WO2015135393A1 - 一种o2o安全支付方法、系统和一种安全支付后台 - Google Patents

一种o2o安全支付方法、系统和一种安全支付后台 Download PDF

Info

Publication number
WO2015135393A1
WO2015135393A1 PCT/CN2015/070703 CN2015070703W WO2015135393A1 WO 2015135393 A1 WO2015135393 A1 WO 2015135393A1 CN 2015070703 W CN2015070703 W CN 2015070703W WO 2015135393 A1 WO2015135393 A1 WO 2015135393A1
Authority
WO
WIPO (PCT)
Prior art keywords
payment
module
verification
temporary
mobile terminal
Prior art date
Application number
PCT/CN2015/070703
Other languages
English (en)
French (fr)
Inventor
孟陆强
洪逸轩
姚承勇
陈瑞兵
Original Assignee
福建联迪商用设备有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 福建联迪商用设备有限公司 filed Critical 福建联迪商用设备有限公司
Publication of WO2015135393A1 publication Critical patent/WO2015135393A1/zh

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327—Short range or proximity payments by means of M-devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification

Definitions

  • the present invention relates to the field of electronic payment, and in particular to a O2O Secure payment methods, systems, and a secure payment backend.
  • the mobile phone Since the mobile phone is an insecure carrier, mobile phone viruses, mobile phone Trojans and other malware are not uncommon, and the bank card information and payment password transmitted on the mobile phone may become the object of stealing such malware. It greatly affects the security of payment.
  • the payer does not get the corresponding paper certificate. If the subsequent transaction dispute is not conducive to the payer to protect his rights and interests.
  • the present invention provides a payment that is more secure. O2O Secure payment method.
  • One kind O2O a secure payment method, the method comprising the steps of: establishing, by the mobile terminal, a communication connection with the payment background, acquiring temporary payment account information corresponding to the payment account bound to the mobile terminal generated by the payment background; and transmitting, by the mobile terminal, a payment request to the payment background, and Transmitting the transaction amount and the temporary payment account information to the payment background; whether the temporary payment account information received by the payment background verification is correct, the payment account corresponding to the temporary payment account information is retrieved after the verification is passed, and the verification information is sent to the mobile terminal; The mobile terminal receives the input account password and sends the account password to the payment background; the payment background verifies that the received account password is correct, and after the verification is passed, the payment is made.
  • the secure payment method further includes: after receiving the payment request sent by the mobile terminal, the payment generation generates a transaction order number corresponding to the payment request, and sends the transaction order number to the mobile terminal; the mobile terminal sets the transaction amount, the transaction order number, and the temporary transaction account information.
  • the dynamic personal voucher code generated by the group package further includes transaction configuration information, wherein the transaction configuration information identifies whether the data sent by the mobile terminal is a ciphertext, and if the ciphertext is marked, the payment terminal cannot decrypt the key.
  • the payment terminal can only upload the dynamic personal voucher code ciphertext and the transaction configuration information to the payment background processing.
  • the mobile terminal sends the dynamic personal voucher code and the account password to the payment background through the payment terminal for payment.
  • the method includes the following steps: the mobile terminal establishes a communication connection with the payment background, and acquires a binding generated by the payment background and bound to the mobile terminal.
  • the payment server checks whether the temporary payment account information in the dynamic personal voucher code received is correct, the payment account corresponding to the temporary payment account information is retrieved after verification, and the verification information is sent to the payment terminal; the payment terminal obtains the input account password. And sent to the payment background; the payment background verifies that the account password is correct, and after the verification is passed, the payment is made.
  • the secure payment method further includes the steps of: the payment background sends the transaction result information to the payment terminal and the mobile terminal, the transaction result includes the account party partial account real information; and the payment terminal prints the paper transaction voucher according to the received transaction result information.
  • the secure payment system includes a mobile terminal and a payment background; the mobile terminal includes a first transceiver module, a temporary payment account information generation module, a payment request sending module, and a password input module; the payment background includes a second transceiver module, a retrieval module, and a verification a module and a payment module; the temporary payment account information generating module is configured to generate temporary payment account information corresponding to the payment account bound by the mobile terminal; the first transceiver module is configured to receive temporary payment account information generated by the payment background; and the payment request sending module And configured to send a payment request to the payment background, and send the transaction amount and the temporary payment account information to the payment background; the verification module is configured to verify whether the received temporary payment account information is correct; and the retrieval module is configured to output the temporary when the verification module outputs When the payment account information is verified, the payment account corresponding to the temporary payment account information is retrieved; the second transceiver module is configured to send the verification information to the mobile terminal when
  • the transceiver module is further configured to send the account password obtained by the password input module to the payment background; the verification module is further configured to verify whether the received account password is correct; and the payment module is configured to use the verification module to temporarily pay the account information and the account password. When the verification is passed, the payment is made.
  • the payment form further includes a transaction number generation module, the mobile terminal further includes a dynamic personal voucher code generation module; the transaction order number generation module is configured to generate a transaction order number corresponding to the payment request and send the transaction order number to the mobile terminal
  • the dynamic personal voucher code generating module is configured to group the transaction amount, the transaction order number and the temporary transaction account information to generate a dynamic personal voucher code;
  • the first transceiver module is configured to send the dynamic personal voucher code to the payment background;
  • the module is further configured to verify whether the received transaction order number is correct; the payment module is configured to perform payment when the verification module passes the verification of the temporary payment account information, the transaction order number, and the account password.
  • the invention also provides a secure payment background.
  • a secure payment background comprising a transceiver module, a temporary payment account information generating module, a payment request sending module and a password input module; the temporary payment account information generating module is configured to generate temporary payment account information corresponding to the payment account bound by the mobile terminal
  • the transceiver module is configured to send the temporary payment account information to the mobile terminal; the verification module is configured to verify whether the received temporary payment account information is correct; and the retrieval module is configured to: when the verification module outputs the temporary payment account information, the verification is passed Retrieving the payment account corresponding to the temporary payment account information; the transceiver module is further configured to: when the verification module outputs the verification pass information, send the verification information to the mobile terminal; the verification module is further configured to verify whether the received account password is correct; The payment module is configured to perform payment when the verification module passes the verification of the temporary payment account information and the account password.
  • the transaction ticket number generating module is configured to generate a transaction ticket number corresponding to the payment request and send the transaction ticket number to the mobile terminal; the verification module is further configured to verify whether the received transaction ticket number is correct; The module is configured to perform payment when the verification module passes the verification of the temporary payment account information, the transaction order number and the account password.
  • the beneficial effects of the invention are: different from the prior art O2O
  • the payment between the payment background and the mobile terminal is the real information of the payment account.
  • the payment background when the mobile terminal communicates with the payment background, the payment background generates a temporary payment account according to the payment account bound by the mobile terminal.
  • the information is transmitted and verified by the temporary payment account information throughout the payment process, because the temporary account information generated by the payment background is different each time, and only the payment background knows the real payment account corresponding to the temporary payment account information, Even if the temporary payment account information is intercepted, the real payment account cannot be known, which greatly improves the O2O The security of the payment.
  • Figure 2 Is an embodiment of the present invention O2O Schematic diagram of the structure of a secure payment system
  • the temporary payment account information is used instead of the real account information to be transmitted between the payment background and the mobile terminal, thereby effectively preventing the payment account and the payment password from being intercepted, thereby improving the O2O The security of the payment.
  • the mobile terminal establishes a communication connection with the payment background, and obtains temporary payment account information corresponding to the payment account bound to the mobile terminal generated by the payment background;
  • the mobile terminal sends a payment request to the payment background, and sends the transaction amount and the temporary payment account information to the payment background;
  • the payment account corresponding to the temporary payment account information is retrieved after the verification is passed, and the verification information is sent to the mobile terminal;
  • the mobile terminal receives the input account password and sends the account password to the payment background;
  • the payment server verifies that the account password received is correct. After the verification is passed, the payment is made.
  • the embodiment relates to a mobile terminal, and a payment background (the payment background is a system server of a specific bank, or a server of a third-party payment system), wherein the mobile terminal is installed with a payment client and a public key certificate.
  • CERT1 public key certificate CERT1 Corresponding private key PR1 Saved in the payment background
  • the user communicates with the payment background by logging in to the payment terminal on the mobile terminal, so that the payment account is bound to the user's mobile terminal.
  • the temporary payment account information corresponding to the payment account bound to the mobile terminal generated by the background is paid.
  • the payment background generates temporary payment account information corresponding to the payment account bound to the mobile terminal, and the temporary payment account information generated each time is different.
  • the temporary payment account information may be a random number generated by the payment background, or may be generated by the payment background according to a payment function (such as an account number, an account name, a card issuance time, etc.) according to a certain functional relationship, wherein the temporary payment account information is generated.
  • the corresponding payment account is known only to the payment background.
  • the payment is performed between the background and the mobile terminal by using the temporary payment account information, and the payment background verifies the received temporary payment account information, and determines whether the temporary payment account information is legal (such as whether it is generated before the payment background). Whether the time stamp of the temporary payment account information is valid, etc., when the verification is legal, the corresponding payment account is retrieved according to the temporary payment account information, and the received account password is verified, and the payment is performed only after the account password is verified.
  • the temporary payment account information is transmitted and verified, because the temporary account information generated each time in the payment background is different, and only the payment background knows the real payment account corresponding to the temporary payment account information, therefore, Even if the temporary payment account information is intercepted, the real payment account cannot be known, thereby improving the information security of the payment account.
  • the payment background after receiving the payment request sent by the mobile terminal, the payment background generates a transaction ticket number corresponding to the payment request, and sends the transaction ticket number to the mobile terminal;
  • the mobile terminal groups the transaction amount, the transaction order number and the temporary transaction account information, generates a dynamic personal voucher code, and sends the dynamic personal voucher code to the payment background;
  • the mobile terminal receives the input account password and sends the account password to the payment background;
  • the payment server verifies that the account password received is correct. After the verification is passed, the payment is made.
  • the dynamic personal voucher code further includes transaction configuration information, where the transaction configuration information is used to identify whether data (such as a dynamic personal voucher code) communicated by the mobile terminal and the payment terminal is encrypted, and the encryption can be better ensured.
  • the transmission of payment data is secure. For simple data, you don't have to encrypt it. If you want to encrypt, the communication data sent by the mobile terminal needs to pass the public key certificate. CERT1 After encryption, transfer.
  • the encryption algorithm is an asymmetric algorithm and can be used. RSA , ECC , national secret algorithm, etc.
  • the payment background generates a corresponding payment order number for each payment request.
  • the payment background not only needs to verify whether the temporary payment account information is correct, but also further verifies whether the transaction order number of the payment is correct, only in the The payment can be made only when the temporary payment account information and the transaction order number are correct, thereby preventing the temporary payment account information and the account password being intercepted, and the payment account is used for payment multiple times (because the temporary payment account information is the mobile terminal again)
  • the new temporary payment account information is regenerated only when the login client communicates with the payment background. Therefore, if the temporary payment account information and the payment password are intercepted, it may be used for payment multiple times during this period, which greatly improves the number. O2O The security of the payment.
  • a payment terminal is introduced, and the mobile terminal sends the dynamic personal voucher code and the account password to the payment background through the payment terminal for payment, specifically including the steps:
  • the mobile terminal establishes a communication connection with the payment background, and acquires temporary payment account information corresponding to the payment account bound to the mobile terminal generated by the payment background;
  • the mobile terminal sends the temporary payment account information group package, and generates a dynamic personal voucher code to the payment terminal;
  • the payment terminal receives the input transaction amount, and sends the dynamic personal voucher code and the transaction amount to the payment background;
  • the payment account corresponding to the temporary payment account information is retrieved after the verification is passed, and the verification information is sent to the payment terminal;
  • the payment terminal obtains the input account password and sends it to the payment background;
  • the payment background verifies whether the account password is correct, and after the verification is passed, the payment is made.
  • the payment terminal may be a merchant POS
  • the terminal may also be another electronic payment device having a password input function.
  • the dynamic personal voucher code containing the dynamic transaction code is securely transmitted by the mobile terminal to the payment terminal, and the user completes the input of the account password on the mobile terminal; after receiving the input account password, the payment terminal sends the ciphertext account password to the payment background.
  • the payment is made, so that the mobile terminal can obtain the account information and the account password at the same time, effectively preventing the payment account and the account password from being stolen, and improving the security of the online payment.
  • the mobile terminal can communicate through sound waves.
  • NFC Or Bluetooth sends the dynamic personal voucher code to the payment terminal, or sends the dynamic personal voucher code to the payment terminal through other near field communication methods.
  • the payment terminal may be a merchant POS
  • the terminal may also be another electronic payment device having a password input function.
  • the payment background sends the transaction result information to the payment terminal and the mobile terminal, and the transaction result information includes the buyer partial account real information;
  • the payment terminal prints out the paper transaction voucher based on the received transaction result information.
  • FIG. 2 a method of the present embodiment O2O Schematic diagram of a secure payment system including a mobile terminal 10 And payment background 20 ;
  • the mobile terminal 10 Including the first transceiver module 11 Temporary payment account information generation module 12 Payment request sending module 13 And password input module 14 ;
  • the payment background 20 Including the second transceiver module twenty one Search module twenty two Verification module twenty four And payment module twenty three ;
  • Temporary payment account information generation module 12 configured to generate temporary payment account information corresponding to a payment account bound to the mobile terminal;
  • First transceiver module 11 For receiving temporary payment account information generated by the payment background
  • Payment request sending module 13 Used to send a payment request to the payment background, and send the transaction amount and the temporary payment account information to the payment background;
  • Search module twenty two For retrieving the payment account corresponding to the temporary payment account information when the verification module outputs the temporary payment account information verification;
  • Second transceiver module twenty one When the verification module outputs the verification pass information, and sends the verification information to the mobile terminal;
  • Password input module 14 Account password used to receive input
  • First transceiver module 11 It is also used to send the account password obtained by the password input module to the payment background;
  • Verification module twenty four Also used to verify that the received account password is correct
  • the temporary payment account information generating module 12 Generating temporary payment account information corresponding to the payment account bound to the mobile terminal, and using the temporary payment account information to transmit between the payment background and the mobile terminal during the payment process, and transmitting the temporary payment account information during the entire payment process And verification, because the temporary account information generated by the payment background is different each time, and only the payment background knows the real payment account corresponding to the temporary payment account information, therefore, even if the temporary payment account information is intercepted, the real payment account cannot be known. , thereby improving the information security of the payment account.
  • the payment background further includes a transaction order number generating module
  • the mobile terminal further includes a dynamic personal credential code generating module
  • the transaction ticket number generating module is configured to generate a transaction ticket number corresponding to the payment request and send the transaction ticket number to the mobile terminal;
  • the dynamic personal voucher code generating module is configured to group the transaction amount, the transaction order number and the temporary transaction account information to generate a dynamic personal voucher code
  • the first transceiver module is configured to send a dynamic personal voucher code to a payment background
  • the payment module is configured to perform payment when the verification module passes the verification of the temporary payment account information, the transaction order number, and the account password.
  • the transaction number generation module generates a corresponding payment order number for each payment request.
  • the payment background not only needs to verify whether the temporary payment account information is correct, but further verify the payment. Whether the transaction order number is correct or not, the payment can be made only when the temporary payment account information and the transaction order number are correct, thereby preventing the temporary payment account information and the account password being intercepted, and the payment account is used for payment multiple times ( The temporary payment account information is regenerated by the mobile terminal when the mobile terminal logs in again to the client and the payment background communication. Therefore, if the temporary payment account information and the payment password are intercepted, it may be used for payment during this period. ), greatly improved O2O Payment security
  • the invention also provides a secure payment background, the payment background includes a transceiver module, a temporary payment account information generation module, a payment request sending module and a password input module;
  • the temporary payment account information generating module is configured to generate temporary payment account information corresponding to the payment account bound by the mobile terminal;
  • the transceiver module is configured to send the temporary payment account information to the mobile terminal;
  • the verification module is used to verify whether the received temporary payment account information is correct
  • the retrieval module is configured to retrieve a payment account corresponding to the temporary payment account information when the verification module outputs the temporary payment account information verification;
  • the transceiver module is further configured to: when the verification module outputs the verification pass information, send the verification information to the mobile terminal;
  • the verification module is also used to verify that the received account password is correct
  • the payment module is configured to perform payment when the verification module passes the verification of the temporary payment account information and the account password.
  • the payment background further includes a transaction order number generation module
  • the transaction ticket number generating module is configured to generate a transaction ticket number corresponding to the payment request and send the transaction ticket number to the mobile terminal;
  • the verification module is also used to verify that the received transaction number is correct
  • the payment module is configured to perform payment when the verification module passes the verification of the temporary payment account information, the transaction order number, and the account password.
  • the payment background generates a corresponding transaction order number for each payment, and the payment background further verifies the correctness of the transaction order number of each payment, and only when the temporary payment account information and the transaction number number verification are passed, the transaction is performed. This prevents the payment account from being used multiple times even if the temporary payment account information and the account password are intercepted.
  • the user downloads the payment client through the mobile phone (mobile terminal) and binds the corresponding bank card (the bank card includes a cash account, a coupon account, a point account, etc., that is, a payment method);
  • the user logs in to the mobile payment terminal and the payment background communication, and the payment background generates the temporary payment account information according to the bundled bank card and sends the information to the mobile phone.
  • the payment request is sent to the payment background through the mobile phone, and the corresponding transaction ticket number is generated in the payment background to be sent to the mobile phone;
  • the user selects the purchased item by browsing the shopping webpage on the mobile phone, and obtains the amount of the merchandise;
  • the mobile phone When paying, the mobile phone will group the transaction amount, the temporary payment account information and the transaction number, generate a dynamic personal voucher code, and send the dynamic personal voucher code to the payment background;
  • the temporary payment account information and the transaction order number in the personal voucher code received by the background verification are correct, and the payment account corresponding to the temporary payment account information is retrieved after verification, and the verification information (payment amount, receiving information, etc.) is sent.
  • the verification information (payment amount, receiving information, etc.) is sent.
  • the mobile phone displays the received verification information, obtains the account password input by the user, and sends the account password to the payment background;
  • the payment background verifies whether the account password is correct, and after the verification is passed, the payment is made.

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Computer Security & Cryptography (AREA)
  • Finance (AREA)

Abstract

本发明公开一种O2O安全支付方法，该支付方法包括步骤：移动终端获取支付后台生成的与该移动终端所绑定的支付账户对应的临时支付账户信息；移动终端向支付后台发送支付请求，并将交易金额和临时支付账户信息发送给支付后台；支付后台验证所收到的临时支付账户信息是否正确，验证通过后检索临时支付账户信息所对应的支付账户，并将验证信息发送给移动终端；移动终端接收输入的账户密码，并将账户密码发送给支付后台；支付后台验证收到的账户密码是否正确，验证通过后，进行支付。本发明还公开一种O2O安全支付系统和一种安全支付后台。本发明在支付过程中使用临时支付账户信息代替支付账户进行传输，提高O2O支付安全性。

Description

一种O2O安全支付方法、系统和一种安全支付后台
技术领域
本发明涉及电子支付领域，特别是涉及一种 O2O 安全支付方法、系统和一种安全支付后台。
背景技术
随着国内智能终端的普及和移动互联网的高速发展，网络支付的使用率增速涨幅较大，并成为亮点，特别是在交通通信、食品方面、教育文化、居住等方面渗透会有大幅的提升。作为移动支付的一个热门词汇， O2O 逐渐为人们所熟悉，自 2010 年底进入中国来引起了业界的广泛讨论，其广阔的前景为各方所看好， O2O 行业也被普遍认为是下一个亿万元规模的市场。微信支付及支付宝的当面付，可以看作是 O2O 的一个典型应用，这两种支付方式，均使用用户手机作为载体，通过手机绑定银行卡号，扫描二维码获得商品信息，在手机上输入支付密码，实现电子交易的快捷完成，这种方式确实方便人们的日常生活。在这种支付方式中，手机终端与银行后台之间所传输的银行卡信息的都是银行卡直接的信息，如银行卡号、账主名称、身份证号等等，加密后进行传输，并且支付密码也是通过手机输入，由于手机是一个不安全的载体，手机病毒、手机木马等恶意软件屡见不鲜，而在手机上传输的银行卡信息和支付密码就可能成为了这类恶意软件的窃取对象，因此大大影响了支付安全，同时，交易完成后，付款人没有得到相应的纸质凭证，若后续发生交易纠纷不利于付款人维护自己的权益。
发明内容
为解决上述技术问题，本发明提供一种支付更加安全的 O2O 安全支付方法。
一种 O2O 安全支付方法，该方法包括步骤：移动终端与支付后台建立通讯连接，获取支付后台生成的与该移动终端所绑定的支付账户对应的临时支付账户信息；移动终端向支付后台发送支付请求，并将交易金额和临时支付账户信息发送给支付后台；支付后台验证所收到的临时支付账户信息是否正确，验证通过后检索临时支付账户信息所对应的支付账户，并将验证信息发送给移动终端；移动终端接收输入的账户密码，并将账户密码发送给支付后台；支付后台验证收到的账户密码是否正确，验证通过后，进行支付。
其中，所述 O2O 安全支付方法还包括：支付后台接收到移动终端发送的支付请求后，生成与所述支付请求对应的交易单号，并发送给移动终端；移动终端将交易金额、交易单号和临时交易账户信息进行组包，生成动态个人凭证码，并将动态个人凭证码发送给支付后台；支付后台接收所述动态个人凭证码，并验证动态个人凭证码中的临时支付账户信息与交易单号是否正确，验证通过后检索临时支付账户信息所对应的支付账户，并将验证信息发送给移动终端；移动终端接收输入的账户密码，并将账户密码发送给支付后台；支付后台验证收到的账户密码是否正确，验证通过后，进行支付。
其中，所述组包生成的动态个人凭证码还包括交易配置信息，其中，交易配置信息标识了移动终端发送的数据是否是密文，若标志了是密文，则支付终端无法解密获取这些关键数据的原始数据，支付终端只能原样把该动态个人凭证码密文以及交易配置信息上传到支付后台处理。
其中，移动终端通过支付终端将所述动态个人凭证码以及账户密码发送给支付后台进行支付，具体包括步骤：移动终端与支付后台建立通讯连接，获取支付后台生成的与该移动终端所绑定的支付账户对应的临时支付账户信息；移动终端将临时支付账户信息组包，生成动态个人凭证码发送给支付终端；支付终端接收输入的交易金额，并将动态个人凭证码和交易金额发送给支付后台；支付后台验证接收到的动态个人凭证码中的临时支付账户信息是否正确，验证通过后检索临时支付账户信息所对应的支付账户，并将验证信息发送给支付终端；支付终端获取输入的账户密码，并发送给支付后台；支付后台验证所述账户密码是否正确，验证通过后，进行支付。
其中，所述移动终端通过声波通讯、 NFC 或蓝牙将动态个人凭证码发送给支付终端。
其中，所述 O2O 安全支付方法还包括步骤：支付后台将交易结果信息发送给支付终端和移动终端，所述交易结果包含支付方部分账户真实信息；支付终端根据接收到的交易结果信息打印出纸质交易凭证。
本发明还提供一种 O2O 安全支付系统。
一种 O2O 安全支付系统，该 O2O 安全支付系统包括移动终端和支付后台；所述移动终端包括第一收发模块、临时支付账户信息生成模块、支付请求发送模块和密码输入模块；所述支付后台包括第二收发模块、检索模块、验证模块和支付模块；临时支付账户信息生成模块用于生成与移动终端所绑定的支付账户对应的临时支付账户信息；第一收发模块用于接收支付后台生成的临时支付账户信息；支付请求发送模块用于向支付后台发送支付请求，并将交易金额和临时支付账户信息发送给支付后台；验证模块用于验证所收到的临时支付账户信息是否正确；检索模块用于当所述验证模块输出临时支付账户信息验证通过时，检索临时支付账户信息所对应的支付账户；第二收发模块用于当所述验证模块输出验证通过信息时，将验证信息发送给移动终端；密码输入模块用于接收输入的账户密码；第一收发模块还用于将密码输入模块获取的账户密码发送给支付后台；验证模块还用于验证收到的账户密码是否正确；支付模块用于当所述验证模块对临时支付账户信息与账户密码的验证均通过时，进行支付。
其中，所述支付后还包括交易单号生成模块，所述移动终端还包括动态个人凭证码生成模块；交易单号生成模块用于生成与所述支付请求对应的交易单号并发送给移动终端；动态个人凭证码生成模块用于将交易金额、交易单号和临时交易账户信息进行组包，生成动态个人凭证码；所述第一收发模块用于将动态个人凭证码发送给支付后台；验证模块还用于验证接收到的交易单号是否正确；支付模块用于当所述验证模块对临时支付账户信息、交易单号和账户密码的验证均通过时，进行支付。
本发明还提供一种安全支付后台。
一种安全支付后台，包括收发模块、临时支付账户信息生成模块、支付请求发送模块和密码输入模块；临时支付账户信息生成模块用于生成与移动终端所绑定的支付账户对应的临时支付账户信息；收发模块用于将所述临时支付账户信息发送给移动终端；验证模块用于验证所收到的临时支付账户信息是否正确；检索模块用于当所述验证模块输出临时支付账户信息验证通过时，检索临时支付账户信息所对应的支付账户；收发模块还用于当所述验证模块输出验证通过信息时，将验证信息发送给移动终端；验证模块还用于验证收到的账户密码是否正确；支付模块用于当所述验证模块对临时支付账户信息与账户密码的验证均通过时，进行支付。
其中，还包括交易单号生成模块；交易单号生成模块用于生成与所述支付请求对应的交易单号并发送给移动终端；验证模块还用于验证接收到的交易单号是否正确；支付模块用于当所述验证模块对临时支付账户信息、交易单号和账户密码的验证均通过时，进行支付。
本发明的有益效果为：区别于现有技术中 O2O 支付中支付后台与移动终端之间传输的是支付账户的真实信息，本发明中移动终端每登陆支付客户端与支付后台进行通讯时，支付后台均根据移动终端所绑定的支付账户生成临时支付账户信息，在整个支付过程中都是以临时支付账户信息来传输和验证，因支付后台每次生成的临时账户信息是不同的，并且只有支付后台知道临时支付账户信息所对应的真实支付账户，因此，即使临时支付账户信息被截获也无法得知真实的支付账户，从而大大提高了 O2O 支付的安全性。
附图说明
图 1 为本发明实施方式一种 O2O 安全支付方法的流程图；
图 2 为本发明实施方式一种 O2O 安全支付系统的结构示意图；
主要标号说明：
移动终端； 11- 第一收发模块； 12- 临时支付账户信息生成模块；      13- 支付请求发送模块； 14- 密码输入模块； 20- 支付后台； 21- 第二收发模块； 22- 检索模块； 23- 支付模块； 24- 验证模块。
具体实施方式
为详细说明本发明的技术内容、构造特征、所实现目的及效果，以下结合实施方式并配合附图详予说明。
本发明在进行支付时，使用临时支付账户信息替代真实的账户信息在支付后台与移动终端之间进行传输，从而有效防止支付账户和支付密码被截获，提高了 O2O 支付的安全性。
实施例一
请参阅图 1 ，为本实施方式一种 O2O 安全支付方法的流程图，本方法包括步骤：
、移动终端与支付后台建立通讯连接，获取支付后台生成的与该移动终端所绑定的支付账户对应的临时支付账户信息；
、移动终端向支付后台发送支付请求，并将交易金额和临时支付账户信息发送给支付后台；
、支付后台验证所收到的临时支付账户信息是否正确，验证通过后检索临时支付账户信息所对应的支付账户，并将验证信息发送给移动终端；
、移动终端接收输入的账户密码，并将账户密码发送给支付后台；
、支付后台验证收到的账户密码是否正确，验证通过后，进行支付。
本实施例涉及移动终端、和支付后台（所述支付后台为具体银行的系统服务器，也可以是第三方支付系统的服务器），其中，移动终端上安装有支付客户端和公钥证书 CERT1 （公钥证书 CERT1 对应的私钥 PR1 保存在支付后台），用户在移动终端通过登陆支付客户端，与支付后台通讯，使得支付账户和用户的移动终端绑定。
移动终端登陆支付客户端后，支付后台生成的与该移动终端所绑定的支付账户对应的临时支付账户信息。移动终端每登陆支付客户端与支付后台通讯，支付后台均生成与所述移动终端所绑定的支付账户对应的临时支付账户信息，并且每次生成的临时支付账户信息均不一样。临时支付账户信息可以是支付后台生成的随机数，也可以是支付后台根据支付账户的信息（如账户号、账户名、发卡时间等）按照一定的函数关系生成的，其中，临时支付账户信息所对应的支付账户只有支付后台知道。在进行支付时支付后台与移动终端之间使用临时支付账户信息进行传输，支付后台对接收的临时支付账户信息进行验证，判断该临时支付账户信息是否合法（如是否是支付后台之前所生成的，临时支付账户信息的时间戳是否有效等），当验证合法时才根据临时支付账户信息检索对应的支付账户，并对接收到的账户密码进行验证，当账户密码验证通过后才进行支付。因此在整个支付过程中都是以临时支付账户信息来传输和验证，因支付后台每次生成的临时账户信息是不同的，并且只有支付后台知道临时支付账户信息所对应的真实支付账户，因此，即使临时支付账户信息被截获也无法得知真实的支付账户，从而提高了支付账户的信息安全。
实施例二
在上述实施例中，支付后台接收到移动终端发送的支付请求后，生成与所述支付请求对应的交易单号，并发送给移动终端；
移动终端将交易金额、交易单号和临时交易账户信息进行组包，生成动态个人凭证码，并将动态个人凭证码发送给支付后台；
支付后台接收所述动态个人凭证码，并验证动态个人凭证码中的临时支付账户信息与交易单号是否正确，验证通过后检索临时支付账户信息所对应的支付账户，并将验证信息发送给移动终端；
移动终端接收输入的账户密码，并将账户密码发送给支付后台；
支付后台验证收到的账户密码是否正确，验证通过后，进行支付。
在本实施方式中，所述动态个人凭证码还包括交易配置信息，所述交易配置信息用于标识移动终端和支付终端通讯的数据（例如动态个人凭证码）是否加密，加密可以更好地保证支付数据的传输安全。对于简单的数据，也可以不必加密。如果要加密，则移动终端发送的通讯数据需经过公钥证书 CERT1 进行加密后进行传输。其中，涉及加密算法为非对称算法，可使用 RSA 、 ECC 、国密算法等。通过设置交易配置信息，提高了动态个人凭证码在传输过程中的安全。
支付后台为每一笔的支付请求均生成对应的支付单号，在验证过程中，支付后台不仅要验证临时支付账户信息是否正确，同时进一步的验证此次支付的交易单号是否正确，只有在临时支付账户信息与交易单号均正确的情况下才能进行支付，从而防止了临时支付账户信息、账户密码被截取的情况下支付账户被多次用于支付（因临时支付账户信息是移动终端再次登陆客户端与支付后台通讯时才重新生成新的临时支付账户信息，因此，若临时支付账户信息和支付密码被截获，在此期间可能被多次用于支付），大大提高了 O2O 支付的安全。
实施例三
在上述实施方式中，为了进一步提高 O2O 支付的安全，引入了支付终端，移动终端通过支付终端将所述动态个人凭证码以及账户密码发送给支付后台进行支付，具体包括步骤：
移动终端与支付后台建立通讯连接，获取支付后台生成的与该移动终端所绑定的支付账户对应的临时支付账户信息；
移动终端将临时支付账户信息组包，生成动态个人凭证码发送给支付终端；
支付终端接收输入的交易金额，并将动态个人凭证码和交易金额发送给支付后台；
支付后台验证接收到的动态个人凭证码中的临时支付账户信息是否正确，验证通过后检索临时支付账户信息所对应的支付账户，并将验证信息发送给支付终端；
支付终端获取输入的账户密码，并发送给支付后台；
支付后台验证所述账户密码是否正确，验证通过后，进行支付。
在本实施方式中，所述支付终端可以是商户的 POS 终端，也可以是具有密码输入功能的其他电子支付装置。由移动终端将包含有动态交易码的动态个人凭证码安全发送给支付终端，用户在移动终端上完成账户密码的输入；支付终端接收到输入的账户密码后，将密文账户密码发送给支付后台，进行支付，因此避免了移动终端可同时获取账户信息及账户密码，有效防止支付账户与账户密码均被窃取，提高了在线支付的安全性。
其中，为了方便移动终端与支付终端之间的数据传输，所述移动终端可以通过声波通讯、 NFC 或蓝牙将动态个人凭证码发送给支付终端，也可以是通过其他近场通讯方式将动态个人凭证码发送给支付终端。所述支付终端可以是商户的 POS 终端，也可以是具有密码输入功能的其他电子支付装置。
进一步地，上述实施方式还包括步骤：
支付后台将交易结果信息发送给支付终端和移动终端，所述交易结果信息包含买方部分账户真实信息；
支付终端根据接收到的交易结果信息打印出纸质交易凭证。
通过打印纸质交易凭证可以避免由于在线支付无实物交易凭证所带来的纠纷。
实施例四
请参阅图 2 ，为本实施方式一种 O2O 安全支付系统的结构示意图，该支付系统包括移动终端 10 和支付后台 20 ；
所述移动终端 10 包括第一收发模块 11 、临时支付账户信息生成模块 12 、支付请求发送模块 13 和密码输入模块 14 ；
所述支付后台 20 包括第二收发模块 21 、检索模块 22 、验证模块 24 和支付模块 23 ；
临时支付账户信息生成模块 12 用于生成与移动终端所绑定的支付账户对应的临时支付账户信息；
第一收发模块 11 用于接收支付后台生成的临时支付账户信息；
支付请求发送模块 13 用于向支付后台发送支付请求，并将交易金额和临时支付账户信息发送给支付后台；
验证模块 24 用于验证所收到的临时支付账户信息是否正确；
检索模块 22 用于当所述验证模块输出临时支付账户信息验证通过时，检索临时支付账户信息所对应的支付账户；
第二收发模块 21 用于当所述验证模块输出验证通过信息时，将验证信息发送给移动终端；
密码输入模块 14 用于接收输入的账户密码；
第一收发模块 11 还用于将密码输入模块获取的账户密码发送给支付后台；
验证模块 24 还用于验证收到的账户密码是否正确；
支付模块 23 用于当所述验证模块对临时支付账户信息与账户密码的验证均通过时，进行支付。
所述临时支付账户信息生成模块 12 生成与移动终端所绑定的支付账户对应的临时支付账户信息，在支付过程中支付后台与移动终端之间使用临时支付账户信息进行传输，在整个支付过程中都是以临时支付账户信息来传输和验证，因支付后台每次生成的临时账户信息是不同的，并且只有支付后台知道临时支付账户信息所对应的真实支付账户，因此，即使临时支付账户信息被截获也无法得知真实的支付账户，从而提高了支付账户的信息安全。
在上述实施方式中，所述支付后台还包括交易单号生成模块，所述移动终端还包括动态个人凭证码生成模块；
交易单号生成模块用于生成与所述支付请求对应的交易单号并发送给移动终端；
动态个人凭证码生成模块用于将交易金额、交易单号和临时交易账户信息进行组包，生成动态个人凭证码；
所述第一收发模块用于将动态个人凭证码发送给支付后台；
验证模块还用于验证接收到的交易单号是否正确；
支付模块用于当所述验证模块对临时支付账户信息、交易单号和账户密码的验证均通过时，进行支付。
在本实施方式中，交易单号生成模块为每一笔的支付请求均生成对应的支付单号，在验证过程中，支付后台不仅要验证临时支付账户信息是否正确，同时进一步的验证此次支付的交易单号是否正确，只有在临时支付账户信息与交易单号均正确的情况下才能进行支付，从而防止了临时支付账户信息、账户密码被截取的情况下支付账户被多次用于支付（因临时支付账户信息是移动终端再次登陆客户端与支付后台通讯时才重新生成新的临时支付账户信息，因此，若临时支付账户信息和支付密码被截获，在此期间可能被多次用于支付），大大提高了 O2O 支付的安全
本发明还提供一种安全支付后台，该支付后台包括收发模块、临时支付账户信息生成模块、支付请求发送模块和密码输入模块；
临时支付账户信息生成模块用于生成与移动终端所绑定的支付账户对应的临时支付账户信息；
收发模块用于将所述临时支付账户信息发送给移动终端；
验证模块用于验证所收到的临时支付账户信息是否正确；
检索模块用于当所述验证模块输出临时支付账户信息验证通过时，检索临时支付账户信息所对应的支付账户；
收发模块还用于当所述验证模块输出验证通过信息时，将验证信息发送给移动终端；
验证模块还用于验证收到的账户密码是否正确；
支付模块用于当所述验证模块对临时支付账户信息与账户密码的验证均通过时，进行支付。
其中，所述支付后台还包括交易单号生成模块；
交易单号生成模块用于生成与所述支付请求对应的交易单号并发送给移动终端；
验证模块还用于验证接收到的交易单号是否正确；
支付模块用于当所述验证模块对临时支付账户信息、交易单号和账户密码的验证均通过时，进行支付。
综上所述，区别于现有技术中 O2O 支付中支付后台与移动终端之间传输的是支付账户的真实信息，本发明中移动终端每登陆支付客户端与支付后台进行通讯时，支付后台均根据移动终端所绑定的支付账户生成临时支付账户信息，在整个支付过程中都是以临时支付账户信息来传输和验证，因支付后台每次生成的临时账户信息是不同的，并且只有支付后台知道临时支付账户信息所对应的真实支付账户，因此，即使临时支付账户信息被截获也无法得知真实的支付账户，从而大大提高了 O2O 支付的安全性。进一步地，支付后台为每一笔支付生成对应的交易单号，支付后台进一步验证每笔支付的交易单号的正确性，只有临时支付账户信息与交易单号验证均通过的时候才进行交易，从而防止了即使在临时支付账户信息、账户密码被截取的情况下支付账户也不会被多次使用。
示例
用户通过手机（移动终端）下载支付客户端并绑定相应的银行卡（银行卡中包含现金账户、优惠券账户、积分账户等，即支付方式）；
用户通过登陆手机支付终端与支付后台通讯，支付后台根据所绑定的银行卡生成临时支付账户信息并下发给手机。
当用户需要购买商品时，通过手机将支付请求发送给支付后台，支付后台生成相应的交易单号发送给手机；
用户在手机上通过浏览购物网页选择购买的商品，并获取商品的金额；
支付时手机将交易金额、临时支付账户信息和交易单号组包，生成动态个人凭证码，并将动态个人凭证码发送给支付后台；
支付后台验证接收的到的个人凭证码中的临时支付账户信息、交易单号是否正确，验证通过后检索临时支付账户信息对应的支付账户，并将验证信息（支付金额、收方信息等）发送给手机；
手机显示接收到的验证信息，获取用户输入的账户密码，并将账户密码发送给支付后台；
支付后台验证所述账户密码是否正确，验证通过后，进行支付。
以上所述仅为本发明的实施例，并非因此限制本发明的专利范围，凡是利用本发明说明书及附图内容所作的等效结构或等效流程变换，或直接或间接运用在其他相关的技术领域，均同理包括在本发明的专利保护范围内。
 

Claims (10)

  1. 一种O2O安全支付方法，其特征在于，包括步骤：
    移动终端与支付后台建立通讯连接，获取支付后台生成的与该移动终端所绑定的支付账户对应的临时支付账户信息；
    移动终端向支付后台发送支付请求，并将交易金额和临时支付账户信息发送给支付后台；
    支付后台验证所收到的临时支付账户信息是否正确，验证通过后检索临时支付账户信息所对应的支付账户，并将验证信息发送给移动终端；
    移动终端接收输入的账户密码，并将账户密码发送给支付后台；
    支付后台验证收到的账户密码是否正确，验证通过后，进行支付。
  2. 根据权利要求1所述的O2O安全支付方法，其特征在于，还包括：
    支付后台接收到移动终端发送的支付请求后，生成与所述支付请求对应的交易单号，并发送给移动终端；
    移动终端将交易金额、交易单号和临时交易账户信息进行组包，生成动态个人凭证码，并将动态个人凭证码发送给支付后台；
    支付后台接收所述动态个人凭证码，并验证动态个人凭证码中的临时支付账户信息与交易单号是否正确，验证通过后检索临时支付账户信息所对应的支付账户，并将验证信息发送给移动终端；
    移动终端接收输入的账户密码，并将账户密码发送给支付后台；
    支付后台验证收到的账户密码是否正确，验证通过后，进行支付。
  3. 根据权利要求2所述的O2O安全支付方法，其特征在于，所述组包生成的动态个人凭证码还包括交易配置信息，其中，交易配置信息标识了移动终端发送的数据是否是密文，若标志了是密文，则支付终端无法解密获取这些关键数据的原始数据，支付终端只能原样把该动态个人凭证码密文以及交易配置信息上传到支付后台处理。
  4. 根据权利要求1所述的O2O安全支付方法，其特征在于，移动终端通过支付终端将所述动态个人凭证码以及账户密码发送给支付后台进行支付，具体包括步骤：
    移动终端与支付后台建立通讯连接，获取支付后台生成的与该移动终端所绑定的支付账户对应的临时支付账户信息；
    移动终端将临时支付账户信息组包，生成动态个人凭证码发送给支付终端；
    支付终端接收输入的交易金额，并将动态个人凭证码和交易金额发送给支付后台；
    支付后台验证接收到的动态个人凭证码中的临时支付账户信息是否正确，验证通过后检索临时支付账户信息所对应的支付账户，并将验证信息发送给支付终端；
    支付终端获取输入的账户密码，并发送给支付后台；
    支付后台验证所述账户密码是否正确，验证通过后，进行支付。
  5. 根据权利要求4所述的O2O安全支付方法，其特征在于，所述移动终端通过声波通讯、NFC或蓝牙将动态个人凭证码发送给支付终端。
  6. 根据权利要求4所述的O2O安全支付方法，其特征在于，还包括步骤：
    支付后台将交易结果信息发送给支付终端和移动终端，所述交易结果包含支付方部分账户真实信息；
    支付终端根据接收到的交易结果信息打印出纸质交易凭证。
  7. 一种O2O安全支付系统，其特征在于，包括移动终端和支付后台；
    所述移动终端包括第一收发模块、临时支付账户信息生成模块、支付请求发送模块和密码输入模块；
    所述支付后台包括第二收发模块、检索模块、验证模块和支付模块；
    临时支付账户信息生成模块用于生成与移动终端所绑定的支付账户对应的临时支付账户信息；
    第一收发模块用于接收支付后台生成的临时支付账户信息；
    支付请求发送模块用于向支付后台发送支付请求，并将交易金额和临时支付账户信息发送给支付后台；
    验证模块用于验证所收到的临时支付账户信息是否正确；
    检索模块用于当所述验证模块输出临时支付账户信息验证通过时，检索临时支付账户信息所对应的支付账户；
    第二收发模块用于当所述验证模块输出验证通过信息时，将验证信息发送给移动终端；
    密码输入模块用于接收输入的账户密码；
    第一收发模块还用于将密码输入模块获取的账户密码发送给支付后台；
    验证模块还用于验证收到的账户密码是否正确；
    支付模块用于当所述验证模块对临时支付账户信息与账户密码的验证均通过时，进行支付。
  8. 根据权利要求7所述的O2O安全支付系统，其特征在于，所述支付后还包括交易单号生成模块，所述移动终端还包括动态个人凭证码生成模块；
    交易单号生成模块用于生成与所述支付请求对应的交易单号并发送给移动终端；
    动态个人凭证码生成模块用于将交易金额、交易单号和临时交易账户信息进行组包，生成动态个人凭证码；
    所述第一收发模块用于将动态个人凭证码发送给支付后台；
    验证模块还用于验证接收到的交易单号是否正确；
    支付模块用于当所述验证模块对临时支付账户信息、交易单号和账户密码的验证均通过时，进行支付。
  9. 一种安全支付后台，其特征在于，包括收发模块、临时支付账户信息生成模块、支付请求发送模块和密码输入模块；
    临时支付账户信息生成模块用于生成与移动终端所绑定的支付账户对应的临时支付账户信息；
    收发模块用于将所述临时支付账户信息发送给移动终端；
    验证模块用于验证所收到的临时支付账户信息是否正确；
    检索模块用于当所述验证模块输出临时支付账户信息验证通过时，检索临时支付账户信息所对应的支付账户；
    收发模块还用于当所述验证模块输出验证通过信息时，将验证信息发送给移动终端；
    验证模块还用于验证收到的账户密码是否正确；
    支付模块用于当所述验证模块对临时支付账户信息与账户密码的验证均通过时，进行支付。
  10. 根据权利要求9所述的O2O安全支付后台，其特征在于，还包括交易单号生成模块；
    交易单号生成模块用于生成与所述支付请求对应的交易单号并发送给移动终端；
    验证模块还用于验证接收到的交易单号是否正确；
    支付模块用于当所述验证模块对临时支付账户信息、交易单号和账户密码的验证均通过时，进行支付。
     
PCT/CN2015/070703 2014-03-14 2015-01-14 一种o2o安全支付方法、系统和一种安全支付后台 WO2015135393A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410096355.5 2014-03-14
CN201410096355.5A CN103903140B (zh) 2014-03-14 2014-03-14 一种o2o安全支付方法、系统和一种安全支付后台

Publications (1)

Publication Number Publication Date
WO2015135393A1 true WO2015135393A1 (zh) 2015-09-17

Family

ID=50994450

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/070703 WO2015135393A1 (zh) 2014-03-14 2015-01-14 一种o2o安全支付方法、系统和一种安全支付后台

Country Status (2)

Country Link
CN (1) CN103903140B (zh)
WO (1) WO2015135393A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2022213409A1 (zh) * 2021-04-06 2022-10-13 中晟发展有限公司 电子支付中数据安全控制方法和装置

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103903140B (zh) * 2014-03-14 2018-05-11 福建联迪商用设备有限公司 一种o2o安全支付方法、系统和一种安全支付后台
CN103914774B (zh) * 2014-03-14 2017-05-24 福建联迪商用设备有限公司 一种o2o安全支付方法和系统
CN105590198B (zh) * 2014-10-30 2020-12-15 中国银联股份有限公司 一种二维码支付方法以及支付系统
CN106157021A (zh) * 2015-04-28 2016-11-23 中兴通讯股份有限公司 付款处理方法及装置
CN107180347B (zh) * 2016-03-10 2021-06-29 中兴通讯股份有限公司 支付方法及装置、终端
US11250432B2 (en) * 2016-04-13 2022-02-15 America Express Travel Related Services Company, Inc. Systems and methods for reducing fraud risk for a primary transaction account
CN108647971A (zh) * 2018-07-18 2018-10-12 北京东方英卡数字信息技术有限公司 一种用户支付中账户安全方法和智能卡系统
CN109345254A (zh) * 2018-09-06 2019-02-15 福建创识科技股份有限公司 支付方法、服务端及支付系统
CN110046884A (zh) * 2018-12-28 2019-07-23 中国银联股份有限公司 交易数据数据处理方法及其系统、以及用户终端

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101067856A (zh) * 2007-06-28 2007-11-07 向亚峰 一种实现网络支付的方法及系统
CN101351809A (zh) * 2005-09-06 2009-01-21 维萨美国股份有限公司 用于接近式设备中安全账号的系统和方法
CN101383709A (zh) * 2008-10-17 2009-03-11 阿里巴巴集团控股有限公司 提高网络账户和密码安全的系统及方法
WO2013071287A1 (en) * 2011-11-13 2013-05-16 Millind Mittal System and method of electronic payment using payee provided transaction identification codes
CN103903140A (zh) * 2014-03-14 2014-07-02 福建联迪商用设备有限公司 一种o2o安全支付方法、系统和一种安全支付后台

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1941009A (zh) * 2005-09-29 2007-04-04 普天信息技术研究院 一种用移动通信终端进行费用支付的实现方法
CN1804889A (zh) * 2005-12-30 2006-07-19 中国工商银行股份有限公司 一种利用手机进行支付的pos支付系统及其方法
CN101034449A (zh) * 2007-04-17 2007-09-12 华中科技大学 实现电子支付的方法、系统及移动终端
CN102831734A (zh) * 2011-06-15 2012-12-19 上海博路信息技术有限公司 一种移动终端客户端的支付方法

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101351809A (zh) * 2005-09-06 2009-01-21 维萨美国股份有限公司 用于接近式设备中安全账号的系统和方法
CN101067856A (zh) * 2007-06-28 2007-11-07 向亚峰 一种实现网络支付的方法及系统
CN101383709A (zh) * 2008-10-17 2009-03-11 阿里巴巴集团控股有限公司 提高网络账户和密码安全的系统及方法
WO2013071287A1 (en) * 2011-11-13 2013-05-16 Millind Mittal System and method of electronic payment using payee provided transaction identification codes
CN103903140A (zh) * 2014-03-14 2014-07-02 福建联迪商用设备有限公司 一种o2o安全支付方法、系统和一种安全支付后台

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2022213409A1 (zh) * 2021-04-06 2022-10-13 中晟发展有限公司 电子支付中数据安全控制方法和装置

Also Published As

Publication number Publication date
CN103903140A (zh) 2014-07-02
CN103903140B (zh) 2018-05-11

Similar Documents

Publication Publication Date Title
WO2015135393A1 (zh) 一种o2o安全支付方法、系统和一种安全支付后台
WO2015135384A1 (zh) 一种o2o安全支付方法、系统和一种pos终端
CN102202300B (zh) 一种基于双通道的动态密码认证系统及方法
CN107609866B (zh) 基于虚拟货币的电子支付、电子收款方法及装置
TW202018612A (zh) 身份認證、號碼保存和發送、綁定號碼方法、裝置及設備
WO2015135392A1 (zh) 一种o2o安全支付方法和系统
TWI591553B (zh) Systems and methods for mobile devices to trade financial documents
JP2013512503A (ja) 安全なモバイル決済処理
JP2009526321A (ja) 変化する識別子を使用して販売時点情報管理端末において取引を実行するためのシステム
CN108694580B (zh) 一种基于量子加密的支付系统及方法
WO2016118087A1 (en) System and method for secure online payment using integrated circuit card
CN103489104A (zh) 安全支付方法及系统
TWI775288B (zh) 支付令牌申請方法、設備、系統和伺服器
CN103714455A (zh) 一种c2c电子交易平台的个人信息保护方法
CN112513904B (zh) 一种数字资产交易控制方法、装置、终端设备及存储介质
WO2012072022A1 (zh) 一种远程支付方法
CN108537536A (zh) 一种基于策略标识的安全交易方法和系统
WO2018113508A1 (zh) 基于密文的身份验证方法
US20210390546A1 (en) Systems and Methods for Secure Transaction Processing
WO2017175926A1 (ko) Id 기반 공개 키 암호화를 이용한 전자 지불 방법 및 전자 디바이스
US20160034859A1 (en) System and method for cashless transactions
Feifei Research on security of mobile payment model based on trusted third party
Tiwari et al. An Efficient and Secure Micro-payment Transaction Using Shell Cryptography
WO2017012064A1 (zh) 网上交易方法、装置和系统
WO2017012066A1 (zh) 网上交易方法、装置和系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15761407

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 15761407

Country of ref document: EP

Kind code of ref document: A1