WO2017107733A1 - 线下支付方法、终端设备、后台支付装置及线下支付系统 - Google Patents

线下支付方法、终端设备、后台支付装置及线下支付系统 Download PDF

Info

Publication number
WO2017107733A1
WO2017107733A1 PCT/CN2016/107045 CN2016107045W WO2017107733A1 WO 2017107733 A1 WO2017107733 A1 WO 2017107733A1 CN 2016107045 W CN2016107045 W CN 2016107045W WO 2017107733 A1 WO2017107733 A1 WO 2017107733A1
Authority
WO
WIPO (PCT)
Prior art keywords
transaction
payment
challenge code
account
transaction identifier
Prior art date
Application number
PCT/CN2016/107045
Other languages
English (en)
French (fr)
Inventor
孙权
Original Assignee
中国银联股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中国银联股份有限公司 filed Critical 中国银联股份有限公司
Publication of WO2017107733A1 publication Critical patent/WO2017107733A1/zh

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/20—Point-of-sale [POS] network systems
    • G06Q20/206—Point-of-sale [POS] network systems comprising security or operator identification provisions, e.g. password entry
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3823—Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction

Definitions

  • the present invention relates to the field of mobile payment technologies, and in particular, to an offline payment method, a terminal device, a background payment device, and an offline payment system.
  • the mobile terminal must communicate with the background payment device to generate a Token, so that the payment success rate will be greatly affected by the network environment, and the user experience is not good; and, the bank card number, the bank card verification code and The dynamic two-dimensional code is transmitted together, and there is a problem of being stolen, and the security is not high.
  • the main purpose of the embodiments of the present invention is to provide an offline payment method, a terminal device, a background payment device, and an offline payment system.
  • the technical solution dynamically generates a series of challenge codes by the background payment device each time the transaction is made, and the payment terminal device will The payment account information and the challenge code are encrypted to form a transaction identifier, which is used instead of the payment account information to perform front and back office transaction transmission.
  • the transaction identifier is dynamically generated by the payment terminal device, and each transaction generates a different transaction identifier, which ensures the security of the account and the transaction.
  • the payment terminal device operates offline, without networking, which improves the transaction success rate and user experience.
  • an offline payment method including:
  • the present invention provides another offline payment method, including:
  • the present invention further provides a terminal device, including:
  • An initialization unit configured to acquire a challenge code
  • An encryption unit configured to encrypt the challenge code and the account ID, and generate a transaction identifier
  • a payment unit for performing offline payment by using a transaction identifier and a transaction password is a payment unit for performing offline payment by using a transaction identifier and a transaction password.
  • the present invention further provides a background payment device, including:
  • a challenge code generating unit configured to generate a challenge code by using the transaction information, and transmit the challenge code to the client;
  • a decryption unit configured to acquire a transaction identifier from the client, decrypt the transaction identifier, and obtain a challenge code and an account ID;
  • the present invention also provides an offline payment system comprising: the terminal device described above, and the background payment device described above.
  • bank card account information is not stored in the client to ensure bank card security
  • the bank card account is only identified by the unique account ID, and transmitted through the ciphertext. Even if the ciphertext is cracked, the bank card account information cannot be obtained to ensure security;
  • FIG. 1 is a flowchart of a method for offline payment according to the embodiment
  • FIG. 2 is a second flowchart of a method for offline payment according to the embodiment
  • FIG. 3 is a functional block diagram of a terminal device according to the embodiment.
  • FIG. 4 is a functional block diagram of a background payment device according to an embodiment of the present invention.
  • FIG. 6 is a block diagram of an offline payment system according to an embodiment of the present invention.
  • FIG. 7 is a flowchart of installing and registering a mobile terminal according to the embodiment.
  • the technical solution dynamically generates a series of challenge codes (challenge) by the background payment device at each transaction, and the terminal device transmits the payment account information and the challenge code to form a dynamic transaction.
  • Token Dynamically generate payment identifiers for each transaction, without the need for mobile terminal networking, to ensure transaction security and enhance user experience.
  • Step 101 acquiring a challenge code
  • the challenge code is obtained by Bluetooth or NFC communication.
  • the transaction token (Token) is obtained by public key PK encryption, and each transaction generates a different transaction token (Token).
  • Step 103) Perform offline payment by using the transaction identifier and the transaction password.
  • this embodiment proposes another offline payment method, as shown in FIG. 2 .
  • Step 201) generating a challenge code by using the transaction information, and transmitting the challenge code to the client;
  • step 202 the challenge code and account ID are obtained by decrypting the private key SK.
  • Step 203) Perform offline payment by using the challenge code and the account ID.
  • step 203 the method includes:
  • the transaction bank card account information is obtained by using the account ID;
  • the terminal device 30 includes:
  • An initializing unit 301 configured to acquire a challenge code
  • the initialization unit 301 is further configured to generate an account ID according to the bank card account information.
  • the initialization unit 301 acquires the challenge code through Bluetooth or NFC communication.
  • the encryption unit 302 is configured to encrypt the challenge code and the account ID to generate a transaction identifier.
  • the encryption unit 302 performs encryption by using the public key PK to obtain a transaction identifier.
  • the payment unit 303 is configured to perform offline payment by using the transaction identifier and the transaction password.
  • the embodiment of the invention further provides a computer readable storage medium comprising computer readable instructions, when executed, causing the processor to perform at least the following operations: acquiring a challenge code; for the challenge code, account ID Encryption is performed to generate a transaction identifier; offline payment is performed using a transaction identifier and a transaction password.
  • the embodiment of the invention further provides a computer readable storage medium comprising computer readable instructions, when executed, causing the processor to perform at least the following operations: generating a challenge code using the transaction information, the challenge code Transmitting to the receiving terminal; acquiring the transaction identifier from the receiving terminal, decrypting the transaction identifier, obtaining the challenge code and the account ID; and performing offline payment by using the challenge code and the account ID.
  • the embodiment further provides a background payment device, as shown in FIG. 4 .
  • the background payment device 40 includes:
  • the decryption unit 402 is configured to obtain a transaction identifier from the client, decrypt the transaction identifier, and obtain a challenge code and an account ID.
  • the decryption unit 402 decrypts the private key SK to obtain a challenge code and an account ID.
  • the payment unit 403 is configured to perform offline payment by using the challenge code and the account ID.
  • FIG. 5 it is a functional block diagram of a payment unit in the background payment device of this embodiment. include:
  • a first verification module 4031 configured to verify the challenge code
  • the first payment module 4032 is configured to obtain the transaction bank card account information by using the account ID after verifying;
  • a second verification module 4033 configured to obtain a transaction password from the client, and verify the transaction password
  • the second payment module 4034 is configured to perform offline payment by using the transaction bank card account information after verification.
  • FIG. 6 a block diagram of an offline payment system provided by this embodiment is shown.
  • the terminal device 30 shown in FIG. 3 and the background payment device 40 shown in FIG. 4 are included.
  • modules or steps of the embodiments of the present invention can be implemented by a general computing device, which can be concentrated on a single computing device or distributed in multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from The steps shown or described are performed sequentially, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated into a single integrated circuit module. Thus, embodiments of the invention are not limited to any specific combination of hardware and software.
  • FIGS. 1 to 6 The technical solutions of the above-described FIGS. 1 to 6 will be described in detail below with reference to the embodiments.
  • the terminal device is preferably a mobile terminal, such as a mobile smart terminal such as a mobile phone or an IPad.
  • a mobile terminal such as a mobile smart terminal such as a mobile phone or an IPad.
  • the user associates the bank card account information with the user.
  • the background payment device generates a unique account ID and returns it to the client according to the bank card account information.
  • the client retains the account ID and does not retain the original information of the bank account.
  • Customers can associate multiple bank cards as needed.
  • the server Through the asymmetric algorithm, the server generates the private key SK and the public key PK, retains the private key SK, and sends the public key PK to the client. The client retains the public key PK.
  • the customer sets the transaction password P as needed.
  • the transaction password P can be the same as or different from the transaction password of the bank card.
  • the server side keeps the transaction password P for transaction verification.
  • the communication between the mobile terminal and the receiving terminal can be performed in various ways, such as Bluetooth, NFC, and the like.
  • the mobile terminal can communicate without networking, but the connection between the receiving terminal and the background payment device needs to be networked.
  • the process includes:
  • the cashier selects the mobile Token payment through the acceptance terminal and enters the transaction amount
  • the receiving terminal submits the transaction information to the background payment device, and the background payment device dynamically generates a series of challenge codes C for the transaction, and returns to the receiving terminal;
  • the mobile terminal application obtains the challenge code C from the receiving terminal, and encrypts the current bank card account ID and challenge code C by the public key PK to form a transaction identifier Token of the transaction, and provides the transaction identifier to the receiving terminal;
  • the background payment device decrypts the transaction identifier Token through the private key SK, obtains the account ID, the challenge code C, and verifies whether the challenge code C is correct;
  • the background payment device obtains the bank card account information according to the account ID, and verifies whether the transaction password P is correct;
  • the receiving terminal returns the transaction result to the mobile terminal.
  • the technical solution dynamically generates a series of challenge codes by the background system each time the transaction is performed, and the terminal device encrypts the payment account information and the challenge code to form a dynamic transaction identifier (Token), instead of the payment account information. , before and after the background transaction transmission.
  • the transaction identifier is dynamically generated by the mobile phone, and each transaction generates a different transaction identifier, which ensures the security of the account and transaction.
  • the terminal device operates offline and does not require networking, which improves the transaction success rate and user experience.

Landscapes

  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Finance (AREA)
  • Strategic Management (AREA)
  • Computer Security & Cryptography (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Telephone Function (AREA)
  • Push-Button Switches (AREA)
  • Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)

Abstract

一种线下支付方法、终端设备、后台支付装置及线下支付系统，其中，线下支付方法包括：获取挑战码（101）；对所述挑战码、账户ID进行加密，生成交易标识（102）；利用交易标识、交易密码进行线下支付（103）。本方法每次交易时由后台支付装置动态生成一串挑战码，支付终端设备将支付账户信息、挑战码加密形成交易标识，用以代替支付账户信息，进行前后台交易传输。交易标识由支付终端设备动态生成，每次交易生成不同的交易标识，保障了账户和交易安全。支付终端设备离线操作，无需联网，提升了交易成功率和用户体验。

Description

线下支付方法、终端设备、后台支付装置及线下支付系统
本申请要求2015年12月25日递交的申请号为201510992050.7、发明名称为“线下支付方法、终端设备、后台支付装置及线下支付系统”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明涉及移动支付技术领域，特别涉及一种线下支付方法、终端设备、后台支付装置及线下支付系统。
背景技术
随着银行卡在线下的使用越来越频繁，用户通过POS完成支付操作时，不良商户通过侧录等方式窃取用户卡信息的情况时有发生，给用户资金安全带来了严重的风险问题。
使用交易标识(Token)技术，通过在交易中使用支付标记代替账户信息，可以避免银行卡侧录问题。对于移动支付线下交易，如果简单的用Token代替卡号并不能很好的解决所有问题：
1、如果Token固定不变，安全性不高，那么同样面临着Token被窃取的问题。
2、如果实时生成Token，那么移动终端必须联网与后台支付装置通讯产生Token，这样支付成功率就会受到网络环境影响较大，且用户体验不佳；并且，将银行卡号、银行卡验证码与动态二维码一起传输，存在被窃取的问题，安全性不高。
发明内容
本发明实施例的主要目的在于提出一种线下支付方法、终端设备、后台支付装置及线下支付系统，本技术方案每次交易时由后台支付装置动态生成一串挑战码，支付终端设备将支付账户信息、挑战码加密形成交易标识，用以代替支付账户信息，进行前后台交易传输。交易标识由支付终端设备动态生成，每次交易生成不同的交易标识，保障了账户和交易安全。支付终端设备离线操作，无需联网，提升了交易成功率和用户体验。
为实现上述目的，本发明提供了一种线下支付方法，包括：
获取挑战码；
对所述挑战码、账户ID进行加密，生成交易标识；
利用交易标识、交易密码进行线下支付。
为实现上述目的，本发明提供了另一种线下支付方法，包括：
利用交易信息生成挑战码，将所述挑战码传输至客户端；
从所述客户端获取交易标识，对所述交易标识进行解密，获得挑战码、账户ID；
利用挑战码、账户ID进行线下支付。
对应地，为实现上述目的，本发明还提供了一种终端设备，包括：
初始化单元，用于获取挑战码；
加密单元，用于对所述挑战码、账户ID进行加密，生成交易标识；
支付单元，用于利用交易标识、交易密码进行线下支付。
对应地，为实现上述目的，本发明还提供了一种后台支付装置，包括：
挑战码生成单元，用于利用交易信息生成挑战码，将所述挑战码传输至客户端；
解密单元，用于从所述客户端获取交易标识，对所述交易标识进行解密，获得挑战码、账户ID；
支付单元，用于利用挑战码、账户ID进行线下支付。
为实现上述目的，本发明还提供了一种线下支付系统，包括：上述所述的终端设备，以及上述所述的后台支付装置。
上述技术方案具有如下有益效果：
1、无需提供银行卡进行支付，银行卡账户信息不存储在客户端，保障银行卡安全；
2、客户无需登录网络，离线进行支付交易，用户体验好；
3、每次交易使用不同的交易标识，保障交易安全；
4、仅仅通过唯一的账户ID标识银行卡账户，且通过密文中传输，即使密文被破解，也不能获取银行卡账户信息，保障安全；
5、通过设置交易密码，保障交易安全。
附图说明
为了更清楚地说明本发明实施例中的技术方案，下面将对实施例描述中所需要使用的附图作简单地介绍，显而易见地，下面描述中的附图仅仅是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。在附图中：
图1为本实施例提出的一种线下支付方法流程图之一；
图2为本实施例提出的一种线下支付方法流程图之二；
图3为本实施例提出的一种终端设备功能框图；
图4为本实施例提出的一种后台支付装置功能框图；
图5为本实施例的后台支付装置中支付单元功能框图；
图6为本实施例提出的一种线下支付系统框图；
图7为本实施例移动终端安装及注册流程图；
图8为本实施例交易流程图。
具体实施方式
为使本发明实施例的目的、技术方案和优点更加清楚明白，下面结合附图对本发明实施例做进一步详细说明。在此，本发明的示意性实施例及其说明用于解释本发明，但并不作为对本发明的限定。
本技术方案的工作原理为：本技术方案每次交易时由后台支付装置动态生成一串挑战码(challenge)，由受理终端传送给终端设备，终端设备将支付账户信息、挑战码加密形成动态交易标识(Token)。每次交易动态生成支付标识，无需移动终端联网，保障交易安全性的同时，提升用户体验。
基于上述工作原理，本实施例提出一种线下支付方法，如图1所示。包括：
步骤101)：获取挑战码；
其中，挑战码通过蓝牙或NFC通讯方式获取。
步骤102)：对所述挑战码、账户ID进行加密，生成交易标识；
其中，交易标识(Token)通过公钥PK加密获得，每次交易生成不同的交易标识(Token)。
步骤103)：利用交易标识、交易密码进行线下支付。
基于上述工作原理，本实施例提出了另一种线下支付方法，如图2所示。包括：
步骤201)：利用交易信息生成挑战码，将所述挑战码传输至客户端；
步骤202)：从所述客户端获取交易标识，对所述交易标识进行解密，获得挑战码、账户ID；
对于步骤202来说，所述挑战码、账户ID通过私钥SK解密获得。
步骤203)：利用挑战码、账户ID进行线下支付。
其中，对于步骤203来说，包括：
验证所述挑战码；
通过验证之后，利用所述账户ID获取交易银行卡账户信息；
从所述客户端获得交易密码，对所述交易密码进行验证，通过验证之后，利用所述交易银行卡账户信息进行线下支付。
对应地，本实施例提出了一种终端设备，如图3所示。终端设备30包括：
初始化单元301，用于获取挑战码；
进一步地，在注册阶段，初始化单元301还用于根据银行卡账户信息生成账户ID。另外，初始化单元301通过蓝牙或NFC通讯方式获取挑战码。
加密单元302，用于对所述挑战码、账户ID进行加密，生成交易标识；
其中，加密单元302通过公钥PK进行加密获得交易标识。
支付单元303，用于利用交易标识、交易密码进行线下支付。
本发明实施例还提供了一种包括计算机可读指令的计算机可读存储介质，该计算机可读指令在被执行时使处理器至少执行以下操作：获取挑战码；对所述挑战码、账户ID进行加密，生成交易标识；利用交易标识、交易密码进行线下支付。
本发明实施例还提供了一种包括计算机可读指令的计算机可读存储介质，该计算机可读指令在被执行时使处理器至少执行以下操作：利用交易信息生成挑战码，将所述挑战码传输至受理终端；从所述受理终端获取交易标识，对所述交易标识进行解密，获得挑战码、账户ID；利用挑战码、账户ID进行线下支付。
对应地，本实施例还提供了一种后台支付装置，如图4所示。后台支付装置40包括：
挑战码生成单元401，用于利用交易信息生成挑战码，将所述挑战码传输至客户端；
解密单元402，用于从所述客户端获取交易标识，对所述交易标识进行解密，获得挑战码、账户ID；其中，解密单元402通过私钥SK进行解密获得挑战码、账户ID。
支付单元403，用于利用挑战码、账户ID进行线下支付。
如图5所示，为本实施例后台支付装置中支付单元功能框图。包括：
第一验证模块4031，用于验证所述挑战码；
第一支付模块4032，用于通过验证之后，利用所述账户ID获取交易银行卡账户信息；
第二验证模块4033，用于从所述客户端获得交易密码，对所述交易密码进行验证；
第二支付模块4034，用于通过验证之后，利用所述交易银行卡账户信息进行线下支付。
如图6所示，为本实施例提供的一种线下支付系统框图。包括：图3所示的终端设备30，以及图4所示的后台支付装置40。
显然，本领域的技术人员应该明白，上述的本发明实施例的各模块或各步骤可以用通用的计算装置来实现，它们可以集中在单个的计算装置上，或者分布在多个计算装置所组成的网络上，可选地，它们可以用计算装置可执行的程序代码来实现，从而，可以将它们存储在存储装置中由计算装置来执行，并且在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤，或者将它们分别制作成各个集成电路模块，或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样，本发明实施例不限制于任何特定的硬件和软件结合。
下面结合实施例，对上述图1～图6的技术方案进行详细说明。
对于本实施例来说，终端设备优选为移动终端，比如手机、IPad等可移动的智能终端机。
在本实施例中，整个支付流程分为两步：
如图7所示，为本实施例移动终端安装及注册流程图。包括：
1、下载并安装客户端程序。
2、进行用户注册：输入手机号、身份证、用户登录密码/手势等信息，提交后台创建新用户。
3、关联交易银行卡：用户将银行卡账户信息，关联到用户。后台支付装置根据银行卡账户信息，生成唯一的账户ID返回给客户端。为保障安全，客户端保留账户ID，不保留银行卡账户原始信息。客户可以根据需要关联多张银行卡。
4、密钥同步：通过非对称算法，服务器端生成私钥SK和公钥PK，保留私钥SK，并将公钥PK下发给客户端。客户端保留公钥PK。
5、设置交易密码：客户根据需要设置交易密码P，交易密码P可以与银行卡交易密码相同或者不同。服务器端保留交易密码P，用于交易验证。
如图8所示，为本实施例交易流程图。在支付过程中，移动终端和受理终端的通信可以通过多种方式，例如蓝牙、NFC等。移动终端无需联网也可通信，但是受理终端与后台支付装置之间需要联网。流程包括：
1、收银员通过受理终端，选择移动Token支付，输入交易金额；
2、受理终端将交易信息提交至后台支付装置，后台支付装置针对本次交易，动态生成一串挑战码C，返回给受理终端；
3、客户打开并登录移动终端，选择交易银行卡；
4、移动终端应用从受理终端获取挑战码C，并将当前银行卡的账户ID、挑战码C，通过公钥PK进行加密，形成本次交易的交易标识Token，并提供给受理终端；
5、客户通过受理终端或移动终端的键盘输入交易密码P。受理终端将获取交易标识Token、交易密码P，提交给后台支付装置；
6、后台支付装置通过私钥SK，对交易标识Token进行解密，获得账户ID、挑战码C，验证挑战码C是否正确；
7、后台支付装置根据账户ID，获取银行卡账户信息，验证交易密码P是否正确；
8、后台支付装置完成交易，将交易结果返回给受理终端；
9、受理终端将交易结果返回给移动终端。
由上述实施例可知，本技术方案每次交易时由后台系统动态生成一串挑战码(challenge)，终端设备将支付账户信息、挑战码加密形成动态交易标识(Token)，用以代替支付账户信息，进行前后台交易传输。交易标识由手机端动态生成，每次交易生成不同的交易标识，保障了账户和交易安全。终端设备离线操作，无需联网，提升了交易成功率和用户体验。
以上所述的具体实施方式，对本发明的目的、技术方案和有益效果进行了进一步详细说明，所应理解的是，以上所述仅为本发明的具体实施方式而已，并不用于限定本发明的保护范围，凡在本发明的精神和原则之内，所做的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。

Claims (15)

  1. 一种线下支付方法，其特征在于，包括：
    从受理终端获取挑战码；
    对所述挑战码、账户ID进行加密，生成交易标识，将所述交易标识传输至受理终端；
    利用交易标识、交易密码进行线下支付。
  2. 如权利要求1所述的方法，其特征在于，还包括：根据银行卡账户信息生成所述账户ID。
  3. 如权利要求1～2任一权利要求所述的方法，其特征在于，所述挑战码通过蓝牙或NFC通讯方式获取。
  4. 如权利要求1～2任一权利要求所述的方法，其特征在于，所述交易标识通过公钥PK加密获得。
  5. 一种线下支付方法，其特征在于，包括：
    利用交易信息生成挑战码，将所述挑战码传输至受理终端；
    从所述受理终端获取交易标识，对所述交易标识进行解密，获得挑战码、账户ID；
    利用挑战码、账户ID进行线下支付。
  6. 如权利要求5所述的方法，其特征在于，所述利用挑战码、账户ID进行线下支付的步骤包括：
    验证所述挑战码；
    通过验证之后，利用所述账户ID获取交易银行卡账户信息；
    从所述受理终端获得交易密码，对所述交易密码进行验证；
    通过验证之后，利用所述交易银行卡账户信息进行线下支付。
  7. 如权利要求5～6任一权利要求所述的方法，其特征在于，所述挑战码、账户ID通过私钥SK解密获得。
  8. 一种终端设备，其特征在于，包括：
    初始化单元，用于从受理终端获取挑战码；
    加密单元，用于对所述挑战码、账户ID进行加密，生成交易标识；
    支付单元，用于利用交易标识、交易密码进行线下支付。
  9. 如权利要求8所述的设备，其特征在于，所述初始化单元还用于根据银行卡账户信息生成账户ID。
  10. 如权利要求8～9任一权利要求所述的设备，其特征在于，所述初始化单元通过蓝牙或NFC通讯方式获取挑战码。
  11. 如权利要求8～9任一权利要求所述的设备，其特征在于，所述加密单元通过公钥PK进行加密获得交易标识。
  12. 一种后台支付装置，其特征在于，包括：
    挑战码生成单元，用于利用交易信息生成挑战码，将所述挑战码传输至客户端；
    解密单元，用于从所述客户端获取交易标识，对所述交易标识进行解密，获得挑战码、账户ID；
    支付单元，用于利用挑战码、账户ID进行线下支付。
  13. 如权利要求12所述的装置，其特征在于，所述支付单元包括：
    第一验证模块，用于验证所述挑战码；
    第一支付模块，用于通过验证之后，利用所述账户ID获取交易银行卡账户信息；
    第二验证模块，用于从所述客户端获得交易密码，对所述交易密码进行验证；
    第二支付模块，用于通过验证之后，利用所述交易银行卡账户信息进行线下支付。
  14. 如权利要求12～13任一权利要求所述的装置，其特征在于，所述解密单元通过私钥SK进行解密获得挑战码、账户ID。
  15. 一种线下支付系统，其特征在于，包括：如权利要求8～11任一项所述的终端设备，以及如权利要求12～14任一项所述的后台支付装置。
PCT/CN2016/107045 2015-12-25 2016-11-24 线下支付方法、终端设备、后台支付装置及线下支付系统 WO2017107733A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510992050.7A CN105931047A (zh) 2015-12-25 2015-12-25 线下支付方法、终端设备、后台支付装置及线下支付系统
CN201510992050.7 2015-12-25

Publications (1)

Publication Number Publication Date
WO2017107733A1 true WO2017107733A1 (zh) 2017-06-29

Family

ID=56839957

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/107045 WO2017107733A1 (zh) 2015-12-25 2016-11-24 线下支付方法、终端设备、后台支付装置及线下支付系统

Country Status (3)

Country Link
CN (2) CN105931047A (zh)
TW (1) TWI786039B (zh)
WO (1) WO2017107733A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108537536A (zh) * 2018-06-21 2018-09-14 咪付（广西）网络技术有限公司 一种基于策略标识的安全交易方法和系统

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105931047A (zh) * 2015-12-25 2016-09-07 中国银联股份有限公司 线下支付方法、终端设备、后台支付装置及线下支付系统
CN111541728B (zh) * 2016-09-20 2023-10-10 徐蔚 一种运用支付标记的支付方法、装置与移动终端
TWI661365B (zh) * 2018-03-27 2019-06-01 財金資訊股份有限公司 動態檢核型掃碼支付之系統及方法、電腦可讀取之記錄媒體及電腦程式產品

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20040051037A (ko) * 2002-12-11 2004-06-18 엘지전자 주식회사 이동 통신 단말기의 전자화폐 지불 방법
CN101841417A (zh) * 2010-03-12 2010-09-22 李勇 一种支持短距离无线通信技术的电子签名装置和应用该装置保证电子交易安全的方法
CN101916346A (zh) * 2010-08-16 2010-12-15 鸿富锦精密工业（深圳）有限公司 可防盗版的电子装置及其防盗版方法
CN102819918A (zh) * 2012-07-17 2012-12-12 苏州市米想网络信息技术有限公司 一种采用多重安全认证的支付系统
KR20130075752A (ko) * 2013-04-22 2013-07-05 주식회사 비즈모델라인 동적 생성된 코드를 이용한 근거리 거래 방법
CN104463575A (zh) * 2014-11-26 2015-03-25 深圳市智惠付信息技术有限公司 一种基于支付口令的nfc支付的通信方法
CN105931047A (zh) * 2015-12-25 2016-09-07 中国银联股份有限公司 线下支付方法、终端设备、后台支付装置及线下支付系统

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1941009A (zh) * 2005-09-29 2007-04-04 普天信息技术研究院 一种用移动通信终端进行费用支付的实现方法
WO2009143084A1 (en) * 2008-05-18 2009-11-26 Zetawire, Inc. Secured electronic transaction system
TW201027448A (en) * 2009-01-09 2010-07-16 Flytech Technology Co Ltd Product selling management system and method thereof
JP5935871B2 (ja) * 2012-03-07 2016-06-15 ソニー株式会社 決済処理システム、決済端末、通信装置、決済サーバ、及び決済処理方法
US8905303B1 (en) * 2013-09-01 2014-12-09 Mourad Ben Ayed Method for adaptive wireless payment
CN103903141B (zh) * 2014-03-14 2018-05-08 福建联迪商用设备有限公司 一种o2o安全支付方法、系统和一种pos终端
CN103944730A (zh) * 2014-04-25 2014-07-23 天地融科技股份有限公司 数据安全交互系统
CN104268746A (zh) * 2014-09-17 2015-01-07 江苏爱心消费支付服务有限公司 无卡支付方法

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20040051037A (ko) * 2002-12-11 2004-06-18 엘지전자 주식회사 이동 통신 단말기의 전자화폐 지불 방법
CN101841417A (zh) * 2010-03-12 2010-09-22 李勇 一种支持短距离无线通信技术的电子签名装置和应用该装置保证电子交易安全的方法
CN101916346A (zh) * 2010-08-16 2010-12-15 鸿富锦精密工业（深圳）有限公司 可防盗版的电子装置及其防盗版方法
CN102819918A (zh) * 2012-07-17 2012-12-12 苏州市米想网络信息技术有限公司 一种采用多重安全认证的支付系统
KR20130075752A (ko) * 2013-04-22 2013-07-05 주식회사 비즈모델라인 동적 생성된 코드를 이용한 근거리 거래 방법
CN104463575A (zh) * 2014-11-26 2015-03-25 深圳市智惠付信息技术有限公司 一种基于支付口令的nfc支付的通信方法
CN105931047A (zh) * 2015-12-25 2016-09-07 中国银联股份有限公司 线下支付方法、终端设备、后台支付装置及线下支付系统

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108537536A (zh) * 2018-06-21 2018-09-14 咪付（广西）网络技术有限公司 一种基于策略标识的安全交易方法和系统

Also Published As

Publication number Publication date
TW201723948A (zh) 2017-07-01
CN105931047A (zh) 2016-09-07
TWI786039B (zh) 2022-12-11
CN112581125A (zh) 2021-03-30

Similar Documents

Publication Publication Date Title
US11770369B2 (en) System and method for identity verification across mobile applications
US11102007B2 (en) Contactless card emulation system and method
US11868997B2 (en) Secure payments using a mobile wallet application
EP3474211B1 (en) Offline payment method and device
US10389531B2 (en) Authentication system and authentication method
US9258296B2 (en) System and method for generating a strong multi factor personalized server key from a simple user password
EP3487142B1 (en) Providing and obtaining graphic payment code information
US20210182863A1 (en) Authenticating Transactions Using Biometric Authentication
AU2019240671A1 (en) Methods for secure cryptogram generation
US11651343B2 (en) Systems and method for payment transaction processing with payment application driver
US20170155513A1 (en) Trusted Platform Module (TPM) Protected Device
KR20170043520A (ko) 비대칭 암호화를 이용하여 otp를 구현하기 위한 시스템 및 방법
WO2017107733A1 (zh) 线下支付方法、终端设备、后台支付装置及线下支付系统
US11063926B1 (en) Devices and methods for single sign-on and regulatory compliance
WO2020072396A1 (en) Systems and methods for cryptographic authentication of contactless cards
WO2015168878A1 (zh) 支付方法和装置以及支付要素处理方法和装置
CN107615797A (zh) 一种隐藏用户标识数据的装置、方法和系统
CN117336092A (zh) 一种客户端登录方法、装置、电子设备和存储介质
CN108768655A (zh) 动态口令生成方法和系统
CN105184558B (zh) 交易信息发送方法、装置以及移动终端
EP3411845A1 (en) Payment handling apparatus and method
US10911236B2 (en) Systems and methods updating cryptographic processes in white-box cryptography
WO2018113508A1 (zh) 基于密文的身份验证方法
Kaur et al. A comparative analysis of various multistep login authentication mechanisms
WO2015110045A1 (zh) 一种隐藏用户标识数据的装置、方法和系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16877544

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16877544

Country of ref document: EP

Kind code of ref document: A1