WO2021143110A1

WO2021143110A1 - Graphical code generation method and apparatus, and computer readable storage medium

Info

Publication number: WO2021143110A1
Application number: PCT/CN2020/107671
Authority: WO
Inventors: 王瑞明; 王钰; 蒋海俭; 邹震中
Original assignee: 中国银联股份有限公司
Priority date: 2020-01-17
Filing date: 2020-08-07
Publication date: 2021-07-22
Also published as: TWI759838B; TW202129490A; CN111522541B; CN111522541A

Abstract

A computer-readable graphical code generation method and apparatus, and a computer readable storage medium. The method comprises the following steps: sending a request message to a receiving end to request information representing a graphical code, the request information comprising a feature value of a local trusted execution environment; receiving the information from the receiving end and storing same; and generating the graphical code according to the information.

Description

Graphical code generation method, device and computer readable storage medium

Technical field

The present invention relates to a computer-readable graphical code generation method, device and computer-readable storage medium, in particular, to a mechanism for generating computer-readable graphical code using characteristic values of a local trusted execution environment .

Background technique

With the improvement of communication network and other infrastructure and the popularization of smart phones, QR code payment has been accepted by the vast majority of Chinese consumers. At the same time, consumers in overseas markets also welcome this payment method. The share of overseas markets is also increasing. Compared with the traditional credit card payment method, the scan code payment does not need to carry a card separately, and the account information can be seen in real time through the client, so its user experience is better. However, scan code payment is more dependent on network quality and/or algorithm strength. Therefore, on the one hand, its user experience may be significantly deteriorated due to changes in network quality; on the other hand, security may be significantly affected due to insufficient algorithm strength.

Summary of the invention

In view of this, the present invention provides a mechanism for obtaining computer-readable graphical codes by using the characteristic values of the local trusted execution environment. Specifically, according to one aspect of the present invention, a computer-readable graphical code generation method is provided, the method includes the following steps: sending a request message to a receiving end to request information representing the graphical code, and The request message includes the characteristic value of the local trusted execution environment; receiving the information from the receiving end and storing it; and generating the graphical code according to the information.

In an embodiment of the present invention, optionally, the request message further includes account information.

In an embodiment of the present invention, optionally, the step of receiving and storing the information from the receiving end is specifically: encrypting the information from the receiving end and storing it in the local trusted execution Environment.

In an embodiment of the present invention, optionally, before the requesting step, the method further includes: generating the characteristic value according to the software and hardware information of the local trusted execution environment.

In an embodiment of the present invention, optionally, before the requesting step, the method further includes: sending the characteristic value and the identity authentication data to request the establishment of a mapping relationship between the two, and the information corresponds to the identity authentication data .

In an embodiment of the present invention, optionally, the identity authentication data is account information.

In an embodiment of the present invention, optionally, the number of requested graphical codes is multiple.

In an embodiment of the present invention, optionally, each of the graphical codes has a serial number.

In an embodiment of the present invention, optionally, the request is sent again when the number of the graphical codes that have not been generated is lower than a predetermined value.

In an embodiment of the present invention, optionally, the predetermined value corresponds to the characteristic value.

In an embodiment of the present invention, optionally, each of the graphical codes has a validity period, and the request is sent again when the number of the graphical codes that are not generated within the validity period is lower than a predetermined value.

In an embodiment of the present invention, optionally, the predetermined value is dynamically set according to the transmission frequency of the request message including the characteristic value.

According to another aspect of the present invention, there is provided a computer-readable graphical code generation method, characterized in that the method includes the following steps: receiving the characteristic value of the local trusted execution environment sent by the sending end; checking whether there is The mapping relationship between the characteristic value and the identity authentication data; and if it exists, the information representing the graphical code corresponding to the identity authentication data is generated and sent to the sending end.

In an embodiment of the present invention, optionally, before the receiving step, the method further includes: receiving the characteristic value of the local trusted execution environment and the identity authentication data sent by the sending end, and storing the characteristic value and the identity authentication data. The mapping relationship of the identity authentication data is described.

In an embodiment of the present invention, optionally, the number of graphical codes is multiple, and the information includes the serial number of each graphical code.

According to another aspect of the present invention, a computer-readable graphical code generation method is provided. The method includes the steps of: sending a characteristic value of a local trusted execution environment to a receiving end to request a graphical code; And present the graphical code of the receiving end.

In an embodiment of the present invention, optionally, the step of receiving and presenting the graphical code from the receiving end includes encrypting and storing the graphical code in the local trusted execution environment .

In an embodiment of the present invention, optionally, before the requesting step, the method further includes: sending the characteristic value and identity authentication data to request the establishment of a mapping relationship between the two, and the graphical code corresponds to the identity Authentication data.

In an embodiment of the present invention, optionally, the requested number of graphical codes is multiple, and only one graphical code is generated each time.

In an embodiment of the present invention, optionally, each of the graphical codes has a serial number, and one of the graphical codes is sequentially generated according to the serial number.

According to another aspect of the present invention, a computer-readable graphical code generation method is provided. The method includes the following steps: receiving a characteristic value of a local trusted execution environment sent by a sending end; and verifying whether the characteristic value exists A mapping relationship with the identity authentication data; and if it exists, the graphical code corresponding to the identity authentication data is generated and sent to the sending end.

In an embodiment of the present invention, optionally, the number of the graphical code is multiple, and the graphical code includes its serial number.

According to another aspect of the present invention, there is provided a computer-readable storage medium having instructions stored in the computer-readable storage medium, wherein, when the instructions are executed by a processor, the processor is caused to execute the above Any of the methods described in the article.

According to another aspect of the present invention, there is provided an apparatus for generating computer-readable graphical code, the apparatus comprising: a request module configured to send a request message to request information representing the graphical code, the request The message includes the characteristic value of the local trusted execution environment of the device; a receiving module configured to receive and store the information; and a rendering module configured to generate the graphical code according to the information.

In an embodiment of the present invention, optionally, the receiving module encrypts the information and stores it in the local trusted execution environment of the device.

In an embodiment of the present invention, optionally, the device further includes a generating module configured to generate the characteristic value according to software and hardware information of the local trusted execution environment of the device.

In an embodiment of the present invention, optionally, the request module is further configured to send the characteristic value and the identity authentication data to request the establishment of a mapping relationship between the two, and the information corresponds to the identity authentication data.

In an embodiment of the present invention, optionally, the number of the graphical codes requested by the request module is multiple.

In an embodiment of the present invention, optionally, the device further includes a judging module, and when the judging module determines that the number of the graphical codes that have not been generated is lower than a predetermined value, the requesting module sends the Mentioned request.

In an embodiment of the present invention, optionally, the judgment module is included in the local trusted execution environment.

In an embodiment of the present invention, optionally, the device further includes a judgment module, each of the graphical codes has a validity period, and when the judgment module determines that the graphical codes that are not generated within the validity period Send the request again when the number of is lower than the predetermined value.

In an embodiment of the present invention, optionally, the predetermined value corresponds to the characteristic value. In an embodiment of the present invention, optionally, the judgment module is included in the local trusted execution environment.

According to another aspect of the present invention, there is provided an apparatus for generating computer-readable graphical code, wherein the apparatus includes: a receiving module configured to receive a characteristic value of a local trusted execution environment sent by a sending end A verification module, which is configured to verify whether there is a mapping relationship between the characteristic value and the identity authentication data; and a sending module, which is configured to generate a representation corresponding to the identity authentication data if the mapping relationship exists The graphical code information is sent to the sending end.

In an embodiment of the present invention, optionally, the device further includes a storage module, wherein the receiving module is further configured to receive the characteristic value of the local trusted execution environment and the identity authentication data sent by the sending end, and The storage module stores the mapping relationship between the characteristic value and the identity authentication data.

In an embodiment of the present invention, optionally, there are multiple graphical codes, and the information sent by the sending module includes the serial number of each graphical code.

According to another aspect of the present invention, a computer-executable method is provided. The method includes the following steps: the processor of the mobile terminal determines to send the characteristic value of the local trusted execution environment of the mobile terminal to request the representation of the graphic The processor of the mobile terminal receives and stores the information; and the processor of the mobile terminal generates the graphical code according to the information.

In an embodiment of the present invention, optionally, the step of receiving and storing the information by the processor of the mobile terminal specifically includes: encrypting the information by the local trusted execution environment and storing it in In the local trusted execution environment.

In an embodiment of the present invention, optionally, before the requesting step, the method further includes: generating the characteristic value by the processor of the mobile terminal according to the software and hardware information of the local trusted execution environment.

In an embodiment of the present invention, optionally, before the requesting step, the method further includes: determining, by the processor of the mobile terminal, to send the characteristic value and identity authentication data to request the establishment of a mapping between the two Relationship, the information corresponds to the identity authentication data.

In an embodiment of the present invention, optionally, the processor of the mobile terminal determines to send the request again when the number of the graphical codes that have not been generated is lower than a predetermined value.

According to another aspect of the present invention, a computer-executable method is provided. The method includes the following steps: a processor of a server determines a characteristic value of a local trusted execution environment sent by a sender; The processor verifies whether there is a mapping relationship between the characteristic value and the identity authentication data; and the processor of the server determines if it exists, and generates information corresponding to the identity authentication data representing the graphical code And sent to the sending end.

In an embodiment of the present invention, optionally, before the receiving step, the method further includes: determining, by the processor of the server, to receive the characteristic value and identity authentication of the local trusted execution environment sent by the sending end Data, and store the mapping relationship between the characteristic value and the identity authentication data.

According to another aspect of the present invention, a mobile device is provided. The mobile device includes any one of the apparatuses for generating computer-readable graphical codes as described above.

According to another aspect of the present invention, a service platform is provided. The service platform includes any device for generating computer-readable graphical codes as described above.

According to another aspect of the present invention, there is provided a mobile device including: a display; a local trusted execution environment; a memory configured to store instructions; and a processor configured to execute the instructions for: a mobile terminal The processor of the mobile terminal determines to send the characteristic value of the local trusted execution environment of the mobile terminal to request information representing the graphical code; the processor of the mobile terminal receives and stores the information; The processor of the mobile terminal generates the graphical code according to the information; and the processor of the mobile terminal displays the graphical code on the display.

In an embodiment of the present invention, optionally, the processor is further configured to determine that the information is encrypted by the local trusted execution environment and stored in the local trusted execution environment.

In an embodiment of the present invention, optionally, the processor is further configured to generate the characteristic value according to software and hardware information of the local trusted execution environment.

In an embodiment of the present invention, optionally, the processor is further configured to determine to send the characteristic value and the identity authentication data to request the establishment of a mapping relationship between the two, and the information corresponds to the identity authentication data .

In an embodiment of the present invention, optionally, the processor is further configured to determine to send the request again when the number of the graphical codes that have not been generated is lower than a predetermined value.

According to another aspect of the present invention, there is provided a server including: a memory configured to store instructions; and a processor configured to execute the instructions for: determining, by the processor of the server, the local data sent by the sender The characteristic value of the trusted execution environment; the processor of the server verifies whether there is a mapping relationship between the characteristic value and the identity authentication data; and the processor of the server determines if there is a corresponding The information representing the graphical code in the identity authentication data is sent to the sending end.

In an embodiment of the present invention, optionally, the processor is further configured to determine to receive the characteristic value and identity authentication data of the local trusted execution environment sent by the sending end, and store the characteristic value and the identity authentication data. The mapping relationship of identity authentication data.

Description of the drawings

The above and other objects and advantages of the present invention will be more complete and clear from the following detailed description in conjunction with the accompanying drawings, wherein the same or similar elements are represented by the same reference numerals.

Fig. 1 shows a schematic diagram of a payment system according to an embodiment of the present invention.

Fig. 2 shows a schematic diagram of a payment system according to the prior art.

Fig. 3 shows a schematic diagram of a payment system according to the prior art.

Fig. 4 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention.

Fig. 5 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention.

Fig. 6 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention.

Fig. 7 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention.

Fig. 8 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention.

Fig. 9 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention.

Fig. 10 shows a schematic diagram of an apparatus for generating computer-readable graphical codes according to an embodiment of the present invention.

Fig. 11 shows a schematic diagram of an apparatus for generating computer-readable graphical codes according to an embodiment of the present invention.

Fig. 12 shows a mobile terminal according to an embodiment of the present invention.

Fig. 13 shows a schematic diagram of a server according to an embodiment of the present invention.

Fig. 14 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention.

Fig. 15 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention.

Fig. 16 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention.

Detailed ways

For brevity and illustrative purposes, this document mainly refers to its exemplary embodiments to describe the principles of the present invention. However, those skilled in the art will readily recognize that the same principle can be equally applied to all types of computer-readable graphical code generation methods, devices, and computer-readable storage media, and these same or similar ones can be implemented therein. According to the principle, any such changes do not deviate from the true spirit and scope of this patent application.

In the context of the present invention, the "characteristic value of the trusted execution environment" refers to information (for example, a set of codes) that corresponds to the trusted execution environment and can be used to distinguish the trusted execution environment (TEE) of different devices. . For example, the "characteristic value of the trusted execution environment" can be a set of codes generated based on the software and hardware information of the trusted execution environment, or a set of codes designated by the factory and stored in the trusted execution environment, or It is the information sent over the air and stored in the trusted execution environment. In some examples of this application, the generation mechanism of the feature value is not limited, as long as the feature value can distinguish the trusted execution environment of different devices.

Fig. 1 shows a schematic diagram of a payment system according to an embodiment of the present invention. As shown in the figure, in order to simplify the operation of the user and save the cost of learning, the user only needs to prepare a mobile terminal 10 (for example, a smart phone, a tablet computer, a smart wearable device, etc.) that subscribes to a network service. The mobile terminal 10 can communicate with other devices on the Internet, for example, via a wireless access device 41 (e.g., base station, AP) and a network 40 (e.g., local area network, metropolitan area network, wide area network, Internet, etc.). The mobile terminal 10 runs software or service that supports scan code payment. In some embodiments, after the user passes biometric verification or other forms of verification, the software or service can communicate with the Internet via the communication function in the mobile terminal 10. The server 30 communicates. In some embodiments, when a user requests a computer-readable graphical code (for example, a barcode, a two-dimensional code, etc.), the user side can initiate a request to the server 30 on the management side, and the server 30 returns payment information to the mobile terminal 10. , The mobile terminal 10 can generate a computer-readable graphical code according to the payment information.

An example of the store side is also shown in FIG. 1, where the store side includes a cash register device 20 with communication capability and a scanning device 21 with a reading capability of reading computer-readable graphical codes. The computer-readable graphical codes in this application include various forms of codes such as bar codes and two-dimensional codes. The information carried by these codes can be read by a reading device such as a scanning device 21 and passed through a checkout device 20. The type of computing device parses, so this type of code is computer readable. The computer-readable graphical codes claimed in this application are not limited to barcodes and two-dimensional codes, but also include other forms of graphical codes that can be read by a computer, regardless of whether these forms are based on certain standards or set by themselves. In some embodiments, in order to ensure the stability of the network connection of the cash register device 20, the cash register device 20 may communicate with other devices on the Internet in a wired transmission manner, for example.

In some embodiments, when the mobile terminal 10 on the user side presents a computer-readable graphical code to the store side, the scanning device 21 can read the code and input it into the cash register device 20 for analysis. The cash register device 20 then analyzes the code according to the analysis. The information generated by the information is sent to the server 30 on the management side. The server 30 processes the received information and judges its legality. If the received information is legal, the payment acceptance information can be returned to the cash register device 20. At this time, the cash register device 20 may give a corresponding prompt (for example, output a signal of successful payment) and a response (for example, perform a checkout process) according to the payment acceptance information. On the other hand, the server 30 can also return payment acceptance information to the mobile terminal 10 at the same time, and the user can confirm that the payment is completed accordingly. It should be noted that although only one server 30 is shown in FIG. 1, the server on the management side may be a server of various forms, for example, may be a server cluster that implements different functions. The cluster server can be located in one geographic location or in multiple locations.

Figures 2 and 3 show schematic diagrams of payment systems according to the prior art. Currently, there are two main ways to implement mobile QR code payment transaction technology. One is the online payment method, as shown in Figure 2. In this method, every time the user needs to use the QR code to pay, the client directly obtains the payment code of the current transaction from the client backend server 3001. Referring to Figure 1, taking a mobile phone as an example, the transaction flow of this method is roughly as follows. (1) The user opens the client that supports QR code scanning and payment on the mobile phone 10; (2) Clicks on the QR code to be scanned for payment; (3) The client requests the client backend server 3001 to obtain the payment QR code used for payment (4) The client background server 3001 requests the payment system server 3002 to obtain the payment QR code used for payment; (5) The payment system server 3002 sends the current payment QR code through the background method and returns to the client via the original path (6) The user displays the payment QR code to the merchant cashier; (7) The merchant acquiring system 2001 sends the QR code to the payment system server 3002, and the payment system server 3002 completes the payment after verifying the QR code. The online payment method may be suitable for transaction scenarios that require real-time authentication, such as transaction scenarios with large transaction amounts. However, the online payment method will depend on the user's network conditions when using it. If some merchants are located on the underground floor or in a poor network environment, it may cause users to wait for a long time, thereby affecting the user's payment experience.

The other is an offline payment method. Taking a mobile phone as an example, as shown in FIG. 3, every time a user needs to use a QR code to pay, the client directly obtains the payment code of the current transaction from the mobile phone 10 locally. The user's usage process is as follows: (1) The user opens the client that supports QR code scanning and payment on the mobile phone 10; (2) Clicks on the QR code to be scanned and paid; (3) The client uses the local algorithm to calculate the current payment (4) The user shows the payment QR code to the cashier of the merchant; (5) The merchant acquiring system 2001 sends the QR code to the payment system server 3002; (6) The payment system server 3002 passes certain algorithms, After verifying that the QR code is a valid QR code calculated by the client, complete the payment. The mobile phone 10 and the payment system server 3002 can synchronize data such as algorithms through the network 40 in a quasi-real-time or without real-time manner. However, offline payment methods rely on the confidentiality and unbreakability of the algorithm. The algorithm used in offline mode requires the mobile client and the payment system backend to be the same to calculate the same payment code. There are issues such as how to synchronize the algorithm, how to ensure the confidentiality of the algorithm, and whether the algorithm strength is sufficient, so the implementation is more complicated.

Fig. 4 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention. As shown in the figure, the method includes step S402, in which a request message including characteristic values of a local trusted execution environment (Trust Execution Environment, TEE) is sent to request information representing graphical code; step S404, in this step Receive and store the information representing the graphical code in step S406, in which the graphical code is generated according to the information representing the graphical code.

The characteristic value of the local trusted execution environment refers to the various types of symbols and/or values stored in the local trusted execution environment and corresponding to the local trusted execution environment for identifying the local trusted execution environment. In some embodiments of the present invention, the characteristic value of the trusted execution environment may be generated based on hardware information (for example, the serial number of the hardware) and/or software information (for example, the version number of the software) of the trusted execution environment. The characteristic value of the trusted execution environment can also be preset at the factory. At this time, the characteristic value may not be related to the hardware information or software information of the trusted execution environment, but a set of unique information stored in the trusted execution environment According to this information, different devices that request graphical codes (or called the user side, such as smart phones, tablet computers, smart wearable devices, etc.) can be distinguished. In addition, the feature value of the trusted execution environment can also be sent over the air. For example, the feature value can be sent over the air to the device (for example, smart phone, tablet computer, smart wearable device, etc.) requesting graphical code through the server on the management side. The device requesting the graphical code stores the characteristic value in the trusted execution environment. Correspondingly, the feature value recorded in the management side can be sent to and stored by the device requesting the graphical code later; or it can be stored in it and preset (for example, in the case of air transmission, the server on the management side Acting as a device for sending characteristic values over the air).

In some embodiments of the present invention, the request information may also include account information. In some cases, the device requesting the graphical code may be associated with multiple account information. At this time, in order to distinguish which bank account is used to request the graphical code, the account information needs to be sent to the management side. It is described above that the information representing the graphical code is received and stored in step S404. According to one aspect of the present invention, the information can be encrypted and stored by the client on the user side. At this time, the encrypted information will be stored in the common data storage location. According to another aspect of the present invention, in order to further improve data security, the information can be encrypted by the local trusted execution environment and stored in the local trusted execution environment. At this time, the stored information will be isolated from ordinary data, and the The client can read it only when allowed by the execution environment. Since in the latter aspect, the information is encrypted and stored by the local trusted execution environment, the trusted execution environment is required to decrypt the information before allowing the client to read it. According to another aspect of the present invention, the information can be encrypted by the client on the user side first, and then the encrypted information can be re-encrypted by the local trusted execution environment. At this time, the information will be double-encrypted, thereby further improving the data security. safety. Correspondingly, when the information is decrypted, the trusted execution environment and the client will sequentially decrypt the information. In other embodiments of the present invention, it can be set to allow only designated clients or services to access the information stored in the local trusted execution environment. This can be achieved by adding mobile device trusted execution environment security zone access control rules .

In an embodiment of the present invention, as shown in FIG. 5, before the above step of requesting information representing the graphical code, a feature value may be generated according to the software and hardware information of the local trusted execution environment (step S502). Of course, as mentioned above, the feature value in the present invention does not necessarily have to be generated based on software and hardware information. In other embodiments of the present invention, the manufacturer of the mobile device (or the owner of the payment system) can be used when leaving the factory. The feature value is preset according to the standard or the management side rule; in other embodiments of the present invention, the management side may also send the feature value empty. Both the preset feature value and the empty feature value provide convenience for providing the feature value in a standardized format. These two methods can make up for the duplication and insufficient number of feature values that may be caused when the feature value is generated based on the software and hardware information of the local trusted execution environment. And other defects. It should be pointed out that the characteristic value must be non-repeatable, and once the characteristic value is set, the value needs to be written into the local trusted execution environment. In this way, the uniqueness and security of the characteristic value can be guaranteed (non-tamperable) .

In an embodiment of the present invention, as shown in FIG. 6, before the above step of requesting information representing the graphical code, the characteristic value and the identity authentication data may be sent to request the establishment of the mapping relationship between the two (step S602). It should be noted that the information sent from the user side to the management side may only include the characteristic value and identity authentication data, and does not include the request to "establish a mapping relationship between the two"; the management side receives the characteristic value and identity authentication at the same time When the two data is data, it can be determined that the user side implicitly sends the request of "establishing the mapping relationship between the two". It should be noted that step S602 is not an indispensable pre-step to perform the above-described embodiment. In the above-described embodiment, the feature value and identity authentication data (for example, ID card information, bank account information, bank card The mapping relationship of the card number, etc.) can be established in advance through other means, so the information representing the graphical code can be directly requested. More generally, the mapping relationship between the characteristic value and the identity authentication data can be established before the request step, and the information representing the graphical code corresponds to the identity authentication data. For example, the client can be used to input identity authentication data and request to bind to the client (or its mobile terminal). At this point, the client can request the characteristic value and send it to the management side together with the identity authentication data. It needs to be pointed out that if the general ID card information is sent, the management side can obtain one or more bank account information (or bank card number, the same below) according to the recorded ID card information and return it to the client. One or more bank accounts that need to be bound are selected for payment. After the client selects the bank account to be bound, the selected identity authentication data can be sent to the management side, and the management side can establish the mapping relationship between the characteristic value and the identity authentication data accordingly. Once the mapping relationship is established, the management side can immediately retrieve the associated (mapped) identity authentication data after receiving the request containing the characteristic value in the subsequent process, more specifically, it can be bank account information (or bank card number). ) For subsequent steps.

In some embodiments of the present invention, step S502 is performed before step S602, that is, the feature value can be generated according to the software and hardware information of the local trusted execution environment, and then the feature value and identity authentication data can be sent to request the establishment of the mapping between the two The relationship indicates that the information of the graphical code corresponds to the identity authentication data.

In an embodiment of the present invention, the number of requested graphical codes is multiple, and only one graphical code is generated each time. In some scenarios, the network conditions between the user side and the management side may not always meet the needs of real-time or quasi-real-time communication; on the other hand, in some small payment scenarios, the user side may not always need Real-time or quasi-real-time interaction with the management side; of course, the basic principles of the present invention can also be applied to other application scenarios that do not require real-time or quasi-real-time interaction but require high confidentiality. In view of this, in some embodiments of the present invention, multiple graphical codes may be requested in one request, for example, 20 graphical codes may be requested at a time. In some embodiments of the present invention, different upper limits on the number of requests may be provided for different regions, different users, etc. according to the average use frequency of users in each region, the use frequency of a single user, and the credit level of a single user. In some embodiments of the present invention, different upper limits on the number of requests may also be set for payment scenarios with different amounts. For example, you can set a higher number of requests for clients or services used for commuting, and for customers who use large-value payments or general-purpose payments (that is, they can be used for both small payments and large-value payments). Set a lower number of requests on the end.

In an embodiment of the present invention, if the number of requested graphical codes is multiple, each graphical code may have a serial number, and a graphical code may be further generated sequentially according to the serial number. In an embodiment of the present invention, the order of using multiple graphical codes may not be set, and the management side only deletes the used graphical codes, which can reduce the amount of processing tasks on the user side and the management side, and achieve rapid The purpose of payment. More generally, in one embodiment of the present invention, each graphical code is numbered. If there are 20 graphical codes, they can be numbered as 01, 02, ..., 19, 20 in sequence. The graphical code number is used to manage it, and it is convenient for the management side to specify the management strategy of the graphical code. For example, if the graphical code numbered 03 is used for payment first, and the graphical code numbered 04 is used for the next payment, the management side first verifies the validity of the graphical code, but the graphical code can be determined according to the serial number. If it is used, the management side receives the graphical code and completes the acceptance. For another example, if the graphical code numbered 03 is used for payment first, and the graphical code numbered 01 is used for payment later, the management side first verifies the validity of the graphical code, and then can determine the graphical code pool according to the serial number. It is cracked or stolen, so the management side can stop payment processing on the device and account associated with the characteristic value and the mapped identity authentication data. In addition, it is possible to further deactivate related accounts, invalidate the remaining graphical codes in the graphical code pool, track the legality of the used graphical codes, and notify the owners of devices and accounts.

In an embodiment of the present invention, referring to FIG. 7, a judgment is made in step S702. When the number of ungenerated graphical codes is lower than a predetermined value (or threshold), the request is sent again, and the threshold is determined by the threshold module or system. generate. In this way, it can be ensured that there is always a certain amount of graphical code in the graphical code pool, so as to facilitate quick code output, such as when the network is not smooth, without affecting the user's perception. For example, it may be set to send a request again when the number of ungenerated graphical codes is lower than a predetermined value of 6, to request, for example, another 20 graphical codes. With this setting, there can always be 5-25 graphical codes in the graphical code pool. For example, if there are 20 graphical codes numbered 01, 02, ..., 19, 20 in the original graphical code pool, when the graphical code numbered 15 is used in order to pay, the user can determine The remaining 5 graphical codes that have not been generated will trigger the condition to send the request again, and the user side will request such as another 20 graphical codes (the numbers are for example 21, 22, ..., 39). , 40).

In some embodiments of the present invention, each of the graphical codes has a validity period, and the request is sent again when the number of the graphical codes that are not generated within the validity period is lower than a predetermined value.

In some embodiments of the present invention, the predetermined value corresponds to the characteristic value. In other words, each different user-side device may have a different predetermined value. For example, artificial intelligence analysis can be performed according to the frequency of use by users, and the predetermined values of different users can be dynamically adjusted. For example, the predetermined value for user A may be 3 and user B may be 5. In an embodiment of the present invention, the re-request on the user side includes the characteristic value of the local trusted execution environment, and the management side can query whether there is expected bound bank account information (or bank card number) based on the characteristic value. If there is bound bank account information (or bank card number), it can return 20 other graphical codes about the bound bank account information (or bank card number). If in some cases the above-mentioned re-request fails to be sent successfully or fails to be delivered to the management side, then the conditions for re-sending the request can be triggered again when the graphical code numbered 16 is used for payment. Those skilled in the art should understand that if the request still cannot be sent again, the trigger condition of the present invention will continue to apply until the request reaches, for example, another 20 graphical codes. In other examples of the present invention, the request may not be sent again until the graphical code is generated next time (that is, the above example is continued, and the request is sent again when the graphical code number 16 is not required to be paid), Instead, the request can be automatically sent again at a predetermined time interval until the request reaches, for example, another 20 graphical codes.

Fig. 15 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention. Compared with the embodiment corresponding to FIG. 4, the sending end directly requests the graphical code instead of requesting information representing the graphical code. As shown in the figure, the method includes step S1502, in which the characteristic value of the local trusted execution environment is sent to the receiving end to request graphical code; step S1504, the graphical code from the receiving end is received and presented. On the premise of not violating the basic idea of this embodiment, other aspects of this embodiment can be implemented with reference to the embodiment corresponding to FIG. 4.

In an embodiment of the present invention, optionally, the step of receiving and presenting the graphical code from the receiving end includes encrypting the graphical code and storing it in a local trusted execution environment. In other examples of the present invention, optionally, before the requesting step, it further includes generating a characteristic value according to the software and hardware information of the local trusted execution environment. In other examples of the present invention, optionally, before the requesting step, the method further includes sending the characteristic value and the identity authentication data to request the establishment of a mapping relationship between the two, and the graphical code corresponds to the identity authentication data. In addition, the identity authentication data may be bank account information, for example. In other examples of the present invention, optionally, the number of requested graphical codes is multiple, and only one graphical code is generated each time. In other examples of the present invention, optionally, each graphical code has a serial number, and a graphical code is sequentially generated according to the serial number. In other examples of the present invention, optionally, the request is sent again when the number of graphical codes that have not been generated is lower than a predetermined value. Similarly, without violating the basic concept of these embodiments, other aspects of these embodiments can be implemented with reference to the embodiments corresponding to FIGS. 5-7.

The above mainly describes the basic principle of the user side (in some cases recorded as a specific client, mobile terminal, etc.) requesting and generating computer-readable graphical code. The following will introduce the working principle of the management side (in some cases recorded as a specific payment system, payment system server, etc.).

Fig. 8 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention. As shown in the figure, the method includes step S802 receiving the characteristic value of the local trusted execution environment sent by the sending end, the characteristic value is used to request the sending of graphical code information; step S804, verifying whether there is a characteristic value and identity authentication The mapping relationship of the data, the identity authentication data is used to verify whether it matches the characteristic value; in step S806, if it exists, the information representing the graphical code corresponding to the identity authentication data is generated and sent to the sending end. Of course, if such a mapping relationship does not exist, it is automatically ignored, no information representing the graphical code is generated, and the next feature value (for example, a feature value sent by a sending end different from the previous one) can be received. The characteristic value of the local trusted execution environment sent by the sender can be generated in various ways described in detail above, and the received characteristic value can be used to verify the identity. Specifically, it can be determined whether to generate the information representing the graphical code according to whether there is identity authentication data corresponding to the received feature value. The corresponding relationship between the characteristic value and the identity authentication data can be formed by pre-establishing a mapping relationship table, and the content in the table can be increased or decreased according to actual usage. For example, if an identity authentication data is bound to a new terminal, an entry for the correspondence between the two needs to be added to the mapping relationship table. It should be noted that the generation of graphical code is not restricted by the establishment of the mapping table. This is because the process of generating graphical code has already established the mapping table by default, and the process of generating (code-sending) graphical code does not need to be considered. How to establish the mapping relationship table and the method of graphical code generation (code issuing) itself constitutes a relatively independent scope of protection.

In an embodiment of the present invention, as shown in FIG. 9, before the step of receiving the characteristic value of the local trusted execution environment sent by the sending end, it further includes: receiving the characteristic value of the local trusted execution environment sent by the sending end. And the identity authentication data, and the mapping relationship between the characteristic value and the identity authentication data is stored (step S902). The mapping relationship between the feature value and the identity authentication data (for example, ID card information, bank account information, bank card number, etc.) in the above-described embodiment can be established in advance through other means, and thus can directly request the representation of the graphical code information. More generally, the mapping relationship between the feature value and the identity authentication data can be established (stored) before the receiving step. For example, the client can be used to input identity authentication data and request to be bound to the client (or its mobile terminal). At this time, the client can request the characteristic value and send it to the management side together with the identity authentication data. It should be pointed out that if the information sent is ordinary ID card information, the management side can obtain one or more bank account information (or bank card number, the same below) according to the recorded ID card information and return it to the client. One or more bank accounts that need to be bound are selected for payment. After the client selects the bank account to be bound, the selected identity authentication data can be sent to the management side, and the management side can establish the mapping relationship between the characteristic value and the identity authentication data accordingly. Once the mapping relationship is established, the management side can immediately retrieve the associated (mapped) identity authentication data after receiving the request containing the characteristic value in the subsequent process. More specifically, it can be bank account information (or bank card number). ) For subsequent steps.

In an embodiment of the present invention, the number of graphical codes is multiple, and the information includes the serial number of each graphical code. In some embodiments of the present invention, multiple graphical codes may be sent in one transmission, for example, 20 graphical codes may be sent at a time. In some embodiments of the present invention, different upper limits on the number of requests may be provided for different regions, different users, etc. according to the average use frequency of users in each region, the use frequency of a single user, and the credit level of a single user. In some embodiments of the present invention, different upper limits on the number of requests may also be set for payment scenarios with different amounts. For example, you can set a higher number of requests for clients or services used for commuting, and for customers who are used for large payments or general payments (that is, they can be used for both small payments and large payments) Set a lower number of requests on the end.

In an embodiment of the present invention, the order of using multiple graphical codes may not be set, and the management side only deletes the used graphical codes, which can reduce the amount of processing tasks on the user side and the management side, and achieve rapid The purpose of payment. More generally, in one embodiment of the present invention, each graphical code is numbered. If there are 20 graphical codes, they can be numbered as 01, 02, ..., 19, 20 in sequence. The graphical code number is used to manage it, and it is convenient for the management side to specify the management strategy of the graphical code. For example, if the graphical code numbered 03 is used for payment first, and the graphical code numbered 04 is used for the next payment, the management side first verifies the validity of the graphical code, but the graphical code can be determined according to the serial number. If it is used, the management side receives the graphical code and completes the acceptance. For another example, if the graphical code numbered 03 is used for payment first, and the graphical code numbered 01 is used for payment later, the management side first verifies the validity of the graphical code, and then can determine the graphical code pool according to the serial number. It is cracked or stolen, so the management side can stop payment processing on the device and account associated with the characteristic value and the mapped identity authentication data. In addition, it is possible to further deactivate related accounts, invalidate the remaining graphical codes in the graphical code pool, track the legality of the used graphical codes, and notify the owners of devices and accounts.

Fig. 16 shows a schematic diagram of a method for generating computer-readable graphical codes according to an embodiment of the present invention. Compared with the embodiment corresponding to FIG. 8, the sending end directly requests the graphical code instead of requesting information representing the graphical code. As shown in the figure, the method includes step S1602 receiving the characteristic value of the local trusted execution environment sent by the sender, the characteristic value being used to request the sending of graphical code; step S1604, verifying whether there is a characteristic value and identity authentication data The mapping relationship, the identity authentication data is used to verify whether it matches the characteristic value; in step S1606, if it exists, a graphical code corresponding to the identity authentication data is generated and sent to the sending end. Of course, if such a mapping relationship does not exist, it is automatically ignored, no information representing the graphical code is generated, and the next feature value (for example, a feature value sent by a sending end different from the previous one) can be received. On the premise of not violating the basic idea of this embodiment, other aspects of this embodiment can be implemented with reference to the embodiment corresponding to FIG. 8.

In an embodiment of the present invention, optionally, before the receiving step, the method further includes: receiving the characteristic value and identity authentication data of the local trusted execution environment sent by the sending end, and storing the mapping relationship between the characteristic value and the identity authentication data. In an embodiment of the present invention, optionally, the number of graphical codes is multiple, and the graphical code includes its serial number. Similarly, without violating the basic concept of these embodiments, other aspects of these embodiments can be implemented with reference to the embodiment corresponding to FIG. 9.

According to another aspect of the present invention, a computer-readable storage medium is provided, and instructions are stored in the computer-readable storage medium, wherein, when the instructions are executed by a processor, the processor is caused to execute any one of the foregoing. Kind of method. The computer-readable medium referred to in the present invention includes various types of computer storage media, and may be any available medium that can be accessed by a general-purpose or special-purpose computer. For example, the computer-readable medium may include RAM, ROM, E2PROM, CD-ROM or other optical disk storage, magnetic disk storage or other magnetic storage devices, or can be used to carry or store desired program codes in the form of instructions or data structures The unit is also any other temporary or non-transitory medium that can be accessed by a general-purpose or special-purpose computer, or a general-purpose or special-purpose processor. As used herein, disks and discs include compact discs (CDs), laser discs, optical discs, digital versatile discs (DVD), floppy discs, and Blu-ray discs, where discs usually copy data magnetically, and Discs use lasers to optically copy data. The above combination should also be included in the protection scope of computer readable media.

Fig. 10 shows a schematic diagram of an apparatus for generating computer-readable graphical codes according to an embodiment of the present invention. As shown in the figure, the device 10 on the user side includes a request module 1012, a receiving module 1014, and a rendering module 1016. Wherein, the request module 1012 is configured to send a request message including the characteristic value of the local trusted execution environment of the device 10 to request information representing the graphical code; the receiving module 1014 is configured to receive the information and store it; the rendering module 1016 is configured to Generate graphical code based on the information.

In some embodiments of the present invention, the request module 1012 is configured to send a request message including the characteristic value of the local trusted execution environment of the device 10 to request information representing the graphical code, wherein the characteristic value of the trusted execution environment may be It is generated based on hardware information (for example, the serial number of the hardware) and/or software information (for example, the version number of the software) of the trusted execution environment of the device 10. The characteristic value of the trusted execution environment may also be preset at the factory. In this case, the characteristic value may not be related to the hardware information or software information of the trusted execution environment of the device 10, but a set of values stored in the trusted execution environment. The unique information can be used to distinguish different devices that request graphical codes (or called the user side, for example, smart phones, tablet computers, smart wearable devices, etc.). In addition, the feature value of the trusted execution environment can also be sent over the air. For example, the feature value can be sent over the air to the device 10 (for example, smart phone, tablet computer, smart wearable device, etc.) requesting graphical code through the server on the management side. Then, the device 10 stores the characteristic value in the trusted execution environment. Correspondingly, the characteristic value recorded in the management side may be sent to it by the device 10 and stored later; or it may have been stored in it and preset (for example, in the case of air transmission).

In some embodiments of the present invention, the request information may also include bank account information. In some cases, the device requesting the graphical code may be associated with multiple bank account information. At this time, in order to distinguish which bank account is used to request the graphical code, the bank account information needs to be sent to the management side.

It is stated above that the receiving module 1014 is configured to receive and store information, and the rendering module 1016 is configured to generate graphical codes according to the information. The receiving module 1014 can store the information in a storage device such as the device 10 after receiving the information. On the other hand, in order to ensure the security of the data, it can also be stored in the local trusted execution environment of the device 10.

In an embodiment of the present invention, the receiving module 1014 first encrypts the information and then stores it in the local trusted execution environment of the device 10, in this way, double insurance to ensure information security can be set. According to another aspect of the present invention, in order to further improve data security, the information can be encrypted by the local trusted execution environment and stored in the local trusted execution environment. At this time, the stored information will be isolated from ordinary data, and the It can be read only when permitted by the execution environment. Since in the latter aspect, the information is encrypted and stored by the local trusted execution environment, the trusted execution environment is required to decrypt the information before allowing reading.

According to another aspect of the present invention, the receiving module 1014 can first encrypt the information, and then the encrypted information can be encrypted by the local trusted execution environment. At this time, the information will be double-encrypted, thereby further improving the security of the data. . Correspondingly, when the information is decrypted, the trusted execution environment and the receiving module 1014 will decrypt the information in turn. In other embodiments of the present invention, it can be set to allow only designated clients or services to access the information stored in the local trusted execution environment. This can be achieved by adding mobile device trusted execution environment security zone access control rules . For example, the rules for access control in the secure area of the trusted execution environment define that only application A and application B are allowed to access the information stored in the local trusted execution environment. If the unauthorized application C wants to access the information stored in the local trusted execution environment The information in the execution environment will be rejected; if application A requests access to the information stored in the local trusted execution environment, it will pass. After the information is successfully read, the rendering module 1016 can generate graphical codes according to the information. For example, the rendering module 1016 can graphically present information, such as generating barcodes, two-dimensional codes, etc., according to national standards, industry standards, enterprise standards, or mutually negotiated standards.

In an embodiment of the present invention, the device 10 further includes a generating module (not shown in FIG. 10), which is configured to generate feature values according to the software and hardware information of the local trusted execution environment of the device 10. Of course, the feature value in the present invention does not have to be generated based on software and hardware information. In other embodiments of the present invention, the feature value can be preset according to the standard or management side rules when leaving the factory; in other embodiments of the present invention In the middle, the management side can also send feature values empty. Both the preset feature value and the empty feature value provide convenience for providing the feature value in a standardized format. These two methods can make up for the duplication and insufficient number of feature values that may be caused when the feature value is generated based on the software and hardware information of the local trusted execution environment. And other defects. It should be pointed out that the characteristic value must be non-repeatable and once the characteristic value is set, the value needs to be written into the local trusted execution environment, such as through the generation module, in this way, the uniqueness and security of the characteristic value can be guaranteed (Cannot be tampered with).

In an embodiment of the present invention, the request module 1012 is further configured to send the characteristic value and the identity authentication data to request the establishment of a mapping relationship between the two, and the information representing the graphical code corresponds to the identity authentication data. In some embodiments of the present invention, the identity authentication data may be bank account information, for example. It should be noted that the information sent by the request module 1012 may only include the characteristic value and the identity authentication data, and does not include the request to "establish a mapping relationship between the two"; the receiver receives the characteristic value and the identity authentication data at the same time. When there are two data, it can be determined that the device 10 has implicitly sent the request of "establishing the mapping relationship between the two". The mapping relationship between the feature value and the identity authentication data (for example, ID card information, bank account information, bank card number, etc.) in the above-described embodiment can be established in advance through other means, and thus can directly request the representation of the graphical code information. More generally, the mapping relationship between the feature value and the identity authentication data can be established before the request module 1012 sends the request to establish the mapping relationship between the two, and the information representing the graphical code corresponds to the identity authentication data. For example, the device 10 can be used to input identity authentication data and request to bind to the device 10. At this time, the request module 1012 can request the characteristic value and send it to the recipient together with the identity authentication data. It should be pointed out that if the request module 1012 sends ordinary ID card information, the receiver can query according to the recorded ID card information to obtain one or more bank account information (or bank card number, the same below) and return it to the device 10. 10 You can select one or more bank accounts that need to be bound for payment. After the device 10 selects the bank account to be bound, the selected identity authentication data can be sent to the recipient, and the recipient can establish the mapping relationship between the characteristic value and the identity authentication data based on this, and the information indicating the graphical code corresponds to all the identity authentication data. The identity authentication data. Once the mapping relationship is established, the recipient can immediately retrieve its associated (mapped) identity authentication data after receiving the request containing the characteristic value in the subsequent process, more specifically, it can be bank account information (or bank card number) ) For subsequent steps.

In an embodiment of the present invention, the number of graphical codes requested by the request module 1012 is multiple, and the rendering module 1016 generates only one graphical code at a time. In some scenarios, the network conditions may not always meet the needs of real-time or quasi-real-time communication; on the other hand, in some small payment scenarios, real-time or quasi-real-time interaction with the management side may not always be required; of course The basic principle of the present invention can also be applied to other application scenarios that do not require real-time or quasi-real-time interaction but require high confidentiality. In view of this, in some embodiments of the present invention, multiple graphical codes may be requested in one request, for example, 20 graphical codes may be requested at a time. In some embodiments of the present invention, different regions, different users, etc. can be provided with different upper limit of the number of requests according to the average usage frequency of users in each region, the usage frequency of a single user, and the credit level of a single user, etc., that is, Different upper limits for the number of requests can be provided for different devices 10. In some embodiments of the present invention, different upper limits on the number of requests may also be set for payment scenarios with different amounts. For example, a higher number of requests can be set for the device 10 or service used for commuting, and the device used for large payment or general payment (that is, it can be used for both small payment and large payment). 10Set a lower number of requests.

In an embodiment of the present invention, each graphical code has a serial number, and the rendering module 1016 is further configured to sequentially generate a graphical code according to the serial number. In an embodiment of the present invention, the order of using multiple graphical codes may not be set, and the management side only deletes the used graphical codes, which can reduce the amount of processing tasks on the user side and the management side, and achieve rapid The purpose of payment. More generally, in one embodiment of the present invention, each graphical code is numbered. If there are 20 graphical codes, the rendering module 1016 can sequentially number them as 01, 02, ..., 19, and 20. The graphical code number is used to manage it, and it is convenient for the management side to specify the management strategy of the graphical code. For example, if the graphical code numbered 03 is used for payment first, and the graphical code numbered 04 is used for the next payment, the management side first verifies the validity of the graphical code, but the graphical code can be determined according to the serial number. If it is used, the management side receives the graphical code and completes the acceptance. For another example, if the graphical code numbered 03 is used for payment first, and the graphical code numbered 01 is used for payment later, the management side first verifies the validity of the graphical code, and then can determine the graphical code pool according to the serial number. It is cracked or stolen, so the management side can stop payment processing on the device and account associated with the characteristic value and the mapped identity authentication data. In addition, it is possible to further deactivate related accounts, invalidate the remaining graphical codes in the graphical code pool, track the legality of the used graphical codes, and notify the owners of devices and accounts.

In an embodiment of the present invention, the device further includes a judging module (not shown in FIG. 10), which requests the module 1012 to send a request again when the judging module determines that the number of graphical codes that have not been generated is lower than a predetermined value. In this way, it can be ensured that there is always a certain amount of graphical code in the graphical code pool, so as to facilitate quick code output, such as when the network is not smooth, without affecting the user's perception. For example, it can be set that when the number of graphical codes not generated by the rendering module 1016 is lower than the predetermined value 6, the request module 1012 sends a request again to request, for example, another 20 graphical codes. With this setting, there can always be 5-25 graphical codes in the graphical code pool. For example, if there are 20 graphical codes numbered 01, 02, ..., 19, 20 in the original graphical code pool, when the graphical code numbered 15 is used in order to pay, the device 10 can determine The remaining 5 graphical codes that have not been generated will trigger the condition to send the request again, and the device 10 will request such as another 20 graphical codes (the numbers are for example 21, 22, ..., 39). , 40). In an embodiment of the present invention, the re-request of the device 10 includes the characteristic value of the local trusted execution environment, and the management side can query whether there is expected bound bank account information (or bank card number) based on the characteristic value, If there is bound bank account information (or bank card number), it can return 20 other graphical codes about the bound bank account information (or bank card number). If in some cases the above-mentioned re-request fails to be sent successfully or fails to be delivered to the management side, then the conditions for re-sending the request can be triggered again when the graphical code numbered 16 is used for payment. Those skilled in the art should understand that if the request still cannot be sent again, the trigger condition of the present invention will continue to apply until the request reaches, for example, another 20 graphical codes. In other examples of the present invention, the request may not be sent again until the graphical code is generated next time (that is, the above example is continued, and the request is sent again when the graphical code number 16 is not required to be paid), Instead, the request can be automatically sent again at a predetermined time interval until the request reaches, for example, another 20 graphical codes.

In some embodiments of the present invention, each of the graphical codes has a validity period, and the request is sent again when the judgment module determines that the number of the graphical codes that are not generated within the validity period is lower than a predetermined value.

In some embodiments of the present invention, the predetermined value corresponds to the characteristic value. In other words, each different user-side device may have a different predetermined value. For example, artificial intelligence analysis can be performed according to the frequency of use by users, and the predetermined values of different users can be dynamically adjusted. For example, the predetermined value for user A may be 3 and user B may be 5.

The judgment module of the present invention is included in the local trusted execution environment, and may also be included and executed in the general environment of the user-side device.

Fig. 11 shows a schematic diagram of an apparatus for generating computer-readable graphical codes according to an embodiment of the present invention. As shown in the figure, the device 31 on the management side includes a receiving module 3101, a verification module 3102, and a sending module 3103. The receiving module 3101 is configured to receive the characteristic value of the local trusted execution environment sent by the sending end; the verification module 3102 is configured to verify whether there is a mapping relationship between the characteristic value and the identity authentication data, and the identity authentication data is used for verification. Whether it matches the characteristic value; the sending module 3103 is configured to generate and send the information representing the graphical code corresponding to the identity authentication data to the sending end if the mapping relationship exists. Of course, if there is no such mapping relationship, no information representing the graphical code is generated, and the receiving module 3101 can receive the next characteristic value (for example, a characteristic value sent by a sending end different from the last sending). The characteristic value of the local trusted execution environment sent by the sender can be generated in various ways described in detail above, and the received characteristic value can be used to verify the identity. Specifically, it can be determined whether to generate the information representing the graphical code according to whether there is identity authentication data corresponding to the received feature value. The corresponding relationship between the characteristic value and the identity authentication data can be formed by pre-establishing a mapping relationship table, and the content in the table can be increased or decreased according to actual usage. For example, if an identity authentication data is bound to a new terminal, it is necessary to add an entry for the correspondence between the two in the mapping relationship table. It should be noted that the generation of graphical code is not restricted by the establishment of the mapping table. This is because the process of generating graphical code has already established the mapping table by default, and the process of generating (code-sending) graphical code does not need to be considered. How to establish the mapping relationship table and the method of graphical code generation (code issuing) itself constitutes a relatively independent scope of protection.

In an embodiment of the present invention, the device 31 further includes a storage module (not shown), wherein the receiving module 3101 is further configured to receive the characteristic value of the local trusted execution environment and the identity authentication data sent by the sending end, and the storage module stores The mapping relationship between the characteristic value and the identity authentication data. The mapping relationship between the feature value and the identity authentication data (for example, ID card information, bank account information, bank card number, etc.) in the above-described embodiment can be established in advance through other means, and thus can directly request the representation of the graphical code information. More generally, the mapping relationship between the feature value and the identity authentication data can be established (stored) before the receiving step. For example, the client can be used to input identity authentication data and request to be bound to the client (or its mobile terminal). At this time, the client can request the characteristic value and send it to the device 31 together with the identity authentication data. It should be pointed out that if the information sent is ordinary ID card information, the device 31 can obtain one or more bank account information (or bank card number, the same below) according to the recorded ID card information and return it to the client. One or more bank accounts that need to be bound are selected for payment. After the client selects the bank account to be bound, the selected identity authentication data can be sent to the device 31, and the device 31 can establish the mapping relationship between the characteristic value and the identity authentication data accordingly. Once the mapping relationship is established, the device 31 can immediately retrieve its associated (mapped) identity authentication data after receiving the request containing the characteristic value in the subsequent process. More specifically, it can be bank account information (or bank card number). ) For subsequent steps.

In an embodiment of the present invention, the number of graphical codes is multiple, and the information sent by the sending module 3103 includes the serial number of each graphical code. In some embodiments of the present invention, the sending module 3103 can send multiple graphical codes in one transmission. For example, the sending module 3103 can send 20 graphical codes at a time. In some embodiments of the present invention, different upper limits on the number of requests may be provided for different regions, different users, etc. according to the average use frequency of users in each region, the use frequency of a single user, and the credit level of a single user. In some embodiments of the present invention, different upper limits on the number of requests may also be set for payment scenarios with different amounts. For example, you can set a higher number of requests for clients or services used for commuting, and for customers who use large-value payments or general-purpose payments (that is, they can be used for both small payments and large-value payments). Set a lower number of requests on the end.

In an embodiment of the present invention, the order of using multiple graphical codes may not be set, and the device 31 only deletes the used graphical codes, which can reduce the amount of processing tasks on the user side and the device 31 and achieve rapid The purpose of payment. More generally, in one embodiment of the present invention, the device 31 numbers each graphical code. If there are 20 graphical codes, the device 31 can sequentially number them as 01, 02, ..., 19, 20. The graphical code number is useful for managing it, so that the device 31 can specify the management strategy of the graphical code. For example, if the graphical code numbered 03 is used for payment first, and the graphical code numbered 04 is used for the next payment, the device 31 first verifies the validity of the graphical code, but the graphical code can be determined according to the serial number. In use, the device 31 receives the graphical code and completes the acceptance. For another example, if the graphical code number 03 is used for payment first, and the graphical code number 01 is used for payment later, the device 31 first verifies the validity of the graphical code, and then can determine the graphical code pool according to the serial number. If it is cracked or stolen, the device 31 can stop payment processing on the device and account associated with the characteristic value and the mapped identity authentication data. In addition, it is possible to further deactivate related accounts, invalidate the remaining graphical codes in the graphical code pool, track the legality of the used graphical codes, and notify the owners of devices and accounts.

According to another aspect of the present invention, a mobile device is provided. The mobile device includes any device (request sender) for generating computer-readable graphical codes as described above.

According to another aspect of the present invention, a service platform is provided. The service platform includes any device (request receiving end) for generating computer-readable graphical codes as described above.

According to an aspect of the present invention, a computer-executable method is provided, which can be executed by the mobile terminal 11 shown in FIG. 12. The method includes the following steps: the processor 1114 of the mobile terminal 11 determines to send a request message including the characteristic value of the local trusted execution environment 1112 of the mobile terminal 11 to request information representing the graphical code; 1114 receives the information and stores it; and the processor 1114 of the mobile terminal 11 generates graphical codes according to the information. In some aspects of the present invention, some operations performed by the processor 1114 may be performed by the processor 1114 determining some specific execution components. Other aspects of this example can be further carried out with reference to the description of the above example.

In some embodiments of the present invention, the request information may also include bank account information. In some cases, the device requesting the graphical code may be associated with multiple account information. At this time, in order to distinguish which bank account is used to request the graphical code, the account information needs to be sent to the management side.

In an embodiment of the present invention, the processor 1114 of the mobile terminal 11 receives the information and stores it. Specifically, the local trusted execution environment 1112 of the mobile terminal 11 encrypts the information and stores it in the local trusted execution environment 1112. Other aspects of this example can be further carried out with reference to the description of the above example.

In an embodiment of the present invention, before the requesting step, the method further includes: generating the characteristic value by the processor 1114 of the mobile terminal 11 according to the software and hardware information of the local trusted execution environment 1112. Other aspects of this example can be further carried out with reference to the description of the above example.

In an embodiment of the present invention, before the requesting step, it further includes: the processor 1114 of the mobile terminal 11 determines to send the characteristic value and the identity authentication data to request the establishment of the mapping relationship between the two, and the information indicating that the graphical code corresponds to The identity authentication data. Other aspects of this example can be further carried out with reference to the description of the above example.

In an embodiment of the present invention, the number of requested graphical codes is multiple, and the processor 1114 of the mobile terminal 11 generates only one graphical code at a time. Other aspects of this example can be further carried out with reference to the description of the above example.

In an embodiment of the present invention, each graphical code has a number, and the processor 1114 of the mobile terminal 11 generates a graphical code in sequence according to the number. Other aspects of this example can be further carried out with reference to the description of the above example.

In an embodiment of the present invention, the processor 1114 of the mobile terminal 11 determines to send the request again when the number of graphical codes that have not been generated is lower than a predetermined value. Other aspects of this example can be further carried out with reference to the description of the above example.

According to another aspect of the present invention, a computer-executable method is provided. The method can be executed by the server 30 as shown in FIG. The working memory 3016) determines the characteristic value of the local trusted execution environment sent by the sender (not shown); the processor 3014 of the server 30 checks whether there is a mapping relationship between the characteristic value and the identity authentication data, and the identity authentication data is used It is verified whether it matches the characteristic value; and the processor 3014 of the server 30 determines that if it exists, it generates the information representing the graphical code corresponding to the identity authentication data and sends it to the sending end. Other aspects of this example can be further carried out with reference to the description of the above example.

In an embodiment of the present invention, before the receiving step, the method further includes: determining, by the processor 3014 of the server 30, the characteristic value and identity authentication data of the local trusted execution environment sent by the receiving end, and storing the characteristic value and identity authentication data The mapping relationship. Other aspects of this example can be further carried out with reference to the description of the above example.

In an embodiment of the present invention, the number of graphical codes is multiple, and the information includes the serial number of each graphical code. Other aspects of this example can be further carried out with reference to the description of the above example.

Referring to FIG. 12, according to another aspect of the present invention, a mobile device 11 is provided, which includes a display 1110, a local trusted execution environment 1112, a memory 1116, and a processor 1114. Wherein, the display 1110 is used to display the output screen, for example, used to display the graphical code in the present application (such as the two-dimensional code shown in the figure). In some examples, the display 1110 also integrates a touch input function. The mobile device 11 also includes a local trusted execution environment 1112 separated from the general environment 1118, where the general environment 1118 and the trusted execution environment 1112 are separated by secure hardware. The general environment 1118 includes a hardware layer 1102 composed of a main processor 1114 and a memory 1116 (which can be configured to store instructions), and an operating system layer 1103 is above the hardware layer 1102. The local trusted execution environment 1112 includes a secure area on the main processor 1114, which can ensure the security, confidentiality, and integrity of the code and data loaded into the environment. The local trusted execution environment 1112 provides an isolated execution environment, and the security features provided include: isolated execution, integrity of trusted applications, confidentiality of trusted data, and secure storage. The local trusted execution environment 1112 also includes an independent hardware layer 1104 and an operating system layer 1105.

In addition, the main processor 1114 is configured to execute instructions for: first, the processor 1114 of the mobile terminal 11 determines to send a request message including the characteristic value of the local trusted execution environment 1112 of the mobile terminal 11 to request a graphical code representation information. In this application, the information representing the graphical code may be information transmitted in an actual physical link, for example, it may be a data packet. The mobile terminal 11 can graphically present the information according to the information, national standards, industry standards, enterprise standards, or mutually negotiated standards.

In some embodiments of the present invention, the request information may also include account information. In some cases, the device requesting the graphical code may be associated with multiple account information. At this time, in order to distinguish which bank account is used to request the graphical code, the account information needs to be sent to the management side.

Secondly, the processor 1114 of the mobile terminal 11 receives and stores the information representing the graphical code, for example, stored in the memory 1116, and in other examples of the application, it can also be stored in the local trusted execution environment 1112 to ensure data security sex. Third, the processor 1114 of the mobile terminal 11 generates graphical codes according to the information. At this time, the generated graphical code can be directly driven to the display 1110. Finally, the processor 1114 of the mobile terminal 11 displays the graphical code on the display 1110. In an embodiment of the present invention, in order to further improve data security, the processor 1114 may be further configured to determine that the local trusted execution environment 1112 encrypts the information and stores it in the local trusted execution environment 1112, and the information stored at this time It will be isolated from ordinary data and can be read only when permitted by the trusted execution environment. Since the information is encrypted and stored by the local trusted execution environment 1112, the trusted execution environment is required to decrypt the information before allowing reading. According to another aspect of the present invention, the information can also be encrypted by the general environment 1118 (for example, the application client built in) first, and then the encrypted information can be encrypted by the local trusted execution environment 1112. At this time, the information Double encryption will further improve the security of the data. Correspondingly, when the information is decrypted, the trusted execution environment 1112 and the general environment 1118 will decrypt the information in turn. In other embodiments of the present invention, it can be set to allow only designated clients or services in the general environment 1118 to access the information stored in the local trusted execution environment 1112. This can be achieved by increasing the mobile device 11 trusted execution environment security Regional access control rules are implemented.

In an embodiment of the present invention, the processor 1114 is further configured to generate characteristic values according to hardware information (for example, the serial number of the hardware) and/or software information (for example, the version number of the software) of the local trusted execution environment 1112. Of course, the feature value in the present invention does not necessarily have to be generated based on software and hardware information. In other embodiments of the present invention, the manufacturer of the mobile device 11 (or the owner of the payment system) can be based on standards or management at the factory. The feature value is preset by the side rule; in other embodiments of the present invention, the management side can also send the feature value empty. Both the preset feature value and the empty feature value provide convenience for providing the feature value in a standardized format. These two methods can compensate for the duplication and quantity of feature values that may be caused when the feature value is generated based on the software and hardware information of the local trusted execution environment 1112. Insufficiency and other defects. It should be pointed out that the characteristic value must be non-repeatable and once the characteristic value is set, the value needs to be written into the local trusted execution environment 1112. In this way, the uniqueness and security of the characteristic value (non-tamperable) ).

In an embodiment of the present invention, the processor 1114 is further configured to determine to send the characteristic value and the identity authentication data to request the establishment of a mapping relationship between the two, and the information representing the graphical code corresponds to the identity authentication data. It should be noted that the processor 1114 determined that the information sent may only include the characteristic value and the identity authentication data, and does not include the request to "establish a mapping relationship between the two"; the management side received the characteristic value and the identity authentication data at the same time When these two data are used, it can be determined that the user side implicitly sends the request of "establishing the mapping relationship between the two". The mapping relationship between the characteristic value and the identity authentication data (for example, ID card information, bank account information, bank card number, etc.) can be established in advance through other means, so that the information representing the graphical code can be directly requested. More generally, the mapping relationship between the feature value and the identity authentication data can be established before the request step. For example, the client can be used to input identity authentication data and request to be bound to the client (or the mobile terminal 11 to which it belongs). At this time, the client can request the characteristic value and send it to the management side together with the identity authentication data. It should be pointed out that if the information sent is ordinary ID card information, the management side can obtain one or more bank account information (or bank card number, the same below) according to the recorded ID card information and return it to the mobile terminal 11. One or more bank accounts that need to be bound can be selected for payment. After the mobile terminal 11 selects the bank account to be bound, the selected identity authentication data can be sent to the management side, and the management side can establish the mapping relationship between the characteristic value and the identity authentication data accordingly. Once the mapping relationship is established, the management side can immediately retrieve the associated (mapped) identity authentication data after receiving the request containing the characteristic value in the subsequent process. More specifically, it can be bank account information (or bank card number). ) For subsequent steps.

In an embodiment of the present invention, the number of requested graphical codes is multiple, and the processor 1114 of the mobile terminal 11 generates only one graphical code at a time. In some scenarios, the network conditions may not always meet the needs of real-time or quasi-real-time communication; on the other hand, in some small payment scenarios, real-time or quasi-real-time interaction with the management side may not always be required; of course The basic principle of the present invention can also be applied to other application scenarios that do not require real-time or quasi-real-time interaction but require high confidentiality. In view of this, in some embodiments of the present invention, multiple graphical codes may be requested in one request, for example, 20 graphical codes may be requested at a time. In some embodiments of the present invention, different regions, different users, etc. can be provided with different upper limit of the number of requests according to the average usage frequency of users in each region, the usage frequency of a single user, and the credit level of a single user, etc., that is, Different upper limits for the number of requests can be provided for different devices 10. In some embodiments of the present invention, different upper limits on the number of requests may also be set for payment scenarios with different amounts. For example, a higher number of requests can be set for the device 10 or service used for commuting, and the device used for large payment or general payment (that is, it can be used for both small payment and large payment). 10Set a lower number of requests.

In an embodiment of the present invention, each graphical code has a number, and the processor 1114 of the mobile terminal 11 generates a graphical code in sequence according to the number. In an embodiment of the present invention, the order of using multiple graphical codes may not be set, and the management side only deletes the used graphical codes, which can reduce the amount of processing tasks on the user side and the management side, and achieve rapid The purpose of payment. More generally, in one embodiment of the present invention, each graphical code is numbered. If there are 20 graphical codes, the processor 1114 of the mobile terminal 11 can sequentially number them as 01, 02,... 19, 20. The graphical code number is used to manage it, and it is convenient for the management side to specify the management strategy of the graphical code. For example, if the graphical code numbered 03 is used for payment first, and the graphical code numbered 04 is used for the next payment, the management side first verifies the validity of the graphical code, but the graphical code can be determined according to the serial number. If it is used, the management side receives the graphical code and completes the acceptance. For another example, if the graphical code numbered 03 is used for payment first, and the graphical code numbered 01 is used for payment later, the management side first verifies the validity of the graphical code, and then can determine the graphical code pool according to the serial number. It is cracked or stolen, so the management side can stop payment processing on the device and account associated with the characteristic value and the mapped identity authentication data. In addition, it is possible to further deactivate related accounts, invalidate the remaining graphical codes in the graphical code pool, track the legality of the used graphical codes, and notify the owners of devices and accounts.

In an embodiment of the present invention, the processor 1114 is further configured to determine to send the request again when the number of graphical codes that have not been generated is lower than a predetermined value. In this way, it can be ensured that there is always a certain amount of graphical code in the graphical code pool, so as to facilitate quick code output, such as when the network is not smooth, without affecting the user's perception. For example, it may be set to determine the sending request again when the number of graphical codes not generated by the processor 1114 is lower than the predetermined value 6, so as to request, for example, another 20 graphical codes. With this setting, there can always be 5-25 graphical codes in the graphical code pool. For example, if there are 20 graphical codes numbered 01, 02, ..., 19, 20 in the original graphical code pool, when the graphical code numbered 15 is used in sequence to pay, the mobile terminal 11 can Determine the remaining 5 graphical codes that have not been generated. At this time, the condition for sending the request again will be triggered, and the mobile terminal 11 will request, for example, another 20 graphical codes (the numbers are 21, 22, ... , 39, 40). In an embodiment of the present invention, the re-request of the mobile terminal 11 includes the characteristic value of the local trusted execution environment, and the management side can query whether there is expected bound bank account information (or bank card number) based on the characteristic value. If there is bound bank account information (or bank card number), you can return 20 other graphical codes about the bound bank account information (or bank card number). If in some cases the above-mentioned re-request fails to be sent successfully or fails to be delivered to the management side, then the conditions for re-sending the request can be triggered again when the graphical code numbered 16 is used for payment. Those skilled in the art should understand that if the request still cannot be sent again, the trigger condition of the present invention will continue to apply until the request reaches, for example, another 20 graphical codes. In other examples of the present invention, the request may not be sent again until the graphical code is generated next time (that is, the above example is continued, and the request is sent again when the graphical code number 16 is not required to be paid), Instead, the request can be automatically sent again at a predetermined time interval until the request reaches, for example, another 20 graphical codes.

According to another aspect of the present invention, as shown in FIG. 13, a server 30 is provided, which includes a memory 3016 configured to store instructions and a processor 3014, wherein the processor 3014 is configured to execute instructions for performing the following operations: The processor 3014 of 30 determines to receive the characteristic value of the local trusted execution environment sent by the sender; the processor 3014 of the server 30 verifies whether there is a mapping relationship between the characteristic value and the identity authentication data, and the identity authentication data is used to verify whether the Feature value matching; and the processor 3014 of the server 30 determines that if it exists, it generates information representing the graphical code corresponding to the identity authentication data and sends it to the sender. Other aspects of this example can be further carried out with reference to the description of the above example.

In an embodiment of the present invention, the processor 3014 is further configured to determine the characteristic value and identity authentication data of the local trusted execution environment sent by the receiving sender, and store the mapping relationship between the characteristic value and the identity authentication data. Other aspects of this example can be further carried out with reference to the description of the above example.

In an embodiment of the present invention, the number of graphical codes is multiple, and the information includes the serial number of each graphical code. Other aspects of this example can be further referenced to the description of the above example.

Fig. 14 shows a schematic diagram of a method for generating a computer-readable graphical code according to an embodiment of the present invention, which includes an opening process, a two-dimensional code acquisition process, and a two-dimensional code payment process. In FIG. 14, the dotted line represents the “opening process”, the solid line represents the “two-dimensional code acquisition process”, and the dotted line represents the “two-dimensional code payment process”.

Pass through

According to the requirements of the payment system on the mobile phone client, apply to the mobile client backend system to open the mobile phone QR code payment service, set the TEE characteristic value of the mobile device and save it in the TEE environment, the characteristic value is unique and cannot be tampered with; The client background system binds the TEE feature value with the bank card that has just applied for QR code payment, establishes a mapping relationship table and saves it in the management system for the binding mapping relationship between the TEE feature value of the mobile phone and the bank card. In the TEE environment, establish a payment QR code pool.

QR code acquisition process

According to the control of the threshold management system, when the number of available QR codes in the payment QR code pool is less than a certain threshold, the mobile client initiates a batch acquisition request of the payment QR code to the payment system. The payment system checks the TEE feature value of the initiated mobile device and compares the mapping relationship with the bank card corresponding to the requested payment QR code. If the binding relationship is correct, it returns a certain number of payments made with the bank card to the mobile client. Dimension code, validity period and serial number of use. The mobile phone client encrypts and saves the batch of payment QR codes in the secure area of the mobile phone TEE, and marks the validity period and number.

QR code payment process

When the user opens the mobile client and needs to use the payment QR code, the client can decrypt the QR code stored in the payment QR code pool through the TEE secure area, and use the QR code according to the order of use. The mobile client will display the QR code on the screen page for merchants to scan to obtain and complete the transaction. The payment system proofreads the serial number and accepts QR code transactions in order. The process does not need to be connected to the Internet and can be completed in an offline environment.

In other examples of this application, the “threshold management system” in this embodiment can be combined with the mobile phone client, so that the mobile phone client has its own ability to manage the number of available QR codes. In other examples of this application, an application TA can be added in the TEE security domain of the mobile phone device to implement a "threshold management system" and realize the ability to manage the available number of QR codes. In other examples of this application, the "mobile phone device TEE feature value and bank card binding mapping relationship management system" in this embodiment can be combined with the payment system, and the payment system has the mapping relationship comparison capability. In other examples of this application, the "mobile phone device TEE feature value and bank card binding mapping relationship management system" in this embodiment can be combined with the mobile phone client back-end system, and the mobile phone client back-end system has the mapping relationship comparison ability. In other examples of this application, the mobile phone client encryption can be replaced with encryption in the TEE security domain of the mobile phone device after the QR code is obtained; or the encryption can be performed in the TEE security domain of the mobile phone device after the mobile phone client is encrypted. In other examples of this application, it is possible to add mobile phone TEE security zone access control rules to limit access to "a designated mobile phone client". Only limited clients can encrypt and store the QR code. In other examples of this application, the sequence number can be changed from the payment system to that provided by the mobile client or backend, and control, check, and use in sequence. In other examples of this application, the sequential numbering mechanism can be eliminated, and the QR code can be used randomly or out of order. In other examples of this application, the TEE feature value can be set from the mobile client to be uniformly allocated by the payment system, and the mobile TEE environment or background system can be safely stored.

In view of the above, this application provides a mechanism for generating computer-readable graphical codes using the characteristic values of the local trusted execution environment. One aspect of the mechanism can ensure the reliability of the mechanism for generating graphical codes, and the other aspects can ensure the generation of graphics. The convenience of the mechanism of standardized code, thereby effectively improving the user's perception of use. Some aspects of the application can reduce the strength requirements for algorithms such as two-dimensional codes, thereby reducing the difficulty of confidentiality. Thereby reducing implementation costs and improving implementation efficiency. Some aspects of this application do not use local and background algorithm calculation and comparison methods, so systemic risks caused by algorithms can be avoided.

It should be noted that some of the block diagrams shown in the drawings are functional entities, and may not necessarily correspond to physically or logically independent entities. These functional entities may be implemented in the form of software, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and/or processor devices and/or microcontroller devices.

The above examples mainly illustrate the computer-readable graphical code generation method, device, and computer-readable storage medium of the present invention. Although only some of the embodiments of the present invention have been described, those of ordinary skill in the art should understand that the present invention can be implemented in many other forms without departing from its spirit and scope. Therefore, the examples and implementations shown are regarded as illustrative rather than restrictive. The present invention may cover various modifications without departing from the spirit and scope of the present invention as defined by the appended claims. And replace.

Claims

A computer-readable graphical code generation method, characterized in that the method includes the following steps:

Sending a request message to the receiving end to request information representing the graphical code, the request message including the characteristic value of the local trusted execution environment;

Receive and store the information from the receiving end; and

The graphical code is generated according to the information.
The method according to claim 1, wherein the request message further includes account information.
The method according to claim 1, wherein the step of receiving and storing the information from the receiving end is specifically: encrypting the information from the receiving end and storing it in the local trusted execution Environment.
The method according to claim 1, characterized in that, before the requesting step, it further comprises: generating the characteristic value according to the software and hardware information of the local trusted execution environment.
The method according to claim 1, characterized in that, before the requesting step, it further comprises: sending the characteristic value and the identity authentication data to request the establishment of a mapping relationship between the two, and the information corresponds to the identity authentication data .
The method according to claim 5, wherein the identity authentication data is account information.
The method according to claim 1, wherein the requested number of graphical codes is multiple.
The method according to claim 7, wherein each of the graphical codes has a serial number.
The method according to claim 7 or 8, wherein the request is sent again when the number of the graphical codes that have not been generated is lower than a predetermined value.
The method according to claim 9, wherein the predetermined value corresponds to the characteristic value.
The method according to claim 7 or 8, wherein each of the graphical codes has a validity period, and when the number of the graphical codes that are not generated within the validity period is lower than a predetermined value, the graphical codes are sent again ask.
The method according to claim 11, wherein the predetermined value corresponds to the characteristic value.
The method according to claim 12, wherein the predetermined value is dynamically set according to the transmission frequency of the request message including the characteristic value.
A computer-readable graphical code generation method, characterized in that the method includes the following steps:

Receive the characteristic value of the local trusted execution environment sent by the sender;

Verifying whether there is a mapping relationship between the characteristic value and the identity authentication data; and

If it exists, the information representing the graphical code corresponding to the identity authentication data is generated and sent to the sending end.
The method according to claim 14, characterized in that, before the receiving step, it further comprises: receiving the characteristic value of the local trusted execution environment and the identity authentication data sent by the sending end, and storing the characteristic value and the identity authentication data. The mapping relationship of the identity authentication data is described.
The method according to claim 15, wherein the identity authentication data is account information.
The method according to claim 14, wherein the number of the graphical codes is multiple, and the information includes the serial number of each of the graphical codes.
A computer-readable graphical code generation method, characterized in that the method includes the following steps:

Send the characteristic value of the local trusted execution environment to the receiving end to request graphical code; and

Receiving and presenting the graphical code from the receiving end.
A computer-readable graphical code generation method, characterized in that the method includes the following steps:

Receive the characteristic value of the local trusted execution environment sent by the sender;

Verifying whether there is a mapping relationship between the characteristic value and the identity authentication data; and

If it exists, the graphical code corresponding to the identity authentication data is generated and sent to the sending end.
A computer-readable storage medium having instructions stored in the computer-readable storage medium, wherein when the instructions are executed by a processor, the processor is caused to execute any one of claims 1-19 The method described.
A device for generating computer-readable graphical code, characterized in that the device comprises:

A request module configured to send a request message to request information representing the graphical code, the request message including the characteristic value of the local trusted execution environment of the device;

A receiving module configured to receive and store the information; and

The rendering module is configured to generate the graphical code according to the information.
The apparatus according to claim 21, wherein the request message further includes account information.
The device according to claim 21, wherein the receiving module encrypts the information and stores it in the local trusted execution environment of the device.
The device according to claim 21, wherein the device further comprises a generating module configured to generate the characteristic value according to software and hardware information of the local trusted execution environment of the device.
The device according to claim 21, wherein the request module is further configured to send the characteristic value and the identity authentication data to request the establishment of a mapping relationship between the two, and the information corresponds to the identity authentication data.
The device according to claim 25, wherein the identity authentication data is account information.
The device according to claim 21, wherein the number of the graphical codes requested by the request module is multiple.
The device according to claim 27, wherein each of the graphical codes has a serial number.
The device according to claim 27 or 28, wherein the device further comprises a judgment module, and when the judgment module judges that the number of the graphical codes that have not been generated is lower than a predetermined value, the request module again Send the request.
The device according to claim 29, wherein the predetermined value corresponds to the characteristic value.
The apparatus according to claim 30, wherein the predetermined value is dynamically set according to the transmission frequency of the request message including the characteristic value.
The device according to claim 29, wherein the judgment module is included in the local trusted execution environment.
The device according to claim 27 or 28, wherein the device further comprises a judgment module, each of the graphical codes has a validity period, and when the judgment module determines that the graphical codes are not generated within the validity period The request is sent again when the number of conversion codes is lower than a predetermined value.
The device according to claim 32, wherein the predetermined value corresponds to the characteristic value.
The device according to claim 33, wherein the judgment module is included in the local trusted execution environment.
A device for generating computer-readable graphical code, characterized in that the device comprises:

A receiving module, which is configured to receive the characteristic value of the local trusted execution environment sent by the sender;

A verification module configured to verify whether there is a mapping relationship between the characteristic value and the identity authentication data; and

The sending module is configured to generate and send the information representing the graphical code corresponding to the identity authentication data to the sending end if the mapping relationship exists.
The device according to claim 36, wherein the device further comprises a storage module, wherein

The receiving module is further configured to receive the characteristic value of the local trusted execution environment and the identity authentication data sent by the sending end, and

The storage module stores the mapping relationship between the characteristic value and the identity authentication data.
The device according to claim 37, wherein the identity authentication data is account information.
The device according to claim 36, wherein the number of the graphical codes is multiple, and the information sent by the sending module includes the serial number of each of the graphical codes.
A mobile device, characterized in that the mobile device comprises the apparatus for generating computer-readable graphical code according to any one of claims 21-35.
A service platform, characterized in that the service platform comprises the device for generating computer-readable graphical codes according to any one of claims 36-39.