WO2019056343A1

WO2019056343A1 - System and method for avoiding internet and mobile payment fraud

Info

Publication number: WO2019056343A1
Application number: PCT/CN2017/103100
Authority: WO
Inventors: 蒋小平
Original assignee: 深圳传音通讯有限公司
Priority date: 2017-09-25
Filing date: 2017-09-25
Publication date: 2019-03-28

Abstract

Disclosed in the present invention are a system and method for avoiding Internet and mobile payment fraud. The system comprises a server terminal and a mobile terminal. A blacklist of target numbers or network addresses to be used upon receiving a verification code SMS message is saved at the server terminal, and is regularly sent to the mobile terminal. Upon receiving an SMS message or a data packet containing a payment verification code, the mobile terminal performs comparison on a target number or network address, and if the same is in the blacklist, then the terminal directly blocks the same, otherwise the terminal prompts a user to perform selection. If the user selects to block the same, then the target number and network address are uploaded to the server terminal. By means of data interaction updates between the server terminal and the mobile terminal, the present invention enables blacklists on both sides to remain synchronized, and overcomes the problems of passive protection and lack of remedial measures for stolen account and password information in the prior art, thus significantly improving security of network payment, and protecting funds in network payment accounts of users.

Description

System and method for preventing the risk of stolen Internet and mobile payment funds

Technical field

The present invention relates to the security field of networks and mobile internet, and in particular to a system and method for preventing the risk of theft of Internet and mobile payment funds.

Background technique

With the continuous development of the network and mobile Internet, the scale of Internet and mobile payment is getting bigger and bigger, accompanied by the theft of online banking and mobile banking accounts, and the risks related to mobile payment security and network environment security are gradually enlarged. In 2016 alone, Internet payments and mobile payments reached RMB 19 trillion and RMB 38 trillion, respectively. At the same time, however, crimes related to the Internet and mobile payments have continued to rise. Therefore, how to effectively solve the security problem of network payment is imminent.

At present, security threats in the field of Internet and mobile payment mainly include the following methods: man-in-the-middle attacks, denial of service attacks, phishing, software secondary packaging, and malware. In order to cope with the security challenges faced by mobile payment development, there are currently five technical solutions.

1. Client and server mutual authentication

Two-way authentication using HTTPS protocol to prevent server redirection.

2. Client and server mutual authentication

Calculate the MAC value of the message, prevent data tampering, digitally sign the data, and ensure the security of the transmission process.

3. Client input data security

Instantly erase sensitive data with a dynamic password soft keyboard.

4. Client integrity

By confusing the code, preventing decompilation, preventing secondary packaging, and hiding the key data.

5. Client and SE interaction security

By setting the synchronization access rule, the mobile operating system can authenticate the client that accesses the SE, prevent malicious programs from accessing the SE, and ensure SE data security.

For example, the invention of the publication number CN106920094A "in the two-way authentication with visible light and bar code" The line payment device discloses an online payment device with visible light and barcode two-way authentication, the online payment device comprises: an electronic wallet, a recharge consumer machine and a server, the electronic wallet comprises a visible light emitting module, a barcode scanning module, a wallet control module, and an input. Module, display module, data interface; recharge consumer machine includes visible light receiving module, bar code display module, read/write control module, keyboard module, display, communication module; server grants permission to recharge consumer machine and electronic wallet, one payment is paid by the payee The recharge consumer machine, the payer e-wallet and the server are jointly completed; the data interaction between the recharge consumer machine and the e-wallet is integrated in the visible light and the bar code, and the information verification of the transaction process is mainly completed by the server.

The online payment device is capable of providing two online payment methods: the payment is initiated by the payee of the refill consumer and the payment is initiated by the payer of the electronic wallet.

In the online payment process, receiving data sent by the recharge consumer from the electronic wallet and receiving data sent by the electronic wallet from the recharge consumer may be unrecognizable during the sending and receiving process, so in the payment process, for the unrecognized The data, as well as the unrecognized situation due to the inability to receive the data, the device will unilaterally end the payment process after a set waiting time has expired.

In the online payment process, the data sent from the electronic wallet to the recharge consumer, and the data sent from the recharge consumer to the electronic wallet may have the possibility of data loss, tampering, and forgery during the sending and receiving process, and thus payment In the process, for each key data received, it is assumed that the currently received data is different from the data generated or received in the previous steps of the payment process, and the comparison verification is required, thereby ensuring the authenticity and integrity of the data to be sent and received. .

For another example, the invention disclosed in CN106209383A, "A Method and Apparatus for Mobile Payment Security Authentication" discloses a method for performing mobile payment security authentication by encryption of a digital certificate, the disclosed method comprising the following steps:

1 The user installs a secure payment APP in the mobile terminal, and obtains a pre-planted certificate KEY ID from the security chip in the mobile terminal through the APP;

2 The secure payment APP sends the KEY ID and the user's name, ID type and ID number to the pre-planted front-end machine for binding, and the pre-planted front-end machine sends the bound information to the pre-planted server for saving. The server server returns the successful binding result to the secure payment APP;

3 When the user sends a payment request to the secure payment APP of the mobile terminal, the secure payment APP prompts to input a PIN code, and after the user inputs the PIN code, the secure payment APP will send a transaction message. Send to the security chip;

4 The security chip verifies the PIN code and judges whether it passes the verification. If it passes, the transaction message is digitally signed, and the signature value is sent to the signature verification server for verification. If the transaction is confirmed, the payment is successful. Return the payment result to the secure payment APP, otherwise no payment will be made.

In step 4, the security chip verifies the PIN code and further includes the following specific content.

a) temporarily generating an RSA key pair; the pair includes a private key and a public key;

b) storing the private key in the security chip, and assembling the public key and the transaction message into a signature message;

c) using a preset algorithm to calculate a fixed number of message digest values for the signed message, and encrypting the fixed number of message digest values with a private key to obtain a digital signature;

d) sending the digital signature and the signature message to the signature verification server, the signature verification server calculates the first message digest value for the signature message by using a preset algorithm, and then decrypts the digital signature with the public key to obtain the second report. Abstract value

e) The security chip compares the first message digest value with the second message digest value and determines whether they are equal, and if so, determines that the transaction message is from the user; otherwise, determines that the transaction message is not from the user.

The prior art solutions listed above all have a certain degree of drawback. First of all, the prior art solutions are basically passive defenses, that is, based only on the security of the user input or access to the server, such as the past anti-virus software, etc., basically passive, and no active prevention measures; secondly; The existing technology basically does not consider how the account and password information is stolen, how to save, means that once the account and password are hacked, the user will be helpless and unable to take remedial measures.

In short, there are loopholes in the use of existing technologies to prevent the risk of stolen funds in network and mobile Internet payments, and these vulnerabilities are often exploited by hackers, thus becoming a security risk.

Disclosure of invention

The object of the present invention is to provide a system and method for preventing the risk of theft of Internet and mobile payment funds, by periodically supporting the data of the mobile device software through the network server, and the target number of the mobile device according to the user's selection and intercepting. Or the network address is synchronized to the web server, active It intercepts illegal email transfer requests such as fraudulent SMS and phishing websites, thereby effectively improving payment security in the mobile Internet environment and providing a good payment environment for end users.

To achieve the above object, the present invention provides a system for preventing the risk of theft of Internet and mobile payment funds, comprising: a server M01 and a mobile terminal M02. The server M01 is configured to store a target number or a network address blacklist that accepts the verification code short message; periodically send the blacklist to the mobile terminal M02, and receive the target number or network address updated from the mobile terminal M02. The mobile terminal M02 receives the target number or the blacklist of the network address, and compares when receiving the short message or the data packet containing the payment verification code. If the target number or the network address already exists in the blacklist, the interception is directly performed; if the target number or If the network address does not exist in the blacklist, the user is prompted to make a selection. When the user selects the interception, the user intercepts and updates the intercepted target number or network address to the server M01. There is a network connection between the server M01 and the mobile M02.

Further, the server M01 includes: a database module M11, which stores a target number or a blacklist of network addresses; a first communication module M12 of the server has a data channel connection with the database module M11, and periodically takes out a target number or network from the database module M11. The address blacklist is sent to the mobile terminal; and the second communication module M13 on the server side has a data channel connection with the database module M11, and receives the target number or network address uploaded by the mobile terminal and intercepted by the user, and synchronizes Go to the database module M11.

Further, the mobile terminal M02 includes: a mobile terminal first communication module M21, which periodically receives a target number or a network address blacklist from the server end; and the mobile terminal second communication module M22 synchronizes the target number or network address intercepted by the user to the server. The discriminating module M23 has a data channel connection with the first communication module M21 of the mobile terminal, receives the target number or the blacklist of the network address, compares with the received short message or data packet containing the payment verification code, and determines the interception. If the interception cannot be judged, a prompt box is popped up for the user to select, and the user chooses to continue to pay or intercept; the intercepting module M24 is connected with the discriminating module M23, and when the judgment is intercepted, the target number or network address of the payment is intercepted, and the payment module M25 is connected to the discriminating module M23, and when the payment is decided, the short message or the data packet is sent to the target number or the network address.

Further, the discriminating module M23 in the mobile terminal M02 includes the following sub-module: a blacklist database sub-module M241, which stores a blacklist of various expressions including a hacker number or a phishing website, such as an IP address, a host name, and a MAC address; The logical combination submodule M242 is connected to the blacklist database submodule M241, and the number, IP address, host name, MAC address, etc. in the blacklist are Multiple expressions are used to logically combine the keywords, and compare with the received short message or data packet containing the payment verification code, and judge the interception; the user interface sub-module M243, when the logical combination sub-module M242 can not decide to intercept, pop-up prompt The box is for the user to choose whether to continue to pay and then receive the user's instructions.

The present invention also provides a method for preventing the risk of theft of Internet and mobile payment funds, based on the aforementioned system for preventing the risk of theft of Internet and mobile payment funds, comprising the following steps:

S1, the server periodically sends a target number or a blacklist of network addresses to the mobile terminal, and the mobile terminal receives the blacklist database after being received by the mobile terminal;

S2, after the user online banking or the payment account is stolen, the mobile terminal receives the network payment request, and receives the short message or the data packet containing the verification code;

S3, the mobile terminal compares and identifies the target number or the network address,

If the target number or network address is already in the blacklist database, intercept it directly.

If the target number or the network address is not in the blacklist database, proceed to S4;

S4, the mobile terminal pops up a prompt box for the user to select whether to continue the payment, and a dialog box for popping up the risk prompt is displayed.

If the user chooses to continue to pay, send a text message or data packet to the target number or network address.

If the user chooses to intercept, continue to execute S5;

S5, the mobile terminal intercepts the payment, and simultaneously uploads the target number or network address intercepted by the user to the server, and returns to execute S1.

Further, S3 includes the following steps:

S31. The mobile terminal extracts a target number or a network address from the received short message or data packet containing the verification code.

S32, the mobile terminal extracts data from the internally stored blacklist database and performs logical combination and comparison of keywords;

S33. When the target number or the network address meets the logical combination of the keywords extracted from the blacklist database, the interception is directly performed.

Further, S5 includes the following steps:

S51. The mobile terminal intercepts the payment;

S52. The mobile terminal uploads the intercepted target number or network address to the server.

S53, the server side synchronizes the received target number or network address to the server side. According to the list of Kuran;

S54. The server side transmits the updated database blacklist to all users' mobile terminals.

Preferably, in step S53, when the server receives the intercepted target number or network address only from a mobile end of the user, the target number or the network address is not immediately updated to the database blacklist; When the mobile end of the user reports the same blocked target number or network address, it is updated to the database blacklist.

In summary, the system and method for preventing the risk of theft of Internet and mobile payment funds according to the present invention have the following advantages: compared with the prior art, the data server is periodically provided with data updates to the user's mobile terminal, and the user is provided. Based on the user's active judgment, the mobile terminal actively intercepts the verification code of illegal payment such as fraudulent SMS, phishing website, and further synchronous feedback to the network server, overcoming the prior art passive defense, after the account and password information is stolen The lack of rescue measures and other issues have greatly improved the security of online payment, thus protecting the security of users' online payment accounts.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the prior art description will be briefly described below. It is obvious that the drawings in the following description are Some of the embodiments of the invention may be obtained by those of ordinary skill in the art in view of the drawings without departing from the scope of the invention.

1 is a schematic diagram of a network architecture of a system for preventing theft of Internet and mobile payment funds in the present invention;

2 is a schematic structural diagram of a server end in a system for preventing theft of Internet and mobile payment funds in the present invention;

3 is a schematic structural diagram of a mobile terminal in a system for preventing theft of Internet and mobile payment funds in the present invention;

4 is a schematic structural diagram of a discriminating module in a mobile terminal according to the present invention;

FIG. 5 is a schematic flowchart of a method for preventing the risk of theft of Internet and mobile payment funds in the present invention; FIG.

6 is a schematic flowchart of a method for determining, by a mobile terminal, whether to intercept a target number or a network address according to the present invention;

FIG. 7 is a schematic flowchart of a method for data interaction between a mobile terminal and a server after intercepting a target number or a network address according to the present invention.

The best way to implement the invention

The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

It should be noted that, in this context, relational terms such as "first", "second", "third", etc., if present, are merely used to distinguish one entity or operation from another entity or operation, and not necessarily It is required or implied that there is any such actual relationship or order between these entities or operations. It is to be understood that the terms so used are interchangeable, as appropriate, such that the embodiments of the invention described herein can be implemented, for example, in a sequence other than those illustrated or described herein. In addition, the terms "including", "comprising", "having", or any other variants are intended to encompass a non-exclusive inclusion, such that a process, method, article, or terminal device that includes a plurality of elements includes not only those elements but also Includes other elements not explicitly listed, or elements that are inherent to such a process, method, item, or terminal device. An element defined by the phrase "including" or "comprising" does not exclude the presence of additional elements in the process, method, article or terminal device including the element. In addition, in this document, “greater than”, “less than”, “exceeded”, etc. are understood as not including the number; “above”, “below”, “inside”, etc. are understood to include the number.

The technical solutions of the present invention will be described in detail below with reference to FIGS. 1 to 7 in a specific embodiment. The following specific embodiments may be combined with each other, and the same or similar concepts or processes may not be described in some embodiments.

As shown in FIG. 1 , it is a schematic diagram of a network architecture for preventing a risk of theft of Internet and mobile payment funds. The system can be deployed in various current mainstream Internet and mobile payment application scenarios, such as online banking payment, mobile wallet, mobile payment platform, telecom carrier charging, WeChat payment, Alipay payment, merchant self-built payment platform and the like. The system includes: server M01, which is used to store the target number or network address blacklist that accepts the verification code SMS, and periodically Providing data update support for the mobile device side; the mobile terminal M02 is configured to receive data periodically provided from the server, and determine whether to perform payment according to the blacklist database and the user's active selection. If not, the verification code is sent. The SMS or data packet is intercepted, and the relevant target number and network address are uploaded to the server M01.

As shown in FIG. 2, it is a schematic diagram of a structure of a server end in a system for preventing theft of payment funds in a network and a mobile internet provided by the present invention. The server includes: a database module M11, storing a destination number of the received verification code short message or a blacklist of the network address; the first communication module M12 of the server periodically takes out the updated data data from the database module M11 and sends the updated data data to the mobile device. The server-side second communication module M13 receives data newly uploaded from the mobile device to the server, and synchronizes the target number or the URL to the blacklist. The database module M11 has a data channel connection with the server first communication module M12 and the server second communication module M13, and interacts with the database data such as the verification code short message or the data packet destination number or the network address blacklist on the data channel. There are a variety of technologies for realizing data transmission between the server-side first communication module M12 and the server-side second communication module M13 and the mobile terminal M02, such as through a GPRS/3G/4G network, or a wireless WIFI/WAPI local area network, etc. I won't go into details here.

As shown in FIG. 3, it is a schematic structural diagram of a mobile client in a system for preventing theft of Internet and mobile payment funds. The mobile client includes: a mobile communication first communication module M21, which periodically receives a verification code short message number or a blacklist of a network address from the server end; the mobile terminal second communication module M22 synchronizes the target number or the website address to the server end; The module M23, according to the received blacklist of the verification code short message or the blacklist of the network address, determines whether the target payment number or the website address is intercepted after the keyword logical combination; if the internal blacklist and its keyword logical combination cannot be If the target number or the website address is intercepted, a prompt box is displayed for the user to select, and a risk prompt is prompted, and the user selects to continue to pay or intercept; the intercepting module M24 intercepts the target number or the website address of the payment, and if the user selects the interception, Then, the target number or web address is transmitted to the mobile second communication module M22; the payment module M25 sends a short message or data packet to the target number or the destination website.

The mobile terminal first communication module M21 and the discriminating module M23 are connected by the data channel, and transmit the number of the verification code short message or the server address blacklist to the discriminating module M23; the intercepting module M24 and the mobile terminal second communication module M22 are connected by the data channel, The intercepted target number or network address is transmitted to the mobile terminal second communication module M22, and the discriminating module M23 and the intercepting module M24 and the payment respectively The module M25 is connected, and the intercepting module M24 is controlled to intercept or the payment module performs a payment action.

Further, the mobile terminal discriminating module may specifically be an APP software program code inside the mobile terminal in the actual product, or may be integrated in a security chip in the client.

As shown in FIG. 4, it is a schematic structural diagram of a discriminating module of a mobile terminal according to the present invention, which includes a blacklist database submodule M241, which internally stores a hacker number or a network address of a phishing website. Further, the network address includes an IP address, a host name, and a MAC address. The expression of a plurality of network addresses, such as an address; the logical combination sub-module M242 performs logical combination and judgment according to the number or network address in the blacklist database and the own keyword, and if the target number or the target URL is already in the blacklist database, the judgment is performed. Intercept, otherwise go to the user interface sub-module processing; user interface sub-module M243, pop-up prompt box for the user to choose whether to make payment, and then receive the user's instruction, when the actual user uses, the user interface sub-module pops up the payment prompt box At the same time, a risk prompt box is popped up, prompting the user to carefully perform the payment behavior.

First, introduce the application scenarios of mobile payment in the network and mobile Internet. At present, with the development of mobile communication technology, mobile payment has become a new payment method. When a consumer makes a payment by mobile phone, the payment processing is performed in a remote server, and the payment information needs to be transmitted to the mobile network. The payment process can only be completed in the remote server. For example, we often say "mobile wallet", the user needs to bind the mobile phone number and the bank card in advance. When purchasing the goods, the payment information can be transmitted to the background server of the payment platform by means of short message, WAP or client, and the payment platform. The corresponding fee will be deducted from the bank account so that the payment is completed. There are also some mobile payments that do not require a bank account. For example, you can pay directly with your mobile phone account, and the amount paid is directly deducted from your mobile phone account. Usually in the process of mobile payment to the last payment step, the server will send a verification code to the user's registered mobile phone, and this verification code becomes the last barrier to protect the security of the user's funds. If the user's account, the password is Theft, protection of the security of the verification code, has achieved the purpose of protecting the security of the account funds.

Therefore, the inventor has devised from the revelation of the protection verification code that the working mode of the system for preventing theft of payment funds in the network and the mobile internet provided by the invention is designed. The following is a detailed introduction.

It is assumed that in the foregoing mobile payment application scenario, the user online banking or the payment account is stolen, the hacking software or the malicious website generates a payment request to the server, and the mobile terminal M02 of the user receives the short message or the data packet containing the verification code.

In a first preferred embodiment of the present invention, the discriminating module M23 of the mobile terminal M02 is for a short message or Comparing the data packets, if the target number or destination URL is from an illegal source such as a hacker software with multiple cases or a phishing website, then the target number or destination URL already exists in the blacklist database submodule M241, and the interception is directly performed. This protects the security of user account funds.

In the second preferred embodiment of the present invention, the discriminating module M23 of the mobile terminal M02 compares the short message or the data packet, and the target number or the web address does not exist in the blacklist database submodule M241, and the user interface submodule M243 pops up. The prompt box is for the user to select, and a risk prompt is made. If the user chooses to continue to pay, the payment module M25 of the mobile terminal M02 sends a short message or a data packet to the target number or the target website.

In the third preferred embodiment of the present invention, the discriminating module M23 of the mobile terminal M02 compares the short message or the data packet, and the target number or the web address does not exist in the blacklist database submodule M241, and the user interface submodule M243 pops up. The prompt box is for the user to select and make a risk prompt, and the user chooses to intercept the payment, and the intercepting module M24 of the mobile terminal M02 intercepts the payment.

In the fourth preferred embodiment of the present invention, the discriminating module M23 of the mobile terminal M02 compares the short message or the data packet, and the target number or the web address does not exist in the blacklist database submodule M241, and the user interface submodule M243 pops up. The prompt box is for the user to select and make a risk prompt. If the user chooses to intercept the payment, the intercepting module M24 of the mobile terminal M2 intercepts the payment, and the intercepting module M24 transmits the target number or the website address to the mobile communication second communication module M22, and synchronizes Go to the server side M01.

In a fifth preferred embodiment of the present invention, the second communication module M13 of the server M01 receives the intercepted target number or web address from the mobile terminal, stores the target number or the web address in the database module M11, and then the server side A communication module M12 periodically fetches the updated target number or blacklist of network addresses from the database module M11 and transmits them to all user mobile devices. It should be noted that, in order to avoid misoperation, in the actual application, the database module M11 of the server M01 also formulates rules for filtering the target number or network address reported by the mobile terminal, for example, when multiple mobile terminals report The target number or network address is added to the blacklist by the same target number or network address. This avoids payment due to normal users due to a user's misoperation.

As shown in FIG. 5, the present invention also provides a method for preventing the risk of theft of Internet and mobile payment funds, which is implemented based on the aforementioned system for preventing theft of Internet and mobile payment funds, and is applicable to a smart phone, or a tablet computer, or an intelligent device. Wearables include smart watches or smart bracelets, and networks The server consists of the following steps:

S1, the network server periodically sends a blacklist of the target number or the network address to the user terminal, and the mobile terminal receives the updated target number or the blacklist of the network address from the network, and saves the blacklist to the internal blacklist database;

S2, after the user online banking or the payment account is stolen, the mobile terminal receives the network payment request and receives the verification code;

S3, the mobile terminal compares the target number or the network address, and makes a judgment,

If the user chooses to intercept, continue to execute S5;

S5, the mobile terminal intercepts the payment, and simultaneously uploads the target number or the network address to the server, and returns to execute S1.

As shown in FIG. 6, further, S3 specifically includes the following steps:

S31. The mobile terminal extracts a target number or a network address from the received verification code short message or data packet.

S32, the mobile terminal extracts data from the internally stored blacklist database, and performs logical combination according to the keyword;

S33. When the target number or the network address meets a logical combination of data extracted from the blacklist database, the interception is directly performed.

As shown in FIG. 7, further, S5 specifically includes the following steps:

S51. The mobile terminal intercepts the payment;

S53. The server synchronizes the received target number or network address to the database blacklist of the server.

In a preferred embodiment of the present invention, when the server receives the intercepted target number or network address only from the mobile end of a user, the target number or network address is not immediately Update to the database blacklist in the server side; when the mobile terminal from multiple users reports the same destination number or network address, it is updated to the database blacklist.

In another preferred embodiment of the present invention, the data is periodically exchanged between the server and the mobile through a GPRS/3G/4G network or a wireless WIFI/WAPI local area network.

In summary, the method for preventing theft of Internet and mobile payment funds according to the present invention is implemented based on mutual data interaction between the server M01 and the mobile terminal M02, and is already clear from the hacker software or The target number or network address of the phishing website is directly intercepted according to the blacklist periodically sent by the server M01 to the mobile terminal M02. For the target number or network address that cannot be determined, the user decides whether to continue to pay; If the user intercepts the payment from a certain target number or network address, the mobile terminal M02 records the user's interception selection and synchronizes to the server M01, and the server M01 updates its blacklist database, so the blacklist Updates are dynamic and determined by the user's active behavior.

The system and method for preventing the risk of theft of Internet and mobile payment funds provided by the present invention have the following advantages: compared with the prior art, the data server is periodically provided with data update to the user mobile terminal, and the user mobile terminal is based on the user's Actively judge, actively intercept the verification code of fraudulent SMS, phishing website and other illegal payment, and further feedback to the network server, overcome the prior art passive defense, lack of rescue measures after the account and password information is stolen The security of network payment is greatly improved, thereby protecting the security of the funds used by the user to use the online payment account.

Those skilled in the art will appreciate that the various embodiments described above can be provided as a method, apparatus, or computer program product. These embodiments may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware aspects. All or part of the steps involved in the foregoing embodiments may be implemented by a program to instruct related hardware, and the program may be stored in a storage medium readable by a computer device for performing the methods of the foregoing embodiments. All or part of the steps.

The above embodiments are described with reference to flowcharts and/or block diagrams of methods, apparatus (systems), and computer program products according to the embodiments. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a computer device to generate a machine such that instructions executed by a processor of the computer device are generated for implementation in flowchart one Means of a process or a plurality of processes and/or block diagrams of a function specified in a block or blocks.

Although the present invention has been described in detail by the preferred embodiments thereof, it should be understood that the foregoing description should not be construed as limiting. Various modifications and alterations of the present invention will be apparent to those skilled in the art. Therefore, the scope of the invention should be defined by the appended claims.

Claims

A system for preventing the risk of theft of Internet and mobile payment funds, comprising: a server end (M01) and a mobile end (M02), wherein

The server (M01) stores a target number or a network address blacklist that accepts the verification code short message, and periodically sends the target number or the network address blacklist to the mobile terminal (M02), and receives the mobile terminal (M02). ) the updated target number or network address;

The mobile terminal (M02) receives the target number or the network address blacklist; when the mobile terminal (M02) receives the short message or the data packet containing the payment verification code, the comparison is performed.

If the target number or network address already exists in the target number or the blacklist of the network address, interception is performed directly.

If the target number or the network address does not exist in the target number or the network address blacklist, the user is prompted to make a selection, when the user selects the interception, the interception is performed, and the target number or network address is updated to the Server side (M01);

There is a network connection between the server end (M01) and the mobile end (M02).
The system for preventing the risk of theft of Internet and mobile payment funds according to claim 1, wherein said server end (M01) comprises:

a database module (M11) storing the target number or a blacklist of network addresses;

The first communication module (M12) of the server has a data channel connection with the database module (M11), and the target number or the blacklist of the network address is periodically taken out from the database module (M11). The mobile terminal (M02) is sent;

The server-side second communication module (M13) has a data channel connection with the database module (M11), and receives a target number or a network address that is uploaded by the mobile terminal (M02) and intercepted by the user. And synchronized to the database module (M11).
A system for preventing the risk of theft of Internet and mobile payment funds as claimed in claim 2, characterized in that

The server-side first communication module (M12) sends the target number or network address blacklist to the mobile terminal (M02), and the server-side second communication module (M13) receives the Target number or network uploaded by the mobile terminal (M02) and blocked by the user The address is communicated via a GPRS/3G/4G network or a wireless WIFI/WAPI local area network.
The system for preventing the risk of theft of Internet and mobile payment funds according to claim 1, wherein said mobile terminal (M02) comprises:

The mobile terminal first communication module (M21) periodically receives the target number or network address blacklist from the server end (M01);

The mobile second communication module (M22) synchronizes the target number or network address intercepted by the user to the server end (M01);

a discriminating module (M23) having a data channel connection with the mobile terminal first communication module (M21), receiving the target number or network sent by the mobile terminal first communication module (M21) The address blacklist is compared with the received short message or data packet containing the payment verification code, and the judgment is intercepted. If the interception cannot be decided, a prompt box is displayed for the user to select, and the user chooses to continue to pay or intercept;

The intercepting module (M24) is connected to the discriminating module (M23), and when the discriminating module (M23) decides to intercept, intercepts the target number or network address of the payment, and, with the mobile terminal There is a data channel connection between the two communication modules (M22), and the target number or network address selected by the user is transmitted to the mobile terminal second communication module (M22);

The payment module (M25) is connected to the discriminating module (M23), and when the discriminating module (M23) decides to pay, sends a short message or a data packet to a target number or a network address.
A system for preventing the risk of theft of Internet and mobile payment funds according to claim 4, wherein said discriminating module (M23) comprises

The blacklist database sub-module (M241) stores the target number or network address blacklist including a hacker number or an IP address, a host name, a MAC address, and the like of the phishing website;

The logical combination sub-module (M242) is connected to the blacklist database sub-module (M241), and logically combines various expressions such as a number, an IP address, a host name, and a MAC address in the blacklist, and Comparing with the short message or data packet received by the mobile terminal (M02) containing the payment verification code, and determining the interception;

The user interface sub-module (M243), when the logical combination sub-module (M242) cannot determine the interception, pops up a prompt box for the user to select whether to continue to pay, and then receives the user's instruction;
A system for preventing the risk of theft of Internet and mobile payment funds as claimed in claim 4 The discriminating module (M23) may specifically be an APP software program inside the mobile terminal (M02), or may be integrated in a security chip in the mobile terminal (M02).
A method for preventing the risk of theft of Internet and mobile payment funds, characterized by using the system for preventing the risk of theft of Internet and mobile payment funds according to any one of claims 1 to 6, comprising the following steps :

S1, the server periodically sends a target number or a blacklist of network addresses to the mobile terminal, and the mobile terminal receives the blacklist database after being received by the mobile terminal;

S2, after the user online banking or the payment account is stolen, the mobile terminal receives the network payment request, and receives the short message or the data packet containing the verification code;

S3, the mobile terminal compares and identifies the target number or the network address,

If the target number or network address is already in the blacklist database, interception is performed directly.

If the target number or the network address is not in the blacklist database, proceed to S4;

S4, the mobile terminal pops up a prompt box for the user to select whether to continue to pay, and a dialog box for popping up the risk prompt is displayed.

If the user chooses to continue to pay, send a text message or a data packet to the target number or network address,

If the user chooses to intercept, continue to execute S5;

S5. The mobile terminal intercepts the current payment, and simultaneously uploads the target number or the network address to the server end, and returns to execute S1.
The method for preventing the risk of theft of Internet and mobile payment funds according to claim 7, wherein said S3 comprises:

S31. The mobile terminal extracts a target number or a network address from the received short message or data packet containing the verification code.

S32. The mobile terminal extracts the target number or network address from an internally stored blacklist database, and performs logical combination and comparison of keywords.

S33. When the target number or the network address meets the logical combination of the keywords extracted from the blacklist database, the interception is directly performed.
The method for preventing the risk of theft of Internet and mobile payment funds according to claim 7, wherein said S5 comprises:

S51. The mobile terminal intercepts the payment.

S52. The mobile terminal uploads the intercepted target number or network address to the server end.

S53. The server end synchronizes the received target number or network address to a database blacklist in the server.

S54. The server end transmits the updated database blacklist to all users' mobile terminals.
A method for preventing the risk of theft of Internet and mobile payment funds according to claim 9, wherein when said server receives only the intercepted target number or network address from the mobile terminal of a user, it is not immediately The target number or the network address is updated to the database blacklist, and when the mobile terminal from the multiple users reports the same intercepted target number or network address, the database blacklist is updated.