WO2017088316A1

WO2017088316A1 - Payment method and device thereof

Info

Publication number: WO2017088316A1
Application number: PCT/CN2016/074888
Authority: WO
Inventors: 陈历伟; 汪智勇
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-11-27
Filing date: 2016-02-29
Publication date: 2017-06-01
Also published as: CN105488680A

Abstract

A payment method and device thereof. A terminal operates at least two operating systems at the same time, and the at least two operating systems comprise a secure payment system. The method comprises: when a payment operation of a user is detected, entering the secure payment system and collecting biological feature information of the user (S101); performing identity authentication on the user according to the collected biological feature information of the user (S102); if the authentication is successful, generating a payment request according to the payment operation (S103); and sending the payment request to a target transaction server for payment (S104). By using the secure payment system to collect the biological feature of the user and perform authentication, the technical solution can increase the security and convenience for terminal payment.

Description

Payment method and device thereof

This application claims priority to Chinese Patent Application No. 201510854609.X, entitled "A Payment Method and Apparatus" on November 27, 2015, the entire contents of which are incorporated herein by reference. In the application.

Technical field

The present invention relates to the field of terminal payment, and in particular, to a payment method and device thereof.

Background technique

With the development of e-commerce and the improvement of terminal technology, more and more users choose to use terminals for payment.

At present, the payment method of the terminal is generally a password verification payment. For example, when the user purchases an item, the user jumps to the installation payment application by sending a payment instruction, and performs a payment transaction by inputting the user name and password. The above method requires the user to input a password in each transaction, and the user experience is not good. If other malicious monitoring programs are installed incorrectly in the terminal, the operation process of inputting the password and the user name may be monitored, resulting in password leakage. Caused a great security risk.

Summary of the invention

Biometric information is authenticated to improve the security and convenience of terminal payments.

The embodiment of the present invention provides a payment method, wherein the terminal simultaneously runs at least two operating systems, the at least two terminal operating systems, and the multiple operating systems include a secure payment system, and the method includes:

When detecting a payment operation of the user, entering the secure payment system to collect biometric information of the user;

Performing identity authentication on the user according to the collected biometric information of the user;

If the authentication is successful, generating a payment request according to the payment operation;

The payment request is sent to the target transaction server for payment.

Correspondingly, the embodiment of the present invention further provides a payment device, wherein the terminal simultaneously runs at least two operating systems, and the at least two operating systems comprise a secure payment system, and the device includes:

An collecting unit, configured to collect biometric information of the user into the secure payment system when detecting a payment operation of the user;

An authentication unit, configured to perform identity authentication on the user according to the collected biometric information of the user;

a request generating unit, configured to generate a payment request according to the payment operation if the user identity authentication succeeds;

a sending unit, configured to send the payment request to a target transaction server for payment.

According to the embodiment of the present invention, the user's payment operation is detected, and the biometric information of the user is collected in the secure payment system, and then the user is identified according to the collected biometric information of the user. If the authentication succeeds, the payment request is generated according to the payment operation, and the payment request is sent to the target transaction server for payment, thereby improving the security and convenience of the terminal payment.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are some embodiments of the present invention, For the sake of the skilled person, the drawings of the present general field can also be obtained from these drawings without any creative work.

1 is a schematic flowchart of a payment method according to an embodiment of the present invention;

2 is a schematic flowchart of another payment method according to an embodiment of the present invention;

3 is a schematic structural diagram of a payment apparatus according to an embodiment of the present invention;

4 is a schematic structural diagram of another payment apparatus according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an authentication unit according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are a part of the embodiments of the present invention, and not all An embodiment. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the embodiment of the present invention, the terminal may include at least two operating systems, where at least two operating systems include a secure payment system for implementing secure payment during the transaction process, and the secure payment system may be installed with a payment application. Android system. Other systems in the terminal may include a management control system for managing the operation of various systems other than the management system, such as controlling the terminal to enter a secure payment system for payment, and the like. Among them, multiple operating systems also include non-secure payment systems. Non-secure payment systems refer to operating systems other than secure payment systems, which can be used to install various applications to achieve different functions.

FIG. 1 is a schematic flowchart of a payment method according to an embodiment of the present invention. As shown in FIG. 1 , the method in the embodiment of the present invention may include the following steps S101 to S104.

S101. When detecting a payment operation of the user, enter the secure payment system to collect biometric information of the user.

In a specific implementation, when detecting a payment operation of the user, the terminal enters the secure payment system to collect biometric information of the user. In the embodiment of the present invention, the user refers to a user who needs to use the payment function of the terminal. When the user needs to use the terminal to perform payment, the payment operation may be a series of actions of generating an initial order by using a user touch function button or the like. The initial order can include the item category, unit price, number of items, total amount, order number, and the like. When the terminal detects the user's payment operation, the current interface can be switched to the interface of the secure payment system to enter the secure payment system, and the generated initial order can be transmitted to the secure payment system. The terminal can use the secure payment system to call the biometric collection sensor to collect biometric information of the user, wherein the biometric information can be one of ECG signature waveform information, fingerprint feature information, iris feature information, and facial feature information. Or a variety of combinations.

S102. Perform identity authentication on the user according to the collected biometric information of the user.

In a specific implementation, the terminal performs identity authentication on the user according to the collected biometric information of the user. In the embodiment of the present invention, the preset biometric information may be collected in advance through the secure payment system. When the biometric information of the user is collected, the biometric information of the user may be compared with the preset biometric information to perform the user. Identity authentication so that payments can be made securely.

S103. If the authentication is successful, generate a payment request according to the payment operation.

In a specific implementation, if the terminal authentication is successful, the secure payment system may generate a payment request according to the payment operation. In order to ensure payment security, the biometric information may be first authenticated. If the authentication is successful, the user is a legitimate user and has the right to control the payment function of the terminal. The security system receives the initial order generated in the payment operation, adds the secret-free identification or password information to the initial order to generate a payment request.

S104. Send the payment request to the target transaction server for payment.

In a specific implementation, the terminal sends the payment request to a target transaction server to perform payment. In the embodiment of the present invention, the terminal may connect to the target transaction server through a virtual private network (VPN), and send a payment request carrying the secret-free identification or password information to the target transaction server to perform payment. Using VPN to connect to the target transaction server and terminal, you can avoid security risks caused by data leakage and ensure payment security.

FIG. 2 is a schematic flowchart diagram of another payment method according to an embodiment of the present invention. As shown in FIG. 2, the method in the embodiment of the present invention may include the following steps S201 to S209.

S201: Enter and store preset biometric information by using the secure payment system.

In a specific implementation, the terminal inputs and stores the preset biometric information through the secure payment system. In the embodiment of the present invention, the terminal may invoke the biometric collection sensor through the secure payment system to input the preset biometric information, and store the preset biometric information in the secure payment system. Because the ECG characteristic waveform, such as the P waveform reflecting the depolarization process of the atrial muscle, the QPR waveform reflecting the depolarization process of the ventricular muscle, and the T waveform reflecting the repolarization process of the ventricular muscle, are generally stable and unaffected by human emotions and movements. Or the influence of the external environment, and the waveform of the electrocardiogram of the person is affected by age, weight, mood, gender, heart position, heart size, etc., therefore, different people have different electrocardiogram characteristics, satisfying the unique requirement of identity recognition, and can be used for The user is identified. The biometric information may include one or more combinations of ECG signature waveform information, fingerprint feature information, iris feature information, and face feature information.

S202. When detecting a payment operation of the user, determining that the payment operation is initiated is an operating system running in the foreground.

In a specific implementation, when detecting a payment operation of the user, the terminal determines that the payment operation is initiated by an operating system running in the foreground. In the embodiment of the present invention, the user refers to a user who needs to use the payment function of the terminal, and the payment operation may be a series of actions of generating an initial order by using a touch function button or the like, and the initial order may include a product category, a unit price, Number, total amount, order number, etc. The terminal may include a plurality of operating systems, such as an Android operating system. When detecting a payment operation of the user, determining that the payment operation is initiated by an operating system running in the foreground of the terminal, the type of the operating system may be further determined. The operating system running in the foreground is a non-secure payment system, and step S203 is performed. If the operating system running in the foreground is a secure payment system, step S204 is performed.

S203. If the payment operating system belongs to a non-secure payment system, the control terminal runs the secure payment system in the foreground, and enters the secure payment system to collect the biometric information of the user.

In a specific implementation, if the payment operating system belongs to a non-secure payment system, the terminal control terminal runs the secure payment system in the foreground, and enters the secure payment system to collect biometric information of the user. In the embodiment of the present invention, if the payment operating system belongs to a non-secure payment system, the terminal may control the terminal to run the secure payment system in the foreground, and send the order information generated by the payment operation to the secure payment system. The secure payment system receives the order information, and can call the biometric collection sensor to collect the biometric information of the user by controlling the instruction.

S204. If the operating system running in the foreground is the secure payment system, enter the secure payment system to collect biometric information of the user.

In a specific implementation, if the operating system running in the foreground is the secure payment system, the terminal enters the secure payment system to collect biometric information of the user. In the embodiment of the present invention, if the payment operating system belongs to the secure payment system, the terminal may directly generate the order information by the secure payment system, and invoke the biometric collection sensor to collect the biometric information of the user by controlling the instruction.

S205. Align the biometric information with the preset biometric information.

In a specific implementation, the terminal compares the biometric information with the preset biometric information. For example, the terminal may compare the collected ECG signature waveform with the preset ECG signature waveform. If the compared matching index is higher than or equal to the preset threshold, the matching degree is high, and the determination may be determined. The user identity is consistent with the user identity of the preset biometric information, and step S206 may be performed. If the compared matching index is lower than the preset threshold, the matching degree is low, and the user identity of the user and the preset biometric information may be determined to be inconsistent. Step S207.

S206. If the comparison is consistent, determine that the user identity authentication is successful.

In a specific implementation, if the comparison is consistent, the terminal determines that the user identity authentication is successful. Step S208 is performed.

S207. If the comparison is inconsistent, output a prompt message without payment permission.

In a specific implementation, if the comparison is inconsistent, the terminal outputs prompt information without payment authority.

S208. If the authentication is successful, generate a payment request according to the payment operation.

In a specific implementation, if the terminal authentication succeeds, the terminal generates a payment request according to the payment operation. In order to ensure the security of the payment, the terminal may first perform authentication through the biometric information when the payment operation is performed. If the authentication is successful, the user is a legitimate user and has the right to control the payment function of the terminal. The security system receives the initial order generated in the payment operation, adds the secret-free identification or password information to the initial order to generate a payment request.

S209. Send the payment request to the target transaction server to make a payment.

In a specific implementation, the terminal sends the payment request to a target transaction server to perform payment. In the embodiment of the present invention, the terminal may connect to the target transaction server through the VPN, and send a payment request carrying the password information or the secret-free identifier to the target transaction server to perform payment. Using VPN to connect to the target transaction server and terminal, you can avoid security risks caused by data leakage and ensure payment security.

With the embodiment of the present invention, the preset biometric information can be entered and stored through the secure payment system. When the user's payment operation is detected, the operating system of the payment operation is determined to be operated, or directly enters the secure payment system to collect the user. And comparing the biometric information with the preset biometric information, determining whether the user identity is successfully authenticated according to the comparison result, and if the authentication is successful, generating a payment request according to the payment operation, And sending the payment request to the target transaction server for payment, using a secure payment system for payment, improving the security of the payment, and using the biometric information to authenticate the identity, and directly comparing the password and the user input. The operation is more convenient.

A payment device according to an embodiment of the present invention will be described in detail below with reference to FIG. It should be noted that the apparatus shown in FIG. 3 to FIG. 5 is used to perform the method of the embodiment shown in FIG. 1 and FIG. 2 of the present invention. For the convenience of description, only parts related to the embodiment of the present invention are specifically illustrated. The technical details are not disclosed, please refer to the embodiment shown in Figs. 1 and 2 of the present invention.

FIG. 3 is a schematic structural diagram of a terminal according to an embodiment of the present invention. The terminal includes the following units: an acquiring unit 11, an authentication unit 12, a request generating unit 13, and a sending unit 14.

The collecting unit 11 is configured to collect biometric information of the user into the secure payment system when detecting a payment operation of the user.

In a specific implementation, when the payment operation of the user is detected, the collecting unit 11 enters the secure payment system to collect the biometric information of the user. In the embodiment of the present invention, the user refers to a user who needs to use the payment function of the terminal. When the user needs to use the terminal to perform payment, the payment operation may be a series of actions of generating an initial order by using a user touch function button or the like. The initial order can include the item category, unit price, number of items, total amount, order number, and the like. When the terminal detects the user's payment operation, the current interface can be switched to the interface of the secure payment system to enter the secure payment system, and the generated initial order can be transmitted to the secure payment system. The collecting unit 11 may call the biometric collection sensor to collect the biometric information of the user through the secure payment system, wherein the biometric information may be one of electrocardiogram characteristic waveform information, fingerprint characteristic information, iris characteristic information, and facial feature information, and the like. One or more combinations.

The authentication unit 12 is configured to perform identity authentication on the user according to the collected biometric information of the user.

In a specific implementation, the authentication unit 12 performs identity authentication on the user according to the collected biometric information of the user. In the embodiment of the present invention, the preset biometric information may be collected in advance by the secure payment system. When the biometric information of the user is collected, the authentication unit 12 may compare the biometric information of the user with the preset biometric information. The user is authenticated by the identity so that payment can be made securely.

The request generating unit 13 is configured to generate a payment request according to the payment operation if the user identity authentication succeeds.

In a specific implementation, if the user identity authentication is successful, the request generating unit 13 generates a payment request according to the payment operation. In order to ensure payment security, biometric information can be used for authentication first. If the authentication succeeds, the user is a legitimate user and has the right to control the payment function of the terminal. The request generating unit 13 receives the initial order generated in the payment operation, and adds the secret-free identification or password information to the initial order to generate a payment request.

The sending unit 14 is configured to send the payment request to the target transaction server for payment.

In a specific implementation, the sending unit 14 sends the payment request to the target transaction server for payment. In the embodiment of the present invention, the sending unit 14 may connect to the target transaction server through the VPN, and send a payment request carrying the secret-free identification or password information to the target transaction server to perform payment. Using VPN to connect to the target transaction server and terminal, you can avoid security risks caused by data leakage and ensure payment security.

FIG. 4 is a schematic structural diagram of still another payment apparatus according to an embodiment of the present invention. The apparatus includes the following units: an acquisition unit 11, an authentication unit 12, a request generation unit 13, a sending unit 14, a determining unit 15, and a pre- Let unit 16.

The preset unit 16 is configured to input and store preset biometric information by using the secure payment system.

In a specific implementation, the preset unit 16 records and stores the preset biometric information through the secure payment system. In the embodiment of the present invention, the terminal may invoke the biometric collection sensor through the secure payment system to input the preset biometric information, and store the preset biometric information in the secure payment system. Because the ECG characteristic waveform, such as the P waveform reflecting the depolarization process of the atrial muscle, the QPR waveform reflecting the depolarization process of the ventricular muscle, and the T waveform reflecting the repolarization process of the ventricular muscle, are generally stable and unaffected by human emotions and movements. Or the influence of the external environment, and the waveform of the electrocardiogram of the person is affected by age, weight, mood, gender, heart position, heart size, etc., therefore, different people have different electrocardiogram characteristics, satisfying the unique requirement of identity recognition, and can be used for The user is identified. The biometric information may include one or more combinations of ECG signature waveform information, fingerprint feature information, iris feature information, and face feature information.

The determining unit 15 is configured to determine, when the user's payment operation is detected, that the payment operation is initiated by an operating system running in the foreground.

In a specific implementation, when the payment operation of the user is detected, the determining unit 15 determines that the payment operation is initiated by an operating system running in the foreground. In the embodiment of the present invention, the user refers to a user who needs to use the payment function of the terminal, and the payment operation may be a series of actions of generating an initial order by using a touch function button or the like, and the initial order may include a product category, a unit price, Number, total amount, order number, etc. Since the terminal may include multiple operating systems, such as an Android operating system, when the user's payment operation is detected, it is determined that the payment operation is initiated by the operating system running in the foreground, and the collection unit 11 may be further invoked according to the type of the operating system.

The collecting unit 11 is configured to: if the payment operating system belongs to a non-secure payment system, the control terminal runs the secure payment system in the foreground, and enters the secure payment system to collect the biometric information of the user.

In a specific implementation, if the payment operating system belongs to a non-secure payment system, the collecting unit 11 controls the terminal to run the secure payment system in the foreground, and enters the secure payment system to collect the biometric information of the user. In the embodiment of the present invention, if the payment operating system belongs to a non-secure payment system, the collection unit 11 may control the terminal to run the secure payment system in the foreground, and send the order information generated by the payment operation to the secure payment system. The secure payment system receives the order information, and can call the biometric collection sensor to collect the biometric information of the user by controlling the instruction.

The collecting unit 11 is further configured to: if the operating system running in the foreground is the secure payment system, enter the secure payment system to collect biometric information of the user.

In a specific implementation, if the operating system running in the foreground is the secure payment system, the collecting unit 11 enters the secure payment system to collect biometric information of the user. In the embodiment of the present invention, if the payment operating system belongs to the secure payment system, the terminal may directly generate the order information by the secure payment system, and invoke the biometric collection sensor to collect the biometric information of the user by controlling the instruction.

Specifically, please refer to FIG. 5, which shows the structure of the authentication unit 12 according to an embodiment of the present invention. intention. As shown in FIG. 5, the authentication unit 12 may include: a comparison sub-unit 121, a determination sub-unit 122, and an output sub-unit 123.

The comparison sub-unit 121 is configured to compare the biometric information with the preset biometric information.

In a specific implementation, the comparison sub-unit 121 compares the biometric information with the preset biometric information. For example, the comparison sub-unit 121 can compare the collected ECG signature waveform with the preset ECG signature waveform. If the comparison index is higher than or equal to the preset threshold, indicating that the matching degree is high, it can be determined. If the user is consistent with the user identity of the preset biometric information, the determining sub-unit 122 may be invoked. If the compared matching index is lower than the preset threshold, the matching degree is low, and the user identity of the user and the preset biometric information may be determined. Inconsistent, the output sub-unit 123 can be called.

The determining sub-unit 122 is configured to determine that the user identity authentication succeeds if the comparison is consistent.

In a specific implementation, if the comparison is consistent, the determining sub-unit 122 determines that the user identity authentication is successful. The request generation unit 13 can be called.

The output subunit 123 is configured to output prompt information without payment authority if the comparison is inconsistent.

In a specific implementation, if the comparison is inconsistent, the output subunit 123 outputs prompt information without payment authority.

The request generating unit 13 is configured to generate a payment request according to the payment operation if the authentication succeeds.

In a specific implementation, if the terminal authentication is successful, the request generating unit 13 generates a payment request according to the payment operation. In order to ensure the security of the payment, the terminal may first perform authentication through the biometric information when the payment operation is performed. If the authentication is successful, the user is a legitimate user and has the right to control the payment function of the terminal. The security system receives the initial order generated in the payment operation, adds the secret-free identification or password information to the initial order to generate a payment request.

In a specific implementation, the sending unit 14 sends the payment request to the target transaction server to perform payment. In the embodiment of the present invention, the terminal may connect to the target transaction server through the VPN, and the sending unit 14 sends the payment request carrying the password information or the secret-free identifier to the target transaction server for payment. Using VPN to connect to the target transaction server and terminal, you can avoid security risks caused by data leakage and ensure payment security.

With the embodiment of the present invention, the preset biometric information can be entered and stored through the secure payment system. When the user's payment operation is detected, the operating system of the payment operation is determined to be operated or directly entered. And collecting the biometric information of the user into the secure payment system, and comparing the biometric information with the preset biometric information, and determining whether the user identity is successfully authenticated according to the comparison result, and if the authentication is successful, Generating a payment request according to the payment operation, and transmitting the payment request to a target transaction server for payment, using a secure payment system for payment, improving payment security, and using biometric information to authenticate the identity, Compared with direct password and user input, the operation is more convenient.

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto, and thus equivalent changes made in the claims of the present invention are still within the scope of the present invention.

Claims

A payment method, characterized in that: the terminal simultaneously runs at least two operating systems, the at least two operating systems comprise a secure payment system, and the method comprises:

When detecting a payment operation of the user, entering the secure payment system to collect biometric information of the user;

Performing identity authentication on the user according to the collected biometric information of the user;

If the authentication is successful, generating a payment request according to the payment operation;

The payment request is sent to the target transaction server for payment.
The method according to claim 1, wherein after the detecting the payment operation, before entering the secure payment system to collect the biometric information of the user, the method further comprises:

Determining that the payment operation initiation is an operating system running in the foreground;

If the operating system running in the foreground is a non-secure payment system, the control terminal runs the secure payment system in the foreground, and then performs the step of collecting the biometric information of the user into the secure payment system;

And if the operating system running in the foreground is the secure payment system, performing the step of collecting the biometric information of the user into the secure payment system.
The method according to claim 1, wherein the biometric information comprises one or more combinations of electrocardiogram feature waveform information, fingerprint feature information, iris feature information, and face feature information.
The method according to claim 1, wherein before the authenticating the user according to the collected biometric information of the user, the method further comprises:

Preset biometric information is entered and stored by the secure payment system.
The method according to claim 4, wherein the authenticating the user according to the collected biometric information of the user comprises:

Comparing the biometric information with the preset biometric information;

If the comparison is consistent, determining that the user identity authentication is successful;

If the comparison is inconsistent, output the prompt message without payment permission.
A payment device, wherein the terminal simultaneously runs at least two operating systems, the at least two operating systems including a secure payment system, the device comprising:

An collecting unit, configured to collect biometric information of the user into the secure payment system when detecting a payment operation of the user;

An authentication unit, configured to perform identity authentication on the user according to the collected biometric information of the user;

a request generating unit, configured to generate a payment request according to the payment operation if the user identity authentication succeeds;

a sending unit, configured to send the payment request to a target transaction server for payment.
The device according to claim 6, further comprising:

a determining unit, configured to determine, when the user's payment operation is detected, that the payment operation is initiated by an operating system running in the foreground;

The collecting unit is further configured to: if the operating system running in the foreground is a non-secure payment system, the control terminal runs the secure payment system in the foreground, and enters the secure payment system to collect biometric information of the user;

The collecting unit is further configured to: if the operating system running in the foreground is the secure payment system, enter the secure payment system to collect biometric information of the user.
The apparatus according to claim 6, wherein the biometric information comprises one or more combinations of electrocardiogram feature waveform information, fingerprint feature information, iris feature information, and face feature information.
The device according to claim 6, further comprising:

And a preset unit, configured to enter and store preset biometric information by using the secure payment system.
The device according to claim 9, wherein the authentication unit comprises:

Aligning subunits, configured to compare the biometric information with the preset biometric information;

Determining a subunit, configured to determine that the user identity authentication succeeds if the biometric information is compared with the preset biometric information;

The output subunit is configured to output prompt information without payment authority if the biometric information is inconsistent with the preset biometric information.