WO2013000351A1

WO2013000351A1 - Mobile payment method and system

Info

Publication number: WO2013000351A1
Application number: PCT/CN2012/076169
Authority: WO
Inventors: 尹旭程; 张翌维
Original assignee: 国民技术股份有限公司
Priority date: 2011-06-29
Filing date: 2012-05-28
Publication date: 2013-01-03
Also published as: CN102855560A; CN102855560B

Abstract

The present invention relates to a mobile payment method and system. The method comprises: generating a payment information message of a transaction; determining whether the transaction is legal according to the payment information message; and if the transaction is legal, a payment device permitting the transaction. The system comprises a payment device, a payment recipient device and a financial payment platform. The payment device is used for generating a payment information message of a transaction, and permitting the transaction when the determination result of the financial payment platform is that the transaction is legal. The financial payment platform is used for determining whether the transaction is legal according to the payment information message. Alternatively, the payment recipient device is used for generating a payment information message of a transaction. The payment device is used for permitting the transaction when the determination result of the financial payment platform is that the transaction is legal. The financial payment platform is used for determining whether the transaction is legal according to the transaction information message. In the mobile payment method and system of the present invention, the payment device acts as a transaction center, thereby enhancing the safety of mobile payment transaction and the friendliness of information exchange, becoming more human friendly, and improving the user experience.

Description

Mobile payment method and system

Technical field

The present invention relates to the field of communications, and in particular, to a mobile payment method and system.

Background technique

Mobile payment is also known as mobile payment (Mobile Payment) is a service method that allows users to pay for goods or services consumed by mobile terminals (such as mobile phones, PDAs, mobile PCs, etc.). It is a new business that combines electronic money, authentication, mobile communications and mobile terminals to enable users to enjoy multiple services anytime, anywhere. The contactless chip mobile wallet service is a mobile phone carrier that combines the contactless IC card application with the SIM/UIM card. It implements mobile payment, industry application and credit in three application modes: card, reader and peer-to-peer. Service products for various applications such as redemption and electronic ticketing.

At present, the specific implementation forms of mobile payment are roughly divided into five types: one is mobile charging service (such as SMS group sending system SMS, wireless application protocol WAP, interactive voice response IVR, etc.); second, mobile bank card bundle payment, payment; It is the mobile phone landing online banking or third-party payment; the fourth is mobile phone wallet online small payment; the fifth is based on RFID (radio frequency identification) or NFC (near field communication) mobile wallet on-site payment.

In the prior art, the mobile payment process has certain security risks, and is usually not a payment device (for example, a mobile terminal), which also affects the user experience.

technical problem

The technical problem to be solved by the present invention is to provide a mobile payment method and system, which uses a payment device as a transaction center to improve the security of mobile payment transactions, and at the same time enhance the friendliness of information interaction and enhance the user experience.

Technical solution

To solve the above technical problem, the present invention provides a mobile payment method, including:

Generating a payment information message for the transaction;

Obtaining a payment information message of the transaction;

Determining whether the transaction is legal according to the payment information message;

According to the judgment result, it is decided whether to conduct the transaction.

Further, the above method may also have the following features. The payment information message includes user identity information and commodity information of the transaction; the commodity information includes any one or more of quota information, transaction time, product name, product quantity, and merchant information; and the user identity information Including any one or more of bank account information, personal identification number, and verification code.

Further, the above method may also have the following features. The payment information message of the generated transaction is specifically: the payment device generates a payment information message or the payment device generates a payment information message.

Further, the above method may also have the following features. The payment information message for acquiring the transaction is specifically: the financial payment platform acquires the payment information message of the transaction from the payment device or the payment device.

Further, the above method may also have the following features. Determining whether the transaction is legal according to the payment information message is: verifying the integrity of the payment information message and the legality of the content of the payment information message. If the payment information message is complete and the content is legal, The transaction is legal, otherwise the transaction is illegal.

Further, the above method may also have the following features. The determining whether to conduct the transaction according to the judgment result is specifically: if the judgment result is that the transaction is legal, the transaction is allowed, otherwise the transaction is prohibited.

To solve the above technical problem, the present invention also proposes a mobile payment system, including a payment device, a paid device, and a financial payment platform, wherein:

The payment device or the payment device is configured to generate a payment information message of the transaction, where the payment device is further configured to determine whether to conduct a transaction according to the judgment result of the financial payment platform; and the financial payment platform is configured to acquire a transaction The information message is paid, and the transaction information is judged according to the payment information message.

Further, the above system may also have the following features. The payment information message includes user identity information and commodity information of the transaction; the user identity information includes any one or more of bank account information, a personal identification number, and a verification code; the commodity information includes quota information, Any one or more of transaction time, product name, item quantity, and business information.

Further, the above system may also have the following features. The payment device or the payment device includes a message generation module, and the message generation module is configured to generate a payment information message of the transaction; the payment device includes a determination module, configured to be used according to the financial payment platform The result of the judgment determines whether or not to conduct the transaction.

Further, the above system may also have the following features. The financial payment platform includes: an obtaining module, configured to obtain a payment information message of the transaction; and a detecting module, configured to determine, according to the payment information message, whether the transaction is legal.

Further, the above system may also have the following features. The detecting module includes a first detecting unit, configured to check the integrity of the payment information message and the legality of the content of the payment information message, and if the payment information message is complete and the content is legal, the transaction is determined. Legal, otherwise the transaction is determined to be illegal.

Further, the above system may also have the following features. The judging module includes a first judging unit, configured to allow the transaction to be performed when the judgment result is that the transaction is legal, otherwise the transaction is prohibited.

Beneficial effect

The mobile payment method and system of the invention uses the payment device as a transaction center, improves the security of the mobile payment transaction, enhances the friendliness of information interaction, is more humanized, and improves the user experience.

DRAWINGS

1 is a flow chart of a mobile payment method according to an embodiment of the present invention;

2 is a flow chart of a challenge/response authentication method based on a symmetric algorithm;

FIG. 3 is another flowchart of a mobile payment method according to an embodiment of the present invention; FIG.

4 is a structural diagram of a mobile payment system according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of a specific structure and a working process of a mobile payment system according to an embodiment of the present invention; FIG.

6 is a schematic diagram of another specific structure and a working process of a mobile payment system according to an embodiment of the present invention;

FIG. 7 is a schematic diagram of a working process of a mobile payment system including a mobile phone according to an application embodiment of the present invention; FIG.

FIG. 8 is a schematic diagram of another working process of a mobile payment system including a mobile phone according to an application embodiment of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION

Embodiments of the invention

The main idea of the present invention is to use a payment device (e.g., a mobile terminal) as the center of a mobile payment transaction so that the user can terminate or continue the payment process at any step of the mobile payment transaction through a payment device such as a mobile terminal. In the mobile payment process, the payment device is used as the transaction center to effectively reduce the insecure factors of the transaction, thereby improving the security of the payment transaction.

The principles and features of the present invention are described in the following with reference to the accompanying drawings and embodiments.

FIG. 1 is a flowchart of a mobile payment method according to an embodiment of the present invention. As shown in FIG. 1 , in this embodiment, the mobile payment method includes:

Step 101: The user communication terminal establishes a trusted communication link with the POS terminal.

Here, the communication terminal is a specific payment device, and the POS terminal is a specific paid device. For those skilled in the art, the mobile payment methods described in the various embodiments herein should be understood to be applicable to all mobile payment systems including payment devices, payment devices, and financial payment platforms. The user communication terminal can be, but is not limited to, a cell phone, a personal digital assistant PDA, and the like.

A trusted communication link can be established when both the user communication terminal and the POS terminal are within a valid contactless transmission distance and the communication state is normal.

The communication terminal and the POS terminal must pass the security authentication before establishing a trusted communication link (also referred to as a secure link). The security authentication can adopt all existing security authentication methods that may occur in the future, for example, a symmetric algorithm based Challenge/response authentication method or signature authentication method based on asymmetric cryptographic algorithm.

2 is a flow chart of a challenge/response authentication method based on a symmetric algorithm. As shown in FIG. 2, the challenge/response authentication process includes:

(1) A sends a random number Rp to B;

(2) Both A and B generate a process key Key_proc, wherein the process key can be obtained by encrypting or obfuscating the first key Key1, the random number Rp, and the identification code ID;

(3) initiate authentication, and A sends an authentication request to B;

(4) After receiving the authentication request, B generates a first random string Ra, encrypts the first random string Ra with the process key Key_proc, and transmits it to A;

(5) After decrypting A, the first random string Ra is obtained, and then the second random string Rb is generated by itself, and the first random string Ra and the second random string Rb are spliced and encrypted by the process key Key_proc to be transparently transmitted to B. ;

(6) B decrypts to obtain the first random string Ra and the second random string Rb, and then determines whether the first random string Ra is the same as the first random string Ra generated by itself, and if the same, the second random word The string Rb is encrypted by the process key Key_proc and then transparently transmitted to A, A decrypts to obtain the second random string Rb, and then determines whether the second random string Rb is the same as the second random string Rb generated by itself, and if the same, the authentication is performed. by.

Step 102: The user communication terminal sends the user identity information to the POS terminal.

After the trusted communication link is established, both the communication terminal and the POS terminal enter a non-contact information interaction mode, and the two can exchange data through the radio frequency channel. Of course, in addition to the radio frequency channel, the communication terminal and the POS terminal can also communicate through other non-contact communication channels.

The communication terminal generates user identity information and its verification code and sends them to the POS terminal. The user identity information may include, but is not limited to, bank account information, a personal identification number, a verification code, and the like.

Step 103: The POS terminal binds the user identity information and the product information to generate a payment information message, and then sends the message to the user communication terminal.

Product information is generated by the POS terminal. Product information may include, but is not limited to, credit information, transaction time, product name, number of products, merchant information, and the like. The payment information message includes product information and user identity information.

Step 104: The user communication terminal sends the payment information message to the financial payment platform.

In other embodiments of the present invention, the financial payment platform may also actively obtain the payment information message.

Step 105: The financial payment platform determines whether the transaction is legal according to the payment information message, and notifies the user of the communication terminal and the POS terminal of the determination result. The user communication terminal determines whether to conduct the transaction according to the judgment result of the financial payment platform, and if the user allows the transaction, the financial payment platform further completes the transaction;

Specifically, the financial payment platform can verify the integrity of the payment information message and the legality of the content of the payment information message. If the payment information message is complete and the content is legal, the transaction is legal, otherwise the transaction is illegal.

The judgment result is as follows: 1. If the payment information message is complete and legal, the transaction is legal; 2. If the payment information message receives timeout, the payment information message is incomplete, or the payment information message content is illegal, the transaction is illegal. . The user communication terminal determines whether to conduct the transaction according to the judgment result of the financial payment platform: if the judgment result is legal for the transaction, the transaction is allowed, otherwise the transaction is prohibited.

Through the information feedback of the communication terminal by the financial payment platform, the mobile payment method with the payment device such as the communication terminal as the transaction center is realized, the friend-friendliness of the information interaction is enhanced, and the user experience is more humanized. In other embodiments of the present invention, the financial payment platform may not notify the user communication terminal and the POS terminal of the determination result, that is, the information terminal does not perform feedback on the communication terminal and/or the POS terminal, and the payment device such as the user communication terminal and the POS terminal are paid. The device can also actively obtain the judgment result.

In step 106, the user communication terminal returns to the initial state.

Compared with the prior art, the mobile payment method of this embodiment has the following advantages:

(1) Legality judgment and integrity check on the data in the mobile payment process (included in the payment information message), which increases the security of the transaction;

(2) Adopting a new data processing flow for mobile payment (transaction information from the POS terminal to the communication terminal to the financial payment platform, the financial payment platform is fed back to the POS terminal and the communication terminal after the transaction is completed), and the information interaction is enhanced. Degree of friendliness

(3) Through the communication terminal to control the information transmitted by the POS terminal and the information feedback of the financial payment platform to the communication terminal, a mobile payment method with the communication terminal as the transaction center is realized, and the user experience is more humanized.

In summary, the mobile payment method of the embodiment uses the payment device as a transaction center, so that the user can terminate or continue the payment process at any step of the mobile payment transaction through the mobile terminal, thereby improving the security and promotion of the mobile payment transaction. The friendliness of information interaction is more user-friendly and enhances the user experience.

FIG. 3 is another flow chart of a mobile payment method according to an embodiment of the present invention. As shown in FIG. 3, in this embodiment, the mobile payment method includes:

Step 301: The user communication terminal establishes a trusted communication link with the POS terminal.

A trusted communication link can be established when both the user communication terminal and the POS terminal are within a valid contactless transmission distance and the communication state is normal. The communication terminal and the POS terminal must pass the security authentication before establishing a trusted communication link (or a secure link). For the manner of the security authentication, refer to the description of step 101, and details are not described herein.

Step 302: The POS terminal sends the commodity information to the user communication terminal.

The POS terminal generates commodity information and its check code, and transmits them to the communication terminal. Product information may include, but is not limited to, credit information, transaction time, product name, number of products, merchant information, and the like.

Step 303: The user communication terminal binds the user identity information and the product information to generate a payment information message.

User identity information is generated by the communication terminal. User identity information may include, but is not limited to, bank account information, personal identification numbers, verification codes, and the like. The payment information message includes product information and user identity information.

Step 304: The user communication terminal sends the payment information message to the financial payment platform.

Step 305: The financial payment platform determines whether the transaction is legal according to the payment information message, and notifies the user of the communication terminal and the POS terminal, and the user communication terminal determines whether to conduct the transaction according to the judgment result of the financial payment platform. If the user allows the transaction, the financial The payment platform will complete the transaction further;

Specifically, the financial payment platform can verify the integrity of the payment information message and the legality of the content of the payment information message. If the payment information message is complete and the content is legal, the transaction is legal, otherwise the transaction is illegal. The user communication terminal determines whether to conduct the transaction according to the judgment result of the financial payment platform: if the judgment result is legal for the transaction, the transaction is allowed, otherwise the transaction is prohibited.

The judgment result is as follows: 1. If the payment information message is complete and legal, the transaction is legal; 2. If the payment information message is timed out, the payment information message is incomplete, or the payment information message content is illegal, the transaction is illegal.

In other embodiments of the present invention, the financial payment platform may not notify the user of the communication terminal and the POS terminal of the determination result, that is, does not perform information feedback on the communication terminal and/or the POS terminal.

In step 306, the user communication terminal returns to the initial state.

In various embodiments of the invention, data integrity verification may be performed on data communicated between any of the communication terminal, the POS terminal, and the financial payment platform. Moreover, the information sent to the communication terminal can be visible and controllable to the user, and the user can choose to continue, interrupt or re-trade at any point.

In the mobile payment method of the embodiment, the payment device is used as a transaction center, so that the user can terminate or continue the payment process at any step of the mobile payment transaction, thereby improving the security of the mobile payment transaction and improving the friendliness of the information interaction. More user-friendly and improved user experience.

The invention also proposes a mobile payment system for implementing the above mobile payment method. 4 is a structural diagram of a mobile payment system according to an embodiment of the present invention. As shown in FIG. 4, the mobile payment system of the present invention includes a payment device 42, a payment device 41, and a financial payment platform 43, wherein the payment device 41 is used to generate or acquire The payment information message of the transaction is sent to the financial payment platform 43, and the financial payment platform 43 is configured to determine whether the transaction is legal according to the payment information message, and the payment device 41 is further configured to determine according to the judgment result of the financial payment platform 43. Whether to trade.

FIG. 5 is a schematic diagram of a specific structure and a working process of a mobile payment system according to an embodiment of the present invention. As shown in FIG. 5, in the embodiment, the payment device 41 includes a first communication module 510, a first message generation module 520, and a sending module 530. The device to be paid 42 includes a second communication module 540, and the financial payment platform 43 includes receiving. Module 550, detection module 560. The first communication module 510 is configured to perform data exchange with the second communication module 540. The first message generating module 520 is configured to generate a payment information message of the current transaction, and the sending module 530 is configured to send the payment information message to the The financial payment platform 43, the second communication module 540 is configured to exchange data with the first communication module 510, the receiving module 550 is configured to receive the payment information message, and the detecting module 560 is configured to determine whether the current transaction is legal according to the payment information message.

The detecting module 560 may further include a first detecting unit, where the first detecting unit is configured to check the integrity of the payment information message and the legality of the content of the payment information message. If the payment information message is complete and the content is legal, the transaction is determined to be legal. Otherwise, the transaction is determined to be illegal.

The payment device 41 may further include a determining module, and the determining module is configured to determine whether to perform the transaction according to the judgment result of the financial payment platform 43. The judging module may further include a first judging unit, where the first judging unit is configured to allow the transaction to be performed when the judgment result is that the transaction is legal, otherwise the transaction is prohibited.

The working process of the mobile payment system shown in FIG. 5 is: the paid device 42 sends the commodity information to the payment device 41 through the second communication module 540, and the payment device 41 receives the commodity information through the first communication module 510, and the first packet generation module 520 The product information is bound to the user identity information of the payment device 41 to generate a payment information message, and then the sending module 530 sends the payment information message to the financial payment platform 43, and the financial payment platform 43 receives the payment information message through the receiving module 550, and detects The module 560 determines whether the transaction is legal according to the payment information message received by the receiving module 550. The financial payment platform 43 may further notify the payment device 41 and the payee device 42 of the determination result of the detection module 560. The payment device 41 determines whether or not to perform the transaction based on the determination result of the determination result of the detection module 560 of the financial payment platform 43.

The mobile payment system of this embodiment uses the payment device 41 as a transaction center, so that the user can terminate or continue the payment process at any step of the mobile payment transaction, thereby improving the security of the mobile payment transaction and improving the friendliness of information interaction. It is more user-friendly and enhances the user experience.

FIG. 6 is still another schematic structural diagram of a mobile payment system according to an embodiment of the present invention and a working process thereof. As shown in FIG. 7, in the embodiment, the payment device 41 includes a first communication module 610, a second message acquisition module 620, and a sending module 630. The device to be charged 42 includes a second communication module 640 and a second message generation module 650. The financial payment platform 43 includes a receiving module 550 and a detecting module 560. The first communication module 610 is configured to exchange data with the second communication module 640, and the second packet obtaining module 620 is configured to obtain a payment information report of the transaction. The sending module 630 is configured to send the payment information message to the financial payment platform 43, the second communication module 640 is configured to exchange data with the first communication module 610, and the second message generating module 650 is configured to generate the transaction. The payment information message is used by the receiving module 550 to receive the payment information message, and the detecting module 560 is configured to determine whether the current transaction is legal according to the payment information message.

The working process of the mobile payment system shown in FIG. 6 is that the payment device 41 transmits the user identity information to the device to be served 42 through the first communication module 610, and the device for receiving the device 42 receives the identity information of the user through the second communication module 640, and generates the second message. The module 650 binds the user identity information to the product information generated by the device to be paid 42 to generate a payment information message; then the second message obtaining module 620 of the payment device 41 issues a command to obtain a payment information message, and the first communication module 610 receives the command. After the command of the message obtaining module 620, the second communication module 640 sends a request to the second communication module 640 of the device to be paid, and the second communication module 640 transmits the payment message to the first communication module 610 after receiving the request, and the first communication module 610 The sending module 620 sends the payment information message to the financial payment platform 43. The financial payment platform 43 receives the payment information message through the receiving module 550, and the detecting module 560 receives the payment information according to the receiving module 550. The message determines whether the transaction is legal. The financial payment platform 43 may further notify the payment device 41 and the payee device 42 of the determination result of the detection module 560. The payment device 41 determines whether or not to perform the transaction based on the determination result of the determination result of the detection module 560 of the financial payment platform 43.

In addition to the manner in which the payment device 41 sends the payment information message and the financial payment platform 43 receives the payment information message, the financial payment platform 43 can also actively acquire the payment information message. Therefore, in other embodiments of the present invention, the financial payment platform 43 may include a first message obtaining module, where the first message acquiring module is configured to obtain a payment information message of the current transaction.

In other embodiments of the present invention, the financial payment platform may further include a notification module for notifying the payment device and the payment device of the determination result of the detection module, where the payment device may further include a first notification for receiving the notification module. The notification receiving module may further include a second notification receiving module for receiving the notification of the notification module.

In other embodiments of the present invention, one functional module may be further split into multiple sub-modules, or multiple functional modules of the same device may be integrated into one module. For example, a plurality of program-implementable modules of the payment device are synthesized into transaction software, and a plurality of hardware modules of the payment device are integrated in an RFID module with a security chip. The transaction software may also be stored in, but not limited to, a storage medium or an RFID module inside a payment device (eg, a communication terminal), which may be, but is not limited to, an RFID-SIM card, an RFID-USIM card, an RFID-TF card, an RFID- SD card or RFID-MMC card.

FIG. 7 is a schematic diagram of a working process of a mobile payment system including a mobile phone according to an application embodiment of the present invention. As shown in FIG. 7, the mobile payment system includes a mobile phone (payment device), a POS terminal (paid device), and a financial payment platform, wherein the mobile phone has the above-mentioned transaction software and RFID module, and the working process of the mobile payment system shown in FIG. include:

In the first step, the user sends the user identity information to the POS terminal by using the mobile phone;

After the merchant selects a good product, the user establishes a trusted contactless communication link by using the mobile phone and the POS terminal of the merchant through security authentication. The user inputs account information, personal identification code, random verification code, etc. through the soft keyboard in the transaction software interface, and generates user identity information and its check code, and then sends them to the POS terminal.

In the second step, the POS terminal binds the user identity information with the product information to generate a payment information message, and sends the message to the mobile phone;

The POS terminal first checks the integrity of the user identity information transmitted from the mobile phone. If the verification is successful, it will generate payment information message and its check code with the product information (POS terminal identity authentication information, product name, product quantity and transaction amount, etc.), and then send it to the user RF through the 2.4GHz contactless communication band. SIM card on the phone. If the verification fails, the POS terminal notifies the mobile phone, and the user decides whether to resend the user identity information and its check code to the POS terminal, or cancel the transaction.

In the third step, the user sends the payment information message to the financial payment platform by using the mobile phone.

The user performs integrity verification on the payment information message through the mobile phone, and if the verification succeeds, the payment information message is sent to the financial payment platform (controlled by the banking institution) through the GPRS network. If the verification fails, it is up to the user to inform the POS terminal to resend the payment information message and its check code, or cancel the transaction.

The financial payment platform first checks the integrity of the payment information message sent by the user's mobile phone, and then determines whether the account information and the personal identification code in the message match. If it matches, the financial payment platform will judge the transaction to be legal, and issue a legal notice of the transaction to the POS terminal and the communication terminal through the GPRS network. If there is no match, the financial payment platform replies to the communication terminal, and the user decides whether to re-enter the user identity information or cancel the transaction.

FIG. 8 is a schematic diagram of another working process of a mobile payment system including a mobile phone according to an application embodiment of the present invention. As shown in FIG. 8, the mobile payment system includes a mobile phone (payment device), a POS terminal (paid device), and a financial payment platform, wherein the mobile phone has the above-mentioned transaction software and RFID module, and the working process of the mobile payment system shown in FIG. include:

In the first step, the POS terminal sends the product information to the user's mobile phone;

After the merchant selects the commodity, the user establishes a trusted contactless communication link with the POS terminal of the merchant by using the mobile phone.

The POS terminal becomes commodity information (POS terminal identity authentication information, product name, number of products, transaction amount, etc.) and its check code, and transmits them to the user RF-SIM card mobile phone through the 2.4 GHz contactless communication band.

In the second step, the mobile phone binds the product information and the user identity information to generate a payment information message, and then sends the payment information message to the financial payment platform.

The user starts to check the integrity of the product information transmitted by the POS terminal through the mobile phone transaction software. If the verification is successful, the user inputs account information, personal identification code, random verification code, etc. through the soft keyboard in the transaction software interface, and generates user identity information. Then, together with the commodity information, a check code and a payment information message are generated, and then sent to the financial payment platform (controlled by the banking institution) through the GPRS network. If the verification fails, it is up to the user to inform the POS terminal to resend the check code and the message, or to cancel the transaction.

The financial payment platform first checks the integrity of the message sent by the user's mobile phone, and then determines whether the account information and the personal identification code in the message match. If it matches, the financial payment platform will judge the transaction to be legal, and issue a legal notice of the transaction to the POS terminal and the communication terminal through the GPRS network. If there is no match, the financial payment platform replies to the communication terminal, and the user decides whether to re-enter the user identity information or cancel the transaction.

It can be seen from the above that the mobile payment system of the embodiment uses the payment device as a transaction center, so that the user can terminate or continue the payment process at any step of the mobile payment transaction, thereby improving the security of the mobile payment transaction and enhancing the information interaction. The friendliness is more user-friendly and enhances the user experience.

The above are only the preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalents, improvements, etc., which are within the spirit and scope of the present invention, should be included in the protection of the present invention. Within the scope.

Industrial applicability

Sequence table free content

Claims

A mobile payment method, comprising:

Generating a payment information message for the transaction;

Determining whether the transaction is legal according to the payment information message;

If the result of the judgment is that the transaction is legal, the payment device allows the transaction to be made.
The mobile payment method according to claim 1, wherein the payment information message of the transaction is generated by the payment device.
The mobile payment method according to claim 2, wherein the process of the payment device generating the payment information message of the transaction is:

The payment device receives the commodity information of the transaction sent by the paid device;

The payment device generates the payment information message according to the user identity information and the product information.
The mobile payment method according to claim 3, wherein after the payment device receives the product information sent by the device, the payment device further comprises: the payment device performing integrity verification on the received product information, and if the verification is passed, the payment device And generating the payment information message according to the user identity information and the product information.
The mobile payment method according to claim 1, wherein the payment information message of the transaction is generated by the device to be paid.
The mobile payment method according to claim 5, wherein the process for the payment device to generate the payment information message of the transaction is:

The paid device generates the commodity information of the transaction, and receives the user identity information sent by the payment device;

The payment device generates the payment information message according to the user identity information and the product information.
The mobile payment method according to claim 6, wherein after the receiving device receives the user identity information sent by the payment device, the method further comprises: the receiving device performing integrity verification on the received user identity information, and if the verification is passed, The payment device generates the payment information message according to the user identity information and the product information.
The mobile payment method according to claim 1, wherein the process of determining whether the transaction is legal according to the payment information message is:

The financial payment platform checks the integrity of the payment information message and the legality of the content of the payment information message. If the payment information message is complete and the content is legal, the transaction is legal, otherwise the transaction is illegal.
The mobile payment method according to claim 1, further comprising: if the result of the determination is that the transaction is illegal, the payment device prohibits the transaction.
The mobile payment method according to any one of claims 1 to 9, wherein the payment information message includes user identity information and transaction product information; the product information includes credit information, transaction time, and product name. One or more of the quantity of the goods and the information of the merchant; the user identity information includes one or more of bank account information, a personal identification number, and a verification code.
The mobile payment method according to any one of claims 1 to 9, wherein before the generating the payment information message of the transaction, the method further comprises: performing security authentication between the payment device and the device to be paid, and entering the transaction after the authentication is passed. stage.
The mobile payment method according to claim 11, wherein the security authentication performed between the payment device and the paid device adopts a challenge/response authentication method based on a symmetric algorithm or a signature authentication based on an asymmetric cryptographic algorithm. the way.
A mobile payment system, comprising: a payment device, a paid device, and a financial payment platform, wherein:

The paid device is for providing a transaction to the payment device;

The payment device is configured to generate a payment information message of the transaction, and is further configured to allow the transaction when the financial payment platform determines that the transaction is legal;

The financial payment platform is configured to determine whether the transaction is legal according to the payment information message.
The mobile payment system according to claim 13, wherein the payment device comprises a first communication module, a first message generation module and a first determination module; the device to be paid comprises a second communication module; a communication module is configured to receive commodity information of a transaction sent by the payment device; the second communication module is configured to send commodity information of the transaction to the payment device; the first message generation module is configured to use the identity information and the product according to the user The information generates the payment information message; the first determining module is configured to allow the transaction to be performed when the financial payment platform determines that the transaction is legal.
The mobile payment system according to claim 14, wherein the payment device further comprises a commodity information verification module, configured to perform integrity verification on the received commodity information, and notify the first report if the verification is passed The text generation module generates the payment information message.
The mobile payment system according to claim 14, wherein the first determining unit is further configured to prohibit the transaction when the judgment result of the financial payment platform is that the transaction is illegal.
The mobile payment system according to claim 14, wherein the payment device further comprises a sending module, configured to send the payment information message to the financial payment platform; the financial payment platform comprises a receiving module and a detecting module, the receiving module is configured to receive the payment information message, and the detecting module is configured to determine, according to the payment information message, whether the transaction is legal.
The mobile payment system according to claim 14, wherein the financial payment platform comprises a first message acquisition module and a detection module, and the first message acquisition module is configured to acquire the payment from the payment device. The information packet is used by the detecting module to determine whether the transaction is legal according to the payment information message.
The mobile payment system according to claim 17 or 18, wherein the detecting module comprises a first detecting unit, configured to check the integrity of the payment information message and the legality of the content of the payment information message If the payment information message is complete and the content is legal, the transaction is determined to be legal, otherwise the transaction is determined to be illegal.
The mobile payment system according to any one of claims 13 to 18, wherein the payment device further comprises a first security authentication unit, the device to be paid further comprises a second security authentication unit, the first security authentication unit, The second security authentication unit is configured to perform security authentication to determine whether communication is performed between the payment device and the device to be paid.
A mobile payment system, comprising: a payment device, a paid device, and a financial payment platform, wherein:

The paid device is configured to generate a payment information message of the transaction;

The financial payment platform is configured to determine whether the transaction is legal according to the payment information message;

The payment device is configured to allow the transaction to be performed when the judgment result of the financial payment platform is that the transaction is legal.
The mobile payment system according to claim 21, wherein the device to be paid comprises a second communication module and a second message generation module, the payment device comprising a first communication module and a first determination module; The second communication module is configured to receive the user identity information sent by the payment device; the second message generation module is configured to generate the payment information message according to the user identity information and the transaction product information; the first communication module is configured to The receiving device sends the user identity information; the first determining module is configured to allow the transaction to be performed when the financial payment platform determines that the transaction is legal.
The mobile payment system according to claim 22, wherein the device to be paid further comprises a user identity information verification module, configured to perform integrity verification on the received user identity information, and if the verification is passed, notify the The second message generating module generates the payment information message.
A mobile payment system according to claim 22, wherein The first determining unit is further configured to prohibit the transaction when the judgment result of the financial payment platform is that the transaction is illegal.
The mobile payment system according to claim 22, wherein the second communication module is further configured to send the payment information message to the payment device; the first communication module is configured to receive the payment Information message.
The mobile payment system according to claim 25, wherein the payment device further comprises a second message acquisition module, configured to send a message acquisition request to the device to be paid by the first communication module.
The mobile payment system according to claim 25, wherein the payment device further comprises a sending module, configured to send the payment information message to the financial payment platform; the financial payment platform comprises a receiving module and a detecting module, the receiving module is configured to receive the payment information message, and the detecting module is configured to determine, according to the payment information message, whether the transaction is legal.
The mobile payment system according to claim 25, wherein the financial payment platform comprises a first message acquisition module and a detection module, and the first message acquisition module is configured to acquire the payment from the payment device. The information packet is used by the detecting module to determine whether the transaction is legal according to the payment information message.
The mobile payment system according to claim 27 or 28, wherein the detecting module comprises a first detecting unit, configured to check the integrity of the payment information message and the legality of the content of the payment information message If the payment information message is complete and the content is legal, the transaction is determined to be legal, otherwise the transaction is determined to be illegal.
The mobile payment system according to any one of claims 21 to 28, wherein the payment device further comprises a third security authentication unit, the device to be paid further comprises a fourth security authentication unit, the third security authentication unit, The fourth security authentication unit is configured to perform security authentication to determine whether communication is performed between the payment device and the device to be paid.