CN106845997B

CN106845997B - Double-random code visible light and bar code double-authentication offline payment method with hidden channel

Info

Publication number: CN106845997B
Application number: CN201710066525.9A
Authority: CN
Inventors: 邓健志
Original assignee: Guilin University of Technology
Current assignee: Guilin University of Technology
Priority date: 2017-02-07
Filing date: 2017-02-07
Publication date: 2020-10-09
Anticipated expiration: 2037-02-07
Also published as: CN106845997A

Abstract

The invention discloses a double-random code visible light and bar code double-authentication offline payment method with a hidden channel. Establishing a set of optical authentication offline consumption device with a hidden channel, comprising: electronic purses, consumer machines, and servers; visible light signal receiving and transmitting, bar code display and scanning devices equipped for the consumer and the electronic wallet form an information communication channel, and a hidden channel for information transmission is formed by using the bar code and the illumination backlight of the display device of other prompt information; the method adopts the double-mode mutual authentication of visible light signals and bar code scanning identification in the payment process, and adopts multiple random codes in the payment authentication information, so that the data in the off-line payment process has extremely strong randomness and anti-cracking capability, and the payment safety is improved to a certain extent.

Description

Double-random code visible light and bar code double-authentication offline payment method with hidden channel

Technical Field

The invention belongs to the technical field of optical payment, and particularly relates to a double-random code visible light and bar code double-authentication offline payment method with a hidden channel.

Background

Visible Light Communication (VLC) technology. The VLC technology is a method for realizing wireless communication by utilizing the characteristics that an LED can emit high-frequency flicker and light flicker which cannot be sensed by human eyes, carrying signals by the high-frequency flicker of the LED at a data sending end and collecting the signals by a photosensitive element with the same quick response time at a receiving end.

The traditional cashless transaction means is online transaction, and the original magnetic card system is a typical online transaction system. The off-line payment is a transaction payment means carried out when the communication of network, GPRS, 3G, 4G and the like is interrupted, and RFID and NFC are common off-line payment methods at present.

The code scanning is a popular information acquisition mode at present, and the code scanning payment is an on-line payment mode developed on the basis of a code scanning technology and technologies such as WeChat and Paibao. However, the payment means belonging to the code scanning payment is still an online payment method which cannot be separated from the network, and the method cannot solve the problem that the payment cannot be realized due to the interruption of network communication like offline payment.

The code of the code scanning is usually a dynamically variable code which needs to be displayed on a display screen, and the existing liquid crystal screen and LED screen are required to provide backlight illumination which is a good carrier for visible light communication. The illumination backlight is an information carrier which is easy to ignore, is used as a transmission carrier of a hidden signal, is applied to the field of optical payment, can provide a hidden channel, and improves the safety of a payment link.

The invention is inspired by the technical modes, utilizes the standard configurations of the camera, the flash lamp and the ambient light sensing module, which are almost modern smart phones and tablet computers, and jointly constructs a safe and hidden off-line payment method, so that people can easily shop and consume as long as carrying the mobile phones and the tablet computers.

Disclosure of Invention

The invention aims to provide a double-random code visible light and bar code double-authentication offline payment method with a hidden channel.

The method comprises the following specific steps:

(1) establishing a set of optical authentication offline consumption device with a hidden channel, comprising: electronic purses, consumer machines, and servers.

An electronic wallet, comprising: the wallet comprises a visible light emitting module, a bar code scanning module, a wallet control module, a wallet module, an input module, a display module, a data interface and a wallet light receiving module; the visible light emitting module is used for generating and sending visible light signals according to the information input by the control module; the bar code scanning module is used for scanning and identifying bar codes and outputting an identification result to the control module; a control module to: 1. processing information to be sent to generate a data packet, outputting the data packet to a visible light emitting module, and driving the visible light emitting module to send a visible light signal; 2. receiving the scanning result output of the bar code scanning module, and verifying the scanning result; 3. receiving the result output of the wallet light receiving module, and identifying and authenticating the result output; 4. generating information needing to pass through the visible light emitting module according to the received information and the generated payment information; 5. the wallet module carries out consumption, recharging, balance inquiry and operation log information reading and writing operations; 6. the data interaction can be carried out with the server through the data interface; a wallet module for holding a wallet comprising: user account information, wallet balance, consumption authority, inquiry password, payment password, operation log and information of a production issuing organization; and can verify whether the input password is consistent with the password stored in the wallet password module; the input module is used for inputting information including payment amount, inquiry passwords, payment passwords and operation instructions to the control module; the display module is used for displaying payment amount, a password input interface, an operation instruction and prompt information; the data interface is used for providing a networking function of the electronic wallet and providing functions of connecting with the server and performing data exchange, data maintenance and upgrading; and the wallet light receiving module is used for receiving the visible light backlight signal sent by the backlight module.

A consumer machine, comprising: the system comprises a visible light receiving module, a bar code display module, a read-write control module, a cash register module, a keyboard module, a communication module and a backlight module; the visible light receiving module is used for receiving the visible light signals, processing and restoring the visible light signals into corresponding digital signals, and restoring the digital signals into data packets; a barcode display module for: 1. generating and displaying a bar code according to the input information of the read-write control module; 2. displaying the transaction amount, a password input interface, an operation instruction and prompt information; a read-write control module for: 1. receiving the output of the visible light receiving module, and identifying and authenticating the output; 2. processing information to be sent and outputting the information to a bar code display module; 3. processing information to be sent in an optical signal form, generating a data packet, outputting the data packet to a backlight module, and driving the backlight module to send a visible light signal; 4. the cash box module is used for performing consumption, recharging, balance inquiry and operation log information reading and writing operations; 5. providing a data interface, and uploading and downloading information with a server through a communication module; receive cash box module for save including: operation log, collection consumption authority, blacklist, cash balance, operation password, validity period and production and issuing organization; the keyboard module is used for inputting transaction amount, transaction password and operation instruction to the read-write control module; the communication module is used for connecting the upper computer or the access network in a wired or wireless mode so as to be connected with the server; and the backlight module is used for providing the bar code display module with displayed illumination backlight and sending a visible light backlight signal by using the backlight.

A server to: 1. establishing data connection for uploading and downloading with the consumer computer through the communication module; 2. establishing data connection for uploading and downloading with the electronic wallet through a data interface; 3. providing background service support of the offline payment method; 4. providing an interface for the entire offline payment device to flow funds with the financial system; 5. providing for issuing or de-authorizing a consumer machine, e-wallet, comprising: key updating, algorithm updating and upgrading, use authority adjustment, validity period adjustment, electronic wallet recharging, consumer payment, electronic wallet and consumer public information inquiry; 6. the preservation comprises the following steps: information including an authorized user list, a blacklist, an operation log summary and a consumer list.

An authorized user list for maintaining a list comprising: identity of the electronic purse that has been authorized to make offline payments, usage rights, expiration date, identity information of the electronic purse holder; the blacklist is used for storing the identity identification information of the part of the electronic wallets which are refused to pay for the transaction due to arrearage, loss report and illegal use records in the authorized user list; a payment interface for providing an interface for funds flow throughout the offline payment device with the financial system; the operation log summarization is used for storing information including query, recharge, consumption operation time, payment amount and payment process data parameters of all the consumption machines and the electronic wallets; a consumer machine manifest for maintaining a list comprising: the identity identification, the use authority, the validity period and the identity information of the consumer machine holder of the consumer machine which is authorized to perform off-line payment transaction; the server is used for issuing the authority to the consumer machine, so that the consumer machine can have the function of receiving the electronic wallet in the device for payment; the server is used for issuing the authority to the electronic wallet so that the electronic wallet can have the function of paying to a consumption machine in the device; meanwhile, the server issues an authorization to the user, wherein the authorization mode is to issue an authorization entity hardware device or to provide an authorization number for the user of the existing device; and recharging the equipment, and writing the electronic wallet identity, the use authority, the validity period, the payment password and the inquiry password of the electronic wallet and the identity information of the electronic wallet holder.

(2) The payment is completed by a payee who holds a consumer computer with the CID and a payer who holds an electronic wallet with the QID, and a payment process initiated by the payee is as follows:

BF1, a receiving party issues a receiving request, and the processing flow includes the following steps:

BF1.1, the payee enters the amount to be received JR1 at the consumer machine.

BF1.2, the read-write control module generates an optical random code GSJ1, a collection random code SKSJ1, and generates a collection request SKQQ1 containing a collection amount JR1, a consumer identity CID1, a collection random code SKSJ1 and an optical random code GSJ1 according to the collection amount JR1 input by BF1.1, and outputs the collection request SKQQ1 to the bar code display module; meanwhile, the light random code GSJ1 is output to the backlight module and sent out in the form of visible light signals.

BF1.3, the bar code display module produces a bar code and displays according to the request SKQQ1 of gathering money, send out the light random code GSJ1 with the form of visible light signal with the backlight module; and begins to wait for receipt of the payer's response; if no response is received from the payer within a set waiting time, the bar code display module is refreshed to wait for the input of the next payment receiving request.

BF2, the payer receives the payment request from the payee and makes a payment response according to the payment request, the process flow comprises the following steps:

BF2.1, the bar code scanning module for electronic wallet scans and discerns the bar code display module of the payee, receive the request SKQQ2 of gathering; the wallet light receiving module is used for receiving the light random code GSJ 2.

BF2.2, the control module obtains a collection amount JR2, a consumer identity CID2, a collection random code SKSJ2 and a light random code GSJ2 according to a collection request SKQQ2, displays JR2, CID2 and payment prompt information on the display module, and waits for the confirmation of a payer; if the payer agrees to pay, inputting an order of agreeing to pay through the input module, and entering BF 2.3; if the payer inputs an instruction of not agreeing with the payment or whether the payer agrees within a certain set time, the payment process is quitted.

BF2.3, after the electronic purse obtains the order of agreeing to pay, the prompt of inputting the password is displayed on the display module.

BF2.4, the user inputs the payment password by the input module according to the prompt of password input in BF 2.3.

BF2.5, the control module inputs the payment password input by the input module into the wallet module, the wallet module verifies the payment password, and when the verification is correct, the control module enters BF 2.6; and when the verification is wrong, displaying a prompt for inputting the wrong password on the display module, and quitting the payment process.

BF2.6, the control module writes an instruction for inquiring the balance of the wallet into the wallet module and checks whether the balance of the wallet is enough for payment.

BF2.7, if the wallet balance is enough, the wallet module returns a signal of enough balance to the control module, and BF2.8 is entered; if the balance of the wallet is insufficient, the wallet module returns a signal of insufficient balance to the control module, and BF2.9 is entered.

BF2.8, the control module generates a data packet containing the identity QID2 of the electronic purse, ZFTTY 2 of the payment agreement, FKJR2 of the payment amount and SKQQ2 of the collection, and outputs the data packet to the visible light emitting module, the visible light emitting module sends the data packet out in the form of visible light signals, and starts to wait for the response of the collection; if the response from the payee is not received within a set waiting time, the operation is ended and the payment process is exited.

BF2.9, the control module produces a data packet containing electronic wallet ID QID2, insufficient balance ZFB 2 and collect the data packet of SKQQ2, and output the data packet to the visible light emission module, send out the data packet in the form of visible light signal by the visible light emission module, the control module and send a prompt message of insufficient balance to the display module, inform the user of the payer through the display module, finish the operation at the same time, withdraw from the payment procedure.

BF3, the payee issues a receipt of payment based on the payment response sent by the payer, the process flow includes the following steps:

BF3.1, the visible light receiving module of the consumption machine receives the visible light signal, and convert it into the data packet, and then output to the read-write control module.

BF3.2, the read-write control module extracts the electronic wallet ID QID3, the collection request SKQQ3, the payment amount FKJR3, the payment agreement ZFTTY 3 or the balance insufficiency ZFBZ3 from the data packet, and extracts the collection random code SKSJ3 and the optical random code GSJ3 from SKQQ 3; if the data packet is a data packet with insufficient balance, the read-write control module sends a prompt message of insufficient balance to the bar code display module, the bar code display module informs the payee user, and meanwhile, the operation is finished, and the payment process is quitted; if the data packet is the data packet agreed by payment, the following verification is carried out:

1) verifying whether the wallet identity QID3 is not blacklisted, and if the wallet identity QID3 is blacklisted, verifying that the wallet identity QID is not passed; otherwise, the verification is passed.

2) Whether the received collection request SKQQ3 in the data packet is consistent with SKQQ1 sent by the collection party or not is judged, if so, the verification is passed; otherwise, the verification is not passed.

3) Whether the payment amount FKJR3 in the data packet of the payment response is consistent with the collection amount JR1 sent by the receiver or not, and if so, the verification is passed; otherwise, the verification is not passed.

4) Whether the collection random code SKSJ1 generated by BF1.2 is consistent with the collection random code SKSJ3 extracted from collection request SKQQ3 in BF3.2 or not, and if the two are consistent, the verification is passed; otherwise, the verification is not passed.

5) Whether the optical random code GSJ1 generated by BF1.2 is consistent with the optical random code GSJ3 extracted from the collection request SKQQ3 in BF3.2, if the two codes are consistent, the verification is passed; otherwise, the verification is not passed.

If at least one of the verification fails, the read-write control module sends prompt information of failing to pass the verification to the bar code display module, the bar code display module informs the user of the payee, and meanwhile, the operation is finished, and the payment process is quitted.

BF3.3, the read-write control module generates a response random code YDSJ3 and an optical response random code GDSJ3, then generates an acceptance information SLX3 which comprises the response random code YDSJ3, the optical response random code GDSJ3, the collection amount JR1, the consumer identity CID1, the electronic wallet identity QID3, the payment approval ZFTY3 and the collection code SKM3, and outputs the acceptance information SLX3 to the bar code display module.

BF3.4, the bar code display module produces a bar code and displays according to the acceptance information SLX3, and at the same time, and output the random code GDSJ3 of the light response to the backlight module, send out in the form of visible light signal; and begins to wait for receipt of the payer's response; if the response from the payer is not received within a set waiting time, refreshing the bar code display module, ending the process operation of the payment and quitting the payment process.

BF4, the payer receives the receipt information from the payee and makes a payment response based on the receipt information, the processing flow of the payer includes:

BF4.1, the bar code scanning module for electronic wallet scans and discerns the bar code display module of the payee, receive the acceptance information SLX 4; and receiving the light response random code GDSJ4 by using the wallet light receiving module.

BF4.2, the control module obtains the collection amount JR4, the consumer identity CID4, the electronic wallet identity QID4, the payment agreement ZFTY4, the collection code SKM4, the response random code YDSJ4 and the light response random code GDSJ4 according to the acceptance information SLX4, and verifies as follows:

1) the collection amount JR2 is consistent with the collection amount JR 4.

2) Whether the consumer identity CID2 is consistent with CID 4.

3) The wallet id QID2 is consistent with QID 4.

4) Payment agreement ZFTY2 is consistent with payment agreement ZFTY 4.

If the 4 contrasts are respectively consistent, BF4.3 is entered for verification passing; otherwise, if the comparison inconsistency is that the verification fails, the control module sends a prompt message that the verification fails to pass to the display module, the display module informs the payer, and meanwhile, the operation is finished, and the payment process is quitted.

BF4.3, the control module sends a payment instruction containing the collection amount JR4 and the consumer identity CID4 to the wallet module.

BF4.4, the wallet module updates the balance of the wallet, generates a payment code ZFM4, writes the time of the payment operation, the collection amount JR4, the consumer identity CID4, the payment code ZFM4 and the collection code SKM4 into the wallet module, saves the time as an operation log, and outputs the payment amount JR4 and the payment code ZFM4 to the control module.

BF4.5, the control module generates a data packet containing the payment reply of the electronic wallet identity QID4, the payment amount JR4, the payment code ZFM4, the consumer identity CID4, the response random code YDSJ4 and the light response random code GDSJ4, the data packet is output to the visible light emitting module, and the visible light emitting module sends the data packet in the form of a visible light signal.

BF5, the payee confirms the collection according to the payment reply sent by the payer, the process flow includes the following steps:

BF5.1, the visible light receiving module of the consumption machine receives the visible light signal, and convert it into the data packet, export to the read-write control module again.

BF5.2, the read-write control module extracts the electronic wallet identity QID5, the collection amount JR5, the payment code ZFM5, the consumer identity CID5, the collection code SKM5, the response random code YDSJ5 and the light response random code GDSJ5 from the data packet and verifies as follows:

1) the collection amount JR1 is consistent with the collection amount JR 5.

2) Whether the consumer identity CID1 is consistent with CID 5.

3) The wallet id QID3 is consistent with QID 5.

4) Whether the collection codes SKM3 and SKM5 are consistent.

5) Whether or not the response random codes YDSJ3 and YDSJ5 coincide.

6) Whether the light response random codes GDSJ3 and GDSJ5 are identical.

If the 6 comparisons are respectively consistent, BF5.3 is entered for verification passing; otherwise, if the comparison inconsistency is that the verification fails, the read-write control module sends a prompt message that the verification fails to pass to the bar code display module, the bar code display module informs the payee, and meanwhile, the operation is finished, and the payment process is quitted.

BF5.3, writing the time of the payment process, the electronic wallet identity QID3, the collection amount JR5, the payment code ZFM5, the collection code SKM5, the response random code YDSJ5 and the light response random code GDSJ5 into the collection box module, generating an operation log, updating the balance information of the collection box module, and displaying the prompt information of successful payment through the bar code display module.

(3) In the payment process, the data sent by the consumer machine is received from the electronic wallet, and the data sent by the electronic wallet is received from the consumer machine, so that the possibility that the data cannot be identified exists in the transceiving process, and therefore, in the payment process, for the situation that the data cannot be identified and cannot be identified due to the fact that the data cannot be received, the device unilaterally ends the payment process after a set waiting time is overtime.

In the payment process, the data sent from the electronic wallet to the consumer machine and the data sent from the consumer machine to the electronic wallet may have risks of data loss, tampering and forgery in the transceiving process, so in the payment process, for each received key data, it is assumed that the currently received data is different from the data generated or received in the previous steps of the payment process, and comparison and verification are required, thereby ensuring the authenticity and integrity of the transceiving data.

The invention is based on the premise of combining the visible light communication technology and the bar code scanning identification technology, and utilizes the illumination backlight of a display device of bar codes and other prompt information to construct a hidden channel so as to improve the safety of the payment process, thereby providing the off-line payment method with the visible light and bar code bidirectional authentication of hidden signals.

Drawings

FIG. 1 is a schematic diagram of the structure of the process of the present invention.

Fig. 2 is a block diagram of an apparatus in an embodiment of the present invention.

The labels in the figure are: 1-an electronic wallet; 2-a consumer machine; 3-a server; 11-a control module; 12-an input module; 13-a display module; 14-a data interface; 15-a barcode scanning module; 16-a wallet module; 17-a visible light emitting module; 18-a wallet light receiving module; 21-read-write control module; 22-a barcode display module; 23-cash register box module; 24-a visible light receiving module; 25-a keyboard module; 26-a backlight module; 27-a communication module.

Detailed Description

Example (b):

the invention discloses a double-random code visible light and bar code double-authentication offline payment method with a hidden channel, which comprises the following specific implementation steps:

establishing a set of optical authentication offline consumption device with a hidden channel, comprising: an electronic wallet 1, a consumer machine 2 and a server 3.

Electronic wallet 1, comprising: a visible light emitting module 17, a bar code scanning module 15, a control module 11, a wallet module 16, an input module 12, a display module 13, a data interface 14, and a wallet light receiving module 18.

And the visible light emitting module 17 is used for generating and sending a visible light signal according to the information input by the control module 11.

And the bar code scanning module 15 is used for scanning and identifying a bar code and outputting an identification result to the control module 11.

A control module 11 for: 1. processing information to be sent to generate a data packet, outputting the data packet to the visible light emitting module 17, and driving the visible light emitting module 17 to send a visible light signal; 2. receiving the scanning result output of the bar code scanning module 15, and verifying the scanning result; 3. the wallet module 16 performs consumption, recharging, balance inquiry and operation log information reading and writing operations; 4. generating information to be transmitted through the visible light emitting module 17 according to the received information and the generated payment information; 5. data interaction with the server 3 can be carried out through the data interface 14; 6. and receiving the result output of the wallet light receiving module 18, and identifying and authenticating the result.

A wallet module 16 for holding a wallet comprising: user account information, wallet balance, consumption authority, inquiry password, payment password, operation log and information of a production issuing organization; and can verify whether the input password is consistent with the password stored in the wallet password module.

And the input module 12 is used for inputting payment amount, inquiry password, payment password and operation instruction to the control module 11.

And the display module 13 is used for displaying payment amount, a password input interface, an operation instruction and prompt information.

And the data interface 14 is used for providing networking functions of the electronic wallet 1, and providing functions of connecting with the server 3 and performing data exchange, data maintenance and upgrading.

The wallet light receiving module 18 is configured to receive the visible light backlight signal sent by the backlight module 26.

The electronic wallet 1 is implemented by a smart phone equipped with a flash, a photoelectric sensor, and a camera.

The wallet module 16 is implemented using a cell phone sim card.

Consumer machine 2, comprising: a visible light receiving module 24, a bar code display module 22, a read-write control module 21, a cash box module 23, a keyboard module 25, a communication module 27 and a backlight module 26.

The visible light receiving module 24 is configured to receive the visible light signal, process and restore the visible light signal to a corresponding digital signal, and restore the digital signal to a data packet.

A barcode display module 22 for: 1. generating and displaying a bar code according to the input information of the read-write control module 21; 2. and displaying the transaction amount, the password input interface, the operation instruction and the prompt information.

A read-write control module 21, configured to: 1. receiving the output of the visible light receiving module 24 and authenticating the output; 2. processing the information to be sent and outputting the information to the bar code display module 22; 3. the cashier box module 23 is used for consuming, recharging, inquiring balance and reading and writing operation of operation log information; 4. providing a communication interface, and uploading and downloading information with the server 3 through the communication module 27; 5. the information to be transmitted in the form of optical signals is processed to generate a data packet, and the data packet is output to the backlight module 26 to drive the backlight module 26 to transmit visible light signals.

A cash box module 23 for holding including: operation log, collection consumption authority, blacklist, cash balance, operation password, validity period and production and issuing organization.

And the keyboard module 25 is used for inputting the transaction amount, the transaction password and the operation instruction to the read-write control module 21.

And the communication module 27 is used for connecting the upper computer or the access network in a wired or wireless mode so as to be connected with the server.

And the backlight module 26 is used for providing an illuminating backlight for the bar code display module 22 to display, and simultaneously sending a visible light backlight signal by using the backlight.

A server 3 for: 1. establishing data connection for uploading and downloading with the consumption machine 2 through the communication module 27; 2. establishing data connection for uploading and downloading with the electronic wallet 1 through the data interface 14; 3. providing background service support of the offline payment method; 4. providing an interface for the entire offline payment device to flow funds with the financial system; 5. issuing or de-authorizing the consumer machine 2, the electronic wallet 1, the providing comprising: key updating, algorithm updating and upgrading, use authority adjustment, validity period adjustment, electronic wallet recharging, consumer payment, electronic wallet and consumer public information inquiry; 6. the preservation comprises the following steps: information including an authorized user list, a blacklist, an operation log, a list of consumer machines.

An authorized user list for maintaining a list comprising: identification of electronic purse that has been authorized to make off-line payment, usage rights, expiration date, identity information of electronic purse holder.

And the blacklist is used for storing the identification information of the part of the electronic wallets which are refused to pay for the transaction due to arrearage, loss report and illegal use records in the authorized user list.

And the payment interface is used for providing an interface for the whole offline payment device to flow funds with the financial system.

And the operation log collection is used for storing information including inquiry, recharging and consumption operation time, payment amount and payment process data parameters of all the consumption machines and the electronic wallets.

And the consumer machine list is used for storing the information, the use authority and the validity period of the consumer machine terminal which is authorized to carry out the off-line payment transaction.

The issuing process of the electronic wallet comprises the following steps: the server issues an authorization to the user, and the authorization mode can be to issue an authorization entity hardware device or to provide an authorization number for the existing device equipped with the invention; and recharging the equipment, and writing the electronic wallet identity, the use authority, the validity period, the payment password and the inquiry password of the electronic wallet and the identity information of the electronic wallet holder.

The method is completed by a payee who holds a consumer computer 2 with the CID and a payer who holds an electronic wallet 1 with the QID, and a payment process initiated by the payee is as follows:

BF1.1, the payee enters the amount to be received JR1 at the consumer machine 2.

BF1.2, the read-write control module 21 generates an optical random code GSJ1, a collection random code SKSJ1, and generates a collection request SKQQ1 containing a collection amount JR1, a consumer identity CID1, a collection random code SKSJ1 and an optical random code GSJ1 according to the collection amount JR1 input by BF1.1, and outputs the collection request SKQQ1 to the bar code display module 22; meanwhile, the light random code GSJ1 is output to the backlight module 26 and sent out in the form of visible light signals.

BF1.3, the bar code display module 22 produces a bar code and displays according to the request SKQQ1 of gathering money, send out the light random code GSJ1 with the form of visible light signal with the backlight module 26; and begins to wait for receipt of the payer's response; if no response is received from the payer within a set wait time, the barcode display module 22 is refreshed, awaiting the entry of the next payment request.

BF2.1, the electronic wallet 1 scans the bar code display module 22 of the identification payee with the bar code scanning module 15, receive the request SKQQ2 of gathering; the wallet light receiving module 18 is used to receive the light random code GSJ 2.

BF2.2, the control module 11 obtains the amount of money JR2 and the identity CID2 of the consumer, the random code SKSJ2 of the money collection and the light random code GSJ2 according to the request SKQQ2 of the money collection, and displays JR2, CID2 and the payment prompt information on the display module, and waits for the confirmation of the payer; if the payer agrees to pay, inputting an instruction of agreeing to pay through the input module 12, and entering BF 2.3; if the payer inputs an instruction of not agreeing with the payment or whether the payer agrees within a certain set time, the payment process is quitted.

BF2.3, after the electronic wallet 1 gets the instruction to approve the payment, a prompt to enter the password is displayed on the display module 13.

BF2.4, the user inputs the payment password through the input module 12 according to the prompt of password input in BF 2.3.

BF2.5, the control module 11 inputs the payment password input by the input module 12 into the wallet module 16, the wallet module 16 verifies the payment password, and when the verification is correct, the BF2.6 is entered; when the verification is wrong, a prompt for inputting a wrong password is displayed on the display module 13, and the payment process is exited.

BF2.6, the control module 11 writes an instruction to the wallet module 13 to query the wallet balance to check if the wallet balance is sufficient for payment.

BF2.7, if the wallet balance is sufficient, the wallet module 16 returns a signal of sufficient balance to the control module 11, and enters BF 2.8; if the wallet balance is insufficient, an insufficient balance signal is returned by the wallet module 16 to the control module 11 and BF2.9 is entered.

BF2.8, the control module 11 generates a data packet containing the electronic wallet id QID2, the payment agreement ZFTY2, the payment amount FKJR2 and the payment request SKQQ2 and outputs the data packet to the visible light emitting module 17, the visible light emitting module 17 sends the data packet in the form of a visible light signal and starts to wait for the response of the payee; if the response from the payee is not received within a set waiting time, the operation is ended and the payment process is exited.

BF2.9, the control module 11 produces a data packet containing electronic wallet ID QID2, insufficient balance ZFBZ2 and request for collection SKQQ2, and output the data packet to the visible light emission module 17, send out the data packet in the form of visible light signal by the visible light emission module 17, the control module 11 and send a prompt message of insufficient balance to the display module 13, inform the user of the payer through the display module 13, finish the operation at the same time, withdraw from the payment procedure.

BF3.1, the visible light receiving module 24 of the consumption machine 2 receives the visible light signal, and converts it into a data packet, and outputs it to the read-write control module 21.

BF3.2, the read-write control module 21 extracts the electronic wallet ID QID3, the collection request SKQQ3, the payment amount FKJR3, the payment agreement ZFTY3 or the balance insufficiency ZFBZ3 from the data packet, and extracts the collection random code SKSJ3 and the optical random code GSJ3 from SKQQ 3; if the data packet is a data packet with insufficient balance, the read-write control module 21 sends a prompt message of insufficient balance to the bar code display module 22, the bar code display module 22 informs the payee user of the insufficient balance, and meanwhile, the operation is finished, and the payment process is quitted; if the data packet is the data packet agreed by payment, the following verification is carried out:

If at least one of the verification fails, the read-write control module 21 sends a prompt message indicating that the verification fails to pass to the bar code display module 22, the bar code display module 22 informs the user of the payee, and the operation is ended and the payment process is exited.

BF3.3, the read-write control module 21 generates a response random code YDSJ3 and an optical response random code GDSJ3, then generates an acceptance information SLX3 including the response random code YDSJ3, the optical response random code GDSJ3, the collection amount JR1, the consumer identity CID1, the electronic wallet identity QID3, the payment approval ZFTY3 and the collection code SKM3, and outputs the acceptance information SLX3 to the bar code display module 22.

BF3.4, the bar code display module 22 produces a bar code and displays according to the acceptance information SLX3, and at the same time, outputs the light response random code GDSJ3 to the backlight module 26, and sends out in the form of visible light signal; and begins to wait for receipt of the payer's response; if the response from the payer is not received within a set waiting time, the bar code display module 22 is refreshed, the process operation of the current payment is finished, and the payment process is quitted.

BF4.1, the electronic wallet 1 scans and identifies the bar code display module 22 of the payee by using the bar code scanning module 15 to obtain acceptance information SLX 4; the light response random code GDSJ4 is received by the wallet light receiving module 18.

BF4.2, the control module 11 obtains the collection amount JR4, the consumer identity CID4, the electronic wallet identity QID4, the payment approval ZFTY4, the collection code SKM4, the response random code YDSJ4 and the light response random code GDSJ4 according to the acceptance information SLX4, and verifies as follows:

1) the collection amount JR2 is consistent with the collection amount JR 4.

2) Whether the consumer identity CID2 is consistent with CID 4.

3) The wallet id QID2 is consistent with QID 4.

4) Payment agreement ZFTY2 is consistent with payment agreement ZFTY 4.

If the 4 contrasts are respectively consistent, BF4.3 is entered for verification passing; otherwise, if the comparison is inconsistent, the control module 11 sends a prompt message indicating that the verification fails to pass to the display module 13, and the display module 13 informs the payer, and at the same time, the operation is ended and the payment process is exited.

BF4.3, the control module 11 sends a payment instruction containing the amount of money to be collected JR4 and the identification of the consumer computer CID4 to the wallet module 16.

BF4.4, the wallet module 16 updates the wallet balance, generates a payment code ZFM4, writes the time of the current payment operation, the collection amount JR4, the consumer identity CID4, the payment code ZFM4 and the collection code SKM4 into the wallet module 16, saves the time as an operation log, and outputs the payment amount JR4 and the payment code ZFM4 to the control module 11.

BF4.5, a data packet of payment reply containing the electronic wallet identity QID4, payment amount JR4, payment code ZFM4, consumer identity CID4, reply random code YDSJ4, and light reply random code GDSJ4 is generated by the control module 11 and output to the visible light emitting module 17, and the data packet is sent out in the form of visible light signal by the visible light emitting module 17.

BF5.1, the visible light receiving module 24 of the consumption machine 2 receives the visible light signal, and converts it into a data packet, and outputs it to the read-write control module 21.

BF5.2, the read-write control module 21 extracts the electronic wallet id QID5, the collection amount JR5, the payment code ZFM5, the consumer id CID5, the collection code SKM5, the response random code YDSJ5, and the light response random code GDSJ5 from the data packet, and verifies as follows:

1) the collection amount JR1 is consistent with the collection amount JR 5.

2) Whether the consumer identity CID1 is consistent with CID 5.

3) The wallet id QID3 is consistent with QID 5.

4) Whether the collection codes SKM3 and SKM5 are consistent.

5) Whether or not the response random codes YDSJ3 and YDSJ5 coincide.

6) Whether the light response random codes GDSJ3 and GDSJ5 are identical.

If the 6 comparisons are respectively consistent, BF5.3 is entered for verification passing; otherwise, if the comparison inconsistency is that the verification fails, the read-write control module 21 sends a prompt message indicating that the verification fails to pass to the bar code display module 22, and the bar code display module 22 informs the payee of the verification failure, and at the same time, the operation is ended and the payment process is exited.

BF5.3, writing the time of the payment process, the electronic wallet identity QID3, the collection amount JR5, the payment code ZFM5, the collection code SKM5, the response random code YDSJ5 and the light response random code GDSJ5 into the collection box module 23, generating an operation log, updating the balance information of the collection box module 23 and displaying the prompt information of successful payment through the bar code display module 22.

In the payment process, the data sent by the consumer machine 2 is received from the electronic wallet 1, and the data sent by the electronic wallet 1 is received from the consumer machine 2, so that the possibility that the data cannot be identified exists in the transceiving process; in the payment process, the unidentifiable data and the unidentifiable situation caused by the unidentifiable data being unable to receive the data are all ended unilaterally after a set waiting time is overtime.

In the payment process, the data sent from the electronic wallet 1 to the consumer machine 2 and the data sent from the consumer machine 2 to the electronic wallet 1 may have risks of data loss, tampering and forgery in the transceiving process, so in the payment process, for each time the received key data, it is assumed that the currently received data is different from the data generated or received in the previous steps of the payment process, and a comparison verification is required, thereby ensuring the authenticity and integrity of the transceiving data.

Claims

1. A double-random code visible light and bar code double-authentication offline payment method with a hidden channel is characterized by comprising the following specific steps:

(1) establishing a set of optical authentication offline consumption device with a hidden channel, comprising: electronic purses, consumer machines, and servers;

an electronic wallet, comprising: the wallet comprises a visible light emitting module, a bar code scanning module, a wallet control module, a wallet module, an input module, a display module, a data interface and a wallet light receiving module; the visible light emitting module is used for generating and sending visible light signals according to the information input by the control module; the bar code scanning module is used for scanning and identifying bar codes and outputting an identification result to the control module; a control module to: 1. processing information to be sent to generate a data packet, outputting the data packet to a visible light emitting module, and driving the visible light emitting module to send a visible light signal; 2. receiving the scanning result output of the bar code scanning module, and verifying the scanning result; 3. receiving the result output of the wallet light receiving module, and identifying and authenticating the result output; 4. generating information needing to pass through the visible light emitting module according to the received information and the generated payment information; 5. the wallet module carries out consumption, recharging, balance inquiry and operation log information reading and writing operations; 6. the data interaction can be carried out with the server through the data interface; a wallet module for holding a wallet comprising: user account information, wallet balance, consumption authority, inquiry password, payment password, operation log and information of a production issuing organization; and can verify whether the input password is consistent with the password stored in the wallet password module; the input module is used for inputting information including payment amount, inquiry passwords, payment passwords and operation instructions to the control module; the display module is used for displaying payment amount, a password input interface, an operation instruction and prompt information; the data interface is used for providing a networking function of the electronic wallet and providing functions of connecting with the server and performing data exchange, data maintenance and upgrading; the wallet light receiving module is used for receiving the visible light backlight signal sent by the backlight module;

a consumer machine, comprising: the system comprises a visible light receiving module, a bar code display module, a read-write control module, a cash register module, a keyboard module, a communication module and a backlight module; the visible light receiving module is used for receiving the visible light signals, processing and restoring the visible light signals into corresponding digital signals, and restoring the digital signals into data packets; a barcode display module for: 1. generating and displaying a bar code according to the input information of the read-write control module; 2. displaying the transaction amount, a password input interface, an operation instruction and prompt information; a read-write control module for: 1. receiving the output of the visible light receiving module, and identifying and authenticating the output; 2. processing information to be sent and outputting the information to a bar code display module; 3. processing information to be sent in an optical signal form, generating a data packet, outputting the data packet to a backlight module, and driving the backlight module to send a visible light signal; 4. The cash box module is used for performing consumption, recharging, balance inquiry and operation log information reading and writing operations; 5. providing a data interface, and uploading and downloading information with a server through a communication module; receive cash box module for save including: operation log, collection consumption authority, blacklist, cash balance, operation password, validity period and production and issuing organization; the keyboard module is used for inputting transaction amount, transaction password and operation instruction to the read-write control module; the communication module is used for connecting the upper computer or the access network in a wired or wireless mode so as to be connected with the server; the backlight module is used for providing displayed illumination backlight for the bar code display module and sending visible light backlight signals by utilizing the backlight;

a server to: 1. establishing data connection for uploading and downloading with the consumer computer through the communication module; 2. establishing data connection for uploading and downloading with the electronic wallet through a data interface; 3. providing background service support of the offline payment method; 4. providing an interface for the entire offline payment device to flow funds with the financial system; 5. providing for issuing or de-authorizing a consumer machine, e-wallet, comprising: key updating, algorithm updating and upgrading, use authority adjustment, validity period adjustment, electronic wallet recharging, consumer payment, electronic wallet and consumer public information inquiry; 6. the preservation comprises the following steps: information including an authorized user list, a blacklist, an operation log summary and a consumer list;

an authorized user list for maintaining a list comprising: identity of the electronic purse that has been authorized to make offline payments, usage rights, expiration date, identity information of the electronic purse holder; the system comprises a blacklist, a payment interface, a payment processing unit and a financial system, wherein the blacklist is used for storing the identification information of the part of the electronic wallet which is refused to pay the transaction due to arrearage, loss report and illegal use record in an authorized user list; the operation log summarization is used for storing information including query, recharge, consumption operation time, payment amount and payment process data parameters of all the consumption machines and the electronic wallets; a consumer machine manifest for maintaining a list comprising: the identity identification, the use authority, the validity period and the identity information of the consumer machine holder of the consumer machine which is authorized to perform off-line payment transaction; the server is used for issuing the authority to the consumer machine, so that the consumer machine can have the function of receiving the electronic wallet in the device for payment; the server is used for issuing the authority to the electronic wallet, so that the electronic wallet can have the function of paying to a consumption machine in the device; meanwhile, the server issues an authorization to the user, wherein the authorization mode is to issue an authorization entity hardware device or to provide an authorization number for the user of the existing device; recharging the equipment, and writing the identity identification, the use authority, the validity period, the payment password and the inquiry password of the electronic wallet and the identity information of the electronic wallet holder;

BF1.1, the payee inputs the amount JR1 to be received on the consumption machine;

BF1.2, the read-write control module generates an optical random code GSJ1, a collection random code SKSJ1, and generates a collection request SKQQ1 containing a collection amount JR1, a consumer identity CID1, a collection random code SKSJ1 and an optical random code GSJ1 according to the collection amount JR1 input by BF1.1, and outputs the collection request SKQQ1 to the bar code display module; meanwhile, the light random code GSJ1 is output to a backlight module and is sent out in the form of visible light signals;

BF1.3, the bar code display module produces a bar code and displays according to the request SKQQ1 of gathering money, send out the light random code GSJ1 with the form of visible light signal with the backlight module; and begins to wait for receipt of the payer's response; if the response from the payer is not received within a set waiting time, refreshing the bar code display module and waiting for the input of the next collection request;

BF2.1, the bar code scanning module for electronic wallet scans and discerns the bar code display module of the payee, receive the request SKQQ2 of gathering; receiving the light random code GSJ2 by using a wallet light receiving module;

BF2.2, the control module obtains a collection amount JR2, a consumer identity CID2, a collection random code SKSJ2 and a light random code GSJ2 according to a collection request SKQQ2, displays JR2, CID2 and payment prompt information on the display module, and waits for the confirmation of a payer; if the payer agrees to pay, inputting an order of agreeing to pay through the input module, and entering BF 2.3; if the payer inputs an instruction of not agreeing with the payment or whether the payer agrees within a certain set time, quitting the payment process;

BF2.3, after the electronic wallet obtains the order agreeing to pay, reveal the suggestion of inputting the password on the display module;

BF2.4, the user inputs the payment password by the input module according to the prompt of password input in BF 2.3;

BF2.5, the control module inputs the payment password input by the input module into the wallet module, the wallet module verifies the payment password, and when the verification is correct, the control module enters BF 2.6; when the verification is wrong, displaying a prompt for inputting a password mistake on the display module, and quitting the payment process;

BF2.6, the control module writes the instruction of inquiring the wallet balance into the wallet module, check the wallet balance is sufficient to pay;

BF2.7, if the wallet balance is enough, the wallet module returns a signal of enough balance to the control module, and BF2.8 is entered; if the balance of the wallet is insufficient, the wallet module returns a signal of insufficient balance to the control module, and BF2.9 is entered;

BF2.8, the control module generates a data packet containing the identity QID2 of the electronic purse, ZFTTY 2 of the payment agreement, FKJR2 of the payment amount and SKQQ2 of the collection, and outputs the data packet to the visible light emitting module, the visible light emitting module sends the data packet out in the form of visible light signals, and starts to wait for the response of the collection; if the response from the payee is not received within a set waiting time, ending the operation and quitting the payment process;

BF2.9, the control module produces a data packet containing electronic wallet identification QID2, insufficient balance ZFB 2 and request for collection SKQQ2, and output the data packet to the visible light emission module, send out the data packet in the form of visible light signal by the visible light emission module, the control module and send a prompt message of insufficient balance to the display module, notify the user of the payer through the display module, finish the operation at the same time, withdraw from the payment process;

BF3.1, the visible light receiving module of the consumption machine receives the visible light signal, and convert to the data packet, and then output to the read-write control module;

1) verifying whether the wallet identity QID3 is not blacklisted, and if the wallet identity QID3 is blacklisted, verifying that the wallet identity QID is not passed; otherwise, the verification is passed;

2) whether the received collection request SKQQ3 in the data packet is consistent with SKQQ1 sent by the collection party or not is judged, if so, the verification is passed; otherwise, the verification is failed;

3) whether the payment amount FKJR3 in the data packet of the payment response is consistent with the collection amount JR1 sent by the receiver or not, and if so, the verification is passed; otherwise, the verification is failed;

4) whether the collection random code SKSJ1 generated by BF1.2 is consistent with the collection random code SKSJ3 extracted from collection request SKQQ3 in BF3.2 or not, and if the two are consistent, the verification is passed; otherwise, the verification is failed;

5) whether the optical random code GSJ1 generated by BF1.2 is consistent with the optical random code GSJ3 extracted from the collection request SKQQ3 in BF3.2, if the two codes are consistent, the verification is passed; otherwise, the verification is failed;

if the verification of the above five items is passed, BF3.3 is entered, otherwise, as long as at least one verification is failed, a prompt message that the verification is failed is sent to the bar code display module by the read-write control module, the user of the payee is informed by the bar code display module, and the operation is ended and the payment process is exited;

BF3.3, the read-write control module generates response random code YDSJ3 and light response random code GDSJ3, then generates acceptance information SLX3 which comprises response random code YDSJ3, light response random code GDSJ3, collection amount JR1, consumer identity CID1, electronic wallet identity QID3, payment consent ZFTY3 and collection code SKM3, and outputs the acceptance information SLX3 to the bar code display module;

BF3.4, the bar code display module produces a bar code and displays according to the acceptance information SLX3, and at the same time, and output the random code GDSJ3 of the light response to the backlight module, send out in the form of visible light signal; and begins to wait for receipt of the payer's response; if the response from the payer is not received within a set waiting time, refreshing the bar code display module, ending the process operation of the payment and quitting the payment process;

BF4.1, the bar code scanning module for electronic wallet scans and discerns the bar code display module of the payee, receive the acceptance information SLX 4; receiving the light response random code GDSJ4 by using a wallet light receiving module;

1) whether the collection amount JR2 agrees with the collection amount JR 4;

2) whether the consumer identity CID2 is consistent with CID 4;

3) whether the electronic wallet identity QID2 is consistent with QID 4;

4) whether the payment agreement ZFTY2 is consistent with the payment agreement ZFTY 4;

if the 4 contrasts are respectively consistent, BF4.3 is entered for verification passing; otherwise, if the comparison inconsistency is that the verification fails, the control module sends a prompt message that the verification fails to pass to the display module, the display module informs the payer, and meanwhile, the operation is finished, and the payment process is quitted;

BF4.3, the control module sends a payment instruction containing the collection amount JR4 and the consumer identity CID4 to the wallet module;

BF4.4, the wallet module updates the wallet balance, generates a payment code ZFM4, writes the time of the current payment operation, the collection amount JR4, the consumer identity CID4, the payment code ZFM4 and the collection code SKM4 into the wallet module, saves the time as an operation log, and outputs the payment amount JR4 and the payment code ZFM4 to the control module;

BF4.5, the control module generates a data packet of payment reply containing E-wallet ID QID4, payment amount JR4, payment code ZFM4, consumer identity CID4, answer random code YDSJ4 and light answer random code GDSJ4, and outputs the data packet to the visible light emitting module, and the visible light emitting module sends the data packet out in the form of visible light signals;

BF5.1, the visible light receiving module of the consumption machine receives the visible light signal, and convert to the data packet, and then output to the read-write control module;

1) whether the collection amount JR1 agrees with the collection amount JR 5;

2) whether the consumer identity CID1 is consistent with CID 5;

3) whether the electronic wallet identity QID3 is consistent with QID 5;

4) whether the collection codes SKM3 and SKM5 are consistent or not;

5) whether the response random codes YDSJ3 and YDSJ5 are consistent or not;

6) whether the light response random codes GDSJ3 and GDSJ5 are consistent or not;

if the 6 comparisons are respectively consistent, BF5.3 is entered for verification passing; if the comparison inconsistency is that the verification is not passed, the read-write control module sends a prompt message that the verification is not passed to the bar code display module, the bar code display module informs the payee, and meanwhile, the operation is finished, and the payment process is quitted;

BF5.3, writing the time of the payment process, the electronic wallet identity QID3, the collection amount JR5, the payment code ZFM5, the collection code SKM5, the response random code YDSJ5 and the light response random code GDSJ5 into the collection box module, generating an operation log, updating the balance information of the collection box module, and displaying the prompt information of successful payment through the bar code display module;

(3) in the payment process, the data sent by the consumer machine is received from the electronic wallet, and the data sent by the electronic wallet is received from the consumer machine, so that the possibility that the data cannot be identified exists in the transceiving process, and therefore, in the payment process, for the data which cannot be identified and the situation that the data cannot be identified due to the fact that the data cannot be received, the device unilaterally ends the payment process after a set waiting time is overtime;