WO2018121377A1 - 用于虚拟现实环境的交易方法、装置及系统 - Google Patents

用于虚拟现实环境的交易方法、装置及系统 Download PDF

Info

Publication number
WO2018121377A1
WO2018121377A1 PCT/CN2017/117475 CN2017117475W WO2018121377A1 WO 2018121377 A1 WO2018121377 A1 WO 2018121377A1 CN 2017117475 W CN2017117475 W CN 2017117475W WO 2018121377 A1 WO2018121377 A1 WO 2018121377A1
Authority
WO
WIPO (PCT)
Prior art keywords
transaction
information
user
virtual reality
identification information
Prior art date
Application number
PCT/CN2017/117475
Other languages
English (en)
French (fr)
Inventor
童耀刚
郑建宾
周钰
Original Assignee
中国银联股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中国银联股份有限公司 filed Critical 中国银联股份有限公司
Publication of WO2018121377A1 publication Critical patent/WO2018121377A1/zh

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00—Commerce
    • G06Q30/06—Buying, selling or leasing transactions
    • G06Q30/0601—Electronic shopping [e-shopping]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/01—Input arrangements or combined input and output arrangements for interaction between user and computer
    • G06F3/011—Arrangements for interaction with the human body, e.g. for user immersion in virtual reality

Definitions

  • the present invention relates generally to the field of bank card security technologies and, in particular, to transactions in a virtual reality (VR) environment.
  • VR virtual reality
  • VR virtual reality
  • Some Internet companies have designed a payment in the virtual reality environment.
  • the specific method includes: after the user places an order in the merchant store that has accessed the VR application, the VR interface will pop up a 3D form of the cashier, the user According to the operating characteristics of the VR device worn, log in to the payment account by means of gaze, nod, gesture, etc., and enter the password to complete the transaction.
  • this type of payment can solve the problem of leaving the virtual reality environment, it has many other shortcomings, including not performing security authentication on the user's VR device, the operation process of the account password input is easily monitored by the software in the device, and recording the user. The action speculates that the user's input information has a high risk of information being stolen.
  • the user needs to perform account login and password input through gestures, postures, etc., but in reality, the user's information is complicated and difficult to operate, resulting in a poor user experience.
  • the VR device is also utilized as a trusted device with a built-in certificate in the prior art, and the mobile device for payment is authenticated by the certificate signature of the wearable device.
  • the method essentially uses the VR device as a U shield. This has obvious security risks, that is, once the VR device is lost or maliciously stolen, others can also use the wearable device to authenticate transactions of other mobile devices and make payments.
  • the present invention provides a transaction scheme for a virtual reality environment that can improve the above problems.
  • the present invention provides a transaction method for a virtual reality environment, including: Generating a transaction request by receiving user identity information; transmitting the user identity information to a trusted management platform; receiving an encrypted device identity associated with the user identity information from the trusted management platform; The transaction request is sent to the user's transaction device along with the encrypted device identification to conduct a transaction with an account associated with the transaction device.
  • the device usage data includes one or more of network information of the device, geographic location information, and user preference behavior information.
  • receiving the encrypted device identification associated with the user identification information comprises receiving an encrypted device identification for all transaction devices associated with the user identification information.
  • the present invention further provides a virtual reality device, comprising: an information collecting module, configured to receive user identity information; a request generating module, which generates a transaction request based on receiving the user identity information; and information transmission a module, configured to transmit the user identity information to a trusted management platform; and an information receiving module, configured to receive, from the trusted management platform, an encrypted device identifier associated with the user identity information;
  • the information transmission module is further configured to send the transaction request to the user's transaction device along with the encrypted device identification to conduct a transaction with an account associated with the transaction device.
  • the present invention provides a transaction method for a virtual reality environment, comprising: transmitting user identity information together with device identification information of a user's transaction device to a trusted management platform;
  • the letter management platform receives a certificate corresponding to the device identification information; decrypting the encrypted device identifier with the certificate when receiving the encrypted device identifier from the virtual reality device along with the transaction request;
  • the device identification information is compared with the locally collected device identification information; and in the case that the decrypted device identification information matches the locally collected device identification information, the account associated with the transaction device is used for transaction in response to the transaction request.
  • transmitting the device identification information to the trusted management platform comprises transmitting device hardware parameters and device usage data of the transaction device.
  • the device usage data includes one or more of network information of the device, geographic location information, and user preference behavior information.
  • the present invention provides a transaction device, including: a data sending module, configured to send user identity information together with device identification information of a user's transaction device to a trusted management platform; and a data receiving module, configured to: Receiving a certificate corresponding to the device identification from the trusted management platform and receiving a transaction request and an encrypted device identification from the virtual reality device; a decryption module for receiving the encrypted content from the virtual reality device along with the transaction request Decrypting the encrypted device identifier by using the certificate; the comparison module is configured to compare the decrypted device identification information with the locally collected device identification information; and the transaction module is configured to decrypt If the obtained device identification information matches the locally collected device identification information, the transaction is performed in response to the transaction request using an account associated with the transaction device.
  • the present invention provides a transaction method for a user virtual reality environment, including: receiving user identity identification information and device identification information from a transaction device of a user; generating a certificate corresponding to the device identification information; Sending the certificate to the transaction device; and transmitting the encrypted device identifier associated with the user identity information to the virtual reality device after receiving the user identity information from the virtual reality device;
  • the certificate is for decrypting the encrypted device identification when the transaction device receives the encrypted device identification from the virtual reality device along with the transaction request to determine whether to use the transaction device in response to the transaction request The associated account is traded.
  • the device identification information includes device hardware parameters of the transaction device and device usage data.
  • the device usage data includes one or more of network information of the device, geographic location information, and user preference behavior information.
  • the transaction method as described above further comprising: generating a device identifier based on the device hardware parameter and device usage data and storing the device identifier in association with the user identity information.
  • transmitting the encrypted device identification to the virtual reality device comprises transmitting an encrypted device identification to all devices associated with the user identity information to the virtual reality device.
  • the present invention provides a trusted management platform, including: a data receiving module, configured to receive user identity information and device identification information from a transaction device of a user, and receive the user identity from a virtual reality device. a certificate generating module, configured to generate a certificate corresponding to the device identification information, a data sending module, configured to send the certificate to the transaction device, and after receiving the user identity information from the virtual reality device Sending, to the virtual reality device, an encrypted device identifier associated with the user identity information; wherein the certificate a book for decrypting the encrypted device identification when the transaction device receives the encrypted device identification from the virtual reality device along with a transaction request to determine whether to use the transaction device in response to the transaction request The account is traded.
  • the present invention also provides a transaction system for a virtual payment environment, comprising: a virtual reality device, a transaction device, and a trusted management platform, wherein the transaction device is configured to associate user identity information with a user Device identification information of the transaction device is sent to the trusted management platform together; the trusted management platform is configured to receive user identity information and device identification information from the transaction device, generate a certificate corresponding to the device identification information, and Transmitting the certificate to the transaction device; the virtual reality device being configured to generate a transaction request based on receiving the user identity information and transmitting the user identity information to a trusted management platform; wherein the trusted The management platform is further configured to transmit an encrypted device identification associated with the user identity information to the virtual reality device after receiving the user identity information from the virtual reality device; and wherein the virtual reality The device is further configured to receive the user identity from the trusted management platform Identifying the encrypted device identifier associated with the information and, along with the encrypted device identification, transmitting the transaction request to the user's transaction device for transaction with an account associated with the transaction device
  • FIG. 1 is a schematic diagram of a transaction system for a virtual reality environment in accordance with one example of the present invention.
  • FIG. 2 is a schematic flow diagram of a transaction method for a virtual reality environment in accordance with one example of the present invention.
  • FIG. 3 is a schematic flow chart of a transaction method for a virtual reality environment in accordance with another example of the present invention.
  • FIG. 4 is a schematic flow chart of a transaction method for a virtual reality environment in accordance with still another example of the present invention.
  • Figure 5 is a schematic block diagram of a virtual reality device in accordance with one example of the present invention.
  • Figure 6 is a schematic block diagram of a transaction device in accordance with one example of the present invention.
  • FIG. 7 is a schematic block diagram of a trusted management platform in accordance with an example of the present invention.
  • system 100 includes a virtual reality device 101, a transaction device 102, and a trusted management platform 103.
  • the virtual reality device 101 may be any device for causing a user to generate a virtual reality experience, for example, a wearable VR device including VR glasses.
  • the transaction device 102 can be, for example, any smart device that is existing or to be developed, such as a mobile phone, computer, laptop, personal digital assistant (PDA), etc., that any user can use to make online payments.
  • the trusted management platform 103 can be a processing platform of a trusted trusted authority outside of the parties to the transaction, which can communicate with the parties to the transaction.
  • the virtual reality device 101, the transaction device 102, and the trusted management platform 103 can communicate with each other, which can be implemented by any wired or wireless communication method known or to be developed.
  • data interaction between the transaction device and the virtual reality device may be via a wireless connection such as Bluetooth or WiFi.
  • the virtual reality device 101, the transaction device 102, and the trusted management platform 103 implement transactions in a virtual reality environment mainly through two processes, which are labeled "1" in FIG. "2" is used to label Process 1 and Process 2, where Process 1 can be referred to as a registration process and Process 2 can be referred to as a transaction process.
  • Process 1 can be referred to as a registration process
  • Process 2 can be referred to as a transaction process.
  • the operation of the parties in the system and the specific meaning of the registration process (Process 1) and the transaction process (Process 2) will be specifically described below with reference to Figures 1-4.
  • the present invention is not limited to such process partitioning, and that various steps and sequences of these processes can be adjusted as needed without departing from the invention.
  • FIG. 2 is a schematic flow diagram of a transaction method for a virtual reality environment in accordance with one example of the present invention.
  • the method illustrated in FIG. 2 may be implemented in a virtual reality device such as VR glasses, and the method illustrated in FIG. 2 is part of the transaction process (process 2) illustrated in FIG. 1.
  • the virtual reality device 101 first generates a transaction request based on receiving the user identity information in step 21.
  • the user identification information employed is biometric information of the user, such as an iris, a fingerprint.
  • the virtual reality device 101 such as VR glasses may be configured with a biological information collection device.
  • the identity information may also be other information that is existing or to be developed that uniquely identifies the identity of the user.
  • a user may be immersively shopping, for example, wearing a virtual reality device such as VR glasses.
  • the user can input his/her identity information on the VR device according to the indication in the specific virtual reality environment, such as providing fingerprint or iris information.
  • the virtual reality device 101 upon receipt of input from the user's identification information, the virtual reality device 101 will generate a transaction request, which may be operated, for example, by a processing device integrated with the virtual reality device, or by other processing devices in the virtual reality environment. Come on.
  • the transaction request may include information such as the transaction amount and the transaction object such that the recipient of the transaction request can, for example, identify how much to pay and to whom.
  • the virtual reality device 101 transmits the collected user identity information to the trusted management platform.
  • the encrypted user identification information is transmitted to the trusted management platform to increase security.
  • the virtual reality device 101 will receive an encrypted device identification associated with the user identity information from the trusted management platform in step 25.
  • the user may associate the user identification information with a plurality of devices in advance, and the trusted management platform stores in advance or may acquire device identifications of all devices associated with the user identification information.
  • the virtual reality device 101 will, for example, receive the encrypted device identification of all transaction devices associated with the user identification information in the form of a list.
  • the device identification is information that is existing or to be developed that uniquely identifies the user's transaction device, such as the international mobile device identity IMEI of the cellular phone, the factory serial number of the smart device, and the like.
  • the virtual reality device 101 will seek authorization for transactions in the virtual reality environment from the transaction device based on the encrypted device identification from the trusted management platform.
  • the device identification is a unique identification of the transaction device generated based on device hardware parameters of the transaction device and device usage data. Such device identification will be described in detail below in conjunction with a trusted management platform.
  • step 27 the virtual reality device 101 will send all received encrypted device identities along with the generated transaction request to the user's transaction device. So far, the main operations related to the transaction process at the virtual reality device 101 are completed. The remainder of the transaction process will be described below in conjunction with FIGS. 3 and 4.
  • FIG. 3 is a schematic flow chart of a transaction method for a virtual reality environment in accordance with another example of the present invention.
  • the method illustrated in FIG. 3 can be implemented in a transaction device such as a cell phone, and the method illustrated in FIG. 3 includes portions of the registration process (process 1) illustrated in FIG. 1 and portions of the transaction process (process 2).
  • steps 31-33 in FIG. 3 can be considered to belong to the registration process, while steps 35-39 belong to the transaction process, however this is not required.
  • steps 31-33 in FIG. 3 can be considered to belong to the registration process, while steps 35-39 belong to the transaction process, however this is not required.
  • steps 35-39 belong to the transaction process, however this is not required.
  • Those skilled in the art can not Any adjustments are made in the context of the invention.
  • the transaction device 102 first transmits the user identification information together with the device identification information of the transaction device to the trusted management platform in step 31. In some examples, this may occur before a transaction in a virtual reality environment and for a period of time.
  • the user identity information may be biometric information of the user, such as fingerprints, irises, and the like. Accordingly, the transaction device will be configured with means for collecting biometric information of the user. Those skilled in the art can understand that the user identity information can also be other information that is existing or to be developed that can uniquely identify the identity of the user.
  • the device identification may be information that is existing or to be developed that uniquely identifies the user's transaction device, such as the international mobile device identity IMEI of the cellular phone, the factory serial number of the smart device, and the like.
  • the device identification is a unique identification of the transaction device generated based on device hardware parameters of the transaction device and device usage data, such identification may be referred to as a device fingerprint.
  • Device fingerprints can be generated on a trusted management platform. In this case, the transaction device can transmit device identification information including the device hardware parameters of the transaction device and the device usage data to the trusted management platform.
  • device identification such as device fingerprints may also be generated within the transaction device or other third party facility.
  • the trusted management platform can also collect information about the transaction device from other channels to generate device identification of the device fingerprint class more accurately or reliably.
  • the device usage data may be information related to the manner in which the user applies the device.
  • the device usage data includes one or more of network information of the device, geographic location information, and user preference behavior information.
  • the network information of the device may include one or more of network connection information of the device, TCP packet attributes, connected router attributes, HTTP protocol attributes, and WiFi list.
  • the geographic location information of the device may be, for example, one or more of a base station location location, a GPS location location, a time associated trajectory, and a common location.
  • the user preference behavior information of the device may be, for example, an operating system type, a version number, a preference setting, an application installation preference setting, an alarm time, an on/off time, an application frequency and time, a contact area when the screen is operated, a sliding direction, and a keyboard input.
  • device information including device hardware parameters and device usage data may be acquired from the user's device by authorization to acquire device information from the user at the device and in accordance with the authorization.
  • the device identification constructed according to this has real-time and dynamic characteristics, and can more reliably identify each device, thereby eliminating important information leakage, for example, when the device is stolen or maliciously tampered. The risk of vicious state cards, account theft and so on.
  • the transaction device 102 will receive a certificate corresponding to the device identification or corresponding to the transmitted device identification information from the trusted management platform 103 in step 33.
  • the certificate Can be understood as a tool used by a transaction device to verify a transaction request from a virtual reality device in a subsequent transaction, and the transaction device holding the certificate will be considered a trusted device in the virtual reality environment transaction, which has The right to authenticate the transaction request from the VR device.
  • the certificate may be saved in a trusted execution environment TEE system or a trusted execution environment TEE trusted storage on the transaction device to ensure the security of the certificate.
  • step 33 After the completion of step 33, the registration process of the transaction device to the trusted management platform ends. According to some examples of the invention, the following steps 35-39 will be performed during the transaction.
  • the transaction device 102 will decrypt the encrypted device identification with the previously saved certificate from the trusted management platform upon receipt of the encrypted device identification from the virtual reality device 101 along with the transaction request.
  • the encryption and decryption process can be based on a public key infrastructure PKI protocol.
  • the decrypted device identification information is compared with the locally collected device identification information.
  • the device identification information may be a single device identification itself, such as the International Mobile Equipment Identity (IMEI) of the cellular telephone, the factory serial number of the smart device, and the like.
  • the device identification information may also be information used to generate the device identification, such as device hardware parameters of the transaction device and device usage data.
  • the transaction device may further extract corresponding device hardware parameters and device usage information from the device identification after decryption.
  • the information is collected locally, and finally the information from the decrypted device identifier is compared with the locally collected information.
  • item-by-item comparisons can be made based on all parameters included in the device fingerprint type device identification. This item-by-item comparison can be thought of as a static match.
  • the parameters may include device hardware parameters and device usage parameters such as network information, geographic location information, and user preference behavior information.
  • each parameter can be given a matching weight.
  • a device fingerprint is a dynamic device identification in which parameters related to device usage change as the user's state changes. There is a certain difference in timeliness between the information contained in the device identifier previously obtained by the trusted management platform and the currently collected device information. Therefore, each parameter does not necessarily need to be completely consistent, but can be distinguished by weight. .
  • the comparison result of the current device fingerprint and each parameter of each item in the list may be weighted and averaged according to a pre-allocated matching weight. Finally, based on the result of the weighted average, it is determined whether the current device fingerprint matches the item in the device fingerprint list.
  • the result of the weighted average can be compared to a predetermined threshold: if it is above the threshold, it is considered a match, otherwise it is considered a mismatch.
  • step 39 in the event that the decrypted device identification information matches the locally collected device identification information, the transaction device 102 will trade with the account associated with the transaction device in response to the transaction request from the virtual reality device 101. That is, the transaction device 102 will virtual reality The transaction in the environment is confirmed to be authentic and the corresponding transaction is executed, for example, according to the amount included in the transaction request.
  • FIG. 4 is a schematic flow chart of a transaction method for a virtual reality environment in accordance with still another example of the present invention.
  • the method illustrated in FIG. 4 can operate on a separate trusted management platform 103, and the method illustrated in FIG. 4 includes portions of the registration process (process 1) illustrated in FIG. 1 and portions of the transaction process (process 2).
  • process 1 the registration process
  • process 2 portions of the transaction process
  • steps 41-45 in FIG. 4 belong to the registration process
  • step 47 belongs to the transaction process, however this is not required.
  • Those skilled in the art can make any adjustments without departing from the invention.
  • the trusted management platform receives user identity information and device identification information from the user's transaction device in step 41.
  • the user can register with the trusted management platform by sending this information to the trusted management platform for subsequent transactions in the virtual reality environment.
  • the user identity information may be biometric information of the user, such as fingerprints, irises, and the like.
  • the device identification information may be an existing or pending device identification that uniquely identifies the user's transaction device, such as the international mobile device identity IMEI of the cellular phone, the factory serial number of the smart device, or information used to generate the device identification. Wait.
  • the device identification information received by the trusted management platform from the transaction device includes device hardware parameters of the transaction device and device usage data.
  • the trusted management platform can be configured to generate a device identification for the transaction device based on the information, such identification can be referred to as a device fingerprint.
  • the trusted management platform may also collect information about the transaction device from other sources to more accurately generate the device identification of the device fingerprint class.
  • the trusted management platform In step 43, the trusted management platform generates a certificate based on the device identification, which can be understood as a tool used by the transaction device to validate transaction requests from the virtual reality device in subsequent transactions.
  • the certificate may be a key for decryption that corresponds to an algorithm used by the trusted management platform to encrypt the device identification.
  • step 45 the trusted management platform sends the generated certificate to the transaction device requesting registration.
  • the transaction device will store this certificate locally for subsequent verification of the transaction request from the virtual reality device.
  • the registration process between the trusted management platform and the transaction device ends. It is worth noting that in the process of trading, there is no need to exchange any other information between the trusted management platform and the trading device.
  • the trusted management platform will participate in the transaction process in accordance with step 47. Specifically, after receiving the user identity information from the virtual reality device, the trusted management platform sends the encrypted device identifier associated with the user identity information to the virtual reality device. As described above, the encrypted device identification can be used by the virtual reality device as a basis for requesting authorization from the transaction device.
  • the trusted management platform can receive multiple registration requests from the user, ie the user may It is desirable to register multiple devices with the trusted management platform for subsequent transactions.
  • the trusted management platform can store all the device identifiers under the same user identification information in association according to the received user identification information.
  • the trusted management platform may first generate device fingerprint class device identifiers using device identification information from the user device, and store the device identifiers or encrypted forms of the device identifiers in association with the third party with the user identification information as an index.
  • User Features - Device Fingerprint Library After receiving the device identification request containing the user identification information from the virtual reality device, the trusted management platform may transmit all the encrypted device identifiers associated with the user identification information to the virtual reality device, and the virtual reality device will The content is all forwarded to the trading device for verification.
  • the trusted management platform can also update and maintain the stored device fingerprint.
  • a device fingerprint is a dynamic device identification, especially where parameters related to device usage may change continuously.
  • the transaction device can be configured to, for example, periodically transmit updated device usage data like a trusted management platform.
  • the trusted management platform can update the stored device fingerprints with the latest device usage data, or analyze the pre-acquired hardware information and device usage data, for example, by machine learning, thereby predicting continuous device fingerprint changes, and The predicted result is stored in the device fingerprint database as an updated device fingerprint, and is used for the subsequent verification process performed by the device identifier.
  • the transaction scheme in the virtual reality environment provided by the present invention is based on a combination of user identification and device identification, in particular, the use of device fingerprint device identification of a user transaction device such as a mobile phone and the uniqueness and security characteristics of the user's biometrics.
  • the user identity, the VR device, and the transaction device are simultaneously authenticated, and the transaction device acts as a trusted party to authorize the VR device, so that the user can directly pay during the use of the VR device, and does not need to leave the virtual reality environment.
  • there is no need to perform an account/password input verification process in the VR device which fully guarantees the security and convenience of transactions in a virtual reality environment.
  • the transaction scheme provided by the present invention can also eliminate the operation of registering an account through complicated actions such as gestures or postures, thereby greatly ensuring the user experience.
  • the use of dual safeguards such as device fingerprints and biometrics eliminates the risk of falsifying user information logins or theft of trading devices.
  • the impact-response certificate authentication method between the transaction device and the virtual reality device ensures the security of the transmission process and the reliability of the transaction license authorization, and effectively prevents information leakage. Even if the VR device is illegally stolen, it cannot be used for any transaction because it does not store or hold any user's account information, and the transaction trigger also requires the user's identity feature information, no matter from which point of view, this solution The security is guaranteed.
  • FIG. 5 is a schematic block diagram of a virtual reality device in accordance with one example of the present invention.
  • the virtual reality device 500 includes an information collection module 51, a request generation module 53, an information transmission module 55, and an information receiving module 57.
  • the information collection module 51 is used to receive user identification information, which may be, for example, a hardware interface device or sensing device for collecting biological information of a user, such as a fingerprint or an iris.
  • the request generation module 53 is configured to generate a transaction request based on receiving the user identification information.
  • the information transmission module 505 is configured to communicate user identity information to a trusted management platform.
  • the information receiving module 507 is configured to receive an encrypted device identification associated with the user identity information from the trusted management platform.
  • the information transfer module 55 is further configured to, along with the encrypted device identification, send a transaction request to the user's transaction device to utilize the account associated with the transaction device for the transaction.
  • FIG. 6 is a schematic block diagram of a transaction device in accordance with one example of the present invention.
  • the transaction device 600 includes a data transmission module 61, a data receiving module 63, a decryption module 65, a comparison module 67, and a transaction module 69.
  • the data sending module 61 is configured to send the user identity information together with the device identity information of the user's transaction device to the trusted management platform.
  • the data receiving module 63 is configured to receive a certificate corresponding to the device identification from the trusted management platform and receive the transaction request and the encrypted device identification from the virtual reality device.
  • the decryption module 65 is configured to decrypt the encrypted device identification with the certificate upon receipt of the encrypted device identification from the virtual reality device along with the transaction request.
  • the comparison module 67 is configured to compare the decrypted device identification information with locally collected device identification information.
  • the transaction module 69 is configured to use the account associated with the transaction device to conduct a transaction in response to the transaction request if the decrypted device identification information matches the locally collected device identification information.
  • the trusted management platform 700 includes a data receiving module 71, a certificate generating module 73, and a data sending module. 75.
  • the data receiving module 71 is configured to receive user identity information and device identification information from the user's transaction device and to receive the user identity information from the virtual reality device.
  • the certificate generation module 73 is configured to generate a certificate corresponding to the device identification information.
  • the data sending module 75 is configured to transmit the certificate to the transaction device and to transmit the encrypted device identification associated with the user identity information to the virtual reality device after receiving the user identity information from the virtual reality device.
  • the certificate can be used to decrypt the encrypted device identification when the transaction device receives the encrypted device identification from the virtual reality device along with the transaction request to determine whether to use the response in response to the transaction request The account associated with the trading device is traded.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Finance (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Accounting & Taxation (AREA)
  • General Engineering & Computer Science (AREA)
  • Human Computer Interaction (AREA)
  • Development Economics (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)

Abstract

一种用于虚拟现实环境的交易方法，其包括：基于接收到用户身份标识信息而产生交易请求(21)；将所述用户身份标识信息传送至可信管理平台(23)；从所述可信管理平台接收与所述用户身份标识信息关联的经加密的设备标识(25)；以及连同所述经加密的设备标识一起向用户的交易设备发送所述交易请求(27)。此外还提供了实施该方法的虚拟现实设备、在交易设备上以及在可信管理平台上实施的对应方法、相应的交易设备和可信管理平台和用于虚拟现实环境的交易系统。

Description

用于虚拟现实环境的交易方法、装置及系统 技术领域
本发明一般地涉及银行卡安全技术领域，并且具体地，涉及在虚拟现实(VR)环境下的交易。
背景技术
目前虚拟现实(VR)技术逐渐进入人们的生活，尤其是在虚拟现实购物方面。对于现有的虚拟现实百货商场，用户只要在iOS或Android系统上下载应用程序，购物者就可以足不出户利用VR设备浏览到成千上万的商品。
然而，在虚拟现实场景下沉浸式的选品、试穿、下单后，用户仍需要离开虚拟环境进行支付，例如需要摘下VR设备，并且在交易设备上跳转到支付页面来完成付款，导致用户体验较差。
有互联网公司对于在虚拟现实环境下的支付进行了一种设计，具体方法包括：用户在接入了VR应用程序的商家店铺内下单后，VR界面内会跳出一个3D形态的收银台，用户根据所佩戴的VR设备的操作特点，通过凝视、点头、手势等控制方法登陆支付账户，并输入密码完成交易。这类支付方式虽然能够解决离开虚拟现实环境支付的问题，但是其具有许多其他缺点，包括没有对用户的VR设备进行安全认证、账号密码输入的操作过程容易被设备内软件监听，以及通过记录用户动作推测出用户的输入信息具有很高的信息被盗取风险。此外，用户需要通过手势、体态等方式进行账号登录和密码输入，而实际中用户的这些信息都较复杂，不易操作，导致用户的体验很差。
另一方面，现有技术中还利用VR设备作为内置证书的可信设备，通过该可穿戴设备的证书签名来认证用于支付的移动设备。该方法实质是将VR设备当成一个U盾使用。这存在明显的安全隐患，即一旦VR设备丢失或者被恶意窃取，他人同样可以利用可穿戴设备认证其他移动设备的交易并进行支付。
因此，所期望的是设计一种可靠的用于虚拟现实环境的交易方案，在确保用户体验的同时保证交易的安全性。
发明内容
有鉴于此，本发明提供了一种用于虚拟现实环境的交易方案，可改善上述问题。
一方面，本发明提供了一种用于虚拟现实环境的交易方法，其包括：基 于接收到用户身份标识信息而产生交易请求；将所述用户身份标识信息传送至可信管理平台；从所述可信管理平台接收与所述用户身份标识信息关联的经加密的设备标识；以及连同所述经加密的设备标识一起向用户的交易设备发送所述交易请求以利用与所述交易设备关联的账户进行交易。
如上所述的交易方法，其中，所述用户身份标识信息是用户的生物特征信息。
如上所述的交易方法，其中，所述设备标识基于所述交易设备的设备硬件参数以及设备使用情况数据生成。
如上所述的交易方法，其中，所述设备使用情况数据包括设备的网络信息、地理位置信息以及用户偏好行为信息中的一个或多个。
如上所述的交易方法，其中，接收与所述用户身份标识信息关联的经加密的设备标识包括接收与所述用户身份标识信息关联的所有交易设备的、经加密的设备标识。
如上所述的交易方法，其中，所述交易请求包括交易金额以及交易对象。
另一方面，本发明还提供了一种虚拟现实设备，其包括信息采集模块，用于接收用户身份标识信息；请求生成模块，其基于接收到所述用户身份标识信息而生成交易请求；信息传输模块，用于将所述用户身份标识信息传送至可信管理平台；以及信息接收模块，用于从所述可信管理平台接收与所述用户身份标识信息关联的经加密的设备标识；其中所述信息传输模块还被配置用于连同所述经加密的设备标识一起向用户的交易设备发送所述交易请求以利用与所述交易设备关联的账户进行交易。
还有另一方面，本发明提供了一种用于虚拟现实环境的交易方法，其包括：将用户身份标识信息与用户的交易设备的设备标识信息一起发送至可信管理平台；从所述可信管理平台接收对应于所述设备标识信息的证书；在连同交易请求一起从虚拟现实设备收到经加密的设备标识时利用所述证书对所述经加密的设备标识进行解密；将解密得到的设备标识信息与本地采集的设备标识信息进行比对；以及在解密得到的设备标识信息与本地采集的设备标识信息匹配的情况下响应所述交易请求而使用与该交易设备关联的账户进行交易。
如上所述的交易方法，其中，所述用户身份标识信息是用户的生物特征信息。
如上所述的交易方法，其中，向所述可信管理平台发送设备标识信息包括发送所述交易设备的设备硬件参数以及设备使用情况数据。
如上所述的交易方法，其中，所述设备使用情况数据包括设备的网络信息、地理位置信息以及用户偏好行为信息中的一个或多个。
又一方面，本发明提供了一种交易设备，其包括：数据发送模块，用于将用户身份标识信息与用户的交易设备的设备标识信息一起发送至可信管理平台；数据接收模块，用于从所述可信管理平台接收对应于所述设备标识的证书以及从虚拟现实设备接收交易请求和经加密的设备标识；解密模块，用于在连同交易请求一起从虚拟现实设备收到经加密的设备标识时利用所述证书对所述经加密的设备标识进行解密；比对模块，用于将解密得到的设备标识信息与本地采集的设备标识信息进行比对；以及交易模块，用于在解密得到的设备标识信息与本地采集的设备标识信息匹配的情况下响应所述交易请求而使用与该交易设备关联的账户进行交易。
还有另一方面，本发明提供了一种用户虚拟现实环境的交易方法，其包括：从用户的交易设备接收用户身份标识信息和设备标识信息；生成对应于所述设备标识信息的证书；将所述证书发送给所述交易设备；以及在从虚拟现实设备收到所述用户身份标识信息之后向所述虚拟现实设备发送与所述用户身份标识信息关联的经加密的设备标识；其中，所述证书用于在所述交易设备连同交易请求一起从所述虚拟现实设备接收所述经加密的设备标识时对经加密的设备标识进行解密以判断是否响应所述交易请求而使用与该交易设备关联的账户进行交易。
如上所述的交易方法，其中，所述用户身份标识信息是用户的生物特征信息。
如上所述的交易方法，其中，所述设备标识信息包括所述交易设备的设备硬件参数以及设备使用情况数据。
如上所述的交易方法，其中，所述设备使用情况数据包括设备的网络信息、地理位置信息以及用户偏好行为信息中的一个或多个。
如上所述的交易方法，其还包括：基于所述设备硬件参数以及设备使用情况数据生成设备标识以及将所述设备标识与所述用户身份标识信息关联地存储。
如上所述的交易方法，其中，向所述虚拟现实设备发送经加密的设备标识包括向所述虚拟现实设备发送与所述用户身份标识信息关联的所有设备的、经加密的设备标识。
又一方面，本发明还提供了一种可信管理平台，其包括：数据接收模块，用于从用户的交易设备接收用户身份标识信息和设备标识信息以及从虚拟现实设备接收所述用户身份标识信息；证书生成模块，用于生成对应于所述设备标识信息的证书；数据发送模块，用于将所述证书发送给所述交易设备以及在从虚拟现实设备收到所述用户身份标识信息之后向所述虚拟现实设备发送与所述用户身份标识信息关联的经加密的设备标识；其中，所述证 书用于在所述交易设备连同交易请求一起从所述虚拟现实设备接收所述经加密的设备标识时对经加密的设备标识进行解密以判断是否响应所述交易请求而使用与该交易设备关联的账户进行交易。
又一方面，本发明还提供了一种用于虚拟支付环境的交易系统，其包括：虚拟现实设备、交易设备以及可信管理平台，其中所述交易设备被配置为将用户身份标识信息与用户的交易设备的设备标识信息一起发送至可信管理平台；所述可信管理平台被配置为从所述交易设备接收用户身份标识信息和设备标识信息、生成对应于所述设备标识信息的证书并且将所述证书发送给所述交易设备；所述虚拟现实设备被配置为基于接收到用户身份标识信息而产生交易请求并且将所述用户身份标识信息传送至可信管理平台；其中所述可信管理平台还被配置为在从所述虚拟现实设备收到所述用户身份标识信息之后向所述虚拟现实设备发送与所述用户身份标识信息关联的经加密的设备标识；并且其中所述虚拟现实设备还被配置为从所述可信管理平台接收与所述用户身份标识信息关联的经加密的设备标识并且连同所述经加密的设备标识一起向用户的交易设备发送所述交易请求以利用与所述交易设备关联的账户进行交易；并且其中所述交易设备还被配置为在连同交易请求一起从虚拟现实设备收到经加密的设备标识时利用从所述可信管理平台接收的所述证书对所述经加密的设备标识进行解密、将解密得到的设备标识信息与本地采集的设备标识信息进行比对并且在解密得到的设备标识信息与本地采集的设备标识信息匹配的情况下响应所述交易请求而使用与该交易设备关联的账户进行交易。
附图说明
本发明的前述和其他目标、特征和优点根据下面对本发明的实施例的更具体的说明将是显而易见的，这些实施例在附图中被示意。
图1是根据本发明一个示例的用于虚拟现实环境的交易系统的示意图。
图2是根据本发明一个示例的用于虚拟现实环境的交易方法的示意流程图。
图3是根据本发明另一示例的用于虚拟现实环境的交易方法的示意流程图。
图4是根据本发明还另一示例的用于虚拟现实环境的交易方法的的示意流程图。
图5是根据本发明一个示例的虚拟现实设备的示意框图。
图6是根据本发明一个示例的交易设备的示意框图。
图7是根据本发明一示例的可信管理平台的示意框图。
具体实施方式
现在参照附图描述本发明的示意性示例，相同的附图标号表示相同的元件。下文描述的各示例有助于本领域技术人员透彻理解本发明，且各示例意在示例而非限制。图中各元件、部件、模块、装置及设备本体的图示仅示意性表明存在这些元件、部件、模块、装置及设备本体同时亦表明它们之间的相对关系，但并不用以限定它们的具体形状；流程图中各步骤的关系也不以所给出的顺序为限，可根据实际应用进行调整但不脱离本申请的保护范围。
图1是根据本发明一个示例的用于虚拟现实环境的交易系统的示意图。如图1所示，系统100包括虚拟现实设备101、交易设备102以及可信管理平台103。其中，虚拟现实设备101可以是用于使用户产生虚拟现实体验的任何设备，例如包括VR眼镜等可穿戴式的VR设备。交易设备102可以例如是已有的或待开发的任何智能设备，例如手机、计算机、膝上型笔记本、个人数字助理(PDA)等用户可以用来进行在线支付的任何设备。可信管理平台103可以是在交易各方之外独立的可信管理机构的处理平台，其可以与交易各方进行通信。
如图1所示，虚拟现实设备101、交易设备102以及可信管理平台103三者之间可以相互通信，这可以通过任何已知或待开发的有线或无线通信方式来实现。在一些示例中，交易设备与虚拟现实设备之间可以通过蓝牙、WiFi等无线连接方式进行数据交互。
在图1的示例中，虚拟现实设备101、交易设备102以及可信管理平台103三者之间主要通过两个过程来实现在虚拟现实环境下的交易，在图1中以标号“1”和“2”来标注过程1和过程2，其中过程1可以被称为是注册过程，而过程2可以被称为交易过程。下面将结合附图1-4来具体描述系统中各方的操作以及注册过程(过程1)和交易过程(过程2)的具体内涵。但是，本领域技术人员将理解本发明并不限于这样的过程划分，并且在不背离本发明的情况下，这些过程中的各个步骤及先后顺序均可根据需要进行调整。
图2是根据本发明一个示例的用于虚拟现实环境的交易方法的示意流程图。图2所示的方法可以在诸如VR眼镜的虚拟现实设备中实施，并且图2所示的方法是图1所示的交易过程(过程2)的部分。
如图2所示，虚拟现实设备101首先在步骤21中基于接收到用户身份标识信息而产生交易请求。在优选的示例中，所采用的用户身份标识信息是用户的生物特征信息，诸如虹膜、指纹。相应地，诸如VR眼镜的虚拟现实设备101可以被配置有生物信息采集装置。本领域技术人员能够理解，用户 身份标识信息还可以是其他已有的或待开发的能够唯一地标识用户身份的信息。
在实践中，用户可以例如正佩戴诸如VR眼镜的虚拟现实设备在进行沉浸式购物。当选中想要购买的商品之后，用户可以根据具体的虚拟现实环境中的指示在VR设备上输入其身份标识信息，例如提供指纹或虹膜信息等。一般地，当收到来自用户的身份标识信息的输入之后，虚拟现实设备101将生成交易请求，这可以例如通过与虚拟现实设备集成的处理装置来操作，或者通过虚拟现实环境中的其他处理设备来进行。在一些示例中，该交易请求可以包括诸如交易金额以及交易对象的信息，使得交易请求的接收方能够例如识别需要支付多少金额以及向谁支付。
进一步地，在步骤23中，虚拟现实设备101将所采集的用户身份标识信息传送至可信管理平台。在一些示例中，向可信管理平台传送经加密的用户身份标识信息，以提高安全性。
将在下文中结合图4来描述可信管理平台方的操作。就虚拟现实设备101而言，其将在步骤25中从可信管理平台收到与用户身份标识信息关联的经加密的设备标识。在一些示例中，用户可能事先将该用户身份标识信息与多个设备进行关联，并且可信管理平台预先存储有或者可获取与用户身份标识信息相关联的所有设备的设备标识。在这种情况下，虚拟现实设备101将例如以列表的形式收到与用户身份标识信息关联的所有交易设备的、经加密的设备标识。
一般地，设备标识是已有的或待开发的能够唯一地标识用户的交易设备的信息，例如蜂窝电话的国际移动设备标识IMEI、智能设备的出厂序列号等。虚拟现实设备101将基于来自可信管理平台的加密设备标识从交易设备寻求对虚拟现实环境中的交易的授权。在一些示例中，设备标识是基于所述交易设备的设备硬件参数以及设备使用情况数据生成的对交易设备的唯一标识。将在下文中结合可信管理平台来对这类设备标识进行详细描述。
最后，在步骤27中，虚拟现实设备101将把所有收到的经加密的设备标识连同所生成的交易请求一起发送给用户的交易设备。至此，在虚拟现实设备101处与交易过程相关的主要操作得以完成。下面将结合图3和图4来介绍其余部分的交易过程。
图3是根据本发明另一示例的用于虚拟现实环境的交易方法的示意流程图。图3所示的方法可以在诸如手机的交易设备中实施，并且图3所示的方法包括了图1所示的注册过程(过程1)的部分以及交易过程(过程2)的部分。结合图1的示例，可以认为图3中的步骤31-33属于注册过程，而步骤35-39属于交易过程，然而这不是必须的。本领域技术人员可以在不背 离本发明的情况下进行任何调整。
如图3所示，交易设备102首先在步骤31中将用户身份标识信息与交易设备的设备标识信息一起发送至可信管理平台。在一些示例中，这可能发生在虚拟现实环境中的交易之前并且相隔一段时间。如上所述，用户身份标识信息可以是用户的生物特征信息，例如指纹、虹膜等信息。相应地，交易设备将被配置有用于采集用户的生物特征信息的装置。本领域技术人员能够理解，用户身份标识信息还可以是其他已有的或待开发的能够唯一地标识用户身份的信息。
设备标识可以是已有的或待开发的能够唯一地标识用户的交易设备的信息，例如蜂窝电话的国际移动设备标识IMEI、智能设备的出厂序列号等。在一些示例中，设备标识是基于所述交易设备的设备硬件参数以及设备使用情况数据生成的对交易设备的唯一标识，这样的标识可以被称为设备指纹。可以在可信管理平台上来生成设备指纹。在这种情况下，交易设备可以向可信管理平台发送包括交易设备的设备硬件参数以及设备使用情况数据在内的设备标识信息。然而，本领域技术人员能够理解诸如设备指纹的设备标识也可以在交易设备内或者其他第三方机构来生成。可信管理平台也可以从其他渠道采集关于交易设备的信息来更准确或可靠地生成设备指纹类的设备标识。
在一些示例中，为生成设备指纹类的设备标识，设备使用情况数据可以是与用户应用设备的方式相关的信息。在一些示例中，设备使用情况数据包括设备的网络信息、地理位置信息以及用户偏好行为信息中的一个或多个。举例来说，设备的网络信息可以包括设备的网络连接信息、TCP包属性、连接的路由器属性、HTTP协议属性、WiFi列表中的一个或多个。设备的地理位置信息可以例如是基站定位地点、GPS定位地点、与时间相关联的轨迹及常用地中的一个或多个。设备的用户偏好行为信息可以例如是操作系统类型、版本号、偏好设置、应用安装偏好设置、闹钟时间、开关机时间、应用使用频率及时间、屏幕操作时的接触面积、滑动方向、键盘输入的时间间隔、按压力度、陀螺仪信息、加速度计信息中的一个或多个。
在一些示例中，可以通过在设备处从用户获取采集设备信息的授权并依据该授权从用户的设备采集包括设备硬件参数和设备使用情况数据在内的设备信息。由于加入了设备使用情况数据，依此构建的设备标识具有实时性和动态性，能够更可靠地对各个设备进行标识，消除了例如在设备被盗、遭到恶意篡改等情况下重要信息泄露、恶性邦卡、账户盗刷等的风险。
进一步地，交易设备102将在步骤33中从可信管理平台103接收对应于设备标识或者说对应于所发送的设备标识信息的证书。一般来说，该证书 可以被理解为是由交易设备在后续的交易中用于验证来自虚拟现实设备的交易请求的工具，并且保存有该证书的交易设备将在虚拟现实环境交易中被认为是可信设备，其有权对来自VR设备的交易请求进行认证。在一些示例中，可以在交易设备上采用可信执行环境TEE系统或者可信执行环境TEE可信存储的方式进行证书的保存，以保证证书的安全性。
在步骤33完成之后，交易设备向可信管理平台的注册过程结束。根据本发明的一些示例，下面的步骤35-39将在交易过程中执行。
在步骤35中，交易设备102在连同交易请求一起从虚拟现实设备101收到经加密的设备标识时将利用来自可信管理平台的、先前保存的证书对经加密的设备标识进行解密。在一些示例中，该加密解密过程可以基于公共密钥基础架构PKI协议。
在步骤37中，将解密得到的设备标识信息与本地采集的设备标识信息进行比对。如在上文中所提及的，设备标识信息可以是单一的设备标识本身，诸如蜂窝电话的国际移动设备标识IMEI、智能设备的出厂序列号等。在另外一些示例中，设备标识信息还可以是用于生成设备标识的信息，例如交易设备的设备硬件参数以及设备使用情况数据。在这种情况下，交易设备可以在解密之后，进一步从设备标识中提取相应的设备硬件参数和设备使用情况信息。同时在本地对这些信息进行采集，最后将来自解密得到的设备标识的信息与本地采集的信息进行比对。
在一些示例中，可以根据设备指纹型设备标识中包含的所有参数进行逐项对比。这种逐项对比可以被认为是一种静态匹配。其中，参数可以包括设备硬件参数以及诸如网络信息、地理位置信息以及用户偏好行为信息的设备使用情况参数。在按各个参数进行精确匹配的过程中，可以为每个参数赋予匹配权重。如在上文中所提及的，设备指纹是一种具有动态性的设备标识，其中与设备使用情况相关的参数会随着用户状态的改变而发生变化。可信管理平台先前获得的设备标识中所包含的信息与当前采集的设备信息之间在时效性上存在一定的差异，因此不一定需要每个参数都完全一致，而是可以通过权重来加以区别。进一步地，可以将当前设备指纹与列表中的每一项的各个参数的对比结果按预先分配的匹配权重进行加权平均。最后，根据加权平均的结果来判断当前设备指纹是否与设备指纹列表中的项匹配。在一些示例中，例如可以将加权平均的结果与预先确定的阈值进行比较：如高于阈值则认为是匹配，否则认为是不匹配。
在步骤39中，在解密得到的设备标识信息与本地采集的设备标识信息匹配的情况下，交易设备102将响应来自虚拟现实设备101的交易请求而使用与该交易设备关联的账户进行交易。也就是说，交易设备102将虚拟现实 环境中的交易确认为是可信的，并执行相应的交易，例如按照交易请求中包含的金额进行支付等。
图4是根据本发明还另一示例的用于虚拟现实环境的交易方法的的示意流程图。图4所示的方法可以在独立的可信管理平台103上操作，并且图4所示的方法包括了图1所示的注册过程(过程1)的部分以及交易过程(过程2)的部分。结合图1的示例，可以认为图4中的步骤41-45属于注册过程，而步骤47属于交易过程，然而这不是必须的。本领域技术人员可以在不背离本发明的情况下进行任何调整。
如图4所示，可信管理平台在步骤41中从用户的交易设备接收用户身份标识信息和设备标识信息。换句话说，用户可以通过向可信管理平台发送这些信息来向可信管理平台进行注册，以便于后续在虚拟现实环境中进行交易。如上所述，用户身份标识信息可以是用户的生物特征信息，例如指纹、虹膜等信息。设备标识信息可以是已有的或待开发的能够唯一地标识用户的交易设备的设备标识，例如蜂窝电话的国际移动设备标识IMEI、智能设备的出厂序列号，或者是用于生成设备标识的信息等。在一些示例中，可信管理平台从交易设备接收的设备标识信息包括交易设备的设备硬件参数以及设备使用情况数据。在这种情况下，可信管理平台可以被配置为依据这些信息为交易设备生成设备标识，这样的标识可以被称为设备指纹。在另外的示例中，可信管理平台也可以从其他渠道采集关于交易设备的信息来更准地生成设备指纹类的设备标识。
在步骤43中，可信管理平台基于设备标识生成证书，该证书可以被理解为是由交易设备在后续的交易中用于验证来自虚拟现实设备的交易请求的工具。在一些示例中，该证书可以是用于解密的密钥，其与可信管理平台用于对设备标识进行加密的算法相对应。
在步骤45中，可信管理平台将所生成的证书发送给来要求注册的交易设备。如在上文中所描述的那样，交易设备将在本地存储这个证书以便随后对来自虚拟现实设备的交易请求进行验证。
在步骤45完成之后，可信管理平台与交易设备之间的注册过程结束。值得注意的是，在发生交易的过程中，可信管理平台与交易设备之间可以不再需要有任何其他信息交换。可信管理平台将依据步骤47来参与交易过程。具体地，在从虚拟现实设备收到用户身份标识信息之后，可信管理平台将向虚拟现实设备发送与用户身份标识信息关联的经加密的设备标识。如上所述，该经加密的设备标识可以由虚拟现实设备作为向交易设备要求授权的依据。
在实践中，可信管理平台可以从用户处收到多个注册请求，即用户可能 希望向可信管理平台注册多个设备以用于后续的交易。可信管理平台可以依据所收到的用户标识信息来关联地存储同一用户标识信息下的所有设备标识。在一些示例中，可信管理平台可以首先利用来自用户设备的设备标识信息生成设备指纹类设备标识，并且以用户标识信息为索引将这些设备标识或者这些设备标识的加密形式关联地存储在第三方的用户特征-设备指纹库中。在收到来自虚拟现实设备的包含用户标识信息的设备标识请求之后，可信管理平台可以将于该用户标识信息关联的所有经加密的设备标识传送给虚拟现实设备，并由虚拟现实设备将这些内容全部转交至交易设备以供验证。
此外，在使用设备指纹型设备标识的情况下，可信管理平台还可以对所存储的设备指纹进行更新和维护。如在上文中所提及的，设备指纹是一种具有动态性的设备标识，尤其是其中与设备使用情况相关的参数可能不断发生变化。因此，交易设备可以被配置为例如周期性地像可信管理平台传送更新的设备使用情况数据。可信管理平台可以利用最新的设备使用情况数据来更新所存储的设备指纹，或者例如通过机器学习的方法来分析前期采集的硬件信息和设备使用情况数据，由此预测持续的设备指纹变化，并将该预测结果作为更新的设备指纹存储在设备指纹库中，用于后续利用设备标识所进行的验证过程。通过对用户特征-设备指纹库的动态维护，可以在保证安全性的同时，大大改善用户体验，为整个业务处理过程增加便利性。
本发明所提供的虚拟现实环境下的交易方案基于用户标识和设备标识相结合的方式，尤其是利用手机等用户交易设备的设备指纹类设备标识和用户的生物特征的唯一性及安全性的特点，对用户身份、VR设备和交易设备同时进行认证，并且由交易设备作为可信方对VR设备进行授权，由此用户可直接在VR设备使用过程中进行支付，一方面不需要脱离虚拟现实环境，另一方面不需要在VR设备内进行账户/密码的输入验证过程，充分保证了在虚拟现实环境下的交易的安全性和便利性。此外，本发明所提供的交易方案还可以免除通过手势或者体态等复杂动作进行帐户登录的操作，大大保证了用户体验。此外，利用诸如设备指纹和生物特征的双重保障措施，消除了伪造用户信息登录或交易设备失窃带来的风险。交易设备与虚拟现实设备之间的冲击-响应式证书认证方式保证了传输过程的安全性和交易许可授权的可靠性，并且有效防止了信息泄露。即使VR设备被非法盗取，其也无法被用于任何交易，因为其不存储或持有任何用户的账户信息，并且交易触发也需要用户的身份特征信息，无论从哪个角度来看，本方案的安全性都得到了保证。
图5是根据本发明一个示例的虚拟现实设备的示意框图。如图5所示， 虚拟现实设备500包信息采集模块51、请求生成模块53、信息传输模块55以及信息接收模块57。具体地，信息采集模块51被用于接收用户身份标识信息，其可以例如是用于采集用户的诸如指纹或虹膜的生物信息的硬件接口装置或传感装置。请求生成模块53被配置为基于接收到用户身份标识信息而生成交易请求。信息传输模块505被配置用于将用户身份标识信息传送至可信管理平台。信息接收模块507被配置用于从可信管理平台接收与用户身份标识信息关联的经加密的设备标识。另外，信息传输模块55还被配置用于连同经加密的设备标识一起向用户的交易设备发送交易请求以利用与该交易设备关联的账户进行交易。
在本说明书中省去了对一般的虚拟现实设备的其他构造的描述，以避免不必要的冗余。但本领域技术人员能够理解图5所示的结构能够被集成在任何已有或待开发的虚拟现实设备中。图5所示的虚拟现实设备能够被配置为实现上文所描述的任何与本发明所提供的、在虚拟现实设备处实现的相关操作。本领域技术人员能够理解，图5所示的模块划分仅是示意性的，这些模块能够按照具体实现来集成或进一步划分，并且以任何软件或硬件的形式来实现。
图6是根据本发明一个示例的交易设备的示意框图。如图6所示，交易设备600包括数据发送模块61、数据接收模块63、解密模块65、比对模块67以及交易模块69。具体地，数据发送模块61用于将用户身份标识信息与用户的交易设备的设备标识信息一起发送至可信管理平台。数据接收模块63被配置用于从可信管理平台接收对应于设备标识的证书以及从虚拟现实设备接收交易请求和经加密的设备标识。解密模块65被配置用于在连同交易请求一起从虚拟现实设备收到经加密的设备标识时利用该证书对经加密的设备标识进行解密。比对模块67被配置用于将解密得到的设备标识信息与本地采集的设备标识信息进行比对。交易模块69被用于在解密得到的设备标识信息与本地采集的设备标识信息匹配的情况下响应交易请求而使用与该交易设备关联的账户进行交易。
在本说明书中省去了对一般的交易设备的其他构造的描述，以避免不必要的冗余。但本领域技术人员能够理解图6所示的结构能够被集成在任何已有或待开发的交易设备中。图6所示的交易设备能够被配置为实现上文所描述的任何与本发明所提供的、在交易设备处实现的相关操作。本领域技术人员能够理解，图6所示的模块划分仅是示意性的，这些模块能够按照具体实现来集成或进一步划分，并且以任何软件或硬件的形式来实现。
图7是根据本发明一示例的可信管理平台的示意框图。如图7所示，可信管理平台700包括数据接收模块71、证书生成模块73以及数据发送模块 75。具体地，数据接收模块71被配置用于从用户的交易设备接收用户身份标识信息和设备标识信息以及从虚拟现实设备接收所述用户身份标识信息。证书生成模块73被配置用于生成对应于设备标识信息的证书。数据发送模块75被配置用于将所述证书发送给交易设备以及在从虚拟现实设备收到用户身份标识信息之后向虚拟现实设备发送与用户身份标识信息关联的经加密的设备标识。如在上文中所描述的那样，证书可以被用于在交易设备连同交易请求一起从虚拟现实设备接收经加密的设备标识时对经加密的设备标识进行解密以判断是否响应交易请求而使用与该交易设备关联的账户进行交易。
在本说明书中省去了对一般的可信管理平台的其他构造的描述，以避免不必要的冗余。但本领域技术人员能够理解图7所示的结构能够被集成在任何已有或待开发的可信管理平台中。图7所示的可信管理平台能够被配置为实现上文所描述的任何与本发明所提供的、在可信管理平台处实现的相关操作。本领域技术人员能够理解，图7所示的模块划分仅是示意性的，这些模块能够按照具体实现来集成或进一步划分，并且以任何软件或硬件的形式来实现。
应当说明的是，以上具体实施方式仅用以说明本发明的技术方案而非对其进行限制。尽管参照上述具体实施方式对本发明进行了详细的说明，本领域的普通技术人员应当理解，依然可以对本发明的具体实施方式进行修改或对部分技术特征进行等同替换而不脱离本发明的实质，其均涵盖在本发明请求保护的范围中。

Claims (20)

  1. 一种用于虚拟现实环境的交易方法，其包括：
    基于接收到用户身份标识信息而产生交易请求；
    将所述用户身份标识信息传送至可信管理平台；
    从所述可信管理平台接收与所述用户身份标识信息关联的经加密的设备标识；以及
    连同所述经加密的设备标识一起向用户的交易设备发送所述交易请求以利用与所述交易设备关联的账户进行交易。
  2. 如权利要求1所述的交易方法，其中，所述用户身份标识信息是用户的生物特征信息。
  3. 如权利要求1所述的交易方法，其中，所述设备标识基于所述交易设备的设备硬件参数以及设备使用情况数据生成。
  4. 如权利要求3所述的交易方法，其中，所述设备使用情况数据包括设备的网络信息、地理位置信息以及用户偏好行为信息中的一个或多个。
  5. 如权利要求1所述的交易方法，其中，接收与所述用户身份标识信息关联的经加密的设备标识包括接收与所述用户身份标识信息关联的所有交易设备的、经加密的设备标识。
  6. 如权利要求1所述的交易方法，其中，所述交易请求包括交易金额以及交易对象。
  7. 一种虚拟现实设备，其包括
    信息采集模块，用于接收用户身份标识信息；
    请求生成模块，其基于接收到所述用户身份标识信息而生成交易请求；
    信息传输模块，用于将所述用户身份标识信息传送至可信管理平台；以及
    信息接收模块，用于从所述可信管理平台接收与所述用户身份标识信息关联的经加密的设备标识；其中
    所述信息传输模块还被配置用于连同所述经加密的设备标识一起向用户的交易设备发送所述交易请求以利用与所述交易设备关联的账户进行交易。
  8. 一种用于虚拟现实环境的交易方法，其包括：
    将用户身份标识信息与用户的交易设备的设备标识信息一起发送至可信管理平台；
    从所述可信管理平台接收对应于所述设备标识信息的证书；
    在连同交易请求一起从虚拟现实设备收到经加密的设备标识时利用所 述证书对所述经加密的设备标识进行解密；
    将解密得到的设备标识信息与本地采集的设备标识信息进行比对；以及
    在解密得到的设备标识信息与本地采集的设备标识信息匹配的情况下响应所述交易请求而使用与该交易设备关联的账户进行交易。
  9. 如权利要求8所述的交易方法，其中，所述用户身份标识信息是用户的生物特征信息。
  10. 如权利要求8所述的交易方法，其中，向所述可信管理平台发送设备标识信息包括发送所述交易设备的设备硬件参数以及设备使用情况数据。
  11. 如权利要求10所述的交易方法，其中，所述设备使用情况数据包括设备的网络信息、地理位置信息以及用户偏好行为信息中的一个或多个。
  12. 一种交易设备，其包括：
    数据发送模块，用于将用户身份标识信息与用户的交易设备的设备标识信息一起发送至可信管理平台；
    数据接收模块，用于从所述可信管理平台接收对应于所述设备标识的证书以及从虚拟现实设备接收交易请求和经加密的设备标识；
    解密模块，用于在连同交易请求一起从虚拟现实设备收到经加密的设备标识时利用所述证书对所述经加密的设备标识进行解密；
    比对模块，用于将解密得到的设备标识信息与本地采集的设备标识信息进行比对；以及
    交易模块，用于在解密得到的设备标识信息与本地采集的设备标识信息匹配的情况下响应所述交易请求而使用与该交易设备关联的账户进行交易。
  13. 一种用户虚拟现实环境的交易方法，其包括：
    从用户的交易设备接收用户身份标识信息和设备标识信息；
    生成对应于所述设备标识信息的证书；
    将所述证书发送给所述交易设备；以及
    在从虚拟现实设备收到所述用户身份标识信息之后向所述虚拟现实设备发送与所述用户身份标识信息关联的经加密的设备标识；
    其中，所述证书用于在所述交易设备连同交易请求一起从所述虚拟现实设备接收所述经加密的设备标识时对经加密的设备标识进行解密以判断是否响应所述交易请求而使用与该交易设备关联的账户进行交易。
  14. 如权利要求13所述的交易方法，其中，所述用户身份标识信息是用户的生物特征信息。
  15. 如权利要求13所述的交易方法，其中，所述设备标识信息包括所述交易设备的设备硬件参数以及设备使用情况数据。
  16. 如权利要求15所述的交易方法，其中，所述设备使用情况数据包 括设备的网络信息、地理位置信息以及用户偏好行为信息中的一个或多个。
  17. 如权利要求15所述的交易方法，其还包括：基于所述设备硬件参数以及设备使用情况数据生成设备标识以及将所述设备标识与所述用户身份标识信息关联地存储。
  18. 如权利要求15所述的交易方法，其中，向所述虚拟现实设备发送经加密的设备标识包括向所述虚拟现实设备发送与所述用户身份标识信息关联的所有设备的、经加密的设备标识。
  19. 一种可信管理平台，其包括：
    数据接收模块，用于从用户的交易设备接收用户身份标识信息和设备标识信息以及从虚拟现实设备接收所述用户身份标识信息；
    证书生成模块，用于生成对应于所述设备标识信息的证书；
    数据发送模块，用于将所述证书发送给所述交易设备以及在从虚拟现实设备收到所述用户身份标识信息之后向所述虚拟现实设备发送与所述用户身份标识信息关联的经加密的设备标识；
    其中，所述证书用于在所述交易设备连同交易请求一起从所述虚拟现实设备接收所述经加密的设备标识时对经加密的设备标识进行解密以判断是否响应所述交易请求而使用与该交易设备关联的账户进行交易。
  20. 一种用于虚拟支付环境的交易系统，其包括：虚拟现实设备、交易设备以及可信管理平台，其中
    所述交易设备被配置为将用户身份标识信息与用户的交易设备的设备标识信息一起发送至可信管理平台；
    所述可信管理平台被配置为从所述交易设备接收用户身份标识信息和设备标识信息、生成对应于所述设备标识信息的证书并且将所述证书发送给所述交易设备；
    所述虚拟现实设备被配置为基于接收到用户身份标识信息而产生交易请求并且将所述用户身份标识信息传送至可信管理平台；其中
    所述可信管理平台还被配置为在从所述虚拟现实设备收到所述用户身份标识信息之后向所述虚拟现实设备发送与所述用户身份标识信息关联的经加密的设备标识；并且其中
    所述虚拟现实设备还被配置为从所述可信管理平台接收与所述用户身份标识信息关联的经加密的设备标识并且连同所述经加密的设备标识一起向用户的交易设备发送所述交易请求以利用与所述交易设备关联的账户进行交易；并且其中
    所述交易设备还被配置为在连同交易请求一起从虚拟现实设备收到经加密的设备标识时利用从所述可信管理平台接收的所述证书对所述经加密 的设备标识进行解密、将解密得到的设备标识信息与本地采集的设备标识信息进行比对并且在解密得到的设备标识信息与本地采集的设备标识信息匹配的情况下响应所述交易请求而使用与该交易设备关联的账户进行交易。
PCT/CN2017/117475 2016-12-30 2017-12-20 用于虚拟现实环境的交易方法、装置及系统 WO2018121377A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201611258102.9A CN106981003B (zh) 2016-12-30 2016-12-30 用于虚拟现实环境的交易方法、装置及系统
CN201611258102.9 2016-12-30

Publications (1)

Publication Number Publication Date
WO2018121377A1 true WO2018121377A1 (zh) 2018-07-05

Family

ID=59339925

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/117475 WO2018121377A1 (zh) 2016-12-30 2017-12-20 用于虚拟现实环境的交易方法、装置及系统

Country Status (3)

Country Link
CN (1) CN106981003B (zh)
TW (1) TWI679556B (zh)
WO (1) WO2018121377A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113052605A (zh) * 2021-03-22 2021-06-29 中国工商银行股份有限公司 交易授权方法、装置及虚拟现实设备
CN114049214A (zh) * 2021-11-15 2022-02-15 深圳前海鸿泰源兴科技发展有限公司 一种大数据信息采集处理系统与操作方法

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106981003B (zh) * 2016-12-30 2020-08-25 中国银联股份有限公司 用于虚拟现实环境的交易方法、装置及系统
CN109985390B (zh) * 2017-12-29 2022-10-18 北京新媒传信科技有限公司 虚拟资产管理方法及系统
US11134065B2 (en) * 2018-12-06 2021-09-28 Visa International Service Association Secured extended range application data exchange
CN109743160A (zh) * 2018-12-20 2019-05-10 深圳市任子行科技开发有限公司 防止Hook串改的安卓设备唯一标识获取方法和装置
CN110210854B (zh) * 2019-05-31 2021-07-13 中国银联股份有限公司 支付信息处理方法、装置、设备及计算机可读存储介质
CN111210214A (zh) * 2020-01-06 2020-05-29 湖南博铭信息科技有限公司 一种虚拟现实支付系统及其支付方法

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150058129A1 (en) * 2013-08-23 2015-02-26 Marshall Feature Recognition Llc System and method for electronic interaction with merchandising venues
CN105205681A (zh) * 2014-06-10 2015-12-30 高芳 基于vr的电子商务管理系统
CN105867637A (zh) * 2016-04-29 2016-08-17 乐视控股（北京）有限公司 基于虚拟现实设备的认证方法、装置及系统
CN106131057A (zh) * 2016-08-19 2016-11-16 腾讯科技（深圳）有限公司 基于虚拟现实场景的认证和装置
CN106981003A (zh) * 2016-12-30 2017-07-25 中国银联股份有限公司 用于虚拟现实环境的交易方法、装置及系统

Family Cites Families (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8028329B2 (en) * 2005-06-13 2011-09-27 Iamsecureonline, Inc. Proxy authentication network
US8934865B2 (en) * 2006-02-02 2015-01-13 Alcatel Lucent Authentication and verification services for third party vendors using mobile devices
US8660911B2 (en) * 2009-09-23 2014-02-25 Boku, Inc. Systems and methods to facilitate online transactions
CN103188668B (zh) * 2011-12-27 2017-02-08 方正国际软件(北京)有限公司 一种移动终端应用的安全保护方法及系统
US20150095238A1 (en) * 2013-09-30 2015-04-02 Apple Inc. Online payments using a secure element of an electronic device
CN104574080A (zh) * 2013-10-25 2015-04-29 腾讯科技（深圳）有限公司 一种安全支付方法及相关设备、系统
CN104601327B (zh) * 2013-12-30 2019-01-29 腾讯科技（深圳）有限公司 一种安全验证方法、相关设备和系统
CN104867011A (zh) * 2014-02-21 2015-08-26 中国电信股份有限公司 对移动支付进行安全控制的方法与装置
CN110417797B (zh) * 2015-04-02 2021-07-30 创新先进技术有限公司 认证用户的方法及装置
US20160358181A1 (en) * 2015-05-14 2016-12-08 Magic Leap, Inc. Augmented reality systems and methods for tracking biometric data
US10825049B2 (en) * 2015-06-09 2020-11-03 Visa International Service Association Virtual reality and augmented reality systems and methods to generate mobile alerts
TWM509943U (zh) * 2015-07-15 2015-10-01 Univ Hwa Hsia Technology 可攜式裝置付費系統
CN105550877A (zh) * 2015-12-21 2016-05-04 北京智付融汇科技有限公司 支付方法及装置
CN106251153A (zh) * 2016-09-21 2016-12-21 上海星寰投资有限公司 一种支付方法及系统

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150058129A1 (en) * 2013-08-23 2015-02-26 Marshall Feature Recognition Llc System and method for electronic interaction with merchandising venues
CN105205681A (zh) * 2014-06-10 2015-12-30 高芳 基于vr的电子商务管理系统
CN105867637A (zh) * 2016-04-29 2016-08-17 乐视控股（北京）有限公司 基于虚拟现实设备的认证方法、装置及系统
CN106131057A (zh) * 2016-08-19 2016-11-16 腾讯科技（深圳）有限公司 基于虚拟现实场景的认证和装置
CN106981003A (zh) * 2016-12-30 2017-07-25 中国银联股份有限公司 用于虚拟现实环境的交易方法、装置及系统

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113052605A (zh) * 2021-03-22 2021-06-29 中国工商银行股份有限公司 交易授权方法、装置及虚拟现实设备
CN114049214A (zh) * 2021-11-15 2022-02-15 深圳前海鸿泰源兴科技发展有限公司 一种大数据信息采集处理系统与操作方法

Also Published As

Publication number Publication date
CN106981003A (zh) 2017-07-25
TWI679556B (zh) 2019-12-11
CN106981003B (zh) 2020-08-25
TW201828205A (zh) 2018-08-01

Similar Documents

Publication Publication Date Title
TWI679556B (zh) 用於虛擬實境環境的交易方法、裝置及系統
US11870775B2 (en) Biometric identification and verification among IoT devices and applications
US11943362B2 (en) System and method for providing personal information using one time private key based on blockchain of proof of use
CN107533620B (zh) 基于二次装置交互的增强认证
US9301140B1 (en) Behavioral authentication system using a secure element, a behaviometric server and cryptographic servers to authenticate users
US11997213B2 (en) Verification and encryption scheme in data storage
WO2018069566A1 (en) Method, device and system for validating sensitive user data transactions within trusted circle
EP3206329B1 (en) Security check method, device, terminal and server
CN110662222B (zh) 用于对等无线通信的系统和方法
US8918844B1 (en) Device presence validation
JP2023535013A (ja) 量子安全支払いシステム
JP2022512202A (ja) リソースアクセスのための信頼トークン
CN101944216A (zh) 双因子在线交易安全认证方法及系统
CN112136103B (zh) 用于认证装置的方法、系统和计算机程序产品
KR101792220B1 (ko) 생체 인증 결합 사용자 간편 인증 방법, 이를 위한 인증 어플리케이션이 탑재된 사용자 모바일 단말기, 인증 서비스 장치 및 컴퓨터 프로그램
CN105635164B (zh) 安全认证的方法和装置
US10108937B2 (en) Method of registering a membership for an electronic payment, system for same, and apparatus and terminal thereof
CN104835038A (zh) 一种联网支付装置及方法
CN110431803A (zh) 基于身份信息管理加密密钥
US11423403B2 (en) Systems, methods, and computer program products for authorizing a transaction
KR102053993B1 (ko) 인증서를 이용한 사용자 인증 방법
US11936649B2 (en) Multi-factor authentication
KR20200013494A (ko) 사용자가 소지한 금융 카드 기반 본인 인증 시스템 및 방법
US20230131437A1 (en) Method, system, and computer program product for authentication
CN117203939A (zh) 使用非接触式卡在显示设备上对账户进行安全管理

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17885766

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17885766

Country of ref document: EP

Kind code of ref document: A1