WO2017012066A1

WO2017012066A1 - Online transaction method, device and system

Info

Publication number: WO2017012066A1
Application number: PCT/CN2015/084664
Authority: WO
Inventors: 张毅
Original assignee: 深圳市银信网银科技有限公司
Priority date: 2015-07-21
Filing date: 2015-07-21
Publication date: 2017-01-26
Also published as: CA2993090C; CA3123658C; CA3177680A1; CA3115627C; CA2993090A1; CA3115627A1; CA3177680C; CA3123658A1

Abstract

Disclosed are an online transaction method, device and system, the method comprising the steps of: an item server sends a bank credit certificate issuing request to a seller bank server according to order information; the seller bank server generates a bank credit certificate having a to-be-effective status, and sends the bank credit certificate to a buyer bank server; the buyer bank server verifies buyer payment checking information obtained by a client, and after verification has been passed, freezes funds in a buyer account which correspond to an order amount, updates the status of the bank credit certificate to an effective status, and sends the bank credit certificate to the seller bank server; the seller bank server sends a has-been-received notification to the item server; the item server sends the order information to a transaction intermediary server; the transaction intermediary server dispatches according to arrangements, and sends a has-been-received notification to the buyer bank server; the buyer bank server transfers the frozen funds in the buyer account into a seller account of the seller bank server. The present invention reduces the risk to the funds, and increases the security of the transaction information.

Description

Online trading method, device and system

Technical field

[0001] The present invention relates to the field of Internet technologies, and in particular, to an online transaction method, apparatus, and system.

Background technique

[0002] With the rapid development of Internet technology, e-commerce has flourished around the world, and online trading platforms such as Amazon, Alibaba, Taobao and other e-commerce-based operations have emerged. Currently, transaction payments for online trading platforms can usually be selected by means of online payment, cash on delivery and mail order. Traditional payment methods such as cash on delivery and mail order, due to long transaction times and high transaction costs, can not meet the growing e-commerce behavior, and peers also have high security problems, so these payment methods are not used much, but use Online payment methods such as online banking have increasingly become the mainstream of payment.

[0003] In the prior art, the online payment method mainly uses a third-party payment platform. During the transaction, the buyer transfers the transaction funds to the third-party payment platform. The third-party payment platform also stores the transaction information. After the buyer receives the goods, the third-party payment platform transfers the transaction funds to the seller, and the transaction is completed.

[0004] However, such a way of temporarily storing transaction funds and transaction information by a third-party payment platform often occurs as follows: The customer has not received the goods or services provided by the merchant, and the funds have been paid by the third-party payment institution to the merchant. After the merchant has provided the goods or services, the customer has been unable to pay the corresponding funds. It can be seen that since the transaction funds flow out of the banking system, the payment of the bank server relies entirely on the operation of the third party payment platform, which is not conducive to the bank's supervision of funds. In the case of the above-mentioned situation in the third-party payment platform, the bank server cannot achieve the effective flow of funds for the delivery of the first-hand payment, which may result in a large deviation between the flow of funds of the bank server and the actual transaction. The user is exposed to the risk of capital risks, and the transaction funds and transaction information have the risk of being stolen in the third-party payment platform information, and the security is not high. It can be seen that an improved trading method is needed at this stage to reduce the risk of capital risks and improve the security of transaction information.

technical problem

[0005] A primary object of the present invention is to provide an online transaction method, apparatus and system for reducing capital risk and improving transaction security. Problem solution

Technical solution

[0006] The technical solution adopted by the present invention to solve the above technical problems is as follows:

According to an aspect of the present invention, an online transaction method is provided, comprising the steps of:

[0008] after receiving the order information sent by the client, the commodity server sends a silver credit card certification request to the seller bank server according to the order information;

[0009] the seller bank server generates a bank letter to be valid according to the bank letter verification request, and sends it to the buyer bank server;

[0010] the buyer bank server obtains the buyer's payment verification information from the client and performs verification; after the verification is passed, the funds corresponding to the order amount in the buyer account are frozen, and the status of the silver credit card is Updated to the active status and sent to the seller's bank server;

[0011] the seller bank server updates the status of the valid silver certificate to the received certificate, and sends the received notification to the commodity server;

[0012] the commodity server sends the order information to the transaction intermediary server according to the received notification; [0013] the transaction intermediary server arranges delivery according to the order information, and after determining that the buyer has received the goods, Sending a receipt notification to the buyer's bank server;

[0014] after receiving the received delivery notification, the buyer bank server transfers the frozen funds in the buyer account to the seller account of the seller bank server.

[0015] According to another aspect of the present invention, an online transaction method is provided for use in a commodity server, the method comprising the steps of:

[0016] after receiving the order information sent by the client, sending a silver certificate verification request to the seller bank server according to the order information;

[0017] after receiving the received notification sent by the seller bank server, sending the order information to the transaction intermediary server.

[0018] According to still another aspect of the present invention, an online transaction method is provided for use in a seller's bank server

, the method includes the following steps:

[0019] after receiving the request for the silver credit card issued by the commodity server, generating a silver credit certificate to be validated, and transmitting the silver credit certificate to the buyer's bank server; [0020] after receiving the valid silver certificate sent by the buyer bank server, updating the status of the silver credit to the received status, and sending the received notification to the commodity server.

[0021] According to still another aspect of the present invention, an online transaction method is provided for use in a buyer's bank server

, the method includes the following steps:

[0022] after receiving the silver credit certificate sent by the seller's bank server to be in a valid state, obtaining the buyer's payment verification information from the client and performing verification;

[0023] if the verification is passed, the funds corresponding to the order amount in the buyer account are frozen, and the status of the bank letter is updated to have been validated, and sent to the seller bank server;

[0024] after receiving the received delivery notification sent by the transaction intermediary server, the funds frozen by the buyer account are transferred to the seller account of the seller bank server.

[0025] According to still another aspect of the present invention, an online transaction system is provided, comprising: a client configured to generate order information according to a commodity booked by a buyer, further comprising a commodity server, a buyer bank server, a seller bank server, and a transaction intermediary server , among them:

[0026] the commodity server is configured to: after receiving the order information sent by the client, send a silver credit certificate request to the seller bank server; receive the received certificate sent by the seller bank server After the notification, sending the order information to the transaction intermediary server;

[0027] the seller bank server is configured to: after receiving the request for the bank credit certificate, generate a bank certificate to be valid and send it to the buyer bank server; receive the sent by the buyer bank server After the validated bank letter, the status of the bank letter is updated to the status of the received certificate, and the received certificate is sent to the commodity server;

[0028] the transaction intermediation server is configured to arrange delivery according to the order information, and send a receipt notification to the buyer bank server after determining that the buyer has received the goods;

[0029] the buyer bank server is configured to, after receiving the silver credit certificate in the inactive state, obtain the buyer's payment verification information from the client and perform verification; when the verification is passed, freeze the buyer account The funds corresponding to the order amount are updated, and the status of the bank letter is updated to the valid state, and sent to the seller bank server; after receiving the received goods notification, the funds frozen by the buyer account are transferred The money is in the seller's account of the seller's bank server.

[0030] According to still another aspect of the present invention, an online transaction apparatus is provided for use in a commodity server, The device includes the following modules:

[0031] The first receiving module is configured to receive the order information sent by the client, and the received notification sent by the seller bank server;

[0032] the certificate requesting module is configured to: after receiving the order information sent by the client, send a silver credit certificate request to the seller bank server according to the order information;

[0033] The order information sending module is configured to send the order information to the transaction intermediary server after receiving the received notification sent by the seller bank server.

[0034] According to still another aspect of the present invention, an online transaction apparatus is provided for use in a seller's bank server

, the device includes the following modules:

[0035] The second receiving module is configured to receive the silver credit certificate request sent by the commodity server, and the valid silver certificate sent by the buyer bank server;

[0036] The silver credit card generating module is configured to generate a silver credit card in a valid state according to the silver credit card verification request; [0037] a silver credit card sending module, configured to set the silver credit card to be in a valid state Sent to the buyer's bank server;

[0038] The received notification module is configured to update the status of the silver credit to the received status after receiving the valid silver certificate sent by the buyer's bank server, and send the status to the commodity server Notification of receipt

[0039] According to still another aspect of the present invention, an online transaction apparatus is provided for use in a buyer's bank server

, the device includes the following modules:

[0040] a third receiving module, configured to receive a silver credit card sent by the seller bank server to be in a valid state, and a received delivery notification sent by the transaction intermediary server;

[0041] the verification module is configured to: after receiving the silver certificate of the to-be-effective state, obtain the buyer's payment verification information from the client and perform verification;

[0042] a freezing module, configured to freeze the funds corresponding to the order amount in the buyer account after the verification is passed, and update the status of the silver credit to be valid, and send the same to the seller bank server;

[0043] The payment module is configured to, after receiving the received delivery notification, transfer funds frozen by the buyer account to a seller account of the seller bank server.

[0044] An online transaction method, device and system provided by the present invention, through a commodity server to a seller bank The server sends a request for confirmation, and the intermediary transaction server sends a receipt notification to the buyer's bank server, and completes the transaction process in the interaction between the client, the commodity server, the buyer's bank server, the seller's bank server, and the transaction intermediary server, and the transaction funds in the transaction process. The transaction information is not transferred to the third-party payment platform, but flows within the banking system. This facilitates the bank to supervise the funds and improve the security of the transaction. It also facilitates the bank to supervise the credit of the transaction entity. Conducive to the establishment of a social credit system. And through the generation of the silver letter to the actual monitoring of the transaction status, so that there is no deviation between the capital flow and the actual transaction, so that the effective flow of money to deliver the goods in one hand, can effectively reduce the risk of funds and improve the transaction. Information security.

Advantageous effects of the invention

Beneficial effect

[0045] Further, in the transaction process, the digital envelope technology is used to securely transmit the communication data, the dynamic anti-counterfeiting technology is used to dynamically generate the symmetric key, the AES algorithm is used to encrypt the communication data, and the dual-track verification technology is used to verify the data. The two networks use technology to communicate, further improving the security of the transaction. Brief description of the drawing

DRAWINGS

1 is a flow chart of a first embodiment of an online transaction method of the present invention;

2 is a schematic diagram of interaction of each system in a transaction process according to an embodiment of the present invention;

3 is a specific flowchart of a data sender and a data receiver in a secure transmission of communication data by using a digital envelope technology in an embodiment of the present invention;

4 is a flow chart of a second embodiment of the online transaction method of the present invention;

5 is a flow chart of a third embodiment of the online transaction method of the present invention;

6 is a flow chart of a fourth embodiment of the online transaction method of the present invention;

7 is a flowchart of a fifth embodiment of the online transaction method of the present invention;

8 is a block diagram showing a first embodiment of an online transaction system of the present invention;

9 is a schematic block diagram of an embodiment of an online transaction device applied to a client according to the present invention;

10 is a block diagram showing an embodiment of an online transaction apparatus applied to a commodity server according to the present invention; [0056] FIG. 11 is a block diagram showing an embodiment of an online transaction apparatus applied to a seller bank server of the present invention; [0057] 12 is a block diagram showing an embodiment of an online transaction apparatus of the present invention applied to a buyer's bank server; 13 is a block diagram showing an embodiment of an online transaction apparatus applied to a transaction broker server according to the present invention;

14 is a block diagram showing a second embodiment of the online transaction system of the present invention.

[0060] The implementation, functional features, and advantages of the present invention will be further described with reference to the accompanying drawings.

Embodiments of the invention

The specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

[0062] Referring to FIG. 1 and FIG. 2, an embodiment of an online transaction method according to the present invention is provided. The method includes the following steps.

[0063] S11: The client generates the order information according to the product information subscribed by the buyer, and sends the order information to the commodity server.

[0064] In this step S11, the seller inputs and stores the product information into the product server, and the buyer communicates with the product server through the client to acquire the product information from the product server. The buyer selects the item to be purchased in the item information, and the client generates the order information based on the item information selected by the user, and submits the order information to the product server.

[0065] In this embodiment, the commodity includes a tangible physical product and an intangible service; the commodity information includes information such as the price and parameters of the commodity; the commodity server may be a commercial computer server, or may be a computer server set up by the seller itself; The terminal is a communication terminal operated by the buyer, and may be a terminal device such as a mobile phone, a tablet device, or a computer.

[0066] S12: The commodity server sends a silver credit certificate request to the seller bank server according to the order information.

[0067] In this embodiment, the buyer bank server refers to the computer server of the bank corresponding to the buyer's bank account (ie, the buyer's bank of the account), and the seller bank server refers to the bank corresponding to the seller's bank account (ie, the seller's The computer server of the Seto Bank, the buyer's bank server and the seller's bank server may be the same computer server of the bank (ie the buyer's and the seller's bank of the same bank), or may be the computer servers of different banks (ie the buyer and the seller) Seto Bank is different.)

[0068] In step S12, after receiving the order information, the commodity server knows the buyer bank server and the seller bank server according to the order information, generates a silver credit certificate request and sends it to the seller bank server. Among them, the silver letter certificate is an electronic certificate that the bank credit promises to pay, which can be understood as an electronic data, which can be stored in a computer system and transmitted through the network. [0069] S13: The seller bank server generates a bank letter to be valid according to the bank letter certificate request and sends it to the buyer bank server.

[0070] In step S13, after receiving the request for the bank credit certificate, the seller bank server knows the buyer bank server, and generates a bank certificate Z1 to be validated and sends it to the buyer bank server.

[0071] S14: The buyer bank server obtains the buyer's payment verification information from the client and performs verification. If the verification is passed, step S15 is performed, otherwise the process ends.

[0072] In this step S14, after receiving the silver certificate Z1 sent by the seller's bank server to be in a valid state, the buyer's bank server generates payment verification information according to the silver certificate Z1 to be in effect, and sends the payment verification information to After the client receives the payment verification information input by the buyer, it submits it to the buyer's bank server for verification. The payment verification information may be a payment page, and the buyer inputs information such as verification information, payment amount, and the like on the payment page on the client. The verification information includes at least a bank account and a password, and may further include information such as a verification code, an expiration date, and the like.

[0073] Specifically, after the buyer bank server receives the silver credit card Z1 in a valid state, a payment page is generated, and the link address of the payment page is sent to the buyer (for example, sent to the buyer's registered mobile phone by SMS). The buyer enters the link address of the payment page on the client or directly clicks the link address received by the client to open the payment page, and enters payment verification information such as verification information and payment amount on the payment page. The buyer's bank server verifies the payment verification information entered by the client on the payment page.

[0074] S15: The buyer bank server freezes the funds corresponding to the order amount in the buyer account, and updates the status of the bank letter to the valid state, and sends it to the seller bank server.

[0075] Specifically, after the verification is passed, the buyer bank server freezes the corresponding amount of funds in the buyer account according to the payment amount input on the payment page, and updates the status of the silver credit card, and updates the silver letter Z1 to be in effect to the already The valid bank letter Z2, and the valid bank letter Z2 will be sent to the seller's bank server.

[0076] S16: The seller bank server updates the status of the valid silver certificate to the received certificate, and sends the received notification to the commodity server.

[0077] In this step S16, after receiving the valid bank letter Z2, the seller bank server updates the status of the bank letter certificate, and updates the valid bank letter Z2 to the received bank letter Z3, and sends the certificate. Receive a notification to the product server.

[0078] S17: The commodity server sends the order information to the transaction intermediary server according to the received notification. [0079] In step S17, after receiving the notification of the receipt of the certificate, the commodity server transmits the order information to the transaction intermediary server.

[0080] S18: The transaction intermediary server arranges the delivery according to the order information, and after determining that the buyer has received the goods, sends the received delivery notice to the buyer's bank server.

[0081] In step S18, after receiving the order information, the transaction intermediary server performs the delivery according to the transaction information such as the product information and the buyer information in the order information. The transaction intermediary server may notify the seller to arrange the delivery, including but not limited to any one of the following ways: sending an email notification to the seller's preset email address, sending a text message notification to the seller's preset mobile number, to the seller The preset QQ number sends a QQ message; or sends a WeChat message to the seller's preset micro-signal code. The seller arranges for delivery after receiving the delivery notice.

[0082] after receiving the receipt confirmation notification sent by the client, the transaction intermediary server determines that the buyer has received the goods; or, the transaction intermediary server does not receive the feedback information of the client within the preset time after scheduling the delivery, By default, the buyer has received the goods after the preset time has passed. When it is determined that the buyer has received the goods, the receipt notification is sent to the buyer's bank server.

[0083] S19: The buyer's bank server transfers the funds frozen in the buyer's account to the seller's account of the seller's bank server.

[0084] In step S19, after the buyer's bank server receives the received delivery notification, the frozen funds in the buyer's account are transferred to the seller's account. At this point, the transaction is completed.

[0085] In order to prevent the buyer from performing the receipt confirmation after receiving the commodity, the method further includes: if the buyer bank server does not receive the receipt notification sent by the transaction intermediary server within the preset time, After setting up the room, the funds frozen by the buyer's account are transferred to the seller's account of the seller's bank server.

[0086] With the online transaction method of the above embodiment, the transaction funds and transaction information in the transaction process are not transferred to the third-party payment platform, and all flow in the banking system, thereby facilitating the supervision of the funds by the bank and improving the transaction. The security, peers also facilitate the bank to supervise the credit of the transaction subject, which is conducive to the establishment of a social credit system. And through the generation of the silver letter to the actual monitoring of the transaction status, so that there is no deviation between the capital flow and the actual transaction, so that the effective flow of money to deliver the goods in one hand, can effectively reduce the risk of funds and improve the transaction. Information security.

[0087] As a preferred embodiment, in order to prevent transaction information from being stolen, the client, the commodity server, the buyer The bank server, the seller's bank server, and the transaction intermediary server use the digital envelope to securely transmit the communication data after data transmission and data reception. Thereby further improving the security of data transmission and ensuring the security of transactions.

[0088] As shown in FIG. 3, the specific process for the data sender and the data receiver to securely transmit communication data by using digital envelope technology is as follows:

[0089] S101. The data sender generates a symmetric key, and the communication data is encrypted by using a symmetric key to form a first ciphertext.

[0090] In order to prevent the symmetric key from being stolen, the data sender randomly generates a symmetric key every time the data is sent, thereby achieving the effect of dynamic anti-counterfeiting, improving data security, and thereby ensuring transaction security. After encrypting the communication data, the data sender preferably encrypts the communication data by the AES algorithm using a symmetric key to form a first ciphertext.

[0091] S102. The data sender encrypts the symmetric key by using a public key of the data receiver to form a second ciphertext.

[0092] S103. The data sender signs the first ciphertext and the second ciphertext respectively by using the private key of the data, and then sends the first ciphertext and the second ciphertext to the data receiver.

[0093] S104. After receiving the first ciphertext and the second ciphertext, the data receiver verifies the signatures of the first ciphertext and the second ciphertext by using the public key of the data sender.

[0094] S105. After the verification is passed, the data receiver decrypts the second ciphertext by using its own private key to obtain a symmetric key.

[0095] S106. The data receiver decrypts the first ciphertext by using a symmetric key to obtain communication data.

[0096] In some embodiments, the signing step in step S103 and the verifying sign step in step S104 may also be omitted.

[0097] Further, in the online transaction method of the above embodiment, in order to prevent problems such as capital security and information security caused by data being tampered with in the communication process, a dual-track verification technique is adopted. Specifically, in the data transmission process, the monitoring server collects the data sent by the data sender and the data received by the data receiver, and checks the consistency of the sent data and the received data, and the collected data to be collected. Compare with the received data to determine whether the two are consistent. Further ensure the security of the transaction.

[0098] Further, in the online transaction method of the above embodiment, in order to balance the convenience of communication and ensure data security, a two-network combination technology is adopted. Client, commodity server, buyer bank server, and seller bank The servers communicate with each other through the public network, and the monitoring server communicates with the buyer's bank server and the seller's bank server through dedicated lines. Thereby further ensuring the security of the transaction.

[0099] Referring to FIG. 4, a second embodiment of the online transaction method of the present invention is proposed. The method is applied to a commodity server, and includes the following steps:

[0100] S21. After receiving the order information sent by the client, send a request for a silver credit card to the seller bank server according to the order information.

[0101] Specifically, the silver credit card is an electronic voucher for bank credit commitment payment, which can be understood as an electronic data, can be stored in a computer system and transmitted through a network, and the commodity server knows the seller bank server according to the order information, and sends the seller bank server to the seller bank server. Send a letter of credit to the card.

[0102] S22. After receiving the received notification sent by the seller's bank server, send the order information to the transaction intermediary server.

[0103] Specifically, after receiving the received notification sent by the seller's bank server, the commodity server sends the order information to the transaction intermediary server, so that the transaction intermediary server arranges the delivery according to the order information.

Referring to FIG. 5, a third embodiment of the online transaction method of the present invention is proposed. The method is applied to a seller bank server, and the method includes the following steps:

[0105] After receiving the request for the silver credit card issued by the commodity server, S3 generates a bank certificate to be valid.

And sent to the buyer's bank server.

[0106] S32. After receiving the valid silver letter sent by the buyer's bank server, update the status of the bank letter to the received certificate status, and send the received certificate notification to the commodity server.

[0107] Referring to FIG. 6, a fourth embodiment of the online transaction method of the present invention is proposed. The method is applied to a buyer's bank server, and includes the following steps:

[0108] After receiving the silver credit certificate sent by the seller's bank server and in effect, the S4 obtains the buyer's payment verification information from the client and performs verification. If the verification is passed, step S602 is performed, otherwise the process ends.

[0109] S42. Freeze the funds corresponding to the order amount in the buyer account, and update the status of the bank letter to be valid.

, sent to the seller's bank server.

[0110] S43. After receiving the received delivery notification sent by the transaction intermediary server, the funds frozen by the buyer account are transferred to the seller account of the seller bank server. [0111] Referring to FIG. 7, a fifth embodiment of the online transaction method of the present invention is proposed. The method is applied to an intermediary transaction server, and includes the following steps:

[0112] S51. Receive order information sent by the commodity server, and arrange delivery according to the order information.

[0113] Specifically, after receiving the order information, the transaction intermediary server performs the delivery according to the transaction information such as the product information and the buyer information in the order information. The transaction intermediary server can notify the seller and let the seller arrange the delivery.

, including but not limited to any one or more of the following methods: sending an email notification to the seller's preset email address, sending a short message notification to the seller's preset mobile number, sending a QQ message to the seller's preset QQ number; or to the seller The preset micro-signal code sends a WeChat message. The seller arranges the delivery after receiving the delivery notice.

[0114] S52. After determining that the buyer has received the goods, send the received goods notification to the buyer's bank server.

[0115] Specifically, after receiving the receipt confirmation notification sent by the client, the transaction intermediary server determines that the buyer has received the goods; or, the transaction intermediary server does not receive the feedback from the client within the preset time after scheduling the delivery. The information, the default buyer has received the goods after the preset time is exceeded. When it is determined that the buyer has received the goods, the delivery notice is sent to the buyer's bank server.

[0116] Referring to FIG. 8, a first embodiment of an online transaction system of the present invention is proposed. The online transaction system of the embodiment is an online transaction system for implementing the online transaction method, and the online transaction system includes a client, a commodity server, and a buyer. Bank server, seller bank server and transaction broker server, where:

[0117] client: configured to obtain product information from the commodity server, generate an order according to the commodity booked by the buyer, and send the order to the commodity server; send the buyer input to the buyer bank server after receiving the payment verification request sent by the buyer bank server Payment verification information.

[0118] Among them, please refer to FIG. 9, the online transaction device applied to the client includes the following modules:

[0119] an order sending module, configured to obtain product information from the commodity server, generate an order according to the commodity booked by the buyer, and send the order to the commodity server;

[0120] The verification information sending module is configured to send the payment verification information input by the buyer to the buyer bank server after receiving the payment verification request sent by the buyer bank server.

[0121] the commodity server is configured to: after receiving the order information sent by the client, send the silver credit certificate request to the seller bank server, and further set to receive the notification received by the seller bank server, and then send the notification to the transaction intermediary server. Send order information.

[0122] wherein, referring to FIG. 10, the online transaction device applied to the commodity server includes the following modules: [0123] The first receiving module is configured to receive the order information sent by the client, and the received notification sent by the seller bank server;

[0124] the certificate requesting module is configured to: after receiving the order information sent by the client, send a request for a silver credit card to the seller bank server according to the order information;

[0125] The order information sending module is configured to send the order information to the transaction intermediary server after receiving the received notification sent by the seller bank server.

[0126] The seller bank server is configured to: after receiving the silver credit certificate request sent by the commodity server, generate a silver certificate to be valid and send it to the buyer bank server; and also set to receive the sent by the buyer bank server After the valid bank letter is issued, the status of the bank letter is updated to the status of the received certificate, and the received certificate is sent to the commodity server.

[0127] Referring to FIG. 11, the online transaction device applied to the seller bank server includes the following modules: [0128] The second receiving module is configured to receive the silver credit certificate request sent by the commodity server, and send the buyer bank server to send a bank letter that has entered into force;

[0129] The silver credit generation module is configured to generate a silver credit certificate according to the silver credit certificate request; [0130] the silver credit sending module is configured to send the silver credit to be in effect to the buyer bank [0131] The received notification module is configured to update the status of the silver letter to the received status after receiving the valid silver letter sent by the buyer's bank server, and send the received notification to the commodity server.

[0132] Buyer Bank Server: After receiving the silver letter certificate sent by the seller bank server to be valid, obtaining the payment verification information from the client and verifying; if the verification is passed, freezing the funds corresponding to the order amount in the buyer account, And update the status of the bank letter to the valid state, and send it to the seller's bank server; also set to receive the goods receipt notification sent by the transaction intermediary server, and transfer the funds frozen by the buyer account to the seller account of the seller's bank server. in.

[0133] Referring to FIG. 12, the online transaction device applied to the buyer's bank server includes the following modules: [0134] The third receiving module is configured to receive a silver letter certificate to be validated by the seller bank server, and a transaction intermediary Received notification sent by the server;

[0135] The verification module is configured to: after receiving the silver credit certificate sent by the seller bank server to be in a valid state, obtain the payment verification information of the buyer from the client and perform verification;

[0136] The freezing module is set to freeze the funds corresponding to the order amount in the buyer account after the verification is passed, and the silver is The status of the letter is updated to be valid and sent to the seller's bank server;

[0137] The payment module is configured to, after receiving the received notification sent by the transaction intermediary server, transfer the funds frozen by the buyer account to the seller account of the seller bank server.

[0138] In order to prevent the buyer from receiving the goods receipt confirmation after receiving the goods, the transfer module is further set to: If the received goods notification sent by the transaction intermediary server is not received within the preset time, the preset is exceeded. After the day, the funds frozen by the buyer's account are transferred to the seller's account of the seller's bank server.

[0139] Transaction Mediation Server: Set to receive the order information sent by the commodity server, arrange the delivery according to the order information, and send the receipt notification to the buyer's bank server after determining that the buyer has received the goods.

[0140] Referring to FIG. 13, the online transaction device applied to the transaction broker server includes the following modules: [0141] The fourth receiving module is configured to receive the order information sent by the commodity server;

[0142] The delivery arrangement module is configured to arrange delivery according to the transaction information such as the commodity information and the buyer information in the order information; specifically, the seller may be notified to arrange the delivery, including but not limited to any one or more of the following One way: send an email notification to the seller's preset email address, send a short message notification to the seller's preset mobile number, send a QQ message to the seller's preset QQ number, or send a WeChat message to the seller's preset microcode. The seller arranges the delivery after receiving the delivery notice;

[0143] The goods receipt notification module is configured to send a receipt notification to the buyer's bank server after determining that the buyer has received the goods. Specifically, after receiving the receipt confirmation notification sent by the client, the received delivery notification module determines that the buyer has received the goods; or, the received delivery notification module does not receive the client within the preset time after scheduling the delivery. Feedback information, the buyer has received the goods by default after the preset time is exceeded.

[0144] Specifically, the seller pre-stores the product information in the product server, and the buyer communicates with the product server through the client, acquires the product information from the product server, and selects the product to be purchased. The client generates order information based on the item information selected by the buyer, and submits the order information to the product server. The commodity includes a tangible physical product and an intangible service; the commodity information includes information such as the price and parameters of the commodity; the commodity server may be a commercial computer server, or may be a computer server set up by the seller itself; the client is a buyer-operated communication Terminals, including but not limited to mobile devices, tablet devices, computers and other terminal devices. The buyer's bank server refers to the bank server where the buyer's bank account is located, the seller's bank server refers to the bank server where the seller's bank account is located, and the buyer's bank server and the seller's bank server may be the same bank's server (ie the buyer and the seller's accountant) The same bank), or it may be The servers of different banks (ie the buyer and seller's Seto Bank are different). A bank letter is an electronic certificate that a bank credit promises to pay. It can be understood as an electronic data that can be stored in a computer system and transmitted over a network.

[0145] Through the online trading system of the embodiment, the transaction funds and transaction information in the transaction process are not transferred to the third-party payment platform, and the transaction status is monitored by generating the silver credit card, so that the funds flow and There is no deviation between the actual transactions, so that the effective flow of funds to deliver the goods in one hand and the next hand is effective, reducing the risk of funds and improving the security of transaction information.

[0146] As a preferred embodiment, in order to prevent the transaction information from being stolen, the client, the commodity server, the seller bank server, the buyer's bank server, and the transaction intermediary server are also set to: after data transmission and data reception, using digital envelope technology Communication data is transmitted securely. Thereby further improving the security of data transmission and ensuring the security of transactions.

[0147] When the client, the commodity server, the seller's bank server, the buyer's bank server, and the transaction broker server are used as data senders, it is also set to:

[0148] generating a symmetric key, encrypting the communication data by using a symmetric key to form a first ciphertext; encrypting the symmetric key by using a public key of the data receiver to form a second ciphertext; using the private key of the first pair A ciphertext and a second ciphertext are signed and sent to the data receiver.

[0149] In order to further prevent the symmetric key from being stolen, the data sender randomly generates a symmetric key every time the data is transmitted, thereby achieving the effect of dynamic anti-counterfeiting. After encrypting the communication data, the data sender preferably encrypts the communication data with the AES algorithm using the symmetric key to form the first ciphertext.

[0150] When the client, the commodity server, the seller bank server buyer bank server, and the intermediary transaction server act as data senders, it is also set to:

[0151] after receiving the first ciphertext and the second ciphertext, verifying the signatures of the first ciphertext and the second ciphertext by using the public key of the data sender; and after verifying, using the private key of the second secret The text decryption obtains a symmetric key; the first ciphertext is decrypted by using a symmetric key to obtain communication data.

[0152] In some embodiments, the data sender may not sign the first ciphertext and the second ciphertext, and the corresponding data receiver does not need to perform signature verification on the first ciphertext and the second ciphertext.

[0153] Referring to FIG. 14, a second embodiment of the online transaction system of the present invention is proposed. The difference between this embodiment and the first embodiment is that a monitoring server is added, and the monitoring server is configured as: [0154] During the data transmission process, the data transmitted by the data sender and the data received by the data receiver are collected, and the consistency of the transmitted data and the received data is verified, and the collected data and the received data are collected. The data is compared to determine whether the two are consistent. Wherein, when the client, the commodity server, the seller bank server, the buyer bank server, and the transaction broker server send the data as the data sender, the data is received as the data receiver. Therefore, the embodiment adopts the dual-track verification technology to prevent data from being tampered with during the communication process, thereby further ensuring the security of the transaction.

[0155] Further, in order to balance the convenience of communication and ensure data security, this embodiment also adopts a two-network combination technology. That is, the client, the commodity server, the buyer's bank server, and the seller's bank server communicate through the public network, and the monitoring server communicates with the buyer's bank server and the seller's bank server respectively through a dedicated line. The security of the transaction is further guaranteed.

[0156] It should be noted that the technical features in the foregoing method embodiments can be applied in both the system and the device embodiments, and are not repeated here.

[0157] It will be understood by those skilled in the art that all or part of the steps of the foregoing embodiments may be implemented by a program to control related hardware, and the program may be stored in a computer readable storage medium. The storage medium may be a ROM/RAM, a magnetic disk, an optical disk, or the like.

[0158] It is to be understood that the foregoing is only a preferred embodiment of the present invention, and is not intended to limit the scope of the invention, the equivalent structure or equivalent Indirect use in other related technical fields, including the industrial applicability within the scope of patent protection of the present invention.

[0159] The online transaction method method, apparatus and system of the present invention send a request for a certificate to a seller's bank server through a commodity server, and the intermediary transaction server sends a receipt notification to the buyer's bank server, at the client, the commodity server, the buyer's bank server The transaction process is completed in the interaction between the seller's bank server and the transaction intermediary server. The transaction funds and transaction information in the transaction process are not transferred to the third-party payment platform, but all flow within the banking system, facilitating the supervision of the bank and the transaction subject. Credit supervision. And through the generation of the silver letter to the actual monitoring of the transaction status, so that there is no deviation between the capital flow and the actual transaction, so that the effective flow of money to deliver the goods in one hand, can effectively reduce the risk of funds and improve the transaction. Information security. In addition, digital envelopes and dynamic anti-counterfeiting technology are used to communicate data. Safe transmission of data can ensure the security of communication data; Double-track verification can prevent data from being tampered with technology; The use of two networks can balance the convenience and security of communication.

Claims

Claim

[Claim 1] An online transaction method comprising the steps of:

After receiving the order information sent by the client, the commodity server sends a silver credit certificate request to the seller bank server according to the order information;

The seller bank server generates a silver certificate to be valid according to the silver credit certificate request and sends it to the buyer bank server;

The buyer bank server obtains the buyer's payment verification information from the client and performs verification; after the verification is passed, the funds corresponding to the order amount in the buyer account are frozen, and the status of the bank letter is updated to In effect, and sent to the seller's bank server; the seller's bank server updates the status of the validated bank letter to the received certificate, and sends the received certificate notification to the commodity server;

The commodity server sends the order f π interest to the transaction intermediary server according to the received notification;

The transaction intermediary server arranges the delivery according to the order information, and after determining that the buyer has received the goods, sends the received delivery notice to the buyer's bank server; after the buyer's bank server receives the received delivery notification, The funds frozen in the buyer account are transferred to the seller account of the seller's bank server.

[Claim 2] The online transaction method according to claim 1, wherein the method further comprises: the data transmission and data reception of the client, the commodity server, the buyer bank server, the seller bank server, and the transaction intermediary server The digital data envelope is used to securely transmit communication data.

[Claim 3] The online transaction method according to claim 2, wherein the secure transmission of the communication data by using the digital envelope comprises:

The data sender generates a symmetric key, encrypts the communication data by using the symmetric key to form a first ciphertext, and encrypts the symmetric key by using a public key of the data receiver to form a second ciphertext, A ciphertext and a second ciphertext are sent to the data receiver;

The data receiver decrypts the second ciphertext by using its own private key to obtain the symmetric key, and decrypts the first ciphertext by using the symmetric key to obtain the communication data. The online transaction method according to claim 3, wherein the step of transmitting the first ciphertext and the second ciphertext to the data receiver further comprises: the data sender separately using the private key of the data The first ciphertext and the second ciphertext are signed;

Before the step of decrypting the second ciphertext by the data receiver to obtain the symmetric key by using the private key of the data, the method further includes: the data receiver verifying the first ciphertext and the second by using a public key of the data sender The signature of the ciphertext, when the verification is passed, proceeds to the next step.

The online transaction method according to claim 3, wherein the data sender generates a symmetric key in a specific manner: the data sender randomly generates a symmetric key. The online transaction method according to claim 3, wherein the specific manner of encrypting the communication data by using the symmetric key to form the first ciphertext is: encrypting the communication data by using the symmetric key with the AES algorithm Form the first ciphertext.

The online transaction method according to claim 1, wherein the method further comprises: during the data transmission process, the monitoring server collects the data sent by the data sender and the data received by the data receiver, and verifies the data. The consistency between the transmitted data and the received data;

Wherein, when the client, the commodity server, the buyer's bank server, the seller's bank server or the transaction intermediary server is transmitting the data as the data sender, when the client, the commodity server, the buyer's bank server, the seller's bank server or the transaction intermediary The server receives the data and becomes the data receiver.

The online transaction method according to claim 7, wherein the client, the commodity server, the buyer's bank server, and the seller's bank server communicate via a public network, and the monitoring server and the buyer's bank server and the seller's bank respectively The server communicates over a dedicated line.

The online transaction method according to claim 1, wherein the method further comprises: after the transaction intermediary server receives the receipt confirmation notification sent by the client, determining that the buyer has received the goods; or

The transaction intermediary server does not receive the feedback information of the client within the preset time after scheduling the shipment, and determines that the buyer has received the goods after exceeding the preset time. [Claim 10] An online transaction system comprising a client configured to generate order information based on a commodity booked by a buyer, further comprising a commodity server, a buyer bank server, a seller bank server, and a transaction broker server, wherein:

The commodity server is configured to: after receiving the order information sent by the client, send a silver credit certificate request to the seller bank server; after receiving the received certificate notification sent by the seller bank server, Sending the order information to the transaction intermediary server, the seller bank server, configured to generate a silver credit certificate to be valid after receiving the silver credit certificate request, and send the silver credit card to the buyer bank server; After the valid silver certificate sent by the buyer's bank server is sent, the status of the silver credit is updated to the received status, and the received notification is sent to the commodity server; the transaction intermediary server, setting In order to arrange delivery according to the order information, and after determining that the buyer has received the goods, send the received delivery notice to the buyer's bank server;

The buyer bank server is configured to: after receiving the silver credit certificate in the inactive state, obtain the buyer's payment verification information from the client and perform verification; when the verification is passed, freeze the order amount in the buyer account Corresponding funds, and updating the status of the bank letter to the valid state, and sending the status to the seller bank server; after receiving the received goods notification, transferring the funds frozen by the buyer account to the office In the seller's account of the seller's bank server.

[Claim 11] The online transaction system according to claim 10, wherein the client, the commodity server, the buyer bank server, the seller bank server, and the transaction intermediary server are further configured to: after data transmission and data reception, Digital envelope technology securely transmits communication data.

[Claim 12] The online transaction system according to claim 11, wherein:

When the client, the commodity server, the buyer bank server, the seller bank server or the transaction broker server is used as a data sender, the method is: generating a symmetric key, and encrypting the communication data by using the symmetric key to form a first ciphertext Encrypting the symmetric key with the public key of the data recipient to form a second ciphertext, the first ciphertext and the second The ciphertext is sent to the data receiver;

When the client, the commodity server, the buyer's bank server, the seller's bank server, or the transaction intermediary server is used as a data receiver, the method is: decrypting the second ciphertext by using its own private key to obtain the symmetric key, and utilizing The symmetric key decrypts the first ciphertext to obtain the communication data.

[Claim 13] The online transaction system according to claim 12, wherein:

When the client, the commodity server, the buyer's bank server, the seller's bank server or the transaction intermediary server is used as the data sender, the method is further configured to: sign the first ciphertext and the second ciphertext respectively by using the private key thereof And then sent to the data receiver; when the client, the commodity server, the buyer bank server, the seller bank server or the transaction intermediary server as the data receiver, is further configured to: use the data sender's public key verification The signatures of the first ciphertext and the second ciphertext are decrypted after the verification is passed.

[Claim 14] The online transaction system according to claim 12, wherein, when the client, the commodity server, the buyer bank server, the seller bank server, or the transaction intermediary server is used as a data sender, the method is further configured to: send data吋 Randomly generate symmetric keys.

[Claim 15] The online transaction system according to claim 12, wherein, when the client, the commodity server, the buyer's bank server, the seller's bank server, or the transaction intermediary server is used as a data sender, the method is further set as: The symmetric key encrypts the communication data by the AES algorithm to form a first ciphertext.

[Claim 16] The online transaction system according to claim 10, wherein the online transaction system further comprises a monitoring server, wherein the monitoring server is configured to: in the process of data transmission, the peer data collection sender sends Data and data received by the data receiver, verifying the consistency of the transmitted data and the received data;

Wherein, when the client, the commodity server, the buyer's bank server, the seller's bank server or the transaction intermediary server sends the data as the data sender, when the client, the commodity server, the buyer's bank server, the seller's bank server or the transaction intermediary server The received data is the data receiver. The online transaction system according to claim 16, wherein the client, the commodity server, the buyer's bank server, and the seller's bank server communicate via a public network, and the monitoring server and the buyer's bank server and the seller's bank respectively The server communicates over a dedicated line.

The online transaction system according to claim 10, wherein said transaction intermediary server is set to:

After receiving the receipt confirmation notification sent by the client, it is determined that the buyer has received the goods; or when the feedback information of the client is not received within the preset time after the delivery is scheduled, then the After the default time, the buyer has received the goods.

An online transaction method is applied to a commodity server, and the method comprises the following steps: after receiving the order information sent by the client, sending a silver credit certificate request to the seller bank server according to the order information;

After receiving the received notification sent by the seller's bank server, the order information is sent to the transaction intermediary server.

An online transaction device is applied to a commodity server, and the device comprises the following modules: a first receiving module, configured to receive order information sent by a client, and a received notification sent by a seller bank server;

The certificate requesting module is configured to: after receiving the order information sent by the client, send a silver credit certificate request to the seller bank server according to the order information;

The order information sending module is configured to send the order information to the transaction intermediary server after receiving the received certificate notification sent by the seller bank server.

An online transaction method is applied to a seller's bank server. The method includes the following steps: after receiving a request for a silver credit card issued by a commodity server, generating a silver certificate to be valid and sending it to the buyer's bank server;

After receiving the valid silver certificate sent by the buyer's bank server, the status of the silver credit is updated to the received status, and the received notification is sent to the commodity server. An online transaction device for a seller's bank server, the device comprising the following modules: a second receiving module, configured to receive a silver credit certificate request sent by the commodity server, and an activated silver letter sent by the buyer bank server;

a silver credit card generating module, configured to generate a silver credit card to be valid according to the silver credit card verification request;

a silver letter transmitting module, configured to send the bank certificate to be in effect to the buyer bank server;

The received notification notification module is configured to update the status of the silver credit card to the received certificate status after receiving the validated silver letter sent by the buyer's bank server, and send the received certificate notification to the commodity server .

[Claim 23] An online transaction method, applied to a buyer's bank server, the method comprising the steps of: obtaining a payment verification information of a buyer after receiving a silver certificate to be validated by a seller's bank server; authenticating;

If the verification is passed, the funds corresponding to the order amount in the buyer account are frozen, and the status of the silver credit card is updated to have been validated, and sent to the seller's bank server;

After receiving the receipt notification sent by the transaction intermediary server, the funds frozen by the buyer account are transferred to the seller account of the seller bank server.

[Claim 24] An online transaction device, applied to a buyer's bank server, the device comprising the following modules: a third receiving module, configured to receive a silver credit card to be validated by the seller's bank server, and a transaction intermediary server Received notice;

The verification module is configured to: after receiving the silver certificate of the to-be-effective state, obtain the payment verification information of the buyer from the client and perform verification;

a freezing module, configured to freeze the funds corresponding to the order amount in the buyer account after the verification is passed, and update the status of the silver credit card to have been validated and sent to the seller bank server;

The payment module is configured to, after receiving the received delivery notification, transfer funds frozen by the buyer account to a seller account of the seller bank server.