WO2017016241A1

WO2017016241A1 - Data transfer method, mobile terminal, server and system

Info

Publication number: WO2017016241A1
Application number: PCT/CN2016/079565
Authority: WO
Inventors: 李建立
Original assignee: 腾讯科技（深圳）有限公司
Priority date: 2015-07-29
Filing date: 2016-04-18
Publication date: 2017-02-02
Also published as: CN106411815A; CN106411815B

Abstract

Disclosed are a data transfer method, a mobile terminal, a server and a system. The method comprises: receiving data transfer information that carries a challenge code and is sent by a data transfer server with regard to an order, wherein the data transfer information comprises order information; when it is detected that a user confirms to perform data transfer on the order, prompting the user to input fingerprint verification information; when it is determined that the fingerprint verification information input by the user matches pre-set fingerprint template information, using a private key in a pre-installed digital certificate to perform digital signing on abstract information; and sending the abstract information subjected to digital signing to the data transfer server, so that the data transfer server performs data transfer according to a verification result of the abstract information subjected to digital signing. By means of the embodiments of the present invention, the security of data transfer is improved.

Description

Data transfer method, mobile terminal, server and system

The present patent application claims priority to Chinese Patent Application No. 201510454113.3, filed on Jul. 29, 2015, the title of which is incorporated herein by reference. In this application.

Technical field

The present invention relates to the field of Internet technologies, and in particular, to a data transfer method, a mobile terminal, a server, and a system.

Background technique

With the development of artificial intelligence technology, more and more data transfer methods based on human biological characteristics, such as fingerprint payment, face payment, iris recognition payment and other innovative data transfer methods. In the prior art solution, the fingerprint information is suitable for identification in the field of online data transfer, but the collection of human biological characteristics such as fingerprint information has the risk of legal problems and personal privacy leakage, so the data transfer is performed by verifying the fingerprint information. The solution is performed locally, and the fingerprint information is not transmitted to the data transfer service or the back-end server of the third-party organization. In order for the data transfer service or the background server to trust the local fingerprint verification result, the technical seal is adopted and the special Security measures on the hardware to solve the problem of fingerprint verification credibility, but only by verifying the fingerprint information for data transfer, there is still a problem of low security.

Summary of the invention

The technical problem to be solved by the embodiments of the present invention is to provide a data transfer method, a mobile terminal, a server, and a system, which can improve the security of data transfer.

In order to solve the above technical problem, an embodiment of the present invention provides a data transfer method, including:

Receiving, by the receiving data transfer server, data transfer information carrying a challenge code for the order, where the data transfer information includes order information;

When detecting that the user confirms data transfer to the order, prompting the user to input fingerprint verification information;

When it is determined that the fingerprint verification information input by the user matches the preset fingerprint template information, The private key in the pre-installed digital certificate digitally signs the summary information, where the summary information is generated according to the original text field, and the original text field includes the challenge code, the order information, and the mobile terminal identifier;

And transmitting the digitally signed summary information to the data transfer server, so that the data transfer server performs data transfer according to the verification result of the digitally signed summary information.

Correspondingly, an embodiment of the present invention further provides a data transfer method, including:

Transmitting, by the mobile terminal, data transfer information carrying the challenge code, so that the mobile terminal verifies the fingerprint verification information input by the user when detecting that the user confirms data transfer to the order, and then uses the private key in the pre-installed digital certificate. Digitally signing the summary information, where the data transfer information includes order information, and the summary information is generated by generating a data message according to the original text field, where the original text field includes the challenge code, the order information, and the mobile terminal identifier;

Receiving the digitally signed summary information sent by the mobile terminal;

And verifying the digitally signed summary information, and performing data transfer according to the verification result of the digitally signed summary information.

Correspondingly, an embodiment of the present invention further provides a mobile terminal, including:

An information receiving module, configured to receive, by the data transfer server, data transfer information carrying a challenge code for an order, where the data transfer information includes order information;

An information prompting module, configured to prompt the user to input fingerprint verification information when detecting that the user confirms data transfer to the order;

a digital signature module, configured to digitally sign the summary information by using a private key in the pre-installed digital certificate when determining that the fingerprint verification information input by the user matches the preset fingerprint template information, where the summary information is based on the original text Generating a data packet, the original text field including the challenge code, the order information, and a mobile terminal identifier;

And an information sending module, configured to send the digitally signed summary information to the data transfer server, so that the data transfer server performs data transfer according to the verification result of the digitally signed summary information.

Correspondingly, an embodiment of the present invention further provides a data transfer server, including:

An information sending module, configured to send data transfer information carrying a challenge code to the mobile terminal, so that The mobile terminal verifies the fingerprint verification information input by the user when detecting that the user confirms the data transfer to the order, and then digitally signs the summary information using the private key in the pre-installed digital certificate, where the data transfer information includes the order information. The summary information is generated by generating a data packet according to the original text field, where the original text field includes the challenge code, the order information, and a mobile terminal identifier;

An information receiving module, configured to receive the digitally signed summary information sent by the mobile terminal;

The information verification module is configured to verify the digitally signed summary information, and perform data transfer according to the verification result of the digitally signed summary information.

Correspondingly, an embodiment of the present invention further provides a data transfer system, including a data transfer server and at least one mobile terminal, where:

The mobile terminal is configured to receive, by the data transfer server, data transfer information carrying a challenge code for an order, where the data transfer information includes order information; and when detecting that the user confirms data transfer to the order, prompting the user Entering fingerprint verification information; when it is determined that the fingerprint verification information input by the user matches the preset fingerprint template information, the summary information is digitally signed using the private key in the pre-installed digital certificate, and the summary information is based on the original text field. Generating a data message, the original text field including the challenge code, the order information, and the mobile terminal identifier; sending the digitally signed summary information to the data transfer server, so that the data transfer server is configured according to The digitally signed verification result of the summary information is subjected to data transfer.

The data transfer server is configured to send data transfer information carrying the challenge code to the mobile terminal, so that the mobile terminal verifies the fingerprint verification information input by the user when the user confirms that the user performs data transfer on the order, and then uses the pre- The private key in the installed digital certificate digitally signs the summary information, the data transfer information includes order information; receiving the digitally signed summary information sent by the mobile terminal; and the digitally signed summary The information is verified, and data is transferred according to the verification result of the digitally signed summary information.

In the embodiment of the present invention, the mobile terminal may verify that the user inputs the fingerprint verification information when detecting that the user confirms the data transfer to the order; and then digitally sign the summary information using the private key in the pre-installed digital certificate, and the digital The signed summary information is sent to the data transfer server, so that the data transfer server performs data transfer according to the verification result of the digitally signed summary information, thereby improving the security of the data transfer.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without paying any creative work.

1 is a schematic flow chart of a first embodiment of a data transfer method according to the present invention;

2 is a schematic flow chart of a second embodiment of a data transfer method according to the present invention;

3 is a schematic flow chart of a third embodiment of a data transfer method according to the present invention;

4 is a schematic structural diagram of a mobile terminal according to an embodiment of the present invention;

FIG. 5 is another schematic structural diagram of a mobile terminal according to an embodiment of the present invention; FIG.

6 is a schematic structural diagram of a data transfer server according to an embodiment of the present invention;

7 is another schematic structural diagram of a data transfer server according to an embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a data transfer system according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The mobile terminal in the embodiment of the present invention may be a mobile phone, a smart phone, a tablet computer, an e-reader, a notebook computer, a vehicle-mounted terminal, a wearable portable device, etc., which can communicate with a data transfer server via the Internet, and the data transfer The server may be a payment server such as a third-party payment server or a bank payment server, or an instant messaging server that supports the payment service function, an SNS (Social Networking Services) server, or the like, which is not limited by the embodiment of the present invention.

Please refer to FIG. 1. FIG. 1 is a schematic diagram of a first embodiment of a data transfer method according to the present invention. The data transfer method described in this embodiment is mainly described from the mobile terminal side, as shown in the figure. The data transfer method in the embodiment may include the following steps:

S101. The receiving data transfer server sends data transfer information carrying a challenge code for the order, where the data transfer information includes order information.

In a specific implementation, the challenge code is a verification code randomly assigned by the data transfer server to the mobile terminal, and is only related to the current data transfer service, the order information includes an order number, an order time, and the like, and the data transfer information may further include a data transfer mode, the mobile terminal may receive a selection instruction input by the user for the multiple data transfer modes, and select a data transfer from the multiple data transfer modes according to the selection instruction for the multiple data transfer modes. The way to transfer data.

Optionally, before the receiving data transfer server sends the data transfer information carrying the challenge code for the order, the user may input an acknowledgement instruction for the order that is input by the user; according to the confirmation instruction for the order, The data transfer server sends a data transfer request, and after checking the legality of the order, the data transfer server returns the data transfer information carrying the challenge code.

Optionally, before the receiving data transfer server sends the data transfer information carrying the challenge code for the order, the certificate service request may be sent to the data transfer server, so that the data transfer server returns the certificate installation package; and the number is received. Transmitting a certificate installation package sent by the server; and installing the certificate installation package to obtain a digital certificate according to the determining instruction input by the user for the certificate installation package. After the digital certificate is installed, whether the mobile terminal is in the fingerprint template information of the user may be checked. If the fingerprint template information of the user does not exist in the mobile terminal, the fingerprint template information input by the user is obtained, if the mobile terminal has the The fingerprint template information of the user prompts the user that the data transfer service is successfully activated.

Optionally, after the user logs in the data transfer client to enter the data transfer service activation page, the user may be prompted to input a data transfer verification password, and when the data transfer verification password input by the user is correct, perform a certificate service request to the data transfer server. A step of. Moreover, before sending the certificate service request to the data transfer server, whether the mobile terminal supports fingerprint recognition, and if the mobile terminal supports fingerprint recognition, performing the step of sending a certificate service request to the data transfer server, if If the mobile terminal does not support fingerprint recognition, the user is prompted to not support the data transfer service. In particular, fingerprint recognition is performed locally on the mobile terminal.

Further optionally, the information verification code sent by the data transfer server by using the contact manner of the mobile terminal may be first received, and the user is prompted to submit the information verification code; Determining an information verification code input by the user; finally transmitting the information verification code input by the user to the data transfer server, so that the data transfer server sends the information verification code input by the user to the mobile terminal when confirming that the information verification code input by the user is correct Send the certificate installation package.

S102. When detecting that the user confirms data transfer to the order, prompting the user to input fingerprint verification information.

In a specific implementation, the mobile terminal may receive the confirmation instruction of the data transfer input by the user, and when detecting the confirmation instruction of the data transfer input by the user, prompting the user to input the fingerprint verification information, and acquiring the user input through the fingerprint collection device. Fingerprint verification information.

S103. When it is determined that the fingerprint verification information input by the user matches the preset fingerprint template information, the digest information is digitally signed by using a private key in the pre-installed digital certificate, where the digest information is generated according to the original text field. a message, the original text field including the challenge code, the order information, and a mobile terminal identity.

In a specific implementation, after receiving the fingerprint verification information input by the user, comparing the fingerprint verification information with the preset fingerprint template information, if the fingerprint verification information does not match the fingerprint template information, prompting the user to re-enter the fingerprint verification information. If the fingerprint verification information matches the fingerprint template information, the step of digitally signing the summary information using the private key in the pre-installed digital certificate is performed. The digital certificate may encrypt and decrypt the summary information transmitted by the network. The digital certificate includes a private key and a public key. When the mobile terminal sends data to the data transfer server, the mobile terminal may use the private key pair data in the digital certificate. Encryption (digital signature), the data transfer server decrypts the encrypted data using the public key after receiving the encrypted data; when the data transfer server sends the data to the mobile terminal, the data transfer server can use the public key pair in the digital certificate The data is encrypted, and the mobile terminal decrypts the encrypted data using the private key after receiving the encrypted data.

S104. Send the digitally signed summary information to the data transfer server, so that the data transfer server performs data transfer according to the verification result of the digitally signed summary information.

In a specific implementation, the digitally signed summary information carries an original text field, and after receiving the digitally signed summary information carrying the original text field, the data transfer server first generates the summary data by using the same function; The decrypted summary information is compared with the summary data; finally, according to the decrypted summary information and the summary data The comparison results for data transfer. Further, if the decrypted summary information is the same as the summary data, the data transfer result is data transfer success, and if the decrypted summary information is different from the summary data, the data transfer result is data transfer. failure.

Optionally, the data transfer result sent by the data transfer server may be received; and the prompt information corresponding to the data transfer result is displayed according to the data transfer result. Further, if the data transfer result is that the data transfer is successful, a successful message is displayed, and if the data transfer result is a data transfer failure, the user is prompted to resubmit the above operation flow.

Please refer to FIG. 2. FIG. 2 is a schematic diagram of a second embodiment of a data transfer method according to the present invention. The data transfer method described in this embodiment is mainly described from the data transfer server side, as shown in the figure. The data transfer method in this embodiment may include the following steps:

S201. Receive a certificate service request sent by the mobile terminal.

S202. Send a certificate installation package to the mobile terminal according to the certificate service request, so that the mobile terminal installs the certificate installation package to obtain the digital certificate.

In a specific implementation, the certificate service request includes a contact mode of the mobile terminal, and the information verification code may be sent to the mobile terminal by using a contact manner of the mobile terminal, so that the mobile terminal prompts the user to submit the And the information verification code; receiving the information verification code submitted by the user sent by the mobile terminal; and sending the certificate installation package to the mobile terminal when confirming that the information verification code submitted by the user is correct.

S203. Send data transfer information carrying the challenge code to the mobile terminal, so that the mobile terminal verifies the fingerprint verification information input by the user when using the user to confirm data transfer to the order, and then uses the pre-installed digital certificate. The private key digitally signs the summary information, where the data transfer information includes order information, and the summary information is generated by generating a data message according to the original text field, where the original text field includes the challenge code, the order information, and the mobile terminal identifier. .

Optionally, the data transfer request sent by the mobile terminal may be received; and the step of transmitting the data transfer information carrying the challenge code to the mobile terminal is performed according to the data transfer request.

S204. Receive the digitally signed summary information sent by the mobile terminal.

S205. Verify the digitally signed summary information, and perform data transfer according to the verification result of the digitally signed summary information. The digitally signed summary information carries the original text field.

In a specific implementation, the digitally signed summary information may be decrypted using a public key corresponding to the private key; and the decrypted summary information is verified. Further, the summary data may be generated according to the original text field; the decrypted summary information is compared with the summary data; and the compared result of the decrypted summary information and the summary data is compared Perform data transfer. Further, if the decrypted summary information is the same as the summary data, the data transfer result is data transfer success, and if the decrypted summary information is different from the summary data, the data transfer result is data transfer. failure.

Optionally, the data transfer result may be sent to the mobile terminal, so that the mobile terminal displays prompt information corresponding to the data transfer result.

In the embodiment of the present invention, the data transfer server may receive the digitally signed summary information sent by the mobile terminal, verify the digitally signed summary information, and perform data transfer according to the digitally signed verification result of the summary information, thereby improving The security of data transfer.

Please refer to FIG. 3. FIG. 3 is a schematic flowchart of a third embodiment of a data transfer method according to the present invention. The data transfer method in this embodiment is mainly described from two sides of a mobile terminal and a data transfer server, such as As shown in the figure, the data transfer method in this embodiment may include the following steps:

S301. The mobile terminal sends a certificate service request to the data transfer server, so that the data transfer server returns a certificate installation package.

Optionally, after the user logs in the data transfer client to enter the data transfer service activation page, the user may be prompted to input a data transfer verification password, and when the data transfer verification password input by the user is correct, perform a certificate service request to the data transfer server. A step of. Moreover, before sending the certificate service request to the data transfer server, whether the mobile terminal supports fingerprint recognition, and if the mobile terminal supports fingerprint recognition, executing the sending the certificate service request to the data transfer server If the mobile terminal does not support fingerprint recognition, the user is prompted to not support the data transfer service. In particular, fingerprint recognition is performed locally on the mobile terminal.

S302. The data transfer server sends a certificate installation package to the mobile terminal according to the certificate service request, so that the mobile terminal installs the certificate installation package to obtain the digital certificate.

S303. The mobile terminal installs the certificate installation package to obtain the digital certificate according to the determining instruction of the certificate installation package input by the user.

Optionally, after the digital certificate is installed, whether the mobile terminal is in the fingerprint template information of the user may be checked, and if the fingerprint template information of the user does not exist in the mobile terminal, the fingerprint template information input by the user is obtained, if the mobile If the terminal has the fingerprint template information of the user, the user is prompted to successfully open the data transfer service.

S304. The mobile terminal receives the confirmation instruction input by the user for the order.

S305. The mobile terminal sends a data transfer request to the data transfer server according to the confirmation instruction for the order, and the data transfer server checks the legality of the order after receiving the data transfer request. After checking that the order is legal, perform the following steps.

S306. The data transfer server sends the data transfer information carrying the challenge code to the mobile terminal, so that the mobile terminal verifies the fingerprint verification information input by the user when the user confirms that the user performs data transfer on the order, and then uses the pre-installed number. The private key in the certificate digitally signs the summary information, where the data transfer information includes order information, and the summary information is generated by generating a data message according to the original text field, where the original text field includes the challenge code, the order information, and Mobile terminal identification.

S307. The mobile terminal prompts the user to input fingerprint verification information when detecting that the user confirms data transfer to the order.

S308. The mobile terminal, when determining that the fingerprint verification information input by the user matches the preset fingerprint template information, digitally signing the summary information by using a private key in the pre-installed digital certificate, where the summary information is generated according to the original text field. Obtaining a data message, the original text field including the challenge code, the order information, and a mobile terminal identifier.

In a specific implementation, after receiving the fingerprint verification information input by the user, the mobile terminal compares the fingerprint verification information with the preset fingerprint template information, and if the fingerprint verification information does not match the fingerprint template information, prompts the user to re-enter the fingerprint. Verification information; if the fingerprint verification information matches the fingerprint template information, the step of digitally signing the summary information using the private key in the pre-installed digital certificate is performed. The digital certificate may encrypt and decrypt the summary information transmitted by the network. The digital certificate includes a private key and a public key. When the mobile terminal sends data to the data transfer server, the mobile terminal may use the private key pair data in the digital certificate. Encryption (digital signature), the data transfer server decrypts the encrypted data using the public key after receiving the encrypted data; when the data transfer server sends the data to the mobile terminal, the data transfer server can use the public key pair in the digital certificate The data is encrypted, and the mobile terminal decrypts the encrypted data using the private key after receiving the encrypted data.

S309. The mobile terminal sends the digitally signed summary information to the data transfer server, so that the data transfer server performs data transfer according to the verification result of the digitally signed summary information.

S310. The data transfer server verifies the digitally signed summary information, and performs data transfer according to the verification result of the digitally signed summary information. The digitally signed summary information carries the original text field.

Please refer to FIG. 4. FIG. 4 is a schematic structural diagram of a mobile terminal according to an embodiment of the present invention. As shown in the figure, the mobile terminal in the embodiment of the present invention may include:

The information receiving module 401 is configured to receive, by the data transfer server, data transfer information carrying a challenge code for the order, where the data transfer information includes order information.

The information prompting module 402 is configured to prompt the user to input fingerprint verification information when detecting that the user confirms data transfer to the order.

The digital signature module 403 is configured to: when determining that the fingerprint verification information input by the user matches the preset fingerprint template information, digitally sign the summary information by using a private key in the pre-installed digital certificate, where the summary information is based on The original field generates a data message, and the original text field includes the challenge code, the order information, and a mobile terminal identifier.

In a specific implementation, the digital signature module 403 compares the fingerprint verification information with the preset fingerprint template information, and if the fingerprint verification information does not match the fingerprint template information, prompts the user to re-enter the fingerprint verification information; if the fingerprint verification information and the fingerprint If the template information matches, the step of digitally signing the summary information using the private key in the pre-installed digital certificate is performed. The digital certificate can encrypt and decrypt the summary information transmitted by the network, and the digital certificate includes a private key and a public key, when the mobile terminal When the data transfer server sends data, the mobile terminal can encrypt the data (digital signature) using the private key in the digital certificate, and the data transfer server decrypts the encrypted data using the public key after receiving the encrypted data; when the data transfer server When transmitting data to the mobile terminal, the data transfer server may encrypt the data using the public key in the digital certificate, and the mobile terminal decrypts the encrypted data using the private key after receiving the encrypted data.

The information sending module 404 is configured to send the digitally signed summary information to the data transfer server, so that the data transfer server performs data transfer according to the verification result of the digitally signed summary information.

In a specific implementation, the digitally signed summary information carries an original text field, and after receiving the digitally signed summary information carrying the original text field, the data transfer server first generates the summary data by using the same function; And comparing the decrypted summary information with the summary data; and finally performing data transfer according to the comparison result of the decrypted summary information and the summary data. Further, if the decrypted summary information is the same as the summary data, the data transfer result is data transfer success, and if the decrypted summary information is different from the summary data, the data transfer result is data transfer. failure.

Optionally, as shown in FIG. 4, the mobile terminal may further include:

a certificate installation module 405, sending a certificate service request to the data transfer server, so that the data transfer server returns a certificate installation package; receiving a certificate installation package sent by the digital transfer server; and the certificate input according to the user The installation package determines an instruction to install the certificate installation package to obtain the digital certificate.

Optionally, the certificate installation module 405 is further configured to check whether the mobile terminal is in the fingerprint template information of the user, and if the fingerprint template information of the user does not exist in the mobile terminal, obtain the fingerprint template information input by the user, if the mobile terminal If the user's fingerprint template information exists, the user data transfer service is prompted to be successfully activated.

Optionally, the certificate installation module 405 can also enter the data transfer in the user login data transfer client. After the service activation page is moved, the user may be prompted to input a data transfer verification password, and when the data transfer verification password input by the user is correct, the step of sending a certificate service request to the data transfer server is performed. Moreover, before sending the certificate service request to the data transfer server, whether the mobile terminal supports fingerprint recognition, and if the mobile terminal supports fingerprint recognition, performing the step of sending a certificate service request to the data transfer server, if If the mobile terminal does not support fingerprint recognition, the user is prompted to not support the data transfer service. In particular, fingerprint recognition is performed locally on the mobile terminal.

Further, optionally, the certificate installation module 405 may first receive the information verification code sent by the data transfer server by using the contact manner of the mobile terminal, and prompt the user to submit the information verification code; and then receive the user input. Information verification code; finally, sending the information verification code input by the user to the data transfer server, so that the data transfer server sends the information to the mobile terminal when confirming that the information verification code input by the user is correct Certificate installation package.

The instruction receiving module 406 is configured to receive the confirmation instruction input by the user for the order.

The request sending module 407 is configured to send a data transfer request to the data transfer server according to the confirmation instruction for the order, and the data transfer server returns to carry the challenge after checking the legality of the order The data transfer information of the code.

FIG. 5 is another schematic structural diagram of a mobile terminal according to an embodiment of the present invention. As shown, the mobile terminal can include at least one processor 501, such as a CPU, at least one receiver 503, at least one memory 504, at least one transmitter 505, and at least one communication bus 502. Among them, the communication bus 502 is used to implement connection communication between these components. The receiver 903 and the transmitter 505 of the mobile terminal in the embodiment of the present invention may be a wired transmission port, or may be a wireless device, for example, including an antenna device, for performing signaling or data communication with the data transfer server. The memory 504 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. The memory 504 may alternatively be at least one located away from the foregoing The storage device of the processor 501. A set of program codes is stored in the memory 504, and the processor 501 is configured to call the program code stored in the memory 504 for performing the following operations:

Receiving, by the receiver 503, the data transfer server transmitting the data transfer information carrying the challenge code for the order, where the data transfer information includes the order information;

When it is determined that the fingerprint verification information input by the user matches the preset fingerprint template information, the digest information is digitally signed by using a private key in the pre-installed digital certificate, and the digest information is generated according to the original text field to obtain a data message. The original text field includes the challenge code, the order information, and a mobile terminal identifier;

The digitally signed summary information is transmitted to the data transfer server by the transmitter 505 to cause the data transfer server to perform data transfer according to the verification result of the digitally signed summary information.

Optionally, the processor 501 calls the program stored in the memory 504, and before the receiving data transfer server sends the data transfer information carrying the challenge code for the order, the following:

Receiving a confirmation instruction for the order input by the user;

And transmitting, according to the confirmation instruction for the order, a data transfer request to the data transfer server, so that the data transfer server returns the data transfer information carrying the challenge code.

Sending a certificate service request to the data transfer server to cause the data transfer server to return a certificate installation package;

Receiving a certificate installation package sent by the digital transfer server;

And installing the certificate installation package to obtain the digital certificate according to the determining instruction input by the user for the certificate installation package.

Optionally, the processor 501 calls a program stored in the memory 504, where the certificate service request includes a contact manner of the mobile terminal, and before receiving the certificate installation package sent by the digital transfer server, the method may further perform:

Receiving information verification sent by the data transfer server by using the contact manner of the mobile terminal And prompting the user to submit the information verification code;

Receiving an information verification code input by the user;

Sending the information verification code input by the user to the data transfer server, so that the data transfer server sends the certificate installation package to the mobile terminal when confirming that the information verification code input by the user is correct.

Please refer to FIG. 6. FIG. 6 is a schematic structural diagram of a data transfer server according to an embodiment of the present invention. As shown in the figure, the data transfer server in the embodiment of the present invention may include:

The information sending module 601 is configured to send the data transfer information carrying the challenge code to the mobile terminal, so that the mobile terminal verifies the fingerprint verification information input by the user when the user confirms that the user performs data transfer on the order, and then uses the pre-installed The private key in the digital certificate digitally signs the summary information, the data transfer information includes order information, and the summary information is generated by generating a data message according to the original text field, where the original text field includes the challenge code, the order Information and mobile terminal identification.

Optionally, the information sending module 601 is further configured to receive a data transfer request sent by the mobile terminal, and perform the step of sending the data transfer information carrying the challenge code to the mobile terminal according to the data transfer request.

The information receiving module 602 is configured to receive the digitally signed summary information sent by the mobile terminal.

The information verification module 603 is configured to verify the digitally signed summary information, and perform data transfer according to the verification result of the digitally signed summary information.

Optionally, as shown in FIG. 6, the data transfer server in the embodiment of the present invention may further include:

The request receiving module 604 is configured to receive a certificate service request sent by the mobile terminal.

The certificate sending module 605 is configured to send a certificate installation package to the mobile terminal according to the certificate service request, so that the mobile terminal installs the certificate installation package to obtain the digital certificate.

FIG. 7 is a schematic structural diagram of a data transfer server according to an embodiment of the present invention. As shown, the data transfer server may include at least one processor 701, such as a CPU, at least one receiver 703, and at least one memory 704. At least one transmitter 705, at least one communication bus 702. Among them, the communication bus 702 is used to implement connection communication between these components. The receiver 703 and the transmitter 705 of the data transfer server in the embodiment of the present invention may be a wired transmission port, or may be a wireless device, for example, including an antenna device, for performing signaling or data communication with the mobile terminal. The memory 704 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. The memory 704 can optionally also be at least one storage device located remotely from the aforementioned processor 701. A set of program codes is stored in the memory 704, and the processor 701 is configured to call the program code stored in the memory 704 for performing the following operations:

Transmitting, by the transmitter 705, the data transfer information carrying the challenge code to the mobile terminal, so that the mobile terminal verifies the fingerprint verification information input by the user and detects the use of the pre-installed digital certificate when detecting that the user confirms data transfer to the order. The private key in the digital signature is digitally signed, the data transfer information includes order information, and the summary information is generated by generating a data message according to the original text field, where the original text field includes the challenge code, the order information, and the mobile Terminal identification

Receiving, by the receiver 703, the digitally signed summary information sent by the mobile terminal;

Alternatively, the processor 701 calls the program stored in the memory 704 to perform:

Decrypting the digitally signed summary information using a public key corresponding to the private key;

The decrypted summary information is verified.

Generating summary data according to the original text field;

Comparing the decrypted summary information with the summary data;

Data transfer is performed according to the comparison result of the decrypted summary information and the summary data.

Receiving a data transfer request sent by the mobile terminal;

And transmitting, according to the data transfer request, the step of transmitting the data transfer information carrying the challenge code to the mobile terminal.

Optionally, before the processor 701 calls the program stored in the memory 704 to send the data transfer information carrying the challenge code to the mobile terminal, the processor 701 may further perform:

Receiving a certificate service request sent by the mobile terminal;

And sending, according to the certificate service request, a certificate installation package to the mobile terminal, so that the mobile terminal installs the certificate installation package to obtain the digital certificate.

Optionally, the processor 701 calls a program stored in the memory 704, where the certificate service request includes a contact manner of the mobile terminal, and may further:

Sending, by the contact manner of the mobile terminal, an information verification code to the mobile terminal, so that the mobile terminal prompts the user to submit the information verification code;

Receiving, by the mobile terminal, the information verification code submitted by the user;

When it is confirmed that the information verification code submitted by the user is correct, the certificate installation package is sent to the mobile terminal.

Please refer to FIG. 8. FIG. 8 is a schematic structural diagram of a data transfer system according to an embodiment of the present invention. As shown, the system in the embodiment of the present invention includes at least one mobile terminal 801 and a data transfer server 802, wherein:

The mobile terminal 801 is configured to receive, by the data transfer server 802, data transfer information carrying a challenge code for an order, where the data transfer information includes order information; and when detecting that the user confirms data transfer to the order, prompting the user Entering fingerprint verification information; when it is determined that the fingerprint verification information input by the user matches the preset fingerprint template information, the summary information is digitally signed using the private key in the pre-installed digital certificate, and the summary information is based on the original text field. Generating a data message, the original text field including the challenge code, the order information, and the mobile terminal identifier; and transmitting the digitally signed summary information to the data transfer server, so that the data transfer server 802 Performing data transfer according to the verification result of the digitally signed summary information.

The data transfer server 802 is configured to send the data transfer information carrying the challenge code to the mobile terminal 801, so that the mobile terminal 801 verifies the fingerprint verification information input by the user when the user confirms that the user performs data transfer on the order. The private key in the pre-installed digital certificate digitally signs the summary information, the data transfer information includes order information; receiving the digitally signed summary information sent by the mobile terminal 801; and the digitally signed office The summary information is verified, and data is transferred according to the verification result of the digitally signed summary information.

It should be noted that, for the foregoing various method embodiments, for the sake of simple description, they are all expressed as a series of action combinations, but those skilled in the art should understand that the present invention is not limited by the described action sequence. Because certain steps may be performed in other sequences or concurrently in accordance with the present invention. In addition, those skilled in the art should also understand that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by the present invention.

In the above embodiments, the descriptions of the various embodiments are different, and the parts that are not described in detail in a certain embodiment can be referred to the related descriptions of other embodiments.

A person skilled in the art may understand that all or part of the various steps of the foregoing embodiments may be performed by a program to instruct related hardware. The program may be stored in a computer readable storage medium, and the storage medium may include: Flash disk, read-only memory (English: Read-Only Memory, referred to as: ROM), random accessor (English: Random Access Memory, referred to as: RAM), disk or optical disk.

The content downloading method and the related device and system provided by the embodiments of the present invention are described in detail above. The principles and implementation manners of the present invention are described in the specific examples. The description of the above embodiments is only used to help understand the present invention. The method of the invention and its core idea; at the same time, for the person of ordinary skill in the art, according to the idea of the present invention, there are some changes in the specific embodiment and the scope of application. In summary, the content of the specification should not be understood. To limit the invention.

Claims

A data transfer method, the method comprising:

Receiving, by the receiving data transfer server, data transfer information carrying a challenge code for the order, where the data transfer information includes order information;

When detecting that the user confirms data transfer to the order, prompting the user to input fingerprint verification information;

When it is determined that the fingerprint verification information input by the user matches the preset fingerprint template information, the digest information is digitally signed by using a private key in the pre-installed digital certificate, and the digest information is generated according to the original text field to obtain a data message. The original text field includes the challenge code, the order information, and a mobile terminal identifier;

And transmitting the digitally signed summary information to the data transfer server, so that the data transfer server performs data transfer according to the verification result of the digitally signed summary information.
The method of claim 1, wherein the receiving the data transfer server before transmitting the data transfer information carrying the challenge code for the order comprises:

Receiving a confirmation instruction for the order input by the user;

And transmitting, according to the confirmation instruction for the order, a data transfer request to the data transfer server, so that the data transfer server returns the data transfer information carrying the challenge code.
The method according to claim 1 or 2, wherein before the receiving data transfer server sends the data transfer information carrying the challenge code for the order, the method includes:

Sending a certificate service request to the data transfer server to cause the data transfer server to return a certificate installation package;

Receiving a certificate installation package sent by the digital transfer server;

And installing the certificate installation package to obtain the digital certificate according to the determining instruction input by the user for the certificate installation package.
The method of claim 3, wherein the certificate service request includes a contact information of the mobile terminal, and before receiving the certificate installation package sent by the digital transfer server, the method further includes:

Receiving an information verification code sent by the data transfer server by using a contact manner of the mobile terminal, and prompting the user to submit the information verification code;

Receiving an information verification code input by the user;

Sending the information verification code input by the user to the data transfer server, so that the data transfer server sends the certificate installation package to the mobile terminal when confirming that the information verification code input by the user is correct.
A data transfer method, the method comprising:

Transmitting, by the mobile terminal, data transfer information carrying the challenge code, so that the mobile terminal verifies the fingerprint verification information input by the user when detecting that the user confirms data transfer to the order, and then uses the private key in the pre-installed digital certificate. Digitally signing the summary information, where the data transfer information includes order information, and the summary information is generated by generating a data message according to the original text field, where the original text field includes the challenge code, the order information, and the mobile terminal identifier;

Receiving the digitally signed summary information sent by the mobile terminal;

And verifying the digitally signed summary information, and performing data transfer according to the verification result of the digitally signed summary information.
The method of claim 5, wherein the verifying the digitally signed summary information comprises:

Decrypting the digitally signed summary information using a public key corresponding to the private key;

The decrypted summary information is verified.
The method according to claim 6, wherein said digitally signed summary information carries said original text field, said verifying said digitally signed summary information And performing data transfer according to the verification result of the digitally signed summary information includes:

Generating summary data according to the original text field;

Comparing the decrypted summary information with the summary data;

Data transfer is performed according to the comparison result of the decrypted summary information and the summary data.
The method of claim 5, wherein the transmitting the data transfer information carrying the challenge code to the mobile terminal comprises:

Receiving a data transfer request sent by the mobile terminal;

And transmitting, according to the data transfer request, the step of transmitting the data transfer information carrying the challenge code to the mobile terminal.
The method according to any one of claims 5 to 8, wherein before the transmitting the data transfer information carrying the challenge code to the mobile terminal, the method further includes:

Receiving a certificate service request sent by the mobile terminal;

And sending, according to the certificate service request, a certificate installation package to the mobile terminal, so that the mobile terminal installs the certificate installation package to obtain the digital certificate.
The method of claim 9, wherein the certificate service request comprises a contact mode of the mobile terminal, and the sending the certificate installation package to the mobile terminal according to the certificate service request comprises:

Sending, by the contact manner of the mobile terminal, an information verification code to the mobile terminal, so that the mobile terminal prompts the user to submit the information verification code;

Receiving, by the mobile terminal, the information verification code submitted by the user;

When it is confirmed that the information verification code submitted by the user is correct, the certificate installation package is sent to the mobile terminal.
A mobile terminal, comprising: at least one processor and a memory connected to the at least one processor, the processor calling a program stored in the memory The sequence code is used to execute the following instructions:

Receiving, by the receiving data transfer server, data transfer information carrying a challenge code for the order, where the data transfer information includes order information;

When detecting that the user confirms data transfer to the order, prompting the user to input fingerprint verification information;

When it is determined that the fingerprint verification information input by the user matches the preset fingerprint template information, the digest information is digitally signed by using a private key in the pre-installed digital certificate, and the digest information is generated according to the original text field to obtain a data message. The original text field includes the challenge code, the order information, and a mobile terminal identifier;

And transmitting the digitally signed summary information to the data transfer server, so that the data transfer server performs data transfer according to the verification result of the digitally signed summary information.
The mobile terminal of claim 11 wherein said processor further invokes program code stored in said memory for instructions to:

Receiving a confirmation instruction for the order input by the user;

And transmitting, according to the confirmation instruction for the order, a data transfer request to the data transfer server, so that the data transfer server returns the data transfer information carrying the challenge code.
A mobile terminal according to claim 11 or 12, wherein said processor calls a program code stored in said memory for executing an instruction of:

Sending a certificate service request to the data transfer server to cause the data transfer server to return a certificate installation package;

Receiving a certificate installation package sent by the digital transfer server;

And installing the certificate installation package to obtain the digital certificate according to the determining instruction input by the user for the certificate installation package.
A mobile terminal according to claim 13, wherein said processor calls said program code stored in said memory to perform said certificate installation of said digital transfer server Prior to the packet, the processor invokes the program code stored in the memory and is also used to execute instructions for:

Receiving an information verification code sent by the data transfer server by using the contact manner of the mobile terminal, and prompting the user to submit the information verification code; receiving the information verification code input by the user; verifying the information input by the user The code is sent to the data transfer server to cause the data transfer server to send the certificate installation package to the mobile terminal when confirming that the information verification code input by the user is correct.
A data transfer server, characterized by at least one processor and a memory coupled to the at least one processor, the processor invoking instructions stored in the memory for executing instructions for:

Transmitting, by the mobile terminal, data transfer information carrying the challenge code, so that the mobile terminal verifies the fingerprint verification information input by the user when detecting that the user confirms data transfer to the order, and then uses the private key in the pre-installed digital certificate. Digitally signing the summary information, where the data transfer information includes order information, and the summary information is generated by generating a data message according to the original text field, where the original text field includes the challenge code, the order information, and the mobile terminal identifier;

Receiving the digitally signed summary information sent by the mobile terminal;

And verifying the digitally signed summary information, and performing data transfer according to the verification result of the digitally signed summary information.
A data transfer server according to claim 15, wherein said processor calls said program code stored in said memory for performing said verification of said digitally signed summary information, and The result of the verification of the digitally signed summary information is performed, and the processor calls the program code stored in the memory to further execute an instruction for:

Decrypting the digitally signed summary information using a public key corresponding to the private key; verifying the decrypted summary information.
The data transfer server of claim 16 wherein said processor is tuned Using the program code stored in the memory for performing the digitally signed summary information for verification, and performing data transfer according to the verification result of the digitally signed summary information, specifically including:

Generating summary data according to the original text field;

Comparing the decrypted summary information with the summary data;

Data transfer is performed according to the comparison result of the decrypted summary information and the summary data.
The data transfer server according to claim 15, wherein the processor invoking the program code stored in the memory for executing the transmitting the data transfer information carrying the challenge code to the mobile terminal comprises:

Receiving a data transfer request sent by the mobile terminal; and executing, according to the data transfer request, an instruction to send an operation of carrying the data transfer information of the challenge code to the mobile terminal.
A data transfer server according to any one of claims 15 to 18, wherein said processor calls said program code stored in said memory for further executing instructions for:

Receiving a certificate service request sent by the mobile terminal;

And sending, according to the certificate service request, a certificate installation package to the mobile terminal, so that the mobile terminal installs the certificate installation package to obtain the digital certificate.
The data transfer server according to claim 19, wherein said processor calls said program code stored in said memory for executing said certificate installation package to said mobile terminal according to said certificate service request, The digital certificate is obtained by causing the mobile terminal to install the certificate installation package, and the processor calls the program code stored in the memory to further execute an instruction for:

Sending, by the mobile terminal, a message verification code to the mobile terminal, so that the mobile terminal prompts the user to submit the information verification code; and receiving the information verification code submitted by the user by the mobile terminal And sending the certificate installation package to the mobile terminal when confirming that the information verification code submitted by the user is correct.