CN101430808A

CN101430808A - Fingerprint credit pen payment system, method and apparatus

Info

Publication number: CN101430808A
Application number: CNA2007101351378A
Authority: CN
Inventors: 王巍
Original assignee: Individual
Current assignee: Individual
Priority date: 2007-11-09
Filing date: 2007-11-09
Publication date: 2009-05-13

Abstract

The invention discloses a payment system based on the payment of a fingerprint credit pen. The payment system of the fingerprint credit pen includes hardware, software and network platforms supporting the payment of the fingerprint credit pen. The payment of the fingerprint credit pen includes the following key processes: registration, consumption, cancellation, reconciliation, settlement and the like. The fingerprint credit pen is actually a digital pen integrating an NFC (Near Field Communication) non-contact intelligent chip, a bank credit card chip and a fingerprint KEY chip, wherein, the fingerprint is taken and matched in the pen; and the fingerprint characteristic points are in the fingerprint KEY chip, thereby ensuring the safety of personal privacy. The key to the payment system of the fingerprint credit pen is that the information (including digital certificates, private keys, handwritten signatures and bank card numbers of a user) in the pen is required to be bound with the fingerprint KEY for verification to fulfill the data transmission and processing function based on the NFC technology of the NFC non-contact intelligent chip, thereby realizing the seamless connection between the wireless and wire networks of the telecommunication and the bank credit card in the existing payment system.

Description

Fingerprint credit pen payment system and method and apparatus

Core of the present invention is based on the payment system of fingerprint credit pen payment.

Fingerprint credit pen payment system has comprised hardware, software platform and the network platform that fingerprint credit pen is paid, registration, consumption, cancellation and the critical workflows such as accounting checking, clearing of fingerprint credit pen payment.

Fingerprint credit pen is actually an integrated digital pen of NFC contactless smart chip, bank card chip and fingerprint KEY chip.Realize the collection and the comparison of fingerprint in the pen, fingerprint feature point in fingerprint KEY, thereby guaranteed the safety of individual privacy.Internal information (bank's card number of digital certificate, private key, handwritten signature and user) must can be realized data transmission and processing capacity by the close range communication techniques of NFC contactless smart chip after the binding fingerprint KEY checking, realizes that having the seamless of Payment System now with the wireless and cable network of telecommunications and bank card connects.Adopt fingerprint KEY module, remedied the shortcoming of password authorization CKey in the electronic signature technology, the perfect terminal authentication link of PKI system has guaranteed that no longer there is leak in three links of granting, storage, use of fingerprint credit pen.Adopt fingerprint credit pen may command end user's legal identity, guarantee security of using and the non repudiation of afterwards investigating.

Hardware unit fingerprint credit pen concrete structure can be referring to Fig. 8 and Fig. 9.The pen that comprises a standard, the microelectronics video camera of a CMOS, CPU processor, bank card chip, a fingerprint KEY chip, a storer, a heavy-duty battery provide operating voltage, a NFC contactless smart chip for each module.Above-mentioned each module all places penholder; The camera of microelectronics video camera is in a side of nib.Per second can be caught the person's handwriting location drawing picture of 100 width of cloth on dedicated points pattern recognition paper, exist in the storer, signature data and credit card information all must be bound the data transmission and the processing capacity that can realize an internal information after fingerprint KEY verifies by the close range communication techniques of NFC contactless smart chip, and be connected with background data base, referring to Fig. 7.Owing to adopted fingerprint KEY module, and realize the data transmission and the processing capacity of its internal information in conjunction with the NFC close range communication techniques, thereby guaranteed the security of fingerprint credit pen when electronic signature, guaranteed the safety of bank card chip inner storag information.

In the electronic signature technology field, the electronic signature technology that the world generally uses also is based on the digital signature technology of Public Key Infrastructure(PKI).Adopt a kind of smart card that has certain calculation function with CPU to deposit personal information, certificate information and key information etc., smart card is protected with PIN code.Present global CKey series of products all are based on the research and development of RSA asymmetric arithmetic and PKI system, in application as the terminal identity authenticator of PKI system.In the PKI system, all encryptions and authentication are based on all that certificate and private key carry out.CKey internal hardware generation RSA key is right, and private key is stored in hardware inside, guarantees that by security mechanism private key does not go out Key, and all are finished in CKey inside based on the computing of private key.This mode guarantees to hold CKey just can carry out legal PKI application.Because the security of asymmetric cryptosystem as long as guarantee the secret of signer private key information, can guarantee that promptly any other people can't forge signature.The hardware of storage digital certificate and key then is intelligent card chip at present, and it is protected by PIN code.The maximum leak of digital certificate in the CA system and private key management and insecurity are also just on this storage hardware smart card.PIN code is very easily revealed with stolen, can't protect information in intelligent card safety at all.After obtaining user cipher and electron key, the disabled user can obtain any authority of original subscriber.Fingerprint credit pen replaces PIN code with finger-print cipher, has remedied the shortcoming of password authorization CKey, and the perfect terminal authentication link of PKI system has guaranteed that no longer there is leak in three links of granting, storage, use of certificate.Thereby uniqueness and security that fingerprint credit pen uses have been guaranteed.

Since first debit card in the distribution whole world, nineteen fifty Diners Club Diners Club Card, International Banks card industry has formed hair fastener, has received a series of ripe integrated industrial chain bars such as list, transaction processing, trade company's service, terminal management through 50 years of development.Can make bank card swindle crime once become the common formidable enemy of global bank owing to tradition uses the bank card technology threshold of magnetic stripe lower.Be to encircle and suppress financial crime, Europay, Mastercard (Master), Visa three big credit card international organizations unite several years ago and have formulated IC (intelligence) and block financial payment application standard---EMV standard.At present, EMV has become the international uniform standard of bank's IC-card.According to the requirement of EMV standard, bank, changed in credit card issuer and the receipts single file and does not take a side of EMV migration to bear the convention that present risk of fraud is mainly born by credit card issuer since in January, 2006 in the Asian-Pacific area.

Bank card chip itself just has embedded micro-processor in fact can carry out crypto-operation, originally can be integrated on the chip with fingerprint KEY or NFC smart card from cost, but because the business of each issuing bank and the independence of internal information, the bank card chip still is that standalone module is more realistic, be convenient to the personalized product that fingerprint credit pen and each tame bank cooperative development differ from one another like this, satisfy various demands.

NFC is becoming the mainstream technology standard in global contactless payment market as a kind of wireless connect technology of the common exploitation in Philip and Sony.NFC is a kind of close range communication techniques that grows up on RFID (radio frequency Identification) and interconnection technique basis.Work in the 13.56MHz frequency range, data rate can reach 424Kbits/ second, compares with other wireless communication technologys such as bluetooths, and operating distance is shorter, less than 15 centimetres.Thereby convenient when carrying out interactive communication, quick, safety do not need cable to patch as long as any two equipment are close, just can realize mutual communication, can be used for wide spectrums such as devices interconnect, service discovery and Mobile business.NFC essence is a kind of ＂ non-contact radio-frequency identification ＂ (RFID) and the interconnection technique that is derived between wireless device, it can satisfy message exchange, access to content, service exchange between any two wireless devices, and make it more brief---do not need cable to patch as long as any two equipment are close, just can realize mutual communication.This shortens the ＂ communication distance ＂ between any two wireless devices greatly.NFC technology and existing contact type intelligent card payment terminal are compatible fully, can protect existing investment effectively.The NFC terminal can initiatively and under passive two kinds of patterns worked.Under aggressive mode, the NFC terminal can be used as a card reader, sends the RF field domain of oneself and discerns and read intelligent cards and label; Under Passive Mode, the NFC terminal can be modeled to a card or be read label.NFC is the upgrade technique of electronic tag (RFID), can realize multiple functions such as E-Payment and data download.Pay the security performance that requires by mails in order to reach, we have embedded a safer fingerprint KEY chip in fingerprint credit pen.。

Used fingerprint KEY in the fingerprint credit pen, see shown in the accompanying drawing 3: it is made up of intelligent card chip, fingerprint collecting chip and external SDRAM.Comprise (communication interface, COS code, built-in fingerprint algorithm, data storage area) in the intelligent card chip.Required computational space when external SDRAM provides built-in fingerprint algorithm computing in the intelligent card chip; The fingerprint collecting chip then is responsible for gathering fingerprint image and being transferred in the intelligent card chip.Be built into the computing that realizes fingerprint algorithm in the intelligent card chip by fingerprint algorithm is downloaded, the storage of fingerprint and computing all realize in fingerprint KEY smart card.

Described fingerprint collecting chip can adopt arbitrary money fingerprint collecting chip of any company in the world such as ATMEL, URU, Fujitsu, Authentec, symwave.Fingerprint capturer can be CMOS, optical profile type, inductance type, condenser type, heat seeking, any fingerprint capturer in the paddling formula.Described fingerprint algorithm can adopt the fingerprint algorithm of any a company in the world.As long as the source code of the bottom that its company provided, during computing, its main performance index: fingerprint recognition speed, accuracy of system identification is refused the sincere security requirement that can satisfy the client to fingerprint KEY in fingerprint KEY.Described intelligent card chip can adopt at present any in the world a band CPU's, and it has the intelligent card chip of certain calculation function.Described external SDRAM can be the product of any company.Owing to adopted algorithm for recognizing fingerprint to combine, guaranteed the high security of fingerprint credit pen thereby the interior fingerprint recognition comparison of fingerprint KEY template never goes out fingerprint KEY with COS.Internal information (bank's card number of digital certificate, private key, handwritten signature and user) must can be realized data transmission and processing capacity by the close range communication techniques of NFC contactless smart chip after the binding fingerprint KEY checking.This has not only remedied the shortcoming of password authorization CKey in the electronic signature technology, and the perfect terminal authentication link of PKI system has guaranteed that no longer there is leak in three links of granting, storage, use of fingerprint credit pen.And may command end user's legal identity, guarantee security of using and the non repudiation of afterwards investigating.Adopt the close range communication techniques of NFC contactless smart chip to realize fingerprint credit pen data transmission and processing capacity simultaneously, realize connecting with the wireless and cable network and existing the seamless of Payment System of bank card of telecommunications.We are applied to payment system with this technology, have just formed fingerprint credit pen payment system.Referring to Figure 10 fingerprint credit pen payment system network architecture figure, Figure 11 fingerprint credit pen is at the Net silver application drawing, Figure 12 fingerprint credit pen payment system modular structure figure.

Accompanying drawing constitutes the part of patent of the present invention, is elaborated for example in conjunction with patent of the present invention and the function that lays particular emphasis on the fingerprint KEY in the fingerprint credit pen below with reference to accompanying drawings, so that purpose of the present invention, feature and advantage are had deep understanding.

Description of drawings

Fig. 1: the ciphering process of asymmetric cryptosystem;

Fig. 2: the signature/verification process of asymmetric cryptosystem;

Fig. 3: a kind of block scheme that replaces the safety intelligent card fingerprint KEY of PIN code with finger-print cipher;

Fig. 4: certificate request flow process;

Fig. 5: certificate downloads to an interior fingerprint KEY (FKEY);

Fig. 6: fingerprint KEY people's initialization management;

Fig. 7: the network application synoptic diagram of fingerprint credit pen.

Fig. 8: fingerprint credit pen side view

Fig. 9: fingerprint credit pen front view

Figure 10: fingerprint credit pen payment system network architecture figure,

Figure 11: fingerprint credit pen is at Net silver application structure figure

Figure 12: fingerprint credit pen payment system modular structure figure

Embodiment

Referring to accompanying drawing: the fingerprint KEY in this patent fingerprint credit pen forms (see figure 3) by intelligent card chip, fingerprint collecting chip and external SDRAM.The fingerprint collecting chip is responsible for gathering fingerprint image and is transferred in the intelligent card chip, and external SDRAM128K provides required computational space during for the CPU computing fingerprint algorithm in the intelligent card chip, and the storage of fingerprint and computing are all realized in smart card.Fingerprint characteristic point template that is produced after the computing and CA center offer the client when providing digital certificate and private key for the first time initial p IN sign indicating number all is stored in the data storage area of the SOC intelligent card chip of fingerprint KEY.This fingerprint KEY safety intelligent card promptly need not change the ciphering process of asymmetric cryptosystem, and (see figure 1) need not change the signature process (see figure 2) of asymmetric cryptosystem again.But solved a difficult problem of utilizing the PKI technology to sign electronically, the insecurity of PIN code protection KEY.Utilize the password of fingerprint identification technology, thereby replace PIN as fingerprint KEY.Really realize " man-machine unification " by authentication to user's biological characteristic.

At first, before the formal use of the fingerprint KEY of fingerprint credit pen, should carry out signing certificate application (Fig. 4) earlier.Certificate is issued by third party authoritative institution (CA center); During the application certificate; except the true identity information that will fill in, examine the applicant; it is right to produce a pair of RSA key at random in fingerprint KEY; and one of them key (PKI) sent fingerprint credit pen; together be dealt into the CA center in company with applicant's information and carry out certificate request; another key (private key) is then stayed fingerprint credit pen inside; assurance can obtain, know this key without any the third party, and the use of key simultaneously is subjected to the initial p IN sign indicating number of fingerprint credit pen and the fingerprint protection that the possessor registered.

Secondly, after CA receives certificate request in the center, use its root key that this certificate request information is signed and issued, form authority's digital certificate (signing certificate).Afterwards, this signing certificate is downloaded in the fingerprint credit pen, and this certificate is distributed to the LDAP last (Fig. 5) at CA center simultaneously.So just finished the certificate request work before fingerprint credit pen uses; the interior use of fingerprint credit pen this moment is protected by initial p IN sign indicating number; the user tackles it and carries out fingerprint register (Fig. 6) after obtaining fingerprint KEY; after succeeding in registration; the certificate private key of preserving among this fingerprint KEY promptly with the owner of this fingerprint binding, can not be used for other third parties.

The user must verify with the fingerprint of the registered mistake of fingerprint KEY owner, otherwise can't finish digital signature, thereby the strictness that guarantees fingerprint credit pen user's entity and certificate is unified when using this fingerprint credit pen consumption and signing.Concrete signature flow process is seen Fig. 2.Fingerprint credit pen consumption and when signing is all carried out finishing after fingerprint signature is confirmed through the user, and the signed electronic document data after the affirmation will be transferred to database stores by the NFC mode.Fig. 7 is the network application synoptic diagram of fingerprint credit pen, and this fingerprint credit pen payment system has following advantage:

1, fingerprint credit pen payment system is the digital certificate in customer bank card account in the fingerprint credit pen and the fingerprint KEY to be bound be stored in operator or the banking data base, and client's individual privacy fingerprint characteristic point data and private key then are kept in the pen.Promptly effectively control client identity, be convenient to monitoring and investigate afterwards.Protect client's fingerprint feature point privacy again.Promptly avoided embarrassment illegal when the third-party operator builds the fingerprint characteristic point data base.Stopped up the leak of electronic money payment again.Adopt fingerprint digital pen payment system will promote the status of third party certification authority of Unionpay and settlement center greatly.

2, the safe reliability height replaces PIN code with finger-print cipher, and the perfect terminal authentication link of PKI system has guaranteed that no longer there is leak in three links of granting, storage, use of certificate.Thereby uniqueness and security that fingerprint credit pen uses have been guaranteed.

3, adopt the close range communication techniques of NFC contactless smart chip to realize fingerprint credit pen data transmission and processing capacity, realize connecting with the wireless and cable network and existing the seamless of Payment System of bank card of telecommunications.

Claims

1, fingerprint credit pen payment system and method and apparatus

A kind of payment system based on the fingerprint credit pen payment.Fingerprint credit pen payment system has comprised hardware, software platform and the network platform that fingerprint credit pen is paid, registration, consumption, cancellation and the critical workflows such as accounting checking, clearing of fingerprint credit pen payment.

Fingerprint credit pen is actually an integrated digital pen of NFC contactless smart chip, bank card chip and fingerprint KEY chip.Realize the collection and the comparison of fingerprint in the pen, fingerprint feature point in fingerprint KEY, thereby guaranteed the safety of individual privacy.Internal information (bank's card number of digital certificate, private key, handwritten signature and user) must can be realized data transmission and processing capacity by the close range communication techniques of NFC contactless smart chip after the binding fingerprint KEY checking, realizes that having the seamless of Payment System now with the wireless and cable network of telecommunications and bank card connects.

2, as right 1 described fingerprint credit pen payment system.Comprise:

User's register flow path in the fingerprint credit pen payment transaction system;

User's account cancellation process in the fingerprint credit pen payment transaction system;

Customer consumption flow process in the fingerprint credit pen payment transaction system;

User inquiring flow process in the fingerprint credit pen payment transaction system;

User in the fingerprint credit pen payment transaction system flow process of checking account;

User's settlement process in the fingerprint credit pen payment transaction system;

3, as right 1 described fingerprint credit pen device, it is characterized in that:

Fingerprint credit pen is actually an integrated digital pen of NFC contactless smart chip, bank card chip and fingerprint KEY chip.NFC contactless smart chip is realized data transmission and the processing capacity that pen is interior by the NFC close range communication techniques, can realize wireless and cable network and the existing seamless connection of Payment System of bank card with telecommunications.The bank card chip is a kind of contact type intelligent card of the EMV of meeting standard.Fingerprint KEY chip, adopted algorithm for recognizing fingerprint to combine with COS, fingerprint recognition comparison template never goes out fingerprint KEY, thereby guaranteed the high security of the terminal authentication link of bank card PKI system, guaranteed that no longer there is leak in three links of granting, storage, use of fingerprint credit pen.Fingerprint credit pen end user's uniqueness and the non repudiation of afterwards investigating have been guaranteed.Described fingerprint collecting chip can adopt arbitrary money chip of companies such as ATMEL, URU, Fujitsu, Authentec, symwave.Fingerprint capturer can be CMOS, optical profile type, inductance type, condenser type, heat seeking, any collector in the paddling formula.Used fingerprint algorithm can adopt the algorithm of any a company in the world, as long as bottom source code that it provided, in the fingerprint KEY of pen during computing, its performance index: fingerprint recognition speed, accuracy of system identification is refused the sincere security requirement that can satisfy the client to fingerprint KEY credit pen.Fingerprint credit pen can integrated any digital pen.

4, as right 1 described fingerprint credit pen device, it is characterized in that: fingerprint credit pen is realized the collection and the comparison of fingerprint in pen, fingerprint feature point in pen among the fingerprint KEY, thereby guaranteed the safety of individual privacy.Internal information (bank's card number of digital certificate, private key, handwritten signature and user) must can be realized data transmission and processing capacity by the close range communication techniques of NFC contactless smart chip after the binding fingerprint KEY checking, realizes that having the seamless of Payment System now with the wireless and cable network of telecommunications and bank card connects.