WO2019178753A1 - 支付方法、装置和系统 - Google Patents

支付方法、装置和系统 Download PDF

Info

Publication number
WO2019178753A1
WO2019178753A1 PCT/CN2018/079650 CN2018079650W WO2019178753A1 WO 2019178753 A1 WO2019178753 A1 WO 2019178753A1 CN 2018079650 W CN2018079650 W CN 2018079650W WO 2019178753 A1 WO2019178753 A1 WO 2019178753A1
Authority
WO
WIPO (PCT)
Prior art keywords
face data
server
user
user terminal
matching result
Prior art date
Application number
PCT/CN2018/079650
Other languages
English (en)
French (fr)
Inventor
陈志新
吴承嗣
梁家豪
赵荣村
郑海彬
Original Assignee
深圳蓝贝科技有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 深圳蓝贝科技有限公司 filed Critical 深圳蓝贝科技有限公司
Priority to PCT/CN2018/079650 priority Critical patent/WO2019178753A1/zh
Publication of WO2019178753A1 publication Critical patent/WO2019178753A1/zh

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40Network security protocols

Definitions

  • the present application relates to the field of information security, and in particular, to a payment method, apparatus and system, and more particularly to a payment method, apparatus and system for payment transaction risk control.
  • security verification is implemented by using a password, a verification code, or a combination of a password and a verification code for verification.
  • the password may be collided. If the password of the user at the first website or the first application is stolen by the hacker, the hacker may use the password to try the user in another payment-related The payment function of the website or application, which may bring economic loss to the user.
  • the SMS authentication code is used for authentication, once the SMS channel is an untrusted channel, the user account may be stolen. If the user's mobile phone is hacked into the Trojan, the hacker can use the Trojan to obtain the user's password and verification code. Therefore, this verification method is also a security risk.
  • the object of the present application is to overcome the above problems or at least partially solve or alleviate the above problems.
  • a payment method for a server, the method comprising:
  • An abnormality detecting step receiving a payment request sent by the user terminal, and detecting whether the payment request is abnormal;
  • An abnormal triggering step sending an abnormal command to the user terminal when detecting that the payment request is abnormal;
  • a first face data receiving step after the user terminal receives the abnormal instruction, prompting the user to make a first action and/or an expression and collecting the first face data of the user, receiving the user terminal to send The first face data;
  • a first face data comparison step comparing the first face data with a pre-stored second face data of the user to obtain a matching result
  • the matching result sending step sending the matching result to the user terminal, so that the user terminal determines whether to continue the payment according to the matching result.
  • the method utilizes the biological characteristics of the human body, can effectively prevent theft of the brush, and reduces the economic loss of the user. Compared with the traditional technical solutions that use the wind control model for risk control, the technology input cost is low, the user experience is better, and the processing speed is fast.
  • a payment method is further provided for application to a user terminal, the method comprising:
  • An abnormal sending step transmitting a payment request to the server in response to the user's payment command, so that the server detects whether the payment request is abnormal;
  • An abnormal receiving step receiving an abnormal instruction sent by the server if the server detects that the payment request is abnormal;
  • a first face data obtaining step prompting the user to make a first action and/or an expression, collecting first face data of the user, and transmitting the first face data to the server;
  • a matching result receiving step after the server compares the first face data with a pre-stored second face data of the user, and obtains a matching result, receiving the matching result sent by the server, according to the matching result The matching result determines whether to continue the payment.
  • the user terminal can quickly determine the abnormal payment situation, perform identity verification based on the biometric characteristics of the human body, and can more accurately determine the user identity, thereby avoiding economic loss to the user.
  • a payment device applied to a server, the device comprising:
  • An abnormality detecting module configured to receive a payment request sent by the user terminal, and detect whether the payment request is abnormal
  • An abnormality triggering module configured to send an abnormality instruction to the user terminal if an abnormality is detected in the payment request
  • a first face data receiving module configured to receive, after the user terminal receives the abnormal instruction, prompting the user to make a first action and/or an expression and collecting the first face data of the user, The first face data sent by the user terminal;
  • a first face data comparison module configured to compare the first face data with a pre-stored second face data of the user to obtain a matching result
  • a matching result sending module configured to send the matching result to the user terminal, so that the user terminal determines whether to continue to pay according to the matching result.
  • the device increases the module capable of processing human biometric data, thereby effectively preventing theft of theft, and reducing the economic loss of the user.
  • a payment device for use in a user terminal, the device comprising:
  • An abnormal sending module configured to send a payment request to the server in response to the user's payment command, so that the server detects whether the payment request is abnormal
  • An abnormality receiving module configured to receive an abnormal instruction sent by the server if the server detects that the payment request is abnormal
  • a first face data obtaining module configured to prompt the user to make a first action and/or an expression, collect first face data of the user, and send the first face data to the server ;
  • a matching result receiving module configured to compare the first face data with the pre-stored second face data of the user, to obtain a matching result, and receive the server sent by the server The matching result is determined, and it is determined whether to continue the payment according to the matching result.
  • the identity verification based on the biometric characteristics of the human body can more accurately determine the user identity when the user pays, thereby avoiding economic loss to the user.
  • a payment system comprising a first server and a second server, wherein the first server and the second server are connected by a network, wherein:
  • the first server is configured to receive a payment request sent by the user terminal, and detect whether the payment request is abnormal; and when detecting that the payment request is abnormal, receiving the first facial data sent by the user terminal, And transmitting the first face data to the second server; and
  • the second server is configured to compare the first face data with the second face data of the user pre-stored in the first server to obtain a matching result, and send the matching result to the first a server, so that the first server sends the matching result to the user terminal, and the user terminal determines whether to continue to pay according to the matching result.
  • the system is capable of processing human biometric data, and can more accurately determine the user's identity when the user pays, thereby avoiding economic loss to the user.
  • the system further includes a user terminal.
  • FIG. 1 is a flow chart of one embodiment of a payment method applied to a server according to the present application
  • FIG. 2 is a flow chart of another embodiment of a payment method applied to a server according to the present application.
  • FIG. 3 is a flow chart of one embodiment of a first face data comparison step in accordance with the present application.
  • FIG. 4 is a flow chart of one embodiment of a second face data saving step in accordance with the present application.
  • FIG. 5 is a flowchart of one embodiment of a payment method applied to a user terminal according to the present application.
  • FIG. 6 is a flow chart of another embodiment of a payment method applied to a user terminal according to the present application.
  • FIG. 7 is a flow chart of another embodiment of a face information collecting step according to the present application.
  • FIG. 8 is a flow chart of one embodiment of a payment method in accordance with the present application.
  • FIG. 9 is a flow chart of another embodiment of a payment method in accordance with the present application.
  • FIG. 10 is a flow chart of one embodiment of a payment device applied to a server in accordance with the present application.
  • FIG. 11 is a flow chart of one embodiment of a payment device applied to a user terminal in accordance with the present application.
  • FIG. 12 is a flow chart of one embodiment of a payment system in accordance with the present application.
  • FIG. 13 is a flow chart of another embodiment of a payment system in accordance with the present application.
  • a payment method is provided for application to a server.
  • 1 is a flow chart of one embodiment of a payment method applied to a server in accordance with the present application.
  • the method may include an S111 abnormality detecting step of receiving a payment request sent by the user terminal, and detecting whether the payment request is abnormal.
  • the occurrence of an abnormality can be detected from the following: the IP address currently paid by the user, the identification code of the user terminal, the geographical location, the payment amount, the purchased product, the payment time, and the like. Among them, Table 1 lists some cases where anomalies occur. It should be understood that these situations are only partial but not all.
  • a commonly used terminal device refers to a user who has successfully performed a payment operation using the terminal device within a certain period of time or days.
  • the device serial number refers to the identification code of the device. For example, the International Mobile Equipment Identity (IMEI) of the smartphone or the Identifier For Identifier (IDFA) of the Apple mobile phone.
  • IMEI International Mobile Equipment Identity
  • IDFA Identifier For Identifier
  • the user terminal can be any electronic product that can interact with the user through a keyboard, a mouse, a touch screen, a voice control device, or a handwriting device, such as a mobile phone, a smart phone, a PDA, a wearable device, a handheld PC PPC, or Tablets, etc.
  • the method may further include an S112 abnormality triggering step of transmitting an abnormality instruction to the user terminal in the event that an abnormality is detected in the payment request.
  • the method may further include: S113 first face data receiving step: after the user terminal receives the abnormal instruction, prompting the user to make a first action and/or an expression and collecting the first face data of the user, Receiving the first face data sent by the user terminal.
  • the user terminal can include a face collection device.
  • the face collecting device may be a front camera, and the front camera may be at least one of the following: an infrared camera, a visible light camera, etc., in the face recognition process, the face image may be collected by the face collecting device, the front camera
  • the zoom function can be provided, and the same target can be photographed based on different focal lengths to obtain a plurality of images, and the above target can be a human face.
  • the action and/or expression may include one or more of a smile, a face, a nod, a front, a blink, and the like. When the user makes a corresponding expression, an image or video of the user is acquired as the first face data.
  • the method may further include an S114 first face data comparison step of comparing the first face data with a pre-stored second face data of the user to obtain a matching result.
  • the user terminal or the server may perform face recognition on the first face data before performing the comparison, which may include, but is not limited to, determining whether the first face data includes a face, and determining the face in the first face data.
  • the face integrity determining the image quality of the first face data, determining whether the first image is from a living body, determining the angle of the face in the first image, and the like.
  • the second face data is data stored in the server, and the second face data is various actions and/or expression data according to the prompts that the user terminal transmits to the server for storage when the user performs security settings. It is the face data obtained in the database at the same prompt, or it can be any face data of the user in the database.
  • the first face data may be preprocessed, and the preprocessing may include, but is not limited to, image enhancement processing, binarization processing, smoothing processing, conversion of color images into grayscale images, etc., and then the first person after preprocessing
  • the feature data is extracted from the face data to obtain the feature set of the first face data
  • the second face data is extracted from the database
  • the second face data may be the original face image or a set of feature sets, and the image similarity comparison is performed. Or comparing the feature sets, obtaining a matching result, and determining whether the matching is successful according to the matching result.
  • the method may further include an S115 matching result sending step: transmitting the matching result to the user terminal, so that the user terminal determines whether to continue to pay according to the matching result.
  • the method may further include an S116 payment instruction receiving step and an S117 payment step.
  • the receiving step of the payment instruction may include: receiving, in the case that the matching result indicates that the first facial data and the second facial data match successfully, receiving an instruction for continuing payment sent by the user terminal.
  • the payment step may include: performing a chargeback operation on the account of the user according to the instruction to continue the payment, and transmitting the result of the successful payment to the user terminal.
  • the S114 first face data comparison step may include an S1141 living body detecting step and an S1142 face matching step.
  • the S1141 living body detecting step may include: performing a first living body detection on the first face data.
  • the S1142 face matching step may include: when the result of the first living body detection is YES, extracting the second face data of the user saved in the server, and the first face data and the The second face data is compared to obtain a matching result.
  • the purpose of using live detection is to prevent users from using image data and video to avoid face matching.
  • the living face detection can be implemented based on information such as movement of the head, breathing, iris, etc., wherein the iris detection can be based on the characteristics of the iris vibration, the motion information of the eyelashes and the eyelids, the contraction and expansion response characteristics of the pupil to the intensity of the visible light source, and the like.
  • the method of the living body detection may include one of a motion instruction living body detection method, a near-infrared human face living body detection method, and a three-dimensional human face living body detection method, or a combination thereof.
  • the method may further include an S101 second face data saving step.
  • S101 second face data saving step may include:
  • S1011 second face data receiving step prompting the user to make a second action and/or an expression in response to the user's security setting operation, collecting the second face data of the user and transmitting After the server is given, the second face data is received.
  • S1012 living body determining step performing second living body detection on the second face data.
  • This step can pre-store the face data of the user in the server, and prepare it as the standard data of the face data when the abnormality is detected.
  • the method may further include an S1014 condition determining step: repeatedly executing the second face data if the number of saved face data does not satisfy a preset condition Receive step.
  • the pre-set conditions may include meeting a certain amount or required face data.
  • face data taken under the conditions of face left turn, face right turn, open mouth, blinking, and the like.
  • the method may further include an S1015 failure prompting step: if the result of the second living body detection is negative, sending a result of the detection failure to the user terminal, So that the user terminal re-acquires the face data of the user.
  • a payment method for application to a user terminal there is also provided a payment method for application to a user terminal.
  • 5 is a flow chart of one embodiment of a payment method applied to a user terminal in accordance with the present application.
  • the method may include an S211 abnormality transmitting step of transmitting a payment request to the server in response to the user's payment command, so that the server detects whether the payment request is abnormal.
  • the method may further include the S212 abnormal receiving step of receiving an abnormal instruction sent by the server if the server detects that the payment request is abnormal.
  • the method may further include an S213 first face data obtaining step of prompting the user to make a first action and/or an expression, collecting first face data of the user, and transmitting the first face data to the server.
  • the method may further include: S214 matching result receiving step: comparing, by the server, the first face data with a pre-stored second face data of the user, and obtaining a matching result, receiving the sending by the server The matching result determines whether to continue the payment according to the matching result.
  • the user is allowed to continue to pay only if the current user's face data matches the pre-stored face data.
  • the method can be implemented by an application (APP) installed in the user terminal.
  • APP application
  • FIG. 6 is a flow chart of another embodiment of a payment method applied to a user terminal in accordance with the present application.
  • the method may further include:
  • S215 payment instruction receiving step if the matching result indicates that the first face data and the second face data match successfully, generating an instruction to continue payment and transmitting the instruction for continuing payment to the Server;
  • S216 payment result receiving step after the server performs a debit operation on the user account according to the instruction for continuing to pay, receiving a result of successful payment sent by the server.
  • the method may further include an S201 face information collecting step.
  • 7 is a flow chart of another embodiment of a face information collection step in accordance with the present application.
  • the S201 face information collecting step may include:
  • S2011 action prompting step prompting the user to make a second action and/or an expression in response to the user's security setting operation
  • S2012 second face data collection step collecting the second face data of the user and sending the data to the server;
  • S2013 second face data confirming step when the server performs the second living body detection on the second face data and saves the second face data, receiving and displaying the result of the saving success sent by the server;
  • S2014 re-acquisition step receiving, by the server, the second living body detection on the second face data and detecting whether the result is negative, receiving the detection result sent by the server, prompting the user to make the second Repeating the second face data collection step with an action and/or an expression;
  • S2015 continues the collecting step: in the case that the number of face data saved by the server does not satisfy the preset condition, prompting the user to make a next action and/or expression, repeating the second face data collection step.
  • FIG. 8 is a flow chart of one embodiment of a payment method in accordance with the present application.
  • the figure shows the data transmission relationship and timing relationship between the user, the user terminal, and the server in the case where abnormal payment occurs.
  • the server may include a first server and a second server, and the two cooperate to implement the function of user identity verification.
  • FIG. 9 is a flow chart of another embodiment of a payment method in accordance with the present application. The figure shows the data transmission relationship and timing relationship between the user, the user terminal and the server when collecting the second face data of the user.
  • a payment device applied to a server is also provided.
  • 10 is a flow chart of one embodiment of a payment device applied to a server in accordance with the present application.
  • the device can include:
  • the abnormality detecting module 111 is configured to receive a payment request sent by the user terminal, and detect whether the payment request is abnormal.
  • the abnormality triggering module 112 is configured to send an abnormality instruction to the user terminal if an abnormality is detected in the payment request;
  • a first face data receiving module 113 configured to: after the user terminal receives the abnormality instruction, prompting the user to make a first action and/or an expression, and collecting the first face data of the user, Receiving the first face data sent by the user terminal;
  • a first face data comparison module 114 configured to compare the first face data with a pre-stored second face data of the user to obtain a matching result
  • the matching result sending module 115 is configured to send the matching result to the user terminal, so that the user terminal determines whether to continue the payment according to the matching result.
  • the matching result sending module is further connected to:
  • a payment instruction receiving module 116 configured to receive an instruction for continuing payment sent by the user terminal, if the matching result indicates that the first face data and the second face data match successfully;
  • the payment module 117 is configured to perform a chargeback operation on the account of the user according to the instruction for continuing payment, and send a result of the successful payment to the user terminal.
  • the first face data comparison module 114 may include:
  • a living body detecting module 1141 configured to perform first living body detection on the first face data
  • a face matching module 1142 configured to extract, when the result of the first living body detection is YES, the second face data of the user saved in the server, and the first face data Comparing with the second face data to obtain a matching result.
  • the device may further include a second face data saving module 101, where the second face data saving module 101 is connected to the abnormality detecting module 111, and the second face data saving module 101 may include:
  • a second face data receiving module 1011 configured to prompt the user to make a second action and/or an expression in response to the user's security setting operation, and collect the second user of the user After the face data is sent to the server, the second face data is received;
  • a living body judgment module 1012 configured to perform a second living body detection on the second face data
  • the data saving module 1013 is configured to save the second face data if the result of the second living body detection is YES.
  • the data saving module is further connected with a condition determining module 1014, configured to repeatedly execute the second face data if the number of saved face data does not meet a preset condition Receive module.
  • the living body determining module is further connected with a failure prompting module 1015, configured to send, to the user terminal, a result of the detection failure, if the result of the second living body detection is negative. So that the user terminal re-acquires the face data of the user.
  • a payment device for use in a user terminal.
  • 11 is a flow chart of one embodiment of a payment device applied to a user terminal in accordance with the present application.
  • the device can include:
  • the abnormality sending module 211 is configured to send a payment request to the server in response to the user's payment command, so that the server detects whether the payment request is abnormal;
  • the abnormality receiving module 212 is configured to receive an abnormal instruction sent by the server if the server detects that the payment request is abnormal.
  • a first face data obtaining module 213, configured to prompt the user to make a first action and/or an expression, collect first face data of the user, and send the first face data to the server;
  • a matching result receiving module 214 configured to: after the server compares the first face data with the pre-stored second face data of the user, to obtain a matching result, receive the sending by the server The matching result determines whether to continue the payment according to the matching result.
  • the matching result sending module 214 is also sequentially connected to the following modules:
  • a payment instruction receiving module 215, configured to generate an instruction to continue payment and to continue the payment if the matching result indicates that the first face data and the second face data match successfully An instruction is sent to the server;
  • the payment result receiving module 216 is configured to receive a result of the successful payment sent by the server after the server performs a debit operation on the account of the user according to the instruction for continuing to pay.
  • the abnormality sending module 211 is further connected to the face information collecting module 201, and the face information collecting module 201 may include:
  • the action prompting module 2011 is configured to prompt the user to make a second action and/or an expression in response to the security setting operation of the user;
  • a second face data collection module 2012 configured to collect second face data of the user and send the data to the server;
  • a second face data confirming module 2013 configured to receive and display the server to send the second face detection and save the second face data by the server Save successful results
  • the re-acquisition module 2014 is configured to receive, by the server, the second biometric detection on the second facial data, and if the detection result is no, the detection result sent by the server is received, and the user is prompted to do Repeating the second face data collection step by the second action and/or expression;
  • module 2015 configured to prompt the user to make a next action and/or an expression if the number of saved face data of the server does not meet a preset condition, repeating the Two face data acquisition steps.
  • a payment system which may include a first server and a second server, the first server and the second server being connected by a network.
  • 12 is a flow diagram of one embodiment of a payment system in accordance with the present application. In this system:
  • the first server is configured to receive a payment request sent by the user terminal, and detect whether the payment request is abnormal; and when detecting that the payment request is abnormal, receiving the first facial data sent by the user terminal, And transmitting the first face data to the second server;
  • the second server is configured to compare the first face data with the second face data of the user pre-stored in the first server to obtain a matching result, and send the matching result to the first a server, so that the first server sends the matching result to the user terminal, and the user terminal determines whether to continue to pay according to the matching result.
  • the use of two servers enables the amount of computation to be spread across different computers, improving the ability to process information in parallel.
  • the first server is used for processing general transaction transactions
  • the second server is used for living body detection, face comparison, etc., and can identify the user identity together with the second server in case of abnormal payment, thereby improving the security of the transaction and The speed of information processing.
  • the network includes but is not limited to the Internet, a wide area network, a metropolitan area network, a local area network, a VPN network, a wireless ad hoc network (Ad Hoc network), and the like.
  • the second server is further configured to perform first living body detection on the first facial data, and if the result of the first living body detection is yes, the first facial data and the secondary The second face data of the user extracted in the database of the first server is compared to obtain a matching result.
  • the first server is further configured to: when the matching result indicates that the first facial data and the second facial data match successfully, receive an instruction for continuing payment sent by the user terminal;
  • a payment step performing a chargeback operation on the account of the user according to the instruction to continue the payment, and transmitting the result of the successful payment to the user terminal.
  • the first server is further configured to prompt the user to make a second action and/or an expression in response to the user's security setting operation, and collect the second face data of the user and After being sent to the server, receiving the second face data, and sending the second face data to the second server;
  • the second server is configured to perform second living body detection on the second face data, and send the result of the second living body detection to the first server, so that the first server saves the second Face data.
  • the first server is further configured to receive the next personal face data if the number of the saved face data does not meet the preset condition.
  • the first server is further configured to: if the result of the second living body detection is negative, send a result of the detection failure to the user terminal, so that the user terminal re-acquires the user The next person's face data.
  • the system may further include a user terminal, where the user terminal and the first server are connected by using a network, where: the user terminal is configured to send a payment request to the first one in response to a payment command of the user. a server, so that the first server detects whether the payment request is abnormal; after receiving the abnormal command sent by the first server, prompting the user to make a first action and/or an expression, collecting the first person of the user Face data, and sending the first face data to the first server; after receiving the matching result of the first face data and the pre-stored second face data sent by the first server, Whether or not to continue the payment is determined based on the matching result.
  • the embodiment of the present application further provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable by the processor, wherein the processor implements the above when the computer program is executed Any of the methods.
  • the embodiment of the present application further provides a computer readable storage medium, preferably a non-volatile readable storage medium, in which a computer program is stored, and the computer program implements any one of the above methods when executed by a processor. .
  • Embodiments of the present application also provide a computer program product comprising computer readable code that, when executed by a computer device, causes the computer device to perform any of the methods described above.
  • the computer program product includes one or more computer instructions.
  • the computer loads and executes the computer program instructions, the processes or functions described in accordance with embodiments of the present application are generated in whole or in part.
  • the computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable device.
  • the computer instructions can be stored in a computer readable storage medium or transferred from one computer readable storage medium to another computer readable storage medium, for example, the computer instructions can be from a website site, computer, server or data center Transfer to another website site, computer, server, or data center by wire (eg, coaxial cable, fiber optic, digital subscriber line (DSL), or wireless (eg, infrared, wireless, microwave, etc.).
  • the computer readable storage medium can be any available media that can be accessed by a computer or a data storage device such as a server, data center, or the like that includes one or more available media.
  • the usable medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a DVD), or a semiconductor medium (such as a solid state disk (SSD)).

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Collating Specific Patterns (AREA)

Abstract

本申请公开了一种支付方法、装置和系统,其中所述支付方法应用于服务器,该方法包括:接收用户终端发送的支付请求,检测所述支付请求是否发生异常;在检测到所述支付请求发生异常的情况下,将异常指令发送给所述用户终端;在所述用户终端接收到所述异常指令,提示所述用户做出第一动作和/或表情并采集用户的第一人脸数据后,接收所述用户终端发送的所述第一人脸数据;将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果;和将所述匹配结果发送给所述用户终端,以便所述用户终端根据所述匹配结果判断是否继续支付。该方法利用人体生物特征,能够有效地防止盗刷的情况,减少用户的经济损失。

Description

支付方法、装置和系统 技术领域
本申请涉及信息安全领域,特别是涉及一种支付方法、装置和系统,更具体地,涉及一种支付交易风险控制的支付方法、装置和系统。
背景技术
目前,在利用移动终端进行支付的时候,通过采用密码、验证码或者密码与验证码结合进行验证的方式实现安全确认。然而,密码有可能存在被碰撞的可能性,假如用户在第一网站或者第一应用程序进行操作时的密码被黑客盗取,黑客有可能利用该密码去尝试该用户在另一个和支付相关的网站或者应用程序的支付功能,从而可能给该用户带来经济损失。如果采用短信验证码的方式进行身份验证,一旦短信通道是不可信的通道,则可能出现用户账号被盗的情况。如果用户的手机被黑客植入木马程序,则黑客能够利用该木马程序获取用户的密码和验证码,因此,这种验证方式也是存在安全隐患的。
发明内容
本申请的目的在于克服上述问题或者至少部分地解决或缓减解决上述问题。
根据本申请的一个方面,提供了一种支付方法,应用于服务器,该方法包括:
异常检测步骤:接收用户终端发送的支付请求,检测所述支付请求是否发生异常;
异常触发步骤:在检测到所述支付请求发生异常的情况下,将异常指令发送给所述用户终端;
第一人脸数据接收步骤:在所述用户终端接收到所述异常指令,提示所述用户做出第一动作和/或表情并采集用户的第一人脸数据后,接收所述用户终端发送的所述第一人脸数据;
第一人脸数据比较步骤:将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果;和
匹配结果发送步骤:将所述匹配结果发送给所述用户终端,以便所述用户终端根据所述匹配结果判断是否继续支付。
该方法利用人体生物特征,能够有效地防止盗刷的情况,减少用户的经济损失。与传统的利用风控模型进行风险控制的技术方案相比,技术投入成本低,用户体验较好,处理速度快。
根据本申请的另一个方面,还提供了一种支付方法,应用于用户终端,该方法包括:
异常发送步骤:响应于用户的支付命令,将支付请求发送给服务器,以便所述服务器检测所述支付请求是否发生异常;
异常接收步骤:在所述服务器检测到所述支付请求发生异常的情况下,接收所述服务器发送的异常指令;
第一人脸数据获得步骤:提示所述用户做出第一动作和/或表情,采集用户的第一人脸数据,并将所述第一人脸数据发送给所述服务器;和
匹配结果接收步骤:在所述服务器将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果后,接收所述服务器发送的所述匹配结果,根据所述匹配结果判断是否继续支付。
利用该方法,用户终端能够快速判断异常支付的情况,基于人体生物特征进行身份验证,能够更加准确地确定用户身份,避免给用户带来经济上的损失。
根据本申请的另一个方面,还提供了一种支付装置,应用于服务器,该装置包括:
异常检测模块,其配置为用于接收用户终端发送的支付请求,检测所述支付请求是否发生异常;
异常触发模块,其配置为用于在检测到所述支付请求发生异常的情况下,将异常指令发送给所述用户终端;
第一人脸数据接收模块,其配置为用于在所述用户终端接收到所述异常指令,提示所述用户做出第一动作和/或表情并采集用户的第一人脸数据后,接收所述用户终端发送的所述第一人脸数据;
第一人脸数据比较模块,其配置为用于将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果;和
匹配结果发送模块,其配置为用于将所述匹配结果发送给所述用户终端,以便所述用户终端根据所述匹配结果判断是否继续支付。
该装置增加能够对人体生物特征数据进行处理的模块,因此有效地防止盗刷的情况,能够减少用户的经济损失。
根据本申请的另一个方面,还提供了一种支付装置,应用于用户终端,该 装置包括:
异常发送模块,其配置为用于响应于用户的支付命令,将支付请求发送给服务器,以便所述服务器检测所述支付请求是否发生异常;
异常接收模块,其配置为用于在所述服务器检测到所述支付请求发生异常的情况下,接收所述服务器发送的异常指令;
第一人脸数据获得模块,其配置为用于提示所述用户做出第一动作和/或表情,采集用户的第一人脸数据,并将所述第一人脸数据发送给所述服务器;和
匹配结果接收模块,其配置为用于在所述服务器将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果后,接收所述服务器发送的所述匹配结果,根据所述匹配结果判断是否继续支付。
利用该装置,基于人体生物特征进行身份验证,能够在用户支付时更加准确地确定用户身份,避免给用户带来经济上的损失。
根据本申请的另一个方面,还提供了一种支付系统,包括第一服务器和第二服务器,所述第一服务器和第二服务器之间通过网络连接,其中:
第一服务器用于接收用户终端发送的支付请求,检测所述支付请求是否发生异常;在检测到所述支付请求发生异常的情况下,接收所述用户终端发送的所述第一人脸数据,并将所述第一人脸数据传送给所述第二服务器;和
第二服务器用于将所述第一人脸数据与在所述第一服务器中预先存储的所述用户的第二人脸数据进行比较,得到匹配结果,将所述匹配结果发送给所述第一服务器,以便所述第一服务器将所述匹配结果发送给所述用户终端,所述用户终端根据所述匹配结果判断是否继续支付。
该系统能够对人体生物特征数据进行处理,能够在用户支付时更加准确地确定用户身份,避免给用户带来经济上的损失。
可选地,该系统还包括用户终端。
根据下文结合附图对本申请的具体实施例的详细描述,本领域技术人员将会更加明了本申请的上述以及其他目的、优点和特征。
附图说明
后文将参照附图以示例性而非限制性的方式详细描述本申请的一些具体实施例。附图中相同的附图标记标示了相同或类似的部件或部分。本领域技术人员应该理解,这些附图未必是按比例绘制的。附图中:
图1是根据本申请的应用于服务器的支付方法的一个实施例的流程图;
图2是根据本申请的应用于服务器的支付方法的另一个实施例的流程图;
图3是根据本申请的第一人脸数据比较步骤的一个实施例的流程图;
图4是根据本申请的第二人脸数据保存步骤的一个实施例的流程图;
图5是根据本申请的应用于用户终端的支付方法的一个实施例的流程图;
图6是根据本申请的应用于用户终端的支付方法的另一个实施例的流程图;
图7是根据本申请的人脸信息采集步骤的另一个实施例的流程图;
图8是根据本申请的支付方法的一个实施例的流程图;
图9是根据本申请的支付方法的另一个实施例的流程图;
图10是根据本申请的应用于服务器的支付装置的一个实施例的流程图;
图11是根据本申请的应用于用户终端的支付装置的一个实施例的流程图;
图12是根据本申请的支付系统的一个实施例的流程图;
图13是根据本申请的支付系统的另一个实施例的流程图。
具体实施方式
根据下文结合附图对本申请的具体实施例的详细描述,本领域技术人员将会更加明了本申请的上述以及其他目的、优点和特征。
根据本申请的一个方面,提供了一种支付方法,应用于服务器。图1是根据本申请的应用于服务器的支付方法的一个实施例的流程图。
该方法可以包括S111异常检测步骤:接收用户终端发送的支付请求,检测所述支付请求是否发生异常。
可以从以下方面检测异常的发生:用户当前支付的IP地址、用户终端的识别码、地理位置、支付金额、购买的产品、支付时间等。其中,表一中列举了一部分发生异常的情况,应该理解的是,这些情况仅仅是部分情况而非全部。
表一
Figure PCTCN2018079650-appb-000001
Figure PCTCN2018079650-appb-000002
在该表中,常用的终端设备是指在过去的一定时间或者天数内,该用户曾经使用该终端设备成功进行了支付操作。设备序列号是指设备的识别码。例如,智能手机的国际移动设备识别码(International Mobile Equipment Identity,IMEI)或者苹果手机的广告标示符(Identifier For Identifier,IDFA)。
所述用户终端可以是任何一种可与用户通过键盘、鼠标、触摸屏、声控设备或手写设备等方式进行人机交互的电子产品,例如手机、智能手机、PDA、可穿戴设备、掌上电脑PPC或平板电脑等。
该方法还可以包括S112异常触发步骤:在检测到所述支付请求发生异常的情况下,将异常指令发送给所述用户终端。
该方法还可以包括S113第一人脸数据接收步骤:在所述用户终端接收到所述异常指令,提示所述用户做出第一动作和/或表情并采集用户的第一人脸数据后,接收所述用户终端发送的所述第一人脸数据。
用户终端可以包括人脸采集装置。该人脸采集装置可以是前置摄像头,前置摄像头可为以下至少一种:红外摄像头、可见光摄像头等,在人脸识别过程中,可以通过人脸采集装置采集人脸图像,上述前置摄像头可以具备变焦功能,可以基于不同的焦距对同一目标进行拍摄,得到多个图像,上述目标可以为人脸。动作和/或表情可以包括微笑、侧脸、点头、正面、眨眼等动作中的一个或者几个。当用户做出相应的表情时,采集该用户的图像或者视频,作为第一人脸数据。
该方法还可以包括S114第一人脸数据比较步骤:将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果。
其中,用户终端或者服务器在进行比较之前可以先对第一人脸数据进行人脸识别,可以包括但不仅限于:判断第一人脸数据中是否包含人脸、确定第一人脸数据中人脸的人脸完整度、确定第一人脸数据的图像质量、确定第一图像是否来自于活体、确定第一图像中人脸的角度等。
第二人脸数据是存储在服务器中的数据,该第二人脸数据是用户在进行安全设置时,用户终端传输给服务器进行存储的根据提示做出的各种动作和/或表情数据,可以是数据库中的在同样提示下获取的人脸数据,也可以是将数据库中该用户的任意一个人脸数据。
可以对第一人脸数据进行预处理,预处理可以包括但不仅限于:图像增强处理、二值化处理、平滑处理、彩色图像转化为灰度图像等等,再对预处理之后的第一人脸数据进行特征提取,得到第一人脸数据的特征集,再从数据库中提取第二人脸数据,该第二人脸数据可以是原始人脸图像或者一组特征集合,通过图像相似度比较或者特征集的比较,得到匹配结果,依据该匹配结果判断是否匹配成功。
该方法还可以包括S115匹配结果发送步骤:将所述匹配结果发送给所述用户终端,以便所述用户终端根据所述匹配结果判断是否继续支付。
图2是根据本申请的应用于服务器的支付方法的另一个实施例的流程图。可选地,在所述S115匹配结果发送步骤之后,该方法还可以包括S116支付指令接收步骤和S117支付步骤。其中:支付指令接收步骤可以包括:在所述匹配结果表明所述第一人脸数据与所述第二人脸数据匹配成功的情况下,接收所述用户终端发送的继续支付的指令。支付步骤可以包括:根据所述继续支付的指令对所述用户的账号进行扣款操作,并将支付成功的结果发送给所述用户终端。
图3是根据本申请的第一人脸数据比较步骤的一个实施例的流程图。可选地,所述S114第一人脸数据比较步骤可以包括S1141活体检测步骤和S1142人脸匹配步骤。
其中,S1141活体检测步骤可以包括:对所述第一人脸数据进行第一活体检测。
S1142人脸匹配步骤可以包括:在所述第一活体检测的结果为是的情况下,提取所述服务器中保存的该用户的第二人脸数据,将所述第一人脸数据与所述第二人脸数据进行比较,得到匹配结果。
采用活体检测的目的是为了防止用户利用图片数据、视频来躲过人脸匹配。活体人脸检测可以基于头部的移动、呼吸、虹膜等信息实现,其中,虹膜检测可以基于虹膜振颤特性、睫毛和眼皮的运动信息、瞳孔对可见光源强度的收缩扩张反应特性等。活体检测的方法可以包括:动作指令活体检测方法、近红外人脸活体检测方法、三维人脸活体检测方法中的一种或它们的组合。
参照图2,可选地,在所述异常检测步骤之前,该方法还可以包括S101第二人脸数据保存步骤。图4是根据本申请的第二人脸数据保存步骤的一个实施例的流程图。所述第二人脸数据保存步骤可以包括:
S1011第二人脸数据接收步骤:在所述用户终端响应于所述用户的安全设 置操作而提示所述用户做出第二动作和/或表情,采集所述用户的第二人脸数据并发送给所述服务器后,接收所述第二人脸数据。
S1012活体判断步骤:对所述第二人脸数据进行第二活体检测。
S1013数据保存步骤:在所述第二活体检测的结果为是的情况下,保存所述第二人脸数据。
该步骤能够在服务器中预存该用户的人脸数据,以备异常检测时将其作为人脸数据的标准数据。
可选地,在所述数据保存步骤之后,该方法还可以包括S1014条件判断步骤:在已经保存的人脸数据的数量未满足预先设置的条件的情况下,重复执行所述第二人脸数据接收步骤。
例如,预先设置的条件可以包括满足一定数量或者要求的人脸数据。例如,分别在脸左转、脸右转、张嘴、眨眼等条件下拍摄的人脸数据。
可选地,在所述活体判断步骤之后,该方法还可以包括S1015失败提示步骤:在所述第二活体检测的结果为否的情况下,将检测失败的结果的发送给所述用户终端,以便所述用户终端重新采集所述用户的人脸数据。
根据本申请的另一个方面,还提供了一种支付方法,应用于用户终端。图5是根据本申请的应用于用户终端的支付方法的一个实施例的流程图。
该方法可以包括S211异常发送步骤:响应于用户的支付命令,将支付请求发送给服务器,以便所述服务器检测所述支付请求是否发生异常。
该方法还可以包括S212异常接收步骤:在所述服务器检测到所述支付请求发生异常的情况下,接收所述服务器发送的异常指令。
该方法还可以包括S213第一人脸数据获得步骤:提示所述用户做出第一动作和/或表情,采集用户的第一人脸数据,并将所述第一人脸数据发送给所述服务器。
该方法还可以包括S214匹配结果接收步骤:在所述服务器将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果后,接收所述服务器发送的所述匹配结果,根据所述匹配结果判断是否继续支付。
只有在当前用户的脸部数据和预存的脸部数据进行匹配的情况下,才允许用户继续支付。该方法可以通过安装在用户终端中的应用程序(APP)实现。
图6是根据本申请的应用于用户终端的支付方法的另一个实施例的流程图。参照图5和图6,可选地,在所述S214匹配结果发送步骤之后,该方法还可以包括:
S215支付指令接收步骤:在所述匹配结果表明所述第一人脸数据与所述第二人脸数据匹配成功的情况下,生成继续支付的指令并将所述继续支付的指令发送给所述服务器;和
S216支付结果接收步骤:在所述服务器根据所述继续支付的指令对所述用户的账号进行扣款操作后,接收所述服务器发送的支付成功的结果。
参照图6,可选地,在所述S211异常发送步骤之前,该方法还可以包括S201人脸信息采集步骤。图7是根据本申请的人脸信息采集步骤的另一个实施例的流程图。所述S201人脸信息采集步骤可以包括:
S2011动作提示步骤:响应于所述用户的安全设置操作,提示所述用户做出第二动作和/或表情;
S2012第二人脸数据采集步骤:采集所述用户的第二人脸数据并发送给所述服务器;
S2013第二人脸数据确认步骤:在服务器对所述第二人脸数据进行第二活体检测并且保存所述第二人脸数据的情况下,接收并显示所述服务器发送的保存成功的结果;
S2014重新采集步骤:在服务器对所述第二人脸数据进行第二活体检测并且检测结果为否的情况下,接收所述服务器发送的所述检测结果,提示所述用户做出所述第二动作和/或表情,重复所述第二人脸数据采集步骤;和
S2015继续采集步骤:在所述服务器已保存的人脸数据的数量未满足预先设置的条件的情况下,提示所述用户做出下一个动作和/或表情,重复所述第二人脸数据采集步骤。
利用该步骤,能够得到多个角度、多个条件下的人脸数据,从而在服务器中构建完整的用户人脸数据体系或者人脸模型,以便在异常情况发生时,通过人脸识别用户的真实身份,从而避免资金损失。
图8是根据本申请的支付方法的一个实施例的流程图。该图示出了在出现异常支付的情况下,用户、用户终端和服务器之间的数据传输关系和时序关系。可选地,服务器可以包括第一服务器和第二服务器,二者共同协作,实现用户身份验证的功能。
图9是根据本申请的支付方法的另一个实施例的流程图。该图示出了在采集用户的第二人脸数据时,用户、用户终端和服务器之间的数据传输关系和时序关系。
根据本申请的另一个方面,还提供了一种支付装置,应用于服务器。图10 是根据本申请的应用于服务器的支付装置的一个实施例的流程图。该装置可以包括:
异常检测模块111,其配置为用于接收用户终端发送的支付请求,检测所述支付请求是否发生异常;
异常触发模块112,其配置为用于在检测到所述支付请求发生异常的情况下,将异常指令发送给所述用户终端;
第一人脸数据接收模块113,其配置为用于在所述用户终端接收到所述异常指令,提示所述用户做出第一动作和/或表情并采集用户的第一人脸数据后,接收所述用户终端发送的所述第一人脸数据;
第一人脸数据比较模块114,其配置为用于将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果;和
匹配结果发送模块115,其配置为用于将所述匹配结果发送给所述用户终端,以便所述用户终端根据所述匹配结果判断是否继续支付。
可选地,所述匹配结果发送模块还连接有:
支付指令接收模块116,其配置为用于在所述匹配结果表明所述第一人脸数据与所述第二人脸数据匹配成功的情况下,接收所述用户终端发送的继续支付的指令;和
支付模块117,其配置为用于根据所述继续支付的指令对所述用户的账号进行扣款操作,并将支付成功的结果发送给所述用户终端。
可选地,所述第一人脸数据比较模块114可以包括:
活体检测模块1141,其配置为用于对所述第一人脸数据进行第一活体检测;和
人脸匹配模块1142,其配置为用于在所述第一活体检测的结果为是的情况下,提取所述服务器中保存的该用户的第二人脸数据,将所述第一人脸数据与所述第二人脸数据进行比较,得到匹配结果。
可选地,该装置还可以包括第二人脸数据保存模块101,所述第二人脸数据保存模块101与所述异常检测模块111连接,所述第二人脸数据保存模块101可以包括:
第二人脸数据接收模块1011,其配置为用于在所述用户终端响应于所述用户的安全设置操作而提示所述用户做出第二动作和/或表情,采集所述用户的第二人脸数据并发送给所述服务器后,接收所述第二人脸数据;
活体判断模块1012,其配置为用于对所述第二人脸数据进行第二活体检 测;和
数据保存模块1013,其配置为用于在所述第二活体检测的结果为是的情况下,保存所述第二人脸数据。
可选地,所述数据保存模块还连接有条件判断模块1014,其配置为用于在已经保存的人脸数据的数量未满足预先设置的条件的情况下,重复执行所述第二人脸数据接收模块。
可选地,所述活体判断模块还连接有失败提示模块1015,其配置为用于在所述第二活体检测的结果为否的情况下,将检测失败的结果的发送给所述用户终端,以便所述用户终端重新采集所述用户的人脸数据。
根据本申请的另一个方面,还提供了一种支付装置,应用于用户终端。图11是根据本申请的应用于用户终端的支付装置的一个实施例的流程图。该装置可以包括:
异常发送模块211,其配置为用于响应于用户的支付命令,将支付请求发送给服务器,以便所述服务器检测所述支付请求是否发生异常;
异常接收模块212,其配置为用于在所述服务器检测到所述支付请求发生异常的情况下,接收所述服务器发送的异常指令;
第一人脸数据获得模块213,其配置为用于提示所述用户做出第一动作和/或表情,采集用户的第一人脸数据,并将所述第一人脸数据发送给所述服务器;
匹配结果接收模块214,其配置为用于在所述服务器将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果后,接收所述服务器发送的所述匹配结果,根据所述匹配结果判断是否继续支付。
可选地,所述匹配结果发送模块214还与以下模块顺次连接:
支付指令接收模块215,其配置为用于在所述匹配结果表明所述第一人脸数据与所述第二人脸数据匹配成功的情况下,生成继续支付的指令并将所述继续支付的指令发送给所述服务器;和
支付结果接收模块216,其配置为用于在所述服务器根据所述继续支付的指令对所述用户的账号进行扣款操作后,接收所述服务器发送的支付成功的结果。
可选地,所述异常发送模块211还连接有人脸信息采集模块201,所述人脸信息采集模块201可以包括:
动作提示模块2011,其配置为用于响应于所述用户的安全设置操作,提示所述用户做出第二动作和/或表情;
第二人脸数据采集模块2012,其配置为用于采集所述用户的第二人脸数据并发送给所述服务器;
第二人脸数据确认模块2013,其配置为用于在服务器对所述第二人脸数据进行第二活体检测并且保存所述第二人脸数据的情况下,接收并显示所述服务器发送的保存成功的结果;
重新采集模块2014,其配置为用于在服务器对所述第二人脸数据进行第二活体检测并且检测结果为否的情况下,接收所述服务器发送的所述检测结果,提示所述用户做出所述第二动作和/或表情,重复所述第二人脸数据采集步骤;和
继续采集模块2015,其配置为用于在所述服务器已保存的人脸数据的数量未满足预先设置的条件的情况下,提示所述用户做出下一个动作和/或表情,重复所述第二人脸数据采集步骤。
根据本申请的另一个方面,还提供了一种支付系统,可以包括第一服务器和第二服务器,所述第一服务器和第二服务器之间通过网络连接。图12是根据本申请的支付系统的一个实施例的流程图。在该系统中:
第一服务器用于接收用户终端发送的支付请求,检测所述支付请求是否发生异常;在检测到所述支付请求发生异常的情况下,接收所述用户终端发送的所述第一人脸数据,并将所述第一人脸数据传送给所述第二服务器;
第二服务器用于将所述第一人脸数据与在所述第一服务器中预先存储的所述用户的第二人脸数据进行比较,得到匹配结果,将所述匹配结果发送给所述第一服务器,以便所述第一服务器将所述匹配结果发送给所述用户终端,所述用户终端根据所述匹配结果判断是否继续支付。
采用两个服务器能够将计算量分散到不同计算机中,从而提高信息并行处理的能力。第一服务器用于处理一般的交易事务,第二服务器用于活体检测、人脸比对等,能够在异常支付的情况下和第二服务器共同进行用户身份的识别,提高了交易的安全性和信息处理的速度。
其中,所述网络包括但不限于互联网、广域网、城域网、局域网、VPN网络、无线自组织网络(Ad Hoc网络)等。
可选地,第二服务器还用于对所述第一人脸数据进行第一活体检测,在所述第一活体检测的结果为是的情况下,将所述第一人脸数据与从所述第一服务器的数据库中提取的该用户的第二人脸数据进行比较,得到匹配结果。
可选地,第一服务器还用于:在所述匹配结果表明所述第一人脸数据与所 述第二人脸数据匹配成功的情况下,接收所述用户终端发送的继续支付的指令;
支付步骤:根据所述继续支付的指令对所述用户的账号进行扣款操作,并将支付成功的结果发送给所述用户终端。
可选地,第一服务器还用于在所述用户终端响应于所述用户的安全设置操作而提示所述用户做出第二动作和/或表情,采集所述用户的第二人脸数据并发送给所述服务器后,接收所述第二人脸数据,并将所述第二人脸数据发送给所述第二服务器;
所述第二服务器用于对所述第二人脸数据进行第二活体检测,并将所述第二活体检测的结果发送给所述第一服务器,以便所述第一服务器保存所述第二人脸数据。
可选地,所述第一服务器还用于在已经保存的人脸数据的数量未满足预先设置的条件的情况下,接收下一个人脸数据。
可选地,所述第一服务器还用于在所述第二活体检测的结果为否的情况下,将检测失败的结果的发送给所述用户终端,以便所述用户终端重新采集所述用户的下一个人脸数据。
图13是根据本申请的支付系统的另一个实施例的流程图。可选地,该系统还可以包括用户终端,所述用户终端和所述第一服务器之间通过网络连接,其中:所述用户终端用于响应于用户的支付命令,将支付请求发送给第一服务器,以便所述第一服务器检测所述支付请求是否发生异常;在接收所述第一服务器发送的异常指令后,提示所述用户做出第一动作和/或表情,采集用户的第一人脸数据,并将所述第一人脸数据发送给所述第一服务器;在接收到所述第一服务器发送的所述第一人脸数据和预存的第二人脸数据的匹配结果后,根据所述匹配结果判断是否继续支付。
本申请实施例还提供了一种计算机设备,包括存储器、处理器和存储在所述存储器内并能由所述处理器运行的计算机程序,其中,所述处理器执行所述计算机程序时实现上述方法中的任意一个。
本申请实施例还提供了一种计算机可读存储介质,优选为非易失性可读存储介质,其内存储有计算机程序,所述计算机程序在由处理器执行时实现上述方法中的任意一个。
本申请实施例还提供了一种计算机程序产品,包括计算机可读代码,当所述计算机可读代码由计算机设备执行时,导致所述计算机设备执行上述方法中 的任意一个。
在上述实施例中,可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件实现时,可以全部或部分地以计算机程序产品的形式实现。所述计算机程序产品包括一个或多个计算机指令。在计算机加载和执行所述计算机程序指令时,全部或部分地产生按照本申请实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、获取其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中,或者从一个计算机可读存储介质向另一个计算机可读存储介质传输,例如,所述计算机指令可以从一个网站站点、计算机、服务器或数据中心通过有线(例如同轴电缆、光纤、数字用户线(DSL))或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存取的任何可用介质或者是包含一个或多个可用介质集成的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质,(例如,软盘、硬盘、磁带)、光介质(例如,DVD)、或者半导体介质(例如固态硬盘Solid State Disk(SSD))等。
本申请的说明书和权利要求书及上述附图中的术语“第一”、“第二”等是用于区别不同对象,而不是用于描述特定顺序。此外,术语“包括”和“具有”以及它们任何变形,意图在于覆盖不排他的包含。例如包含了一系列步骤或单元的过程、方法、系统、产品或设备没有限定于已列出的步骤或单元,而是可选地还包括没有列出的步骤或单元,或可选地还包括对于这些过程、方法、产品或设备固有的其他步骤或单元。
专业技术人员应该还可以进一步意识到,结合本文中所公开的实施例描述的各示例的单元及算法步骤,能够以电子硬件、计算机软件或者二者的结合来实现,为了清楚地说明硬件和软件的可互换性,在上述说明中已经按照功能一般性地描述了各示例的组成及步骤。这些功能究竟以硬件还是软件方式来执行,取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能,但是这种实现不应认为超出本申请的范围。
本领域普通技术人员可以理解实现上述实施例方法中的全部或部分步骤是可以通过程序来指令处理器完成,所述的程序可以存储于计算机可读存储介质中,所述存储介质是非短暂性(英文:non-transitory)介质,例如随机存取存储器,只读存储器,快闪存储器,硬盘,固态硬盘,磁带(英文:magnetic tape), 软盘(英文:floppy disk),光盘(英文:optical disc)及其任意组合。
至此,本领域技术人员应认识到,虽然本文已详尽示出和描述了本申请的多个示例性实施例,但是,在不脱离本申请精神和范围的情况下,仍可根据本申请公开的内容直接确定或推导出符合本申请原理的许多其他变型或修改。因此,本申请的范围应被理解和认定为覆盖了所有这些其他变型或修改。

Claims (10)

  1. 一种支付方法,应用于服务器,该方法包括:
    异常检测步骤:接收用户终端发送的支付请求,检测所述支付请求是否发生异常;
    异常触发步骤:在检测到所述支付请求发生异常的情况下,将异常指令发送给所述用户终端;
    第一人脸数据接收步骤:在所述用户终端接收到所述异常指令,提示所述用户做出第一动作和/或表情并采集用户的第一人脸数据后,接收所述用户终端发送的所述第一人脸数据;
    第一人脸数据比较步骤:将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果;和
    匹配结果发送步骤:将所述匹配结果发送给所述用户终端,以便所述用户终端根据所述匹配结果判断是否继续支付。
  2. 根据权利要求1所述的方法,其特征在于,所述第一人脸数据比较步骤包括:
    活体检测步骤:对所述第一人脸数据进行第一活体检测;和
    人脸匹配步骤:在所述第一活体检测的结果为是的情况下,提取所述服务器中保存的该用户的第二人脸数据,将所述第一人脸数据与所述第二人脸数据进行比较,得到匹配结果。
  3. 根据权利要求1或2所述的方法,其特征在于,在所述异常检测步骤之前,该方法还包括第二人脸数据保存步骤,所述第二人脸数据保存步骤包括:
    第二人脸数据接收步骤:在所述用户终端响应于所述用户的安全设置操作而提示所述用户做出第二动作和/或表情,采集所述用户的第二人脸数据并发送给所述服务器后,接收所述第二人脸数据;
    活体判断步骤:对所述第二人脸数据进行第二活体检测;和
    数据保存步骤:在所述第二活体检测的结果为是的情况下,保存所述第二人脸数据。
  4. 根据权利要求3所述的方法,其特征在于,在所述数据保存步骤之后, 该方法还包括条件判断步骤:在已经保存的人脸数据的数量未满足预先设置的条件的情况下,重复执行所述第二人脸数据接收步骤。
  5. 根据权利要求3所述的方法,其特征在于,在所述活体判断步骤之后,该方法还包括失败提示步骤:在所述第二活体检测的结果为否的情况下,将检测失败的结果的发送给所述用户终端,以便所述用户终端重新采集所述用户的人脸数据。
  6. 一种支付方法,应用于用户终端,该方法包括:
    异常发送步骤:响应于用户的支付命令,将支付请求发送给服务器,以便所述服务器检测所述支付请求是否发生异常;
    异常接收步骤:在所述服务器检测到所述支付请求发生异常的情况下,接收所述服务器发送的异常指令;
    第一人脸数据获得步骤:提示所述用户做出第一动作和/或表情,采集用户的第一人脸数据,并将所述第一人脸数据发送给所述服务器;和
    匹配结果接收步骤:在所述服务器将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果后,接收所述服务器发送的所述匹配结果,根据所述匹配结果判断是否继续支付。
  7. 一种支付装置,应用于服务器,该装置包括:
    异常检测模块,其配置为用于接收用户终端发送的支付请求,检测所述支付请求是否发生异常;
    异常触发模块,其配置为用于在检测到所述支付请求发生异常的情况下,将异常指令发送给所述用户终端;
    第一人脸数据接收模块,其配置为用于在所述用户终端接收到所述异常指令,提示所述用户做出第一动作和/或表情并采集用户的第一人脸数据后,接收所述用户终端发送的所述第一人脸数据;
    第一人脸数据比较模块,其配置为用于将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果;和
    匹配结果发送模块,其配置为用于将所述匹配结果发送给所述用户终端,以便所述用户终端根据所述匹配结果判断是否继续支付。
  8. 一种支付装置,应用于用户终端,该装置包括:
    异常发送模块,其配置为用于响应于用户的支付命令,将支付请求发送给服务器,以便所述服务器检测所述支付请求是否发生异常;
    异常接收模块,其配置为用于在所述服务器检测到所述支付请求发生异常的情况下,接收所述服务器发送的异常指令;
    第一人脸数据获得模块,其配置为用于提示所述用户做出第一动作和/或表情,采集用户的第一人脸数据,并将所述第一人脸数据发送给所述服务器;和
    匹配结果接收模块,其配置为用于在所述服务器将所述第一人脸数据与预先存储的所述用户的第二人脸数据进行比较,得到匹配结果后,接收所述服务器发送的所述匹配结果,根据所述匹配结果判断是否继续支付。
  9. 一种支付系统,包括第一服务器和第二服务器,所述第一服务器和第二服务器之间通过网络连接,其中:
    第一服务器用于接收用户终端发送的支付请求,检测所述支付请求是否发生异常;在检测到所述支付请求发生异常的情况下,接收所述用户终端发送的第一人脸数据,并将所述第一人脸数据传送给所述第二服务器;和
    第二服务器用于将所述第一人脸数据与在所述第一服务器中预先存储的所述用户的第二人脸数据进行比较,得到匹配结果,将所述匹配结果发送给所述第一服务器,以便所述第一服务器将所述匹配结果发送给所述用户终端,所述用户终端根据所述匹配结果判断是否继续支付。
  10. 根据权利要求9所述的系统,其特征在于:还包括用户终端,所述用户终端和所述第一服务器之间通过网络连接,其中:
    所述用户终端用于响应于用户的支付命令,将支付请求发送给第一服务器,以便所述第一服务器检测所述支付请求是否发生异常;在接收所述第一服务器发送的异常指令后,提示所述用户做出第一动作和/或表情,采集用户的第一人脸数据,并将所述第一人脸数据发送给所述第一服务器;在接收到所述第一服务器发送的所述第一人脸数据和预存的第二人脸数据的匹配结果后,根据所述匹配结果判断是否继续支付。
PCT/CN2018/079650 2018-03-20 2018-03-20 支付方法、装置和系统 WO2019178753A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/CN2018/079650 WO2019178753A1 (zh) 2018-03-20 2018-03-20 支付方法、装置和系统

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2018/079650 WO2019178753A1 (zh) 2018-03-20 2018-03-20 支付方法、装置和系统

Publications (1)

Publication Number Publication Date
WO2019178753A1 true WO2019178753A1 (zh) 2019-09-26

Family

ID=67988002

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/079650 WO2019178753A1 (zh) 2018-03-20 2018-03-20 支付方法、装置和系统

Country Status (1)

Country Link
WO (1) WO2019178753A1 (zh)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112003846A (zh) * 2020-08-13 2020-11-27 广州市百果园信息技术有限公司 一种信用阈值的训练、ip地址的检测方法及相关装置
CN112084893A (zh) * 2020-08-24 2020-12-15 中国银联股份有限公司 生物识别终端异常检测方法、装置、设备及存储介质
CN112308568A (zh) * 2020-11-18 2021-02-02 支付宝(杭州)信息技术有限公司 一种支付方法、装置、存储介质和计算机设备
CN113643036A (zh) * 2021-07-01 2021-11-12 深圳市晨北科技有限公司 支付验证方法、计算机设备及可读存储介质
CN117576834A (zh) * 2024-01-17 2024-02-20 深圳市吉方工控有限公司 Pos机的显示异常检测方法、装置、设备及存储介质

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104392356A (zh) * 2014-11-28 2015-03-04 苏州福丰科技有限公司 基于三维人脸识别的移动支付系统及方法
CN107705128A (zh) * 2017-09-05 2018-02-16 深圳支点电子智能科技有限公司 一种支付验证方法和系统
KR20180017317A (ko) * 2016-08-08 2018-02-21 주식회사 올아이티탑 홍채 또는/및 얼굴 인식을 이용한 전자 결제 시스템 및 그 방법
WO2018034589A1 (ru) * 2016-08-17 2018-02-22 Андрей Владимирович ДЗЫГАРЬ Система контроля оплаты
CN107784501A (zh) * 2017-09-29 2018-03-09 九派天下支付有限公司 一种安全的基于人脸识别的支付方法及系统

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104392356A (zh) * 2014-11-28 2015-03-04 苏州福丰科技有限公司 基于三维人脸识别的移动支付系统及方法
KR20180017317A (ko) * 2016-08-08 2018-02-21 주식회사 올아이티탑 홍채 또는/및 얼굴 인식을 이용한 전자 결제 시스템 및 그 방법
WO2018034589A1 (ru) * 2016-08-17 2018-02-22 Андрей Владимирович ДЗЫГАРЬ Система контроля оплаты
CN107705128A (zh) * 2017-09-05 2018-02-16 深圳支点电子智能科技有限公司 一种支付验证方法和系统
CN107784501A (zh) * 2017-09-29 2018-03-09 九派天下支付有限公司 一种安全的基于人脸识别的支付方法及系统

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112003846A (zh) * 2020-08-13 2020-11-27 广州市百果园信息技术有限公司 一种信用阈值的训练、ip地址的检测方法及相关装置
CN112003846B (zh) * 2020-08-13 2023-02-03 广州市百果园信息技术有限公司 一种信用阈值的训练、ip地址的检测方法及相关装置
CN112084893A (zh) * 2020-08-24 2020-12-15 中国银联股份有限公司 生物识别终端异常检测方法、装置、设备及存储介质
CN112084893B (zh) * 2020-08-24 2024-05-17 中国银联股份有限公司 生物识别终端异常检测方法、装置、设备及存储介质
CN112308568A (zh) * 2020-11-18 2021-02-02 支付宝(杭州)信息技术有限公司 一种支付方法、装置、存储介质和计算机设备
CN113643036A (zh) * 2021-07-01 2021-11-12 深圳市晨北科技有限公司 支付验证方法、计算机设备及可读存储介质
CN117576834A (zh) * 2024-01-17 2024-02-20 深圳市吉方工控有限公司 Pos机的显示异常检测方法、装置、设备及存储介质
CN117576834B (zh) * 2024-01-17 2024-03-29 深圳市吉方工控有限公司 Pos机的显示异常检测方法、装置、设备及存储介质

Similar Documents

Publication Publication Date Title
WO2019178753A1 (zh) 支付方法、装置和系统
KR102038851B1 (ko) 신원들을 검증하기 위한 방법 및 시스템
EP3286679B1 (en) Method and system for identifying a human or machine
WO2020024398A1 (zh) 生物特征辅助支付方法、装置、计算机设备及存储介质
EP2704052A1 (en) Transaction verification system
WO2019062080A1 (zh) 身份识别方法、电子装置及计算机可读存储介质
US11126827B2 (en) Method and system for image identification
JP2022513978A (ja) 表情グループに基づく操作決定方法、装置及び電子機器
WO2019196534A1 (zh) 验证码的人机识别方法及装置
CN108537030A (zh) 基于身份识别的管理方法、装置及电子设备
JP6472455B2 (ja) 特性情報を抽出するための方法およびシステム
US20190130411A1 (en) Method and system for data processing
WO2015154342A1 (zh) 一种通过多指纹识别提高设备安全性的方法及装置
US11521208B2 (en) System and method for authenticating transactions from a mobile device
WO2018205468A1 (zh) 生物识别交易处理方法、电子装置及存储介质
WO2023173686A1 (zh) 检测方法、装置、电子设备及存储介质
US20230012235A1 (en) Using an enrolled biometric dataset to detect adversarial examples in biometrics-based authentication system
US11651371B2 (en) Zero-step user recognition and biometric access control
CN110929244A (zh) 数字化身份识别方法、装置、设备及存储介质
CN110619281A (zh) 一种身份识别方法和装置
WO2016171923A1 (en) Method and system for identifying a human or machine
CN107786349B (zh) 一种针对用户账号的安全管理方法及装置
TWM591664U (zh) 用以進行身分註冊程序的電子裝置
CN111126229A (zh) 数据处理方法和装置
CN112949363A (zh) 一种人脸活体识别方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18910760

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 18910760

Country of ref document: EP

Kind code of ref document: A1