WO2013040916A1 - 一种交易支付方法和系统 - Google Patents

一种交易支付方法和系统 Download PDF

Info

Publication number
WO2013040916A1
WO2013040916A1 PCT/CN2012/076994 CN2012076994W WO2013040916A1 WO 2013040916 A1 WO2013040916 A1 WO 2013040916A1 CN 2012076994 W CN2012076994 W CN 2012076994W WO 2013040916 A1 WO2013040916 A1 WO 2013040916A1
Authority
WO
WIPO (PCT)
Prior art keywords
payment
verification
information
communication number
user
Prior art date
Application number
PCT/CN2012/076994
Other languages
English (en)
French (fr)
Inventor
向陶
廖少波
刘铁华
赵大鹏
冯云霞
成敏
Original Assignee
腾讯科技（深圳）有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 腾讯科技（深圳）有限公司 filed Critical 腾讯科技（深圳）有限公司
Priority to RU2014115463/08A priority Critical patent/RU2014115463A/ru
Priority to KR1020147010185A priority patent/KR20140070606A/ko
Priority to MX2014003427A priority patent/MX2014003427A/es
Priority to JP2014526367A priority patent/JP2014524622A/ja
Priority to AP2014007582A priority patent/AP2014007582A0/xx
Priority to SG2013079504A priority patent/SG194639A1/en
Priority to CA2844747A priority patent/CA2844747A1/en
Priority to EP12834104.7A priority patent/EP2759968A4/en
Priority to AU2012313221A priority patent/AU2012313221A1/en
Publication of WO2013040916A1 publication Critical patent/WO2013040916A1/zh
Priority to US14/057,574 priority patent/US20140046850A1/en

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/42—Confirmation, e.g. check or permission by the legal debtor of payment
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/325—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices using wireless networks
    • G06Q20/3255—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices using wireless networks using mobile network messaging services for payment, e.g. SMS
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/386—Payment protocols; Details thereof using messaging services or messaging apps
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4012—Verifying personal identification numbers [PIN]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/42—Confirmation, e.g. check or permission by the legal debtor of payment
    • G06Q20/425—Confirmation, e.g. check or permission by the legal debtor of payment using two different networks, one for transaction and one for security confirmation

Definitions

  • the present invention relates to network technologies, and in particular, to a transaction payment method and system.
  • Traditional transaction payment methods usually use single channel information transmission.
  • mobile banking which relies on the network of mobile communication operators, is based on WAP.
  • Technology providing mobile phone customers with financial services such as account inquiry, transfer, payment, and consumer payment.
  • Internet payment and online banking payment are the transmission of transaction data on an Internet channel or an instant messaging channel.
  • the traditional payment method of these transactions has various security problems when confirming user identity information.
  • mobile banking mobile phones are easy to lose; for Internet payment and online banking payment, it is usually only necessary to verify the user's password, and the way to verify the user's identity information is single.
  • the Trojan virus is in the user terminal computer, the data is easily stolen. Therefore, the traditional transaction payment method is not safe.
  • a transaction payment method comprising the following steps:
  • the payment password and the payment information are verified, and the verification is passed to make a payment.
  • the step of acquiring the payment information of the user is: acquiring payment information of the user submitted by the payment terminal through an internet channel or an instant communication channel.
  • the communication number is a mobile communication number; before the step of calling the mobile communication number through the interactive voice response platform, the method further includes:
  • the method before the step of calling the mobile communication number by the interactive voice response platform, the method further includes:
  • the step of verifying the verification code is passed and / After the step of verifying the mobile communication number of the mobile terminal that returns the verification code, the method further includes:
  • the method further includes:
  • the step of performing risk information verification on the payment information includes:
  • the user is determined to be a blacklist user according to the payment information, and if yes, the verification fails, otherwise the verification passes.
  • the step of performing risk information verification on the payment information further includes:
  • a transaction payment system comprising a telephone payment system and a banking system, wherein:
  • Telephone payment system including:
  • a payment information obtaining module configured to acquire payment information of the user, where the payment information includes a communication number
  • An interactive voice response platform configured to call the communication number, obtain a payment password input by the user, and send the payment password and payment information to the banking system;
  • the banking system is configured to verify the payment password and the payment information, and the payment is performed after the verification is passed.
  • the payment information acquiring module is configured to acquire payment information of a user submitted by the payment terminal through an internet channel or an instant communication channel.
  • the communication number is a mobile communication number;
  • the telephone payment system further includes a short message platform, configured to send a short message verification code to the mobile terminal corresponding to the mobile communication number by using a short message, and receive a reply returned by the mobile terminal.
  • the verification code determines whether the reply verification code is consistent with the short message verification code, and if yes, the verification passes, otherwise the verification fails.
  • the short message platform is further configured to acquire a mobile communication number of the mobile terminal that returns a reply verification code, and send the mobile communication number to the banking system;
  • the banking system is further configured to verify whether the acquired mobile communication number is consistent with the mobile communication number in the pre-stored account opening information, and if yes, the verification is passed, otherwise the verification fails.
  • the telephone payment system further comprises means for verifying the pass verification code and / Or the risk control system that performs the risk information verification on the payment information after the mobile communication number verification of the mobile terminal that returns the verification code is passed.
  • the risk control system is further configured to: before the step of calling the communication number by the telephone payment system through the interactive voice response platform, and Or performing risk information verification on the payment information after the payment password verification is passed.
  • the risk control system is configured to obtain a merchant quota in the payment information, and detect whether the merchant quota is greater than a set threshold, and if yes, the verification fails, otherwise the verification passes; and Or
  • the risk control system is configured to determine, according to the payment information, whether the user is a blacklist user, and if yes, the verification fails, otherwise the verification passes.
  • the risk control system is further configured to send the payment information to the banking system;
  • the banking system is further configured to determine whether the payment information is consistent with the pre-stored account opening information, and if yes, the verification passes, otherwise the verification fails.
  • the telephone payment system after receiving the payment information, automatically calls the mobile communication number in the payment information through the interactive voice response platform, acquires the payment password input by the user, and verifies the payment password and the payment information. Since the channel used for obtaining the payment information submitted by the payment terminal is different from the channel used by the interactive language response platform, when the payment password and the payment information are verified, the criminals are prevented from intercepting the user through the fake website and the Trojan virus. The possibility of paying for information, so it can improve security.
  • FIG. 1 is a schematic flow chart of a transaction payment method in an embodiment
  • FIG. 2 is a schematic flow chart of a transaction payment method in another embodiment
  • Figure 3 is a flow chart for performing risk information verification in one embodiment
  • FIG. 4 is a schematic structural diagram of a transaction payment system in an embodiment
  • FIG. 5 is a schematic structural diagram of a telephone payment system in another embodiment.
  • a transaction payment method includes the following steps:
  • Step S102 The payment terminal acquires payment information of the user, the payment information includes a communication number, and the payment terminal submits the payment information to the telephone payment system.
  • the payment terminal can be a computer, a television, a mobile communication terminal, and other embedded electronic devices, and can be accessed through the Web.
  • the browser submits the order, and the order data can also be generated by submitting an order through an instant messaging tool.
  • the order data includes user information, merchant information, purchased product information, and the like.
  • the user information includes a user registration account number, a user name, a delivery address, a contact information, and the like;
  • the merchant information is a merchant information, such as a store name, an address, a contact information, etc.;
  • the purchased product information includes a purchase quantity, a purchase price, an amount payable, and the like.
  • the user's payment information includes a bank card number, user identity information, and order related information, wherein the user identity information includes but is not limited to identity card information (including user name and ID card number, etc.), payment password, and communication number (which may be a mobile communication number, It can also be a fixed communication number), an instant communication number, a contact address, etc., and the order related information includes the amount due.
  • a prompt box may pop up prompting the user to fill in the payment information.
  • the payment terminal submits the payment information to the telephone payment system via the Internet channel or the instant communication channel, and the telephone payment system acquires the payment information of the user submitted by the payment terminal through the Internet channel or the instant communication channel.
  • Step S104 The telephone payment system calls the communication number through an interactive voice response platform, obtains a payment password input by the user, and transmits the payment password and payment information to the banking system.
  • the telephone payment system is provided with an interactive voice response platform (Interactive Voice Response, IVR), the communication number in the payment information is called through the IVR platform.
  • IVR interactive Voice Response
  • the communication terminal corresponding to the communication number will receive the call, and the communication terminal and the IVR are after the user holding the communication terminal answers the call.
  • the platform establishes a connection and the communication terminal receives the IVR.
  • the voice prompt sent by the platform through the voice channel the user inputs the payment password according to the voice prompt, the terminal uploads the payment password to the telephone payment system, and the telephone payment system organizes the payment password and the payment information into a transaction message and sends it to the banking system.
  • Step S106 The banking system verifies the payment password and the payment information, and if the verification passes, the payment is performed.
  • the banking system may be a bank payment system or a payment system on any trading platform.
  • the banking system pre-stores the account opening information of the user, including the identity card information, the opened bank card number, the contact address, the mobile communication number, the payment password, and the like.
  • the banking system verifies that the payment password entered by the user is correct, and verifies whether the payment information matches the user's account opening information. If the verification is correct, the bank system directly deducts the payment.
  • the telephone payment system is notified, and the user's order status is modified by the telephone payment system.
  • step S104 it also included the steps to verify the risk information for payment information. After the risk information verification of the payment information is passed, IVR The platform calls the communication number to ensure security before the call.
  • step S106 After verifying the payment password, the method further includes the step of verifying the payment information. Since the payment information may be changed after the payment password verification is passed, the bank system performs deduction after the risk information verification of the payment information is passed, which can further improve the security of the payment.
  • Payment terminal and IVR due to payment terminal The platform obtains the payment password by transmitting data through different channels, and can verify the payment information on two channels, thereby improving security.
  • the telephone payment system passes the IVR after receiving the payment information.
  • the platform automatically calls the communication number in the payment information to obtain the payment password, and actively calls the IVR compared to the traditional user.
  • the platform provides a way to pay a password, and can ensure that the user who provides the payment password is the holder of the terminal corresponding to the communication number. If the payment password is stolen, the payment can be effectively prevented by the communication number provided by the automatic call, thereby further improving the security.
  • a transaction payment method includes the following steps:
  • Step S202 The payment terminal acquires payment information of the user, the payment information includes a mobile communication number, and the payment terminal submits the payment information to the telephone payment system.
  • Step S204 Send a short message verification code to the mobile terminal corresponding to the mobile communication number by using the short message platform.
  • Step S206 Receive a reply verification code returned by the mobile terminal.
  • the reply verification code returns to the short message platform.
  • Step S208 it is determined whether the reply verification code is consistent with the short message verification code, and if yes, the process proceeds to step S210, otherwise, the process ends.
  • the short message may be sent to prompt the user to return the verification code incorrectly, and the payment cannot be completed. In this way, data transmission is performed through the short message channel, and the payment information is verified again, thereby further improving security.
  • Step S210 Acquire a mobile communication number of the mobile terminal that returns a reply verification code.
  • Step S212 Whether the obtained mobile communication number is verified by the banking system to be the same as the mobile communication number in the pre-stored account opening information, and if so, the process proceeds to step S214, and otherwise ends.
  • the account opening information of the user is pre-stored in the banking system, including the mobile communication number provided when the user opens the bank card. If the mobile communication number obtained by the banking system is consistent with the mobile communication number in the pre-stored account opening information, the verification is passed, otherwise, the verification fails.
  • the banking system can notify the telephone payment system, and the telephone payment system sends a short message to the mobile terminal through the short message platform, prompting the user that the verification fails, and the payment cannot be completed.
  • the bank system verifies the mobile communication number that returns the verification code, ensuring that the holder of the mobile terminal is the bank card user, and avoids the risk of bank card funds being lost due to the loss of the mobile terminal, thereby further improving security.
  • the short message verification code is verified before the mobile communication number is called, and the mobile communication number for which the return verification code is obtained is verified, it is possible to avoid the security problem caused by the transfer call of the mobile communication terminal.
  • Step S214 performing risk information verification on the payment information. If the verification is passed, the process proceeds to step S216.
  • Step S216 the telephone payment system passes The IVR platform calls the mobile communication number, obtains the payment password input by the user, and sends the payment password and payment information to the banking system.
  • the mobile terminal corresponding to the mobile communication number receives the call, and the user holding the mobile terminal answers the mobile terminal and the IVR.
  • the platform establishes a connection and the mobile terminal receives the IVR.
  • the voice prompt sent by the platform through the voice channel the user inputs the payment password according to the voice prompt, and the mobile terminal uploads the payment password to the telephone payment system, and the telephone payment system organizes the payment password and the payment information into a transaction message, and sends the payment message to the banking system.
  • Step S218 The banking system verifies the payment password and the payment information, and if the verification passes, the payment is performed.
  • the banking system verifies that the payment password is correct and verifies whether the payment information is consistent with the pre-stored account opening information, and if so, the verification passes, directly deducting the payment; otherwise, notifying the telephone payment system,
  • the IVR platform sends a voice prompt to the mobile terminal, prompting the user that the password is incorrectly entered or the payment information is incorrect.
  • the step of performing risk information verification on the payment information includes: acquiring a merchant quota in the transaction information, detecting whether the merchant quota is greater than a set threshold, and if yes, the verification fails, otherwise the verification passes.
  • the merchant quota is the transaction amount of the order, such as the quantity and amount of a transaction. If the transaction exceeds the set threshold and the amount of the transaction is considered risky (if the bank card is stolen, etc.), the verification will not pass. In this way, the security of payment can be effectively improved.
  • the step of performing risk information transaction on the payment information further includes: determining, according to the payment information, whether the user is a blacklist user, and if yes, the verification fails, otherwise the verification is passed. If the user transaction has a bad record, for example, if the payment information verification fails 2 times and the user is considered illegal, the user identity information is added to the blacklist. For users in the blacklist, when the risk information is verified, the verification fails, that is, the illegal user cannot complete the payment. In this way, illegal users are prevented from re-trading, which further improves the security of payment.
  • the step of performing risk verification on the payment information further comprises: the telephone payment system transmitting the payment information to the banking system, and the banking system determining whether the payment information is consistent with the pre-stored account opening information; if yes, the verification is passed. Otherwise the verification does not pass.
  • step S214 the process of performing risk information verification on the payment information is as follows:
  • Step S302 determining whether the user is a blacklist user according to the payment information, and if yes, the process ends, otherwise, the process proceeds to step S304.
  • Step S304 determining whether the merchant quota is greater than a set threshold according to the payment information, and if yes, the process ends; otherwise, the process proceeds to step S306.
  • step S306 it is determined whether there is verified payment information. If yes, the process goes to step S216 to proceed to the subsequent process. Otherwise, the process proceeds to step S308.
  • step S308 the user is prompted to fill in the payment information.
  • Step S310 performing risk information verification on the payment information filled in by the user.
  • step S310 The process of performing risk information verification on the payment information in step S310 is as shown above, and details are not described herein again.
  • step S218 the payment password verification is passed, and the payment information may be further verified by the risk information, for example, whether the merchant quota is greater than a set threshold or the like according to the payment information. Since the user may change the payment information after the payment password verification is passed, the security information can be further improved by performing the risk information verification again.
  • a transaction payment system includes a payment terminal 10, a telephone payment system 20, and a banking system 30, wherein:
  • the payment terminal 10 is configured to acquire payment information of the user, the payment information includes a communication number, and the payment terminal 10 is further configured to submit the payment information to the telephone payment system 20.
  • the telephone payment system 20 includes an IVR platform 202 for calling a communication number, obtaining a payment password input by the user, and transmitting the payment password and payment information to the banking system 30.
  • the banking system 30 is used to verify the payment password and payment information, and the payment is made by the verification.
  • the user submits an order through the payment terminal 10, the order data including user information, merchant information, purchased item information, and the like.
  • the user information includes a user registration account number, a user name, a delivery address, a contact information, and the like;
  • the merchant information is a merchant information, such as a store name, an address, a contact information, etc.;
  • the purchased product information includes a purchase quantity, a purchase price, an amount payable, and the like.
  • the payment information of the user includes a bank card number, user identity information, and order related information, wherein the user identity information includes but is not limited to identity card information (including user name, ID card number, etc.), payment password, and communication number (may be a mobile communication number, It can also be a fixed communication number), an instant communication number, a contact address, etc., and the order related information includes the amount due.
  • a prompt box may pop up prompting the user to fill in the payment information.
  • the payment terminal 10 Submit payment information to the telephone payment system 20 via an internet channel or an instant messaging channel.
  • the telephone payment system 20 may include a payment information obtaining module for obtaining the payment terminal 10 via the Internet information or the instant communication channel. The payment information of the submitted user.
  • the communication terminal corresponding to the communication number receives the call, and after the user holding the communication terminal answers, the communication terminal establishes a connection with the IVR platform 202, and the communication terminal receives the IVR.
  • the platform 202 sends a voice prompt according to the voice prompt, and the communication terminal uploads the payment password to the telephone payment system 20, and the telephone payment system 20
  • the payment password and payment information are organized into transaction messages and sent to the banking system 30.
  • the banking system 30 can be a bank payment system or a payment system on any trading platform.
  • the user's account opening information is pre-stored, including the user's ID card information, the opened bank card number, contact address, mobile communication number, payment password, and the like.
  • Banking system 30 After receiving the payment password and payment information, verify that the payment password entered by the user is correct, and verify whether the payment information matches the user's account opening information. If the verification is correct, the payment is directly debited and the payment is completed.
  • the telephone payment system 20 also includes a core payment system (not shown) for managing orders and the like.
  • a core payment system (not shown) for managing orders and the like.
  • the banking system 30 completes the payment
  • the core payment system is notified, the order status is modified by the core payment system, and the order status is returned to the payment terminal 10.
  • the telephone payment system 20 further includes a short message platform 204, and a short message platform 204.
  • the mobile terminal corresponding to the mobile communication number in the payment information sends a short message verification code through the short message, receives the reply verification code returned by the mobile terminal, and determines whether the reply verification code is consistent with the short message verification code, and if so, the verification passes, otherwise Verification failed.
  • the short message platform 204 It is also used to acquire the mobile communication number of the mobile terminal that returns the reply verification code, and send the mobile communication number to the banking system 30.
  • the banking system 30 It is also used to verify whether the acquired mobile communication number is consistent with the mobile communication number in the pre-stored account opening information, and if so, the verification is passed, otherwise the verification fails.
  • the telephone payment system 20 further includes a reply verification code verification pass and / Or the risk control system 206 that performs the risk information verification on the payment information after the mobile communication number of the mobile terminal that has returned the verification code is verified.
  • the risk control system 206 is also used in the telephony payment system 20 via the IVR platform 202.
  • the risk information is verified by the payment information before the step of calling the communication number.
  • the risk control system 206 is further configured to perform risk information verification on the payment information after the payment password verification is passed.
  • risk control system 206 It is used to obtain the merchant quota in the payment information, and check whether the merchant quota is greater than a set threshold. If yes, the verification fails, otherwise the verification passes. In this or another embodiment, the risk control system 208 It is also used to determine whether the user is a blacklist user according to the payment information, and if yes, the verification fails, otherwise the verification passes.
  • the risk control system 206 is also for transmitting payment information to the banking system 30.
  • the banking system 30 is further configured to determine whether the payment information is consistent with the pre-stored account opening information. If yes, the verification is passed, otherwise the verification fails.
  • the user's payment information is collected by using multiple communication channels such as a mobile terminal, the Internet, an IVR platform, and a short message platform, which greatly increases the difficulty of the user's payment information being completely stolen, thereby increasing non-face-to-face.
  • the security of the payment is greatly increased.
  • the mobile terminal holder is confirmed by the short message verification, and the identity of the bank card holder, the mobile communication number and the like are confirmed by the banking system, and the user identity information is verified through a plurality of communication channels to ensure security. Pay.
  • the storage medium may be a magnetic disk, an optical disk, or a read-only storage memory ( Read-Only Memory (ROM) or Random Access Memory (RAM).
  • ROM Read-Only Memory
  • RAM Random Access Memory

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Finance (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Telephonic Communication Services (AREA)

Abstract

一种交易支付方法，包括以下步骤：获取用户的支付信息，所述支付信息包括通信号码；通过互动式语音应答平台呼叫所述通信号码，获取用户输入的支付密码；对所述支付密码和支付信息进行验证，验证通过则进行支付。采用上述交易支付方法，能够提高支付的安全性。此外，还提供了一种交易支付系统。

Description

一种交易支付方法和系统
本申请要求于2011年9月20日提交中国专利局、申请号为2011102801227、发明名称为'一种交易支付方法和系统'的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
【技术领域】
本发明涉及网络技术，尤其涉及一种交易支付方法和系统。
【背景技术】
随着电子商务的快速发展，以及银行电子化服务水平的提高，银行与第三方支付方式不断创新，目前已有的支付方式种类繁多，包括传统的 POS 支付、 ATM 机支付、网银支付、手机银行等多种支付方式，为人们提供了快速便捷的支付方式，大大方便了人们的日常生活。
传统的交易支付方式通常都采用单信道信息传输方式。例如，手机银行，其依托的是移动通信运营商的网络，基于 WAP 技术，为手机客户提供账户查询、转账、缴费付款、消费支付等金融服务。例如，互联网支付、网银支付是在互联网信道或即时通讯信道上传输交易数据。
然而，传统的这些交易支付方式，在确认用户身份信息时存在各种安全性的问题。如对于手机银行，手机容易丢失；对于互联网支付、网银支付，通常仅需要验证用户密码，验证用户身份信息的方式单一，在用户终端电脑中木马病毒时，容易导致数据被窃。因此，传统的交易支付方式的安全性并不高。
【发明内容】
基于此，有必要提供一种能提高安全性的交易支付方法。
一种交易支付方法，包括以下步骤：
获取用户的支付信息，所述支付信息包括通信号码；
通过互动式语音应答平台呼叫所述通信号码，获取用户输入的支付密码；
对所述支付密码和支付信息进行验证，验证通过则进行支付。
优选的，所述获取用户的支付信息的步骤为：通过互联网信道或即时通信信道获取支付终端提交的用户的支付信息。
优选的，所述通信号码为移动通信号码；在通过互动式语音应答平台呼叫所述移动通信号码的步骤之前，还包括：
通过短信平台向所述移动通信号码对应的移动终端下发短信验证码；
接收所述移动终端返回的回复验证码；
判断所述回复验证码是否与所述短信验证码一致，若是，则验证通过，否则验证不通过。
优选的，在通过互动式语音应答平台呼叫所述移动通信号码的步骤之前，还包括：
获取返回回复验证码的移动终端的移动通信号码；
验证所述获取的移动通信号码是否与预先存储的开户信息中的移动通信号码一致，若是，则验证通过，否则验证不通过。
优选的，在回复验证码验证通过的步骤和 / 或返回回复验证码的移动终端的移动通信号码验证通过的步骤之后，还包括：
对所述支付信息进行风险信息校验。
优选的，在通过互动式语音应答平台呼叫所述通信号码的步骤之前，和 / 或在所述支付密码验证通过之后，还包括：
对所述支付信息进行风险信息校验。
优选的，所述对所述支付信息进行风险信息校验的步骤包括：
获取所述支付信息中的商户额度，检测所述商户额度是否大于设定阈值，若是，则校验不通过，否则校验通过；和 / 或
根据所述支付信息判断用户是否为黑名单用户，若是，则校验不通过，否则校验通过。
优选的，所述对所述支付信息进行风险信息校验的步骤还包括：
判断所述支付信息是否与预先存储的开户信息一致，若是，则校验通过，否则校验不通过。
此外，还有必要提供一种能提高安全性的交易支付系统。
一种交易支付系统，所述系统包括电话支付系统和银行系统，其中：
电话支付系统，包括：
支付信息获取模块，用于获取用户的支付信息，所述支付信息包括通信号码；
互动式语音应答平台，用于呼叫所述通信号码，获取用户输入的支付密码，并将所述支付密码和支付信息发送至银行系统；
银行系统，用于对所述支付密码和支付信息进行验证，验证通过则进行支付。
优选的，所述支付信息获取模块用于通过互联网信道或即时通信信道获取支付终端提交的用户的支付信息。优选的，所述通信号码为移动通信号码；所述电话支付系统还包括短信平台，用于通过短信向所述移动通信号码对应的移动终端下发短信验证码，接收所述移动终端返回的回复验证码，判断所述回复验证码是否与所述短信验证码一致，若是，则验证通过，否则验证不通过。
优选的，所述短信平台还用于获取返回回复验证码的移动终端的移动通信号码，将所述移动通信号码发送至所述银行系统；
所述银行系统还用于验证所述获取的移动通信号码是否与预先存储的开户信息中的移动通信号码一致，若是，则验证通过，否则验证不通过。
优选的，所述电话支付系统还包括用于在回复验证码验证通过和 / 或返回回复验证码的移动终端的移动通信号码验证通过之后，对所述支付信息进行风险信息校验的风险控制系统。
优选的，所述风险控制系统还用于在所述电话支付系统通过互动式语音应答平台呼叫所述通信号码的步骤之前，和 / 或在所述支付密码验证通过之后对所述支付信息进行风险信息校验。
优选的，所述风险控制系统用于获取所述支付信息中的商户额度，检测所述商户额度是否大于设定阈值，若是，则校验不通过，否则校验通过；和 / 或
所述风险控制系统用于根据所述支付信息判断用户是否为黑名单用户，若是，则校验不通过，否则校验通过。
优选的，所述风险控制系统还用于将所述支付信息发送至所述银行系统；
所述银行系统还用于判断所述支付信息是否与预先存储的开户信息一致，若是，则校验通过，否则校验不通过。
上述交易支付方法和系统中，电话支付系统在接收到支付信息后，通过互动式语音应答平台自动呼叫支付信息中的移动通信号码，获取用户输入的支付密码并对支付密码和支付信息进行验证。由于获取支付终端所提交的支付信息所采用的通道与互动式语言应答平台所采用的通道不相同，在对支付密码和支付信息进行验证时，减少了不法分子通过假网站、木马病毒截获用户的支付信息的可能，因此能够提高安全性。
【附图说明】
图 1 为一个实施例中交易支付方法的流程示意图；
图 2 为另一个实施例中交易支付方法的流程示意图；
图 3 为一个实施例中进行风险信息校验的流程图；
图 4 为一个实施例中交易支付系统的结构示意图；
图 5 为另一个实施例中电话支付系统的结构示意图。
【具体实施方式】
如图 1 所示，在一个实施例中，一种交易支付方法，包括以下步骤：
步骤 S102 ，支付终端获取用户的支付信息，该支付信息包括通信号码，支付终端将支付信息提交到电话支付系统。
支付终端可以是计算机、电视机、移动通信终端及其他嵌入式电子设备，可以通过 Web 浏览器提交订单，也可以通过即时通讯工具提交订单，从而生成订单数据。订单数据包括用户信息、商户信息、购买的商品信息等。其中，用户信息包括用户注册帐号、用户名称、收货地址、联系方式等；商户信息即商家信息，例如店铺名称、地址、联系方式等；购买的商品信息包括购买数量、购买价格、应付金额等。
通过支付终端提交订单并确认支付后，获取用户的支付信息。用户的支付信息包括银行卡号、用户身份信息、订单相关信息，其中用户身份信息包括但不限于身份证信息（包括用户姓名和身份证号码等）、支付密码、通信号码（可以是移动通信号码，也可以是固定通信号码）、即时通信号码、联系地址等，订单相关信息包括应付金额等。在一个实施例中，在用户提交订单数据后，可弹出提示框提示用户填写支付信息。具体的，支付终端通过互联网信道或即时通信信道将支付信息提交到电话支付系统，电话支付系统则通过互联网信道或即时通信信道获取支付终端提交的用户的支付信息。
步骤 S104 ，电话支付系统通过互动式语音应答平台呼叫所述通信号码，获取用户输入的支付密码，并将支付密码和支付信息发送到银行系统。
具体的，电话支付系统设置有互动式语音应答平台（ Interactive Voice Response ， IVR ），通过 IVR 平台呼叫支付信息中的通信号码。该通信号码对应的通信终端会收到呼叫，持有该通信终端的用户接听后，通信终端与 IVR 平台建立连接，通信终端会收到 IVR 平台通过语音信道下发的语音提示，用户根据语音提示输入支付密码，终端将支付密码上传到电话支付系统，由电话支付系统将支付密码和支付信息组织成交易报文，并发送至银行系统。
步骤 S106 ，银行系统对支付密码和支付信息进行验证，验证通过则进行支付。
具体的，银行系统可以是银行支付系统，也可以是任意交易平台上的支付系统。银行系统预先存储了用户的开户信息，包括身份证信息、开通的银行卡卡号、联系地址、移动通信号码、支付密码等。银行系统在收到支付密码和支付信息后，验证用户输入的支付密码是否正确，并验证支付信息是否与用户的开户信息相符，如果正确，则验证通过，则直接扣款。
在一个实施例中，银行系统完成支付后，通知电话支付系统，由电话支付系统修改用户订单状态等。
在一个实施例中，在步骤 S104 之前，还包括对支付信息进行风险信息校验的步骤。在支付信息的风险信息校验通过后 IVR 平台才呼叫通信号码，从而能够确保在呼叫之前的安全性。在本实施例或另一个实施例中，在步骤 S106 中对支付密码进行验证通过后，还包括对支付信息进行风险信息校验的步骤。由于支付密码验证通过后支付信息还可能更改，在支付信息的风险信息校验通过后银行系统才进行扣款，能够进一步提高支付的安全性。
由于支付终端提交支付信息和 IVR 平台获取支付密码分别是通过不同的信道进行数据传输的，可以在两个信道上对支付信息进行验证，从而提高了安全性。另外，电话支付系统在收到支付信息后，通过 IVR 平台自动呼叫支付信息中的通信号码来获取支付密码，相对于传统的用户主动呼叫 IVR 平台提供支付密码的方式，能确保提供支付密码的用户为通信号码对应的终端的持有人。如果支付密码被盗取，也能通过自动呼叫提供的通信号码来有效阻止支付，因此，进一步提高了安全性。
如图 2 所示，在另一个实施例中，一种交易支付方法，包括以下步骤：
步骤 S202 ，支付终端获取用户的支付信息，该支付信息包括移动通信号码，支付终端将支付信息提交到电话支付系统。
步骤 S204 ，通过短信平台向移动通信号码对应的移动终端下发短信验证码。
步骤 S206 ，接收移动终端返回的回复验证码。
具体的，移动终端接收到短信后，用户输入回复验证码，回复验证码返回到短信平台。
步骤 S208 ，判断回复验证码是否与短信验证码一致，若是，则进入步骤 S210 ，否则结束。
在一个实施例中，如果回复验证码与短信验证码不一致，可下发短信提示用户返回的验证码不正确，不能完成支付。这样，通过短信信道进行数据传输，再次对支付信息进行验证，进一步提高了安全性。
步骤 S210 ，获取返回回复验证码的移动终端的移动通信号码。
步骤 S212 ，通过银行系统验证获取的移动通信号码是否与预先存储的开户信息中的移动通信号码一致，若是，则进入步骤 S214 ，否则结束。
在银行系统中预先存储了用户的开户信息，包括用户开通银行卡时所提供的移动通信号码。如果银行系统获取的移动通信号码与预先存储的开户信息中的移动通信号码一致，则通过验证，否则，验证不通过。
在一个实施例中，如果验证不通过，银行系统可以通知电话支付系统，电话支付系统通过短信平台下发短信到移动终端，提示用户验证不通过，不能完成支付。通过银行系统对返回回复验证码的移动通信号码进行验证，确保了移动终端的持有者即为银行卡用户，避免了因为移动终端丢失而银行卡资金丢失的风险，进一步提高了安全性。
此外，由于在呼叫移动通信号码之前，对短信验证码进行了验证，以及对获取返回回复验证码的移动通信号码进行了验证，因此能够避免由于移动通信终端的转移呼叫而造成的安全性问题。
步骤 S214 ，对支付信息进行风险信息校验，如果校验通过，则进入步骤 S216 。
步骤 S216 ，电话支付系统通过 IVR平台呼叫移动通信号码，获取用户输入的支付密码，并将支付密码和支付信息发送至银行系统。
如上所述，具体的，移动通信号码对应的移动终端会收到呼叫，持有该移动终端的用户接听后，移动终端与 IVR 平台建立起连接，移动终端会收到 IVR 平台通过语音信道下发的语音提示，用户根据语音提示输入支付密码，移动终端将支付密码上传到电话支付系统，电话支付系统将支付密码和支付信息组织成交易报文，并发送到银行系统。
步骤 S218 ，银行系统对支付密码和支付信息进行验证，验证通过则进行支付。
具体的，银行系统验证支付密码是否正确以及验证支付信息是否与预先存储的开户信息相符，若是，则验证通过，直接扣款，否则，通知电话支付系统，由 IVR 平台下发语音提示给移动终端，提示用户密码输入不正确或支付信息不对。
在一个实施例中，上述对支付信息进行风险信息校验的步骤包括：获取交易信息中的商户额度，检测该商户额度是否大于设定阈值，若是，则校验不通过，否则校验通过。商户额度是订单的交易额度，如一次交易的数量、金额等，超过设定阈值的数量、金额的交易认为有风险的（如可能银行卡被盗用等），则校验不通过。这样，可以有效提高支付的安全性。
在本实施例中或另一个实施例中，对支付信息进行风险信息交易的步骤还包括：根据支付信息判断用户是否为黑名单用户，若是，则校验不通过，否则校验通过。如果用户交易存在不良记录，例如支付信息验证失败2次则认为该用户非法，则将用户身份信息加入到黑名单中。对于黑名单中的用户，在进行风险信息校验时，校验不通过，即非法用户不能完成支付。这样，避免了非法用户再次进行交易，进一步提高了支付的安全性。
在一个实施例中，对支付信息进行风险校验的步骤还包括：电话支付系统将支付信息发送至银行系统，银行系统判断支付信息是否与预先存储的开户信息一致，若是，则校验通过，否则校验不通过。
如图3所示，在一个实施例中，步骤S214中，对支付信息进行风险信息校验的过程具体如下：
步骤S302，根据支付信息判断用户是否为黑名单用户，若是，则流程结束，否则进入步骤S304。
步骤S304，根据支付信息判断商户额度是否大于设定阈值，若是，则流程结束，否则进入步骤S306。
步骤S306，判断是否存在已校验的支付信息，若是，则进入步骤S216，进入后续流程，否则，进入步骤S308。
步骤S308，提示用户填写支付信息。
步骤S310，对用户填写的支付信息进行风险信息校验。
步骤S310中对支付信息进行风险信息校验的过程如上所示，在此不再赘述。
在一个实施例中，在步骤S218中支付密码验证通过，还可再对支付信息进行风险信息校验，例如，根据支付信息判断商户额度是否大于设定阈值等。由于在支付密码验证通过后，用户可能会更改支付信息，通过再次进行风险信息校验，能进一步提高安全性。
如图4所示，在一个实施例中，一种交易支付系统，包括支付终端10、电话支付系统20和银行系统30，其中：
支付终端10用于获取用户的支付信息，该支付信息包括通信号码，支付终端10还用于将支付信息提交到电话支付系统20。
电话支付系统20，包括IVR平台202，IVR平台202用于呼叫通信号码，获取用户输入的支付密码，并将支付密码和支付信息发送到银行系统30。
银行系统30用于对支付密码和支付信息进行验证，验证通过则进行支付。
在一个实施例中，用户通过支付终端10提交订单，订单数据包括用户信息、商户信息、购买的商品信息等。其中，用户信息包括用户注册帐号、用户名称、收货地址、联系方式等；商户信息即商家信息，例如店铺名称、地址、联系方式等；购买的商品信息包括购买数量、购买价格、应付金额等。
通过支付终端提交订单并确认支付后，获取用户的支付信息。用户的支付信息包括银行卡号、用户身份信息、订单相关信息，其中用户身份信息包括但不限于身份证信息（包括用户姓名、身份证号码等）、支付密码、通信号码（可以是移动通信号码，也可以是固定通信号码）、即时通信号码、联系地址等，订单相关信息包括应付金额等。在一个实施例中，在用户提交订单数据后，可弹出提示框提示用户填写支付信息。具体的，支付终端 10 通过互联网信道或即时通信信道将支付信息提交到电话支付系统 20 。
进一步的，电话支付系统 20 可包括支付信息获取模块，用于通过互联网信息或即时通信信道获取支付终端 10 提交的用户的支付信息。
在一个实施例中，通过 IVR 平台 202 呼叫支付信息中的通信号码，该通信号码对应的通信终端会收到呼叫，持有该通信终端的用户接听后，通信终端与 IVR 平台 202 建立连接，通信终端会收到 IVR 平台 202 通过语音信道下发的语音提示，用户根据语音提示输入支付密码，通信终端将支付密码上传到电话支付系统 20 ，由电话支付系统 20 将支付密码和支付信息组织成交易报文，并发送至银行系统 30 。
具体的，银行系统 30 可以是银行支付系统，也可以是任意交易平台上的支付系统。在银行系统 30 预先存储了用户的开户信息，包括用户的身份证信息、开通的银行卡卡号、联系地址、移动通信号码、支付密码等。银行系统 30 在收到支付密码和支付信息后，验证用户输入的支付密码是否正确，并验证支付信息是否与用户的开户信息相符，如果正确，则验证通过，则直接扣款，完成支付。
在一个实施例中，电话支付系统20还包括核心支付系统（图中未示出），用于管理订单等。当银行系统30完成支付后，通知核心支付系统，由核心支付系统修改订单状态，并将该订单状态返回到支付终端10。
在另一个实施例中，如图 5 所示，电话支付系统 20 还包括短信平台 204 ，短信平台 204 用于通过短信向支付信息中的移动通信号码对应的移动终端下发短信验证码，接收该移动终端返回的回复验证码，判断回复验证码是否与短信验证码一致，若是，则验证通过，否则验证不通过。
在一个实施例中，短信平台 204 还用于获取返回回复验证码的移动终端的移动通信号码，将该移动通信号码发送至银行系统 30 。本实施例中，银行系统 30 还用于验证获取的移动通信号码是否与预先存储的开户信息中的移动通信号码一致，若是，则验证通过，否则验证不通过。
在一个实施例中，如图 5 所示，电话支付系统 20 还包括用于回复验证码验证通过和 / 或返回回复验证码的移动终端的移动通信号码验证通过之后，对支付信息进行风险信息校验的风险控制系统 206 。
在一个实施例中，风险控制系统 206 还用于在电话支付系统 20 通过 IVR 平台 202 呼叫通信号码的步骤之前对支付信息进行风险信息校验。在本实施例或另一个实施例中，风险控制系统 206 还用于在支付密码验证通过之后对支付信息进行风险信息校验。
在一个实施例中，风险控制系统 206 用于获取支付信息中的商户额度，检测商户额度是否大于设定阈值，若是，则校验不通过，否则校验通过。在本实施例或另一实施例中，风险控制系统 208 还用于根据支付信息判断用户是否为黑名单用户，若是，则校验不通过，否则校验通过。
在一个实施例中，风险控制系统206还用于将支付信息发送到银行系统30。本实施例中，银行系统30还用于判断支付信息是否与预先存储的开户信息一致，若是，则校验通过，否则校验不通过。
上述交易支付方法和系统中，通过使用移动终端、互联网、IVR平台、短信平台等多个通信通道采集用户的支付信息，大大增加了用户的支付信息被全部盗取的难度，因此增加了非面对面支付的安全性。
上述交易支付方法和系统中，通过短信验证确认移动终端持有人，通过银行系统确认银行卡持有人的身份、移动通信号码等信息，通过多个通信通道来验证用户身份信息，确保了安全支付。
本领域普通技术人员可以理解实现上述实施例方法中的全部或部分流程，是可以通过计算机程序来指令相关的硬件来完成，所述的程序可存储于一计算机可读取存储介质中，该程序在执行时，可包括如上述各方法的实施例的流程。其中，所述的存储介质可为磁碟、光盘、只读存储记忆体（ Read-Only Memory ， ROM ）或随机存储记忆体（ Random Access Memory ， RAM ）等。
以上所述实施例仅表达了本发明的几种实施方式，其描述较为具体和详细，但并不能因此而理解为对本发明专利范围的限制。应当指出的是，对于本领域的普通技术人员来说，在不脱离本发明构思的前提下，还可以做出若干变形和改进，这些都属于本发明的保护范围。因此，本发明专利的保护范围应以所附权利要求为准。

Claims (16)

  1. 一种交易支付方法，包括以下步骤：
    获取用户的支付信息，所述支付信息包括通信号码；
    通过互动式语音应答平台呼叫所述通信号码，获取用户输入的支付密码；
    对所述支付密码和支付信息进行验证，验证通过则进行支付。
  2. 根据权利要求1所述的交易支付方法，其特征在于，所述获取用户的支付信息的步骤为：通过互联网信道或即时通信信道获取支付终端提交的用户的支付信息。
  3. 根据权利要求1所述的交易支付方法，其特征在于，所述通信号码为移动通信号码；在通过互动式语音应答平台呼叫所述移动通信号码的步骤之前，还包括：
    通过短信平台向所述移动通信号码对应的移动终端下发短信验证码；
    接收所述移动终端返回的回复验证码；
    判断所述回复验证码是否与所述短信验证码一致，若是，则验证通过，否则验证不通过。
  4. 根据权利要求3所述的交易支付方法，其特征在于，在通过互动式语音应答平台呼叫所述移动通信号码的步骤之前，还包括：
    获取返回回复验证码的移动终端的移动通信号码；
    验证所述获取的移动通信号码是否与预先存储的开户信息中的移动通信号码一致，若是，则验证通过，否则验证不通过。
  5. 根据权利要求4所述的交易支付方法，其特征在于，在回复验证码验证通过的步骤和/或返回回复验证码的移动终端的移动通信号码验证通过的步骤之后，还包括：
    对所述支付信息进行风险信息校验。
  6. 根据权利要求1所述的交易支付方法，其特征在于，在通过互动式语音应答平台呼叫所述通信号码的步骤之前，和/或在所述支付密码验证通过之后，还包括：
    对所述支付信息进行风险信息校验。
  7. 根据权利要求 5 或 6 所述的交易支付方法，其特征在于，所述对所述支付信息进行风险信息校验的步骤包括：
    获取所述支付信息中的商户额度，检测所述商户额度是否大于设定阈值，若是，则校验不通过，否则校验通过；和 / 或
    根据所述支付信息判断用户是否为黑名单用户，若是，则校验不通过，否则校验通过。
  8. 根据权利要求7所述的交易支付方法，其特征在于，所述对所述支付信息进行风险信息校验的步骤还包括：
    判断所述支付信息是否与预先存储的开户信息一致，若是，则校验通过，否则校验不通过。
  9. 一种交易支付系统，其特征在于，所述系统包括电话支付系统和银行系统，其中：
    电话支付系统包括：
    支付信息获取模块，用于获取用户的支付信息，所述支付信息包括通信号码；
    互动式语音应答平台，用于呼叫所述通信号码，获取用户输入的支付密码，并将所述支付密码和支付信息发送至银行系统；
    银行系统，用于对所述支付密码和支付信息进行验证，验证通过则进行支付。
  10. 根据权利要求9所述的交易支付系统，其特征在于，所述支付信息获取模块用于通过互联网信道或即时通信信道获取支付终端提交的用户的支付信息。
  11. 根据权利要求9所述的交易支付系统，其特征在于，所述通信号码为移动通信号码；所述电话支付系统还包括短信平台，用于通过短信向所述移动通信号码对应的移动终端下发短信验证码，接收所述移动终端返回的回复验证码，判断所述回复验证码是否与所述短信验证码一致，若是，则验证通过，否则验证不通过。
  12. 根据权利要求11所述的交易支付系统，其特征在于，所述短信平台还用于获取返回回复验证码的移动终端的移动通信号码，将所述移动通信号码发送至所述银行系统；
    所述银行系统还用于验证所述获取的移动通信号码是否与预先存储的开户信息中的移动通信号码一致，若是，则验证通过，否则验证不通过。
  13. 根据权利要求12所述的交易支付系统，其特征在于，所述电话支付系统还包括用于在回复验证码验证通过和/或返回回复验证码的移动终端的移动通信号码验证通过之后，对所述支付信息进行风险信息校验的风险控制系统。
  14. 根据权利要求13所述的交易支付系统，其特征在于，所述风险控制系统还用于在所述电话支付系统通过互动式语音应答平台呼叫所述通信号码的步骤之前，和/或在所述支付密码验证通过之后对所述支付信息进行风险信息校验。
  15. 根据权利要求13或14所述的交易支付系统，其特征在于，所述风险控制系统用于获取所述支付信息中的商户额度，检测所述商户额度是否大于设定阈值，若是，则校验不通过，否则校验通过；和/或
    所述风险控制系统用于根据所述支付信息判断用户是否为黑名单用户，若是，则校验不通过，否则校验通过。
  16. 根据权利要求15所述的交易支付系统，其特征在于，所述风险控制系统还用于将所述支付信息发送至所述银行系统；
    所述银行系统还用于判断所述支付信息是否与预先存储的开户信息一致，若是，则校验通过，否则校验不通过。
PCT/CN2012/076994 2011-09-20 2012-06-15 一种交易支付方法和系统 WO2013040916A1 (zh)

Priority Applications (10)

Application Number Priority Date Filing Date Title
RU2014115463/08A RU2014115463A (ru) 2011-09-20 2012-06-15 Способ и система оплаты транзакций
KR1020147010185A KR20140070606A (ko) 2011-09-20 2012-06-15 거래 지불 방법 및 시스템
MX2014003427A MX2014003427A (es) 2011-09-20 2012-06-15 Metodo y sistema de pago de transaccion.
JP2014526367A JP2014524622A (ja) 2011-09-20 2012-06-15 取引支払方法及びシステム
AP2014007582A AP2014007582A0 (en) 2011-09-20 2012-06-15 Transaction payment method and system
SG2013079504A SG194639A1 (en) 2011-09-20 2012-06-15 Transaction payment method and system
CA2844747A CA2844747A1 (en) 2011-09-20 2012-06-15 Transaction payment method and system
EP12834104.7A EP2759968A4 (en) 2011-09-20 2012-06-15 METHOD AND SYSTEM FOR PAYING TRANSACTION
AU2012313221A AU2012313221A1 (en) 2011-09-20 2012-06-15 Transaction payment method and system
US14/057,574 US20140046850A1 (en) 2011-09-20 2013-10-18 Transaction payment method and system

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201110280122.7 2011-09-20
CN2011102801227A CN103020820A (zh) 2011-09-20 2011-09-20 一种交易支付方法和系统

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US14/057,574 Continuation US20140046850A1 (en) 2011-09-20 2013-10-18 Transaction payment method and system

Publications (1)

Publication Number Publication Date
WO2013040916A1 true WO2013040916A1 (zh) 2013-03-28

Family

ID=47913836

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2012/076994 WO2013040916A1 (zh) 2011-09-20 2012-06-15 一种交易支付方法和系统

Country Status (13)

Country Link
US (1) US20140046850A1 (zh)
EP (1) EP2759968A4 (zh)
JP (1) JP2014524622A (zh)
KR (1) KR20140070606A (zh)
CN (1) CN103020820A (zh)
AP (1) AP2014007582A0 (zh)
AU (1) AU2012313221A1 (zh)
CA (1) CA2844747A1 (zh)
MX (1) MX2014003427A (zh)
RU (1) RU2014115463A (zh)
SG (1) SG194639A1 (zh)
TW (1) TW201314600A (zh)
WO (1) WO2013040916A1 (zh)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106779649A (zh) * 2016-12-21 2017-05-31 世纪禾光科技发展（北京）有限公司 转账处理方法及装置
CN106936807A (zh) * 2015-12-31 2017-07-07 阿里巴巴集团控股有限公司 一种恶意操作的识别方法和装置
CN111818230A (zh) * 2020-07-16 2020-10-23 浙江百应科技有限公司 一种基于客户按键信息提取关键信息的方法

Families Citing this family (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104636924B (zh) * 2013-11-15 2023-04-25 腾讯科技（深圳）有限公司 一种安全支付方法、服务器以及系统
CN104753868A (zh) * 2013-12-30 2015-07-01 腾讯科技（深圳）有限公司 一种安全验证方法、业务服务器及安全验证系统
CN103942676A (zh) * 2014-03-21 2014-07-23 深圳市讯鸿科技开发有限公司 移动支付方法和系统
US9690924B2 (en) * 2014-05-15 2017-06-27 Microsoft Technology Licensing, Llc Transparent two-factor authentication via mobile communication device
CN104618342B (zh) * 2015-01-05 2018-02-06 锐嘉科集团有限公司 一种信息屏蔽方法、终端及系统
CN104778586A (zh) * 2015-03-18 2015-07-15 广东欧珀移动通信有限公司 一种安全支付方法及装置
US10540648B2 (en) * 2015-04-15 2020-01-21 Mastercard International Incorporated Use of mobile network operator data and/or scores in decision-making on requests for payment credential provisioning for mobile devices
US20160335637A1 (en) * 2015-05-11 2016-11-17 Mastercard International Incorporated Systems and Methods for Facilitating Transactions to Payment Accounts, Via SMS Messaging
US9544747B2 (en) * 2015-05-27 2017-01-10 Airwatch Llc Transmitting management commands to a client device
CN105119877B (zh) * 2015-06-30 2018-11-13 百度在线网络技术（北京）有限公司 语音验证方法、装置以及系统
CN105590191A (zh) * 2015-09-08 2016-05-18 中国银联股份有限公司 用于交易数据接入的接口系统及其实现方法
EP3363189A1 (en) * 2015-10-14 2018-08-22 Pindrop Security, Inc. Call detail record analysis to identify fraudulent activity and fraud detection in interactive voice response systems
CN107181664B (zh) * 2016-03-10 2021-04-09 创新先进技术有限公司 一种自动熔断的消息发送方法、装置及系统
CN106257519A (zh) * 2016-08-03 2016-12-28 四川易想电子商务有限公司 一种网上安全交易系统
CN108229955A (zh) * 2016-12-14 2018-06-29 阿里巴巴集团控股有限公司 支付方法、支付系统及支付装置
TWI631847B (zh) * 2016-12-26 2018-08-01 中華電信股份有限公司 Voice response payment system and method thereof
CN107688931A (zh) * 2016-12-30 2018-02-13 平安科技（深圳）有限公司 保费支付方法和装置
CN107194689B (zh) * 2017-06-16 2024-05-03 河南晟宇信息技术有限公司 基于近场磁通信与接近关系检测的手机支付系统与方法
CN110046902A (zh) * 2019-01-15 2019-07-23 阿里巴巴集团控股有限公司 风险交易处理方法、装置及设备
US11470194B2 (en) 2019-08-19 2022-10-11 Pindrop Security, Inc. Caller verification via carrier metadata
CN110910142A (zh) * 2019-11-06 2020-03-24 远光软件股份有限公司 支付认证方法及装置
CN111476567A (zh) * 2020-03-04 2020-07-31 深圳市多亲科技有限公司 一种短信验证码处理方法、装置和移动终端
CN111415012B (zh) * 2020-03-18 2022-09-23 支付宝(杭州)信息技术有限公司 一种智能设备的安全策略推荐方法、装置和电子设备
CN111597538A (zh) * 2020-04-02 2020-08-28 上海瀚之友信息技术服务有限公司 一种验证码生成方法及系统

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20090109977A (ko) * 2008-04-17 2009-10-21 한국정보통신주식회사 음성통화 채널을 통한 결제 처리 방법 및 시스템과 이를위한 기록매체
CN101908183A (zh) * 2010-04-16 2010-12-08 宇龙计算机通信科技(深圳)有限公司 一种移动终端呼叫支付方法、支付平台
CN102004978A (zh) * 2010-12-02 2011-04-06 联动优势科技有限公司 实名安全支付系统及方法
CN102054316A (zh) * 2009-11-06 2011-05-11 中国银联股份有限公司 一种通过手机进行密码认证的银行卡交易方法及系统
CN201867900U (zh) * 2010-08-27 2011-06-15 黄金富 通过安全验证的手机确认支付系统

Family Cites Families (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2000076336A (ja) * 1998-08-31 2000-03-14 Fujitsu Ltd 電子決済認証システム及び電子商取引サービスプロバイダ装置
JP2001144749A (ja) * 1999-11-11 2001-05-25 Nippon Telegraph & Telephone West Corp ネットワークにおける本人特定方法およびシステムと本人特定プログラムを記録した記録媒体
JP3361504B2 (ja) * 2000-05-24 2003-01-07 株式会社イメ−ジパ−トナ− カード支払自動決済システム
JP2001351033A (ja) * 2000-06-08 2001-12-21 Nec Tohoku Ltd 決済方法
AU2001280023A1 (en) * 2000-07-17 2002-01-30 Richard O'connell System and methods of validating an authorized user of a payment card and authorization of a payment card transaction
JP2002056325A (ja) * 2000-08-08 2002-02-20 Nec Corp 電子決済方法およびシステムとその決済センタ装置、個人情報入力端末およびプログラムを記録した記録媒体
US20020073027A1 (en) * 2000-12-11 2002-06-13 Hui Helen Shan-Shan Mobile payment system
US7383572B2 (en) * 2002-05-24 2008-06-03 Authentify, Inc. Use of public switched telephone network for authentication and authorization in on-line transactions
JP2004110487A (ja) * 2002-09-19 2004-04-08 Nec Engineering Ltd 電子決済認証システム
JP2004164040A (ja) * 2002-11-08 2004-06-10 Nec Fielding Ltd 決済システム、決済方法、声紋認証サーバ装置及びプログラム
CN1479551A (zh) * 2003-06-03 2004-03-03 �����ɷ� 移动终端支付的方法及其系统
CN1635525A (zh) * 2003-12-31 2005-07-06 中国银联股份有限公司 一种安全的网上支付系统及安全的网上支付认证方法
JP2005275923A (ja) * 2004-03-25 2005-10-06 Nec Corp カード決済時の本人認証方法及びカード決済時の本人認証システム及び店舗情報処理装置及びクレジット会社情報処理装置及び携帯端末及びプログラム
AU2004100722B4 (en) * 2004-08-31 2005-11-24 Markets-Alert Pty Ltd A Security System
CN101025806B (zh) * 2006-02-20 2012-09-05 普天信息技术研究院 一种用移动通信终端进行费用支付的方法
CN101647040A (zh) * 2006-12-26 2010-02-10 维萨美国股份有限公司 使用别名的移动支付系统和方法
US7848980B2 (en) * 2006-12-26 2010-12-07 Visa U.S.A. Inc. Mobile payment system and method using alias
CN101334875A (zh) * 2007-06-25 2008-12-31 黄金富 利用手机即时互相转账支付的方法和系统
JP4634422B2 (ja) * 2007-08-02 2011-02-16 日本電信電話株式会社 カード利用処理システム、カード利用処理装置、カード利用処理方法およびカード利用処理プログラム
JP2009253502A (ja) * 2008-04-03 2009-10-29 Telephony Co Ltd 金銭受付処理システム
JP5200978B2 (ja) * 2009-02-12 2013-06-05 株式会社デンソー 与信判定システム、車載器及び与信判定方法
LT2396754T (lt) * 2009-02-14 2019-02-25 Net2Text Limited Saugaus mokėjimo ir atsiskaitymo būdas, naudojant mobiliojo telefono numerį arba sąskaitą

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20090109977A (ko) * 2008-04-17 2009-10-21 한국정보통신주식회사 음성통화 채널을 통한 결제 처리 방법 및 시스템과 이를위한 기록매체
CN102054316A (zh) * 2009-11-06 2011-05-11 中国银联股份有限公司 一种通过手机进行密码认证的银行卡交易方法及系统
CN101908183A (zh) * 2010-04-16 2010-12-08 宇龙计算机通信科技(深圳)有限公司 一种移动终端呼叫支付方法、支付平台
CN201867900U (zh) * 2010-08-27 2011-06-15 黄金富 通过安全验证的手机确认支付系统
CN102004978A (zh) * 2010-12-02 2011-04-06 联动优势科技有限公司 实名安全支付系统及方法

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP2759968A4 *

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106936807A (zh) * 2015-12-31 2017-07-07 阿里巴巴集团控股有限公司 一种恶意操作的识别方法和装置
CN106779649A (zh) * 2016-12-21 2017-05-31 世纪禾光科技发展（北京）有限公司 转账处理方法及装置
CN106779649B (zh) * 2016-12-21 2021-05-04 数贸科技（北京）有限公司 转账处理方法及装置
CN111818230A (zh) * 2020-07-16 2020-10-23 浙江百应科技有限公司 一种基于客户按键信息提取关键信息的方法

Also Published As

Publication number Publication date
MX2014003427A (es) 2014-07-28
CA2844747A1 (en) 2013-03-28
KR20140070606A (ko) 2014-06-10
AU2012313221A1 (en) 2014-03-13
AP2014007582A0 (en) 2014-04-30
CN103020820A (zh) 2013-04-03
TW201314600A (zh) 2013-04-01
JP2014524622A (ja) 2014-09-22
EP2759968A4 (en) 2015-03-18
SG194639A1 (en) 2013-12-30
EP2759968A1 (en) 2014-07-30
US20140046850A1 (en) 2014-02-13
RU2014115463A (ru) 2015-10-27

Similar Documents

Publication Publication Date Title
WO2013040916A1 (zh) 一种交易支付方法和系统
KR100654039B1 (ko) 무선 인터넷에서 서비스 서버의 인증방법 및 이를 이용한결제방법
US20230368176A1 (en) System and method for facilitating electronic financial transactions during a communication session
WO2012130035A1 (zh) 一种用户认证授权的方法及其实现系统
US8549594B2 (en) Method of identity authentication and fraudulent phone call verification that utilizes an identification code of a communication device and a dynamic password
WO2018161365A1 (zh) 自助售卖方法及系统
CA3050566C (en) Contact centre user authentication
WO2015101036A1 (en) Methods and systems for verifying a transaction
EP2385688B1 (en) Method and system for improved communication security
CA3099585C (en) Service agent authentication
US8260679B2 (en) System and method of event triggered voice call origination
KR100582389B1 (ko) Ｒｆ 결제시 중간 이벤트를 차단하는 모바일 커머스무선통신 단말기 및 그 방법
US20220222650A1 (en) Ttelephone call purchase with payment using mobile payment device
KR20010044213A (ko) 이동단말기의 발신자 전화정보를 이용한 과금결재방법과그를 위한 시스템
WO2016019535A1 (zh) 一种邮箱支付方法及邮箱支付系统
JPWO2006018892A1 (ja) 個人情報が漏えいしても成りすましを防げる電話認証システム
KR102626444B1 (ko) 소액결제금액을 인증번호로 활용한 카드결제 본인인증방법
JP2023183771A (ja) 認証システム及びコンピュータプログラム
JP2013020287A (ja) 認証装置、認証システム、認証方法、およびプログラム
JP2002109433A (ja) 代金決済システム及び代金決済方法
KR20040105938A (ko) 이동 통신 단말기의 모바일 결제 시스템 및 방법
KR20010114062A (ko) 전자상거래결제시스템 및 이를 이용한 결제방법
WO2002084551A1 (fr) Systeme de paiement postal au moyen d'un numero de telephone en tant que cle
OA16861A (en) Transaction payment method and system
TW201027443A (en) Sound OTP certification method

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 12834104

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 2012834104

Country of ref document: EP

ENP Entry into the national phase

Ref document number: 2844747

Country of ref document: CA

ENP Entry into the national phase

Ref document number: 2014526367

Country of ref document: JP

Kind code of ref document: A

WWE Wipo information: entry into national phase

Ref document number: 12014500524

Country of ref document: PH

ENP Entry into the national phase

Ref document number: 2012313221

Country of ref document: AU

Date of ref document: 20120615

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: MX/A/2014/003427

Country of ref document: MX

ENP Entry into the national phase

Ref document number: 20147010185

Country of ref document: KR

Kind code of ref document: A

ENP Entry into the national phase

Ref document number: 2014115463

Country of ref document: RU

Kind code of ref document: A