CN101369365A

CN101369365A - POS system for mobile phone based on built-in certificate and virtual credit card

Info

Publication number: CN101369365A
Application number: CNA2008100288352A
Authority: CN
Inventors: 王美金
Original assignee: Individual
Current assignee: Individual
Priority date: 2008-06-17
Filing date: 2008-06-17
Publication date: 2009-02-18

Abstract

A POS system of a handset based on a built-in certificate and a virtual credit card, comprises a POS terminal, with an integral certificate ONEKey contact, for connecting an application server of a bank; the built-in certificate and a handset of a virtual credit card, with an integral certificate ONEKey, ONEKey contact, for inputting pin codes and payment account, and transmitting deal short message to the application server of the bank; the integral certificate ONEKey has unique sequence number, for storing digital certificate, the digital certificate of private keys and materials of the credit card, a built-in screen, a keyboard and a fingerprint sensor; the user uses the ONEKey on the handset connected to the application server of the bank through POS terminal, a payout deal is completed by the application server of the bank through reading, analyzing the digital certificate, the private key, the materials of the credit card, the deal request report, and check of the deal short message. MMS is transmitted to the handset to inform payout deal result.

Description

POS system based on the mobile phone of built-in certificate and virtual credit card

Technical field

The present invention relates to a kind of POS payment system and method, particularly, relate to a kind of POS payment system and method for utilizing mobile phone to pay.

The invention still further relates to a kind of device of encryption, refer in particular to a kind of method of utilizing a line accreditation book ONEKey to encrypt, authenticate.

Background technology

Exist widespread use at present to various bank cards, but bank card by bootlegging or the fund that causes the holder of being stolen situation about suffering a loss also happen occasionally.Perhaps the holder loses bank card accidentally, may cause holder's fund to suffer a loss equally.How to avoid the generation of such thing, and can accomplish to become the problem that each tame bank considers as using bank card to settle accounts payment at POS easily.On the other hand, along with being extensive use of of mobile phone, mobile phone also more and more becomes a kind of multi-functional, individual terminal devices of being commonly used.Communication company provides the modes of payments of small amount for mobile phone.Why being the small amount clearing, is because in the mobile phone settlement process that communication company provides, and considers and manages conveniently, not with the real-time interlock of the account system of bank.Usually, communication company can only provide each mobile-phone payment in 50 yuan usually for avoiding excessive risk.This small amount and the height-limited modes of payments have limited mobile phone and can not play a role settling accounts payment technical field widely.

And on the communication news road of mobile phone, transmit, and in fact the communication of mobile phone news road is unsafe for direct transmission payment cipher.For the safety that guarantees to conclude the business, USBKey bank's application on the net at present is very extensive, but USBKey has following leak:

1, because PIN code is imported on user computer, so the hacker still can intercept and capture user's PIN code by program, if the user is the untimely USB Key that takes away, the hacker can obtain could comprise bogus authentication by the PIN code of intercepting and capturing so, still has potential safety hazard.

2, can't prevent that data from being distorted.Client's a transaction may be tackled screen by the hacker and distort and be an other transaction before being sent into USB Key and encrypting, and can distort transaction like this and authentication is passed through under the unwitting situation of user.For example the client expects to pay the bill 10 yuan, and but being distorted by the hacker is 100,000 yuan.

Summary of the invention

In order to address the above problem, the present invention proposes a kind of POS system of the mobile phone based on built-in certificate and virtual credit card,

Described system is connected realization POS terminal payment funding by the POS terminal with bank of bank application server with a line accreditation book ONEKey of embedded in mobile phone.

To achieve these goals, the invention provides a kind of POS system of the mobile phone based on built-in certificate and virtual credit card, comprising: the POS terminal, have a line accreditation book ONEKey contact, be used to connect bank's application server; The mobile phone of built-in certificate and virtual credit card has a line accreditation book ONEKey, and the ONEKey contact is used to import PIN code and Payment Amount, sends out the transaction note to bank's application server; One line accreditation book ONEKey has unique sequence number, is used to deposit digital certificate, the digital certificate of private key, the credit card information of identification client identity, built-in screen, keyboard, fingerprint inductor; The client uses the ONEKey on the described mobile phone to be connected on bank's application server by the POS terminal, bank's application server is by reading in, analyze its digital certificate, private key, credit card information, transaction request message, check with the transaction note, finish a payment transaction.Concurrent receipt note is complained to mobile phone and is known the payment processes result.

Employing the invention has the beneficial effects as follows:

1, after use one line accreditation book ONEKey does authentication, utilizes virtual credit card and, expanded the usable range of POS terminal greatly cheaply based on the wireless POS terminal of CDMA.

2, use cell-phone number to carry out the banking transaction operation, safety is the important elements of at first considering.The present invention is actually and has adopted a line accreditation book ONEKey to add the multimedia message bidirectional identity authentication, and the user confirms Transaction Success by line accreditation book ONEKey transaction by multimedia message.

3, the ONEKey cost be USBKey half, but realize built-in screen and keyboard, successfully stopped up the leak of USBKey, for obstacle has been removed in its widespread use.

Description of drawings

Figure one: the POS system gathering flow process that is based on the mobile phone of built-in certificate and virtual credit card

Embodiment

To be that example is described the present invention with a shopping process below, figure one be based on the POS system gathering flow process of the mobile phone of built-in certificate and virtual credit card:

1, customer need is bought one bottle of soy sauce, and the cashier of buffet is scanned the soy cruet bar code on the POS terminal, and the POS terminal shows the amount of money, and the gathering lamp is bright, and the contact enters duty;

2, client presses the payment key on mobile phone, the mobile phone prompting input amount of money and PIN code, and optional fingerprint of PIN code or character input, after client confirmed, the input amount of money and PIN code collided mobile phone contact and POS terminal contact, and collision produces two-way communication channel.Mobile phone sends the transaction note by the mobile network to bank's application server simultaneously.

3, the ONEKey on client's mobile phone is connected on bank's application server by the POS terminal, and bank's application server is checked with the transaction note by reading in, analyze its digital certificate, private key, credit card information, transaction request message.

If 4 Transaction Success lamps are bright, a payment transaction is finished in prompting.Bank's application server sends CAI e to client's mobile phone and confirms.

If 5 Fail Transaction lamps are bright, payment transaction is unsuccessful.Client pays the bill again.

Above embodiment is only unrestricted in order to the explanation native system, although native system is had been described in detail with reference to preferred embodiment, those of ordinary skill in the art is to be understood that, can make amendment or be equal to replacement native system, and not breaking away from the spirit and scope of native system, it all should be encompassed in the claim scope of native system.

Claims

1. based on the POS system of the mobile phone of built-in certificate and virtual credit card, it is characterized in that: mobile phone, POS terminal by built-in certificate and virtual credit card are formed;

A, POS terminal is characterized in that: be made up of communication unit, a line accreditation book ONEKey contact, multimedia message processing unit, CPU (central processing unit); Be used for sending the transaction request message to bank's application server, bank's application server reads in, analyzes payer's digital certificate, private key, credit card information, transaction request message by the POS terminal, check with the transaction note, finish a payment transaction, concurrent receipt note is complained to mobile phone and is known the payment processes result;

Communication unit is characterized in that: connection is wired or wireless, wired passing through being connected of telephone wire and bank application server, wireless passing through being connected of mobile network and bank's application server;

The multimedia message processing unit is characterized in that: be used to receive and dispatch note, fixed net short message, MIMI Email, multimedia message, CAI e, colour facsimile, transaction finishes and sends the affirmation multimedia message to POS terminal possessor;

The mobile phone of b, built-in certificate and virtual credit card is characterized in that: include following several sections: a line accreditation book ONEKey, mobile phone base band chip, cell phone mainboard, shell and battery;

One line accreditation book ONEKey is characterised in that, comprise: contact point unit, CPU (central processing unit), Keyboard Control unit, display unit, fingerprint sensing unit, described contact point unit, CPU (central processing unit), Keyboard Control unit, display unit, fingerprint sensing unit link to each other with described CPU (central processing unit) respectively.CPU (central processing unit) is responsible for scheduling keyboard control module, display unit, and authority is higher than mobile phone base band chip.CPU (central processing unit) stores unique sequence number, key, certificate, PIN code, virtual credit card, phone number, customer data;

The CPU (central processing unit) of one line accreditation book ONEKey is characterised in that, use CPU or intelligent card chip, the various algorithms of the data summarization that uses in the PKI system, data encrypting and deciphering and signature, encryption and decryption computing, PIN code input, Payment Amount input are carried out in ONEKey, key and certificate can not be derived, the hardware of ONEKey is prevented replication processes, CPU (central processing unit) links to each other by serial port with mobile phone base band chip, each forward direction bank application server of paying the bill sends note, accepts the affirmation multimedia message that bank's application server is sent after each payment;

The contact point unit of one line accreditation book ONEKey is characterised in that, adopt a line system communication protocol, can carry out message exchange by collision and another contact, the contact can be a contact, for example metal also can be for example contactless: radio frequency contact, infrared contact, magnetic force contact;

The PIN code of one line accreditation book ONEKey is characterised in that PIN code is one group of password or fingerprint character code;

The mobile phone of c, built-in certificate and virtual credit card, POS terminal link to each other by the contact.

2. POS system according to claim 1 is characterized in that, wherein said phone number binding possessor account No.;

3. POS system according to claim 1 is characterized in that, wherein said POS terminal is connected to printer by bluetooth or USB, prints multimedia message as receipt.

4. POS system according to claim 1, it is characterized in that, wherein said bank application server is inquired about the position of mobile phone, POS terminal to telecom operators when transaction, telecom operators confirm to bank's application server whether the two position mates by mobile network's positioning function.