WO2017028711A1 - 数据处理的方法、穿戴式电子设备和系统 - Google Patents

数据处理的方法、穿戴式电子设备和系统 Download PDF

Info

Publication number
WO2017028711A1
WO2017028711A1 PCT/CN2016/094157 CN2016094157W WO2017028711A1 WO 2017028711 A1 WO2017028711 A1 WO 2017028711A1 CN 2016094157 W CN2016094157 W CN 2016094157W WO 2017028711 A1 WO2017028711 A1 WO 2017028711A1
Authority
WO
WIPO (PCT)
Prior art keywords
operating system
information
smart terminal
electronic device
wearable electronic
Prior art date
Application number
PCT/CN2016/094157
Other languages
English (en)
French (fr)
Inventor
王梓
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to KR1020187005539A priority Critical patent/KR102061483B1/ko
Priority to EP16836575.7A priority patent/EP3319032A4/en
Priority to US15/751,785 priority patent/US20180240109A1/en
Priority to JP2018504736A priority patent/JP6552714B2/ja
Publication of WO2017028711A1 publication Critical patent/WO2017028711A1/zh

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322Aspects of commerce using mobile devices [M-devices]
    • G06Q20/3223Realising banking transactions through M-devices
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/325Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices using wireless networks
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3825Use of electronic signatures
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/321Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices using wearable devices
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322Aspects of commerce using mobile devices [M-devices]
    • G06Q20/3229Use of the SIM of a M-device as secure element
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/326Payment applications installed on the mobile devices
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/36Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
    • G06Q20/367Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
    • G06Q20/3674Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes involving authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • G06Q20/4014Identity check for transactions
    • G06Q20/40145Biometric identity checks

Definitions

  • the present invention relates to the field of communications technologies, and in particular, to a data processing method, a wearable electronic device, and a system.
  • the existing technical solution for completing online payment is based on a username/password and a short message mechanism.
  • the username/password and SMS mechanism are vulnerable to payment-type viruses, and the payment-type virus can read the user's short message.
  • the “user SMS” here includes the verification code of the user's payment transaction.
  • the payment-type virus can also embed the malicious code into the payment application by means of secondary packaging, and can download the software and install it without the user's permission, and may also install a malicious sub-package to further steal the user's bank account number and password. Stealing the funds in the user account poses a great threat to the payment security of the smart terminal payment client.
  • the embodiment of the invention provides a data processing method, a wearable electronic device and a system, which can solve the security problem that occurs when a user completes online payment by using the smart terminal.
  • an embodiment of the present invention provides a wearable electronic device, including: a processor; a memory; a communication unit; an input unit; a data processing unit; and a memory for storing the first operating system. And a software program and a module of the second operating system; the processor, configured to switch the first operating system to the second operating system according to a first operation instruction of a user input received by the input unit;
  • the communication unit is configured to receive first information sent by the smart terminal by using the first application supported by the second operating system, where the first information includes transaction data for completing online payment, and the processor is further configured to perform Determining, by the input unit, the second operation instruction of the user input, determining that the first information received by the communication unit is correct; the data processing unit, configured to determine, by the second operating system, the processor Correcting the first information to perform encryption or signature processing to obtain second information; the communication unit is further configured to use the first application to Said intelligent terminal transmitting said data processing unit to obtain the second information.
  • the input unit is further configured to receive the second operation instruction that is input by the user, where the second operation instruction is used to indicate The first information is correct.
  • the communication unit is further configured to establish, by using a wireless access manner, the smart terminal a communication connection;
  • the processor is further configured to determine, according to the service request instruction sent by the smart terminal received by the communication unit, to run the first application supported by the second operating system; And configured to send, to the smart terminal, a response message that the first application has been run.
  • the input unit is further configured to receive the first operation instruction that is input by the user, the first operation The instructions are for switching the first operating system to the second operating system.
  • the first operation instruction and the second operation instruction are a voice instruction, a fingerprint instruction, and a keyboard. Any of the instructions.
  • an embodiment of the present invention provides a data processing method, the method comprising: switching a first operating system to a second operating system according to a received first operation instruction of a user input;
  • the first application supported by the operating system receives the first information sent by the smart terminal, where the first information includes transaction data for completing the online payment; and determining, according to the received second operation instruction of the user, that the first information is correct;
  • the first information is encrypted or signed by the second operating system to obtain second information, and the second information is sent to the smart terminal by using the first application.
  • the method before the determining that the first information is correct according to the received second operation instruction of the user input, the method further includes: Receiving the second operation instruction, the second operation instruction is used to indicate that the first information is correct.
  • the receiving, by the first application supported by the second operating system, is sent by the smart terminal Before the first information, the method further includes: establishing a communication connection with the smart terminal by using a wireless access manner; determining, according to the service request instruction sent by the smart terminal, running the first application supported by the second operating system Sending a response message that the first application has been run to the smart terminal.
  • the method further includes receiving the first operation instruction input by the user, the first operation instruction for switching the first operating system to the second operating system.
  • the first operation instruction and the second operation instruction are a voice instruction, a fingerprint instruction, and a keyboard. Any of the instructions.
  • an embodiment of the present invention provides a data processing system, where the system includes: an intelligent terminal and a wearable electronic device, where the smart terminal is configured to send first information to the wearable electronic device, The first information includes transaction data for completing online payment, and the wearable electronic device is configured to switch the first operating system to the second operating system according to the received first operation instruction of the user input, and Receiving, by the first application supported by the second operating system, the first information sent by the smart terminal, and determining that the first information is correct, performing encryption or signature processing on the first information, to obtain The second information is sent to the smart terminal.
  • the smart terminal is further configured to establish a communication connection with the wearable electronic device by using a wireless access manner, and to the wearable electronic device
  • the device sends a service request instruction, the service request instruction is used to instruct the wearable electronic device to determine to run the first application supported by the second operating system, and the wearable electronic device is further configured to receive the service And requesting, according to the service request instruction, determining to run the first application supported by the second operating system, and sending a response message that the first application has been run to the smart terminal.
  • the wearable electronic device is further configured to receive a second operation instruction input by the user, And determining, according to the second operation instruction, that the first information is correct, wherein the second operation instruction is used to indicate that the first information is correct.
  • the first operation instruction and the second operation instruction are any one of a voice instruction, a fingerprint instruction, and a keyboard instruction.
  • a voice instruction a fingerprint instruction
  • a keyboard instruction any one of a keyboard instruction.
  • the wearable electronic device and the data processing provided by the embodiment of the present invention are based on the foregoing technical solutions.
  • the method and system performing encryption or signature processing on the first information sent by the smart terminal for completing the online payment by using the second operating system, obtaining the second information, and feeding back the second information to the smart terminal, so that the smart terminal Obtaining the second information to complete the online payment, thereby solving the security problem that occurs when the user completes the online payment by using the smart terminal.
  • FIG. 1 is a schematic block diagram of a wearable electronic device in accordance with an embodiment of the present invention
  • FIG. 2 is a schematic flow chart of a method of data processing according to an embodiment of the present invention.
  • FIG. 3 is a schematic flow chart of a method of data processing according to another embodiment of the present invention.
  • FIG. 4 is a schematic flow chart of a method of data processing according to still another embodiment of the present invention.
  • FIG. 5 is a schematic flow chart of a method for data processing according to still another embodiment of the present invention.
  • FIG. 6 is a schematic interaction diagram of a method of data processing according to still another embodiment of the present invention.
  • FIG. 7 is a schematic block diagram of a system for data processing in accordance with an embodiment of the present invention.
  • the smart terminal may be a device such as a smart phone or a tablet computer, which is not limited in this embodiment of the present invention.
  • the wearable electronic device is intelligently designed and used. Equipment worn by households, such as intelligently designed clothing or carry-on objects.
  • the wearable electronic device may be a device such as a smart wristband, a smart watch, or a smart eyeglass, which is not limited by the embodiment of the present invention.
  • FIG. 1 is a schematic block diagram of a wearable electronic device 100 in accordance with an embodiment of the present invention.
  • the wearable electronic device 100 shown in FIG. 1 includes a processor 110, a memory 120, a communication unit 130, an input unit 140, and a data processing unit 150, where
  • a memory 120 configured to store software programs and modules of the first operating system and the second operating system
  • the processor 110 is configured to switch the first operating system to the second operating system according to a first operation instruction of a user input received by the input unit 140.
  • the communication unit 130 is configured to receive first information sent by the smart terminal by using the first application supported by the second operating system, where the first information includes transaction data for completing online payment;
  • the processor 110 is further configured to determine, according to the second operation instruction of the user input received by the input unit 140, that the first information received by the communication unit 130 is correct;
  • the data processing unit 150 is configured to perform encryption or signature processing on the first information determined by the processor 110 by using the second operating system to obtain second information.
  • the communication unit 130 is further configured to send, by using the first application, the second information obtained by the data processing unit 150 to the smart terminal.
  • the processor 110 of the wearable electronic device 100 switches the commonly used first operating system, such as the Android system, stored in the memory 120 according to the first operation instruction input by the user received by the input unit 140.
  • the first information includes the transaction data for completing the online payment
  • the data processing unit 150 performs encryption or signature processing on the first information determined by the processor 110 by the second operating system to obtain the second information.
  • the communication unit 130 transmits to the first application supported by the second operating system
  • the terminal can send the second information obtained by the data processing unit 150, so that the smart terminal obtains the second information to complete the online payment.
  • the first information used by the smart terminal for completing the online payment is encrypted or signed by the second operating system to obtain the second information, and the second information is obtained.
  • the smart terminal is fed back to the smart terminal, so that the smart terminal obtains the second information to complete the online payment, thereby solving the security problem that occurs when the user completes the online payment by using the smart terminal.
  • the security feature of the second operating system is embodied in: first, the startup process of the second operating system is secure, that is, the signature authentication is performed step by step every time the power is turned on. To ensure that the system will not be tampered with; second, the second operating system has a strict software entry, strictly control its software source through software auditing, code signing, to ensure that no malware is entered; third, the second The operating system can provide limited functions and occupy a small amount of memory space, so the possibility of a vulnerability is greatly reduced. Fourth, the second operating system and the first operating system (such as a commonly used Android system) are different. The operation ensures that the first operating system does not perform any security attack on the second operating system. Fifth, only the operating system provides an interface for accessing the data processing unit 150. For example, the second operating system can be a simple graphics system. .
  • the wearable electronic device 100 shown in FIG. 1 further includes components such as a display unit 160, a peripheral interface 170, a power supply 180, and the like.
  • the components shown in Figure 1 can communicate over one or more buses. It will be understood by those skilled in the art that the structure of the wearable electronic device 100 shown in FIG. 1 does not constitute a limitation of the present invention. It may be a bus type structure or a star structure, and may also include more than the illustration. More or fewer parts, or some parts, or different parts.
  • the wearable electronic device 100 provided by this embodiment is merely an example, and the wearable electronic device 100 according to the embodiment of the present invention may have more than that shown in FIG. 1 .
  • Multiple or fewer components, two or more components may be combined, or may have different component configurations or arrangements, each component may be in hardware, software including one or more signal processing and/or application specific integrated circuits Or a combination of hardware and software implementation.
  • the processor 110 as a control center of the wearable electronic device, can connect various parts of the entire electronic device using various interfaces and lines, by running or executing software programs and/or modules stored in the memory 120, and calling the memory stored in the memory. Data within 120 to perform various functions of the electronic device and/or process data.
  • the processor 110 may be composed of an integrated circuit (IC), for example, may be composed of a single packaged IC, or may be composed of multiple ICs of the same function or different functions.
  • IC integrated circuit
  • the processor 110 may include a central processing unit (CPU), or may have a graphics processing unit (GPU), a digital signal processor (DSP), And a combination of a control chip (such as a baseband chip) or a Field Programmable Gate Array (FPGA) chip in the communication unit.
  • the CPU may be a single operation core, and may also include a multi-operation core, which is not limited by the embodiment of the present invention.
  • the memory 120 can be used to store software programs and modules, and the processor 110 executes various functional applications of the wearable electronic device 100 and implements data processing by running software programs and modules stored in the memory 120.
  • the memory 120 can store two operating systems, the first one is a commonly used operating system (for example, an Android system), and the second is a reduced operating system (for example, a simplified graphics system). . These two operating systems cannot run at the same time and need to be switched by a switch (the elements in the input unit). When needed When paying, the user is required to actively switch to the second operating system.
  • the memory 120 mainly includes a program storage area and a data storage area, wherein the program storage area can store an operating system, an application required for at least one function, such as: a sound playing program, an image playing program, etc.; the data storage area can be stored according to the electronic Data created by the use of the device (such as audio data, phone book, etc.).
  • the memory 120 may include volatile memory, such as non-volatile volatile random access memory (NVRAM), phase change random access memory (PRAM), magnetic Resistive random access memory (MRAM), etc., may also include non-volatile memory, such as: at least one disk storage device, electrically erasable programmable read only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM) ), flash memory devices, such as: NOR flash memory or NAND flash memory.
  • volatile memory such as non-volatile volatile random access memory (NVRAM), phase change random access memory (PRAM), magnetic Resistive random access memory (MRAM), etc.
  • NVRAM non-volatile volatile random access memory
  • PRAM phase change random access memory
  • MRAM magnetic Resistive random access memory
  • non-volatile memory such as: at least one disk storage device, electrically erasable programmable read only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM) ), flash memory devices, such as: NOR flash
  • the communication unit 130 can be configured to establish a communication channel, and the wearable electronic device 100 can connect to a remote server or a smart terminal (such as a mobile phone, a tablet, etc.) through the communication channel, and send data to the remote server or the smart terminal, and remotely The server or smart terminal receives the data.
  • a remote server or a smart terminal such as a mobile phone, a tablet, etc.
  • the communication unit 130 may include a wireless local area network (WLAN) module, a Bluetooth module, a near field communication (NFC) module, a baseband module, and the like for wireless communication. And a radio frequency (RF) circuit corresponding to the communication unit, configured for wireless local area network communication, Bluetooth communication, infrared communication, and/or cellular communication system communication.
  • WLAN wireless local area network
  • NFC near field communication
  • RF radio frequency
  • the input unit 140 can be used to implement user interaction with the wearable electronic device 100 and/or the user inputs information into the wearable electronic device 100.
  • the input unit 140 can receive numeric or character information input by the user to generate signals related to user settings or function control. Input.
  • the input unit 140 may include a touch panel 141 and other input devices 142.
  • the touch panel 141 also referred to as a touch screen, can collect touch operations on or near the user (such as the user using a finger, a stylus, or the like on the touch panel 141 or near the touch panel 141. Operation), and drive the corresponding connecting device according to a preset program.
  • the touch panel 141 may include two parts: a touch detection device and a touch controller.
  • the touch detection device detects the touch orientation of the user, and detects a signal brought by the touch operation, and transmits the signal to the touch controller;
  • the touch controller receives the touch information from the touch detection device, converts the touch information into contact coordinates, and sends the touch information.
  • the processor 110 is provided and can receive commands from the processor 110 and execute them.
  • the touch panel 141 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic waves.
  • the input unit 140 may also include other input devices 142.
  • other input devices 142 may include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control buttons, switch buttons, etc.), trackballs, mice, joysticks, and the like.
  • the data processing unit 150 can implement sensitive data storage and secure operations.
  • the data processing unit 150 itself has a built-in CPU, a memory (SRAM, Flash), and a chip operating system (COS), and can store a user's key or digital certificate.
  • the data processing unit built-in algorithm engine includes: a public key algorithm engine, a symmetric algorithm engine, a hash algorithm engine, and a random number generator to implement encryption or signature processing of data.
  • the public key algorithm engine is used to implement public key encryption.
  • the public key encryption uses a private key that must be kept secret to unauthorized users and a public key that can be disclosed to any user, and the public key and the private key are associated. The two keys are unique to the communication session. Data encrypted with the public key can only be decrypted with the private key, while data signed with the private key can only be verified with the public key. Because you need to encrypt data with one key and need to decrypt data with another key, the public key encryption algorithm is also called wrong. Called the algorithm.
  • a symmetric algorithm engine is used to implement symmetric encryption.
  • a symmetric encryption algorithm uses a single private key to encrypt and decrypt data. Since either party with a key can use this key to decrypt data, it is necessary to protect the key from unauthorized agents. Because the same key is used for both encryption and decryption, the symmetric encryption algorithm is also known as the private key encryption algorithm.
  • the hash algorithm engine is used to implement hash function encryption.
  • the hash function is sometimes called message digest function, hash function or hash function.
  • the key is not used in the process of hash function encryption, but it is related to many cryptographic algorithms.
  • the input data can be output as a short fixed-length hash value. This process is one-way, reverse operation is difficult to complete, and the probability of two different inputs producing the same hash value is very small.
  • the random number generator is used to generate a random number, and a random encryption key can be generated in the encryption operation, so that the generated key is difficult to reproduce, which is beneficial to the security of data transmission.
  • the data processing unit 150 can also support a security interface such as a 7816 interface, a Serial Peripheral Interface (SPI), or a chip-level security detection protection mechanism.
  • a security interface such as a 7816 interface, a Serial Peripheral Interface (SPI), or a chip-level security detection protection mechanism.
  • SPI Serial Peripheral Interface
  • the data processing unit 150 can store unique key information, thereby ensuring that only the information processed by the key stored by the data processing unit 150 can be recognized by the payment institution.
  • the data processing unit 150 can store the certificate and the key corresponding to the user at the payment institution, and the payment institution also holds the certificate of the user on the platform side thereof, so that the unique correspondence between the certificate and the key can ensure that the transaction is confidential.
  • the entity of the key (wearing the electronic device 100) is completed. That is, the data processing unit 150 may store a payment-related key (certificate), bank card information, and the like, and the key may be randomly generated in the data processing unit 150 and stored in the data processing unit 150.
  • the key is not derived from the data processing unit 150. Since the data corresponding to the payment institution and the private key corresponding to the certificate are saved in the data processing unit 150, and the private key cannot be exported, only the data encrypted or signed by the private key can be used at the server (the payment institution is in the The platform side) is verified to ensure that only The transaction can be completed when the data processing unit 150 is used.
  • the wearable electronic device 100 also includes a display unit 160 that can be used to display information input by the user or information provided to the user and various menus of the wearable electronic device 100.
  • the display unit 160 may include a display panel 161.
  • the display panel 161 may be configured in the form of an LCD (Liquid Crystal Display), an OLED (Organic Light-Emitting Diode), or the like.
  • the touch panel 141 can cover the display panel 161.
  • the touch panel 141 detects a touch operation on or near the touch panel 141, it transmits to the processor 110 to determine the type of the touch event, and then the processor 110 according to the touch event.
  • the type provides a corresponding visual output on display panel 161.
  • the touch panel 141 and the display panel 161 are two independent components to implement the input and input functions of the wearable electronic device 100, in some embodiments, the touch panel 141 and the display may be The panel 161 is integrated to implement the input and output functions of the wearable electronic device 100.
  • the wearable electronic device 100 further includes a peripheral interface 170, which can be used to connect an external device with an interface of the wearable electronic device 100, including but not limited to a keyboard, a mouse, a touch pad, a trackball, a joystick, a game controller, One or several of a microphone, a display, a speaker, a power amplifier, and the like.
  • the external device connects the processor 110 of the wearable electronic device 100 through the peripheral interface 170, inputs data (eg, digital or character information) into the processor 100 for processing or reading data from the processor 100, through the peripheral interface 170. Output to an external device.
  • data eg, digital or character information
  • the peripheral interface 170 includes, but is not limited to, a Universal Serial Bus (USB) interface, a mini-USB interface, a Peripheral Component Interconnect (PCI) interface, an IEEE 1394 interface, and a video.
  • USB Universal Serial Bus
  • PCI Peripheral Component Interconnect
  • IEEE 1394 Peripheral Component Interconnect
  • VGA Graphics Graphics Array
  • HDMI High Definition Multimedia Interface
  • the wearable electronic device 100 also includes a power source 180 for powering different components of the wearable electronic device 100 to maintain its operation.
  • the power source 180 may be a built-in battery, such as a common lithium ion battery, a nickel metal hydride battery, etc., and an external power source that directly supplies power to the wearable electronic device 100, such as an AC adapter.
  • the power source 180 may further include a power management system, a charging system, a power failure detecting circuit, a power converter or an inverter, a power status indicator (such as a light emitting diode), and power generation with the electronic device, Manage and distribute any other components associated with it.
  • the input unit 140 is further configured to receive a second operation instruction input by the user, where the second operation instruction is used to indicate that the first information is correct.
  • the processor 110 of the wearable electronic device 100 switches the first operating system to the second operating system, and receives, by the communication unit 130, the smart terminal by using the first application supported by the second operating system.
  • the first information is determined according to the second operation instruction received by the input unit 140 for indicating that the first information is correct, and the first information includes transaction data for completing the online payment, further by the data.
  • the processing unit 150 performs encryption or signature processing on the first information determined by the processor 110 by the second operating system to obtain the second information. That is to say, the first information received by the communication unit 130 can be displayed on the wearable electronic device 100, and the authenticity of the first information can be ensured. If there is malware on the smart terminal, the transaction data is tampered with, the falsified data is presented on the display unit 160 of the wearable electronic device 100, and if the user finds that the transaction data is incorrect, the payment operation may be abandoned.
  • the communication unit 130 may be further configured to establish a communication connection with the smart terminal by using a wireless access manner, and the processor 110 may further be used to send the service according to the smart terminal received by the communication unit 130.
  • Request instructions to determine to run the second operating system support The first application, and the communication unit 130 sends a response message that the first application has been run to the smart terminal.
  • the communication unit 130 can establish a communication connection with the smart terminal by using a wireless access method, for example: After receiving the search message that the smart terminal broadcasts out according to a certain time period and a certain frequency, the wearable electronic device 100 sends a search response message to the smart terminal, where the search response message carries the Bluetooth module of the wearable electronic device 100.
  • the Bluetooth address and the clock information when the smart terminal receives the search response message of the wearable electronic device 100, the user can click to establish a connection on the screen of the smart terminal, and the smart terminal sends the Bluetooth address and the Bluetooth clock to the wearable electronic device. 100.
  • the device 100 after receiving the PIN code, the wearable electronic device 100 determines the wisdom Wearable electronic device with a terminal on the PIN code 100 is consistent to verify the validity of the connection.
  • a Bluetooth connection is established between the smart terminal and the wearable electronic device 100, and the smart terminal and the wearable electronic device 100 can perform data interaction via Bluetooth.
  • the smart terminal After the smart terminal establishes a Bluetooth connection with the wearable electronic device 100, the smart terminal sends a service request command to the wearable electronic device 100 to obtain a corresponding service, and the processor 110 of the wearable electronic device 100 receives the smart information according to the communication unit 130.
  • the service request instruction sent by the terminal determines that the first application supported by the second operating system is running, and sends the response message that the first application has been run to the smart terminal through the communication unit 130.
  • the smart terminal sends a service request command to the wearable electronic device 100 to obtain the service of the ICBC.
  • the processor 110 of the wearable electronic device 100 determines and runs the service request command sent by the smart terminal received by the communication unit 130.
  • the ICBC application supported by the operating system, and sending the ICBC application to the smart terminal through the communication unit 130 Response message.
  • the smart terminal and the wearable electronic device 100 may also establish a WiFi connection.
  • the second operating system can support multiple payment applications. Therefore, the wearable electronic device 100 can determine an application corresponding to the instruction from the plurality of payment applications according to the service request instruction sent by the smart terminal, and activate the application. Receiving first information including transaction data sent by the smart terminal.
  • the input unit 140 is further configured to receive a first operation instruction input by the user, where the first operation instruction is used to switch the first operating system to the second operation system.
  • the processor 110 of the wearable electronic device 100 switches the commonly used first operating system to the second operation with the security feature according to the first operation instruction input by the user received by the input unit 140.
  • the first operation instruction for instructing to switch the first operating system to the second operating system may be received through the input unit 140.
  • the first operation instruction and the second operation instruction may be an operation instruction input by any one of a voice input, a fingerprint input, and a keyboard input, that is, may be a voice instruction or a fingerprint instruction. And any of the keyboard commands.
  • the input unit 140 may be a touch panel, or may be other human-computer interaction interfaces, such as physical input keys, microphones, etc., and may also be other external information collection devices, such as a camera.
  • the embodiment of the present invention does not limit this.
  • the wearable electronic device according to an embodiment of the present invention is described in detail above with reference to FIG. 1, and a method of data processing according to an embodiment of the present invention will be described in detail below with reference to FIGS. 2 through 6.
  • FIG. 2 is a schematic flow diagram of a method 200 of data processing in accordance with an embodiment of the present invention.
  • the method 200 shown in FIG. 2 can be performed by a wearable electronic device, the method 200 comprising:
  • the first application that is sent by the smart terminal is received by the first application supported by the second operating system, where the first information includes transaction data for completing online payment;
  • the first information is encrypted or signed by the second operating system to obtain second information.
  • the commonly used first operating system such as the Android system
  • the second operating system receives the first information sent by the smart terminal, where the first information includes the transaction data for completing the online payment, and determines, according to the received second operation instruction of the user, that the received first information is correct, and then passes The second operating system encrypts or signs the first information to obtain the second information.
  • the second operating system of the wearable electronic device can store unique key information to ensure that only information processed by the key can be approved by the payment institution.
  • the second operating system of the wearable electronic device can store the certificate and key corresponding to the user at the payment institution, and the payment institution also stores the user's certificate on the platform side thereof, thereby ensuring the transaction through the unique correspondence between the certificate and the key. It is done by an entity with a key (wearable electronic device). Finally, the second information obtained by the encryption or signature processing is sent to the smart terminal by the first application, so that the smart terminal obtains the second information to complete the online payment.
  • the second information used to complete the online payment sent by the smart terminal is encrypted or signed by the second operating system of the wearable electronic device to obtain the second information, and The second information is fed back to the smart terminal, so that the smart terminal obtains the second information to complete the online payment, thereby solving the security problem that occurs when the user completes the online payment by using the smart terminal.
  • the method 200 further includes:
  • the second operation instruction that is input by the user to indicate that the first information is correct may be received.
  • the first information includes the transaction data for completing the online payment, and then determining that the first information is correct according to the received second operation instruction, and further encrypting or signing the first information by using the second operating system to obtain the second information. That is to say, the received first information can be displayed on the wearable electronic device, and the authenticity of the first information can be ensured. If there is malware on the smart terminal, the transaction data is falsified, and the falsified data is presented on the display of the wearable electronic device. If the user finds that the transaction data is incorrect, the payment operation can be abandoned.
  • the method 200 further includes:
  • the wireless access mode can be established with the intelligent terminal.
  • the smart terminal After the communication connection is established, and the smart terminal establishes a Bluetooth connection with the wearable electronic device, the smart terminal sends a service request command to the wearable electronic device to obtain a corresponding service, and the wearable electronic device determines according to the service request instruction sent by the smart terminal.
  • the smart terminal sends a service request command to the wearable electronic device to obtain the service of the ICBC, and the wearable electronic device determines and runs the ICBC application supported by the second operating system according to the service request instruction sent by the smart terminal, and The smart terminal sends a response message that the ICBC application has been run.
  • the smart terminal and the wearable electronic device may also establish a WiFi connection.
  • the second operating system can support multiple payment applications. Therefore, the wearable electronic device can determine an application corresponding to the instruction from the plurality of payment applications according to the service request instruction sent by the smart terminal, and activate the application to receive The first information sent by the smart terminal containing the transaction data.
  • the method 200 further includes:
  • the first operation instruction and the second operation instruction may be any one of a voice instruction, a fingerprint instruction, and a keyboard instruction.
  • the technical solution of the embodiment of the present invention is described in detail below with reference to the interactivity diagram of the method 600 for data processing according to the embodiment of the present invention.
  • the method 600 shown in Figure 6 includes:
  • the wearable electronic device performs the first operation according to the received first operation instruction of the user input.
  • the system switches to the second operating system.
  • the first operation instruction may be input to the wearable electronic device, for example, inputting the wearable electronic device by using a voice, a keyboard, or a fingerprint.
  • the smart terminal and the wearable electronic device establish a communication connection by using wireless access.
  • the smart terminal and the wearable electronic device can establish a communication connection by using Bluetooth or WiFi.
  • the smart terminal sends a service request instruction to the wearable electronic device, where the service request instruction is used to instruct the wearable electronic device to provide an ICBC related service.
  • the wearable electronic device receives the service request instruction sent by the smart terminal, and determines and runs the ICBC application supported by the second operating system according to the service request instruction, so as to provide related services of the ICBC.
  • the wearable electronic device sends a response message that the ICBC application has been run to the smart terminal, where the response message is used to indicate that the wearable electronic device can provide related services of the ICBC.
  • the smart terminal After receiving the response message, the smart terminal sends the first information to the wearable electronic device, where the first information includes transaction data for completing online payment.
  • the wearable electronic device receives the first information sent by the smart terminal by using the first application supported by the second operating system.
  • the wearable electronic device determines that the first information is correct according to the received second operation command input by the user.
  • the wearable electronic device receives the first information sent by the smart terminal by using the ICBC application, where the first information includes transaction data for completing online payment, and the first information may be displayed on the wearable On the display of the electronic device, the user can wear it
  • the electronic device inputs a second operation instruction, for example, the input of the second operation instruction may be performed by using a voice, a button, a fingerprint, or the like to determine that the first information is correct. If the user finds that the first information includes incorrect transaction data, the payment operation can be abandoned to avoid loss.
  • the wearable electronic device encrypts or signs the received first information by using the second operating system to obtain the second information.
  • the wearable electronic device sends the second information obtained by the encryption or signature processing to the smart terminal.
  • the smart terminal receives the second information sent by the wearable electronic device, and completes the online payment according to the second information.
  • the wearable electronic device may perform encryption or signature processing on the received first information by using a second operating system having security features to obtain second information to ensure that only the second operating system is
  • the stored key processed information can be recognized by the payment institution.
  • the wearable electronic device sends the second information obtained by the encryption or signature processing to the smart terminal, and the smart terminal receives the second information and sends the second information to the platform of the payment institution, and the payment institution receives the second information and is verified After the second information is correct, the corresponding payment transaction is completed, and at the same time, the feedback message carrying the transaction completion information can be sent to the smart terminal.
  • the second information used to complete the online payment sent by the smart terminal is encrypted or signed by the second operating system of the wearable electronic device to obtain the second information, and The second information is fed back to the smart terminal, so that the smart terminal obtains the second information to complete the online payment, thereby solving the security problem that occurs when the user completes the online payment by using the smart terminal.
  • the execution body of the method 200 according to the embodiment of the present invention may correspond to the wearable electronic device 100 according to the embodiment of the present invention, and the corresponding processes of the respective methods in FIG. 2 to FIG. 6 respectively
  • the foregoing and other operations and/or functions of the various modules in the wearable electronic device 100 are implemented, and are not described herein again for brevity.
  • FIGS. 2 through 6 A method of data processing according to an embodiment of the present invention is described in detail above with reference to FIGS. 2 through 6, and a system for data processing according to an embodiment of the present invention will be described in detail below with reference to FIG.
  • FIG. 7 is a schematic diagram of a system 700 for data processing in accordance with an embodiment of the present invention.
  • the system 700 shown in FIG. 7 includes: a smart terminal 710 and a wearable electronic device 720, where
  • the smart terminal 710 is configured to send first information to the wearable electronic device 720, where the first information includes transaction data for completing online payment;
  • the wearable electronic device 720 is configured to switch the first operating system to the second operating system according to the received first operation instruction of the user input, and receive the first application supported by the second operating system.
  • the first information sent by the smart terminal 710 is used to encrypt or sign the first information to obtain the second information, and send the first information to the smart terminal 710.
  • the second information is described.
  • the system for data processing obtains the second information by encrypting or signing the first information sent by the smart terminal for completing the online payment by using the second operating system of the wearable electronic device, and The second information is fed back to the smart terminal, so that the smart terminal obtains the second information to complete the online payment, thereby solving the security problem that occurs when the user completes the online payment by using the smart terminal.
  • the wearable electronic device 720 can correspond to the wearable electronic device 100 of the embodiment of the present invention.
  • the wearable electronic device 720 can correspond to the wearable electronic device 100 of the embodiment of the present invention.
  • the smart terminal 710 may be further configured to establish a communication connection with the wearable electronic device 720 by using a wireless access manner, and send a service request instruction to the wearable electronic device 720.
  • the service request instruction is used to instruct the wearable electronic device 720 to determine to run the first application supported by the second operating system;
  • the wearable electronic device 720 is further configured to receive the service request instruction sent by the smart terminal 710, determine to run the first application supported by the second operating system according to the service request instruction, and send the first application to the smart terminal 710. Sending a response message that the first application has been run.
  • the wearable electronic device 720 is further configured to receive a second operation instruction input by the user, and determine, according to the second operation instruction, that the first information is correct, where The second operation instruction is used to indicate that the first information is correct.
  • the first operation instruction and the second operation instruction are any one of a voice instruction, a fingerprint instruction, and a keyboard instruction, which is not limited by the embodiment of the present invention.
  • the disclosed systems, devices, and methods may be implemented in other manners.
  • the device embodiments described above are merely illustrative.
  • the division of the unit is only a logical function division.
  • there may be another division manner for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed.
  • the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, or an electrical, mechanical or other form of connection.
  • the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. You can choose some of them according to actual needs or All units are used to achieve the objectives of the embodiments of the present invention.
  • each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
  • the above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.
  • the integrated unit if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium.
  • the technical solution of the present invention contributes in essence or to the prior art, or all or part of the technical solution may be embodied in the form of a software product stored in a storage medium.
  • a number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention.
  • the foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. .

Abstract

一种穿戴式电子设备、数据处理的方法和系统,该穿戴式电子设备包括:处理器(110)、存储器(120)、通信单元(130)、输入单元(140)和数据处理单元(150);存储器(120)用于存储第一操作系统和第二操作系统的软件程序以及模块;处理器(110)根据输入单元接收的用户输入的第一操作指令,将所述第一操作系统切换成第二操作系统;通信单元(130)通过第二操作系统支持的第一应用接收智能终端发送的包括完成网上支付的交易数据的第一信息;处理器(110)还用于根据输入单元接收的第二操作指令,确定第一信息正确;数据处理单元通过第二操作系统对处理器确定正确的第一信息进行加密或签名处理,得到第二信息;通信单元(130)通过所述第一应用向所述智能终端发送所述数据处理单元得到的所述第二信息。

Description

数据处理的方法、穿戴式电子设备和系统
本申请要求于2015年8月14日提交中国专利局、申请号为201510502465.1、发明名称为“数据处理的方法、穿戴式电子设备和系统”的中国专利申请的优先权,其全部内容通过引用结合在本申请中。
技术领域
本发明涉及通信技术领域,尤其涉及一种数据处理的方法、穿戴式电子设备和系统。
背景技术
随着智能终端的发展,利用智能终端进行网上交易越来越流行。而现有的完成网上支付的技术方案基于用户名/密码、短信机制。用户名/密码、短信机制容易受到支付类病毒的攻击,支付类病毒可以读取用户短信,这里的“用户短信”包括用户支付交易的验证码。支付类病毒还可以通过二次打包的方式把恶意代码嵌入支付应用,能够在未经用户允许的情况下私自下载软件并安装,还可能会安装恶意子包,进一步窃取用户的银行账号及密码,盗走用户账号中的资金,对智能终端支付客户端的支付安全造成极大威胁。
因此,用户在使用智能终端完成网上支付时的安全问题亟需解决。
发明内容
本发明实施例提供了一种数据处理的方法、穿戴式电子设备和系统,能够解决用户在使用智能终端完成网上支付时出现的安全问题。
第一方面,本发明实施例提供了一种穿戴式电子设备,所述穿戴式电子设备包括:处理器;存储器;通信单元;输入单元;数据处理单元;述存储器,用于存储第一操作系统和第二操作系统的软件程序以及模块;所述处理器,用于根据所述输入单元接收的用户输入的第一操作指令,将所述第一操作系统切换成所述第二操作系统;所述通信单元,用于通过所述第二操作系统支持的第一应用接收智能终端发送的第一信息,所述第一信息包括完成网上支付的交易数据;所述处理器,还用于根据所述输入单元接收的所述用户输入的第二操作指令,确定所述通信单元接收的所述第一信息正确;所述数据处理单元,用于通过所述第二操作系统对所述处理器确定正确的所述第一信息进行加密或签名处理,得到第二信息;所述通信单元,还用于通过所述第一应用向所述智能终端发送所述数据处理单元得到的所述第二信息。
结合第一方面,在第一方面的第一种可能的实现方式中,所述输入单元,还用于接收所述用户输入的所述第二操作指令,所述第二操作指令用于指示所述第一信息正确。
结合第一方面或第一方面的第一种可能的实现方式,在第一方面的第二种可能的实现方式中,所述通信单元,还用于通过无线接入方式与所述智能终端建立通信连接;所述处理器,还用于根据所述通信单元接收的所述智能终端发送的服务请求指令,确定运行所述第二操作系统支持的所述第一应用;所述通信单元,还用于向所述智能终端发送所述第一应用已运行的响应消息。
结合上述任一种可能的实现方式,在第一方面的第三种可能的实现方式中,所述输入单元,还用于接收所述用户输入的所述第一操作指令,所述第一操作指令用于将所述第一操作系统切换成所述第二操作系统。
结合上述任一种可能的实现方式,在第一方面的第四种可能的实现方式中,所述第一操作指令和所述第二操作指令为语音指令、指纹指令和键盘 指令中的任一种。
第二方面,本发明实施例提供了一种数据处理的方法,所述方法包括:根据接收的用户输入的第一操作指令,将第一操作系统切换成第二操作系统;通过所述第二操作系统支持的第一应用接收智能终端发送的第一信息,所述第一信息包括完成网上支付的交易数据;根据接收的所述用户输入的第二操作指令,确定所述第一信息正确;通过所述第二操作系统对所述第一信息进行加密或签名处理,得到第二信息;通过所述第一应用向所述智能终端发送所述第二信息。
结合第二方面,在第二方面的第一种可能的实现方式中,在所述根据接收的所述用户输入的第二操作指令,确定所述第一信息正确之前,所述方法还包括:接收所述第二操作指令,所述第二操作指令用于指示所述第一信息正确。
结合第二方面或第二方面的第一种可能的实现方式,在第一方面的第二种可能的实现方式中,在所述通过所述第二操作系统支持的第一应用接收智能终端发送的第一信息之前,所述方法还包括:通过无线接入方式与所述智能终端建立通信连接;根据智能终端发送的服务请求指令,确定运行所述第二操作系统支持的所述第一应用;向所述智能终端发送所述第一应用已运行的响应消息。
结合上述任一种可能的实现方式,在第二方面的第三种可能的实现方式中,在所述根据接收的用户输入的第一操作指令,将第一操作系统切换成第二操作系统之前,所述方法还包括:接收所述用户输入的所述第一操作指令,所述第一操作指令用于将所述第一操作系统切换成所述第二操作系统。
结合上述任一种可能的实现方式,在第二方面的第四种可能的实现方式中,所述第一操作指令和所述第二操作指令为语音指令、指纹指令和键盘 指令中的任一种。
第三方面,本发明实施例提供一种数据处理的系统,所述系统包括:智能终端和穿戴式电子设备,其中,所述智能终端,用于向所述穿戴式电子设备发送第一信息,所述第一信息包括完成网上支付的交易数据;所述穿戴式电子设备,用于根据接收的用户输入的第一操作指令,将所述第一操作系统切换成所述第二操作系统,并通过所述第二操作系统支持的第一应用接收所述智能终端发送的所述第一信息,在确定所述第一信息正确的情况下,对所述第一信息进行加密或签名处理,得到第二信息,并向所述智能终端发送所述第二信息。
结合第三方面,在第三方面的第一种可能的实现方式中,所述智能终端,还用于通过无线接入方式与所述穿戴式电子设备建立通信连接,并向所述穿戴式电子设备发送服务请求指令,所述服务请求指令用于指示所述穿戴式电子设备确定运行所述第二操作系统支持的所述第一应用;所述穿戴式电子设备,还用于接收所述服务请求指令,根据所述服务请求指令确定运行所述第二操作系统支持的所述第一应用,并向所述智能终端发送所述第一应用已运行的响应消息。
结合第三方面或第三方面的第一种可能的实现方式,在第三方面的第二种可能的实现方式中,所述穿戴式电子设备,还用于接收用户输入的第二操作指令,并根据所述第二操作指令,确定所述第一信息正确,其中,所述第二操作指令用于指示所述第一信息正确。
结合上述任一种可能的实现方式,在第三方面的第三种可能的实现方式中,所述第一操作指令和所述第二操作指令为语音指令、指纹指令和键盘指令中的任一种。
基于上述技术方案,本发明实施例提供的穿戴式电子设备、数据处理的 方法和系统,通过第二操作系统对智能终端发送的用于完成网上支付的第一信息进行加密或签名处理,得到第二信息,并将该第二信息反馈给该智能终端,以便该智能终端获取该第二信息完成网上支付,从而解决用户在使用智能终端完成网上支付时出现的安全问题。
附图说明
为了更清楚地说明本发明实施例的技术方案,下面将对本发明实施例中所需要使用的附图作简单地介绍,显而易见地,下面所描述的附图仅仅是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其他的附图。
图1是根据本发明实施例的穿戴式电子设备的示意性框图;
图2是根据本发明实施例的数据处理的方法示意性流程;
图3是根据本发明另一实施例的数据处理的方法示意性流程;
图4是根据本发明再一实施例的数据处理的方法示意性流程图;
图5是根据本发明再一实施例的数据处理的方法示意性流程;
图6是根据本发明再一实施例的数据处理的方法的示意性交互图;
图7是根据本发明实施例的数据处理的系统的示意性框图。
具体实施方式
下面将结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例是本发明的一部分实施例,而不是全部实施例。基于本发明中的实施例,本领域普通技术人员在没有做出创造性劳动的前提下所获得的所有其他实施例,都应属于本发明保护的范围。
应理解,在本发明实施例中,智能终端可以为智能手机或者平板电脑等设备,本发明实施例对此并不做限定。
还应理解,在本发明实施例中,穿戴式电子设备为经智能化设计且被用 户穿戴的设备,例如:经智能化设计的穿着物或随身装饰物。具体的,在本发明实施例中,穿戴式电子设备可以为智能手环、智能手表或智能眼镜等设备,本发明实施例对此并不做限定。
图1是根据本发明实施例的穿戴式电子设备100的示意性框图。如图1所示的穿戴式电子设备100包括:处理器110、存储器120、通信单元130、输入单元140和数据处理单元150,其中,
存储器120,用于存储第一操作系统和第二操作系统的软件程序以及模块;
处理器110,用于根据输入单元140接收的用户输入的第一操作指令,将所述第一操作系统切换成所述第二操作系统;
通信单元130,用于通过所述第二操作系统支持的第一应用接收智能终端发送的第一信息,该第一信息包括完成网上支付的交易数据;
处理器110,还用于根据输入单元140接收的用户输入的第二操作指令,确定所述通信单元130接收的第一信息正确;
数据处理单元150,用于通过所述第二操作系统对所述处理器110确定正确的第一信息进行加密或签名处理,得到第二信息;
通信单元130,还用于通过所述第一应用向智能终端发送数据处理单元150得到的第二信息。
具体的,在本发明实施例中,穿戴式电子设备100的处理器110根据输入单元140接收的用户输入的第一操作指令,将存储器120存储的常用的第一操作系统,如:Android系统切换成存储器120存储的具备安全特性的第二操作系统,再根据输入单元140接收的第二操作指令,确定由通信单元130通过第二操作系统支持的第一应用接收的智能终端发送的第一信息正确,该第一信息包括完成网上支付的交易数据,数据处理单元150通过第二操作系统对处理器110确定正确的第一信息进行加密或签名处理,得到第二信息。通信单元130通过第二操作系统支持的第一应用向智 能终端发送数据处理单元150得到的第二信息,以便于智能终端获取该第二信息完成网上支付。
因此,根据本发明实施例提供的穿戴式电子设备,通过第二操作系统对智能终端发送的用于完成网上支付的第一信息进行加密或签名处理,得到第二信息,并将该第二信息反馈给该智能终端,以便该智能终端获取该第二信息完成网上支付,从而解决用户在使用智能终端完成网上支付时出现的安全问题。
应理解,在本发明实施例中,第二操作系统的安全特性体现在:第一,该第二操作系统的启动过程安全,也就是说,每次开机时都要进行逐级的签名认证,从而确保系统不会被篡改;第二,该第二操作系统有严格的软件入口,通过软件审核、代码签名严格控制其软件来源,从而确保不存在任何恶意软件的进入;第三,该第二操作系统能够提供的功能有限,且占用的内存空间也很小,因而存在漏洞的可能性大大减小;第四,该第二操作系统和第一操作系统(如:常用的Android系统)不同时运行,确保第一操作系统不会对该第二操作系统进行任何的安全攻击;第五,只有该操作系统提供访问数据处理单元150的接口,例如:该第二操作系统可以为简单的图形系统。
需要说明的是,在本发明实施例中,如图1所示的穿戴式电子设备100还包括显示单元160、外设接口170、电源180等组件。图1所示的组件可以通过一条或者多条总线进行通信。本领域技术人员可以理解,图1中所示的穿戴式电子设备100的结构并不构成对本发明的限定,它既可以是总线型结构,也可以是星形结构,还可以包括比图示更多或者更少的部件,或者组合某些部件,或者不同的部件布置。
还需要说明的是,本实施例提供的穿戴式电子设备100仅仅是一个示例,本发明实施例涉及的穿戴式电子设备100可以具有比图1所示出的更 多或更少的部件,可以组合两个或更多个部件,或者可以具有不同的部件配置或设置,各个部件可以在包括一个或多个信号处理和/或专用集成电路在内的硬件、软件或硬件和软件的组合实现。
下面对图1所示的穿戴式电子设备100的各个构成部件进行具体的介绍:
处理器110,作为穿戴式电子设备的控制中心,可以利用各种接口和线路连接整个电子设备的各个部分,通过运行或执行存储在存储器120内的软件程序和/或模块,以及调用存储在存储器120内的数据,以执行电子设备的各种功能和/或处理数据。
处理器110可以由集成电路(Integrated Circuit,IC)组成,例如:可以由单颗封装的IC所组成,也可以由连接多颗相同功能或不同功能的封装的IC而组成。
在本发明实施例中,处理器110可以包括中央处理器(Central Processing Unit,CPU),也可以是具有图像处理器(Graphic Processing Unit,GPU)、数字信号处理器(Digital Signal Processor,DSP)、以及通信单元中的控制芯片(例如基带芯片)或者现场可编程门阵列(Field Programmable Gate Array,FPGA)芯片的组合。在本发明实施例中,CPU可以是单运算核心,也可以包括多运算核心,本发明实施例对此并不做限定。
存储器120,可以用于存储软件程序以及模块,处理器110通过运行存储在存储器120的软件程序以及模块,从而执行穿戴式电子设备100的各种功能应用以及实现数据处理。具体的,在本发明实施例中,存储器120可以存储两个操作系统,第一个是常用的操作系统(例如:Android系统),第二个是精简的操作系统(例如:简化的图形系统)。这两个操作系统无法同时运行,需要通过开关(输入单元中的元素)进行切换。当需要进行 支付时,需要用户主动切换到第二个操作系统。
存储器120主要包括程序存储区和数据存储区,其中,程序存储区可存储操作系统、至少一个功能所需的应用程序,比如:声音播放程序、图像播放程序等等;数据存储区可存储根据电子设备的使用所创建的数据(比如音频数据、电话本等)等。
在本发明实施例中,存储器120可以包括易失性存储器,例如:非挥发性动态随机存取内存(Nonvolatile Random Access Memory,NVRAM)、相变化随机存取内存(Phase Change RAM,PRAM)、磁阻式随机存取内存(Magnetoresistive RAM,MRAM)等,还可以包括非易失性存储器,例如:至少一个磁盘存储器件、电子可擦除可编程只读存储器(Electrically Erasable Programmable Read-Only Memory,EEPROM)、闪存器件,例如:反或闪存(NOR flash memory)或反及闪存(NAND flash memory)。
通信单元130,可以用于建立通信信道,使穿戴式电子设备100通过该通信信道以连接至远程服务器或者智能终端(例如手机、平板电脑等),向远程服务器或智能终端发送数据,并从远程服务器或者智能终端接收数据。
在本发明实施例中,通信单元130可以包括无线局域网(Wireless Local Area Network,WLAN)模块、蓝牙模块、近距离无线通信(Near Field Communication,NFC)模块、基带模块等用于无线通信的模块,以及所述通信单元对应的射频(Radio Frequency,RF)电路,用于无线局域网通信、蓝牙通信、红外线通信以及/或蜂窝式通信系统通信。
输入单元140,可以用于实现用户与穿戴式电子设备100的交互和/或用户将信息输入到穿戴式电子设备100中。例如,输入单元140可以接收用户输入的数字或者字符信息,以产生与用户设置或功能控制有关的信号 输入。
具体地,在本发明实施例中,输入单元140可包括触控面板141以及其他输入设备142。触控面板141,也称为触摸屏,可收集用户在其上或附近的触摸操作(比如用户使用手指、触笔等任何适合的物体或附件在触控面板141上或在触控面板141附近的操作),并根据预先设定的程式驱动相应的连接装置。
可选的,触控面板141可包括触摸检测装置和触摸控制器两个部分。其中,触摸检测装置检测用户的触摸方位,并检测触摸操作带来的信号,将信号传送给触摸控制器;触摸控制器从触摸检测装置上接收触摸信息,并将它转换成触点坐标,再送给处理器110,并能接收处理器110发来的命令并加以执行。此外,可以采用电阻式、电容式、红外线以及表面声波等多种类型实现触控面板141。
除了触控面板141,输入单元140还可以包括其他输入设备142。具体地,其他输入设备142可以包括但不限于物理键盘、功能键(比如音量控制按键、开关按键等)、轨迹球、鼠标、操作杆等中的一种或多种。
数据处理单元150,可以实现敏感数据存储和安全运算。数据处理单元150自身内置了CPU、存储器(SRAM、Flash)、芯片操作系统(COS),可以存储用户的密钥或数字证书。同时数据处理单元内置算法引擎包括:公钥算法引擎、对称算法引擎、杂凑算法引擎、随机数发生器,用以实现对数据的加密或签名处理。
其中,公钥算法引擎用于实现公钥加密,公钥加密是使用一个必须对未经授权的用户保密的私钥和一个可以对任何用户公开的公钥,且公钥和私钥相关联,两个密钥对于通信会话都是唯一的,用公钥加密的数据只能用私钥解密,而用私钥签名的数据只能用公钥验证。因为需要用一个密钥加密数据而需要用另一个密钥来解密数据,所以公钥加密算法也称为不对 称算法。
对称算法引擎用于实现对称加密,对称加密算法是使用单个私钥来加密和解密数据。由于具有密钥的任意一方都可以使用该密钥解密数据,因此必须保护密钥不被未经授权的代理得到。因为同一密钥既用于加密又用于解密,所以对称加密算法也称为私钥加密算法。
杂凑算法引擎用于实现杂凑函数加密,杂凑函数有时也称作消息摘要函数、称散列函数或哈希函数,杂凑函数加密的过程中不一定使用到钥匙,但和许多密码算法相关。可以将输入的数据输出成较短的固定长度的杂凑值,这个过程是单向的,逆向操作难以完成,而且两个不同的输入产生相同的杂凑值的机率非常小。
随机数发生器用于生成随机数,可以在加密操作中生成随机的加密密钥,使生成的密钥很难再现,有利于数据传输的安全性。
在本发明实施例中,数据处理单元150还可以支持7816接口、串行外设接口(Serial Peripheral Interface,SPI)等安全接口,也可以支持芯片级安全检测防护机制。
具体的,在本发明实施例中,数据处理单元150可以存储唯一的密钥信息,从而确保只有经该数据处理单元150存储的密钥处理过的信息才能被支付机构认可。数据处理单元150可以存储用户在支付机构对应的证书和密钥,支付机构在其平台侧也保存有该用户的证书,从而通过证书和密钥的唯一对应关系,即可确保交易是由具有密钥的实体(穿戴电子式设备100)完成的。也就是说,数据处理单元150中可以存储支付相关的密钥(证书)、银行卡的信息等,而该密钥完全可以在数据处理单元150内随机生成,并存储在该数据处理单元150中,从而保证密钥不从数据处理单元150导出。由于数据处理单元150中保存了用户在支付机构对应的证书以及证书对应的私钥,且因该私钥不能导出,而只有经该私钥加密或签名的数据才能在服务端(支付机构在其平台侧)通过验证,从而可以确保只 有使用该数据处理单元150时才能完成交易。
穿戴式电子设备100还包括显示单元160,可以用于显示由用户输入的信息或提供给用户的信息以及穿戴式电子设备100的各种菜单。显示单元160可包括显示面板161,可选的,可以采用LCD(Liquid Crystal Display,液晶显示器)、OLED(Organic Light-Emitting Diode,有机发光二极管)等形式来配置显示面板161。
进一步的,触控面板141可覆盖显示面板161,当触控面板141检测到在其上或附近的触摸操作后,传送给处理器110以确定触摸事件的类型,随后处理器110根据触摸事件的类型在显示面板161上提供相应的视觉输出。虽然在图1中,触控面板141与显示面板161是作为两个独立的部件来实现穿戴式电子设备100的输入和输入功能,但是在某些实施例中,可以将触控面板141与显示面板161集成而实现穿戴式电子设备100的输入和输出功能。
穿戴式电子设备100还包括外设接口170,可以用于连接外部设备与穿戴式电子设备100的接口,外部设备包括但不限于键盘、鼠标、触摸板、轨迹球、控制杆、游戏控制器、麦克风、显示器、音箱、功率放大器等中的一种或几种。外部设备通过外设接口170连接穿戴式电子设备100的处理器110,将数据(例如:数字或者字符信息)输入到处理器100中处理或者从处理器100中读取数据,通过外设接口170输出到外部设备。
在本发明实施例中,外设接口170包括但不限于通用串行总线(Universal Serial Bus,USB)接口、mini-USB接口、外围组件互联(Peripheral Component Interconnect,PCI)接口、IEEE 1394接口、视频图形阵列(Video Graphics Array,VGA)接口和高清晰度多媒体(High Definition Multimedia Interface,HDMI)接口等,或者上述接口中的一项 或几项的组合。
穿戴式电子设备100还包括电源180,用于给穿戴式电子设备100的不同部件进行供电以维持其运行。一般情况下,电源180可以是内置的电池,例如常见的锂离子电池、镍氢电池等,也包括直接向穿戴式电子设备100供电的外接电源,例如AC适配器等。
在本发明实施例中,电源180还可以包括电源管理系统、充电系统、电源故障检测电路、电源转换器或逆变器、电源状态指示器(如发光二极管),以及与电子设备的电能生成、管理及分布相关联的其他任何组件。
可选的,作为本发明的一个实施例,输入单元140还用于接收用户输入的第二操作指令,该第二操作指令用于指示第一信息正确。
具体的,在本发明实施例中,当穿戴式电子设备100的处理器110将第一操作系统切换成第二操作系统,并由通信单元130通过第二操作系统支持的第一应用接收智能终端发送的第一信息后,再根据输入单元140接收的用于指示该第一信息正确的第二操作指令,确定该第一信息正确,该第一信息包括完成网上支付的交易数据,进一步由数据处理单元150通过第二操作系统对处理器110确定正确的第一信息进行加密或签名处理,得到第二信息。也就是说,通信单元130接收的第一信息可以显现在该穿戴式电子设备100上,可以确保该第一信息的真实性。如果智能终端上有恶意软件,篡改了交易数据,会把篡改后的数据呈现在穿戴式电子设备100的显示单元160上,如果用户发现交易数据不正确,则可放弃支付操作。
可选的,作为本发明的另一实施例,通信单元130还可以用于通过无线接入方式与智能终端建立通信连接,处理器110还可以用于根据通信单元130接收的智能终端发送的服务请求指令,确定运行第二操作系统支持 的第一应用,并由通信单元130向智能终端发送该第一应用已运行的响应消息。
具体的,在本发明实施例中,穿戴式电子设备100的处理器110将第一操作系统切换成第二操作系统后,通信单元130可以通过无线接入方式与智能终端建立通信连接,例如:穿戴式电子设备100在接收到智能终端按照一定的时间周期和一定的频率向外广播的搜索消息后,向智能终端发送搜索响应消息,该搜索响应消息中携带了穿戴式电子设备100蓝牙模块的蓝牙地址以及时钟信息,智能终端收到穿戴式电子设备100的搜索响应消息时,用户可在智能终端的屏上点击建立连接,则智能终端将自己的蓝牙地址和蓝牙时钟发送给穿戴式电子设备100,使得穿戴式电子设备100与智能终端的时钟同步,建立智能终端与穿戴式电子设备100之间的蓝牙通信链路,同时智能终端随机生成PIN码,并将该PIN码发送给穿戴式电子设备100,穿戴式电子设备100在接收到该PIN码后,在确定智能终端与穿戴式电子设备100的上的PIN码是否一致,从而验证连接的有效性。当用户在穿戴式电子设备100上选择接受时,智能终端和穿戴式电子设备100之间就建立了蓝牙连接,智能终端与穿戴式电子设备100就可以通过蓝牙进行数据交互。
在智能终端与穿戴式电子设备100建立蓝牙连接后,智能终端向穿戴式电子设备100发送服务请求命令,用以获取对应的服务,穿戴式电子设备100的处理器110根据通信单元130接收的智能终端发送的服务请求指令,确定运行第二操作系统支持的第一应用,并通过通信单元130向该智能终端发送该第一应用已运行的响应消息。
例如:智能终端向穿戴式电子设备100发送服务请求命令,用以获取工商银行的服务,穿戴式电子设备100的处理器110根据通信单元130接收的智能终端发送的服务请求指令,确定并运行第二操作系统支持的工商银行应用,并通过通信单元130向该智能终端发送已运行工商银行应用的 响应消息。
应理解,在本发明实施例中,智能终端与穿戴式电子设备100还可以建立WiFi连接。第二操作系统可以支持多个支付应用,因此,穿戴式电子设备100可以根据智能终端发送的服务请求指令,从该多个支付应用中确定与该指令对应的一个应用,并激活该应用,以便接收智能终端发送的包含交易数据的第一信息。
可选的,作为本发明的另一实施例,输入单元140还可以用于接收用户输入的第一操作指令,该第一操作指令用于将所述第一操作系统切换成所述第二操作系统。具体的,在本发明实施例中,在穿戴式电子设备100的处理器110根据输入单元140接收的用户输入的第一操作指令,将常用的第一操作系统切换成具备安全特性的第二操作系统之前,可以通过该输入单元140接收用于指示将第一操作系统切换成第二操作系统的第一操作指令。
应理解,在本发明实施例中,第一操作指令和第二操作指令可以为通过语音输入、指纹输入和键盘输入中的任一种方式输入的操作指令,即:可以是语音指令、指纹指令和键盘指令中的任一种。
还应理解,在本发明实施例中,输入单元140可以是触控面板,也可以是其他人机交互界面,例如:实体输入键、麦克风等,还可以是其他外部信息采集装置,例如:摄像头等,本发明实施例对此并不做限定。
上文中结合图1详细描述了根据本发明实施例的穿戴式电子设备,下面将结合图2至图6,详细描述根据本发明实施例的数据处理的方法。
图2是根据本发明实施例的数据处理的方法200的示意性流程图。如图2所示的方法200可以由穿戴式电子设备执行,该方法200包括:
210,根据接收的用户输入的第一操作指令,将第一操作系统切换成第 二操作系统;
220,通过所述第二操作系统支持的第一应用接收智能终端发送的第一信息,所述第一信息包括完成网上支付的交易数据;
230,根据接收所述用户输入的的第二操作指令,确定所述第一信息正确;
240,通过所述第二操作系统对所述第一信息进行加密或签名处理,得到第二信息;
250,通过所述第一应用向所述智能终端发送所述第二信息。
具体的,在本发明实施例中,根据接收的用户输入的第一操作指令,将常用的第一操作系统,如:Android系统切换成具备安全特性的第二操作系统后,再通过该第二操作系统支持的第一应用接收智能终端发送的第一信息,该第一信息包括完成网上支付的交易数据,并根据接收的用户输入的第二操作指令,确定接收的第一信息正确,然后通过第二操作系统对该第一信息进行加密或签名处理,得到第二信息。例如:穿戴式电子设备的第二操作系统可以存储唯一的密钥信息,从而确保只有经该密钥处理过的信息才能被支付机构认可。穿戴式电子设备的第二操作系统可以存储用户在支付机构对应的证书和密钥,支付机构在其平台侧也保存有用户的证书,从而通过证书和密钥的唯一对应关系,即可确保交易是由具有密钥的实体(穿戴式电子设备)完成的。最后通过第一应用向智能终端发送经加密或签名处理得到的第二信息,以便于该智能终端获取该第二信息完成网上支付。
因此,根据本发明实施例提供的数据处理的方法,通过穿戴式电子设备的第二操作系统对智能终端发送的用于完成网上支付的第一信息进行加密或签名处理,得到第二信息,并将该第二信息反馈给该智能终端,以便该智能终端获取该第二信息完成网上支付,从而解决用户在使用智能终端完成网上支付时出现的安全问题。
可选的,作为本发明的一个实施例,如图3所示,在230之前,该方法200还包括:
255,接收用户输入的第二操作指令,所述第二操作指令用于指示所述第一信息正确。
具体的,在本发明实施例中,当通过第二操作系统支持的第一应用接收智能终端发送的第一信息后,可以接收用户输入的用于指示该第一信息正确的第二操作指令,该第一信息包括完成网上支付的交易数据,再根据接收的该第二操作指令,确定第一信息正确,进一步通过第二操作系统对该第一信息进行加密或签名处理,得到第二信息。也就是说,接收的第一信息可以显现在该穿戴式电子设备上,可以确保该第一信息的真实性。如果智能终端上有恶意软件,篡改了交易数据,会把篡改后的数据呈现在穿戴式电子设备的显示屏上,如果用户发现交易数据不正确,则可以放弃支付操作。
可选的,作为本发明的另一个实施例,如图4所示,在220之前,该方法200还包括:
260,通过无线接入方式与所述智能终端建立通信连接;
265,根据智能终端发送的服务请求指令,确定运行所述第二操作系统支持的第一应用;
270,向所述智能终端发送所述第一应用已运行的响应消息。
具体的,在本发明实施例中,根据接收的用户输入的第一操作指令,将常用的第一操作系统切换成具备安全特性的第二操作系统后,可以通过无线接入方式与智能终端建立通信连接,并在智能终端与穿戴式电子设备建立蓝牙连接后,智能终端向穿戴式电子设备发送服务请求命令,用以获取对应的服务,穿戴式电子设备根据智能终端发送的服务请求指令,确定 运行第二操作系统支持的第一应用,并向该智能终端发送该第一应用已运行响应消息。
例如:智能终端向穿戴式电子设备发送服务请求命令,用以获取工商银行的服务,穿戴式电子设备根据智能终端发送的服务请求指令,确定并运行第二操作系统支持的工商银行应用,并向该智能终端发送工商银行应用已运行的响应消息。
应理解,在本发明实施例中,智能终端与穿戴式电子设备还可以建立WiFi连接。第二操作系统可以支持多个支付应用,因此,穿戴式电子设备可以根据智能终端发送的服务请求指令,从该多个支付应用中确定与该指令对应的一个应用,并激活该应用,以便接收智能终端发送的包含交易数据的第一信息。
可选的,作为本发明的另一个实施例,如图5所示,在210之前,该方法200还包括:
275,接收用户输入的所述第一操作指令,所述第一操作指令用于指示将所述第一操作系统切换成所述第二操作系统。
具体的,在本发明实施例中,在根据接收的第一操作指令,将常用的第一操作系统切换成具备安全特性的第二操作系统之前,可以接收用于指示将第一操作系统切换成第二操作系统的第一操作指令。
应理解,在本发明实施例中,第一操作指令和第二操作指令可以为语音指令、指纹指令和键盘指令中的任一种。
下面结合图6所示的根据本发明实施例的数据处理的方法600的交互性示意图,对本发明实施例的技术方案进行详细的描述。如图6所示的方法600包括:
610,穿戴式电子设备根据接收的用户输入的第一操作指令,将第一操作 系统切换成第二操作系统。
具体的,在本发明实施例中,当用户确定需要进行网上支付业务时,可以向该穿戴式电子设备输入第一操作指令,例如:通过语音,键盘或指纹等方式给该穿戴式电子设备输入一个操作指令,该第一操作指令指示穿戴式电子设备将常用的第一操作系统如:Android系统切换成具备安全特性的第二操作系统。
615,智能终端与穿戴式电子设备通过无线接入的方式,建立通信连接。
具体的,在本发明实施例中,智能终端与穿戴式电子设备可以通过蓝牙或者WiFi的方式,建立通信连接。
620,智能终端向穿戴式电子设备发送服务请求指令,该服务请求指令用于指示穿戴式电子设备提供工商银行的相关服务。
625,穿戴式电子设备接收智能终端发送的服务请求指令,并根据该服务请求指令,确定并运行第二操作系统支持的工商银行应用,以便提供工商银行的相关服务。
630,穿戴式电子设备向智能终端发送工商银行应用已运行的响应消息,该响应消息用于指示穿戴式电子设备可以提供工商银行的相关服务。
635,智能终端接收响应消息后,向穿戴式电子设备发送第一信息,该第一信息包括完成网上支付的交易数据。
640,穿戴式电子设备通过第二操作系统支持的第一应用接收智能终端发送的第一信息。
645,穿戴式电子设备根据接收的用户输入的第二操作指令,确定该第一信息正确。
具体的,在本发明实施例中,穿戴式电子设备通过工商银行应用接收了智能终端发送的第一信息,该第一信息包括完成网上支付的交易数据,该第一信息可以显示在该穿戴式电子设备的显示屏上,用户可以向该穿戴 式电子设备输入第二操作指令,例如:可以通过语音、按键、指纹等方式进行第二操作指令的输入,以确定该第一信息正确。若用户发现该第一信息包括的交易数据不正确,则可以放弃支付操作,从而避免损失。
650,穿戴式电子设备通过第二操作系统对接收的第一信息进行加密或签名处理,得到第二信息。
655,穿戴式电子设备向智能终端发送经加密或签名处理得到的第二信息。
660,智能终端接收穿戴式电子设备发送的第二信息,并根据该第二信息完成网上支付。
具体的,在本发明实施例中,穿戴式电子设备可以通过具备安全特性的第二操作系统对接收的第一信息进行加密或签名处理,得到第二信息,以确保只有经该第二操作系统存储的密钥处理过的信息才能被支付机构认可。穿戴式电子设备向智能终端发送经加密或签名处理得到的第二信息,智能终端接收该第二信息并将该第二信息发送给支付机构的平台,支付机构接收该第二信息,并在验证该第二信息正确无误之后,完成相应的支付交易,同时,可以向智能终端发送携带交易完成信息的反馈消息。
因此,根据本发明实施例提供的数据处理的方法,通过穿戴式电子设备的第二操作系统对智能终端发送的用于完成网上支付的第一信息进行加密或签名处理,得到第二信息,并将该第二信息反馈给该智能终端,以便该智能终端获取该第二信息完成网上支付,从而解决用户在使用智能终端完成网上支付时出现的安全问题。
应理解,在本发明实施例中,根据本发明实施例的方法200的执行主体可对应于根据本发明实施例的穿戴式电子设备100,并且图2至图6中的各个方法的相应流程分别由穿戴式电子设备100中的各个模块的上述和其它操作和/或功能实现,为了简洁,在此不再赘述。
上文中结合图2至图6详细描述了根据本发明实施例的数据处理的方法,下面将结合图7,详细描述根据本发明实施例的数据处理的系统。
图7是根据本发明实施例的数据处理的系统700的示意图。如图7所示的系统700包括:智能终端710和穿戴式电子设备720,其中,
智能终端710,用于向穿戴式电子设备720发送第一信息,所述第一信息包括完成网上支付的交易数据;
穿戴式电子设备720,用于根据接收的用户输入的第一操作指令,将所述第一操作系统切换成所述第二操作系统,并通过所述第二操作系统支持的第一应用接收所述智能终端710发送的所述第一信息,在确定所述第一信息正确的情况下,对所述第一信息进行加密或签名处理,得到第二信息,并向所述智能终端710发送所述第二信息。
因此,根据本发明实施例提供的数据处理的系统,通过穿戴式电子设备的第二操作系统对智能终端发送的用于完成网上支付的第一信息进行加密或签名处理,得到第二信息,并将该第二信息反馈给该智能终端,以便该智能终端获取该第二信息完成网上支付,从而解决用户在使用智能终端完成网上支付时出现的安全问题。
应理解,在本发明实施例中,穿戴式电子设备720可以对应与跟进本发明实施例的穿戴式电子设备100,为了简洁,在此不再赘述。
可选的,作为本发明的一个实施例,智能终端710还可以用于通过无线接入方式与所述穿戴式电子设备720建立通信连接,并向所述穿戴式电子设备720发送服务请求指令,所述服务请求指令用于指示所述穿戴式电子设备720确定运行所述第二操作系统支持的所述第一应用;
穿戴式电子设备720,还用于接收智能终端710发送的所述服务请求指令,根据所述服务请求指令确定运行所述第二操作系统支持的所述第一应用,并向所述智能终端710发送所述第一应用已运行的响应消息。
可选的,作为本发明的另一个实施例,穿戴式电子设备720,还用于接收用户输入的第二操作指令,并根据所述第二操作指令,确定所述第一信息正确,其中,所述第二操作指令用于指示所述第一信息正确。
应理解,在本发明实施例中,第一操作指令和所述第二操作指令为语音指令、指纹指令和键盘指令中的任一种,本发明实施例对此并不做限定。
本领域普通技术人员可以意识到,结合本文中所公开的实施例描述的各示例的单元及算法步骤,能够以电子硬件、计算机软件或者二者的结合来实现,为了清楚地说明硬件和软件的可互换性,在上述说明中已经按照功能一般性地描述了各示例的组成及步骤。这些功能究竟以硬件还是软件方式来执行,取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能,但是这种实现不应认为超出本发明的范围。
所属领域的技术人员可以清楚地了解到,为了描述的方便和简洁,上述描述的系统、装置和单元的具体工作过程,可以参考前述方法实施例中的对应过程,在此不再赘述。
在本申请所提供的几个实施例中,应该理解到,所揭露的系统、装置和方法,可以通过其它的方式实现。例如,以上所描述的装置实施例仅仅是示意性的,例如,所述单元的划分,仅仅为一种逻辑功能划分,实际实现时可以有另外的划分方式,例如多个单元或组件可以结合或者可以集成到另一个系统,或一些特征可以忽略,或不执行。另外,所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口、装置或单元的间接耦合或通信连接,也可以是电的,机械的或其它的形式连接。
所述作为分离部件说明的单元可以是或者也可以不是物理上分开的,作为单元显示的部件可以是或者也可以不是物理单元,即可以位于一个地方,或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者 全部单元来实现本发明实施例方案的目的。
另外,在本发明各个实施例中的各功能单元可以集成在一个处理单元中,也可以是各个单元单独物理存在,也可以是两个或两个以上单元集成在一个单元中。上述集成的单元既可以采用硬件的形式实现,也可以采用软件功能单元的形式实现。
所述集成的单元如果以软件功能单元的形式实现并作为独立的产品销售或使用时,可以存储在一个计算机可读取存储介质中。基于这样的理解,本发明的技术方案本质上或者说对现有技术做出贡献的部分,或者该技术方案的全部或部分可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质中,包括若干指令用以使得一台计算机设备(可以是个人计算机,服务器,或者网络设备等)执行本发明各个实施例所述方法的全部或部分步骤。而前述的存储介质包括:U盘、移动硬盘、只读存储器(ROM,Read-Only Memory)、随机存取存储器(RAM,Random Access Memory)、磁碟或者光盘等各种可以存储程序代码的介质。
以上所述,仅为本发明的具体实施方式,但本发明的保护范围并不局限于此,任何熟悉本技术领域的技术人员在本发明揭露的技术范围内,可轻易想到各种等效的修改或替换,这些修改或替换都应涵盖在本发明的保护范围之内。因此,本发明的保护范围应以权利要求的保护范围为准。

Claims (14)

  1. 一种穿戴式电子设备,其特征在于,包括:
    处理器;
    存储器;
    通信单元;
    输入单元;
    数据处理单元;
    所述存储器,用于存储第一操作系统和第二操作系统的软件程序以及模块;
    所述处理器,用于根据所述输入单元接收的用户输入的第一操作指令,将所述第一操作系统切换成所述第二操作系统;
    所述通信单元,用于通过所述第二操作系统支持的第一应用接收智能终端发送的第一信息,所述第一信息包括完成网上支付的交易数据;
    所述处理器,还用于根据所述输入单元接收的所述用户输入的第二操作指令,确定所述通信单元接收的所述第一信息正确;
    所述数据处理单元,用于通过所述第二操作系统对所述处理器确定正确的所述第一信息进行加密或签名处理,得到第二信息;
    所述通信单元,还用于通过所述第一应用向所述智能终端发送所述数据处理单元得到的所述第二信息。
  2. 根据权利要求1所述的穿戴式电子设备,其特征在于,所述输入单元,还用于接收所述用户输入的所述第二操作指令,所述第二操作指令用于指示所述第一信息正确。
  3. 根据权利要求1或2所述的穿戴式电子设备,其特征在于,所述通信单元,还用于通过无线接入方式与所述智能终端建立通信连接;
    所述处理器,还用于根据所述通信单元接收的所述智能终端发送的服务请求指令,确定运行所述第二操作系统支持的所述第一应用;
    所述通信单元,还用于向所述智能终端发送所述第一应用已运行的响应消息。
  4. 根据权利要求1至3中任一项所述的穿戴式电子设备,其特征在于,所述输入单元,还用于接收所述用户输入的所述第一操作指令,所述第一操作指令用于将所述第一操作系统切换成所述第二操作系统。
  5. 根据权利要求1至4中任一项所述的穿戴式电子设备,其特征在于,所述第一操作指令和所述第二操作指令为语音指令、指纹指令和键盘指令中的任一种。
  6. 一种数据处理的方法,其特征在于,包括:
    根据接收的用户输入的第一操作指令,将第一操作系统切换成第二操作系统;
    通过所述第二操作系统支持的第一应用接收智能终端发送的第一信息,所述第一信息包括完成网上支付的交易数据;
    根据接收的所述用户输入的第二操作指令,确定所述第一信息正确;
    通过所述第二操作系统对所述第一信息进行加密或签名处理,得到第二信息;
    通过所述第一应用向所述智能终端发送所述第二信息。
  7. 根据权利要求6所述的方法,其特征在于,在所述根据接收的所述用户输入的第二操作指令,确定所述第一信息正确之前,所述方法还包括:
    接收所述第二操作指令,所述第二操作指令用于指示所述第一信息正确。
  8. 根据权利要求6或7所述的方法,其特征在于,在所述通过所述第二操作系统支持的第一应用接收智能终端发送的第一信息之前,所述方法还包括:
    通过无线接入方式与所述智能终端建立通信连接;
    根据智能终端发送的服务请求指令,确定运行所述第二操作系统支持的所述第一应用;
    向所述智能终端发送所述第一应用已运行的响应消息。
  9. 根据权利要求6至8中任一项所述的方法,其特征在于,在所述根据接收的用户输入的第一操作指令,将第一操作系统切换成第二操作系统之前,所述方法还包括:
    接收所述用户输入的所述第一操作指令,所述第一操作指令用于将所述第一操作系统切换成所述第二操作系统。
  10. 根据权利要求6至9中任一项所述的方法,其特征在于,所述第一操作指令和所述第二操作指令为语音指令、指纹指令和键盘指令中的任一种。
  11. 一种数据处理的系统,其特征在于,包括:智能终端和穿戴式电子设备,其中,
    所述智能终端,用于向所述穿戴式电子设备发送第一信息,所述第一信息包括完成网上支付的交易数据;
    所述穿戴式电子设备,用于根据接收的用户输入的第一操作指令,将所述第一操作系统切换成所述第二操作系统,并通过所述第二操作系统支持的第一应用接收所述智能终端发送的所述第一信息,在确定所述第一信息正确的情况下,对所述第一信息进行加密或签名处理,得到第二信息,并向所述智能终端发送所述第二信息。
  12. 根据权利要求11所述的系统,其特征在于,
    所述智能终端,还用于通过无线接入方式与所述穿戴式电子设备建立通信连接,并向所述穿戴式电子设备发送服务请求指令,所述服务请求指令用于指示所述穿戴式电子设备确定运行所述第二操作系统支持的所述第一应用;
    所述穿戴式电子设备,还用于接收所述服务请求指令,根据所述服务请求指令确定运行所述第二操作系统支持的所述第一应用,并向所述智能终端发送所述第一应用已运行的响应消息。
  13. 根据权利要求11或12所述的系统,其特征在于,
    所述穿戴式电子设备,还用于接收用户输入的第二操作指令,并根据所述第二操作指令,确定所述第一信息正确,其中,所述第二操作指令用于指示所述第一信息正确。
  14. 根据权利要求11至13中任一项所述的方法,其特征在于,所述第一操作指令和所述第二操作指令为语音指令、指纹指令和键盘指令中的任一种。
PCT/CN2016/094157 2015-08-14 2016-08-09 数据处理的方法、穿戴式电子设备和系统 WO2017028711A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
KR1020187005539A KR102061483B1 (ko) 2015-08-14 2016-08-09 데이터 처리 방법 및 시스템, 및 착용형 전자 디바이스
EP16836575.7A EP3319032A4 (en) 2015-08-14 2016-08-09 Method for processing data, wearable electronic equipment and system
US15/751,785 US20180240109A1 (en) 2015-08-14 2016-08-09 Data Processing Method and System, and Wearable Electronic Device
JP2018504736A JP6552714B2 (ja) 2015-08-14 2016-08-09 データ処理方法およびシステム、ならびにウェアラブル電子デバイス

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510502465.1A CN106611310B (zh) 2015-08-14 2015-08-14 数据处理的方法、穿戴式电子设备和系统
CN201510502465.1 2015-08-14

Publications (1)

Publication Number Publication Date
WO2017028711A1 true WO2017028711A1 (zh) 2017-02-23

Family

ID=58050423

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/094157 WO2017028711A1 (zh) 2015-08-14 2016-08-09 数据处理的方法、穿戴式电子设备和系统

Country Status (6)

Country Link
US (1) US20180240109A1 (zh)
EP (1) EP3319032A4 (zh)
JP (1) JP6552714B2 (zh)
KR (1) KR102061483B1 (zh)
CN (1) CN106611310B (zh)
WO (1) WO2017028711A1 (zh)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2019037084A1 (zh) * 2017-08-25 2019-02-28 深圳传音通讯有限公司 双系统切换方法、移动终端及计算机可读存储介质
CN108280020B (zh) * 2018-01-23 2021-09-14 广州视源电子科技股份有限公司 计算机设备的监控方法、装置、终端及计算机存储介质
CN113542483B (zh) * 2020-03-30 2022-03-18 Oppo广东移动通信有限公司 数据传输方法和装置、可穿戴设备及存储介质
CN115767776A (zh) * 2020-08-31 2023-03-07 华为技术有限公司 用于蓝牙通信的方法和电子设备
CN114691219A (zh) * 2020-12-31 2022-07-01 成都鼎桥通信技术有限公司 系统切换方法、装置、穿戴设备及用户终端
CN115202440A (zh) * 2021-04-14 2022-10-18 Oppo广东移动通信有限公司 数据传输方法、装置、设备及存储介质
CN115226048A (zh) * 2021-04-14 2022-10-21 Oppo广东移动通信有限公司 数据传输方法、装置、设备及存储介质
CN115022817A (zh) * 2022-05-30 2022-09-06 无锡富华物联科技有限公司 一种离线耳标数据传输方法、系统及终端

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101739622A (zh) * 2008-11-06 2010-06-16 同方股份有限公司 一种可信支付计算机系统
CN102402820A (zh) * 2010-09-13 2012-04-04 中国移动通信有限公司 电子交易方法及终端设备
CN102982445A (zh) * 2012-11-16 2013-03-20 江苏乐买到网络科技有限公司 一种实现网络安全交易和支付的客户端系统
CN104156657A (zh) * 2014-09-01 2014-11-19 宇龙计算机通信科技(深圳)有限公司 终端的信息输入方法、终端的信息输入装置和终端

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2000099609A (ja) * 1998-09-28 2000-04-07 Brother Ind Ltd 携帯型パーソナル電子機器
JP2009205234A (ja) * 2008-02-26 2009-09-10 Dainippon Printing Co Ltd 電子決済システム、およびその方法、プログラム、媒体
WO2012066653A1 (ja) * 2010-11-17 2012-05-24 Suginaka Junko 電子取引システム、電子取引が可能な情報処理端末、電子取引用の管理サーバ、及び電子取引が可能なレジ端末
US20130054473A1 (en) * 2011-08-23 2013-02-28 Htc Corporation Secure Payment Method, Mobile Device and Secure Payment System
EP2798594A4 (en) * 2011-12-29 2015-07-01 Intel Corp VIRTUAL POINT OF SALE
US10223710B2 (en) * 2013-01-04 2019-03-05 Visa International Service Association Wearable intelligent vision device apparatuses, methods and systems
CN104732391A (zh) * 2013-12-24 2015-06-24 中国银联股份有限公司 使用虚拟卡的支付终端、支付后台和支付方法
CN104143065A (zh) * 2014-08-28 2014-11-12 北京握奇智能科技有限公司 安全智能终端设备、及信息处理方法
CN104240077B (zh) * 2014-09-03 2018-09-28 萧东 一种基于短距离无线通信技术的编码加密器

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101739622A (zh) * 2008-11-06 2010-06-16 同方股份有限公司 一种可信支付计算机系统
CN102402820A (zh) * 2010-09-13 2012-04-04 中国移动通信有限公司 电子交易方法及终端设备
CN102982445A (zh) * 2012-11-16 2013-03-20 江苏乐买到网络科技有限公司 一种实现网络安全交易和支付的客户端系统
CN104156657A (zh) * 2014-09-01 2014-11-19 宇龙计算机通信科技(深圳)有限公司 终端的信息输入方法、终端的信息输入装置和终端

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3319032A4 *

Also Published As

Publication number Publication date
JP6552714B2 (ja) 2019-07-31
US20180240109A1 (en) 2018-08-23
EP3319032A4 (en) 2018-07-18
CN106611310A (zh) 2017-05-03
KR20180034563A (ko) 2018-04-04
CN106611310B (zh) 2020-12-08
JP2018530036A (ja) 2018-10-11
EP3319032A1 (en) 2018-05-09
KR102061483B1 (ko) 2020-01-02

Similar Documents

Publication Publication Date Title
WO2017028711A1 (zh) 数据处理的方法、穿戴式电子设备和系统
US10601795B2 (en) Service processing method and electronic device
ES2836114T3 (es) Método de envío de información, método de recepción de información, aparato y sistema
JP6820351B2 (ja) 非ネーティブクレデンシャルを有する電子デバイスを使用したトランザクションの実行
US10880097B2 (en) Flexible provisioning of attestation keys in secure enclaves
TWI792284B (zh) 用於驗證對安全裝置功能性之線上存取之方法
CN105391840B (zh) 自动创建目标应用程序
ES2687191T3 (es) Método de autentificación de red para transacciones electrónicas seguras
KR102165708B1 (ko) 전자 디바이스의 보안 요소를 사용한 온라인 결제
CN108769027B (zh) 安全通信方法、装置、移动终端和存储介质
US20150213433A1 (en) Secure provisioning of credentials on an electronic device using elliptic curve cryptography
US9571280B2 (en) Application integrity protection via secure interaction and processing
CN104954126B (zh) 敏感操作验证方法、装置及系统
CN110378097A (zh) 保障传感器数据安全
US20220239509A1 (en) Method for storing and recovering key for blockchain-based system, and device therefor
WO2017206833A1 (zh) 支付方法、支付设备和支付服务器
KR102616421B1 (ko) 생체 인증을 이용한 결제 방법 및 그 전자 장치
KR20160066728A (ko) 생체 정보를 저장하는 nfc 패키지 및 전자 기기
CN104866129A (zh) 计算设备及其密码输入方法
KR20180129302A (ko) 보안 키보드의 실행 방법 및 이를 수행하기 위한 장치 및 시스템
CN103488917B (zh) 利用触屏装置实现系统加密保护的方法
KR20140110637A (ko) 데이터 보호 방법 및 이를 구현하는 전자 장치
US20230379142A1 (en) Authentication mechanism for computational storage download program
KR101394147B1 (ko) 모바일에서 안전하게 인증서를 사용하는 방법
WO2019232764A1 (zh) 交易方法、硬件钱包和交易设备

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16836575

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2018504736

Country of ref document: JP

Kind code of ref document: A

WWE Wipo information: entry into national phase

Ref document number: 2016836575

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 15751785

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 20187005539

Country of ref document: KR

Kind code of ref document: A