WO2015176364A1 - Payment method, mobile terminal and subscriber identity module, and computer storage medium - Google Patents

Abstract

Disclosed are a payment method, a mobile terminal and a subscriber identity module, and a computer storage medium. One method is applied to the mobile terminal, comprising: pre-storing payment account information and a corresponding payment key in a security element chip of the subscriber identity module; during payment, obtaining the corresponding payment key from the security element chip of the subscriber identity module according to the payment account information input by a user, and then finishing payment according to the payment key obtained. Another method is applied to the subscriber identity module, comprising: storing the payment account information and the corresponding payment key in the security element chip; and when receiving a payment key obtaining request from the mobile terminal, obtaining the corresponding payment key from the security element chip and then sending the payment key to the mobile terminal. Accordingly, also disclosed in the embodiment are a mobile terminal, a subscriber identity module and a computer storage medium.

Description

 Payment method, mobile terminal and user identification card, computer storage medium

 The present invention relates to the field of payment, and in particular, to a payment method, a mobile terminal, a user identification card, and a computer storage medium. Background technique

 With the popularization of smart phones and the development of e-commerce, there are more and more scenes for payment using mobile terminals such as mobile phones, and the security of payment is becoming more and more important. The traditional way of obtaining a verification code by inputting a key and a short message through a keyboard is easily intercepted by a malicious program, and the criminals can be easily stolen on other terminals, and the safety factor is too low, which is easy to cause loss to the user. Summary of the invention

 The main technical problem to be solved by the present invention is to provide a payment method, a mobile terminal, a user identification card, and a computer storage medium, which solves the problem of low security factor of the existing mobile payment.

 To solve the above technical problem, an embodiment of the present invention provides a payment method, which is applied to a mobile terminal, and includes:

 Depositing the account information and the corresponding payment key into the secure component chip of the subscriber identity card;

 When the payment operation is detected, the corresponding payment key is obtained from the secure element chip of the user identification card according to the payment account information input by the user.

 In an embodiment of the present invention, when the detecting the payment operation, the method further includes: acquiring a clear text payment password input by the user;

 After obtaining the payment key in the secure element chip, the method further includes:

Encrypting the plaintext payment password and the obtained payment key into a ciphertext and sending the message to the network side Make payment certification.

 In order to solve the above problem, the embodiment of the present invention further provides a payment method, which is applied to a user identification card, and includes:

 Depositing the account information and the corresponding payment key into the secure element chip;

 When receiving the payment key acquisition request of the mobile terminal, the corresponding payment key is obtained from the secure element chip and then transmitted to the mobile terminal.

 In an embodiment of the present invention, the method further includes:

 When receiving the payment key acquisition request of the mobile terminal, the access authority of the mobile terminal is authenticated; after the authentication is passed, the corresponding payment key is obtained from the secure component chip, and then sent to the mobile terminal.

 In an embodiment of the invention, the subscriber identity card is a one-line protocol subscriber identity card. In order to solve the above problem, an embodiment of the present invention further provides a mobile terminal, including: an account management module, and a first information acquisition module.

 Piece;

 The account management module is configured to store the payment account information and the corresponding payment key in the secure element chip of the user identification card;

 The information obtaining module is configured to acquire a corresponding payment key from the secure element chip of the user identification card according to the payment account information input by the user when the payment is detected.

 In an embodiment of the present invention, the method further includes a second information acquiring module and a payment processing module, where the second information acquiring module is configured to acquire a plaintext payment password input by the user when the payment is detected;

 The payment processing module is configured to encrypt the plaintext payment password and the obtained payment key into a ciphertext and send the payment to the network side for payment authentication.

In order to solve the above problem, an embodiment of the present invention further provides a user identification card, including a storage module and a sending module; The storage module is configured to store payment account information and a corresponding payment key in a secure element chip of the user identification card;

 The sending module is configured to, after receiving the payment key acquisition request of the mobile terminal, acquire the corresponding payment key from the secure element chip, and then send the corresponding payment key to the mobile terminal.

 In an embodiment of the present invention, the method further includes an authentication module configured to authenticate the access authority of the mobile terminal when receiving the payment key acquisition request of the mobile terminal.

 In an embodiment of the invention, the subscriber identity card is a one-line protocol subscriber identity card. In order to solve the above problems, an embodiment of the present invention further provides a computer storage medium storing computer executable instructions for executing the above method.

 The payment method, the mobile terminal, the user identification card, and the computer storage medium provided by the embodiment of the present invention pre-store the payment account information and the corresponding payment key into the secure component chip of the user identification card; when paying, according to the payment input by the user The account information is obtained from the secure element chip of the user identification card, and then the payment is completed according to the obtained payment key. Since the payment key is stored in the secure component chip of the user identification card, the access of the malware can be effectively blocked, and the security of the mobile payment is improved; and the implementation of the solution does not require an additional encryption chip, and does not increase. Hardware cost; At the same time, if the mobile terminal is lost, other users can be blocked from obtaining the payment key by reporting the loss of the user identification card at the operator. In addition, the embodiment of the present invention encrypts the plaintext payment password and the payment key into a ciphertext and exchanges with the financial server; even if the plaintext password is intercepted by the malware, it will not be stolen, which can further improve the security of the payment. DRAWINGS

 FIG. 1 is a schematic flowchart of a payment method according to Embodiment 1 of the present invention;

 FIG. 2 is a schematic diagram of a mobile payment process according to Embodiment 1 of the present invention;

 FIG. 3 is a schematic structural diagram of a payment system according to Embodiment 2 of the present invention;

 4 is a schematic structural diagram 1 of a mobile terminal according to Embodiment 2 of the present invention;

FIG. 5 is a schematic structural diagram of a user identification card according to Embodiment 2 of the present invention - detailed description

 The invention pre-stores the payment account information and the corresponding payment key into the secure element chip (Secure Element, SE chip, which can be packaged in the SWP-SIM card and can run the java virtual machine) of the user identification card; Obtaining a corresponding payment key from the secure element chip of the user identification card according to the payment account information input by the user, and then completing the payment according to the obtained payment key. The payment key is stored in the security component chip of the user identification card, which can effectively block the access of the malware and improve the security of the mobile payment; and the implementation of the solution does not require an additional encryption chip, and does not increase the hardware cost; If the mobile terminal is lost, other users can be blocked from obtaining the payment key by reporting the loss of the subscriber identity card at the operator. In addition, at the time of payment, the embodiment of the present invention encrypts the plaintext payment password and the payment key into a ciphertext by using a key to interact with the financial server; even if the plaintext password is intercepted by the malware, it will not be stolen, and the payment may be further improved. safety.

 The present invention will be further described in detail below with reference to the accompanying drawings.

 Embodiment 1:

 Please refer to FIG. 1. The payment method provided in this embodiment includes the following steps:

 Step 101: The payment account information and the corresponding payment key are stored in a secure component chip (ie, a SE chip) of the user identification card (SIM card);

 Step 102: When paying, obtain a corresponding payment key from the security element chip of the user identification card according to the payment account information input by the user;

 Step 103: Complete the payment according to the obtained payment key.

 In this embodiment, the SIM card may be a single-line protocol subscriber identity card (SWP-SIM card). For an NFC mobile terminal (such as a mobile phone) of the SWP-SIM card solution, no additional encryption chip is needed, and the hardware cost is not increased.

In this embodiment, in order to further improve the security of the mobile payment, before the payment, according to the payment account information input by the user, before the corresponding payment key is obtained from the secure component chip of the user identification card, the authentication step may be further included. Specifically, the access to the current acquisition payment key is performed. Authority judgment. In this embodiment, only the client authenticated by the operator (the client can be set in various mobile terminals) has legal access rights, and other clients have no right to access, so that the malicious client can prevent the user from identifying the card. Threat. Further improve the security of mobile payments.

 At the time of payment, the user inputs the payment account information and the plaintext payment password, and then finds the corresponding payment key according to the payment account information to the SE chip; and then encrypts the plaintext password and the payment key into encrypted ciphertexts by encryption to the financial server. Complete the payment, the complete specific process (illustrated by mobile payment as an example), as shown in Figure 2, including:

 Step 201: When the mobile phone pays, the user inputs the payment account information and the clear text payment password to confirm the payment;

 Step 202: Determine the access authority of the mobile phone in response to the client, if there is permission, go to step 203; otherwise, go to step 206;

 Step 203: Acquire a corresponding payment key from the SE chip of the SIM card according to the account information input by the user;

 Step 204: Encrypt the plaintext payment password and the payment key into a ciphertext, and send the message to the financial server. Step 205: The financial server performs payment authentication and completes the payment.

 Step 206: No access, denied access, prompt "Payment failed." Embodiment 2:

 The payment system in this embodiment is shown in FIG. 3, and includes a financial server and a mobile terminal. As shown in FIG. 4, the mobile terminal includes an account management module, a first information acquiring module, and a payment processing module.

 The account management module is configured to store the payment account information and the corresponding payment key into the secure component chip of the user identification card;

 The first information acquiring module is configured to acquire, according to the payment account information input by the user, a corresponding payment key from the secure component chip of the user identification card;

The payment processing module is configured to complete the payment according to the obtained payment key. In this embodiment, the SIM card may be a single-line protocol subscriber identity card (SWP-SIM card). For an NFC mobile terminal (such as a mobile phone) of the SWP-SIM card solution, an additional encryption chip is not needed, and the hardware cost is not increased.

 In this embodiment, the mobile terminal further includes a second information obtaining module configured to receive the user input plaintext payment password before acquiring the corresponding payment key from the secure element chip of the user identification card according to the payment account information input by the user.

 In this embodiment, the payment processing module includes an encryption sub-module and a transmission sub-module; the encryption sub-module is configured to encrypt the plaintext payment password and the obtained payment key into a ciphertext; the sending sub-module is configured to send the ciphertext to The financial server performs payment authentication.

 Referring to FIG. 5, the embodiment further provides a user identification card, which can be applied to various mobile terminals. Correspondingly, it includes a storage processing module and a sending module. The storage processing module is configured to The payment account information and the corresponding payment key are stored in the secure element chip of the user identification card;

 The sending module is configured to, after receiving the payment key acquisition request of the mobile terminal, acquire the corresponding payment key from the secure element chip, and then send the corresponding payment key to the mobile terminal; the first information obtaining module of the mobile terminal receives the payment key.

 Referring to FIG. 5, in this embodiment, the user identification card further includes an authentication module configured to access the mobile terminal when receiving the payment key acquisition request sent by the first information acquiring module of the mobile terminal. Perform authentication;

 Specifically, the access permission of the first information acquiring module is authenticated. In this embodiment, only the first information acquiring module that has been authenticated by the operator has legal access rights, and other clients have no right to access, thereby preventing malicious clients. Threat to the user identification card. Further improve the security of mobile payments.

Embodiments of the present invention also provide a computer storage medium in which computer executable instructions are stored, the computer executable instructions being used to perform the above method. It can be seen that the solution provided by the embodiment of the present invention has the following advantages:

 For the NFC mobile terminal of the SWP-SIM card solution, no additional encryption chip is required, and the hardware cost is not increased.

 In the case that the mobile terminal is not lost, the account management module described in the embodiment of the present invention can completely prevent the illegal access of the malware. If the mobile terminal is lost, you can report the loss of the SIM card at the carrier.

 In the embodiment of the present invention, the plaintext payment password is encrypted by the key into a ciphertext and interacts with the financial server; even if the plaintext password is intercepted by the malware, it will not be stolen.

 Each of the above modules may be implemented by a central processing unit (CPU), a digital signal processor (DSP) or a Field-Programmable Gate Array (FPGA) in the electronic device.

 Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of a hardware embodiment, a software embodiment, or an embodiment of a combination of software and hardware. Moreover, the invention can be embodied in the form of a computer program product embodied on one or more computer usable storage media (including but not limited to disk storage and optical storage, etc.) including computer usable program code.

 The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart and/or block diagrams, and combinations of flow and / or blocks in the flowcharts and / or block diagrams can be implemented by computer program instructions. These computer program instructions can be provided to a general purpose computer, a special purpose computer, an embedded processor or other programmable data processing device processor to produce a machine such that a flow or a block diagram of a flow or a block diagram or A device that has multiple functions specified in the box.

These computer program instructions can also be stored in a bootable computer or other programmable data processing The apparatus is readable in a computer readable memory in a particular manner, such that instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device implemented in one or more flows and/or block diagrams of the flowchart The function specified in the box or in multiple boxes.

 These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

 The above is a further detailed description of the present invention in connection with the specific embodiments, and the specific embodiments of the present invention are not limited to the description. It is to be understood by those skilled in the art that the present invention may be practiced without departing from the spirit and scope of the invention. Industrial Applicability The payment method, the mobile terminal, the user identification card, and the computer storage medium provided by the embodiments of the present invention deposit the payment account information and the corresponding payment key into the secure component chip of the user identification card in advance; The input payment account information is obtained from the secure element chip of the user identification card, and then the payment is completed according to the obtained payment key. Since the payment key is stored in the secure component chip of the user identification card, the access of the malware can be effectively blocked, and the security of the mobile payment is improved; and the implementation of the solution does not require an additional encryption chip, and does not increase. Hardware cost; At the same time, if the mobile terminal is lost, other users can be blocked from obtaining the payment key by reporting the loss of the user identification card at the operator. In addition, the embodiment of the present invention encrypts the plaintext payment password and the payment key into a ciphertext and exchanges with the financial server; even if the plaintext password is intercepted by the malware, it will not be stolen, which can further improve the security of the payment.

Claims

Claim  A payment method, applied to a mobile terminal, wherein:  Depositing the account information and the corresponding payment key into the secure component chip of the subscriber identity card;  When the payment operation is detected, the corresponding payment key is obtained from the secure element chip of the user identification card according to the payment account information input by the user.  2. The payment method according to claim 1, wherein, when the detecting operation is detected, the method further comprises:  Obtain the plaintext payment password entered by the user;  After obtaining the payment key in the secure element chip, the method further includes:  The plaintext payment password and the obtained payment key are encrypted into a ciphertext and sent to the network side for payment authentication.  3. A payment method applied to a user identification card, wherein:  Depositing the account information and the corresponding payment key into the secure element chip;  When receiving the payment key acquisition request of the mobile terminal, the corresponding payment key is obtained from the secure element chip and then transmitted to the mobile terminal.  4. The payment method according to claim 3, further comprising:  When receiving the payment key acquisition request of the mobile terminal, the access authority of the mobile terminal is authenticated; after the authentication is passed, the corresponding payment key is obtained from the secure component chip, and then sent to the mobile terminal.  The payment method according to claim 3 or 4, wherein the subscriber identity card is a one-line protocol subscriber identity card. A mobile terminal, comprising: an account management module, a first information acquisition module; the account management module configured to store payment account information and a corresponding payment key in a secure component chip of the user identification card; The information obtaining module is configured to acquire a corresponding payment key from the secure element chip of the user identification card according to the payment account information input by the user when the payment operation is detected.  7. The payment terminal according to claim 6, further comprising a second information acquisition module and a payment processing module;  The second information acquiring module is configured to acquire a plaintext payment password input by the user when the payment is detected;  The payment processing module is configured to encrypt the plaintext payment password and the obtained payment key into a ciphertext and send the payment to the network side for payment authentication.  A user identification card, comprising: a storage processing module and a sending module; the storage processing module configured to store payment account information and a corresponding payment key in a secure component chip of the user identification card;  The sending module is configured to, after receiving the payment key acquisition request of the mobile terminal, obtain a corresponding payment key from the secure element chip, and then send the corresponding payment key to the mobile terminal.  9. The subscriber identity card of claim 8, further comprising an authentication module configured to authenticate the access rights of the mobile terminal upon receiving the payment key acquisition request of the mobile terminal.  The subscriber identity card according to claim 8 or 9, wherein the subscriber identity card is a one-line agreement subscriber identity card.  A computer storage medium storing computer executable instructions, the computer executable instructions for performing the method of claim 1 or 2, any one of claims 3 to 5.