WO2012113189A1

WO2012113189A1 - Mobile payment system, mobile terminal and method for realizing mobile payment service

Info

Publication number: WO2012113189A1
Application number: PCT/CN2011/075959
Authority: WO
Inventors: 梁国和
Original assignee: 中兴通讯股份有限公司
Priority date: 2011-02-23
Filing date: 2011-06-20
Publication date: 2012-08-30
Also published as: CN102103778B; CN102103778A

Abstract

A mobile payment system, a mobile terminal (20) and a method for realizing mobile payment service are provided. The system comprises a mobile payment server (10) and the mobile terminal (20), wherein the mobile terminal (20) comprises a virtual desktop control module (202), a virtual driving control module (204) and a mobile payment module (206); and the mobile payment server (10) comprises an authentication module (102), a mobile payment platform module (104) and an account platform module (106). The system solves the problem that the payment service is complicatedly realized due to mobile terminal difference, and various mobile payment services can be realized if only basic display and communication interfaces are provided no matter which type of mobile terminal is used. Deployment of the mobile payment service is easy to be realized, and customer experience satisfaction is enhanced.

Description

TECHNICAL FIELD The present invention relates to the field of communications, and in particular to a mobile payment system, a mobile terminal, and a method for implementing a mobile payment service. BACKGROUND OF THE INVENTION Mobile payment refers to a commercial transaction conducted by a transaction partner through a mobile phone, a PDA (Personal Digital Assistant) or the like for a certain commodity or service. Mobile payment is a way to allow users to use the terminal (usually a mobile phone) to pay for the goods or services they consume. Users can recharge, shop online, bet on lottery, etc. at any time, anywhere, and at will. Mobile payment services can be divided into remote payment and on-site payment. Remote payment refers to the long-distance payment behavior of users based on terminals and mobile communication networks through web pages, SMS, STK (SIM TOOL KIT, User Identification Application Development Tools). Such as: Internet shopping, game lottery, utility payment, etc. On-site payment refers to the user's use of the built-in payment account terminal. In the merchants that install the POS (Point Of Sale) machine that supports the service, the service type of the payment transaction, such as NFC, is completed by means of a "swipe card". ( Near Field Communication, Near Field Communication) Electronic 4 package business. With the rapid development of 3G, WiFi, mobile internet and smart terminals, the development of mobile payment has been promoted. Terminals, especially mobile phones, are trust tools that can represent real names. Mobile payment terminals are one of the trends in the future. The advantage is that it can be paid anywhere, anytime, securely, reliably, and conveniently. However, the following problems also exist: The mobile payment value chain is complex, including operators, payment service providers (such as banks, UnionPay, etc.), application providers (bus, campus, public utilities, etc.), equipment providers (terminal manufacturers, card suppliers). , chip providers, etc.), system integrators, merchants and end users, payment services vary, the interests of all parties are different; the operating systems supported by the terminal are diverse, including Symbian, Linux, Windows mobile,

BREW, etc., the difference in service support is large, and the terminal client software is faced with a variety of terminal problems, which complicates the deployment payment service. SUMMARY OF THE INVENTION A primary object of the present invention is to provide a method for implementing a mobile payment system, a mobile terminal, and a mobile payment service, so as to at least solve the above-mentioned problem that the payment service is complicated due to the differentiation of the mobile terminal. According to an aspect of the present invention, a mobile payment system is provided, comprising: a mobile payment server and a mobile terminal; wherein the mobile terminal comprises: a virtual desktop control module configured to send a connection request to a mobile payment server through a remote control protocol, And providing identity information to the mobile payment server through the remote control protocol, and presenting the mobile payment service according to the control of the mobile payment server, and feeding back the transaction operation information of the user to the mobile payment server; the virtual drive control module is configured to drive and control the virtual desktop control The module presents hardware required for the current service; the mobile payment module is configured to complete the mobile payment service according to the control of the mobile payment server; the virtual desktop control module; the mobile payment server includes: an authentication module, configured to receive a connection request of the mobile terminal, according to The identity information provided by the mobile terminal authenticates the identity of the mobile terminal; the mobile payment platform module is configured to establish a virtual machine for the mobile terminal after the mobile terminal passes the authentication of the authentication module, VM control over mobile payment services presented on the mobile terminal, and execute the current business transaction in accordance with the operation information of the mobile terminal feedback; account platform module, set account management for the implementation of mobile payment platform module current business. The mobile payment platform module includes: a storage unit configured to store hardware function information of the mobile terminal; a service encryption unit configured to generate a service plus password stream according to the hardware function information stored by the storage unit, and encrypt the current service by using the service plus password stream, And sending the encrypted current service to the mobile terminal; the virtual desktop control module includes: a service decryption unit, configured to generate a service decryption flow according to the hardware function information of the mobile terminal, and decrypt the received current service by using the service decryption stream, and present The current business after decryption. The service encryption unit includes: a service plus password stream generation subunit, configured to generate a service plus password stream in a picture or video format according to the hardware function information stored by the storage unit; the service decryption unit includes: a service decryption stream generation subunit, Set the hardware function information of the mobile terminal to generate a service decryption stream in a picture or video format. The system further includes: an acceptance terminal and an acceptance terminal management device; the mobile terminal further includes: a near field communication module configured to perform mobile payment service communication with the acceptance terminal to complete an on-site payment service; the acceptance terminal is set to be managed through the acceptance terminal The device uploads the transaction operation information of the on-site payment service to the mobile payment platform module of the mobile payment server; and accepts the terminal management device, and sets the transaction operation information of the on-site payment service between the receiving terminal and the mobile payment server. Another according to the invention In a aspect, a mobile terminal is provided, including: a virtual desktop control module configured to send a connection request to a mobile payment server through a remote control protocol, and provide identity information to a mobile payment server through a remote control protocol, and according to a mobile payment server control Presenting a mobile payment service, and feeding back the transaction operation information of the user to the mobile payment server; the virtual drive control module is configured to drive and control the virtual desktop control module to present hardware required for the current service; and the mobile payment module is set to be based on the mobile payment server Control completes the mobile payment service. The virtual desktop control module includes: a service decryption unit, configured to generate a service decryption stream according to hardware function information of the mobile terminal when the current service received is encrypted by using the service encryption stream, and decrypt the traffic using the service decryption stream The current service received presents the decrypted current service; wherein the service plus password stream is generated by the mobile payment server according to the hardware function information of the mobile terminal. The service decryption unit includes: a service decryption stream generation subunit, configured to generate a service or password stream in a picture or video format by hardware function information of the mobile terminal. The mobile terminal further includes: a near field communication module configured to perform mobile payment service communication with the receiving terminal to complete the on-site payment service. According to another aspect of the present invention, a method for implementing a mobile payment service is provided, including: a mobile terminal sends a connection request to a mobile payment server by using a remote control protocol; and after receiving the connection request, the mobile payment server acquires identity information of the mobile terminal. And authenticating the identity of the mobile terminal according to the identity information, after the authentication is passed, establishing a virtual machine for the mobile terminal, and controlling the mobile payment service to be presented on the mobile terminal by using the virtual machine; the mobile terminal receiving the transaction operation information of the user, and paying to the mobile terminal The server feeds back the transaction operation information; the mobile payment server performs the current service according to the transaction operation information, and performs account management on the current service. The mobile payment server controls the mobile payment service to be presented on the mobile terminal by using the virtual machine. The mobile payment server generates a service plus password stream according to the stored hardware function information of the mobile terminal, and uses the service plus password stream to encrypt the current service, and the encrypted service is encrypted. The current service is sent to the mobile terminal. After receiving the current service, the mobile terminal generates a service decryption stream according to its own hardware function information, and uses the service decryption stream to decrypt the current service and present the decrypted current service. The service encryption password stream and the service decryption password stream are both picture or video formats. Through the invention, the mobile payment server is used to establish a virtual machine for the mobile terminal, and the running procedure of the mobile payment service is set on the mobile payment server, thereby solving the problem that the payment service is complicated due to the differentiation of the mobile terminal, regardless of the mobile terminal. What type is it, as long as it has basic display and The communication interface can realize various mobile payment services, and the deployment of the mobile payment service is simple, and the customer experience satisfaction is improved. BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are set to illustrate,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram showing the structure of a mobile payment system according to a first embodiment of the present invention; FIG. 2 is a block diagram showing the structure of a mobile payment system according to a second embodiment of the present invention; Figure 4 is a block diagram showing the structure of another mobile payment system according to Embodiment 3 of the present invention; Figure 5 is a block diagram showing the structure of a mobile terminal according to Embodiment 4 of the present invention; and Figure 6 is a block diagram of the mobile terminal according to Embodiment 4 of the present invention; A flowchart of a method for implementing a mobile payment service according to Embodiment 5 of the present invention. BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, the present invention will be described in detail with reference to the accompanying drawings. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict. In the embodiment of the present invention, the mobile payment service is performed based on the virtualization technology, and the mobile payment application running environment is transferred from the terminal side to the server side. The terminal only needs to support common functions such as virtual desktop program, virtual drive control and mobile payment, and can support various payment services deployed on the server side. Based on this, an embodiment of the present invention provides a mobile payment system, a mobile terminal, and a method for implementing a mobile payment service. Embodiment 1 This embodiment provides a mobile payment system. Referring to FIG. 1, the system includes a mobile payment server 10 and a mobile terminal 20. The mobile terminal 20 includes: a virtual desktop control module 202, a virtual drive control module 204, and a mobile device. Payment module 206; the functions of each module are as follows: The virtual desktop control module 202 is configured to send a connection request to the mobile payment server 10 through the remote control protocol, and provide identity information to the mobile payment server 10 through the remote control protocol, and present the mobile payment service according to the control of the mobile payment server 10, to the mobile The payment server 10 feeds back the transaction operation information of the user. The identity information of the mobile terminal in this embodiment may be the login account and password of the mobile terminal user, and is used to authenticate the identity of the user. The virtual desktop control module 202 presents the mobile payment. The manner of the service may be various, for example, the mobile payment service is presented by voice, or the mobile payment service is displayed in the form of a picture or a text, and the mobile payment service may also be played by video; the virtual drive control module 204 and the virtual desktop control module 202 Connected, configured to drive and control the virtual desktop control module 202 to present hardware required for the current service; the hardware may be an LCD (Liquid Crystal Display), or other hardware; the mobile payment module 206, and the virtual desktop The module 202 is connected to be configured to complete the mobile payment service according to the control of the mobile payment server. The mobile payment server 10 includes: an authentication module 102, a mobile payment platform module 104 and an account platform module 106. The functions of each module are as follows: the authentication module 102, setting To receive the connection request of the mobile terminal 20, the identity of the mobile terminal 20 is authenticated according to the identity information provided by the mobile terminal 20; the authentication module 102 may be specifically a security authentication management center, and centrally authenticate each terminal user; The module 104 is connected to the authentication module 102, and is configured to establish a virtual machine for the mobile terminal 20 after being authenticated by the authentication module 102, and the mobile payment service is controlled by the virtual machine to be presented on the mobile terminal 20, and according to the mobile terminal 20 The feedback transaction operation information executes the current service; the account platform module 106 is connected to the mobile payment platform module 104 and configured to perform account management on the current service performed by the mobile payment platform module 104. The mobile terminal 20 of the present embodiment includes the above-described mobile payment function in addition to the mobile communication function. The mobile payment platform module 104 of this embodiment provides a virtual machine for each mobile terminal, and sets a resource pool and a virtual device. Each virtual machine runs a mobile terminal instance, and the mobile payment service runs on the hosted virtual machine, and the virtual machine controls the mobile terminal through the remote control protocol. Virtualization technologies currently include monthly server virtualization, application virtualization, and desktop virtualization. At present, technologies such as network virtualization and video card virtualization are rapidly developing. For physical devices supporting virtualization technology, it is easy to implement IAAS (Infrastructure As Service) to realize cloud computing. The mobile payment server of the embodiment sets the running program of the mobile payment service on the mobile payment server by setting up the virtual machine for the mobile terminal, and solves the payment service realization caused by the difference of the mobile terminal (for example, the operating system is different). Complex problem, no matter what type of mobile terminal, as long as it has basic display and communication interface functions, it can realize various mobile payment services. At the same time, the software upgrade of mobile payment service in this mode only needs mobile payment. The server operates, is simple to implement, and improves customer experience satisfaction. Considering that the security mechanism in the related mobile payment technology still faces Trojan hijacking and phishing or man-in-the-middle attacks, such as digital certificate or dynamic token two-factor authentication, there is still a security risk. Therefore, this embodiment uses the associated hardware associated with the mobile terminal hardware. / decryption method. Based on this, the mobile payment platform module 104 includes: a storage unit and a service encryption unit, wherein: the storage unit is configured to store hardware function information of the mobile terminal 20; wherein the hardware function information may include: LCD size, resolution, Codec ( Codec) Supports information such as codec format; The mobile payment server can obtain the hardware function information of each mobile terminal offline, for example, when the mobile user signs the mobile payment service with the operator, or obtains through other secure channels. The hardware function information of the mobile terminal; the service encryption unit is connected to the storage unit, and is configured to generate a service plus password stream according to the hardware function information stored by the storage unit, and encrypt the current service by using the service plus password stream, ^! The encrypted current service is sent to the mobile terminal 20; the virtual desktop control module 202 includes: a service decryption unit, configured to generate a service decryption stream by using the hardware function information of the mobile terminal 20, and decrypt the received current service by using the service decryption stream. , presenting the decrypted current business. Preferably, the service encryption unit includes: a service plus password stream generation subunit, configured to generate a service or password stream in a picture or video format by hardware function information stored in the storage unit; the service decryption unit includes: a service decryption stream generation subunit, The hardware function information of the mobile terminal 20 is set to generate a service decryption stream in a picture or video format. The mobile payment platform module 104 retains hardware function information of the mobile terminal through the storage unit, such as

LCD size, resolution, Codec (codec) support codec format and other related information, so mobile payment server can achieve unique encryption method for each end user based on this information, such as through security chip and image / video accelerator hardware / decryption. The payment platform module 104 transmits the transaction information and the user information to the end user through the securely encrypted video or picture through the virtual desktop technology. Because each terminal has different presentation (eg, display) and different image/video processing, it becomes impossible to attack by phishing or man-in-the-middle. Even if the malicious terminal intercepts the current service, because it does not have the hardware function information of the real mobile terminal, the malicious terminal cannot decrypt the service information. At this time, the displayed content will be garbled, so that the malicious user cannot complete the information. The current business enhances the security of mobile payment services. Embodiment 2 This embodiment provides a mobile payment system, which includes the mobile terminal and the mobile payment server shown in Embodiment 1. Referring to FIG. 2, the mobile terminal includes a virtual desktop control module 202 and a virtual drive control module 204. And the mobile payment module 206; the functions of the modules are basically the same as those in the first embodiment, except that the mobile payment module 206 further includes: a security unit 262, which is a mobile banking that can support remote payment, or can be supported. Pay NFC on site, such as SIM (User Identification Card) for security unit. The virtual desktop control module 202 of this embodiment is provided with a virtual desktop program, and the program communicates with the server (ie, the mobile payment server 10 described above) through a remote control protocol. The authentication and security control is performed by the authentication module 102 on the server, and the virtual drive control is performed according to the mobile payment service requirement, and the service is presented on the mobile terminal 20. The mobile terminal 20 of the present embodiment supports virtual drive control. In the case of being transparent to the application, the virtual machine can operate the virtual audio and video device and the I/O (input/output) interface through the remote control protocol. The virtual desktop program is rendered. The virtual drive control module includes communication module control such as 2G/3G, WiFi, and hardware drivers such as a button/touch screen, LCD, Audio, and camera; and also includes driving control of the mobile payment module 206. The above remote control protocol is a communication protocol between the mobile terminal and the server, and the remote control protocol on the general-purpose PC can be transplanted to the mobile terminal, such as a VDI (Virtual Desktop Infrastructure) protocol. Through the remote control protocol, the server payment application can be presented on the terminal side through the wireless link, that is, the desktop virtualization control is implemented; the wireless link can be completed by wireless communication methods such as 2G/3G cellular network and WiFi. Through this embodiment, various types of payment services can be easily deployed. The mobile terminal only needs to provide a universal button/touch screen, LCD, and mobile payment module to support various payment services; avoid adding security modules or terminals because of different payment services. Client program. The mobile payment server 10 of this embodiment includes: an authentication module 102 (which may also be a security authentication management center;), a mobile payment platform module 104, and an account platform module 106. Functions and embodiments of each module

1 Basically the same embodiment This embodiment completes unified authentication and security management through the security certification management center. The mobile terminal generally has a security unit, which can be used as a physical card for a password card, a digital certificate, etc., and thus can be based on a unified security authentication of the security unit. Since the payment application runs on the server, the mobile terminal 20 can present the image or video on the mobile terminal through the remote communication protocol, so the secure logic path based on the image/video encryption technology can be established between the payment platform and the mobile terminal. , Data transmission protection through image/video encryption technology. The hardware function information of each mobile terminal 20, such as LCD size, resolution, Codec (codec) supporting codec format and the like, are retained in the mobile payment platform module 104 of the server. It is possible to implement a unique encryption method for each end user according to the hardware function information, such as adding/decrypting with the security chip and the image/video accelerator hardware. The mobile payment platform delivers transaction information and user information to the end user through securely encrypted video or pictures through virtual desktop technology. Because each terminal displays differently and the image/video processing is different, it effectively prevents the attack of the phishing or middleman. The mobile payment platform module 104 is an operation platform for performing payment services such as consumption, recharge, transfer/remittance, inquiry, etc. Through this platform, management of the end user and the payment application can be realized, and the payment application platform and other application-related platforms can be realized. Interface, this platform will have significant differences depending on the payment application scenario. The account platform module 106 is responsible for centralized management of the terminal payment service system account; provides centralized clearing and settlement functions; is responsible for managing customer payment service accounts and account security information; and has a transaction risk control mechanism, a quota control function, and a parameter configuration function. Since each terminal corresponds to one virtual machine on the mobile payment platform, there will be a large number of virtual machines, and different virtual machines can load different mobile payment applications, such as bus cards and 4 line cards. So you can use the cloud computing platform to provide computing and storage resources for virtual machines. Applying the system provided in this embodiment, the method for implementing the remote mobile payment service is as follows: 1) Before the end user uses the mobile payment, the terminal user signs a contract with the operator to obtain the identity authentication security product. Such as a password card, a digital certificate, etc. carried on a security chip on the terminal. Security products here include SIM/SD cards, as well as external USB keys.

2) When the mobile terminal accesses the server through the remote control protocol (ie, the mobile payment server), the terminal user inputs the login account and password to perform user identity authentication. 3) After the authentication is passed, the mobile payment platform module creates a virtual machine for the terminal user, and presents the mobile payment service on the mobile terminal through the virtual desktop technology.

4) The user selects the transaction item, and because of the funds and accounts involved, in consideration of security issues, further identity authentication is required. This embodiment uses a general digital certificate in which a PKI (Public Key Infrastructure) is implemented in a security chip. Digital certificates are based on the public key infrastructure KPI system, including digital encryption, digital signatures, non-repudiation, data integrity and identity authentication. Further, the interaction information between the mobile terminal and the server is divided into two types according to content, one is based on image or video information, and the other is common signaling. The information of the image or video can use an encryption key different from the signaling. It can also be combined with image/video encryption compression technology, such as the codec of the security unit 262 and the image/video accelerator hardware to achieve unique encryption mode for each end user. Because the security chip and each terminal image/video processing are different, plus the private remote control protocol can be used. In this embodiment, the virtualization technology can provide different payment services according to the needs of the end user, and complete multi-application service management. The new payment service can be supported by a simple application upgrade of the server, thereby greatly shortening the deployment time and promotion cost of the new service. At the same time, the mobile payment service runs on the mobile payment platform based on virtualization technology, which is separated from the security authentication management center and the account platform, which simplifies the authentication process, ensures the security of the system, and improves the deployment capability of the payment service. Example 3 The mobile payment system provided by the above embodiments 1 and 2 is mainly for the remote mobile payment service. The actual mobile payment service also includes the on-site payment service. At this time, the mobile terminal can be equivalent to a bank card or a bus card. Based on this, the embodiment provides a mobile payment system. Referring to FIG. 3, the mobile payment system includes the mobile payment server 10 and the mobile terminal 20 shown in Embodiment 1. The system further includes: the receiving terminal 30 and The receiving terminal management device 40; the mobile terminal 20 further includes: a near field communication module 208 configured to perform mobile payment service communication with the receiving terminal 30 to complete an on-site payment service; and the receiving terminal 30 is configured to pay on-site payment through the acceptance terminal management device 40. The transaction operation information of the service is uploaded to the mobile payment platform module of the mobile payment server 10; the acceptance terminal 30 includes an electronic payment system side device such as a POS machine, a reader, and a gate, and the mobile terminal 20 communicates with the acceptance terminal 30 through the NFC antenna. The terminal management device accepts the traditional terminal service and management functions, and uploads the transaction operation information to the mobile payment platform module. The reception terminal management device 40 is provided to transfer transaction operation information of the on-site payment service between the acceptance terminal 30 and the mobile payment server 10. In addition, if the mobile terminal is only configured as a mobile payment service in the field and does not need to support the remote mobile payment service, the mobile payment module 206 in the mobile terminal 20 can be deleted, and the near field communication module 208 is directly connected to the virtual desktop control module 202. In this case, the near field communication module 208 may include a security unit (for example, a SIM card;), an NFC CLF (NFC radio frequency front end), and an NFC antenna. The system structure of this mode is as shown in FIG. 4, and the specific functions are the same as above. No longer. The mobile terminal of this embodiment communicates with the mobile payment server through a remote control protocol, which may be a remote control protocol on a general-purpose PC, such as a VDI protocol. Through the remote control protocol, the desktop of the application server can be restored to the mobile terminal side through the wireless link, that is, the desktop virtual control is realized; the specific communication uses the wireless mode such as 2G/3G cellular network and WiFi. The mobile terminal accesses the mobile payment server and needs to undergo security authentication. In this embodiment, the security authentication management center (ie, the authentication module) on the server completes unified authentication and security management, provides user identity authentication and authorization, and ensures confidentiality of transaction data transmission. Sex and authenticity, guarantee the integrity of the transmission of transaction data in the mobile network and the non-repudiation of the transaction. Applying the system provided in this embodiment, the implementation method of the NFC transaction is as follows: 1) Before the mobile terminal user uses mobile payment, sign the contract with the operator to obtain the identity authentication security product. Such as a password card, a digital certificate, etc. carried on a security chip on the mobile terminal. The security product here is a SIM card or an SD card.

2) When the mobile terminal feels the magnetic field close to the receiving terminal, access the mobile payment server through the remote control protocol, and the mobile terminal user inputs the login account and the password to authenticate the identity of the terminal user.

3) After the authentication is passed, the mobile payment platform launches the corresponding payment application for the end user. Optionally, the end user selects the transaction item, and needs to be further authenticated by the digital certificate because of the funds and accounts involved, wherein the PKI is implemented in the security chip.

4) Wait for the mobile terminal user to enter the transaction password from the acceptance terminal (on-site input through the POS machine, etc.) „

5) After the mobile payment platform determines that the account is valid, the terminal user information, the transaction information, and the confirmation code present the mobile payment service on the mobile terminal through virtual desktop technology. For enhanced security, the information is encrypted by image/video. Technology, the hardware function information of the mobile terminal is introduced in the encryption technology. 6) The mobile terminal decodes the received information and displays it to the terminal user, and the content displayed by the user performs corresponding operations, for example: inputting a confirmation code through the mobile terminal.

7) After the mobile payment platform completes the business processing, the acceptance terminal management device notifies the acceptance terminal that the transaction is successful. The on-site payment service in this embodiment is implemented based on the virtualization technology, and can provide different payment services according to the needs of the terminal user, and complete multi-application service management; the new payment service can be supported by the simple application upgrade of the server, thereby greatly shortening the new service. Deployment time and promotion costs. At the same time, the mobile payment service runs on the mobile payment platform based on virtualization technology, which is separated from the security authentication management center and the account platform, which simplifies the authentication process, ensures the security of the system, and improves the deployment capability of the payment service. Embodiment 4 This embodiment provides a mobile terminal. Referring to FIG. 5, the mobile terminal includes: a virtual desktop control module 52 configured to send a connection request to a mobile payment server through a remote control protocol, and send a mobile payment through a remote control protocol. The server provides identity information, as well as mobile The control of the payment server presents the mobile payment service, and the user's transaction operation information is fed back to the mobile payment server. The virtual desktop control module 52 can present the mobile payment service in various ways, such as presenting the mobile payment service by voice, or by using a picture or text. The form displays the mobile payment service, and can also play the mobile payment service in a video manner; the virtual drive control module 54 is connected to the virtual desktop control module 52, and is configured to drive and control the hardware required by the virtual desktop control module 52 to present the current service; The mobile payment module 56 is connected to the virtual desktop control module 52 and configured to complete the mobile payment service according to the control of the mobile payment server. In order to enhance the security of the mobile payment service, the encryption and decryption technology used in this embodiment combines the hardware function information of the mobile terminal, wherein the hardware function information includes: LCD size, resolution, Codec (codec), support codec format Such information, such that the mobile payment server can implement a unique encryption method for each end user according to the information, such as adding/decrypting with the security chip and the image/video accelerator hardware. Because each terminal is displayed in a different way and the image/video processing is different, it becomes impossible to attack by phishing or man-in-the-middle. Even if the malicious terminal intercepts the current service, because it does not have the hardware function information of the real mobile terminal, the malicious terminal cannot decrypt the service information. At this time, the displayed content will be garbled, so that the malicious user cannot complete the information. The current business enhances the security of mobile payment services. Based on this, the virtual desktop control module 52 includes: a service decryption unit, configured to generate a service decryption stream according to hardware function information of the mobile terminal when the received current service is encrypted by using the service encryption stream, and use the service decryption code. The stream decrypts the received current service and presents the decrypted current service. Preferably, the service decryption unit includes: a service decryption stream generation subunit, configured to generate a service or password stream in a picture or video format by hardware function information of the mobile terminal. The mobile terminal of the present embodiment further includes: a near field communication module configured to perform mobile payment service communication with the acceptance terminal to complete the on-site payment service. For the implementation of the specific on-site payment service, refer to Embodiment 3, and details are not described herein again. The running program of the mobile payment service of the embodiment is set on the mobile payment server, and solves the problem that the payment service is complicated due to the difference of the mobile terminal (for example, the operating system is different), regardless of the type of the mobile terminal. As long as it has basic display and communication interfaces, ie A variety of mobile payment services can be implemented. At the same time, the software upgrade of the mobile payment service in this mode only needs to operate on the mobile payment server, which is simple to implement and improves customer experience satisfaction. Embodiment 5 This embodiment provides a method for implementing a mobile payment service. The method is described by using the system provided in Embodiment 1 or Embodiment 2. Referring to FIG. 6, the method includes the following steps: Step S602: The terminal sends a connection request to the mobile payment server through the remote control protocol. Step S604: After receiving the connection request, the mobile payment server acquires the identity information of the mobile terminal, and authenticates the identity of the mobile terminal according to the identity information. After the authentication is passed, the terminal is authenticated. The mobile terminal establishes a virtual machine, and the mobile payment service is displayed on the mobile terminal by using the virtual machine; the mobile terminal can present the mobile payment service in various manners, for example, presenting the mobile payment service by voice, or displaying the mobile in the form of a picture or a text. The payment service can also play the mobile payment service in a video manner; step S606, the mobile terminal receives the transaction operation information of the user, and feeds back the transaction operation information to the mobile payment server; Step S608, the mobile payment server performs the current service according to the transaction operation information, and For the current Services account management. The mobile payment server controls the mobile payment service to be presented on the mobile terminal by using the virtual machine. The mobile payment server generates a service plus password stream according to the stored hardware function information of the mobile terminal, and uses the service plus password stream to encrypt the current service, and the encrypted service is encrypted. The current service is sent to the mobile terminal. After receiving the current service, the mobile terminal generates a service decryption stream according to its own hardware function information, and uses the service decryption stream to decrypt the current service and present the decrypted current service. The above service plus password stream and service decryption stream are both picture or video formats. In order to enhance the security of the mobile payment service, the embodiment uses the encryption and decryption technology to combine the hardware function information of the mobile terminal, wherein the hardware function information includes: LCD size, resolution, Codec (codec) support codec format Such information, such that the mobile payment server can implement a unique encryption method for each end user according to the information, such as adding/decrypting with the security chip and the image/video accelerator hardware. Because each terminal is displayed in a different way and the image/video processing is different, it becomes impossible to attack by phishing or man-in-the-middle. Even if a malicious terminal intercepts the current business because it does not have a real move The hardware function information of the mobile terminal, so the malicious terminal cannot decrypt the service information. At this time, the displayed content will be garbled, so that the malicious user cannot complete the current service, and the security of the mobile payment service is enhanced. The mobile payment server of the embodiment sets the running program of the mobile payment service on the mobile payment server by setting up the virtual machine for the mobile terminal, and solves the payment service realization caused by the difference of the mobile terminal (for example, the operating system is different). Complex problem, no matter what type of mobile terminal, as long as it has basic display and communication interface functions, it can realize various mobile payment services. At the same time, the software upgrade of mobile payment service in this mode only needs mobile payment. The server operates, is simple to implement, and improves customer experience satisfaction. As can be seen from the above description, the embodiment of the present invention mainly uses the virtual machine technology to transfer the payment service program originally on the mobile terminal to the server side, so that the mobile terminal can have the basic display and communication interface as long as it has the basic display and communication interface. A variety of mobile payment services are implemented. At the same time, the software upgrade of the mobile payment service in this mode only needs to operate on the mobile payment server, which is simple to implement and improves customer experience satisfaction. Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general-purpose computing device, which can be concentrated on a single computing device or distributed over a network composed of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the scope of the present invention are intended to be included within the scope of the present invention.

Claims

Claim

A mobile payment system, comprising a mobile payment server and a mobile terminal;

The mobile terminal includes: a virtual desktop control module configured to send a connection request to the mobile payment server through a remote control protocol, and provide identity information to the mobile payment server through the remote control protocol, and according to the mobile payment The control of the server presents a mobile payment service, and feeds back the transaction operation information of the user to the mobile payment server;

a virtual drive control module, configured to drive and control the hardware required by the virtual desktop control module to present a current service;

a mobile payment module, configured to complete a mobile payment service according to control of the mobile payment server;

The mobile payment server includes:

An authentication module, configured to receive a connection request of the mobile terminal, and verify identity of the mobile terminal by using identity information provided by the mobile terminal;

a mobile payment platform module, configured to establish a virtual machine for the mobile terminal after the mobile terminal is authenticated by the authentication module, and control the mobile payment service by the virtual machine to complete the mobile payment service, and the mobile payment service The service is presented on the mobile terminal, and performs a current service according to the transaction operation information fed back by the mobile terminal;

The account platform module is configured to perform account management on the current service performed by the mobile payment platform module.

2. The system of claim 1 wherein

The mobile payment platform module includes: a storage unit configured to store hardware function information of the mobile terminal; a service encryption unit configured to generate a service plus password stream according to the hardware function information stored by the storage unit, using the The service plus password stream encrypts the current service, and sends the encrypted current service to the mobile terminal;

The virtual desktop control module includes: a service decryption unit configured to generate a service decryption stream for hardware function information of the mobile terminal, decrypt the received current service by using the service decryption stream, and present the decrypted State the current business.

3. The system according to claim 2, wherein

The service encryption unit includes: a service plus password stream generation subunit, configured to generate a service plus password stream in a picture or video format by using the hardware function information stored in the storage unit;

The service decryption unit includes: a service decryption stream generation subunit, configured to generate a service decryption stream in a picture or video format by hardware function information of the mobile terminal.

The system according to any one of claims 1 to 3, wherein the system further comprises: an acceptance terminal and an acceptance terminal management device;

The mobile terminal further includes: a near field communication module configured to perform mobile payment service communication with the acceptance terminal to complete an on-site payment service;

The receiving terminal is configured to upload transaction operation information of the on-site payment service to the mobile payment platform module of the mobile payment server by the receiving terminal management device; and the receiving terminal management device is configured to forward the receiving Transaction operation information of the on-site payment service between the terminal and the mobile payment server.

5. A mobile terminal, comprising:

a virtual desktop control module, configured to send a connection request to a mobile payment server through a remote control protocol, and provide identity information to the mobile payment server through the remote control protocol, and present a mobile payment service according to control of the mobile payment server, And feeding back the transaction operation information of the user to the mobile payment server;

The mobile payment module is arranged to complete the mobile payment service according to the control of the mobile payment server.

The mobile terminal according to claim 5, wherein the virtual desktop control module comprises: a service decryption unit, configured to: when the received current service is information encrypted by using a service plus password stream, according to the mobile terminal The hardware function information generates a service decryption stream, and uses the service decryption stream to decrypt the received current service, and presents the decrypted current service; wherein the service plus password stream is the mobile payment service The device is generated according to the hardware function information of the mobile terminal.

The mobile terminal of claim 6, wherein the service decryption unit comprises: a service decryption stream generation subunit, configured to generate a service decryption stream in a picture or video format according to hardware function information of the mobile terminal. .

The mobile terminal according to any one of claims 5-7, wherein the mobile terminal further comprises: a near field communication module configured to perform mobile payment service communication with the receiving terminal to complete the on-site payment service.

9. A method for implementing a mobile payment service, comprising:

The mobile terminal sends a connection request to the mobile payment server by using a remote control protocol; after receiving the connection request, the mobile payment server acquires identity information of the mobile terminal, and authenticates the identity of the mobile terminal according to the identity information, and authenticates After being passed, a virtual machine is established for the mobile terminal, and the mobile payment service is controlled by the virtual machine to be presented on the mobile terminal;

Receiving, by the mobile terminal, transaction operation information of the user, and feeding back the transaction operation information to the mobile payment server;

The mobile payment server performs a current service according to the transaction operation information, and performs account management on the current service.

10. The method according to claim 9, wherein the controlling, by the mobile payment server, the mobile payment service to be presented on the mobile terminal by using the virtual machine comprises:

The mobile payment server generates a service plus password stream according to the stored hardware function information of the mobile terminal, encrypts the current service by using the service plus password stream, and sends the encrypted current service to the mobile terminal;

After receiving the current service, the mobile terminal generates a service decryption stream according to its own hardware function information, and uses the service decryption stream to decrypt the current service, and presents the decrypted current service.

11. The method according to claim 10, wherein the service encryption stream and the service decryption code stream are both picture or video formats.