WO2021196892A1

WO2021196892A1 - Biometric identification payment method and apparatus, gateway device and storage medium

Info

Publication number: WO2021196892A1
Application number: PCT/CN2021/075657
Authority: WO
Inventors: 周明; 陈旭; 沈鑫
Original assignee: 中国银联股份有限公司
Priority date: 2020-04-03
Filing date: 2021-02-05
Publication date: 2021-10-07
Also published as: CN111539732A; CN111539732B

Abstract

A biometric identification payment method and apparatus (300), a gateway device (400) and a storage medium, which relate to the field of data processing. The biometric identification payment method comprises: receiving a biometric identification routing payment request message (S101), the biometric identification routing payment request message comprising a first biometric identification payment group token and first biological characteristic data, and the first biometric identification payment group token being used to show that the user who initiated the biometric identification routing payment request message has a permission for biometric identification payment in a first group; determining the first group according to the first biometric identification payment group token, so as to perform biometric identification by using the first biological characteristic data and a biological characteristic database corresponding to the first group, and obtaining a biometric identification result (S102); and sending the biometric identification result to a payment device, so that the payment device initiates a payment process according to the biometric identification result (S103). The described technical solution can improve the security of biometric identification payment by a user.

Description

Biometric payment method, device, gateway device and storage medium

Cross-references to related applications

This application claims the priority of the Chinese patent application 202010259375.5 entitled "Biometric Payment Method, Device, Gateway Device and Storage Medium" filed on April 3, 2020, the entire content of which is incorporated herein by reference.

Technical field

This application belongs to the field of data processing, and in particular relates to a biometric payment method, device, gateway device and storage medium.

Background technique

With the gradual development of payment technology, the efficiency and convenience of payment have become the focus of users' attention. Among them, biometric payment has been widely promoted due to its high efficiency and convenience, and has now become a major technology in payment technology.

Biometric identification is a kind of biometric identification technology based on biometric information for identity authentication. Biometric payment is a technology that uses biometrics to make payments or transactions. The user's biometric data collected during the biometric payment process is the user's personal privacy data. However, due to the large-scale promotion of face payment, there is a risk that users' personal privacy data will be abused on a large scale. In the case where there is a risk of personal privacy data being abused on a large scale, the risk of users' personal privacy data being leaked also increases. Once the user's personal privacy data is leaked, the security of the user's biometric payment will be greatly affected.

Summary of the invention

The embodiments of the present application provide a biometric payment method, device, gateway device, and storage medium, which can improve the security of a user's biometric payment.

In the first aspect, an embodiment of the present application provides a biometric payment method applied to a gateway device. The method includes: receiving a biometric routing payment request message. The biometric routing payment request message includes a first biometric payment group token and a first biometric payment group token. A biometric data, the first biometric payment group token is used to characterize that the initiating user of the biometric routing payment request message has the authority of biometric payment in the first group; determined according to the first biometric payment group token The first group uses the first biometric data and the biometric database corresponding to the first group to perform biometric identification to obtain the biometric result; send the biometric result to the payment device so that the payment device initiates payment based on the biometric result Process.

In a second aspect, an embodiment of the present application provides a biometric payment device, including: a receiving module, configured to receive a biometric routing payment request message, the biometric routing payment request message including a first biometric payment group token and a first Biometric data, the first biometric payment group token is used to characterize that the initiating user of the biometric routing payment request message has the authority to make biometric payments in the first group; the processing module is used to pay according to the first biometric payment group The group token determines the first group to perform biometric identification using the first biometric data and the biometric database corresponding to the first group to obtain the biometric result; the sending module is used to send the biometric result to the payment device to Make the payment device initiate the payment process based on the biometric result.

In a third aspect, embodiments of the present application provide a gateway device, including a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the technical solution as in the first aspect is implemented. The biometric payment method in.

In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the biometric payment method in the technical solution of the first aspect is implemented.

The embodiments of the present application provide a biometric payment method, device, gateway device, and storage medium. The gateway device receives a biometric routing payment request message including a first biometric payment group token and first biometric data. The first group is determined according to the first biometric payment group token, so that the first biometric data and the biometric database corresponding to the first group are used for biometric identification to obtain a biometric identification result. The biometric results can be used by the payment device to initiate the payment process. Wherein, the first biometric payment group token may indicate that the user has the authority of biometric payment in the first group. The use of biometric payment group tokens reduces the user's biometric data in the payment application scope to the group, reduces the risk of the user's personal privacy data being abused on a large scale, and reduces the risk of the user's personal privacy data being leaked, thereby Improve the security of users' biometric payment.

Description of the drawings

This application can be better understood from the following description of the specific embodiments of the present invention in conjunction with the accompanying drawings. Wherein, the same or similar reference signs indicate the same or similar features.

FIG. 1 is a schematic structural diagram of an example of a biometric payment system shown in an embodiment of the application;

FIG. 2 is a flowchart of an embodiment of the biometric payment method provided by this application;

FIG. 3 is a flowchart of another embodiment of the biometric payment method provided by this application;

FIG. 4 is a flowchart of another embodiment of the biometric payment method provided by this application;

5 is a flowchart of an example of a biometric payment method in a biometric payment system provided by an embodiment of the application;

FIG. 6 is a flowchart of still another embodiment of the biometric payment method provided by this application;

FIG. 7 is a schematic structural diagram of an embodiment of a biometric payment device provided by this application;

FIG. 8 is a schematic structural diagram of another embodiment of the biometric payment device provided by this application;

FIG. 9 is a schematic diagram of the hardware structure of an embodiment of the gateway device provided by this application.

Detailed ways

The features and exemplary embodiments of various aspects of the present application will be described in detail below. In the following detailed description, many specific details are proposed in order to provide a comprehensive understanding of the application. However, it is obvious to those skilled in the art that this application can be implemented without some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by showing examples of the present application. This application is by no means limited to any specific configurations and algorithms proposed below, but covers any modification, replacement and improvement of elements, components and algorithms without departing from the spirit of this application. In the drawings and the following description, well-known structures and technologies are not shown in order to avoid unnecessary obscurity of the application.

Biometric payment is a technology that uses biometrics to make payments or transactions. Since biometric payment involves personal privacy data such as the user's biometric data, the security of biometric payment has become a key issue that requires attention. FIG. 1 is a schematic structural diagram of an example of a biometric payment system shown in an embodiment of the application. As shown in Figure 1, the biometric payment system may include a payment device, an acquiring server, a gateway device, and a service server. The identification of biometric authority and biometric identification can be carried out between the payment device and the network device. The interaction between the gateway device and the payment device can be performed through the acquiring server. The payment device and the business server can perform the payment process. The interaction between the payment device and the service server can be carried out through the acquiring server.

This application provides a biometric payment method, device, gateway device, and storage medium, which can be applied to a scenario where a user makes a biometric payment. The biometric payment method in this application can be specifically applied to a gateway device, that is, executed by the gateway device. The biometric payment method in this application can use the biometric payment group token to limit the scope of the user's ability to use biometric payment, thereby avoiding the risk of the user's personal privacy data being abused on a large scale, and improving the security of biometric payment. It is worth mentioning that the token mentioned in this application is Token.

Fig. 2 is a flowchart of an embodiment of the biometric payment method provided by this application. As shown in Figure 2, the biometric payment method may include steps S101 to S103.

In step S101, a biometric routing payment request message is received.

The user may first send a biometric routing payment request message to the acquiring device through the payment device, and the acquiring device then sends the biometric routing payment request message to the gateway device. The biometric routing payment request message received by the network device may include the first biometric payment group token and the first biometric data. The first biometric payment group token is used to characterize that the initiating user of the biometric routing payment request message has the authority of biometric payment in the first group. The first biometric payment group token is a biometric payment group token. The biometric payment group token is used to signify that the user has the authority of biometric payment in the group. The biometric payment group token can indicate a user who has the authority of biometric payment, or a group of which the user has the authority of biometric payment. The biometric payment group token is unique. For ease of description, the biometric payment group token included in the biometric routing payment request message is referred to as the first biometric payment group token. The first group is the group. For ease of description, the group indicated by the first biometric payment group token is referred to as the first group.

The first biometric payment group token in different biometric routing payment request messages may be different, which is not limited here. The users with the biometric payment authority indicated by different first biometric payment group tokens may be different, which is not limited herein. Different first biometric payment group tokens indicate that the first groups of users having biometric payment permissions may be different, which is not limited herein.

The group may be a group divided by the user, a group divided by a service provider that interacts with the user, or a group divided by the payment itself, which is not limited here. For example, a group may be a group divided by service members, for example, a member of supermarket A is divided into one group, and a member of supermarket B is divided into another group. For another example, a group may be a group divided by a business district, a payment occurring in the A business district is divided into one group, and a payment occurring in the B business district is divided into another group.

The first biometric data is the user's biometric data collected when the payment device initiates the biometric routing payment request message. The biometric data may specifically include facial feature data, fingerprint feature data, palmprint feature data, iris feature data, etc., which are not limited herein. The first biometric data contained in different biometric routing payment request messages may be different, which is not limited here.

In step S102, the first group is determined according to the first biometric payment group token, so that the first biometric data and the biometric database corresponding to the first group are used for biometric identification to obtain a biometric identification result.

According to the first biometric payment group, the group to which the user has the authority of biometric payment can be determined, that is, the first group. In the biometric identification process, the first biometric data and the biometric database corresponding to the determined first group are used for biometric identification. Biometrics are only implemented in the first group, which narrows the scope of application of biometric data and reduces the risk of misuse of biometric data.

The result of biometric recognition is used to characterize the success or failure of biometric recognition. In some examples, the biometric identification can be completed by the gateway device, that is, the gateway generates the biometric identification result. In other examples, the biometric identification can be completed by the business server, that is, the business server generates the biometric identification result. The gateway device can obtain the biometric result from the service server.

In step S103, the biometric identification result is sent to the payment device, so that the payment device initiates a payment process according to the biometric identification result.

Specifically, the gateway device may first send the biometric identification result to the acquiring device. The acquiring device then sends the biometric identification result to the payment device. The payment device receives the biometric result, and can initiate a payment process based on the biometric result. For example, in the case where the biometric identification result represents the successful biometric identification, the payment device may send a payment transaction request to the service server. This biometric payment is realized through the interaction between the payment device and the service server. Among them, the payment transaction request may include a user account, a payment password, a payment token, etc., which are not limited here.

In the embodiment of the present application, the gateway device receives the biometric routing payment request message including the first biometric payment group token and the first biometric data. The first group is determined according to the first biometric payment group token, so that the first biometric data and the biometric database corresponding to the first group are used for biometric identification to obtain a biometric identification result. The biometric results can be used by the payment device to initiate the payment process. Wherein, the first biometric payment group token may indicate that the user has the authority of biometric payment in the first group. The use of biometric payment group tokens reduces the user's biometric data in the payment application scope to the group, reduces the risk of the user's personal privacy data being abused on a large scale, and reduces the risk of the user's personal privacy data being leaked, thereby Improve the security of users' biometric payment.

FIG. 3 is a flowchart of another embodiment of the biometric payment method provided by this application. The difference between FIG. 3 and FIG. 2 is that step S102 in FIG. 2 can be specifically refined into step S1021 and step S1022 in FIG. 3.

In step S1021, based on the pre-stored binding relationship between the user ID and the biometric payment group token, it is determined whether the first user ID and the first biometric payment group token have a binding relationship.

Wherein, the biometric routing payment request message may also include the first user identification. The first user ID is a user ID, which is used to identify a user, and can specifically be a user account, a user card number, etc., which is not limited here. For ease of description, the user identification included in the biometric routing payment request message is referred to as the first user identification.

The gateway device may pre-store the binding relationship between the user identification and the biometric payment group token. The user identity can be authenticated through the binding relationship between the user ID and the biometric payment group token. Specifically, if there is a corresponding relationship between the first user ID and the first biometric payment group token in the pre-stored binding relationship between the user ID and the biometric payment group token, it means that the first user ID and the first biometric payment group token have a corresponding relationship. The identification payment group token has a binding relationship, and the biometric routing payment request message is valid. If there is no corresponding relationship between the first user ID and the first biometric payment group token in the pre-stored binding relationship between the user ID and the biometric payment group token, it means that the first user ID and the first biometric payment are The group token does not have a binding relationship, and the biometric routing payment request message is invalid.

In step S1022, when it is determined that the first user ID and the first biometric payment group token have a binding relationship, the first group is determined according to the first biometric payment group token, so as to use the first biometric payment group token. The feature data and the biometric database corresponding to the first group perform biometric identification to obtain a biometric identification result.

When it is determined that the first user ID and the first biometric payment group token have a binding relationship, it indicates that the biometric routing payment request message is valid, and the first group can be determined to use the first biometric data and the first biometric payment group token. A biometric database corresponding to a group performs biometric identification.

In the case where it is determined that the first user ID and the first biometric payment group token do not have a binding relationship, it means that the biometric routing payment request message is invalid, and there is no need to perform the determination of the first group to use the first biometric data The step of performing biometric identification with the biometric database corresponding to the first group.

Further, the biometric routing payment request message may further include the first payment token. The first payment token is a payment token. The payment token is used for payment verification when the payment device and the service server perform the payment process. For ease of description, the payment token included in the biometric routing payment request message is referred to as the first payment token.

Correspondingly, in order to further ensure the security of the user's personal privacy data, the validity of the biometric routing payment request message can be determined. In the above embodiment, based on whether the first user ID and the first biometric payment group token have a binding relationship, it can also be combined with whether the first user ID and the first payment token have a binding relationship. Identify the validity of the routing payment request message. The above step S1022 may specifically include step S1022a and step S1022b.

In step S1022a, when it is determined that the first user ID and the first biometric payment group token have a binding relationship, based on the pre-stored binding relationship between the user ID and the payment token, it is determined that the first user ID and the payment token have a binding relationship. Whether the first payment token has a binding relationship.

The gateway device also pre-stores the binding relationship between the user identification and the payment token. Specifically, if there is a corresponding relationship between the first user ID and the first payment token in the pre-stored binding relationship between the user ID and the payment token, it means that the first user ID and the first payment token have a binding relationship, and Identifies that the routing payment request message is valid. If there is no corresponding relationship between the first user ID and the first payment token in the pre-stored binding relationship between the user ID and the payment token, it means that the first user ID does not have a binding relationship with the first payment token. The routing payment request message is invalid.

In step S1022b, when it is determined that the first user ID and the first payment token have a binding relationship, the first group is determined according to the first biometric payment group token, so as to use the first biometric data and the first payment token. A biometric database corresponding to a group performs biometric identification to obtain a biometric identification result.

In the case where it is determined that the first user ID and the first payment token have a binding relationship, it indicates that the biometric routing payment request message is valid, and the first group can be determined to use the first biometric data to correspond to the first group Biometric database for biometric steps.

In the case where it is determined that the first user ID and the first payment token do not have a binding relationship, it means that the biometric routing payment request message is invalid, and there is no need to perform determining the first group to use the first biometric data and the first group. Set the corresponding biometric database to perform biometric identification steps.

In the above embodiment, the biometric payment group token, biometric data, user identification, and payment token of the same user can all have a binding relationship, and the biometric payment group token and biometric data can be used. , The binding relationship between the user ID and the payment token determines the comprehensive validity of the biometric routing payment request message, which will not be illustrated one by one here.

FIG. 4 is a flowchart of another embodiment of the biometric payment method provided by this application. The difference between FIG. 4 and FIG. 2 is that in the case that the biometric database is stored in the gateway device, step S102 in FIG. 2 can be specifically refined into step S1023 and step S1024 in FIG. 4; it is stored in the service server In the case of a biometric database, step S102 in FIG. 2 can be specifically refined into step S1025 and step S1026 in FIG. 4.

In step S1023, the first group is determined according to the first biometric payment group token.

The first biometric payment group token may indicate the first group. In some examples, at least a portion of the first biometric payment group token can indicate the first group. For example, the first biometric payment group token may be implemented as a character string, a part of the character string may be a group identifier, and the group identifier may indicate the first group.

In step S1024, the first biometric data is matched with the biometric data in the biometric database corresponding to the first group to obtain a biometric recognition result.

The gateway device may store at least one biometric database. Each biometric database corresponds to a group. When performing biometric identification, there is no need to match the first biometric data with the biometric data in each biometric database, only the biometric data in the biometric database corresponding to the first group and the first biometric data are used. The data can be matched.

For example, 6 biometric databases are stored in the gateway device, and the 6 biometric databases correspond to group A1, group A2, group A3, group A4, group A5, and group A6, respectively. In the case where the first group determined according to the first biometric payment group token is the group A3, the first biometric data is used to match the biometric data in the biometric database corresponding to the group A3.

In step S1025, the first group is determined according to the first biometric payment group token, and the first biometric data and the group identification of the first group are sent to the service server.

The business server stores at least one biometric database, and each biometric database corresponds to a group. The service server receives the group identifier of the first group, and can use the group identifier of the first group to determine the biometric database corresponding to the first group. When the business server performs biometric identification, it does not need to match the first biometric data with the biometric data in each biometric database, and only needs to use the biometric data in the biometric database corresponding to the first group and the first biometric data. The biometric data can be matched.

In step S1026, the result of the biometric recognition is received.

Wherein, the biometric identification result is obtained by the service server matching the first biometric data with the biometric data in the biometric database corresponding to the first group. The service server sends the biometric identification result to the gateway device, and the gateway device can determine whether the biometric identification is successful or the biometric identification fails according to the received biometric identification result.

The business server may belong to the acquiring institution. Since the business server can provide service providers such as merchants with payment terminal management, payment initiation, fund settlement and other functional services, the business server can more accurately divide the group, thereby storing the biometric database corresponding to the accurately divided group , Improve the accuracy of biometric database division and management. Moreover, because the business server is closely related to service providers such as merchants, it is easier to manage and update the biometric database, making the biometric database more efficient.

In the above embodiment, the biometric database corresponds to the group one-to-one, and the biometric data of a large number of users is stored in separate databases. In the process of biometric identification, a specific biometric database can be quickly located according to the user's group, which relieves the data carrying capacity of the gateway device or service server, and also improves the response speed of biometric payment.

The following will take an example to illustrate the application of the biometric payment method in the biometric payment system. Fig. 5 is a flowchart of an example of a biometric payment method in a biometric payment system provided by an embodiment of the application. As shown in FIG. 5, the biometric payment method in the biometric payment system may specifically include step S201 to step S210.

In step S201, the payment device sends a biometric routing payment request message to the acquiring device.

In step S202, the acquiring device sends a biometric routing payment request message to the gateway device.

In step S203, the gateway device verifies the validity of the biometric routing payment request message.

In step S204, when the biometric identification routing payment request message is valid, the gateway device uses the first biometric feature and the biometric feature corresponding to the first group to perform biometric identification to obtain a biometric identification result.

In step S205, the gateway device sends the biometric identification result to the acquiring device.

In step S206, the acquiring device sends the biometric identification result to the payment device.

In step S207, the payment device sends a payment transaction request message to the acquiring device when the biometric identification result indicates that the biometric identification is successful.

The payment transaction request message may include a payment token, a payment password, a user identification, etc., which are not limited herein.

In step S208, the acquiring device sends a payment transaction request message to the service server.

In step S209, the service server generates a payment transaction response message and sends it to the acquiring device.

The payment transaction response message is used to characterize whether the biometric payment is successful.

In step S210, the acquiring device sends a payment transaction response message to the payment terminal.

In some examples, the foregoing business server may specifically include a server in a clearing system and a server in a card issuing business system, which is not limited herein.

Fig. 6 is a flowchart of still another embodiment of the biometric payment method provided by this application. The difference between FIG. 6 and FIG. 2 is that the biometric payment method shown in FIG. 6 may further include step S104 to step S107.

In step S104, a biometric group payment activation request message is received.

Wherein, the biometric group payment activation request message includes the second user identification and group information. The group information is used to characterize the second group. The second user ID is the user ID. For ease of description, the user identifier included in the biometric group payment activation request message is referred to as the second user identifier. The second group is a group. For ease of description, the group represented by the group information in the biometric group payment activation request message is referred to as the second group.

The second user identification in different biometric group payment activation request messages may be different, which is not limited here. The group information in different biometric group payment activation request messages may be different, and the second group represented by the group information in different biometric group payment activation request messages may be different, which is not limited herein.

In step S105, a second biometric payment group token is generated according to the second user identification and the group information.

The second biometric payment group token is used to characterize that the user who initiated the biometric group payment activation request message has the authority of biometric payment in the second group. That is, the second biometric payment group token may indicate a user who has the authority of biometric payment, and may also indicate the second group of which the user has the authority of biometric payment. The second biometric payment group token is a biometric payment group token. For ease of description, the biometric payment group token generated after receiving the biometric group payment activation request message is referred to as the second biometric payment group token. The users indicated by the different second biometric payment group tokens and the indicated second groups may be different.

In some examples, the second user identification and group information may be processed to generate a second biometric payment group token. The processing of the second user identification and the group information may specifically be processing means such as merging, tokenization processing, encryption, etc., which is not limited herein.

In step S106, the binding relationship between the second user ID and the second biometric payment group token is stored.

In the case where it is determined that the user who initiated the biometric group payment activation request message has the authority to activate the biometric payment in the second group, the gateway device stores the second user identification and the second biometric payment group token. Binding relationship. In the process of the user identified by the second user ID making biometric payment, the gateway device can be used to store the binding relationship between the second user ID and the second biometric payment group token to verify the biometric route initiated by the user Whether the payment request message is valid.

In step S107, a face payment group activation response message is sent to the payment device.

Specifically, the gateway device may first send a face payment group activation response message to the acquiring device. The acquiring system then sends the face payment group activation response message to the payment device.

The face payment group activation response message includes the second biometric payment group token. The gateway device transmits the second biometric payment group token, which is the second biometric payment group token, to the payment device through the face payment group activation response message. The payment device may provide the second biometric payment group token to the gateway device in the subsequent process to realize the biometric payment.

In some examples, after receiving the biometric group payment activation request message, the gateway device may also send an identity verification request message to the service server. The identity verification request message includes the second user identification. The service server receives the second user ID, performs identity verification on the user corresponding to the second user ID, and generates an identity verification response message to send to the gateway device. The gateway device receives the identity verification response message from the service server. The identity verification response message is used to characterize whether the identity verification of the second user identity is successful.

Only when the identity verification response message indicates that the identity verification of the second user identity is successful, the above steps S105 to S107 are executed to further ensure the personal privacy of the user.

In some examples, the biometric group payment activation request message may further include the second biometric data. The second biometric data is biometric data. For ease of description, the biometric data included in the biometric group payment activation request message is referred to as second biometric data. The second biometric data is collected before initiating the biometric group payment activation request message. The gateway device can store the second biometric data in the biometric database corresponding to the second group for use in the subsequent biometric payment process.

In some examples, the group information in the foregoing embodiment may include the group identification of the second group and/or the collection channel information of the second biometric data. Different collection channels for collecting the second biometric data can correspond to different groups. Therefore, the corresponding second group can be determined according to the collection channel information of the second biometric data. For example, C city has business districts A1, A2, and A3. The collection channel information indicates that the second biometric data is collected in the business district A1, and the second group corresponding to the collected channel information is the group corresponding to the business district A1. The collection channel information indicates that the second biometric data is collected in the business district A2, and the second group corresponding to the collected channel information is the group corresponding to the business district A2. The collection channel information indicates that the second biometric data is collected in the business district A3, and the second group corresponding to the collected channel information is the group corresponding to the business district A3.

In some examples, after receiving the biometric group payment activation request message, the gateway device may also generate a second payment token according to the second user identification. The face payment group activation response message may also include the second payment token. The second payment token is a payment token. Here, for the convenience of description, the payment token generated according to the second user identifier after receiving the biometric group payment activation request message is referred to as the second payment token. The gateway device can store the binding relationship between the second user ID and the second payment token, so that in the subsequent biometric payment process, the binding relationship between the second user ID and the second payment token can be used to determine the user’s biometric identification Validity of routing payment request messages.

In the above embodiment, the service server and the gateway device can also synchronize at least part of the biometric payment information with each other. For example, the biometric payment information may include at least part of the user's mobile phone number, biometric data cipher text, biometric routing index, service party organization code, payment card number, etc., which are not limited here.

In some examples, the data in the aforementioned gateway device, payment device, acquiring device, and service server can be independently encrypted and stored, and data modification is prohibited, that is, data modification operations are invalid operations, which further improves the controllability of user privacy data , Safety, stability and reliability.

The application also provides a biometric payment device. FIG. 7 is a schematic structural diagram of an embodiment of a biometric payment device provided by this application. As shown in FIG. 7, the biometric payment device 300 may include a receiving module 301, a processing module 302 and a sending module 303.

The receiving module 301 is configured to receive a biometric routing payment request message, where the biometric routing payment request message includes a first biometric payment group token and first biometric data.

Wherein, the first biometric payment group token is used to characterize that the initiating user of the biometric routing payment request message has the authority of biometric payment in the first group.

The processing module 302 is configured to determine the first group according to the first biometric payment group token, so as to perform biometric identification using the first biometric data and the biometric database corresponding to the first group , Get the biometric results.

The sending module 303 is configured to send the biometric identification result to the payment device, so that the payment device initiates a payment process according to the biometric identification result.

In the embodiment of the present application, the biometric payment device receives the biometric routing payment request message including the first biometric payment group token and the first biometric data. The first group is determined according to the first biometric payment group token, so that the first biometric data and the biometric database corresponding to the first group are used for biometric identification to obtain a biometric identification result. The biometric results can be used by the payment device to initiate the payment process. Wherein, the first biometric payment group token may indicate that the user has the authority of biometric payment in the first group. The use of biometric payment group tokens reduces the user's biometric data in the payment application scope to the group, reduces the risk of the user's personal privacy data being abused on a large scale, and reduces the risk of the user's personal privacy data being leaked, thereby Improve the security of users' biometric payment.

In some examples, the biometric routing payment request message may also include the first user identification. Correspondingly, the processing module 302 may be specifically configured to determine whether the first user ID and the first biometric payment group token have a binding relationship based on the pre-stored binding relationship between the user ID and the biometric payment group token , The biometric payment group token is used to characterize that the user has the authority to pay in the group; in the case where it is determined that the first user ID and the first biometric payment group token have a binding relationship, according to the first The biometric payment group token determines the first group to perform biometric identification using the first biometric data and a biometric database corresponding to the first group to obtain a biometric identification result.

In some examples, the biometric routing payment request message may also include the first payment token. Correspondingly, the processing module 302 may be specifically configured to: in a case where it is determined that the first user ID and the first biometric payment group token have a binding relationship, based on the pre-stored binding relationship between the user ID and the payment token, Determine whether the first user ID and the first payment token have a binding relationship; in the case where it is determined that the first user ID and the first payment token have a binding relationship, the first biometric payment group token is used to determine the first The group uses the first biometric data and the biometric database corresponding to the first group to perform biometric identification to obtain a biometric identification result.

In some examples, the biometric payment device stores at least one biometric database. Each biometric database corresponds to a group.

The processing module 302 may be specifically configured to: determine the first group according to the first biometric payment group token; match the first biometric data with the biometric data in the biometric database corresponding to the first group to obtain the biometric Recognition results.

In another example, the service server stores at least one biometric database. Each biometric database corresponds to a group.

The processing module 302 may be specifically configured to determine the first group according to the first biometric payment group token.

The sending module 303 may also be used to send the first biometric data and the group identification of the first group to the service server.

The receiving module 301 can also be used to receive biometric results.

Wherein, the biometric identification result is obtained by the service server matching the first biometric data with the biometric data in the biometric database corresponding to the first group.

FIG. 8 is a schematic structural diagram of another embodiment of the biometric payment device provided by this application. The difference between FIG. 8 and FIG. 7 is that the biometric payment device 300 shown in FIG. 8 may further include a group token generation module 304, a storage module 305, and a payment token generation module 306.

The above-mentioned receiving module 301 can also be used to receive a biometric group payment activation request message.

Wherein, the biometric group payment activation request message includes the second user identification and group information. The group information is used to characterize the second group.

The group token generation module 304 may be used to generate a second biometric payment group token according to the second user identification and group information.

Wherein, the second biometric payment group token is used to characterize that the initiating user of the biometric group payment activation request message has the authority of biometric payment in the second group.

The storage module 305 may be used to store the binding relationship between the second user ID and the second biometric payment group token.

The aforementioned sending module 303 can also be used to send a face payment group activation response message to the payment device. The face payment group activation response message includes the second biometric payment group token.

In some examples, the aforementioned sending module 303 is also used to send an identity verification request message to the service server.

Wherein, the identity verification request message includes the second user identification.

The above-mentioned receiving module 301 may also be used to receive an identity verification response message from the service server.

Wherein, the identity verification response message is used to characterize whether the identity verification of the second user identity is successful.

The group token generation module 304 may be specifically configured to generate a second biometric payment group token according to the second user ID and group information when the identity verification response message indicates that the identity verification of the second user ID is successful.

In some examples, the biometric group payment activation request message further includes the second biometric data. The aforementioned storage module 305 may also be used to store the second biometric data in the biometric database corresponding to the second group.

The group information in the foregoing embodiment may include the group identification of the second group and/or the collection channel information of the second biometric data.

The payment token generation module 306 may be used to generate a second payment token according to the second user identification.

The storage module 305 may also be used to store the binding relationship between the second user ID and the second payment token.

Wherein, the face payment group activation response message further includes the second payment token.

This application also provides a gateway device. FIG. 9 is a schematic diagram of the hardware structure of an embodiment of the gateway device provided by this application. As shown in FIG. 9, the gateway device 400 includes a memory 401, a processor 402, and a computer program stored on the memory 401 and running on the processor 402.

In an example, the aforementioned processor 402 may include a central processing unit (CPU) or a specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

The memory 401 may include a large-capacity memory for data or instructions. By way of example and not limitation, the memory 401 may include an HDD, a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive, or a combination of two or more of these. Where appropriate, the storage 401 may include removable or non-removable (or fixed) media. Under appropriate circumstances, the memory 401 can be opened inside or outside the gateway device 400 at the terminal hotspot. In a particular embodiment, the memory 401 is a non-volatile solid state memory. In a particular embodiment, the memory 401 includes read-only memory (ROM). Where appropriate, the ROM can be mask-programmed ROM, programmable ROM (PROM), erasable PROM (EPROM), electrically erasable PROM (EEPROM), electrically rewritable ROM (EAROM) or flash memory or A combination of two or more of these.

The processor 402 runs the computer program corresponding to the executable program code by reading the executable program code stored in the memory 401, so as to implement the biometric payment method in the foregoing embodiment.

In an example, the gateway device 400 may further include a communication interface 403 and a bus 404. Among them, as shown in FIG. 9, the memory 401, the processor 402, and the communication interface 403 are connected through the bus 404 and complete mutual communication.

The communication interface 403 is mainly used to implement communication between various modules, devices, units and/or devices in the embodiments of the present application. The input device and/or output device can also be accessed through the communication interface 403.

The bus 404 includes hardware, software, or both, and couples the components of the gateway device 400 to each other. By way of example and not limitation, the bus 404 may include an accelerated graphics port (AGP) or other graphics bus, an enhanced industry standard architecture (EISA) bus, a front side bus (FSB), a hypertransport (HT) interconnect, an industry standard architecture (ISA) ) Bus, unlimited bandwidth interconnect, low pin count (LPC) bus, memory bus, microchannel architecture (MCA) bus, peripheral component interconnect (PCI) bus, PCI-Express (PCI-X) bus, serial advanced Technical Attachment (SATA) bus, Video Electronics Standards Association Local (VLB) bus or other suitable bus or a combination of two or more of these. Where appropriate, the bus 404 may include one or more buses. Although the embodiments of this application describe and show a specific bus, this application considers any suitable bus or interconnection.

An embodiment of the present application also provides a computer-readable storage medium with a computer program stored on the computer-readable storage medium. When the computer program is executed by a processor, the biometric payment applied to the gateway device in the above-mentioned embodiment can be realized. method.

It should be clear that the various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other. Each embodiment focuses on the differences from other embodiments. Place. For the apparatus embodiment, the gateway device embodiment, and the computer-readable storage medium embodiment, for relevant details, please refer to the description part of the method embodiment. The application is not limited to the specific steps and structures described above and shown in the figures. Those skilled in the art can make various changes, modifications and additions, or change the order between steps after grasping the spirit of this application. And, for the sake of brevity, a detailed description of the known method and technology is omitted here.

The above describes various aspects of the present application with reference to the flowcharts and/or block diagrams of the methods, devices (systems) and machine program products according to the embodiments of the present application. It should be understood that each block in the flowchart and/or block diagram and the combination of each block in the flowchart and/or block diagram can be implemented by a program or instruction. These programs or instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to generate a machine so that these programs or instructions are executed by the processor of the computer or other programmable data processing device Enables the realization of functions/actions specified in one or more blocks of the flowchart and/or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a dedicated processor, a special application processor, or a field programmable logic circuit. It can also be understood that each block in the block diagram and/or flowchart and the combination of the blocks in the block diagram and/or flowchart can also be implemented by dedicated hardware that performs specified functions or actions, or can be implemented by dedicated hardware and A combination of computer instructions.

Those skilled in the art should understand that the above-mentioned embodiments are all exemplary rather than restrictive. Different technical features appearing in different embodiments can be combined to achieve beneficial effects. Those skilled in the art should be able to understand and implement other modified embodiments of the disclosed embodiments on the basis of studying the drawings, the description, and the claims. In the claims, the term "comprising" does not exclude other means or steps; if no quantifier is specified before the noun, the number of the noun can be one or more; the terms "first" and "second" are used to denote names It is not used to indicate any particular order. Any reference signs in the claims should not be construed as limiting the scope of protection. The functions of multiple parts appearing in the claims can be implemented by a single hardware or software module. The appearance of certain technical features in different dependent claims does not mean that these technical features cannot be combined to achieve beneficial effects.

Claims

A biometric payment method applied to a gateway device, the method includes:

Receive a biometric routing payment request message, where the biometric routing payment request message includes a first biometric payment group token and first biometric data, and the first biometric payment group token is used to characterize the biometric Identify that the initiating user of the routing payment request message has the authority of biometric payment in the first group;

Determining the first group according to the first biometric payment group token, so as to perform biometric recognition using the first biometric data and a biometric database corresponding to the first group to obtain a biometric recognition result;

The biometric identification result is sent to the payment device, so that the payment device initiates a payment process according to the biometric identification result.
The method according to claim 1, wherein the biometric routing payment request message further includes a first user identification;

The first group is determined according to the first biometric payment group token, and the first biometric data and the biometric database corresponding to the first group are used for biometric recognition, to obtain a biometric result ,include:

Based on the pre-stored binding relationship between the user ID and the biometric payment group token, it is determined whether the first user ID and the first biometric payment group token have a binding relationship, the biometric payment group The group token is used to signify that the user has the authority of biometric payment in the group;

When it is determined that the first user ID and the first biometric payment group token have a binding relationship, the first group is determined according to the first biometric payment group token to use The first biometric data and the biometric database corresponding to the first group perform biometric identification to obtain a biometric identification result.
The method according to claim 2, wherein the biometric routing payment request message further includes a first payment token;

The first group is determined according to the first biometric payment group token, and the first biometric data and the biometric database corresponding to the first group are used to perform biometric recognition to obtain a biometric result ,include:

Determining whether the first user identifier and the first payment token have a binding relationship based on the pre-stored binding relationship between the user identifier and the payment token;

In the case where it is determined that the first user ID and the first payment token have a binding relationship, the first group is determined according to the first biometric payment group token, so as to use the first The biometric data and the biometric database corresponding to the first group perform biometric identification to obtain a biometric identification result.
The method according to claim 1, wherein the gateway device stores at least one biometric database, and each biometric database corresponds to a group;

The first group is determined according to the first biometric payment group token, so as to use the first biometric data and the biometric database corresponding to the first group to perform biometric recognition to obtain biometrics The results include:

Determining the first group according to the first biometric payment group token;

Matching the first biometric data with the biometric data in the biometric database corresponding to the first group to obtain a biometric recognition result.
The method according to claim 1, wherein the first group is determined according to the first biometric payment group token to use the first biometric data to correspond to the first group Biometrics database for biometrics to obtain biometric results, including:

The first group is determined according to the first biometric payment group token, and the first biometric data and the group identification of the first group are sent to a service server, where the service server stores At least one biometric database, each of the biometric databases corresponds to a group;

The biometric identification result is received, and the biometric identification result is obtained by the service server matching the first biometric data with the biometric data in the biometric database corresponding to the first group.
The method according to claim 1, further comprising:

Receiving a biometric group payment activation request message, where the biometric group payment activation request message includes a second user ID and group information, and the group information is used to characterize the second group;

According to the second user identification and the group information, a second biometric payment group token is generated, and the second biometric payment group token is used to characterize the request message of the biometric group payment activation The initiating user has the authority of biometric payment in the second group;

Storing the binding relationship between the second user ID and the second biometric payment group token;

Sending a face payment group activation response message to the payment device, where the face payment group activation response message includes the second biometric payment group token.
The method according to claim 6, wherein after said receiving the biometric group payment activation request message, the method further comprises:

Sending an identity verification request message to the service server, where the identity verification request message includes the second user identifier;

Receiving an identity verification response message from the service server, where the identity verification response message is used to characterize whether the identity verification of the second user identity is successful;

Wherein, the generating a second biometric payment group token according to the second user identification and the group information includes:

In a case where the identity verification response message indicates that the identity verification of the second user identity is successful, a second biometric payment group token is generated according to the second user identity and the group information.
The method according to claim 6, wherein the biometric group payment activation request message further includes second biometric data;

The method also includes:

The second biometric data is stored in a biometric database corresponding to the second group.
The method according to claim 8, wherein:

The group information includes the group identification of the second group and/or the collection channel information of the second biometric data.
The method according to claim 6, wherein after said receiving the biometric group payment activation request message, the method further comprises:

Generate a second payment token according to the second user identification;

Storing the binding relationship between the second user identifier and the second payment token;

Wherein, the face payment group activation response message further includes the second payment token.
A biometric payment device, including:

The receiving module is configured to receive a biometric routing payment request message, the biometric routing payment request message including a first biometric payment group token and first biometric data, and the first biometric payment group token is used To characterize that the initiating user of the biometric routing payment request message has the authority of biometric payment in the first group;

A processing module, configured to determine the first group according to the first biometric payment group token, so as to perform biometric identification using the first biometric data and the biometric database corresponding to the first group, Get biometric results;

The sending module is configured to send the biometric identification result to the payment device, so that the payment device initiates a payment process according to the biometric identification result.
A gateway device, comprising a processor, a memory, and a computer program stored on the memory and capable of running on the processor. The computer program is executed by the processor to implement any of claims 1 to 10 One of the biometric payment methods described.
A computer-readable storage medium storing a computer program on the computer-readable storage medium, and when the computer program is executed by a processor, the biometric payment method according to any one of claims 1 to 10 is realized.