WO2015101273A1

WO2015101273A1 - Security verification method, and related device and system

Info

Publication number: WO2015101273A1
Application number: PCT/CN2014/095467
Authority: WO
Inventors: 杨小伟
Original assignee: 腾讯科技（深圳）有限公司
Priority date: 2013-12-30
Filing date: 2014-12-30
Publication date: 2015-07-09
Also published as: CN104601327A; CN104601327B

Abstract

Disclosed are a security verification method, and a related device and system. The security verification method comprises: acquiring from a wearable device of a user, by a service terminal, user verification information pre-stored in the wearable device in a near-field communication manner; sending, by the service terminal, a service request to a service server, the service request comprising service information and the user verification information; and checking, by the service server, the user verification information, and if checking is successful, conducting service processing on the service request. By means of the present invention, checking can be conducted using verification information stored in a wearable device of a user, so that service processing with respect to a service request is more secure and convenient.

Description

Safety verification method, related equipment and system

This application claims priority to Chinese Patent Application No. 201310746079.8, entitled "A Security Verification Method, Related Equipment and Systems", filed on December 30, 2013, the entire contents of In this application.

Technical field

The present invention relates to the field of Internet technologies, and in particular, to a security verification method, related device, and system.

Background technique

With the development of Internet technology, users often process some daily business online, and some services involving personal assets or private information of the user need to strictly authenticate the user identity during processing, such as online transactions, payment, etc. The authentication method is to authenticate by SMS verification code, and the SMS verification code is established on the mobile phone channel. If the mobile phone cannot receive the short message normally, the payment behavior cannot be completed normally; if the mobile phone is lost, the security verification cannot be performed in a short time, and It may happen that another person uses the lost mobile phone to perform SMS verification, thereby counterfeiting the user for business processing, resulting in security risks of the user's assets or personal information.

Summary of the invention

The embodiment of the invention provides a security verification method, a related device and a system, which can be verified by using the verification information stored in the wearable device of the user, so that the service processing for the service request is more secure and convenient.

In a first aspect, an embodiment of the present invention provides a security verification method, where the method includes:

The service terminal acquires user authentication information pre-stored in the wearable device from the wearable device of the user by using a short-range communication manner;

The service terminal sends a service request to the service server, where the service request includes service information and the user verification information;

The service server performs verification on the user verification information, and if the verification succeeds, performs service processing on the service request.

In a second aspect, the embodiment of the present invention further provides a security verification method, where the method includes:

The service terminal sends a service request to the service server, where the service request includes the service information and the user verification information, so that the service server checks the user verification information, and if the verification is successful, the service terminal The service server performs business processing on the service request.

In a third aspect, an embodiment of the present invention further provides a security verification method, where the method includes:

The wearable device sends the user authentication information pre-stored in the wearable device to the service terminal in a short-distance communication manner, so that the service terminal sends a service request to the service server, where the service request includes service information and The user verification information, the service server performs verification on the user verification information, and if the verification is successful, performs service processing on the service request.

In a fourth aspect, the embodiment of the present invention further provides a secure payment method, where the secure payment method includes:

The payment terminal acquires user verification information pre-stored in the wearable device from the wearable device of the user by using a short-range communication manner;

The payment terminal sends a payment request to the payment server, where the payment request includes order information and the user verification information;

The payment server verifies the user verification information, and if the verification is successful, performs payment processing on the payment request.

In a fifth aspect, an embodiment of the present invention further provides a service terminal, where the service terminal includes a memory, and one or more programs, where one or more programs are stored in a memory and configured to be one or more The processor executes instructions included in the one or more programs for performing the following methods:

Acquiring user authentication information pre-stored in the wearable device from a wearable device of the user by using a short-range communication manner;

Sending a service request to the service server, where the service request includes the service information and the user verification information, so that the service server checks the user verification information, and if the verification succeeds, the service server is The business request is for business processing.

In a sixth aspect, an embodiment of the present invention further provides a wearable device, where the wearable device includes a memory, and one or more programs, wherein one or more programs are stored in the memory and configured to be one or More than one processor executes instructions included in the one or more programs for performing the following methods:

Sending the user authentication information stored in advance to the service terminal in a short-range communication manner, so that the service terminal sends a service request to the service server, where the service request includes the service information and the user verification information, The service server verifies the user verification information, and if the verification is successful, performs service processing on the service request.

The embodiment of the present invention obtains the user verification information pre-stored in the wearable device from the wearable device of the user, and sends a service request to the service server, where the service request includes the service information and the user. The verification information is used to enable the service server to verify the user verification information. If the verification is successful, the service request is processed, and the verification information stored in the user's wearable device can be used for service verification. Make business processing safer and more convenient.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a schematic flow chart of a security verification method according to an embodiment of the present invention;

2 is a schematic flow chart of a security verification method in another embodiment of the present invention;

3 is a schematic flow chart of a security verification method in another embodiment of the present invention;

4 is a schematic flow chart of a security verification method in another embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a service terminal according to an embodiment of the present invention; FIG.

6 is a schematic structural diagram of a service terminal according to another embodiment of the present invention;

7 is a schematic structural diagram of a wearable device according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a wearable device according to another embodiment of the present invention; FIG.

9 is a schematic structural diagram of a security verification system in an embodiment of the present invention;

FIG. 10 is a schematic structural diagram of a secure payment system according to an embodiment of the present invention; FIG.

11 is a schematic structural diagram of a service terminal according to another embodiment of the present invention;

FIG. 12 is a schematic structural diagram of a wearable device according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The service terminal in the embodiment of the present invention may include an Internet device such as a personal computer, a tablet computer, a smart phone, an e-reader, and an in-vehicle terminal, and can log in to the service server to perform an online payment service by using a user account. A wearable device that can be worn directly on the user or integrated into the user's clothing or accessories, can include a smart bracelet, a smart wristband, a smart watch, smart glasses, and various smart accessories. In the embodiment of the invention, the service terminal is used for secure payment.

1 is a schematic flowchart of a security verification method according to an embodiment of the present invention. The security verification method in this embodiment may include:

S101. The service terminal acquires user verification information pre-stored in the wearable device from the wearable device of the user by using a short-range communication manner.

In a specific implementation, the user can initiate an online payment request through the service terminal. For example, when browsing the e-commerce website, the user needs to purchase the product, and after confirming the order, log in to the service server to perform online payment. At this time, the service terminal can initiate the establishment according to the payment instruction input by the user. The short-range communication connection with the wearable device, specifically, a Bluetooth connection, a NFC (Near Field Communication) connection, etc., for example, after the user clicks “confirm payment”, the service terminal turns on the Bluetooth function and performs the Bluetooth device. Searching, the user wearable device keeps the Bluetooth on state by default, and can automatically establish a Bluetooth connection with the wearable device after the service terminal searches for the user's wearable device. After the service terminal establishes a short-distance communication connection with the wearable device, the user verification information pre-stored in the wearable device may be acquired from the wearable device by using the established short-range communication connection, where the user The verification information may include a user digital certificate or other user's payment verification password, password, and the like. Preferably, the user authentication information obtained by the service terminal from the wearable device may be that the wearable device encrypts according to the preset user private key. Optionally, the obtained user verification information may also be in advance. Verification by the service terminal encryption or service server encryption, and then stored in the wearable device The information service terminal cannot decrypt the user verification information in the process of obtaining the user verification information and using the user verification information, thereby ensuring the security of the user verification information in the payment transmission process.

S102. The service terminal sends a service request to a service server, where the service request includes service information and the user verification information.

After the service terminal obtains the user authentication information from the user's wearable device, the service terminal may send a service request to the service server, where the service request may include service information and user authentication information obtained from the user's wearable device, and the service request. For the payment request, the service information may include payment information such as a transaction order and a payment amount, and may also include login information such as a login account and a login password for logging in to the service server using the user account, and the like.

S103: The service server performs verification on the user verification information, and if the verification succeeds, performs service processing on the service request.

After receiving the service request sent by the service terminal, the service server may perform verification on the user verification information in the service request, and if the verification succeeds, perform service processing on the service request.

Specifically, the user authentication information obtained by the preferred service terminal from the wearable device may be encrypted by using a preset user private key, and the service server may use the user public key corresponding to the user to authenticate the encrypted user. The information is decrypted, and the decrypted user verification information is verified according to the pre-stored reference user verification information. If the verification is successful, the service request is subjected to subsequent service processing, that is, the service information in the service request is obtained ( Such as transaction orders, payment amounts and other information), for subsequent business processing (such as online payment processing, etc.); if the verification fails, the business server can directly reject the current business request.

The service terminal of the present embodiment obtains the user authentication information pre-stored in the wearable device by using the proximity communication method from the user's wearable device, and sends a service request to the service server, where the service request includes the service information and the The user verification information is used to enable the service server to verify the user verification information. If the verification is successful, the service request is processed, and the verification information stored in the user's wearable device can be used for calibration. To make business processing for business requests safer and more convenient.

2 is a schematic flow chart of a security verification method in another embodiment of the present invention, which is described in this embodiment. The security verification method described is mainly described from the three sides of the wearable device, the service terminal, and the service server. As shown in FIG. 2, the security verification method in this embodiment may include the following steps:

S201: The service terminal acquires the device identifier of the user's wearable device by using the short-range communication manner.

In the specific implementation, the user can wear a smart phone, a smart wristband, a smart watch, a smart glasses or various smart accessories devices through a business terminal such as a personal computer, a tablet computer, a smart phone, an e-reader or an in-vehicle terminal. The device obtains the device identifier of the wearable device, and the device identifier uniquely identifies the wearable device, and may be an identifier of the wearable device or the like.

For example, the user can initiate an online payment request through the service terminal, confirm the goods to be purchased when browsing the e-commerce website, and log in to the service server to perform online payment after confirming the order. At this time, the service terminal can initiate establishment and the user according to the payment instruction input by the user. The data connection of the wearable device may be a Bluetooth connection or an NFC connection, and obtain the device identifier of the wearable device through the established data connection. For example, the Bluetooth connection is used, and the service terminal can perform Bluetooth device search and wearable. The device performs Bluetooth pairing to establish a Bluetooth connection with the wearable device. Optionally, the service terminal may also establish a Bluetooth connection with the wearable device according to the Bluetooth identifier of the wearable device pre-stored in the service terminal. Then, the device identification of the wearable device can be obtained through the established Bluetooth connection.

S202. The service terminal sends the device identifier of the wearable device to the service server.

S203. The service server performs binding verification according to the device identifier and the identifier information of the service terminal.

After receiving the device identifier of the wearable device sent by the service terminal, the service server may perform binding verification according to the device identifier and the identifier information of the service terminal, where the identifier information of the service terminal may be sent by the service terminal. When the device identifier of the device is sent to the service server, the online payment is used as an example, or the service server obtains the service from the service terminal at any time after the service terminal logs in to the service server. The identification information of the service terminal, where the identification information of the service terminal can uniquely identify the service terminal, and can be an identity identification code of the service terminal. Optionally, the identifier information can also be a login account of the login service server. . Specifically, the service server may pre-store the binding relationship between the device identifier of the wearable device and the identification information of the service terminal, and determine whether a binding relationship between the wearable device and a service terminal is established, and the binding relationship is established. The process can be referred to the related content below, and the service server obtains the wearable After the device identifier of the device and the identifier information of the service terminal are used, the device may be configured to check whether the wearable device and the service terminal establish a binding relationship, and if the wearable device is verified, Establishing a binding relationship with the service terminal, determining that the service terminal is a terminal that is commonly used by the user, and further performing a process of sending device relationship confirmation information to the service terminal; and if the wearable device and the service terminal are If it is not bound, the service server may refuse to send device relationship confirmation information to the service terminal.

Optionally, before the user initiates the service request by using the service terminal, the service terminal may send the binding request information to the service server, where the binding request information may carry the device identifier of the wearable device and the identification information of the service terminal, so that the service server Establishing a binding relationship between the wearable device and the service terminal, for example, the user may send the registration request information to the service server by using the service terminal, where the registration request information may carry the device identifier of the wearable device and the identification information of the service terminal. The service server performs registration processing on the registration request information to associate the wearable device with the service terminal (ie, establish a binding relationship). Further, the service server may establish a binding relationship between the wearable device and the multiple service terminals according to the binding request information, that is, the user may set multiple common service terminals.

S204. If the verification is passed, the service server sends the device relationship confirmation information to the service terminal.

If the binding verification of the device identifier and the identification information of the service terminal is passed, the service server may send the device relationship confirmation information to the service terminal, where the device relationship confirmation information may be determining the wearable device and The service terminal is confirmation information of a binding relationship.

S205. The service terminal acquires user authentication information of the wearable device by using a short-range communication manner.

After receiving the device relationship confirmation information sent by the service server, the service terminal may obtain the user verification information of the wearable device by establishing a data connection with the wearable device, where the user verification information may include a user digital certificate. Or other users pay for verified passwords, passwords, and other information. Preferably, the user authentication information obtained by the service terminal from the wearable device may be that the wearable device encrypts according to the preset user private key. Optionally, the obtained user verification information may also be in advance. After the service terminal encrypts or encrypts the service server, the authentication information is stored in the wearable device, where the user private key may be a password generated by the related information of the user, and the service terminal subsequently obtains the user verification. Information and the process of using the user authentication information The user authentication information cannot be decrypted, and the security of the user authentication information in the payment transmission process is ensured.

S206. The service terminal sends a service request to the service server, where the service request includes the service information and the user verification information, and carries the device relationship confirmation information.

After the service terminal obtains the user authentication information from the user's wearable device, the service terminal may send a service request to the service server, where the service request may include the service information and the user verification information obtained from the user's wearable device, and carry The device relationship confirmation information, wherein the service information may include payment information such as a transaction order and a payment amount, and may also include login information such as a login account and a login password for logging in to the service server using the user account, and the like.

S207: The service server checks the received user authentication information and the device relationship confirmation information, and if the verification is successful, performs service processing on the service request.

Specifically, the user authentication information obtained by the service terminal from the wearable device may be the authentication information that is encrypted by using the preset user private key, and the service server may use the service request after receiving the service request sent by the service terminal. Decrypting the encrypted user authentication information by the user public key corresponding to the user, and verifying the decrypted user authentication information and the device relationship confirmation information carried by the service request respectively, if the decryption is performed If the obtained user authentication information and the device relationship confirmation information are both verified successfully, the service server may perform service processing on the service request, that is, through the service information (such as transaction order, payment amount, and the like) in the service request. Perform subsequent business processing (such as online payment processing, etc.).

The processing manner of the foregoing step 207 may further include: the service server decrypts the encrypted user verification information by using the user public key corresponding to the user, and performs the decryption of the user verification information according to the pre-stored reference user verification information. Test.

The reference user verification information may be user authentication information that is pre-stored by the user in the service server by using the terminal, and the reference user verification information may include information such as a user digital certificate or a password, password, and the like of other user payment verification.

In an implementation, after receiving the service request sent by the service terminal, the service server may decrypt the encrypted user verification information by using the user public key corresponding to the user, and obtain the decrypted user verification information, and then the service server. You can extract the device relationship confirmation information carried in the service request and search for the device relationship confirmation information stored in the service server. If you find the service, please If the device relationship confirmation information is found, the binding relationship between the wearable device and the service terminal may be determined. At this time, the service server may extract the user verification information carried in the service request, and pre-stored with the service server. If the user authentication information in the service request is the same as the pre-stored user authentication information, the verification may be successful. In this case, the service server may perform service processing on the service request, otherwise, the verification is performed. Failure, at this point, the business server can refuse to respond to the business request.

The service server of the present embodiment performs binding verification according to the identification information of the service terminal and the device identifier of the wearable device sent by the service terminal, and if the verification succeeds, the device relationship confirmation information is sent to the service terminal, and the further service terminal obtains the After the user authentication information of the device is received, the service request is sent to the service server, where the service request includes the service information and the user verification information, and the device relationship confirmation information is carried, and after receiving the service request, the service server The user verification information and the device relationship confirmation information are verified. If the verification is successful, the service request is processed by the service server, and the service server may be sent according to the device identifier of the wearable device of the user and the identification information of the service terminal. The device relationship confirmation information and the verification information stored in the wearable device are verified, so that the business process for the service request is safer and more convenient.

3 is a schematic flowchart of a security verification method in another embodiment of the present invention. The security verification method described in this embodiment is mainly described from three sides of a wearable device, a service terminal, and a service server. As shown in FIG. 3, the security verification method in this embodiment may include the following steps:

S301. The service terminal acquires third-party verification information of the service server.

Before obtaining the user authentication information of the wearable device of the user, the service terminal may obtain third-party verification information of the service server, where the third-party verification information may include information such as a digital certificate or a password, a password, and the like for payment verification. Preferably, the third-party verification information obtained by the service terminal from the service server may be the verification information that the service server encrypts by using the third-party private key, and the service terminal cannot decrypt the third-party verification information, thereby ensuring the The security of the three-party authentication information in the payment transmission process.

S302. The service terminal sends the third-party verification information of the service server to the wearable device by using a short-range communication manner.

Specifically, the service terminal may establish the obtained data connection with the wearable device, and the The obtained third party verification information of the service server is sent to the wearable device, and the data connection may be a Bluetooth connection or an NFC connection or the like.

S303. The wearable device checks the third-party verification information.

After receiving the third-party verification information sent by the service terminal, the wearable device may perform verification on the third-party verification information, and if the verification is successful, perform a process of sending user verification information to the service terminal; If the verification is unsuccessful, the wearable device may refuse to send the user authentication information to the service terminal.

Specifically, the third party authentication information obtained by the service terminal from the service server may be the authentication information that is encrypted by the service server by using the third-party private key, and the wearable device may use the first corresponding to the service server. The third-party public key decrypts the encrypted third-party verification information, and the third-party verification information obtained by the decryption is verified according to the pre-stored reference third-party verification information, wherein the reference third-party verification information may be a pre-generation generated by the service server. The third-party verification information stored in the wearable device, and the reference third-party verification information may include information such as a digital certificate or a payment verification password, a password, and the like.

In an implementation, after receiving the third-party verification information sent by the service terminal, the wearable device may decrypt the encrypted third-party verification information by using a third-party public key corresponding to the service server, and obtain the decrypted Third-party verification information, and then the service server can compare the decrypted third-party verification information with the pre-stored third-party verification information in the service server, if the decrypted third-party verification information and the pre-stored reference third party If the verification information is the same, you can confirm that the verification is successful, otherwise the verification fails.

S304. If the verification of the third-party verification information by the wearable device is successful, send the user verification information to the service terminal by using a short-range communication manner.

If the verification of the third-party verification information by the wearable device is successful, the user verification information may be sent to the service terminal by using the data connection, where the user verification information may include a user digital certificate or a password for other user payment verification. , password and other information. Preferably, the user authentication information obtained by the service terminal from the wearable device may be that the wearable device encrypts according to the preset user private key. Optionally, the obtained user verification information may also be in advance. After the service terminal encrypts or encrypts the service server, and then stores the verification information in the wearable device, the service terminal cannot obtain the user verification information in the process of subsequently obtaining the user verification information and using the user verification information. Line decryption ensures the security of the user authentication information during the payment transmission process.

S305. The service terminal sends a service request to the service server, where the service request includes service information and the user verification information.

The service terminal sends a service request to the service server, where the service request may include service information and the user verification information, etc., the service request may be a payment request, and the service information may include a transaction order and a payment amount, etc. The information may also include login information such as a login account and a login password for logging in to the service server using the user account, and the like.

S306. The service server performs verification on the received user authentication information, and if the verification succeeds, performs service processing on the service request.

Specifically, the user authentication information obtained by the service terminal from the wearable device may be the authentication information that is encrypted by using the preset user private key, and the service server may use the user public key pair corresponding to the user to be encrypted. The user authentication information is decrypted, and the decrypted user verification information is verified according to the pre-stored reference user verification information. If the verification is successful, the service request is processed, that is, the service information in the service request is passed. (such as transaction orders, payment amount and other information), for subsequent business processing (such as online payment processing, etc.); if the verification fails, the business server can directly reject the current business request.

In an implementation, after receiving the service request sent by the service terminal, the service server may decrypt the encrypted user verification information by using the user public key corresponding to the user, and obtain the decrypted user verification information, and then the service server. The user verification information carried in the service request may be extracted and compared with the reference user verification information pre-stored in the service server. If the user verification information in the service request is the same as the pre-stored reference user verification information, the verification success may be determined. At this time, the service server may perform service processing on the service request, otherwise the verification fails. At this time, the service server may refuse to respond to the service request.

The wearable device of the embodiment checks the third-party authentication information of the service server sent by the service terminal, and if the verification succeeds, sends the user verification information to the service terminal, and the further service terminal sends a service request to the service server, where the service is sent. The request includes the service information and the user verification information, so that the service server checks the user verification information, and if the verification is successful, the The service request is processed by the service, and the third-party verification information of the service server and the verification information stored in the user's wearable device can be used for verification, so that the service processing for the service request is more secure and convenient.

4 is a schematic flowchart of a security verification method in another embodiment of the present invention. The security verification method described in this embodiment is described in detail by using an online payment process as an example, mainly from a wearable device, a service terminal, and a service server. The service terminal in this embodiment is a payment terminal, and the service server is a payment server. As shown in FIG. 4, the security verification method in this embodiment may include the following steps:

S401. The payment terminal performs a Bluetooth device search to establish a Bluetooth connection with the wearable device.

The payment terminal can perform a Bluetooth device search to establish a Bluetooth connection with a user's wearable device such as a smart bracelet, a smart wristband, a smart watch, smart glasses, or various smart accessory devices, wherein the payment terminal can be a personal computer or a tablet. Computer, smart phone, e-reader or car terminal.

Specifically, the wearable device has enabled the Bluetooth function, that is, in a searchable state, when the user initiates an online payment request through the payment terminal, the payment terminal may perform a Bluetooth device search and perform Bluetooth pairing with the wearable device. Thereby establishing a Bluetooth connection with the wearable device. Optionally, the payment terminal may also establish a Bluetooth connection with the wearable device according to a Bluetooth identification code of the wearable device pre-stored in the payment terminal.

S402. The payment terminal acquires the device identifier of the wearable device from the wearable device by using the Bluetooth connection.

After the payment terminal establishes a Bluetooth connection with the wearable device, the device identifier of the wearable device may be obtained from the wearable device by using the Bluetooth connection, where the device identifier uniquely identifies the wearable device, and may be the wearable device Identification code, etc.

S403. The payment terminal sends the device identifier of the wearable device to a payment server.

S404. The payment server performs binding verification according to the device identifier of the wearable device and the identifier information of the payment terminal.

The payment server may perform binding verification according to the device identifier of the received wearable device and the identification information of the payment terminal. If the verification is passed, the payment server may determine that the payment terminal is a terminal commonly used by the user, and then perform the The payment terminal sends a device relationship confirmation information processing process; if the verification fails, the payment server may refuse to send the device relationship to the payment terminal. Recognize information. The identification information of the payment terminal may be a login account of the login payment server, and may be an identity identification code of the payment terminal. Optionally, the identifier information may also be a login account of the login payment server. The identification information of the payment terminal may be the identification information that is sent to the payment server when the payment device sends the device identifier of the wearable device. Optionally, the online payment is used as an example, and the identifier information of the payment terminal may also be in the service terminal. At any time after logging in to the service server, the service server obtains the identification information of the service terminal from the service terminal.

Optionally, before the user initiates the service request by using the service terminal, the service terminal may send the binding request information to the service server, where the binding request information may carry the device identifier of the wearable device and the identification information of the service terminal, so that the service server Establishing a binding relationship between the wearable device and the service terminal, for example, the user may send the registration request information to the payment server by using the payment terminal, where the registration request information may carry the device identifier of the wearable device and the identification information of the service terminal. The payment server performs registration processing on the registration request information to associate the wearable device with the payment terminal. Further, the service server may establish a binding between the wearable device and the multiple payment terminals according to the binding request information, that is, the service server may set multiple common service terminals for the user.

S405. Send the device relationship confirmation information to the payment terminal if the verification is passed.

And if the binding verification of the device identifier and the identifier information of the payment terminal is passed, the payment server may send the device relationship confirmation information to the payment terminal, where the device relationship confirmation information may be determining the wearable device and The payment terminal is information of a binding relationship.

S406. The payment terminal acquires third-party verification information of the payment server.

After receiving the device relationship confirmation information sent by the payment server, the payment terminal may further obtain third-party verification information of the payment server, where the third-party verification information may include a digital certificate or a password, password, and the like for verification. Preferably, the third-party verification information obtained by the payment terminal from the payment server may be the verification information that the payment server encrypts using the third-party private key, and the payment terminal cannot decrypt the third-party verification information, thereby ensuring the The security of the three-party authentication information in the payment transmission process.

S407. The payment terminal sends third-party verification information of the payment server to the wearable device.

The payment terminal can set the obtained payment server by establishing a Bluetooth connection The three-party authentication information is sent to the wearable device.

S408. The wearable device decrypts and verifies the third-party verification information by using a third-party public key.

After receiving the third-party verification information sent by the payment terminal, the wearable device may perform verification on the third-party verification information, and if the verification is successful, perform a process of sending user verification information to the payment terminal; If the verification is unsuccessful, the wearable device may refuse to send the user authentication information to the payment terminal.

Specifically, the third party authentication information obtained by the payment terminal from the service server may be encrypted by using the third party private key, and the wearable device may use the third party corresponding to the payment server. The key decrypts the encrypted third-party verification information, and verifies the decrypted third-party verification information according to the pre-stored reference third-party verification information.

In an implementation, after receiving the third-party verification information sent by the payment terminal, the wearable device may decrypt the encrypted third-party verification information by using a third-party public key corresponding to the payment server, and obtain the decrypted Third-party verification information, and then the payment server can compare the decrypted third-party verification information with the pre-stored third-party verification information in the payment server, if the decrypted third-party verification information and the pre-stored reference third party If the verification information is the same, you can confirm that the verification is successful, otherwise the verification fails.

S409. If the verification of the third-party verification information by the wearable device is successful, send the user verification information to the payment terminal.

If the verification of the third-party verification information by the wearable device is successful, the user verification information may be sent to the payment terminal through the data connection, where the user verification information may include a password of the user digital certificate or other user payment verification. , password and other information. Preferably, the user authentication information obtained by the payment terminal from the wearable device may be that the wearable device encrypts according to the preset user private key. Optionally, the obtained user verification information may also be After the service terminal encrypts or encrypts the service server, and then stores the verification information in the wearable device, the payment terminal cannot decrypt the user verification information in the process of acquiring the user verification information and using the user verification information. The security of the user authentication information during the payment transmission process.

S410. The payment terminal sends a payment request to the payment server, where the payment request includes payment information and the user verification information, and carries the device relationship confirmation information.

The payment terminal sends a payment request to the payment server, where the payment request may include payment information and the user verification information, etc., and the payment information may be a transaction order, a payment amount, and the like.

S411. The payment server performs verification on the received user verification information, and if the verification is successful, performs payment processing on the payment request.

After receiving the payment request sent by the payment terminal, the payment server may verify the user verification information in the payment request, and if the verification is successful, perform payment processing on the payment request.

Specifically, the user authentication information obtained by the payment terminal from the wearable device may be the authentication information encrypted by the preset user private key, and the payment server may encrypt the user public key corresponding to the user. The user authentication information is decrypted, and the decrypted user verification information is verified according to the pre-stored reference user verification information. If the verification is successful, the payment request is processed, that is, the service information in the service request is passed. (such as transaction orders, payment amount and other information), for subsequent business processing (such as online payment processing, etc.). If the verification fails, the payment server can directly reject the payment request.

Optionally, the device may also carry the device relationship confirmation information, and the corresponding process may be: the payment server performs verification on the received user verification information and the device relationship confirmation information, and if the verification is successful, The payment request performs business processing.

In an implementation, after receiving the payment request sent by the payment terminal, the payment server may decrypt the encrypted user verification information by using the user public key corresponding to the user, and obtain the decrypted user verification information, and then the payment server. The device relationship confirmation information carried in the payment request may be extracted, and the device relationship confirmation information pre-stored in the payment server is searched for, and if the device relationship confirmation information in the payment request is found, the wearable device and the payment terminal may be determined. The binding relationship is established. At this time, the payment server can extract the user verification information carried in the payment request, and compare with the pre-stored reference user verification information in the payment server, if the user verification information in the payment request and the pre-stored reference If the user authentication information is the same, the verification succeeds. At this time, the payment server may perform service processing on the payment request, otherwise the verification fails. At this time, the payment server may refuse to respond to the payment request.

The payment terminal of the embodiment establishes a Bluetooth connection with the wearable device of the user, and sends the device identifier of the wearable device acquired through the Bluetooth connection to the payment server, and then the payment server according to the device of the wearable device Identification and payment terminal identification information return device relationship confirmation The information, the wearable device checks the third-party verification information of the payment server sent by the payment terminal, and if the verification succeeds, sends the user verification information to the payment terminal, and the further payment terminal sends a payment request to the payment server, where the payment request is And including the payment information and the user verification information, and carrying the device relationship confirmation information, so that the payment server checks the user verification information and the device relationship confirmation information, and if the verification is successful, the payment is performed. The payment processing is requested, and the payment verification by using the third-party verification information of the payment server and the verification information stored in the user's wearable device makes the online payment more secure and convenient.

FIG. 5 is a schematic structural diagram of a service terminal according to an embodiment of the present invention. The service terminal in the embodiment of the present invention may include an Internet device such as a personal computer, a tablet computer, a smart phone, an e-reader, and an in-vehicle terminal, and may use the user. The account is logged in to the service server to perform the online payment service. As shown in the figure, the service terminal 500 in this embodiment may include:

The first receiving unit 510 is configured to acquire user authentication information pre-stored in the wearable device from a wearable device of the user by using a short-range communication manner, where the wearable device may include a smart bracelet, a smart wristband, and an intelligent device. The user authentication information may include a user digital certificate or a password, a password, and the like of the user's payment verification, such as a watch, smart glasses, or various smart accessories devices.

In a specific implementation, the service terminal may initiate a short-distance communication connection with the wearable device according to the payment instruction input by the user, which may be a Bluetooth connection, a NFC (Near Field Communication) connection, etc., for example, when the user clicks After confirming the payment, the service terminal turns on the Bluetooth function and performs the Bluetooth device search. The user wearable device keeps the Bluetooth enabled state by default, and the Bluetooth connection with the wearable device can be automatically established after the service terminal searches for the user's wearable device. After the service terminal establishes the near-field communication with the wearable device, the first receiving unit 510 can obtain the user verification information pre-stored in the wearable device from the wearable device by using the established short-range communication connection. The user authentication information may include a user digital certificate or a password, a password, and the like of other user payment verification. Preferably, the user authentication information obtained by the service terminal from the wearable device may be that the wearable device encrypts according to the preset user private key. Optionally, the obtained user verification information may also be in advance. After the service terminal encrypts or encrypts the service server, and further stores the verification information in the wearable device, the service terminal cannot decrypt the user verification information in the process of acquiring the user verification information and using the user verification information. Guaranteed the user's test The security of the information in the payment transmission process.

The second sending unit 520 is configured to send a service request to the service server, where the service request includes the service information and the user verification information received by the first receiving unit 510, so that the service server verifies the user information. The verification is performed. If the verification is successful, the service server performs service processing on the service request.

The service request may be a payment request, and the service information may include payment information such as a transaction order and a payment amount, and may also include login information such as a login account and a login password for logging in to the service server using the user account. and many more.

In an optional embodiment, the first receiving unit 510 is further configured to perform short-range communication before acquiring user authentication information pre-stored in the wearable device from the wearable device of the user by using the short-range communication manner. Obtaining a device identifier of the wearable device, where the device identifier uniquely identifies the wearable device, and may be an identifier of the wearable device, and the like;

The second sending unit 520 is further configured to send the device identifier of the wearable device acquired by the first receiving unit 510 to the service server, so that the service server according to the device identifier and the service The identification information of the terminal is verified by binding;

The identification information of the service terminal may be the same as the service terminal, and may be an identity identification code of the service terminal. Optionally, the identifier information may also be a login account of the login service server. The identification information of the service terminal may be the identification information that is sent to the service server when the service terminal sends the device identifier of the wearable device. Optionally, the online payment is used as an example, and the identification information of the service terminal may also be in the service terminal. At any time after logging in to the service server, the service server obtains the identification information of the service terminal from the service terminal.

The service terminal 500 further includes:

The second receiving unit 530 is configured to obtain device relationship confirmation information from the service server when the binding verification by the service server is passed;

The service request further includes the device relationship confirmation information, and the second sending unit 520 is further configured to send, to the service server, a service request that carries the device relationship confirmation information received by the second receiving unit 530. The service server performs verification on the user authentication information and the device relationship confirmation information, and if the verification is successful, performs service processing on the service request.

In an optional embodiment, the service terminal 500 further includes:

a first sending unit 540, configured to send third-party verification information of the service server to the wearable device by using a short-range communication manner, so that the wearable device performs verification on the third-party verification information, where The third-party verification information may include a digital certificate or a password, a password, and the like for verifying the verification;

The first receiving unit 510 acquires the user verification information from the wearable device by using a close communication method when the wearable device successfully verifies the third party verification information.

In an optional embodiment, the first sending unit 540 sends the third-party authentication information to the wearable device to be encrypted by using the third-party private key by the service server;

Further, the verifying, by the wearable device, the third-party verification information includes:

The wearable device decrypts the encrypted third-party verification information by using a third-party public key corresponding to the service server, and performs verification on the decrypted third-party verification information according to the pre-stored reference third-party verification information. .

In an optional embodiment, the first receiving unit 510 acquires user authentication information pre-stored in the wearable device from the user's wearable device as authentication information encrypted by the user private key, where the user verification information The information may be encrypted by the wearable device according to the preset user private key, or may be verified by the service terminal encryption or the service server, and then stored in the wearable device, and the service terminal 500 obtains the user verification subsequently. The information and the use of the user verification information cannot decrypt the user verification information, thereby ensuring the security of the user verification information in the payment transmission process;

Further, the verifying, by the service server, the user verification information includes:

The service server decrypts the encrypted user verification information by using the user public key corresponding to the user, and performs verification of the decrypted user verification information according to the pre-stored reference user verification information.

In an optional embodiment, the service terminal further includes:

a Bluetooth search unit 550, configured to perform a Bluetooth device search, thereby establishing a Bluetooth connection with the wearable device;

Specifically, the wearable device has enabled the Bluetooth function by default, that is, when the user can initiate the online service request through the service terminal, the Bluetooth search unit 550 can perform the Bluetooth device search and perform the Bluetooth device search with the wearable device. Bluetooth pairing to establish a Bluetooth connection with the wearable device Alternatively, the Bluetooth search unit 550 can also establish a Bluetooth connection with the wearable device according to the Bluetooth identification code of the wearable device pre-stored in the payment terminal.

The service terminal of the embodiment obtains user authentication information pre-stored in the wearable device from the wearable device of the user, and sends a service request to the service server, where the service request includes the service information and the user verification information. In order to enable the service server to verify the user verification information, if the verification is successful, perform service processing on the service request, and perform verification by using the verification information stored in the user's wearable device, so that Business processing of business requests is safer and more convenient.

FIG. 6 is a schematic structural diagram of a service terminal according to another embodiment of the present invention. As shown in FIG. 6, the service terminal 600 may include: at least one processor 601, such as a CPU, at least one network interface 603, a memory 604, and a communication bus. 602. Among them, the communication bus 602 is used to implement connection communication between these components. The first network interface 603 of the service terminal 600 in the embodiment of the present invention may include a standard wired interface, a wireless interface (such as a WI-FI interface), and is used for communicating with a server through the Internet, and the second network interface 605 may be a close communication. A network interface, such as a Bluetooth connection interface or an NFC interface, for communicating with the wearable device. The memory 604 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. The memory 604 can optionally also be at least one storage device located remotely from the aforementioned processor 601. A set of program codes is stored in the memory 604, and the processor 601 is configured to call the program code stored in the memory 604 for performing the following operations:

Acquiring user authentication information pre-stored in the wearable device from the wearable device of the user through the second network interface 605, the short-range communication manner may include a Bluetooth connection or NFC, etc., for example, when the user clicks After the "confirm payment", the service terminal turns on the Bluetooth function and performs the Bluetooth device search. The user wearable device keeps the Bluetooth enabled state by default, and the Bluetooth connection with the wearable device can be automatically established after the service terminal searches for the user's wearable device;

Sending a service request to the service server by using the first network interface 603, where the service request includes the service information and the user verification information, so that the service server checks the user verification information, and if the verification succeeds, The service server performs business processing on the service request.

In an alternative embodiment, the processor 601 invoking the program code stored in the memory 604 may also perform the following operations:

Acquiring the device identifier of the wearable device before acquiring the user verification information pre-stored in the wearable device from the wearable device of the user by using the second network interface 605;

Sending, by the first network interface 603, the device identifier of the wearable device to the service server, so that the service server performs binding verification according to the device identifier and the identifier information of the service terminal, and if the verification is passed, The service terminal obtains the device relationship confirmation information from the service server, where the identification information of the service terminal can uniquely identify the service terminal, and can be an identity identification code of the service terminal, etc., optionally, the identifier The information can also be the login account of the login service server. The identification information of the service terminal may be the identification information that is sent to the service server when the service terminal sends the device identifier of the wearable device. Optionally, the online payment is used as an example, and the identification information of the service terminal may also be in the service terminal. The service server obtains the identification information of the service terminal from the service terminal at any time after the login to the service server;

When the service request is sent to the service server by using the first network interface 603, the device relationship confirmation information is carried, so that the service server checks the user verification information and the device relationship confirmation information, and if both are verified Upon success, the business request is processed.

In an alternative embodiment, the processor 601 calls the program code stored in the memory 604 to obtain the user verification information pre-stored in the wearable device from the wearable device of the user through the second network interface 605, specifically:

Obtaining the third-party verification information of the service server by using the first network interface 603, and sending the third-party verification information of the service server to the wearable device through the second network interface 605, so that the wearable device is The third-party verification information is verified, and if the verification is successful, the user verification information is obtained from the wearable device through the second network interface 605.

Before the user authentication information pre-stored in the wearable device is acquired from the wearable device of the user through the second network interface 605, a Bluetooth device search is performed to establish a Bluetooth connection with the wearable device.

Specifically, the service terminal introduced in this embodiment may be used to implement some or all of the processes in the security verification method embodiment introduced in the foregoing with reference to FIG. 1 to FIG.

7 is a schematic structural diagram of a wearable device according to an embodiment of the present invention. The wearable device can be directly worn on a user or a portable device integrated into a user's clothes or accessories, and can include a smart bracelet. The smart wristband, the smart watch, the smart glasses, and the various smart accessories devices, as shown in the figure, the wearable device 700 in this embodiment may include:

The sending unit 710 is configured to send the user verification information pre-stored in the wearable device to the service terminal by using a short-range communication manner, so that the service terminal sends a service request to the service server, where the service request may be Including the service information and the user verification information, the service information may include payment information such as a transaction order and a payment amount, and may also include login information such as a login account and a login password for logging in to the service server using a user account. The user authentication information may include a user digital certificate or a password, a password, and the like of the user payment verification, and the service server performs verification on the user verification information, and if the verification succeeds, performs service on the service request. deal with.

In an optional embodiment, the sending unit 710 is further configured to send the user verification information pre-stored in the wearable device to the service terminal by using a short-range communication manner. The service terminal sends the device identifier of the wearable device, where the device identifier uniquely identifies the wearable device, and may be an identifier of the wearable device, etc., so that the service terminal will be the wearable device The device identifier is sent to the service server, and the service server performs binding verification according to the device identifier and the identification information of the service terminal, and if the verification succeeds, sends device relationship confirmation information to the service terminal, where the service terminal When the service request is sent to the service server, the device relationship confirmation information is carried, so that the service server checks the user verification information and the device relationship confirmation information, and if the verification is successful, the service is Request for business processing.

In an optional embodiment, the wearable device 700 further includes:

The receiving unit 720 is configured to obtain third-party verification information of the service server that is sent by the service terminal by using a short-distance communication method, where the third-party verification information may include a digital certificate or a password, a password, and the like for verifying the payment;

The verification unit 730 is configured to check the third-party verification information. If the verification is successful, the sending unit 710 is notified to send the user verification information to the service terminal by using a short-range communication manner.

In an optional embodiment, the third-party authentication information is encrypted by using the third-party private key by the service server;

The verification unit 730 is configured to decrypt the encrypted third-party verification information by using a third-party public key corresponding to the service server, and decrypt the obtained third-party verification information according to the pre-stored reference third-party verification information. Check it out.

The wearable device of the embodiment may send user authentication information to the service terminal, so that the service server checks the user authentication information sent by the service terminal, and if the verification succeeds, performs service on the service request sent by the service terminal. Processing makes the process of business processing safer and more convenient.

FIG. 8 is a schematic structural diagram of a wearable device according to another embodiment of the present invention. As shown in FIG. 8, the wearable device 800 may include: at least one processor 801, such as a CPU, at least one network interface 803, and a memory 804. Communication bus 802. Among them, the communication bus 802 is used to implement connection communication between these components. The network interface 803 of the wearable device 800 in the embodiment of the present invention may include a short-range communication network interface for communicating with the server through the Internet. The memory 804 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. The memory 804 can also optionally be at least one storage device located remotely from the aforementioned processor 801. A set of program codes is stored in the memory 804, and the processor 801 is configured to call the program code stored in the memory 804 for performing the following operations:

Transmitting, by the network interface 803, the user authentication information pre-stored in the wearable device to the service terminal in a short-range communication manner, so that the service terminal sends a service request to the service server, where the service request may include service information. And the user verification information and the like, the service server checks the user verification information, and if the verification is successful, performs service processing on the service request.

In an alternative embodiment, the processor 801 invoking the program code stored in the memory 804 may also perform the following operations:

Before the user authentication information pre-stored in the wearable device is sent to the service terminal by using the network interface 803, the device identifier of the wearable device is sent to the service terminal in a short-distance communication manner, so that The service terminal sends the device identifier of the wearable device to the service server, and the service server performs binding verification according to the device identifier and the identification information of the service terminal, and if the verification passes, the service is sent to the service. The terminal sends device relationship confirmation information, When the service terminal sends a service request to the service server, the device relationship confirmation information is carried, so that the service server checks the user verification information and the device relationship confirmation information, and if the verification is successful, the device The business request is for business processing.

In an alternative embodiment, the processor 801 calls the program code stored in the memory 804 to send the user verification information pre-stored in the wearable device to the service terminal through the network interface 803, which is specifically:

Obtaining third-party verification information of the service server sent by the service terminal by using the network interface 803 in a short-distance communication manner;

The third-party verification information is verified by the network interface 803. If the verification is successful, the pre-stored user verification information is sent to the service terminal in a short-distance communication manner.

In an optional embodiment, the third-party verification information is encrypted by using the third-party private key by the service server, and the processor 801 performs verification on the third-party verification information, specifically:

The encrypted third-party authentication information is decrypted by using a third-party public key corresponding to the service server, and the decrypted third-party verification information is verified according to the pre-stored reference third-party verification information.

Specifically, the wearable device introduced in this embodiment may be used to implement some or all of the processes in the security verification method embodiment introduced in the foregoing with reference to FIG. 1 to FIG.

FIG. 9 is a schematic structural diagram of a security verification system according to an embodiment of the present invention. As shown in FIG. 9, the security verification system in the embodiment of the present invention includes a service terminal 901, a wearable device 902, and a service server 903, where:

The service terminal 901 communicates with the wearable device 902 in a short-range communication manner, and is configured to acquire, from the wearable device 902, user authentication information pre-stored in the wearable device 902, to the service server. 903: Send a service request, where the service request includes service information and the user verification information;

The service server 903 is configured to perform verification on the user verification information, and if the verification is successful, perform service processing on the service request.

In an optional embodiment, the service terminal 901 is further configured to acquire the wearable before acquiring the user verification information pre-stored in the wearable device 902 from the wearable device 902 of the user. The device identifier of the device 902, the device identifier of the wearable device 902 is sent to the service server 903;

The service server 903 is further configured to perform binding verification according to the device identifier and the identifier information of the service terminal, and send the device relationship confirmation information to the service terminal 901 if the verification succeeds;

The service terminal 901 carries the device relationship confirmation information when the service request is sent to the service server 903, and the service server 903 checks the user verification information and the device relationship confirmation information. Then, the business request is processed.

In an optional embodiment, the obtaining, by the service terminal 901, the user verification information pre-stored in the wearable device 902 from the wearable device 902 of the user includes:

The service terminal 901 acquires the third party verification information of the service server 903 and sends the third party verification information of the service server 903 to the wearable device 902;

The wearable device 902 is configured to check the third-party verification information, and if the verification is successful, send the pre-stored user verification information to the service terminal 901.

In an optional embodiment, the third-party authentication information sent by the service terminal 901 to the wearable device 902 is encrypted by using the third-party private key by the service server 903;

The verification of the third-party verification information by the wearable device 902 includes:

The wearable device 902 decrypts the encrypted third-party verification information by using a third-party public key corresponding to the service server 903, and performs decrypted third-party verification information according to the pre-stored reference third-party verification information. check.

In an optional embodiment, the service terminal 901 obtains user authentication information pre-stored in the wearable device 902 from the wearable device 902 of the user as being encrypted by the user private key;

The verifying the user verification information by the service server 903 includes:

The service server 903 decrypts the encrypted user verification information by using the user public key corresponding to the user, and verifies the decrypted user verification information according to the pre-stored reference user verification information.

In an alternative embodiment, the short-range communication mode may include a Bluetooth connection or NFC, etc., for example, after the user clicks “confirm payment”, the service terminal turns on the Bluetooth function and performs a Bluetooth device search, and the user wearable device keeps the Bluetooth by default. In the on state, the Bluetooth connection to the wearable device can be automatically established after the service terminal searches for the user's wearable device.

In an optional embodiment, the service terminal 901 is further configured to perform a Bluetooth device search before acquiring the user verification information pre-stored in the wearable device 902 from the wearable device 902 of the user, thereby The wearable device 902 establishes a Bluetooth connection.

The service server of the embodiment can verify the user authentication information stored in the wearable device of the user sent by the service terminal, and if the verification succeeds, perform service processing on the service request sent by the service terminal, so that the process of the service processing is further Safe and convenient.

FIG. 10 is a schematic structural diagram of a secure payment system according to an embodiment of the present invention. As shown in FIG. 10, the security verification system in the embodiment of the present invention includes a payment terminal 1001, a wearable device 1002, and a payment server 1003, where:

The payment terminal 1001 communicates with the wearable device 1002 in a short-range communication manner, and is configured to acquire, from the wearable device 1002, user authentication information pre-stored in the wearable device 1002, to the payment server. 1003. Send a payment request, where the payment request includes payment information and the user verification information;

The payment server 1003 is configured to check the user verification information, and if the verification is successful, perform payment processing on the payment request.

In an optional embodiment, the payment terminal 1001 is configured to acquire the device of the wearable device 1002 before acquiring the user verification information pre-stored in the wearable device 1002 from the wearable device 1002 of the user. Identifying, sending the device identifier of the wearable device 1002 to the payment server 1003;

The payment server 1003 is further configured to perform binding verification according to the device identifier and the identifier information of the payment terminal, and send the device relationship confirmation information to the payment terminal 1001 if the verification succeeds;

The payment terminal 1001 carries the device relationship confirmation information when the payment request is sent to the payment server 1003, and the payment server 1003 checks the user verification information and the device relationship confirmation information. Then, payment processing is performed on the payment request.

In an optional embodiment, the obtaining, by the payment terminal 1001, the user verification information pre-stored in the wearable device 1002 from the wearable device 1002 of the user includes:

The payment terminal 1001 obtains the third party verification information of the payment server 1003 and sends the third party verification information of the payment server 1003 to the wearable device 1002;

The wearable device 1002 is configured to check the third-party verification information, and if the verification is successful, send the pre-stored user verification information to the payment terminal 1001.

In an optional embodiment, the third-party verification information sent by the payment terminal 1001 to the wearable device 1002 is encrypted by the payment server 1003 using a third-party private key;

The verification of the third-party verification information by the wearable device 1002 includes:

The wearable device 1002 decrypts the encrypted third-party verification information by using a third-party public key corresponding to the payment server 1003, and performs decrypted third-party verification information according to the pre-stored reference third-party verification information. check.

In an optional embodiment, the payment terminal 1001 obtains user authentication information pre-stored in the wearable device 1002 from the wearable device 1002 of the user as being encrypted by the user private key;

The verifying, by the payment server 1003, the user verification information includes:

The payment server 1003 decrypts the encrypted user verification information by using the user public key corresponding to the user, and verifies the decrypted user verification information according to the pre-stored reference user verification information.

In an optional embodiment, the payment terminal 1001 is further configured to perform a Bluetooth device search before acquiring the user verification information pre-stored in the wearable device 1002 from the wearable device 1002 of the user, thereby The wearable device 1002 establishes a Bluetooth connection.

The payment server of the embodiment can verify the user verification information stored in the wearable device of the user sent by the payment terminal, and if the verification succeeds, perform payment processing on the payment request sent by the payment terminal, so that the online payment is safer and more convenient. .

Please refer to FIG. 11 , which is a schematic structural diagram of a service terminal according to an embodiment of the present application. The service terminal may be used to implement the security verification method provided in the foregoing embodiment. Specifically:

The service terminal 2000 may include a communication unit 2110, a memory 2120 including one or more computer readable storage media, an input unit 2130, a display unit 2140, a sensor 2150, an audio circuit 2160, and a WIFI (Wireless Fidelity) module 2170. Including one or One or more processing core processor 2180, and power supply 2190 and other components. It will be understood by those skilled in the art that the service terminal structure shown in the figure does not constitute a limitation of the service terminal, and may include more or less components than those illustrated, or a combination of certain components, or different component arrangements. among them:

The communication unit 2110 can be used for transmitting and receiving information or receiving and transmitting signals during a call. The communication unit 2110 can be an RF (Radio Frequency) circuit, a router, a modem, or the like. Specifically, when the communication unit 2110 is an RF circuit, the downlink information of the base station is received, and then processed by one or more processors 2180; in addition, data related to the uplink is transmitted to the base station. Generally, RF circuits as communication units include, but are not limited to, an antenna, at least one amplifier, a tuner, one or more oscillators, a Subscriber Identity Module (SIM) card, a transceiver, a coupler, and a LNA (Low Noise Amplifier, low). Noise amplifier), duplexer, etc. In addition, the communication unit 2110 can also communicate with the network and other devices through wireless communication. The wireless communication may use any communication standard or protocol, including but not limited to GSM (Global System of Mobile communication), GPRS (General Packet Radio Service), CDMA (Code Division Multiple Access). , Code Division Multiple Access), WCDMA (Wideband Code Division Multiple Access), LTE (Long Term Evolution), e-mail, SMS (Short Messaging Service), and the like. The memory 2120 can be used to store software programs and modules, and the processor 2180 executes various functional applications and data processing by running software programs and modules stored in the memory 2120. The memory 2120 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function (such as a sound playing function, an image playing function, etc.), and the like; the storage data area may be stored according to Data created by the use of the business terminal 2000 (such as audio data, phone book, etc.). Moreover, memory 2120 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device. Accordingly, the memory 2120 can also include a memory controller to provide access to the memory 2120 by the processor 2180 and the input unit 2130.

The input unit 2130 can be configured to receive input numeric or character information and to generate keyboard, mouse, joystick, optical or trackball signal inputs related to user settings and function controls. Preferably, the input unit 2130 can include a touch-sensitive surface 2131 as well as other input devices 2132. Touch-sensitive surface 2131, also referred to as a touch display or trackpad, can collect touch operations on or near the user (eg, the user uses a finger, stylus, etc., on any suitable object or accessory on touch-sensitive surface 2131 or The operation near the touch-sensitive surface 2131) and driving the corresponding connecting device according to a preset program. Optional The sensitive surface 2131 can include two portions of a touch detection device and a touch controller. Wherein, the touch detection device detects the touch orientation of the user, and detects a signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts the touch information into contact coordinates, and sends the touch information. The processor 2180 is provided and can receive commands from the processor 2180 and execute them. In addition, the touch sensitive surface 2131 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic waves. In addition to the touch-sensitive surface 2131, the input unit 2130 can also include other input devices 2132. Preferably, other input devices 2132 may include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control buttons, switch buttons, etc.), trackballs, mice, joysticks, and the like.

The display unit 2140 can be used to display information entered by the user or information provided to the user and various graphical user interfaces of the service terminal 2000, which can be composed of graphics, text, icons, video, and any combination thereof. The display unit 2140 may include a display panel 2141. Alternatively, the display panel 2141 may be configured in the form of an LCD (Liquid Crystal Display), an OLED (Organic Light-Emitting Diode), or the like. Further, the touch-sensitive surface 2131 can cover the display panel 2141, and when the touch-sensitive surface 2131 detects a touch operation thereon or nearby, it is transmitted to the processor 2180 to determine the type of the touch event, and then the processor 2180 according to the touch event The type provides a corresponding visual output on the display panel 2141. Although in the illustration, touch-sensitive surface 2131 and display panel 2141 are implemented as two separate components to implement input and input functions, in some embodiments, touch-sensitive surface 2131 can be integrated with display panel 2141 for input. And output function.

The service terminal 2000 can also include at least one type of sensor 2150, such as a light sensor, motion sensor, and other sensors. The light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 2141 according to the brightness of the ambient light, and the proximity sensor may close the display panel 2141 and/or when the service terminal 2000 moves to the ear. Backlighting. As a kind of motion sensor, the gravity acceleration sensor can detect the magnitude of acceleration in all directions (usually three axes). When it is stationary, it can detect the magnitude and direction of gravity. It can be used to identify the gesture of the mobile phone (such as horizontal and vertical screen switching, related Game, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tapping), etc.; as for the business terminal 2000 can also be configured with gyroscopes, barometers, hygrometers, thermometers, infrared sensors and other sensors, here No longer.

An audio circuit 2160, a speaker 2161, and a microphone 2162 can provide an audio interface between the user and the service terminal 2000. The audio circuit 2160 can transmit the converted electrical data of the received audio data to the speaker 2161, and convert it into a sound signal output by the speaker 2161; on the other hand, the microphone 2162 The collected sound signal is converted into an electrical signal, which is received by the audio circuit 2160 and converted into audio data, and then processed by the audio data output processor 2180, sent to the other service terminal via the RF circuit 2110, or output the audio data. To memory 2120 for further processing. The audio circuit 2160 may also include an earbud jack to provide communication of the peripheral earphones with the service terminal 2000.

In order to implement wireless communication, the service terminal may be configured with a wireless communication unit 2170, which may be a WIFI module. WIFI is a short-range wireless transmission technology. The service terminal 2000 can help users to send and receive emails, browse web pages, and access streaming media through the wireless communication unit 2170, which provides wireless broadband Internet access for users. Although the wireless communication unit 2170 is shown in the drawing, it can be understood that it does not belong to the essential configuration of the service terminal 2000, and may be omitted as needed within the scope of not changing the essence of the disclosure.

The processor 2180 is the control center of the service terminal 2000, which connects various portions of the entire handset using various interfaces and lines, by running or executing software programs and/or modules stored in the memory 2120, and recalling data stored in the memory 2120. The various functions and processing data of the service terminal 2000 are executed to perform overall monitoring of the mobile phone. Optionally, the processor 2180 may include one or more processing cores; preferably, the processor 2180 may integrate an application processor and a modem processor, where the application processor mainly processes an operating system, a user interface, an application, and the like. The modem processor primarily handles wireless communications. It can be understood that the above modem processor may not be integrated into the processor 2180.

The service terminal 2000 further includes a power source 2190 (such as a battery) for supplying power to various components. Preferably, the power source can be logically connected to the processor 2180 through a power management system to manage functions such as charging, discharging, and power management through the power management system. . The power supply 2190 may also include any one or more of a DC or AC power source, a recharging system, a power failure detection circuit, a power converter or inverter, a power status indicator, and the like.

Although not shown, the service terminal 2000 may further include a camera, a Bluetooth module, and the like, and details are not described herein. In this embodiment, the service terminal includes a memory, and one or more programs, wherein one or more programs are stored in the memory and configured to execute the one or more programs by one or more processors Instructions for doing the following:

Sending a service request to the service server, where the service request includes service information and the user verification information, so that the service server performs verification on the user verification information, and if the verification succeeds, The service server performs business processing on the service request.

Optionally, before the obtaining the user verification information pre-stored in the wearable device from the wearable device of the user by using the short-range communication manner, the method further includes:

Acquiring the device identifier of the wearable device by using a short-range communication method;

Sending the device identifier of the wearable device to the service server, so that the service server performs binding verification according to the device identifier and the local identifier information, and if the verification succeeds, obtains the device relationship confirmation from the service server. information;

The sending a service request to the service server includes:

Sending, by the service server, a service request carrying the device relationship confirmation information, so that the service server checks the user verification information and the device relationship confirmation information, and if the verification is successful, the service request is performed. Conduct business processing.

Optionally, the obtaining the user verification information pre-stored in the wearable device from the wearable device of the user by using the short-range communication manner includes:

Obtaining third-party verification information of the service server, and sending the third-party verification information of the service server to the wearable device by using a short-range communication manner, so that the wearable device performs the third-party verification information If the verification is successful, the pre-stored user verification information is obtained from the wearable device by using the short-range communication method.

Optionally, the short-range communication mode includes a Bluetooth mode or an NFC mode.

A Bluetooth device search is performed to establish a Bluetooth connection with the wearable device.

Please refer to FIG. 12 , which is a schematic structural diagram of a wearable device according to an embodiment of the present application. The wearable device can be used to implement the security verification method provided in the foregoing embodiment. Specifically:

The wearable device 3000 can include a communication unit 3110 including one or more computers A memory 3120 of a readable storage medium, an input unit 3130, a display unit 3140, a sensor 3150, an audio circuit 3160, a WIFI (Wireless Fidelity) module 3170, a processor 3180 including one or more processing cores, and a power supply 3190 and other components. It will be understood by those skilled in the art that the wearable device structure shown in the drawings does not constitute a limitation on the wearable device, may include more or less components than the illustration, or combine some components, or different component arrangements. . among them:

The communication unit 3110 can be used for transmitting and receiving information and receiving and transmitting signals during a call. The communication unit 3110 can be an RF (Radio Frequency) circuit, a router, a modem, or the like. Specifically, when the communication unit 3110 is an RF circuit, the downlink information of the base station is received, and then processed by one or more processors 3180; in addition, data related to the uplink is transmitted to the base station. Generally, RF circuits as communication units include, but are not limited to, an antenna, at least one amplifier, a tuner, one or more oscillators, a Subscriber Identity Module (SIM) card, a transceiver, a coupler, and a LNA (Low Noise Amplifier, low). Noise amplifier), duplexer, etc. In addition, the communication unit 3110 can also communicate with the network and other devices through wireless communication. The wireless communication may use any communication standard or protocol, including but not limited to GSM (Global System of Mobile communication), GPRS (General Packet Radio Service), CDMA (Code Division Multiple Access). , Code Division Multiple Access), WCDMA (Wideband Code Division Multiple Access), LTE (Long Term Evolution), e-mail, SMS (Short Messaging Service), and the like. The memory 3120 can be used to store software programs and modules, and the processor 3180 executes various functional applications and data processing by running software programs and modules stored in the memory 3120. The memory 3120 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function (such as a sound playing function, an image playing function, etc.), and the like; the storage data area may be stored according to Data created by the use of the wearable device 3000 (such as audio data, phone book, etc.), and the like. Moreover, memory 3120 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device. Accordingly, memory 3120 can also include a memory controller to provide access to memory 3120 by processor 3180 and input unit 3130.

The input unit 3130 can be configured to receive input numeric or character information and to generate keyboard, mouse, joystick, optical or trackball signal inputs related to user settings and function controls. Preferably, the input unit 3130 can include a touch-sensitive surface 3131 as well as other input devices 3132. Touch sensitive surface 3131, Also known as a touch display or trackpad, it can collect touch operations on or near the user (eg, the user uses a finger, stylus, etc., any suitable object or accessory on or near the touch-sensitive surface 3131) Operation) and drive the corresponding connection device according to a preset program. Alternatively, the touch sensitive surface 3131 can include two portions of a touch detection device and a touch controller. Wherein, the touch detection device detects the touch orientation of the user, and detects a signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts the touch information into contact coordinates, and sends the touch information. The processor 3180 is provided and can receive commands from the processor 3180 and execute them. In addition, the touch sensitive surface 3131 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic waves. In addition to the touch-sensitive surface 3131, the input unit 3130 can also include other input devices 3132. Preferably, other input devices 3132 may include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control buttons, switch buttons, etc.), trackballs, mice, joysticks, and the like.

Display unit 3140 can be used to display information entered by the user or information provided to the user and various graphical user interfaces of wearable device 3000, which can be composed of graphics, text, icons, video, and any combination thereof. The display unit 3140 may include a display panel 3141. Alternatively, the display panel 3141 may be configured in the form of an LCD (Liquid Crystal Display), an OLED (Organic Light-Emitting Diode), or the like. Further, the touch-sensitive surface 3131 can cover the display panel 3141, and when the touch-sensitive surface 3131 detects a touch operation thereon or nearby, it is transmitted to the processor 3180 to determine the type of the touch event, and then the processor 3180 according to the touch event The type provides a corresponding visual output on display panel 3141. Although in the illustration, touch-sensitive surface 3131 and display panel 3141 are implemented as two separate components to implement input and input functions, in some embodiments, touch-sensitive surface 3131 can be integrated with display panel 3141 to effect input. And output function.

The wearable device 3000 can also include at least one type of sensor 3150, such as a light sensor, motion sensor, and other sensors. The light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 3141 according to the brightness of the ambient light, and the proximity sensor may close the display panel 3141 and/or when the wearable device 3000 moves to the ear. Or backlight. As a kind of motion sensor, the gravity acceleration sensor can detect the magnitude of acceleration in all directions (usually three axes). When it is stationary, it can detect the magnitude and direction of gravity. It can be used to identify the gesture of the mobile phone (such as horizontal and vertical screen switching, related Game, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tapping), etc. As for the wearable device 3000, other sensors such as gyroscope, barometer, hygrometer, thermometer, infrared sensor, etc. This will not be repeated here.

An audio circuit 3160, a speaker 3161, and a microphone 3162 can provide an audio interface between the user and the wearable device 3000. The audio circuit 3160 can transmit the converted electrical data of the received audio data to the speaker 3161, and convert it into a sound signal output by the speaker 3161; on the other hand, the microphone 3162 converts the collected sound signal into an electrical signal, by the audio circuit 3160. After receiving, it is converted into audio data, and then processed by the audio data output processor 3180, transmitted to the, for example, another wearable device via the RF circuit 3110, or outputted to the memory 3120 for further processing. The audio circuit 3160 may also include an earbud jack to provide communication of the peripheral earphones with the wearable device 3000.

In order to implement wireless communication, the wearable device may be configured with a wireless communication unit 3170, which may be a WIFI module. WIFI belongs to short-range wireless transmission technology, and the wearable device 3000 can help users to send and receive emails, browse web pages, and access streaming media through the wireless communication unit 3170, which provides wireless broadband Internet access for users. Although the wireless communication unit 3170 is shown in the drawings, it can be understood that it does not belong to the essential configuration of the wearable device 3000, and may be omitted as needed within the scope of not changing the essence of the disclosure.

The processor 3180 is the control center of the wearable device 3000, connecting various portions of the entire handset with various interfaces and lines, by running or executing software programs and/or modules stored in the memory 3120, and recalling stored in the memory 3120. Data, performing various functions and processing data of the wearable device 3000, thereby performing overall monitoring of the mobile phone. Optionally, the processor 3180 may include one or more processing cores; preferably, the processor 3180 may integrate an application processor and a modem processor, where the application processor mainly processes an operating system, a user interface, an application, and the like. The modem processor primarily handles wireless communications. It can be understood that the above modem processor may not be integrated into the processor 3180.

The wearable device 3000 further includes a power source 3190 (such as a battery) for powering various components. Preferably, the power source can be logically connected to the processor 3180 through a power management system to manage charging, discharging, and power management through the power management system. Features. The power supply 3190 may also include any one or more of a DC or AC power source, a recharging system, a power failure detection circuit, a power converter or inverter, a power status indicator, and the like.

Although not shown, the wearable device 3000 may further include a camera, a Bluetooth module, and the like, and details are not described herein. In this embodiment, the wearable device includes a memory, and one or more programs, wherein one or more programs are stored in the memory and configured to execute the one or more programs by one or more processors Contains instructions for making the following methods:

Sending user authentication information stored in advance to the service terminal in a short-range communication manner, The service terminal sends a service request to the service server, where the service request includes the service information and the user verification information, and the service server checks the user verification information, and if the verification succeeds, the service is The business request is for business processing.

Optionally, before the sending, by the near-end communication mode, the pre-stored user authentication information to the service terminal, the method further includes:

Sending a local device identifier to the service terminal in a short-range communication manner, so that the service terminal sends the local device identifier to the service server, where the service server is configured according to the device identifier and the service terminal. The identification information is used for binding verification, and if the verification is passed, the device relationship confirmation information is sent to the service terminal, and the service terminal sends a service request carrying the device relationship confirmation information to the service server, so that the service is performed. The server verifies the user verification information and the device relationship confirmation information, and if the verification is successful, performs service processing on the service request.

Optionally, the sending the user verification information pre-stored locally to the service terminal by using the short-range communication manner includes:

Obtaining third-party verification information of the service server sent by the service terminal by using a short-range communication manner;

The third-party verification information is verified, and if the verification is successful, the pre-stored user verification information is sent to the service terminal by using the short-range communication method.

Optionally, the third-party verification information is encrypted by using the third-party private key by the service server;

The verifying the third-party verification information includes:

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto, and thus equivalent changes made in the claims of the present invention are still within the scope of the present invention.

Claims

A security verification method, characterized in that the security verification method comprises:

The service terminal acquires user authentication information pre-stored in the wearable device from the wearable device of the user by using a short-range communication manner;

The service terminal sends a service request to the service server, where the service request includes service information and the user verification information;

The service server performs verification on the user verification information, and if the verification succeeds, performs service processing on the service request.
The security verification method according to claim 1, wherein the service terminal further includes: before acquiring the user verification information pre-stored in the wearable device from the wearable device of the user by using the short-range communication method:

Obtaining, by the service terminal, the device identifier of the wearable device by using a short-range communication manner;

Transmitting, by the service terminal, a device identifier of the wearable device to the service server;

The service server performs binding verification according to the device identifier and the identification information of the service terminal, and sends the device relationship confirmation information to the service terminal if the verification succeeds;

The service request further includes the device relationship confirmation information, and the method further includes:

The service server performs verification on the user authentication information and the device relationship confirmation information, and if the verification is successful, performs service processing on the service request.
The security verification method according to claim 1, wherein the obtaining, by the service terminal, the user verification information pre-stored in the wearable device from the wearable device of the user by the proximity communication method comprises:

The service terminal acquires third-party verification information of the service server, and sends the third-party verification information of the service server to the wearable device by using a short-range communication manner;

The wearable device checks the third-party verification information, and if the verification is successful, sends the pre-stored user verification information to the service terminal by using the short-distance communication method.
The security verification method according to claim 3, wherein the service terminal sends the third-party verification information to the wearable device in a short-range communication manner to pass through the service server. Encrypted using a third-party private key;

The wearable device performs verification on the third-party verification information, including:

The wearable device decrypts the encrypted third-party verification information by using a third-party public key corresponding to the service server, and performs verification on the decrypted third-party verification information according to the pre-stored reference third-party verification information.
The security verification method according to claim 1, wherein the service terminal acquires user authentication information pre-stored in the wearable device from the wearable device of the user as being encrypted by the user private key;

The verifying, by the service server, the user verification information includes:

The service server decrypts the encrypted user verification information by using the user public key corresponding to the user, and verifies the decrypted user verification information according to the pre-stored reference user verification information.
The security verification method according to any one of claims 1 to 5, wherein the short-range communication method comprises a Bluetooth mode or a NFC (Near Field Communication) mode.
The security verification method according to claim 6, wherein the service terminal further includes: before the user terminal obtains the user verification information pre-stored in the wearable device from the wearable device of the user by using the short-range communication method:

The service terminal performs a Bluetooth device search to establish a Bluetooth connection with the wearable device.
A security verification method, the method comprising:

The service terminal acquires user authentication information pre-stored in the wearable device from the wearable device of the user by using a short-range communication manner;

The service terminal sends a service request to the service server, where the service request includes the service information and the user verification information, so that the service server checks the user verification information, and if the verification is successful, the service terminal The service server performs business processing on the service request.
The security verification method according to claim 8, wherein the service terminal acquires user authentication pre-stored in the wearable device from a wearable device of the user by using a short-range communication method. The information also includes:

Obtaining, by the service terminal, the device identifier of the wearable device by using a short-range communication manner;

The service terminal sends the device identifier of the wearable device to the service server, so that the service server performs binding verification according to the device identifier and the identification information of the service terminal, and if the verification is successful, the The service terminal acquires device relationship confirmation information from the service server;

The service terminal sends a service request to the service server, including:

The service terminal sends a service request carrying the device relationship confirmation information to the service server, so that the service server checks the user verification information and the device relationship confirmation information, and if the verification is successful, The service requests for business processing.
The security verification method according to claim 8, wherein the obtaining, by the service terminal, the user verification information pre-stored in the wearable device from the wearable device of the user by the proximity communication method comprises:

The service terminal acquires third-party verification information of the service server, and sends the third-party verification information of the service server to the wearable device in a short-distance communication manner, so that the wearable device is to the third party. The verification information is verified. If the verification is successful, the service terminal acquires pre-stored user verification information from the wearable device by using a short-range communication manner.
The security verification method according to any one of claims 8 to 10, wherein the short-range communication method comprises a Bluetooth mode or a NFC (Near Field Communication) mode.
The security verification method according to claim 11, wherein the service terminal further includes: before the user terminal obtains the user verification information pre-stored in the wearable device from the wearable device of the user by using the short-range communication method:

The service terminal performs a Bluetooth device search to establish a Bluetooth connection with the wearable device.
A security verification method, the method comprising:

The wearable device sends the user authentication information pre-stored in the wearable device to the service terminal in a short-distance communication manner, so that the service terminal sends a service request to the service server, where the service request includes service information and The user verification information, the service server performs verification on the user verification information, and if the verification is successful, performs service processing on the service request.
The security verification method according to claim 13, wherein the wearable device further includes: before transmitting the user verification information pre-stored in the wearable device to the service terminal by using the short-range communication method:

Transmitting, by the wearable device, the device identifier of the wearable device to the service terminal by using a short-range communication manner, so that the service terminal sends the device identifier of the wearable device to the service server, where the service The server performs binding verification according to the device identifier and the identification information of the service terminal, and if the verification succeeds, sends the device relationship confirmation information to the service terminal, where the service terminal sends the device relationship to the service server. And confirming the service request of the information, so that the service server checks the user verification information and the device relationship confirmation information, and if the verification is successful, performs service processing on the service request.
The security verification method of claim 13, wherein the sending, by the wearable device, the user authentication information pre-stored in the wearable device to the service terminal by using the short-range communication method includes:

Obtaining, by the wearable device, third-party verification information of the service server sent by the service terminal by using a short-distance communication manner;

The wearable device checks the third-party verification information, and if the verification is successful, sends the pre-stored user verification information to the service terminal by using the short-distance communication method.
The security verification method according to claim 15, wherein the third party authentication information is encrypted by the service server using a third party private key;

The verifying, by the wearable device, the third-party verification information includes:

The wearable device decrypts the encrypted third-party verification information by using a third-party public key corresponding to the service server, and performs verification on the decrypted third-party verification information according to the pre-stored reference third-party verification information. .
A secure payment method, characterized in that the secure payment method comprises:

The payment terminal acquires user verification information pre-stored in the wearable device from the wearable device of the user by using a short-range communication manner;

The payment terminal sends a payment request to the payment server, where the payment request includes order information And the user verification information;

The payment server verifies the user verification information, and if the verification is successful, performs payment processing on the payment request.
A service terminal, characterized in that the service terminal comprises a memory, and one or more programs, wherein one or more programs are stored in the memory and configured to execute the one by one or more processors Or an instruction included in more than one program to perform the following methods:

Acquiring user authentication information pre-stored in the wearable device from a wearable device of the user by using a short-range communication manner;

Sending a service request to the service server, where the service request includes the service information and the user verification information, so that the service server checks the user verification information, and if the verification succeeds, the service server is The business request is for business processing.
The service terminal according to claim 18, wherein the obtaining, before the user authentication information pre-stored in the wearable device by the wearable device of the user by the short-range communication, further comprises:

Acquiring the device identifier of the wearable device by using a short-range communication method;

Sending the device identifier of the wearable device to the service server, so that the service server performs binding verification according to the device identifier and the local identifier information, and if the verification succeeds, obtains the device relationship confirmation from the service server. information;

The sending a service request to the service server includes:

Sending, by the service server, a service request carrying the device relationship confirmation information, so that the service server checks the user verification information and the device relationship confirmation information, and if the verification is successful, the service request is performed. Conduct business processing.
The service terminal according to claim 18, wherein the obtaining the user verification information pre-stored in the wearable device from the wearable device of the user by using the short-range communication method comprises:

Obtaining third-party verification information of the service server, and sending the third-party verification information of the service server to the wearable device by using a short-range communication manner, so that the wearable device performs the third-party verification information If the verification is successful, the short-distance communication method is obtained from the wearable device. Take pre-stored user authentication information.
The service terminal according to any one of claims 18 to 20, wherein the short-range communication method comprises a Bluetooth mode or an NFC mode.
The service terminal according to claim 21, wherein before the obtaining, by the proximity device, the user authentication information pre-stored in the wearable device by the wearable device of the user, the method further comprises:

A Bluetooth device search is performed to establish a Bluetooth connection with the wearable device.
A wearable device, comprising: a memory, and one or more programs, wherein one or more programs are stored in a memory and configured to be executed by one or more processors An instruction contained in one or more programs for performing the following methods:

Sending the user authentication information stored in advance to the service terminal in a short-range communication manner, so that the service terminal sends a service request to the service server, where the service request includes the service information and the user verification information, The service server verifies the user verification information, and if the verification is successful, performs service processing on the service request.
The wearable device according to claim 23, wherein the transmitting the pre-stored local user authentication information to the service terminal by using the short-range communication method further comprises:

Sending a local device identifier to the service terminal in a short-range communication manner, so that the service terminal sends the local device identifier to the service server, where the service server is configured according to the device identifier and the service terminal. The identification information is used for binding verification, and if the verification is passed, the device relationship confirmation information is sent to the service terminal, and the service terminal sends a service request carrying the device relationship confirmation information to the service server, so that the service is performed. The server verifies the user verification information and the device relationship confirmation information, and if the verification is successful, performs service processing on the service request.
The method of claim 23, wherein the transmitting the user authentication information pre-stored locally to the service terminal by using the short-range communication method comprises:

Obtaining third-party verification of the service server sent by the service terminal by using short-range communication information;

The third-party verification information is verified, and if the verification is successful, the pre-stored user verification information is sent to the service terminal by using the short-range communication method.
The wearable device according to claim 25, wherein said third party authentication information is encrypted by said service server using a third party private key;

The verifying the third-party verification information includes:

The encrypted third-party authentication information is decrypted by using a third-party public key corresponding to the service server, and the decrypted third-party verification information is verified according to the pre-stored reference third-party verification information.