CN106789839B

CN106789839B - Method and device for secure payment of mobile terminal

Info

Publication number: CN106789839B
Application number: CN201510812137.1A
Authority: CN
Inventors: 王务志; 王军
Original assignee: Beijing Qihoo Technology Co Ltd; Qizhi Software Beijing Co Ltd
Current assignee: Beijing Qihoo Technology Co Ltd; Qizhi Software Beijing Co Ltd
Priority date: 2015-11-20
Filing date: 2015-11-20
Publication date: 2021-09-28
Anticipated expiration: 2035-11-20
Also published as: CN106789839A

Abstract

The invention provides a method and a device for secure payment of a mobile terminal. The method comprises the following steps: receiving a payment request from a user, wherein the payment request carries a payee account; acquiring eID information corresponding to the payee account, and generating a payment data packet carrying the eID information corresponding to the payee account; and sending a payment transaction request carrying the payment data packet to a payment platform server, and receiving a transaction result returned by the payment platform server. According to the embodiment of the invention, the eID information is added in the payment data packet, so that the eID information of the account of the payee needs to be compared before the payment operation is carried out by the payment platform server, and the subsequent payment operation is carried out when the comparison is consistent, thereby improving the payment safety.

Description

Method and device for secure payment of mobile terminal

Technical Field

The invention relates to the technical field of internet application, in particular to a method and a device for secure payment of a mobile terminal.

Background

With the rapid development of the internet technology, online payment by using mobile terminals such as smart phones, tablet computers, palm computers and smart watches has become a convenient and popular payment method.

In practical application, when a user uses a mobile terminal to perform online payment, the user usually inputs a payee account and a payment password at the mobile terminal, so that online payment can be completed. In practice, it is found that the payment mode may cause the money to be stolen, and the payment safety is low. Therefore, it is desirable to provide a secure payment scheme.

Disclosure of Invention

In view of the above, the present invention is proposed in order to provide a method for secure payment of a mobile terminal and a corresponding apparatus that overcome or at least partially solve the above problems.

According to an aspect of the present invention, a method for secure payment of a mobile terminal is provided, which is applicable to a payment client, and includes:

receiving a payment request from a user, wherein the payment request carries a payee account;

acquiring eID information corresponding to the payee account, and generating a payment data packet carrying the eID information corresponding to the payee account;

and sending a payment transaction request carrying the payment data packet to a payment platform server, and receiving a transaction result returned by the payment platform server.

Optionally, the payment request further carries an account of the payer;

Before sending the payment transaction request carrying the payment data packet to the payment platform server, the method further comprises the following steps:

generating a message for prompting the user to perform eID authentication, and calling a reader capable of reading eID information in an eID terminal carrier;

acquiring eID information read by the reader from an eID terminal carrier;

sending the payer account and the acquired eID information to an eID unified authentication server for information authentication, and receiving an authentication result returned by the eID unified authentication server;

and determining whether to trigger sending operation according to the authentication result.

Optionally, the method further comprises:

and pre-registering the payer account and the eID information corresponding to the payer account to the eID unified authentication server.

Optionally, determining whether to trigger a sending operation according to the authentication result includes:

if the authentication result is a result representing successful authentication, determining to trigger sending operation;

and if the authentication result is a result indicating authentication failure, determining not to trigger the sending operation.

Optionally, the eID terminal carrier is a contactless eID card based on NFC technology, and the reader is an NFC unit.

Optionally, the payee account includes:

A payee registers an account number on the payment client; and/or

And the bank card account number is bound with the eID information of the payee.

According to another aspect of the present invention, there is also provided a method for secure payment by a mobile terminal, which is applied to a payment platform server, and includes:

receiving a payment transaction request which comes from a payer account and carries a payment data packet, wherein the payment data packet carries eID information corresponding to a payee account;

initiating a request for authentication eID information to the payee account;

receiving eID information returned after the mobile terminal where the payee account is located reads the eID information in the eID terminal carrier;

comparing the eID information corresponding to the payee account carried in the payment data packet with the returned eID information;

and determining whether to carry out payment operation according to the comparison result, and returning a transaction result to the payer account.

Optionally, determining whether to perform a payment operation according to the comparison result includes:

and if the comparison is consistent, performing payment operation according to the payment data packet.

if the comparison is inconsistent, the payment operation is not carried out, and a message of inconsistent comparison is returned to the account number of the payee.

According to another aspect of the present invention, there is also provided a method for secure payment by a mobile terminal, which is applicable to a payment client, and includes:

receiving a request for authentication eID information from a payment platform server;

calling up a reader capable of reading eID information in an eID terminal carrier;

and submitting the eID information read by the reader from the eID terminal carrier to the payment platform server.

According to another aspect of the present invention, there is also provided a device for secure payment of a mobile terminal, which is suitable for a payment-type client, and includes:

the payment request receiving module is suitable for receiving a payment request from a user, wherein the payment request carries a payee account;

the eID information acquisition module is suitable for acquiring eID information corresponding to the payee account;

the payment data packet generating module is suitable for generating a payment data packet carrying eID information corresponding to the payee account;

the payment transaction request sending module is suitable for sending a payment transaction request carrying the payment data packet to a payment platform server;

and the transaction result receiving module is suitable for receiving the transaction result returned by the payment platform server.

Optionally, the payment request further carries a payer account, and the apparatus further includes an eID information authentication module adapted to:

before a payment transaction request sending module sends a payment transaction request carrying the payment data packet to a payment platform server, generating a message for prompting the user to perform eID authentication, and calling a reader capable of reading eID information in an eID terminal carrier;

acquiring eID information read by the reader from an eID terminal carrier;

Optionally, the eID information authentication module is further adapted to:

Optionally, the payee account includes:

a payee registers an account number on the payment client; and/or

According to another aspect of the present invention, there is also provided an apparatus for secure payment by a mobile terminal, which is adapted to a payment platform server, and includes:

the payment transaction request receiving module is suitable for receiving a payment transaction request which comes from a payer account and carries a payment data packet, wherein the payment data packet carries eID information corresponding to a payee account;

the eID information authentication request sending module is suitable for initiating a request for authenticating eID information to the payee account;

the eID information receiving module is suitable for receiving eID information returned after the mobile terminal where the payee account is located reads the eID information in the eID terminal carrier;

the eID information comparison module is suitable for comparing eID information corresponding to a payee account carried in the payment data packet with the returned eID information;

and the determining module is suitable for determining whether to carry out payment operation according to the comparison result and returning a transaction result to the payer account.

Optionally, the determining module is further adapted to:

the eID information authentication request receiving module is suitable for receiving a request of authentication eID information from the payment platform server;

a reader invoking module adapted to invoke a reader capable of reading eID information in an eID terminal carrier;

and the eID information submitting module is suitable for submitting the eID information read by the reader from the eID terminal carrier to the payment platform server.

In the embodiment of the invention, when a payment request from a user is received, eID information corresponding to a payee account carried in the payment request is obtained, and a payment data packet carrying the eID information corresponding to the payee account is generated. And then sending a payment transaction request carrying a payment data packet to the payment platform server, and receiving a transaction result returned by the payment platform server. According to the embodiment of the invention, the eID information is added in the payment data packet, so that the eID information of the account of the payee needs to be compared before the payment operation is carried out by the payment platform server, and the subsequent payment operation is carried out when the comparison is consistent, thereby improving the payment safety.

The foregoing description is only an overview of the technical solutions of the present invention, and the embodiments of the present invention are described below in order to make the technical means of the present invention more clearly understood and to make the above and other objects, features, and advantages of the present invention more clearly understandable.

The above and other objects, advantages and features of the present invention will become more apparent to those skilled in the art from the following detailed description of specific embodiments thereof, taken in conjunction with the accompanying drawings.

Drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are only for purposes of illustrating the preferred embodiments and are not to be construed as limiting the invention. Also, like reference numerals are used to refer to like parts throughout the drawings. In the drawings:

fig. 1 shows a flow diagram of a method for secure payment by a mobile terminal according to an embodiment of the invention;

figure 2 illustrates a flow diagram of a method of authenticating eID information for a payer account, in accordance with an embodiment of the invention;

figure 3 illustrates a flow diagram of a method of registering a payer account with an eID unified authentication server according to one embodiment of the invention;

FIG. 4 shows a flow diagram of a method for secure payment by a mobile terminal according to another embodiment of the invention;

FIG. 5 illustrates a flow diagram of a method for secure payment by a mobile terminal in accordance with yet another embodiment of the present invention;

FIG. 6 illustrates a flow diagram of a method for secure payment by a mobile terminal in accordance with yet another embodiment of the present invention;

fig. 7 is a schematic structural diagram illustrating an apparatus for secure payment of a mobile terminal according to an embodiment of the present invention;

fig. 8 is a schematic structural diagram illustrating an apparatus for secure payment of a mobile terminal according to another embodiment of the present invention;

fig. 9 is a schematic structural diagram illustrating an apparatus for secure payment of a mobile terminal according to still another embodiment of the present invention; and

fig. 10 is a schematic structural diagram illustrating an apparatus for secure payment of a mobile terminal according to still another embodiment of the present invention.

Detailed Description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

At present, the network remote identity authentication in China generally uses an 'association comparison' method, namely personal information such as 'name + identity card number' input by a user is transmitted to a background to compare the correctness of the personal information to identify the identity of the user. The "correlation" method mainly has several problems in a large-scale application scenario: (1) the personal information is compared correctly and cannot represent the real will of the user, and the risk that the personal identity is falsely used or stolen cannot be prevented; (2) personal information is easily leaked. The network application service mechanisms for collecting the personal information have different safety levels, and the risk of large-scale leakage of the personal information is higher and higher.

In order to solve the above problems, the Electronic Identity (eID) signed by the public network Identity recognition system of the Ministry of public Security is issued to the citizen on the basis of the cryptographic technology and the intelligent security chip as a carrier, so that the Identity can be remotely recognized on line on the premise of not revealing Identity information, and the security guarantee requirements of the citizen in various aspects such as personal privacy, network transaction, virtual property and the like can be met.

eids may be a string of electronic information that uniquely identifies a user identity in the cyberspace. The eID system covers a national citizen identity information base by relying on the ministry of public security, generates a group of unique network identifiers and digital certificates, ensures the authenticity and uniqueness of the user identity, and does not contain any personal identity privacy information. The eID related identity information is created and managed by a unified organization, so that the authenticity of the personal identity is ensured, and the risks of exposure and leakage when the user identity information is reserved to various network operators can be effectively avoided. The eID is used, so that the user can be prevented from frequently inputting a user name and a password, and quick login and other trusted operations are realized on the premise of ensuring the safety and reliability of the identity.

The embodiment of the invention provides a method for safely paying by a mobile terminal, which is suitable for a payment client, and the payment client can be applied to mobile terminals such as smart phones, tablet computers and smart watches. Fig. 1 shows a flowchart of a method for secure payment of a mobile terminal according to an embodiment of the present invention. As shown in fig. 1, the method at least includes the following steps S102 to S106:

step S102, receiving a payment request from a user, wherein the payment request carries a payee account;

step S104, acquiring eID information corresponding to the payee account, and generating a payment data packet carrying the eID information corresponding to the payee account;

and step S106, sending a payment transaction request carrying a payment data packet to the payment platform server, and receiving a transaction result returned by the payment platform server.

The payment request mentioned in step S102 may be a payment request initiated after the user orders a product, or a payment request initiated by the user transferring to a friend or another person, and the like, which is not limited in the present invention. For example, after a user orders a 100-dollar product at a service provider, submits a product order, a payment account number is entered on a generated order page, and a payment button on the page is clicked, thereby initiating a payment request. For another example, the user enters a transfer interface of the payment application, clicks a transfer button on the transfer interface, and initiates a payment request, and then the user may manually input related information such as a payer account number, a payment amount, a payee account number, and the like in the generated payment bill.

The payee account mentioned in step S102 may be an account registered by the payee on the payment client, or a bank card account bound to the eID information of the payee, and the like, which is not limited in the present invention.

The obtaining of the eID information corresponding to the payee account in step S104 may be directly obtaining the eID information corresponding to the payee account stored in advance locally; or sending an acquisition request of the eID information to the payee account and receiving the eID information returned by the payee account.

In an embodiment of the present invention, the payment request in step S102 further carries a payer account, and in order to improve security of payment, before the payment transaction request carrying the payment data packet is sent to the payment platform server in step S106, the eID information of the payer account may be authenticated. Fig. 2 shows a flowchart of a method for authenticating eID information of a payer account according to an embodiment of the invention. As shown in fig. 2, the method at least includes the following steps S202 to S208:

step S202, generating a message for prompting a user to perform eID authentication, and calling a reader capable of reading eID information in an eID terminal carrier;

step S204, acquiring eID information read by a reader from an eID terminal carrier;

step S206, sending the payer account and the obtained eID information to an eID unified authentication server for information authentication, and receiving an authentication result returned by the eID unified authentication server;

and step S208, determining whether to trigger the sending operation according to the authentication result.

In the embodiment of the invention, the eID is a network electronic identity identifier, the eID information is physically isolated from the Internet by using an eID terminal carrier, and before payment operation, the payment account can be subjected to safe payment authentication according to the eID information, so that the payment safety can be improved. In addition, the embodiment of the invention omits the complicated operation brought by the manual input of the payment password by the user, thereby simplifying the payment operation and improving the efficiency of online payment.

In order to further improve the security level of authentication, before the reader capable of reading the eID information in the eID terminal carrier is invoked in step S202, the eID authentication authority of the payment client may be determined, that is, whether the payment client has the authority of eID authentication is determined; and if so, triggering to execute the starting operation. Otherwise, if the payment client does not have the permission of the eID authentication, generating prompt information that the payment client does not have the permission of the eID authentication, and prompting the prompt information to the user.

Further, when determining whether the payment client has the authority of eID authentication, the invention provides an optional scheme, in the scheme, an eID authentication white list is preset, the payment client having the authority of eID authentication is set in the white list, the payment client can be inquired in the eID authentication white list, and if the inquiry is made, the payment client is determined to have the authority of eID authentication; and if not, determining that the payment client side does not have the permission of eID authentication. Here, the eID authentication white list may be updated by local user settings or a cloud server malicious library.

In another optional scheme provided by the present invention, when determining whether the payment class client has the right of the eID authentication, the determination may be performed by the eID unified authentication server or the payment class application server, that is, a request for searching whether the payment class application has the right of the eID authentication is sent to the eID unified authentication server or the payment class application server, and the determination is performed according to a search result returned by the eID unified authentication server or the payment class application server.

In the embodiment of the present invention, before introducing the eID terminal carrier, NFC (Near Field Communication) technology is first introduced.

NFC is a standard short-range wireless communication technology, which is based on an RFID (Radio Frequency Identification) technology, and combines a non-contact sensing and wireless connection technology, and can identify and exchange data with a compatible device in a short distance. NFC communication is usually generated between an initiator and a target device, the initiator and the target device are mutually coupled in the form of an alternating magnetic field, and perform carrier modulation in an ASK (Amplitude Shift Keying) mode or an FSK (Frequency Shift Keying) mode to transmit a digital signal. The initiating device generates an infinite signal to initiate communication, and the target device responds to the command from the initiating device and selects a radio frequency magnetic field emitted by or generated by the initiating device to communicate.

Communication between NFC is divided into an active communication mode and a passive communication mode, where the active communication mode is 20 cm and the passive communication mode is 10 cm. In the active mode, when each device sends data to another device, a radio frequency field of the device must be generated; in passive mode, however, the NFC initiator provides a radio frequency field throughout the communication process. Because the NFC communication is the point-to-point communication with extremely short distance, the monitoring or tampering of the transmitted information can be avoided, and the security mechanism of the NFC communication can ensure the secure communication between the mobile devices through an encryption system and a decryption system. Moreover, the NFC processing speed is very fast, and only 0.1 second is required for data access from mobile device detection and identity verification. NFC is compatible with existing contactless smart card technology and has become a formal standard supported by more and more major vendors.

The eID terminal carrier mentioned in step S202 above may be a contactless eID card based on NFC technology, and then the reader is an NFC unit. In step S204, the eID information read by the NFC unit from the eID card may be directly acquired.

Further, the NFC unit reads eID information in a non-contact eID card based on the NFC technology, and then the eID information is acquired from the NFC unit, at the moment, a prompt for inputting a PIN is displayed for a user, the correctness of the PIN input by the user is preliminarily verified, if the user inputs the wrong PIN continuously for N times (such as 3 times and the like), the function of the corresponding eID card is locked, and after the PIN is verified, the acquired eID information is sent to an eID unified authentication server for information authentication. Therefore, the problem that the eID information is leaked due to loss of the eID card can be solved.

The eID card can comprise an information storage module, an information processing module and an information communication module, wherein the information storage module stores an eID certificate, a private key, a Personal Identification Number (PIN) and the like which are unique to a person through a memory on a chip, does not contain any identity information (such as identity card information, telephone numbers and the like), and does not cause the leakage of the Personal information. Since the space required to store this information is relatively small (e.g., 512KB-1024KB), it can be written directly into the NFC chip's own on-chip memory.

The information processing module can comprise an encryption chip and a CPU, when passive power supply is carried out, the content stored on the chip is encrypted by using a specific cryptographic algorithm before information transmission, the encryption speed is high, and the eID card is convenient to safely store and use. The encryption and decryption module provided by the NFC chip can be directly used for encryption. The eID card based on the NFC technology is in a read-only mode, and a user cannot modify the content of the eID card by using a specific tag identification.

The information communication module can comprise an NFC chip and an antenna, the antenna is used for transmitting corresponding data, and meanwhile, a radio frequency field generated by NFC equipment of the mobile terminal is received to supply power for digital processing, so that the encryption of information on the eID card and the complete process of sending and receiving data by the NFC communication unit are guaranteed.

When the user uses the eID card, the user can read eID information only by placing the card near the mobile phone (within 10 cm) for a few seconds, and the user experience is guaranteed by the characteristics of safety, rapidness, convenience and the like of NFC near field communication.

In an embodiment of the present invention, before sending the payer account and the acquired eID information to the eID unified authentication server for information authentication in step S206, the payer account and the corresponding eID information need to be registered in the eID unified authentication server in advance. Fig. 3 illustrates a flow diagram of a method of registering a payer account with an eID unified authentication server according to an embodiment of the invention. As shown in fig. 3, the method at least includes the following steps S302 to S306:

step S302, sending an eID information registration request to an eID unified authentication server, wherein the eID information registration request comprises a payer account;

step S304, receiving a response message returned by the eID unified authentication server, and calling a reader capable of reading eID information in an eID terminal carrier;

step S306, sending the eID information read by the reader from the eID terminal carrier to an eID unified authentication server, and storing the payer account and the sent eID information in an associated manner by the eID unified authentication server.

In step S304, after receiving the eID information registration request, the eID unified authentication server searches whether the account of the payer in the request is registered, and if not, returns a response message to the account of the payer; and if the information is registered, returning a message representing the registered payer account to the payer account, and generating prompt information for prompting the user that the payer account is registered when the mobile terminal where the payer account is located receives the message representing the registered payer account, which is returned by the eID unified authentication server.

In step S208, it is determined whether to trigger the sending operation according to the authentication result, and the present invention provides an alternative scheme in which, if the authentication result is a result indicating that the authentication is successful, the sending operation is determined to be triggered; otherwise, if the authentication result is a result indicating authentication failure, it is determined not to trigger the transmission operation.

Correspondingly, the embodiment of the invention also provides a method for the safe payment of the mobile terminal, which is suitable for a payment platform server. Fig. 4 shows a flowchart of a method for secure payment by a mobile terminal according to another embodiment of the present invention. As shown in fig. 4, the method at least includes the following steps S402 to S410:

Step S402, receiving a payment transaction request which comes from a payer account and carries a payment data packet, wherein the payment data packet carries eID information corresponding to a payee account;

step S404, initiating a request for authenticating eID information to the account of the payee;

step S406, receiving eID information returned after the mobile terminal where the payee account is located reads the eID information in the eID terminal carrier;

step S408, comparing the eID information corresponding to the payee account carried in the payment data packet with the returned eID information;

and step S410, determining whether to carry out payment operation according to the comparison result, and returning a transaction result to the account of the payer.

In the embodiment of the invention, the payment data packet contains the eID information, so that the eID information of the account of the payee needs to be compared before the payment operation is carried out by the payment platform server, and the subsequent payment operation is carried out when the comparison is consistent, thereby improving the payment safety.

The eID terminal vector mentioned in step S406 above can be referred to as described above, and is not described herein again.

In step S410, if the comparison is consistent, performing a payment operation according to the payment data packet; if the comparison is inconsistent, the payment operation is not carried out, and a message of inconsistent comparison is returned to the account of the payee. At this time, a request for authenticating the eID information may be initiated to the payee account again, and if the comparison is inconsistent for N consecutive times (e.g., 3 times, etc.), the payment function is locked.

Correspondingly, the embodiment of the invention also provides a method for the safe payment of the mobile terminal, which is suitable for the payment client. Fig. 5 shows a flowchart of a method for secure payment by a mobile terminal according to still another embodiment of the present invention. As shown in fig. 5, the method at least includes the following steps S502 to S506:

step S502, receiving a request of authentication eID information from a payment platform server;

step S504, a reader capable of reading eID information in an eID terminal carrier is called;

step S506, submitting the eID information read by the reader from the eID terminal carrier to the payment platform server.

The eID terminal carrier and reader mentioned in step S504 above may be referred to as described above and will not be described herein.

In order to ensure the security and credibility, the whole authentication process does not contain personal identity information (such as an identity card, a telephone number and the like) of a user, and an encryption mechanism of a double-key system is also used in the transmission process of the authentication information.

In this embodiment, the payer account performs product payment to the payee account through the payment platform server, and both the payer account and the payee account can communicate with the payment platform server through the payment client.

Fig. 6 illustrates a flowchart of a method for secure payment by a mobile terminal according to still another embodiment of the present invention. As shown in fig. 6, the method includes at least the following steps S602 to S622.

Step S602, the payer account receives a payment request from the user, where the payment request carries a payee account.

In this step, the payment request may further include information such as the account number of the payer, the payment amount, and the like.

Step S604, the payer account obtains the eID information corresponding to the receiver account, and generates a payment data packet carrying the eID information corresponding to the receiver account.

Step S606, the payer account sends a payment transaction request carrying a payment data packet to the payment platform server.

In step S608, the payment platform server receives a payment transaction request carrying a payment data packet from the payer account.

Step S610, the payment platform server initiates a request for authenticating the eID information to the payee account.

Step S612, the payee account receives a request for authenticating the eID information from the payment platform server, and invokes a reader capable of reading the eID information in the eID terminal carrier.

Step S614, the payee account submits the eID information read by the reader from the eID terminal carrier to the payment platform server.

Step S616, the payment platform server receives the eID information returned by the mobile terminal where the payee account is located after reading the eID information in the eID terminal carrier.

Step S618, the payment platform server compares the eID information corresponding to the payee account carried in the payment data packet with the returned eID information.

And step S620, the payment platform server determines whether to carry out payment operation according to the comparison result, and returns a transaction result to the account of the payer.

In the step, if the comparison is consistent, payment operation is carried out according to the payment data packet; if the comparison is inconsistent, the payment operation is not carried out, and a message of inconsistent comparison is returned to the account of the payee. At this time, a request for authenticating the eID information may be initiated to the payee account again, and if the comparison is inconsistent for N consecutive times (e.g., 3 times, etc.), the payment function is locked.

In this step, the paymate server may also return the transaction results to the payee account.

In step S622, the payer account receives the transaction result returned by the payment platform server.

According to the embodiment of the invention, the eID information is added in the payment data packet, so that the eID information of the account of the payee needs to be compared before the payment operation is carried out by the payment platform server, the subsequent payment operation is carried out when the eID information is consistent with the eID information, the payment operation is not carried out when the eID information is inconsistent with the eID information, and the information of inconsistent comparison is returned to the account of the payee, thereby improving the payment safety.

Based on the same invention concept, the embodiment of the invention also provides a device for the safe payment of the mobile terminal, which is suitable for payment clients. Fig. 7 is a schematic structural diagram illustrating an apparatus for secure payment of a mobile terminal according to an embodiment of the present invention. As shown in fig. 7, the apparatus 700 may include at least a payment request receiving module 710, an eID information obtaining module 720, a payment data packet generating module 730, a payment transaction request sending module 740, and a transaction result receiving module 750.

Now, the functions of the components or devices of the device 700 for secure payment of a mobile terminal according to the embodiment of the present invention and the connection relationship between the components will be described:

a payment request receiving module 710, adapted to receive a payment request from a user, where the payment request carries a payee account;

the eID information acquisition module 720 is coupled with the payment request receiving module 710 and is suitable for acquiring eID information corresponding to the account of the payee;

the payment data packet generation module 730 is coupled with the eID information acquisition module 720 and is suitable for generating a payment data packet carrying eID information corresponding to the account of the payee;

a payment transaction request sending module 740, coupled to the payment data packet generating module 730, adapted to send a payment transaction request carrying a payment data packet to the payment platform server;

The transaction result receiving module 750 is coupled to the payment transaction request sending module 740, and is adapted to receive the transaction result returned by the payment platform server.

In an embodiment of the present invention, as shown in fig. 8, the apparatus shown in fig. 7 may further include an eID information authentication module 760 coupled to the payment transaction request sending module 740, and adapted to:

before the payment transaction request sending module 740 sends the payment transaction request carrying the payment data packet to the payment platform server, a message prompting the user to perform eID authentication is generated, and a reader capable of reading eID information in an eID terminal carrier is invoked;

acquiring eID information read by a reader from an eID terminal carrier;

sending the payer account and the obtained eID information to an eID unified authentication server for information authentication, and receiving an authentication result returned by the eID unified authentication server;

and determining whether to trigger the sending operation according to the authentication result.

In an embodiment of the present invention, the eID information authentication module 760 is further adapted to:

and pre-registering the payer account and the eID information corresponding to the payer account to an eID unified authentication server.

if the authentication result is a result indicating successful authentication, determining to trigger a sending operation;

In an embodiment of the present invention, the eID terminal carrier is a non-contact eID card based on NFC technology, and the reader is an NFC unit.

In an embodiment of the present invention, the payee account includes:

the payee registers an account number on the payment client; and/or

Based on the same invention concept, the embodiment of the invention also provides a device for the safe payment of the mobile terminal, which is suitable for a payment platform server. Fig. 9 is a schematic structural diagram illustrating an apparatus for secure payment of a mobile terminal according to still another embodiment of the present invention. As shown in fig. 9, the apparatus 900 may include at least a payment transaction request receiving module 910, an eID information authentication request sending module 920, an eID information receiving module 930, an eID information comparing module 940, and a determining module 950.

Now, the functions of the components or devices of the device 900 for secure payment of a mobile terminal according to the embodiment of the present invention and the connection relationship between the components will be described:

a payment transaction request receiving module 910, adapted to receive a payment transaction request carrying a payment data packet from a payer account, where the payment data packet carries the eID information corresponding to a payee account;

An eID information authentication request sending module 920 coupled to the payment transaction request receiving module 910 and adapted to initiate a request for authenticating eID information to the payee account;

the eID information receiving module 930 is coupled with the eID information authentication request sending module 920 and is suitable for receiving the eID information returned after the mobile terminal where the payee account is located reads the eID information in the eID terminal carrier;

an eID information comparison module 940 coupled to the eID information receiving module 930 and adapted to compare the eID information corresponding to the payee account carried in the payment data packet with the returned eID information;

the determining module 950 is coupled to the eID information comparing module 940, and is adapted to determine whether to perform a payment operation according to the comparison result, and return a transaction result to the payer account.

In an embodiment of the present invention, the determining module 950 is further adapted to:

if the comparison is inconsistent, the payment operation is not carried out, and a message of inconsistent comparison is returned to the account of the payee.

Based on the same invention concept, the embodiment of the invention also provides a device for the safe payment of the mobile terminal, which is suitable for payment clients. Fig. 10 is a schematic structural diagram illustrating an apparatus for secure payment of a mobile terminal according to still another embodiment of the present invention. As shown in fig. 10, the apparatus 1000 may include at least an eID information authentication request receiving module 1010, a reader invoking module 1020, and an eID information submitting module 1030.

The functions of the components or devices of the device 1000 for secure payment of a mobile terminal according to the embodiment of the present invention and the connection relationship between the components will be described:

an eID information authentication request receiving module 1010 adapted to receive a request for authentication eID information from a payment platform server;

a reader invoking module 1020, coupled to the eID information authentication request receiving module 1010, adapted to invoke a reader capable of reading the eID information in the eID terminal carrier;

and an eID information submission module 1030, coupled to the reader invocation module 1020, adapted to submit the eID information read by the reader from the eID terminal carrier to the payment platform server.

According to any one or a combination of the above preferred embodiments, the following advantages can be achieved by the embodiments of the present invention:

In the description provided herein, numerous specific details are set forth. It is understood, however, that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, figure, or description thereof for the purpose of streamlining the disclosure and aiding in the understanding of one or more of the various inventive aspects. However, the disclosed method should not be interpreted as reflecting an intention that: that the invention as claimed requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the detailed description are hereby expressly incorporated into this detailed description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art will appreciate that the modules in the device in an embodiment may be adaptively changed and disposed in one or more devices different from the embodiment. The modules or units or components of the embodiments may be combined into one module or unit or component, and furthermore they may be divided into a plurality of sub-modules or sub-units or sub-components. All of the features disclosed in this specification (including any accompanying claims, abstract and drawings), and all of the processes or elements of any method or apparatus so disclosed, may be combined in any combination, except combinations where at least some of such features and/or processes or elements are mutually exclusive. Each feature disclosed in this specification (including any accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will appreciate that while some embodiments described herein include some features included in other embodiments, rather than other features, combinations of features of different embodiments are meant to be within the scope of the invention and form different embodiments. For example, in the claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. It will be appreciated by those skilled in the art that a microprocessor or Digital Signal Processor (DSP) may be used in practice to implement some or all of the functions of some or all of the components of the apparatus for secure payment by a mobile terminal according to embodiments of the present invention. The present invention may also be embodied as apparatus or device programs (e.g., computer programs and computer program products) for performing a portion or all of the methods described herein. Such programs implementing the present invention may be stored on computer-readable media or may be in the form of one or more signals. Such a signal may be downloaded from an internet website or provided on a carrier signal or in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention may be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by one and the same item of hardware. The usage of the words first, second and third, etcetera do not indicate any ordering. These words may be interpreted as names.

Thus, it should be appreciated by those skilled in the art that while a number of exemplary embodiments of the invention have been illustrated and described in detail herein, many other variations or modifications consistent with the principles of the invention may be directly determined or derived from the disclosure of the present invention without departing from the spirit and scope of the invention. Accordingly, the scope of the invention should be understood and interpreted to cover all such other variations or modifications.

Claims

1. A method for secure payment of a mobile terminal is applicable to a payment client, and comprises the following steps:

sending a payment transaction request carrying the payment data packet to a payment platform server so that the payment platform server compares the eID information of the account of the payee, and returning a transaction result when the eID information is consistent with the eID information;

receiving a transaction result returned by the payment platform server;

the payment request also carries an account number of a payer;

acquiring eID information read by the reader from an eID terminal carrier;

2. The method of claim 1, further comprising:

3. The method of claim 1, wherein determining whether to trigger a send operation based on the authentication result comprises:

4. The method of any of claims 2-3, wherein the eID terminal carrier is a contactless eID card based on NFC technology and the reader is an NFC unit.

5. The method of any of claims 1-3, wherein the payee account number comprises:

a payee registers an account number on the payment client; and/or

6. A method for secure payment of a mobile terminal is applicable to a payment platform server and comprises the following steps:

Initiating a request for authentication eID information to the payee account;

7. The method of claim 6, wherein determining whether to perform a payment operation according to the comparison comprises:

8. The method of claim 6 or 7, wherein determining whether to perform a payment operation according to the comparison result comprises:

9. A method for secure payment of a mobile terminal is applicable to a payment client, and comprises the following steps:

and submitting the eID information read by the reader from the eID terminal carrier to the payment platform server so that the payment platform server compares the eID information of the account number of the payee, and returns a transaction result when the comparison is consistent.

10. The method of claim 9, wherein the eID terminal carrier is a contactless eID card based on NFC technology and the reader is an NFC unit.

11. A device for secure payment of a mobile terminal is applicable to a payment client, and comprises:

the payment transaction request sending module is suitable for sending a payment transaction request carrying the payment data packet to a payment platform server so that the payment platform server compares the eID information of the account number of the payee and returns a transaction result when the eID information is consistent with the eID information;

the transaction result receiving module is suitable for receiving the transaction result returned by the payment platform server;

the device further comprises an eID information authentication module, which is suitable for:

Acquiring eID information read by the reader from an eID terminal carrier;

12. The apparatus of claim 11, wherein the eID information authentication module is further adapted to:

13. The apparatus of claim 11 or 12, wherein the eID information authentication module is further adapted to:

14. The apparatus of any of claims 11-12, wherein the eID terminal carrier is a contactless eID card based on NFC technology and the reader is an NFC unit.

15. The apparatus of any of claims 11-12, wherein the payee account comprises:

a payee registers an account number on the payment client; and/or

16. An apparatus for secure payment of a mobile terminal, which is suitable for a payment platform server, comprises:

17. The apparatus of claim 16, wherein the determination module is further adapted to:

18. The apparatus of claim 16 or 17, wherein the determining means is further adapted to:

19. A device for secure payment of a mobile terminal is applicable to a payment client, and comprises:

and the eID information submitting module is suitable for submitting the eID information read by the reader from the eID terminal carrier to the payment platform server so that the payment platform server compares the eID information of the account of the payee and returns a transaction result when the eID information is consistent with the eID information of the account of the payee.

20. The apparatus of claim 19 wherein the eID terminal carrier is a contactless eID card based on NFC technology and the reader is an NFC unit.