CN111062718A

CN111062718A - Method, apparatus, system, and medium for secure transactions

Info

Publication number: CN111062718A
Application number: CN201911268144.4A
Authority: CN
Inventors: 陈兹武
Original assignee: Beijing Niucafu Network Technology Co Ltd
Current assignee: Beijing Niucafu Network Technology Co Ltd
Priority date: 2019-12-11
Filing date: 2019-12-11
Publication date: 2020-04-24
Anticipated expiration: 2039-12-11
Also published as: CN111062718B

Abstract

The embodiment of the invention provides a method, a device, a system and a storage medium for secure transaction. A method for secure transactions comprising: receiving electronic equipment position information sent by electronic equipment; receiving scanner position information sent by a scanner; receiving accounting information sent by a scanner, wherein the accounting information comprises position information of a transaction place; confirming whether the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent; if the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent, sending post-trading information to the electronic equipment and the scanner; otherwise, the information of transaction failure is sent to the electronic equipment and the scanner. The technology of the invention can improve the safety of transaction and is convenient for paying and managing the working expenses of the staff by applying electronic money.

Description

Method, apparatus, system, and medium for secure transactions

Technical Field

Embodiments of the present invention relate to the field of mobile payment, and more particularly, to a method, an apparatus, a system, and a medium for secure transaction.

Background

At present, with the development of mobile internet technology, mobile payment is widely applied and popularized. How to improve the security of mobile payment becomes a key point of attention.

In addition, with the rise of mobile payment, for enterprise management, expenditure of electronic money on staff in work, such as fueling expenditure of a driver in a transportation task, can be improved, and management of the enterprise on the staff can be improved, and various expenditures can be better controlled.

Disclosure of Invention

For this reason, there is a strong need for an improved secure transaction method to enable secure mobile payment and to manage expenses in employee work using electronic money.

In this context, embodiments of the present invention are intended to provide a method and apparatus, a system and a medium for secure transactions.

According to an aspect of the present invention, there is provided a method for secure transaction, the method being applied to a cloud or a server, the cloud or the server being capable of communicating with an electronic device or a scanner, the method comprising:

receiving electronic equipment position information sent by electronic equipment;

receiving scanner position information sent by a scanner;

receiving accounting information sent by a scanner, wherein the accounting information comprises position information of a transaction place;

confirming whether the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent;

if the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent, sending post-trading information to the electronic equipment and the scanner; otherwise, the information of transaction failure is sent to the electronic equipment and the scanner.

Further, after receiving the electronic device location information sent by the electronic device, the method further includes:

sending an encrypted string for payment to the electronic device, the encrypted string for the electronic device to generate a transaction code for the scanner to scan the transaction code to obtain the encrypted string.

Further, the encryption string sent to the electronic device each time is different.

Further, the encrypted string is valid for a set time.

Further, when receiving the scanner position information sent by the scanner, the method further includes:

receiving the encrypted string sent by the scanner; and

transmitting a billing password to the scanner.

Further, when the accounting information sent by the scanner is received, the method further comprises:

and receiving the accounting password sent by the scanner, and confirming whether the current position of the electronic equipment, the current position of the scanner and the position of the transaction place are consistent after receiving the accounting information and the accounting password.

Further, the billing information also comprises the number of oil upgrade and the electronic money to be paid.

Further, after confirming that the current location of the electronic device, the current location of the scanner, and the location of the transaction location coincide, the method further comprises:

verifying a configuration of the electronic device;

and if the verification is passed, settling the transaction of the electronic device.

Further, the verifying the configuration of the electronic device includes:

and judging whether the current refueling quantity is reasonable or not according to the last refueling quantity finished by the electronic equipment and the distance between the current refueling position and the last refueling position.

Further, the verifying the configuration of the electronic device includes:

and confirming whether the oiling increasing number in the set time of the electronic equipment exceeds the set oiling threshold value of the electronic equipment.

Further, the method further comprises:

receiving information of the refueling equipment;

the verifying the configuration of the electronic equipment comprises verifying whether the currently-refueled equipment is consistent with the refueled equipment bound with the electronic equipment;

if so, settlement is allowed, otherwise, an indication that the device is illegal is returned.

According to another aspect of the present invention, there is also provided a method for secure transaction, the method being applied to a payment system including an electronic device, a scanner and a cloud, the method including:

the electronic device sends electronic device location information to the cloud to obtain an encryption string for payment from the cloud and generate a transaction code including the encryption string;

the scanner scans the transaction code to obtain the encryption string and sends the encryption string and scanner position information to the cloud end to obtain an accounting password from the cloud end;

the scanner sends accounting information and the accounting password to the cloud after obtaining the accounting password, wherein the accounting information comprises position information of a transaction place;

after receiving the accounting information and the accounting password sent by the scanner, the cloud end confirms whether the current position of the electronic equipment, the current position of the scanner and the position of the transaction place are consistent;

Further, the encryption strings sent by the cloud to the electronic device each time are different.

Further, the encrypted string is valid for a set time.

the cloud end verifies the configuration of the electronic equipment;

Further, the verifying the configuration of the electronic device includes:

and the cloud end judges whether the current refueling quantity is reasonable according to the last refueling lifting number completed by the electronic equipment and the distance between the current refueling position and the last refueling position.

Further, the verifying the configuration of the electronic device includes:

and the cloud end confirms whether the oiling rise number in the set time of the electronic equipment exceeds the set oiling threshold value of the electronic equipment.

Further, the method further comprises:

the cloud end receives information of the refueling equipment from the electronic equipment;

the verifying the configuration of the electronic device comprises:

the cloud verifies whether the currently refueled equipment is consistent with the refueled equipment bound with the electronic equipment;

According to another aspect of the present invention, there is also provided an apparatus for secure transaction, the apparatus being applied to a cloud or a server, the apparatus including:

a first interface module for receiving electronic device location information from an electronic device;

a second interface module to receive scanner location information and billing information from the scanner, the billing information including venue location information;

the settlement module is used for confirming whether the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent;

the information returning module sends information after transaction to the electronic equipment and the scanner when the current position of the electronic equipment, the current position of the scanner and the position of the transaction place are consistent, and sends information that the transaction fails to the electronic equipment and the scanner when the current position of the electronic equipment, the current position of the scanner and the position of the transaction place are inconsistent.

Further, the first interface module is further configured to, after receiving electronic device location information sent by an electronic device, send an encrypted string for payment to the electronic device, where the encrypted string is used for the electronic device to generate a transaction code, so that the scanner scans the transaction code to obtain the encrypted string.

Further, the encrypted string is valid for a set time.

Further, the second interface module is further configured to receive the encrypted string sent by the scanner when receiving scanner location information sent by the scanner; and transmitting a billing password to the scanner.

Further, the second interface module is further configured to receive the billing password sent by the scanner when receiving billing information sent by the scanner, and the settlement module confirms whether the current location of the electronic device, the current location of the scanner, and the location of the transaction location are consistent after receiving the billing information and the billing password.

Further, the settlement module, after confirming that the current location of the electronic device, the current location of the scanner, and the location of the transaction location are consistent, is further configured to:

verifying a configuration of the electronic device;

Further, the verifying the configuration of the electronic device by the settlement module comprises:

Further, the air conditioner is provided with a fan,

the first interface module is also used for receiving information of the refueling equipment;

the settlement module verifies the configuration of the electronic equipment, including verifying whether the currently-refueled equipment is consistent with the refueled equipment bound with the electronic equipment;

According to yet another aspect of the present invention, there is also provided a system for secure transactions, the system comprising an electronic device, a scanner and a cloud,

the electronic equipment is used for sending electronic equipment position information to the cloud end so as to obtain an encryption string for payment from the cloud end and generate a transaction code comprising the encryption string;

the scanner is used for scanning the transaction code to obtain the encryption string and sending the encryption string and scanner position information to the cloud end so as to obtain an accounting password from the cloud end;

the scanner is further used for sending accounting information and the accounting password to the cloud after the accounting password is obtained, wherein the accounting information comprises position information of a transaction place;

the cloud is used for confirming whether the current position of the electronic equipment, the current position of the scanner and the position of the transaction place are consistent or not after the accounting information and the accounting password sent by the scanner are received;

Further, the encrypted string is valid for a set time.

Further, after confirming that the current location of the electronic device, the current location of the scanner, and the location of the transaction location are consistent, the cloud is further configured to:

verifying a configuration of the electronic device;

Further, the verifying the configuration of the electronic device by the cloud end includes:

Further, the air conditioner is provided with a fan,

the cloud is further used for receiving information of the refueling equipment from the electronic equipment;

the cloud terminal verifying the configuration of the electronic device comprises:

According to yet another aspect of the present invention, there is also provided an apparatus for secure transactions, the apparatus for secure transactions comprising a storage device and a processor, the storage device having stored thereon a computer program for execution by the processor, the computer program, when executed by the processor, performing the method for secure transactions described above.

According to yet another aspect of the present invention, there is also provided a storage medium having stored thereon a computer program which, when executed, performs the above-described method for secure transactions.

According to still another aspect of the present invention, there is also provided a computing device including the storage medium as described above.

According to the method and the device for the safe transaction, the equipment, the storage medium and the computing equipment, whether the position information of the electronic equipment, the scanner and the transaction place is consistent or not can be checked when the transaction or the accounting is confirmed, if the position information of the electronic equipment, the scanner and the transaction place is consistent, the transaction is allowed, otherwise, the transaction is not allowed, so that the electronic equipment, the scanner and the transaction place can be ensured to be at the same position in the transaction process, illegal transaction is avoided, the security of the transaction is improved, and the electronic money is used for settlement in a cloud terminal, so that management and control of an enterprise on operation expenses are facilitated.

Drawings

The above and other objects, features and advantages of exemplary embodiments of the present invention will become readily apparent from the following detailed description read in conjunction with the accompanying drawings. Several embodiments of the invention are illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings and in which:

FIG. 1 is a schematic block diagram of an example electronic device for implementing methods and apparatus for secure transactions according to embodiments of the present invention;

FIG. 2 is a flow diagram schematically illustrating one exemplary process of a method for secure transactions, according to an embodiment of the invention;

fig. 3 is a block diagram schematically showing the construction of one example of an apparatus for secure transaction according to an embodiment of the present invention;

FIG. 4 is a flow diagram schematically illustrating an exemplary process of a method for secure transactions, according to an embodiment of the invention;

fig. 5 is a block diagram schematically showing the construction of one example of a system for secure transaction according to an embodiment of the present invention;

FIG. 6 is a schematic diagram that schematically illustrates the architecture of a computer, in accordance with an embodiment of the present invention;

fig. 7 is a schematic diagram schematically illustrating a computer-readable storage medium according to an embodiment of the present invention.

In the drawings, the same or corresponding reference numerals indicate the same or corresponding parts.

Detailed Description

The principles and spirit of the present invention will be described with reference to a number of exemplary embodiments. It is understood that these embodiments are given solely for the purpose of enabling those skilled in the art to better understand and to practice the invention, and are not intended to limit the scope of the invention in any way. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

As will be appreciated by one skilled in the art, embodiments of the present invention may be embodied as a system, apparatus, device, method, or computer program product. Accordingly, the present disclosure may be embodied in the form of: entirely hardware, entirely software (including firmware, resident software, micro-code, etc.), or a combination of hardware and software.

In this document, it is to be understood that any number of elements in the figures are provided by way of illustration and not limitation, and any nomenclature is used for differentiation only and not in any limiting sense.

The principles and spirit of the present invention are explained in detail below with reference to several representative embodiments of the invention.

Exemplary electronic device

An example electronic device for implementing the method and apparatus for secure transactions according to embodiments of the present invention is described below with reference to fig. 1.

As shown in FIG. 1, electronic device 100 includes one or more processors 102, one or more memory devices 104, input/output devices 106, and a communication interface 108, which are interconnected via a bus system 110 and/or other form of connection mechanism (not shown). It should be noted that the components and structure of the electronic device 100 shown in fig. 1 are merely exemplary and not limiting, and the electronic device may have other components and structures, or may not include some of the aforementioned components, as desired.

The processor 102 generally represents any type or form of processing unit capable of processing data or interpreting and executing instructions. In general, the processor may be a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), an Application Specific Integrated Circuit (ASIC), a Field Programmable Gate Array (FPGA) or other form of processing unit having data processing capabilities and/or instruction execution capabilities, and may control other components in the electronic device 100 to perform desired functions. For example, the processor 102 can include one or more embedded processors, processor cores, microprocessors, logic circuits, hardware Finite State Machines (FSMs), Digital Signal Processors (DSPs), or a combination thereof. In particular embodiments, processor 102 may receive instructions from a software application or module. The instructions may cause the processor 102 to perform the methods and electronic devices for secure transactions described and/or illustrated herein.

The storage 104 may include one or more computer program products that may include various forms of computer-readable storage media, such as volatile memory and/or non-volatile memory. The volatile memory may include, for example, Random Access Memory (RAM), cache memory (cache), and/or the like. The non-volatile memory may include, for example, Read Only Memory (ROM), hard disk, flash memory, etc. On which one or more computer program instructions may be stored that may be executed by processor 102 to implement client-side functionality (implemented by the processor) and/or other desired functionality in embodiments of the invention described below. Various applications and various data, such as various data used and/or generated by the applications, may also be stored in the computer-readable storage medium.

The input/output device 106 may be a device used by a user to input instructions and output various information to the outside, for example, the input device may include one or more of a keyboard, a mouse, a microphone, a touch screen, and the like. The output devices may include one or more of a display, speakers, and the like.

Communication interface 108 broadly represents any type or form of adapter or communication device capable of facilitating communication between example electronic device 100 and one or more additional devices. For example, the communication interface 108 may facilitate communication between the electronic device 100 and front-end or accessory electronic devices as well as back-end servers or clouds. Examples of communication interface 108 include, but are not limited to, a wired network interface (such as a network interface card), a wireless network interface (such as a wireless network interface card), a modem, and any other suitable interface. In an embodiment, the communication interface 108 provides direct connection to a remote server/remote head end device through direct connection to a network such as the internet. In particular embodiments, communication interface 108 provides direct connection to a remote server/remote head end device through direct connection to a network, such as a private network. Communication interface 108 may also indirectly provide such connection through any other suitable connection.

For example, an example electronic device for implementing the method and apparatus for secure transaction according to the embodiments of the present invention may be implemented as a mobile phone, a tablet, a computer, a server, a cloud, and the like.

Exemplary method

A method for secure transactions according to an exemplary embodiment of the present invention is described below with reference to fig. 2.

An embodiment of the present invention provides a method for secure transaction, where the method is applied to a cloud or a server, and the cloud or the server can communicate with an electronic device or a scanner, and the method includes: receiving electronic equipment position information sent by electronic equipment; receiving scanner position information sent by a scanner; receiving accounting information sent by a scanner, wherein the accounting information comprises position information of a transaction place; confirming whether the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent; if the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent, sending post-trading information to the electronic equipment and the scanner; otherwise, the information of transaction failure is sent to the electronic equipment and the scanner.

Fig. 2 schematically illustrates an exemplary process flow 200 of a method for secure transactions according to an embodiment of the present disclosure.

As shown in fig. 2, after the process flow 200 is started, step S210 is first executed.

In step S210, the electronic device location information sent by the electronic device is received.

The location information of the electronic device may be obtained by a location sensor of the electronic device, such as a GPS sensor, or by network positioning. For example, the electronic device location information transmitted by the electronic device may be received through a wired network or a wireless network.

Further, after receiving the electronic device location information sent by the electronic device in step S210, the method further includes:

Illustratively, the encryption string may be formed using any suitable encryption algorithm. And the encryption strings sent to the electronic equipment each time are different, so that the problem that the same encryption string is easy to crack is solved.

Illustratively, the encrypted string is valid for a set time. For example, the encryption string is valid for 60 seconds, and if after 60 seconds the encryption string is not used, then this is done. It should be understood that the maximum valid time of the encryption string can be set according to specific scenarios, and is not limited to 60 seconds.

As an application example, the electronic device is an electronic device configured/used by a driver, a corresponding program for payment, such as APP or public number, is run on the electronic device, and after the driver logs in a corresponding account, the electronic device can send the electronic device location information to the server through the program for payment. For example, the electronic device calls an interface of a cloud/server side to obtain an encryption string for payment by using a key and electronic device location information (e.g., a current location), and after receiving the electronic device location information sent by the electronic device, the cloud/server side sends the encryption string to the electronic device, so that the electronic device generates a transaction code for the scanner to scan the transaction code to obtain the encryption string.

In step S220, scanner position information transmitted by the scanner is received.

The scanner position information may be obtained by an electronic device connected or communicating with the scanner, the position information may be obtained by a positioning sensor of the electronic device, or by means of a network, or according to a configuration of the electronic device.

Illustratively, the scanner location information transmitted by the scanner may be received through a wired network or a wireless network.

In step S220, when the scanner position information sent by the scanner is received, the method further includes:

receiving the encrypted string sent by the scanner; and

transmitting a billing password to the scanner.

As an application example, the scanner scans a transaction code generated by the electronic device to obtain the encrypted string, then calls a cloud interface to obtain an accounting password with the encrypted string and the scanner location information, and the cloud/server sends the accounting password to the scanner after receiving the encrypted string and the scanner location information sent by the scanner. The billing password is defined according to a preset rule or the billing password of each account can be configured in advance.

In step S230, accounting information sent by the scanner is received, wherein the accounting information includes the place information of the transaction.

Illustratively, the transaction location information, such as a gas station address information, a gas station name, etc.

The billing information also includes information such as transaction items and payment items, for example. As an example, the billing information further includes the number of fuel liters, the electronic money to be paid.

As an application example, after obtaining the billing password, the scanner obtains billing information from the corresponding payment page, where the billing information includes at least the location information of the transaction place, such as the address information of the oil station, and then calls the cloud/server-side billing interface to perform billing with the billing password and the billing information.

In step S240, it is confirmed whether the current location of the electronic device, the current location of the scanner, and the location of the transaction location coincide.

After the cloud receives the position information of the electronic equipment, the position information of the scanner and the position information of the trading place, whether the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent or not is confirmed.

Illustratively, upon receiving the billing information transmitted by the scanner, the method further comprises:

If so, the process proceeds to step S250, otherwise, the process proceeds to step S260.

In step S250, if the current location of the electronic device, the current location of the scanner, and the location of the transaction location are consistent, post-transaction information is sent to the electronic device and the scanner.

The post-transaction information illustratively includes, for example, a payment amount and a transaction item, illustratively, the number of liters in the current fueling and the electronic currency paid.

In step S260, if the current location of the electronic device, the current location of the scanner, and the location of the transaction location are not consistent, information of transaction failure is sent to the electronic device and the scanner.

And when the current position of the electronic equipment, the current position of the scanner and the position of the transaction place are confirmed to be inconsistent, sending information of transaction failure to the electronic equipment and the scanner. Illustratively, for example, an indication that the location is illegal is returned to the electronic device and the scanner, informing the user that the current location of the electronic device, the current location of the scanner, and the location of the transaction location are inconsistent.

Further, according to the method for secure transaction of the present embodiment, after confirming that the current location of the electronic device, the current location of the scanner, and the location of the transaction location coincide, in order to further improve payment security, the method may further include, in order to prevent the electronic money allocated to the electronic device from being used at will or for other purposes:

and verifying the configuration of the electronic equipment, if the verification is passed, settling the transaction of the electronic equipment, otherwise, not settling the current transaction, and entering the step S260, and returning the information of transaction failure.

Illustratively, taking the application of the method for secure transaction of the present embodiment to a fueling scenario as an example, the verifying the configuration of the electronic device includes:

and judging whether the current refueling quantity is reasonable or not according to the last refueling quantity finished by the electronic equipment and the distance between the current refueling position and the last refueling position. For example, the last refueling number of the vehicle corresponding to the electronic device is 50L, the distance between the current refueling position and the last refueling position is 100km, and the distance is determined to be 8L of fuel consumption according to the fuel consumption, so that the vehicle is not required to be refueled at present, the refueling may be for other non-set vehicles, and the vehicle belongs to illegal transactions, so that the current transaction can be judged to be illegal, and the transaction is not settled.

Illustratively, the verifying the configuration of the electronic device includes:

In particular, a maximum number of fuel increments can be allocated to the electronic device, for example, the required fuel consumption can be determined depending on the transport task and the transport distance, so that a corresponding maximum number of fuel increments is set. Or the fuel consumption in the set time is determined according to the running distance of the vehicle in the set time under the ordinary condition, so that the corresponding maximum fueling rise in the set time is determined. When the electronic equipment exceeds the set maximum fueling promotion number within the set time, the electronic equipment can judge that the current fueling is illegal, and can fuel an unconfigured vehicle possibly, so that the transaction is not settled.

It should be understood that the set time may be a task execution time, such as one week, two weeks, or a unit work time, such as 24 hours, 12 hours, etc.

Further, the verification of the configuration of the electronic device includes verifying whether the currently refueled device is consistent with the refueled device bound to the electronic device, if so, allowing settlement, otherwise, returning an indication that the device is illegal.

Illustratively, for example, the electronic device binds to a corresponding fueling device, such as a fueling card, and each account corresponds to a fueling card that can only be used for fueling payment for the electronic device. If the fueling card used by the current equipment payment is inconsistent with the bound fueling card, fueling calculation is not allowed, so that the driver is prevented from giving an account number to other users for use.

For example, the information of the refueling device can be sent to the cloud end or the server end through the electronic device.

According to the method for the safe transaction, whether the position information of the electronic equipment, the scanner and the transaction place is consistent or not can be checked when the transaction or the accounting is confirmed, if the position information of the electronic equipment, the scanner and the transaction place is consistent, the transaction is allowed, otherwise, the transaction is not allowed, so that the electronic equipment, the scanner and the transaction place can be ensured to be located at the same position in the transaction process, illegal transaction is avoided, the security of the transaction is improved, and the electronic money is used for settlement in a cloud terminal, so that management and control of enterprises on operation expenses are facilitated.

Further, the method for secure transaction according to the embodiment of the present invention can also perform verification according to the configuration of the electronic device (the configuration corresponds to the configuration of each driver, for example) at the time of accounting or settlement, and can perform payment settlement only when the verification is passed, thereby preventing the payment account of the electronic device from being used for other illegal purposes, and improving the management and control capability of enterprises on operation expenses.

Exemplary devices

Having described the method for secure transaction according to the exemplary embodiment of the present invention, an apparatus for secure transaction according to the exemplary embodiment of the present invention will be described with reference to fig. 3.

Referring to fig. 3, a schematic diagram of an apparatus 300 for secure transaction according to an embodiment of the present invention is shown, which may be disposed in a server or a cloud. The apparatus 300 of the embodiment of the present invention may include the following constituent elements: a first interface module 310, a second interface module 320, a settlement module 330, and an information return module 340.

The apparatus 300 for secure transaction disclosed in the present embodiment can communicate with a first electronic device 301 and a second electronic device 302, and the apparatus 300 for secure transaction, the first electronic device 301 and the second electronic device 302 can be implemented as the exemplary electronic devices shown in fig. 1. As an example, the first electronic device 301 is configured for a driver's end, such as a cell phone, tablet, etc.; the second electronic device 302 is configured for a fuel filler, such as a computing device like a mobile phone, a tablet, or a computer, and the second electronic device 302 has a code scanning capability (e.g. scanning a code by a camera) or is connected with a scanner, such as a code scanning gun.

The first interface module 310 may be implemented as various communication interfaces. The first interface module 310 is configured to receive electronic device location information from the first electronic device 301, and send an encrypted string for payment to the first electronic device 301, where the encrypted string is used for the first electronic device 301 to generate a transaction code, so that the second electronic device 302 scans the transaction code through a scanner to obtain the encrypted string.

Illustratively, the encryption string sent to the electronic device each time is different, and the encryption string is valid for a set time.

The first interface module 310 may be implemented as a communication interface of the electronic device shown in fig. 1 and is used to perform step S210 of the method for secure transaction shown in fig. 2.

The second interface module 320 is configured to receive the scanner location information and billing information from the second electronic device 302, the billing information including the venue location information.

Illustratively, the second interface module 320 is further configured to receive the encrypted string from the second electronic device 302 upon receiving the scanner location information; and upon receiving the scanner location information and the encrypted string, sends a billing password to the second electronic device 302.

Illustratively, the second interface module 320 is further configured to receive the billing password when receiving the billing information sent by the scanner. As one example, the second electronic device 302 invokes the billing interface with the billing password and the billing information to obtain the billing password and the billing information for the apparatus 300 for the secure transaction.

Illustratively, the billing information also includes the number of fuel increments, the electronic currency to be paid.

The second interface module 320 may be implemented as a communication interface of the electronic device shown in fig. 1 and is used to perform steps S220 to S230 of the method for secure transaction shown in fig. 2.

The settlement module 330 is used to confirm whether the current location of the first electronic device 301, the current location of the scanner (i.e., the current location of the second electronic device 302), and the location of the transaction location are consistent.

In this embodiment, the settlement module 330 is further configured to verify the configuration of the first electronic device 301 after confirming that the current location of the first electronic device 301, the current location of the scanner, and the location of the transaction location are consistent; and settling the transaction of the first electronic device 301 if the verification is passed.

Illustratively, verifying the configuration of the first electronic device 301 comprises: and judging whether the current refueling amount is reasonable or not according to the last refueling amount finished by the first electronic equipment 301 and the distance between the current refueling position and the last refueling position.

Illustratively, verifying the configuration of the first electronic device 301 comprises: and confirming whether the number of fueling rises within the set time of the first electronic device 301 exceeds the set fueling threshold of the electronic device.

Illustratively, verifying the configuration of the first electronic device 301 comprises verifying that a currently refueled device is consistent with a refueled device to which the first electronic device 301 is bound; if so, settlement is allowed, otherwise, an indication that the device is illegal is returned.

Information of the refuelling device may be received from the first electronic device 301 via the first interface module 310. Illustratively, the fueling device is bound to the first electronic device 301, for example, a fueling card, and the like, and each account corresponds to a fueling card, which can only be used for fueling payment of the first electronic device 301. If the fueling card used for payment of the first electronic device 301 is not consistent with the bound fueling card, fueling calculation is not allowed, so that the driver is prevented from giving an account number to other users for use.

The settlement module 330 may be implemented by a processor of the electronic device shown in fig. 1 executing a corresponding program and implementing step S240 of the method for secure transaction shown in fig. 2.

The information returning module 340 is configured to send post-transaction information to the first electronic device 301 and the second electronic device 302 when the current location of the first electronic device 301, the current location of the scanner, and the location of the transaction location are consistent, and send information that the transaction has failed to the first electronic device 301 and the second electronic device 302 when the current location of the first electronic device 301, the current location of the scanner, and the location of the transaction location are inconsistent. The information returning module 340 is implemented by a processor of the electronic device shown in fig. 1 executing a corresponding program, and implements steps S250 to S260 of the method for secure transaction shown in fig. 2.

According to the device for the safe transaction, whether the position information of the electronic equipment, the scanner and the transaction place is consistent or not can be checked when the transaction is confirmed or booked, if the position information of the electronic equipment, the scanner and the transaction place is consistent, the transaction is allowed, otherwise, the transaction is not allowed, so that the electronic equipment, the scanner and the transaction place can be ensured to be located at the same position in the transaction process, illegal transaction is avoided, the security of the transaction is improved, and the electronic money is used for settlement in a cloud terminal, so that management and control of enterprises on operation expenses are facilitated.

Further, the device for secure transaction according to the embodiment of the present invention can perform verification according to the configuration of the electronic device (the configuration corresponds to the configuration of each driver, for example) at the time of accounting or settlement, and can perform payment settlement only when the verification is passed, thereby preventing the payment account of the electronic device from being used for other illegal purposes, and improving the management and control capability of enterprises on operation expenses.

Exemplary method

A method for secure transactions according to an exemplary embodiment of the present invention is described below with reference to fig. 4.

The embodiment of the invention provides a method for secure transaction, which is applied to a payment system comprising an electronic device, a scanner and a cloud end, and comprises the following steps: the electronic device sends electronic device location information to the cloud to obtain an encryption string for payment from the cloud and generate a transaction code including the encryption string; the scanner scans the transaction code to obtain the encryption string and sends the encryption string and scanner position information to the cloud end to obtain an accounting password from the cloud end; the scanner sends accounting information and the accounting password to the cloud after obtaining the accounting password, wherein the accounting information comprises position information of a transaction place; after receiving the accounting information and the accounting password sent by the scanner, the cloud end confirms whether the current position of the electronic equipment, the current position of the scanner and the position of the transaction place are consistent; if the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent, sending post-trading information to the electronic equipment and the scanner; otherwise, the information of transaction failure is sent to the electronic equipment and the scanner.

Fig. 4 schematically illustrates an exemplary process flow 400 of a method for secure transactions according to an embodiment of the present disclosure.

As shown in fig. 4, the process flow 400 begins and step S410 is executed first.

In step S410, the electronic device sends electronic device location information to the cloud to obtain an encryption string for payment from the cloud, and generates a transaction code including the encryption string.

For example, the encryption string sent by the cloud to the electronic device each time is different, and the encryption string is valid for a set time. The set time may be a work task corresponding to the electronic device, for example, an execution time of a transportation task, and may be a unit work time, for example, 24 hours or 12 hours.

In step S420, the scanner scans the transaction code to obtain the encryption string, and sends the encryption string and scanner location information to the cloud to obtain an accounting password from the cloud.

Illustratively, the scanner is connected to an electronic device or computer, which is capable of communicating with a cloud. Or the scanner is a camera module of the electronic device or the computer.

The scanner position information may be obtained by an electronic device connected to the scanner.

As an example, an electronic device connected to the scanner or an electronic device equipped with the scanner scans the transaction code to obtain the encrypted string, and invokes a cloud interface with the encrypted string and the scanner location information to obtain a billing password from the cloud.

In step S430, the scanner sends billing information and the billing password to the cloud after obtaining the billing password, where the billing information includes location information of the transaction place.

As an example, after obtaining the billing password, the electronic device connected to the scanner or the electronic device equipped with the scanner calls a cloud billing interface together with the billing information, so as to send the billing information and the billing password to a cloud for billing.

Illustratively, the information of the transaction place is address information of a gas station, for example. Illustratively, the billing information also includes the number of fuel increments, the electronic currency to be paid.

In step S440, after receiving the billing information and the billing password sent by the scanner, the cloud determines whether the current location of the electronic device, the current location of the scanner, and the location of the transaction location are consistent.

Specifically, the cloud determines the current location of the electronic device, the current location of the scanner, and the location of the transaction location through the electronic device location information, the scanner location information, and the transaction location information obtained in steps S410-S430, and then checks whether the current location of the electronic device, the current location of the scanner, and the location of the transaction location are consistent. If so, the process proceeds to step S450, otherwise, the process proceeds to step S460.

In step S450, the cloud sends post-transaction information to the electronic device and the scanner.

In step S460, the cloud sends the transaction failure information to the electronic device and the scanner.

Illustratively, for example, an indication that the location is illegal is returned to the electronic device and the scanner, informing the user that the current location of the electronic device, the current location of the scanner, and the location of the transaction location are inconsistent.

Further, in this embodiment, after confirming that the current location of the electronic device, the current location of the scanner, and the location of the trading place are consistent, the method further includes:

the cloud end verifies the configuration of the electronic equipment;

and if the verification is passed, settling the transaction of the electronic device. Otherwise, the process goes to step S260 to return the information of the transaction failure.

the cloud verifies whether the currently refueled equipment is consistent with the refueled equipment bound with the electronic equipment; if so, settlement is allowed, otherwise, an indication that the device is illegal is returned.

Exemplary System

Having described the method for secure transaction according to the exemplary embodiment of the present invention, next, a system for secure transaction according to the exemplary embodiment of the present invention will be described with reference to fig. 5.

Referring to fig. 5, a schematic block diagram of a system 500 for secure transactions is schematically shown, according to an embodiment of the present invention.

As shown in fig. 5, the system 500 for secure transaction disclosed in this embodiment includes a first electronic device 510, a second electronic device 520, and a cloud 530.

Illustratively, the first electronic device 510 is configured for a driver's end, such as a mobile phone, tablet, etc.; the second electronic device 520 is configured for a fuel filler, such as a computing device of a mobile phone, a tablet, or a computer, and the second electronic device 520 has a code scanning capability (e.g., scanning a code by a camera) or is connected with a scanner, such as a code scanning gun.

First electronic device 510, second electronic device 520, and cloud 530 may implement the electronic devices shown in fig. 1 or the computing devices shown in fig. 6.

The first electronic device 510 is configured to send first electronic device location information to the cloud 530, to obtain an encryption string for payment from the cloud 530, and to generate a transaction code including the encryption string.

For example, the first electronic device 510 may call an interface of the cloud 530 through the key and the first electronic device location information, so as to send the first electronic device location information to the cloud 530, obtain an encryption string for payment from the cloud 530, render the encryption string into a transaction code on the page side, and wait for the scanned-code device to recognize the encrypted encryption string.

Illustratively, the encryption string sent by the cloud 530 to the first electronic device 510 each time is different, and the encryption string is valid for a set time. For example, the encrypted string is valid for a maximum validity time, for example, 60 seconds.

The second electronic device 520 is configured to scan the transaction code through the scanner to obtain the encrypted string, and send the encrypted string and the scanner location information to the cloud 530 to obtain a billing password from the cloud.

Illustratively, the second electronic device 520 scans the transaction code generated by the first electronic device 510 through a scanner connected thereto or its own camera module, thereby obtaining an encrypted string, and then calls a cloud interface through the encrypted string and the second electronic device location information (i.e., scanner location information), thereby sending the encrypted string and the scanner location information to the cloud 530, and obtaining a billing password from the cloud 530.

The second electronic device 520 is further configured to send accounting information and the accounting password to the cloud 530 after obtaining the accounting password, where the accounting information includes location information of a transaction place.

Illustratively, the second electronic device 520 calls a cloud checkout interface through the billing password and the billing information, so as to send the billing information and the billing password to the cloud 530 for billing.

The cloud 530 is configured to confirm whether the current location of the first electronic device 510, the current location of the scanner, and the location of the transaction location are consistent after receiving the billing information and the billing password sent by the second electronic device 520; if the current position of the first electronic device 510, the current position of the scanner, and the position of the transaction location are consistent, sending post-transaction information to the first electronic device 510 and the second electronic device 520; otherwise, the information of the transaction failure is sent to the first electronic device 510 and the second electronic device 520.

Illustratively, if the current location of the first electronic device 510, the current location of the scanner, and the location of the transaction location are not consistent, an indication of location violation is returned to the first electronic device 510 and the second electronic device 520, and the user is informed that the current location of the electronic device, the current location of the scanner, and the location of the transaction location are not consistent.

Further, in this embodiment, after confirming that the current location of the first electronic device 510, the current location of the scanner, and the location of the transaction location are consistent, the cloud 530 is further configured to: verifying the configuration of the first electronic device 510; and settling the transaction of the electronic device if the verification is passed.

Illustratively, verifying the configuration of the first electronic device 510 includes:

the cloud 530 determines whether the current fueling amount is reasonable according to the last fueling increment completed by the first electronic device 510 and the distance between the current fueling position and the last fueling position.

the cloud 530 confirms whether the number of fueling increases within the time set by the first electronic device 510 exceeds the set fueling threshold of the electronic device.

the cloud 530 verifies whether the currently-refueled device is consistent with the refueled device bound to the first electronic device 510;

FIG. 6 illustrates a block diagram of an exemplary computer system/server 600 suitable for use in implementing embodiments of the present invention. The computer system/server 600 shown in FIG. 6 is only an example and should not be taken to limit the scope of use and functionality of embodiments of the present invention.

As shown in fig. 6, computer system/server 600 is in the form of a general purpose computing device. The components of computer system/server 600 may include, but are not limited to: one or more processors or processing units 601, a system memory 602, and a bus 603 that couples various system components including the system memory 602 and the processing unit 601.

Computer system/server 600 typically includes a variety of computer system readable media. Such media may be any available media that is accessible by computer system/server 600 and includes both volatile and nonvolatile media, removable and non-removable media.

The system memory 602 may include computer system readable media in the form of volatile memory, such as Random Access Memory (RAM)6021 and/or cache memory 6022. The computer system/server 600 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, ROM3023 may be used to read from and write to non-removable, nonvolatile magnetic media (not shown in FIG. 6, and commonly referred to as a "hard disk drive"). Although not shown in FIG. 6, a magnetic disk drive for reading from and writing to a removable, nonvolatile magnetic disk (e.g., a "floppy disk") and an optical disk drive for reading from or writing to a removable, nonvolatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to the bus 603 by one or more data media interfaces. At least one program product may be included in system memory 602 with a set (e.g., at least one) of program modules configured to perform the functions of embodiments of the present invention.

A program/utility 6025 having a set (at least one) of program modules 6024 may be stored, for example, in the system memory 602, and such program modules 6024 include, but are not limited to: an operating system, one or more application programs, other program modules, and program data, each of which, or some combination thereof, may comprise an implementation of a network environment. Program modules 6024 generally carry out the functions and/or methodologies of embodiments of the invention as described herein.

The computer system/server 600 may also communicate with one or more external devices 604, such as a keyboard, pointing device, display, etc. Such communication may occur via input/output (I/O) interfaces 605. Also, the computer system/server 600 may communicate with one or more networks (e.g., a Local Area Network (LAN), a Wide Area Network (WAN), and/or a public network, such as the internet) via a network adapter 606. As shown in FIG. 6, network adapter 606 communicates with other modules (e.g., processing unit 601, etc.) of computer system/server 600 via bus 603. It should be appreciated that although not shown in FIG. 3, other hardware and/or software modules may be used in conjunction with computer system/server 600.

The processing unit (or processor) 601 executes various functional applications and data processing, e.g., performs and implements steps of a method for secure transactions, by running programs stored in the system memory 602.

A specific example of a computer-readable storage medium embodying the present invention is shown in fig. 7.

The computer-readable storage medium of fig. 7 is an optical disc 700, on which a computer program (i.e., a program product) is stored, and when the program is executed by a processor, the computer program implements the steps described in the above method embodiments, for example, receives electronic device location information sent by an electronic device; receiving scanner position information sent by a scanner; receiving accounting information sent by a scanner, wherein the accounting information comprises position information of a transaction place; confirming whether the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent; if the current position of the electronic equipment, the current position of the scanner and the position of the trading place are consistent, sending post-trading information to the electronic equipment and the scanner; otherwise, sending the information of transaction failure to the electronic equipment and the scanner; the specific implementation of each step is not repeated here.

It should be noted that although several modules for secure transaction devices are mentioned in the above detailed description, such division is merely exemplary and not mandatory. Indeed, the features and functionality of two or more of the modules described above may be embodied in one module according to embodiments of the invention. Conversely, the features and functions of one module described above may be further divided into embodiments by a plurality of modules.

Moreover, while the operations of the method of the invention are depicted in the drawings in a particular order, this does not require or imply that the operations must be performed in this particular order, or that all of the illustrated operations must be performed, to achieve desirable results. Additionally or alternatively, certain steps may be omitted, multiple steps combined into one step execution, and/or one step broken down into multiple step executions.

While the spirit and principles of the invention have been described with reference to several particular embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, nor is the division of aspects, which is for convenience only as the features in such aspects may not be combined to benefit. The invention is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims.

In summary, in the embodiments according to the present disclosure, the present disclosure provides the following solutions, but is not limited thereto:

scheme 1. a method for secure transaction, the method is applied to a cloud or a server, the cloud or the server can communicate with an electronic device or a scanner, and the method comprises:

receiving scanner position information sent by a scanner;

Scheme 2. the method according to scheme 1, characterized in that after receiving the electronic device location information sent by the electronic device, the method further comprises:

Scheme 3. the method of scheme 2, wherein the encryption string sent to the electronic device each time is different.

Scheme 4. the method of scheme 2, characterized in that, the encryption string is valid for a set time.

Scheme 5. the method according to any of schemes 2-4, characterized in that, when receiving the scanner position information sent by the scanner, the method further comprises:

receiving the encrypted string sent by the scanner; and

transmitting a billing password to the scanner.

Scheme 6. the method according to scheme 5, wherein upon receiving the billing information sent by the scanner, the method further comprises:

Scheme 7. the method of scheme 1, wherein the billing information further comprises the number of fuel liters, electronic money to be paid.

Scheme 8. the method according to any of schemes 1-4, further comprising, after confirming that the current location of the electronic device, the current location of the scanner, and the location of the venue are consistent:

verifying a configuration of the electronic device;

The method of claim 9, wherein verifying the configuration of the electronic device comprises:

The method of claim 8, wherein verifying the configuration of the electronic device comprises:

and confirming whether the oiling increasing number of the electronic equipment within 24 hours exceeds a set oiling threshold value of the electronic equipment.

The method of claim 8, further comprising:

receiving information of the refueling equipment;

The scheme 12 is a method for secure transaction, which is applied to a payment system comprising an electronic device, a scanner and a cloud end, and is characterized in that the method comprises the following steps:

Scheme 13. the method according to scheme 12, wherein the encryption string sent by the cloud to the electronic device each time is different.

Scheme 14. the method of claim 13, wherein the encrypted string is valid for a set time.

Scheme 15. the method of scheme 12, wherein the billing information further comprises the number of fuel liters, electronic money to be paid.

Scheme 16. the method of any of schemes 12-15, further comprising, after confirming that the current location of the electronic device, the current location of the scanner, and the location of the venue are consistent:

the cloud end verifies the configuration of the electronic equipment;

The method of claim 16, wherein verifying the configuration of the electronic device comprises:

and the cloud confirms whether the oiling rise number of the electronic equipment within 24 hours exceeds a set oiling threshold value of the electronic equipment.

The method of claim 16, further comprising:

the verifying the configuration of the electronic device comprises:

The scheme 20 is an apparatus for secure transaction, the apparatus is applied to a cloud end or a server end, and the apparatus is characterized by comprising:

Scheme 21, the apparatus according to scheme 20, wherein the first interface module is further configured to send, to the electronic device, an encrypted string for payment after receiving the electronic device location information sent by the electronic device, where the encrypted string is used for the electronic device to generate a transaction code, so that the scanner scans the transaction code to obtain the encrypted string.

Scheme 22. the apparatus of claim 21, wherein the encryption string sent to the electronic device each time is different.

Scheme 23. the apparatus of claim 21, wherein the encrypted string is valid for a set time.

Scheme 24. the apparatus according to any of schemes 21-23, wherein the second interface module is further configured to receive the encrypted string sent by the scanner when receiving scanner location information sent by the scanner; and transmitting a billing password to the scanner.

An apparatus according to claim 24, wherein the second interface module is further configured to receive the billing password from the scanner when receiving the billing information from the scanner, and the settlement module confirms whether the current location of the electronic device, the current location of the scanner, and the location of the transaction location are consistent when receiving the billing information and the billing password.

Scheme 26. the apparatus of claim 20, wherein the billing information further comprises the number of liters filled, electronic money to be paid.

Scheme 27. the apparatus of any of schemes 20-23, wherein the settlement module, after confirming that the current location of the electronic device, the current location of the scanner, and the location of the transaction location are consistent, is further configured to:

verifying a configuration of the electronic device;

The apparatus of claim 28, wherein the verification of the configuration of the electronic device by the settlement module comprises:

The apparatus of claim 29, wherein the verification of the configuration of the electronic device by the settlement module comprises:

The apparatus of claim 27, wherein the first and second electrodes are electrically connected to each other,

Scheme 31. a system for secure transactions, the system comprising an electronic device, a scanner, and a cloud, wherein,

Scheme 32. the system of scheme 31, wherein the encryption string sent by the cloud to the electronic device each time is different.

Scheme 33. the system of scheme 32, wherein the encryption string is valid for a set time.

Scheme 34. the system of scheme 31, wherein the billing information further comprises the number of fuel increments, the electronic currency to be paid.

Scheme 35. the system of any of schemes 31-34, wherein the cloud, after confirming that the current location of the electronic device, the current location of the scanner, and the location of the transaction location are consistent, is further configured to:

verifying a configuration of the electronic device;

The system of claim 36, wherein the verification of the configuration of the electronic device by the cloud comprises:

Scheme 37. the system of scheme 35, wherein the verifying the configuration of the electronic device by the cloud end comprises:

Scheme 38. the system of scheme 16, wherein,

Arrangement 39. an apparatus for secure transactions, characterized in that the device for secure transactions comprises a storage means and a processor, the storage means having stored thereon a computer program to be run by the processor, the computer program, when run by the processor, performing the method according to any of claims 1-19.

Scheme 40. a storage medium, characterized in that the storage medium has stored thereon a computer program which, when executed, performs the method according to any one of claims 1-19.

Scheme 41. a computing device comprising a storage medium as in scheme 40.

Claims

1. A method for secure transaction, the method being applied to a cloud or a server, the cloud or the server being capable of communicating with an electronic device or a scanner, the method comprising:

receiving scanner position information sent by a scanner;

2. The method of claim 1, wherein after receiving the electronic device location information sent by the electronic device, the method further comprises:

3. A method for secure transaction, the method being applied to a payment system comprising an electronic device, a scanner and a cloud, the method comprising:

4. The method of claim 3, wherein the encryption string sent by the cloud to the electronic device each time is different.

5. A device for secure transaction, the device is applied to a cloud end or a server end, and is characterized by comprising:

6. The apparatus of claim 5, wherein the first interface module is further configured to send an encryption string for payment to an electronic device after receiving electronic device location information sent by the electronic device, the encryption string being used for the electronic device to generate a transaction code for the scanner to scan the transaction code to obtain the encryption string.

7. A system for secure transactions, the system comprising an electronic device, a scanner and a cloud, characterized in that,

8. The system of claim 7, wherein the encryption string sent by the cloud to the electronic device each time is different.

9. An arrangement for a secure transaction, characterized in that the device for a secure transaction comprises a storage means and a processor, the storage means having stored thereon a computer program to be run by the processor, the computer program, when run by the processor, performing the method according to any of claims 1-4.

10. A storage medium, characterized in that the storage medium has stored thereon a computer program which, when executed, performs the method according to any one of claims 1-4.