WO2016202108A1

WO2016202108A1 - Nfc payment method, nfc payment system and mobile terminal

Info

Publication number: WO2016202108A1
Application number: PCT/CN2016/080834
Authority: WO
Inventors: 张子敬; 张晴
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-06-19
Filing date: 2016-04-29
Publication date: 2016-12-22
Also published as: CN105631662A

Abstract

Proposed are an NFC payment method, an NFC payment system and a mobile terminal. The NFC payment method comprises: judging whether to receive a discovery request from a payment acceptance device; if a judgement result is yes, acquiring first current geographic location information about the payment acceptance device; judging whether the first current geographic location information and pre-stored geographic location information about the mobile terminal belong to the same region; if so, completing NFC payment, otherwise, stopping payment. The technical solution of the present invention avoids the risk in a transaction that payment is conducted elsewhere after sensitive information about a user is maliciously reproduced or forged, and improves the payment security, thereby improving the user experience.

Description

NFC payment method, NFC payment system and mobile terminal

This application claims priority to Chinese Patent Application No. 201510346562.6, entitled "NFC Payment Method, NFC Payment System and Mobile Terminal", which is filed on June 19, 2015, the entire contents of which are incorporated by reference. In this application.

Technical field

The present invention relates to the field of terminal technologies, and in particular, to an NFC payment method, an NFC payment system, and a mobile terminal.

Background technique

At present, card simulation is implemented on a mobile phone equipped with NFC (Near Field Communication) function. There are two solutions: one is a hardware-based traditional SE (Security Element) solution; the other is based on Host-based card emulation (HCE) host card mode, where the traditional SE solution needs to provide a security module SE, which is mainly used to store NFC applications and user sensitive data and implement security key operations. The chip module, which is the core of the NFC card simulation, is used for secure storage of sensitive information and provides a secure execution environment for transaction transactions. The SE also communicates with external read/write devices through the contactless communication front-end NFC chip. Specifically, As a contactless communication front-end, the NFC chip forwards the commands received from the external reader to the SE, and then processes it by the SE and responds through the NFC controller to realize the security of the data storage and transaction process. In practical applications, the SE can Integrated into SIM (Subscriber Identity Module) card, SD (Secure Digital Memory Card) Card) card or mobile phone chip. The HCE host card mode does not need to provide the SE, but the function of the SE is completed by an application running in the mobile phone or the server of the cloud. At this time, the data received by the NFC chip is sent by the operating system or to the application in the mobile phone or by moving. The network sends the server to the cloud to complete the interaction. The two methods are characterized by bypassing the limitations of the built-in SE of the mobile phone.

However, existing NFC payment methods still have various security risks, especially the HCE host card emulation method, which provides an NFC service solution with less security but is very convenient to deploy. When malicious users obtain various information stored in the application through various means, it may bring fatal problems. For example, malicious users can use these sensitive data to complete some fake card transactions. Wait, security is greatly threatened.

Typically, there are cases where, shortly after we complete a transaction, our sensitive data is copied and forged for various reasons, and then the malicious user trades elsewhere. That is, once the payment is completed, it is quickly and far away in other places.

Therefore, how to avoid the risk that the user sensitive information is maliciously copied or forged in a different place in the transaction, thereby improving the payment security becomes a technical problem to be solved urgently.

Summary of the invention

The invention is based on the above problems, and proposes a new technical solution, which avoids the risk of the user sensitive information being maliciously copied or forged in the transaction, and improves the payment security, thereby improving the user experience. .

In view of this, an aspect of the present invention provides an NFC payment method for a mobile terminal, including: determining whether a discovery request from a payment accepting device is received; and when the determination result is yes, acquiring the payment receiving device Determining whether the first current geographical location information belongs to the same area as the pre-stored geographical location information of the mobile terminal; when the determination is yes, completing the NFC payment; otherwise, terminating the payment.

In this technical solution, if it is determined that the discovery request from the payment accepting device is received, the first current geographic location information of the payment receiving device needs to be acquired, and compared with the pre-stored geographical location information of the mobile terminal, if If the two belong to the same area, the control completes the NFC payment. Otherwise, the payment is terminated. In this way, the payment activity is guaranteed within the user's control range, and the user's sensitive information is maliciously copied or forged in the transaction after the transaction is avoided. Risks increase payment security and enhance the user experience.

In the above technical solution, preferably, before determining whether the discovery request is received, the method further includes: detecting whether a notification that the geographic location information of the mobile terminal changes is received; and when detecting, acquiring the mobile terminal Second current geographic location information; storing the second current geographic location information as the pre-stored geographic location information.

In this technical solution, the location of the mobile terminal is likely to change at any time, so firstly, it is detected whether the notification of the change of the geographical location information of the mobile terminal is received, and if the geographical location information of the mobile terminal changes, the mobile terminal is acquired again. Current location information of the terminal, That is, the second current geographical location information is stored as pre-stored geographical location information, thereby realizing real-time updating of the pre-stored geographical location information, avoiding misjudgment, greatly improving the security of the payment activity, thereby improving the user experience. .

In the above technical solution, preferably, the storing, by the second current geographic location information, the second pre-stored geographical location information, the method further includes: performing encryption processing on the second current geographic location information; The processed second current geographic location information is stored to a security module of the mobile terminal.

In the technical solution, the second current geographical location information is encrypted, and then stored to the security module of the mobile terminal as pre-stored geographical location information, so that the encrypted second current geographical location information fully guarantees the payment. Security to enhance the user experience.

In the above technical solution, preferably, when not detected, it is detected again whether a notification that the geographical location information of the mobile terminal has changed is received.

In the technical solution, if the notification that the geographical location information of the mobile terminal is changed is not detected, the detection is continued, and thus, the pre-stored geographical location information is updated in real time to provide favorable protection.

In the above technical solution, preferably, the second current geographic location information of the mobile terminal is obtained by using a mobile data network or a wireless network.

In the technical solution, the second current geographic location information of the mobile terminal is obtained through a mobile data network or a wireless network. Of course, other suitable networks may also be selected, so that the payment system is more compatible and more flexible. Obtaining the geographic location information of the mobile terminal provides a variety of feasible solutions.

Another aspect of the present invention provides an NFC payment system for a mobile terminal, comprising: a first determining module, configured to determine whether a discovery request from a payment accepting device is received; and an obtaining module, configured to: And acquiring, by the second determining module, the first current geographic location information is in the same area as the pre-stored geographical location information of the mobile terminal; The module is configured to control the completion of the NFC payment when the determination is yes, otherwise, the control terminates the payment.

In the technical solution, if it is determined that the discovery request from the payment accepting device is received, the first current geographic location information of the payment receiving device needs to be acquired, and is connected to the mobile terminal. The pre-stored geographical location information is matched and matched. If it is determined that the two belong to the same area, the control completes the NFC payment, otherwise, the payment is terminated, thus ensuring that the payment activity is within the control range of the user, and avoiding the sensitive information of the user in the transaction. The risk of being paid off-site after being maliciously copied or forged increases the security of the payment, thereby improving the user experience.

In the above technical solution, the method further includes: a detecting module, configured to: before determining whether the discovery request is received, detecting whether a notification that the geographic location information of the mobile terminal is changed; and a positioning module, And acquiring, by the second current geographic location information of the mobile terminal, a storage module, configured to store the second current geographic location information as the pre-stored geographical location information.

In this technical solution, the location of the mobile terminal is likely to change at any time, so firstly, it is detected whether the notification of the change of the geographical location information of the mobile terminal is received, and if the geographical location information of the mobile terminal changes, the mobile terminal is acquired again. The current geographical location information of the terminal, that is, the second current geographical location information, is stored as pre-stored geographical location information, thereby realizing real-time updating of the pre-stored geographical location information, avoiding misjudgment, and greatly improving the payment activity. Security to enhance the user experience.

In the above technical solution, the storage module is specifically configured to: perform encryption processing on the second current geographic location information; and store the second current geographic location information that is subjected to the encryption process to the mobile The security module of the terminal.

In the above technical solution, preferably, the detecting module is further configured to: when not detected, detect again whether a notification that the geographical location information of the mobile terminal changes is received.

In this technical solution, the preferred option is to obtain the mobile through a mobile data network or a wireless network. The second current geographical location information of the terminal, of course, other suitable networks may also be selected, so that the payment system is more compatible and flexible, and provides various feasible solutions for obtaining the geographical location information of the mobile terminal.

A further aspect of the present invention provides a mobile terminal comprising a processor and a memory, wherein the memory stores a set of program codes, and the processor is configured to call program code stored in the memory for execution The following operations: determining whether a discovery request from the payment accepting device is received; when the determination result is yes, acquiring the first current geographic location information of the payment receiving device; determining whether the first current geographic location information is related to the mobile The pre-stored geographical location information of the terminal belongs to the same area; when the determination is yes, the NFC payment is completed, otherwise, the payment is terminated.

In the above technical solution, preferably, the processor further performs: detecting, before receiving the discovery request, whether to receive a notification that the geographic location information of the mobile terminal changes; and when detecting, acquiring The second current geographic location information of the mobile terminal; storing the second current geographic location information as the pre-stored geographical location information.

In the foregoing technical solution, the specific step of the processor storing the second current geographic location information as the pre-stored geographical location information is: performing encryption processing on the second current geographic location information; The second current geographic location information subjected to the encryption process is stored to a security module of the mobile terminal.

In the above technical solution, preferably, the processor further performs: detecting, when not detected, whether a notification of the change of the geographical location information of the mobile terminal is received.

In the above technical solution, preferably, the processor further performs: acquiring the second current geographic location information of the mobile terminal by using a mobile data network or a wireless network.

The technical solution of the invention avoids the risk of the user sensitive information being maliciously copied or forged in the transaction, and the payment security is improved, thereby improving the user experience.

DRAWINGS

1 is a flow chart showing an NFC payment method according to an embodiment of the present invention;

2 shows a block diagram of an NFC payment system in accordance with one embodiment of the present invention;

Figure 3 shows a block diagram of a mobile terminal in accordance with one embodiment of the present invention;

FIG. 4 is a schematic flowchart showing a geographic location information update of a mobile terminal according to an embodiment of the present invention; FIG.

FIG. 5 is a schematic flowchart diagram of an NFC payment method according to another embodiment of the present invention; FIG.

FIG. 6 shows a block diagram of a mobile terminal in accordance with another embodiment of the present invention.

detailed description

The above described objects, features and advantages of the present invention will become more apparent from the detailed description of the appended claims. It should be noted that, not In the case of a conflict, the features of the embodiments and the embodiments of the present application may be combined with each other.

In the following description, numerous specific details are set forth in order to provide a full understanding of the invention, but the invention may be practiced otherwise than as described herein. Limitations of the embodiments.

FIG. 1 shows a flow chart of an NFC payment method according to an embodiment of the present invention.

As shown in FIG. 1 , an NFC payment method according to an embodiment of the present invention is used in a mobile terminal, including: Step 102, determining whether a discovery request from a payment accepting device is received; Step 104, when the determination result is yes, acquiring The first current geographic location information of the payment receiving device; step 106, determining whether the first current geographic location information belongs to the same region as the pre-stored geographical location information of the mobile terminal; and step 108, when the determination is yes, Complete the NFC payment, otherwise, terminate the payment.

In the above technical solution, preferably, before the step 102, the method further includes: detecting whether a notification that the geographic location information of the mobile terminal changes is received; and detecting, acquiring the second current current of the mobile terminal Geographical location information; storing the second current geographic location information as the pre-stored geographic location information.

In the above technical solution, preferably, the storing, by the second current geographic location information, the pre-stored geographical location information, specifically: the second current geographic location information Performing an encryption process; storing the second current geographic location information subjected to the encryption process to a security module of the mobile terminal.

2 shows a block diagram of an NFC payment system in accordance with one embodiment of the present invention.

As shown in FIG. 2, the NFC payment system 200 of an embodiment of the present invention is used for a mobile terminal, and includes: a first determining module 202, configured to determine whether a discovery request from a payment accepting device is received; and an obtaining module 204, When the determination result is yes, the first current geographic location information of the payment receiving device is obtained; and the second determining module 206 is configured to determine whether the first current geographic location information and the pre-stored geographic location of the mobile terminal The location information belongs to the same area; the control module 208 is configured to, when the determination is yes, control to complete the NFC payment, otherwise, control terminates the payment.

In this technical solution, if it is determined that the discovery request from the payment accepting device is received, the first current geographic location information of the payment receiving device needs to be acquired, and compared with the pre-stored geographical location information of the mobile terminal, if If the two belong to the same area, the control completes the NFC payment. Otherwise, the payment is terminated. In this way, the payment activity is guaranteed within the user's control range, and the user's sensitive information is maliciously copied or forged in the transaction after the transaction is avoided. Wind Risks increase payment security and enhance the user experience.

In the above technical solution, the method further includes: a detecting module 210, configured to: before determining whether the discovery request is received, detecting whether a notification that the geographic location information of the mobile terminal changes is received; and the positioning module 212 For detecting the second current geographic location information of the mobile terminal, the storage module 214 is configured to store the second current geographic location information as the pre-stored geographical location information.

In the foregoing technical solution, the storage module 214 is specifically configured to: perform encryption processing on the second current geographic location information; and store the second current geographic location information that is subjected to the encryption process to the The security module of the mobile terminal.

In the above technical solution, preferably, the detecting module 210 is further configured to: when not detected, detect again whether a notification that the geographical location information of the mobile terminal changes is received.

In the technical solution, the second current geographic location information of the mobile terminal is obtained through a mobile data network or a wireless network. Of course, other suitable networks may also be selected, so that the payment system is more compatible and more flexible. Get the location information of the mobile terminal provided A variety of feasible options.

FIG. 3 shows a block diagram of a mobile terminal in accordance with one embodiment of the present invention.

As shown in FIG. 3, a mobile terminal 300 according to an embodiment of the present invention includes the NFC payment system 200 according to any one of the above technical solutions.

In this technical solution, the mobile terminal 300 includes the NFC payment system 200 according to any one of the above technical solutions, and thus has all the beneficial effects of the NFC payment system 200 described in any one of the above technical solutions, and is no longer here. Narration.

The technical solution of the present invention will be described in detail below with reference to FIG. 4 and FIG. 5:

FIG. 4 is a flow chart showing the updating of the geographic location information of the mobile terminal according to an embodiment of the present invention.

FIG. 5 is a flow chart showing an NFC payment method according to another embodiment of the present invention.

The technical solution of the present invention mainly includes two processes of current geographic location information update and transaction payment authentication of a mobile terminal, which are respectively described as follows:

As shown in FIG. 4, the current geographic location information update process of the mobile terminal includes:

Step 402: Detect whether a notification that the geographic location information of the mobile terminal has changed is received, and if yes, proceed to step 404, otherwise proceed to step 406.

Step 404: The mobile terminal acquires, by using a mobile network or a wireless network, geographic location information (ie, second current geographic location information) that the mobile terminal is currently located.

Step 406: If it is not detected that the notification that the geographical location information of the mobile terminal changes, the detection is continued.

Step 408, the geographic location information is then written to the entity or virtual SE (security module) (ie, stored as pre-stored geographic location information) for subsequent payment procedures.

Here are three questions to explain:

(1) The acquisition of the geographical location information may be an active reporting by the network, or may be an active inquiry by the terminal;

(2) For the entity SE, the SE module in the traditional SE solution, and the virtual SE refers to the software that implements the SE function in the HCE host card simulation solution, which may be a host APP application or a cloud server;

(3) The writing of geographical location information must be written to the entity or virtual SE. The software can be used. Usually, the terminal will complete the card issuance and data personalization through the software. It has a strict authentication login process.

As shown in Figure 5, the transaction payment authentication process includes:

Step 502: Determine whether a discovery request from the payment accepting device is received, if yes, proceed to step 504, otherwise, terminate the payment. When a user conducts an NFC payment transaction using a mobile phone, he or she receives a request for discovery of an external receiving device.

Step 504: Acquire first geographic location information of the payment accepting device.

Step 506: Determine whether the first current geographic location information of the payment receiving device is compared with the geographic location (ie, pre-stored geographical location information) of the terminal currently stored in the entity or the virtual SE, and determine whether it belongs to the same area. If yes, go to step 508. Otherwise, proceed to step 510.

Step 508, if the two belong to the same area, continue the transaction.

Step 510, if the two do not belong to the same area, terminate the transaction.

It should be noted that the location information must be written to the entity or the virtual SE. The terminal usually uses the software to complete the card issuance, data personalization, etc. The authentication login process, and the geographical location information is encrypted and stored in the entity or the virtual SE, and the external information cannot be obtained. The pseudo-card of the malicious user cannot tamper with the encrypted information in the user SE, so that the pseudo-card consumption of the remote card is terminated.

The technical solution of the present invention is described in detail above with reference to the accompanying drawings, which avoids the risk that the sensitive information of the user is maliciously copied or forged in the transaction, and the payment security is improved, thereby improving the user experience.

6 shows a block diagram of a mobile terminal according to another embodiment of the present invention. As shown in FIG. 6, the mobile terminal 7 may include: at least one processor 71, such as a CPU, at least one communication bus 72, and a memory 73; The communication bus 72 is used to implement connection communication between these components; the memory 73 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. A set of program codes is stored in the memory 73, and the processor 71 is configured to call the program code stored in the memory 73 for performing the following operations:

Determining whether a discovery request from the payment accepting device is received;

When the determination result is yes, acquiring the first current geographical location information of the payment receiving device;

Determining whether the first current geographic location information and a pre-stored geographic location of the mobile terminal The information belongs to the same area;

When the determination is YES, the NFC payment is completed, otherwise, the payment is terminated.

In the above technical solution, preferably, the processor 71 further performs: before determining whether the discovery request is received:

Detecting whether a notification that the geographic location information of the mobile terminal has changed is received;

Obtaining, when detected, second current geographic location information of the mobile terminal;

The second current geographic location information is stored as the pre-stored geographic location information.

In the above technical solution, preferably, the specific step of the processor 71 storing the second current geographical location information as the pre-stored geographical location information is:

Encrypting the second current geographic location information;

The second current geographic location information subjected to the encryption process is stored to a security module of the mobile terminal.

In the above technical solution, preferably, the processor 71 further performs:

If not detected, detecting whether the geographical location letter of the mobile terminal is received again Notification of changes in interest.

In the above technical solution, preferably, the processor 71 further performs:

The second current geographic location information of the mobile terminal is obtained through a mobile data network or a wireless network.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

An NFC payment method for a mobile terminal, comprising:

Determining whether a discovery request from the payment accepting device is received;

When the determination result is yes, acquiring the first current geographical location information of the payment receiving device;

Determining whether the first current geographical location information belongs to the same area as the pre-stored geographical location information of the mobile terminal;

When the determination is YES, the NFC payment is completed, otherwise, the payment is terminated.
The NFC payment method according to claim 1, wherein before determining whether the discovery request is received, the method further comprises:

Detecting whether a notification that the geographic location information of the mobile terminal has changed is received;

Obtaining, when detected, second current geographic location information of the mobile terminal;

The second current geographic location information is stored as the pre-stored geographic location information.
The NFC payment method according to claim 2, wherein the storing the second current geographical location information as the pre-stored geographical location information comprises:

Encrypting the second current geographic location information;

The second current geographic location information subjected to the encryption process is stored to a security module of the mobile terminal.
The NFC payment method according to claim 2, characterized in that

When not detected, it is again detected whether a notification that the geographical location information of the mobile terminal has changed is received.
The NFC payment method according to any one of claims 2 to 4, characterized in that

The second current geographic location information of the mobile terminal is obtained through a mobile data network or a wireless network.
An NFC payment system for a mobile terminal, comprising:

a first determining module, configured to determine whether a discovery request from the payment receiving device is received;

An obtaining module, configured to acquire first current geographic location information of the payment receiving device when the determination result is yes;

a second determining module, configured to determine whether the first current geographic location information is related to the mobile The pre-stored geographical location information of the terminal belongs to the same area;

The control module is configured to, when the determination is yes, control to complete the NFC payment, otherwise, the control terminates the payment.
The NFC payment system according to claim 6, further comprising:

a detecting module, configured to detect, after determining whether the discovery request is received, whether a notification of a change in geographic location information of the mobile terminal is received;

a positioning module, configured to acquire second current geographic location information of the mobile terminal when detecting;

And a storage module, configured to store the second current geographic location information as the pre-stored geographic location information.
The NFC payment system according to claim 7, wherein the storage module is specifically configured to:

Encrypting the second current geographic location information;

The second current geographic location information subjected to the encryption process is stored to a security module of the mobile terminal.
The NFC payment system according to claim 7, wherein the detecting module is further configured to:

When not detected, it is again detected whether a notification that the geographical location information of the mobile terminal has changed is received.
The NFC payment system according to any one of claims 7 to 9, characterized in that

The second current geographic location information of the mobile terminal is obtained through a mobile data network or a wireless network.
A mobile terminal, comprising: a processor and a memory, wherein the memory stores a set of program codes, and the processor is configured to call program code stored in the memory for execution The following operations:

Determining whether a discovery request from the payment accepting device is received;

When the determination result is yes, acquiring the first current geographical location information of the payment receiving device;

Determining whether the first current geographical location information belongs to the same area as the pre-stored geographical location information of the mobile terminal;

When the determination is YES, the NFC payment is completed, otherwise, the payment is terminated.
The mobile terminal according to claim 11, wherein the processor further performs: before determining whether the discovery request is received:

Detecting whether a notification that the geographic location information of the mobile terminal has changed is received;

Obtaining, when detected, second current geographic location information of the mobile terminal;

The second current geographic location information is stored as the pre-stored geographic location information.
The mobile terminal according to claim 12, wherein the specific step of the processor storing the second current geographical location information as the pre-stored geographical location information is:

Encrypting the second current geographic location information;

The second current geographic location information subjected to the encryption process is stored to a security module of the mobile terminal.
The mobile terminal of claim 12, wherein the processor further performs:

When not detected, it is again detected whether a notification that the geographical location information of the mobile terminal has changed is received.
The mobile terminal according to claim 12 or 14, wherein the processor further executes:

The second current geographic location information of the mobile terminal is obtained through a mobile data network or a wireless network.