WO2018233110A1 - 支付数据的验证方法及装置 - Google Patents

支付数据的验证方法及装置 Download PDF

Info

Publication number
WO2018233110A1
WO2018233110A1 PCT/CN2017/102939 CN2017102939W WO2018233110A1 WO 2018233110 A1 WO2018233110 A1 WO 2018233110A1 CN 2017102939 W CN2017102939 W CN 2017102939W WO 2018233110 A1 WO2018233110 A1 WO 2018233110A1
Authority
WO
WIPO (PCT)
Prior art keywords
biometric
verified
preset matching
payment
verified biometric
Prior art date
Application number
PCT/CN2017/102939
Other languages
English (en)
French (fr)
Inventor
白金才
武亚强
张晓平
李辉
刘宝利
Original Assignee
联想(北京)有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 联想(北京)有限公司 filed Critical 联想(北京)有限公司
Publication of WO2018233110A1 publication Critical patent/WO2018233110A1/zh

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4014—Identity check for transactions
    • G06Q20/40145—Biometric identity checks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
    • H04L9/3231—Biological data, e.g. fingerprint, voice or retina

Definitions

  • the present invention relates to the field of Internet technologies, and in particular, to a method and an apparatus for verifying payment data.
  • terminal devices are more diversified and intelligent, and users can make electronic payments through applications (Applications, APPs) installed in the terminal devices.
  • applications Applications, APPs
  • the user pays through an APP.
  • the APP invokes a camera in the terminal device to perform a scan payment, and after scanning the payment code to obtain the payment information, the user manually inputs the payment password to complete the electronic payment.
  • the complexity of the payment password set by the user is often high.
  • the higher the complexity of the payment password setting the more difficult the user is to remember; and the process of manually inputting the payment password by the user is also cumbersome and error-prone. The rate is higher.
  • the method and apparatus for verifying payment data provided by the present invention mainly aim to solve the problem that the process of manually inputting a payment password by a user in the prior art is cumbersome and has a high error rate.
  • the present invention provides a method for verifying payment data, including:
  • the first to-be-verified biometric feature is automatically collected;
  • the to-be-paid information is sent to a payment settlement server, so that the payment settlement server performs settlement.
  • determining whether the first to-be-verified biometric and the preset matching biometric match are:
  • the similarity degree of the first to-be-verified biometric and the preset matching biometric is greater than or equal to a preset matching threshold, determining that the first to-be-verified biometric matches the preset matching biometric.
  • determining whether the first to-be-verified biometric and the preset matching biometric match are:
  • the automatically collecting the first to-be-verified biometrics includes:
  • the second camera is automatically activated, and the first to-be-verified biometric is collected by the second camera.
  • the method further includes:
  • the preset sensor is invoked, and the second to-be-verified biometric is collected by the preset sensor.
  • the method further includes:
  • the present invention provides a verification apparatus for payment data, the apparatus comprising:
  • a receiving unit configured to receive a payment data verification request
  • the collecting unit is configured to automatically collect the first to-be-verified biometric feature when acquiring the to-be-paid information according to the payment data verification request received by the receiving unit;
  • a determining unit configured to determine whether the first to-be-verified biometric feature collected by the acquiring unit matches a preset matching biometric feature
  • a first sending unit configured to: when the determining unit determines that the first to-be-verified biometric matches the preset matching biometric, send the to-be-paid information to a payment settlement server, so that the payment settlement server proceed to checkout.
  • the determining unit includes:
  • An acquiring module configured to acquire the first to-be-verified biometric and the preset matching biometric
  • a comparison module configured to compare the first to-be-verified biometric and the preset matching biometric acquired by the acquiring module
  • a first determining module configured to determine, when the comparison module determines that a similarity degree of the first to-be-verified biometric and the preset matching biometric is greater than or equal to a preset matching threshold, determining the first to-be-verified creature The feature matches the preset matching biometrics.
  • the determining unit includes:
  • a sending module configured to send the first to-be-verified biometric to the verification server, so that the verification server verifies the legality of the first to-be-verified biometric according to the preset matching biometric, the preset matching
  • the biometric is stored in the verification server, and the biometrics collected by the client user and uploaded to the verification server;
  • a receiving module configured to receive, after the sending module sends the first to-be-verified biometric to the verification server, feedback information sent by the verification server for the legality of the first to-be-verified biometric
  • a second determining module configured to determine, according to the feedback information received by the receiving module, whether the first to-be-verified biometric and the preset matching biometric match.
  • the collecting unit includes:
  • the calling module is configured to invoke the first camera to obtain the information to be paid according to the payment data verification request;
  • a startup module configured to automatically start the second camera according to the payment data verification request
  • an acquiring module configured to collect, by the second camera activated by the startup module, the first to-be-verified biometric.
  • the device further includes:
  • a calling unit configured to: when the determining unit determines that the first to-be-verified biometric does not match the preset matching biometric, invoking a preset sensor;
  • the collecting unit is further configured to collect the second to-be-verified biometric by the preset sensor invoked by the calling unit.
  • the device further includes:
  • an output unit configured to output a display payment password input box when the determining unit determines that the first to-be-verified biometric does not match the preset matching biometric
  • a second sending unit configured to send the content input by the payment password input box to a payment settlement server, so that the payment settlement server performs settlement.
  • the method and device for verifying payment data provided by the present invention automatically collect the first to-be-verified biometric feature while receiving the payment data verification request, and obtain the information to be paid in the verification request; Verifying whether the biometric matches the preset matching biometric; if it is determined that the first biometric to be verified matches the preset matching biometric, the to-be-paid information is sent to the payment settlement server for settlement by the payment settlement server.
  • the present invention does not require manual operation by the user at the time of settlement, and automatically acquires the first biometric to be verified when acquiring the information to be paid. Therefore, there is no error in the input of the payment password, and the biometric feature can be adopted. It is convenient and quick to complete the verification of payment.
  • the second biometric to be verified is automatically collected to verify that when the first biometric matching success rate is low, the second biometric feature is used. Further automatic matching further reduces the chance of manual input of payment passwords.
  • FIG. 1 is a flowchart of a method for verifying payment data according to an embodiment of the present invention
  • FIG. 2 is a flowchart of another method for verifying payment data according to an embodiment of the present invention.
  • FIG. 3 is a schematic diagram of an output display payment password input box according to an embodiment of the present invention.
  • FIG. 4 is a block diagram showing the composition of a verification apparatus for payment data according to an embodiment of the present invention.
  • FIG. 5 is a block diagram showing the composition of another payment data verification apparatus according to an embodiment of the present invention.
  • the techniques of this disclosure may be implemented in the form of hardware and/or software (including firmware, microcode, etc.). Additionally, the techniques of this disclosure may take the form of a computer program product on a computer readable medium storing instructions for use by or in connection with an instruction execution system.
  • a computer readable medium can be any medium that can contain, store, communicate, propagate or transport the instructions.
  • a computer readable medium can include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, device, or propagation medium.
  • the computer readable medium include: a magnetic storage device such as a magnetic tape or a hard disk (HDD); an optical storage device such as a compact disk (CD-ROM); a memory such as a random access memory (RAM) or a flash memory; and/or a wired /Wireless communication link.
  • a magnetic storage device such as a magnetic tape or a hard disk (HDD)
  • an optical storage device such as a compact disk (CD-ROM)
  • a memory such as a random access memory (RAM) or a flash memory
  • RAM random access memory
  • the embodiment of the invention provides a method for verifying payment data, which is applied to the terminal side. As shown in FIG. 1 , the method includes:
  • Step 101 Receive a payment data verification request.
  • the terminal device When the terminal device performs a payment transaction such as a transfer or a face-to-face payment, the terminal receives a payment data verification request.
  • the application scenario may be a bank transfer, a third-party payment transfer, an electronic wallet transfer, a face-to-face scan code, or an audio payment.
  • the specific embodiment of the present invention does not limit the specific application scenario.
  • Step 102 Automatically collect the first to-be-verified biometric feature when acquiring the to-be-paid information according to the payment data verification request.
  • the terminal While acquiring the information to be paid, the terminal automatically collects the first biometric to be verified.
  • the first to-be-verified biometric may include, but is not limited to, the following: a fingerprint, an iris or a face image, and the like.
  • a fingerprint For different types of the first to-be-verified biometrics, different methods are distinguished at the time of collection.
  • the first to be verified biometrics depends on the hardware device of the carrier where the terminal is located, such as a sensor or a camera, etc., or depends on Other hardware devices that have a data interaction relationship with the terminal.
  • the hardware type, the carrier, and the like of collecting the first to-be-verified biometric are not limited in the embodiment of the present invention.
  • the terminal in the embodiment of the present invention may be a hardware terminal or a specific application.
  • the terminal When the terminal is a hardware terminal, it needs to have the function of collecting the first biometric to be verified; when the terminal is an application, the carrier (such as a mobile phone, a tablet computer, a personal computer, a laptop computer, etc.) installed by the application has the collection function. The function of the biometric to be verified.
  • the terminal is an application installed in the mobile phone as an example, but it should be clarified that the description manner is not intended to limit the specific type of the terminal.
  • Step 103 Determine whether the first to-be-verified biometric and the preset matching biometric match.
  • the preset matching biometrics in the embodiment of the present invention are biometrics that are entered by the terminal user in advance, and are used to verify whether the first to-be-verified biometric is correct when performing the payment. It should be noted that the preset matching biometrics is not limited to one number, nor is it limited to the end user himself. The preset matching biometrics may be entered by the end user, or may be entered by other users after the end user agrees, and the specific embodiment of the present invention does not limit this.
  • a preset matching face feature when the terminal user enters a preset matching face feature, a plurality of face information of different angles and/or scenes are recorded to generate an accurate preset matching face feature.
  • the fingerprint when the terminal user enters the preset matching biometric fingerprint, when entering a fingerprint, the fingerprint of the right index finger can be entered, and the fingerprint of any finger can also be entered; when at least two fingerprints are entered, it can be Any combination of at least two fingers is not limited in the specific embodiment of the present invention.
  • the first biometric to be verified is compared with the preset matching biometric, and the purpose is to verify the identity of the user to ensure the security of the user.
  • the first to-be-verified biometric feature and the preset matching biometric feature are matched, the first to-be-verified biometric feature and the preset may be determined when the first to-be-verified biometric feature is completely consistent with the preset matching biometric feature. Matching biometrics are matched. In this setting mode, the authenticated user identity is more accurate, but the verification pass rate is reduced and the verification duration is correspondingly longer.
  • the first to-be-verified biometric feature when matching the first to-be-verified biometric feature with the preset matching biometric feature, when the first to-be-verified biometric feature is consistent with the preset matching biometric portion (eg, 80% or more of the biometric features are consistent), It is determined that the first to-be-verified biometric is matched with the preset matching biometric. In the setting manner, the verification pass rate is increased, or the verification duration is shortened, but the accuracy of the verified user identity is low.
  • the specific setting may be set according to the requirements of the user. Specifically, the embodiment of the present invention does not limit this.
  • Step 104 If it is determined that the first to-be-verified biometric matches the preset matching biometric, send the to-be-paid information to a payment settlement server, so that the payment settlement server performs settlement.
  • the payment settlement server is different from the application server corresponding to the terminal (application), and the application server only provides the application service for the terminal, and does not provide the settlement service.
  • the payment password is forwarded to the payment settlement server via the application server, and the settlement is performed by the payment settlement server.
  • the payment settlement server determines whether the terminal grants the credit, and the credit performs the payment behavior; if the credit is not granted, the payment behavior is rejected.
  • the payment settlement server may be the same server as the application server.
  • the method for verifying payment data provided by the embodiment of the present invention automatically collects the first to-be-verified biological feature while receiving the payment data verification request, and acquires the to-be-paid information in the verification request; determining the first to-be-verified biological feature and the preset Whether the matching biometrics match; if it is determined that the first to-be-verified biometrics match the preset matching biometrics, the to-be-paid information is sent to the payment settlement server for the payment settlement server to perform settlement.
  • the present invention does not require manual operation by the user at the time of settlement, and automatically acquires the first biometric to be verified when acquiring the information to be paid. Therefore, there is no error in the input of the payment password, and the biometric feature can be adopted. It is convenient and quick to complete the verification of payment.
  • the following two methods when determining whether the first to-be-verified biometric is matched with the preset matching biometric, the following two methods may be adopted:
  • Manner 1 The validity of the first to-be-verified biometric is verified by the terminal.
  • the preset matching biometrics are stored in the terminal, and when determining whether the first to-be-verified biometric and the preset matching biometric match, acquiring the first to-be-verified biometric and the preset matching biometric, and And comparing the first to-be-verified biometric and the preset matching biometric; if the similarity of the first to-be-verified biometric and the preset matching biometric is greater than or equal to a preset matching threshold, determining The first to-be-verified biometric feature is matched with the preset matching biometric feature; if the similarity degree of the first to-be-verified biometric feature and the preset matching biometric feature is less than the preset matching threshold, determining the first The biometric to be verified does not match the preset matching biometric.
  • the preset matching threshold is an empirical value. When setting the preset matching threshold, it should be noted that in order to ensure the accuracy of the verification, the preset matching threshold cannot be set too small to avoid property leakage due to identity verification. Threat.
  • Manner 2 The validity of the first to-be-verified biometric is verified by the verification server corresponding to the terminal.
  • the verification server stores the preset matching biometrics.
  • the verification server receives the first to-be-verified biometric feature sent by the terminal, it is verified whether the first to-be-verified biometric feature matches the preset matching biometric feature, and after the verification is completed, the feedback information of the first to-be-verified biometric legality is sent to The terminal receives the feedback information sent by the verification server for the legality of the first to-be-verified biometric, and determines whether the first to-be-verified biometric and the preset matching biometric match according to the feedback information.
  • the verification server may be the same server as the application server or the payment settlement server described above, or may be another server different from the application server or the payment settlement server.
  • the terminal when the terminal has the function of verifying the first to-be-verified biometric feature, the terminal may perform the verification of the first to-be-verified biometric feature in any of the foregoing manners; when the terminal does not have the function of verifying the first to-be-verified biometric feature, The terminal may perform the verification of the first to-be-verified biometric in the second manner.
  • the specific embodiment of the present invention does not limit the verification mode.
  • the present invention also provides another method for verifying payment data, as shown in FIG. 2, the method includes:
  • Step 201 Receive a payment data verification request.
  • Step 202 Call the first camera to obtain the information to be paid according to the payment data verification request.
  • the terminal After receiving the payment data verification request, the terminal invokes the first camera in the hardware device, scans the two-dimensional code, and identifies the to-be-paid information in the two-dimensional code.
  • the terminal may be an application, and the application is installed in the smart electronic device, as illustrated in the following embodiments, assuming that the smart phone includes two front and rear cameras; After an application receives the payment data verification request, it calls the smartphone's rear camera, scans the QR code, and obtains the information to be paid.
  • the smart phone calls the front camera to scan the two-dimensional code.
  • the front camera is generally a camera with the camera function in a smart phone, a tablet computer, a portable device, a portable device, and the like
  • the rear camera is generally intelligent.
  • an electronic device with a camera function such as a mobile phone, a tablet computer, a portable device, a portable wearable device, and the like
  • a camera on the side opposite to the display screen such as a mobile phone, a tablet computer, a portable device, a portable wearable device, and the like
  • the embodiment of the present invention does not limit the position, model, and the like of the camera.
  • the first camera may be a camera that independently sets a camera or a payment device (smartphone).
  • the position of the first camera, the attributes, and the like are not limited in the embodiment of the present invention.
  • Step 203 Automatically start a second camera according to the payment data verification request, and collect the first to-be-verified biometric by the second camera, where the first to-be-verified biometric may be a face image or an iris image. ;
  • the first scheme (method shown in step 203): when performing payment data verification, the face image or the iris image is preferentially used for verification. That is, after the first camera is called to obtain the information to be paid through step 202, the second camera is automatically activated, and the first to-be-verified biometric, such as a face image or an iris image, is collected by the second camera.
  • the first to-be-verified biometric such as a face image or an iris image
  • the second camera automatically called is usually the front camera of the smartphone.
  • the software layer after receiving the payment data verification request, the software layer simultaneously starts the front camera and the rear camera to collect data, which is included in the collection unit 32 (but not shown).
  • the multi-input and multi-output image signal processor (ISP) performs parallel processing and sends it to the corresponding processing circuit for processing. It is worth noting that the process of collecting the information to be paid by the first camera does not require user intervention, and the preview image of the first biometric feature to be verified by the second camera needs to be displayed on the display screen for the user to adjust the angle and distance to improve the collection.
  • the display screen only displays the preview image of the first biometric feature to be verified by the second camera.
  • the preview images acquired by the two cameras may also be displayed simultaneously on the display screen.
  • Step 204 Determine whether the first to-be-verified biometric and the preset matching biometric match.
  • step 205 is performed; if it is determined that the first to-be-verified biometric is matched with the preset matching biometric, step 208 is performed. .
  • Step 205 The preset sensor is called, and the second to-be-verified biometric (fingerprint image) is collected by the preset sensor.
  • the second scheme is used for verification, that is, the fingerprint image is performed by this step.
  • the preset sensor in the smart phone is called to perform the collection.
  • the preset sensor sets a part of the smart phone that the user can touch when the operation of the payment data verification request is triggered, for example, the preset.
  • the sensor is a sensor added on the back of the smartphone (relative to the display screen), so that after receiving the payment data verification request, it can automatically trigger the acquisition of the information to be paid, collect and verify the first to-be-verified biometric, and collect And the verification process of verifying the fingerprint does not require the user to operate according to the prompt information, thereby improving the user experience.
  • the embodiment of the present invention does not limit the location of the preset sensor.
  • Step 206 Determine whether the fingerprint image matches a preset fingerprint feature.
  • step 207 is performed; if it is determined that the fingerprint image matches the preset fingerprint feature, step 208 is performed.
  • Step 207 Output a display payment password input box.
  • the third verification scheme executed in this step is performed by displaying the payment password input box.
  • step 208 is performed.
  • This implementation is an alternative to the method shown in Figure 2, and the payment password input box is displayed if and only if the face image or the iris image does not match the fingerprint image and the preset matching biometrics. Pay.
  • Figure 3 A schematic diagram of an output display payment password input box according to an embodiment of the present invention is shown. It should be noted that FIG. 3 is only an exemplary example, and the display style of the display payment password input box is not limited in the embodiment of the present invention.
  • Step 208 Send the to-be-paid information to a payment settlement server, so that the payment settlement server performs settlement.
  • another embodiment of the present invention further provides a verification apparatus for payment data.
  • the device embodiment corresponds to the foregoing method embodiment.
  • the device embodiment does not describe the details in the foregoing method embodiments one by one, but it should be clear that the device in this embodiment can implement the foregoing method. All the contents of the example.
  • An embodiment of the present invention provides a verification device for payment data. As shown in FIG. 4, the device includes:
  • the receiving unit 31 is configured to receive a payment data verification request
  • the collecting unit 32 is configured to automatically collect the first to-be-verified biological feature when acquiring the to-be-paid information according to the payment data verification request received by the receiving unit;
  • a determining unit 33 configured to determine whether the first to-be-verified biometric collected by the collecting unit 32 matches a preset matching biometric
  • a first sending unit 34 configured to: when the determining unit 33 determines that the first to-be-verified biometric matches the preset matching biometric, send the to-be-paid information to a payment settlement server, so that the payment The settlement server performs settlement.
  • the determining unit 33 includes:
  • the obtaining module 331 is configured to acquire the first to-be-verified biometric and the preset matching biometric feature
  • the comparison module 332 is configured to compare the first to-be-verified biometric and the preset matching biometric acquired by the acquiring module 331;
  • the first determining module 333 is configured to determine, when the comparison module 332 determines that the similarity degree of the first to-be-verified biometric and the preset matching biometric is greater than or equal to a preset matching threshold, Determining that the biometric feature matches the preset matching biometric feature, and when the comparing module 332 determines that the similarity between the first to-be-verified biometric feature and the preset matching biometric feature is less than the preset matching threshold, determining the The first to-be-verified biometric does not match the preset matching biometric.
  • the determining unit 33 includes:
  • the sending module 334 is configured to send the first to-be-verified biometric to the verification server, so that the verification server verifies the legality of the first to-be-verified biometric according to the preset matching biometric, the preset Matching biometrics are stored in the verification server for biometrics collected by the client user and uploaded to the verification server;
  • a receiving module 335 configured to send, by the sending module 334, the first to-be-verified biometric to the verification service Receiving, by the verification server, feedback information sent by the verification server for the legality of the first to-be-verified biometric;
  • the second determining module 336 is configured to determine, according to the feedback information received by the receiving module, whether the first to-be-verified biometric and the preset matching biometric match.
  • the terminal when the terminal has the function of verifying the first to-be-verified biometric function, the terminal may perform verification of the first to-be-verified biometric based on the obtaining module 331, the comparison module 333, and the first determining module 333; when the terminal does not have the verification
  • the terminal may perform the verification of the first to-be-verified biometrics based on the sending module 334, the receiving module 335, and the second determining module 336.
  • the embodiment of the present invention does not limit the verification mode.
  • the collecting unit 32 includes:
  • the calling module 321 is configured to invoke the first camera to obtain the information to be paid according to the payment data verification request;
  • the startup module 322 is configured to automatically start the second camera according to the payment data verification request.
  • the collecting module 323 is configured to collect the first to-be-verified biometric by the second camera activated by the starting module 322.
  • the present invention can automatically activate the second camera while acquiring the information to be paid by the first camera, and collect the first biometric to be verified, such as a face image or an iris image, through the second camera.
  • the first biometric to be verified such as a face image or an iris image
  • the payment can be guaranteed to be faster. Complete to improve the user experience.
  • the calling module 321 and the launching module 322 can be integrated in the same control unit.
  • the device further includes:
  • the calling unit 35 is configured to: when the determining unit 33 determines that the first to-be-verified biometric does not match the preset matching biometric, invoke a preset sensor; in an embodiment, the calling unit 35 may And integrated inside the acquisition unit 32.
  • the collecting unit 32 is further configured to collect the second to-be-verified biometric by the preset sensor invoked by the calling unit 35.
  • the apparatus further includes:
  • the output unit 36 is configured to output a display payment password input box when the determining unit 33 determines that the first to-be-verified biometric does not match the preset matching biometric;
  • a second sending unit 37 configured to send the content input by the payment password input box to a payment settlement server, so that the payment settlement server performs settlement, and it should be noted that if and only if the first and/or second Verify biometrics and pre- If the matching biometrics do not match, the payment password input box will be displayed to complete the payment.
  • modules in the devices of the embodiments can be adaptively changed and placed in one or more devices different from the embodiment.
  • the modules or units or components of the embodiments may be combined into one module or unit or component, and further they may be divided into a plurality of sub-modules or sub-units or sub-components.
  • any combination of the features disclosed in the specification, including the accompanying claims, the abstract and the drawings, and any methods so disclosed, or All processes or units of the device are combined.
  • Each feature disclosed in this specification (including the accompanying claims, the abstract and the drawings) may be replaced by alternative features that provide the same, equivalent or similar purpose.
  • the various component embodiments of the present invention may be implemented in hardware, or in a software module running on one or more processors, or in a combination thereof.
  • a microprocessor or digital signal processor may be used in practice to implement some or all of the functionality of some or all of the components of the payment data verification method and apparatus in accordance with embodiments of the present invention.
  • the invention can also be implemented as a device or device program (e.g., a computer program and a computer program product) for performing some or all of the methods described herein.
  • a program implementing the invention may be stored on a computer readable medium or may be in the form of one or more signals. Such signals may be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Business, Economics & Management (AREA)
  • Health & Medical Sciences (AREA)
  • Accounting & Taxation (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • General Health & Medical Sciences (AREA)
  • Biomedical Technology (AREA)
  • Strategic Management (AREA)
  • Theoretical Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • General Business, Economics & Management (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Finance (AREA)
  • Life Sciences & Earth Sciences (AREA)
  • Biodiversity & Conservation Biology (AREA)
  • Collating Specific Patterns (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

本发明公开了一种支付数据的验证方法及装置，涉及互联网技术领域，主要目的在于解决现有技术中用户手动输入支付密码的过程较为繁琐，出错率较高的问题，本发明的主要技术方案包括：接收支付数据验证请求；当根据所述支付数据验证请求获取待支付信息时，采集第一待验证生物特征；确定所述第一待验证生物特征与预设匹配生物特征是否匹配；若确定所述第一待验证生物特征与所述预设匹配生物特征匹配，则将所述待支付信息发送至支付结算服务器，以便所述支付结算服务器进行结算。本发明应用于电子支付过程中。

Description

支付数据的验证方法及装置 技术领域
本发明涉及互联网技术领域，特别是涉及一种支付数据的验证方法及装置。
背景技术
随着互联网技术的发展，终端设备更加多元化、智能化，用户可以通过终端设备中安装的应用程序(Application，APP)进行电子支付。例如，用户通过某APP进行支付，在某APP启动后，APP调用终端设备中的摄像头执行扫描支付，扫码付款码以获得支付信息后，用户手动输入支付密码，完成电子支付。
发明人在实现上述发明过程中，发现现有技术中支付密码的复杂程度与支付密码的安全性成正比，即支付密码复杂度越高，支付密码安全性越高；支付密码复杂度越低，支付密码安全性越低。为了确保支付密码的安全性，用户设置的支付密码的复杂度往往较高，但是，支付密码设置的复杂度越高，用户越不便于记忆；并且用户手动输入支付密码的过程也较为繁琐，出错率较高。
发明内容
有鉴于此，本发明提供的一种支付数据的验证方法及装置，主要目的在于解决现有技术中用户手动输入支付密码的过程较为繁琐，出错率较高的问题。
依据本发明一个方面，本发明提供了一种支付数据的验证方法，包括：
接收支付数据验证请求；
当根据所述支付数据验证请求获取待支付信息时，自动采集第一待验证生物特征；
确定所述第一待验证生物特征与预设匹配生物特征是否匹配；
若确定所述第一待验证生物特征与所述预设匹配生物特征匹配，则将所述待支付信息发送至支付结算服务器，以便所述支付结算服务器进行结算。
可选的，所述确定所述第一待验证生物特征与预设匹配生物特征是否匹配包括：
获取所述第一待验证生物特征以及所述预设匹配生物特征，并将所述第一待验证生物特征以及所述预设匹配生物特征进行比对；
若所述第一待验证生物特征以及所述预设匹配生物特征的相似程度大于或者等于预设匹配阈值，则确定所述第一待验证生物特征与预设匹配生物特征匹配。
可选的，所述确定所述第一待验证生物特征与预设匹配生物特征是否匹配包括：
将所述第一待验证生物特征发送至验证服务器，以便所述验证服务器根据所述预设匹配生物特征验证所述第一待验证生物特征的合法性，所述预设匹配生物特征存储于所述验证服务器中，为客户端用户采集并上传至所述验证服务器的生物特征；
接收所述验证服务器发送的针对所述第一待验证生物特征合法性的反馈信息，根据所述反馈信息确定所述第一待验证生物特征与预设匹配生物特征是否匹配。
可选的，所述自动采集第一待验证生物特征包括：
根据所述支付数据验证请求，调用第一摄像头获取所述待支付信息；
根据所述支付数据验证请求，自动启动第二摄像头，通过所述第二摄像头采集所述第一待验证生物特征。
可选的，所述方法更包括：
若确定所述第一待验证生物特征与所述预设匹配生物特征不匹配，则调用预设传感器，通过所述预设传感器采集第二待验证生物特征。
可选的，所述方法还包括：
若确定所述第一待验证生物特征与所述预设匹配生物特征不匹配，则输出显示支付密码输入框，并将所述支付密码输入框输入的内容发送至支付结算服务器，以便所述支付结算服务器进行结算。依据本发明另一个方面，本发明提供了一种支付数据的验证装置，该装置包括：
接收单元，用于接收支付数据验证请求；
采集单元，用于当根据所述接收单元接收到的所述支付数据验证请求获取待支付信息时，自动采集第一待验证生物特征；
确定单元，用于确定所述采集单元采集的所述第一待验证生物特征与预设匹配生物特征是否匹配；
第一发送单元，用于当所述确定单元确定所述第一待验证生物特征与所述预设匹配生物特征匹配时，将所述待支付信息发送至支付结算服务器，以便所述支付结算服务器进行结算。
可选的，所述确定单元包括：
获取模块，用于获取所述第一待验证生物特征以及所述预设匹配生物特征；
比对模块，用于所述获取模块获取的将所述第一待验证生物特征以及所述预设匹配生物特征进行比对；
第一确定模块，用于当所述比对模块确定所述第一待验证生物特征以及所述预设匹配生物特征的相似程度大于或者等于预设匹配阈值时，确定所述第一待验证生物特征与预设匹配生物特征匹配。
可选的，所述确定单元包括：
发送模块，用于将所述第一待验证生物特征发送至验证服务器，以便所述验证服务器根据所述预设匹配生物特征验证所述第一待验证生物特征的合法性，所述预设匹配生物特征存储于所述验证服务器中，为客户端用户采集并上传至所述验证服务器的生物特征；
接收模块，用于在所述发送模块将所述第一待验证生物特征发送至所述验证服务器之后，接收所述验证服务器发送的针对所述第一待验证生物特征合法性的反馈信息；
第二确定模块，用于根据所述接收模块接收到的所述反馈信息确定所述第一待验证生物特征与预设匹配生物特征是否匹配。
可选的，其特征在于，所述采集单元包括：
调用模块，用于根据所述支付数据验证请求，调用第一摄像头获取待支付信息；
启动模块，用于根据所述支付数据验证请求，自动启动第二摄像头；
采集模块，用于通过所述启动模块启动的所述第二摄像头采集所述第一待验证生物特征。
可选的，所述装置还包括：
调用单元，用于当所述确定单元确定所述第一待验证生物特征与所述预设匹配生物特征不匹配时，调用预设传感器；
所述采集单元，还用于通过所述调用单元调用的所述预设传感器采集第二待验证生物特征。
可选的，所述装置还包括：
输出单元，用于当所述确定单元确定所述第一待验证生物特征与所述预设匹配生物特征不匹配时，输出显示支付密码输入框；
第二发送单元，用于将所述支付密码输入框输入的内容发送至支付结算服务器，以便所述支付结算服务器进行结算。
借由上述技术方案，本发明提供的支付数据的验证方法及装置，在接收支付数据验证请求，并获取验证请求中的待支付信息的同时，自动采集第一待验证生物特征；确定第一待验证生物特征与预设匹配生物特征是否匹配；若确定第一待验证生物特征与预设匹配生物特征匹配，则将待支付信息发送至支付结算服务器，以便支付结算服务器进行结算。与现有技术相比，本发明在结算时无需用户的手动操作，在获取待支付信息时，自动采集第一待验证生物特征，因此，不存在支付密码输入错误的情况，通过生物特征即可完成支付的验证，方便、快捷。此外，在本发明另一实施例中，当第一待验证生物特征不匹配时，自动采集第二待验证生物特征来验证，当第一生物特征匹配成功率较低时，使用第二生物特征进一步自动匹配，进一步降低支付密码的手工输入的几率。
上述说明仅是本发明技术方案的概述，为了能够更清楚了解本发明的技术手段，而可依照说明书的内容予以实施，并且为了让本发明的上述和其它目的、特征和优点能够更明显易懂，以下特举本发明的具体实施方式。
附图说明
通过阅读下文优选实施方式的详细描述，各种其他的优点和益处对于本领域普通技术人员将变得清楚明了。附图仅用于示出优选实施方式的目的，而并不认为是对本发明的限制。而且在整个附图中，用相同的参考符号表示相同的部件。在附图中：
图1示出了本发明实施例提供的一种支付数据的验证方法的流程图；
图2示出了本发明实施例提供的另一种支付数据的验证方法的流程图；
图3示出了本发明实施例提供的一种输出显示支付密码输入框的示意图；
图4示出了本发明实施例提供的一种支付数据的验证装置的组成框图；
图5示出了本发明实施例提供的另一种支付数据的验证装置的组成框图。
具体实施方式
下面将参照附图更详细地描述本公开的示例性实施例。虽然附图中显示了本公开的示例性实施例，然而应当理解，可以以各种形式实现本公开而不应被这里阐述的实施例所限制。相反，提供这些实施例是为了能够更透彻地理解本公开，并且能够将本公开的范围完整的传达给本领域的技术人员。
在此使用的术语仅仅是为了描述具体实施例，而并非意在限制本公开。此外，在此使用的术语“包括”、“包含”等表明了所述特征、步骤、操作和/或部件的存在，但是并不排除存在或添加一个或多个其他特征、步骤、操作或部件。
在此使用的所有术语(包括技术和科学术语)具有本领域技术人员通常所理解的含义，除非另外定义。应注意，这里使用的术语应解释为具有与本说明书的上下文相一致的含义，而不应以理想化或过于刻板的方式来解释。
在使用类似于“A、B和C等中至少一个”这样的表述的情况下，一般来说应该按照本领域技术人员通常理解该表述的含义来予以解释(例如，“具有A、B和C中至少一个的系统”应包括但不限于单独具有A、单独具有B、单独具有C、具有A和B、具有A和C、具有B和C、和/或具有A、B、C的系统等)。在使用类似于“A、B或C等中至少一个”这样的表述的情况下，一般来说应该按照本领域技术人员通常理解该表述的含义来予以解释(例如，“具有A、B或C中至少一个的系统”应包括但不限于单独具有A、单独具有B、单独具有 C、具有A和B、具有A和C、具有B和C、和/或具有A、B、C的系统等)。本领域技术人员还应理解，实质上任意表示两个或更多可选项目的转折连词和/或短语，无论是在说明书、权利要求书还是附图中，都应被理解为给出了包括这些项目之一、这些项目任一方、或两个项目的可能性。例如，短语“A或B”应当被理解为包括“A”或“B”、或“A和B”的可能性。
附图中示出了一些方框图和/或流程图。应理解，方框图和/或流程图中的一些方框或其组合可以由计算机程序指令来实现。这些计算机程序指令可以提供给通用计算机、专用计算机或其他可编程数据处理装置的处理器，从而这些指令在由该处理器执行时可以创建用于实现这些方框图和/或流程图中所说明的功能/操作的装置。
因此，本公开的技术可以硬件和/或软件(包括固件、微代码等)的形式来实现。另外，本公开的技术可以采取存储有指令的计算机可读介质上的计算机程序产品的形式，该计算机程序产品可供指令执行系统使用或者结合指令执行系统使用。在本公开的上下文中，计算机可读介质可以是能够包含、存储、传送、传播或传输指令的任意介质。例如，计算机可读介质可以包括但不限于电、磁、光、电磁、红外或半导体系统、装置、器件或传播介质。计算机可读介质的具体示例包括：磁存储装置，如磁带或硬盘(HDD)；光存储装置，如光盘(CD-ROM)；存储器，如随机存取存储器(RAM)或闪存；和/或有线/无线通信链路。
本发明实施例提供一种支付数据的验证方法，该方法应用于终端侧，如图1所示，所述方法包括：
步骤101：接收支付数据验证请求。
当终端设备执行转账、面对面付款等支付交易时，终端会接收到支付数据验证请求。应用场景可以为银行转账、第三方支付转账、电子钱包转账、面对面扫码或者音频支付等等，具体的，本发明实施例对具体应用场景不作限定。
步骤102：在根据所述支付数据验证请求获取待支付信息时，自动采集第一待验证生物特征。
终端在获取待支付信息的同时，本发明自动采集第一待验证生物特征。第一待验证生物特征可以包含但不局限于以下内容，包括：指纹、虹膜或人脸图像等等。针对第一待验证生物特征的不同类型，在采集时区分不同的方式，需要说明的是，采集第一待验证生物特征时依赖终端所在载体的硬件设备，如传感器或摄像头等等，或者依赖于与终端有数据交互关系的其他硬件设备，具体的，本发明实施例对采集第一待验证生物特征的硬件类型、载体等不作限定。
需要说明的是，本发明实施例所述的终端可以是硬件终端，也可以是具体的应用程序。 当终端为硬件终端时，其需要具备采集第一待验证生物特征的功能；当终端为应用程序时，应用程序安装的载体(如手机、平板电脑、个人电脑、膝上电脑等)具有采集第一待验证生物特征的功能。后续实施例中，会以终端为安装于手机中的应用程序为例进行说明，但是，应当明确的是，该种说明方式并非意在限定终端的具体类型。
步骤103：确定所述第一待验证生物特征与预设匹配生物特征是否匹配。
本发明实施例所述的预设匹配生物特征为终端用户提前录入的生物特征，用于在执行支付时，验证第一待验证生物特征是否正确。需要说明的是，预设匹配生物特征不限于数量为1个，也不限于终端用户本人。预设匹配生物特征可以由终端用户录入，也可由经终端用户同意后，其他人录入生物特征，具体的本发明实施例对此不作限定。
以人脸识别为例，在终端用户录入预设匹配人脸特征时，会录入多个不同角度和/或场景的人脸信息以生成准确的预设匹配人脸特征。再以指纹为例，在终端用户录入预设匹配生物特征指纹时，当录入一个指纹时，可以录入一个右手食指的指纹，也可以录入任意手指的指纹；当录入至少两个指纹时，可以是任意至少两个手指的组合，具体的本发明实施例对此不作限定。
在步骤101获取到第一待验证生物特征之后，将第一待验证生物特征与预设匹配生物特征进行比对，其目的在于对用户身份进行验证，以确保用户的财产安全。在实际应用中，在匹配第一待验证生物特征与预设匹配生物特征时，可以设置当第一待验证生物特征与预设匹配生物特征完全一致时，确定第一待验证生物特征与预设匹配生物特征两者匹配，该种设置方式下，验证的用户身份较为准确，但是，验证通过率降低、验证时长会相应变长。此外，在匹配第一待验证生物特征与预设匹配生物特征时，可以设置当第一待验证生物特征与预设匹配生物特征部分一致(如80％或者90％以上的生物特征一致)时，确定第一待验证生物特征与预设匹配生物特征两者匹配，该种设置方式下，验证通过率提高、或者验证时长缩短，但是验证的用户身份的准确度变低。具体的设置，可根据用户的需求进行设置，具体的，本发明实施例对此不作限定。
步骤104：若确定所述第一待验证生物特征与所述预设匹配生物特征匹配，则将所述待支付信息发送至支付结算服务器，以便所述支付结算服务器进行结算。
需要说明的是，本发明一些实施例中，支付结算服务器不同于终端(应用程序)对应的应用服务器，应用服务器只为终端提供应用服务，而不提供结算服务。当终端获取支付密码后，经由应用服务器，将支付密码转发至支付结算服务器，由支付结算服务器进行结算，支付结算服务器确定终端是否授信，授信则执行支付行为；未授信，则拒绝支付行为。本发明的另一些实施例中，支付结算服务器可以与应用服务器为同一服务器。当终端获取支付信息 以及验证数据后，发送给该服务器，该服务器在验证数据验证通过的情况下，直接完成结算。
本发明实施例提供的支付数据的验证方法，在接收支付数据验证请求，并获取验证请求中的待支付信息的同时，自动采集第一待验证生物特征；确定第一待验证生物特征与预设匹配生物特征是否匹配；若确定第一待验证生物特征与预设匹配生物特征匹配，则将待支付信息发送至支付结算服务器，以便支付结算服务器进行结算。与现有技术相比，本发明在结算时无需用户的手动操作，在获取待支付信息时，自动采集第一待验证生物特征，因此，不存在支付密码输入错误的情况，通过生物特征即可完成支付的验证，方便、快捷。
在本发明实施例中，确定第一待验证生物特征与预设匹配生物特征是否匹配时，可以采用但不局限于以下两种方式实现：
方式一：由终端验证第一待验证生物特征的合法性。
预设匹配生物特征存储于终端中，在确定所述第一待验证生物特征与预设匹配生物特征是否匹配时，获取所述第一待验证生物特征以及所述预设匹配生物特征，并将所述第一待验证生物特征以及所述预设匹配生物特征进行比对；若所述第一待验证生物特征以及所述预设匹配生物特征的相似程度大于或者等于预设匹配阈值，则确定所述第一待验证生物特征与预设匹配生物特征匹配；若所述第一待验证生物特征以及所述预设匹配生物特征的相似程度小于所述预设匹配阈值，则确定所述第一待验证生物特征与预设匹配生物特征不匹配。其中，预设匹配阈值为一经验值，在设置预设匹配阈值时，需要注意的是，为了确保验证的准确性，不能将预设匹配阈值设置的太小，避免由于身份验证存在的财产泄露威胁。
方式二：由终端对应的验证服务器验证第一待验证生物特征的合法性。
该种实现方式中，需要终端与验证服务器之间的交互，首先，终端采集到的预设匹配生物特征上传至验证服务器，验证服务器将预设匹配生物特征进行存储。当验证服务器接收到终端发送的第一待验证生物特征时，验证第一待验证生物特征与预设匹配生物特征是否匹配，验证结束后，将第一待验证生物特征合法性的反馈信息发送至终端，终端接收所述验证服务器发送的针对所述第一待验证生物特征合法性的反馈信息，根据所述反馈信息确定所述第一待验证生物特征与预设匹配生物特征是否匹配。根据本公开实施例，该验证服务器可以与上文所述应用服务器或支付结算服务器为同一服务器，也可以是不同于上述应用服务器或支付结算服务器的其他服务器。
需要说明的是，当终端具有验证第一待验证生物特征功能时，终端可采用上述任一种方式执行第一待验证生物特征的验证；当终端不具有验证第一待验证生物特征功能时，终端可采用上述第二种方式执行第一待验证生物特征的验证；具体的，本发明实施例对验证方式不作限定。
以下实施例中会以待支付信息记载于二维码中的应用场景进行说明，需要强调的是，该种说明方式并非意在限定待支付信息仅能存储于二维码中。本发明还提供了另一种支付数据的验证方法，如图2所示，所述方法包括：
步骤201：接收支付数据验证请求。
有关接收支付数据验证请求说明，请参考步骤101的详细说明，本发明实施例在此不再进行赘述。
步骤202：根据所述支付数据验证请求，调用第一摄像头获取待支付信息。
在接收到支付数据验证请求后，终端调用硬件设备中的第一摄像头，扫描二维码，并识别二维码中的待支付信息。在一种应用场景中，终端可以为一应用程序，且该应用程序安装于智能电子设备中，如后续实施例中为例进行说明的智能手机，假定智能手机中包含前后两个摄像头；优选的，当某一应用程序接收到支付数据验证请求后，调用智能手机的后置摄像头，扫描二维码，并获取待支付信息。作为本发明实施例的一种可选方案，智能手机会调用前置摄像头扫描二维码。
需要说明的是，所述前置摄像头一般为智能手机、平板电脑、便携式设备、随身携带设备等具有摄像头功能的电子设备中，与显示屏幕在同一侧的摄像头，所述后置摄像头一般为智能手机、平板电脑、便携式设备、随身可穿戴设备等具有摄像头功能的电子设备中，与显示屏幕相对一侧的摄像头。具体的，本发明实施例对摄像头的位置、型号等不做限定。
在具体实现过程中，第一摄像头可以为独立设置摄像头或者支付设备(智能手机)自身的摄像头。其中，所述独立设置摄像头必须与智能手机保持通信连接，本发明实施例对第一摄像头的位置、属性等不作限定。
步骤203：根据所述支付数据验证请求，自动启动第二摄像头，通过所述第二摄像头采集所述第一待验证生物特征，其中所述第一待验证生物特征可以是人脸图像或虹膜图像；
为了便捷、顺利的完成支付验证，本发明实施例采用四种方案，以确保顺利完成支付。第一种方案(步骤203所示的方法)：在进行支付数据验证时，优先使用人脸图像或虹膜图像进行验证。即在经过步骤202调用第一摄像头获取到待支付信息的同时，自动启动第二摄像头，通过第二摄像头采集第一待验证生物特征，例如人脸图像或虹膜图像。在本实施例中，在接收所述支付数据验证请求后，同时开启设备的第一和第二摄像头以同时执行获取待支付信息和采集第一待验证生物特征的步骤，可以保证支付更快地完成，提高用户体验。
在实际应用中，为了让第二摄像头快速的采集到人脸图像或虹膜图像，自动调用的第二摄像头通常为智能手机的前置摄像头。在一实施例中，在接收所述支付数据验证请求后，由软件层同时启动前置摄像头与后置摄像头采集数据，经由采集单元32中包含(但未绘示)的 多路输入和多路输出的图像信号处理器(Image Signal Processor,ISP)进行并行处理后发送至相应的处理电路进行处理。值得注意的是，第一摄像头采集待支付信息的过程无需用户干预，而第二摄像头采集第一待验证生物特征的预览图像需要显示在显示屏上供用户调整角度和距离使用，以提高采集第一待验证生物特征的正确性，因此在第一和第二摄像头同时启动的过程中，优选地，显示屏仅显示第二摄像头采集第一待验证生物特征的预览图像。在其它实施例中，也可以在显示屏上同时显示两个摄像头所采集的预览图像。
步骤204：确定所述第一待验证生物特征与预设匹配生物特征是否匹配。
若确定所述第一待验证生物特征与所述预设匹配生物特征不匹配，则执行步骤205；若确定所述第一待验证生物特征与所述预设匹配生物特征匹配，则执行步骤208。
步骤205：调用预设传感器，通过所述预设传感器采集第二待验证生物特征(指纹图像)。
当第一种方案验证第一待验证生物特征(人脸图像或虹膜图像)失败时，采用第二种方案进行验证，即本步骤执行的采集指纹图像。
需要说明的是，当人脸图像或虹膜图像验证失败时，在显示界面中显示采集指纹图像的提示信息，并执行自动采集指纹图像。在采集指纹图像时，调用智能手机中的预设传感器进行采集，优选地，该预设传感器设置在触发该支付数据验证请求的操作时用户能接触到的该智能手机的部分，例如该预设传感器为在智能手机背面(相对于显示屏幕而言)添加的传感器，如此一来可以在接收到支付数据验证请求后，自动触发获取待支付信息、采集并验证第一待验证生物特征、以及采集并由验证指纹的验证流程，无需用户再根据提示信息进行操作，提高了用户体验。具体的，本发明实施例对预设传感器所在位置不做限定。
步骤206：确定所述指纹图像与预设指纹特征是否匹配。
若确定所述指纹图像与预设指纹特征不匹配，则执行步骤207；若确定所述指纹图像与预设指纹特征匹配，则执行步骤208。
步骤207：输出显示支付密码输入框。
当第一种方案及第二种方案验证生物特征均失败时，采用本步骤执行的第三种验证方案，即通过显示支付密码输入框的方式完成验证。
在实际应用中，还可能会存在人脸图像、虹膜图像以及指纹图像，均与所述预设匹配生物特征不匹配的情况存在，当确定指纹图像与所述预设匹配生物特征不匹配时，则在智能手机显示界面中输出显示支付密码输入框，并接收智能手机用户输入的支付密码，智能手机将支付密码输入框内的内容(支付密码)发送，当验证成功后，执行步骤208。该种实现方式是图2所示方法的备选方案，当且仅当人脸图像或虹膜图像，以及指纹图像与预设匹配生物特征均不匹配时，才会显示支付密码输入框，以便完成支付。示例性的，如图3所示，图3 示出了本发明实施例提供的一种输出显示支付密码输入框的示意图，需要说明的是，图3仅为示例性的举例，本发明实施例对显示支付密码输入框的显示样式不作限定。
步骤208：将所述待支付信息发送至支付结算服务器，以便所述支付结算服务器进行结算。
进一步的，作为对上述图1所示方法的实现，本发明另一实施例还提供了一种支付数据的验证装置。该装置实施例与前述方法实施例对应，为便于阅读，本装置实施例不再对前述方法实施例中的细节内容进行逐一赘述，但应当明确，本实施例中的装置能够对应实现前述方法实施例中的全部内容。
本发明实施例提供一种支付数据的验证装置，如图4所示，所述装置包括：
接收单元31，用于接收支付数据验证请求；
采集单元32，用于当根据所述接收单元接收到的所述支付数据验证请求获取待支付信息时，自动采集第一待验证生物特征；
确定单元33，用于确定所述采集单元32采集的所述第一待验证生物特征与预设匹配生物特征是否匹配；
第一发送单元34，用于当所述确定单元33确定所述第一待验证生物特征与所述预设匹配生物特征匹配时，将所述待支付信息发送至支付结算服务器，以便所述支付结算服务器进行结算。
进一步的，如图5所示，所述确定单元33包括：
获取模块331，用于获取所述第一待验证生物特征以及所述预设匹配生物特征；
比对模块332，用于所述获取模块331获取的将所述第一待验证生物特征以及所述预设匹配生物特征进行比对；
第一确定模块333，用于当所述比对模块332确定所述第一待验证生物特征以及所述预设匹配生物特征的相似程度大于或者等于预设匹配阈值时，确定所述第一待验证生物特征与预设匹配生物特征匹配，当所述比对模块332确定所述第一待验证生物特征以及所述预设匹配生物特征的相似程度小于所述预设匹配阈值时，确定所述第一待验证生物特征与预设匹配生物特征不匹配。
进一步的，如图5所示，所述确定单元33包括：
发送模块334，用于将所述第一待验证生物特征发送至验证服务器，以便所述验证服务器根据所述预设匹配生物特征验证所述第一待验证生物特征的合法性，所述预设匹配生物特征存储于所述验证服务器中，为客户端用户采集并上传至所述验证服务器的生物特征；
接收模块335，用于在所述发送模块334将所述第一待验证生物特征发送至所述验证服 务器之后，接收所述验证服务器发送的针对所述第一待验证生物特征合法性的反馈信息；
第二确定模块336，用于根据所述接收模块接收到的所述反馈信息确定所述第一待验证生物特征与预设匹配生物特征是否匹配。
需要说明的是，当终端具有验证第一待验证生物特征功能时，终端可基于获取模块331、比对模块333及第一确定模块333执行第一待验证生物特征的验证；当终端不具有验证第一待验证生物特征功能时，终端可基于发送模块334、接收模块335及第二确定模块336执行第一待验证生物特征的验证；具体的，本发明实施例对验证方式不作限定。
进一步的，如图5所示，所述采集单元32包括：
调用模块321，用于根据所述支付数据验证请求，调用第一摄像头获取待支付信息；
启动模块322，用于根据所述支付数据验证请求，，自动启动第二摄像头；
采集模块323，用于通过所述启动模块322启动的所述第二摄像头采集所述第一待验证生物特征。
需要说明的是，本发明可实现调用第一摄像头获取到待支付信息的同时，自动启动第二摄像头，通过第二摄像头采集第一待验证生物特征，例如人脸图像或虹膜图像。在本实施例中，在接收所述支付数据验证请求后，同时开启设备的第一和第二摄像头以同时执行获取待支付信息和采集第一待验证生物特征的步骤，可以保证支付更快地完成，提高用户体验。在一实施例中，所述调用模块321和启动模块322可以集成在同一控制单元中。
进一步的，如图5所示，所述装置还包括：
调用单元35，用于当所述确定单元33确定所述第一待验证生物特征与所述预设匹配生物特征不匹配时，调用预设传感器；在一实施例中，所述调用单元35可以和集成在所述采集单元32内部。
所述采集单元32，还用于通过所述调用单元35调用的所述预设传感器采集第二待验证生物特征。
在实际应用中，还可能会存在第一待验证生物特征与所述预设匹配生物特征不匹配的情况存在或者第一和第二待验证生物特征与所述预设匹配生物特征均不匹配的情况，当所述确定单元33确定第一和/或第二待验证生物特征与所述预设匹配生物特征不匹配时，如图5所示，所述装置还包括：
输出单元36，用于当所述确定单元33确定所述第一待验证生物特征与所述预设匹配生物特征不匹配时，输出显示支付密码输入框；
第二发送单元37，用于将所述支付密码输入框输入的内容发送至支付结算服务器，以便所述支付结算服务器进行结算，需要说明的是，当且仅当第一和/或第二待验证生物特征与预 设匹配生物特征不匹配时，才会显示支付密码输入框，以便完成支付。
在上述实施例中，对各个实施例的描述都各有侧重，某个实施例中没有详述的部分，可以参见其他实施例的相关描述。
可以理解的是，上述方法及装置中的相关特征可以相互参考。另外，上述实施例中的“第一”、“第二”等是用于区分各实施例，而并不代表各实施例的优劣。
所属领域的技术人员可以清楚地了解到，为描述的方便和简洁，上述描述的系统，装置和单元的具体工作过程，可以参考前述方法实施例中的对应过程，在此不再赘述。
在此提供的算法和显示不与任何特定计算机、虚拟系统或者其它设备固有相关。各种通用系统也可以与基于在此的示教一起使用。根据上面的描述，构造这类系统所要求的结构是显而易见的。此外，本发明也不针对任何特定编程语言。应当明白，可以利用各种编程语言实现在此描述的本发明的内容，并且上面对特定语言所做的描述是为了披露本发明的最佳实施方式。
在此处所提供的说明书中，说明了大量具体细节。然而，能够理解，本发明的实施例可以在没有这些具体细节的情况下实践。在一些实例中，并未详细示出公知的方法、结构和技术，以便不模糊对本说明书的理解。
类似地，应当理解，为了精简本公开并帮助理解各个发明方面中的一个或多个，在上面对本发明的示例性实施例的描述中，本发明的各个特征有时被一起分组到单个实施例、图、或者对其的描述中。然而，并不应将该公开的方法解释成反映如下意图：即所要求保护的本发明要求比在每个权利要求中所明确记载的特征更多的特征。更确切地说，如下面的权利要求书所反映的那样，发明方面在于少于前面公开的单个实施例的所有特征。因此，遵循具体实施方式的权利要求书由此明确地并入该具体实施方式，其中每个权利要求本身都作为本发明的单独实施例。
本领域那些技术人员可以理解，可以对实施例中的设备中的模块进行自适应性地改变并且把它们设置在与该实施例不同的一个或多个设备中。可以把实施例中的模块或单元或组件组合成一个模块或单元或组件，以及此外可以把它们分成多个子模块或子单元或子组件。除了这样的特征和/或过程或者单元中的至少一些是相互排斥之外，可以采用任何组合对本说明书(包括伴随的权利要求、摘要和附图)中公开的所有特征以及如此公开的任何方法或者设备的所有过程或单元进行组合。除非另外明确陈述，本说明书(包括伴随的权利要求、摘要和附图)中公开的每个特征可以由提供相同、等同或相似目的的替代特征来代替。
此外，本领域的技术人员能够理解，尽管在此所述的一些实施例包括其它实施例中所包括的某些特征而不是其它特征，但是不同实施例的特征的组合意味着处于本发明的范围之内 并且形成不同的实施例。例如，在下面的权利要求书中，所要求保护的实施例的任意之一都可以以任意的组合方式来使用。
本发明的各个部件实施例可以以硬件实现，或者以在一个或者多个处理器上运行的软件模块实现，或者以它们的组合实现。本领域的技术人员应当理解，可以在实践中使用微处理器或者数字信号处理器(DSP)来实现根据本发明实施例的支付数据的验证方法及装置中的一些或者全部部件的一些或者全部功能。本发明还可以实现为用于执行这里所描述的方法的一部分或者全部的设备或者装置程序(例如，计算机程序和计算机程序产品)。这样的实现本发明的程序可以存储在计算机可读介质上，或者可以具有一个或者多个信号的形式。这样的信号可以从因特网网站上下载得到，或者在载体信号上提供，或者以任何其他形式提供。
应该注意的是上述实施例对本发明进行说明而不是对本发明进行限制，并且本领域技术人员在不脱离所附权利要求的范围的情况下可设计出替换实施例。在权利要求中，不应将位于括号之间的任何参考符号构造成对权利要求的限制。单词“包含”不排除存在未列在权利要求中的元件或步骤。位于元件之前的单词“一”或“一个”不排除存在多个这样的元件。本发明可以借助于包括有若干不同元件的硬件以及借助于适当编程的计算机来实现。在列举了若干装置的单元权利要求中，这些装置中的若干个可以是通过同一个硬件项来具体体现。单词第一、第二、以及第三等的使用不表示任何顺序。可将这些单词解释为名称。

Claims (12)

  1. 一种支付数据的验证方法，其特征在于，包括：
    接收支付数据验证请求；
    当根据所述支付数据验证请求获取待支付信息时，自动采集第一待验证生物特征；
    确定所述第一待验证生物特征与预设匹配生物特征是否匹配；
    若确定所述第一待验证生物特征与所述预设匹配生物特征匹配，则将所述待支付信息发送至支付结算服务器，以便所述支付结算服务器进行结算。
  2. 根据权利要求1所述的方法，其特征在于，所述确定所述第一待验证生物特征与预设匹配生物特征是否匹配包括：
    获取所述第一待验证生物特征以及所述预设匹配生物特征，并将所述第一待验证生物特征以及所述预设匹配生物特征进行比对；
    若所述第一待验证生物特征以及所述预设匹配生物特征的相似程度大于或者等于预设匹配阈值，则确定所述第一待验证生物特征与预设匹配生物特征匹配。
  3. 根据权利要求1所述的方法，其特征在于，所述确定所述第一待验证生物特征与预设匹配生物特征是否匹配包括：
    将所述第一待验证生物特征发送至验证服务器，以便所述验证服务器根据所述预设匹配生物特征验证所述第一待验证生物特征的合法性，所述预设匹配生物特征存储于所述验证服务器中，为客户端用户采集并上传至所述验证服务器的生物特征；
    接收所述验证服务器发送的针对所述第一待验证生物特征合法性的反馈信息，根据所述反馈信息确定所述第一待验证生物特征与预设匹配生物特征是否匹配。
  4. 根据权利要求1-3中任一项所述的方法，其特征在于，所述自动采集第一待验证生物特征包括：
    根据所述支付数据验证请求，调用第一摄像头获取所述待支付信息；
    根据所述支付数据验证请求，自动启动第二摄像头，通过所述第二摄像头采集所述第一待验证生物特征。
  5. 根据权利要求1所述的方法，其特征在于，更包括：
    若确定所述第一待验证生物特征与所述预设匹配生物特征不匹配，则调用预设传感器，通过所述预设传感器采集第二待验证生物特征。
  6. 根据权利要求1所述的方法，其特征在于，所述方法还包括：
    若确定所述第一待验证生物特征与所述预设匹配生物特征不匹配，则输出显示支付密码 输入框，并将所述支付密码输入框输入的内容发送至支付结算服务器，以便所述支付结算服务器进行结算。
  7. 一种支付数据的验证装置，其特征在于，包括：
    接收单元，用于接收支付数据验证请求；
    采集单元，用于当根据所述接收单元接收到的所述支付数据验证请求获取待支付信息时，自动采集第一待验证生物特征；
    确定单元，用于确定所述采集单元采集的所述第一待验证生物特征与预设匹配生物特征是否匹配；
    第一发送单元，用于当所述确定单元确定所述第一待验证生物特征与所述预设匹配生物特征匹配时，将所述待支付信息发送至支付结算服务器，以便所述支付结算服务器进行结算。
  8. 根据权利要求7所述的装置，其特征在于，所述确定单元包括：
    获取模块，用于获取所述第一待验证生物特征以及所述预设匹配生物特征；
    比对模块，用于所述获取模块获取的将所述第一待验证生物特征以及所述预设匹配生物特征进行比对；
    第一确定模块，用于当所述比对模块确定所述第一待验证生物特征以及所述预设匹配生物特征的相似程度大于或者等于预设匹配阈值时，确定所述第一待验证生物特征与预设匹配生物特征匹配。
  9. 根据权利要求7所述的装置，其特征在于，所述确定单元包括：
    发送模块，用于将所述第一待验证生物特征发送至验证服务器，以便所述验证服务器根据所述预设匹配生物特征验证所述第一待验证生物特征的合法性，所述预设匹配生物特征存储于验证服务器中，为客户端用户采集并上传至所述验证服务器的生物特征；
    接收模块，用于在所述发送模块将所述第一待验证生物特征发送至所述验证服务器之后，接收所述验证服务器发送的针对所述第一待验证生物特征合法性的反馈信息；
    第二确定模块，用于根据所述接收模块接收到的所述反馈信息确定所述第一待验证生物特征与预设匹配生物特征是否匹配。
  10. 根据权利要求7-9中任一项所述的装置，其特征在于，所述采集单元包括：
    调用模块，用于根据所述支付数据验证请求，调用第一摄像头获取所述待支付信息；
    启动模块，用于根据所述支付数据验证请求，自动启动第二摄像头；
    采集模块，用于通过所述启动模块启动的所述第二摄像头采集所述第一待验证生物特征。
  11. 根据权利要求10所述的装置，其特征在于，所述装置还包括：
    调用单元，用于当所述确定单元确定所述第一待验证生物特征与所述预设匹配生物特征 不匹配时，调用预设传感器；
    所述采集单元，还用于通过所述调用单元调用的所述预设传感器采集第二待验证生物特征。
  12. 根据权利要求10所述的装置，其特征在于，所述装置还包括：
    输出单元，用于当所述确定单元确定所述第一待验证生物特征与所述预设匹配生物特征不匹配时，输出显示支付密码输入框；第二发送单元，用于将所述支付密码输入框输入的内容发送至支付结算服务器，以便所述支付结算服务器进行结算。
PCT/CN2017/102939 2017-06-21 2017-09-22 支付数据的验证方法及装置 WO2018233110A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201710476498.2 2017-06-21
CN201710476498.2A CN107274188A (zh) 2017-06-21 2017-06-21 支付数据的验证方法及装置

Publications (1)

Publication Number Publication Date
WO2018233110A1 true WO2018233110A1 (zh) 2018-12-27

Family

ID=60069000

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/102939 WO2018233110A1 (zh) 2017-06-21 2017-09-22 支付数据的验证方法及装置

Country Status (2)

Country Link
CN (1) CN107274188A (zh)
WO (1) WO2018233110A1 (zh)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108563996A (zh) * 2018-03-16 2018-09-21 北京缤歌网络科技有限公司 用于自动售货机的身份认证装置及其自动售货机
CN108764914A (zh) * 2018-04-24 2018-11-06 Oppo广东移动通信有限公司 支付方法、装置、移动终端及存储介质
CN111698195B (zh) * 2019-03-15 2022-12-06 北京嘀嘀无限科技发展有限公司 信息交互方法及装置
CN111753288B (zh) * 2020-06-28 2023-08-08 中国银行股份有限公司 应用程序功能设置方法、装置、电子设备及存储介质
CN112036888A (zh) * 2020-08-05 2020-12-04 北京文思海辉金信软件有限公司 业务操作执行方法、装置、计算机设备和存储介质
CN112101948A (zh) * 2020-09-14 2020-12-18 北京嘀嘀无限科技发展有限公司 支付验证方法、装置、系统、车载设备及服务器

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104184589A (zh) * 2014-08-26 2014-12-03 重庆邮电大学 一种身份认证方法、终端设备，及系统
CN106209766A (zh) * 2016-06-16 2016-12-07 山西特信环宇信息技术有限公司 一种手机的双向应用平台及方法
CN106296185A (zh) * 2015-05-12 2017-01-04 湖南人文科技学院 一种基于生物特征复合旁证的高安全性移动支付终端

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103927658A (zh) * 2014-04-08 2014-07-16 深圳市中兴移动通信有限公司 移动支付方法和移动支付终端
CN106296197A (zh) * 2015-06-25 2017-01-04 深圳市中兴微电子技术有限公司 一种支付的方法、设备和系统
CN105631283B (zh) * 2015-07-31 2019-03-26 宇龙计算机通信科技(深圳)有限公司 一种基于生物特征自学习方法及移动终端
CN106709729A (zh) * 2016-12-30 2017-05-24 维沃移动通信有限公司 一种支付方法及移动终端

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104184589A (zh) * 2014-08-26 2014-12-03 重庆邮电大学 一种身份认证方法、终端设备，及系统
CN106296185A (zh) * 2015-05-12 2017-01-04 湖南人文科技学院 一种基于生物特征复合旁证的高安全性移动支付终端
CN106209766A (zh) * 2016-06-16 2016-12-07 山西特信环宇信息技术有限公司 一种手机的双向应用平台及方法

Also Published As

Publication number Publication date
CN107274188A (zh) 2017-10-20

Similar Documents

Publication Publication Date Title
WO2018233110A1 (zh) 支付数据的验证方法及装置
US11823146B2 (en) Systems and methods for translating a gesture to initiate a financial transaction
CN107665426B (zh) 使用生物特征认证进行支付的方法和电子设备
TWI706264B (zh) 證件的驗證方法、裝置、電子設備和儲存介質
US20190050866A1 (en) Image analysis for user authentication
CN105100108B (zh) 一种基于人脸识别的登录认证方法、装置及系统
JP7006584B2 (ja) 生体データ処理装置、生体データ処理システム、生体データ処理方法、生体データ処理プログラム、生体データ処理プログラムを記憶する記憶媒体
US10579783B1 (en) Identity authentication verification
JP2017530457A (ja) アイデンティティ認証方法ならびに装置、端末及びサーバ
WO2017107421A1 (zh) 支付方法和装置
CN107430654A (zh) 切换生物特征认证
WO2017114289A1 (zh) 一种银行卡信息认证方法、客户端及银行系统
US20180374101A1 (en) Facial biometrics card emulation for in-store payment authorization
JP6359173B2 (ja) ユーザ属性値転送方法および端末
US20160156473A1 (en) Token Authentication for Touch Sensitive Display Devices
CN105187412B (zh) 一种基于手势识别的登录认证方法、装置及系统
TW201828152A (zh) 特徵圖像的獲取方法及獲取裝置、使用者認證方法
US9614838B1 (en) Taking a picture of a one-time use passcode and using the picture to authenticate
WO2015103970A1 (en) Method, apparatus and system for authenticating user
US11126705B2 (en) Systems and methods for user authentication using word-gesture pairs
TWM574283U (zh) 利用活體及人臉辨識進行無卡交易開通的交易系統及自動櫃員機
US20230105850A1 (en) Systems and methods for conducting remote user authentication
US11755118B2 (en) Input commands via visual cues
CN113826135B (zh) 使用话音识别进行非接触式认证的系统、方法和计算机系统
WO2015065246A1 (ru) Устройство и способ для создания графического кода

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17914139

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC , EPO FORM 1205A DATED 08.04.2020.

122 Ep: pct application non-entry in european phase

Ref document number: 17914139

Country of ref document: EP

Kind code of ref document: A1