WO2016131252A1

WO2016131252A1 - Password verification method, apparatus and system

Info

Publication number: WO2016131252A1
Application number: PCT/CN2015/089672
Authority: WO
Inventors: 顾金存; 邵炳军
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-07-21
Filing date: 2015-09-15
Publication date: 2016-08-25
Also published as: CN106375085A; CN106375085B

Abstract

A password verification method, apparatus and system. The method comprises: generating a payment password to be verified by sensing the vibration of a motor of a payment terminal (S102); sending payment information about the payment terminal and the payment password to a payment server (S104); and receiving a feedback result generated by the payment server according to the payment information and the payment password, wherein the feedback result comprises: in the case where the verification of the payment password passes, the payment server completing a payment function according to the payment information and generating payment success information (S104). By means of the present solution, the problem in the related art that property safety of a user cannot be guaranteed due to the fact that payment means, such as password input and short message check and confirmation, are complex and can be easily cracked to acquire user information and a password.

Description

Password verification method, device and system

Technical field

The present invention relates to the field of communications, and in particular to a method, device and system for verifying a password.

Background technique

With the popularity of smart mobile terminals, the number of users of smart mobile terminals is also increasing year by year. According to the statistics of Canalys, as the world's leading smartphone market, customer loyalty competition in the Chinese market is increasingly fierce, and major smartphone manufacturers are looking for innovative solutions to provide users with smarter and more convenient user experiences. Improve your competitive advantage. At the same time, with the rapid development of mobile Internet, the further integration of smart phones with the Internet and finance, mobile payment clients such as mobile online Alipay, WeChat wallet and mobile banking have gradually become the new favorite of mobile internet finance due to their convenience, simplicity and speed. . The online payment of mobile phones is carried out by deducting payment services by binding bank cards and third-party accounts. However, due to the existence of mobile phone system vulnerabilities, phishing messages, and Trojan horses, the online payment security of mobile phones has been seriously threatened.

However, when the password is verified in the related art, as shown in FIG. 1, FIG. 1 is a schematic diagram of a method for verifying a password in the related art. When the user uses the payment application payment on the payment terminal, in addition to the payment interface, In addition to the payment amount, payee, payment account and other information, the user is also required to enter a password, which is generally referred to as a payment password. The payment password and the login password have different functions. For security reasons, users are usually required to set different values. Among the three passwords, the payment password is used most frequently and is also the most vulnerable to theft. After the terminal detecting device sends the payment information of the payment terminal, for example, the total price of the product to the mobile phone, the mobile phone pops up the payment confirmation interface, and the user inputs the payment password (may also need to input the short message verification code), and after the payment password verification is passed, the payment is completed. However, in the process of inputting the payment password, the user may be peeked by others, or captured by the Trojan horse program, causing the payment password to be leaked, and the payment means such as password input and SMS verification confirmation in the related art are complicated and easily cracked, and acquired. User information and passwords make the security of user property not guaranteed.

In response to the above problems, no effective solution has been proposed yet.

Summary of the invention

The invention provides a password verification method, device and system, so as to at least solve the related art, such as password input, SMS verification confirmation and other payment means are complicated and easy to be cracked, and obtain user information and password, so that user property security cannot be obtained. The issue of security.

According to an aspect of the present invention, a method for verifying a password is provided, including: inductive payment terminal a motor vibration, generating a payment password to be verified; transmitting payment information and a payment password of the payment terminal to the payment server; and receiving a feedback result generated by the payment server according to the payment information and the payment password, wherein the feedback result includes: verifying the payment password In the case of passing, the payment server generates payment success information based on the payment information completing the payment function.

Optionally, generating a payment password to be verified by inducing a motor vibration of the payment terminal, comprising: inducing the motor of the payment terminal to vibrate according to the preset vibration control information, generating vibration information; and converting the induced vibration information into a binary Information, generating a payment password to be verified.

Optionally, before the generating the payment password by inducing the motor vibration of the payment terminal, the method further includes: the payment terminal receiving the input data payment password; the payment terminal converting the input data payment password to generate vibration control information; and the payment terminal The vibration control information and the preset random code are encrypted to generate encrypted data; the payment terminal saves the encrypted data to the payment server.

Optionally, the feedback result generated by the payment server according to the payment information and the payment password includes: the payment server decrypts the pre-stored encrypted data, and obtains the vibration control information; the vibration control information obtained by the payment server after decryption The payment password to be verified is matched; if the matching is successful, the payment password verification to be verified is passed, and the payment server completes the payment function according to the payment information, and generates payment success information.

Optionally, the vibration control information includes: the motor vibrates or does not vibrate during any one of the vibration periods.

Optionally, the converted vibration control information is encrypted by using any of the following encryption methods: MD5, RC2, DES, and AES.

According to another aspect of the present invention, a password verification apparatus is provided, comprising: a processing module configured to generate a payment password to be verified by sensing a motor vibration of the payment terminal; and a sending module configured to send payment information of the payment terminal And a payment password to the payment server; and a receiving module, configured to receive a feedback result generated by the payment server according to the payment information and the payment password, wherein the feedback result comprises: in case the payment password verification is passed, the payment server completes the payment according to the payment information The function generates payment success information.

Optionally, the processing module includes: a sensing module, configured to sense that the motor of the payment terminal vibrates according to preset vibration control information to generate vibration information; and the conversion module is configured to convert the induced vibration information into binary information to generate The payment password to be verified.

According to another aspect of the present invention, a password verification system is provided, comprising: a payment terminal configured to control a motor to vibrate according to preset vibration control information; and a verification terminal configured to inductively compensate a motor vibration of the terminal, Generating a payment password to be verified; and a payment server configured to receive the payment information of the payment terminal and the payment password to be verified, and generate a feedback result according to the payment information and the payment password, wherein The feedback result includes: in the case that the payment password verification is passed, the payment server generates the payment success information according to the payment information completing the payment function.

Through the invention, by inducting the motor vibration of the payment terminal, generating a payment password to be verified, transmitting payment information and payment password of the payment terminal to the payment server, and receiving a feedback result generated by the payment server according to the payment information and the payment password, wherein the feedback The result includes: in the case that the payment password verification is passed, the payment server generates a payment success information according to the payment information to complete the payment function, and solves the related art that the payment means such as password input and short message verification confirmation are complicated and easy to be cracked, and Obtaining user information and passwords, so that the security of the user's property cannot be guaranteed, and realizing the user to convert the payment password into a vibration payment password, that is, when the user needs to pay, the payment terminal and the receiving machine are in close contact, and the user does not need to manually input. It is done by the vibration of the mobile phone motor, which eliminates the user's frequent input of the payment password, and also ensures the technical effect of the security of the payment password.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a schematic diagram of a method for verifying a password in the related art;

2 is a flowchart of a method for verifying a password according to an embodiment of the present invention;

3 is a schematic diagram of a method for verifying a password according to an embodiment of the present invention;

4 is a schematic diagram of an optional password verification method according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a password verification apparatus according to an embodiment of the present invention; FIG.

FIG. 6 is a schematic structural diagram of a password verification system according to an embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

A method for verifying a password is provided in this embodiment. FIG. 2 is a flowchart of a method for verifying a password according to an embodiment of the present invention. As shown in FIG. 2, the process includes the following steps:

Step S102: Generate a payment password to be verified by inducing motor vibration of the payment terminal.

In the above step S102 of the present application, the terminal detecting device may be used to sense the motor vibration of the payment terminal, and generate a payment password to be verified. First, the user establishes a connection between the payment terminal and the terminal detection device, wherein the connection can be implemented in the following manner: WI-FI (Wireless-Fidelity), NFC (Near Field Communication), mobile Network, etc. Secondly, when the payment password is required, the user places the payment terminal at the vibration receiving end of the terminal detecting device. At this time, the terminal detecting device generates a payment password to be verified by sensing the motor vibration of the payment terminal.

Step S104: Send payment information and a payment password of the payment terminal to the payment server.

In the above step S104, the terminal detecting device may send the payment information and the payment password of the payment terminal to the payment server, where the payment information of the payment terminal may be the total price of the goods obtained by the terminal detecting device by scanning the products purchased by the user one by one. At this time, the terminal detecting device transmits the total commodity price and the payment password to be verified generated in the above step S102 to the payment server.

Step S106: Receive a feedback result generated by the payment server according to the payment information and the payment password, wherein the feedback result comprises: in the case that the payment password verification is passed, the payment server generates the payment success information according to the payment information completing the payment function.

In the above step S106 of the present application, in the case that the payment password verification to be verified is passed, the payment program in the payment server deducts the total commodity price from the user account, and generates payment success information. At this time, the terminal detecting device and the user receive the payment server. The feedback result of the payment success generated based on the payment information and the payment password.

The method for verifying the password provided by the embodiment generates a payment password to be verified by inducing the motor vibration of the payment terminal, and sends the payment information and the payment password of the payment terminal to the payment server, and the receiving payment server generates the payment information according to the payment information and the payment password. The feedback result includes: in the case that the payment password verification is passed, the payment server generates a payment success information according to the payment information completion function, and the user converts the payment password into a vibration payment password, that is, the user is When payment is required, the payment terminal and the receiving machine are in close contact, and the user does not need to manually input, but is completed by the vibration of the mobile phone motor, thereby eliminating the trouble that the user frequently inputs the payment password, and also ensures the security of the payment password. effect.

The method for verifying the password of the embodiment of the present invention is further described below with reference to specific examples. The detailed description has been omitted and will not be described again. FIG. 3 is a schematic diagram of a method for verifying a password according to an embodiment of the present invention. As shown in FIG. 3, the process of implementing payment by a user through the method for verifying a password of the present invention may include the following steps:

First, the user establishes a connection between the payment terminal and the terminal detecting device, for example, by using a connection mode such as WI-FI, NFC, or mobile network. Specifically, the terminal detecting device herein may be a cash register;

Then, the terminal detecting device scans the commodities one by one to obtain payment information of the payment terminal, such as the total price of the commodity;

Then, the terminal detecting device sends the total price of the commodity to the payment terminal;

At this time, the user places the payment terminal on the vibration receiving device of the terminal detecting device, and the payment terminal completes the payment password input by shaking;

Finally, the payment server's payment program deducts the total price of the product from the user's account and the payment is completed.

Optionally, in this embodiment, generating a payment password to be verified by inducing a motor vibration of the payment terminal, including:

Step S1021: The motor of the inductive payment terminal vibrates according to the preset vibration control information to generate vibration information.

Step S1023: Convert the induced vibration information into binary information, and generate a payment password to be verified.

It should be noted that the vibration control information may include any one or more of the following data: the order in which the motor vibrates and does not vibrate, the number of times the vibration occurs, the number of times of no vibration, the period of the vibration of each vibration, and the duration of the vibration period. . After the vibration receiving device of the terminal detecting device senses the vibration information, the induced vibration information can be converted into binary information that can be recognized, for example, 1 represents a period of vibration, and 0 represents a period of not shaking.

Optionally, the vibration control information is: vibration 2 times, no vibration 3 times, the vibration period is 1 s, and the period when no vibration is 1 s, the order is: vibration, vibration, no vibration, no vibration, no vibration After the mobile terminal vibrates according to the vibration control information, the vibration receiving information of the terminal detecting device senses the vibration control information to vibrate, and generates vibration information. At this time, the converted binary information is: 11000, that is, the payment password to be verified. Is 0.

Optionally, in this embodiment, before generating the payment password by inductively paying the motor vibration of the terminal, the method further includes:

Step S1001: The payment terminal receives the input data payment password.

Step S1003: The payment terminal performs format conversion on the input data payment password to generate vibration control information.

Step S1005: The payment terminal encrypts the vibration control information and the preset random code to generate encrypted data.

Step S1007: The terminal saves the encrypted data to the payment server.

Optionally, in this embodiment, the feedback result generated by the payment server according to the payment information and the payment password includes:

Step S1051: The payment server decrypts the pre-stored encrypted data to obtain the vibration control information.

Step S1053: The payment server matches the vibration control information obtained after decryption with the payment password to be verified.

Step S1055: In the case that the matching is successful, the payment password verification to be verified is passed, and the payment server completes the payment function according to the payment information, and generates payment success information.

In the step of the feedback result generated by the payment server according to the payment information and the payment password, the payment server decrypts the pre-stored encrypted vibration control information, and performs the decrypted vibration control information and the payment password to be verified. Matching, in the case that the matching is successful, the payment password verification to be verified is passed, and the payment server completes the payment function according to the payment information, and generates payment success information. At this time, the relevant fee is deducted from the user account, and the terminal is notified to the detection device and the user completes the payment. .

Optionally, in the embodiment, the vibration control information includes: the motor vibrates or does not vibrate in any one of the vibration periods.

Optionally, in this embodiment, the converted vibration control information is encrypted by using any of the following encryption methods: MD5 (Message-Digest Algorithm 5, information-digest algorithm), RC2 (symmetric packet encryption algorithm), DES (Data Encryption Standard, Data Encryption Standard) and AES (Advanced Encryption Standard).

The method for verifying the password of the embodiment of the present invention is further described below with reference to specific embodiments. The detailed description has been omitted and will not be described again. FIG. 4 is a schematic diagram of an optional password verification method according to an embodiment of the present invention. As shown in FIG. 4, the process of implementing payment by the user through the password verification method of the present invention may include the following steps:

First, before generating the payment password by sensing the motor vibration of the payment terminal, the payment terminal receives the input data payment password, and the payment terminal formats the input data payment password to generate vibration control information. Further, the payment terminal may adopt The MD5, RC2, DES and the like encrypt the vibration control information, and the payment terminal saves the encrypted vibration control information to the payment server.

Secondly, when the user is required to input the payment password, the user places the payment terminal at the vibration receiving end of the terminal detecting device, and the payment program controls the motor to generate a corresponding vibration according to the vibration control information and the transaction random code preset by the user.

Then, the terminal detecting device converts the vibration information into binary according to the received vibration information, and sends it to the payment server in the background of the payment program, and the payment server decrypts and generates the payment password according to the transaction random code and the vibration control information. The payment server matches the decrypted payment password with the payment password to be verified. If the matching is successful, the payment password verification to be verified is passed, and after the verification is passed, the related fee is deducted from the user account, and the terminal detecting device is notified. And the user pays for the completion.

It can be seen that, in the related art, in the process of inputting a payment password by a user, the user may be peeked by the user, or the user is captured by the Trojan horse program, causing the leakage of the payment password. The present invention proposes a motor vibration by the inductive payment terminal. Generating a payment password to be verified, sending payment information and a payment password of the payment terminal to the payment server, and receiving a feedback result generated by the payment server according to the payment information and the payment password, wherein the feedback result includes: in the case that the payment password is verified, The payment server generates a payment success information according to the payment information to complete the payment function, and realizes that the user converts the payment password into a vibration payment password, that is, when the user needs to pay, the payment terminal and the receiving machine are in close contact, and the user does not need to manually input. It is done by the vibration of the mobile phone motor, which eliminates the user's frequent input of the payment password, and also ensures the technical effect of the security of the payment password.

It should be noted that, for the foregoing method embodiments, for the sake of simple description, they are all expressed as a series of action combinations, but those skilled in the art should understand that the present invention is not limited by the described action sequence. Because certain steps may be performed in other sequences or concurrently in accordance with the present invention. In addition, those skilled in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods of various embodiments of the present invention.

In this embodiment, a password verification device is further provided, which is used to implement the foregoing embodiments and preferred embodiments, and has not been described again. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

5 is a schematic structural diagram of a device for verifying a password according to an embodiment of the present invention. As shown in FIG. 5, the device includes: a processing module 51 configured to generate a payment password to be verified by sensing motor vibration of the payment terminal; and sending module 53 And sending the payment information and the payment password of the payment terminal to the payment server; and the receiving module 55 is configured to receive a feedback result generated by the payment server according to the payment information and the payment password, wherein the feedback result comprises: In the case, the payment server generates payment success information based on the payment information completing the payment function.

Optionally, in the embodiment of the present invention, the processing module includes: a sensing module, wherein the motor of the inductive payment terminal is configured to vibrate according to preset vibration control information to generate vibration information; and the conversion module is configured to sense The vibration information that should be obtained is converted into binary information, and a payment password to be verified is generated.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the modules are located in multiple In the processor.

A password verification system is also provided in this embodiment. 6 is a schematic structural diagram of a password verification system according to an embodiment of the present invention. As shown in FIG. 6, the system includes: a payment terminal 61 configured to control a motor to vibrate according to preset vibration control information; and verifying the terminal 63, Is configured to generate a payment password to be verified by sensing a motor vibration of the payment terminal; and a payment server 65 configured to receive the payment information of the payment terminal and the payment password to be verified, and generate a feedback result according to the payment information and the payment password, The feedback result includes: in the case that the payment password verification is passed, the payment server generates the payment success information according to the payment information completing the payment function.

Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

S1, generating a payment password to be verified by inducting a motor vibration of the payment terminal;

S2, sending payment information and a payment password of the payment terminal to the payment server;

S3. Receive a feedback result generated by the payment server according to the payment information and the payment password. The feedback result includes: when the payment password verification is passed, the payment server generates the payment success information according to the payment information completing the payment function.

Optionally, the storage medium is further arranged to store program code for performing the following steps:

Optionally, in the embodiment, the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), and a Random Access Memory (RAM). A variety of media that can store program code, such as a hard disk, a disk, or an optical disk.

Optionally, in this embodiment, the processor performs the sensing by using the stored program code in the storage medium. The motor of the payment terminal vibrates to generate a payment password to be verified, including: the motor of the inductive payment terminal vibrates according to the preset vibration control information, generates vibration information; converts the induced vibration information into binary information, and generates a to-be-verified Pay the password.

Optionally, in this embodiment, the processor performs, before generating the payment password by the motor vibration of the inductive payment terminal according to the stored program code in the storage medium, the method further includes: the payment terminal receiving the input data payment password; The terminal converts the input data payment password into a format to generate vibration control information; the payment terminal encrypts the vibration control information and the preset random code to generate encrypted data; and the payment terminal saves the encrypted data to the payment server.

Optionally, in this embodiment, the processor executes the feedback result generated by the payment server according to the payment information and the payment password according to the stored program code in the storage medium, including: the payment server decrypts the pre-stored encrypted data, and obtains To the vibration control information; the payment server matches the vibration control information obtained after the decryption with the payment password to be verified; if the matching is successful, the payment password verification to be verified is passed, and the payment server completes the payment function according to the payment information, and generates a payment. Success information.

Optionally, in this embodiment, the processor performing the vibration control information according to the stored program code in the storage medium includes: the motor vibrates or does not vibrate in any one of the vibration periods.

Optionally, in this embodiment, the processor performs encryption on the converted vibration control information by using any one of the following encryption methods according to the stored program code in the storage medium: MD5, RC2, DES, and AES.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

As described above, the method, device, and system for verifying a password provided by the embodiments of the present invention have the following beneficial effects: the payment means such as password input and SMS verification confirmation are complicated and easily cracked, and user information is obtained. And passwords that make the security of the user's property unsafe.

Claims

A method for verifying a password, comprising:

Generating a payment password to be verified by sensing motor vibration of the payment terminal;

Sending payment information of the payment terminal and the payment password to a payment server;

Receiving a feedback result generated by the payment server according to the payment information and the payment password, wherein the feedback result includes: when the payment password verification is passed, the payment server completes according to the payment information A payment success message is generated by the payment function.
The method according to claim 1, wherein the generating a payment password to be verified is generated by sensing a motor vibration of the payment terminal, comprising:

Inducing the motor of the payment terminal to vibrate according to preset vibration control information to generate vibration information;

Converting the sensed vibration information into binary information, and generating the payment password to be verified.
The method according to claim 1 or 2, wherein the method further comprises: before generating a payment password by sensing motor vibration of the payment terminal, the method further comprising:

Receiving, by the payment terminal, an input data payment password;

The payment terminal performs format conversion on the input data payment password to generate the vibration control information;

The payment terminal encrypts the vibration control information and the preset random code to generate encrypted data;

The payment terminal saves the encrypted data to the payment server.
The method according to claim 3, wherein the feedback result generated by the payment server according to the payment information and the payment password comprises:

The payment server decrypts the pre-stored encrypted data to obtain the vibration control information;

The payment server matches the vibration control information obtained after decryption with the payment password to be verified;

If the matching is successful, the payment password verification to be verified is passed, and the payment server completes the payment function according to the payment information, and generates the payment success information.
The method of claim 3 wherein said vibration control information comprises said motor vibrating or not vibrating during any one of the shock periods.
The method according to claim 3, wherein said converted vibration control information is encrypted by any of the following encryption methods: MD5, RC2, DES and AES.
A password verification device comprising:

The processing module is configured to generate a payment password to be verified by sensing motor vibration of the payment terminal;

a sending module, configured to send payment information of the payment terminal and the payment password to a payment server;

a receiving module, configured to receive a feedback result generated by the payment server according to the payment information and the payment password, where the feedback result includes: in case the payment password verification is passed, the payment server is configured according to The payment information completes the payment function to generate payment success information.
The verification device according to claim 7, wherein the processing module comprises:

The sensing module is configured to sense that the motor of the payment terminal vibrates according to preset vibration control information to generate vibration information;

The conversion module is configured to convert the sensed vibration information into binary information, and generate the payment password to be verified.
The verification device according to claim 8, wherein said vibration control information comprises: said motor vibrating or not vibrating during any one of the vibration periods.
A password verification system comprising:

a payment terminal configured to control the motor to vibrate according to preset vibration control information;

a verification terminal configured to generate a payment password to be verified by sensing a motor vibration of the payment terminal;

a payment server, configured to receive the payment information of the payment terminal and the payment password to be verified, and generate a feedback result according to the payment information and the payment password, wherein the feedback result includes: In the case where the payment password verification is passed, the payment server generates payment success information by completing the payment function according to the payment information.