WO2019237971A1 - Point-of-sale management device and point-of-sale service management system based on intelligent terminal - Google Patents

Abstract

The present invention relates to a point-of-sale management device based on an intelligent terminal, comprising: a bank card reading unit used for reading first data from a bank card; a security management unit coupled with the bank card reading unit and used for generating encrypted fourth data according to the first data, second data stored in the security management unit, and third data based on a transaction scene; and a transaction management control coupled with the security management unit and used for forwarding the fourth data to the intelligent terminal, so that the intelligent terminal transmits the fourth data to a point-of-sale management service system. The bank card reading unit, the security management unit, and the transaction management control are provided in the intelligent terminal or are integrated with same. The present invention not only can reduce the costs of an acquirer and a merchant in the aspects of purchasing, maintenance and the like, but also can further improve the convenience and popularity of mobile payment.

Description

Point-of-sale management device and point-of-sale service management system based on intelligent terminal Technical field

The invention relates to the technical field of electronic payment, and more particularly, to a point-of-sale management device based on a smart terminal and a point-of-sale service management system.

Background technique

Currently, POS machines have achieved a certain degree of mobility and convenience, but compared with smart devices such as mobile phones that users can carry with them at any time, there is still a large gap.

The existing mobile phone-based POS acquiring device securely reads the bank card through a card reading terminal (special equipment) external to the mobile phone, assembles it into a transaction message, and then the mobile phone-based POS acquiring device transmits the transaction report. The text is sent to the acceptance platform, such as the mPOS system, to complete the transaction.

An architecture of an existing POS acquiring system is shown in FIG. 1, in which a card reading terminal reads bank card information, and transfers a transaction message to an acceptance background processing via the mPOS front-end system. The merchant management platform responds to merchant registration requests through the mPOS front-end system.

Further improving the convenience and efficiency of merchants' acquiring is the current desired goal.

Summary of the Invention

An object of the present invention is to provide a point-of-sale management device, which is more mobile and convenient.

To achieve the above object, the present invention provides a technical solution as follows.

A point-of-sale management device based on an intelligent terminal includes a bank card reading unit for reading first data from the bank card, and a security management unit coupled to the bank card reading unit for storing data based on the first data. Encrypted fourth data is generated from the second data in the security management unit and the third data based on the transaction scenario; and the transaction management control is coupled to the security management unit and is used to transfer the fourth data to the smart terminal. The fourth data is sent to the point-of-sale management service system; wherein the bank card reading unit, the security management unit, and the transaction management control are set in the smart terminal or integrated with it.

Preferably, the second data includes the merchant identification information about the point-of-sale management device approved by the point-of-sale management service system.

Preferably, the security management unit is configured to start a card reading operation mode of the bank card reading unit, and the bank card reading unit reads the first data from the bank card according to the card reading operation mode.

Preferably, the security management unit is further configured to: use the merchant identification information as the first key in the key group to encrypt the combination of the first data, the second data, and the third data to generate fourth data.

Another object of the present invention is to provide a point-of-sale management service system, which can promote the implementation and deployment of point-of-sale management devices that are more mobile and convenient.

To achieve the above object, the present invention provides another technical solution as follows.

A point-of-sale management service system includes: a message receiving unit, which is respectively coupled with a plurality of point-of-sale management devices, and the message receiving unit obtains respective first transaction messages from each point-of-sale management device; a message conversion unit, Coupling with the transaction acceptance background system, the message conversion unit converts the transaction message into a second transaction message allowed by the transaction acceptance background system.

Preferably, the point-of-sale management service system includes a merchant management subsystem, wherein the merchant management subsystem is configured to: receive a registration request from a merchant from the point-of-sale management device; approve the registration request; generate corresponding merchant identification information; and store the merchant identification information Feedback to the point of sale management device.

Preferably, the message receiving unit is configured to decrypt the first transaction message based on the key group including the first key to obtain a decrypted message, wherein the first key corresponds to the location of the merchant management subsystem. Generated business identification information.

Preferably, the message receiving unit is further configured to verify the transaction scenario factor information and the user factor information contained in the first transaction message based on the merchant identification information generated by the merchant management subsystem.

Preferably, the message conversion unit is configured to: obtain a message processing format allowed by the transaction acceptance background system; and reassemble the decrypted message based on the message processing unit to generate a second transaction message.

The invention also discloses a transaction processing system, which is deployed according to a cloud computing platform. The transaction processing system includes: at least one point of sale management device; the point of sale management service system according to any one of claims 6-10; and transactions Acceptance background system; wherein the point-of-sale management service system is configured to: obtain a first transaction message from the point-of-sale management device; generate a second transaction message based on the first transaction message; and forward the second transaction message to the transaction acceptance Back-end system to complete the transaction processing process.

The embodiments of the present invention provide a point-of-sale management device based on an intelligent terminal and a point-of-sale management service system working in cooperation with the terminal. Improve the convenience and popularity of mobile payments. Merchant users can get the same user experience when using the acquiring function as using other apps on the mobile phone.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 shows an architecture diagram of a POS acquiring system in the prior art.

FIG. 2 is a schematic structural diagram of a module of a point-of-sale management device based on an intelligent terminal provided by the present invention.

FIG. 3 shows an architecture diagram of a POS acquiring system provided by the present invention.

FIG. 4 is a schematic flow chart of a business opening a business online.

FIG. 5 is a schematic flow chart of a bank card small double consumption-free business.

detailed description

Specific details are set forth in the following description in order to provide a thorough understanding of the invention. However, it will be apparent to those skilled in the art that embodiments of the present invention can be implemented without these specific details. In the present invention, specific numerical references may be made, such as "first element", "second device", and the like. However, specific numerical references should not be understood as having to obey their literal order, but should be understood as different from "first element" and "second element".

The specific details provided by the present invention are merely exemplary, and the specific details may vary, but still fall within the spirit and scope of the present invention. The term "coupled" is defined to mean directly connected to a component or indirectly connected to a component via another component.

Preferred embodiments of the method, system and device suitable for implementing the present invention are described below with reference to the drawings. Although the embodiments are described for a single combination of elements, it should be understood that the invention includes all possible combinations of the disclosed elements. Therefore, if one embodiment includes elements A, B, and C and the second embodiment includes elements B and D, the present invention should also be considered to include other remaining combinations of A, B, C, or D, even if not explicitly disclosed.

As shown in FIG. 2, a first embodiment of the present invention provides a point-of-sale management device 20 based on a smart terminal, which includes a bank card reading unit 201, a security management unit 202, and a transaction management control 203.

Among them, the point-of-sale management device 20 is integrated with the smart terminal as a whole. Or, alternatively, the point-of-sale management device 20 is provided in a smart terminal.

The bank card reading unit 201 reads the first data from the bank card. As an example, the bank card reading unit 201 includes a near field communication module, which directly reads bank card information (first data) from a bank card or mobile phone held by a user in accordance with the near field communication method to implement a "card swipe" operation.

Specifically, through the mobile phone ’s trusted operating environment TEE directly controlled eSE (security management unit), and the NFC chip card reading mode, a secure interaction channel can be established between the mobile phone and the user's bank card. Using this secure interaction channel, TEE or eSE reads the bank card information, encrypts the read sensitive data, assembles the message, and sends it to the Android system, which is sent to the background by the Android system. In this process, no additional proprietary card reading device is required, which can ensure the safe reading of bank card data by mobile phones, and protect sensitive data such as the two-track information in bank cards from being stolen by malicious programs that may exist on the mobile phone ’s Android system. , Copy, destroy.

The trusted operating environment is independent of the multimedia operating environment, which includes hardware independence and communication independence, which helps to ensure the security of transaction data, so that the point-of-sale management device 20 (which is set in the smart terminal) for multimedia operations The environment has never been able to obtain or change transaction data.

The security management unit 202 is coupled to the bank card reading unit 201 and is configured to generate encrypted fourth data based on the first data, the second data stored in the security management unit, and the third data based on the transaction scenario.

Specifically, the second data includes the unique merchant identification information carried by the point-of-sale management device 20 and approved and issued to the qualified point-of-sale management service system. The third data corresponds to transaction scenario information, such as transaction time, location, transaction amount, and possible discount information. The security management unit 202 is implemented in a trusted operating environment, and it will encrypt the combination of the above first data (bank card information), second data, and third data to form encrypted fourth data (ie, the first transaction Message).

In the data encryption process, as an example, the security management unit 202 may use key group encryption to improve the security of transaction data. The key group may include multiple different keys that are generated by different algorithms or have different sources. Preferably, the key group includes the unique merchant identification information of the point-of-sale management device 20.

The security management unit 202 may also activate the card reading mode of the bank card reading unit 201. In response, the bank card reading unit 201 reads relevant information from the user's bank card. As an example, Emv kernel is implemented in TEE. Through the SE interface under TEE, the card reader applet on eSE is called to create the NFC reading mode and complete the card search operation. Subsequently, through the sending and receiving commands provided by the eSE card reader applet, the card data interaction with the cardholder's bank card or mobile phone Pay is completed.

Further, the card reading applet runs in the eSE, and is responsible for creating a card reading mode with the NFC chip, and provides a corresponding data transmission and reception command interface to the point of sale management device 20. After accepting the command of the point-of-sale management device 20 to complete the creation of the card reading mode, the data sent by the point-of-sale management device 20 can be sent to the cardholder's bank card through the NFC communication module, and the bank card response can be obtained through NFC. The response data is returned to the point-of-sale management device 20 to implement the card reading process. In this process, the entire data interaction is through TEE, eSE, NFC, bank card and other security areas, and does not pass through the Android system side of the phone, which can ensure the security of various sensitive data during the card reading process.

The transaction management control 203 is coupled with the security management unit 202, which transfers the fourth data to the smart terminal, so that the smart terminal sends the fourth data to the point-of-sale management service system. The transaction management control 203 provides a specific interface for the mobile phone POS function to the merchant APP on the smart terminal where the point-of-sale management device 20 is located, including the merchant's opening of small-value payment and transfer functions. When the merchant APP calls these specific functional interfaces, the transaction management control 203 is responsible for invoking the corresponding processing flow and for network forwarding, and supports two-way data communication on the secure channel between the point of sale management device 20 and the point of sale management service system.

As a further improvement, the security management unit 202 and the transaction management control 203 are integrated into one to form an independent physical module. The physical module obtains the user's bank card information from the bank card reading unit 201, and uses the "black box" mode to generate the first The transaction message is sent from the point-of-sale management device 20 to the point-of-sale service management system.

FIG. 3 shows an architecture diagram of a POS acquiring system according to the present invention in contrast to the existing system shown in FIG. 1.

Compared with FIG. 1, the POS acquiring system of the present invention integrates a bank card reading unit in a point-of-sale management device (for example, a merchant's mobile phone), and generates a transaction message in a security management unit in the point-of-sale management device, and The point-of-sale management service system (mobile POS service system) also implements a variety of functionalities, which is different from the mPOS front-end system in the prior art. Specifically, the point-of-sale management device (POS machine) directly reads bank card information from the user's (cardholder) mobile phone or bank card, and directly generates transaction messages in combination with the identification information and transaction scenario information provided by the point-of-sale management device. The transaction message is sent to the point-of-sale management service system to complete the subsequent transaction process.

The second embodiment of the present invention is providing such a point-of-sale management service system, which includes a message receiving unit and a message conversion unit.

The message receiving unit is respectively coupled to a plurality of point-of-sale management devices, and obtains corresponding first transaction messages from each point-of-sale management device. The message conversion unit is coupled to the transaction acceptance background system, and converts the acquired transaction message into a second transaction message allowed by the transaction acceptance background system.

Those skilled in the art understand that the transaction acceptance background system also communicates with the third party acceptance background (CUPS) and the card issuer to perform subsequent processing of the second transaction message, thereby realizing the transaction. The transaction acceptance back-end system performs the final processing of transactions, which can cover various payment processes including bank cards and QR codes. The transaction acceptance background system may include any one of UnionPay omnichannel, QR code payment background, smart POS background, CUPS, or a combination thereof.

As a further improvement, unlike the architecture diagram shown in FIG. 3, the point-of-sale management service system includes a merchant management subsystem configured to perform the following operations: A. Receive registration requests from merchants from each point-of-sale management device; B. Approve or reject the registration request; C. Generate unique merchant identification information on the premise of approval; D. Feedback the merchant identification information to the point-of-sale management device that initiated the registration request. The merchant management subsystem is dedicated to register and manage merchants. The management of merchants and the processing of transaction messages are independent of each other to improve the security and reliability of the system.

According to an embodiment of the present invention, the message receiving unit may perform a decryption process on the first transaction message based on a key group to obtain a decrypted message. If the merchant identification information is used in the data encryption process, correspondingly, the key group used in the decryption process also includes a decryption key corresponding to the merchant identification information.

As described above, the merchant identification information is approved by a qualified point-of-sale management service system and issued to the point-of-sale management device, so that the point-of-sale management service system will have merchant identification information for each point-of-sale management device.

Furthermore, in a preferred case, the message receiving unit may also verify the information in the first transaction message based on the merchant identification information, including but not limited to factor information of the transaction scenario (transaction time, place, amount, etc.) and user factor information (For example, user identification information or bank card information).

The message conversion unit obtains the message processing unit allowed by the background system from the transaction acceptance background system, so as to reassemble the decrypted transaction message based on this format, and generate a second transaction message. The second transaction message is processed by the transaction. Accept the background system processing.

The above-mentioned point-of-sale management service system can work in conjunction with multiple point-of-sale management devices 20 (terminals), which is not only conducive to improving the convenience and popularity of mobile payments, but also can register, manage and even monitor merchants to ensure the transaction and User account security.

A third embodiment of the present invention provides a transaction processing system, which is deployed in accordance with a cloud computing platform. The transaction processing system includes at least one point-of-sale management device as provided in the first embodiment above, and sales as provided in the second embodiment above. Point management service system and transaction acceptance background system. The point-of-sale management service system is configured to obtain a first transaction message from the point-of-sale management device; generate a second transaction message based on the first transaction message; and transfer the second transaction message to the transaction acceptance background system to complete Transaction processing flow.

In some embodiments of the present invention, at least a part of the system may be implemented using a group of distributed computing devices connected to a communication network, or based on a "cloud". In such a system, multiple computing devices operate together to provide services by using their shared resources.

"Cloud" -based implementations can provide one or more advantages, including: openness, flexibility and scalability, central management, reliability, scalability, optimization of computing resources, aggregation and analysis across multiple The user's ability to connect, connect across multiple geographic areas, and use multiple mobile or data network operators for network connectivity.

FIG. 4 is a schematic flow chart of a business opening a business online. When a merchant needs to enable the mobile phone POS function on their mobile phones, they can obtain from the acquirer (such as the acquirer's website, etc.) whether their mobile phone model supports mobile POS. If so, they can download and install the corresponding mobile phone from the acquirer. After the merchant APP, and after registering the merchant app, the mobile POS function is completed.

The main process is as follows:

After the merchant logs in to the merchant APP through the point-of-sale management device (mobile POS terminal), click the merchant activation button to complete the entry of various merchant qualification elements, such as name, bank card number, ID card, business license (for small This information is not required for micro-merchants), etc., by calling and opening the mobile phone POS function interface, the data is transferred to the transaction management control (mobile POS control);

After the transaction management control obtains the mobile phone's trusted device identification code (including TEE ID, eSE ID and other information) through the point of sale management device, it is assembled into a merchant opening information message and provided to the point of sale management service system (mobile POS service system);

The point-of-sale management service system records the device identification code of the mobile phone and sends the merchant qualification elements to the merchant management platform (or subsystem) according to the requirements of the merchant management platform (or subsystem);

The acquirer completes the verification of the merchant qualification elements submitted by the merchant on the merchant management platform (or subsystem), and the merchant management background generates the corresponding acquirer ID, merchant number and other mobile phone merchant information and returns it to the point of sale management device.

The point-of-sale management service system records the merchant information such as the corresponding merchant number, acquirer ID, and returns the merchant activation notification to the transaction management control, and then returns the notification information to the merchant APP to complete the merchant APP activation.

FIG. 5 is a schematic flow chart of a bank card small double consumption-free business. The mobile phone POS reads the cardholder's bank card or mobile phone Pay through the NFC non-contact method, and completes the cardholder's bank card consumption.

The specific process is as follows:

After the merchant logs in the merchant APP, click the bank card swipe button, enter the amount of consumption, and then call the mobile phone POS terminal to initiate the bank card consumption process by calling the bank card payment interface of the mobile POS control;

After the mobile phone POS side calls the eSE card reader applet to create a card reading mode between eSE and NFC, the card reader applet is called for card search operation;

The cardholder presents the bank card or mobile phone Pay to the merchant's mobile phone for card swiping, and the NFC chip will obtain the information found by the card and send it to the mobile phone POS terminal through the card reader applet;

According to the emv kernel, the mobile phone POS terminal completes the QPBOC small double-free interaction process with the bank card (or mobile phone Pay) by calling the sending and receiving commands of the card reading applet;

The mobile POS end establishes a secure channel with the mobile POS service system through the mobile POS control, generates a consumer message, and sends the consumer message to the mobile POS service system through the secure channel;

The mobile POS service system verifies whether the mobile phone is turned on and the corresponding merchant number, acquirer, and other information match the mobile device identification code based on the mobile device identification code and merchant number acquirer number in the consumer message. After passing, the message is parsed and reassembled according to the connected reception background, and sent to the reception background to complete the final processing;

The acceptance background returns the processed results to the mobile POS service system, and finally forwards them to the corresponding consumption processing results of the merchant APP.

In order to further ensure security, the emv kernel in the POS side of the mobile phone can be implemented on the eSE side. After the eSE completes the small double-free interaction process with the bank card directly through the NFC chip, the key is used to sensitively read the bank card. (Two-track information, etc.) is encrypted and then returned to the mobile phone POS side.

According to the embodiments of the present invention, at least the following beneficial technical effects can be achieved:

1. Without the need for any external equipment and in-depth system customization of the mobile phone, directly use the personal mobile phone owned by the merchant to implement the bank card acquiring POS function, which can not only improve the convenience and efficiency of merchant acquiring, but also enable merchant users to use When acquiring functions, the experience is the same as using other apps on the phone, which significantly improves the user experience of the acquiring product.

2. Since there is no need to purchase any proprietary equipment, merchants only need to download and install the APP on their personal mobile phones, and submit materials online to complete the APP activation, which improves the efficiency and timeliness of merchant POS function activation.

3. Without any proprietary equipment, directly using the merchant's personal mobile phone, which also reduces the labor, capital and time costs of channel procurement, maintenance and other aspects required by the acquiring institution to deploy POS machines in the past, and economically provides merchants with acquiring Capabilities, reducing the difficulty of POS machine management. The above description is only directed to the preferred embodiments of the present invention, and is not intended to limit the protection scope of the present invention. Those skilled in the art may make various modified designs without departing from the idea of the present invention and the accompanying claims.

Claims (11)

1. A point-of-sale management device based on an intelligent terminal includes:

   A bank card reading unit, configured to read the first data from the bank card;

   A security management unit coupled to the bank card reading unit and configured to generate encrypted fourth data based on the first data, second data stored in the security management unit, and third data based on a transaction scenario; and

   A transaction management control coupled to the security management unit and configured to transfer the fourth data to the smart terminal, so that the smart terminal sends the fourth data to a point-of-sale management service system;

   The bank card reading unit, the security management unit, and the transaction management control are provided in the smart terminal or integrated with the smart terminal.
2. The device according to claim 1, wherein the second data includes merchant identification information about the point-of-sale management device and approved by the point-of-sale management service system.
3. The apparatus according to claim 2, wherein the security management unit is configured to:

   The card reading mode of the bank card reading unit is started, and the bank card reading unit reads the first data from the bank card according to the card reading mode.
4. The apparatus according to claim 3, wherein the security management unit is further configured to:

   The merchant identification information is used as the first key in the key group to encrypt the combination of the first data, the second data, and the third data to generate the fourth data.
5. The device according to any one of claims 1 to 4, wherein the bank card reading unit includes at least a near field communication module.
6. A point-of-sale management service system includes:

   A message receiving unit, which is respectively coupled with a plurality of point-of-sale management devices, and the message receiving unit obtains a corresponding first transaction message from each of the point-of-sale management devices;

   A message conversion unit is coupled to the transaction acceptance background system, and the message conversion unit converts the transaction message into a second transaction message allowed by the transaction acceptance background system.
7. The system of claim 6, wherein the point of sale management service system comprises a merchant management subsystem, wherein the merchant management subsystem is configured to:

   Receiving a registration request from a merchant from the point-of-sale management device;

   Approve the registration request;

   Generate corresponding business identification information; and

   Feedback the merchant identification information to the point-of-sale management device.
8. The system according to claim 7, wherein the message receiving unit is configured to:

   Decrypting the first transaction message based on a key group including a first key to obtain a decrypted message, wherein the first key corresponds to the generated by the merchant management subsystem Merchant identification information.
9. The system according to claim 8, wherein the message receiving unit is further configured to:

   Verifying transaction scenario factor information and user factor information contained in the first transaction message based on the merchant identification information generated by the merchant management subsystem.
10. The system according to any one of claims 6 to 9, wherein the message conversion unit is configured to:

    Obtaining a message processing format allowed by the transaction acceptance background system;

    Recombining the decrypted message based on the message processing unit to generate the second transaction message.
11. A transaction processing system is deployed in accordance with a cloud computing platform. The transaction processing system includes:

    At least one point of sale management device according to any one of claims 1-5;

    The point-of-sale management service system according to any one of claims 6-10; and

    Transaction acceptance background system;

    The point-of-sale management service system is configured to:

    Acquiring a first transaction message from the point-of-sale management device;

    Generating a second transaction message based on the first transaction message; and

    The second transaction message is forwarded to the transaction acceptance background system to complete the transaction processing flow.

Images