WO2018040653A1

WO2018040653A1 - Nfc-based off-line payment method

Info

Publication number: WO2018040653A1
Application number: PCT/CN2017/087192
Authority: WO
Inventors: 聂明
Original assignee: 中城智慧科技有限公司
Priority date: 2016-08-31
Filing date: 2017-06-05
Publication date: 2018-03-08
Also published as: CN106327186A

Abstract

Disclosed is an NFC-based off-line payment method, which belongs to the technical field of mobile payment. The method comprises: S1, a payment terminal receiving a payment receiving instruction sent by a payment receiving terminal; S2, the payment terminal generating a first verification code and a first authentication signature code, and sending same together with a payment terminal identity authentication instruction to the payment receiving terminal; S3, the payment terminal receiving a second verification code, a second authentication signature code and an electronic purse balance updating instruction generated after the payment receiving terminal performs signature verification and deduction on the payment terminal; S4, the payment terminal performing signature verification on the payment receiving terminal and adding a corresponding amount to an electronic purse based on the received purse balance updating instruction; and S5, the payment terminal generating a third verification code and a third authentication signature code, and sending same together with a payment success instruction to a payment receiving terminal to wait for the payment receiving terminal to perform signature verification. The non-network payment and data exchange between two terminals are realized.

Description

An offline payment method based on NFC

Technical field

The invention belongs to the field of mobile payment technologies, and in particular relates to an offline payment method.

Background technique

The main payment methods are: cash on delivery, online payment, bank wire transfer and postal remittance.

For cash on delivery, it is a settlement payment method that pays the goods on the spot after the customer submits the goods according to the order submitted by the customer and delivers the goods to the designated delivery place within the promised delivery time limit. It effectively solves the two major problems of payment and logistics in China's online retail industry, and cultivates customers' trust in the network. However, it is paid in cash, so it can only be limited to small-paying. It is impossible to realize large-value transactions for merchants. Moreover, due to geographical restrictions on delivery, in general, customers will choose ordinary mailing. Undoubtedly brings unnecessary time loss, causing inconvenience to the user.

For online payment, it is based on a financial electronic network, using commercial electronic tools and various transaction cards as media, using computer technology and communication technology as means, storing in binary data, through computer networks. The system realizes circulation and payment in the form of electronic information transmission. Among them, online online payment is divided into: online bank card transfer payment, third-party payment platform settlement payment.

(1) Online bank card transfer payment refers to the way in which e-commerce transactions are paid through the network and using bank cards. After the customer orders through the network, the bank card number and password are encrypted and sent to the bank on the Internet, directly requesting the transfer of funds to the merchant bank account to complete the payment. The card type of the bank card may include a credit card, a debit card, a smart card, and the like. For this payment method, if the user does not apply for the online payment function with digital certificate protection, the user can only use the online payment without digital certificate protection, which is difficult for some customers who are not familiar with the operation of the computer. Online payments that do not enable digital certificate protection have certain functional limitations, for example, only account queries or small payments. In addition, because the customer directly transfers the payment to the merchant's account, if the transaction fails, the process of recovering the purchase price may become very cumbersome and difficult.

(2) Third-party payment platform settlement payment means that both the customer and the merchant first open an account at the third-party payment platform; and provide the respective bank account information to the account of the payment platform, and the third-party payment platform notifies the merchant that the payment has been received. After the payment, the merchant delivers the goods; after receiving and checking the goods, the customer notifies the third-party payment platform that the payment can be made to the merchant, and the third-party payment platform transfers the money to the merchant's account. This payment method, the bank account information of customers and merchants only need to be provided to the third-party payment platform, which is relatively safe, and the payment is completed through the third-party payment platform. If the customer does not receive the goods or the goods have problems, the third-party payment platform can be notified. Refused to transfer the payment to the merchant. And the merchant can safely deliver the goods when the payment is guaranteed, which effectively reduces the transaction risk.

However, Chinese law stipulates that only financial institutions have the right to absorb the funds of the agent users, other enterprises may not engage in similar activities, and the legal status of the payment platform is also questioned by some people. In addition, the payment will be subject to a certain amount of interest during the period of stay in the third-party payment platform. How to distribute this part of the interest is currently lack of clear regulation and strict supervision; the security problem in the e-commerce payment process solved by the third-party payment platform Limited to customers and vendors, other security Sexual issues, such as the confidentiality, validity and integrity of the information when the customer fills in the bank information on the payment platform, need to be further resolved; the operation is not easy enough, the customer must use a series of cumbersome applications when using the third-party payment platform; Will stay in the account of the third-party payment platform for a period of time, non-real-time payment brings deposit risk, such as third-party payment companies can not fully guarantee the security of the payment, will greatly damage the interests of customers and businesses; third-party payment platform may be used By cashing out credit cards by fabricating fake transactions, there is even a risk that money may be used for money laundering.

For remittance methods, bank remittance or postal remittance is a traditional payment method, and it is also the most commonly used payment method in e-commerce payment methods so far. Among them, the post office remittance is a settlement payment method that the customer remits the order amount to the merchant through the postal department. It can be traded directly in RMB, avoiding problems such as hacking, account leakage, password theft, etc., and is safer for customers. However, the payment and delivery cycle of this payment method is long; in addition, the customer must go to the bank or post office to make payment, and the payment process is cumbersome. For merchants, this kind of transaction method can not reflect the advantages of high speed, interactive, easy to use and low operating cost. Therefore, this payment method cannot adapt to the long-term rapid development of e-commerce.

Summary of the invention

In view of the above problems, the present invention aims to provide an offline payment method based on NFC (Near Field Communication), which greatly improves the security performance and convenience in the payment process.

The technical solution provided by the present invention is as follows:

An offline payment method based on NFC, comprising:

The S1 payment terminal receives the payment instruction sent by the payment terminal;

The S2 payment terminal generates a first verification code and a first authentication signature code, and sends the first verification code together with the payment terminal identity authentication instruction to the payment terminal;

The S3 payment terminal receives the second verification code, the second authentication signature code and the updated electronic wallet balance instruction generated after the payment terminal performs the verification and deduction of the payment terminal;

The S4 payment terminal performs verification on the payment terminal, and adds a corresponding amount in the electronic wallet based on the received update wallet balance instruction;

The S5 payment terminal generates a third verification code and a third authentication signature code, and sends the verification certificate together with the payment success instruction to the receiving terminal to perform the verification check to complete the offline payment.

Further preferably, both the payment terminal and the payment terminal comprise a security control, and the security control is configured to:

Performing an encryption/decryption operation on communication data between the payment terminal and the collection terminal;

Signing/checking the payment terminal/receipt terminal.

Further preferably, in step S1, the method specifically includes:

The S11 collection terminal generates a payment instruction;

The S12 collection terminal encrypts the payment instruction using a built-in security control;

The S13 collection terminal sends the encrypted payment instruction to the payment terminal.

Further preferably, in step S2, the method specifically includes:

The S21 payment terminal receives the encrypted payment instruction sent by the payment terminal;

The S22 payment terminal uses the built-in security control to decrypt it to obtain a payment instruction;

The S23 payment terminal generates a first verification code and encrypts it by using a built-in security plug-in to generate a first authentication signature code;

The S24 payment terminal generates a payment terminal identity authentication instruction;

The S25 payment terminal encrypts the first verification code, the first authentication signature code, and the payment terminal identity authentication instruction using the built-in security control, and transmits the encrypted data to the payment terminal.

Further preferably, in step S3, the method specifically includes:

The S31 collection terminal decrypts the encrypted data generated in step S25 using a built-in security plug-in;

The S32 collection terminal decrypts the received first authentication signature code by using the built-in security plug-in to obtain a first authentication verification code, and compares it with the first verification code to implement an authentication operation on the payment terminal;

The S33 collection terminal debits the electronic wallet based on the amount in the payment instruction;

The S34 collection terminal generates a second verification code and encrypts it by using a built-in security plug-in to generate a second authentication signature code;

The S35 collection terminal generates an update e-wallet balance instruction;

The S36 collection terminal encrypts the second verification code, the second authentication signature code, and the updated electronic wallet balance instruction using the built-in security control, and transmits the encrypted data to the payment terminal.

Further preferably, in step S4, the method specifically includes:

The S41 payment terminal decrypts the encrypted data generated in step S35 using the built-in security plug-in;

The S42 payment terminal decrypts the received second authentication signature code by using the built-in security plug-in to obtain a second authentication verification code, and compares it with the second verification code to implement the verification operation of the collection terminal;

The S43 payment terminal adds a corresponding amount in the electronic wallet based on the received updated wallet balance instruction.

Further preferably, in step S5, it comprises:

The S51 payment terminal generates a third verification code and encrypts it by using a built-in security plug-in to generate a third authentication signature code;

The S52 payment terminal generates a payment success instruction;

The S53 payment terminal encrypts the third verification code, the third authentication signature code, and the payment success instruction by using the built-in security plug-in, and sends the encrypted data to the receiving terminal to be received by the receiving terminal for verification.

Further preferably, after step S5, the method further comprises:

The S61 collection terminal decrypts the encrypted data generated in step S53 using a built-in security plug-in;

The S62 collection terminal decrypts the received third authentication signature code by using the built-in security plug-in to obtain a third authentication verification code, and compares it with the third verification code to implement the verification operation of the payment terminal;

The S63 payment terminal records the transaction details.

Further preferably, the payment terminal further includes a first private key and a second public key, and the receiving terminal further includes a second private key and a first public key, the first private key and the first The public key is a key pair, and the second private key and the second public key are a key pair;

The first private key is configured to: perform a signature operation on the payment terminal in conjunction with a security plug-in built in the payment terminal, and perform a decryption operation on the communication data received by the payment terminal;

The second private key is configured to perform a signature operation on the payment terminal and a decryption operation on the communication data received by the payment terminal in conjunction with the security plug-in built in the payment terminal;

The first public key is configured to perform an encryption operation on the communication data to be sent in conjunction with the security plug-in built in the payment terminal, and perform an authentication operation on the payment terminal;

The second public key is configured to perform an encryption operation on the communication data to be sent in conjunction with the security plug-in built in the payment terminal, and perform an authentication operation on the payment terminal.

The NFC-based offline payment method provided by the present invention has the beneficial effects of:

In the payment method provided by the present invention, a security control is built in the payment terminal and the payment terminal, and the security control supports offline encryption/decryption, signature/checking function, so that each communication data is performed during the payment process. In addition to encryption, it also authenticates the identity of the other party, ensuring the security of the communication data and providing a more convenient and efficient payment method, enabling networkless payment and data exchange between the two terminals.

DRAWINGS

FIG. 1 is a schematic flow chart of an offline payment method according to the present invention.

detailed description

The present invention will be further described in detail below in conjunction with the drawings and specific embodiments. It is to be understood that the specific details of the invention described below are merely illustrative of the invention and are not intended to limit the invention. Any modifications and variations made in accordance with the teachings of the invention described are also within the scope of the invention.

FIG. 1 is a schematic flowchart of an NFC-based offline payment method provided by the present invention. As can be seen from the figure, the offline payment method includes: an S1 payment terminal receives a payment instruction sent by a collection terminal; and an S2 payment The terminal generates a first verification code and a first authentication signature code, and sends the first verification code together with the payment terminal identity authentication instruction to the payment terminal; the S3 payment terminal receives the second generation generated after the payment terminal performs the verification and deduction of the payment terminal. a verification code, a second authentication signature code, and an update of the e-wallet balance instruction; the S4 payment terminal checks the payment terminal, based on the received update wallet balance instruction The corresponding amount is added to the electronic wallet; the S5 payment terminal generates a third verification code and a third authentication signature code, and sends the verification certificate together with the payment success instruction to the receiving terminal to perform the verification to complete the offline payment.

Specifically, the payment terminal and the payment terminal both include a security control, and the security control is configured to: encrypt/decrypt the communication data between the payment terminal and the payment terminal; and sign the payment terminal/receipt terminal / check operation. In addition, the payment terminal further includes a first private key and a second public key, and the receiving terminal further includes a second private key and a first public key, where the first private key and the first public key are a key pair, and the second The private key and the second public key are a key pair; the first private key is configured to: perform a signature operation on the payment terminal in conjunction with the security plug-in built in the payment terminal, and perform a decryption operation on the communication data received by the payment terminal; The private key is configured to: perform a signature operation on the payment terminal and a decryption operation on the communication data received by the payment terminal in conjunction with the security plug-in built in the payment terminal; the first public key is configured to be combined with the built-in terminal of the payment terminal. The security plug-in encrypts the communication data to be sent and performs the check operation on the payment terminal; the second public key is configured to: perform encryption operation on the communication data to be sent in conjunction with the security plug-in built in the payment terminal, and perform the encryption operation on the payment terminal Checking operation. The communication data is specifically the interaction data between the payment terminal and the payment terminal, that is, as long as the data communication between the payment terminal and the payment terminal is required, the communication data is encrypted to ensure the security of the communication data. In addition, in a specific embodiment, the payment terminal herein may be an NFC mobile phone, an NFC tablet, or the like; the receiving terminal may be an NFC mobile phone, an NFC tablet, or the like, and may also be an NFC-enabled POS ((Point of Sales). In principle, a terminal having an NFC function and capable of achieving the object of the present invention is included in the content of the present invention.

Based on this, the step S1 specifically includes: the S11 collection terminal generates a collection instruction; the S12 collection terminal encrypts the collection instruction by using the built-in security control and the first public key; and the S13 collection terminal is close to the payment terminal (this process) In the middle of the guaranteed payment terminal and the payment terminal, the NFC function is turned on), and the encrypted payment instruction is sent to the payment terminal.

Specifically, in step S2, the S21 payment terminal receives the encrypted payment instruction sent by the payment terminal; S22 uses the built-in security control and the first private key to decrypt the payment instruction; and the S23 payment terminal generates the first a verification code, and encrypting the first authentication signature code using the built-in security plug-in and the first private key; the S24 payment terminal generates a payment terminal identity authentication instruction; and the S25 payment terminal uses the built-in security control and the second public key pair The first verification code, the first authentication signature code, and the payment terminal identity authentication instruction are encrypted, and the encrypted data is sent to the payment terminal. It is to be noted that, before the step S21, after the payment terminal is close to the payment terminal, the payment terminal first determines whether it supports the offline payment method. If yes, the process proceeds to step S21; if not, if the transaction is terminated, the transaction is terminated and the payment fails. .

Specifically, the step S3 includes: the S31 collection terminal decrypts the encrypted data generated in step S25 by using the built-in security plug-in and the second private key; and the S32 collection terminal uses the built-in security plug-in and the first public key pair to receive The first authentication signature code is decrypted to obtain a first authentication verification code, and is compared with the first verification code. If the comparison is successful (the first authentication verification code is the same as the first verification code), the receiving terminal If the payment terminal is successfully checked, the process proceeds to step S33; on the contrary, if the comparison fails, the payment terminal identity is illegal, and the transaction is terminated immediately; S33, after the payment terminal identity authentication, the payment terminal is based on the amount in the payment instruction. Debiting in the wallet, that is, deducting the balance in the payer's account; S34 receiving terminal generates a second verification code, and encrypts it with the built-in security plug-in and the second private key to generate a second authentication signature code; S35 collects money The terminal generates an update e-wallet balance instruction; the S36 collection terminal uses the built-in security control and the first public key pair The second verification code, the second authentication signature code, and the updated electronic wallet balance instruction are encrypted to obtain communication data, and the encrypted data (ie, communication data) is transmitted to the payment terminal.

Specifically, in step S4, the S41 payment terminal decrypts the encrypted data generated in step S35 by using the built-in security plug-in and the first private key; and the S42 payment terminal uses the built-in security plug-in and the second public key pair to receive the received data. The second authentication signature code is decrypted to obtain a second authentication verification code, and is compared with the second verification code. If the comparison is successful (the second authentication verification code is the same as the second verification code), the payment terminal collects the payment. If the comparison is successful, the process proceeds to step S43. Conversely, if the comparison fails, the identity of the receiving terminal is illegal and the transaction is terminated immediately; and the S43 payment terminal adds a corresponding amount to the electronic wallet based on the received updated wallet balance instruction.

In step S5, the S51 payment terminal generates a third verification code, and encrypts it by using the built-in security plug-in and the first private key to generate a third authentication signature code; S52 the payment terminal generates a payment success instruction; and the S53 payment terminal uses the built-in The security plug-in and the second public key encrypt the third verification code, the third authentication signature code, and the payment success instruction, and send the encrypted data to the receiving terminal to be received by the receiving terminal for verification.

After step S5, the method further includes: S61 the payment terminal decrypting the encrypted data generated in step S53 using the built-in security plug-in and the second private key; and the S62 receiving terminal uses the built-in security plug-in and the first public key pair to receive The third authentication signature code is decrypted to obtain a third authentication verification code, and is compared with the third verification code. If the comparison is successful (the third authentication verification code is the same as the third verification code), the payment terminal pair If the payment terminal is successfully checked, the process proceeds to step S63; on the contrary, if the comparison fails, the verification fails, and the failure information is recorded; and the payment terminal records the transaction details.

In addition, it is to be noted that, before the step S1, the payment terminal and the payment terminal respectively download the security control from the server.

The present invention has been described in detail above by describing examples of implementation scenarios for each process, and those skilled in the art will understand. Modifications and variations may be made without departing from the spirit of the invention, such as the use of a portion of the module and the embedding of the system in other applications.

Claims

An offline payment method based on NFC, characterized in that the offline payment method comprises:

The S1 payment terminal receives the payment instruction sent by the payment terminal;

The S2 payment terminal generates a first verification code and a first authentication signature code, and sends the first verification code together with the payment terminal identity authentication instruction to the payment terminal;

The S3 payment terminal receives the second verification code, the second authentication signature code and the updated electronic wallet balance instruction generated after the payment terminal performs the verification and deduction of the payment terminal;

The S4 payment terminal performs verification on the payment terminal, and adds a corresponding amount in the electronic wallet based on the received update wallet balance instruction;

The S5 payment terminal generates a third verification code and a third authentication signature code, and sends the verification certificate together with the payment success instruction to the receiving terminal to perform the verification check to complete the offline payment.
The offline payment method according to claim 1, wherein both the payment terminal and the collection terminal comprise a security control, and the security control is configured to:

Performing an encryption/decryption operation on communication data between the payment terminal and the collection terminal;

Signing/checking the payment terminal/receipt terminal.
The offline payment method according to claim 2, wherein the step S1 specifically includes:

The S11 collection terminal generates a payment instruction;

The S12 collection terminal encrypts the payment instruction using a built-in security control;

The S13 collection terminal sends the encrypted payment instruction to the payment terminal.
The offline payment method according to claim 3, wherein the step S2 specifically includes:

The S21 payment terminal receives the encrypted payment instruction sent by the payment terminal;

The S22 payment terminal uses the built-in security control to decrypt it to obtain a payment instruction;

The S23 payment terminal generates a first verification code and encrypts it by using a built-in security plug-in to generate a first authentication signature code;

The S24 payment terminal generates a payment terminal identity authentication instruction;

The S25 payment terminal encrypts the first verification code, the first authentication signature code, and the payment terminal identity authentication instruction using the built-in security control, and transmits the encrypted data to the payment terminal.
The offline payment method according to claim 4, wherein the step S3 specifically includes:

The S31 collection terminal decrypts the encrypted data generated in step S25 using a built-in security plug-in;

The S32 collection terminal decrypts the received first authentication signature code by using the built-in security plug-in to obtain a first authentication verification code, and compares it with the first verification code to implement an authentication operation on the payment terminal;

The S33 collection terminal debits the electronic wallet based on the amount in the payment instruction;

The S34 collection terminal generates a second verification code and encrypts it by using a built-in security plug-in to generate a second authentication signature code;

The S35 collection terminal generates an update e-wallet balance instruction;

The S36 collection terminal encrypts the second verification code, the second authentication signature code, and the updated electronic wallet balance instruction using the built-in security control, and transmits the encrypted data to the payment terminal.
The offline payment method according to claim 5, wherein the step S4 specifically includes:

The S41 payment terminal decrypts the encrypted data generated in step S35 using the built-in security plug-in;

The S42 payment terminal decrypts the received second authentication signature code by using the built-in security plug-in to obtain a second authentication verification code, and compares it with the second verification code to implement the verification operation of the collection terminal;

The S43 payment terminal adds a corresponding amount in the electronic wallet based on the received updated wallet balance instruction.
The offline payment method according to claim 6, wherein the step S5 includes:

The S51 payment terminal generates a third verification code and encrypts it by using a built-in security plug-in to generate a third authentication signature code;

The S52 payment terminal generates a payment success instruction;

The S53 payment terminal encrypts the third verification code, the third authentication signature code, and the payment success instruction by using the built-in security plug-in, and sends the encrypted data to the receiving terminal to be received by the receiving terminal for verification.
The offline payment method according to claim 7, further comprising: after step S5:

The S61 collection terminal decrypts the encrypted data generated in step S53 using a built-in security plug-in;

The S62 collection terminal decrypts the received third authentication signature code by using the built-in security plug-in to obtain a third authentication verification code, and compares it with the third verification code to implement the verification operation of the payment terminal;

The S63 payment terminal records the transaction details.
The offline payment method according to any one of claims 2-8, wherein the payment terminal further comprises a first private key and a second public key, the receiving terminal further includes a second private key and a first public key, where the first private key and the first public key are a key pair, the first The second private key and the second public key are a key pair;

The first private key is configured to: perform a signature operation on the payment terminal in conjunction with a security plug-in built in the payment terminal, and perform a decryption operation on the communication data received by the payment terminal;

The second private key is configured to perform a signature operation on the payment terminal and a decryption operation on the communication data received by the payment terminal in conjunction with the security plug-in built in the payment terminal;

The first public key is configured to perform an encryption operation on the communication data to be sent in conjunction with the security plug-in built in the payment terminal, and perform an authentication operation on the payment terminal;

The second public key is configured to perform an encryption operation on the communication data to be sent in conjunction with the security plug-in built in the payment terminal, and perform an authentication operation on the payment terminal.