CN111461703B - Payment order checking method, payment order checking equipment, activation method thereof and transaction server - Google Patents

Payment order checking method, payment order checking equipment, activation method thereof and transaction server Download PDF

Info

Publication number
CN111461703B
CN111461703B CN202010243108.9A CN202010243108A CN111461703B CN 111461703 B CN111461703 B CN 111461703B CN 202010243108 A CN202010243108 A CN 202010243108A CN 111461703 B CN111461703 B CN 111461703B
Authority
CN
China
Prior art keywords
payment order
verification
payee
code
payment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202010243108.9A
Other languages
Chinese (zh)
Other versions
CN111461703A (en
Inventor
李佳佳
张垒垒
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
AlipayCom Co ltd
Original Assignee
Alipay Hangzhou Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alipay Hangzhou Information Technology Co Ltd filed Critical Alipay Hangzhou Information Technology Co Ltd
Priority to CN202010243108.9A priority Critical patent/CN111461703B/en
Publication of CN111461703A publication Critical patent/CN111461703A/en
Priority to PCT/CN2020/142559 priority patent/WO2021196807A1/en
Application granted granted Critical
Publication of CN111461703B publication Critical patent/CN111461703B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327Short range or proximity payments by means of M-devices
    • G06Q20/3276Short range or proximity payments by means of M-devices using a pictured code, e.g. barcode or QR-code, being read by the M-device
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification

Abstract

The specification discloses a payment order verification method, a payment order verification device, an activation method thereof and a transaction server. The payment order verification method comprises the following steps: scanning a payment order verification code on a payment success interface of a payer terminal by using payment order verification equipment, wherein the payment order verification code comprises payment order information of a payer to an appointed payee; the payment order checking equipment carries out off-line checking on the payment order checking code; and the payment order checking equipment outputs the checking result, thereby effectively preventing the phenomenon of order escaping.

Description

Payment order checking method, payment order checking equipment, activation method thereof and transaction server
Technical Field
The present disclosure relates to the field of payment technologies, and in particular, to a payment order verification method, a payment order verification device, an activation method thereof, and a transaction server.
Background
At present, the cash register code sticker is taken as a mainstream offline transaction mode of society, and a large amount of transactions are generated every day. However, the checking means of the payment result is single and original, and after the payer successfully pays, the payer presents a payment result page on the mobile phone to the payee to manually check the payment result page as a final certificate. However, the manual checking method requires a large amount of effort of the payee, and is prone to error and leakage, especially in a scene or a time period of high-frequency transaction, the phenomenon of order escape is prone to occur. Meanwhile, some lawbreakers who produce in black and have a malicious order escape use the forged payment result page, so that the payee suffers from loss under the unknowing condition and the normal transaction order of the market is damaged. Therefore, it is difficult for this manual viewing method to identify and protect against malicious page fleeing from forgery.
At present, some payee parties can buy the voice broadcast box in order to prevent the order evasion action, and after the transaction is successful, the voice broadcast box can automatically broadcast the transaction amount. However, the method has long broadcasting time, the transaction and the broadcasting are asynchronous, the corresponding relation between one-time broadcasting and the transaction cannot be confirmed, and the method cannot be used in a high-frequency transaction scene or time interval. Moreover, the voice broadcast box needs to be connected with the Internet, and a plurality of long-tail payees do not have network environments and cannot use the box. In addition, the voice broadcast box is relatively high in cost.
Disclosure of Invention
Embodiments of the present disclosure provide a payment order verification method, a payment order verification device, an activation method thereof, and a transaction server, so as to prevent an order escaping phenomenon.
One aspect of embodiments of the present specification provides a payment order verification method. The method comprises the following steps: after the payment request sent by scanning the collection code of the appointed collection party is paid successfully by the payment party terminal, generating a payment order verification code based on the payment order information of the payment party; and providing the payment order verification code on a payment success interface of the payer terminal for code scanning verification of payment order verification equipment.
Another aspect of embodiments of the present specification provides a transaction server including a memory and a processor. The memory stores a computer program that, when executed by the processor, implements the payment order validation method described above.
Another aspect of embodiments of the present specification provides a payment order validation method. The method comprises the following steps: scanning a payment order verification code on a payment success interface of a payer terminal by using payment order verification equipment, wherein the payment order verification code comprises payment order information of a payer to an appointed payee; the payment order checking equipment carries out off-line checking on the payment order checking code; and the payment order checking equipment outputs a checking result.
Another aspect of embodiments of the present specification provides a method for activating a payment order validation device, the method including: a payee terminal scans an equipment information code on payment order checking equipment, wherein the equipment information code comprises equipment information of the payment order checking equipment; the payee terminal uploads the device information code to a transaction server, and a payee certificate signed by using an activation key of the payment order verification device is obtained from the transaction server; and the payee terminal encodes the payee certificate signed by the activation key into a certificate graphic code for code scanning activation of the payment order verification equipment.
Yet another aspect of embodiments of the present specification provides a payment order validation apparatus. The payment order checking equipment comprises an image acquisition unit, a main control unit, a storage unit and an output unit. The image acquisition unit is used for acquiring a payment order form verification code on a payment success interface of a payer terminal, wherein the payment order form verification code comprises payment order form information of a payer to an appointed payee and signature information signed by a payee secret key of the appointed payee. The storage unit stores a payee certificate of the designated payee. The main control unit is used for performing off-line verification on the payment order verification code and comprises a graphic code identification module, a signature verification algorithm module and a control module. The graphic code identification module is used for identifying the payment order verification code and acquiring the signature information. The signature and signature verification algorithm module is used for verifying the signature information by using the payee certificate stored in the storage unit. The control module is used for controlling the output unit to output a signature verification success signal when the signature verification is successful; and when the signature verification fails, controlling the output unit to output a signature verification alarm signal.
One or more embodiments of the present disclosure may effectively avoid the occurrence of the escape ticket phenomenon.
One or more embodiments of the specification can realize off-line verification, manual confirmation is not needed, the energy of a payee is saved, and mistakes are not easy to make.
One or more embodiments of the present disclosure may achieve fast verification, no waiting for high frequency transactions, simple operation, and low usage threshold.
One or more embodiments of the present disclosure have the advantages of low cost, convenient use, etc.
Drawings
Fig. 1 is a production scenario diagram of a payment order validation apparatus according to an embodiment of the present disclosure;
FIG. 2 is a diagram illustrating an activation scenario of a payment order validation device according to an embodiment of the present disclosure;
FIG. 3 is a diagram illustrating a usage scenario of a payment order validation device according to an embodiment of the present disclosure;
FIG. 4 is a step of a transaction server generating a payment order verification code according to one embodiment of the present description;
FIG. 5 illustrates the steps of an off-line checkmark for a payment order validation device in accordance with one embodiment of the present disclosure;
FIG. 6 is a block diagram illustrating an exemplary configuration of a payment order validation device in accordance with one embodiment of the present disclosure;
fig. 7 is a schematic block diagram of a transaction server according to an embodiment of the present specification.
Detailed Description
Some exemplary embodiments will now be described. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the illustrated embodiments do not represent all embodiments consistent with this description. Rather, they are merely examples of apparatus consistent with certain aspects of the present description, as defined in the appended claims.
The terminology used in the description of the embodiments is for the purpose of describing particular embodiments only and is not intended to be limiting of the description. Unless otherwise defined, technical or scientific terms used in the embodiments of the present specification should have the ordinary meaning as understood by those having ordinary skill in the art to which the present specification pertains. As used in this specification and the appended claims, the terms "first," "second," and the like do not denote any order, quantity, or importance, but rather are used to distinguish one element from another. Also, the use of the terms "a" or "an" and the like do not denote a limitation of quantity, but rather denote the presence of at least one. "plurality" or "a number" means two or more. Unless otherwise indicated, the terms "front," "rear," "lower," and/or "upper," and the like are used for convenience in describing relative positional relationships and are not limited to an absolute position or an absolute spatial orientation. The word "comprising" or "comprises", and the like, means that the element or item listed as preceding "comprising" or "includes" covers the element or item listed as following "comprising" or "includes" and its equivalents, and does not exclude other elements or items. The terms "connected" or "coupled" and the like are not restricted to physical or mechanical connections, but may include electrical connections, whether direct or indirect. As used in this specification and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein refers to and encompasses any and all possible combinations of one or more of the associated listed items.
One embodiment of the present specification provides a payment order verification apparatus that can operate off-line and can be used by many small merchants or mobile vendors without a network environment to prevent the escape phenomenon.
First, four terms mentioned below in the present specification are explained:
an "activation certificate" (i.e., an activation public key) refers to a certificate generated by the transaction server at the time of production for each payment order verification device. The activation certificate has a one-to-one relationship with the payment order verification device for verifying the activation key protected payee certificate.
An "activation key" (i.e., an activation private key) refers to the private key to which the activation certificate corresponds. When the payment order verification equipment is activated, the activation key is used for signing the payee certificate, and only the payee certificate of the transaction server can be written into the payment order verification equipment.
"payee certificate" (i.e., payee public key) refers to the certificate that the transaction server generates for each payee account when activated. The payee certificate has a one-to-one relationship with the payee account for verifying transaction information secured by the payee key.
The "payee key" (i.e., the payee private key) refers to the private key to which the payee certificate corresponds. When the transaction is verified, the payee secret key is used for signing data such as transaction information, and the like, so that the transaction can be verified only by the payment order verification equipment of the corresponding payee, and the transaction information cannot be tampered.
Fig. 1 discloses a production scenario diagram of a payment order verification device according to an embodiment of the present disclosure. As shown in fig. 1, during the production of the payment order verification device, in step 11, the factory line generates unique device information, such as device ID, for each payment order verification device.
In step 12, the factory production line requests the transaction server to issue an activation certificate request corresponding to the payment order checking device according to the unique device information.
In step 13, the transaction server receives the request and records the device information of the payment order verification device.
In step 14, the transaction server issues a corresponding activation certificate to the factory production line.
In step 15, the factory production line writes the activation certificate to the payment order verification device.
In step 16, the factory production line prints the generated device information unique to the payment order verification device as a device information code. The equipment information code comprises unique equipment information of the payment order checking equipment. The device information code may include, but is not limited to, any one of two-dimensional codes, bar codes, and other graphic codes, and in the illustration of the present specification, is shown in the form of a two-dimensional code.
In step 17, a device information code is provided to the payment order verification device. For example, the device information code may be affixed to the housing of the payment order validation device or printed directly in the specification of the payment order validation device.
The payment order verification equipment can be bound and activated by a merchant (called a payee) after purchase by using a mobile phone application code scanning mode, or a merchant account (called a payee account) which is expected to be associated can be designated during purchase, and the merchant is delivered to the merchant after background binding activation of the system.
Fig. 2 discloses an activation scenario of the payment order verification apparatus according to an embodiment of the present disclosure. After the payee purchases a payment order verification device, the payment order verification device needs to be bound and activated with the payee. As shown in fig. 2, in step 21, the payee terminal (e.g., a merchant mobile phone) collects a device information code by scanning the device information code on the payment order verification device, where the device information code includes device information of the payment order verification device.
In step 22, the payee terminal uploads the device information code to the transaction server.
In step 23 the transaction server generates a payee certificate for the specified payee.
In step 24, the transaction server stores the device information of the payment order verification device in advance, and the transaction server uses the activation key of the payment order verification device to sign the payee certificate.
In step 25, the payee terminal obtains from the transaction server a payee certificate signed with the activation key of the payment order verification device.
In step 26, the payee terminal encodes the payee certificate signed by the activation key of the payment order verification device into a certificate graphic code and presents the certificate graphic code on the payee terminal for code scanning activation of the payment order verification device. The certificate graphic code can include any one form of graphic code such as, but not limited to, a two-dimensional code, a bar code, and the like.
In step 27, the payment order validation device is used to scan the certificate graphic code on the designated payee terminal, which is collected by the payment order validation device. The certificate graphic code is encoded by a payee certificate signed with an activation key of the payment order verification device obtained from the transaction server.
In step 28, the payment order validation device verifies the payee certificate signed by the activation key using a preset activation certificate associated with the device information of the payment order validation device.
At step 29, the payment order validation device saves the payee certificate locally upon the pass of the check.
After the payment order checking device is bound and activated with the merchant, the payment order checking device can be used as a device of the merchant.
One or more embodiments of the present specification also provide a payment order verification method. Fig. 3 discloses a usage scenario diagram of the payment order verification apparatus according to an embodiment of the present specification. The flow of the payment order verification method according to one or more embodiments of the present disclosure will be described in detail below with reference to fig. 3.
As shown in fig. 3, in step 31, the payer terminal (e.g., a consumer's mobile phone) sends a payment request for the transaction to the transaction server by scanning the static checkout code for the designated payee.
In step 32, the transaction server receives the payment request, performs payment processing, and successfully completes the payment.
In step 33, upon successful payment, the transaction server generates a payment order verification code based on the payer's payment order information. The payment order verification code may include, but is not limited to, any one of two-dimensional codes, bar codes and other graphic codes, and in the embodiment of the present specification, the payment order verification code is presented in the form of a two-dimensional code.
In step 34, the transaction server provides the payment order verification code on the payment success interface of the payer terminal for code scanning verification by the payment order verification device.
In one embodiment of the present specification, the generating of the payment order verification code based on the payment order information of the payer in step 33 and the providing of the payment success interface to the payer terminal in step 34 may include: upon successful payment at step 32, the transaction server may automatically generate and provide the payment order validation code directly on the payment success interface of the payer terminal.
In other embodiments of the present disclosure, step 35 and step 36 may be further included before step 33 and step 34. In step 35, upon successful payment, the transaction server provides a verification button on the payment success interface of the payer terminal. In step 36, the transaction server receives a message from the payer to click the verification button. Upon receiving the message that the payer clicks the verification button, the transaction server proceeds to step 33 and step 34, generates a payment order verification code and provides it on the payment success interface of the payer terminal.
Fig. 4 discloses a flow chart of the transaction server generating the payment order check code according to one embodiment of the present specification. How the transaction server generates the payment order verification code will be described in detail below in conjunction with fig. 4. Generating a payment order verification code for one embodiment of the present description may include steps 331 through 333.
As shown in fig. 4, the transaction server generates a payee key for the designated payee based on the payee code for the designated payee in step 331.
In step 332, the transaction server signs the payer's payment order information using the payee key.
In step 333, the transaction server encodes the payment order information and the signature information into a payment order passcode, thereby generating the payment order passcode. The payment order verification code comprises payment order information and signature information.
In order to prevent a replay attack, for example, a payer may cheat a merchant by saving a previous payment order verification code through a screen capture or the like for reuse, the payment order verification method of an embodiment of the present specification may further include, at the transaction server side: the transaction server maintains a counter for each payee; the transaction server increments the counter of the designated payee by 1 each time a payment order check code for the designated payee is generated, wherein the payment order check code includes the count of the counter.
In other embodiments, at the transaction server side, the payment order checking method may further include: when the payment order check code of the appointed payee is generated every time, the transaction server records the generation time of the payment order check code, wherein the payment order check code comprises the generation time of the payment order check code.
Continuing to refer to fig. 3, when the payment order verification code is displayed on the payment success interface of the payer terminal, at the side of the payment order verification device, as shown in step 37, the payment order verification code on the payment success interface of the payer terminal is scanned by using the payment order verification device, and the payment order verification code is collected, wherein the payment order verification code includes payment order information of the payer to the specified payee.
In step 38, the payment order validation device performs an offline validation of the payment order validation code.
In step 39, the payment order verification device outputs the verification result after completing the verification.
FIG. 5 discloses a flow chart of off-line verification by a payment order verification device according to an embodiment of the present disclosure. How the payment order validation device performs offline validation will be described in detail below in conjunction with fig. 5. The offline verification of one embodiment of the present description may include step 381 and step 382.
In one embodiment, the payment order verification code may also include signature information that signs the payment order information with a payee-specified payee key. In this case, as shown in step 381 of fig. 5, the payment order verification apparatus identifies the payment order verification code and acquires signature information of the payment order verification code in step 381.
In step 382, the payment order verification device verifies the signature information using the locally stored payee certificate.
The output of the verification result in step 39 of fig. 3 includes: when the signature verification is successful, the payment order is normal, and the payment order verification equipment outputs a signature verification success signal; when the signature verification fails, the payment order is abnormal, and the payment order verification equipment outputs a signature verification alarm signal.
In some embodiments, the payment order information further includes a payment amount, and the outputting of the signature verification success signal by the payment order verification device includes: when the signature verification is successful, the payment order verification device can broadcast the payment amount in voice.
In order to prevent a replay attack, in an embodiment where the payment order verification code further includes the count of the counter of the designated payee, as described above, the counter of the designated payee is incremented by 1 each time the payment order verification code of the designated payee is generated, and the payment order verification method according to an embodiment of the present specification may further include, on the side of the payment order verification device: and when the payment order checking equipment checks the payment order checking code on the payer terminal successfully, the latest count of the counter of the appointed payee on the payment order checking code is stored in the local part of the payment order checking equipment.
When the payment order verification device verifies the payment order verification code on the payer terminal in step 38 of fig. 3 finds that the counter of the designated payee on the payment order verification code on the payer terminal is not greater than the latest count locally stored by the payment order verification device, which indicates that the payment order verification code is old, but not newly generated by the transaction server, indicating that the payment order is abnormal, at which point the payment order verification device fails. The payment order verification device will immediately issue an alarm to avoid the payee incurring a loss.
In an embodiment that the payment order verification code further includes generation time of the payment order verification code, on the side of the payment order verification device, the payment order verification method according to an embodiment of the present specification may further include: and the payment order checking equipment stores the latest generation time on the payment order checking code in the local payment order checking equipment when the payment order checking code on the payer terminal is checked and signed successfully.
When the payment order verification device verifies the payment order verification code on the payer terminal in step 38 of fig. 3 finds that the generation time on the payment order verification code on the payer terminal is not within the predetermined time period of the latest generation time locally stored by the payment order verification device, which indicates that the payment order verification code is old but not newly generated by the transaction server, indicating that the payment order is abnormal, at this time, the payment order verification device fails to verify the verification. The payment order verification device will immediately issue an alarm to avoid the payee incurring a loss.
Fig. 6 discloses a schematic block diagram of the payment order verification apparatus 100 according to an embodiment of the present specification. As shown in fig. 6, the payment order verification apparatus 100 of one embodiment of the present specification includes an image capturing unit 110, a main control unit 120, a storage unit 130, and an output unit 140. The image collecting unit 110 may collect a payment order verification code on the payment success interface of the payer terminal, where the payment order verification code includes payment order information of the payer to the specified payee and signature information signed by the payee key of the specified payee. The payment order verification code may include any one of two-dimensional codes, bar codes, and other graphic codes.
The storage unit 130 stores a receiver certificate specifying a receiver.
The main control unit 120 may perform offline verification of the payment order verification code. The main control Unit 120 may be a Microcontroller Unit (MCU). The main control unit 120 includes a graphic code identification module 121, a signature verification algorithm module 122, and a control module 123. The graphic code recognition module 121 may recognize the payment order verification code and obtain the signature information. The signature verification algorithm module 122 may verify the signature information using the payee certificate stored in the storage unit 130.
When the signature verification is successful, the control module 123 may control the output unit 140 to output a signature verification success signal. When the signature verification fails, the control module 123 may control the output unit 140 to output a signature verification alarm signal.
In some embodiments, the payment order verification code further comprises a count of a counter of the designated payee, and the counter of the designated payee is incremented by 1 each time the payment order verification code of the designated payee is generated. In an embodiment where the payment order verification code further includes the count of the counter of the designated payee, the control module 123 may further store the latest count of the counter of the designated payee on the payment order verification code in the storage unit 130 when the signature verification algorithm module 122 verifies the payment order verification code on the payer terminal successfully.
When the signature verification algorithm module 122 verifies the payment order verification code on the payer terminal, and finds that the count of the counter of the designated payee on the payment order verification code on the payer terminal is not greater than the latest count stored in the storage unit 130, the signature verification algorithm module 122 determines that the verification fails, and the control module 123 controls the output unit 140 to output a verification alarm signal.
In other embodiments, the payment order verification code further comprises a generation time of the payment order verification code. In an embodiment where the payment order verification code further includes the generation time of the payment order verification code, the control module 123 may further store the latest generation time of the payment order verification code in the storage unit 130 when the signature verification algorithm module 122 verifies the payment order verification code on the payer terminal every time the verification is successful.
When the signature verification algorithm module 122 verifies the payment order verification code on the payer terminal, it is found that the generation time on the payment order verification code on the payer terminal is not within the predetermined time period of the latest generation time stored in the storage unit 130, the signature verification algorithm module 122 determines that the verification fails, and the control module 123 controls the output unit 140 to output a verification alarm signal.
In some embodiments, the signature verification success signal and the signature verification alarm signal include at least one of an acoustic and an optical signal.
In some embodiments, the payment order information further includes a payment amount, and the controlling module 123 controls the output unit 140 to output the signature verification success signal includes: when the signature verification is successful, the control module 123 may control the output unit 140 to perform voice broadcast of the payment amount.
The storage unit 130 also stores therein a preset activation certificate associated with the device information of the payment order verification device 100. The image collection unit 110 may also collect a certificate graphic code on a designated payee terminal when the payment order verification apparatus 100 is activated, the certificate graphic code being encoded by a payee certificate signed with an activation key of the payment order verification apparatus 100 acquired from the transaction server 200. The signature verification algorithm module 122 may also verify the payee certificate signed by the activation certificate to the activation key, and the control module 123 may further store the payee certificate in the storage unit 130 when the verification passes.
The payment order checking device 100 according to one or more embodiments of the present disclosure is a hardware product with a code scanning function, and displays a payment order result in the form of a payment order check code such as a two-dimensional code, and the payment order checking device 100 checks a transaction result through the code scanning, and can notify a payee through sound and light, if an abnormal order is found, alarm is given in time, security of the transaction is enhanced, and loss of the payee is avoided. The electronic payment system not only can lead people to enjoy the convenience of electronic payment, but also can not suffer from loss caused by the problem of order escape.
The payment order validation apparatus 100 of one or more embodiments of the present specification is capable of automatically verifying transaction results without manual confirmation, saving the payee effort, and is less prone to error.
The payment order verification device 100 according to one or more embodiments of the present disclosure ensures security through a certificate mechanism, and a third party cannot forge the payment order, so that the transaction security of a common static checkout code is ingeniously enhanced, and a ticket evasion hole is blocked.
The payment order verification device 100 of one or more embodiments of the present disclosure may verify the transaction result in an off-line manner without accessing a network and a server, thereby avoiding the service cost associated with the network, achieving a faster speed, avoiding waiting for high-frequency transactions, simplifying the operation, and reducing the use threshold.
The payment order validation apparatus 100 of one or more embodiments of the present description is low cost and convenient to use.
Fig. 7 discloses a schematic block diagram of a transaction server 200 according to an embodiment of the present specification. As shown in fig. 7, the transaction server 200 of one embodiment of the present disclosure includes a memory 210 and a processor 220. The memory 210 stores a computer program. The above-described payment order validation method on the transaction server side may be implemented when the processor 220 executes a computer program.
One or more embodiments described above in the present specification can effectively avoid the occurrence of the escape ticket phenomenon.
One or more of the above embodiments of the present disclosure may implement offline verification, without manual confirmation, which saves the effort of the payee and is not prone to error.
One or more embodiments described above in this specification can achieve fast verification, no waiting for high frequency transaction, simple operation, and low usage threshold.
As will be appreciated by one skilled in the art, one or more embodiments of the present description may be provided as a method, apparatus or computer program product. Accordingly, one or more embodiments of the present description may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, one or more embodiments of the present description may take the form of a computer program product embodied on one or more computer-readable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The foregoing description has been directed to specific embodiments of this disclosure. Other embodiments are within the scope of the following claims. In some cases, the actions or steps recited in the claims may be performed in a different order than in the implementations and still achieve desirable results. In addition, the processes depicted in the accompanying figures do not necessarily require the particular order shown, or sequential order, to achieve desirable results. In some embodiments, multitasking and parallel processing may also be possible or may be advantageous.
The above description of the embodiments is only intended to help understand the core ideas of the present specification. It should be noted that, for those skilled in the art, without departing from the spirit and principle of the present specification, several improvements and modifications can be made to the present specification, and these improvements and modifications should fall within the protection scope of the claims set forth in the specification.

Claims (23)

1. A payment order validation method, the method comprising:
the transaction server automatically generates a payment order verification code based on payment order information of a payer after payment processing is carried out on a payment request sent by a payer terminal through scanning a collection code of a designated payee and payment is successfully completed; and
directly providing the payment order verification code on a payment success interface of the payer terminal for offline verification of payment order verification equipment; the payment order verification code comprises signature information signed by a payee secret key of a designated payee;
the method further comprises a device activation step comprising:
scanning a certificate graphic code on the appointed payee terminal by using the payment order checking equipment, wherein the certificate graphic code is formed by encoding a payee certificate signed by using an activation key of the payment order checking equipment, which is acquired from the transaction server;
the payment order verification equipment verifies and signs the payee certificate signed by the activation key by using a preset activation certificate, wherein the activation certificate is associated with equipment information of the payment order verification equipment; and
and when the signature passes the verification, storing the payee certificate in the local payment order verification equipment.
2. The method of claim 1, the generating a payment order verification code based on payer's payment order information comprising:
generating a payee key for the designated payee based on the payee code for the designated payee;
signing the payment order information by using the payee key; and
and encoding the payment order information and the signature information into a payment order verification code.
3. The method of claim 1, the generating a payment order validation code based on payment order information of a payer and providing the payment order validation code on a payment success interface of the payer terminal comprising:
providing a verification button on a payment success interface of the payer terminal; and
and after receiving the message that the payer clicks the verification button, generating the payment order verification code and providing the payment order verification code on a payment success interface of the payer terminal.
4. The method of claim 1, further comprising:
maintaining a counter for each payee;
and when the payment order check code of the appointed payee is generated every time, adding 1 to the counter of the appointed payee, wherein the payment order check code comprises the counting number of the counter.
5. The method of claim 1, further comprising:
when the payment order check code of the appointed payee is generated every time, recording the generation time of the payment order check code, wherein the payment order check code comprises the generation time of the payment order check code.
6. A transaction server comprising a memory and a processor, the memory storing a computer program which, when executed by the processor, implements a payment order validation method according to any of claims 1 to 5.
7. A payment order validation method, the method comprising:
scanning a payment order verification code on a payment success interface of a payer terminal by using payment order verification equipment, wherein the payment order verification code comprises payment order information of a payer to an appointed payee;
the payment order checking equipment carries out off-line checking on the payment order checking code; and
the payment order checking equipment outputs a checking result; the payment order verification code is automatically generated based on payment order information of the payer after the transaction server carries out payment processing on a payment request sent by the payer terminal through scanning a collection code of a specified payee and successfully pays; the payment order verification code comprises signature information signed by a payee secret key of a designated payee;
the method further comprises a device activation step comprising:
scanning a certificate graphic code on a designated payee terminal by using the payment order verification equipment, wherein the certificate graphic code is formed by encoding a payee certificate signed by using an activation key of the payment order verification equipment, which is acquired from the transaction server;
the payment order verification equipment verifies and signs the payee certificate signed by the activation key by using a preset activation certificate, wherein the activation certificate is associated with equipment information of the payment order verification equipment; and
and when the signature passes the verification, storing the payee certificate in the local payment order verification equipment.
8. The method of claim 7, the payment order verification code further comprising signature information signed with the payee key of the specified payee, the offline verification of the payment order verification code comprising:
the payment order checking equipment identifies the payment order checking code and obtains signature information of the payment order checking code; and
and the payment order verification equipment verifies the signature information by using a locally stored payee certificate.
9. The method of claim 8, the outputting a verification result comprising:
when the signature verification is successful, the payment order verification equipment outputs a signature verification success signal;
and when the signature verification fails, the payment order verification equipment outputs a signature verification number.
10. The method of claim 9, wherein the payment order information further includes a payment amount, and the outputting of the signature verification success signal by the payment order verification device comprises: and the payment order checking equipment broadcasts the payment amount in a voice mode.
11. The method of claim 8, wherein the payment order validation code further comprises a count of a counter of the designated payee, wherein the counter of the designated payee is incremented by 1 each time the payment order validation code for the designated payee is generated, the method further comprising:
and when the payment order checking equipment checks the payment order checking code on the payer terminal successfully, the latest count of the counter of the appointed payee on the payment order checking code is stored in the local payment order checking equipment.
12. The method of claim 11, wherein the signature verification fails when the payment order verification device verifies the payment order verification code on the payer terminal upon finding that the count of the counter of the designated payee on the payment order verification code on the payer terminal is not greater than the most recent count maintained locally by the payment order verification device.
13. The method of claim 8, the payment order checksum further comprising a time of generation of the payment order checksum, the method further comprising:
and when the payment order checking equipment checks the payment order checking code on the payer terminal successfully, the latest generation time on the payment order checking code is stored in the local part of the payment order checking equipment.
14. The method of claim 13, wherein the signature verification fails when the payment order verification device verifies a payment order verification code on a payer terminal that the generation time on the payment order verification code on the payer terminal is not within a predetermined time period of the latest generation time locally saved by the payment order verification device.
15. A method of activation of a payment order validation device, the method comprising:
a payee terminal scans an equipment information code on payment order checking equipment, wherein the equipment information code comprises equipment information of the payment order checking equipment;
the payee terminal uploads the device information code to a transaction server, and a payee certificate signed by using an activation key of the payment order verification device is obtained from the transaction server; and
the payee terminal encodes the payee certificate signed by the activation key into a certificate graphic code for scanning and activating the payment order checking equipment to perform off-line checking on the payment order checking code, wherein the payment order checking code is automatically generated based on payment order information of a payer after payment processing is performed on a payment request sent by the payer terminal through scanning the payee code of the appointed payee and payment is successful by the transaction server; the payment order verification code comprises signature information signed by a payee secret key of a designated payee.
16. A payment order validation apparatus, the apparatus comprising:
the payment order verification code comprises payment order information of a payer to an appointed payee and signature information signed by a payee secret key of the appointed payee; the successful payment interface is an interface displayed by the payer terminal after the transaction server carries out payment processing on a payment request sent by the payer terminal through scanning a cash receiving code of a specified payee and successfully pays; the payment order verification code comprises signature information signed by a payee secret key of a designated payee;
an output unit;
a storage unit that stores a payee certificate of the designated payee; and
the main control unit is used for carrying out off-line verification on the payment order verification code, and comprises:
the graphic code identification module is used for identifying the payment order verification code and acquiring the signature information:
the signature and signature verification algorithm module is used for verifying the signature information by using the payee certificate stored in the storage unit; and
the control module is used for controlling the output unit to output a signature verification success signal when the signature verification is successful; when the signature verification fails, controlling the output unit to output a signature verification alarm signal;
the payment order checking system comprises a storage unit, an image acquisition unit, a signature checking algorithm module and a control module, wherein the storage unit is used for storing a preset activation certificate, the activation certificate is associated with equipment information of the payment order checking equipment, when the payment order checking equipment is activated, the image acquisition unit is further used for acquiring a certificate graphic code on a designated payee terminal, the certificate graphic code is formed by encoding a payee certificate which is acquired from a transaction server and signed by using an activation key of the payment order checking equipment, the signature checking algorithm module is further used for checking the signature of the payee certificate signed by using the activation certificate, and the control module is further used for storing the payee certificate in the storage unit when the signature passes the check.
17. The apparatus of claim 16, wherein the payment order checksum further comprises a count of a counter of the designated payee, wherein the counter of the designated payee is incremented by 1 each time the payment order checksum of the designated payee is generated, and wherein the control module is further configured to save the latest count of the counter of the designated payee on the payment order checksum to the storage unit each time the signature verification algorithm module verifies the payment order checksum on the payer terminal successfully.
18. The apparatus as claimed in claim 17, wherein the signature verification algorithm module determines that the verification fails when the signature verification algorithm module verifies the payment order verification code on the payer terminal, finds that the count of the counter of the designated payee on the payment order verification code on the payer terminal is not greater than the latest count held in the storage unit.
19. The apparatus of claim 16, wherein the payment order verification code further comprises a generation time of the payment order verification code, and the control module is further configured to save a latest generation time of the payment order verification code to the storage unit every time the signature verification algorithm module verifies the payment order verification code on the payer terminal successfully.
20. The apparatus as claimed in claim 19, wherein said signature verification algorithm module determines that the verification fails when said signature verification algorithm module verifies the payment order verification code on the payer terminal, finding that said generation time on the payment order verification code on the payer terminal is not within a predetermined time period of said latest generation time held in said storage unit.
21. The apparatus of claim 16, said signature verification success signal and said signature verification alert signal comprising at least one of an acoustic and optical signal.
22. The apparatus of claim 16, wherein the payment order information further includes a payment amount, and the controlling module controls the output unit to output a signature verification success signal comprises: the control module controls the output unit to broadcast the payment amount in a voice mode.
23. The payment order validation device of claim 16, the payment order validation code comprising a bar code or a two-dimensional code.
CN202010243108.9A 2020-03-31 2020-03-31 Payment order checking method, payment order checking equipment, activation method thereof and transaction server Active CN111461703B (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN202010243108.9A CN111461703B (en) 2020-03-31 2020-03-31 Payment order checking method, payment order checking equipment, activation method thereof and transaction server
PCT/CN2020/142559 WO2021196807A1 (en) 2020-03-31 2020-12-31 Payment order verification method, payment order verification device and activation method therefor, and transaction server

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010243108.9A CN111461703B (en) 2020-03-31 2020-03-31 Payment order checking method, payment order checking equipment, activation method thereof and transaction server

Publications (2)

Publication Number Publication Date
CN111461703A CN111461703A (en) 2020-07-28
CN111461703B true CN111461703B (en) 2021-12-24

Family

ID=71678467

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010243108.9A Active CN111461703B (en) 2020-03-31 2020-03-31 Payment order checking method, payment order checking equipment, activation method thereof and transaction server

Country Status (2)

Country Link
CN (1) CN111461703B (en)
WO (1) WO2021196807A1 (en)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111461703B (en) * 2020-03-31 2021-12-24 支付宝(杭州)信息技术有限公司 Payment order checking method, payment order checking equipment, activation method thereof and transaction server
CN112288891B (en) * 2020-10-10 2022-07-12 苏州创旅天下信息技术有限公司 Method and device for self-service purchase of vehicle ferry ticket and readable storage medium
CN112581233B (en) * 2020-12-24 2024-01-26 北京顺达同行科技有限公司 Method, apparatus, device and computer readable storage medium for order offline operation
CN113627927A (en) * 2021-08-03 2021-11-09 支付宝(杭州)信息技术有限公司 Offline payment method and system
CN114299666A (en) * 2021-12-28 2022-04-08 安徽影通智能科技有限公司 Offline charging method of charging station
CN116798167A (en) * 2023-08-25 2023-09-22 广东星云开物科技股份有限公司 Shared entertainment equipment starting method, system and storage medium

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107480993A (en) * 2016-06-07 2017-12-15 华为技术有限公司 Data processing method, relevant apparatus and system
CN108009822A (en) * 2018-01-02 2018-05-08 中国工商银行股份有限公司 A kind of cloud method of payment, system and payment mechanism, user terminal
CN108665304A (en) * 2018-05-02 2018-10-16 安徽奎特伊科技有限公司 A kind of method of mobile payment and system applied in public transport
CN110880106A (en) * 2019-10-30 2020-03-13 支付宝(杭州)信息技术有限公司 Method and device for realizing double offline payment
CN110930147A (en) * 2019-11-01 2020-03-27 北京三快在线科技有限公司 Offline payment method and device, electronic equipment and computer-readable storage medium

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9390414B2 (en) * 2011-09-18 2016-07-12 Google Inc. One-click offline buying
US20130254114A1 (en) * 2012-03-23 2013-09-26 Ncr Corporation Network-based self-checkout
CN103985038A (en) * 2014-04-16 2014-08-13 深圳市亚略特生物识别科技有限公司 Payment method of mobile terminal based on fingerprint recognition
CN107944577A (en) * 2017-10-31 2018-04-20 珠海格力电器股份有限公司 Equipment application method, device, medium, mobile terminal, server and equipment
CN110060044A (en) * 2019-03-29 2019-07-26 北京未来购电子商务有限公司 A kind of method and self-service device of self-service device Offline consumption
CN110458569A (en) * 2019-07-01 2019-11-15 阿里巴巴集团控股有限公司 A kind of brush face method of payment and device
CN211506666U (en) * 2020-03-31 2020-09-15 支付宝(杭州)信息技术有限公司 Payment order checking equipment
CN111461703B (en) * 2020-03-31 2021-12-24 支付宝(杭州)信息技术有限公司 Payment order checking method, payment order checking equipment, activation method thereof and transaction server

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107480993A (en) * 2016-06-07 2017-12-15 华为技术有限公司 Data processing method, relevant apparatus and system
CN108009822A (en) * 2018-01-02 2018-05-08 中国工商银行股份有限公司 A kind of cloud method of payment, system and payment mechanism, user terminal
CN108665304A (en) * 2018-05-02 2018-10-16 安徽奎特伊科技有限公司 A kind of method of mobile payment and system applied in public transport
CN110880106A (en) * 2019-10-30 2020-03-13 支付宝(杭州)信息技术有限公司 Method and device for realizing double offline payment
CN110930147A (en) * 2019-11-01 2020-03-27 北京三快在线科技有限公司 Offline payment method and device, electronic equipment and computer-readable storage medium

Also Published As

Publication number Publication date
CN111461703A (en) 2020-07-28
WO2021196807A1 (en) 2021-10-07

Similar Documents

Publication Publication Date Title
CN111461703B (en) Payment order checking method, payment order checking equipment, activation method thereof and transaction server
CN105190659B (en) Method, apparatus and arrangement for device-to-device communication
CN102881071B (en) Electronic ticket anti-counterfeiting system and method
US20140244514A1 (en) Methods and arrangements for smartphone payments and transactions
US20100211506A1 (en) Mobile transaction system and method
CN103854170A (en) Payment system and payment method based on two-dimension code
CN111340634B (en) System and method for assisting mobile equipment in implementing screen crush risk
CN108898206A (en) A kind of method and barcode scanning safe checking method generating gathering code
CN102968717A (en) Electronic payment method, relevant device and system
TW201832152A (en) Payment processing method and apparatus, and transaction method and mobile device
WO2021082466A1 (en) Offline payment
CN110335159B (en) Application information processing method, device and equipment and readable storage medium
WO2014090094A1 (en) Withdrawal system and method based on two-dimension code
CN108763898A (en) A kind of information processing method and system
CN112036868B (en) Two-dimensional code secure payment method, device, storage medium and equipment
CN109978533A (en) A kind of offline secure payment system and method that anti-two dimensional code is usurped
CN108428135A (en) Auth method
CN111612988A (en) Face identification self-service pickup system of unmanned post house
CN109410048B (en) Electronic device, client information security management method, and storage medium
CN112488823A (en) Document data processing method and device in loan business and computer equipment
CN211506666U (en) Payment order checking equipment
CN110472976A (en) A kind of method of Second-hand Vehicle Transaction remote upload
JP2009042986A (en) Management system, method and program for marketing sales history of financial product
US20220300943A1 (en) Information processing apparatus, payment processing system, method, and program
CN111340484A (en) Payment verification method, device, system, storage medium and computer equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right

Effective date of registration: 20230112

Address after: 200120 Floor 15, No. 447, Nanquan North Road, China (Shanghai) Pilot Free Trade Zone, Pudong New Area, Shanghai

Patentee after: Alipay.com Co.,Ltd.

Address before: 310000 801-11 section B, 8th floor, 556 Xixi Road, Xihu District, Hangzhou City, Zhejiang Province

Patentee before: Alipay (Hangzhou) Information Technology Co.,Ltd.

TR01 Transfer of patent right