Classifications

• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/38—Payment protocols; Details thereof
  • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
  • G06Q20/3821—Electronic credentials

Definitions

• the present invention relates to the field of electronic payment, and in particular to a O2O Secure payment methods and systems.
• O2O Online To Offline It refers to the combination of offline business opportunities and the Internet, making the Internet a front-end for offline transactions. From 2010 Entering China at the end of the year has aroused widespread discussion in the industry, and its broad prospects are optimistic for all parties. O2O The industry is also widely regarded as the next market of billions of dollars.
• WeChat payment and Alipay’s face-to-face payment can be regarded as O2O
• a typical application both of which use the user's mobile phone as a carrier, bind the bank card number through the mobile phone, scan the QR code to obtain the product information, and input the account password on the mobile phone to realize the fast completion of the electronic transaction. It is really convenient for people's daily life, but mobile phones are a carrier that often connects with the Internet. Mobile viruses, mobile phone Trojans and other malware are often used to complete O2O The account password paid is likely to be attacked and stolen by these malware, so the account password is currently entered via the mobile phone. O2O There are serious security issues with payment methods.
• the present invention provides a payment that is safer and more reliable. O2O Secure payment method.
• the secure payment method comprises the steps of: receiving, by the background, the transaction information uploaded by the payment terminal or the mobile terminal and including the transaction amount and the payment account information; and the payment receiving the account password uploaded by the payment terminal, and verifying whether the account password is correct, and verifying Pay after passing.
• the “receiving background receiving payment transaction terminal or mobile terminal uploading transaction information including transaction amount and payment account information” includes the steps of: the payment terminal acquires the input commodity information, and uploads the transaction amount of the commodity to the payment background; The background generates the corresponding transaction order number after receiving the transaction amount, and sends the transaction order number to the payment terminal; the payment terminal sends the received transaction order number to the mobile terminal; the mobile terminal receives the transaction order number After the transaction order number and the payment account are sent to the payment background; the payment background confirms the right to pay the account number, and after confirming the payment, the payment account number is sent to the payment terminal; the payment background receives the account password uploaded by the payment terminal, and verifies the The account password is correct, and the payment is made after the verification is passed. Include the steps: the payment terminal obtains the input account password and sends it to the payment background; the payment background verifies whether the account password is correct, and the payment is made after the verification is passed.
• the “receiving background receiving payment transaction terminal or mobile terminal uploading transaction information including transaction amount and payment account information” includes the steps of: the mobile terminal and the payment background synchronous transaction serial number; the mobile terminal group package transaction serial number and the payment account The information generates a dynamic personal voucher code and sends it to the payment terminal; the payment terminal extracts and displays the payment account information in the received dynamic personal voucher code; the payment terminal obtains the account password and the transaction amount, and the account password, the transaction amount and the dynamic individual The voucher code is sent to the payment background; the “payment background receives the account password uploaded by the payment terminal, and verifies whether the account password is correct, and the payment is performed after the verification is passed”.
• the method includes the following steps: the payment background receives the dynamic personal voucher code and the account. The password, and verify that the account password and the payment account information in the dynamic personal voucher code are correct, and the payment is made after the verification is passed.
• the “receiving background receiving payment transaction terminal or mobile terminal uploading transaction information including transaction amount and payment account information” includes the steps of: the mobile terminal and the payment background synchronize the transaction serial number; and the mobile terminal acquires the payment account generated by the payment background.
• the payment terminal obtains the transaction amount, and compares whether the transaction amount is greater than the exemption upper limit amount in the received dynamic personal voucher code, and if so, obtains the input account password; the payment terminal generates the comparison result and the account password field.
• Transaction message wherein, when the comparison result is yes, the value of the account password field is an account password; otherwise, the account password field is set to zero; the payment terminal sends the dynamic personal voucher code and the transaction message to the payment background; Said that the payment background receives the account password uploaded by the payment terminal, Verifying that the account password is correct, and performing payment after the verification is passed” includes the steps of: paying the background parsing transaction message and the dynamic personal voucher code, and if the comparison result is yes, verifying by verifying the account password uploaded by the payment terminal; If the comparison result is no, the transaction information and the transaction serial number are sent to the mobile terminal, and the mobile terminal verifies whether the received transaction serial number is smaller than the transaction serial number on the mobile terminal, and after the verification is passed, the transaction information is displayed and acquired. The entered transaction confirmation information is sent to the payment background, and the payment background performs payment according to the received transaction confirmation information.
• the “receiving background receiving payment transaction terminal or transaction information including the transaction amount and the payment account information uploaded by the mobile terminal” includes the following steps: the payment terminal acquires the input transaction amount, and establishes a connection with the mobile terminal after receiving the transaction amount. Obtaining a dynamic personal voucher code sent by the mobile terminal, where the dynamic personal voucher code includes a payment account and a dynamic code generated by the mobile terminal; the payment terminal sends the transaction amount and the dynamic personal voucher code to the payment background; and the payment background verification receives the dynamic Whether the payment account and the dynamic code in the personal voucher code are correct, and the dynamic code and the seller account information are sent to the payment terminal after the verification is passed; the payment terminal transmits the received transaction amount and the seller account information to the mobile terminal; the mobile terminal displays the transaction amount.
• Steps include: the payment terminal obtains the input account password, and sends the account password Give the payment backstage; Verification received back pay account password is correct, after the verification, payment.
• the mobile terminal and the payment terminal communicate by sound wave, NFC Or Bluetooth Data transmission and reception.
• the secure payment method further includes the steps of: the payment background sends the transaction result prompt information to the payment terminal; and the payment terminal prints the paper transaction certificate.
• the present invention also provides a O2O Secure payment system.
• One kind O2O a secure payment system, comprising: a mobile terminal, a payment background, and a payment terminal, wherein the payment background comprises a data receiving module, a verification module and a payment module; the payment terminal comprises a password acquisition module; and the data receiving module is configured to receive a payment a transaction information uploaded by the terminal or the mobile terminal, where the transaction information includes a transaction amount and payment account information; the password acquisition module is configured to acquire the input account password, and send the account password to the payment background; the data receiving The module is further configured to receive an account password sent by the payment terminal; the verification module is configured to verify whether the account password is correct; and the payment module is configured to perform payment when the verification module inputs the verification pass information.
• the payment background comprises a data receiving module, a verification module and a payment module
• the payment terminal comprises a password acquisition module
• the data receiving module is configured to receive a payment a transaction information uploaded by the terminal or the mobile terminal, where the transaction information includes a transaction amount and payment account information
• the password acquisition module
• the payment terminal further includes a printing module, the payment background further includes a data sending module; the data sending module is configured to send the transaction result information to the payment terminal; and the printing module is configured to print the received transaction result information.
• the invention has the beneficial effects that the account password must be uploaded by the mobile terminal to the payment background in the payment process in the existing online payment, and the invention is sent by the mobile terminal or the payment terminal transaction amount and the payment account information to the payment background.
• the account password is input by the payment terminal and uploaded to the payment background. Therefore, the account password is stolen in the mobile terminal. Since the security of the payment terminal is much higher than that of the mobile terminal, the security of the online payment is greatly improved.
• Figure 1 Is an embodiment of the present invention O2O Flow chart of a secure payment method
• FIG. 5 is a schematic diagram of a data transmission relationship between a payment background, a payment terminal, and a mobile terminal in Embodiment 5;
• Figure 6 Is an embodiment of the present invention O2O a structural block diagram of a secure payment system
• the account password is input by the payment terminal and uploaded to the payment background, which greatly improves the account number. O2O The security of the payment.
• the payment background receives the account password uploaded by the payment terminal, and verifies whether the account password is correct, and performs payment after the verification is passed.
• the embodiment relates to a mobile terminal, a payment terminal, and a payment backend (the payment backend is a system server of a specific bank, and may also be a server of a third party payment system), wherein the payment terminal may be a merchant POS
• the terminal may also be another electronic payment device having a password input function.
• a payment client and a public key certificate are installed on the mobile terminal.
• CERT1 public key certificate CERT1 Corresponding private key PR1 Saved in the payment background
• the user communicates with the payment background by logging in to the payment terminal on the mobile terminal, so that the payment account is bound to the user's mobile terminal.
• the transaction amount may be obtained by the mobile terminal by browsing the webpage, and the mobile terminal directly sends the transaction amount and the payment account information bound by the mobile terminal to the payment background, and at the same time, the transaction amount may be from the payment terminal. Input, the mobile terminal sends the payment terminal information to the payment terminal, and the payment terminal sends the payment terminal to the payment background.
• the transaction information, the account password and the transaction information of the payment account information are all encrypted and then transmitted. For simple data, you don't have to encrypt it. If you want to encrypt, the communication data sent by the mobile terminal needs to pass the public key certificate. CERT1 After encryption, transfer. Among them, the encryption algorithm is an asymmetric algorithm and can be used. RSA , ECC , national secret algorithm, etc.
• the account password must be uploaded from the mobile terminal to the payment background in the payment process different from the existing online payment.
• the invention is sent by the mobile terminal or the payment terminal transaction amount and the payment account information to the payment background, and the account password is input by the payment terminal. Uploaded to the payment background, thus effectively preventing the account password from being stolen in the mobile terminal, since the security of the payment terminal is much higher than that of the mobile terminal, the security of online payment is greatly improved.
• the transaction amount and the payment account information can be uploaded by the mobile terminal to the payment background, or can be uploaded to the payment background by the payment terminal, thereby improving the flexibility and convenience of online payment.
• the “payment payment receiving terminal or the transaction information uploaded by the mobile terminal and including the transaction amount and the payment account information” includes the following steps:
• the payment terminal obtains the input commodity information, and uploads the transaction amount of the commodity to the payment background;
• the payment background generates a corresponding transaction order number after receiving the transaction amount, and sends the transaction order number to the payment terminal;
• the payment terminal sends the received transaction number to the mobile terminal
• the mobile terminal After receiving the transaction order number, the mobile terminal sends the transaction order number and the payment account to the payment background;
• the payment background confirms the right to pay the account number, and after confirming the payment, the payment account number is sent to the payment terminal.
• the “paying background receives the account password uploaded by the payment terminal, and verifies whether the account password is correct, and performs payment after the verification is passed” includes the following steps:
• the payment terminal obtains the input account password and sends it to the payment background;
• the payment background verifies whether the account password is correct, and the payment is made when the verification is passed.
• the payment background generates a transaction order number for each payment request
• the payment terminal acquires the transaction order number generated by the payment background, and sends the transaction order number to the mobile terminal, and the mobile terminal sends the payment account and the transaction order number to the payment background.
• the payment background verification transaction number and the payment account are correct.
• the account password uploaded by the payment terminal is verified to be correct, and the payment is made after the verification is passed.
• the transaction order number is generated for each payment, so the transaction order number of each payment is different, which can prevent the payment account and the account password from being stolen when used.
• the transaction order number is determined by the payment terminal. Obtaining and transmitting to the mobile terminal, the account password is also input from the payment terminal and uploaded to the payment background, which reduces the operation on the mobile terminal and greatly improves the operation convenience of the mobile terminal user (ie, the user).
• the “payment payment receiving terminal or the transaction information including the transaction amount and the payment account information uploaded by the mobile terminal” includes the following steps:
• the mobile terminal synchronizes the transaction serial number with the payment background
• the mobile terminal group package transaction serial number and payment account information, generate a dynamic personal voucher code, and send it to the payment terminal;
• the payment terminal extracts and displays the payment account information in the received dynamic personal voucher code
• the payment terminal obtains the account password and the transaction amount, and sends the account password, the transaction amount, and the dynamic personal voucher code to the payment background.
• the “paying background receives the account password uploaded by the payment terminal, and verifies whether the account password is correct, and performs payment after the verification is passed” includes the following steps:
• the payment background receives the dynamic personal voucher code and the account password, and verifies whether the account password and the payment account information in the dynamic personal voucher code are correct, and after the verification is passed, the payment is made.
• the payment account information is sent by the mobile terminal to the payment background through the payment terminal, and the transaction amount and the account password are input by the mobile terminal and uploaded to the payment background, thereby effectively preventing the account password from being stolen in the mobile terminal, because the payment terminal Security is much higher than mobile terminals, so the security of online payment is greatly improved.
• the “payment payment receiving terminal or the transaction information uploaded by the mobile terminal and including the transaction amount and the payment account information” includes the following steps:
• the mobile terminal synchronizes the transaction serial number with the payment background
• the mobile terminal obtains an exempted transaction upper limit amount of the payment account generated by the payment background;
• the mobile terminal group package transaction serial number, the payment account information, and the account-free transaction upper limit amount, generate a dynamic personal voucher code, and send it to the payment terminal;
• the transaction serial number is accumulated
• the payment terminal obtains the transaction amount, and compares whether the transaction amount is greater than the exemption upper limit amount in the received dynamic personal voucher code, and if yes, obtains the input account password;
• the payment terminal generates a transaction message including the comparison result and the account password field, wherein when the comparison result is yes, the value of the account password field is an account password; otherwise, the account password field is set to zero;
• the payment terminal sends the dynamic personal voucher code and the transaction message to the payment background;
• the “paying background receives the account password uploaded by the payment terminal, and verifies whether the account password is correct, and performs payment after the verification is passed” includes the following steps:
• the payment background parsing transaction message and the dynamic personal voucher code if the comparison result is yes, the payment is performed by verifying the account password uploaded by the payment terminal;
• the transaction information and the transaction serial number are sent to the mobile terminal, and the mobile terminal verifies whether the received transaction serial number is smaller than the transaction serial number on the mobile terminal, and after the verification is passed, the transaction information is displayed and acquired.
• the entered transaction confirmation information is sent to the payment background, and the payment background performs payment according to the received transaction confirmation information.
• the conventional payment by verifying the account password can be realized, and the secret payment can be realized (that is, the payment can be made without inputting the account password), and the mobile terminal obtains the upper limit amount of the confidential transaction generated by the payment background, and is paid by the payment.
• the terminal compares whether the transaction amount is greater than the exempted transaction upper limit amount, and sends the comparison result and the account password (when the account password needs to be input) to the payment, and the payment background performs payment according to the comparison result, thereby greatly improving the convenience of payment.
• the payment terminal compares the transaction amount and the confidential transaction amount, and determines whether to obtain the account password according to the comparison result, and simplifies the payment background judgment process while ensuring payment security.
• the payment background judges whether to make payment according to the specific content of the transaction confirmation information (when the transaction confirmation information is yes, the payment is made, otherwise the payment is not made). Therefore, through the double security of the transaction serial number and the transaction confirmation information, the security of the confidential payment is effectively guaranteed.
• the “payment receiving terminal or the transaction information including the transaction amount and the payment account information uploaded by the mobile terminal” includes the following steps:
• the payment terminal obtains the input transaction amount, and establishes a connection with the mobile terminal after receiving the transaction amount, and acquires a dynamic personal voucher code sent by the mobile terminal, where the dynamic personal voucher code includes a payment account and a dynamic code generated by the mobile terminal;
• the payment terminal sends the transaction amount and the dynamic personal voucher code to the payment background;
• the payment account and the dynamic code in the dynamic personal voucher code received by the background verification are correct, and the dynamic code and the seller account information are sent to the payment terminal after the verification is passed;
• the payment terminal sends the received transaction amount and the seller account information to the mobile terminal;
• the mobile terminal displays the transaction amount and the seller account information
• the “paying background receives the account password uploaded by the payment terminal, and verifies whether the account password is correct, and performs payment after the verification is passed” includes the following steps:
• the payment terminal obtains the input account password and sends the account password to the payment background;
• the payment server verifies that the account password received is correct. After the verification is passed, the payment is made.
• the data of the dynamic personal voucher code includes a ciphertext C with HASH value( HASH-256 ), of which ciphertext C Is to use a public key certificate for plain text messages M Encrypted, the plaintext message M
• the user's payment account non-bank account number
• the dynamic code generated by the mobile terminal the time stamp of the dynamic code, and whether the mobile terminal is currently online.
• Each of the dynamic personal voucher codes can only be used for one transaction, and is invalidated once the transaction is successful. Since the dynamic personal voucher code has a time stamp set in it, it is only valid for a short period of time (eg 30 Second or 1 Minutes), so the payment background must ensure that the dynamic personal voucher code for the transaction is saved within the validity period of the dynamic personal voucher code after each transaction.
• the mobile terminal does not need to directly send and receive data with the payment background, so the mobile terminal can still perform payment without a signal.
• the payment background performs payment by verifying the payment account and the dynamic code generated by the mobile terminal, so that the secure payment can still be made if the mobile terminal has no signal.
• the mobile terminal and the payment terminal communicate by sound wave, NFC Or Bluetooth Data transmission and reception.
• the method further includes the following steps:
• the payment background sends the transaction result prompt information to the payment terminal
• the payment terminal prints a paper transaction voucher.
• the payment system including a mobile terminal 30 Payment background 10 And payment terminal 20 , the payment background 10 Data receiving module 11 Verification module 13 And payment module 12 ;
• Payment terminal 20 Including password acquisition module twenty one ;
• Data receiving module 11 configured to receive transaction information uploaded by a payment terminal or a mobile terminal, where the transaction information includes a transaction amount and payment account information;
• the password acquisition module twenty one Used to obtain the entered account password and send the account password to the payment background;
• Data receiving module 11 Also used for receiving an account password sent by the payment terminal;
• the verification module 13 Used to verify that the account password is correct
• Payment module 12 Used to pay when the verification module enters the verification pass information.
• the mobile terminal 30 Payment terminal 20 Send the transaction amount and payment account information to the payment background 10 And the account password is from the payment terminal 20 Enter and upload to the payment background 10 , thus effectively preventing the account password from being stolen in the mobile terminal due to the payment terminal 20 Security is much higher than mobile terminals 30 , so greatly improved the security of online payment.
• the transaction amount and payment account information can be used by the mobile terminal.
• 30 Upload to payment background 10 Payment terminal 20 Upload to payment background 10 Increase the flexibility and convenience of online payment.
• the payment terminal 20 also includes a print module twenty two , the payment background 10 Data transmission module 14 ;
• Data sending module 14 Used to send transaction result information to the payment terminal 20 ;
• the printing module twenty two Used to print the received transaction result information.

Landscapes

• Business, Economics & Management (AREA)
• Accounting & Taxation (AREA)
• Engineering & Computer Science (AREA)
• Strategic Management (AREA)
• Physics & Mathematics (AREA)
• General Business, Economics & Management (AREA)
• General Physics & Mathematics (AREA)
• Theoretical Computer Science (AREA)
• Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
• Computer Security & Cryptography (AREA)
• Finance (AREA)

Priority Applications (1)

Applications Claiming Priority (2)

Publications (1)

Family

ID=51040438

Family Applications (1)

Country Status (3)

Families Citing this family (9)

Citations (5)

Family Cites Families (11)

• 2014
  • 2014-03-14 CN CN201410096978.2A patent/CN103914774B/zh active Active
• 2015
  • 2015-01-14 WO PCT/CN2015/070696 patent/WO2015135392A1/zh active Application Filing
  • 2015-01-14 JP JP2016574322A patent/JP6430544B2/ja active Active

Patent Citations (5)

Also Published As

Similar Documents

Legal Events