WO2017020618A1 - 一种电子资源处理方法、设备 - Google Patents

一种电子资源处理方法、设备 Download PDF

Info

Publication number
WO2017020618A1
WO2017020618A1 PCT/CN2016/080820 CN2016080820W WO2017020618A1 WO 2017020618 A1 WO2017020618 A1 WO 2017020618A1 CN 2016080820 W CN2016080820 W CN 2016080820W WO 2017020618 A1 WO2017020618 A1 WO 2017020618A1
Authority
WO
WIPO (PCT)
Prior art keywords
terminal
electronic resource
resource transfer
preset
server
Prior art date
Application number
PCT/CN2016/080820
Other languages
English (en)
French (fr)
Inventor
陈华山
Original Assignee
腾讯科技(深圳)有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 腾讯科技(深圳)有限公司 filed Critical 腾讯科技(深圳)有限公司
Priority to US15/558,905 priority Critical patent/US10776771B2/en
Publication of WO2017020618A1 publication Critical patent/WO2017020618A1/zh

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327Short range or proximity payments by means of M-devices
    • G06Q20/3278RFID or NFC payments by means of M-devices
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/36Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
    • G06Q20/367Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
    • G06Q20/3674Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes involving authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/08Payment architectures
    • G06Q20/20Point-of-sale [POS] network systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322Aspects of commerce using mobile devices [M-devices]
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • G06Q20/4016Transaction verification involving fraud or risk level assessment in transaction processing
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00Commerce
    • G06Q30/06Buying, selling or leasing transactions
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/02Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60Context-dependent security
    • H04W12/67Risk-dependent, e.g. selecting a security level depending on risk profiles

Definitions

  • the present invention relates to the field of Internet technologies, and in particular, to the field of resource processing technologies, and in particular, to an electronic resource processing method and device.
  • POS Point of Sale
  • supermarket merchants can settle agreements with banks, such as single settlement (that is, according to the amount of each transaction).
  • Monthly settlement that is, according to the total monthly transaction amount
  • the user can use the bank card and other accounts to make payment on the POS terminal, specifically: the POS terminal swipes the user's bank card and other account media, and reads the card number information.
  • the background server sends the card number information and the shopping information (including: the total amount of the purchased product, the name of the merchant, the name of the merchant, etc.) to the background server, and the background server notifies the bank to deduct the corresponding amount, thereby realizing the account in the user's bank card account.
  • Electronic resources ie, electronic money
  • the supermarket merchant can obtain the corresponding cash currency or electronic resource from the bank according to the settlement method of the agreement with the bank, according to the transfer processing record of the POS background server, although the method improves the convenience to a certain extent, but requires the user Carrying an account medium such as a bank card with you is prone to problems such as loss and theft, thus affecting the security of the electronic resource transfer process in the account.
  • the embodiment of the invention provides a method, a device and a server for processing an electronic resource, which can realize the transfer processing of the electronic resource through the interaction between the terminal and the server, thereby improving the convenience and security of the electronic resource transfer processing.
  • a first aspect of the embodiments of the present invention provides an electronic resource processing method, which may include:
  • the second terminal generates an electronic resource transfer request according to the electronic resource transfer attribute and an encrypted identifier used for performing the electronic resource transfer process, and sends the electronic resource transfer request to the server;
  • the server queries the associated account of the second terminal according to the encrypted identifier, and performs a transfer process on the electronic resource in the associated account of the second terminal according to the electronic resource transfer attribute;
  • the server notifies the first terminal and the second terminal of the transfer processing result.
  • a second aspect of the embodiments of the present invention provides another method for processing an electronic resource, which may include:
  • the server queries the associated account of the second terminal according to the encrypted identifier, and performs a transfer process on the electronic resource in the associated account of the second terminal according to the electronic resource transfer attribute;
  • the server notifies the first terminal and the second terminal of the transfer processing result.
  • a third aspect of the embodiments of the present invention provides an electronic resource processing apparatus, which may include:
  • a request receiving unit configured to receive an electronic resource transfer request sent by the second terminal, where the electronic resource transfer request is an encrypted identifier used by the second terminal according to the electronic resource transfer process and an electronic resource transfer attribute sent by the first terminal Generated
  • a querying unit configured to query an associated account of the second terminal according to the encrypted identifier
  • a processing unit configured to perform a transfer process on the electronic resources in the associated account of the second terminal according to the electronic resource transfer attribute
  • a notification unit configured to notify the first terminal and the second terminal of the transfer processing result.
  • a fourth aspect of the embodiments of the present invention provides a server, which may include the electronic resource processing apparatus of the foregoing third aspect.
  • the embodiment of the present invention may exchange an electronic resource transfer attribute between the first terminal and the second terminal, and exchange an electronic resource transfer attribute and an encrypted identifier for performing the electronic resource transfer process between the second terminal and the server, by the server.
  • the terminal and the second terminal, the entire electronic resource transfer processing process is implemented by the interaction between the first terminal and the second terminal, and the server does not need to manually carry the cash currency or the account medium for transfer, thereby improving the electronic resource transfer processing process. Convenience, and improve the security of the electronic resource transfer process.
  • FIG. 1 is a schematic structural diagram of an electronic resource processing system according to an embodiment of the present invention.
  • FIG. 2 is a flowchart of a method for processing an electronic resource according to an embodiment of the present invention
  • FIG. 3 is a flowchart of another electronic resource processing method according to an embodiment of the present invention.
  • FIG. 4 is a flowchart of still another method for processing an electronic resource according to an embodiment of the present invention.
  • FIG. 5 is a schematic structural diagram of an electronic resource processing apparatus according to an embodiment of the present disclosure.
  • FIG. 6 is a schematic structural diagram of an embodiment of the query unit shown in FIG. 5;
  • FIG. 7 is a schematic structural diagram of an embodiment of the security verification unit shown in FIG. 5;
  • FIG. 8 is a structural block diagram of a device according to an embodiment of the present invention.
  • the electronic resource may refer to an electronic money in an electronic account, wherein the electronic account may be Including but not limited to: bank accounts, electronic financial accounts, credit accounts, etc.
  • FIG. 1 is a schematic structural diagram of an electronic resource processing system according to an embodiment of the present invention; the system may include a server, a first terminal, and a second terminal.
  • the first terminal may be a terminal device such as a POS.
  • the second terminal may be a smart terminal such as a notebook computer, a mobile phone, a PAD (tablet), a smart wearable device, or the like.
  • a short-range wireless communication communication connection such as NFC (Near Field Communication), Bluetooth, or the like can be established between the first terminal and the second terminal.
  • the first terminal can establish a communication connection with the server and is in an online state, and the second terminal can also establish a communication connection with the server and be in an online state.
  • the first terminal and the server may establish a communication connection by using a wired manner, for example, the first terminal establishes a communication connection with the server by using an optical fiber, a cable, or the like; the first terminal and the server may also be established by using a wireless manner.
  • the first terminal establishes a communication connection with the server by means of wifi (WIreless-Fidelity), 2G (2-Generation wireless telephone technology), 3G/4G, etc. .
  • the second terminal and the server can also establish a communication connection by using a wired manner such as an optical fiber or a cable, or the second terminal and the server can also establish a communication by using a wireless method such as wifi, 2G/3G/4G, or the like. connection.
  • the first terminal may send an electronic resource transfer attribute to the second terminal; the second terminal generates an electronic resource according to the electronic resource transfer attribute and the encrypted identifier used for performing the electronic resource transfer process.
  • Transferring the request to the server the server queries the associated account of the second terminal according to the encrypted identifier, and performs a transfer process on the electronic resource in the associated account of the second terminal according to the electronic resource transfer attribute;
  • the server notifies the first terminal and the second terminal of a transfer processing result.
  • the electronic resource transfer processing is realized through the interaction between the first terminal and the second terminal and the server, and the cash currency or the account medium for transferring is not manually carried, thereby improving the convenience of the electronic resource transfer processing process and improving the electronic resources.
  • the security of the transfer process is realized through the interaction between the first terminal and the second terminal and the server, and the cash currency or the account medium for transferring is not manually carried, thereby improving the convenience of the electronic resource transfer processing process and improving the electronic resources. The security of the transfer process.
  • the embodiment of the present invention can be applied to an offline shopping scenario. For example, when a user on the second terminal side makes a payment after shopping in a supermarket, the electronic resource in the associated account of the second terminal may be equivalent to the purchased product.
  • the electronic money is transferred, that is, the electronic resource is removed from the associated account of the second terminal, and the electronic resource removed from the associated account of the second terminal can be further transferred to the supermarket merchant. If the user on the second terminal side uses the second terminal to directly purchase at the point of sale terminal, the electronic resource in the associated account of the second terminal (ie, the electronic money equivalent to the item to be purchased) needs to be performed.
  • the transfer process that is, removing the electronic resource from the associated account of the second terminal, further transferring the electronic resource removed from the associated account of the second terminal to the associated account of the point of sale terminal, and the transfer point is successful after the transfer point
  • the terminal sells the items to be purchased, and so on.
  • FIG. 2 is a flowchart of a method for processing an electronic resource according to an embodiment of the present invention; this embodiment illustrates a flow of an electronic resource processing method from an interaction between a first terminal, a second terminal, and a server; The following steps S101 to S106 are included.
  • the first terminal sends an electronic resource transfer attribute to the second terminal.
  • the electronic resource transfer attribute defines a flow direction of the electronic resource in the transfer process and a quantity of the electronic resource to be transferred; specifically, the electronic resource transfer attribute may include, but is not limited to, a receiver information and an electronic to be transferred.
  • the receiver may refer to a merchant to which the first terminal belongs, and the receiver information may include, but is not limited to, information such as a name, an address, an identifier, an associated account, and the like of the merchant to which the first terminal belongs.
  • the amount of electronic resources to be transferred may be the amount of money equivalent to the purchased product.
  • the first terminal and the second terminal may communicate by using a short-range wireless communication method such as NFC (Near Field Communication), Bluetooth, etc., the first terminal is based on And transmitting, by the short-range wireless communication connection with the second terminal, the electronic resource transfer attribute to the second terminal.
  • a short-range wireless communication method such as NFC (Near Field Communication), Bluetooth, etc.
  • the second terminal generates an electronic resource transfer request according to the electronic resource transfer attribute and the encrypted identifier used for performing the electronic resource transfer process.
  • the encrypted identifier for performing the electronic resource transfer processing is obtained by performing encryption processing on the target identifier used for performing the electronic resource transfer processing.
  • the target identifier may be associated with an associated account of the second terminal, and the associated account of the second terminal may be found by using the target identifier.
  • the target identifier may include, but is not limited to, a device identifier of the second terminal, a user identifier of the second terminal side, or an identifier of an associated account of the second terminal.
  • the device identifier of the second terminal may include, but is not limited to, any one of the following or a combination thereof: model information of the second terminal, the second terminal Read ROM (Read Only Memory) information, vendor information of the second terminal, kernel information of the second terminal, and the like.
  • the user on the second terminal side refers to the user who uses the second terminal, and the user identifier on the second terminal side may include, but is not limited to, any one of the following or a combination thereof: the user of the second terminal side Instant communication number, phone number, email number, ID (Identity) number, etc.
  • the associated account of the second terminal may include, but is not limited to, any one of the following or a combination thereof: a bank account, an electronic financial account, a credit account, and the like.
  • the second terminal may encapsulate the electronic resource transfer attribute and the encrypted identifier according to a communication protocol with the server, and generate an electronic resource transfer request.
  • the second terminal sends the electronic resource transfer request to a server.
  • the second terminal may establish a communication connection with the server and be in an online state, and the second terminal may send the electronic resource transfer request to the server based on a communication connection with the server.
  • the server queries an associated account of the second terminal according to the encrypted identifier.
  • the server may parse the received electronic resource transfer request based on a communication protocol with the second terminal to obtain the encrypted identifier and the electronic resource transfer attribute. Because the encrypted identifier is obtained by performing encryption processing on the target identifier for performing the electronic resource transfer processing, the server may decrypt the encrypted identifier to obtain the target identifier, and the target identifier may be found by using the target identifier. The associated account of the second terminal.
  • the server performs a transfer process on the electronic resources in the associated account of the second terminal according to the electronic resource transfer attribute.
  • the electronic resource transfer attribute defines a flow direction of the electronic resource in the transfer process and a quantity of the electronic resource to be transferred.
  • the server may remove the quantity of the electronic resources to be transferred from the associated account of the second terminal according to the definition of the electronic resource transfer attribute, and further transfer the quantity of the removed electronic resources to the Receiver.
  • the server notifies the first terminal and the second terminal of a transfer processing result.
  • the transfer processing result may include: the transfer processing is successful, or the transfer processing is failed.
  • the server may determine the transfer processing result according to the settlement manner of the merchant to which the first terminal belongs, where the settlement manner may include, but is not limited to, a real-time settlement manner or a non-real-time settlement manner; wherein the real-time settlement manner may include a single junction.
  • non-real-time settlement methods may include but are not limited On: Zhou Jie (that is, according to the total weekly transaction amount), monthly settlement (that is, according to the total monthly transaction amount) and so on.
  • the settlement mode of the merchant to which the first terminal belongs is a real-time settlement mode
  • the transfer process is successful; otherwise, the electronic resource transfer process failure.
  • the settlement mode of the merchant to which the first terminal belongs is non-real time settlement, if the electronic resource in the associated account of the second terminal is successfully removed from the associated account of the second terminal, the transfer process is successful. ; otherwise, the transfer processing failed.
  • the server may further include a reason for the failure in the transfer processing result, where the cause of the failure may include, but is not limited to, the associated account of the second terminal is an invalid account, The total number of electronic resources in the associated account of the second terminal is insufficient, the network reason cannot be connected to the associated account of the second terminal, and the like.
  • the first terminal may also establish a communication connection with the server and be in an online state, and the server may establish a communication connection with the first terminal and the second terminal respectively, and based on the established communication connection. Notifying the first terminal and the second terminal respectively of the transfer processing result.
  • the embodiment of the present invention may exchange an electronic resource transfer attribute between the first terminal and the second terminal, and exchange an electronic resource transfer attribute and an encrypted identifier for performing the electronic resource transfer process between the second terminal and the server, by the server.
  • Querying the associated account of the second terminal according to the encrypted identifier, and performing an transfer process on the electronic resource in the associated account of the second terminal according to the electronic resource transfer attribute, and finally notifying the result of the transfer processing to the first A terminal and the second terminal the entire electronic resource transfer processing process is implemented by the interaction between the first terminal and the second terminal and the server, and does not need to manually carry the cash currency or the account medium for transfer, thereby improving the electronic resource transfer processing process. Convenience, improve the security of the electronic resource transfer process.
  • FIG. 3 is a flowchart of another electronic resource processing method according to an embodiment of the present invention. This embodiment illustrates a flow of an electronic resource transfer process from a server side; the method may include the following steps S201 to S204.
  • the server receives an electronic resource transfer request sent by the second terminal, where the electronic resource transfer request is generated by the second terminal according to the encrypted identifier used for performing the electronic resource transfer process and the electronic resource transfer attribute sent by the first terminal.
  • the second terminal can establish a communication connection with the server and is in an online state.
  • the server may receive the electronic resource transfer request sent by the second terminal based on a communication connection with the second terminal.
  • the electronic resource transfer attribute defines a flow direction of the electronic resource in the transfer process and a quantity of the electronic resource to be transferred; specifically, the electronic resource transfer attribute may include but is not limited to: receiver information and desired transfer The number of electronic resources.
  • the receiver may refer to a merchant to which the first terminal belongs, and the receiver information may include, but is not limited to, information such as a name, an address, an identifier, an associated account, and the like of the merchant to which the first terminal belongs.
  • the amount of electronic resources to be transferred may be the amount of money equivalent to the purchased product.
  • the encrypted identifier used for performing the electronic resource transfer processing is obtained by performing encryption processing on the target identifier used for performing the electronic resource transfer processing.
  • the target identifier may be associated with an associated account of the second terminal, and the associated account of the second terminal may be found by using the target identifier.
  • the target identifier may include, but is not limited to, a device identifier of the second terminal, a user identifier of the second terminal side, or an identifier of an associated account of the second terminal.
  • the server queries an associated account of the second terminal according to the encrypted identifier.
  • the server may parse the received electronic resource transfer request based on a communication protocol with the second terminal to obtain the encrypted identifier and the electronic resource transfer attribute.
  • the server may decrypt the encrypted identifier to obtain the target identifier, and the identifier may be found by using the target identifier, because the encryption identifier is obtained by performing encryption processing on a target identifier for performing an electronic resource transfer process.
  • the associated account of the second terminal may be used to obtain the target identifier.
  • the server performs a transfer process on the electronic resources in the associated account of the second terminal according to the electronic resource transfer attribute.
  • the server may remove the quantity of the electronic resources to be transferred from the associated account of the second terminal according to the definition of the electronic resource transfer attribute, and further transfer the quantity of the removed electronic resources to the Receiver.
  • the server notifies the first terminal and the second terminal of the transfer processing result.
  • the transfer processing result may include: the transfer processing is successful, or the transfer processing is failed.
  • the server may determine the transfer processing result according to the settlement manner of the merchant to which the first terminal belongs, where the settlement manner may include, but is not limited to, a real-time settlement manner or a non-real-time settlement manner; wherein the real-time settlement manner may include a single junction.
  • non-real-time settlement methods may include but are not limited On: Zhou Jie (that is, according to the total weekly transaction amount), monthly settlement (that is, according to the total monthly transaction amount) and so on.
  • the settlement mode of the merchant to which the first terminal belongs is a real-time settlement mode
  • the transfer process is successful; otherwise, the electronic resource transfer process failure.
  • the settlement mode of the merchant to which the first terminal belongs is non-real time settlement, if the electronic resource in the associated account of the second terminal is successfully removed from the associated account of the second terminal, the transfer process is successful. ; otherwise, the transfer processing failed.
  • the server may further include a reason for the failure in the transfer processing result, where the cause of the failure may include, but is not limited to, the associated account of the second terminal is an invalid account, The total number of electronic resources in the associated account of the second terminal is insufficient, the network reason cannot be connected to the associated account of the second terminal, and the like.
  • the first terminal may also establish a communication connection with the server and be in an online state, and the server may establish a communication connection with the first terminal and the second terminal respectively, and based on the established communication connection. Notifying the first terminal and the second terminal respectively the result of the transfer processing.
  • the embodiment of the present invention may exchange an electronic resource transfer attribute between the first terminal and the second terminal, and exchange an electronic resource transfer attribute and an encrypted identifier for performing the electronic resource transfer process between the second terminal and the server, by the server. Querying the associated account of the second terminal according to the encrypted identifier, and performing an transfer process on the electronic resource in the associated account of the second terminal according to the electronic resource transfer attribute, and finally notifying the result of the transfer processing to the first
  • the first electronic terminal and the second terminal the entire electronic resource transfer processing process is realized by the interaction between the first terminal and the second terminal and the server, and the electronic money transfer processing is improved without manually carrying the cash currency or the account medium for transfer.
  • the convenience of the process and the safety of the electronic resource transfer process is provided by the interaction between the first terminal and the second terminal and the server.
  • FIG. 4 is a flowchart of still another method for processing an electronic resource according to an embodiment of the present invention. This embodiment illustrates a flow of an electronic resource transfer process from an interaction between a first terminal, a second terminal, and a server; The method may include the following steps S301-S312.
  • the first terminal acquires an electronic resource transfer attribute, where the electronic resource transfer attribute includes: the receiver information and the quantity of the electronic resources to be transferred.
  • the first terminal may generate the electronic resource transfer attribute according to information of the user's shopping item on the second terminal side and the merchant of the first terminal.
  • Electronic resource transfer The attribute defines the flow of the electronic resource in the transfer process and the amount of the electronic resource to be transferred; specifically, the electronic resource transfer attribute may include, but is not limited to, the receiver information and the number of electronic resources to be transferred.
  • the receiver may refer to a merchant to which the first terminal belongs, and the receiver information may include, but is not limited to, information such as a name, an address, an identifier, an associated account, and the like of the merchant to which the first terminal belongs.
  • the amount of electronic resources to be transferred may be the amount of money equivalent to the purchased product.
  • the first terminal sends the electronic resource transfer attribute to the second terminal by using a short-range wireless communication manner, where the short-range wireless communication mode includes an NFC mode or a Bluetooth mode.
  • the first terminal may establish a short-range wireless communication connection with the second terminal, for example, the first terminal and the second terminal are both configured with an NFC communication module, and the NFC communication module of the first terminal is
  • the NFC communication module of the second terminal establishes an NFC communication connection; for example, the first terminal and the second terminal are both configured with a Bluetooth communication module, and the Bluetooth communication module of the first terminal and the second terminal communicate with each other.
  • the module performs Bluetooth pairing and establishes a Bluetooth communication connection.
  • the first terminal transmits the electronic resource transfer attribute to the second terminal based on a short-range wireless communication connection with NFC or Bluetooth or the like between the second terminal.
  • the embodiment of the present invention can be applied to an offline shopping scenario, in which short-distance wireless communication is used between the first terminal and the second terminal for communication, which can make the communication interaction more accurate and fast, thereby improving communication.
  • the effectiveness of the interaction can be applied to an offline shopping scenario, in which short-distance wireless communication is used between the first terminal and the second terminal for communication, which can make the communication interaction more accurate and fast, thereby improving communication. The effectiveness of the interaction.
  • steps S301 to S302 of this embodiment may be specific refinement steps of step S101 of the embodiment shown in FIG. 2.
  • the second terminal acquires a target identifier for performing an electronic resource transfer process, where the target identifier includes: a device identifier of the second terminal, a user identifier of the second terminal, or an association of the second terminal.
  • the identity of the account includes: a device identifier of the second terminal, a user identifier of the second terminal, or an association of the second terminal.
  • the target identifier may be associated with an associated account of the second terminal, and the associated account of the second terminal may be found by the target identifier.
  • the device identifier of the second terminal may include, but is not limited to, model information of the second terminal, ROM information of the second terminal, vendor information of the second terminal, and the second terminal. Any one or more of kernel information and the like.
  • the user on the second terminal side refers to the user who uses the second terminal, and the user identifier on the second terminal side may include, but is not limited to, an instant communication number, a phone number, and an email of the user on the second terminal side. Any one or more of a number, an ID number, and the like.
  • the associated account of the second terminal may include, but is not limited to, a bank account, Any one or more of an electronic financial account, a credit account, and the like.
  • the second terminal may read the device identifier of the second terminal from an operating system of the second terminal; or the second terminal may use the user at the second terminal side.
  • the user identifier of the second terminal side is read; or the second terminal may obtain an identifier of an associated account that is pre-bound with the user identifier of the second terminal side; or The second terminal may request the user on the second terminal side to input the identifier of the associated account of the second terminal.
  • S304 The second terminal encrypts the acquired target identifier for performing the electronic resource transfer processing by using the first preset encryption algorithm, and obtains an encrypted identifier for performing the electronic resource transfer processing.
  • the first preset encryption algorithm may include, but is not limited to, a HASH (Hash) algorithm, a digest algorithm, a symmetric encryption algorithm, an asymmetric encryption algorithm, and the like.
  • the second terminal uses the first preset encryption algorithm to encrypt the target identifier, which can improve the security of the target identifier in the transmission process.
  • the second terminal encrypts the electronic resource transfer attribute and the encrypted identifier used for performing the electronic resource transfer process by using a second preset encryption algorithm to obtain an electronic resource transfer request.
  • the second preset encryption algorithm may include, but is not limited to, a HASH algorithm, a digest algorithm, a symmetric encryption algorithm, an asymmetric encryption algorithm, and the like.
  • the second terminal may encrypt the electronic resource transfer attribute and the encrypted identifier by using the second preset encryption algorithm according to a communication protocol with the server, obtain an electronic resource transfer request, and upgrade the electronic resource. The security and reliability of the transfer request during transmission.
  • steps S303 to S305 of this embodiment may be specific refinement steps of step S102 of the embodiment shown in FIG. 2.
  • the second terminal sends the electronic resource transfer request to a server.
  • the second terminal may establish a communication connection with the server and be in an online state, and the second terminal may send the electronic resource transfer request to the server based on a communication connection with the server.
  • the server performs decryption processing on the electronic resource transfer request by using the second preset encryption algorithm to obtain the electronic resource transfer attribute and the encrypted identifier.
  • the server may perform decryption processing on the received electronic resource transfer request by using the second preset encryption algorithm, based on a communication protocol with the second terminal, to obtain the encrypted identifier and the electronic resource transfer. Attributes.
  • the server performs decryption processing on the encrypted identifier by using the first preset encryption algorithm to obtain a target identifier for performing an electronic resource transfer process.
  • the target identifier may be associated with an associated account of the second terminal, and the associated account of the second terminal may be found by using the target identifier.
  • the server queries the associated account of the second terminal according to the target identifier used for performing the electronic resource transfer process.
  • steps S307 to S309 of this embodiment may be specific refinement steps of step S104 of the embodiment shown in FIG. 2.
  • step S310 The server performs security verification on the transfer process; if the security verification passes, the process proceeds to step S311.
  • the security verification of the transfer process is performed to confirm the security of the electronic resource during the transfer process, and to ensure the security of the associated account of the second terminal, thereby ensuring the second terminal side.
  • the step may specifically include the following steps s11-s13:
  • the server acquires a score of at least one risk factor of the transfer process.
  • the risk factor may include at least one of the following: the quantity of the electronic resource to be transferred exceeds a preset number threshold, the device identifier of the second terminal is a non-preset common device identifier, and the geographical location of the second terminal is non- The preset common location, the data receiver is a preset high-risk user, and the request time of the electronic resource transfer request is a preset high-risk transaction time.
  • the preset quantity threshold may be set according to actual needs, for example, the preset quantity threshold may be set according to a multiple of an average value of the number of electronic resources transferred by the multiple history transfer processing, such as The preset number threshold may be 1 time, 5 times, 10 times, and the like of the average of the number of electronic resources transferred in the first N times.
  • the preset common device identifier may be a device identifier pre-configured by the user on the second terminal side, or may be a device identifier used to count a plurality of historical transfer processing processes related to the associated account of the second terminal.
  • the preset common location may be a geographical location pre-configured by the user on the second terminal side, or may be related to statistics related to the associated account of the second terminal.
  • the preset high-risk user may be a merchant that may be maliciously transferred by the server according to experience.
  • the preset high-risk transaction time may be a high-frequency time range in which the server calculates the malicious transfer process based on experience.
  • the server may set a corresponding weight score for each risk factor in advance, for example, if the number of electronic resources to be transferred exceeds a preset number threshold, the weight score may be obtained as 5 points; If the device identifier of the second terminal is a non-preset common device identifier, the weight score is 5 points; if the geographic location of the second terminal is a non-preset common location, the weight score is 3 points; if the data is received For the preset high-risk users, the weight score can be obtained as 3 points; if the request time of the electronic resource transfer request is the preset high-risk transaction time, the weight score can be obtained as 4 points;
  • the server calculates a total score of the at least one risk factor.
  • the server sends a security reminder to the second terminal, and after receiving the confirmation message fed back by the second terminal, determining security Verification passed.
  • the preset score threshold may be set according to experience, and may be set according to the requirement of safety.
  • the server sends a security reminder to the second terminal, and the security alert may be used for reminding
  • the user enters an account password or enters a security check code.
  • the server determines that the security verification is passed, and may perform a subsequent transfer processing process, where the confirmation message may carry the correct account password or the correct security check code. It should be noted, If the acknowledgment message is not fed back, or the feedback confirmation message carries the wrong account password or the wrong security check code, the server may determine that there is a security risk in the transfer process, thereby ending the process and not proceeding again. The transfer process, that is, the transfer process fails.
  • the server performs a transfer process on the electronic resources in the associated account of the second terminal according to the electronic resource transfer attribute.
  • the server may remove the quantity of the electronic resources to be transferred from the associated account of the second terminal according to the definition of the electronic resource transfer attribute, and further transfer the quantity of the removed electronic resources to the Receiver.
  • the server notifies the first terminal and the second terminal of the transfer processing result.
  • the transfer processing result may include: the transfer processing is successful, or the transfer processing is failed.
  • the server may determine the transfer processing result according to the settlement manner of the merchant to which the first terminal belongs, where the settlement manner may include, but is not limited to, a real-time settlement manner or a non-real-time settlement manner; wherein the real-time settlement manner may include a single junction.
  • non-real-time settlement methods may include, but are not limited to, weekly settlement (that is, according to the weekly transaction total), monthly settlement (that is, according to the monthly transaction total) and so on.
  • the settlement mode of the merchant to which the first terminal belongs is a real-time settlement mode
  • the transfer process is successful; otherwise, the electronic resource transfer process failure.
  • the settlement mode of the merchant to which the first terminal belongs is non-real time settlement, if the electronic resource in the associated account of the second terminal is successfully removed from the associated account of the second terminal, the transfer process is successful. ; otherwise, the transfer processing failed.
  • the server may further include a reason for the failure in the transfer processing result, where the cause of the failure may include, but is not limited to, the associated account of the second terminal is an invalid account, The total number of electronic resources in the associated account of the second terminal is insufficient, the network reason cannot be connected to the associated account of the second terminal, and the like.
  • the first terminal may also establish a communication connection with the server and be in an online state, and the server may establish a communication connection with the first terminal and the second terminal respectively, and based on the established communication connection. Notifying the first terminal and the second terminal respectively the result of the transfer processing.
  • the embodiment of the present invention may exchange an electronic resource transfer attribute between the first terminal and the second terminal, and interact with the electronic resource transfer attribute and the electronic resource transfer process between the second terminal and the server.
  • Encrypted identifier the server queries the associated account of the second terminal according to the encrypted identifier, and performs transfer processing on the electronic resource in the associated account of the second terminal according to the electronic resource transfer attribute, and finally
  • the transfer processing result is notified to the first terminal and the second terminal, and the entire electronic resource transfer processing process is implemented by the interaction between the first terminal and the second terminal and the server, without manually carrying the cash currency or account for transferring
  • the medium enhances the convenience of the electronic resource transfer process and improves the security of the electronic resource transfer process.
  • FIG. 5 is a schematic structural diagram of an electronic resource processing apparatus according to an embodiment of the present invention.
  • the apparatus may include: a request receiving unit 101, a query unit 102, a processing unit 103, and a notification unit 104.
  • the request receiving unit 101 is configured to receive an electronic resource transfer request sent by the second terminal, where the electronic resource transfer request is an electronic identifier transferred by the second terminal according to the encrypted identifier used for the electronic resource transfer process and the first terminal.
  • the attribute is generated.
  • the second terminal may establish a communication connection with the server and be in an online state, and the request receiving unit 101 may receive the location sent by the second terminal based on a communication connection with the second terminal.
  • the electronic resource transfer attribute defines a flow direction of the electronic resource in the transfer process and a quantity of the electronic resource to be transferred; specifically, the electronic resource transfer attribute may include but is not limited to: receiver information and desired transfer The number of electronic resources.
  • the receiver may refer to a merchant to which the first terminal belongs, and the receiver information may include, but is not limited to, information such as a name, an address, an identifier, an associated account, and the like of the merchant to which the first terminal belongs.
  • the amount of electronic resources to be transferred may be the amount of money equivalent to the purchased product.
  • the encrypted identifier used for performing the electronic resource transfer processing is obtained by performing encryption processing on the target identifier used for performing the electronic resource transfer processing.
  • the target identifier may be associated with an associated account of the second terminal, and the associated account of the second terminal may be found by using the target identifier.
  • the target identifier may include, but is not limited to, a device identifier of the second terminal, a user identifier of the second terminal side, or an identifier of an associated account of the second terminal.
  • the querying unit 102 is configured to query the associated account of the second terminal according to the encrypted identifier.
  • the query unit 102 may parse the received electronic resource transfer request based on a communication protocol with the second terminal to obtain the encrypted identifier and the electronic resource transfer attribute.
  • the cryptographic identifier is obtained by performing encryption processing on the target identifier for performing the electronic resource transfer processing, and the query unit 102 may decrypt the encrypted identifier to obtain the target identifier, and the target identifier may be found by using the target identifier.
  • the associated account of the second terminal may be used to obtain the target identifier and the electronic resource transfer attribute.
  • the processing unit 103 is configured to perform a transfer process on the electronic resources in the associated account of the second terminal according to the electronic resource transfer attribute.
  • the processing unit 103 may remove the quantity of the electronic resources to be transferred from the associated account of the second terminal according to the definition of the electronic resource transfer attribute, and may further transfer the quantity of the removed electronic resources to the receiver. .
  • the notification unit 104 is configured to notify the first terminal and the second terminal of the transfer processing result.
  • the transfer processing result may include: the transfer processing is successful, or the transfer processing is failed.
  • the server may determine the transfer processing result according to the settlement manner of the merchant to which the first terminal belongs, where the settlement manner may include, but is not limited to, a real-time settlement manner or a non-real-time settlement manner; wherein the real-time settlement manner may include a single junction.
  • non-real-time settlement methods may include, but are not limited to, weekly settlement (that is, according to the weekly transaction total), monthly settlement (that is, according to the monthly transaction total) and so on.
  • the settlement mode of the merchant to which the first terminal belongs is a real-time settlement mode
  • the transfer process is successful; otherwise, the electronic resource transfer process failure.
  • the settlement mode of the merchant to which the first terminal belongs is non-real time settlement, if the electronic resource in the associated account of the second terminal is successfully removed from the associated account of the second terminal, the transfer process is successful. ; otherwise, the transfer processing failed.
  • the notification unit 104 may further carry a failure reason in the transfer processing result, where the failure cause may include, but is not limited to, the associated account of the second terminal is invalid.
  • the first terminal may also establish a communication connection with the server and be in an online state, and the server may separately The first terminal establishes a communication connection with the second terminal, and the notification unit 104 may notify the first terminal and the second terminal respectively according to the established communication connection.
  • the apparatus may further include: a security verification unit 105.
  • the security verification unit 105 is configured to perform security verification on the transfer process, and after the security verification is passed, the processing unit transfers the electronic resources in the associated account of the second terminal according to the electronic resource transfer attribute. deal with.
  • the purpose of the security verification of the transfer process is to confirm the security of the electronic resource in the process of the transfer process, and to ensure the security of the associated account of the second terminal, thereby securing the rights of the user on the second terminal side. .
  • the embodiment of the present invention may exchange an electronic resource transfer attribute between the first terminal and the second terminal, and exchange an electronic resource transfer attribute and an encrypted identifier for performing the electronic resource transfer process between the second terminal and the server, by the server.
  • Querying the associated account of the second terminal according to the encrypted identifier, and performing an transfer process on the electronic resource in the associated account of the second terminal according to the electronic resource transfer attribute, and finally notifying the result of the transfer processing to the first A terminal and the second terminal the entire electronic resource transfer processing process is implemented by the interaction between the first terminal and the second terminal and the server, and does not need to manually carry the cash currency or the account medium for transfer, thereby improving the electronic resource transfer processing process. Convenience, improve the security of the electronic resource transfer process.
  • the query unit 102 may include: a first decryption processing unit 1001, a second decryption processing unit 1002, and an account query unit 1003.
  • the first decryption processing unit 1001 is configured to perform decryption processing on the electronic resource transfer request by using a second preset encryption algorithm to obtain the electronic resource transfer attribute and the encrypted identifier.
  • the second preset encryption algorithm may include, but is not limited to, a HASH algorithm, a digest algorithm, a symmetric encryption algorithm, an asymmetric encryption algorithm, and the like.
  • the second terminal may encrypt the electronic resource transfer attribute and the encrypted identifier by using the second preset encryption algorithm according to a communication protocol with the server, obtain an electronic resource transfer request, and upgrade the electronic resource. The security and reliability of the transfer request during transmission.
  • the first decryption processing unit 1001 may use the second preset encryption algorithm to forward the received electronic resource transfer request based on a communication protocol with the second terminal.
  • the line decryption process obtains the encrypted identifier and the electronic resource transfer attribute.
  • the second decryption processing unit 1002 is configured to perform decryption processing on the encrypted identifier by using a first preset encryption algorithm to obtain a target identifier for performing electronic resource transfer processing.
  • the first preset encryption algorithm may include, but is not limited to, a HASH algorithm, a digest algorithm, a symmetric encryption algorithm, an asymmetric encryption algorithm, and the like.
  • the second terminal uses the first preset encryption algorithm to perform encryption processing on the target identifier, and obtains an encrypted identifier for performing electronic resource transfer processing, which can improve the security of the target identifier in the transmission process.
  • the second decryption processing unit 1002 may perform decryption processing on the encrypted identifier by using the first preset encryption algorithm to obtain a target identifier for performing electronic resource transfer processing.
  • the target identifier may be associated with an associated account of the second terminal, and the associated account of the second terminal may be found by using the target identifier.
  • the account querying unit 1003 is configured to query the associated account of the second terminal according to the target identifier used for performing the electronic resource transfer process.
  • the embodiment of the present invention may exchange an electronic resource transfer attribute between the first terminal and the second terminal, and exchange an electronic resource transfer attribute and an encrypted identifier for performing the electronic resource transfer process between the second terminal and the server, by the server. Querying the associated account of the second terminal according to the encrypted identifier, and performing an transfer process on the electronic resource in the associated account of the second terminal according to the electronic resource transfer attribute, and finally notifying the result of the transfer processing to the first
  • the first electronic terminal and the second terminal the entire electronic resource transfer processing process is realized by the interaction between the first terminal and the second terminal and the server, and the electronic money transfer processing is improved without manually carrying the cash currency or the account medium for transfer.
  • the convenience of the process and the safety of the electronic resource transfer process is provided by the interaction between the first terminal and the second terminal and the server.
  • the security verification unit 105 may include: a score acquisition unit 2001, a total score calculation unit 2002, and a verification result confirmation unit 2003.
  • the score obtaining unit 2001 is configured to obtain a score of at least one risk factor of the transfer process.
  • the risk factor may include at least one of the following: the quantity of the electronic resource to be transferred exceeds a preset number threshold, the device identifier of the second terminal is a non-preset common device identifier, and the geographical location of the second terminal is non- The preset common location, the data receiver is a preset high-risk user, and the request time of the electronic resource transfer request is a preset high-risk transaction time.
  • the preset quantity threshold may be set according to actual needs.
  • the preset quantity threshold may be set according to a multiple of an average value of the transferred electronic resources of the multiple history transfer processing.
  • the preset quantity threshold may be 1 time, 5 times, 10 times, and the like of the average value of the number of electronic resources transferred in the first N times.
  • the preset common device identifier may be a device identifier pre-configured by the user on the second terminal side, or may be a device identifier used to count a plurality of historical transfer processing processes related to the associated account of the second terminal.
  • the preset common location may be a geographical location pre-configured by the user on the second terminal side, or may be a geographical location where a plurality of historical transfer processing procedures related to the associated account of the second terminal are counted.
  • the preset high-risk user may be a merchant that may be maliciously transferred by the server according to experience.
  • the preset high-risk transaction time may be a high-frequency time range in which the server calculates the malicious transfer process based on experience.
  • the server may set a corresponding weight score for each risk factor in advance, for example, if the number of electronic resources to be transferred exceeds a preset number threshold, the score obtaining unit 2001 may obtain a weight score of 5 If the device identifier of the second terminal is a non-preset common device identifier, the score obtaining unit 2001 may obtain a weight score of 5; if the geographic location of the second terminal is a non-preset common location, The score acquisition unit 2001 can obtain a weight score of 3; if the data receiver is a preset high-risk user, the score acquisition unit 2001 can obtain a weight score of 3; if the request time of the electronic resource transfer request is preset At high risk transaction time, the score acquisition unit 2001 may obtain a weight score of 4 points;
  • the total score calculation unit 2002 is configured to calculate a total score of the at least one risk factor.
  • a verification result confirming unit 2003 configured to: if the total score of the at least one risk factor is less than or equal to a preset score threshold, the security verification passes; or, if the total score of the at least one risk factor is greater than the pre-
  • the score threshold is set to send a security reminder to the first terminal, and after receiving the confirmation message fed back by the first terminal, it is determined that the security verification is passed.
  • the preset score threshold may be set according to experience, and may be set according to safety requirements. The lower the preset score threshold, the higher the requirement for safety; otherwise, the preset score threshold is more High, indicating that the lower the security requirements, for example: you can set the preset score threshold to 25 points, or set Set the preset score threshold to 15 points, and so on. If the total score of the at least one risk factor is less than or equal to the preset score threshold, the security verification is passed, and the subsequent transfer process can be performed.
  • Security alerts can be used to alert the user to enter an account password or enter a security check code.
  • the server After receiving the confirmation message fed back by the second terminal, the server determines that the security verification is passed, and may perform a subsequent transfer processing process, where the confirmation message may carry the correct account password or the correct security check code.
  • the verification result confirming unit 2003 may determine that there is a security risk in the current transfer processing process, thereby The transfer process is terminated, that is, the transfer process fails.
  • the embodiment of the present invention may exchange an electronic resource transfer attribute between the first terminal and the second terminal, and exchange an electronic resource transfer attribute and an encrypted identifier for performing the electronic resource transfer process between the second terminal and the server, by the server.
  • Querying the associated account of the second terminal according to the encrypted identifier, and performing an transfer process on the electronic resource in the associated account of the second terminal according to the electronic resource transfer attribute, and finally notifying the result of the transfer processing to the first A terminal and the second terminal the entire electronic resource transfer processing process is realized by interaction between the first terminal, the second terminal, and the server, and the electronic money transfer is improved without manually carrying cash money or an account medium for transfer.
  • the embodiment of the present invention further discloses a server, which may be a server in the system shown in FIG. 1, and the server may include an electronic resource processing device; the structure and function of the device can be implemented as shown in FIG. 5-7. The related description of the examples will not be described here.
  • the server of this embodiment can be applied to the methods shown in FIGS. 2 to 4 described above.
  • the embodiment of the present invention may exchange an electronic resource transfer attribute between the first terminal and the second terminal, and exchange an electronic resource transfer attribute and an encrypted identifier for performing the electronic resource transfer process between the second terminal and the server, by the server. Querying the associated account of the second terminal according to the encrypted identifier, and performing an transfer process on the electronic resource in the associated account of the second terminal according to the electronic resource transfer attribute, and finally notifying the result of the transfer processing to the first
  • the first electronic terminal and the second terminal the entire electronic resource transfer processing process is realized by the interaction between the first terminal and the second terminal and the server, and the electronic money transfer processing is improved without manually carrying the cash currency or the account medium for transfer. Process It is agile and enhances the security of the electronic resource transfer process.
  • the computer program can be stored in a computer readable storage medium, and when the program is invoked, hardware (eg, a machine, device, computing device, computer system, or hardware involved in the network) can be caused to perform the The operation of an embodiment of the method.
  • the computer readable storage medium may include, but is not limited to, a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).
  • the above computer readable storage medium may also be various types of recording media that the computer device can access through a network or a communication link, for example, a recording medium that can extract data therein through a router, the Internet, a local area network, or the like.
  • the above computer readable storage medium may refer to a plurality of computer readable storage media located, for example, in the same computer system, or computer readable storage media distributed, for example, in a plurality of computer systems or computing devices.
  • FIG. 8 is a block diagram showing the structure of a device in accordance with the present invention.
  • the device 80 can include at least one processor 82 and memory 84, and optionally, a communication unit 86.
  • the device herein can be a server.
  • the processor 82 can be regarded as a control center of the device, which connects other components in the device through an interface or a line in a wired or wireless manner.
  • the processor 82 and the memory 84 can be connected by a data bus.
  • the processor 84 can be connected to the user terminal 88 or the network 100 in a wired or wireless manner through an interface (which can be a wired interface or a wireless interface) or the communication unit 86, thereby enabling data interaction and communication with the outside.
  • memory 84 may include, but is not limited to, ROM, RAM, CD-ROM, and other removable memories, among others, in which program code, functional modules, and the like are stored.
  • a computer program or a function module is stored in the memory 84.

Abstract

一种电子资源处理方法和设备,其中的方法可包括:第一终端向第二终端发送电子资源转移属性(S101);所述第二终端根据所述电子资源转移属性和用于进行电子资源转移处理的加密标识,生成电子资源转移请求(S102);所述第二终端将所述电子资源转移请求发送至服务器(S103);所述服务器根据所述加密标识查询所述第二终端的关联账户(S104);并根据所述电子资源转移属性对所述第二终端的关联账户进行电子资源转移处理(S105);所述服务器将转移处理结果通知至所述第一终端和所述第二终端(S106)。通过终端、服务器之间的交互实现电子资源转移处理,提升电子资源转移处理的便捷性和安全性。

Description

一种电子资源处理方法、设备
本申请要求于2015年7月31日提交的申请号为201510466213.8、标题为“一种电子资源处理方法、装置及服务器”的发明专利申请的优先权,其全部内容结合于此作为参考。
技术领域
本发明涉及互联网技术领域,具体涉及资源处理技术领域,尤其涉及一种电子资源处理方法、设备。
背景技术
传统的线下购物场景中,以超市购物场景为例,一般地,用户在超市购物后,需要将与已购物品等价的现金货币支付给超市商户,这种方式需要用户随身携带现金货币,当所需现金货币数量较大时,使用不够便捷。
为了克服传统现金支付的便捷性的缺陷,目前许多超市商户安装了POS(Point of Sale,销售终端)终端,超市商户可与银行协议结算方式,诸如单结(即按照每笔交易金额结算)、月结(即按照每月交易总额结算)等;在超市购物后,用户可使用银行卡等账户在POS终端上进行支付,具体为:POS终端刷用户的银行卡等账户介质,读取卡号信息,并将卡号信息和购物信息(包括:已购物品总额、商户名称、商户标识等信息)发送至后台服务器,后台服务器通知银行进行相应金额的扣款,从而实现对用户的银行卡账户内的电子资源(即电子货币)进行转移处理。进一步,超市商户可以按照与银行之间协议的结算方式,根据POS后台服务器的转移处理记录从银行获得相应的现金货币或电子资源,这种方式虽然一定程度上提升了便捷性,但由于需要用户随身携带银行卡等账户介质,容易发生丢失、盗取等问题,因而影响账户内电子资源转移处理过程的安全性。
发明内容
本发明实施例提供一种电子资源处理方法、装置、及服务器,可通过终端和服务器之间的交互实现电子资源的转移处理,提升电子资源转移处理的便捷性和安全性。
本发明实施例第一方面提供一种电子资源处理方法,可包括:
第一终端向第二终端发送电子资源转移属性;
所述第二终端根据所述电子资源转移属性和用于进行电子资源转移处理的加密标识,生成电子资源转移请求并发送至服务器;
所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理;
所述服务器将转移处理结果通知至所述第一终端和所述第二终端。
本发明实施例第二方面提供另一种电子资源处理方法,可包括:
服务器接收第二终端发送的电子资源转移请求,所述电子资源转移请求为所述第二终端根据用于进行电子资源转移处理的加密标识及第一终端发送的电子资源转移属性所生成;
所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理;
所述服务器将转移处理结果通知至所述第一终端和所述第二终端。
本发明实施例第三方面提供一种电子资源处理装置,可包括:
请求接收单元,用于接收第二终端发送的电子资源转移请求,所述电子资源转移请求为所述第二终端根据用于进行电子资源转移处理的加密标识及第一终端发送的电子资源转移属性所生成;
查询单元,用于根据所述加密标识查询所述第二终端的关联账户;
处理单元,用于根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理;
通知单元,用于将转移处理结果通知至所述第一终端和所述第二终端。
本发明实施例第四方面提供一种服务器,可包括上述第三方面所述的电子资源处理装置。
实施本发明实施例,具有如下有益效果:
本发明实施例可以在第一终端与第二终端之间交互电子资源转移属性,在第二终端与服务器之间交互电子资源转移属性和用于进行电子资源转移处理的加密标识,由所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理,最后将转移处理结果通知所述第一终端和所述第二终端,整个电子资源转移处理过程通过第一终端、第二终端与服务器之间的交互实现,无需人工携带用于转移的现金货币或账户介质,提升了电子资源转移处理过程的便捷性,并且提升了电子资源转移处理过程的安全性。
附图说明
为了更清楚地说明本发明实施例或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其他的附图。
图1为本发明实施例提供的一种电子资源处理系统的结构示意图;
图2为本发明实施例提供的一种电子资源处理方法的流程图;
图3为本发明实施例提供的另一种电子资源处理方法的流程图;
图4为本发明实施例提供的又一种电子资源处理方法的流程图;
图5为本发明实施例提供的一种电子资源处理装置的结构示意图;
图6为图5所示的查询单元的实施例的结构示意图;
图7为图5所示的安全验证单元的实施例的结构示意图;以及
图8为根据本发明实施例的设备的结构框图。
具体实施方式
下面将结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例仅仅是本发明一部分实施例,而不是全部的实施例。基于本发明中的实施例,本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例,都属于本发明保护的范围。
本发明实施例中,电子资源可指电子账户内的电子货币,其中电子账户可 包括但不限于:银行账户、电子金融账户、信用账户等。请一并参见图1,为本发明实施例提供的一种电子资源处理系统的结构示意图;该系统可包括服务器、第一终端、和第二终端。其中,第一终端可以为诸如POS等的终端设备。第二终端可以为诸如笔记本电脑、手机、PAD(平板电脑)、智能可穿戴设备等智能终端。
第一终端与第二终端之间可以建立诸如NFC(Near Field Communication,近场通信)、蓝牙等的近距离无线通信通信连接。第一终端可与服务器建立通信连接而处于在线状态,第二终端也可与服务器建立通信连接而处于在线状态。进一步,第一终端与服务器之间可采用有线方式建立通信连接,例如:第一终端通过光纤、线缆等方式与服务器之间建立通信连接;第一终端与服务器之间也可通过无线方式建立通信连接,例如:第一终端通过wifi(WIreless-Fidelity,无线保真)、2G(2-Generation wireless telephone technology,第二代移动通信技术规格)/3G/4G等方式与服务器之间建立通信连接。同理,第二终端与服务器之间也可采用诸如光纤、线缆等有线方式建立通信连接,或者,第二终端与服务器之间也可采用诸如wifi、2G/3G/4G等无线方式建立通信连接。
本实施例所示的系统中,第一终端可向第二终端发送电子资源转移属性;所述第二终端根据所述电子资源转移属性和用于进行电子资源转移处理的加密标识,生成电子资源转移请求并发送至服务器;所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理;所述服务器将转移处理结果通知所述第一终端和所述第二终端。通过第一终端、第二终端与服务器之间的交互实现电子资源的转移处理,无需人工携带用于转移的现金货币或账户介质,提升了电子资源转移处理过程的便捷性,并且提升了电子资源转移处理过程的安全性。
本发明实施例可以应用于线下购物场景中,例如:第二终端侧的用户在超市购物后进行支付时,可以对第二终端的关联账户内的电子资源(即与已购物品等价的电子货币)进行转移处理,即,将电子资源从第二终端的关联账户内移除,进一步可将从第二终端的关联账户内移除的电子资源转移至超市商户的 关联账户;再如:第二终端侧的用户使用第二终端在销售点终端直接购物时,需要将第二终端的关联账户内的电子资源(即与所要购买的物品等价的电子货币)进行转移处理,即,将电子资源从第二终端的关联账户内移除,进一步可将从第二终端的关联账户内移除的电子资源转移至销售点终端的关联账户,转移处理成功后销售点终端售出所要购买的物品,等等。
基于上述描述,下面将结合附图2-附图4详细阐述上述图1所示系统中各设备之间的具体交互流程,以对本发明实施例提供的电子资源处理方法进行详细介绍。
请参见图2,为本发明实施例提供的一种电子资源处理方法的流程图;本实施例从第一终端、第二终端与服务器之间的交互阐述电子资源处理方法的流程;该方法可包括以下步骤S101-步骤S106。
S101,第一终端向第二终端发送电子资源转移属性。
所述电子资源转移属性定义了电子资源在转移处理过程中的流向及所要转移的电子资源数量的大小;具体地,所述电子资源转移属性可包括但不限于:接收者信息及所要转移的电子资源数量。所述接收者可以指所述第一终端所属商户,所述接收者信息可包括但不限于:所述第一终端所属商户的名称、地址、标识、关联账户等信息。在线下购物场景中,所要转移的电子资源数量可以为与所购物品等价的货币数量。本发明实施例中,所述第一终端与所述第二终端之间可以采用诸如NFC(Near Field Communication,近场通信)、蓝牙等的近距离无线通信方式进行通信,所述第一终端基于与所述第二终端之间的近距离无线通信连接,将所述电子资源转移属性发送至所述第二终端。
S102,所述第二终端根据所述电子资源转移属性和用于进行电子资源转移处理的加密标识,生成电子资源转移请求。
所述用于进行电子资源转移处理的加密标识是对用于进行电子资源转移处理的目标标识进行加密处理获得。其中,所述目标标识可与所述第二终端的关联账户相关联,通过所述目标标识可查找到所述第二终端的关联账户。所述目标标识可包括但不限于:所述第二终端的设备标识、所述第二终端侧的用户标识或所述第二终端的关联账户的标识。其中,所述第二终端的设备标识可以包括但不限于以下的任一种或其组合:所述第二终端的型号信息、所述第二终 端的ROM(Read Only Memory,只读存储器)信息、所述第二终端的厂商信息、和所述第二终端的内核信息等。所述第二终端侧的用户指使用所述第二终端的用户,所述第二终端侧的用户标识可以包括但不限于以下的任一种或其组合:所述第二终端侧的用户的即时通信号码、电话号码、email号、ID(Identity,标识号)号等。所述第二终端的关联账户可以包括但不限于以下的任一种或其组合:银行账户、电子金融账户、信用账户等。所述第二终端可以按照与服务器之间的通信协议对所述电子资源转移属性和所述加密标识进行封装,生成电子资源转移请求。
S103,所述第二终端将所述电子资源转移请求发送至服务器。
本实施例中,所述第二终端可与服务器建立通信连接而处于在线状态,所述第二终端可基于与所述服务器之间的通信连接,将所述电子资源转移请求发送至服务器。
S104,所述服务器根据所述加密标识查询所述第二终端的关联账户。
所述服务器可基于与所述第二终端之间的通信协议,对所接收到的电子资源转移请求进行解析,获得所述加密标识以及所述电子资源转移属性。由于所述加密标识是对用于进行电子资源转移处理的目标标识进行加密处理而获得,因此所述服务器可对所述加密标识进行解密获得所述目标标识,通过所述目标标识即可查找到所述第二终端的关联账户。
S105,所述服务器根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理。
所述电子资源转移属性定义了电子资源在转移处理过程中的流向及所要转移的电子资源数量的大小。本步骤中,所述服务器可按照所述电子资源转移属性的定义从所述第二终端的关联账户内移除所要转移的电子资源数量,并可进一步将移除的电子资源数量转移至所述接收者。
S106,所述服务器将转移处理结果通知所述第一终端和所述第二终端。
所述转移处理结果可包括:转移处理成功,或者转移处理失败。具体实现中,所述服务器可以根据第一终端所属商户的结算方式确定转移处理结果,其中结算方式可包括但不限于:实时结算方式或非实时结算方式;其中,实时结算方式可包括单结,指按照每笔交易金额结算;非实时结算方式可包括但不限 于:周结(即按照每周交易总额结算)、月结(即按照每月交易总额结算)等等。若所述第一终端所属商户的结算方式为实时结算方式,那么,如果所述第二终端的关联账户内的电子资源成功转移至所述接收者,则转移处理成功;否则,电子资源转移处理失败。若所述第一终端所属商户的结算方式为非实时结算,那么,如果所述第二终端的关联账户内的电子资源被成功从所述第二终端的关联账户内移除,则转移处理成功;否则,转移处理失败。
进一步,若所述转移处理结果为转移处理失败,所述服务器还可在所述转移处理结果中携带失败原因,该失败原因可包括但不限于:所述第二终端的关联账户为无效账户、所述第二终端的关联账户内的电子资源总数量不足、网络原因无法连接至所述第二终端的关联账户等等。本实施例中,所述第一终端也可与服务器建立通信连接而处于在线状态,所述服务器可分别与所述第一终端和所述第二终端建立通信连接,并基于已建立的通信连接将所述转移处理结果分别通知所述第一终端和所述第二终端。
本发明实施例可以在第一终端与第二终端之间交互电子资源转移属性,在第二终端与服务器之间交互电子资源转移属性和用于进行电子资源转移处理的加密标识,由所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理,最后将转移处理结果通知至所述第一终端和所述第二终端,整个电子资源转移处理过程通过第一终端、第二终端与服务器之间的交互实现,无需人工携带用于转移的现金货币或账户介质,提升电子资源转移处理过程的便捷性,提升电子资源转移处理过程的安全性。
请参见图3,为本发明实施例提供的另一种电子资源处理方法的流程图;本实施例从服务器侧阐述电子资源转移处理的流程;该方法可包括以下步骤S201-步骤S204。
S201,服务器接收第二终端发送的电子资源转移请求,所述电子资源转移请求为所述第二终端根据用于进行电子资源转移处理的加密标识及第一终端发送的电子资源转移属性所生成。
本实施例中,所述第二终端可与服务器建立通信连接而处于在线状态,所 述服务器可基于与所述第二终端之间的通信连接,接收所述第二终端发送的所述电子资源转移请求。其中,所述电子资源转移属性定义了电子资源在转移处理过程中的流向及所要转移的电子资源数量的大小;具体地,所述电子资源转移属性可包括但不限于:接收者信息及所要转移的电子资源数量。所述接收者可以指所述第一终端所属商户,所述接收者信息可包括但不限于:所述第一终端所属商户的名称、地址、标识、关联账户等信息。在线下购物场景中,所要转移的电子资源数量可以为与所购物品等价的货币数量。其中,所述用于进行电子资源转移处理的加密标识是对用于进行电子资源转移处理的目标标识进行加密处理获得。其中,所述目标标识可与所述第二终端的关联账户相关联,通过所述目标标识可查找到所述第二终端的关联账户。所述目标标识可包括但不限于:所述第二终端的设备标识、所述第二终端侧的用户标识或所述第二终端的关联账户的标识。
S202,所述服务器根据所述加密标识查询所述第二终端的关联账户。
所述服务器可基于与所述第二终端之间的通信协议,对所接收到的电子资源转移请求进行解析,获得所述加密标识以及所述电子资源转移属性。由于所述加密标识是对用于进行电子资源转移处理的目标标识进行加密处理获得,所述服务器可对所述加密标识进行解密获得所述目标标识,通过所述目标标识即可查找到所述第二终端的关联账户。
S203,所述服务器根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理。
由于所述电子资源转移属性定义了电子资源在转移处理过程中的流向及所要转移的电子资源数量的大小。本步骤中,所述服务器可按照所述电子资源转移属性的定义从所述第二终端的关联账户内移除所要转移的电子资源数量,并可进一步将移除的电子资源数量转移至所述接收者。
S204,所述服务器将转移处理结果通知至所述第一终端和所述第二终端。
所述转移处理结果可包括:转移处理成功,或者转移处理失败。具体实现中,所述服务器可以根据第一终端所属商户的结算方式确定转移处理结果,其中结算方式可包括但不限于:实时结算方式或非实时结算方式;其中,实时结算方式可包括单结,指按照每笔交易金额结算;非实时结算方式可包括但不限 于:周结(即按照每周交易总额结算)、月结(即按照每月交易总额结算)等等。若所述第一终端所属商户的结算方式为实时结算方式,那么,如果所述第二终端的关联账户内的电子资源成功转移至所述接收者,则转移处理成功;否则,电子资源转移处理失败。若所述第一终端所属商户的结算方式为非实时结算,那么,如果所述第二终端的关联账户内的电子资源被成功从所述第二终端的关联账户内移除,则转移处理成功;否则,转移处理失败。
进一步,若所述转移处理结果为转移处理失败,所述服务器还可在所述转移处理结果中携带失败原因,该失败原因可包括但不限于:所述第二终端的关联账户为无效账户、所述第二终端的关联账户内的电子资源总数量不足、网络原因无法连接至所述第二终端的关联账户等等。本实施例中,所述第一终端也可与服务器建立通信连接而处于在线状态,所述服务器可分别与所述第一终端和所述第二终端建立通信连接,并基于已建立的通信连接将所述转移处理结果分别通知给所述第一终端和所述第二终端。
本发明实施例可以在第一终端与第二终端之间交互电子资源转移属性,在第二终端与服务器之间交互电子资源转移属性和用于进行电子资源转移处理的加密标识,由所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理,最后将转移处理结果通知至所述第一终端和所述第二终端,整个电子资源转移处理过程通过第一终端、第二终端与服务器之间的交互实现,无需人工携带用于转移的现金货币或账户介质,提升了电子资源转移处理过程的便捷性,并且提升了电子资源转移处理过程的安全性。
请参见图4,为本发明实施例提供的又一种电子资源处理方法的流程图;本实施例从第一终端、第二终端与服务器之间的交互中阐述电子资源转移处理的流程;该方法可包括以下步骤S301-步骤S312。
S301,第一终端获取电子资源转移属性,所述电子资源转移属性包括:接收者信息及所要转移的电子资源数量。
通常,在线下购物场景中,第一终端根据第二终端侧的用户所购物品,以及第一终端所属商户等信息可生成所述电子资源转移属性。所述电子资源转移 属性定义了电子资源在转移处理过程中的流向及所要转移的电子资源数量的大小;具体地,所述电子资源转移属性可包括但不限于:接收者信息及所要转移的电子资源数量。所述接收者可以指所述第一终端所属商户,所述接收者信息可包括但不限于:所述第一终端所属商户的名称、地址、标识、关联账户等信息。在线下购物场景中,所要转移的电子资源数量可以为与所购物品等价的货币数量。
S302,所述第一终端通过近距离无线通信方式将所述电子资源转移属性发送至所述第二终端,所述近距离无线通信方式包括NFC方式或蓝牙方式。
所述第一终端可与所述第二终端建立近距离无线通信连接,例如:所述第一终端与所述第二终端均配置NFC通信模块,所述第一终端的NFC通信模块与所述第二终端的NFC通信模块建立NFC通信连接;再如:所述第一终端与所述第二终端均配置蓝牙通信模块,所述第一终端的蓝牙通信模块与所述第二终端的蓝牙通信模块进行蓝牙配对,并建立蓝牙通信连接。所述第一终端基于与所述第二终端之间的NFC或蓝牙等的近距离无线通信连接,将所述电子资源转移属性发送给所述第二终端。需要说明的是,本发明实施例可应用于线下购物场景中,第一终端与第二终端之间采用近距离无线通信方式进行通信,能够使得通信交互能够更为精准、快速,从而提升通信交互的有效性。
本实施例的上述步骤S301-步骤S302可以为图2所示实施例的步骤S101的具体细化步骤。
S303,第二终端获取用于进行电子资源转移处理的目标标识,所述目标标识包括:所述第二终端的设备标识、所述第二终端侧的用户标识、或所述第二终端的关联账户的标识。
所述目标标识可与所述第二终端的关联账户相关联,通过所述目标标识可查找到所述第二终端的关联账户。其中,所述第二终端的设备标识可以包括但不限于:所述第二终端的型号信息、所述第二终端的ROM信息、所述第二终端的厂商信息、和所述第二终端的内核信息等的任一种或多种。所述第二终端侧的用户指使用所述第二终端的用户,所述第二终端侧的用户标识可以包括但不限于:所述第二终端侧的用户的即时通信号码、电话号码、email号、ID号等的任一种或多种。所述第二终端的关联账户可以包括但不限于:银行账户、 电子金融账户、信用账户等的任一种或多种。
具体实现中,所述第二终端可以从所述第二终端的操作系统中读取所述第二终端的设备标识;或者,所述第二终端可以在所述第二终端侧的用户使用所述第二终端时,读取所述第二终端侧的用户标识;或者,所述第二终端可以获取与所述第二终端侧的用户标识预先绑定的关联账户的标识;或者,所述第二终端可以要求所述第二终端侧的用户输入所述第二终端的关联账户的标识。
S304,所述第二终端采用第一预设加密算法对所获取的用于进行电子资源转移处理的目标标识进行加密处理,获得用于进行电子资源转移处理的加密标识。
所述第一预设加密算法可以包括但不限于:HASH(哈希)算法、摘要算法、对称加密算法、非对称加密算法等等。所述第二终端采用所述第一预设加密算法对所述目标标识进行加密处理,可以提升目标标识在传输过程中的安全性。
S305,所述第二终端采用第二预设加密算法对所述电子资源转移属性和所述用于进行电子资源转移处理的加密标识进行加密处理,获得电子资源转移请求。
所述第二预设加密算法可以包括但不限于:HASH算法、摘要算法、对称加密算法、非对称加密算法等等。所述第二终端可以按照与服务器之间的通信协议,采用所述第二预设加密算法对所述电子资源转移属性和所述加密标识进行加密处理,获得电子资源转移请求,可以提升电子资源转移请求在传输过程中的安全性和可靠性。
本实施例的上述步骤S303-步骤S305可以为图2所示实施例的步骤S102的具体细化步骤。
S306,所述第二终端将所述电子资源转移请求发送至服务器。
本实施例中,所述第二终端可与服务器建立通信连接而处于在线状态,所述第二终端可基于与所述服务器之间的通信连接,将所述电子资源转移请求发送至服务器。
S307,所述服务器采用所述第二预设加密算法对所述电子资源转移请求进行解密处理,获得所述电子资源转移属性和所述加密标识。
所述服务器可基于与所述第二终端之间的通信协议,采用所述第二预设加密算法对所接收到的电子资源转移请求进行解密处理,获得所述加密标识以及所述电子资源转移属性。
S308,所述服务器采用所述第一预设加密算法对所述加密标识进行解密处理,获得用于进行电子资源转移处理的目标标识。其中,所述目标标识可与所述第二终端的关联账户相关联,通过所述目标标识可查找到所述第二终端的关联账户。
S309,所述服务器根据所述用于进行电子资源转移处理的目标标识查询所述第二终端的关联账户。
本实施例的上述步骤S307-步骤S309可以为图2所示实施例的步骤S104的具体细化步骤。
S310,所述服务器对所述转移处理进行安全验证;若安全验证通过,转入步骤S311。
本步骤中,对所述转移处理进行安全验证的目的在于:确认所述电子资源在转移处理过程中的安全性,保障所述第二终端的关联账户的安全,从而保障所述第二终端侧的用户的权益。具体实现中,本步骤具体可包括如下步骤s11-步骤s13:
s11,所述服务器获取所述转移处理的至少一个风险因子的评分。
所述风险因子可包括以下至少一种:所要转移的电子资源数量超过预置数量阀值,所述第二终端的设备标识为非预置常用设备标识,所述第二终端所在地理位置为非预置常用地点,数据接收者为预置高危用户,所述电子资源转移请求的请求时间为预置高危交易时间。
其中,所述预置数量阀值可以根据实际需要进行设定,例如:可以根据多次历史转移处理过程所转移的电子资源数量的平均值的倍数,设定所述预置数量阀值,如所述预置数量阀值可以为前N次转移的电子资源数量的平均值的1倍、5倍、10倍等等。预置常用设备标识可以是由所述第二终端侧的用户预先配置的设备标识,或者可以是统计与所述第二终端的关联账户相关的多次历史转移处理过程所使用的设备标识。预置常用地点可以是由所述第二终端侧的用户预先配置的地理位置,或者可以是统计与所述第二终端的关联账户相关的多 次历史转移处理过程所在的地理位置。预置高危用户可以是由服务器根据经验统计出的可能存在恶意转移处理的商户。预置高危交易时间可以是由服务器根据经验统计出发生恶意转移处理过程的高频时间范围。
本发明实施例中,所述服务器可预先针对每一个风险因子设置相应的权重分数,例如:若所要转移的电子资源数量超过预置数量阀值,则可获得权重分数为5分;若所述第二终端的设备标识为非预置常用设备标识,则可获得权重分数为5分;若所述第二终端所在地理位置为非预置常用地点,可获得权重分数为3分;若数据接收者为预置高危用户,可获得权重分数为3分;若所述电子资源转移请求的请求时间为预置高危交易时间,可获得权重分数为4分;等等。
s12,所述服务器计算所述至少一个风险因子的总分。
所述服务器根据每一个风险因子所获得的权重分数,计算所有风险因子的权重总分,例如按照步骤s11中的例子,所述服务器计算所有风险因子的总分为:5+5+3+3+4=20。
s13,若所述至少一个风险因子的总分小于或等于预设分数阀值,则安全验证通过。
s14,若所述至少一个风险因子的总分大于所述预设分数阀值,所述服务器向所述第二终端发送安全提醒,在接收到所述第二终端反馈的确认消息之后,确定安全验证通过。
步骤s13-s14中,所述预设分数阀值可以根据经验设定,具体可以根据对安全性的要求进行设定,预设分数阀值越低,表明对安全性的要求越高;反之,预设分数阀值越高,表明对安全性的要求越低,例如:可以设定预设分数阀值为25分,或设定预设分数阀值为15分,等等。如果所述至少一个风险因子的总分小于或等于预设分数阀值,则安全验证通过,可以进行后续转移处理过程。如果所述至少一个风险因子的总分大于所述预设分数阀值,则表明本次转移处理过程可能存在安全风险,由服务器向所述第二终端发送安全提醒,该安全提醒可以用于提醒用户输入账户密码或者输入安全校验码。服务器接收到所述第二终端反馈的确认消息之后,再确定安全验证通过,可以进行后续转移处理过程,该确认消息中可携带正确的账户密码或正确的安全校验码。需要说明的是, 如果未反馈确认消息,或者所反馈的确认消息中携带错误的账户密码或错误的安全校验码,所述服务器可确定本次转移处理过程存在安全风险,从而结束流程,不再继续进行本次转移处理过程,即转移处理失败。
S311,所述服务器根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理。
由于所述电子资源转移属性定义了电子资源在转移处理过程中的流向及所要转移的电子资源数量的大小。本步骤中,所述服务器可按照所述电子资源转移属性的定义从所述第二终端的关联账户内移除所要转移的电子资源数量,并可进一步将移除的电子资源数量转移至所述接收者。
S312,所述服务器将转移处理结果通知至所述第一终端和所述第二终端。
所述转移处理结果可包括:转移处理成功,或者转移处理失败。具体实现中,所述服务器可以根据第一终端所属商户的结算方式确定转移处理结果,其中结算方式可包括但不限于:实时结算方式或非实时结算方式;其中,实时结算方式可包括单结,指按照每笔交易金额结算;非实时结算方式可包括但不限于:周结(即按照每周交易总额结算)、月结(即按照每月交易总额结算)等等。若所述第一终端所属商户的结算方式为实时结算方式,那么,如果所述第二终端的关联账户内的电子资源成功转移至所述接收者,则转移处理成功;否则,电子资源转移处理失败。若所述第一终端所属商户的结算方式为非实时结算,那么,如果所述第二终端的关联账户内的电子资源被成功从所述第二终端的关联账户内移除,则转移处理成功;否则,转移处理失败。
进一步,若所述转移处理结果为转移处理失败,所述服务器还可在所述转移处理结果中携带失败原因,该失败原因可包括但不限于:所述第二终端的关联账户为无效账户、所述第二终端的关联账户内的电子资源总数量不足、网络原因无法连接至所述第二终端的关联账户等等。本实施例中,所述第一终端也可与服务器建立通信连接而处于在线状态,所述服务器可分别与所述第一终端和所述第二终端建立通信连接,并基于已建立的通信连接将所述转移处理结果分别通知给所述第一终端和所述第二终端。
本发明实施例可以在第一终端与第二终端之间交互电子资源转移属性,在第二终端与服务器之间交互电子资源转移属性和用于进行电子资源转移处理 的加密标识,由所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理,最后将转移处理结果通知至所述第一终端和所述第二终端,整个电子资源转移处理过程通过第一终端、第二终端与服务器之间的交互实现,无需人工携带用于转移的现金货币或账户介质,提升电子资源转移处理过程的便捷性,提升电子资源转移处理过程的安全性。
下面将结合附图5-附图7,对本发明实施例提供的电子资源处理装置的结构和功能进行详细介绍;需要说明的是,下述的装置可以运行于图1所示系统中的服务器中,以被应用于上述图2-图4所示的方法中。
请参见图5,为本发明实施例提供的一种电子资源处理装置的结构示意图;该装置可包括:请求接收单元101、查询单元102、处理单元103、和通知单元104。
请求接收单元101,用于接收第二终端发送的电子资源转移请求,所述电子资源转移请求为所述第二终端根据用于进行电子资源转移处理的加密标识及第一终端发送的电子资源转移属性所生成。
本实施例中,所述第二终端可与服务器建立通信连接而处于在线状态,所述请求接收单元101可基于与所述第二终端之间的通信连接,接收所述第二终端发送的所述电子资源转移请求。其中,所述电子资源转移属性定义了电子资源在转移处理过程中的流向及所要转移的电子资源数量的大小;具体地,所述电子资源转移属性可包括但不限于:接收者信息及所要转移的电子资源数量。所述接收者可以指所述第一终端所属商户,所述接收者信息可包括但不限于:所述第一终端所属商户的名称、地址、标识、关联账户等信息。在线下购物场景中,所要转移的电子资源数量可以为与所购物品等价的货币数量。其中,所述用于进行电子资源转移处理的加密标识是对用于进行电子资源转移处理的目标标识进行加密处理获得。其中,所述目标标识可与所述第二终端的关联账户相关联,通过所述目标标识可查找到所述第二终端的关联账户。所述目标标识可包括但不限于:所述第二终端的设备标识、所述第二终端侧的用户标识、或所述第二终端的关联账户的标识。
查询单元102,用于根据所述加密标识查询所述第二终端的关联账户。
所述查询单元102可基于与所述第二终端之间的通信协议,对所接收到的电子资源转移请求进行解析,获得所述加密标识以及所述电子资源转移属性。由于所述加密标识是对用于进行电子资源转移处理的目标标识进行加密处理获得,所述查询单元102可对所述加密标识进行解密获得所述目标标识,通过所述目标标识即可查找到所述第二终端的关联账户。
处理单元103,用于根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理。
由于所述电子资源转移属性定义了电子资源在转移处理过程中的流向及所要转移的电子资源数量的大小。所述处理单元103可按照所述电子资源转移属性的定义从所述第二终端的关联账户内移除所要转移的电子资源数量,并可进一步将移除的电子资源数量转移至所述接收者。
通知单元104,用于将转移处理结果通知至所述第一终端和所述第二终端。
所述转移处理结果可包括:转移处理成功,或者转移处理失败。具体实现中,所述服务器可以根据第一终端所属商户的结算方式确定转移处理结果,其中结算方式可包括但不限于:实时结算方式或非实时结算方式;其中,实时结算方式可包括单结,指按照每笔交易金额结算;非实时结算方式可包括但不限于:周结(即按照每周交易总额结算)、月结(即按照每月交易总额结算)等等。若所述第一终端所属商户的结算方式为实时结算方式,那么,如果所述第二终端的关联账户内的电子资源成功转移至所述接收者,则转移处理成功;否则,电子资源转移处理失败。若所述第一终端所属商户的结算方式为非实时结算,那么,如果所述第二终端的关联账户内的电子资源被成功从所述第二终端的关联账户内移除,则转移处理成功;否则,转移处理失败。
进一步,若所述转移处理结果为转移处理失败,所述通知单元104还可在所述转移处理结果中携带失败原因,该失败原因可包括但不限于:所述第二终端的关联账户为无效账户、所述第二终端的关联账户内的电子资源总数量不足、网络原因无法连接至所述第二终端的关联账户等等。本实施例中,所述第一终端也可与服务器建立通信连接而处于在线状态,所述服务器可分别与所述 第一终端和所述第二终端建立通信连接,所述通知单元104可基于已建立的通信连接将所述转移处理结果分别通知给所述第一终端和所述第二终端。
再请参见图5,可选地,该装置还可包括:安全验证单元105。
安全验证单元105,用于对所述转移处理进行安全验证,并在安全验证通过后,由所述处理单元根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理。
对所述转移处理进行安全验证的目的在于:确认所述电子资源在转移处理过程中的安全性,保障所述第二终端的关联账户的安全,从而保障所述第二终端侧的用户的权益。
本发明实施例可以在第一终端与第二终端之间交互电子资源转移属性,在第二终端与服务器之间交互电子资源转移属性和用于进行电子资源转移处理的加密标识,由所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理,最后将转移处理结果通知至所述第一终端和所述第二终端,整个电子资源转移处理过程通过第一终端、第二终端与服务器之间的交互实现,无需人工携带用于转移的现金货币或账户介质,提升电子资源转移处理过程的便捷性,提升电子资源转移处理过程的安全性。
请参见图6,为图5所示的查询单元的实施例的结构示意图;该查询单元102可包括:第一解密处理单元1001、第二解密处理单元1002、和账户查询单元1003。
第一解密处理单元1001,用于采用第二预设加密算法对所述电子资源转移请求进行解密处理,获得所述电子资源转移属性和所述加密标识。
所述第二预设加密算法可以包括但不限于:HASH算法、摘要算法、对称加密算法、非对称加密算法等等。所述第二终端可以按照与服务器之间的通信协议,采用所述第二预设加密算法对所述电子资源转移属性和所述加密标识进行加密处理,获得电子资源转移请求,可以提升电子资源转移请求在传输过程中的安全性和可靠性。所述第一解密处理单元1001可基于与所述第二终端之间的通信协议,采用所述第二预设加密算法对所接收到的电子资源转移请求进 行解密处理,获得所述加密标识以及所述电子资源转移属性。
第二解密处理单元1002,用于采用第一预设加密算法对所述加密标识进行解密处理,获得用于进行电子资源转移处理的目标标识。
所述第一预设加密算法可以包括但不限于:HASH算法、摘要算法、对称加密算法、非对称加密算法等等。所述第二终端采用所述第一预设加密算法对所述目标标识进行加密处理,获得用于进行电子资源转移处理的加密标识,可以提升目标标识在传输过程中的安全性。所述第二解密处理单元1002可采用所述第一预设加密算法对所述加密标识进行解密处理,获得用于进行电子资源转移处理的目标标识。其中,所述目标标识可与所述第二终端的关联账户相关联,通过所述目标标识可查找到所述第二终端的关联账户。
账户查询单元1003,用于根据所述用于进行电子资源转移处理的目标标识查询所述第二终端的关联账户。
本发明实施例可以在第一终端与第二终端之间交互电子资源转移属性,在第二终端与服务器之间交互电子资源转移属性和用于进行电子资源转移处理的加密标识,由所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理,最后将转移处理结果通知至所述第一终端和所述第二终端,整个电子资源转移处理过程通过第一终端、第二终端与服务器之间的交互实现,无需人工携带用于转移的现金货币或账户介质,提升了电子资源转移处理过程的便捷性,并且提升了电子资源转移处理过程的安全性。
请参见图7,为图5所示的安全验证单元的实施例的结构示意图;该安全验证单元105可包括:评分获取单元2001、总分计算单元2002、和验证结果确认单元2003。
评分获取单元2001,用于获取所述转移处理的至少一个风险因子的评分。
所述风险因子可包括以下至少一种:所要转移的电子资源数量超过预置数量阀值,所述第二终端的设备标识为非预置常用设备标识,所述第二终端所在地理位置为非预置常用地点,数据接收者为预置高危用户,所述电子资源转移请求的请求时间为预置高危交易时间。
其中,所述预置数量阀值可以根据实际需要进行设定,例如:可以根据多次历史转移处理过程的所转移的电子资源数量的平均值的倍数,设定所述预置数量阀值,如所述预置数量阀值可以为前N次转移的电子资源数量的平均值的1倍、5倍、10倍等等。预置常用设备标识可以是由所述第二终端侧的用户预先配置的设备标识,或者可以是统计与所述第二终端的关联账户相关的多次历史转移处理过程所使用的设备标识。预置常用地点可以是由所述第二终端侧的用户预先配置的地理位置,或者可以是统计与所述第二终端的关联账户相关的多次历史转移处理过程所在的地理位置。预置高危用户可以是由服务器根据经验统计出的可能存在恶意转移处理的商户。预置高危交易时间可以是由服务器根据经验统计出发生恶意转移处理过程的高频时间范围。
本发明实施例中,所述服务器可预先针对每一个风险因子设置相应的权重分数,例如:若所要转移的电子资源数量超过预置数量阀值,所述评分获取单元2001可获得权重分数为5分;若所述第二终端的设备标识为非预置常用设备标识,所述评分获取单元2001可获得权重分数为5分;若所述第二终端所在地理位置为非预置常用地点,所述评分获取单元2001可获得权重分数为3分;若数据接收者为预置高危用户,所述评分获取单元2001可获得权重分数为3分;若所述电子资源转移请求的请求时间为预置高危交易时间,所述评分获取单元2001可获得权重分数为4分;等等。
总分计算单元2002,用于计算所述至少一个风险因子的总分。
所述总分计算单元2002根据每一个风险因子所获得的权重分数,计算所有风险因子的权重总分,例如按照本实施例中的例子,所述总分计算单元2002计算所有风险因子的总分为:5+5+3+3+4=20。
验证结果确认单元2003,用于若所述至少一个风险因子的总分小于或等于预设分数阀值,则安全验证通过;或者,用于若所述至少一个风险因子的总分大于所述预设分数阀值,向所述第一终端发送安全提醒,在接收到所述第一终端反馈的确认消息之后,确定安全验证通过。
所述预设分数阀值可以根据经验设定,具体可以根据对安全性的要求进行设定,预设分数阀值越低,表明对安全性的要求越高;反之,预设分数阀值越高,表明对安全性的要求越低,例如:可以设定预设分数阀值为25分,或设 定预设分数阀值为15分,等等。如果所述至少一个风险因子的总分小于或等于预设分数阀值,则安全验证通过,可以进行后续转移处理过程。如果所述至少一个风险因子的总分大于所述预设分数阀值,则表明本次转移处理过程可能存在安全风险,由所述验证结果确认单元2003向所述第二终端发送安全提醒,该安全提醒可以用于提醒用户输入账户密码或者输入安全校验码。服务器接收到所述第二终端反馈的确认消息之后,再确定安全验证通过,可以进行后续转移处理过程,该确认消息中可携带正确的账户密码或正确的安全校验码。需要说明的是,如果未反馈确认消息,或者所反馈的确认消息中携带错误的账户密码或错误的安全校验码,所述验证结果确认单元2003可确定本次转移处理过程存在安全风险,从而结束本次转移处理过程,即转移处理失败。
本发明实施例可以在第一终端与第二终端之间交互电子资源转移属性,在第二终端与服务器之间交互电子资源转移属性和用于进行电子资源转移处理的加密标识,由所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理,最后将转移处理结果通知至所述第一终端和所述第二终端,整个电子资源转移处理过程通过第一终端、第二终端、与服务器之间的交互实现,无需人工携带用于转移的现金货币或账户介质,提升了电子资源转移处理过程的便捷性,并且提升了电子资源转移处理过程的安全性。
本发明实施例还公开了一种服务器,该服务器可以为图1所示系统中的服务器,该服务器可包括一个电子资源处理装置;该装置的结构和功能可参见图5-图7所示实施例的相关描述,在此不赘述。本实施例的服务器可以应用于上述图2-图4所示的方法中。
本发明实施例可以在第一终端与第二终端之间交互电子资源转移属性,在第二终端与服务器之间交互电子资源转移属性和用于进行电子资源转移处理的加密标识,由所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理,最后将转移处理结果通知至所述第一终端和所述第二终端,整个电子资源转移处理过程通过第一终端、第二终端与服务器之间的交互实现,无需人工携带用于转移的现金货币或账户介质,提升了电子资源转移处理过程的便 捷性,并且提升电子资源转移处理过程的安全性。
本领域普通技术人员可以理解,用于实现根据本发明任一实施例的方法的全部或部分流程,可以通过调用计算机程序指示相关的硬件来完成。例如,该计算机程序可存储于一计算机可读取存储介质中,当该程序被调用时,可以使得硬件(例如,机器、设备、计算装置、计算机系统、或网络中涉及的硬件)执行上述各方法的实施例的操作。其中,计算机可读存储介质可以包括但不限于磁碟、光盘、只读存储记忆体(Read-Only Memory,ROM)或随机存储记忆体(Random Access Memory,RAM)等。另外,上述计算机可读存储介质还可以是计算机装置可以通过网络或通信链接访问的各种类型的记录媒体,例如,可以通过路由器、互联网、局域网等提取其中的数据的记录媒体。此外,上述计算机可读存储介质可以指位于例如同一计算机系统中的多个计算机可读存储介质,也可以指分布于例如多个计算机系统或计算装置的计算机可读存储介质。
此外,本发明实施例还提供了一种设备。图8是示出根据本发明的设备的结构框图。如图8所示,该设备80可以包括至少一个处理器82和存储器84,并且可选地,包括通信单元86。作为一种实例,这里的设备可以是服务器。其中,处理器82可以看作是设备的控制中心,其通过接口或线路以有线或无线的方式连接设备中的其他部件。作为一种实现方式,处理器82和存储器84之间可以通过数据总线连接。处理器84可以通过接口(可以是有线接口或无线接口)或者通信单元86以有线或无线的方式连接至用户终端88或网络100,从而实现与外部的数据交互和通信。类似地,存储器84可以包括但不限于ROM、RAM、CD-ROM、以及其他可移除存储器等等,其中存储有程序代码、功能模块等等。具体地,存储器84中存储有计算机程序或功能模块,当处理器82通过访问存储器84而调用并执行其中的计算机程序或功能模块时,可以实现根据本发明任一实施例操作,例如,实现根据图5所示的各个元件的操作。另外,关于本发明实施例,上文已经结合附图进行了详细描述,例如,参照图2-图4、图5-图7描述的实施例,为了不必要的模糊本发明,在此不再赘述。
以上所揭露的仅为本发明较佳实施例而已,当然不能以此来限定本发明之权利范围,因此依本发明权利要求所作的等同变化,仍属本发明所涵盖的范围。

Claims (20)

  1. 一种电子资源处理方法,其特征在于,包括:
    第一终端向第二终端发送电子资源转移属性;
    所述第二终端根据所述电子资源转移属性和用于进行电子资源转移处理的加密标识,生成电子资源转移请求并发送至服务器;
    所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理;
    所述服务器将转移处理结果通知至所述第一终端和所述第二终端。
  2. 如权利要求1所述的方法,其特征在于,所述第一终端向第二终端发送电子资源转移属性,包括:
    所述第一终端获取电子资源转移属性,所述电子资源转移属性包括:接收者信息及所要转移的电子资源数量;
    所述第一终端通过近距离无线通信方式将所述电子资源转移属性发送至所述第二终端,所述近距离无线通信方式包括NFC方式或蓝牙方式。
  3. 如权利要求2所述的方法,其特征在于,所述第二终端根据所述电子资源转移属性和用于进行电子资源转移处理的加密标识,生成电子资源转移请求,包括:
    第二终端获取用于进行电子资源转移处理的目标标识,所述目标标识包括:所述第二终端的设备标识、所述第二终端侧的用户标识或所述第二终端的关联账户的标识;
    所述第二终端采用第一预设加密算法对所获取的用于进行电子资源转移处理的目标标识进行加密处理,获得用于进行电子资源转移处理的加密标识;
    所述第二终端采用第二预设加密算法对所述电子资源转移属性和所述用于进行电子资源转移处理的加密标识进行加密处理,获得电子资源转移请求。
  4. 如权利要求3所述的方法,其特征在于,所述服务器根据所述加密标识查询所述第二终端的关联账户,包括:
    所述服务器采用所述第二预设加密算法对所述电子资源转移请求进行解密处理,获得所述电子资源转移属性和所述加密标识;
    所述服务器采用所述第一预设加密算法对所述加密标识进行解密处理,获得用于进行电子资源转移处理的目标标识;
    所述服务器根据所述用于进行电子资源转移处理的目标标识查询所述第二终端的关联账户。
  5. 如权利要求1所述的方法,其特征在于,所述服务器根据所述加密标识查询所述第二终端的关联账户之后,根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理之前,还包括:
    所述服务器对所述转移处理进行安全验证;
    在安全验证通过后,所述服务器执行根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理的步骤。
  6. 如权利要求5所述的方法,其特征在于,所述服务器对所述转移处理进行安全验证,包括:
    所述服务器获取所述转移处理的至少一个风险因子的评分;
    所述服务器计算所述至少一个风险因子的总分;
    若所述至少一个风险因子的总分小于或等于预设分数阀值,则安全验证通过;
    若所述至少一个风险因子的总分大于所述预设分数阀值,所述服务器向所述第一终端发送安全提醒,在接收到所述第一终端反馈的确认消息之后,确定安全验证通过;
    其中,所述风险因子包括以下至少一种:所要转移的电子资源数量超过预置数量阀值,所述第二终端的设备标识为非预置常用设备标识,所述第二终端所在地理位置为非预置常用地点,接收者为预置高危用户,所述电子资源转移请求的请求时间为预置高危交易时间。
  7. 如权利要求2所述的方法,其特征在于,所述服务器根据所述加密标识查询所述第二终端的关联账户之后,根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理之前,还包括:
    所述服务器对所述转移处理进行安全验证;
    在安全验证通过后,所述服务器执行根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理的步骤。
  8. 如权利要求7所述的方法,其特征在于,所述服务器对所述转移处理进行安全验证,包括:
    所述服务器获取所述转移处理的至少一个风险因子的评分;
    所述服务器计算所述至少一个风险因子的总分;
    若所述至少一个风险因子的总分小于或等于预设分数阀值,则安全验证通过;
    若所述至少一个风险因子的总分大于所述预设分数阀值,所述服务器向所述第一终端发送安全提醒,在接收到所述第一终端反馈的确认消息之后,确定安全验证通过;
    其中,所述风险因子包括以下至少一种:所要转移的电子资源数量超过预置数量阀值,所述第二终端的设备标识为非预置常用设备标识,所述第二终端所在地理位置为非预置常用地点,接收者为预置高危用户,所述电子资源转移请求的请求时间为预置高危交易时间。
  9. 一种电子资源处理方法,其特征在于,包括:
    服务器接收第二终端发送的电子资源转移请求,所述电子资源转移请求为所述第二终端根据用于进行电子资源转移处理的加密标识及第一终端发送的电子资源转移属性所生成;
    所述服务器根据所述加密标识查询所述第二终端的关联账户,并根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理;
    所述服务器将转移处理结果通知至所述第一终端和所述第二终端。
  10. 如权利要求9所述的方法,其特征在于,所述服务器根据所述加密标识查询所述第二终端的关联账户,包括:
    所述服务器采用所述第二预设加密算法对所述电子资源转移请求进行解密处理,获得所述电子资源转移属性和所述加密标识;
    所述服务器采用所述第一预设加密算法对所述加密标识进行解密处理,获得用于进行电子资源转移处理的目标标识;
    所述服务器根据所述用于进行电子资源转移处理的目标标识查询所述第二终端的关联账户。
  11. 如权利要求9所述的方法,其特征在于,所述服务器根据所述加密标识查询所述第二终端的关联账户之后,根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理之前,还包括:
    所述服务器对所述转移处理进行安全验证;
    在安全验证通过后,所述服务器执行根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理的步骤。
  12. 如权利要求11所述的方法,其特征在于,所述服务器对所述转移处理进行安全验证,包括:
    所述服务器获取所述转移处理的至少一个风险因子的评分;
    所述服务器计算所述至少一个风险因子的总分;
    若所述至少一个风险因子的总分小于或等于预设分数阀值,则安全验证通过;
    若所述至少一个风险因子的总分大于所述预设分数阀值,所述服务器向所述第一终端发送安全提醒,在接收到所述第一终端反馈的确认消息之后,确定安全验证通过;
    其中,所述风险因子包括以下至少一种:所要转移的电子资源数量超过预置数量阀值,所述第二终端的设备标识为非预置常用设备标识,所述第二终端所在地理位置为非预置常用地点,接收者为预置高危用户,所述电子资源转移请求的请求时间为预置高危交易时间。
  13. 如权利要求10所述的方法,其特征在于,所述服务器根据所述加密标识查询所述第二终端的关联账户之后,根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理之前,还包括:
    所述服务器对所述转移处理进行安全验证;
    在安全验证通过后,所述服务器执行根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理的步骤。
  14. 如权利要求13所述的方法,其特征在于,所述服务器对所述转移处理进行安全验证,包括:
    所述服务器获取所述转移处理的至少一个风险因子的评分;
    所述服务器计算所述至少一个风险因子的总分;
    若所述至少一个风险因子的总分小于或等于预设分数阀值,则安全验证通过;
    若所述至少一个风险因子的总分大于所述预设分数阀值,所述服务器向所述第一终端发送安全提醒,在接收到所述第一终端反馈的确认消息之后,确定安全验证通过;
    其中,所述风险因子包括以下至少一种:所要转移的电子资源数量超过预置数量阀值,所述第二终端的设备标识为非预置常用设备标识,所述第二终端所在地理位置为非预置常用地点,接收者为预置高危用户,所述电子资源转移请求的请求时间为预置高危交易时间。
  15. 一种设备,包括:
    存储器,配置为存储机器可读程序指令;
    至少一个处理器,配置为调用所述存储器中存储的所述机器可读程序指令,以执行如下的预定操作:
    接收第二终端发送的电子资源转移请求,所述电子资源转移请求为所述第二终端根据用于进行电子资源转移处理的加密标识及第一终端发送的电子资源转移属性所生成;
    根据所述加密标识查询所述第二终端的关联账户;
    根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理;以及
    将转移处理结果通知至所述第一终端和所述第二终端。
  16. 如权利要求15所述的设备,其特征在于,所述预定操作还包括:
    采用第二预设加密算法对所述电子资源转移请求进行解密处理,获得所述电子资源转移属性和所述加密标识;
    采用第一预设加密算法对所述加密标识进行解密处理,获得用于进行电子资源转移处理的目标标识;以及
    根据所述用于进行电子资源转移处理的目标标识查询所述第二终端的关联账户。
  17. 如权利要求15所述的设备,其特征在于,所述预定操作还包括:
    对所述转移处理进行安全验证,并在安全验证通过后,根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理。
  18. 如权利要求17所述的设备,其特征在于,所述预定操作还包括:
    获取所述转移处理的至少一个风险因子的评分;
    计算所述至少一个风险因子的总分;
    若所述至少一个风险因子的总分小于或等于预设分数阀值,则安全验证通过;或者,用于若所述至少一个风险因子的总分大于所述预设分数阀值,向所述第一终端发送安全提醒,在接收到所述第一终端反馈的确认消息之后,确定安全验证通过;
    其中,所述风险因子包括以下至少一种:所要转移的电子资源数量超过预置数量阀值,所述第二终端的设备标识为非预置常用设备标识,所述第二终端所在地理位置为非预置常用地点,接收者为预置高危用户,所述电子资源转移请求的请求时间为预置高危交易时间。
  19. 如权利要求16所述的设备,其特征在于,所述预定操作还包括:
    对所述转移处理进行安全验证,并在安全验证通过后,根据所述电子资源转移属性对所述第二终端的关联账户内的电子资源进行转移处理。
  20. 如权利要求19所述的设备,其特征在于,所述预定操作还包括:
    获取所述转移处理的至少一个风险因子的评分;
    计算所述至少一个风险因子的总分;
    若所述至少一个风险因子的总分小于或等于预设分数阀值,则安全验证通过;或者,用于若所述至少一个风险因子的总分大于所述预设分数阀值,向所述第一终端发送安全提醒,在接收到所述第一终端反馈的确认消息之后,确定安全验证通过;
    其中,所述风险因子包括以下至少一种:所要转移的电子资源数量超过预置数量阀值,所述第二终端的设备标识为非预置常用设备标识,所述第二终端所在地理位置为非预置常用地点,接收者为预置高危用户,所述电子资源转移请求的请求时间为预置高危交易时间。
PCT/CN2016/080820 2015-07-31 2016-04-29 一种电子资源处理方法、设备 WO2017020618A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US15/558,905 US10776771B2 (en) 2015-07-31 2016-04-29 Electronic resource processing method and device

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510466213.8 2015-07-31
CN201510466213.8A CN105139200A (zh) 2015-07-31 2015-07-31 一种电子资源处理方法、装置及服务器

Publications (1)

Publication Number Publication Date
WO2017020618A1 true WO2017020618A1 (zh) 2017-02-09

Family

ID=54724537

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/080820 WO2017020618A1 (zh) 2015-07-31 2016-04-29 一种电子资源处理方法、设备

Country Status (3)

Country Link
US (1) US10776771B2 (zh)
CN (1) CN105139200A (zh)
WO (1) WO2017020618A1 (zh)

Families Citing this family (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105139200A (zh) * 2015-07-31 2015-12-09 腾讯科技(深圳)有限公司 一种电子资源处理方法、装置及服务器
CN110663055A (zh) 2017-05-16 2020-01-07 苹果公司 促进用户帐户之间的资金转移
WO2019066786A1 (en) * 2017-09-26 2019-04-04 Visa International Service Association POSITION-BASED RESOURCE ACCESS METHOD AND SYSTEM
CN111694892B (zh) * 2019-03-13 2023-10-03 腾讯科技(深圳)有限公司 资源转移方法、装置、终端、服务器及存储介质
CN110648127B (zh) * 2019-08-13 2023-10-31 盛银数科(沈阳)技术有限公司 资源转移方法、装置、计算机设备和存储介质
CN111144777B (zh) * 2019-12-30 2022-06-07 北京三快在线科技有限公司 资源转移方法、装置、电子设备及存储介质
CN111711945B (zh) * 2020-06-16 2023-09-22 易兆微电子(杭州)股份有限公司 一种基于nfc协议执行安全通讯的系统和方法
CN112232810B (zh) * 2020-09-24 2024-02-23 中国银联股份有限公司 资源处理方法、服务器、装置、设备、系统及介质
CN113011883A (zh) * 2021-01-28 2021-06-22 腾讯科技(深圳)有限公司 一种数据处理方法、装置、设备及存储介质
CN113077280A (zh) * 2021-02-05 2021-07-06 北京达佳互联信息技术有限公司 一种电子资源分配方法、装置、电子设备及存储介质
CN113674018A (zh) * 2021-07-26 2021-11-19 山东赤子城网络技术有限公司 资源转移方法、装置、计算机设备和存储介质

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101290669A (zh) * 2008-04-24 2008-10-22 北京爱奥时代信息科技有限公司 Nfc手机支付终端、支付方法及系统
US20120166337A1 (en) * 2010-12-23 2012-06-28 Kt Corporation Near field communication terminal for performing secure payment and secure payment method using the same
CN103778531A (zh) * 2014-02-23 2014-05-07 王恩惠 一种基于二维码实现电子银行卡支付的方法及系统
CN103812835A (zh) * 2012-11-09 2014-05-21 深圳市华营数字商业有限公司 一种基于公钥算法的离线模式身份与交易认证方法
CN104616149A (zh) * 2015-02-06 2015-05-13 清华大学 基于蓝牙技术及生物特征识别的支付方法和系统
CN105139200A (zh) * 2015-07-31 2015-12-09 腾讯科技(深圳)有限公司 一种电子资源处理方法、装置及服务器

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FI973788A (fi) * 1997-09-25 1999-03-26 Nokia Telecommunications Oy Elektroninen maksujärjestelmä
CA2305249A1 (en) * 2000-04-14 2001-10-14 Branko Sarcanin Virtual safe
US20020026507A1 (en) * 2000-08-30 2002-02-28 Sears Brent C. Browser proxy client application service provider (ASP) interface
WO2007092588A2 (en) * 2006-02-08 2007-08-16 Imagineer Software, Inc. Secure digital content management using mutating identifiers
US20120245986A1 (en) * 2011-03-02 2012-09-27 PXT Payments Inc Mobile payment and point system and method
RU2597526C2 (ru) * 2011-07-20 2016-09-10 Виза Интернэшнл Сервис Ассосиэйшн Связь шлюза с обеспечением безопасности
CN103093351A (zh) * 2011-10-31 2013-05-08 深圳光启高等理工研究院 移动支付方法、相应的设备及系统
US20150235207A1 (en) * 2014-02-19 2015-08-20 Bank Of America Corporation Risk mitigating transaction authorization
CN104408610A (zh) * 2014-12-03 2015-03-11 苏州贝多环保技术有限公司 一种基于风险评估的第三方支付平台业务处理方法

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101290669A (zh) * 2008-04-24 2008-10-22 北京爱奥时代信息科技有限公司 Nfc手机支付终端、支付方法及系统
US20120166337A1 (en) * 2010-12-23 2012-06-28 Kt Corporation Near field communication terminal for performing secure payment and secure payment method using the same
CN103812835A (zh) * 2012-11-09 2014-05-21 深圳市华营数字商业有限公司 一种基于公钥算法的离线模式身份与交易认证方法
CN103778531A (zh) * 2014-02-23 2014-05-07 王恩惠 一种基于二维码实现电子银行卡支付的方法及系统
CN104616149A (zh) * 2015-02-06 2015-05-13 清华大学 基于蓝牙技术及生物特征识别的支付方法和系统
CN105139200A (zh) * 2015-07-31 2015-12-09 腾讯科技(深圳)有限公司 一种电子资源处理方法、装置及服务器

Also Published As

Publication number Publication date
US10776771B2 (en) 2020-09-15
US20180089663A1 (en) 2018-03-29
CN105139200A (zh) 2015-12-09

Similar Documents

Publication Publication Date Title
WO2017020618A1 (zh) 一种电子资源处理方法、设备
US20230283597A1 (en) Communication device using virtual access device and transaction applet
AU2014353151B2 (en) Automated account provisioning
CN105139193B (zh) 一种电子资源处理方法、装置及服务器
JP6657972B2 (ja) 負荷分散システム、負荷分散装置、負荷分散方法、および、プログラム
US9760886B2 (en) Device provisioning using partial personalization scripts
TWI640937B (zh) Online payment method and equipment
AU2021215207B2 (en) Mid-range reader interactions
US20160125407A1 (en) Systems and Methods for Secure Remote Payments
WO2017092654A1 (zh) 一种pos机交易处理方法及系统
WO2016088087A1 (en) Third party access to a financial account
US20200372494A1 (en) Transferring Funds Between Wallet Client Accounts
US20240013205A1 (en) Discovery and communication using direct radio signal communication
US10217101B2 (en) Link of mobile devices to facilitate mobile commerce transactions
KR20120082644A (ko) 휴대 단말을 이용한 결제 처리 방법 및 서버
TW201830917A (zh) 安全性資訊交互方法及設備
US10762558B1 (en) System, method, and computer program for authorizing a payment using gesture data
CN117974138A (zh) 一种数字货币交易方法、安全芯片和终端
KR20150046664A (ko) 위치정보를 이용한 인증 보안 방법
KR20110103554A (ko) 기업용 메시지 전송 장치, 모바일 상품 결제 시스템, 및 그 방법

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16832107

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 15558905

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC , EPO FORM 1205A DATED 09.07.18.

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 09.07.2018)

122 Ep: pct application non-entry in european phase

Ref document number: 16832107

Country of ref document: EP

Kind code of ref document: A1