WO2021227966A1

WO2021227966A1 - Binding processing

Info

Publication number: WO2021227966A1
Application number: PCT/CN2021/092234
Authority: WO
Inventors: 殷雅雯
Original assignee: 支付宝(杭州)信息技术有限公司
Priority date: 2020-05-09
Filing date: 2021-05-07
Publication date: 2021-11-18
Also published as: CN111311251B; CN112053161A; CN112053161B; CN111311251A

Abstract

The embodiments of the present specification provide a binding processing method, apparatus and device. The method comprising: a second server side of a resource storage mechanism receiving a binding request sent by a second client side of the resource storage mechanism, and if it is determined that a target user does not register a payment account of a payment application, sending an account registration request of the target user to a first server side of the payment application; the first server side performing registration processing of the payment account according to registration information included in the account registration request, so as to obtain account identification information of the target user; sending the account identification information to the second server side, so that the second server side performs binding processing according to the account identification information; and if the first server side determines that the operation processing of the target user on a first client side of the payment application meets a preset security authentication condition, performing security authentication processing on the target user by means of the first client side.

Description

Binding processing

Technical field

This document relates to the field of data processing technology, in particular to a binding processing method, device and equipment.

Background technique

With the rapid development of the mobile payment industry, various payment applications have emerged. In order to ensure payment security, usually when a user registers for a payment account of a payment application for the first time, not only the identity of the user needs to be verified, but also the device environment of the terminal device where the payment application is located. In order to realize the payment function of the payment application, the user usually binds the bank card after the payment account is successfully registered. Currently, the bank card binding method usually involves the user operating a payment application to complete the bank card binding. This single binding method cannot meet the binding requirements of users in different scenarios.

Summary of the invention

The purpose of the embodiments of this specification is to provide a binding processing method, device, and equipment to complete the binding of the payment account and the storage account without adding user operations, so as to meet the binding requirements of users in different scenarios.

The embodiment of this specification provides a binding processing method, applied to the first server of a payment application, including: receiving an account registration request of a target user sent by a second server of a resource storage institution; wherein, the account registration request It is sent by the second server when it receives a binding request sent by the target user using the second client of the resource storage mechanism and determines that the target user has not registered the payment account of the payment application; The binding request is used to request to bind the storage account of the target user in the resource storage institution with the payment account of the payment application to be registered by the target user, so as to grant the payment account based on the The payment authority of the storage account for payment; the account registration request includes the registration information of the target user; the registration processing of the payment account is performed according to the registration information to obtain the account identification information of the target user; and the account is identified The information is sent to the second server, so that the second server performs binding processing according to the account identification information; if it is determined that the operation processing of the target user on the first client of the payment application satisfies The preset security authentication conditions are used to perform security authentication processing on the target user through the first client.

The embodiment of this specification provides a binding processing method, which is applied to the second server of a resource storage institution, and includes: receiving a binding request sent by a second client of the resource storage institution, where the binding request is based on a target The binding operation is sent by the user, and the binding request is used to request that the storage account of the target user in the resource storage institution be bound with the payment account of the payment application of the target user to grant the The payment account is based on the payment authority of the storage account for payment; the binding request includes the first account information of the storage account; if it is determined that the target user has not registered the payment account of the payment application, then according to the first An account information sends the account registration request of the target user to the first server of the payment application, so that the first server performs payment account registration processing to obtain the account identification information of the target user, and determines When the operation processing of the target user on the first client terminal of the payment application satisfies a preset security authentication condition, perform security authentication processing on the target user through the first client terminal; receive the first service The account identification information sent by the terminal performs binding processing according to the account identification information and the first account information, and sends binding result information to the second client.

The embodiment of this specification provides a binding processing method applied to a first client of a payment application, including: receiving an acquisition request for security authentication information sent by a first server of the payment application; wherein, the acquisition request After performing account registration processing for the first server based on the account registration request of the target user sent by the second server of the resource storage institution, it is determined that the operation processing of the target user on the first client meets the preset The account registration request is a binding request sent by the second server based on the second client of the target user using the resource storage mechanism, when it is determined that the target user is not registered Sent when the payment account of the payment application; the binding request is used to request that the target user's storage account in the resource storage institution be exchanged with the payment account of the payment application to be registered by the target user Binding to grant the payment account the payment authority to make payments based on the storage account; obtain the device information of the terminal device where it is located, and generate the device fingerprint of the terminal device based on the device information; send the device fingerprint to all The first server is configured to enable the first server to perform security authentication processing according to the device fingerprint.

The embodiment of this specification provides a binding processing method applied to the second client of the resource storage organization, including: in response to the binding operation of the target user, sending a binding request to the second server of the resource storage organization; wherein The binding request is used to request to bind the payment account of the payment application of the target user with the storage account of the target user in the resource storage institution, so as to grant the payment account to perform processing based on the storage account. Payment authority for payment; the binding request includes the first account information of the storage account, so that the second server performs binding processing according to the first account information; receives the information sent by the second server Binding result information.

The embodiment of this specification provides a binding processing device, which is applied to the first server of a payment application, and includes: a receiving module that receives an account registration request of a target user sent by a second server of a resource storage institution; The account registration request is when the second server receives the binding request sent by the second client of the target user using the resource storage mechanism, and determines that the target user has not registered the payment account of the payment application The binding request is used to request to bind the storage account of the target user in the resource storage institution with the payment account of the payment application to be registered by the target user to grant the The payment account is based on the payment authority of the storage account; the account registration request includes the registration information of the target user; the registration module performs the registration processing of the payment account according to the registration information to obtain the account of the target user Identification information; a sending module, which sends the account identification information to the second server, so that the second server performs binding processing according to the account identification information; an authentication module, if it determines the target The user's operation processing on the first client terminal of the payment application satisfies a preset security authentication condition, and then the target user is subjected to security authentication processing through the first client terminal.

The embodiment of this specification provides a binding processing device, which is applied to a second server of a resource storage mechanism, and includes: a receiving module that receives a binding request sent by a second client of the resource storage mechanism; The binding request is sent based on the binding operation of the target user, and the binding request is used to request to bind the storage account of the target user in the resource storage institution with the payment account of the payment application of the target user. To grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account; the determining module, if it determines that the target user is not registered for the payment The payment account of the application, according to the first account information, send the account registration request of the target user to the first server of the payment application, so that the first server performs payment account registration processing to obtain the The account identification information of the target user, and when it is determined that the operation processing of the target user on the first client terminal of the payment application satisfies the preset security authentication conditions, the target user is processed through the first client terminal Security authentication processing; a binding module that receives the account identification information sent by the first server, and performs binding processing based on the account identification information and the first account information; a sending module that sends the account identification information to the first server 2. The client sends the binding result information.

The embodiment of this specification provides a binding processing device, which is applied to a first client of a payment application, and includes: a receiving module that receives an acquisition request for security authentication information sent by the first server of the payment application, and the acquisition The request is that after the first server performs account registration processing based on the target user’s account registration request sent by the second server of the resource storage institution, it is determined that the target user’s operation processing on the first client meets the expected The account registration request is a binding request sent by the second server based on the second client of the target user using the resource storage mechanism, when it is determined that the target user has not Sent when the payment account of the payment application is registered; the binding request is used to request that the storage account of the target user in the resource storage institution be connected to the payment account of the payment application to be registered by the target user Binding to grant the payment account the payment authority to make payments based on the storage account; an obtaining module, which obtains the device information of the terminal device where it is located, and generates the device fingerprint of the terminal device according to the device information; a sending module, It sends the device fingerprint to the first server, so that the first server performs security authentication processing according to the device fingerprint.

The embodiment of this specification provides a binding processing device, which is applied to the second client of the resource storage organization, and includes: a sending module, which sends the binding to the second server of the resource storage organization in response to the binding operation of the target user. Wherein, the binding request is used to request to bind the payment account of the target user’s payment application with the target user’s storage account in the resource storage institution, so as to grant the payment account based on the The payment authority of the storage account for payment; the binding request includes the first account information of the storage account, so that the second server performs binding processing according to the first account information; a receiving module, which receives The binding result information sent by the second server.

The embodiments of this specification provide a binding processing device including a processor and a memory arranged to store computer-executable instructions. When the computer-executable instructions are executed, the processor: receives an account registration request of the target user sent by the second server of the resource storage mechanism; wherein, the account registration request is received by the second server. Sent when the target user uses the binding request sent by the second client of the resource storage institution and it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request Binding the target user's storage account in the resource storage institution with the payment account of the payment application to which the target user is to be registered, so as to grant the payment account the right to pay based on the storage account; The account registration request includes the registration information of the target user; the payment account registration processing is performed according to the registration information to obtain the account identification information of the target user; the account identification information is sent to the second server , So that the second server performs binding processing according to the account identification information; if it is determined that the operation processing of the target user on the first client of the payment application satisfies the preset security authentication conditions, pass The first client performs security authentication processing on the target user.

The embodiments of this specification provide a binding processing device including a processor and a memory arranged to store computer-executable instructions. When the computer-executable instructions are executed, the processor: receives a binding request sent by a second client of the resource storage mechanism; wherein, the binding request is sent based on the binding operation of the target user, The binding request is used to request to bind the storage account of the target user in the resource storage institution with the payment account of the payment application of the target user, so as to authorize the payment account to perform processing based on the storage account Payment authority for payment; the binding request includes the first account information of the storage account; if it is determined that the target user has not registered the payment account of the payment application, send the payment application to the payment application according to the first account information The first server sends the account registration request of the target user, so that the first server performs payment account registration processing to obtain the account identification information of the target user, and determines that the target user is in the payment account. When the operation processing on the first client of the application meets the preset security authentication conditions, perform security authentication processing on the target user through the first client; receive the account identification information sent by the first server , Perform binding processing according to the account identification information and the first account information, and send binding result information to the second client.

The embodiment of the present specification provides a binding processing device, including a processor and a memory arranged to store computer-executable instructions. When the computer-executable instructions are executed, the processor: An acquisition request for security authentication information sent by the first server; where the acquisition request is after the first server performs account registration processing based on the target user's account registration request sent by the second server of the resource storage institution, Sent when it is determined that the operation processing of the target user on the first client meets preset security authentication conditions; the account registration request is that the second server uses the resource storage mechanism based on the target user The binding request sent by the second client of the second client is sent when it is determined that the target user is not registered with the payment account of the payment application; the binding request is used to request that the target user be registered in the resource storage institution A storage account is bound to the payment account of the payment application to be registered by the target user to grant the payment account the right to pay based on the storage account; obtain the device information of the terminal device where it is located, according to the The device information generates the device fingerprint of the terminal device; and sends the device fingerprint to the first server, so that the first server performs security authentication processing according to the device fingerprint.

The embodiment of the present specification provides a binding processing device including a processor and a memory arranged to store computer-executable instructions, which when executed, cause the processor to respond to the binding of a target user. Send a binding request to the second server of the resource storage institution; wherein the binding request is used to request that the payment account of the target user’s payment application be combined with the target user’s payment account in the resource storage institution. The storage account is bound to grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account, so that the second server can perform payment according to the The first account information is subjected to binding processing; the binding result information sent by the second server is received.

The embodiments of this specification provide a storage medium for storing computer-executable instructions that, when executed, realize the following process: receiving a target user's account registration request sent by a second server of a resource storage institution; Wherein, the account registration request is when the second server receives a binding request sent by the second client of the target user using the resource storage mechanism, and determines that the target user is not registered with the payment application The binding request is used to request that the storage account of the target user in the resource storage institution be bound with the payment account of the payment application to be registered by the target user, so as to Grant the payment account the payment authority to make payments based on the storage account; the account registration request includes the registration information of the target user; perform the registration processing of the payment account according to the registration information to obtain the account identification of the target user Information; send the account identification information to the second server, so that the second server performs binding processing according to the account identification information; if it is determined that the target user is in the first payment application If the operation processing on the client meets the preset security authentication condition, then the first client performs security authentication processing on the target user.

The embodiment of this specification provides a storage medium for storing computer-executable instructions that, when executed, realize the following process: receiving a binding request sent by a second client of the resource storage mechanism; Wherein, the binding request is sent based on the binding operation of the target user, and the binding request is used to request payment between the target user’s storage account in the resource storage institution and the payment application of the target user. The account is bound to grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account; if it is determined that the target user has not registered the payment application The payment account of the target user is sent to the first server of the payment application according to the first account information, so that the first server performs payment account registration processing to obtain the target The user’s account identification information, and when it is determined that the operation processing of the target user on the first client of the payment application meets the preset security authentication conditions, the target user is secured through the first client Authentication processing; receiving the account identification information sent by the first server, performing binding processing according to the account identification information and the first account information, and sending binding result information to the second client.

The embodiments of this specification provide a storage medium for storing computer-executable instructions that, when executed, implement the following process: receiving a request for obtaining security authentication information sent by the first server of the payment application Wherein, the acquisition request is that the first server performs account registration processing based on the target user’s account registration request sent by the second server of the resource storage institution, and then determines that the target user is in the first client The above operation processing is sent when the preset security authentication conditions are met; the account registration request is a binding request sent by the second server based on the target user using the second client of the resource storage mechanism, Sent when it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request that the target user be registered in the storage account of the resource storage institution with the target user to be registered Bind the payment account of the payment application to grant the payment account the right to pay based on the storage account; obtain the device information of the terminal device where it is located, and generate the device fingerprint of the terminal device based on the device information; The device fingerprint is sent to the first server, so that the first server performs security authentication processing according to the device fingerprint.

The embodiment of this specification provides a storage medium for storing computer-executable instructions that, when executed, realize the following process: in response to the binding operation of the target user, provide a second service to the resource storage organization Terminal sends a binding request; wherein, the binding request is used to request to bind the payment account of the target user’s payment application with the target user’s storage account in the resource storage institution to grant the payment The account is based on the payment authority of the storage account; the binding request includes the first account information of the storage account, so that the second server performs binding processing according to the first account information; The binding result information sent by the second server.

In an embodiment of this specification, the target user can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations by operating the second client of the resource storage institution; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Description of the drawings

In order to more clearly describe the technical solutions in the embodiments of this specification or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments described in this specification. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative labor.

FIG. 1 is a schematic diagram of the first scenario of a binding processing method provided by an embodiment of this specification;

2 is a schematic diagram of a second scenario of a binding processing method provided by an embodiment of this specification;

3 is a schematic diagram of the first flow of a binding processing method provided by an embodiment of this specification;

4 is a schematic diagram of the second flow of a binding processing method provided by an embodiment of this specification;

FIG. 5 is a schematic diagram of a third process of a binding processing method provided by an embodiment of this specification;

6 is a schematic diagram of the fourth flow of a binding processing method provided by an embodiment of this specification;

FIG. 7 is a schematic diagram of a fifth flow of a binding processing method provided by an embodiment of this specification;

FIG. 8 is a schematic diagram of a sixth flow of a binding processing method provided by an embodiment of this specification;

FIG. 9 is a schematic diagram of a seventh flow of a binding processing method provided by an embodiment of this specification;

FIG. 10 is a schematic diagram of the eighth flow of a binding processing method provided by an embodiment of this specification;

FIG. 11 is a schematic diagram of a ninth flow of a binding processing method provided by an embodiment of this specification;

FIG. 12 is a schematic diagram of a tenth flow of a binding processing method provided by an embodiment of this specification;

FIG. 13 is a schematic diagram of the eleventh flow of a binding processing method provided by an embodiment of this specification;

FIG. 14 is a schematic diagram of a twelfth flow of a binding processing method provided by an embodiment of this specification;

15 is a schematic diagram of the thirteenth process of a binding processing method provided by an embodiment of this specification;

16 is a schematic diagram of the fourteenth flow of a binding processing method provided by an embodiment of this specification;

FIG. 17 is a schematic diagram of a fifteenth flow of a binding processing method provided by an embodiment of this specification;

18 is a schematic diagram of a sixteenth flow of a binding processing method provided by an embodiment of this specification;

FIG. 19 is a schematic diagram of the composition of the first module of a binding processing apparatus provided by an embodiment of this specification;

20 is a schematic diagram of the composition of a second type of module of a binding processing apparatus provided by an embodiment of this specification;

FIG. 21 is a schematic diagram of the composition of a third module of a binding processing apparatus provided by an embodiment of this specification;

FIG. 22 is a schematic diagram of the fourth module composition of a binding processing apparatus provided by an embodiment of this specification; FIG.

FIG. 23 is a schematic structural diagram of a binding processing device provided by an embodiment of this specification.

Detailed ways

In order to enable those skilled in the art to better understand the technical solutions in the embodiments of this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below in conjunction with the drawings in the embodiments of this specification. Obviously, The described embodiments are only a part of the embodiments in this specification, rather than all the embodiments. Based on the embodiments of this specification, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this document.

Figure 1 is a schematic diagram of an application scenario of a binding processing method provided by an embodiment of this specification. As shown in Figure 1, the scenario includes: the first client of the payment application, the first server of the payment application, and the The second client, the second server of the resource storage organization. Among them, the first client and the second client can be a mobile phone, a tablet computer, a desktop computer, a portable notebook computer, etc. (only a mobile phone is shown in FIG. 1); it should be understood that a payment application is installed in the first client The second client is installed with the resource management application of the resource storage mechanism; the first server and the second server may be independent servers or a server cluster composed of multiple servers.

When the target user is in any place, such as home, company, resource storage institution, etc., if you need to bind the payment account of the payment application to be registered with the storage account of the resource storage institution, you can operate the resource storage institution. The second client terminal performs account binding processing. In response to the binding operation of the target user, the second client sends a binding request to the second server to request that the storage account of the target user in the resource storage institution be bound to the payment account of the payment application of the target user. Grant the payment account the right to pay based on the storage account. The second server receives the binding request sent by the second client, and according to the first account information of the storage account to be bound included in the binding request, determines whether the target user has registered the payment account of the payment application, and determines whether the result is If not, send an account registration request to the first server. The first server performs payment account registration processing according to the registration information included in the account registration request, obtains the account identification information of the target user, and sends the account identification information to the first server; the first server according to the received account identification information Perform binding processing with the first account information of the storage account to be bound, and send the binding result information to the second client. When the binding result information is binding success information and the target user operates the first client to perform related business processing, if the first server determines that the target user's operation processing on the first client meets the preset security authentication conditions, Then, the target user is subjected to security authentication processing through the first client. When the target user has registered the payment account of the payment application and needs to bind the payment account with the target user's storage account in the resource storage institution, the second client can also be operated to realize the account binding. The specific process will be carried out later. Detailed.

Further, as shown in Figure 2, the second client can also be a self-service operation machine of a resource storage institution. When the target user is in a resource storage institution for business processing, such as opening a storage account, transferring resources, etc., if the target user has a payment account for the payment application to be registered at this time, and the storage account in the resource storage institution For binding requirements, the self-service operation machine of the resource storage institution can be operated. Based on the binding operation of the target user, the self-service operation machine sends a binding request to the second server of the resource storage institution, thereby realizing the payment account in the above manner. Registration, and the binding of payment accounts and storage accounts. In particular, when the self-service operation machine has the function of opening a storage account, the opening of the storage account, the registration of the payment account, and the binding of the storage account and the payment account can be realized at the same time. Generally, the opening of a storage account and the registration of a payment account all require the identity verification of the target user. In this case, the identity verification can be passed once, and the opening of the storage account and the registration of the payment account can be realized at the same time. Reduce user operations and improve user experience.

Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Fig. 3 is a schematic flowchart of a binding processing method provided by an embodiment of this specification. The method in Fig. 3 can be executed by the first server in Fig. 1. As shown in Fig. 3, the method includes the following steps:

Step S102, receiving an account registration request of the target user sent by the second server of the resource storage institution, the account registration request being a binding request sent by the second server after receiving the second client of the target user using the resource storage institution, and Sent when it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request to bind the target user's storage account in the resource storage institution with the target user's payment account of the payment application to be registered, so as to grant the payment account based on the storage The payment authority of the account for payment; the account registration request includes the registration information of the target user.

When the target user needs to bind the payment account of the payment application to be registered with its storage account in the resource storage institution, the second client terminal of the resource storage institution can be operated to perform account binding processing. In response to the binding operation of the target user, the second client sends a binding request to the second server of the resource storage institution to request that the target user be registered in the storage account of the resource storage institution with the payment application of the target user to be registered. The payment account is bound. After receiving the binding request sent by the second client, the second server determines whether the target user has registered the payment account of the payment application according to the first account information of the storage account to be bound included in the binding request, and determines If the result is no, send an account registration request to the first server. Among them, the storage account of the target user in the resource storage institution may be a savings account, a credit account, and so on.

Step S104: Perform registration processing of the payment account according to the registration information to obtain the account identification information of the target user.

Step S106: Send the account identification information to the second server, so that the second server performs binding processing according to the account identification information.

Step S108: If it is determined that the operation processing of the target user on the first client of the payment application satisfies the preset security authentication condition, then the target user is subjected to security authentication processing through the first client.

In the embodiment of this specification, when the first server receives the account registration request sent by the second server of the resource storage institution, it performs the registration process of the payment account, and sends the obtained account identification information of the target user to the second server , So that the second server performs binding processing according to the account identification information; wherein the account registration request is that the second server receives the binding request sent by the second client of the target user using the resource storage mechanism, and determines the target user Sent when the payment account of the payment application is not registered; and, when the first server determines that the target user’s operation processing on the first client of the payment application meets the preset security authentication conditions, the target user is processed through the first client Security authentication processing. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Considering that when the target user is operating the second client terminal to bind the payment account and the storage account, the target user may have registered a payment account; based on this, in order to avoid repeated registration of the payment account, in the embodiment of this specification, the second service When receiving the binding request sent by the second client, the terminal first sends a payment account query request to the first server to determine whether the target user has registered a payment account of the payment application. Correspondingly, as shown in FIG. 4, before step S102, it may further include:

Step S100-2, receiving a payment account query request sent by the second server; where the payment account query request is sent by the second server when receiving a binding request sent by the second client of the target user using the resource storage mechanism ; The binding request is used to request to bind the target user's storage account in the resource storage institution with the payment account of the target user's payment application to grant the payment account the right to pay based on the storage account; the payment account query request includes storage The identity information of the target user associated with the account;

Among them, the identity information is the identity information provided by the target user when opening a storage account at the resource storage institution. The identity information has been authenticated by authority and has authenticity and validity; such identity information is the user name of the target user, the target user’s ID number, etc.

Step S100-4: If the associated account identification information is not queried based on the identity information, the query result indicating that the account identification information is not queried is sent to the second server, so that the second server determines that the target user is not registered with the payment application. Pay for the account and send an account registration request.

The first server can match the identity information included in the payment account query request with each identity information in the designated user information database, and when all matching fails, send a query result indicating that the account identification information is not queried to the second server . The user information database includes the association relationship between the identity information of multiple users and the account identification information of the payment account.

Correspondingly, as shown in FIG. 4, step S102 includes the following step S102-2, receiving the account registration request of the target user sent by the second server; wherein the account registration request includes the registration information of the target user.

In order to realize the binding of the payment account to be registered and the storage account to be bound, and to facilitate subsequent security authentication of the target user, in the embodiment of this specification, the account query request further includes the first account information of the storage account to be bound , The registration request also includes the contact information of the target user associated with the storage account to be bound. As shown in FIG. 5, step S104 may include the following steps S104-2 and S104-4;

In step S104-2, the account identification information of the target user is generated according to the preset account identification generation rules, where the generation rules can be set according to needs in actual applications, which are not specifically limited in this specification.

Step S104-4, the generated account identification information, the contact information included in the registration information, the identity information, the first account information of the storage account included in the account query request, and the first authentication identifier representing the security authentication to be performed are associated and recorded to obtain The first record information.

Generally, when registering a payment account, it is necessary to collect the identity information provided by the user through the client terminal and verify the collected identity information. In the embodiment of this specification, since the identity information in the account query request sent by the second server is the identity information provided by the target user when opening the storage account at the resource storage institution, the identity information has been authenticated by the authority and has Authenticity and validity. Therefore, the first server does not need to collect the identity information provided by the user again during the registration process of the payment account, and can directly perform the payment account registration process based on the identity information in the account query request. The user completes the registration of the payment account without feeling the user, reducing user operations and improving user experience.

In order to avoid multiple security authentication of the target user, as shown in FIG. 5, in the embodiment of this specification, if the security authentication is passed in step S108, the method may further include step S110, updating the first authentication identifier in the first record information It is the second certification mark; among them, the second certification mark signifies that the safety certification has passed.

In order to ensure the registration security of the payment account, in the embodiment of this specification, the registration information includes the contact information of the target user associated with the storage account to be bound. Correspondingly, as shown in FIG. 6, step S104 may include the following:

Step S104-6: Send the first verification information to the contact information included in the registration information, so that the second client sends the acquired first verification information entered by the target user to be verified to the second server, so that the second server Sending the first verification information to be verified to the first server;

Step S104-8, receiving the first verification information to be verified sent by the second server;

In step S104-10, if the verification of the first verification information to be verified is passed, the payment account registration process is performed according to the registration information to obtain the account identification information of the target user.

Among them, the contact method can be a mobile phone number, an email address, etc. Taking the mobile phone number as the contact method as an example, after the second server sends an account registration request to the first server, it also sends a verification information acquisition request to the second client; the second client displays verification based on the verification information acquisition request Information input interface; after receiving the account registration request, the first server sends the first verification information to the mobile phone number in the form of information, and stores the first verification information in association with the first contact method; when the target user receives When sending information from the first server, enter the first verification information in the information into the input interface displayed by the second client, and click the OK control in the input interface to submit the first verification information to be verified ; The second client obtains the first verification information to be verified submitted by the target user, and sends the first verification information and contact information to be verified to the second server; the second server sends the received first verification to be verified The information and contact information are sent to the first server; the first server queries the associated stored first verification information according to the received contact information, and matches the queried first verification information with the first verification information to be verified, if If the matching is successful, it is determined that the verification is passed, and the account registration process is performed according to the registration information; if the matching fails, the registration failure information is sent to the second server, so that the second server sends the binding failure information to the second client.

Therefore, the first server can reduce the risk of others pretending to be a target user to perform operations by sending and verifying the first verification code to the contact information included in the registration information, thereby ensuring business security.

Considering that in the embodiment of this specification, the registration of the payment account and the security authentication of the target user are performed asynchronously, in order to avoid the security risks caused by the long asynchronous time interval, as shown in FIG. 7, in the embodiment of this specification After step S106, it further includes step S107, recording the sending time of the account identification information. Optionally, the sending time is recorded in association with the first record information, or the sending time is recorded in association with the account identification information.

Correspondingly, as shown in FIG. 7, step S108 may include the following steps:

Step S108-2, if it is determined that the target user has successfully logged in to the first client of the payment application, and the authentication identifier in the first record information queried according to the contact information in the login information is the first authentication identifier, then the queried first client is determined 1. Whether the number of account identification information associated with the identity information in the record information does not exceed the preset number;

Step S108-4, obtaining the current time, and determining the binding duration of the payment account and the storage account corresponding to the first recorded information according to the recorded sending time and the current time;

Step S108-6, determining whether the binding duration exceeds the preset duration;

Step S108-8, if it is determined that the number of account identification information associated with the identity information does not exceed the preset number and the binding duration does not exceed the preset duration, it is determined that the target user's operation processing on the first client of the payment application satisfies The preset security authentication conditions perform security authentication processing on the target user through the first client.

Since the registration of the payment account is done when the target user is insensitive, that is, the target user is not required to set the account information of his payment account. Therefore, the target user can use the target associated with the bound storage account when logging in for the first time. Log in with the user’s contact information. Specifically, when the first server determines that the target user successfully logs in to the first client, it queries the associated first record information according to the contact information included in the login information, and determines whether the authentication identifier included in the first record information is the first authentication identifier. If it is not the first authentication identifier, wait for the service request sent by the first client; if it is the first authentication identifier, query the number of associated account identification information according to the identity information in the first record information to determine the number of queries Whether it exceeds the preset number, if it does not exceed the preset number, the current time is obtained, and the payment account corresponding to the account identification information in the first record information and the first account information location are determined based on the recorded sending time and the obtained current time. The binding duration of the corresponding storage account; and, determining whether the binding duration exceeds the preset duration, and if the preset duration exceeds the preset duration, the first prompt message is sent to the first client to enable the target user to re-bind the storage account Operate, or use other security authentication methods recognized by the payment application for security authentication; if the preset duration is not exceeded, it is determined that the preset security authentication conditions are met, and the target user is subjected to security authentication processing through the first client. Among them, the preset number is the upper limit of the number of payment accounts that can be registered by the user, and the preset number and preset duration can be set according to actual needs.

If the first server receives a service request sent by the first client during the process of determining whether the preset security authentication conditions are met, or when it determines that the preset security authentication conditions are met, and the service request needs to be addressed to the target user To perform security authentication processing, it is sufficient to perform security authentication processing on the target user once based on the business request. And, when the first client receives the first prompt information sent by the first server, the target user can operate the first client to bind other storage accounts.

By judging the number of account identification information associated with the identity information and the binding time, the risk of illegal operations by users registering too many payment accounts can not only be avoided, but also the security risks caused by the long binding time can be avoided.

Further, in the above process that the target user logs in to the first client through the contact information, the first server determining that the target user successfully logs in to the first client includes: receiving a login request sent by the first client, and sending the contact information included in the login request Sending the second verification information to the first client to send the acquired second verification information entered by the target user to the first server; and receiving the second verification information to be verified sent by the first client If the verification of the second verification information to be verified is passed, it is determined that the target user successfully logs in to the first client.

Specifically, the login interface of the first client includes an account input field, a verification information acquisition control, and a verification information input field. After the target user enters the contact information of the target user associated with the storage account in the account input field, click the verification information acquisition Control; after the first client detects the click operation of the verification information acquisition control, it sends a login request to the first server according to the obtained contact information, and if the first server finds the associated first record according to the contact information included in the login request Information, the second verification information is sent to the contact method, and the second verification information is stored in association with the contact method; the target user enters the received second verification information into the verification information input field, and clicks the OK control; the first customer The terminal sends the acquired second verification information and contact information to be verified to the first server; the first server queries the associated stored second verification information according to the received contact information, and then compares the queried second verification information with the received The received second verification information to be verified is matched. If the matching is successful, it is determined that the target user is successfully logged in; if the matching fails, the login failure information is sent to the first client. Thus, based on the contact information and the second verification information, the first login of the target user is completed. After the login is successful, the first server can modify the payment account of the target user based on the account modification request sent by the target user through the first client. The target user can log in based on the modified account information and login password in the future.

To avoid malicious machine behavior, in the embodiment of this specification, as shown in FIG. 8, step S108 may include:

Step S108-10: If it is determined that the operation processing of the target user on the first client of the payment application satisfies the preset security authentication conditions, a request for obtaining security authentication information is sent to the first client, so that the first client can obtain The device information of the terminal device where it is located, and generate a device fingerprint based on the device information, and send the device fingerprint to the first server;

Step S108-12: Receive the device fingerprint sent by the first client, and if it is determined to pass the risk assessment based on the device fingerprint, it is determined that the security authentication of the target user has passed.

It can receive the device fingerprint sent by the first client, and send the device fingerprint to the designated risk assessment system, so that the risk assessment system performs risk assessment based on the device fingerprint, and sends the risk assessment result to the first server; If it is determined that the received risk assessment result is risk-free, it is determined that the security authentication for the target user has passed.

When the current user operates the first client to register the payment account of the payment application for the first time, the first server first obtains the device fingerprint of the terminal device where the first client is located during the payment account registration process, and then passes the device fingerprint verification. After that, proceed with the registration process of the payment account. In the embodiment of the present application, an asynchronous security authentication method is provided, that is, the target user logs in to the first client for the first time after operating the second client to register the payment account and bind the payment account to the storage account. Perform security authentication processing at the same time, which can not only meet the security authentication requirements of the payment application, but also meet the account binding requirements of the user based on the second client's account binding scenario.

Further, when the target user has registered the payment account of the payment application, the target user may also operate the second client terminal to bind the payment account and the storage account, as shown in FIG. 9, after step S100-2, it may also include:

Step S112: If the associated account identification information is queried according to the identity information, the queried account identification information is sent to the second server, so that the second server performs binding processing according to the account identification information;

Step S114, the first account information of the storage account included in the account query request and the sent account identification information are associated and recorded to obtain second record information; wherein, the second record information represents the payment account corresponding to the sent account identification information and The storage account is successfully bound.

When the associated account identification information is queried based on the identity information, the target user is determined to register the payment account of the payment application. Since the previous payment account registration process is used for security authentication processing, the queried account can be directly The identification information is sent to the second server to enable the second server to perform binding processing; and the first account information of the storage account included in the account query request and the queried account identification information are associated and recorded to indicate successful binding , And when the target user logs in to the second client, there is no need to perform security authentication again.

The target user may also have registered multiple payment accounts. Based on this, as shown in FIG. 10, step S112 may include:

In step S112-2, if the associated account identification information is queried according to the identity information, it is determined whether the number of the queried account identification information is one, if yes, execute step S112-4, otherwise, execute step S112-6;

Step S112-4, sending the queried account identification information to the second server, so that the second server performs binding processing according to the account identification information, and step S114 is executed;

Step S112-6: Obtain the address information from the account query request, and display the second account information of the payment account corresponding to the multiple account identification information in the second client on the display interface corresponding to the address information, and obtain the target The target second account information selected by the user based on the display interface;

In step S112-8, the account identification information corresponding to the target second account information is sent to the second server, and step S114 is performed.

Thus, when multiple account identification information is queried, based on the address information included in the account query request, the corresponding second account information is displayed in the corresponding display interface, and the target second selected by the target user based on the display interface is obtained. The account information does not need to obtain the target second account information through the second server, which not only avoids the leakage of the user's account information, but also reduces the number of communications and improves the efficiency of data processing.

Corresponding to the binding processing method described in FIG. 3 to FIG. 10, based on the same technical concept, the embodiment of this specification also provides another binding processing method. FIG. 11 is another binding processing provided by the embodiment of this specification. A schematic flowchart of the method. The method in FIG. 11 can be executed by the second server of the resource storage mechanism in FIG. 1; as shown in FIG. 11, the method includes the following steps:

Step S202, receiving a binding request sent by a second client of the resource storage institution; wherein the binding request is sent based on the binding operation of the target user, and the binding request is used to request that the target user be stored in the storage account of the resource storage institution; Binding with the payment account of the payment application of the target user to grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account;

When the target user needs to bind the payment account of the payment application to be registered with the storage account of the resource storage institution, the second client terminal of the resource storage institution can be operated to perform account binding processing. In response to the binding operation of the target user, the second client sends a binding request to the second server of the resource storage institution to request that the target user be registered in the storage account of the resource storage institution with the payment application of the target user to be registered. The payment account is bound.

Step S204: If it is determined that the target user has not registered the payment account of the payment application, send the account registration request of the target user to the first server of the payment application according to the first account information, so that the first server performs payment account registration processing to obtain Account identification information of the target user, and when it is determined that the operation processing of the target user on the first client terminal of the payment application meets the preset security authentication conditions, the target user is subjected to security authentication processing through the first client terminal;

Step S206: Receive the account identification information sent by the first server, perform binding processing according to the account identification information and the first account information, and send the binding result information to the second client.

In the embodiment of this specification, when the second server of the resource storage institution receives the binding request sent by the second client of the resource storage institution, the binding request is sent based on the binding operation of the target user; if it is determined that the target user is not Register the payment account of the payment application, then send the account registration request of the target user to the first server of the payment application according to the first account information of the storage account included in the binding request, and bind according to the account identification information sent by the first server. Set treatment. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

To facilitate the first server to query the account identification information of the payment account, as shown in FIG. 12, step S204 may include:

Step S204-2: Obtain the associated identity information of the target user from a specified database according to the first account information, where the specified database includes the association relationship between the first account information and the identity information, contact information, etc.;

Step S204-4: Send an account query request to the second server according to the acquired identity information and the first account information, so that the second server queries the associated account identification information according to the identity information;

Step S204-6: If a query result sent by the second server indicating that the account identification information has not been queried is received, it is determined that the target user has not registered a payment account of the payment application;

Step S204-8: Send the account registration request of the target user to the first server of the payment application according to the first account information, so that the first server performs payment account registration processing to obtain the account identification information of the target user, and determines the target user’s account identification information. When the user's operation processing on the first client terminal of the payment application meets the preset security authentication conditions, the target user is subjected to security authentication processing through the first client terminal.

In order to facilitate the registration processing of the payment account by the first server, and the subsequent target user logging in to the second client, as shown in FIG. 13, step S204 may further include the following:

In step S204-10, if it is determined that the target user has not registered a payment account of the payment application, the contact information of the associated target user is obtained from the designated database according to the first account information;

Step S204-12: Send the account registration request of the target user to the first server of the payment application according to the contact method, so that the first server sends the first verification information to the contact method when performing payment account registration processing.

Correspondingly, in order to ensure the registration security of the payment account, as shown in Figure 13, after step S204-12, it also includes:

Step S205-2: Send a verification information acquisition request to the second client, so that the second client displays the input interface and acquires the first verification information to be verified input by the target user based on the input interface;

Step S205-4, receiving the first verification information to be verified sent by the second client;

In step S205-6, the first verification information to be verified is sent to the first server, so that the first server performs the registration process of the payment account when the first verification information is successfully verified.

Further, in order to confirm that the target user binds the payment account of its payment application with its storage account in the resource storage institution, in the embodiment of this specification, as shown in FIG. 14, step S204 may further include step S204-14: if the target is determined The user has not registered the payment account of the payment application, and it is determined that the signature information for the target user to sign the preset binding agreement is obtained, then the account registration request of the target user is sent to the first server of the payment application according to the first account information.

Optionally, the binding request includes the signing information of the preset binding agreement, and accordingly, the second server obtains the signing information from the binding request; or, the second server receives the binding sent by the second client. After setting the request, send a binding agreement signing request to the second client, so that the second client displays the preset binding agreement and obtains the signing information for the target user to sign the binding agreement, and sends the obtained signing information to the first Two server side. The signing process of the signing agreement is not specifically limited in this manual, and it can be set according to the needs in actual applications. By allowing the target user to sign the binding agreement, not only can the user be notified of related matters, but the signed information can be used as the confirmation information for the target user to confirm the binding.

Further, as shown in FIG. 15, in the embodiment of this specification, step S206 includes:

Step S206-2: Associate and record the received account identification information with the first account information to obtain third record information; wherein the third record information represents the payment account corresponding to the account identification information and the storage account corresponding to the first account information Bind successfully;

Step S206-4: Send binding success information to the second client.

Further, when the binding processing of the second server fails, the binding failure information is sent to the second client.

For the specific implementation of the above steps, please refer to the aforementioned related descriptions, and the repetitive points will not be repeated here.

In the embodiment of this specification, when the second server of the resource storage institution receives the binding request sent by the second client of the resource storage institution, the binding request is sent based on the binding operation of the target user; if the target is determined If the user does not register the payment account of the payment application, then according to the first account information of the storage account included in the binding request, send the account registration request of the target user to the first server of the payment application, and according to the account identification information sent by the first server Perform binding processing. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Corresponding to the binding processing method described above, based on the same technical concept, the embodiment of this specification also provides another binding processing method. FIG. 16 is a schematic flowchart of another binding processing method provided by the embodiment of this specification. The method in FIG. 16 can be executed by the first client of the payment application in FIG. 1; as shown in FIG. 16, the method includes the following steps:

Step S302: Receive a security authentication information acquisition request sent by the first server of the payment application; where the acquisition request is that the first server performs account registration at the target user’s account registration request sent by the second server based on the resource storage institution After processing, it is sent when it is determined that the operation processing of the target user on the first client meets the preset security authentication conditions; the account registration request is a binding sent by the second server based on the second client of the target user using the resource storage mechanism The request is sent when it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request to bind the target user’s storage account in the resource storage institution with the target user’s payment account of the payment application to be registered. Grant the payment account the right to pay based on the storage account;

Step S304: Obtain device information of the terminal device where it is located, and generate a device fingerprint of the terminal device according to the device information;

Among them, the device information includes information such as the device identification, the MAC address of the device, and the system version number of the device. The method of generating device fingerprints can be set according to actual needs, and there is no specific limitation in this manual.

Step S306: Send the device fingerprint to the first server, so that the first server performs security authentication processing according to the device fingerprint.

In the embodiment of this specification, before step S302, it may further include:

Step S300-2, in response to the login operation of the target user based on the login interface, a login request is sent to the first server; the login request includes the contact information of the target user associated with the storage account, so that the first server sends the contact information Second verification information;

Step S300-4: Obtain the second verification information to be verified entered by the target user in the login interface, and send the second verification information to be verified to the first server, so that the first server can verify the second verification information to be verified authenticating;

Step S300-6: Receive the login result information sent by the first server.

In the embodiment of this specification, when the first client of the payment application receives the acquisition of the security authentication information sent by the first server of the payment application, it generates the device fingerprint of the terminal device where it is located, and sends the device fingerprint to the first server, In order to enable the first server to perform security authentication processing; wherein, the acquisition request is that after the first server performs account registration processing based on the target user’s account registration request sent by the second server of the resource storage institution, it is determined that the target user is in the first The operation processing on the client is sent when the preset security authentication conditions are met; and the account registration request is a binding request sent by the second server based on the second client of the target user using the resource storage mechanism, after determining that the target user is not registered Sent when the payment account of the application is paid. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Corresponding to the binding processing method described above, based on the same technical concept, the embodiment of this specification also provides another binding processing method. FIG. 17 is a schematic flowchart of another binding processing method provided by the embodiment of this specification. The method in FIG. 17 can be executed by the second client of the resource storage mechanism in FIG. 1; as shown in FIG. 17, the method includes the following steps:

Step S402, in response to the binding operation of the target user, send a binding request to the second server of the resource storage institution; wherein the binding request is used to request that the payment account of the payment application of the target user be registered with the target user in the resource storage institution. Bind the storage account of the storage account to grant the payment account the right to pay based on the storage account; the binding request includes the first account information of the storage account, so that the second server performs binding processing based on the first account information;

Step S404: Receive the binding result information sent by the second server.

In order to ensure the registration security of the payment account, in the embodiment of this specification, as shown in FIG. 18, after step S402, the method further includes:

Step S403-2, receiving the verification information acquisition request sent by the second server; where the verification information acquisition request is sent based on the account registration request of the target user sent to the first server of the payment application;

Step S403-4, according to the verification information acquisition request, display the input interface;

Step S403-6: Obtain the first verification information to be verified input by the target user in the input interface;

Step S403-8: Send the acquired first verification information to be verified to the second server, so that the second server sends the first verification information to be verified to the first server, so that the first server is When the verified first verification information is verified, the payment account registration process is performed.

Further, in order for the second server to determine that the target user agrees to bind the payment account of the target user with the storage account, in this embodiment of the specification, before step S404, the method further includes:

Obtain the signature information for the target user to sign the preset binding agreement, and send the signature information to the second server, so that the second server performs related processing based on the signature information.

Optionally, in response to the binding operation of the target user, obtain the signature information for the target user to sign the preset binding agreement, and send to the second server according to the obtained signature information and the first account information of the storage account to be bound Binding request. Alternatively, after sending the binding request to the second server, the agreement signing request sent by the second server is received, the preset signing agreement is displayed, and the signing information for the target user to sign the preset binding agreement is obtained.

For the specific implementation process of the foregoing steps, please refer to the foregoing related descriptions, and the repetitions are not repeated here.

In the embodiment of this specification, in response to the binding operation of the target user, the second client sends a binding request to the second server of the resource storage institution, so that the second server determines that the target user has not registered the payment account of the payment application. At the time, send an account registration request to the first server of the payment application, and perform binding processing based on the account identification information of the payment account sent by the first server; and when the first server determines that the preset security authentication conditions are met, Perform security authentication processing on the target user. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; The registration process of the payment account and the security authentication process of the target user are performed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Corresponding to the above-described binding processing method, based on the same technical concept, the embodiment of this specification also provides a binding processing device applied to the first server of the payment application. FIG. 19 is a schematic diagram of the module composition of a binding processing device provided by an embodiment of this specification. As shown in FIG. 19, the device includes:

The receiving module 501, which receives the account registration request of the target user sent by the second server of the resource storage institution; wherein, the account registration request is when the second server receives the target user's use of the resource storage institution The binding request sent by the second client of the second client terminal and sent when it is determined that the target user is not registered with the payment account of the payment application; the binding request is used to request that the target user be registered in the resource storage institution A storage account is bound to the payment account of the payment application to be registered by the target user to grant the payment account the payment authority to make payments based on the storage account; the account registration request includes the target user’s registration message;

The registration module 502, which performs payment account registration processing according to the registration information, and obtains the account identification information of the target user;

A sending module 503, which sends the account identification information to the second server, so that the second server performs binding processing according to the account identification information;

The authentication module 504, if it is determined that the operation processing of the target user on the first client terminal of the payment application satisfies the preset security authentication condition, then the target user is subjected to security authentication processing through the first client terminal .

The binding processing device provided by the embodiment of this specification, when receiving the account registration request sent by the second server of the resource storage institution, performs the registration processing of the payment account, and sends the obtained account identification information of the target user to the second service Terminal, so that the second server performs binding processing according to the account identification information; wherein the account registration request is that the second server receives the binding request sent by the second client of the target user using the resource storage mechanism, and determines the target Sent when the user has not registered the payment account of the payment application; and, when the first server determines that the target user’s operation processing on the first client of the payment application meets the preset security authentication conditions, the target user is sent to the target user through the first client Perform security authentication processing. Therefore, when the target user operates the second client terminal of the resource storage institution for account binding, it can simultaneously realize the registration of the payment account and the binding of the payment account and the storage account without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Optionally, the device further includes a query module. The query module receives the payment account query request sent by the second server before the receiving module 501 receives the account registration request of the target user sent by the second server of the resource storage institution; wherein, the payment account The query request is sent based on the binding request, the payment account query request includes the identity information of the target user associated with the storage account; and, if the associated account identification information is not queried based on the identity information , Send the query result indicating that the account identification information has not been queried to the second server, so that the second server determines that the target user has not registered the payment account of the payment application, and sends the Account registration request.

Optionally, the registration information includes the contact information of the target user associated with the storage account. The registration module 502 sends first verification information to the contact information, so that the second client sends the acquired first verification information entered by the target user to be verified to the second server, Enable the second server to send the first verification information to be verified to the first server; and receive the first verification information to be verified sent by the second server; If the verification of the first verification information to be verified is passed, the account registration process is performed according to the registration information.

Optionally, the account query request further includes: first account information of the storage account; and the registration information includes: contact information of the target user associated with the storage account. The registration module 502 generates the account identification information of the target user according to preset account identification generation rules; and, the generated account identification information, the contact information, the identity information, and the first An account information and a first authentication identifier that characterizes the security authentication to be performed are associated and recorded to obtain the first record information. After passing the security authentication of the target user through the first client, the method further includes: updating the first authentication identifier in the first record information to a second authentication identifier; wherein, the second authentication The identifier indicates that the safety certification has passed.

Optionally, the device further includes a recording module. The recording module records the sending time of the account identification information after the sending module 503 sends the account identification information to the second server. The authentication module 504, if it is determined that the target user successfully logs in to the first client and the authentication identifier in the first record information queried according to the contact information in the login information is the first authentication identifier, Determining whether the number of account identification information associated with the identity information in the first record information that is queried does not exceed the preset number; The binding duration between the payment account and the storage account corresponding to a record of information; determine whether the binding duration exceeds a preset duration; if it is determined that the number of account identification information associated with the identity information does not exceed the A preset number and the binding duration does not exceed the preset duration, then it is determined that the operation processing of the target user on the first client terminal of the payment application satisfies a preset security authentication condition.

Optionally, the authentication module 504 receives the login request sent by the first client; and sends second verification information to the contact information included in the login request, so that the first client will obtain The second verification information to be verified inputted by the target user is sent to the first server; the second verification information to be verified sent by the first client is received; if the second verification information is to be verified Second, if the verification information is verified, it is determined that the target user successfully logs in to the first client.

Optionally, the authentication module 504 sends a request for obtaining security authentication information to the first client, so that the first client obtains the device information of the terminal device where it is located, and generates a device fingerprint based on the device information , Send the device fingerprint to the first server; and receive the device fingerprint sent by the first client, and if it is determined that the risk assessment is passed according to the device fingerprint, determine the target user’s Safety certification passed.

Optionally, the payment account query request further includes the first account information of the storage account; the device further includes an association module. The query module, if the associated account identification information is queried according to the identity information, then the queried account identification information is sent to the second server, so that the second server will The account identification information is bound; the association module associates and records the first account information with the queried account identification information to obtain second record information; wherein, the second record information represents the query The payment account corresponding to the received account identification information is successfully bound to the storage account.

Optionally, the account query request further includes address information; the query module determines whether the number of the queried account identification information is one; if so, the queried account identification information is sent to the Second server; if not, display the second account information of the payment account corresponding to the multiple queried account identification information on the display interface corresponding to the address information in the second client, and obtain the target The user selects the target second account information based on the display interface; and sends the account identification information corresponding to the target second account information to the second server.

Optionally, the second client includes: a resource management application of the resource storage organization or a self-service operation machine of the resource storage organization.

The binding processing device provided by the embodiment of this specification, when receiving the account registration request sent by the second server of the resource storage institution, performs the registration processing of the payment account, and sends the obtained account identification information of the target user to the second service Terminal, so that the second server performs binding processing according to the account identification information, and the account registration request is that the second server receives the binding request sent by the second client of the target user using the resource storage mechanism, and determines that the target user is not Sent when the payment account of the payment application is registered; and, when the first server determines that the target user's operation processing on the first client of the payment application meets the preset security authentication conditions, the target user is secured through the first client Authentication processing. Therefore, when the target user operates the second client terminal of the resource storage institution for account binding, it can simultaneously realize the registration of the payment account and the binding of the payment account and the storage account without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

The embodiment of the binding processing device applied to the first server in this specification is based on the same inventive concept as the embodiment of the binding processing method applied to the first server in this specification. Therefore, the specific implementation of this embodiment can be referred to the foregoing The corresponding implementation of the binding processing method applied to the first server will not be repeated here.

Corresponding to the binding processing method described above, based on the same technical concept, the embodiment of this specification also provides another binding processing device, which is applied to the second server of the resource storage mechanism. FIG. 20 is a schematic diagram of the module composition of another binding processing device provided by an embodiment of the specification. As shown in FIG. 20, the device includes:

The receiving module 601 receives a binding request sent by the second client of the resource storage mechanism; wherein the binding request is sent based on the binding operation of the target user, and the binding request is used to request the The storage account of the target user in the resource storage institution is bound with the payment account of the payment application of the target user to grant the payment account the payment authority to make payments based on the storage account; the binding request includes The first account information of the storage account;

The determining module 602, if it is determined that the target user has not registered the payment account of the payment application, sends the account registration request of the target user to the first server of the payment application according to the first account information to Make the first server perform payment account registration processing to obtain the account identification information of the target user, and determine that the target user's operation processing on the first client of the payment application meets the preset security authentication If conditions are met, perform security authentication processing on the target user through the first client;

A binding module 603, which receives the account identification information sent by the first server, and performs binding processing according to the account identification information and the first account information;

The sending module 604 sends the binding result information to the second client.

In the binding processing apparatus provided by the embodiment of the present specification, upon receiving the binding request sent by the second client of the resource storage mechanism, the binding request is sent based on the binding operation of the target user; if it is determined that the target user is not registered The payment account of the payment application sends the target user's account registration request to the first server of the payment application according to the first account information of the storage account included in the binding request, and binds according to the account identification information sent by the first server deal with. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Optionally, the determining module 602 obtains the associated identity information of the target user from a designated database according to the first account information; and, according to the identity information and the first account information, The second server sends an account query request, so that the second server queries the associated account identification information according to the identity information; if the signature sent by the second server is received, the account identification is not queried As a result of the information query, it is determined that the target user has not registered the payment account of the payment application.

Optionally, the determining module 602 obtains the associated contact information of the target user from a designated database according to the first account information; The server sends the account registration request of the target user, so that the first server sends first verification information to the contact method when performing payment account registration processing.

Optionally, the sending module 604 sends a verification information acquisition request to the second client, so that the second client displays an input interface and acquires the to-be-verified input by the target user based on the input interface First verification information; and receiving the first verification information to be verified sent by the second client; sending the first verification information to be verified to the first server, so that the first A server performs registration processing of the payment account when the verification of the first verification information is passed.

Optionally, the determining module 602, if it is determined to obtain the signature information for the target user to sign the preset binding agreement, sends the target to the first server of the payment application according to the first account information. User’s account registration request.

Optionally, the binding module 603 associates and records the account identification information with the first account information to obtain third record information; wherein, the third record information represents the corresponding account identification information The payment account is successfully bound to the storage account corresponding to the first account information.

In the binding processing apparatus provided by the embodiment of the present specification, upon receiving the binding request sent by the second client of the resource storage mechanism, the binding request is sent based on the binding operation of the target user; if it is determined that the target user is not registered The payment account of the payment application sends the target user’s account registration request to the first server of the payment application according to the first account information of the storage account included in the binding request, and binds according to the account identification information sent by the first server deal with. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

The embodiment of the binding processing device applied to the second server in this specification is based on the same inventive concept as the embodiment of the binding processing method applied to the second server in this specification. Therefore, the specific implementation of this embodiment can be referred to the foregoing The implementation of the corresponding binding processing method applied to the second server end will not be repeated here.

Further, corresponding to the above-described binding processing method, based on the same technical concept, the embodiment of this specification also provides another binding processing device, which is applied to the first client of the payment application. FIG. 21 is a schematic diagram of the module composition of another binding processing device provided by an embodiment of this specification. As shown in FIG. 21, the device includes:

A receiving module 701, which receives a request for obtaining security authentication information sent by a first server of the payment application; wherein, the request for obtaining is a target sent by the first server on a second server based on a resource storage mechanism After the user’s account registration request is processed for account registration, it is sent when it is determined that the operation processing of the target user on the first client meets the preset security authentication conditions; the account registration request is the second server Based on the binding request sent by the target user using the second client of the resource storage mechanism, it is sent when it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request Binding the target user's storage account in the resource storage institution with the payment account of the payment application to which the target user is to be registered, so as to grant the payment account the right to pay based on the storage account;

An obtaining module 702, which obtains device information of the terminal device where it is located, and generates a device fingerprint of the terminal device according to the device information;

The sending module 703 sends the device fingerprint to the first server, so that the first server performs security authentication processing according to the device fingerprint.

Optionally, the device further includes a login module. The login module, before the receiving module 701 receives the security authentication information acquisition request sent by the first server of the payment application, in response to the target user's login operation based on the login interface, send the request to the first service Terminal sends a login request; wherein, the login request includes the contact information of the target user associated with the storage account, so that the first server sends the second verification information to the contact information; and, obtains the The second verification information to be verified entered by the target user in the login interface; the second verification information to be verified is sent to the first server, so that the first server can verify the The second verification information is verified; the login result information sent by the first server is received.

The binding processing apparatus provided by the embodiment of this specification generates the device fingerprint of the terminal device where it is located when receiving the acquisition of the security authentication information sent by the first server of the payment application, and sends the device fingerprint to the first server so that The first server performs security authentication processing; where the acquisition request is that the first server performs account registration processing based on the target user’s account registration request sent by the second server of the resource storage institution, and then determines that the target user is in the first client The above operation processing is sent when the preset security authentication conditions are met; and the account registration request is a binding request sent by the second server based on the second client of the target user using the resource storage mechanism, after determining that the target user is not registered with the payment application Sent when the payment account is made. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

The embodiment of the binding processing apparatus applied to the first client in this specification is based on the same inventive concept as the embodiment of the binding processing method applied to the first client in this specification. Therefore, the specific implementation of this embodiment can be referred to the foregoing The implementation of the corresponding binding processing method applied to the first client terminal will not be repeated here.

Further, corresponding to the above-described binding processing method, based on the same technical concept, the embodiment of this specification also provides another binding processing device, which is applied to the second client of the resource storage mechanism. FIG. 22 is a schematic diagram of the module composition of another binding processing apparatus provided by an embodiment of the specification. As shown in FIG. 22, the apparatus includes:

The sending module 801, in response to the binding operation of the target user, sends a binding request to the second server of the resource storage institution; wherein the binding request is used to request that the payment account of the target user's payment application be linked with The target user binds to the storage account of the resource storage institution to grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account, So that the second server performs binding processing according to the first account information;

The receiving module 802 receives the binding result information sent by the second server.

Optionally, the device further includes a display module. The receiving module 802, after the sending module 801 sends the binding request to the second server of the resource storage mechanism, also receives the verification information acquisition request sent by the second server; wherein, the verification information acquisition request Sent based on the account registration request of the target user sent to the first server of the payment application. The display module displays the input interface according to the verification information acquisition request; and, acquires the first verification information to be verified input by the target user in the input interface; and transfers the first verification information to be verified Sent to the second server, so that the second server sends the first verification information to be verified to the first server, so that the first server is in the process of verifying the When the first verification information is verified, the payment account registration process is performed.

Optionally, the device further includes an acquisition module. The obtaining module, before the receiving module 802 receives the binding result information sent by the second server, obtains the signing information for the target user to sign the preset binding agreement, and sends the signing information to the The second server, so that the second server performs related processing based on the signed information.

The binding processing device provided by the embodiment of this specification sends a binding request to the second server of the resource storage institution in response to the binding operation of the target user, so that the second server determines that the target user has not registered the payment application of the payment application. In the case of an account, send an account registration request to the first server of the payment application, and perform binding processing based on the account identification information of the payment account sent by the first server; and when the first server determines that the preset security authentication conditions are met , Perform security authentication processing on the target user. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

The embodiment of the binding processing device applied to the second client in this specification is based on the same inventive concept as the embodiment of the binding processing method applied to the second client in this specification. Therefore, the specific implementation of this embodiment can be referred to the foregoing The implementation of the corresponding binding processing method applied to the second client terminal will not be repeated here.

Further, corresponding to the binding processing method described above, based on the same technical concept, an embodiment of this specification also provides a binding processing device, which is used to execute the above binding processing method. FIG. 23 is an embodiment of this specification. A schematic structural diagram of a binding processing device is provided.

As shown in Figure 23, the binding processing device may have relatively large differences due to different configurations or performances, and may include one or more processors 901 and a memory 902, and the memory 902 may store one or more storage application programs. Or data. Among them, the memory 902 may be short-term storage or persistent storage. The application program stored in the memory 902 may include one or more modules (not shown in the figure), and each module may include a series of computer-executable instructions in the binding processing device. Furthermore, the processor 901 may be configured to communicate with the memory 902, and execute a series of computer-executable instructions in the memory 902 on the binding processing device. The binding processing device may also include one or more power supplies 903, one or more wired or wireless network interfaces 904, one or more input and output interfaces 905, one or more keyboards 906, and the like.

In one embodiment, the binding processing device includes a memory and one or more programs, wherein one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each The module may include a series of computer-executable instructions in the binding processing device, and the one or more programs configured to be executed by one or more processors include computer-executable instructions for performing the following: The account registration request of the target user sent by the second server; wherein, the account registration request is a binding request sent by the second server after receiving the second client of the target user using the resource storage mechanism And sent when it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request that the target user be registered in the storage account of the resource storage institution with the target user to be registered The payment account of the payment application is bound to grant the payment account the payment authority to make payments based on the storage account; the account registration request includes the registration information of the target user; the payment is made according to the registration information Account registration processing to obtain the account identification information of the target user; send the account identification information to the second server, so that the second server performs binding processing according to the account identification information; if It is determined that the operation processing of the target user on the first client terminal of the payment application satisfies a preset security authentication condition, and then the target user is subjected to security authentication processing through the first client terminal.

Optionally, when the computer-executable instructions are executed, before the receiving the account registration request of the target user sent by the second server of the resource storage institution, the method further includes: receiving the payment account query request sent by the second server Wherein, the payment account query request is sent based on the binding request, the payment account query request includes the identity information of the target user associated with the storage account; if the associated information is not queried based on the identity information The account identification information sends a query result indicating that the account identification information is not queried to the second server, so that the second server determines that the target user has not registered the payment account of the payment application , And send the account registration request.

Optionally, when the computer-executable instructions are executed, the registration information includes the contact information of the target user associated with the storage account. The registration processing of the payment account according to the registration information includes: sending first verification information to the contact information, so that the second client will obtain the first verification input by the target user to be verified Information is sent to the second server, so that the second server sends the first verification information to be verified to the first server; receives the to-be-verified sent by the second server The first verification information; if the verification of the first verification information to be verified is passed, the account registration process is performed according to the registration information.

Optionally, when the computer-executable instructions are executed, the account query request further includes the first account information of the storage account. The registration information includes the contact information of the target user associated with the storage account. The performing the registration processing of the payment account according to the registration information to obtain the account identification information of the target user includes: generating the account identification information of the target user according to preset account identification generation rules; The account identification information, the contact information, the identity information, the first account information, and the first authentication identifier representing the security authentication to be performed are associated and recorded to obtain the first record information. After passing the security authentication of the target user through the first client, the method further includes: updating the first authentication identifier in the first record information to a second authentication identifier; wherein, the second authentication The identifier indicates that the safety certification has passed.

Optionally, when the computer-executable instructions are executed, after sending the account identification information to the second server, the method further includes: recording the sending time of the account identification information. The determining that the operation processing of the target user on the first client terminal of the payment application satisfies a preset security authentication condition includes: if it is determined that the target user successfully logs in to the first client terminal, and according to the login information If the authentication identifier in the first record information queried in the contact information is the first authentication identifier, it is determined whether the number of account identification information associated with the identity information in the queried first record information is not Exceed the preset number; and, obtain the current time, and determine the binding duration of the payment account and the storage account corresponding to the first record information according to the sending time and the current time; determine the binding Whether the duration exceeds the preset duration; if it is determined that the number of account identification information associated with the identity information does not exceed the preset number, and the binding duration does not exceed the preset duration, it is determined that the target user is in the place The operation processing on the first client of the payment application satisfies the preset safety authentication condition.

When the computer-executable instructions are executed, the determining that the target user successfully logs in to the one client may include: receiving a login request sent by the first client; sending to the contact information included in the login request Second verification information, so that the first client sends the acquired second verification information input by the target user to be verified to the first server; receives the to-be-verified sent by the first client The verified second verification information; if the verification of the to-be-verified second verification information is passed, it is determined that the target user successfully logs in to the first client.

When the computer-executable instructions are executed, the performing security authentication processing on the target user through the first client may include: sending a request for obtaining security authentication information to the first client, so that the The first client obtains the device information of the terminal device where it is located, generates a device fingerprint based on the device information, sends the device fingerprint to the first server; receives the device fingerprint sent by the first client, If it is determined that the risk assessment based on the device fingerprint is passed, it is determined that the security authentication of the target user is passed.

Optionally, when the computer-executable instructions are executed, the payment account query request further includes: the first account information of the storage account; the method further includes: if the associated said information is queried according to the identity information Account identification information, the queried account identification information is sent to the second server, so that the second server performs binding processing according to the account identification information; and, the first account The information is recorded in association with the queried account identification information to obtain second record information; wherein, the second record information indicates that the payment account corresponding to the queried account identification information is successfully bound to the storage account .

Optionally, when the computer-executable instructions are executed, the account query request further includes address information. The sending the queried account identification information to the second server includes: determining whether the number of the queried account identification information is one; if so, sending the queried account identification information To the second server; if not, display the second account information of the payment account corresponding to the multiple queried account identification information on the display interface corresponding to the address information in the second client, and obtain The target user selects target second account information based on the display interface; and sends account identification information corresponding to the target second account information to the second server.

Optionally, when the computer-executable instructions are executed, the second client includes: a resource management application of the resource storage institution or a self-service operation machine of the resource storage institution.

The binding processing device provided by the embodiment of this specification, when receiving the account registration request sent by the second server of the resource storage institution, performs the registration processing of the payment account, and sends the obtained account identification information of the target user to the second service Terminal, so that the second server performs binding processing according to the account identification information, and the account registration request is that the second server receives the binding request sent by the second client of the target user using the resource storage mechanism, and determines that the target user is not Sent when the payment account of the payment application is registered; and, when the first server determines that the target user's operation processing on the first client of the payment application meets the preset security authentication conditions, the target user is secured through the first client Authentication processing. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

In another embodiment, the binding processing device includes a memory and one or more programs, wherein one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each Each module may include a series of computer-executable instructions in the binding processing device, and the one or more programs configured to be executed by one or more processors include computer-executable instructions for performing the following: receiving resource storage mechanism The binding request sent by the second client of the second client; wherein the binding request is sent based on the binding operation of the target user, and the binding request is used to request that the target user be stored in the storage account of the resource storage institution Binding with the payment account of the payment application of the target user to grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account; if It is determined that the target user has not registered the payment account of the payment application, and then sends the account registration request of the target user to the first server of the payment application according to the first account information, so that the first service The terminal performs payment account registration processing to obtain the account identification information of the target user, and when it is determined that the operation processing of the target user on the first client of the payment application satisfies the preset security authentication conditions, pass the The first client performs security authentication processing on the target user; receives the account identification information sent by the first server, performs binding processing based on the account identification information and the first account information, and sends The second client sends the binding result information.

The binding processing device provided by the embodiment of this specification, when receiving the binding request sent by the second client of the resource storage mechanism, the binding request is sent based on the binding operation of the target user; if it is determined that the target user is not registered The payment account of the payment application sends the target user's account registration request to the first server of the payment application according to the first account information of the storage account included in the binding request, and binds according to the account identification information sent by the first server deal with. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Optionally, when the computer-executable instructions are executed, the determining that the target user is not registered with the payment account of the payment application includes: obtaining the associated information from a designated database according to the first account information The identity information of the target user; according to the identity information and the first account information, send an account query request to the second server, so that the second server queries the associated account identification information according to the identity information If receiving a query result sent by the second server indicating that the account identification information has not been queried, it is determined that the target user has not registered the payment account of the payment application.

Optionally, when the computer-executable instructions are executed, the sending the account registration request of the target user to the first server of the payment application according to the first account information includes: according to the first account Information, obtain the associated contact information of the target user from a specified database; according to the contact information, send the account registration request of the target user to the first server of the payment application, so that the first When the server performs the registration processing of the payment account, the first verification information is sent to the contact method.

Optionally, when the computer-executable instructions are executed, after the sending the target user's account registration request to the first server of the payment application according to the first account information, the method further includes: 2. The client sends a verification information acquisition request, so that the second client displays the input interface and acquires the first verification information to be verified input by the target user based on the input interface; receiving the verification information sent by the second client The first verification information to be verified; the first verification information to be verified is sent to the first server, so that the first server performs verification on the first verification information Payment account registration processing.

Optionally, when the computer-executable instructions are executed, the sending the target user's account registration request to the first server of the payment application according to the first account information includes: if it is determined that the The target user signs the signature information of the preset binding agreement, and then sends the account registration request of the target user to the first server of the payment application according to the first account information.

Optionally, when the computer-executable instructions are executed, the binding processing according to the account identification information includes: associating and recording the account identification information with the first account information to obtain third record information Wherein, the third record information characterizes that the payment account corresponding to the account identification information is successfully bound with the storage account corresponding to the first account information.

The binding processing device provided by the embodiment of this specification, when receiving the binding request sent by the second client of the resource storage mechanism, the binding request is sent based on the binding operation of the target user; if it is determined that the target user is not registered The payment account of the payment application sends the target user's account registration request to the first server of the payment application according to the first account information of the storage account included in the binding request, and binds according to the account identification information sent by the first server deal with. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration processing of the payment account and the security authentication processing of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

In another embodiment, the binding processing device includes a memory and one or more programs, wherein one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each Each module may include a series of computer-executable instructions in the binding processing device, and the one or more programs configured to be executed by one or more processors include computer-executable instructions for performing the following: An acquisition request for security authentication information sent by the first server; where the acquisition request is after the first server performs account registration processing based on the target user's account registration request sent by the second server of the resource storage institution, Sent when it is determined that the operation processing of the target user on the first client meets preset security authentication conditions; the account registration request is that the second server uses the resource storage mechanism based on the target user The binding request sent by the second client of the second client is sent when it is determined that the target user is not registered with the payment account of the payment application; the binding request is used to request that the target user be registered in the resource storage institution A storage account is bound to the payment account of the payment application to be registered by the target user to grant the payment account the right to pay based on the storage account; obtain the device information of the terminal device where it is located, according to the The device information generates the device fingerprint of the terminal device; and sends the device fingerprint to the first server, so that the first server performs security authentication processing according to the device fingerprint.

Optionally, when the computer-executable instruction is executed, before the receiving request for obtaining the security authentication information sent by the first server of the payment application, the method further includes: responding to the target user's login operation based on the login interface , Sending a login request to the first server; wherein the login request includes the contact information of the target user associated with the storage account, so that the first server sends a second verification to the contact information Information; obtain the second verification information to be verified input by the target user in the login interface; send the second verification information to be verified to the first server, so that the first server Verifying the second verification information to be verified; receiving the login result information sent by the first server.

The binding processing device provided by the embodiment of this specification generates the device fingerprint of the terminal device where it is located when receiving the acquisition of the security authentication information sent by the first server of the payment application, and sends the device fingerprint to the first server so that The first server performs security authentication processing; where the acquisition request is that the first server performs account registration processing based on the target user’s account registration request sent by the second server of the resource storage institution, and then determines that the target user is in the first client The above operation processing is sent when the preset security authentication conditions are met; and the account registration request is a binding request sent by the second server based on the second client of the target user using the resource storage mechanism, after determining that the target user is not registered with the payment application Sent when the payment account is made. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

In another embodiment, the binding processing device includes a memory and one or more programs, wherein one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each Each module may include a series of computer-executable instructions in the binding processing device, and the one or more programs configured to be executed by one or more processors include computer-executable instructions for performing the following: in response to the target user The binding operation of the resource storage institution sends a binding request to the second server of the resource storage institution; wherein the binding request is used to request that the payment account of the target user’s payment application and the target user’s payment account be stored in the resource The storage account of the institution is bound to grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account, so that the second server is based on Perform binding processing on the first account information; receive binding result information sent by the second server.

Optionally, when the computer-executable instructions are executed, after the sending of the binding request to the second server of the resource storage mechanism, the method further includes: receiving a verification information acquisition request sent by the second server, and the verification The information acquisition request is sent based on the account registration request of the target user sent to the first server of the payment application; the input interface is displayed according to the verification information acquisition request; the target user is acquired in the input interface Input first verification information to be verified; sending the first verification information to be verified to the second server, so that the second server sends the first verification information to be verified to all The first server enables the first server to perform registration processing of the payment account when the verification of the first verification information to be verified is passed.

Optionally, when the computer-executable instruction is executed, before the receiving the binding result information sent by the second server, the method further includes: acquiring the signing information of the preset binding agreement signed by the target user, The signing information is sent to the second server, so that the second server performs related processing based on the signing information.

The binding processing device provided by the embodiment of this specification, in response to the binding operation of the target user, sends a binding request to the second server of the resource storage institution, so that the second server determines that the target user has not registered the payment application of the payment application. In the case of an account, send an account registration request to the first server of the payment application, and perform binding processing based on the account identification information of the payment account sent by the first server; and when the first server determines that the preset security authentication conditions are met , Perform security authentication processing on the target user. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

The embodiment of the binding processing device in this specification is based on the same inventive concept as the embodiment of the binding processing method in this specification. Therefore, the specific implementation of this embodiment can refer to the implementation of the corresponding binding processing method mentioned above. No longer.

Further, corresponding to the binding processing method described above, based on the same technical concept, the embodiments of this specification also provide a storage medium for storing computer-executable instructions. In one embodiment, the storage medium may be a USB flash drive. , Optical disk, hard disk, etc., when the computer executable instructions stored in the storage medium are executed by the processor, the following process can be realized: receiving the target user's account registration request sent by the second server of the resource storage institution; wherein, the account The registration request is when the second server receives the binding request sent by the second client of the target user using the resource storage mechanism, and determines that the target user has not registered the payment account of the payment application. Send; the binding request is used to request that the target user's storage account in the resource storage institution be bound with the payment account of the payment application to be registered by the target user to grant the payment account The payment authority for payment based on the storage account; the account registration request includes the registration information of the target user; the registration processing of the payment account is performed according to the registration information to obtain the account identification information of the target user; The account identification information is sent to the second server, so that the second server performs binding processing according to the account identification information; if it is determined that the target user operates on the first client of the payment application When the processing meets the preset security authentication condition, the target user is subjected to security authentication processing through the first client.

When the computer-executable instructions stored in the storage medium provided in the embodiments of this specification are executed by the processor, when the account registration request sent by the second server of the resource storage institution is received, the payment account registration process is performed, and the obtained target The user’s account identification information is sent to the second server, so that the second server performs binding processing according to the account identification information; wherein, the account registration request is the second client receiving the target user’s use of the resource storage mechanism by the second server The binding request sent by the terminal and it is sent when it is determined that the target user has not registered the payment account of the payment application; and, the first server determines that the target user’s operation processing on the first client of the payment application meets the preset security authentication Condition, the target user is subjected to security authentication processing through the first client. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Optionally, when the computer executable instructions stored in the storage medium are executed by the processor, before the receiving the target user account registration request sent by the second server of the resource storage mechanism, the method further includes: receiving the second service Payment account query request sent by the client terminal; wherein the payment account query request is sent based on the binding request, and the payment account query request includes the identity information of the target user associated with the storage account; If the associated account identification information is not queried for the identity information, the query result indicating that the account identification information is not queried is sent to the second server, so that the second server determines that the target user is not registered The payment account of the payment application, and send the account registration request.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the registration information includes: the contact information of the target user associated with the storage account. The registration processing of the payment account according to the registration information includes: sending first verification information to the contact information, so that the second client will obtain the first verification input by the target user to be verified Information is sent to the second server, so that the second server sends the first verification information to be verified to the first server; receives the to-be-verified sent by the second server The first verification information; if the verification of the first verification information to be verified is passed, the account registration process is performed according to the registration information.

Optionally, when the computer executable instructions stored in the storage medium are executed by the processor, the account query request further includes the first account information of the storage account. The registration information includes the contact information of the target user associated with the storage account. The performing the registration processing of the payment account according to the registration information to obtain the account identification information of the target user includes: generating the account identification information of the target user according to preset account identification generation rules; The account identification information, the contact information, the identity information, the first account information, and the first authentication identifier representing the security authentication to be performed are associated and recorded to obtain the first record information. After the security authentication of the target user through the first client is passed, the method further includes: updating the first authentication identifier in the first record information to a second authentication identifier, and the second authentication identifier represents The safety certification is passed.

Optionally, when the computer executable instructions stored in the storage medium are executed by the processor, after sending the account identification information to the second server, the method further includes: recording the sending time of the account identification information . The determining that the operation processing of the target user on the first client terminal of the payment application satisfies a preset security authentication condition includes: if it is determined that the target user successfully logs in to the first client terminal, and according to the login information If the authentication identifier in the first record information queried in the contact information is the first authentication identifier, it is determined whether the number of account identification information associated with the identity information in the queried first record information is not Exceed the preset number; and, obtain the current time, and determine the binding duration of the payment account and the storage account corresponding to the first record information according to the sending time and the current time; determine the binding Whether the duration exceeds the preset duration; if it is determined that the number of account identification information associated with the identity information does not exceed the preset number, and the binding duration does not exceed the preset duration, then it is determined that the target user is The operation processing on the first client of the payment application satisfies the preset safety authentication condition.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the determining that the target user successfully logs in to the one client includes: receiving a login request sent by the first client; The contact information included in the login request sends second verification information, so that the first client sends the acquired second verification information input by the target user to be verified to the first server; The second verification information to be verified sent by the first client; and if the verification of the second verification information to be verified is passed, it is determined that the target user successfully logs in to the first client.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the performing security authentication processing on the target user through the first client includes: sending security to the first client Request for obtaining authentication information, so that the first client obtains the device information of the terminal device where it is located, generates a device fingerprint based on the device information, and sends the device fingerprint to the first server; and receives the first client device. If the device fingerprint sent by a client is determined to pass the risk assessment based on the device fingerprint, it is determined that the security authentication of the target user is passed.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the payment account query request further includes the first account information of the storage account, and the method further includes: The associated account identification information is queried, and the queried account identification information is sent to the second server, so that the second server performs binding processing according to the account identification information; and, The first account information and the queried account identification information are associated and recorded to obtain second record information, and the second record information represents the payment account and the storage account corresponding to the queried account identification information The binding is successful.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the account query request further includes address information, and the queried account identification information is sent to the second server, Including: determining whether the number of the queried account identification information is one; if so, sending the queried account identification information to the second server; if not, in the second client The display interface corresponding to the address information displays the second account information of the payment account corresponding to the multiple queried account identification information, and obtains the target second account information selected by the target user based on the display interface; The account identification information corresponding to the target second account information is sent to the second server.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the second client includes: a resource management application of the resource storage organization or a self-service operation machine of the resource storage organization.

When the computer-executable instructions stored in the storage medium provided by the embodiment of this specification are executed by the processor, when the account registration request sent by the second server of the resource storage institution is received, the payment account registration process is performed, and the obtained The account identification information of the target user is sent to the second server, so that the second server performs binding processing according to the account identification information; wherein, the account registration request is that the second server receives the second request of the target user to use the resource storage mechanism. The binding request sent by the client is sent when it is determined that the target user has not registered the payment account of the payment application; and the first server determines that the target user’s operation processing on the first client of the payment application meets the preset security The authentication condition is to perform security authentication processing on the target user through the first client. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

In another embodiment, the storage medium may be a U disk, an optical disk, a hard disk, etc., and the computer-executable instructions stored in the storage medium can realize the following process when being executed by the processor: the second client receiving the resource storage mechanism sends The binding request; wherein the binding request is sent based on the binding operation of the target user, and the binding request is used to request that the target user be stored in the storage account of the resource storage institution with the target user Bind the payment account of the payment application to grant the payment account the right to pay based on the storage account; the binding request includes the first account information of the storage account; if it is determined that the target user is not Register the payment account of the payment application, then send the account registration request of the target user to the first server of the payment application according to the first account information, so that the first server can register the payment account Process to obtain the account identification information of the target user, and when it is determined that the operation processing of the target user on the first client of the payment application meets the preset security authentication conditions, the first client performs The target user performs security authentication processing; receives the account identification information sent by the first server, performs binding processing based on the account identification information and the first account information, and sends the binding to the second client Determine the result information.

When the computer-executable instructions stored in the storage medium provided in the embodiments of this specification are executed by the processor, when a binding request sent by the second client of the resource storage mechanism is received, the binding request is based on the binding of the target user. If it is determined that the target user has not registered the payment account of the payment application, send the account registration request of the target user to the first server of the payment application according to the first account information of the storage account included in the binding request, and according to the A binding process is performed on the account identification information sent by the server. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the determining that the target user has not registered the payment account of the payment application includes: according to the first account information, from a specified Acquire the associated identity information of the target user from the database; send an account query request to the second server according to the identity information and the first account information, so that the second server can make the second server according to the identity Information query associated account identification information; if a query result sent by the second server indicating that the account identification information is not inquired is received, it is determined that the target user has not registered the payment account of the payment application.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the sending the account registration request of the target user to the first server of the payment application according to the first account information includes : According to the first account information, obtain the associated contact information of the target user from a designated database; according to the contact information, send the account registration request of the target user to the first server of the payment application , So that the first server sends the first verification information to the contact method when performing the registration processing of the payment account.

Optionally, when the computer executable instructions stored in the storage medium are executed by the processor, after sending the account registration request of the target user to the first server of the payment application according to the first account information, the method further includes : Send a verification information acquisition request to the second client, so that the second client displays an input interface and acquires the first verification information to be verified input by the target user based on the input interface; receiving the first verification information 2. The first verification information to be verified sent by the client; sending the first verification information to be verified to the first server, so that the first server is checking the first verification information When the verification is passed, the registration process of the payment account is performed.

Optionally, when the computer executable instructions stored in the storage medium are executed by the processor, sending the account registration request of the target user to the first server of the payment application according to the first account information includes: It is determined that the signature information for the target user to sign the preset binding agreement is obtained, and then the account registration request of the target user is sent to the first server of the payment application according to the first account information.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the binding processing according to the account identification information includes: associating the account identification information with the first account information Record to obtain third record information; wherein the third record information indicates that the payment account corresponding to the account identification information is successfully bound with the storage account corresponding to the first account information.

In another embodiment, the storage medium may be a U disk, an optical disk, a hard disk, etc., and the computer executable instructions stored in the storage medium can implement the following process when executed by the processor: Security authentication information acquisition request; wherein, the acquisition request is that the first server determines that the target user is in the account registration process based on the target user’s account registration request sent by the second server of the resource storage institution. Sent when the operation processing on the first client meets preset security authentication conditions; the account registration request is sent by the second server based on the target user using the second client of the resource storage mechanism The binding request is sent when it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request that the target user be stored in the storage account of the resource storage institution with the Bind the payment account of the payment application to be registered by the target user to grant the payment account the right to pay based on the storage account; obtain the device information of the terminal device where it is located, and generate the terminal based on the device information Device fingerprint of the device; sending the device fingerprint to the first server, so that the first server performs security authentication processing according to the device fingerprint.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, before the receiving request for obtaining the security authentication information sent by the first server of the payment application, the method further includes: responding to the target The user sends a login request to the first server based on the login operation of the login interface; wherein the login request includes the contact information of the target user associated with the storage account, so that the first server sends the Send the second verification information in the contact information; obtain the second verification information to be verified input by the target user in the login interface; send the second verification information to be verified to the first server to Enabling the first server to verify the second verification information to be verified; receiving the login result information sent by the first server.

When the computer-executable instructions stored in the storage medium provided in the embodiments of this specification are executed by the processor, when the security authentication information sent by the first server of the payment application is acquired, the device fingerprint of the terminal device where it is located is generated, and the The device fingerprint is sent to the first server to enable the first server to perform security authentication processing; wherein, the acquisition request is the account registration request of the target user sent by the first server to the second server based on the resource storage institution for account registration After processing, it is sent when it is determined that the operation processing of the target user on the first client meets the preset security authentication conditions; and the account registration request is a binding sent by the second server based on the second client of the target user using the resource storage mechanism The request is sent when it is determined that the target user has not registered the payment account of the payment application. Therefore, when the target user operates the second client terminal of the resource storage institution to bind the account, it can realize the registration of the payment account and the binding of the payment account and the storage account at the same time without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

In another embodiment, the storage medium may be a U disk, an optical disk, a hard disk, etc., when the computer executable instructions stored in the storage medium are executed by the processor, the following process can be realized: in response to the binding operation of the target user, The second server of the resource storage institution sends a binding request; wherein the binding request is used to request to bind the payment account of the payment application of the target user with the storage account of the target user in the resource storage institution To grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account, so that the second server can make the payment according to the first account information Perform binding processing; receive the binding result information sent by the second server.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, after the sending of the binding request to the second server of the resource storage mechanism, the method further includes: receiving a verification sent by the second server Information acquisition request; wherein the verification information acquisition request is sent based on the target user account registration request sent to the first server of the payment application; according to the verification information acquisition request, an input interface is displayed; The first verification information to be verified entered by the target user in the input interface; the first verification information to be verified is sent to the second server, so that the second server sends the The verified first verification information is sent to the first server, so that when the first server passes the verification of the to-be-verified first verification information, the payment account is registered.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, before the receiving the binding result information sent by the second server, the method further includes: obtaining the target user to sign a preset binding The signing information of the agreement is sent to the second server, so that the second server performs related processing based on the signing information.

When the computer-executable instructions stored in the storage medium provided by the embodiments of this specification are executed by the processor, in response to the binding operation of the target user, the binding request is sent to the second server of the resource storage mechanism to enable the second service When determining that the target user has not registered the payment account of the payment application, the terminal sends an account registration request to the first server of the payment application, and performs binding processing based on the account identification information of the payment account sent by the first server; and the first service When the terminal determines that it meets the preset security authentication conditions, it performs security authentication processing on the target user. Therefore, when the target user operates the second client terminal of the resource storage institution for account binding, it can simultaneously realize the registration of the payment account and the binding of the payment account and the storage account without adding any user operations; and The registration process of the payment account and the security authentication process of the target user are executed in an asynchronous manner, which not only meets the security authentication requirements of the payment application, but also meets the user's account binding requirements in different scenarios.

The embodiment of the storage medium in this specification and the embodiment of the binding processing method in this specification are based on the same inventive concept. Therefore, the specific implementation of this embodiment can refer to the implementation of the corresponding binding processing method mentioned above, and the repetition will not be omitted. Go into details.

The foregoing describes specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps described in the claims can be performed in a different order than in the embodiments and still achieve desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or sequential order shown in order to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

In the 1990s, the improvement of a technology can be clearly distinguished between hardware improvements (for example, improvements in circuit structures such as diodes, transistors, switches, etc.) and software improvements (improvements in method flow). However, with the development of technology, the improvement of many methods in today's process has been regarded as a direct improvement of the hardware circuit structure. Designers almost always get the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that the improvement of a method flow cannot be realized by the hardware entity module. For example, a programmable logic device (Programmable Logic Device, PLD) (such as a Field Programmable Gate Array (Field Programmable Gate Array, FPGA)) is such an integrated circuit whose logic function is determined by the user's programming of the device. It is programmed by the designer to "integrate" a digital system on a piece of PLD, without requiring chip manufacturers to design and manufacture dedicated integrated circuit chips. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly realized with "logic compiler" software, which is similar to the software compiler used in program development and writing, but before compilation The original code must also be written in a specific programming language, which is called Hardware Description Language (HDL), and there is not only one type of HDL, but many types, such as ABEL (Advanced Boolean Expression Language) , AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description), etc., currently most commonly used It is VHDL (Very-High-Speed Integrated Circuit Hardware Description Language) and Verilog. It should also be clear to those skilled in the art that just a little bit of logic programming of the method flow in the above-mentioned hardware description languages and programming into an integrated circuit can easily obtain the hardware circuit that implements the logic method flow.

The controller can be implemented in any suitable manner. For example, the controller can take the form of, for example, a microprocessor or a processor and a computer readable medium storing computer readable program codes (such as software or firmware) executable by the (micro) processor. , Logic gates, switches, application specific integrated circuits (ASICs), programmable logic controllers and embedded microcontrollers. Examples of controllers include but are not limited to the following microcontrollers: ARC625D, Atmel AT91SAM, Microchip PIC18F26K20 and Silicon Labs C8051F320, the memory controller can also be implemented as part of the memory control logic. Those skilled in the art also know that in addition to implementing the controller in a purely computer-readable program code manner, it is completely possible to program the method steps to make the controller use logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded logic. The same function can be realized in the form of a microcontroller or the like. Therefore, such a controller can be regarded as a hardware component, and the devices included in it for realizing various functions can also be regarded as a structure within the hardware component. Or even, a device for realizing various functions can be regarded as both a software module for realizing the method and a structure within a hardware component.

The systems, devices, modules, or units explained in the above embodiments may be specifically implemented by computer chips or entities, or implemented by products with certain functions. A typical implementation device is a computer. The computer can be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or among these devices Any combination of equipment.

For the convenience of description, when describing the above device, the functions are divided into various units and described separately. Of course, when implementing the embodiments of this specification, the functions of each unit may be implemented in the same one or more software and/or hardware.

Those skilled in the art should understand that the embodiments of this specification can be provided as methods, systems or computer program products. Therefore, the embodiments of this specification may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, this specification can take the form of a computer program product implemented on a computer-usable storage medium (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

This specification is described with reference to flowcharts and/or block diagrams of methods, devices (systems), and computer program products according to the embodiments of this specification. It should be understood that each process and/or block in the flowchart and/or block diagram, and the combination of processes and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing equipment to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing equipment are used to generate It is a device that realizes the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing equipment to work in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction device. The device implements the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be loaded on a computer or other programmable data processing equipment, so that a series of operation steps are executed on the computer or other programmable equipment to produce computer-implemented processing, so as to execute on the computer or other programmable equipment. The instructions provide steps for implementing the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

In a typical configuration, the computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

The memory may include non-permanent memory in computer readable media, random access memory (RAM) and/or non-volatile memory, such as read-only memory (ROM) or flash memory (flash RAM). Memory is an example of computer readable media.

Computer-readable media include permanent and non-permanent, removable and non-removable media, and information storage can be realized by any method or technology. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical storage, Magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media can be used to store information that can be accessed by computing devices. According to the definition in this article, computer-readable media does not include transitory media, such as modulated data signals and carrier waves.

The terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or equipment including a series of elements includes not only those elements, but also other elements that are not explicitly listed. Elements, or also include elements inherent to such processes, methods, commodities, or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, commodity, or equipment that includes the element.

The embodiments of this specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The embodiments of this specification can also be practiced in distributed computing environments. In these distributed computing environments, tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the difference from other embodiments. In particular, as for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment.

The above descriptions are only examples of this document, and are not intended to limit this document. For those skilled in the art, this document can have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this document shall be included in the scope of the claims of this document.

Claims

A binding processing method, applied to the first server of a payment application, includes:

Receive a target user’s account registration request sent by the second server of the resource storage institution; wherein, the account registration request is when the second server receives the target user’s use of the resource storage institution’s second client The binding request is sent when it is determined that the target user is not registered with the payment account of the payment application; the binding request is used to request that the target user be in the storage account of the resource storage institution with all Binding the payment account of the payment application to be registered by the target user to grant the payment account the payment authority to make payments based on the storage account; the account registration request includes the registration information of the target user;

Perform payment account registration processing according to the registration information to obtain the account identification information of the target user;

Sending the account identification information to the second server, so that the second server performs binding processing according to the account identification information;

If it is determined that the operation processing of the target user on the first client terminal of the payment application satisfies a preset security authentication condition, then the target user is subjected to security authentication processing through the first client terminal.
The method according to claim 1, before the receiving the account registration request of the target user sent by the second server of the resource storage institution, the method further comprises:

Receiving a payment account query request sent by the second server; wherein the payment account query request is sent based on the binding request, and the payment account query request includes the identity of the target user associated with the storage account information;

If the associated account identification information is not queried according to the identity information, the query result indicating that the account identification information is not queried is sent to the second server, so that the second server determines the The target user has not registered the payment account of the payment application, and sends the account registration request.
The method according to claim 1, wherein the registration information comprises: contact information of the target user associated with the storage account;

The performing the registration processing of the payment account according to the registration information includes:

Send the first verification information to the contact information, so that the second client sends the acquired first verification information entered by the target user to be verified to the second server, so that the second service Sending the first verification information to be verified to the first server;

Receiving the first verification information to be verified sent by the second server;

If the verification of the first verification information to be verified is passed, an account registration process is performed according to the registration information.
The method according to claim 2, wherein the account query request further includes: first account information of the storage account; the registration information includes: contact information of the target user associated with the storage account;

The performing the registration processing of the payment account according to the registration information to obtain the account identification information of the target user includes:

Generating the account identification information of the target user according to a preset account identification generation rule;

Associate and record the generated account identification information, the contact information, the identity information, the first account information, and the first authentication identifier that characterizes the security authentication to be performed to obtain the first record information;

After passing the security authentication of the target user through the first client, the method further includes:

The first authentication identifier in the first record information is updated to a second authentication identifier; wherein, the second authentication identifier indicates that the safety authentication is passed.
The method according to claim 4, after the sending the account identification information to the second server, further comprising:

Record the sending time of the account identification information;

The determining that the operation processing of the target user on the first client terminal of the payment application satisfies a preset security authentication condition includes:

If it is determined that the target user successfully logs in to the first client, and the authentication identifier in the first record information queried according to the contact information in the login information is the first authentication identifier, then it is determined that all queried Whether the number of account identification information associated with the identity information in the first record information does not exceed the preset number; and,

Acquiring the current time, and determining the binding duration of the payment account and the storage account corresponding to the first record information according to the sending time and the current time;

Determine whether the binding duration exceeds a preset duration;

If it is determined that the number of account identification information associated with the identity information does not exceed the preset number, and the binding duration does not exceed the preset duration, it is determined that the target user is in the first position of the payment application. The operation processing on the client meets the preset security authentication conditions.
The method according to claim 5, wherein the determining that the target user successfully logs in to the client includes:

Receiving a login request sent by the first client;

Sending second verification information to the contact information included in the login request, so that the first client sends the acquired second verification information entered by the target user to be verified to the first server;

Receiving the second verification information to be verified sent by the first client;

If the verification of the second verification information to be verified is passed, it is determined that the target user successfully logs in to the first client.
The method according to claim 1, wherein said performing security authentication processing on said target user through said first client terminal comprises:

Send a request for obtaining security authentication information to the first client, so that the first client obtains the device information of the terminal device where it is located, generates a device fingerprint based on the device information, and sends the device fingerprint to the First server

Receive the device fingerprint sent by the first client, and if it is determined that the risk assessment is passed according to the device fingerprint, then it is determined that the security authentication of the target user is passed.
The method according to claim 2, wherein the payment account query request further comprises: first account information of the storage account; the method further comprises:

If the associated account identification information is queried based on the identity information, the queried account identification information is sent to the second server, so that the second server can perform operations based on the account identification information Binding processing; and,

The first account information and the queried account identification information are associated and recorded to obtain second record information; wherein, the second record information represents the payment account corresponding to the queried account identification information and the The storage account is successfully bound.
The method according to claim 8, wherein the account query request further includes: address information;

The sending the queried account identification information to the second server includes:

Determine whether the number of queried account identification information is one;

If yes, send the queried account identification information to the second server;

If not, display the second account information of the payment account corresponding to the multiple queried account identification information on the display interface corresponding to the address information in the second client, and obtain the target user based on the display Target second account information selected on the interface;

Sending the account identification information corresponding to the target second account information to the second server.
The method according to any one of claims 1-9, the second client includes: a resource management application of the resource storage organization or a self-service operation machine of the resource storage organization.
A binding processing method, applied to the second server of a resource storage mechanism, includes:

Receiving a binding request sent by a second client of the resource storage mechanism; wherein the binding request is sent based on a binding operation of a target user, and the binding request is used to request that the target user be placed in the The storage account of the resource storage institution is bound to the payment account of the payment application of the target user to grant the payment account the right to pay based on the storage account; the binding request includes the storage account’s First account information;

If it is determined that the target user has not registered the payment account of the payment application, send the account registration request of the target user to the first server of the payment application according to the first account information, so that the first The server performs payment account registration processing to obtain the account identification information of the target user, and when it is determined that the operation processing of the target user on the first client of the payment application meets the preset security authentication conditions, it passes all The first client performs security authentication processing on the target user;

Receiving the account identification information sent by the first server, performing binding processing according to the account identification information and the first account information, and sending binding result information to the second client.
The method according to claim 11, the determining that the target user has not registered a payment account of the payment application comprises:

Obtaining the associated identity information of the target user from a designated database according to the first account information;

Sending an account query request to the second server according to the identity information and the first account information, so that the second server queries the associated account identification information according to the identity information;

If a query result sent by the second server indicating that the account identification information has not been queried is received, it is determined that the target user has not registered a payment account of the payment application.
The method according to claim 11, wherein the sending the account registration request of the target user to the first server of the payment application according to the first account information comprises:

Obtaining the associated contact information of the target user from a designated database according to the first account information;

According to the contact information, send the account registration request of the target user to the first server of the payment application, so that when the first server performs payment account registration processing, the first server sends the first verify message.
The method according to claim 13, after the sending the account registration request of the target user to the first server of the payment application according to the first account information, the method further comprises:

Sending a verification information acquisition request to the second client, so that the second client displays an input interface and acquires the first verification information to be verified input by the target user based on the input interface;

Receiving the first verification information to be verified sent by the second client;

The first verification information to be verified is sent to the first server, so that the first server performs payment account registration processing when the first verification information is successfully verified.
The method according to claim 11, wherein the sending the account registration request of the target user to the first server of the payment application according to the first account information comprises:

If it is determined that the signature information for the target user to sign the preset binding agreement is acquired, the account registration request of the target user is sent to the first server of the payment application according to the first account information.
The method according to any one of claims 11-15, wherein the binding processing according to the account identification information comprises:

The account identification information and the first account information are associated and recorded to obtain third record information; wherein, the third record information indicates that the payment account corresponding to the account identification information corresponds to the first account information The storage account is successfully bound.
A binding processing method, applied to the first client of a payment application, includes:

Receive a security authentication information acquisition request sent by the first server of the payment application; wherein the acquisition request is a target user account registration request sent by the first server on the second server based on the resource storage mechanism After the account registration process is performed, it is sent when it is determined that the operation processing of the target user on the first client meets preset security authentication conditions; the account registration request is sent by the second server based on the target user The binding request sent by the second client using the resource storage mechanism is sent when it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request that the target user be registered in The storage account of the resource storage institution is bound with the payment account of the payment application to be registered by the target user, so as to grant the payment account the right to pay based on the storage account;

Acquiring device information of the terminal device where it is located, and generating a device fingerprint of the terminal device according to the device information;

The device fingerprint is sent to the first server, so that the first server performs security authentication processing according to the device fingerprint.
The method according to claim 17, before receiving the request for obtaining security authentication information sent by the first server of the payment application, the method further comprises:

In response to the login operation of the target user based on the login interface, a login request is sent to the first server; wherein the login request includes the contact information of the target user associated with the storage account, so that the first A server sends second verification information to the contact method;

Acquiring the second verification information to be verified input by the target user in the login interface;

Sending the second verification information to be verified to the first server, so that the first server verifies the second verification information to be verified;

Receiving the login result information sent by the first server.
A binding processing method, applied to a second client of a resource storage mechanism, includes:

In response to the binding operation of the target user, a binding request is sent to the second server of the resource storage institution; wherein the binding request is used to request that the payment account of the payment application of the target user be registered with the target user The storage account of the resource storage institution is bound to grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account, so that the second 2. The server performs binding processing according to the first account information;

Receiving the binding result information sent by the second server.
The method according to claim 19, after the sending the binding request to the second server of the resource storage mechanism, the method further comprises:

Receiving a verification information acquisition request sent by the second server; wherein the verification information acquisition request is sent based on an account registration request of the target user sent to the first server of the payment application;

According to the verification information acquisition request, an input interface is displayed;

Acquiring the first verification information to be verified input by the target user in the input interface;

Send the first verification information to be verified to the second server, so that the second server sends the first verification information to be verified to the first server, so that the first A server performs registration processing of the payment account when the verification of the first verification information to be verified is passed.
The method according to claim 19 or 20, before the receiving the binding result information sent by the second server, further comprising:

Obtain signature information for the target user to sign the preset binding agreement, and send the signature information to the second server, so that the second server performs related processing based on the signature information.
A binding processing device applied to the first server of a payment application, including:

A receiving module, which receives an account registration request of a target user sent by a second server of a resource storage institution; wherein, the account registration request is an account registration request of the target user after the second server receives the target user’s use of the resource storage institution The binding request sent by the second client is sent when it is determined that the target user is not registered with the payment account of the payment application; the binding request is used to request that the target user be stored in the resource storage institution Account, which is bound to the payment account of the payment application to be registered by the target user to grant the payment account the payment authority to make payments based on the storage account; the account registration request includes the registration of the target user information;

A registration module, which performs payment account registration processing according to the registration information, and obtains the account identification information of the target user;

A sending module, which sends the account identification information to the second server, so that the second server performs binding processing according to the account identification information;

The authentication module, if it is determined that the operation processing of the target user on the first client of the payment application satisfies a preset security authentication condition, then the target user is subjected to security authentication processing through the first client.
A binding processing device, applied to the second server of a resource storage mechanism, includes:

A receiving module, which receives a binding request sent by a second client of the resource storage mechanism; wherein the binding request is sent based on the binding operation of the target user, and the binding request is used to request that the target The user’s storage account in the resource storage institution is bound with the payment account of the target user’s payment application to grant the payment account the right to pay based on the storage account; the binding request includes all The first account information of the storage account;

The determining module, which, if it is determined that the target user has not registered the payment account of the payment application, sends the account registration request of the target user to the first server of the payment application according to the first account information, so that The first server performs payment account registration processing to obtain the account identification information of the target user, and determines that the operation processing of the target user on the first client terminal of the payment application satisfies preset security authentication conditions When, performing security authentication processing on the target user through the first client;

A binding module, which receives the account identification information sent by the first server, and performs binding processing according to the account identification information and the first account information;

A sending module, which sends binding result information to the second client.
A binding processing device applied to a first client of a payment application, including:

A receiving module, which receives a request for obtaining security authentication information sent by the first server of the payment application; wherein the request for obtaining is a target user sent by the first server on the second server based on the resource storage mechanism The account registration request is sent when it is determined that the operation processing of the target user on the first client meets the preset security authentication conditions after the account registration processing is performed; the account registration request is sent by the second server based on The binding request sent by the target user using the second client of the resource storage mechanism is sent when it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request the Binding the storage account of the target user in the resource storage institution with the payment account of the payment application to be registered by the target user, so as to grant the payment account the right to pay based on the storage account;

An obtaining module, which obtains the device information of the terminal device where it is located, and generates the device fingerprint of the terminal device according to the device information;

A sending module, which sends the device fingerprint to the first server, so that the first server performs security authentication processing according to the device fingerprint.
A binding processing device, applied to a second client of a resource storage mechanism, includes:

The sending module, in response to the binding operation of the target user, sends a binding request to the second server of the resource storage institution; wherein the binding request is used to request the payment account of the payment application of the target user to be The target user binds to the storage account of the resource storage institution to grant the payment account the right to pay based on the storage account; the binding request includes the first account information of the storage account to Enabling the second server to perform binding processing according to the first account information;

The receiving module receives the binding result information sent by the second server.
A binding processing device, including:

Processor; and,

A memory arranged to store computer-executable instructions which, when executed, cause the processor to:

Receive a target user’s account registration request sent by the second server of the resource storage institution; wherein, the account registration request is when the second server receives the target user’s use of the resource storage institution’s second client The binding request is sent when it is determined that the target user is not registered with the payment account of the payment application; the binding request is used to request that the target user be in the storage account of the resource storage institution with all Binding the payment account of the payment application to be registered by the target user to grant the payment account the payment authority to make payments based on the storage account; the account registration request includes the registration information of the target user;

Perform payment account registration processing according to the registration information to obtain the account identification information of the target user;

Sending the account identification information to the second server, so that the second server performs binding processing according to the account identification information;

If it is determined that the operation processing of the target user on the first client terminal of the payment application satisfies a preset security authentication condition, then the target user is subjected to security authentication processing through the first client terminal.
A binding processing device, including:

Processor; and,

A memory arranged to store computer-executable instructions which, when executed, cause the processor to:

Receiving a binding request sent by a second client of the resource storage mechanism; wherein the binding request is sent based on a binding operation of a target user, and the binding request is used to request that the target user be placed in the The storage account of the resource storage institution is bound to the payment account of the payment application of the target user to grant the payment account the right to pay based on the storage account; the binding request includes the storage account’s First account information;

If it is determined that the target user has not registered the payment account of the payment application, send the account registration request of the target user to the first server of the payment application according to the first account information, so that the first The server performs payment account registration processing to obtain the account identification information of the target user, and when it is determined that the operation processing of the target user on the first client of the payment application meets the preset security authentication conditions, it passes all The first client performs security authentication processing on the target user;

Receiving the account identification information sent by the first server, performing binding processing according to the account identification information and the first account information, and sending binding result information to the second client.
A binding processing device, including:

Processor; and,

A memory arranged to store computer-executable instructions which, when executed, cause the processor to:

Receive a security authentication information acquisition request sent by the first server of the payment application; wherein the acquisition request is a target user account registration request sent by the first server on the second server based on the resource storage mechanism After the account registration process is performed, it is sent when it is determined that the operation processing of the target user on the first client meets preset security authentication conditions; the account registration request is sent by the second server based on the target user The binding request sent by the second client using the resource storage mechanism is sent when it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request that the target user be registered in The storage account of the resource storage institution is bound with the payment account of the payment application to be registered by the target user, so as to grant the payment account the right to pay based on the storage account;

Acquiring device information of the terminal device where it is located, and generating a device fingerprint of the terminal device according to the device information;

The device fingerprint is sent to the first server, so that the first server performs security authentication processing according to the device fingerprint.
A binding processing device, including:

Processor; and,

A memory arranged to store computer-executable instructions which, when executed, cause the processor to:

In response to the binding operation of the target user, a binding request is sent to the second server of the resource storage institution; wherein the binding request is used to request that the payment account of the payment application of the target user be registered with the target user The storage account of the resource storage institution is bound to grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account, so that the second 2. The server performs binding processing according to the first account information;

Receiving the binding result information sent by the second server.
A storage medium used to store computer-executable instructions that, when executed, implement the following processes:

Receive a target user’s account registration request sent by the second server of the resource storage institution; wherein, the account registration request is when the second server receives the target user’s use of the resource storage institution’s second client The binding request is sent when it is determined that the target user is not registered with the payment account of the payment application; the binding request is used to request that the target user be in the storage account of the resource storage institution with all Binding the payment account of the payment application to be registered by the target user to grant the payment account the payment authority to make payments based on the storage account; the account registration request includes the registration information of the target user;

Perform payment account registration processing according to the registration information to obtain the account identification information of the target user;

Sending the account identification information to the second server, so that the second server performs binding processing according to the account identification information;

If it is determined that the operation processing of the target user on the first client terminal of the payment application satisfies a preset security authentication condition, then the target user is subjected to security authentication processing through the first client terminal.
A storage medium used to store computer-executable instructions that, when executed, implement the following processes:

Receiving a binding request sent by a second client of the resource storage mechanism; wherein the binding request is sent based on a binding operation of a target user, and the binding request is used to request that the target user be placed in the The storage account of the resource storage institution is bound to the payment account of the payment application of the target user to grant the payment account the right to pay based on the storage account; the binding request includes the storage account’s First account information;

If it is determined that the target user has not registered the payment account of the payment application, send the account registration request of the target user to the first server of the payment application according to the first account information, so that the first The server performs payment account registration processing to obtain the account identification information of the target user, and when it is determined that the operation processing of the target user on the first client of the payment application meets the preset security authentication conditions, it passes all The first client performs security authentication processing on the target user;

Receiving the account identification information sent by the first server, performing binding processing according to the account identification information and the first account information, and sending binding result information to the second client.
A storage medium used to store computer-executable instructions that, when executed, implement the following processes:

Receive a security authentication information acquisition request sent by the first server of the payment application; wherein the acquisition request is a target user account registration request sent by the first server on the second server based on the resource storage mechanism After the account registration process is performed, it is sent when it is determined that the operation processing of the target user on the first client meets preset security authentication conditions; the account registration request is sent by the second server based on the target user The binding request sent by the second client using the resource storage mechanism is sent when it is determined that the target user has not registered the payment account of the payment application; the binding request is used to request that the target user be registered in The storage account of the resource storage institution is bound with the payment account of the payment application to be registered by the target user, so as to grant the payment account the right to pay based on the storage account;

Acquiring device information of the terminal device where it is located, and generating a device fingerprint of the terminal device according to the device information;

The device fingerprint is sent to the first server, so that the first server performs security authentication processing according to the device fingerprint.
A storage medium used to store computer-executable instructions that, when executed, implement the following processes:

In response to the binding operation of the target user, a binding request is sent to the second server of the resource storage institution; wherein the binding request is used to request that the payment account of the payment application of the target user be registered with the target user The storage account of the resource storage institution is bound to grant the payment account the payment authority to make payments based on the storage account; the binding request includes the first account information of the storage account, so that the second 2. The server performs binding processing according to the first account information;

Receiving the binding result information sent by the second server.