WO2012034339A1 - 一种实现网络支付的方法及移动终端 - Google Patents

一种实现网络支付的方法及移动终端 Download PDF

Info

Publication number
WO2012034339A1
WO2012034339A1 PCT/CN2010/080425 CN2010080425W WO2012034339A1 WO 2012034339 A1 WO2012034339 A1 WO 2012034339A1 CN 2010080425 W CN2010080425 W CN 2010080425W WO 2012034339 A1 WO2012034339 A1 WO 2012034339A1
Authority
WO
WIPO (PCT)
Prior art keywords
network payment
payment system
mobile terminal
selected network
user
Prior art date
Application number
PCT/CN2010/080425
Other languages
English (en)
French (fr)
Inventor
邓颖波
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Priority to US13/575,429 priority Critical patent/US8751404B2/en
Priority to EP10857195A priority patent/EP2518671A4/en
Publication of WO2012034339A1 publication Critical patent/WO2012034339A1/zh

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/22—Payment schemes or models
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/22—Payment schemes or models
    • G06Q20/227—Payment schemes or models characterised in that multiple accounts are available, e.g. to the payer
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3821—Electronic credentials
    • G06Q20/38215—Use of certificates or encrypted proofs of transaction rights
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists

Definitions

  • the present invention relates to the field of communications technologies, and in particular, to a method for implementing network payment and a mobile terminal. Background technique
  • USB Key is a digital certificate introduced by the banking system to identify the customer in the form of a client on the network.
  • USB Key is a tool for online banking electronic signature and digital authentication. It has a built-in micro-smart card processor, which uses 1024-bit asymmetric key algorithm to encrypt, decrypt and digitally sign online data to ensure online transactions. Confidentiality, authenticity, integrity and non-repudiation.
  • the present invention provides a method for implementing network payment and a mobile terminal.
  • the mobile terminal selects, according to an instruction input by the user, a network payment system required for performing the network payment from the plurality of network payment systems;
  • the mobile terminal sends a digital certificate corresponding to the authentication required to the selected network payment system; When it is determined that the user is legal according to the digital certificate, the mobile terminal logs in to the selected network payment system to perform a network payment operation.
  • the embodiment of the present invention further provides a mobile terminal for implementing network payment, comprising: a selecting module, configured to select, according to an instruction input by a user, a network payment system required for performing the network payment from a plurality of network payment systems;
  • a sending module configured to send, to the selected network payment system, a digital certificate corresponding to the authentication
  • the payment module is configured to log in to the selected network payment system to perform a network payment operation when determining that the user is legal according to the digital certificate.
  • the solution provided by the embodiment of the present invention selects from multiple network payment systems by using the mobile terminal, it is not necessary to carry multiple USB keys.
  • FIG. 1 is a flowchart of a method according to an embodiment of the present invention
  • FIG. 2 is a structural diagram of a device according to an embodiment of the present invention. detailed description
  • an embodiment of the present invention is a process for implementing network payment of a plurality of banks using a digital certificate network and an encryption algorithm implementation process.
  • a digital certificate is processed in a bank's network payment system, and the number is obtained through a bank's network payment system.
  • the certificate is imported into the mobile terminal, and then needs to be registered in the bank's online payment system.
  • the customer needs to set a key, which is also stored in the encryption chip of the mobile terminal and the server of the bank.
  • three bank's network payment system 1, network payment system 2, and network payment system 3 are respectively provided; the keys corresponding to the user settings are Al, A2, A3, and are stored in the shift.
  • the corresponding encryption algorithms are respectively Bl, B2, B3; after the digital certificate is successfully imported, the network payment function of the three banks corresponding to the mobile terminal interface is enabled.
  • the method for implementing network payment includes: the mobile terminal selects a network payment system required for performing the network payment from a plurality of network payment systems according to an instruction input by the user; and the mobile terminal sends the network payment system to the selected network payment system.
  • the digital certificate corresponding to the authentication is required; when the digital certificate determines that the user is legitimate, the mobile terminal logs in to the selected network payment system to perform a network payment operation.
  • Step 101 When online payment is required, the mobile terminal selects a corresponding network payment system according to an instruction input by the user. For example, the mobile terminal selects the network payment system 1 according to the instruction input by the user, and correspondingly, the network payment system 1 corresponds to The bank's online payment function is enabled.
  • Step 102 The network payment system server invokes a digital certificate of the mobile terminal.
  • the network payment system server invokes the digital certificate of the mobile terminal in order to verify the validity of the digital certificate.
  • Step 103 The network payment system server checks the digital certificate. If the digital certificate provided is incorrect, step 111 is performed, and the network payment ends; if the provided digital certificate is correct, step 104 is performed.
  • Step 104 The mobile terminal sends a login request to the network payment system server through the network.
  • the mobile terminal When the mobile terminal sends a login request, it also sends the user name and login password entered by the user to the network payment system server.
  • Step 105 After receiving the login request, the network payment system server sends a string of random numbers to the mobile terminal.
  • Step 106 After receiving a string of random numbers sent by the network payment system, the mobile terminal performs encryption operation on the received random number by using a key corresponding to the network payment system and an encryption algorithm corresponding to the network payment system. A string is sent to the network payment system.
  • the mobile terminal receives the random number sent by the server of the network payment system 1, and the key corresponding to the network payment system 1 is A1, and the corresponding encryption algorithm is B1, then the random number and the key A1 are added, and the encryption is performed by B1. After that, the first character string C1 is obtained and sent to the network payment system 1.
  • Step 107 The network payment system server performs encryption operation on the random number by using a key corresponding to the network payment system and an encryption algorithm corresponding to the network payment system to obtain a second character string; if the first character string and the second string If the string is equal, it indicates that the user is a legitimate user of the bank corresponding to the network payment system 1, and step 110 is performed; otherwise, step 108 is performed.
  • Step 106 is the same as the encryption operation of this step, except that the encryption operation in step 106 is performed in the mobile terminal; the encryption operation of this step is performed in the network payment system server.
  • Step 108 If the login fails, the login is performed again, and it is determined whether the number of logins reaches the maximum number of landings. If not, return to step 104 to log in; if yes, go to step 109.
  • Step 109 The digital certificate is invalidated and needs to be re-applied to the bank, and the network payment ends.
  • Step 110 When the user is legal, the user is allowed to log in, and the network payment operation is performed on the mobile terminal. Specifically, the mobile terminal performs a network payment operation by connecting a wired interface or by using a wireless manner.
  • Step 111 The network payment ends.
  • the mobile terminal performs a network payment operation by using a digital certificate.
  • the implementation of the embodiment of the present invention only needs to embed an encryption chip supporting multiple encryption algorithms in the mobile terminal, and the banking service center does not need to add new things.
  • the digital certificate is imported into the encryption chip and also stored in the flash memory through the digital baseband (DBB). (flash), at this time, the encryption chip has an encryption function supporting a certain encryption algorithm, and the correspondence between the bank's network payment system and the encryption algorithm is stored in the flash.
  • the order issued by the bank's network payment system server (whether it is logged in or not The function is also stored in the flash through the DBB.
  • the software is responsible for completing the reading and display functions from the flash.
  • the flash is written by the DBB, and it is necessary to query which bank's network payment function is supported by the mobile terminal.
  • the flash reads the information of the digital certificate and displays "network payment function enabled", and logs in to the bank's website.
  • the network payment system 1 supports encryption.
  • Algorithm B1 the encryption chip performs algorithm B1 for verification. If the network payment system 1 server determines that the user is an illegal user, the sending command fails to log in, and the mobile terminal displays the login failure through the flash reading. If the login success message is stored in the flash through the DBB, the mobile terminal reads the allowed login from the flash. The message is logged in.
  • the encryption operation using the encryption algorithm is performed simultaneously in the bank's network payment system server and in the encryption chip of the mobile terminal.
  • the hardware only needs to complete the data transmission.
  • the routes are divided into two types (wired and wireless). .
  • the data between the bank's network payment system server and the encryption chip of the mobile terminal is transmitted through USB, and the baseband chip not only supplies power to the encryption chip, but also The USB data is transmitted to the encryption chip and the network payment operation is performed.
  • the data between the bank's network payment system server and the mobile terminal's encryption chip first arrives at the mobile server through the wireless network and then goes to the mobile terminal RF RF module, and the RF module receives the baseband chip after demodulation. After passing to the encryption chip, and performing network payment operations.
  • the transmitted data is encrypted, even if it is garbled, thus ensuring the security of online payment from the hardware.
  • the embodiment of the invention further provides a mobile terminal for implementing network payment.
  • the device includes:
  • the selecting module 201 is configured to select from a plurality of network payment systems according to an instruction input by the user.
  • the sending module 204 is configured to send, to the selected network payment system, a digital certificate corresponding to the authentication
  • the payment module 202 is configured to log in to the selected network payment system to perform a network payment operation when determining that the user is legal according to the digital certificate.
  • the payment module 202 is further configured to: when determining that the digital certificate is correct, send a login request to the selected network payment system through the network, and receive a string of random numbers sent by the selected network payment system, and then select the The key corresponding to the network payment system and the encryption algorithm corresponding to the selected network payment system encrypt the received random number to obtain the first character string and send it to the selected network payment system, according to the selected network.
  • the permission login message sent by the payment system is logged in to the selected network payment system, and the allowed login message is the selected network payment system encrypting the random number through its own corresponding key and its own encryption algorithm.
  • the second character string is obtained, and the first character string and the second character string are compared, and the user is determined to be sent after being legal.
  • the payment module 202 is further configured to perform a network payment operation by connecting a wired interface or by using a wireless manner.
  • the method further includes: a storage module 203, configured to store the digital certificate in the flash memory through the digital baseband;
  • the payment module 202 is further configured to perform a network payment operation by using a digital certificate.
  • the payment module 202 is further configured to store the allowed login message sent by the selected network payment system in the flash memory through the digital baseband, and extract the permission login message from the flash memory to log in.
  • the payment module 202 is further configured to store the allowed login message sent by the selected network payment system in the flash memory through the digital baseband, and extract the permission login message from the flash memory to log in.

Description

一种实现网络支付的方法及移动终端 技术领域
本发明涉及通信技术领域， 尤其涉及一种实现网络支付的方法及移动 终端。 背景技术
随着网络的发展和现代都市人快速的生活节奏， 网上购物成为流行， 可以足不出户购买到自己想要的商品， 但是通过银行卡网上购物存在风险， 如黑客、 假网站、 木马病毒等， 确保网络安全期间， USB Key是银行系统 推出的一种用于在网络上以客户端的形式识别客户身份的数字证书。 从技 术角度看， USB Key是用于网上银行电子签名和数字认证的工具， 它内置 微型智能卡处理器， 釆用 1024位非对称密钥算法对网上数据进行加密、 解 密和数字签名， 确保网上交易的保密性、 真实性、 完整性和不可否认性。
当今每个人几乎都是同时在几家银行办理业务， 如果在网上进行几家 银行支付， 就需要带多个 USB Key, 给消费者带来了极大的不便。 发明内容
为了解决现有技术中实现多家网络支付要带多个 USB Key的问题， 本 发明提供了一种实现网络支付的方法及移动终端。
本发明实施例提供的一种实现网络支付的方法， 包括：
移动终端根据用户输入的指令， 从多个网络支付系统中选择出进行本 次网络支付时所需网络支付系统；
移动终端向选择出的网络支付系统发送进行鉴权所需对应的数字证 书； 根据数字证书确定用户合法时， 移动终端登录到选择出的网络支付系 统， 进行网络支付操作。
本发明实施例还提供了一种实现网络支付的移动终端， 包括： 选择模块， 用于根据用户输入的指令， 从多个网络支付系统中选择出 进行本次网络支付时所需网络支付系统；
发送模块， 用于向选择出的网络支付系统发送进行鉴权所需对应的数 字证书；
支付模块， 用于根据数字证书确定用户合法时， 登录到选择出的网络 支付系统， 进行网络支付操作。
由于本发明实施例提供的方案， 通过移动终端从多个网络支付系统中 进行选择， 因此无需携带多个 USB Key„ 附图说明
图 1为本发明实施例提供的方法流程图；
图 2为本发明实施例提供的装置结构图。 具体实施方式
现结合说明书附图对本发明实施例的技术方案进行详细说明， 为了解 决现有技术中实现多家网络支付要带多个 USB Key的问题， 本发明实施例 提供了一种实现网络支付的方法及移动终端， 首先说明一下本发明实施例 是使用数字证书网上进行多家银行的网络支付的流程和加密算法实现过 程， 首先要在银行的网络支付系统办理数字证书， 通过银行的网络支付系 统将数字证书导入到移动终端， 之后需要在银行的网络支付系统登陆注册， 客户需要自己设一个密钥， 该密钥同时会存储在移动终端的加密芯片和银 行的服务器中。 比如， 分别提供三个银行的网络支付系统 1、 网络支付系统 2、 网络支付系统 3; 用户设置对应的密钥分别为 Al、 A2、 A3 , 存储在移 动终端中； 对应的加密算法分别为 Bl、 B2、 B3 ; 数字证书导入成功后， 移 动终端界面上会对应显示这三个银行的网络支付功能已被启用。
本发明实现网络支付的方法， 包括： 移动终端根据用户输入的指令， 从多个网络支付系统中选择出进行本次网络支付时所需网络支付系统； 移 动终端向选择出的网络支付系统发送进行鉴权所需对应的数字证书； 根据 数字证书确定用户合法时， 移动终端登录到选择出的网络支付系统， 进行 网络支付操作。 下面结合图 1 对本实施例提供的实现网络支付的方法进行 说明， 包括：
步骤 101、 需要网上支付时， 移动终端根据用户输入的指令， 选择对应 的网络支付系统， 例如移动终端根据用户输入的指令为 1 , 则选择网络支付 系统 1 , 相应地， 网络支付系统 1对应的银行的网络支付功能启用。
步骤 102、 网络支付系统服务器调用移动终端的数字证书。
网络支付系统服务器调用移动终端的数字证书， 是为了对数字证书的 有效性进行验证。
步骤 103、 网络支付系统服务器对数字证书进行查验， 若提供的数字证 书不正确， 则执行步骤 111 , 网络支付结束； 若提供的数字证书正确， 则执 行步骤 104。
步骤 104、移动终端通过网络， 向网络支付系统服务器发送一个登陆请 求。
移动终端在发送登陆请求时， 还要向网络支付系统服务器发送用户输 入的用户名和登陆密码。
步骤 105、 网络支付系统服务器接收到登陆请求后， 向移动终端发送一 串随机数。
网络支付系统服务器在验证用户输入的用户名和登陆密码正确后， 向 移动终端发送一串随机数。 步骤 106、移动终端接收网络支付系统发送的一串随机数后， 通过该网 络支付系统所对应的密钥， 和该网络支付系统所对应的加密算法， 对接收 的随机数进行加密运算， 得到第一字符串， 并发送给该网络支付系统。
例如， 移动终端接收网络支付系统 1 服务器发来的随机数， 对应网络 支付系统 1的密钥为 A1 , 对应的加密算法为 B1 , 则将随机数和密钥 A1相 加， 釆用 B1进行加密后， 得到第一字符串 C1 , 发送给网络支付系统 1。
步骤 107、 网络支付系统服务器通过该网络支付系统所对应的密钥， 和 该网络支付系统所对应的加密算法， 对随机数进行加密运算， 得到第二字 符串； 如果第一字符串和第二字符串相等， 则表明该用户是网络支付系统 1 对应的银行的合法用户， 执行步骤 110, 否则执行步骤 108。
步骤 106和该步骤的加密运算相同， 只是步骤 106中的加密运算在移 动终端内执行； 该步骤的加密运算在网络支付系统服务器内执行。
步骤 108、 显示登陆失败， 则再次登陆， 判断登陆次数是否达到最大登 陆次数， 若否， 返回执行步骤 104, 进行登陆； 若是， 则执行步骤 109。
步骤 109、 数字证书失效需要到银行重新办理， 网络支付结束。
步骤 110、 用户合法时， 允许用户登陆， 在移动终端上进行网络支付操 作。 具体的， 移动终端通过连接有线接口的方式或通过无线的方式进行网 络支付操作。
步骤 111、 网络支付结束。
具体实施时， 移动终端是利用数字证书进行网络支付操作。
本发明实施例的实现在移动终端里只需要嵌入一个支持多种加密算法 的加密芯片， 银行服务中心不需要增加新的东西， 数字证书导入加密芯片 的同时也通过数字基带 （DBB )存储在闪存（flash ) 中， 这时加密芯片具 备了支持一定加密算法的加密功能， flash里存贮银行的网络支付系统和加 密算法的对应关系。 银行的网络支付系统服务器发出的命令（是否登陆成 功）也会通过 DBB存储在 flash中，软件负责完成从 flash读取和显示功能， 比如数字证书导入移动终端之后， 通过 DBB写入 flash, 需要查询移动终端 支持哪些银行的网络支付功能时， 通过 flash读取数字证书的信息并显示 "网络支付功能启用"， 登陆该银行的网站， 在进行步骤 106 时， 从 flash 中读取网络支付系统和加密算法的对应关系， 如网络支付系统 1 支持加密 算法 B1 , 则加密芯片实行算法 B1进行校验。 如果网络支付系统 1服务器 判断是非法用户， 发送命令登陆失败， 移动终端通过 flash读取显示登陆失 败， 如果通过 DBB存储在 flash中的是登陆成功消息， 则移动终端从 flash 中读取出允许登录消息进行登录。
前面已经说明， 釆用加密算法进行加密运算是在银行的网络支付系统 服务器内、 以及移动终端的加密芯片内同时进行的， 硬件上只需完成数据 传递， 途径分为两类 （有线和无线）。
有线方式下（即通过数据线将移动终端连在个人计算机上）， 银行的网 络支付系统服务器和移动终端的加密芯片之间的数据通过 USB传送， 基带 芯片除了给加密芯片供电之外， 要将 USB数据传给加密芯片， 并进行网络 支付操作。
无线方式下 （即使用移动终端上网）银行的网络支付系统服务器和移 动终端的加密芯片之间的数据通过无线网络先到达移动服务器再到移动终 端射频 RF模块， RF模块接收后经基带芯片解调后传给加密芯片， 并进行 网络支付操作。
传输的数据是经过加密的， 即使获取也是乱码， 这样从硬件上就保证 了网上支付的安全性。
本发明实施例还提供了一种实现网络支付的移动终端， 如图 2 所示， 该装置包括：
选择模块 201 , 用于根据用户输入的指令，从多个网络支付系统中选择 出进行本次网络支付时所需网络支付系统；
发送模块 204,用于向选择出的网络支付系统发送进行鉴权所需对应的 数字证书；
支付模块 202, 用于根据数字证书确定用户合法时，登录到选择出的网 络支付系统， 进行网络支付操作。
进一步， 支付模块 202, 还用于在确定所述数字证书正确时， 通过网络 向选择出的网络支付系统发送登录请求， 接收选择出的网络支付系统发送 的一串随机数后， 通过选择出的网络支付系统所对应的密钥， 和选择出的 网络支付系统所对应的加密算法对接收的随机数进行加密运算， 得到第一 字符串并发送给选择出的网络支付系统， 根据选择出的网络支付系统发送 的允许登录消息， 登录到选择出的网络支付系统， 允许登录消息是选择出 的网络支付系统通过自身所对应的密钥， 和自身所对应的加密算法， 对随 机数进行加密运算， 得到第二字符串， 且比较第一字符串和第二字符串相 同、 确定用户合法后发送的。
进一步， 支付模块 202, 还用于通过连接有线接口的方式或通过无线的 方式进行网络支付操作。
进一步， 还包括： 存储模块 203 , 用于将数字证书通过数字基带存储在 闪存；
支付模块 202 , 还用于利用数字证书进行网络支付操作。
进一步， 支付模块 202, 还用于通过数字基带将选择出的网络支付系统 发送的允许登录消息存储在闪存中， 从闪存中提取出允许登录消息进行登 录。 发明的精神和范围。 这样， 倘若本发明的这些修改和变型属于本发明权利 要求及其等同技术的范围之内， 则本发明也意图包含这些改动和变型在内。

Claims

权利要求书
1、 一种实现网络支付的方法， 其特征在于， 包括：
移动终端根据用户输入的指令， 从多个网络支付系统中选择出进行本 次网络支付时所需网络支付系统；
移动终端向选择出的网络支付系统发送进行鉴权所需对应的数字证 书；
根据所述数字证书确定用户合法时， 移动终端登录到选择出的网络支 付系统， 进行网络支付操作。
2、 如权利要求 1所述的方法， 其特征在于， 移动终端登录到选择出的 网络支付系统具体为：
移动终端确定所述数字证书正确时， 向选择出的网络支付系统发送登 录请求；
移动终端接收选择出的网络支付系统发送的一串随机数后， 通过选择 出的网络支付系统所对应的密钥， 和选择出的网络支付系统所对应的加密 算法对接收的随机数进行加密运算， 得到第一字符串并发送给选择出的网 络支付系统；
移动终端根据选择出的网络支付系统发送的允许登录消息， 登录到选 择出的网络支付系统， 允许登录消息是选择出的网络支付系统通过自身所 对应的密钥， 和自身所对应的加密算法， 对随机数进行加密运算， 得到第 二字符串， 且比较第一字符串和第二字符串相同、 确定用户合法后发送的。
3、 如权利要求 1所述的方法， 其特征在于， 移动终端进行网络支付操 作具体为：
移动终端通过连接有线接口的方式或通过无线的方式进行网络支付操 作。
4、 如权利要求 1所述的方法， 其特征在于， 移动终端根据用户输入的 指令， 从多个网络支付系统中选择出进行本次网络支付时所需网络支付系 统之前， 该方法还包括：
移动终端将数字证书通过数字基带存储在闪存。
5、 如权利要求 2所述的方法， 其特征在于， 移动终端根据选择出的网 络支付系统发送的允许登录消息， 登录到选择出的网络支付系统具体为： 移动终端通过数字基带将选择出的网络支付系统发送的允许登录消息 存储在闪存中， 从闪存中提取出允许登录消息进行登录。
6、 一种实现网络支付的移动终端， 其特征在于， 包括：
选择模块， 用于根据用户输入的指令， 从多个网络支付系统中选择出 进行本次网络支付时所需网络支付系统；
发送模块， 用于向选择出的网络支付系统发送进行鉴权所需对应的数 字证书；
支付模块， 用于根据所述数字证书确定用户合法时， 登录到选择出的 网络支付系统， 进行网络支付操作。
7、 如权利要求 6所述的移动终端， 其特征在于， 所述支付模块， 还用 于在确定所述数字证书正确时， 通过网络向选择出的网络支付系统发送登 录请求， 接收选择出的网络支付系统发送的一串随机数后， 通过选择出的 网络支付系统所对应的密钥， 和选择出的网络支付系统所对应的加密算法 对接收的随机数进行加密运算， 得到第一字符串并发送给选择出的网络支 付系统， 根据选择出的网络支付系统发送的允许登录消息， 登录到选择出 的网络支付系统， 允许登录消息是选择出的网络支付系统通过自身所对应 的密钥， 和自身所对应的加密算法， 对随机数进行加密运算， 得到第二字 符串， 且比较第一字符串和第二字符串相同、 确定用户合法后发送的。
8、 如权利要求 6所述的移动终端， 其特征在于， 支付模块， 还用于通 过连接有线接口的方式或通过无线的方式进行网络支付操作。
9、 如权利要求 6所述的移动终端， 其特征在于， 还包括： 存储模块， 用于将数字证书通过数字基带存储在闪存。
10、 如权利要求 7所述的移动终端， 其特征在于， 支付模块， 还用于 通过数字基带将选择出的网络支付系统发送的允许登录消息存储在闪存 中， 从闪存中提取出允许登录消息进行登录。
PCT/CN2010/080425 2010-09-19 2010-12-29 一种实现网络支付的方法及移动终端 WO2012034339A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US13/575,429 US8751404B2 (en) 2010-09-19 2010-12-29 Method and mobile terminal for realizing network payment
EP10857195A EP2518671A4 (en) 2010-09-19 2010-12-29 METHOD AND MOBILE TERMINAL FOR REALIZING NETWORK PAYMENT

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN2010102889479A CN101957958A (zh) 2010-09-19 2010-09-19 一种实现网络支付的方法及手机终端
CN201010288947.9 2010-09-19

Publications (1)

Publication Number Publication Date
WO2012034339A1 true WO2012034339A1 (zh) 2012-03-22

Family

ID=43485278

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2010/080425 WO2012034339A1 (zh) 2010-09-19 2010-12-29 一种实现网络支付的方法及移动终端

Country Status (4)

Country Link
US (1) US8751404B2 (zh)
EP (1) EP2518671A4 (zh)
CN (1) CN101957958A (zh)
WO (1) WO2012034339A1 (zh)

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103188239B (zh) * 2011-12-30 2018-05-08 上海博泰悦臻电子设备制造有限公司 车载交易的加密系统和车载端
US20130218779A1 (en) * 2012-02-21 2013-08-22 Rawllin International Inc. Dual factor digital certificate security algorithms
US20140040114A1 (en) * 2012-08-03 2014-02-06 First Data Corporation Systems and Methods for Optimizing the Routing of Debit Transactions
KR101330961B1 (ko) * 2012-12-26 2013-11-18 신한카드 주식회사 모바일 신용카드의 발급처리 방법
CN103973647A (zh) * 2013-01-31 2014-08-06 华为终端有限公司 应用访问方法和设备
CN104009962B (zh) * 2013-02-26 2018-01-16 中国银联股份有限公司 用于安全性信息交互的设备
CN104574057B (zh) 2013-10-25 2020-06-16 腾讯科技（深圳）有限公司 一种在线支付方法及相关设备、系统
WO2017135970A1 (en) * 2016-02-05 2017-08-10 Entit Software Llc Extended ciphertexts
CN108306960B (zh) * 2018-01-29 2021-03-02 深圳平安综合金融服务有限公司 账单下载方法、装置、计算机设备和存储介质
CN117459931A (zh) * 2023-10-10 2024-01-26 山东三木众合信息科技股份有限公司 一种数据加密方法、系统及存储介质

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2008102935A1 (en) * 2007-02-23 2008-08-28 Sk Telecom Co., Ltd Discount payment method and system using a temporary card number
CN101299286A (zh) * 2007-04-30 2008-11-05 胡红雨 利用手机生成认证图形进行pos支付的方法及其系统和手机
US20090150266A1 (en) * 2007-11-30 2009-06-11 Mark Dickelman Buyer Routing Arrangements and Methods for Disparate Network Systems

Family Cites Families (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TW355899B (en) 1997-01-30 1999-04-11 Qualcomm Inc Method and apparatus for performing financial transactions using a mobile communication unit
US6327578B1 (en) * 1998-12-29 2001-12-04 International Business Machines Corporation Four-party credit/debit payment protocol
US7343351B1 (en) * 1999-08-31 2008-03-11 American Express Travel Related Services Company, Inc. Methods and apparatus for conducting electronic transactions
FR2814880B1 (fr) * 2000-10-04 2003-03-28 Magicaxess Circuit d'inversion pour les conventions directe et indirecte d'un module electronique
US6836765B1 (en) * 2000-08-30 2004-12-28 Lester Sussman System and method for secure and address verifiable electronic commerce transactions
US7107248B1 (en) 2000-09-11 2006-09-12 Nokia Corporation System and method of bootstrapping a temporary public-key infrastructure from a cellular telecommunication authentication and billing infrastructure
GB2366141B (en) * 2001-02-08 2003-02-12 Ericsson Telefon Ab L M Authentication and authorisation based secure ip connections for terminals
ATE406747T1 (de) * 2001-07-16 2008-09-15 Research In Motion Ltd System und verfahren zur unterstützung von mehreren zertifizierungsbehörden auf einem mobilen kommunikationsgerät
CN1221900C (zh) * 2001-12-17 2005-10-05 北京兆日科技有限责任公司 动态电子密码设备及其资源共享系统的用户身份认证方法
GB0318000D0 (en) 2003-07-31 2003-09-03 Ncr Int Inc Mobile applications
US8369262B2 (en) * 2004-11-30 2013-02-05 Apple Inc. Automated logon for diverse network access
CN101394615B (zh) * 2007-09-20 2012-10-17 中国银联股份有限公司 一种基于pki技术的移动支付终端及支付方法
CN101414909B (zh) * 2008-11-28 2010-12-01 中国移动通信集团公司 网络应用用户身份验证系统、方法和移动通信终端
US20120041879A1 (en) * 2010-08-10 2012-02-16 Paul Kim Methods and systems for payment processing between consumers and merchants

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2008102935A1 (en) * 2007-02-23 2008-08-28 Sk Telecom Co., Ltd Discount payment method and system using a temporary card number
CN101299286A (zh) * 2007-04-30 2008-11-05 胡红雨 利用手机生成认证图形进行pos支付的方法及其系统和手机
US20090150266A1 (en) * 2007-11-30 2009-06-11 Mark Dickelman Buyer Routing Arrangements and Methods for Disparate Network Systems

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP2518671A4 *

Also Published As

Publication number Publication date
US8751404B2 (en) 2014-06-10
CN101957958A (zh) 2011-01-26
EP2518671A4 (en) 2013-01-16
US20120296830A1 (en) 2012-11-22
EP2518671A1 (en) 2012-10-31

Similar Documents

Publication Publication Date Title
US8689290B2 (en) System and method for securing a credential via user and server verification
JP6012125B2 (ja) 問い合わせ型トランザクションによる強化された２ｃｈｋ認証セキュリティ
WO2012034339A1 (zh) 一种实现网络支付的方法及移动终端
US9338163B2 (en) Method using a single authentication device to authenticate a user to a service provider among a plurality of service providers and device for performing such a method
EP2859488B1 (en) Enterprise triggered 2chk association
US8433914B1 (en) Multi-channel transaction signing
CN101312453B (zh) 用户终端及其登录网络服务系统的方法
US20140258710A1 (en) Mobile Handset Identification and Communication Authentication
US8433908B2 (en) Card issuing system, card issuing server, card issuing method and program
CN107730240B (zh) 多因子多信道id认证和交易控制及多选项支付系统及方法
EP2690840B1 (en) Internet based security information interaction apparatus and method
GB2434724A (en) Secure transactions using authentication tokens based on a device "fingerprint" derived from its physical parameters
CN102694781A (zh) 基于互联网的安全性信息交互系统及方法
US20110162053A1 (en) Service assisted secret provisioning
TWI471804B (zh) 空白智慧卡裝置發行系統
CN104125064A (zh) 一种动态密码认证方法、客户端及认证系统
WO2015168878A1 (zh) 支付方法和装置以及支付要素处理方法和装置
JP2022502881A (ja) 非接触カードへの潜在的な攻撃を通知するためのシステムおよび方法
KR101498120B1 (ko) 클라우드 공인인증 시스템 및 그 방법
TW201619880A (zh) 利用卡裝置的網路認證方法
WO2011060739A1 (zh) 一种安全系统及方法
CN102752265A (zh) 基于互联网的安全性信息交互系统及方法
CN114631109A (zh) 用于交叉耦合风险分析和一次性口令的系统及方法
JP4964048B2 (ja) 非接触ｉｃと携帯情報端末を使用した認証システム及び認証方法
KR20140007628A (ko) 모바일 계좌이체 검증처리 방법

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 10857195

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 13575429

Country of ref document: US

Ref document number: 2010857195

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: DE