TWI720287B - Transaction payment method and system - Google Patents

Abstract

The invention relates to a transaction payment method. The registration phase includes: a biometric authentication server obtains the biometric characteristics of a registered user based on a registration request of a smart terminal, and the transaction payment server issues a public key to the smart terminal; the transaction phase includes : The smart terminal generates the first cipher text based on at least the public key and the biometric characteristics of the current user; the smart terminal generates the Han Xin code based on the first cipher text and the QR code based on the user information of the current user; transaction; The payment server obtains the first ciphertext and user information scanned and identified by the cashier terminal, and uses the private key to decrypt the first ciphertext to obtain the biometric characteristics of the current user; and, the transaction payment server is based on biometrics The signature authentication server completes the transaction with the result of the biometric authentication of the current user and the user information. It can realize more secure electronic transactions and protect user account security.

Description

Transaction payment method and system

The present invention relates to the technical field of electronic commerce, and more specifically, to a transaction payment method and system.

Nowadays, QR code payment is widely used in daily life. QR code scanning payment can be divided into two modes: main scan and scanned mode. The scanned mode is widely used in WeChat payment and Alipay. For example, the user-end application of mobile terminal encodes user account information into two-dimensional Code or barcode, the cashier terminal scans the code to confirm the user account information to complete the payment transaction.

An important problem of this payment method is the security problem. The QR code information/bar code is easy to be copied, which leads to the disclosure of user account information, thereby bringing risks of fraudulent use and embezzlement. Although some applications process account information/transaction information, so that the QR code/bar code does not simply display account information/transaction information in plain text, but there is still a risk that it is relatively easy to break, giving criminals a chance.

On the other hand, in the prior art, there has been a scheme of using biological characteristics (such as fingerprints) to verify transactions. However, some cashier terminals can directly obtain or even retain the user’s fingerprint characteristic data, which also brings security risks to the user. .

The purpose of the present invention is to provide a more secure and reliable transaction payment method based on scanning a two-dimensional code.

In order to achieve the above objective, the present invention provides a technical solution as follows: a transaction payment method, including: a registration phase, including the following steps: the biometric authentication server obtains the biometrics of the registered user from the smart terminal based on the smart terminal's registration request The transaction payment server issues a public key to the smart terminal based on the registration request; the biometrics are collected by the biometric collection device of the smart terminal; and the transaction phase includes the following steps: the smart terminal collects the current use The biological characteristics of the user, and the first ciphertext is generated based on at least the public key and the biological characteristics of the current user; the smart terminal generates the Chinese Xin code based on the first ciphertext, and the QR code is generated based on the user information of the current user , And display the Hanxin code and QR code for the cashier terminal to scan and recognize; the transaction payment server obtains the first ciphertext and user information scanned and recognized by the cashier terminal from the cashier terminal, and uses the private key to pair the first cipher text and user information. The ciphertext is decrypted to obtain the biometrics of the current user and forward it to the biometric authentication server; and the transaction payment server completes the transaction based on the biometric authentication server’s biometric authentication results of the current user and user information .

Preferably, the Hanxin code and the two-dimensional code are respectively displayed on different parts of the screen or display window of the smart terminal.

Preferably, the Han Xin code is displayed on the screen or in the display window In the central part, the QR code is displayed on the peripheral part of the screen or display window.

Preferably, the Hanxin code and the two-dimensional code are displayed simultaneously.

Preferably, the smart terminal is also based on the time code of the current time when generating the first ciphertext.

Preferably, the smart terminal executes a hash algorithm on the biometrics of the current user to obtain the digest, and uses the public key to encrypt the digest to generate the first ciphertext.

The present invention also discloses a transaction payment system, including: a transaction execution unit, which is communicatively coupled with at least one smart terminal, and includes: a biometric authentication server for authenticating the biometrics of the current user; a transaction payment server The device obtains the first ciphertext and the user information of the current user from the cashier terminal, and decrypts the first ciphertext with the private key to obtain the current user’s biometrics and forward it to the biometric authentication server. The payment server also completes the transaction based on the authentication result of the biometric authentication server; at least one cashier terminal, which scans and recognizes the Hanxin code and QR code displayed by the smart terminal; and at least one smart terminal, smart terminal The machine includes a biometric collection device. The smart terminal generates a first cipher text based on at least the public key issued by the transaction payment server and the biometric characteristics of the current user, and generates a Chinese character code based on the first cipher text, and based on the user Information generates a QR code.

The transaction payment method and system provided by the present invention, while realizing electronic transactions in a simple manner, can effectively prevent the two-dimensional code/bar code and other information from being copied, thereby bringing security risks to the user’s account, and can also affect the user’s biological Characteristic information is authenticated to prevent fraudsters from embezzling The user’s smart terminal, in turn, the transaction payment system can implement more secure electronic transactions, protect the user’s account security, and also bring a good user experience to the user.

S10, S11, S12, S13, S14: steps

20: Transaction execution unit

21: Cashier terminal

22: Smart Terminal

201: Biometric authentication server

202: Transaction Payment Server

Fig. 1 shows a schematic flowchart of a transaction payment method provided by the first embodiment of the present invention.

Fig. 2 shows a block diagram of a transaction payment system provided by a second embodiment of the present invention.

As shown in FIG. 1, the first embodiment of the present invention provides a transaction payment method, which is implemented by a smart terminal generating a QR code for the cashier terminal to scan. The method includes two stages: a registration stage and a transaction stage.

The registration phase includes step S10: the biometric authentication server obtains the biometrics of the registered user based on the registration request of the smart terminal, and the transaction payment server issues the public key to the smart terminal based on the registration request. Among them, the biological characteristics are collected by the biological characteristics collection equipment of the smart terminal.

Specifically, the user who wants to register submits a registration request to the biometric authentication server through the smart terminal. The biometric authentication server instructs the smart terminal to collect the biometrics of the registered user, and the smart terminal uploads the biometrics to the biometrics after the collection. Signature authentication server, bio The feature authentication server saves the biometric feature of the registered user, and instructs the transaction payment server to issue a public key to the smart terminal.

After the above registration phase is completed, you can enter the transaction phase. Those skilled in the art can understand that the registration phase only needs to be performed once, while the transaction phase can be performed any number of times.

In the transaction phase, information interaction occurs between the smart terminal and the cashier terminal through scanning, and information interaction occurs between the cashier terminal and the transaction payment server through network communication. The transaction phase specifically includes the following steps.

Step S11: The smart terminal collects the biological characteristics of the current user, and generates a first ciphertext based on at least the public key and the biological characteristics of the current user.

Specifically, as an example, after collecting the biometrics of the current user, the smart terminal executes a hash algorithm on the biometrics of the current user to obtain a summary, and uses the public key pair summary issued by the transaction payment server during the registration phase Encryption is performed to generate the first ciphertext.

Further, the smart terminal may also be based on the time code of the current time when generating the first ciphertext. Furthermore, in the subsequent steps, the transaction payment server can use the time code to determine the timeliness of the transaction, which can also increase the security of the transaction.

In addition, the smart terminal can also be combined with the device ID of the mobile terminal when generating the first ciphertext. Generally, the device ID of a mobile terminal is not replaceable. Combining the device ID can help increase the security of user information (such as accounts).

Step S12: The smart terminal generates a Hanxin code based on the first ciphertext, generates a two-dimensional code based on the user information of the current user, and displays the Hanxin code and the two-dimensional code for the cashier terminal to scan and recognize.

In this step, the Hanxin code and the QR code can be respectively displayed on the screen of the smart terminal or different parts of the display window. For example, the Hanxin code is displayed on the central part of the screen or display window, and the QR code is displayed on the peripheral part of the screen or display window; or, the Hanxin code is displayed on the left part and the QR code is displayed on the right part.

It can be understood that when the smart terminal displays the Hanxin code and the two-dimensional code, it can zoom in and out of the two, and can also display the two in a different time sequence.

Preferably, the two-dimensional code surrounds the Hanxin code, and the two are simultaneously displayed in the display window of the smart terminal for scanning and identification by the cashier terminal.

Step S13: The transaction payment server obtains the first ciphertext and user information scanned and identified by the cashier terminal, and decrypts the first ciphertext with the private key to obtain the biological characteristics of the current user.

Specifically, after the cashier terminal scans and recognizes the Hanxin code and QR code, it sends the first ciphertext and user information to the transaction payment server, and the transaction payment server uses the private key to decrypt the first ciphertext. Get the biometrics of the current user. In this process, although the cash register terminal obtains the first ciphertext, it cannot parse or save the first ciphertext. Subsequently, the transaction payment server forwards the current user's biometrics to the biometric authentication server.

Step S14: The transaction payment server completes the transaction based on the result of the biometric authentication of the current user by the biometric authentication server and the user information.

Among them, the biometric authentication server first authenticates the biometrics of the current user, and notifies the transaction payment server of the authentication result, and the transaction payment server completes the transaction based on the authentication result and user information.

Specifically, if the biometrics of the current user are not matched in the biometric database of the registered user, the biometric authentication server will give a negative authentication result, and the transaction payment server will reject the current transaction; otherwise, the biometrics The authentication server will give a positive authentication result, and the transaction payment server will continue the current transaction to realize the transfer of funds.

While realizing electronic transactions in a simple manner, the transaction payment method can effectively prevent information such as two-dimensional codes/bar codes from being copied, and can also authenticate the user's biometric information. These measures are conducive to improving the security of electronic transactions and effectively protecting user accounts from embezzlement.

The second embodiment of the present invention provides a transaction payment system, which includes a transaction execution unit 20, multiple cashier terminals 21 (for simplicity, only one is shown in the drawings), and multiple smart terminals 22 (for simplicity) , Only one is shown in the drawing), as shown in Figure 2.

Wherein, the transaction execution unit 20 and the plurality of smart terminals 22 can communicate with a mobile communication network, and the transaction execution unit 20 and the plurality of cashier terminals 21 can communicate with the Internet (for example, an Internet network).

The transaction execution unit 20 includes a biometric authentication server 201. Transaction payment server 202. The smart terminal 22 includes a biological feature collection device, which is used to collect the user's biological features, such as fingerprints, iris, voiceprints, facial images, and so on.

Specifically, the smart terminal 22 generates the first ciphertext based on at least the public key issued by the transaction payment server 202 during the user registration phase and the biological characteristics of the current user, and generates the Chinese character code based on the first ciphertext, A two-dimensional code is generated based on the user information, and the Hanxin code and the two-dimensional code are displayed for the cashier terminal 21 to scan and recognize.

The cash register terminal 21 includes a scanning device to scan and recognize the Han Xin code and the two-dimensional code displayed on the smart terminal 22.

Subsequently, the transaction payment server 202 obtains the first ciphertext and the user information of the current user from the cashier terminal 21, and uses the private key to decrypt the first ciphertext to obtain the biological characteristics of the current user and forward it to the biometrics. The feature authentication server 201, after the biometric authentication server 201 performs authentication, the transaction payment server 202 also completes the transaction based on the authentication result of the biometric authentication server 201.

Further, the smart terminal 22 can display the Hanxin code and the two-dimensional code on different parts of the screen or display window, respectively. Preferably, the smart terminal 22 displays the Han Xin code on the screen or the central part of the display window, and displays the two-dimensional code on the screen or the peripheral part of the display window. In addition, the smart terminal 22 preferably simultaneously displays the Han Xin code and the two-dimensional code.

Further, the transaction execution unit 20 is installed at the end of the financial institution (local end), and the cashier terminal 21 is installed at the remote end. The above transaction payment system can be deployed based on a cloud computing system to promote system upgrade and maintenance.

After the user has registered with the above-mentioned transaction payment system, he can conduct electronic transactions safely and quickly, and obtain a good user experience. The transaction payment system has low implementation cost and is convenient for popularization and application.

The above description is only for the preferred embodiments of the present invention, and is not intended to limit the protection scope of the present invention. Those skilled in the art can make various deformation designs without departing from the idea of the present invention and the accompanying patent application scope.

Claims (10)

A transaction payment method includes: a registration stage, including the following steps: a). The biometric authentication server obtains the biometric characteristics of the registered user from the smart terminal based on the smart terminal's registration request, and the transaction payment server is based on the smart terminal's registration request. The registration request issues a public key to the smart terminal; wherein the biometrics are collected by the biometrics collection device of the smart terminal; and the transaction phase includes the following steps: b), the smart The terminal collects the biological characteristics of the current user, and generates a first ciphertext based on at least the public key and the biological characteristics of the current user; c), the smart terminal is based on the first secret The text generates a Hanxin code, generates a QR code based on the user information of the current user, and displays the Hanxin code and the QR code for the cashier terminal to scan and recognize; d), the transaction payment server The device obtains the first cipher text and the user information scanned and identified by the cash register terminal from the cash register terminal, and decrypts the first cipher text with a private key to obtain the current use And transfer the biometrics of the current user to the biometric authentication server; and e), the transaction payment server is based on the biometric authentication result of the current user by the biometric authentication server and the user Information to complete the transaction. The method according to claim 1, wherein the Chinese Xin code and the two-dimensional code are respectively displayed on different parts of the screen or display window of the smart terminal. The method according to claim 2, wherein the Chinese Xin code is displayed on the central part of the screen or the display window, and the two-dimensional code is displayed on the peripheral part of the screen or the display window. The method according to claim 2, wherein the Chinese Xin code and the two-dimensional code are displayed simultaneously. The method according to claim 1, wherein the smart terminal is also based on a time code of the current time when generating the first ciphertext. The method according to claim 1, wherein the smart terminal executes a hash algorithm on the biometrics of the current user to obtain a digest, and uses the public key to encrypt the digest to generate the The first ciphertext. A transaction payment system includes: a transaction execution unit, which is communicatively coupled with at least one smart terminal, and includes: a biometric authentication server for verifying the biometrics of the current user Feature authentication; the transaction payment server obtains the first ciphertext and the user information of the current user from the cashier terminal, and decrypts the first ciphertext with a private key to obtain the biological information of the current user Feature and forward it to the biometric authentication server, the transaction payment server also completes the transaction based on the authentication result of the biometric authentication server; at least one of the cashier terminal, the cashier terminal scans and recognizes the The Hanxin code and QR code displayed by the smart terminal; and at least one of the smart terminal, the smart terminal includes a biometrics collection device, the smart terminal is based on at least the transaction payment server issued The public key and the biological characteristics of the current user are used to generate the first ciphertext, the Chinese Xin code is generated based on the first ciphertext, and the two-dimensional code is generated based on the user information. The system according to claim 7, wherein the smart terminal displays the Chinese Xin code and the two-dimensional code on different parts of a screen or a display window, respectively. The system according to claim 8, wherein the smart terminal displays the Han Xin code on the central part of the screen or display window, and displays the two-dimensional code on the periphery of the screen or display window section. The system according to any one of Claims 7 to 9, wherein the transaction execution unit is installed at the end of the financial institution, and the cash register terminal is installed at a remote location. end.

Images