WO2015135384A1 - O2o secure payment method and system, and pos terminal - Google Patents

Abstract

Disclosed is a secure payment method. The secure payment method comprises the steps of: acquiring, by a mobile terminal, a dynamic transaction code sent by a payment background; sending to a payment terminal, by the mobile terminal, a dynamic personal voucher code containing the dynamic transaction code; receiving, by the payment terminal, the input transaction amount; sending, by the payment terminal, the dynamic personal voucher code and the transaction amount to the payment background; after the dynamic personal voucher code is verified, sending, by the payment background, verification information to the payment terminal; and after an input account password is received, sending, by the payment terminal, the account password to the payment background to conduct payment. Also disclosed are a secure payment system and a POS terminal. The account password for payment is input from the payment terminal, thereby effectively avoiding the potential security risks caused by inputting a password from the mobile terminal, so that the payment security is improved.

Description

O2O secure payment method, system and POS terminal

Technical field

The present invention relates to the field of electronic payment, and in particular to a O2O Secure payment method, system and kind POS terminal.

Background technique

With the popularization of domestic intelligent terminals and the rapid development of mobile Internet, the growth rate of the use rate of online payment has increased greatly, and has become a bright spot, especially in the areas of transportation and communication, education and culture, food, and residence. As a popular term for mobile payments, O2O Gradually familiar with people, O2O which is Online To Offline It refers to the combination of offline business opportunities and the Internet, making the Internet a front-end for offline transactions. from 2010 Entering China at the end of the year has aroused widespread discussion in the industry, and its broad prospects are optimistic for all parties. O2O The industry is also widely regarded as the next market of billions of dollars. WeChat payment and Alipay’s face-to-face payment can be regarded as O2O A typical application, both of which use the user's mobile phone as a carrier, bind the bank card number through the mobile phone, scan the QR code to obtain the product information, and input the payment password on the mobile phone to realize the fast completion of the electronic transaction. Convenient for people's daily lives. However, there are serious hidden dangers in this payment method:

The mobile phone is an application carrier that is often connected to the public network. Mobile viruses, mobile phone Trojans and other malware are not uncommon, and the password entered on the mobile phone has become the object of such malware theft.

For sonic payment, the attacker can copy the sound waves at the transaction site at the transaction site, and forge the personal voucher code to complete the transaction without authorization by the user if the user is not present at the scene.

In the existing O2O In the payment method, after the transaction is completed, the payer does not get the corresponding paper certificate, and if the subsequent transaction dispute is not conducive to the payer to protect his rights and interests.

If the mobile phone cannot communicate with the payment background, the normal transaction cannot be completed.

Summary of the invention

In order to solve the above technical problem, the present invention provides a payment that is more secure. O2O Secure payment method.

One kind O2O The secure payment method comprises the steps of: the mobile terminal acquires a dynamic transaction code sent by the payment background; the mobile terminal sends the dynamic personal voucher code containing the dynamic transaction code to the payment terminal; the payment terminal receives the input transaction amount; and the payment terminal sends the dynamic personal voucher The code and the transaction amount are sent to the payment background; after the payment background verifies the dynamic personal voucher code, the verification information is sent to the payment terminal; after receiving the input account password, the payment terminal sends the transaction message packet including the account password ciphertext to the payment background. , to make a payment.

The “mobile terminal acquiring the dynamic transaction code sent by the payment background” specifically includes: the mobile terminal login payment client communicates with the payment background, and obtains the temporary payment account information generated by the payment background according to the payment account; the mobile terminal uses the payment client to The payment method is sent to the payment background, and the payment background generates a corresponding temporary transaction number and sends it to the mobile terminal. The mobile terminal sends the dynamic personal voucher code containing the dynamic transaction code to the payment terminal. Specifically, the mobile terminal will: The temporary payment account information and the temporary transaction order number group are packaged into a dynamic personal voucher code, and the dynamic personal voucher code is sent to the payment terminal; after the “payment background verification dynamic personal voucher code, the verification information is sent to the payment terminal” Specifically, the method includes: the payment background verification, the temporary payment account information, and the temporary transaction order number are consistent with the temporary payment account information and the temporary transaction number generated by the payment background, and the verification information is sent to the payment terminal after the verification is passed.

The sending, by the mobile terminal, the dynamic personal voucher code including the dynamic transaction code to the payment terminal, further includes: the mobile terminal sending the transaction configuration information to the payment terminal, wherein the transaction configuration information identifies whether the data sent by the mobile terminal is In the ciphertext, if the ciphertext is marked, the payment terminal cannot decrypt the original data of the key data, and the payment terminal can only upload the dynamic personal voucher code ciphertext and the transaction configuration information to the payment background processing.

The “mobile terminal acquires the dynamic transaction code sent by the payment background” further includes: the mobile terminal logs in to the payment client and the payment background communication, and synchronizes the transaction serial number with the payment background; the “mobile terminal will include the dynamic transaction code” The sending of the dynamic personal voucher code to the payment terminal further includes: when the mobile terminal is unable to obtain a temporary transaction number with the payment background connection, the mobile terminal accumulates the transaction serial number, and the mobile terminal adds the temporary payment account information and accumulates The subsequent transaction serial number group is packaged into a dynamic personal voucher code, and the dynamic personal voucher code is sent to the payment terminal; the “payment of the background verification dynamic personal voucher code, the verification information is sent to the payment terminal” specifically includes: payment background verification Whether the temporary payment account information is consistent with the temporary payment account generated by the payment background, and after the verification is passed, verifying whether the received transaction serial number is greater than the transaction serial number stored in the payment background, when the transaction serial number is verified After that, the verification information is sent to the payment terminal.

The mobile terminal sends the payment method to the payment background through the payment client, and the corresponding temporary transaction number is generated in the payment background, and is sent to the mobile terminal. The method further includes: the mobile terminal inputs the payment combination input by the user through the payment client. The method is sent to the payment background; after receiving the payment combination, the payment background generates a corresponding temporary transaction number, and sends the temporary transaction number to the mobile terminal, wherein the payment combination method includes a primary account payment, a quick payment, a coupon payment, and a point. One or more of payment, prepaid card payment; the step of “sending verification information to the payment terminal” specifically includes: the payment background determines an actual transaction payment combination according to the transaction amount and an amount to be paid for each payment method; The payment background sends the determined transaction payment combination and the amount that each payment method needs to pay to the payment terminal; the step “after the payment terminal receives the input account password, the account password is sent to the payment background for payment” includes: The payment terminal displays the received payment combination to The amount of payment required for each payment method; the user selects the actual transaction amount for each payment method, and enters the account password; the payment terminal sends the actual transaction amount and account password of each payment method to the payment background; the payment background receives The transaction amount and account password are verified, and the payment is made when the verification is passed.

The method further includes the steps of: the payment background sends the transaction result prompt information to the payment terminal, the transaction result prompt information includes the buyer partial account real information; and the payment terminal prints the paper transaction certificate.

Wherein, the method further includes: the payment terminal is provided with a payment PIN Before the step "the payment terminal sends the dynamic personal voucher code and the transaction amount to the payment background", the payment terminal further includes: the payment terminal acquires the input of the user on the payment terminal. PIN And will PIN Sent to the payment backend; the payment backend received PIN Verify that the next steps are performed when the verification passes.

Wherein the mobile terminal communicates via sound waves, NFC Or Bluetooth sends a dynamic personal voucher code to the payment terminal.

In order to solve the above technical problem, the present invention also provides a O2O The secure payment system includes a mobile terminal, a payment terminal, and a payment backend. The mobile terminal includes a dynamic transaction code acquisition module and a first transceiver module. The payment terminal includes a first input module, a second input module, and a second transceiver module. The payment backend includes a verification module, a third transceiver module, and a payment module; the dynamic transaction code acquisition module is configured to obtain a dynamic transaction code from a payment background; and the first transceiver module is configured to: use a dynamic individual that includes a dynamic transaction code The voucher code is sent to the payment terminal, wherein the first transceiver module is an acoustic wave communication module, NFC a module, a Bluetooth module; the first input module is configured to receive an input transaction amount; the second transceiver module is configured to receive a dynamic personal voucher code sent by the mobile terminal, and send the dynamic personal voucher code and the transaction amount to the payment a background, and configured to send an account password to the payment background; the verification module is configured to verify the dynamic personal voucher code and an account password; the third transceiver module is configured to send the verification information to the payment terminal; The input module is configured to receive an account password input by the user; the payment module is configured to perform payment after the verification module passes the verification.

The invention also provides a POS The terminal includes a printing module and the first input module, the second input module, and the second transceiver module, and the printing module is configured to print a paper transaction voucher.

Wherein, the second transceiver module is an acoustic wave communication module, NFC Module, Bluetooth module or other non-physical contact communication module.

The method further includes: a display module, configured to display verification information sent by the payment background.

The invention has the beneficial effects that the account password must be input by the mobile terminal in the payment process in the existing online payment. The mobile terminal automatically transmits the dynamic personal voucher code containing the dynamic transaction code to the payment terminal, and the user is The mobile terminal completes the input of the account password; after receiving the input account password, the payment terminal sends the ciphertext account password to the payment background to perform payment, thereby avoiding the mobile terminal obtaining the account information and the account password at the same time, and the account information and The account password is attacked and stolen in the mobile terminal, which greatly improves the security of online payment.

DRAWINGS

Figure 1 Is an embodiment of the present invention O2O Flow chart of a secure payment method;

Figure 2 Is an embodiment of the present invention O2O Schematic diagram of the structure of a secure payment system;

Figure 3 Is an embodiment of the present invention POS Schematic diagram of the structure of the terminal.

The main label description:

Mobile terminal  2- Payment terminal  3- Payment backstage;  twenty one- First input module;  twenty two- a second input module;  twenty three- a second transceiver module;  twenty four- Print module.

detailed description

The detailed description of the technical contents, structural features, and the objects and effects of the present invention will be described in detail below with reference to the accompanying drawings.

The invention pays by inputting the account password of the online payment on the payment terminal, thereby avoiding the account password leakage caused by the loss of the mobile terminal or the attack by the Trojan horse, thereby greatly improving the account password. O2O The security of the payment.

Embodiment 1

Please refer to the picture 1 , a method of the present embodiment O2O A flowchart of a secure payment method, the method comprising the steps of:

And the mobile terminal acquires a dynamic transaction code sent by the payment background;

The mobile terminal sends the dynamic personal voucher code including the dynamic transaction code to the payment terminal;

And the payment terminal receives the input transaction amount;

The payment terminal sends the dynamic personal voucher code and the transaction amount to the payment background;

After the background verification dynamic personal voucher code is sent, the verification information is sent to the payment terminal;

After receiving the input account password, the payment terminal sends the transaction packet containing the account password ciphertext to the payment background to perform payment.

Wherein, the payment terminal is in accordance with the transaction packet containing the account password ciphertext. 8583 The package format can also be other packaging formats.

The embodiment relates to a mobile terminal, a payment terminal, and a payment background (the payment background is a system server of a specific bank, or a server of a third-party payment system), wherein the mobile terminal is installed with a payment client and a public key certificate. CERT1 (public key certificate CERT1 Corresponding private key PR1 Saved in the payment background), the user communicates with the payment background by logging in to the payment terminal on the mobile terminal, so that the payment account is bound to the user's mobile terminal. After the mobile terminal logs in to the payment client, the payment background generates a corresponding dynamic transaction code according to the payment account bound by the mobile terminal, and the dynamic transaction code includes temporary payment account information (each time the mobile terminal logs in to the payment terminal, the corresponding generation of the payment background is different. The dynamic transaction code, that is, the temporary payment account information obtained by each mobile terminal is different). When the payment needs to be made, the mobile terminal sends the payment method to the payment background through the payment client, and the corresponding temporary transaction number is generated in the payment background.

The mobile terminal groups the obtained temporary payment account information and the temporary transaction order number into a dynamic personal voucher code, and sends the dynamic personal voucher code to the payment terminal. The payment terminal is disposed at the merchant, and the payment terminal acquires the input transaction amount (ie, the payment terminal acquires the total amount of the purchased product input by the merchant operator), and the payment terminal sends the dynamic personal voucher code and the transaction amount to the payment. Backstage.

After receiving the dynamic personal voucher code through the payment terminal, the payment background verifies whether the temporary payment account information and the temporary transaction order number are consistent with the temporary payment account information and the temporary transaction number generated by the payment background, and the verification is passed. After that, the payment background retrieves the corresponding real account information in the background according to the temporary payment account information, and verifies whether the account information is correct (such as verifying whether the account exists, whether the status of the account is available, whether the account balance is sufficient, etc.) After the verification is passed, the payment background verifies whether the account password uploaded from the payment terminal corresponds to the real account corresponding to the temporary payment account information of the dynamic personal certificate code, and the payment is performed after the account password verification is passed.

Different from the existing online payment, the account password must be input by the mobile terminal. In the present invention, the mobile terminal securely transmits the dynamic personal voucher code containing the dynamic transaction code to the payment terminal, and the user completes the account password on the mobile terminal. After receiving the input account password, the payment terminal sends the ciphertext account password to the payment background to perform payment, thereby avoiding that the mobile terminal can simultaneously obtain the account information and the account password, thereby effectively preventing the account information and the account password from being The possibility of attack stealing greatly improves the security of online payment. Further, in the present invention, the payment background generates temporary payment account information according to the account bound by the mobile terminal, and both the mobile terminal and the payment terminal use the temporary payment account for transmission during the payment process, so even if the data during the transmission is intercepted, Still, the account information cannot be actually paid (the real payment account information is known only to the payment client in the payment background and the mobile terminal, and does not appear in the transmission process), thereby further improving payment security.

The sending, by the mobile terminal, the dynamic personal voucher code including the dynamic transaction code to the payment terminal, further includes: the mobile terminal sending the transaction configuration information to the payment terminal, wherein the transaction configuration information identifies whether the data sent by the mobile terminal is In the ciphertext, if the ciphertext is marked, the payment terminal cannot decrypt the original data of the key data, and the payment terminal can only upload the dynamic personal voucher code ciphertext and the transaction configuration information to the payment background processing. Encryption can better guarantee the security of payment data transmission. For simple data, you don't have to encrypt it. If you want to encrypt, the communication data sent by the mobile terminal needs to pass the public key certificate. CERT1 After encryption, transfer. Among them, the encryption algorithm is an asymmetric algorithm and can be used. RSA , ECC , national secret algorithm, etc. This encrypted data (such as a dynamic personal voucher code), the payment terminal cannot be decrypted because it does not have a corresponding private key. PR1 Therefore, the payment terminal can only upload the dynamic personal voucher code ciphertext to the payment background processing as it is, thereby improving the security of the dynamic personal voucher code in the transmission process.

In order to facilitate data transmission between the mobile terminal and the payment terminal, the mobile terminal can communicate through sound waves. NFC Bluetooth or non-physical contact communication method sends a dynamic personal voucher code to the payment terminal. The payment terminal may be a merchant POS The terminal may also be another electronic payment device having a password input function.

Embodiment 2

In the above embodiment, the payment is made by the amount in the cash account in the account, but in the actual use process, there are other payment methods such as coupon payment, point payment, etc., in order to improve the convenience of the payment method in the above embodiment, In the present embodiment, payment can also be made by a payment combination.

The mobile terminal sends the payment combination mode input by the user to the payment background through the payment client;

After receiving the payment combination, the payment background generates a corresponding temporary transaction number, and sends the temporary transaction number to the mobile terminal, wherein the payment combination includes a primary account payment, a quick payment, a coupon payment, a point payment, and a prepaid card payment. One or more of the payment methods, and the payment method may also be other possible payment methods;

The step of “sending the verification information to the payment terminal” specifically includes:

The payment background determines the actual transaction payment combination according to the transaction amount and the amount that each payment method needs to pay;

The payment back-end determines the transaction payment combination and the amount that each payment method needs to pay to the payment terminal;

The step “after the payment terminal receives the input account password, the account password is sent to the payment background to perform payment” includes:

The payment terminal displays the received payment combination and the amount that each payment method needs to pay;

The user selects the actual transaction amount for each payment method and enters the account password;

The payment terminal sends the actual transaction amount and the account password of each payment method to the payment background;

The payment background verifies the received transaction amount and account password, and pays when the verification is passed.

The user selects the actual transaction amount for each payment method. For the payment method that requires input of the account password (such as when paying with the cash account in the payment account), the user enters the account password on the payment terminal (for the case where the account password is not required, the user does not need to Enter the account password);

The payment terminal sends the actual transaction amount and the account password of each payment method to the payment background;

The payment background verifies the received transaction amount and account password, and pays when the verification is passed.

In this embodiment, if the account password is not required to be confirmed in the payment combination mode selected by the user, the payment may be performed without inputting the account password (if the selected payment combination does not include the cash account or the cash account is zero. ). The user can select an appropriate payment combination method according to the payment method bound on the mobile terminal, and determine an actual payment combination manner according to the transaction amount on the payment terminal, such as coupon payment, point payment, coupon and cash payment combination or coupon, and points. , cash payment combination. In this embodiment, the online payment combination of multiple payment methods can be realized, which greatly improves the convenience of payment.

Further, in order to facilitate the user and the merchant to know the result of the transaction in time, the embodiment may further include: the payment background sends the transaction result prompt information to the payment terminal or the mobile terminal.

Further, in this embodiment, the voucher for each transaction may be printed by the payment terminal, and the transaction result prompt information includes the real information of the buyer part account, thereby avoiding the dispute caused by the online payment without the physical transaction voucher.

Embodiment 3

In the first embodiment, the method further includes:

The mobile terminal logs in to the payment client to communicate with the payment background, and synchronizes the transaction serial number with the payment background;

The “mobile terminal transmitting the dynamic personal voucher code including the dynamic transaction code to the payment terminal” further includes:

When the mobile terminal is unable to obtain a temporary transaction number with the payment background connection, the mobile terminal accumulates the transaction serial number, and the mobile terminal packages the temporary payment account information and the accumulated transaction serial number into a dynamic personal voucher code. And sending the dynamic personal voucher code to the payment terminal;

After the “payment of the background verification dynamic personal voucher code, the verification information is sent to the payment terminal” specifically includes:

The payment background verifies whether the temporary payment account information is consistent with the temporary payment account generated by the payment background, and when the verification is passed, verifying whether the received transaction serial number is greater than the transaction serial number stored in the payment background, when the transaction sequence After the verification is passed, the verification information is sent to the payment terminal.

In practical applications, online payment through a mobile terminal must rely on the network of the mobile terminal, such as 3G The internet, WIFI Etc. However, in many merchant mobile terminals, the network signal is not good or there is no signal coverage. In order to solve the payment without network coverage, the present embodiment performs payment by temporarily paying an account. When the mobile terminal logs into the payment background, the temporary payment account is obtained from the payment background. When the payment needs to be made, the mobile terminal determines whether it can connect to the payment background. If the connection is available, the temporary transaction number is obtained from the payment background, and the temporary transaction order is obtained. And the temporary transaction account information group is packaged into a dynamic personal voucher code and sent to the payment terminal. Otherwise, the mobile terminal packages the temporary payment account information and the accumulated transaction serial number into a dynamic personal voucher code, and the dynamic personal voucher code The payment is sent to the payment terminal, and the payment background determines whether the payment is made by verifying the correctness of the temporary payment account information and the transaction serial number. Therefore, the payment can be effectively prevented even when the mobile terminal has no network signal, and the reset attack can be effectively prevented (only when the transaction sequence number received by the payment background is larger than the serial number stored in the payment background, the payment can be prevented, thereby preventing Reset the attack).

Embodiment 4

In the first embodiment, the payment terminal is further provided with a payment. PIN ;

Wherein the payment of the payment terminal PIN It is set by the user in the mobile terminal through the payment client and the payment background;

Before the step "the payment terminal sends the dynamic personal voucher code and the transaction amount to the payment background", the method further includes:

The payment terminal obtains the input of the user on the payment terminal PIN And will PIN Encrypted and sent to the payment background;

Payment backend received PIN Verify that the next steps are performed when the verification passes.

In this embodiment, the PIN Can be an online payment account transaction PIN The password can also be consistent with the bank card account password, and the payment background is only received correctly. PIN The account password verification will be carried out under the premise, thus achieving double payment security guarantee and greatly improving payment security.

Embodiment 5

One kind O2O Secure payment system, including mobile terminals 1 Payment terminal 2 And payment background 3 The mobile terminal 1 The dynamic transaction code acquisition module and the first transceiver module are included;

Payment terminal 2 The first input module, the second input module, and the second transceiver module are included;

The payment background 3 The verification module, the third transceiver module and the payment module are included;

The dynamic transaction code acquisition module is configured to obtain a dynamic transaction code from a payment background;

The first transceiver module is configured to send a dynamic personal voucher code including a dynamic transaction code to the payment terminal, where the first transceiver module is an acoustic communication module, NFC Module, Bluetooth module or other non-physical contact communication module;

The first input module is configured to receive an input transaction amount;

The second transceiver module is configured to receive a dynamic personal voucher code sent by the mobile terminal, configured to send the dynamic personal voucher code and the transaction amount to the payment background, and send the account password to the payment background;

The verification module is configured to verify the dynamic personal voucher code and an account password;

The third transceiver module is configured to send the verification information to the payment terminal;

The second input module is configured to receive an account password input by a user;

The payment module is configured to perform payment after the verification module passes the verification.

this O2O The mobile terminal of the secure payment system sends a dynamic personal voucher code containing the dynamic transaction code to the payment terminal; the user inputs the account password on the payment terminal, and the payment terminal sends the input account password to the payment background for payment, thereby avoiding In the mobile terminal, the account password and the account password are attacked and stolen, which greatly improves the security of online payment.

The invention also provides a POS Terminal, including print module twenty four And the first input module twenty one Second input module twenty two Second transceiver module twenty three ;

The printing module twenty four Used to print paper transaction vouchers.

Said POS The terminal receives the dynamic personal voucher code sent by the mobile terminal through the second transceiver module, and sends the dynamic personal voucher code, the input transaction amount and the account password to the payment background through the second transceiver module, and the payment background dynamically according to the received transaction amount. The dynamic transaction code in the voucher code is paid, so the account password for online payment can be POS Terminal input has greatly expanded POS The scope of use of the terminal, meanwhile, also increases the security of online payment.

Further, in order to improve POS The data transmission security and convenience between the terminal and the mobile terminal, the second transceiver module is an acoustic wave communication module, NFC Near field wireless communication such as modules or Bluetooth modules.

Further, in order to facilitate displaying information of the transaction process, prompting the user's operation, and displaying the transaction result, POS The terminal further includes: a display module, configured to display the verification information sent by the payment background.

Example

The user downloads the payment client through the mobile phone (mobile terminal) and binds the corresponding bank card (the bank card includes a cash account, a coupon account, a point account, etc., that is, a payment method);

The user logs in to the mobile payment terminal and the payment background communication, and the payment background generates the temporary payment account information according to the bundled bank card and sends the information to the mobile phone.

When the user needs to purchase the product, the user selects the payment combination method and sends it to the payment background through the mobile phone, and the payment background determines whether the payment combination is successful, and generates a corresponding temporary transaction number to send to the mobile phone;

The operator of the merchant first inputs the product information (including the amount of the commodity) purchased by the user to the merchant. POS a terminal (ie, the payment terminal); wherein the operator first inputs the product information purchased by the user to the merchant POS There is no strict relationship between the terminal and the mobile phone to obtain the temporary transaction number.

At checkout, the user sends a dynamic personal voucher code containing the temporary transaction number and temporary payment account information to POS Terminal (when the mobile terminal has no network signal, choose to use the transaction serial number instead of the temporary transaction number), POS The terminal sends the dynamic personal voucher code and the transaction amount to the payment background;

The payment background verifies the dynamic personal voucher code and the transaction amount, and determines the combination. When the verification is passed, the verification information is sent to POS terminal;

The terminal displays the payment combination, and obtains the payment combination method selected by the user, and the amount of various payment (for example, the selected payment combination method is: coupon payment) 100 yuan + Point redemption payment 50 yuan + cash payment 10 Yuan), the user is POS Enter the account password on the terminal, and send the obtained payment combination and the amount of each payment method and the account password to the payment background;

The account password entered in the background verification is verified. After the verification is passed, the payment is made according to the final payment combination and the amount of each payment method, and the transaction result is sent to the mobile phone and POS terminal;

The terminal prints the received transaction results and transaction credentials.

In summary, the account password must be input by the mobile terminal in the payment process in the existing online payment. The present invention securely transmits the dynamic personal voucher code containing the dynamic transaction code to the payment terminal by the mobile terminal, and the user is at the payment terminal. The input of the account password is completed; after receiving the input account password, the payment terminal sends the ciphertext account password to the payment background to perform payment, thereby avoiding that the mobile terminal can simultaneously obtain the account information and the account password, as well as the account information and the account password. The possibility of being attacked and stolen at the mobile terminal greatly improves the security of online payment. Further, in the present invention, the payment background generates temporary payment account information according to the account bound by the mobile terminal, and both the mobile terminal and the payment terminal use the temporary payment account for transmission during the payment process, so even if the data during the transmission is intercepted, Still, the account information cannot be actually paid (the real payment account information is known only to the payment client in the payment background and the mobile terminal, and does not appear in the transmission process), thereby further improving payment security. In addition, by requiring the user to enter a password on the payment terminal, it is guaranteed that only a user can participate in completing a transaction, preventing a user from unauthorized transactions. At the same time, when the user's mobile phone cannot communicate with the payment background, the payment terminal can still complete the transaction normally, and the transaction can be improved. O2O The overall feasibility of the payment plan.

The above is only the embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformation of the present invention and the contents of the drawings may be directly or indirectly applied to other related technologies. The fields are all included in the scope of patent protection of the present invention.

Claims (12)

1. An O2O secure payment method, comprising the steps of:

   The mobile terminal acquires a dynamic transaction code sent by the payment background;

   The mobile terminal sends a dynamic personal voucher code including a dynamic transaction code to the payment terminal;

   The payment terminal receives the input transaction amount;

   The payment terminal sends the dynamic personal voucher code and the transaction amount to the payment background;

   After the background verification dynamic personal voucher code is sent, the verification information is sent to the payment terminal;

   After receiving the input account password, the payment terminal sends a transaction packet containing the account password ciphertext to the payment background to perform payment.
2. The O2O secure payment method according to claim 1, wherein the "mobile terminal acquires a dynamic transaction code sent by the payment background" specifically includes:

   The mobile terminal logs in to the payment client to communicate with the payment background, and obtains the temporary payment account information generated by the payment background according to the payment account;

   The mobile terminal sends the payment method to the payment background through the payment client, and generates a corresponding temporary transaction number in the payment background, and sends the corresponding temporary transaction number to the mobile terminal;

   The “mobile terminal sends a dynamic personal voucher code including a dynamic transaction code to the payment terminal” specifically includes:

   The mobile terminal groups the temporary payment account information and the temporary transaction order number into a dynamic personal voucher code, and sends the dynamic personal voucher code to the payment terminal;

   After the “payment of the background verification dynamic personal voucher code, the verification information is sent to the payment terminal” specifically includes:

   The payment background verifies whether the temporary payment account information and the temporary transaction order number are consistent with the temporary payment account information and the temporary transaction number generated by the payment background, and the verification information is sent to the payment terminal after the verification is passed.
3. The O2O secure payment method according to claim 2, wherein the "mobile terminal transmitting the dynamic personal voucher code including the dynamic transaction code to the payment terminal" further includes:

   The mobile terminal sends the transaction configuration information to the payment terminal, wherein the transaction configuration information identifies whether the data sent by the mobile terminal is a ciphertext. If the ciphertext is marked, the payment terminal cannot decrypt the original data of the key data, and the payment terminal only The dynamic personal voucher code ciphertext and transaction configuration information can be uploaded to the payment background processing as it is.
4. The O2O secure payment method according to claim 2, wherein the "mobile terminal acquires a dynamic transaction code sent by the payment background" further includes:

   The mobile terminal logs in to the payment client to communicate with the payment background, and synchronizes the transaction serial number with the payment background;

   The “mobile terminal transmitting the dynamic personal voucher code including the dynamic transaction code to the payment terminal” further includes:

   When the mobile terminal is unable to obtain a temporary transaction number with the payment background connection, the mobile terminal accumulates the transaction serial number, and the mobile terminal packages the temporary payment account information and the accumulated transaction serial number into a dynamic personal voucher code. And sending the dynamic personal voucher code to the payment terminal;

   After the “payment of the background verification dynamic personal voucher code, the verification information is sent to the payment terminal” specifically includes:

   The payment background verifies whether the temporary payment account information is consistent with the temporary payment account generated by the payment background, and when the verification is passed, verifying whether the received transaction serial number is greater than the transaction serial number stored in the payment background, when the transaction sequence After the verification is passed, the verification information is sent to the payment terminal.
5. The O2O secure payment method according to claim 2, wherein the mobile terminal sends the payment method to the payment background through the payment client, and generates a corresponding temporary transaction number in the payment background, and sends the corresponding temporary transaction number to the mobile terminal. include:

   The mobile terminal sends the payment combination mode input by the user to the payment background through the payment client;

   After receiving the payment combination, the payment background generates a corresponding temporary transaction number, and sends the temporary transaction number to the mobile terminal, wherein the payment combination includes a primary account payment, a quick payment, a coupon payment, a point payment, and a prepaid card payment. One or more of

   The step of “sending the verification information to the payment terminal” specifically includes:

   The payment background determines the actual transaction payment combination according to the transaction amount and the amount that each payment method needs to pay;

   The payment back-end determines the transaction payment combination and the amount that each payment method needs to pay to the payment terminal;

   The step “after the payment terminal receives the input account password, the account password is sent to the payment background to perform payment” includes:

   The payment terminal displays the received payment combination and the amount that each payment method needs to pay;

   The user selects the actual transaction amount for each payment method and enters the account password;

   The payment terminal sends the actual transaction amount and the account password of each payment method to the payment background;

   The payment background verifies the received transaction amount and account password, and pays when the verification is passed.
6. The O2O secure payment method according to claim 2, further comprising the steps of:

   The payment background sends the transaction result prompt information to the payment terminal;

   The payment terminal prints a paper transaction voucher.
7. The O2O secure payment method according to claim 1, further comprising:

   The payment terminal is provided with a payment PIN;

   Before the step "Payment terminal sends the dynamic personal voucher code and transaction amount to the payment background", it also includes:

   The payment terminal acquires the PIN entered by the user on the payment terminal, and sends the PIN to the payment background;

   The payment background verifies the received PIN, and the subsequent steps are performed after the verification is passed.
8. The O2O secure payment method according to claim 1, wherein the mobile terminal transmits the dynamic personal voucher code to the payment terminal via voice communication, NFC or Bluetooth.
9. An O2O secure payment system, comprising: a mobile terminal, a payment terminal, and a payment background, wherein the mobile terminal comprises a dynamic transaction code acquisition module and a first transceiver module;

   The payment terminal includes a first input module, a second input module, and a second transceiver module;

   The payment background includes a verification module, a third transceiver module, and a payment module;

   The dynamic transaction code acquisition module is configured to obtain a dynamic transaction code from a payment background;

   The first transceiver module is configured to send a dynamic personal voucher code including a dynamic transaction code to the payment terminal, where the first transceiver module is an acoustic communication module, an NFC module, and a Bluetooth module;

   The first input module is configured to receive an input transaction amount;

   The second transceiver module is configured to receive a dynamic personal voucher code sent by the mobile terminal, configured to send the dynamic personal voucher code and the transaction amount to the payment background, and send the account password to the payment background;

   The verification module is configured to verify the dynamic personal voucher code and an account password;

   The third transceiver module is configured to send the verification information to the payment terminal;

   The second input module is configured to receive an account password input by a user;

   The payment module is configured to perform payment after the verification module passes the verification.
10. A POS terminal, comprising: a printing module and the first input module, the second input module, and the second transceiver module according to claim 7;

    The printing module is used to print a paper transaction voucher.
11. The POS terminal according to claim 10, wherein the second transceiver module is an acoustic communication module, an NFC module, a Bluetooth module or other non-physical contact communication module.
12. The POS terminal according to claim 10, further comprising:

    A display module for displaying verification information sent by the payment background.