings depending on the situation, but generally include both success and failure. That is, if the message returns successfully, the transaction is deemed successful; if the message returns, the transaction is determined to have failed, and the smart device automatically initiates the call.

The technical solution of the invention is connected to the external device through the smart device mPOS Collaboration, with powerful processing power, good user interface, remote communication capabilities, and commercial mPOS Safe payment ability, reduced mPOS Cost and transaction communication costs, combined with the application of electronic signatures, reduce the cost of transaction receipt printing. Remote download of terminal master key, APP The remote update function design reduces operating and maintenance costs. A low-cost secure mobile payment solution that provides merchants with business management applications and electronic payment application convergence, information flow and capital flow integration.

As an embodiment, the steps S1 Previously included smart device mPOS Initiating a remote download request for the terminal master key, mPOS Interact with the transaction processing system through the smart device, after two-way authentication, mPOS Securely obtain the terminal master key; mPOS Initiate a check-in request, mPOS Interact with the transaction processing system through the smart device, synchronize the transaction serial number, the work key, and obtain the configuration of the terminal in the background. APP The steps of the information.

Here, the master key is used to encrypt and decrypt the work key that needs to be transmitted, and realize the online transfer of the work key. The work key is the lowest-level data encryption key of the terminal, and is also the most frequently updated key, including ensuring the integrity of the terminal information. MAC Key and PIN The protection key, the update of the two keys is completed by online transaction, signing, and is transmitted after being encrypted by using the master key.

As an embodiment, the steps S1 Application access after the user logs in from the smart device application APP The management system detects whether the versions are consistent. APP The management system initiates a request to download an application.

This step ensures that applications on the smart device can be updated in a timely manner and remain up-to-date with the latest version to ensure security during the transaction.

Further, as an embodiment, for a implementation scenario with less business requirements and a fixed implementation, mPOS Preset the processing of all transactions, the steps S1 Medium smart device sent to mPOS The data needs to include the transaction type and transaction amount, the steps S2 in mPOS Organizing transaction messages according to the transaction type according to the preset processing procedure;

Further, as an embodiment, mPOS The programmable space on the space is limited, and the implementation scenario is that the business needs are high or the business needs are changed. mPOS As a script processing device, a preset script parser is run by a script driver, and the steps are S1 Medium smart device sent to mPOS The type of transaction and the transaction amount are included in the transaction mPOS In the trading script, sent to mPOS Also included in the trading script mPOS Process flow S2 in mPOS The script of the received transaction is parsed, and the transaction message is organized according to the data and processing flow in the transaction script.

As an embodiment, the steps S16 The decompressed electronic signature and the other transaction elements are combined with the other transaction elements to be saved to the specified location. Therefore, the data related to the transaction can be uniformly stored in an electronic purchase order picture, which is convenient for subsequent calls and viewing.

Further, in an embodiment, the step S16 It also includes the step of returning a portal URL that can access the electronic purchase order. Thus, the user making the payment can be through the smart device or PC Log in to the portal to query and access the electronic purchase order, and keep abreast of its payment and consumption status.

See picture 2 The invention also relates to a smart device based payment platform system, which comprises mPOS , smart device, mobile payment platform and bank host system; mPOS , smart devices, mobile payment platforms between the Internet and / Or mobile communication network to exchange data;

The mobile payment platform includes VPN Access gateway, electronic signature system, transaction processing system, and acquiring institution back-office system;

Said mPOS With the smart device through the audio port, USB Or Bluetooth and mPOS connection;

The smart device, as mPOS The interaction medium with the mobile payment platform is provided by the application software, including: after the user login verification, the business management operation needs to be paid, the payment transaction amount is input, and the payment transaction amount is sent to mPOS ;Roger that mPOS After sending the transaction request message, it will be sent to the mobile payment platform. VPN The access gateway initiates a connection request to be established. VPN After the channel, the session key is used to encrypt the transaction request message and sent to VPN Access gateway; decrypts the received encrypted transaction response message and sends it to mPOS According to the transaction result, the subsequent processing is performed. If the transaction fails, the failure information is displayed. If the transaction is successful, the cardholder is prompted to sign, and the electronic signature is obtained, compressed and calculated. Hash After the value is combined with other transaction elements, the message string is sent. mPOS ;receive mPOS return MAC And composing an electronic signature request message with the compressed electronic signature, and encrypting with the session key and then sending it to VPN Access gateway VPN After the electronic signature response message sent by the access gateway is decrypted, it is processed according to the response result;

Said mPOS , for receiving the transaction amount sent from the smart device and displaying, after reading the information on the user card, accepting the user password input, organizing the transaction request message to be sent to the smart device; and transmitting the message to the smart device according to the transaction response message Feedback transaction results; calculation of the received message string MAC Return to the smart device;

Said VPN The access gateway is used on the smart device after receiving the smart device connection request VPN The session key negotiation is completed between the access gateways. VPN Channel; the encrypted transaction request message sent by the receiving smart device is decrypted and forwarded to the transaction processing system; after receiving the transaction response message sent by the transaction processing system, the session key is used to encrypt, and then the encrypted transaction response message is forwarded to the smart The device receives the encrypted electronic signature request message sent by the smart device, decrypts it, and forwards it to the transaction processing system; receives the electronic signature response message forwarded by the transaction processing system, encrypts it by using the session key, and sends the message to the smart device;

The transaction processing system for VPN The transaction request message forwarded by the access gateway is pre-processed and forwarded to the back-office system of the acquiring institution. The pre-processing includes transaction legality check, transaction risk monitoring, transaction location monitoring, message format conversion, password-to-encryption, and record transaction. Log; follow-up processing of the transaction according to the response result of the acquirer back-end system, and forwarding the transaction response message to VPN Access gateway; will VPN The electronic signature request message forwarded by the access gateway is forwarded to the electronic signature system; the electronic signature response message fed back by the electronic signature system is received and forwarded to VPN Access gateway

The acquiring institution back-office system is configured to perform transaction processing on the transaction request message sent by the transaction processing system;

The electronic signature system is configured to receive an electronic signature request message forwarded by the transaction processing system, and first verify the MAC If the verification is passed through the feedback electronic signature response message to the transaction processing system, and the electronic signature is decompressed, and the decompressed electronic signature and other transaction elements are saved to the designated location according to the set purchase order format.

In summary, the present invention provides a low-cost and secure payment platform system, which has a low transaction cost, a low-cost operation and maintenance mode, a perfect integration of service management and electronic payment, and a low cost, strong function, and security. The high mobile payment platform further expands the bank card acceptance channel, expands the application range of bank cards, improves the user environment, enhances the user experience, and enhances the viscosity of merchants.

As an embodiment, the system further includes other service platforms, and other service platforms such as LBS System, member management system, third party order management system, etc. Functions such as machine positioning, member information management, and third-party order management can be realized.

As an embodiment, the mobile payment platform further includes APP Management system, said APP Management system for comparing application versions during the transaction process, if the smart device is in use version APP Remind the smart device when the application configuration on the management system does not match APP The management system initiates an application update request.

In an embodiment, the mobile payment platform further includes a transfer monitoring system, configured to receive base station information of a reference location and a transaction location of the smart device uploaded by the transaction processing system, and then to the two locations. The distance between them is calculated and compared to see if the distance is outside the allowable range, thus monitoring mPOS Whether a transfer occurred.

As an embodiment, the mobile payment platform further includes a service management server; the service management server is configured to be responsible for maintaining and managing basic information such as merchant data, terminal data, and card table information in the system, system parameter setting, and transaction statistical analysis. Wait.

The above is only the embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformation of the present invention and the contents of the drawings may be directly or indirectly applied to other related technologies. The fields are all included in the scope of patent protection of the present invention.

Claims (9)

1. A smart device-based payment method, characterized in that it comprises steps,

   S1), the user logs in from the application of the smart device, performs a business management operation, and when the payment is required, the smart device sends the payment information including the transaction type and the transaction amount to the mPOS;

   S2), mPOS receives the transaction amount and displays, after the user card information is read and the user password is received, it is organized into a transaction request message and sent to the smart device;

   S3), the smart device initiates a connection request to the VPN access gateway, and the two parties establish a VPN channel according to the negotiated session key after the handshake;

   S4), the smart device encrypts the transaction request message by using the session key, and sends the encrypted transaction request message to the VPN access gateway;

   S5), the VPN access gateway decrypts the received encrypted transaction request message and forwards the message to the transaction processing system;

   S6), the transaction processing system preprocesses the transaction request message and forwards it to the acquiring institution back-end system, and the acquiring institution back-office system performs transaction processing of the transaction and returns a transaction response message including the transaction success/failure code; Pre-processing includes transaction legality check, transaction risk monitoring, transaction location monitoring, message format conversion, password-to-encryption, and record transaction log;

   S7), the transaction processing system performs subsequent processing of the transaction according to the response result of the back office system of the acquiring institution, and forwards the transaction response message to the VPN access gateway;

   S8), the VPN access gateway encrypts the transaction response message by using the session key, and then forwards the encrypted transaction response message to the smart device;

   S9), the smart device decrypts the received encrypted transaction response message and sends it to mPOS;

   S10), mPOS feeds back the transaction result to the smart device according to the transaction response message;

   S11), the smart device performs subsequent processing according to the transaction result, and if the transaction fails, the failure information is displayed. If the transaction is successful, the cardholder is prompted to sign, and after the electronic signature is obtained, the Unicom transaction element is compressed and the hash value is calculated and composed with other transaction elements. The message string is sent to mPOS; the transaction elements include the cardholder's main account, transaction date, transaction time, transaction type and transaction amount;

   S12), mPOS calculates a MAC for the received message string and returns it to the smart device;

   S13), the smart device organizes the compressed electronic signature and the MAC into an electronic signature request message, and encrypts the session identifier and sends the message to the VPN access gateway.

   S14), the VPN access gateway decrypts the electronic signature request message encrypted by using the session key, and then forwards the electronic signature request message to the transaction processing system;

   S15), the transaction processing service forwards the electronic signature request message to the electronic signature system;

   S16), the electronic signature system verifies the MAC in the electronic signature request message, and if the verification passes the feedback electronic signature response message to the transaction processing system, and performs electronic signature decompression, and decompresses according to the set purchase order format. Electronic signatures and other transaction elements are saved to a specified location;

   S17), the transaction processing system forwards the electronic signature response message to the VPN access gateway;

   S18), the VPN access gateway encrypts the electronic signature response message by using the session key, and sends the response message to the smart device;

   S19): After receiving the electronic signature response message, the smart device decrypts the message and performs corresponding processing according to the response result.
2. The smart device-based payment method according to claim 1, wherein before the step S1, the smart device further initiates a remote key download request of the terminal master key to the mPOS, and the mPOS interacts with the transaction processing system through the smart device, and the two-way authentication is performed. After that, the mPOS securely obtains the terminal master key; initiates a check-in request to the mPOS, and the mPOS interacts with the transaction processing system through the smart device, synchronizes the transaction serial number, the work key, and obtains the APP information configured by the terminal in the background.
3. Right Request 1 The smart device-based payment method is characterized in that: step S1 After the user logs in from the smart device application, the application accesses the APP The management system detects whether the versions are consistent. If they are inconsistent, they apply to the APP. The management system initiates a request to download an application.
4. The smart device-based payment method according to claim 1, wherein in step S16, the decompressed electronic signature is combined with other transaction elements to synthesize an electronic purchase order picture and saved to a designated location.
5. The smart device-based payment method according to claim 1, wherein the step S16 further comprises the step of returning a portal URL that can access the electronic purchase order.
6. A smart device-based payment platform system, which comprises: mPOS, smart device, mobile payment platform and bank host system; the mPOS, smart device and mobile payment platform interact through the internet and/or mobile communication network Data exchange

   The mobile payment platform includes a VPN access gateway, an electronic signature system, a transaction processing system, and a back office system of an acquiring institution;

   The mPOS and the smart device are connected to the mPOS through an audio port, a USB port or Bluetooth;

   The smart device, as an interaction medium between the mPOS and the mobile payment platform, is configured to be provided by the application software, including: after the user login verification, the service management operation needs to be paid, and the payment transaction amount is sent to the mPOS after receiving the payment transaction amount; After the transaction request message sent by the mPOS, the connection request is initiated to the VPN access gateway of the mobile payment platform, and after the VPN channel is established, the session request key is used to encrypt the transaction request message and then sent to the VPN access gateway; The encrypted transaction response message is decrypted and sent to mPOS; subsequent processing is performed according to the transaction result. If the transaction fails, the failure information is displayed. If the transaction is successful, the card holder is prompted to sign, and after obtaining the electronic signature, the hash value is compressed and calculated. After forming a message string with other transaction elements, it is sent to mPOS; the MAC returned by the mPOS is received, and the compressed electronic signature is organized into an electronic signature request message, which is encrypted by the session key and sent to the VPN access gateway; and the VPN access gateway is received. After the sent electronic signature response message is decrypted, it is processed according to the response result;

   The mPOS is configured to receive the transaction amount sent by the smart device and display the information on the user card after receiving the user password input, and then organize the transaction request message to be sent to the smart device; according to the transaction response message Returning the transaction result to the smart device; calculating the MAC of the received message string and returning to the smart device;

   The VPN access gateway is configured to complete a session key negotiation between the smart device and the VPN access gateway after receiving the smart device connection request, and establish a VPN channel; and after receiving the encrypted transaction request message sent by the smart device, decrypt the message Forwarding to the transaction processing system; receiving the transaction response message sent by the transaction processing system, encrypting with the session key, and then forwarding the encrypted transaction response message to the smart device; receiving the encrypted electronic signature request message sent by the smart device Decrypting and forwarding to the transaction processing system; receiving the electronic signature response message forwarded by the transaction processing system, encrypting it by using the session key, and transmitting the message to the smart device;

   The transaction processing system is configured to preprocess the transaction request message forwarded by the VPN access gateway and forward it to the acquiring institution back-end system, where the pre-processing includes transaction legality check, transaction risk monitoring, transaction location monitoring, and reporting. Text format conversion, password-to-encryption, record transaction log; follow-up processing of the transaction according to the response result of the acquirer back-end system, and forward the transaction response message to the VPN access gateway; the electronic signature request message forwarded by the VPN access gateway Forwarding to the electronic signature system; receiving the electronic signature response message fed back by the electronic signature system and forwarding the message to the VPN access gateway;

   The acquiring institution back-office system is configured to perform transaction processing on the transaction request message sent by the transaction processing system;

   The electronic signature system is configured to receive an electronic signature request message forwarded by the transaction processing system, first verifying the MAC of the transaction, and if the verification passes the feedback electronic signature response message to the transaction processing system, and performing electronic signature decompression, and according to the setting The fixed purchase order format saves the decompressed electronic signature and other transaction elements to the specified location.
7. The smart device-based payment platform system according to claim 6, wherein the mobile payment platform further comprises an APP management system, and the APP management system is configured to perform an application version comparison in a transaction process, if The smart device reminds the smart device to initiate an application update request to the APP management system when the version does not match the application configuration on the APP management system.
8. Right Request 6 The smart device-based payment platform system is characterized in that: the mobile payment platform further comprises a transfer monitoring system, and the transfer monitoring system is configured to receive a reference position and a transaction of the smart device uploaded by the transaction processing system. The base station information of the location, and then calculate the distance between the two locations and compare whether the distance exceeds the allowable range, thereby monitoring the mPOS Whether a transfer occurred.
9. The smart device-based payment platform system according to claim 6, wherein the mobile payment platform further comprises a service management server; and the service management server is configured to be responsible for the merchant information, the terminal data, and the card table information in the system. Maintenance and management of basic information, system parameter settings, transaction statistics analysis, etc.