CN105590194A - Offline payment method and payment system - Google Patents

Abstract

The invention relates to an offline payment method based on a mobile terminal. The method includes: a user registration step, transmitting the registered user information and identification information to the payment server through the mobile terminal, the payment server distributes the user ID to the user according to the registered user information, and establishes and stores the user registration information and the user ID in the payment server. , the corresponding relationship between identification information; and the payment step, the merchant’s POS device sends the information to be paid and the collected identification information to the payment server, the mobile terminal sends the user ID to the payment server, and the payment server The corresponding relationship verifies whether the user ID matches the identification information, and if the verification is passed, the information to be paid is sent to the mobile terminal, and the card issuer is requested to authorize the payment after receiving the payment information sent by the mobile terminal. Utilizing the present invention, the sensitive information of the user can be prevented from being obtained illegally by sending the payment sensitive information through the mobile terminal, and the security of payment can be improved.

Description

An offline payment method and payment system

technical field

The invention relates to a computer-based payment method and payment system, in particular to a safe offline payment method and payment system.

Background technique

With the general development of banking financial technology, automatic teller machines (ATMs), POS machines, etc. can be seen everywhere in daily life, which greatly facilitates the processing of financial transactions in daily life. However, since ATM machines and POS machines are generally in an open state of use, there are certain potential safety hazards.

For example, when a user consumes through a POS machine, the staff first swipe the user's bank card on the card reader slot, then input the password through the password input device on the POS machine, and complete the transaction after the password verification is passed. Although the password input device on the POS machine can be moved, to a certain extent, criminals are restricted from peeping and taking pictures, but there may be cases where unscrupulous merchants steal the user's card number and Password, and then copy the bank card to achieve the purpose of stealing user funds.

As the offline use of bank cards becomes more and more frequent, when users complete payment operations through POS, unscrupulous merchants steal user card information through skimming and other methods from time to time. The security of user funds poses serious risk issues.

In order to improve the security of swiping a bank card, Patent Document 1 (CN103765861A) proposes a payment selection and authorization method using a mobile device. Specifically, when the user enters or swipes a credit card at the retailer's POS, the retailer's POS sends the credit card information to the card issuer for verification through the gateway, and the card issuer forwards the authorization request to the APP running on the mobile device for verification. In the whole process, although the final authorization is completed through the mobile terminal, which can improve the security of payment to a certain extent, but in the early stage of identity authentication, the card information of the bank card needs to be provided on the POS. Therefore, there are still Certain security risks.

Contents of the invention

In view of the above problems, the present invention aims to provide an offline payment method and payment system that can improve payment security and prevent users' sensitive information from being illegally obtained.

The mobile terminal-based offline payment method of the present invention is characterized in that it includes:

The user registration step is to transmit the registered user information and identification information to the payment server through the mobile terminal, and the payment server assigns the user ID to the user according to the registered user information, and establishes and stores the user registration information, user ID, and identification information in the payment server. Correspondence between; and

In the payment step, the payment server obtains the information to be paid, the user ID, and the collected identification information, and the payment server verifies whether the user ID and the identification information match according to the stored correspondence, and sends the pending payment The information is sent to the mobile terminal, and the mobile terminal submits the payment information to the card issuer to authorize the payment.

Preferably, the user registration step includes the following sub-steps:

The mobile terminal obtains user registration information and sends it to the payment server;

The payment server generates a user ID uniquely corresponding to the user registration information according to the user registration information sent from the mobile terminal and returns the user ID to the mobile terminal;

The mobile terminal obtains the identification information provided by the user and sends it to the payment server;

The payment server establishes a corresponding relationship among user registration information, user ID, and identification information and stores them in the payment server.

Preferably, the identification information includes fingerprints, irises, and sound waves.

Preferably, the identification information is the MAC of the mobile phone or information that can uniquely identify the identity of the user.

Preferably, the payment step includes the following sub-steps:

Identity information uploading sub-step, the merchant’s POS device collects the identity information and sends the collected identity information and commodity payable information to the payment server;

User ID upload sub-step, the mobile terminal sends the user ID of the logged-in user to the payment server;

Correspondence verification step, the payment server verifies whether the corresponding relationship between the identification information sent from the POS device and the user ID sent from the mobile terminal according to the stored corresponding relationship;

Payment information uploading sub-step, after the payment server passes the verification of the corresponding relationship between the identity information and the user ID, the payment server sends the pending commodity information to the mobile terminal, and the user uploads the payment information to the mobile terminal according to the received pending commodity information. payment server; and

In the sub-step of authorizing payment, the payment server organizes the payment request according to the payment information to submit the authorized payment to the card issuer.

Preferably, the sub-step of sending the identification information includes:

The cashier obtains the pending payment information of the goods through the POS device;

The POS device prompts the user to provide identification information and collects identification information;

The POS device sends the commodity pending information and the collected identification information to the payment server.

Preferably, the sub-step of sending payment information includes:

After the payment server passes the verification of the corresponding relationship between the identification information and the user ID, the payment server sends the information of the goods to be paid to the mobile terminal;

Provide payment information after the user confirms the pending commodity information prompted in the mobile terminal;

The mobile terminal sends the payment information to the payment server.

Preferably, the authorized payment sub-step includes:

After the payment server receives the payment information sent from the mobile terminal, it sends the payment information to the card issuer and asks the card issuer to authorize the payment;

The payment server notifies the mobile terminal and the merchant's POS device of the payment result from the card issuer respectively.

Preferably, the identification information of the user on site and the user ID prompted on the mobile device are collected using the POS device;

The POS device sends the commodity payable information, as well as the collected identification information and user ID to the payment server;

The payment server verifies whether the corresponding relationship between the identification information sent from the POS device and the user ID is consistent with the corresponding relationship stored in the corresponding relationship;

After the payment server passes the verification of the corresponding relationship between the identity information and the user ID, the payment server sends the information of the goods to be paid to the mobile terminal;

The user sends the payment information to the payment server through the mobile terminal; and

The payment server sends the payment request to the card issuer according to the received payment information, and requests the card issuer to authorize the payment.

The mobile terminal-based offline payment system of the present invention is characterized in that it includes:

The mobile terminal, in the user registration stage, is used to obtain user registration information and identification information and transmit them to the following payment server respectively; in the payment stage, it is used to send the user ID assigned to the user by the following payment server to the payment server , and is used to receive the following commodity pending information from the following payment server, and send the payment information to the following payment server according to the commodity pending information;

The payment server, in the user registration phase, is used to receive user registration information and identification information from the mobile terminal and assign a user ID to the mobile terminal according to the user registration information sent from the mobile terminal, and establish and store user registration in the payment server The corresponding relationship among information, user ID and identification information is used to verify whether the user ID sent from the mobile terminal and the identification information sent from the following POS device are based on the stored corresponding relationship during the payment phase. Matching, and in the case of passing the verification, send the commodity pending information sent from the following POS device to the mobile terminal, and ask the card issuer to authorize the payment according to the payment information fed back from the mobile terminal;

The POS device, in the payment stage, is used to scan commodities to obtain commodity pending information and collect identification information, and send the commodity pending information and identification information to the payment server.

Preferably, the POS device includes: a collection module capable of collecting fingerprint information, or a collection module capable of collecting iris information, or a collection module capable of sound wave information.

The mobile terminal-based offline payment system of the present invention is characterized in that it includes:

The mobile terminal, in the user registration stage, is used to obtain user registration information and identification information and transmit them to the following payment server respectively; in the payment stage, it is used to receive the following commodity pending payment information from the following payment server, and Send the payment information to the following payment server according to the pending payment information of the goods;

The payment server, in the user registration phase, is used to receive user registration information and identification information from the mobile terminal and assign a user ID to the mobile terminal according to the user registration information sent from the mobile terminal, and establish and store user registration in the payment server The corresponding relationship between information, user ID and identification information is used to verify whether the user ID and identification information sent from the POS device described below match according to the stored corresponding relationship during the payment phase, and when the verification is passed In the case of a mobile terminal, send the commodity pending information sent by the following POS device to the mobile terminal, and request the card issuer to authorize the payment according to the payment information fed back from the mobile terminal;

The POS device, in the payment stage, is used to scan the commodity to obtain commodity pending information, collect identification information, user ID, and send the commodity pending information, identification information, and user ID to the payment server.

Preferably, the POS device includes: a collection module capable of collecting fingerprint information, or a collection module capable of collecting iris information, or a collection module capable of sound wave information.

According to the offline payment method and payment system of the present invention, the sensitive payment information is sent through the APP application on the user's own mobile terminal, which can effectively prevent the phenomenon that the bank card information is intercepted or skimmed when it is provided by the merchant's equipment, ensuring that the bank Security of card information.

Further, according to the offline payment method and payment system of the present invention, the identification information collected on the spot is sent through the POS device, such as biometric features such as fingerprints, iris, and sound waves, or the MAC of the mobile phone or other information that can uniquely identify the identity; The APP application of the mobile terminal sends the unique user ID (menberID) assigned to the user by the payment system. The method of obtaining user information through dual channels replaces the traditional single channel method, and provides information required for joint identity verification to the payment server, which greatly reduces the possibility of forging verification information at the same time.

Description of drawings

FIG. 1 is a flow chart showing user registration steps in the offline payment method of the present invention.

Fig. 2 is a flow chart showing payment steps in the offline payment method of the present invention.

detailed description

Introduced below are some of the various embodiments of the invention, intended to provide a basic understanding of the invention. It is not intended to identify key or critical elements of the invention or to delineate the scope of protection.

Brief description of the invention

In order to solve the problem of bank card information leakage caused by users paying at pos terminals of unscrupulous merchants, the offline payment method and offline payment system of the present invention provide consumers with a safe Convenient payment method.

In the offline payment method of the present invention, the corresponding relationship between user registration information, user ID and identification information is established on the payment server in advance through the APP application installed on the mobile terminal. When paying, the payment server compares the identification information and user ID collected by the POS proprietary equipment. If they are consistent, the payment server sends the pending commodity information to the APP for confirmation and then completes the payment operation through the APP application. The entire payment process bypasses the POS system, which can avoid unnecessary security risks.

Further, in order to improve security, it can also be sent to the payment server for verification through dual channels. For example, the cashier obtains the user's ID through the POS device (or an accessory device of the POS device or other information acquisition devices capable of communicating with the POS device). Identification information, and send the identification information and commodity information to the payment server, and the user also sends the user ID (memberID) to the payment server through the APP. Then the payment server verifies the matching relationship between the identification information and the user ID. In this way, in the present invention, the APP application on the user's own mobile terminal replaces the merchant's POS device to provide the payment server with payment sensitive information such as bank cards, which can avoid the phenomenon that the user's sensitive information is illegally obtained.

The offline payment method of the present invention will be described in detail below.

The offline payment method of the present invention is divided into two stages: a user registration step and a payment step.

FIG. 1 is a flow chart showing user registration steps in the offline payment method of the present invention.

As shown in Figure 1, step ①: After the user installs the APP application on the mobile terminal and enters the user registration information into the APP, the APP application sends the user registration information to the payment server.

Step ②: The payment server generates a unique user ID (which will not change) based on the registration information, and returns the unique user ID to the APP.

Step ③: The user provides identification information according to the prompts of the APP installed on the mobile terminal, such as biometrics such as iris, fingerprint, and sound wave, or provides the MAC address of the mobile phone or other information that can uniquely identify the identity through other means. Among them, the mac address of the mobile phone is the serial number of the network card unique to each mobile phone, which is equivalent to the ID card of the network card, and the unique number that has been determined when the mobile phone leaves the factory. Other information that can uniquely identify an identity refers to some information that can uniquely identify a user, such as pulse and DNA, but is expensive to use

Step ④: The payment server associates the user registration information, user ID, and identification information and stores them in the payment server.

Fig. 2 is a flow chart showing payment steps in the offline payment method of the present invention.

As shown in Figure 2, Step ①: The cashier scans and obtains product information through the POS device.

Step ②: The POS device prompts the user to provide identification information and collects the identification information.

Step ③: The POS device sends the commodity payable information and the collected identification information to the payment server.

Step ④: The user logs in to the APP application of the mobile terminal, and selects the button to pay the fee.

Step ⑤: The APP application of the mobile terminal sends the user ID of the logged-in user to the payment server.

Step ⑥: The payment server verifies the identity information sent from the POS device and the user ID sent from the APP application of the mobile terminal according to the association relationship between the user registration information, user ID and identification information stored therein. Whether the corresponding relationship is correct.

Step ⑦: After the payment server has verified the corresponding relationship between the identification information and the user ID, the payment server sends the information of the goods to be paid to the APP application of the mobile terminal.

Step ⑧: After the user confirms the pending payment information prompted in the APP application of the mobile terminal, provide payment information according to the APP application prompt (either directly input or select the card information previously stored locally).

Step 9: After the payment server receives the payment information sent from the APP application of the mobile terminal, it sends the payment information to the card issuer and asks the card issuer to authorize the payment.

Step 10: The payment server notifies the APP application of the mobile terminal and the POS device of the merchant respectively of the payment result from the card issuer.

The following briefly describes the offline payment system based on the mobile terminal of the present invention.

The offline payment system based on the mobile terminal of the present invention mainly includes: a mobile terminal (that is, an APP application installed on the mobile terminal), a POS device installed on the merchant side, and a payment server.

Wherein, the mobile terminal is used to obtain user registration information and identification information during the user registration phase and transmit them to the following payment server respectively; during the payment phase, it is used to send the user ID assigned to the user by the following payment server to The payment server is used to receive the following commodity pending information from the following payment server, and send the payment information to the following payment server according to the commodity pending information.

The payment server is used to receive user registration information and identification information from the mobile terminal during the user registration phase and assign a user ID to the mobile terminal according to the user registration information sent from the mobile terminal, and establish and store the user registration in the payment server. The corresponding relationship among information, user ID and identification information is used to verify whether the user ID sent from the mobile terminal and the identification information sent from the following POS device are based on the stored corresponding relationship during the payment phase. Matching, and in the case of passing the verification, send the commodity pending information sent from the following POS device to the mobile terminal, and ask the card issuer to authorize the payment according to the payment information fed back from the mobile terminal;

In the payment stage, the POS device is used to scan commodities to obtain commodity pending information and collect identification information, and send the commodity pending information and identification information to the payment server.

Preferably, the POS device includes: a collection module capable of collecting fingerprint information, or a collection module capable of collecting iris information, or a collection module capable of sound wave information.

The security of the offline payment method and payment system of the present invention is embodied in the following two aspects:

(1) In the payment stage, send the user information that needs to be verified by the payment server through two channels, which greatly reduces the possibility of forging verification information at the same time: send the identification information collected on-site through the POS device, such as fingerprints, irises, and mobile phones. MAC or other information that can uniquely identify the identity; and the unique user ID (menberID) assigned to the user by the payment system sent to the user through the APP application of the mobile terminal. The method of obtaining user information through dual channels replaces the traditional single channel method, and provides information required for joint identity verification to the payment server, which greatly reduces the possibility of forging verification information at the same time.

(2) Sending sensitive payment information through the APP application on the user's own mobile terminal can effectively prevent the phenomenon that the bank card information is intercepted or skimmed when it is provided by the merchant's device, ensuring the security of the bank card information.

Variation

The modified example of the offline payment method of the present invention will be described below.

The modified example of the offline payment method of the present invention is also divided into two stages: a user registration step and a payment step. Wherein, the user registration steps are the same as those in the above-mentioned embodiments, and the payment steps are slightly different from those in the above-mentioned embodiments. Now, the payment steps of the modified example of the offline payment method of the present invention will be described.

The flow process of the payment step in the modified example of the offline payment method of the present invention is as follows:

Step ①: The cashier scans the POS device to obtain product information.

Step ②: The POS device prompts the user to provide identification information and collects the identification information. At the same time, the POS device is used to collect the user ID (for example, when the user ID is a barcode or a QR code, the POS device scans the ID displayed on the mobile terminal. barcode or QR code).

Step ③: The POS device sends the commodity payable information and the collected identification information and user ID to the payment server.

Step ④: The payment server verifies whether the corresponding relationship between the identification information sent from the POS device and the user ID is correct according to the association relationship between the user registration information, user ID, and identification information stored therein.

Step ⑤: After the payment server passes the verification of the corresponding relationship between the identification information and the user ID, the payment server sends the pending commodity information to the APP application of the mobile terminal.

Step ⑥: After the user confirms the pending payment information prompted in the APP application of the mobile terminal, the user provides payment information according to the APP application prompt (either directly input, or choose the card information previously stored locally).

Step ⑦: After receiving the payment information sent from the APP application of the mobile terminal, the payment server sends the payment information to the card issuer, and requests the card issuer to authorize the payment.

Step ⑧: The payment server notifies the APP application of the mobile terminal and the POS device of the merchant respectively of the payment result from the card issuer.

In the modified example, the authentication information and the user ID are uploaded through a single channel, which is more convenient in use.

The above examples mainly illustrate the offline payment method and payment system of the present invention. Although only some specific embodiments of the present invention have been described, those skilled in the art should understand that the present invention can be implemented in many other forms without departing from the spirit and scope thereof. The examples and embodiments shown are therefore to be regarded as illustrative and not restrictive, and the invention may cover various modifications without departing from the spirit and scope of the invention as defined in the appended claims with replace.

Claims (14)

1. the offline payment method based on mobile terminal, is characterized in that, comprising:

User's registration step, by mobile terminal, information of registered users, identity identification information are sent to paying server, paying server to user, is set up the also corresponding relation between stored user log-on message, ID, identity identification information according to information of registered users distributing user ID in paying server; And

Payment step, the identity identification information that paying server obtains information to be paid, ID and collects, whether paying server mates according to the described corresponding relation authentication of users ID and the identity identification information that store, and by checking in the situation that, information to be paid is sent to mobile terminal, after mobile terminal provides payment information, submitted to card sending mechanism authority to pay by user.

2. the offline payment method based on mobile terminal as claimed in claim 1, is characterized in that,

Described user's registration step comprises following sub-step:

Acquisition for mobile terminal user's registration information and on deliver to paying server;

Paying server generates with the unique corresponding ID of user's registration information and this ID is turned back to mobile terminal according to the user's registration information of sending here from mobile terminal;

The customer-furnished identity identification information of acquisition for mobile terminal and on deliver to paying server;

Paying server is set up user's registration information, ID, identity identification information corresponding relation and is stored in paying server.

3. the offline payment method based on mobile terminal as claimed in claim 2, is characterized in that,

Described identity identification information comprises biological characteristic.

4. the offline payment method based on mobile terminal as claimed in claim 3, is characterized in that,

Described biological characteristic comprises fingerprint, iris, sound wave.

5. the offline payment method based on mobile terminal as claimed in claim 2, is characterized in that,

Described identity identification information is mobile phone MAC or information that can unique identification user identity.

6. the offline payment method based on mobile terminal as claimed in any one of claims 1 to 5, wherein, is characterized in that,

Described payment step comprises following sub-step:

On identity identification information, send sub-step, the POS equipment captured identity identifying information of trade company and the identity identification information collecting should be paid to information with commodity together with send to paying server;

On ID, send sub-step, the ID of login user is sent to paying server by mobile terminal;

Corresponding relation verification step, paying server is according to the described corresponding relation storing, and whether the identity identification information sent here from POS equipment of checking and the corresponding relation from the ID of sending here of mobile terminal meet;

On payment information, send sub-step, after paying server is verified the corresponding relation of identity identification information and ID, merchandise news to be paid is sent to mobile terminal by paying server, and user will deliver to paying server according to the merchandise news to be paid of receiving on payment information; And

Authority to pay sub-step, paying server according to the request of payment information organise payment to submit authority to pay to card sending mechanism.

7. the offline payment method based on mobile terminal as claimed in claim 6, is characterized in that,

On identity identification information, send sub-step to comprise:

Cashier obtains commodity information to be paid by POS equipment;

POS device prompts user provides identity identification information captured identity identifying information;

Information to be paid commodity and the identity identification information collecting are sent paying server by POS equipment.

8. the offline payment method based on mobile terminal as claimed in claim 7, is characterized in that,

On described payment information, send sub-step to comprise:

After paying server is verified the corresponding relation of identity identification information and ID, merchandise news to be paid is sent to mobile terminal by paying server;

Confirm user mobile terminal middle prompting after paying merchandise news, payment information is provided;

Mobile terminal will be delivered to paying server on payment information.

9. the offline payment method based on mobile terminal as claimed in claim 7, is characterized in that,

Described authority to pay sub-step comprises:

Paying server, receiving from the payment information sending of mobile terminal, sends to card sending mechanism by payment information, submits card sending mechanism authority to pay to;

Paying server is respectively by the payment result notice mobile terminal from card sending mechanism, the POS equipment of trade company.

10. the offline payment method based on mobile terminal as described in claim 1～5, is characterized in that,

Utilize the ID of pointing out on user's the identity identification information of POS equipment collection site and mobile device;

POS equipment should be paid information and the identity identification information collecting and ID by commodity and send to paying server; Paying server verifies according to the described corresponding relation that stored whether the identity identification information sent here from POS equipment and the corresponding relation of ID meet;

After paying server is verified the corresponding relation of identity identification information and ID, merchandise news to be paid is sent to mobile terminal by paying server;

User will deliver to paying server by mobile terminal on payment information; And

Paying server sends to card sending mechanism according to the payment information organise payment request of receiving, submits card sending mechanism authority to pay to.

Payment system under 11. 1 kinds of lines based on mobile terminal, is characterized in that, comprising:

Mobile terminal, at user's registration phase, for obtaining user's registration information, identity identification information and being sent to respectively following paying server, in the payment stage, send to paying server for the ID of following paying server being distributed to user, and for accept following commodity information to be paid from following paying server, and according to commodity information to be paid, payment information is sent to following paying server;

Paying server, at user's registration phase, for receive user's registration information and identity identification information from mobile terminal and according to the user's registration information of sending here from mobile terminal to mobile terminal distributing user ID, and set up and stored user log-on message in paying server, ID, corresponding relation between identity identification information, in the payment stage, for verifying according to the described corresponding relation storing whether the ID sending from mobile terminal and the identity identification information sending from following POS equipment mate, and by checking in the situation that, the commodity information to be paid of sending here on the POS equipment by following is sent to mobile terminal, and submit card sending mechanism authority to pay to according to the payment information coming from mobile terminal feedback,

POS equipment, in the payment stage, to obtain commodity information to be paid and for captured identity identifying information, and will deliver to paying server on information to be paid commodity and identity identification information for items scanning.

Payment system under 12. lines based on mobile terminal as claimed in claim 11, is characterized in that,

Described POS equipment comprises: can gather the acquisition module of finger print information or can gather the acquisition module of iris information or acquisition module that can information of acoustic wave.

Payment system under 13. 1 kinds of lines based on mobile terminal, is characterized in that, comprising:

Mobile terminal, at user's registration phase, for obtaining user's registration information, identity identification information and being sent to respectively following paying server, in the payment stage, for accepting following commodity information to be paid from following paying server, and according to commodity information to be paid, payment information is sent to following paying server;

Paying server, at user's registration phase, for receive user's registration information and identity identification information from mobile terminal and according to the user's registration information of sending here from mobile terminal to mobile terminal distributing user ID, and set up and stored user log-on message in paying server, ID, corresponding relation between identity identification information, in the payment stage, for verifying from sending ID and identity identification information whether to mate from following POS equipment according to the described corresponding relation storing, and by checking in the situation that, the commodity information to be paid of sending here on the POS equipment by following is sent to mobile terminal, and submit card sending mechanism authority to pay to according to the payment information coming from mobile terminal feedback,

POS equipment, in the payment stage, to obtain commodity information to be paid and for captured identity identifying information, ID, and will deliver to paying server on information to be paid commodity and identity identification information, ID for items scanning.

Payment system under 14. lines based on mobile terminal as claimed in claim 13, is characterized in that,

Described POS equipment comprises: can gather the acquisition module of finger print information or can gather the acquisition module of iris information or acquisition module that can information of acoustic wave.