WO2015101310A1

WO2015101310A1 - Service processing method, device and system

Info

Publication number: WO2015101310A1
Application number: PCT/CN2014/095771
Authority: WO
Inventors: 李茂材
Original assignee: 腾讯科技（深圳）有限公司
Priority date: 2013-12-31
Filing date: 2014-12-31
Publication date: 2015-07-09
Also published as: CN104751334B; CN104751334A

Abstract

Disclosed are a service processing method, device and system. The method comprises: a first terminal (1) obtains the first identity information (S101); a second terminal (2) reads the first identity information from the first terminal (1), obtains the service information of a user, and generates a service processing request comprising the first identity information and the service information (S102); a server (3) performs authentication on the first identity information in the service processing request after receiving the service processing request, and processes the service indicated by the service information in the service processing request after authentication is successful (S103). The method can achieve safe service processing fast and conveniently.

Description

Business processing method, device and system

The present application claims priority to Chinese Patent Application No. 201310752236.6, entitled "A Business Processing Method, Apparatus, and System" on December 31, 2013, the entire contents of which are incorporated herein by reference. In the application.

Technical field

The present invention relates to the field of computer information processing technologies, and in particular, to a service processing method, apparatus, and system.

Background technique

With the development of computer technology and network technology, people can basically carry out activities related to work, study and life through electronic devices such as handheld devices, computers, laptops, etc., and the handheld devices can be mobile phones or tablets. Generally, electronic devices need to perform a large number of business processing operations. In this process, how to ensure the security of business processing, especially in the process of business processing such as mobile payment, ticket purchase, and recharge, has become a research hotspot.

Currently, the security processing methods include a security card and a password protection medium for a commercial bank or a personal online banking with a USB (Universal Serial Bus) interface. The password protection medium may be a U-Shield or the like. For the security processing method of the security card, generally after the user inputs the transaction password, the digital combination of the corresponding position in the security card is input according to the prompt of the server to verify the identity of the user. The U shield is implemented by online bank transfer to initiate payment. First, insert the U shield into the terminal's USB interface. After verifying that the U shield is legal, notify the user to enter the payment password instead of directly entering the password.

The security processing method in the prior art needs hardware support such as a security card or a U shield, and the cost is high, and the security card and the U shield are separated from the payment terminal, and the user needs to carry it at any time, and cannot be lost, otherwise it cannot be The payment is completed, and the operation process is relatively complicated.

Summary of the invention

The technical problem to be solved by the embodiments of the present invention is to provide a service processing method, a terminal, and The system can realize secure business processing conveniently and quickly.

In order to solve the above technical problem, an embodiment of the present invention provides a service processing method, including:

The first terminal acquires the first identity information;

The second terminal reads the first identity information from the first terminal, acquires service information of the user, and generates a service processing request that includes the first identity information and the service information.

After receiving the service processing request, the server authenticates the first identity information in the service processing request, and after the authentication is passed, processes the service indicated by the service information in the service processing request.

The embodiment of the invention further provides another service processing method, including:

The first terminal acquires the first identity information;

Notifying the second terminal to the second terminal, so that the second terminal acquires service information of the user and requests the server to process the service indicated by the service information;

The notifying the first identity information to the second terminal includes: generating a graphic code according to the first identity information, so that the second terminal reads the first identity information by scanning a graphic code.

The second terminal reads the first identity information from the first terminal;

Obtaining service information of the user, and generating a service processing request including the first identity information and the service information;

Sending the service processing request to the server, so that the server authenticates the first identity information and processes the service indicated by the service information after the authentication is passed.

Accordingly, embodiments of the present invention also provide a terminal, including a memory, and one or more programs, wherein one or more programs are stored in a memory and configured to be executed by one or more processors An instruction contained in one or more programs for performing the following methods:

Obtaining the first identity information;

Another embodiment of the present invention provides a terminal, including a processor and a transmitter:

The processor is configured to read the first identity information from the first terminal, obtain the service information of the user, and generate a service processing request that includes the first identity information and the service information;

The sender is configured to send the service processing request to the server, so that the server authenticates the first identity information and processes the service indicated by the service information after the authentication is passed.

The embodiment of the invention further provides a computer storage medium, wherein the computer storage medium stores a program, and when the program is executed, the method includes the above method.

Correspondingly, the embodiment of the present invention further provides a service processing system, including: a first terminal, a server, and a second terminal, where

The first terminal is configured to acquire first identity information.

The second terminal is configured to read the first identity information from the first terminal, obtain service information of the user, and generate a service processing request that includes the first identity information and the service information;

The server is configured to: after receiving the service processing request, perform authentication on the first identity information in the service processing request, and after the authentication is passed, process the service information in the service processing request business.

The embodiment of the present invention generates a user tag by presetting the corresponding tag generating module in the terminal, and completes the interaction and processing between the terminals of the two parties through the method steps of the embodiment of the present invention, completes the processing of the corresponding service, and satisfies the user. Automated, intelligent requirements, and no need to add additional security products such as security card or U shield, saving overhead, and ensuring that users will not be unable to carry or lose hardware products such as security cards or U shields. The problem of payment.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a schematic flowchart of a service processing method according to an embodiment of the present invention;

2 is a schematic flowchart of another service processing method according to an embodiment of the present invention;

3 is a schematic flowchart of another service processing method according to an embodiment of the present invention;

4 is a schematic diagram of an interaction process of a method for completing a service according to an embodiment of the present invention;

FIG. 5 is a schematic flowchart diagram of still another service processing method according to an embodiment of the present invention; FIG.

6 is a schematic flowchart of still another service processing method according to an embodiment of the present invention;

7 is a schematic structural diagram of a service processing system according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a terminal according to an embodiment of the present invention; FIG.

FIG. 9 is a schematic structural diagram of a service processing apparatus according to an embodiment of the present invention; FIG.

FIG. 10 is a schematic structural diagram of a user terminal according to an embodiment of the present invention; FIG.

11 is a schematic structural diagram of another service processing apparatus according to an embodiment of the present invention;

FIG. 12 is a schematic structural diagram of a user terminal according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

1 is a schematic flowchart of a service processing method according to an embodiment of the present invention. The method in the embodiment of the present invention may be implemented in various types of user terminals and servers, and may be specifically applied to types such as payment transaction processing. In the service scenario, the method in the embodiment of the present invention includes:

S101: The first terminal acquires the first identity information.

The first identity information includes user information and a user identifier for marking the user information. The user information may include terminal information of the first terminal and user account information of the user corresponding to the first terminal, where the terminal information of the first terminal may be the first IP address of the terminal (Internet Protocol, protocol exchanged between networks), etc.

The user information is stored locally in the first terminal, and the first terminal directly obtains user information from the local. For the user tag, the first terminal can obtain the user tag by using the following two methods, including:

First, the first terminal acquires user information, and invokes a preset tag generation module to generate a user tag for marking the user information, thereby obtaining first identity information including the user information and the user tag.

The tag generation module is pre-installed and configured in the first terminal, which may be specifically obtained based on a digital certificate, a dynamic token or some other application capable of uniquely authenticating the user corresponding to the first terminal. In the server that needs to verify the user tag, the user information of the first terminal and the tag generating module that matches the tag generating module in the first terminal are also bound, and the server may pass the matching tag. The generating module verifies the user tag of the first terminal.

The second terminal acquires the user information, sends the user information to the server, and causes the server to generate a user identifier for marking the user information, and receives the user identifier sent by the server, thereby obtaining the user information and the location. The first identity information of the user tag.

After generating the user tag, the server also obtains first identity information including the user tag and the user information and stores the first identity information.

After obtaining the first identity information, the first terminal may further encrypt the first identity information, and send the encrypted first identity information to the second terminal by wire or wireless, or the first terminal encrypts the first identity. An identity information is encoded to obtain information such as a graphic code, a voice signal, and the like for indicating the first identity information, so as to be notified to the second terminal.

The user of the first terminal includes a user who requests a service, such as a paying party user who purchases a service or an item, and the user of the second terminal provides a user for a service, such as various merchants.

S102: The second terminal reads the first identity information from the first terminal, and obtains service information of the user, and generates a service processing request including the first identity information and the service information, to the server. Sending the business processing request.

The second terminal may correspondingly scan the graphic code, or receive the voice information and parse the encrypted first identity information, or receive the encrypted first identity information by wire or wirelessly. After obtaining the first identity information, the original first identity information may be retained, and without decrypting or extracting any information therein, the user of the second terminal directly extracts and enters the service information related to the user of the first terminal, for example, The user of the second terminal can extract and input the order information of the transaction with the user of the first terminal through the displayed human-machine interface; the second terminal can also process the first identity information, and extract the user information of the first terminal therein. Then, based on the user information, the corresponding business information such as an order is automatically found. The service information includes at least a user account information and a transfer value of the user corresponding to the second terminal, and the transfer value may be a transaction amount in the transaction scenario.

After the first identity information and the service information are obtained, the second terminal generates a service. Processing the request to request the related server to perform business processing on the service information based on the first identity information. When the service processing request is generated in S102, the second identity information of the second terminal user that is obtained according to the user information, such as the merchant information, corresponding to the second terminal user may be added to the related server.

S103: After receiving the service processing request, the server authenticates the first identity information in the service processing request, and after the authentication is passed, processes the service information in the service processing request. Business.

After receiving the service processing request of the service providing user such as a merchant, the server extracts the first identity information and the service information in the service processing request, and then may use the first and second modes to process the first identity information. Perform authentication, including.

First, the server acquires a tag generation module that is bound to the user information in the first identity information, and the first identity information is authenticated by the tag generation module.

Wherein, if the user identifier is a digital signature by the first terminal by using a digital certificate, the server may verify the first identity information based on an existing manner about digital certificate verification, and the server passes the first identity information The digital certificate bound by the user information is used to verify the information integrity of the corresponding user tag. After the verification is passed, the user information such as the terminal information and the user account information is verified, and if the verification is passed, the first is The first identity information authentication of the terminal is passed.

And if the user tag is generated by the first terminal by using a dynamic token, the server may be based on a specific token value of the user tag (eg, a number of a specified time period), and then according to the first identity information in the server. Corresponding user information is bound to the dynamic token, and the corresponding token value is obtained. The user token is verified by comparing the two, and after the verification is passed, the user information such as terminal information and user account information is verified. After the verification is passed, the first identity information of the first terminal is authenticated and passed.

Second, the server determines whether the first identity information is stored locally, and if so, authenticates the first identity information.

Since the first identity information is generated by the first terminal requesting server, and the server also saves a copy after the generation, the first identity information in the service processing request is also saved in the server, indicating that the first identity information is the first one. The terminal is authorized to the second terminal, so after the first identity information is authenticated, the service indicated by the service information in the service processing request can be processed.

If the service processing request further includes the second identity information of the second terminal, the server further needs to verify the second identity information, and the specific verification mode may also complete the verification based on the digital certificate or the dynamic token.

After verifying the first identity information, or the first identity information and the second identity information, the server initiates a service processing process according to the service information in the first identity information, for example, if the first identity information is used. The service information in the process is the order information, and the process of paying the user information in the first identity information is initiated according to the order information, and the information is exchanged with the user corresponding to the user information in the first identity information and the related payment server and the bank server. Complete the transaction payment process.

In the embodiment of the present invention, the first identity information sent by the second terminal is authenticated by the server, and the authentication is passed, indicating that the first identity information is authorized by the first terminal to the second terminal, and then the service processing process can be performed, and the implementation is not required. The password can be used to authenticate the user of the first terminal.

2 is a schematic flowchart of another service processing method according to an embodiment of the present invention. The method in the embodiment of the present invention may be implemented in various types of user terminals and servers, and may be applied to, for example, payment transaction processing. The method of the embodiment of the present invention includes:

S201: The first terminal submits an authentication request including user information, where the verification request includes user information of the first terminal.

The user information may include user account information of the user corresponding to the first terminal and terminal information of the first terminal, and may also include other information that can mark the user.

S202: After receiving the verification request, the server acquires a mark generation module for generating a user mark, and binds the stored user information and the obtained mark generation module.

The tag generation module can be a digital certificate module or a dynamic token generation module. After receiving the verification request, the server may digitally sign the user information to obtain a digital certificate by using a preset digital signature algorithm, and form a digital certificate module by using a preset digital signature algorithm and the digital certificate; or, The preset token generation algorithm processes the user information to obtain a dynamic token, and the preset token generation algorithm and the dynamic token form a dynamic token generation module.

The first terminal may submit user account information, terminal information, and other user information that can mark the user, requesting the server to allocate a corresponding digital certificate, dynamic token, etc. to the first terminal to obtain installation data for generating the user token. The package generates a tag generation module.

Before obtaining the mark generation module, the server also verifies the user information submitted by the user, including the user password verification. After the verification is passed, the installation data packet for generating the user tag is obtained for the first terminal, and the server executes the installation data. The packet is sent to the first terminal by a packet generation module such as a digital certificate module and a dynamic token module on the server side.

S203: The server sends, to the first terminal, an installation data packet corresponding to the acquired tag generation module for generating a user tag.

S204: After receiving the installation data packet for generating the user identifier, the first terminal presets the label generation module according to the installation data package for generating the user identifier.

The tag generation module according to the installation data package preset for generating a user tag includes: a digital certificate module and/or a dynamic token generation module.

After receiving the installation data packet of the digital certificate module or the dynamic token generation module, the first terminal obtains a digital certificate module or a dynamic token generation module based on the installation data package, thereby obtaining a mark generation module and completing the mark generation module. Preset. The S201 to S204 are preset processes of the tag generation module of the first terminal.

S205: The first terminal acquires user information, and invokes a preset tag generation module to generate a user tag for marking the user information, to obtain first identity information including the user information and the user tag.

In the scenario where the user performs the identity authorization verification, such as the near-field payment and the offline payment, when the first terminal detects the user's business processing operation through the corresponding human-machine interface (such as when the related function button is clicked), the user information is started. . The user information acquired by the first terminal includes: a terminal identifier of the first terminal and/or a user account, or some other security-enhanced user information. The first terminal may obtain user information by providing a user interface to request user input, or directly extract the user account that the current user logs in in the first terminal and the terminal information of the first terminal, and the terminal information may be an IP address and/or Terminal identification such as mobile phone number.

Corresponding to the above S201 to S204, when the preset mark generation module includes the digital certificate module, the preset mark generation module in the S205 generates a user mark for marking the user information, including: calling the preset The tag generating module generates digital signature information for marking the user information as a user tag; when the preset tag generating module includes a dynamic token generating module, the tag generating module that is preset in the S205 is generated for the tagging The user tag of the user information includes: calling the preset tag generation module to generate token information corresponding to the current time for marking the user information as a user tag.

The digital certificate module includes a digital signature algorithm and a digital certificate, and the first terminal invokes the preset digital certificate module to generate an operation for marking the digital signature information of the user information, which may be: according to the digital certificate, by the digital signature The algorithm digitally signs the user information to obtain digital signature information for marking the user information.

The dynamic token generating module includes a dynamic token and a token generating algorithm, and the operation of the first terminal invoking the preset dynamic token module to generate token information for marking the user information may be: according to the dynamic token, The user information is processed by the token generation algorithm to obtain token information for marking the user information.

After obtaining the first identity information, the first terminal may encrypt the first identity information, and send the encrypted information to the second terminal by wire or wireless, or the first terminal encodes the first identity information. Information such as a graphic code or a voice signal indicating the first identity information is obtained to facilitate notification to the second terminal.

In the embodiment of the present invention, before the first terminal encrypts the first identity information, the first timestamp may be obtained, the first timestamp is added to the first identity information, and then the first time is added. The first identity information of the stamp is encrypted.

For example, the first terminal notifies the second terminal of the first identity information in a graphic code manner. Specifically, after the step S205, the method further includes: the first terminal adds a timestamp to the first identity information; and the first terminal generates a graphic code according to the first identity information added with a timestamp, So that the second terminal reads the first identity information from the first terminal by scanning a graphic code.

S206: The second terminal reads the first identity information from the first terminal.

S207: The second terminal acquires service information of a user corresponding to the first terminal, where the service information includes order information corresponding to the user.

The service information is service information such as order information obtained after the first terminal user (service originating user) and the second terminal user (service providing user) negotiate. The second terminal searches for the corresponding information of the stored user information and the service information by using the user information as a key, and obtains the service information corresponding to the user information, and if not, the service corresponding to the user information is not found. The information may be further requested by the user corresponding to the second terminal to manually input the service information corresponding to the user of the first terminal, so as to perform S208 described below.

The service information includes order information corresponding to the user information, and the order information may include user account information and a transfer value of the user corresponding to the second terminal, where the transfer value may be a transaction amount.

S208: The second terminal acquires second identity information that is used to identify the identity of the second terminal user.

The second terminal can also obtain the mark generation module of the second terminal according to the same processing manners as S201 to S204, and the second terminal obtains the user mark corresponding to the second terminal user information by using the mark generation module, and the second terminal The user tag and user information of the terminal are used as the second identity information.

S209: The second terminal generates a service processing request, where the service processing request includes the first identity information and the service information, and further includes the second identity information.

The second terminal sends the first identity information, the service information, and the second identity information to the server together with the service processing request.

In addition, if the first identity information generated by the first terminal further includes a timestamp, the second terminal adds the time information corresponding to the timestamp to the service processing request and sends the time information to the server.

S210: After receiving the service processing request, the server authenticates the user identifier and the user information included in the first identity information in the service processing request, and after the authentication is passed, processes the The service processes the service indicated by the service information in the request.

After receiving the service processing request, the server performs authentication verification on the first identity information and the second identity information based on the corresponding bound digital certificate, dynamic token, etc., and after the authentication is passed, initiates the Business process flow of business information.

Optionally, the server obtains the first identity information in the service processing request and a tag generating module that is bound to the user information in the first identity information, and the first identity information is authenticated by the tag generating module.

If the tag generation module is a digital certificate module, the digital certificate module includes a digital certificate and a digital signature algorithm, and the server digitally signs the user information in the first identity information according to the digital certificate to obtain a digital signature. The information is verified by the first identity information if the digital signature information is the same as the user identifier in the first identity information; otherwise, the first identity information is not verified.

If the tag generation module is a dynamic token module, the dynamic token module includes a dynamic token and a token generation algorithm, and the server processes the user information in the first identity information by using the token generation algorithm according to the dynamic token. The token information is obtained. If the generated token information is the same as the user identifier in the first identity information, the first identity information is verified to pass, otherwise, the first identity convenience store verification fails.

If the service processing request further includes time information about the first identity information, the server further determines, according to the preset validity period rule, the validity period of the first identity based on the time information and the current time information, if the validity period is within the validity period. And performing authentication verification on the first identity information; otherwise, sending a service processing error prompt to the second terminal.

The first identity information can be determined as follows, as follows:

The server obtains the current second timestamp, and calculates a time difference between the second timestamp and the first timestamp in the first identity information. If the time difference does not exceed the preset time threshold, determining that the first identity information is valid, otherwise, It is determined that the first identity information is invalid, and the preset time threshold may be 3 minutes, 4 minutes, or 5 minutes, and the like.

The user information in the first identity information includes the user account information of the user corresponding to the first terminal, and the service information in the service processing request includes the user account information and the transfer value of the user corresponding to the second terminal. After the authentication is passed, the process of the service indicated by the service information of the server may be:

The server obtains, according to the user account information of the user corresponding to the first terminal and the user account information corresponding to the second terminal, the first resource value included in the user account of the user corresponding to the first terminal, and the user account of the user corresponding to the second terminal, respectively. The second resource value is obtained by subtracting the transfer value from the first resource value and adding the transfer value to the second resource value. In the transaction scenario, the first resource value and the second resource value are both the amount, and the transfer value is the transaction amount, that is, the transaction amount is transferred from the user account of the user corresponding to the first terminal to the second terminal. In the user's user account.

The embodiment of the present invention generates a user tag by presetting a corresponding tag generating module, such as a digital certificate, a dynamic token, and the like, and completes the interaction and processing between the terminals of the two parties by using the method steps of the embodiment of the present invention. The processing of the corresponding business satisfies the requirements of user automation and intelligence, and does not require additional hardware products such as a secret security card or U shield, which saves the overhead and ensures that the user does not carry or lose the security card or Unable to pay for hardware products such as U-Shield.

FIG. 3 is a schematic flowchart of another service processing method according to an embodiment of the present invention. The method in the embodiment of the present invention may be implemented in various types of user terminals and servers, and may be applied to, for example, payment transaction processing. The method of the embodiment of the present invention includes:

S301: The first terminal acquires user information, and sends the user information to the server.

In a scenario where the user performs the identity authorization verification, such as the near-field payment, the offline payment, and the like, the first terminal detects the service processing operation performed by the user in the human-machine interface for processing the service (such as when the related function button is clicked). That is to start to get user information. The user information acquired by the first terminal includes: a terminal identifier of the first terminal and/or a user account, or some other security-enhanced user information. The first terminal may obtain the user information entered by the user in the human-machine interface, or directly extract the user account that the current user logs in in the first terminal and the terminal information of the first terminal, and the terminal information may be an IP address and/or a mobile phone number. Wait.

S302: After receiving the user information, the server acquires a user identifier for marking the user information, and sends the user identifier to the first terminal.

Specifically, after receiving the user information, the server may digitally sign the user information by using a preset digital signature algorithm to obtain digital signature information for marking the user information, where the digital signature information is Marking the user; or processing the user information by a preset token generation algorithm to obtain a dynamic token for marking the user information, the dynamic token being a user token.

S303: The server combines the user information and the user identifier into the first identity information and stores the first identity information.

Further, the server further acquires a current first timestamp, and binds the first identity information and the first timestamp.

S304: The first terminal receives a user identifier sent by the server, and marks the user and The user information constitutes first identity information.

S305: The second terminal reads the first identity information from the first terminal.

S306: The second terminal acquires service information of a user corresponding to the first terminal, where the service information includes order information corresponding to the user.

The service information is service information such as order information obtained after the first terminal user (service originating user) and the second terminal user (service providing user) negotiate. The second terminal searches for the corresponding information of the stored user information and the service information by using the user information as a key, and obtains service information corresponding to the user information, and if the user information is not found, the corresponding service is obtained. The information may be requested by the user corresponding to the second terminal to manually input the service information of the user corresponding to the first terminal.

The service information includes order information corresponding to the user information, and the order information may include a user account and a transfer value of the user corresponding to the second terminal, where the transfer value may be a transaction amount.

S307: The second terminal generates a service processing request, where the service processing request includes the first identity information and the service information, and sends the service processing request to a server.

S308: After receiving the service processing request, the server authenticates the first identity information in the service processing request, and after the authentication is passed, processes the service information indicated by the service processing request. business.

After receiving the service processing request, the server determines whether the first identity information included in the service processing request is stored locally. If the server stores the first identity information, the first identity information is authenticated. Otherwise, the authentication fails.

Further, before authenticating the first identity information, the server further acquires a current second timestamp and a first timestamp bound to the first identity information, and calculates a second timestamp and the first timestamp. The time difference is determined. If the time difference does not exceed the preset time threshold, the first identity information is determined to be valid. Otherwise, the first identity information is determined to be invalid. The preset time threshold may be 3 minutes, 4 minutes, or 5 minutes.

FIG. 4 is a schematic diagram of an interaction process of a method for processing a service according to an embodiment of the present invention. The embodiment of the present invention processes the order service in order to describe the service processing method, where the payment terminal corresponds to the first The terminal, the payment terminal corresponds to the second terminal described above, and the server is used to complete identity verification and transaction processing for the order. Specifically, the method includes:

S1: The payment terminal sends an authentication request to the server, where the verification request is used to request the server to allocate a digital certificate, so that the payment terminal sets the tag generation module.

S2: The server responds to the verification request and returns an installation package of the digital certificate. After verifying the user information carried in the verification request, the server sends the installation package of the digital certificate to the payment terminal.

S3: The payment terminal installs the installation data packet of the digital certificate, and obtains a mark generation module.

S4: When detecting the service initiation operation, the payment terminal acquires the user information, and generates a digital signature by using the mark generation module.

S5: The payment terminal displays a two-dimensional code for indicating user information and a digital signature.

S6: The payment terminal scans the two-dimensional code to obtain the first identity information.

S7: The payment terminal acquires service information according to the first identity information.

S8: The payment terminal sends a service processing request to the server according to the first identity information and the obtained service information.

S9: The server authenticates the first identity information in the service processing request. The server can also authenticate the user corresponding to the payment terminal.

S10: After the server passes the authentication, the server initiates a service processing process according to the service information in the service processing request.

The embodiment of the present invention generates a user identifier by using a label generation module such as a corresponding digital certificate in the terminal, and performs the interaction and processing between the terminals of the two parties through the method steps of the embodiment of the present invention to complete the processing of the corresponding service. It satisfies the needs of user automation and intelligence, and does not require additional hardware products such as security cards or U-Shields, which saves overhead and ensures that users do not carry or lose hardware products such as security cards or U-Shields. The resulting unpaid problem.

Referring to FIG. 5, it is a schematic flowchart of another service processing method according to an embodiment of the present invention. The method in the embodiment of the present invention may be applied to a service originating terminal, such as a payment terminal. Specifically, the method includes:

S401: The first terminal acquires the first identity information.

The first identity information includes user information of the first terminal and a user identifier for marking the user information, the first terminal acquires user information, and invokes a preset tag generation module to generate a user for marking the user information. mark. The user information acquired by the first terminal includes: a terminal identifier of the first terminal and/or a user account. User identity information including the user information and user tags is generated. Or the first terminal acquires the user information, sends the user information to the server, causes the server to generate a user identifier for marking the user information, and receives the user identifier sent by the server, to obtain the user information and the location. The first identity information of the user tag.

The tag generating module is pre-installed and configured in the first terminal, which may be specifically obtained based on a digital certificate, a dynamic token or some other application capable of uniquely authenticating the corresponding user of the first terminal. In the server that needs to be verified, the user information of the first terminal and the tag generation module matching the tag generation module in the first terminal are also bound, and the server can use the matched tag generation module to The user tag of the first terminal is verified.

S402: Notifying the generated first identity information to the second terminal, so that the second terminal acquires the service information of the user and the service indicated by the request server to process the service information.

The notifying the generated user identity information to the second terminal includes: generating a graphic code according to the user identity information, so that the second terminal reads the user identity information by scanning the graphic code.

After obtaining the first identity information, the first terminal may also encrypt the first identity information, and send the encrypted information to the second terminal by wire or wireless, or the first terminal encodes the first identity information. And obtaining information such as a voice signal indicating the first identity information, so as to be notified to the second terminal.

Referring to FIG. 6 , it is a schematic flowchart of a service processing method according to an embodiment of the present invention. The method in the embodiment of the present invention may be applied to a service providing terminal, such as a payment terminal. Specifically, the method includes :

S501: The second terminal reads the first identity information from the first terminal.

The first identity information includes user information of the first terminal and a user tag used to mark the user information. For the manner of generating the first identity information in the first terminal, refer to the description of the corresponding embodiment of FIG. 1 to FIG. 5 above. The second terminal may correspondingly scan the graphic code, or receive the voice information and parse the data, or receive the encrypted data by wire or wirelessly.

S502: Acquire service information corresponding to the user information in the first identity information, and generate a service processing request that includes the first identity information and the service information.

After obtaining the first identity information, the original first identity information may be retained, and without decrypting or extracting any information therein, the user of the second terminal directly extracts and enters the service information related to the user of the first terminal, for example, The user of the second terminal can extract and enter the data through the displayed human-machine interface. The second terminal can also process the first identity information, extract the user information of the first terminal, and then automatically search for corresponding service information such as an order based on the user information.

S503: Send the service processing request to the server, so that the server authenticates the first identity information, and processes the service indicated by the service information after the authentication is passed.

After the first identity information and the service information are obtained, the second terminal generates a service processing request to request the related server to perform service processing on the service information based on the first identity information. When the service processing request is generated in S502, the second identity information of the second terminal user that is obtained according to the user information, such as the merchant information, corresponding to the second terminal user may be added to the related server.

The service processing apparatus and system of the embodiments of the present invention are described in detail below.

FIG. 7 is a schematic structural diagram of a service processing system according to an embodiment of the present invention. The system according to the embodiment of the present invention includes: a first terminal 1, a server 3, and a second terminal 2, wherein the first terminal The user of 1 includes a user who requests a service, such as a paying party user who purchases a service or an item, etc., and the user of the second terminal 2 provides a user for a service, such as various merchants. specific:

The first terminal 1 is configured to acquire user information, and invoke a preset tag generation module to generate a user tag for marking the user information, to obtain first identity information including the user information and the user tag.

The second terminal 2 is configured to read the first identity information from the first terminal 1 and obtain service information corresponding to the user information in the first identity information, to generate the first identity. Information and business processing requests for the business information;

The server 3 is configured to: after receiving the service processing request, perform authentication on the user identifier and the user information included in the first identity information in the service processing request, and after the authentication is passed, process The service processes the service indicated by the service information in the request.

The tag generation module is pre-installed and configured in the first terminal 1, which may be specifically obtained based on a digital certificate, a dynamic token or some other application capable of uniquely authenticating the corresponding user of the first terminal 1. In the server 3 that needs to be authenticated, the user information of the first terminal 1 and the tag generation module matching the tag generation module in the first terminal 1 are also bound, and the server 3 can pass the matching tag. The generating module verifies the user tag of the first terminal 1.

After obtaining the first identity information, the first terminal 1 may encrypt the first identity information, and send the encrypted information to the second terminal 2 by wire or wirelessly, or the first terminal 1 performs the first identity information. The encoding process obtains information such as a graphic code, a voice signal, and the like indicating the first identity information, so as to be notified to the second terminal 2.

The second terminal 2 can correspondingly read the graphic code by scanning, or receive the voice information and parse the data, or receive the encrypted data by wire or wirelessly. After obtaining the first identity information, the original first identity information may be retained, and without decrypting or extracting any information therein, the user of the second terminal 2 directly extracts and enters the service information related to the user of the first terminal 1, for example, The user of the second terminal 2 can extract and input the order information and the transaction with the user of the first terminal 1 through the displayed human-machine interface; the second terminal 2 can also process the first identity information, and extract the first The user information of the terminal 1 is then automatically searched for corresponding business information such as an order based on the user information.

After the first identity information and the service information are obtained, the second terminal 2 generates a service processing request to request the related server 3 to perform service processing on the service information based on the first identity information. When the service processing request is generated, the second identity information for marking the second terminal 2 user obtained according to the user information corresponding to the second terminal 2 user, such as the merchant information, may be added to the related server 3.

After receiving the service processing request of the service providing user such as a merchant, the server 3 extracts the first identity information and the service information in the service processing request, and then verifies the user identifier in the first identity information.

Specifically, if the user identifier is a digital signature performed by the first terminal 1 by using a digital certificate, the server 3 may verify the first identity information based on an existing manner about digital certificate verification, and the server 3 passes the The digital certificate bound to the user information in the first identity information, corresponding to The user tag performs verification on the integrity of the information. After the verification is passed, the user information such as the terminal information and the user account information is verified. After the verification is passed, the first identity information of the first terminal 1 is authenticated.

And if the user tag is generated by the first terminal 1 by using a dynamic token, the server 3 may be based on a specific token value of the user tag (for example, a number of a specified time period), and then according to the server 3 and the first The dynamic token bound to the corresponding user information in the identity information obtains the corresponding token value, and the user token is verified by comparing the two, and after the verification is passed, the user such as the terminal information and the user account information is verified. After the information is verified, if the verification is passed, the first identity information of the first terminal 1 is authenticated.

If the service processing request further includes the second identity information of the second terminal 2, the server 3 also needs to verify the second identity information, and the specific verification mode may also be verified based on the digital certificate or the dynamic token. .

After verifying the first identity information, or the first identity information and the second identity information, the server 3 initiates a service processing process according to the service information such as the order to complete the processing of the service information, for example, initiating the first identity information according to the order. The process of payment by the user information is performed by the user corresponding to the user information in the first identity information and the related payment server and the bank server, and the transaction payment process is completed.

Specifically, the first terminal 1 is further configured to submit a verification request including user information.

The server 3 is further configured to: after receiving the verification request, acquire a mark generation module for generating a user identifier, and bind the storage of the user information and the obtained mark generation module;

The server 3 is further configured to send the installation data packet for generating the user tag corresponding to the acquired tag generation module to the first terminal 1;

The first terminal 1 is further configured to: after receiving the installation data packet for generating a user tag, preset a tag generation module according to the installation data package for generating a user tag;

The first terminal 1 may submit user account information, terminal information, and other user information that can mark the user, and request the server 3 to allocate a corresponding digital certificate, dynamic token, etc. to the first terminal 1 to obtain a user token for generating. The installation package generates a tag generation module.

The server 3 verifies the user information submitted by the user, and specifically includes the user password verification. After the verification is passed, the installation data packet for generating the user token is obtained for the first terminal 1, and the server 3 executes the installation data packet to obtain the server 3 side. The tag generation module of the digital certificate module, the dynamic token module, and the like, and the installation data packet is sent to the first terminal 1.

After receiving the installation data packet such as the digital certificate and the dynamic token, the first terminal 1 installs the mark generation module based on the installation data package, and completes the preset of the mark generation module.

The second terminal 2 can also apply for a corresponding digital certificate module or a dynamic token module based on the same operation procedure, so that the second identity information of the second terminal 2 can be authenticated and authenticated when needed.

Further optionally, the first terminal 1 is specifically configured to: when the digital certificate module is included, invoke a preset tag generation module to generate digital signature information for marking the user information as a user tag; when the dynamic token is included When the module is generated, the preset tag generation module is called to generate token information corresponding to the current time for marking the user information as a user tag.

Further optionally, the first terminal 1 is further configured to add a timestamp to the first identity information, and generate a graphic code according to the first identity information added with a timestamp, so as to facilitate the second terminal. The terminal 2 reads the first identity information from the first terminal 1 by scanning a graphic code.

Further, the second terminal 2 is specifically configured to read the first identity information from the first terminal 1 and obtain user information in the first identity information, and search for the user. The service information corresponding to the information, the service information includes the order information corresponding to the user information, the second identity information used to identify the identity of the second terminal 2 user, and the service processing request, where the service processing request includes the The first identity information and the service information further include the second identity information.

Referring to FIG. 7, a service processing system according to an embodiment of the present invention includes: a first terminal 1, a second terminal 2, and a server 3, where

The first terminal 1 is configured to acquire first identity information.

The second terminal 2 is configured to read the first identity information from the first terminal 1, obtain service information of user information, and generate a service processing request including the first identity information and the service information. ;

The server 3 is configured to: after receiving the service processing request, perform authentication on the first identity information in the service processing request, and after the authentication is passed, process the service information in the service processing request Business.

Further, the first terminal 1 is further configured to submit, to the server, a verification request including user information;

The server 3 is further configured to: after receiving the verification request, control the first terminal to acquire a user identifier according to the user information.

Optionally, the server 3 is configured to acquire a mark generation module for generating a user identifier, and bind the storage of the user information and the obtained mark generation module;

The server 3 is further configured to send, to the first terminal, an installation data packet for generating a user tag corresponding to the acquired tag generation module;

When the tag generating module is a digital certificate module, calling a preset tag generating module to generate digital signature information for marking the user information as a user tag;

When the tag generation module is a dynamic token generation module, the preset tag generation module is called to generate token information corresponding to the current time for marking the user information as a user tag.

Optionally, the server 3 is configured to process the user information by using a preset processing algorithm to obtain a user identifier, and send the user identifier to the first terminal.

Further, the server 3 is further configured to acquire a first timestamp when the first terminal acquires the first identity information, and a current second timestamp, according to the first timestamp and the When the second timestamp determines that the first identity information is valid, performing the operation of authenticating the first identity information in the service processing request.

Embodiments of the present invention provide a terminal, including a memory, and one or more programs, wherein one or more programs are stored in a memory and configured to execute the one or one by one or more processors The above program contains instructions for performing the following methods:

Obtaining the first identity information;

Referring to FIG. 8, an embodiment of the present invention provides a terminal, including a processor 31 and a transmitter 32:

The processor 31 is configured to read first identity information from the first terminal, acquire service information with the user, and generate a service processing request that includes the first identity information and the service information;

The sender 32 is configured to send the service processing request to the server, so that the server authenticates the first identity information and processes the service indicated by the service information after the authentication is passed.

FIG. 9 is a schematic structural diagram of a service processing apparatus according to an embodiment of the present invention. The service processing apparatus in the embodiment of the present invention may be the foregoing first terminal 1. Specifically, the apparatus includes:

The obtaining module 11 is configured to acquire user information, and invoke a preset tag generating module to generate a user tag for marking the user information;

a generating module 12, configured to generate user identity information including the user information and a user tag;

The notification module 13 is configured to notify the generated terminal identity information to the second terminal;

The tag generation module invoked by the obtaining module 11 is configured to be pre-installed, and may be specifically obtained based on a digital certificate, a dynamic token, or some other application capable of uniquely authenticating the corresponding user of the first terminal. In the server that needs to be verified, the user information of the first terminal and the tag generation module matching the tag generation module in the first terminal are also bound, and the server can use the matched tag generation module to The user tag of the first terminal is verified.

After the generating module 12 obtains the user identity information (that is, the first identity information described above), the user identity information may be encrypted, and the encrypted information is sent to the second terminal by wire or wirelessly, or the user is The identity information is encoded to obtain information such as a voice signal or a graphic code indicating the identity information of the user, so as to be notified to the second terminal.

FIG. 10 is a schematic structural diagram of a user terminal according to an embodiment of the present invention. The user terminal according to the embodiment of the present invention includes: at least one processor 1001, such as a CPU, at least one communication bus 1002, and at least one network interface. 1003, memory 1004. Among them, the communication bus 1002 is used to implement connection communication between these components. The network interface 1003 may optionally include a standard wired interface, a wireless interface (such as WI-FI, a mobile communication interface, etc.). The memory 1004 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. The memory 1004 can also optionally be at least one storage device located away from the processor 1001. As shown in FIG. 10, an operating system and a network communication module are stored in a memory 1004 as a computer storage medium, and a business processing program and other programs are stored.

Specifically, the processor 1001 may be configured to invoke a service processing program stored in the memory 1004, and perform the following steps:

Obtaining user information, and calling a preset tag generation module to generate a user tag for marking the user information;

Generating user identity information including the user information and the user tag;

Notifying the generated user identity information to the second terminal;

FIG. 11 is a schematic structural diagram of another service processing apparatus according to an embodiment of the present invention. The apparatus according to the embodiment of the present invention may be applied to the foregoing second terminal 2. Specifically, the apparatus includes:

The reading module 21 is configured to read the user identity information from the first terminal;

The requesting module 22 is configured to obtain service information corresponding to user information in the user identity information, and generate a service processing request including the user identity information and the service information;

The sending module 23 is configured to send the service processing request to the server.

The reading module 21 can correspondingly read the graphic code by scanning, or receive the voice information and parse the data, or receive the encrypted data by wire or wirelessly.

After the reading module 21 obtains the user identity information (ie, the first identity information described above), the original user identity information may be retained, and no information is decrypted or extracted, and the user of the second terminal directly extracts and enters the information. The service information related to the user of the user terminal, for example, the user of the second terminal can extract and input the order information of the transaction with the user of the first terminal through the displayed human-machine interface; the second terminal can also identify the user identity information. Processing is performed to extract user information of the first terminal therein, and then automatically search for corresponding business information such as an order based on the user information.

After the reading module 21 reads the user identity information and the service information, the second terminal generates a service processing request to request the related server to perform service processing on the service information based on the first identity information. . When the requesting module 22 generates the service processing request, the requesting module 22 may further add the second identity information of the second terminal user that is obtained according to the user information, such as the merchant information, corresponding to the second terminal user, to the related server.

FIG. 12 is a schematic structural diagram of a user terminal according to an embodiment of the present invention. The user terminal according to the embodiment of the present invention includes: at least one processor 2001, such as a CPU, at least one communication bus 2002, and at least one network interface. 2003, memory 2004. Among them, the communication bus 2002 is used to implement connection communication between these components. The network interface 2003 may optionally include a standard wired interface, a wireless interface (such as WI-FI, a mobile communication interface, etc.). The memory 2004 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. The memory 2004 can optionally also be at least one storage device located remotely from the processor 2001. As shown in FIG. 8, a memory 2004 as a computer storage medium stores an operating system, a network communication module, and stores a business processing program and other programs.

Specifically, the processor 2001 can be used to invoke a service processing program stored in the memory 2004, and perform the following steps:

Reading the first identity information from the first terminal;

Obtaining service information corresponding to the user information in the first identity information, and generating a service processing request including the first identity information and the service information;

The service processing request is sent to the server.

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto, and thus equivalent changes made in the claims of the present invention are still within the scope of the present invention.

Claims

A service processing method, comprising:

The first terminal acquires the first identity information;

The second terminal reads the first identity information from the first terminal, acquires service information of the user, and generates a service processing request that includes the first identity information and the service information.

After receiving the service processing request, the server authenticates the first identity information in the service processing request, and after the authentication is passed, processes the service indicated by the service information in the service processing request.
The method of claim 1, wherein the first identity information comprises: user information and a user identifier, and before the first terminal obtains the first identity information, the method further includes:

The first terminal submits a verification request including user information to the server;

After receiving the verification request, the server controls the first terminal to acquire a user identifier according to the user information.
The method of claim 2, wherein the controlling the first terminal to acquire a user tag according to the user information comprises:

The server acquires a tag generation module for generating a user tag, and binds and stores the user information and the obtained tag generation module; and sends an installation data packet for generating the user tag corresponding to the acquired tag generation module to The first terminal;

After receiving the installation data packet for generating the user identifier, the first terminal presets the label generation module according to the installation data packet used to generate the user identifier;

When the tag generating module is a digital certificate module, calling a preset tag generating module to generate digital signature information for marking the user information as a user tag;

When the tag generation module is a dynamic token generation module, the preset tag generation module is called to generate token information corresponding to the current time for marking the user information as a user tag.
The method of claim 2, wherein said controlling said location based on said user information The first terminal obtains the user identifier, including:

The server processes the user information by using a preset processing algorithm to obtain a user identifier, and sends the user identifier to the first terminal.
The method according to claim 1, wherein before the authenticating the first identity information in the service processing request, the method further includes:

Obtaining a first timestamp when the first terminal acquires the first identity information, and a current second timestamp, and determining the first identity according to the first timestamp and the second timestamp. When the information is valid, performing the operation of authenticating the first identity information in the service processing request.
A service processing method, comprising:

The first terminal acquires the first identity information;

Notifying the second terminal to the second terminal, so that the second terminal acquires service information of the user and requests the server to process the service indicated by the service information;

The notifying the first identity information to the second terminal includes: generating a graphic code according to the first identity information, so that the second terminal reads the first identity information by scanning the graphic code.
A service processing method, comprising:

The second terminal reads the first identity information from the first terminal;

Obtaining service information of the user, and generating a service processing request including the first identity information and the service information;

Sending the service processing request to the server, so that the server authenticates the first identity information and processes the service indicated by the service information after the authentication is passed.
A terminal, comprising: a memory, and one or more programs, wherein one or more programs are stored in the memory and configured to execute the one or more programs by one or more processors Instructions for doing the following:

Obtaining the first identity information;

Notifying the second terminal to the second terminal, so that the second terminal acquires service information of the user and requests the server to process the service indicated by the service information;

The notifying the first identity information to the second terminal includes: generating a graphic code according to the first identity information, so that the second terminal reads the first identity information by scanning a graphic code.
A terminal characterized by comprising a processor and a transmitter:

The processor is configured to read first identity information from the first terminal, obtain service information with the user, and generate a service processing request that includes the first identity information and the service information;

The sender is configured to send the service processing request to the server, so that the server authenticates the first identity information and processes the service indicated by the service information after the authentication is passed.
A computer storage medium, characterized in that the computer storage medium stores a program, the program comprising, when executed, the steps of the method of claim 6.
A computer storage medium, characterized in that the computer storage medium stores a program, which, when executed, includes the steps of the method of claim 7.
A service processing system, comprising: a first terminal, a server, and a second terminal, where

The first terminal is configured to acquire first identity information.

The second terminal is configured to read the first identity information from the first terminal, obtain service information of user information, and generate a service processing request that includes the first identity information and the service information;

The server is configured to: after receiving the service processing request, perform authentication on the first identity information in the service processing request, and after the authentication is passed, process the service information in the service processing request business.
The system of claim 12 wherein:

The first terminal is further configured to submit, to the server, a verification request including user information;

The server is further configured to: after receiving the verification request, control, by the user information, the first terminal to acquire a user identifier.
The system of claim 13 wherein:

The server is configured to acquire a mark generation module for generating a user mark, and bind the storage of the user information and the obtained mark generation module;

The server is further configured to send, to the first terminal, an installation data packet for generating a user tag corresponding to the acquired tag generation module;

The first terminal is further configured to: after receiving the installation data packet for generating a user tag, preset a tag generation module according to the installation data package for generating a user tag;

When the tag generating module is a digital certificate module, calling a preset tag generating module to generate digital signature information for marking the user information as a user tag;

When the tag generation module is a dynamic token generation module, the preset tag generation module is called to generate token information corresponding to the current time for marking the user information as a user tag.
The system according to claim 13, wherein the server is configured to process the user information by a preset processing algorithm to obtain a user tag, and send the user tag to the first terminal.
The system of claim 12 wherein:

The server is further configured to acquire a first timestamp when the first terminal acquires the first identity information, and a current second timestamp, according to the first timestamp and the second timestamp. When it is determined that the first identity information is valid, performing the operation of authenticating the first identity information in the service processing request.