CN105956844A

CN105956844A - Payment method and system

Info

Publication number: CN105956844A
Application number: CN201610158231.4A
Authority: CN
Inventors: 李明
Original assignee: 李明
Current assignee: Tendyron Corp
Priority date: 2016-03-18
Filing date: 2016-03-18
Publication date: 2016-09-21
Anticipated expiration: 2036-03-18
Also published as: CN105956844B

Abstract

The present invention provides a payment method and system. The method comprises: after a receiving side device detects that the biology limb carrying or internally provided with a payment side device is contacted with the receiving side device, or detects the signals sent by the payment side device through the biology limb, the receiving side device establishes human communication connection with the payment side device through the biology limb; the receiving side device receives the matching information matching the payment side device through the human communication connection, and the first wireless communication connection is built by employing the matching information and the payment side device; the receiving side device receives the first authentication information including the digital authentication information transmitted by the payment side device through the first wireless communication connection, and the receiving side device collects the biology characteristic information of the biology limb during the duration of the payment side device builds the human communication connection with the receiving side device through the biology limb; and the receiving side device executes the payment transaction in the condition of authentication of the digital authentication information and the biology characteristic information.

Description

A kind of method of payment and system

Technical field

The present invention relates to a kind of electronic technology field, particularly relate to a kind of method of payment and system.

Background technology

E-Payment is compared and is paid in cash, and the advantage such as has safely, quickly, reliable.POS is as a kind of payment terminal, quilt In applying to widely pay by mails.Existing POS has plenty of the holder's magnetic strip information being read bank card by card reader, Being inputted dealing money by POS operator, holder is brush bank card in POS, inputs password, POS the most again These information are uploaded to bank backstage, complete on-line transaction.As can be seen here, in existing E-Payment flow process, Yong Huxu Performing twice operation, be put in POS by bank card for the first time and be connected with POS foundation, user needs input for the second time Password, operating process is complicated.

Summary of the invention

Present invention seek to address that one of the problems referred to above.

A kind of method of payment of offer is provided.

Another object of the present invention is to provide a kind of payment system.

For reaching above-mentioned purpose, technical scheme is specifically achieved in that

Scheme 1, a kind of method of payment, carry including: beneficiary equipment detecting or be built-in with the biological limb of payer equipment After body contacts with described beneficiary equipment, or, described beneficiary equipment is detecting that described payer equipment is by described biology After the signal that limbs send, set up human body communication by described biological limbs with described payer equipment and be connected；Described payer sets Connect to described beneficiary device transmission match information for by described human body communication；Described beneficiary equipment is led to by described human body Letter connects the described match information receiving described payer device transmission, and utilizes described match information to build with described payer equipment Vertical first radio communication connects；First authentication information is sent to institute by described first radio communication connection by described payer equipment Stating beneficiary equipment, wherein, described first authentication information includes: digital certificate information；Described beneficiary equipment is by described the One radio communication connects described first authentication information receiving described payer device transmission；At described payer equipment by described Biological limbs set up the duration that human body communication is connected, described beneficiary equipment collection described biology limb with described beneficiary equipment The biological information of body；Described beneficiary equipment obtains to be recognized described digital certificate information and described biological information The authentication result of card；Described beneficiary equipment is execution payment transaction in the case of certification is passed through in described authentication result.

Scheme 2, according to the method described in scheme 1, described match information at least includes: the MAC Address of described payer equipment And the identity of described payer equipment；Match information described in described beneficiary equipment utilization is set up with described payer equipment First radio communication connects, including: after described beneficiary equipment receives described match information by described human body communication, Connected by described human body communication and initiate to set up described first radio communication even to described payer equipment according to described MAC Address The connection request connect；The confirmation that described beneficiary equipment receives described payer equipment by described human body communication responds, Set up described first radio communication with described payer equipment to be connected.

Scheme 3, according to the method described in scheme 2, described beneficiary equipment is connected according to described MAC by described human body communication Address initiates to set up the connection request that described first radio communication connects to described payer equipment, including: described beneficiary equipment Identity locally stored with described beneficiary equipment for described identity being mated, if mating unsuccessful, then passing through Described human body communication connects initiates to set up what described first radio communication connected to described payer equipment according to described MAC Address Request, and store described match information.

Scheme 4, according to the method described in any one of scheme 1 to 3, described first radio communication connects and includes: bluetooth connects, WIFI connects, magnetic flux connects or RFID connects.

Scheme 5, according to the method described in any one of scheme 1 to 4, perform after payment transaction terminates at described beneficiary equipment, Described method also includes: described beneficiary equipment disconnects and being connected with the first radio communication of described payer equipment.

Scheme 6, according to the method described in scheme 5, disconnect wireless with the first of described payer equipment at described beneficiary equipment After communication connection, described method also includes: judge whether described biological limbs are not on the default model of described beneficiary equipment Enclose, and/or, it is judged that whether current time reaches predetermined threshold value apart from the duration of described closing the transaction, if it is, delete described Match information.

Scheme 7, according to the method described in any one of scheme 1 to 6, at described payer equipment, described first authentication information is led to Cross described first radio communication connect be sent to described beneficiary equipment before, described method also includes: described beneficiary equipment lead to Cross described first radio communication to connect to described payer equipment transmission Transaction Information；Described payer equipment receives described transaction letter Breath；Described payer equipment extracts key message from described Transaction Information；Key message described in described payer device prompts, And wait that user confirms；After described payer equipment receives the confirmation instruction of user, perform described payer equipment by described first Authentication information connects the step being sent to described beneficiary equipment by described first radio communication.

Scheme 8, according to the arbitrary described method of scheme 1 to 7, described biological information includes: finger print information and/or vein Information；The biological information of the described biological limbs of described collection includes: contact with described beneficiary equipment at described biological limbs In the case of, gather the described biological information of described biological limbs and the contact site of described beneficiary equipment.

Scheme 9, according to the arbitrary described method of scheme 1 to 8, described digital certificate information includes at least one of: electronics Signing messages, utilize the calculated cipher-text information of symmetric key and dynamic password.

Scheme 10, a kind of payment system, including: beneficiary equipment and payer equipment, wherein: described beneficiary equipment, use In detecting that the biological limbs carrying or being built-in with payer equipment contact with described beneficiary equipment, or, detecting After stating the signal that payer equipment is sent by described biological limbs, set up people by described biological limbs with described payer equipment Body communication connects；Described payer equipment, for connecting to described beneficiary device transmission match information by described human body communication； Described beneficiary equipment, is additionally operable to be connected the described match information receiving described payer device transmission by described human body communication, And utilize described match information to set up the first radio communication with described payer equipment to be connected；Described payer equipment, be additionally operable to by First authentication information is sent to described beneficiary equipment, wherein, described first authentication information by described first radio communication connection Including: digital certificate information；Described beneficiary equipment, is additionally operable to be connected by described first radio communication receive described payer Described first authentication information of device transmission；Set up with described beneficiary equipment by described biological limbs at described payer equipment Human body communication connect duration, gather the biological information of described biological limbs；And obtain described digital certificate information And the authentication result that described biological information is authenticated；It is to perform payment in the case of certification is passed through in described authentication result Transaction.

Scheme 11, according to the system described in scheme 10, described match information at least includes: the MAC of described payer equipment ground Location and the identity of described payer equipment；Described beneficiary equipment, is additionally operable to utilize described match information and described payment Method, apparatus is set up the first radio communication and is connected, including: described beneficiary equipment, it is additionally operable to be connected by described human body communication receive After described match information, connected by described human body communication and initiate to set up to described payer equipment according to described MAC Address The connection request that described first radio communication connects；Described payer equipment, is additionally operable to be received by described human body communication After described connection request, set up described first radio communication with described beneficiary equipment and be connected.

Scheme 12, according to the system described in scheme 11, described beneficiary equipment, be additionally operable to by described human body communication connect root Initiate to set up the connection request that described first radio communication connects to described payer equipment according to described MAC Address, including: institute State beneficiary equipment identity locally stored with described beneficiary equipment for described identity to be mated, if coupling is not Success, then connected by described human body communication and initiate to set up described first nothing to described payer equipment according to described MAC Address The request of line communication connection, and store described match information.

Scheme 13, according to the system described in any one of scheme 10 to 12, described first radio communication connects and includes: bluetooth connects, WIFI connects, magnetic flux connects or RFID connects.

Scheme 14, according to the system described in any one of scheme 10 to 13, described beneficiary equipment, be additionally operable to perform pay hand over After easily terminating, disconnect and being connected with the first radio communication of described payer equipment.

Scheme 15, according to the system described in scheme 14, described beneficiary equipment, be additionally operable to disconnect with described payer equipment The first radio communication connect after, it is judged that whether described biological limbs are not on the preset range of described beneficiary equipment, and/ Or, it is judged that whether current time reaches predetermined threshold value apart from the duration of described closing the transaction, if it is, delete described coupling letter Breath.

Scheme 16, according to the system described in any one of scheme 10 to 15, described payer equipment, be additionally operable to by described first Before authentication information is sent to described beneficiary equipment by described first radio communication connection, by described first radio communication even Receive the Transaction Information that described beneficiary equipment sends；Key message is extracted from described Transaction Information；Point out described key Information, and wait that user confirms；After the confirmation instruction receiving user, perform described first authentication information by described first Radio communication connects the operation being sent to described beneficiary equipment.

Scheme 17, according to the system described in any one of scheme 10 to 16, described biological information includes: finger print information and/ Or venous information；Described beneficiary equipment, the biological information being additionally operable to gather described biological limbs includes: described beneficiary Equipment, in the case of described biological limbs contact with described beneficiary equipment, gathers described biological limbs and described beneficiary equipment The described biological information of contact site.

Scheme 18, according to the system described in any one of scheme 10 to 17, described digital certificate information includes at least one of: Electronic signature information, utilize the calculated cipher-text information of symmetric key and dynamic password.

As seen from the above technical solution provided by the invention, the invention provides a kind of method of payment and system, utilize human body Communications match information, sets up the such as radio communication such as WIFI, bluetooth by match information, it is not necessary to user gets involved, and sets up this The process that a little radio communications connect is the shortest, improves Consumer's Experience.And owing to the match information of beneficiary equipment needs to pass through people Body communication transmits, and only under conditions of meeting human body communication, the match information of beneficiary equipment just can be acquired, and then evades The potential safety hazard that the match information of existing wireless device is obtained easily.Additionally, connect transmission transaction letter by these radio communications Breath and information to be certified, its transfer rate significantly larger than utilizes human body communication to be transmitted, and, to letter to be certified The certification of breath completes after passing through to pay, thus carries bank card without user and just can complete to pay, and disposably obtains numeral simultaneously Authentication information and biological information, efficient and convenient, and by the double authentication to digital certificate information and biological information, With safety and reliability, and the identified failed probability of the most legal user can be reduced, improve Consumer's Experience.

Accompanying drawing explanation

In order to be illustrated more clearly that the technical scheme of the embodiment of the present invention, the required accompanying drawing used in embodiment being described below It is briefly described, it should be apparent that, the accompanying drawing in describing below is only some embodiments of the present invention, for this area From the point of view of those of ordinary skill, on the premise of not paying creative work, it is also possible to obtain other accompanying drawings according to these accompanying drawings.

The flow chart of the method for payment that Fig. 1 provides for the embodiment of the present invention 1；

The payment system structural representation that Fig. 2 provides for the embodiment of the present invention 2.

Detailed description of the invention

Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is clearly and completely described, Obviously, described embodiment is only a part of embodiment of the present invention rather than whole embodiments.Reality based on the present invention Execute example, the every other embodiment that those of ordinary skill in the art are obtained under not making creative work premise, broadly fall into Protection scope of the present invention.

In describing the invention, it is to be understood that term " " center ", " longitudinally ", " laterally ", " on ", D score, " front ", Orientation or the position relationship of the instruction such as " afterwards ", "left", "right", " vertically ", " level ", " top ", " end ", " interior ", " outward " are base In orientation shown in the drawings or position relationship, it is for only for ease of the description present invention and simplifies description rather than instruction or hint institute The device that refers to or element must have specific orientation, with specific azimuth configuration and operation, therefore it is not intended that to the present invention Restriction.Additionally, term " first ", " second " are only used for describing purpose, and it is not intended that instruction or hint relative importance Or quantity or position.

In describing the invention, it should be noted that unless otherwise clearly defined and limited, term " install ", " being connected ", " connect " and should be interpreted broadly, connect for example, it may be fixing, it is also possible to be to removably connect, or be integrally connected；Permissible It is to be mechanically connected, it is also possible to be electrical connection；Can be to be joined directly together, it is also possible to be indirectly connected to by intermediary, can be two The connection of individual element internal.For the ordinary skill in the art, can understand that above-mentioned term is in the present invention with concrete condition In concrete meaning.

Below in conjunction with accompanying drawing, the embodiment of the present invention is described in further detail.

Embodiment 1

Human body communication is an emerging short-range communication technique of rising in recent years, mainly in order to solve the body territory with human body as carrier The communication issue of net.It utilizes human body as the transmission medium of the signal of telecommunication, it is achieved body surface, internal and human peripheral's (3～5 meters) The information of medical health equipment is mutual.Compared with traditional bluetooth, WIFI, radio frequency and the wireless communication technology such as infrared, human body leads to During letter, signal is through human body transmission, thus electromagnetic noise is the least on its impact, has low-power consumption, high security and lower The advantage such as human body infringement.Additionally due to there is not the problem that many people communication efficiency rate reduces, it is possible to exempt wire communication mode superfluous Remaining line puzzlement.Based on this, the present invention proposes a kind of method of payment, utilizes human body communication to transmit match information, by coupling Information sets up the such as radio communication such as WIFI, bluetooth, it is not necessary to user gets involved, and the process setting up the connection of these radio communications is the shortest, Improve Consumer's Experience.And owing to the match information of beneficiary equipment needs to be transmitted by human body communication, only meet human body lead to Under conditions of letter, the match information of beneficiary equipment just can be acquired, and then has evaded the match information of existing wireless device by easily The potential safety hazard obtained.Additionally, connect transmission Transaction Information and information to be certified by these radio communications, it transmits speed Rate significantly larger than utilizes human body communication to be transmitted, and, complete after authentification of message to be certified is passed through pay, for Once-through operation has only been carried out for family, the most disposable digital certificate information and the biological information of obtaining of beneficiary equipment, fast Convenient, and by the double authentication to digital certificate information and biological information, with safety and reliability, and can reduce The identified failed probability of the most legal user, improves Consumer's Experience.

Present embodiments provide a kind of method of payment, as it is shown in figure 1, this method of payment comprises the following steps S100～S112:

S100: beneficiary equipment is detecting that the biological limbs carrying or being built-in with payer equipment contact with described beneficiary equipment After, or, described beneficiary equipment, after the signal that described payer equipment is sent being detected by described biological limbs, passes through Described biological limbs are set up human body communication with described payer equipment and are connected；

In the present embodiment, biological limbs refer generally to human body, and these biology limbs carry or built-in payer equipment, and beneficiary sets Standby can be that the barcode scanning terminal such as POS, Alipay application, mobile terminal, PDA, desktop computer, notebook etc. can be with backstages The payment terminal of networking, payer equipment can be that implantation human body is interior, is worn on human body or is positioned in the medicated clothing of dress Device, implanting the device in human body can be such as the blood flow transducer in implantation human body, pulse transducer, body temperature trans Deng sensor, being worn on the device with human body can be such as that bracelet, watch, necklace, ring, belt etc. may be worn on use Electronic equipment with family.If being worn on the device with human body, although it the most directly contacts with human body surface, but with The distance of human body surface (such as skin) not can exceed that predeterminable range, the most several millimeters, in order to pass through human body in this predeterminable range Communicate, it is ensured that communication quality.Owing to body area network (Body Area Network is called for short BAN) is exactly centered by human body, By the network element relevant with human body (include personal terminal, be distributed on the person, on medicated clothing, human peripheral's certain distance model Enclose such as the sensor in 3～5 meters, within the even person, networking equipment) etc. the communication network of composition, therefore, only and people The network element that body is relevant enters in this preset range of beneficiary equipment, such as, carries or be built-in with the people of payer equipment After body contacts with beneficiary equipment, or payer equipment is able to detect that the signal that beneficiary equipment sends, body territory could be set up The human body communication of net connects.

As the optional embodiment of the one in the present embodiment, beneficiary equipment is communicated with the foundation of payer equipment by biological limbs Connection can pass through wired mode and wireless mode, specifically, at least can be realized by one of following two mode:

Wired mode (i.e. the way of contact):

Beneficiary equipment and payer equipment are equipped with electrode, at beneficiary equipment and the biology carrying or being built-in with payer equipment After limbs (human body) contact (such as, finger is contacted POS by the user wearing watch), using human body as conductor, double The electrode connection of side forms the path in human body, the communication connection of the most so-called wired mode.In this approach, beneficiary equipment Needing and carry or be built-in with the human contact of payer equipment, payer equipment carries or is built-in with payer equipment detecting Human body contact with beneficiary equipment after, payer equipment and described beneficiary equipment set up human body communication by described biology limbs Connect.

Wireless mode (i.e. detects aspect):

In wireless mode, beneficiary equipment (such as POS) can be set to broadcast match information, payer equipment (as Watch) it is set to reception state, whether payer equipment Inspection detects, by described biological limbs, the letter that beneficiary equipment sends Number, the distance between beneficiary equipment and the human body carrying or being built-in with payer equipment is in the range of human body communication permission In the case of, payer equipment just can detect, by described biological limbs, the signal that beneficiary equipment sends, can be with beneficiary Equipment is set up human body communication and is connected.In this approach, beneficiary equipment need not and carry or be built-in with the human body of payer equipment Contact, as long as the distance between beneficiary equipment and the human body carrying or being built-in with payer equipment is in the model that human body communication allows Just can set up human body communication in enclosing to connect.

Aforesaid way utilizes human body as the transmission medium of the signal of telecommunication, it is achieved body surface, internal and the setting of human peripheral (3～5 meters) Standby information is mutual.Owing to during human body communication, information is through human body transmission, thus electromagnetic noise is the least on its impact, has The advantages such as low-power consumption, high security and lower human body infringement.Additionally due to there is not the problem that many people communication efficiency rate reduces, Also the line puzzlement of wire communication mode redundancy can be exempted.

S102: described payer equipment connects the coupling to described beneficiary device transmission payer equipment by described human body communication Information；

Wherein, the match information of payer equipment at least includes: the MAC Address of payer equipment and the body of payer equipment Part mark；Wherein, by the MAC Address of payer equipment, beneficiary equipment may determine that initiation the first radio communication connects Object, in order to payer equipment initiate first radio communication connect, first radio communication connect include but not limited to purgation One: bluetooth connects, WIFI connects, magnetic flux connects or RFID connects.Additionally, by the identity of payer equipment So that beneficiary equipment is capable of identify that the identity of payer equipment, thus determine whether that payer equipment is set up with oneself First radio communication connects.

Compared in prior art by the way of broadcast or scanning Quick Response Code etc. obtain match information, in the present embodiment, utilize Human body communication connects transmission match information, due to the particularity of human body communication, only carries or be built-in with the human body of payer equipment When meeting the condition in the default communication range contacting or entering beneficiary equipment with beneficiary equipment, beneficiary equipment could detect To the match information of payer equipment, and then the potential safety hazard that the match information having evaded existing wireless device is obtained easily.And And, there is due to human body communication the advantages such as low-power consumption, high security and lower human body infringement, thus improve match information The safety obtained.

S104: described beneficiary equipment connects the described match information receiving described payer device transmission by described human body communication, And utilize described match information to set up the first radio communication with described payer equipment to be connected；

In step S104, beneficiary equipment utilization match information is set up the first radio communication and is connected concrete bag with payer equipment Include:

After S104a: beneficiary equipment receives the match information of payer equipment by human body communication, by human body communication even Connect and initiate to set up the connection request that the first radio communication connects to payer equipment according to MAC Address；

In the specific implementation, beneficiary equipment is after completing delivery operation, and payer equipment is it is also possible to be in beneficiary equipment Presetting in communication range, beneficiary equipment meeting one directly receives the match information of the payer device broadcasts being complete payment transaction, Also it is ready for the payer equipment of first payment transaction in receiving the first default communication range entering beneficiary equipment simultaneously The match information of broadcast, initiates to connect to ensure beneficiary equipment will not repeat to the payer equipment being complete payment transaction Request, as the optional embodiment of one, in this step S104a, beneficiary equipment is connected according to MAC by human body communication Address initiates to set up the connection request that the first radio communication connects to payer equipment, specifically includes: beneficiary equipment will receive The identity match information locally stored with beneficiary equipment in identity mate, if mating unsuccessful, then Connected by human body communication and initiate to set up connection request according to MAC Address to payer equipment, and store the coupling letter received Breath.

In the present embodiment, at beneficiary equipment after payer equipment initiates connection request, the coupling of payer equipment will be stored Information, this match information at least includes: the identity of payer equipment, and this identity can include but not limited to: pay The device identification of method, apparatus, user name etc. can uniquely identify the mark of payer equipment identities.Alternatively, beneficiary equipment exists Match information list can be set up in this locality, for storage had requested that payment transaction payer equipment MAC Address and Identity, by the identity received from payer equipment is mated with the identity in identity identification list, I.e. inquire-receive to identity whether be present in this identity identification list, if it is present the match is successful, do not become Merit, if the match is successful, although then explanation payer equipment is in the default communication range of beneficiary equipment, but is complete Payment transaction, then beneficiary equipment will not initiate connection request to this payer equipment again；If mating unsuccessful, then illustrate Payer equipment is ready for first payment transaction in entering the default communication range of beneficiary equipment for the first time, then beneficiary equipment Can initiate connection request to this payer equipment carrying out first payment transaction, thus, beneficiary equipment may determine that payer sets Standby being complete pays or carries out payment transaction for the first time, thus ensures that beneficiary equipment will not repeat to being complete payment transaction Payer equipment initiate connection request.

In the specific implementation, after beneficiary equipment execution payment transaction terminates, the method that the present embodiment provides also includes: gathering Method, apparatus disconnects and being connected with the first radio communication of payer equipment, thus the payer equipment for waiting in line below to pay provides Set up the chance that the first radio communication connects.

Additionally, when reality is implemented, there is also and be complete the payer equipment of payment transaction and really need to initiate again to pay friendship Easy situation, in order to avoid beneficiary equipment refusal initiates connection request to this payer equipment, beneficiary equipment can be certain Under the conditions of delete the match information of storage.In the present embodiment in a kind of optional embodiment, disconnect at beneficiary equipment and prop up After paying the first radio communication connection of method, apparatus, the method that the present embodiment provides also includes: judge whether above-mentioned biological limbs do not have Have the preset range being in beneficiary equipment, and/or, it is judged that the closing the transaction of current time distance and above-mentioned payer equipment time Whether length reaches predetermined threshold value, if it is, delete the match information that this payer equipment is corresponding.Wherein, it is judged that carry or interior Put the biological limbs of payer equipment whether to be not on the preset range of beneficiary equipment and refer to if beneficiary equipment cannot connect again Receive the signal that payer equipment is sent by biological limbs, then explanation is carried or the biological limbs of built-in payment method, apparatus have surpassed Go out the preset range that beneficiary equipment can communicate；Additionally, the present embodiment sets the payer equipment being complete payment transaction Again the time interval (i.e. predetermined threshold value) that the first radio communication is connected can be set up with beneficiary equipment, such as after closing the trade Payer equipment again can be set up the first radio communication with beneficiary equipment after closing the transaction 10s and be connected.The present embodiment is permissible By the distance of payer equipment and the dual judgement of time that are complete payment are deleted match information.Once this payment The match information of method, apparatus is deleted, even if this payer equipment is in the default communication range of beneficiary equipment, and beneficiary equipment Also can initiate connection request to this payer equipment again, thus the payer equipment solving to be complete payment transaction needs to send out really Play payment transaction again, but the problem refused by beneficiary equipment.

The confirmation that S104b: beneficiary equipment receives described payer equipment by described human body communication responds, with described Pay method, apparatus and set up described first radio communication connection.

In the present embodiment, payer equipment, after receiving the connection request that beneficiary equipment is initiated, can return to beneficiary equipment Return and confirm response, set up the first radio communication with beneficiary equipment and be connected.Thus, payer equipment and beneficiary equipment can be in order to Connect by the first radio communication and carry out data transmission, transmit data compared to direct human body communication, utilize the first radio communication even Connect (such as WIFI connection, bluetooth connection, magnetic flux connection, RFID connection etc.) transmission data and can be greatly improved transfer rate, The payment process of user faster, improves Consumer's Experience, delivery operation in hgher efficiency.

Need display to the user that connection list and need user to input even compared to the wireless connections such as bluetooth, WIFI in prior art Connecing the mode of setting up of key, in the present embodiment, payer equipment connects the coupling letter getting beneficiary equipment by human body communication Breath, it is no longer necessary to the participation of user, user is without inputting any information, and beneficiary equipment just can be done directly access authentication, Directly setting up above-mentioned first radio communication to connect, the process setting up the first radio communication connection is the shortest, improves Consumer's Experience； Additionally, due to the particularity of human body communication, only carry or be built-in with the human body of payer equipment and meet and contact with beneficiary equipment Or enter beneficiary equipment default communication range in condition time, payer equipment just can receive beneficiary device broadcasts Join information, and then the potential safety hazard that the match information having evaded existing wireless device is obtained easily.It is additionally, since human body communication There is the advantages such as low-power consumption, high security and lower human body infringement, thus improve the safety that match information obtains.

First authentication information is sent to beneficiary equipment by the first radio communication connection by S106: payer equipment；

In the present embodiment, the first authentication information includes: digital certificate information；Digital certificate information includes at least one of: electricity Sub-signing messages, cipher-text information and dynamic password.Wherein, electronic signature information is that the private key of payer equipment utilization self is treated The signed data that signed data signature obtains, data to be signed include: single authentication data and certification identification information etc., When this electronic signature information is authenticated, obtain the PKI of this payer equipment, utilize this PKI that electronic signature information is carried out Sign test, if sign test is passed through, then certification is passed through, and this is asymmetric authentication mode；Cipher-text information be payer equipment utilization with The symmetric key that beneficiary equipment is consulted treats the MAC value that computing with encrypted data obtains, when this cipher-text information is authenticated, Treat computing with encrypted data also with this symmetric key and be verified MAC value, compare cipher-text information and checking MAC value, as Fruit is consistent, then certification is passed through, and this is symmetrical authentication mode；Dynamic password is that E-token dynamic password card (OTP) is raw based on seed key The ciphertext become, when being authenticated this dynamic password, is calculated validation value also with this seed key, relatively dynamic mouth Order and validation value, if unanimously, then certification is passed through, and this is token authentication mode.In the present embodiment, can be by above-mentioned 3 Any one in the mode of kind realizes the certification to digital certificate information, with the legitimacy of method, apparatus of guaranteeing payment.

In a kind of optional embodiment of the present embodiment, above-mentioned first authentication information can also include: certification identification information；Should Certification identification information for example, the device identification of payer equipment, ID etc. can uniquely identify the information of user identity, Payer user recognizing for certification digital certificate information and biological information can be uniquely associated to by certification identification information The card factor, in order to utilize this certification factor pair digital certificate information and biological information to carry out double authentication, thus, double Re-authentication is assured that after passing through that biological information and digital certificate information both are from same user, it is ensured that the conjunction of user Method.

In the specific implementation, in the case of small amount payment, as long as no exceeding the upper limit that payer equipment is arranged, payer sets Standby just can connection by the first radio communication by the first authentication information is sent to beneficiary equipment, is recognizing the first authentication information Card, by rear, just can complete payment transaction.

In the specific implementation, in the case of wholesale pays, in order to ensure transaction security, payer equipment is needed to prompt the user with Transaction Information, after by the confirmation of user, just allows follow-up delivery operation, specifically, before step S106, and this reality The method that executing example provides also includes:

S105a: beneficiary equipment is connected to payer equipment transmission Transaction Information by the first radio communication；

In the present embodiment, Transaction Information may include that dealing money, beneficiary accounts information and payer account information, When there is block trade, Transaction Information must be sent to payer equipment by beneficiary equipment, in order to prompting user, user After confirmation, follow-up certification and payment flow could be performed.The present embodiment is by such as WIFI, bluetooth, magnetic flux, RFID etc. First radio communication connects transmission Transaction Information, and transfer rate faster, thus improves payment speed, improves Consumer's Experience.

Additionally, when reality is implemented, payer equipment can be equipment, such as a watch, it is also possible to be two equipment, example Such as watch and electronic signature equipment (such as U-shield, agricultural bank Key treasured or the smart card with signature function).

S105b: payer equipment receives Transaction Information, and payer equipment extracts key message from Transaction Information；

In the present embodiment, payer equipment can extract key message from Transaction Information, such as dealing money, or, beneficiary Title, the title etc. of payer, and without being pointed out by the full content of Transaction Information, specifically, display screen can be passed through The modes such as display or speech play are pointed out, and especially, can meet the mini-plant with small display screen, such as watch Display screen the least, it is impossible to display Transaction Information full content, but as long as display key content, just can play prompting user Effect.

S105c: payer device prompts key message, and wait that user confirms, the confirmation instruction of user is received at payer equipment After, perform step S106；

In the present embodiment, increase the step that user confirms, to improve the safety of transaction, only confirm user, press really After recognizing key, follow-up operation could be performed.Especially, if payer equipment is two equipment, then when pointing out to user, Can point out on any one equipment wherein, certainly, preferably point out in electronic signature equipment.

Thus, ensure that, by the confirmation of user, the transaction security that wholesale pays.

S108: beneficiary equipment connects the first authentication information receiving payer device transmission by the first radio communication；Paying Method, apparatus by biological limbs set up with beneficiary equipment that human body communication is connected duration, beneficiary equipment collection biology limbs Biological information；

Wherein, biological information includes at least one of: finger print information, iris information, face information and venous information. In the present embodiment, beneficiary equipment acquires the biological special of human body while receiving the first authentication information that payer equipment sends Reference ceases, such as, within the of short duration time touching parts that user's finger touches POS (such as 3 seconds), and POS and use The watch that family is worn sets up communication connection by human body, and transmit the first authentication information by this communication connection, simultaneously POS Touching parts and gather finger print information, the most such as, at the watch of user, (this payment terminal has merit of taking pictures with Alipay payment terminal Can, may be used for gathering face information) set up the period that human body communication connects, by payment terminal collection face information, thus, Beneficiary equipment just can disposably obtain digital certificate information and biological information, convenient to operation.

In the present embodiment, as long as setting up, with beneficiary equipment, the duration that human body communication is connected by biological limbs at payer equipment Interior collection biological information, biological information can be before communication connection be set up, it is also possible to build in communication connection Gather immediately or afterwards.

In this step, especially, needing human body limb to contact just to collect the feelings of biological information with beneficiary equipment Condition, as the optional embodiment of one, biological information includes: finger print information and/or venous information；Gather biological limbs Biological information include: in the case of biological limbs contacts with beneficiary equipment, gather biology limbs and beneficiary equipment The biological information of contact site.

Adding the mode of PIN code compared to inputting fingerprint in POS in prior art, POS first points out user to input finger print information, Gathering fingerprint, reresent user and input PIN code, user needs with POS by just completing fingerprint and PIN code alternately twice Input, cumbersome, and in the present invention for a user, as long as an action just can disposably complete the first certification The input of information and the collection of biological information, convenient and swift.

S110: beneficiary equipment obtains the authentication result being authenticated digital certificate information and biological information；

In the present embodiment, the authentication result being authenticated digital certificate information and biological information is according to certification mark letter Breath obtains the certification factor and biological characteristic validation information, and utilizes certification factor pair digital certificate information be authenticated and utilize life The authentication result that biological information is authenticated by thing signature verification information, the certification factor mainly includes testing digital certificate information The checking information of card, this certification factor and biological characteristic validation information and certification identification information unique association, therefore according to certification mark Knowledge information can be with the certification factor corresponding to unique queries to this user and biological characteristic validation information, in order to digital certificate information with And after the double authentication of biological information is passed through, it is ensured that the legitimacy of user.

In this step, the certification of certification factor pair digital certificate information is utilized at least to include one of following several ways:

Mode one: asymmetric authentication mode.In this approach, digital certificate information includes: electronic signature information；The certification factor Including the PKI that electronic signature information is carried out sign test；Or,

Mode two: symmetrical authentication mode.In this approach, digital certificate information includes: utilize symmetric key calculated close Literary composition information；The certification factor includes symmetric key；Or,

Mode three: token authentication mode.In this approach, digital certificate information includes: dynamic password；It is right that the certification factor includes Dynamic password carries out the seed key verified.

The most describing three kinds of authentication modes of digital certificate information, here is omitted.

Above-mentioned utilize certification factor pair digital certificate information and utilize biological characteristic validation information that biological information is recognized Card, including: utilize certification factor pair digital certificate information to be authenticated, and judge that biological characteristic validation information is believed with biological characteristic The matching rate of breath whether more than the first preset value, to digital certificate information certification by and biological characteristic validation information special with biology When the matching rate of reference breath is more than the first preset value, confirm the certification of digital certificate information and biological information is passed through.

Wherein, the first preset value is less than the second preset value, and the second preset value is same biology for two biological informations of instruction The matching rate of characteristic information；When reality is implemented, the second preset value can be that two biological informations mate want completely in theory The similarity reached, such as 99%, and the first preset value can be less than the second preset value, thus by reducing matching rate, drop The identified failed probability of user the most legal in low biological information authentication techniques.

The identified failed probability of the most legal user and illegal is there is in the biological information authentication techniques of prior art User is identified successful probability, and as a example by fingerprint recognition, many times, the fingerprint of user is real, but certification device Identifying mistake, missing the fingerprint recognition of this user is false fingerprint, thus can not pass through certification, it is impossible to realize payment transaction；And have When, the fingerprint of disabled user is obviously false, but the also certification of certification device is passed through, and causes economically to validated user Loss, these situations occur probability be all the highest.And the present embodiment is by digital certificate information and biological information Double authentication can evade the situation of " illegal user is identified successfully ", and the most legal user can be reduced and known The situation that failure does not occurs.First, by above-mentioned 3 kinds of certifications to digital certificate information, it may be determined that this user is legal use Family, if disabled user then cannot be by this digital authenticating, then the operation to false finger print identifying would not occurs, thus advise Keep away the situation of " illegal user is identified successfully "；Secondly, in the case of ensureing that user is validated user, certification device The similarity of two biometric information matches can be reduced, to reduce the identified failed probability of the most legal user, example As, two biological informations to mate completely in theory, and its similarity at least to reach 99% (the second preset value), and if Certification device finds when its similarity is only 90%, will be identified as not mating, and certification is not passed through, and occurs knowing genuine fingerprint It is not the situation of false fingerprint, in the present invention, owing to digital authenticating has ensured that user is validated user, so, can be by complete The similarity of full coupling is reduced to 80% (the first preset value), say, that as long as similarity reaches 80% (the first preset value) It is considered as coupling, therefore, when the similarity of two biological informations is 90%, it is also possible to by certification, thus, the most not There will be the identified failed situation of the most legal user, thus reduce in biological information authentication techniques the most legal The identified failed probability of user.

S112: beneficiary equipment is execution payment transaction in the case of certification is passed through in authentication result.

The present embodiment provide method of payment, utilize human body communication transmit match information, by match information set up such as WIFI, The radio communications such as bluetooth, it is not necessary to user gets involved, the process setting up the connection of these radio communications is the shortest, improves Consumer's Experience. And owing to the match information of beneficiary equipment needs to be transmitted by human body communication, only beneficiary under conditions of meeting human body communication The match information of equipment just can be acquired, and then the potential safety hazard that the match information having evaded existing wireless device is obtained easily. Additionally, connect transmission Transaction Information and information to be certified by these radio communications, its transfer rate significantly larger than utilizes people Body communication is transmitted, and, complete to pay after the certification of information to be certified is passed through, thus carry bank without user Card just can complete to pay, the most disposable digital certificate information and the biological information of obtaining, efficient and convenient, and by right Digital certificate information and the double authentication of biological information, with safety and reliability, and can reduce the most legal user's quilt The probability of recognition failures, improves Consumer's Experience.

Embodiment 2

Present embodiments provide a kind of payment system, as in figure 2 it is shown, this payment system includes: beneficiary equipment 10 and payer Equipment 20, wherein:

Described beneficiary equipment 10, for detecting the biological limbs and described gathering carrying or being built-in with payer equipment 20 Method, apparatus 10 contacts, or, after the signal that described payer equipment 20 is sent being detected by described biological limbs, pass through Described biological limbs are set up human body communication with described payer equipment 20 and are connected；Described payer equipment 20, for by described Human body communication connection transmits match information to described beneficiary equipment 10；Described beneficiary equipment 10, is additionally operable to by described people Body communication connects the described match information receiving the transmission of described payer equipment 20, and utilizes described match information and described payer Equipment 20 is set up the first radio communication and is connected；Described payer equipment 20, is additionally operable to the first authentication information by described first Radio communication connection is sent to described beneficiary equipment 10, and wherein, described first authentication information includes: digital certificate information；Institute State beneficiary equipment 10, be additionally operable to be connected by described first radio communication receive described the of described payer equipment 20 transmission One authentication information；Human body communication is set up even by described biological limbs with described beneficiary equipment 10 at described payer equipment 20 Connect duration, gather the biological information of described biological limbs；And obtain described digital certificate information and described life The authentication result that thing characteristic information is authenticated；It is execution payment transaction in the case of certification is passed through in described authentication result.

The payment system provided by the present embodiment, is utilized human body communication to transmit match information, is set up such as by match information The radio communication such as WIFI, bluetooth, it is not necessary to user gets involved, the process setting up the connection of these radio communications is the shortest, improves user Experience.And owing to needing to be transmitted by human body communication from the match information of equipment, only from setting under conditions of meeting human body communication Standby match information just can be acquired, and then the potential safety hazard that the match information having evaded existing wireless device is obtained easily.This Outward, connecting transmission Transaction Information and information to be certified by these radio communications, its transfer rate significantly larger than utilizes human body Communication is transmitted, and, complete to pay after authentification of message to be certified is passed through, the most only carried out once Operation, the most disposable digital certificate information and the biological information of obtaining of beneficiary equipment 10, efficient and convenient, and by right Digital certificate information and the double authentication of biological information, with safety and reliability, and can reduce the most legal user's quilt The probability of recognition failures, improves Consumer's Experience.

In the present embodiment, biological limbs refer generally to human body, and these biology limbs carry or built-in payer equipment, and beneficiary sets Standby 10 can be that the barcode scanning terminal such as POS, Alipay application, mobile terminal, PDA, desktop computer, notebook etc. can be with The payment terminal of backstage networking, payer equipment 20 can be that implantation human body is interior, is worn on human body or is positioned over dress Device in medicated clothing, the device in implantation human body can be such as the blood flow transducer in implantation human body, pulse transducer, body temperature The sensors such as sensor, being worn on the device with human body can be such as that bracelet, watch, necklace, ring, belt etc. can be worn It is worn over the electronic equipment with user.If being worn on the device with human body, although it the most directly contacts with human body surface, But not can exceed that predeterminable range with the distance of human body surface (such as skin), the most several millimeters, in order to pass through in this predeterminable range Human body communicates, it is ensured that communication quality.Owing to body area network (Body Area Network is called for short BAN) is exactly to be with human body Center, by the network element relevant with human body (include personal terminal, be distributed on the person, on medicated clothing, human peripheral certain Distance range as in 3～5 meters, even the sensor person within, networking equipment) etc. the communication network of composition, therefore, There is the network element relevant with human body to enter in this preset range of beneficiary equipment 10, the human body communication of body area network could be set up Connect.

As the optional embodiment of the one in the present embodiment, beneficiary equipment 10 is built with payer equipment 20 by biological limbs Vertical communication connection can pass through wired mode and wireless mode, specifically, at least can be realized by one of following two mode:

Wired mode: (i.e. the way of contact):

Beneficiary equipment 10 and payer equipment 20 are equipped with electrode, and beneficiary equipment 10 carries or is built-in with payment detecting The biological limbs of method, apparatus 20 and the first opposite equip. (i.e. beneficiary equipment 10) contact (such as, wear the user of watch Finger is contacted POS) after, human body is formed the path in human body as conductor, the electrode connection of both sides, the most so-called have The communication connection of line mode.In this approach, beneficiary equipment 10 needs and the human contact wearing payer equipment 20.

Wireless mode (i.e. detects aspect):

In wireless mode, can be set to payer equipment (such as watch) broadcast match information, beneficiary equipment is (such as POS Machine) it is set to reception state, beneficiary equipment 10 detects the signal that payer equipment 20 is sent by human body, sets at beneficiary In the case of standby distance between 10 and the human body carrying or being built-in with payer equipment 20 is in the range of human body communication permission, Beneficiary equipment 10 just can detect the signal that payer equipment 20 is sent by human body, it is possible to sets up with payer equipment 20 Human body communication connects.In this approach, beneficiary equipment 10 need not connect with the human body carrying or being built-in with payer equipment 20 Touch, as long as the distance between beneficiary equipment 10 and the human body carrying or being built-in with payer equipment 20 is in human body communication and allows In the range of just can set up human body communication connect.

Aforesaid way utilizes human body as the transmission medium of the signal of telecommunication, it is achieved body surface, internal and the setting of human peripheral (3～5 meters) Standby information is mutual.Compared with traditional bluetooth, WIFI, radio frequency and the wireless communication technology such as infrared, believe during human body communication Number through human body transmission, thus electromagnetic noise is the least on its impact, has low-power consumption, high security and the infringement of lower human body Etc. advantage.Additionally due to there is not the problem that many people communication efficiency rate reduces, it is possible to the line exempting wire communication mode redundancy is stranded Disturb.

In the present embodiment, described payer equipment 20, is propped up to described beneficiary device transmission for being connected by described human body communication Pay the match information of method, apparatus, compared in prior art by the way of broadcast or scanning Quick Response Code etc. obtain match information, In the present embodiment, utilize human body communication to connect transmission match information, due to the particularity of human body communication, only carry or be built-in with The human body of payer equipment 20 meets the bar in the default communication range contacting or entering beneficiary equipment 10 with beneficiary equipment 10 During part, payer equipment 20 just can receive the match information of beneficiary equipment 10 broadcast, and then has evaded existing wireless device The potential safety hazard that obtained easily of match information.It is additionally, since human body communication and there is low-power consumption, high security and lower The advantages such as human body infringement, thus improve the safety that match information obtains.

As the optional embodiment of the another kind in the present embodiment, can be set to payer equipment 20 broadcast match information, receive Money method, apparatus 10 is set to reception state, and beneficiary equipment 10 is receiving payer equipment 20 by human body communication connection transmission Match information after, just can initiate to set up the flow process that the first radio communication connects, specifically, beneficiary equipment 10, be additionally operable to The match information utilizing above-mentioned payer equipment is set up the first radio communication with described payer equipment 20 and is connected, including: beneficiary Equipment 10, after being additionally operable to be received the match information of payer equipment by human body communication, connects basis by human body communication MAC Address initiates to set up the connection request that the first radio communication connects to payer equipment 20；Payer equipment 20, is additionally operable to After receiving connection request by human body communication, set up the first radio communication with beneficiary equipment 10 and be connected.Thus, pay Method, apparatus 20 can utilize the first radio communication to be connected with beneficiary equipment 10 to carry out data transmission, compared to directly leading to human body Letter transmission data, utilize the first radio communication to connect (such as WIFI connection, bluetooth connection, magnetic flux connection, RFID connection etc.) Transmission data can be greatly improved transfer rate, and the payment process of user faster, improves Consumer's Experience, the efficiency of delivery operation Higher.

In this optional embodiment, the match information of payer equipment at least includes: the MAC Address of payer equipment 20 with And the identity of payer equipment 20；Wherein, by the MAC Address of payer equipment 20, beneficiary equipment 10 is permissible Determine and initiate the object that the first radio communication connects, in order to initiating the first radio communication to payer equipment 20 and connect, first is wireless Communication connection includes but not limited to one below: bluetooth connects, WIFI connects, magnetic flux connects or RFID connects.Additionally, By the identity of payer equipment 20 so that beneficiary equipment 10 is capable of identify that the identity of payer equipment 20, thus Determine whether that payer equipment 20 is set up the first radio communication and is connected with oneself.

Compared in prior art by the way of broadcast or scanning Quick Response Code etc. obtain match information, in the present embodiment, utilize Human body communication connects transmission match information, due to the particularity of human body communication, only carries or be built-in with the people of payer equipment 20 When body meets the condition in the default communication range contacting or entering beneficiary equipment 10 with beneficiary equipment 10, beneficiary equipment 10 match information that just can receive payer equipment 20, and then the match information having evaded existing wireless device obtained easily Potential safety hazard.It is additionally, since human body communication and there is the advantages such as low-power consumption, high security and lower human body infringement, thus Improve the safety that match information obtains.

In the specific implementation, beneficiary equipment 10 is after completing delivery operation, and payer equipment 20 is it is also possible to be in beneficiary In the default communication range of equipment 10, beneficiary equipment 10 meeting one directly receives the payer equipment 20 being complete payment transaction The match information of broadcast, is ready for first simultaneously in also receiving the first default communication range entering beneficiary equipment 10 Pay the match information of payer equipment 20 broadcast of transaction, in order to ensure that beneficiary equipment 10 will not repeat to being complete payment The payer equipment 20 of transaction initiates connection request, as the optional embodiment of one, beneficiary equipment 10, is additionally operable to lead to Cross human body communication and connect the connection request initiating to set up the first radio communication connection according to MAC Address to payer equipment 20, tool Body includes: beneficiary equipment 10 is by the identity in match information locally stored with beneficiary equipment 10 for the identity that receives Mark is mated, if mating unsuccessful, is then connected by human body communication and initiates to payer equipment 20 according to MAC Address Set up connection request, and store the match information received.

In this optional embodiment, at beneficiary equipment 10 after payer equipment 20 initiates connection request, will store and prop up Paying the match information of method, apparatus 20, this match information at least includes: the identity of payer equipment 20, and this identity can To include but not limited to: the device identification of payer equipment 20, user name etc. can uniquely identify payer equipment 20 identity Mark.Alternatively, beneficiary equipment 10 can set up match information list in this locality, had requested that payment transaction for storage The MAC Address of payer equipment 20 and identity, by the identity that will receive from payer equipment 20 with Identity in identity identification list is mated, i.e. inquire-receive to identity whether be present in this identity identification list In, if it is present the match is successful, the most unsuccessful, if the match is successful, although then explanation payer equipment 20 is in receipts In the default communication range of money method, apparatus 10, but it is complete payment transaction, then beneficiary equipment 10 will not be again to this payment Method, apparatus 20 initiates connection request；If mating unsuccessful, then explanation payer equipment 20 enters beneficiary equipment 10 for the first time It is ready for first payment transaction, then beneficiary equipment 10 meeting carries out the payment of first payment transaction to this in presetting communication range Method, apparatus 20 initiates connection request, and thus, beneficiary equipment 10 may determine that payer equipment 20 is complete and pays or first The secondary payment transaction that carries out, thus ensure that beneficiary equipment 10 will not repeat to the payer equipment 20 being complete payment transaction Play connection request.

In the specific implementation, beneficiary equipment 10, it is additionally operable to, after execution payment transaction terminates, disconnect and payer equipment 20 First radio communication connect, thus for wait in line below pay payer equipment 20 provide set up first radio communication connect Chance.

Additionally, when reality is implemented, there is also and be complete the payer equipment 20 of payment transaction and really need to initiate again to pay The situation of transaction, in order to avoid beneficiary equipment 10 is refused to initiate connection request, beneficiary equipment 10 to this payer equipment 20 The match information of storage can be deleted under certain conditions.In the present embodiment in a kind of optional embodiment, beneficiary equipment 10, it is additionally operable to after disconnection is connected with the first radio communication of payer equipment 20, it is judged that above-mentioned biological limbs are not the most located In the preset range of beneficiary equipment 10, and/or, it is judged that the closing the transaction of current time distance and above-mentioned payer equipment time Whether length reaches predetermined threshold value, if it is, delete the match information that this payer equipment is corresponding.Wherein, it is judged that carry or interior Put the biological limbs of payer equipment whether to be not on the preset range of beneficiary equipment 10 and refer to if beneficiary equipment 10 nothing Method receives the signal that payer equipment 20 is sent by biological limbs again, then explanation is carried or the biological limb of built-in payment method, apparatus Body has exceeded the preset range that beneficiary equipment 10 can communicate；Additionally, the present embodiment sets is complete payment transaction Payer equipment 20 can set up time interval that the first radio communication is connected (i.e. after closing the trade again with beneficiary equipment 10 Predetermined threshold value), such as payer equipment 20 can set up the first channel radio with beneficiary equipment 10 after closing the transaction 10s again Letter connects.The present embodiment can be by deleting the distance of payer equipment 20 and the dual judgement of time that are complete payment Except match information.Once the match information of this payer equipment 20 is deleted, even if this payer equipment 20 is in beneficiary equipment In the default communication range of 10, beneficiary equipment 10 also can initiate connection request to this payer equipment 20 again, thus solves Really need to initiate payment transaction again through completing the payer equipment 20 of payment transaction, but by asking that beneficiary equipment 10 is refused Topic.

In the specific implementation, in the case of small amount payment, as long as no exceeding the upper limit that payer equipment 20 is arranged, payer First authentication information just can be sent to beneficiary equipment 10, to the first certification by the first radio communication connection by equipment 20 After the certification of information is passed through, just can complete payment transaction.

In the specific implementation, in the case of wholesale pays, in order to ensure transaction security, payer equipment 20 is needed to carry to user Show Transaction Information, after by the confirmation of user, just allow follow-up delivery operation, specifically, payer equipment 20, also use In before the first authentication information is sent to beneficiary equipment 10 by the first radio communication connection, connected by the first radio communication Receive the Transaction Information that beneficiary equipment 10 sends；Key message is extracted from Transaction Information；Prompting key message, and etc. Treat that user confirms；After the confirmation instruction receiving user, perform to be connected above-mentioned first authentication information by the first radio communication to send out Give the operation of beneficiary equipment 10.

In the present embodiment, Transaction Information may include that dealing money, beneficiary accounts information and payer account information, When there is block trade, Transaction Information must be sent to payer equipment 20 by beneficiary equipment 10, in order to prompting user, After user confirms, follow-up certification and payment flow could be performed.Additionally, when reality is implemented, payer equipment 20 can Think equipment, such as a watch, it is also possible to be that two equipment, such as watch and electronic signature equipment are (such as U-shield, agricultural bank Key is precious or has the smart card of signature function).

In the present embodiment, payer equipment 20 can extract key message from Transaction Information, such as dealing money, or, gathering The title of side, the title etc. of payer, and without the full content of Transaction Information is pointed out, specifically, can be by display The modes such as screen display or speech play are pointed out, and especially, can meet the mini-plant with small display screen, such as wrist The display screen of table is the least, it is impossible to the full content of display Transaction Information, but as long as display key content, just can play prompting and use The effect at family.

In the present embodiment, payer equipment 20 is additionally operable to point out key message, increases the step that user confirms, to improve transaction Safety, only user confirm, after pressing acknowledgement key, follow-up operation could be performed.Especially, if payer sets Standby 20 is two equipment, then, when pointing out to user, can point out, certainly, preferably at electricity on any one equipment wherein Point out on sub-signature device.

In the present embodiment, above-mentioned first authentication information includes: digital certificate information；Digital certificate information includes at least one of: Electronic signature information, cipher-text information and dynamic password.Wherein, electronic signature information is the private key that payer equipment 20 utilizes self The signed data that data to be signed signature is obtained, data to be signed include: single authentication data and certification identification information etc., When this electronic signature information is authenticated, obtain the PKI of this payer equipment 20, utilize this PKI to electronic signature information Carrying out sign test, if sign test is passed through, then certification is passed through, and this is asymmetric authentication mode；Cipher-text information is payer equipment 20 profit Treat, with the symmetric key consulted with beneficiary equipment 10, the MAC value that computing with encrypted data obtains, this cipher-text information is being entered During row certification, treat computing with encrypted data also with this symmetric key and be verified MAC value, compare cipher-text information and checking MAC value, if unanimously, then certification is passed through, and this is symmetrical authentication mode；Dynamic password is that E-token dynamic password card (OTP) is to kind The ciphertext that sub-key generates, when being authenticated this dynamic password, is calculated validation value also with this seed key, than Relatively dynamic password and validation value, if unanimously, then certification is passed through, and this is token authentication mode.In the present embodiment, Ke Yitong Cross any one in above-mentioned 3 kinds of modes and realize the certification to digital certificate information, with the legitimacy of method, apparatus 20 of guaranteeing payment.

In the present embodiment, as the optional embodiment of one, above-mentioned first authentication information can also include: certification identification information； This certification identification information for example, the device identification of payer equipment 20, ID etc. can uniquely identify user identity Information, can be uniquely associated to payer user by certification identification information and believe for certification digital certificate information and biological characteristic The certification factor of breath, in order to utilize this certification factor pair digital certificate information and biological information to carry out double authentication, thus, After double authentication is passed through, it is assured that biological information and digital certificate information both are from same user, it is ensured that user Legitimacy.

In the present embodiment, beneficiary equipment 10 is additionally operable to enter the continuing of preset range of beneficiary equipment 10 at biological limbs Period, gather the biological information of biological limbs；Wherein, biological information includes at least one of: finger print information, Iris information, face information and venous information.In the present embodiment, beneficiary equipment 10 is receiving what payer equipment 20 sent Acquire the biological information of human body while first authentication information, such as, touch the touch parts of POS at user's finger The of short duration time in (such as 3 seconds), the watch that POS and user wear is set up by human body and is communicated to connect, and by this human body Communication connection transmission Bluetooth pairing information, the watch that POS is worn with user sets up bluetooth and is connected, by bluetooth connection transmission the One authentication information, the touch parts of POS gather finger print information simultaneously, and the most such as, the watch user pays eventually with Alipay End (this payment terminal has camera function, may be used for gathering face information) sets up the period that human body communication connects, by propping up Paying terminal and gather face information, thus, beneficiary equipment 10 just the most just can be obtained the first certification letter by user operation simultaneously Breath and biological information, convenient to operation.

In the present embodiment, as long as enter the duration interior collection biological characteristic of the preset range of beneficiary equipment 10 at biological limbs Information, can be before communication connection be set up, it is also possible to when communication connection is set up or gather afterwards.

Especially, the situation of biological information can just be collected with beneficiary equipment 10 needing human body limb to contact, as one Planting optional embodiment, biological information includes: finger print information and/or venous information；Beneficiary equipment 10 is additionally operable to adopt The biological information of the biological limbs of collection includes: in the case of biological limbs contact with beneficiary equipment 10, beneficiary equipment 10 biological informations gathering biological limbs and the contact site of beneficiary equipment 10.

In the present embodiment, the authentication result being authenticated digital certificate information and biological information is according to certification mark letter Breath obtains the certification factor, and utilizes the authentication result that certification factor pair digital certificate information and biological information be authenticated, The certification factor mainly include biological characteristic validation information and to digital certificate information checking checking information, this certification factor with recognize Card identification information unique association, therefore can be with the certification factor corresponding to unique queries to this user according to certification identification information, in order to After the double authentication utilizing digital certificate information and biological information is passed through, it is ensured that the legitimacy of user.

In the optional embodiment of one in the present embodiment, utilize the certification of certification factor pair digital certificate information at least include with One of lower several ways:

As the optional embodiment of one, above-mentioned utilize certification factor pair digital certificate information to be authenticated and utilize biological special Levy checking information biological information is authenticated, including: utilize certification factor pair digital certificate information to be authenticated, and sentence Whether disconnected biological characteristic validation information is more than the first preset value, to digital certificate information certification with the matching rate of biological information By and the matching rate of biological characteristic validation information and biological information more than the first preset value time, confirm digital certificate information Certification with biological information is passed through.As the optional embodiment of another kind, utilize certification factor pair digital certificate information with And biological information is authenticated, including: utilize certification factor pair digital certificate information to be authenticated, after certification is passed through again Judge that whether the biological characteristic validation information matching rate with biological information is more than the first preset value；In biological characteristic validation information When being more than the first preset value with the matching rate of biological information, confirm that the certification to digital certificate information and biological information is led to Cross.

Wherein, the first preset value is less than the second preset value, and the second preset value is same biology for two biological informations of instruction The matching rate of characteristic information；When reality is implemented, the second preset value can be that two biological informations mate want completely in theory The similarity reached, such as 99%, and the first preset value can be less than the second preset value, such that it is able to reduce biological information The identified failed probability of user the most legal in authentication techniques.

The identified failed probability of the most legal user and illegal is there is in the biological information authentication techniques of prior art User is identified successful probability, and as a example by fingerprint recognition, many times, the fingerprint of user is real, but certification device Identifying mistake, missing the fingerprint recognition of this user is false fingerprint, thus can not pass through certification, it is impossible to realize payment transaction；And have When, the fingerprint of disabled user is obviously false, but the also certification of certification device is passed through, and causes economically to validated user Loss, these situations occur probability be all the highest.And the present embodiment is by digital certificate information and biological information Double authentication can evade the situation of " illegal user is identified successfully ", and the most legal user can be reduced and known The situation that failure does not occurs.First, by above-mentioned 3 kinds of certifications to digital certificate information, it may be determined that this user is legal use Family, if disabled user then cannot be by this digital authenticating, then the operation to false finger print identifying would not occurs, thus advise Keep away the situation of " illegal user is identified successfully "；Secondly, in the case of ensureing that user is validated user, certification device The similarity of two biometric information matches can be reduced, to reduce the identified failed probability of the most legal user, example As, two biological informations to mate completely in theory, and its similarity at least to reach 99% (the second preset value), and if Certification device finds when its similarity is only 90%, will be identified as not mating, and certification is not passed through, and occurs knowing genuine fingerprint It is not the situation of false fingerprint, in the present invention, owing to digital authenticating has ensured that user is validated user, so, can be by complete The similarity of full coupling is reduced to 80% (the first preset value), say, that as long as similarity reaches 80% (the first preset value) It is considered as coupling, therefore, when the similarity of two biological informations is 90%, it is also possible to by certification, thus, the most not User that can be the most legal is identified failed situation, thus reduces use the most legal in biological information authentication techniques The identified failed probability in family.

Any process described otherwise above or method describe and are construed as in flow chart or at this, represent include one or The module of code, fragment or the part of the executable instruction of the more steps for realizing specific logical function or process, and The scope of the preferred embodiment of the present invention includes other realization, wherein can not be by order that is shown or that discuss, including root According to involved function by basic mode simultaneously or in the opposite order, performing function, this should be by embodiments of the invention institute Belong to those skilled in the art to be understood.

Should be appreciated that each several part of the present invention can realize by hardware, software, firmware or combinations thereof.In above-mentioned enforcement In mode, multiple steps or method can be with storing the software or firmware that in memory and be performed by suitable instruction execution system Realize.Such as, if realized with hardware, with the most the same, available following technology well known in the art In any one or their combination realize: have and patrol for the discrete of logic gates that data signal is realized logic function Collect circuit, there is the special IC of suitable combination logic gate circuit, programmable gate array (PGA), field programmable gate Array (FPGA) etc..

Those skilled in the art are appreciated that it is permissible for realizing all or part of step that above-described embodiment method carries Instructing relevant hardware by program to complete, described program can be stored in a kind of computer-readable recording medium, this journey Sequence upon execution, including one or a combination set of the step of embodiment of the method.

Additionally, each functional unit in each embodiment of the present invention can be integrated in a processing module, it is also possible to be each Unit is individually physically present, it is also possible to two or more unit are integrated in a module.Above-mentioned integrated module is the most permissible The form using hardware realizes, it would however also be possible to employ the form of software function module realizes.If described integrated module is with software merit Can the form of module realize and as independent production marketing or when using, it is also possible to be stored in the storage of embodied on computer readable and be situated between In matter.

Storage medium mentioned above can be read only memory, disk or CD etc..

In the description of this specification, reference term " embodiment ", " some embodiments ", " example ", " concrete example ", Or specific features, structure, material or the feature that the description of " some examples " etc. means to combine this embodiment or example describes comprises In at least one embodiment or example of the present invention.In this manual, the schematic representation to above-mentioned term not necessarily refers to It is identical embodiment or example.And, the specific features of description, structure, material or feature can at any one or Multiple embodiments or example combine in an appropriate manner.

Although above it has been shown and described that embodiments of the invention, it is to be understood that above-described embodiment is exemplary, Being not considered as limiting the invention, those of ordinary skill in the art is in the case of without departing from the principle of the present invention and objective Above-described embodiment can be changed within the scope of the invention, revise, replace and modification.The scope of the present invention is by appended power Profit requires and equivalent limits.

Claims

1. a method of payment, it is characterised in that including:

Beneficiary equipment after detecting that the biological limbs carrying or being built-in with payer equipment contact with described beneficiary equipment, or Person, described beneficiary equipment is after the signal that described payer equipment is sent being detected by described biological limbs, by described life Thing limbs are set up human body communication with described payer equipment and are connected；

Described payer equipment is connected to described beneficiary device transmission match information by described human body communication；

Described beneficiary equipment connects the described match information receiving described payer device transmission, and profit by described human body communication Set up the first radio communication by described match information with described payer equipment to be connected；

First authentication information is sent to described beneficiary equipment by described first radio communication connection by described payer equipment, its In, described first authentication information includes: digital certificate information；

Described beneficiary equipment connects the described first certification letter receiving described payer device transmission by described first radio communication Breath；

Described payer equipment by described biological limbs set up with described beneficiary equipment that human body communication is connected duration, Described beneficiary equipment gathers the biological information of described biological limbs；

Described beneficiary equipment obtains the authentication result being authenticated described digital certificate information and described biological information；

Described beneficiary equipment is execution payment transaction in the case of certification is passed through in described authentication result.

Method the most according to claim 1, it is characterised in that

Described match information at least includes: the MAC Address of described payer equipment and the identity of described payer equipment；

Match information described in described beneficiary equipment utilization is set up the first radio communication with described payer equipment and is connected, including:

After described beneficiary equipment receives described match information by described human body communication, connected by described human body communication Initiate to set up the connection request that described first radio communication connects to described payer equipment according to described MAC Address；

The confirmation that described beneficiary equipment receives described payer equipment by described human body communication responds, with described payment Method, apparatus is set up described first radio communication and is connected.

Method the most according to claim 2, it is characterised in that

Described beneficiary equipment is connected by described human body communication initiates to set up to described payer equipment according to described MAC Address The connection request that described first radio communication connects, including:

Identity locally stored with described beneficiary equipment for described identity is mated by described beneficiary equipment, if Mate unsuccessful, then connected by described human body communication and initiate described in foundation to described payer equipment according to described MAC Address The request that first radio communication connects, and store described match information.

4. according to the method described in any one of claims 1 to 3, it is characterised in that

Described first radio communication connects and includes: bluetooth connects, WIFI connects, magnetic flux connects or RFID connects.

5. according to the method described in any one of Claims 1-4, it is characterised in that at described payer equipment by described first Before authentication information is sent to described beneficiary equipment by described first radio communication connection, described method also includes:

Described beneficiary equipment is connected to described payer equipment transmission Transaction Information by described first radio communication；

Described payer equipment receives described Transaction Information；

Described payer equipment extracts key message from described Transaction Information；

Key message described in described payer device prompts, and wait that user confirms；

After described payer equipment receives the confirmation instruction of user, perform described payer equipment and described first authentication information is passed through Described first radio communication connects the step being sent to described beneficiary equipment.

6. a payment system, it is characterised in that including: beneficiary equipment and payer equipment, wherein:

Described beneficiary equipment, for detecting the biological limbs and described beneficiary equipment carrying or being built-in with payer equipment Contact, or, after the signal that described payer equipment is sent being detected by described biological limbs, by described biological limbs Set up human body communication with described payer equipment to be connected；

Described payer equipment, for connecting to described beneficiary device transmission match information by described human body communication；

Described beneficiary equipment, is additionally operable to be connected the described coupling letter receiving described payer device transmission by described human body communication Breath, and utilize described match information to set up the first radio communication with described payer equipment to be connected；

Described payer equipment, is additionally operable to be connected the first authentication information by described first radio communication be sent to described beneficiary Equipment, wherein, described first authentication information includes: digital certificate information；

Described beneficiary equipment, is additionally operable to be connected by described first radio communication receive described the of described payer device transmission One authentication information；At described payer equipment by holding that described biological limbs set up with described beneficiary equipment that human body communication is connected Between renewing, gather the biological information of described biological limbs；And obtain described digital certificate information and described biological characteristic The authentication result that information is authenticated；It is execution payment transaction in the case of certification is passed through in described authentication result.

System the most according to claim 6, it is characterised in that

Described beneficiary equipment, is additionally operable to utilize described match information to set up the first radio communication with described payer equipment and is connected, Including: described beneficiary equipment, after being additionally operable to receive described match information by described human body communication, by described people Body communication connects the connection initiating to set up described first radio communication connection to described payer equipment according to described MAC Address asks Ask；

Described payer equipment, after being additionally operable to receive described connection request by described human body communication, with described beneficiary Equipment is set up described first radio communication and is connected.

System the most according to claim 7, it is characterised in that

Described beneficiary equipment, is additionally operable to be connected according to described MAC Address to described payer equipment by described human body communication Initiate to set up the connection request that described first radio communication connects, including:

9. according to the system described in any one of claim 6 to 8, it is characterised in that

10. according to the system described in any one of claim 6 to 9, it is characterised in that

Described payer equipment, is additionally operable to be sent to described by described first authentication information by described first radio communication connection Before beneficiary equipment, receive, by described first radio communication, the Transaction Information that described beneficiary equipment sends；From institute State extraction key message in Transaction Information；Point out described key message, and wait that user confirms；Receiving the confirmation instruction of user After, perform described first authentication information is connected the operation being sent to described beneficiary equipment by described first radio communication.