WO2019237718A1 - Method for generating payment receiving code and code-scanning security verification method - Google Patents

Abstract

A method for generating a payment receiving code at a tamper-proof barcode server end and a code-scanning security verification method. The method for generating a payment receiving code at a tamper-proof barcode server end comprises: receiving a payment receiving code generation request transmitted by a client, the payment receiving code generation request comprising a user identification of a corresponding user of the client; generating a barcode on the basis of the user identification (S12); and combining the generated barcode with a user identifying image of the corresponding user submitted by the client to produce a payment receiving code, thus facilitating the performing of a code-scanning security verification on the basis of the payment receiving code (S13). By reviewing the user identifying image and linking with the user identification, a user identifying image in a payment paying code can be verified against a user identifying image stored in a server database, thus increasing the security of a code-scanning payment.

Description

Method for generating receipt code and scanning code security verification method [Technical Field]

This application relates to the field of Internet applications, and in particular, to a method for generating a payment code and a method for scanning code security verification.

【Background technique】

With the rapid development of computer technology, people's lives also rely on technological development to become more and more convenient. For example, many businesses have begun to use the code scanning function. By scanning, you can get related business information and execute corresponding services. Taking payment applications as an example, scan code payment has become more and more widely used in people's daily life. When users pay, they do not need to use cash. They can scan the static payment code of the payee to complete the payment. .

The static payment code is mainly a two-dimensional code applied by the merchant to the payment institution and posted in front of the store to receive money. At present, the two-dimensional payment code provided by Alipay or WeChat official, or an integrated type of payment code provided by institutions such as Money Bar, is usually a square with a black block on a white background.

Although the two-dimensional code currently issued is convenient and fast, it also has security risks. Because people do not recognize the code, even if their own two-dimensional code is replaced, it is impossible to know:

1. For merchants, there is a risk that the QR code can be tampered with. At present, similar incidents often occur on the Internet, causing serious economic losses to merchants, and often difficult to track down.

2. For the payer, in some dense areas, it is difficult to distinguish the ownership of the QR code. Due to the existence of some criminals, potential loss of funds may be caused, and the security of code scanning cannot be guaranteed.

While the code scanning method brings convenience to users, how to ensure the security of the code scanning method is also an urgent problem to be solved.

[Summary of the Invention]

Various aspects of the present application provide a method for generating a payment code and a method for scanning code security verification, which are used to improve scanning code security.

An aspect of the present application provides a method for generating a payment code on a tamper-resistant QR code server side, including: receiving a payment code generation request sent by a client; the payment code generation request includes Generating a two-dimensional code according to the user identification; combining the generated two-dimensional code with a user identification picture of a corresponding user submitted by the client to obtain a payment code for scanning based on the payment code Code security check.

An aspect of the present application provides a code scanning security verification method, including: a tamper-resistant two-dimensional code server receives a service request of a payment code sent by a client; wherein the payment code is a tamper-resistant two-dimensional code The server generates a two-dimensional code according to the user identity of the payee; it is obtained by combining the generated two-dimensional code with the picture of the user ID of the payee; the tamper-resistant two-dimensional code server is based on the payment received in the service request The user identity corresponding to the code to find the corresponding user identity picture for security verification; the tamper-resistant two-dimensional code server sends the corresponding user identity picture for security verification to the client, so as to be based on the The user identification picture used for security verification determines the security verification result on the client.

Another aspect of the present application provides a code scanning security verification method, which includes: a tamper-resistant two-dimensional code server receives a service request of a payment code sent by a client; wherein the payment code is two-dimensionally tamper-resistant The code server generates a two-dimensional code according to the user identification of the payee; it is obtained by combining the generated two-dimensional code with the picture of the user identification of the payee; the tamper-resistant two-dimensional code server corresponds to the payment code included in the service request User ID to find the corresponding user ID picture for security verification; anti-tampering QR code server to the user ID picture in the payment code included in the business request and the user ID picture found for security verification Perform a similarity comparison to determine the result of the security check.

According to another aspect of the present application, a device is provided. The device includes: one or more processors; a storage device configured to store one or more programs, and when the one or more programs are used by the one or more programs Each processor executes such that the one or more processors implement any of the above methods.

In another aspect of the present application, a computer-readable storage medium is provided, on which a computer program is stored, which is characterized in that when the program is executed by a processor, any one of the foregoing methods is implemented.

It can be known from the technical solution that in the embodiment of the present application, the user identification picture is added to the two-dimensional code, so that the user can verify whether the two-dimensional code is safe through the identification picture, thereby improving the security of the scan code payment service.

[Brief Description of the Drawings]

In order to explain the technical solutions in the embodiments of the present application more clearly, the drawings used in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings in the following description are the ones of the present application. For some embodiments, for those of ordinary skill in the art, other drawings may be obtained based on these drawings without paying creative labor.

FIG. 1 is a schematic flowchart of a method for generating a payment code on a tamper-proof two-dimensional code server according to Embodiment 1 of the present application; FIG.

2 is a schematic flowchart of a code scanning and verifying method provided in Embodiment 2 of the present application;

3 is a schematic flowchart of a code scanning and verifying method provided in Embodiment 2 of the present application;

4 is a schematic flowchart of a code scanning and verifying method provided in Embodiment 2 of the present application;

FIG. 5 is a block diagram of an exemplary computer system / server suitable for use in implementing embodiments of the present invention.

【detailed description】

In order to make the objectives, technical solutions, and advantages of the embodiments of the application clearer, the technical solutions in some embodiments of the application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the application. Obviously, the described The examples are a part of the examples of this application, but not all the examples. Based on the embodiments in the present application, all other embodiments obtained by a person of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

In addition, the term "and / or" in this article is only an association relationship describing the associated object, which means that there can be three kinds of relationships, for example, A and / or B can mean: A exists alone, and A and B exist simultaneously, There are three cases of B alone. In addition, the character "/" in this text generally indicates that the related objects are an "or" relationship.

FIG. 1 is a schematic flowchart of a method for generating a payment code on a tamper-proof two-dimensional code server according to an embodiment of the present application. As shown in FIG. 1, the method includes:

In a preferred implementation of this embodiment, the payee needs to register with the tamper-resistant QR code server in advance, and after the registration is successful, the tamper-resistant QR code server allocates a user identity for identifying the user. Only registered payee users can request the tamper-resistant QR code server to generate a payment code for them.

Preferably, the payee sends a registration request to the tamper-resistant two-dimensional code server through the client, and the tamper-resistant two-dimensional code server allocates a user identity to the payee based on the registration request.

The payee opens the client on the mobile terminal or opens the web page corresponding to the tamper-proof QR code server, and performs registration on the user registration interface, such as entering a user name and password for registration, or receiving a tamper-resistant 2D by filling in a mobile phone number After the verification message sent by the code issuing organization is verified, it is verified to register.

The tamper-resistant QR code server assigns a user identification to the payee, and sends a successful registration notification message to the payee, prompting the user to register successfully.

The user identity can identify the identity of the payee, and is used to determine the qualification certificate file, user ID picture, etc. uploaded by the payee.

In a preferred implementation manner of this embodiment, the payee needs to upload a qualification certificate file to the tamper-resistant QR code server in advance, so that the tamper-resistant QR code server reviews the qualification certificate file.

Preferably, after the payee is successfully registered, the user qualification certificate is submitted to the tamper-proof two-dimensional code server; the tamper-proof two-dimensional code server reviews the user qualification certificate information, and passes the verified certification information to the The user identity is matched, where a unique valid user identity exists to match the qualification certification information.

Preferably, the payee can click the upload qualification certificate file option in the client or the corresponding webpage, and upload the qualification certificate file selected by the user to the tamper-proof QR code server, such as an ID card, business license, etc .; The certificate verification success message returned by the code server.

The qualification certificate can prove the identity of the payee and improve the security of payment. By reviewing the qualification certification documents of the payee, the identity of the payee can be ensured, preventing others from embezzling the payee's identity, and improving the security of the payment.

The client in this embodiment may be a client provided by a tamper-resistant QR code issuing mechanism, and may also include other recognized or authorized by the corresponding tamper-resistant QR code issuing mechanism, which may implement other technical solutions of this application. Client. The server may be a tamper-resistant QR code server.

The tamper-resistant two-dimensional code server is used to provide a payee with a payee code including a user identification picture of the payee, and provide the payee and the payee with the user ID picture stored in the server database when scanning for payment. The user identification picture in the code is compared and checked to prevent the receipt code from being tampered with, so as to improve the security of code scanning payment.

In a preferred embodiment of this embodiment, the tamper-resistant QR code issuing mechanism and the payment institution may be the same institution, that is, the client provided by the tamper-resistant QR code issuing mechanism is a client, and the tamper-resistant QR server is provided. The same server as the payment server.

In another preferred embodiment of this embodiment, the tamper-resistant QR code issuing mechanism and the payment institution may be different agencies, and the payment institution invokes the service of the tamper-resistant QR code issuing mechanism.

In step S11, the client sends a payment code generation request to the tamper-resistant two-dimensional code server; the payment code generation request includes a user identity of the user corresponding to the client;

Preferably, the payee may click the generate a pay code option in the client to trigger the client to send a pay code generation request to the server to request the server to generate a corresponding pay code for the payee.

In step S12, the tamper-resistant two-dimensional code server receives a payment code generation request sent by the client; and generates a two-dimensional code according to the user identity.

This step can use conventional two-dimensional code generation logic, which will not be repeated here. The two-dimensional code includes the user identification of the payee. The two-dimensional code may further include a link address to a tamper-resistant two-dimensional code server.

In step S13, the tamper-resistant two-dimensional code server combines the generated two-dimensional code with the user identification picture of the corresponding user submitted by the client to obtain a payment code, so as to perform code scanning security verification based on the payment code. .

Preferably, the user identification picture may be a user's portrait, logo, or any other identification picture that can identify the user.

In a preferred implementation manner of this embodiment, the collection code generation request includes a user identification picture.

In another preferred implementation manner of this embodiment, the client uploads the user identification picture to a tamper-resistant two-dimensional code server in advance, so that the tamper-resistant two-dimensional code server audits the user identification picture. The tamper-resistant two-dimensional code server searches for a corresponding user identification picture according to the identity of the user included in the collection code generation request. By uploading the user logo picture in advance, the success rate of generating the payment code can be improved.

Preferably, the payee can click the upload user logo picture option in the client to upload the selected user logo picture to the server; and receive the user logo picture review success message returned by the server.

Preferably, the tamper-resistant two-dimensional code server audits the user identification picture uploaded by the payee through image recognition technology, so as to determine whether the uploaded user identification picture is identical to the submitter himself or his business license. For example, if the user identification picture is a user portrait, determine whether the user portrait matches a user ID; if the user identification picture is a logo, determine whether the logo matches a business license.

Preferably, the tamper-resistant two-dimensional code server may also perform a form review on the user identification picture uploaded by the payee. For example, the format, size, and resolution of user logo pictures are automatically audited; whether the user logo pictures violate laws or social ethics is automatically or manually audited.

After the verification is passed, the tamper-resistant QR code server stores the approved user identification picture in the server's database, and sends a prompt message to the payee that the user identification picture is successfully audited. The user identification picture stored in the database is determined by the corresponding user identification.

If the verification fails, the tamper-proof QR code server sends a prompt message to the payee that the user logo picture fails to be reviewed, prompting the payee to re-upload the user logo picture.

The user identification picture is used as the background picture of the two-dimensional code and combined with the two-dimensional code as the payment code. When the payer scans the payment code to pay the receiver, the tamper-proof two-dimensional code server firstly The user ID corresponding to the code looks up the corresponding user ID picture in the database of the server and sends it to the client for display to the payer for the payer to compare with the background picture in the payment code scanned by the payer; if not, Send a risk reminder message to the payer, prompting the payer to terminate the payment, for example, "the current payment code is not registered in the tamper-resistant QR code payment system".

Preferably, the user identification picture is faded out; the diluted user identification picture is used as the background picture of the two-dimensional code and combined with the two-dimensional code. The fading standard is that the two-dimensional code in the generated payment code can be scanned and identified normally, as long as the two-dimensional code's error tolerance and correction performance is not affected. Based on the two-dimensional code's error correction function, even if some parts are covered or lost, the two-dimensional code can still be scanned and identified.

Preferably, the user identification picture is displayed in a peripheral area of the two-dimensional code.

Preferably, in a code scanning payment scenario, a code scanning security check is performed based on the payment code.

The user identification corresponding to the payment code is used for the tamper-resistant two-dimensional code server to find the corresponding user identification picture for security verification; in order to determine the security calibration on the client based on the user identification picture corresponding to the payment code Or, the tamper-proof two-dimensional code server performs a similarity comparison between the image of the payment code included in the service request and the user identification picture obtained for security verification to determine the security verification result.

In step S14, the tamper-resistant two-dimensional code server sends the generated payment code to the client.

Preferably, the payment code is in a picture format and can be displayed and printed by the client; or, the payment code can be printed by the server and provided to the payee.

The client may display the payment code, and the payer scans the payment code to pay the payee. The payee can also print and post the payment code for the payer to scan the payment code for payment.

Different from the user avatar information in other existing payment codes, in this embodiment, the user identity picture is stored in the server by reviewing the user identity picture and binding the user identity picture to the payer When scanning the code, the user ID picture stored in the server database and the user ID picture in the payment code are compared and verified, which improves the security of code scanning payment.

FIG. 2 is a schematic flowchart of a code scanning and verifying method provided in Embodiment 2 of the present application. As shown in FIG. 2, when the payer scans the payment code to pay the payee, the process shown in FIG. 2 may be performed:

In step S21, the client scans the payment code, and sends a service request for the payment code to the tamper-resistant two-dimensional code server;

The client may be a payment software client such as WeChat, Alipay, or Shengfutong Wallet, and may also include other clients recognized or authorized by the corresponding tamper-resistant QR code issuing agency and capable of implementing the technical solution of the present application. .

The payment code is generated by the tamper-resistant two-dimensional code server according to the user identification of the payee; the generated two-dimensional code is combined with the user identification picture of the payee.

When the payer wants to make a payment to the payee after the purchase, he can open the client on his mobile phone, scan the payment code provided by the payee, and send a business request to the tamper-proof QR code server. The service request is to request a tamper-resistant two-dimensional code server to perform validity check on the payment code. It may also be a payment request for the payment code. First, a tamper-proof two-dimensional code server performs a validity check on the payment code, and payment is performed on the two-dimensional code after the verification is passed.

Preferably, after scanning the payment code, the client can parse the two-dimensional code in the payment code to obtain the user identification of the payee included therein as the user identification corresponding to the payment code, and according to the two-dimensional code, The included link address to the tamper-resistant QR code server sends a business request to the tamper-resistant QR code server. The service request includes scanning to obtain the user identity corresponding to the payment code for security of the tamper-resistant QR code server. check.

In step S22, the tamper-resistant two-dimensional code server receives a service request for a payment code sent by a client, and finds a corresponding user identifier for security verification based on a user identity corresponding to the payment code included in the service request. image.

Preferably, the step further comprises: the tamper-resistant two-dimensional code server first determines whether the corresponding user is a registered user of the tamper-resistant two-dimensional code payment system according to the user identity corresponding to the payment code included in the service request. Find the corresponding user identification picture for security verification in the database of the server according to the user identity corresponding to the payment code included in the service request and send it to the client for display to the payer for the payer and his The scanned image of the user's logo in the scanned payment code is used for comparison verification; if not, a risk alert message is sent to the payer to prompt the payer to terminate the payment, for example, "The current payment code is not registered in the tamper-proof QR code payment system ". Wherein, the corresponding user identification picture for security verification is stored by the server in the database of the server after the server checks the user identification picture sent by the payee.

In step S23, the tamper-resistant QR code server sends the user identification picture to the client for display to the payer in the client's payment interface, prompting the payer to send the user identification picture displayed in the payment interface and its scanned receipt. Compare the user logo pictures in the code.

In step S24, if the user identification picture displayed in the payment interface of the client is the same as the background picture in the scanned payment code, the payer can confirm to continue the payment; if they are different, the payer can terminate the payment and inform the payee .

Preferably, the payer can click the "Confirm" button on the payment interface to continue the payment; or click the "Cancel" button on the payment interface to cancel the payment.

In step S25, after the tamper-resistant QR code server receives a confirmation order from the payer to continue the payment, it constructs a corresponding payment request, and forwards the payment request to the payment server, and the payment server processes the payment request.

Preferably, the service request of the payment code sent by the client includes identification information of the corresponding payment software, and the tamper-resistant two-dimensional code server constructs a corresponding payment request according to the identification information, and forwards the payment request to the payment Software corresponding payment server.

Preferably, the tamper-resistant two-dimensional code server terminates the payment operation after receiving the confirmation order from the payer to cancel the payment.

Preferably, if the tamper-proof two-dimensional code server does not receive the user's confirmation instruction within a predetermined time, for example, the user has not confirmed or cancelled, the payment is terminated.

In step S26, after receiving the payment request, the payment server guides the payer to complete the payment, performs settlement, and notifies the payee that the payment has been completed.

Preferably, in another preferred embodiment of the present invention,

The tamper-resistant two-dimensional code server first determines whether the corresponding user is a registered user of the tamper-resistant two-dimensional code payment system according to the user identity corresponding to the payment code included in the service request. If so, according to the service request The user identification corresponding to the payment code finds the corresponding user identification picture for security verification in the server database and sends it to the client, and the client scans the corresponding user identification picture for security verification and scans it The user's logo picture in the payment code is compared and verified; if not, send a risk reminder message to the payer to prompt the payer to terminate the payment, for example, "the current payment code is not registered in the tamper-proof QR code payment system" . Wherein, the corresponding user identification picture for security verification is stored by the server in the database of the server after the server checks the user identification picture sent by the payee.

The client compares the corresponding user identification picture for security verification with the user identification picture in the payment code scanned by the client, and sends a confirmation command that the comparison result is consistent to the tamper-proof two-dimensional code server according to the verification result. To continue the payment; or, to send a confirmation command with inconsistent results to terminate the payment; or, to not send a confirmation command to terminate the payment.

After the tamper-resistant two-dimensional code server receives the confirmation command for continued payment sent by the client, it constructs a corresponding payment request, and forwards the payment request to the payment server, and the payment server processes the payment request.

Preferably, the service request of the payment code sent by the client includes identification information of the corresponding payment software, and the tamper-resistant two-dimensional code server constructs a corresponding payment request according to the identification information, and forwards the payment request to the payment Software corresponding payment server.

Preferably, the tamper-resistant two-dimensional code server terminates the payment operation after receiving the client's confirmation command to cancel the payment. Preferably, if the tamper-proof two-dimensional code server does not receive a confirmation instruction from the client within a predetermined time, for example, the client does not confirm or cancel, the payment is terminated.

Different from the user avatar information in other existing payment codes, in this embodiment, by reviewing the user ID picture and binding the user ID, the payer can scan the code to obtain the user ID stored in the server database. The picture is compared with the user's logo picture in the payment code to improve the security of code scanning payment.

FIG. 3 is a schematic flowchart of a code scanning and verifying method provided in Embodiment 2 of the present application. As shown in FIG. 3, when the payer scans the payment code to pay the payee, the process shown in FIG. 3 can be performed:

In step S31, the client scans the payment code, and sends a service request for the payment code to the tamper-resistant two-dimensional code server;

The client may be a payment software client such as WeChat, Alipay, or Shengfutong Wallet, and may also include other clients recognized or authorized by the corresponding tamper-resistant QR code issuing agency and capable of implementing the technical solution of the present application. .

The payment code is generated by the tamper-resistant two-dimensional code server according to the user identification of the payee; the generated two-dimensional code is combined with the user identification picture of the payee.

When the payer wants to pay after shopping, he can open the client on his mobile phone, scan the payment code provided by the payee, and send a business request to the tamper-proof QR code server. The service request is to request a tamper-resistant two-dimensional code server to perform validity check on the payment code. It may also be a payment request for the payment code. First, a tamper-proof two-dimensional code server performs a validity check on the payment code, and payment is performed on the two-dimensional code after the verification is passed.

Preferably, after scanning the payment code, the client can parse the two-dimensional code in the payment code to obtain the user identification of the payee included therein as the user identification corresponding to the payment code, and according to the two-dimensional code containing The link address to the tamper-resistant QR code server sends a business request to the tamper-resistant QR code server. The service request includes the user identification corresponding to the scanned payment code for security verification by the tamper-resistant QR code server. Check. The service request also includes a user identification picture in the payment code.

In step S32, the tamper-resistant two-dimensional code server receives a service request for a payment code sent by a client, and finds a corresponding user identifier for security verification based on a user identity corresponding to the payment code included in the service request. Pictures; perform similarity judgment on the user identification picture in the payment code included in the service request and the user identification picture obtained for security verification. Wherein, the searched user identification picture for security verification is stored by the server in the database of the server after the server checks the user identification picture sent by the payee.

Preferably, the step further comprises: the tamper-resistant two-dimensional code server first determines whether the corresponding user is a registered user of the tamper-resistant two-dimensional code payment system according to the user identity corresponding to the payment code included in the service request. Comparing the user identification picture in the payment code included in the service request with the user identification picture obtained for security verification; if not, sending a risk prompt message to the payer to prompt the payer to terminate the payment , Such as "The current payment code is not registered in the tamper-resistant QR code payment system."

In step S33, if the similarity between the user identification picture of the payee and the found user identification picture in the payment code included in the service request is higher than a preset threshold, the payment is continued; the tamper-resistant QR code server constructs the corresponding A payment request, and the payment request is forwarded to a payment server, and the payment server processes the payment request.

Preferably, the service request sent by the client includes identification information of the corresponding payment software, and the tamper-resistant two-dimensional code server constructs a corresponding payment request according to the identification information, and forwards the payment request to the payment corresponding to the payment software. The server executes step S35.

In step S34, if the value is lower than the preset threshold, the tamper-resistant QR code server terminates the payment and sends a prompt message to the payer.

In step S35, after receiving the payment request, the payment server guides the payer to complete the payment, performs settlement, and notifies the payee that the payment has been completed.

Different from the user avatar information in other existing payment codes, in this embodiment, the user identification picture stored in the server database and the payment code can be stored in the server database by reviewing the user identification picture and binding the user identification picture. The user's logo image is automatically compared and verified, which improves the security of code scanning payment.

FIG. 4 is a schematic flowchart of a code scanning verification method provided in Embodiment 2 of the present application. As shown in FIG. 4, when a payment is made to a payee, the process shown in FIG. 4 may be performed:

In step S41, the client sends a service request for a payment code to the tamper-resistant two-dimensional code server;

The client may be a payment software client such as WeChat, Alipay, or Shengfutong Wallet, and may also include other clients recognized or authorized by the corresponding tamper-resistant QR code issuing agency and capable of implementing the technical solution of the present application. .

The payment code is generated by the tamper-resistant two-dimensional code server according to the user identification of the payee; the generated two-dimensional code is combined with the user identification picture of the payee.

When the payer wants to pay after shopping, he can open the client on his mobile phone, take a picture of the payment code provided by the payee, and send a business request to the tamper-proof QR code server. The service request is to request a tamper-resistant two-dimensional code server to perform validity check on the payment code. It may also be a payment request for the payment code. First, a tamper-proof two-dimensional code server performs a validity check on the payment code, and payment is performed on the two-dimensional code after the verification is passed.

Preferably, an entrance of the tamper-resistant QR code server is preset in the client. After opening the entrance, the camera of the mobile phone is called to capture the payment code provided by the payee and send a service request to the tamper-resistant QR code server. The service request includes a user identification picture in the payment code, which is used by the tamper-resistant two-dimensional code server to identify the payment code and perform security verification.

In step S42, the tamper-resistant two-dimensional code server receives the service request of the payment code sent by the client, decodes the user identification picture in the payment code included in the service request, and obtains the user corresponding to the payment code. Identity identification; finding a corresponding user identification picture for security verification based on a user identification corresponding to a payment code included in the service request; and searching for a user identification picture in the payment code included in the service request The obtained user identification picture used for security verification is subjected to similarity judgment. Wherein, the searched user identification picture for security verification is stored by the server in the database of the server after the server checks the user identification picture sent by the payee.

Preferably, the step further comprises: the tamper-resistant two-dimensional code server first determines whether the corresponding user is a registered user of the tamper-resistant two-dimensional code payment system according to the user identity corresponding to the payment code included in the service request. Comparing the user identification picture in the payment code included in the service request with the user identification picture obtained for security verification; if not, sending a risk prompt message to the payer to prompt the payer to terminate the payment , Such as "The current payment code is not registered in the tamper-resistant QR code payment system."

In step S43, if the similarity between the user identification picture of the payee and the found user identification picture in the payment code included in the service request is higher than a preset threshold, continue to pay; the tamper-resistant QR code server constructs the corresponding A payment request, and the payment request is forwarded to a payment server, and the payment server processes the payment request.

Preferably, the service request sent by the client includes identification information of the corresponding payment software, and the tamper-resistant two-dimensional code server constructs a corresponding payment request according to the identification information, and forwards the payment request to the payment corresponding to the payment software. The server executes step S45.

In step S44, if the value is lower than the preset threshold, the tamper-resistant QR code server terminates the payment and sends a prompt message to the payer.

In step S45, after receiving the payment request, the payment server guides the payer to complete the payment, performs settlement, and notifies the payee that the payment has been completed.

Different from the user avatar information in other existing payment codes, in this embodiment, the user identification picture stored in the server database and the payment code can be stored in the server database by reviewing the user identification picture and binding the user identification picture. The user's logo image is automatically compared and verified, which improves the security of code scanning payment.

FIG. 5 shows a block diagram of an exemplary computer system / server 012 suitable for use in implementing embodiments of the present invention. The computer system / server 012 shown in FIG. 5 is only an example, and should not impose any limitation on the functions and scope of use of the embodiments of the present invention.

As shown in FIG. 5, the computer system / server 012 is represented in the form of a general-purpose computing device. The components of the computer system / server 012 may include, but are not limited to, one or more processors or processing units 016, a system memory 028, and a bus 018 connecting different system components (including the system memory 028 and the processing unit 016).

The bus 018 represents one or more of several types of bus structures, including a memory bus or a memory controller, a peripheral bus, a graphics acceleration port, a processor, or a local area bus using any of a variety of bus structures. By way of example, these architectures include, but are not limited to, the Industry Standard Architecture (ISA) bus, the Micro Channel Architecture (MAC) bus, the enhanced ISA bus, the Video Electronics Standards Association (VESA) local area bus, and peripheral component interconnects ( PCI) bus.

Computer system / server 012 typically includes a variety of computer system readable media. These media can be any available media that can be accessed by the computer system / server 012, including volatile and non-volatile media, removable and non-removable media.

System memory 028 may include computer system-readable media in the form of volatile memory, such as random access memory (RAM) 030 and / or cache memory 032. The computer system / server 012 may further include other removable / non-removable, volatile / non-volatile computer system storage media. For example only, the storage system 034 may be used to read and write non-removable, non-volatile magnetic media (not shown in FIG. 5 and is commonly referred to as a “hard drive”). Although not shown in FIG. 5, a disk drive for reading and writing to a removable non-volatile disk (such as a "floppy disk"), and a removable non-volatile optical disk (such as a CD-ROM, DVD-ROM, etc.) may be provided. Or other optical media). In these cases, each drive may be connected to the bus 018 through one or more data medium interfaces. The memory 028 may include at least one program product having a set (eg, at least one) of program modules configured to perform functions of embodiments of the present invention.

A program / utility tool 040 having a set of (at least one) program module 042 may be stored in, for example, the memory 028. Such a program module 042 includes-but is not limited to-an operating system, one or more applications, other programs Modules and program data, each or some combination of these examples may include implementations of the network environment. The program module 042 generally performs functions and / or methods in the embodiments described in the present invention.

The computer system / server 012 may also communicate with one or more external devices 014 (such as a keyboard, pointing device, display 024, etc.). In the present invention, the computer system / server 012 communicates with an external radar device, and may also communicate with one or more Multiple devices that enable a user to interact with the computer system / server 012, and / or with any device (such as a network card, modem, etc.) that enables the computer system / server 012 to communicate with one or more other computing devices Communication. This communication can be performed through an input / output (I / O) interface 022. Moreover, the computer system / server 012 can also communicate with one or more networks (such as a local area network (LAN), a wide area network (WAN), and / or a public network, such as the Internet) through the network adapter 020. As shown in FIG. 5, the network adapter 020 communicates with other modules of the computer system / server 012 through the bus 018. It should be understood that although not shown in FIG. 5, other hardware and / or software modules may be used in conjunction with the computer system / server 012, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems , Tape drives, and data backup storage systems.

The processing unit 016 executes the functions and / or methods in the embodiment described by running a program stored in the system memory 028.

The above computer program may be set in a computer storage medium, that is, the computer storage medium is encoded with a computer program, and when the program is executed by one or more computers, the one or more computers are caused to execute the programs shown in the foregoing embodiments of the present invention. Method flow and / or device operation.

With the development of time and technology, the meaning of media has become wider and wider, and the spread of computer programs is no longer limited to tangible media, and can also be downloaded directly from the Internet. Any combination of one or more computer-readable media may be used. The computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples (non-exhaustive list) of computer-readable storage media include: electrical connections with one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), Erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the foregoing. In this document, a computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in combination with an instruction execution system, apparatus, or device.

The computer-readable signal medium may include a data signal propagated in baseband or transmitted as part of a carrier wave, which carries a computer-readable program code. Such a propagated data signal may take a variety of forms, including, but not limited to, electromagnetic signals, optical signals, or any suitable combination of the foregoing. The computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, and the computer-readable medium may send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. .

Program code embodied on a computer-readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

Computer program code for performing the operations of the present invention may be written in one or more programming languages, or combinations thereof, including programming languages such as Java, Smalltalk, C ++, and also conventional Procedural programming language—such as "C" or similar programming language. The program code can be executed entirely on the user's computer, partly on the user's computer, as an independent software package, partly on the user's computer, partly on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any kind of network, including a local area network (LAN) or wide area network (WAN), or it can be connected to an external computer (such as through the Internet using an Internet service provider) connection).

Finally, it should be noted that the above embodiments are only used to describe the technical solution of the present application, and are not limited thereto. Although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still Modifications to the technical solutions described in the foregoing embodiments, or equivalent replacements of some of the technical features thereof; and these modifications or replacements do not depart the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims (23)

A method for generating a payment code on a tamper-resistant two-dimensional code server side, which includes: Receiving a payment code generation request sent by a client, where the payment code generation request includes a user identity of a user corresponding to the client; Generating a two-dimensional code according to the user identity; The generated two-dimensional code is combined with the user identification picture of the corresponding user submitted by the client to obtain a payment code, so as to perform code scanning security verification based on the payment code. The method according to claim 1, further comprising: Obtaining the registration request of the corresponding user sent by the client; Based on the registration request, a user identity is assigned to the corresponding user of the client. The method according to claim 2, wherein after the assigning a user identity to a user corresponding to the client, the method further comprises: Obtaining a user identification picture of the corresponding user submitted by the client; Associating the user identification picture with the user identification. The method according to claim 3, wherein the associating the user identity picture with the user identity picture comprises: Auditing the user identification picture, and associating the user identification picture that has passed the verification with the user identity. The method according to claim 2, wherein: After the assigning a user identity to a user corresponding to the client, the method further includes: Obtain the user qualification information of the corresponding user submitted by the client; The user qualification information is audited, and the verified qualification information is matched with the user identity, and there is a unique valid user identity that matches the qualification information. The method according to claim 1, wherein: The two-dimensional code includes a user identity identifier of the user corresponding to the client; and further includes a link address to a tamper-resistant two-dimensional code server. The method according to claim 1, wherein combining the generated two-dimensional code with a user identification picture comprises: Combining the user identification picture as a background picture of the two-dimensional code with the two-dimensional code; or Displaying the user identification picture in a peripheral area of the two-dimensional code. The method according to claim 1, further comprising: Send the generated payment code to the client so that the payer can scan the code. A code scanning security verification method is characterized in that it includes: The tamper-resistant two-dimensional code server receives the service request of the payment code sent by the client; wherein the payment code is generated by the tamper-resistant two-dimensional code server according to the user identity of the payee; The combination of the two-dimensional code and the payee user identification picture; The tamper-resistant two-dimensional code server searches for a corresponding user identification picture for security verification based on the user identification corresponding to the payment code included in the service request; The tamper-resistant two-dimensional code server sends the corresponding user identification picture for security verification to the client, so as to determine a security verification result on the client based on the user identification picture for security verification. The method according to claim 9, wherein before the searching for a corresponding user identification picture for security verification based on a user identification corresponding to a payment code included in the service request, further comprising: Determining whether the corresponding user is a registered user of the tamper-resistant QR code payment system according to the user identity corresponding to the payment code included in the service request, and if so, based on the user identity corresponding to the payment code included in the service request The logo lookup corresponds to the user logo picture used for security verification; if not, a prompt message is sent to the client. The method according to claim 9, further comprising: The tamper-resistant two-dimensional code server performs a corresponding operation according to the security verification result. The method according to claim 11, wherein the tamper-resistant QR code server performs a corresponding operation according to the security verification result, including: Receive a confirmation command from the client with a consistent comparison result, and continue to pay; or, Did not receive a confirmation command from the client with a consistent comparison result, and terminated the payment; or Receive a confirmation command from the client with inconsistent comparison results, and terminate the payment. The method according to claim 12, wherein the continuing payment comprises: Structure and process the corresponding payment request; or, Construct a corresponding payment request, and forward the payment request to a payment server, and the payment server processes the payment request. The method according to claim 12, wherein the unconfirmed confirmation command sent by the client that the comparison result is consistent comprises: No consistent confirmation command sent by the client is received within the preset time. A code scanning security verification method is characterized in that: The tamper-resistant two-dimensional code server receives a service request for a payment code sent by a client; wherein the payment code is generated by the tamper-resistant two-dimensional code server according to the user identity of the payee; the generated A combination of a QR code and a payee user logo image; The tamper-resistant two-dimensional code server searches for a corresponding user ID picture for security verification based on the user ID corresponding to the payment code included in the service request; The tamper-resistant two-dimensional code server performs a similarity comparison between the payee user identification picture in the payment code included in the service request and the user identification picture obtained for security verification to determine the security verification result. The method according to claim 15, wherein before the searching for a corresponding user identification picture for security verification based on the user identity included in the service request, further comprising: The tamper-resistant two-dimensional code server determines whether the corresponding user is a registered user of the tamper-resistant two-dimensional code payment system according to the user identity corresponding to the payment code included in the service request. The user identification corresponding to the paragraph code searches for the corresponding user identification picture for security verification; if not, sends a prompt message to the client. The method according to claim 15, further comprising: The tamper-resistant two-dimensional code server performs a corresponding operation according to the security verification result. The method according to claim 17, wherein performing a corresponding operation according to the security check result comprises: If the similarity between the user identification picture of the payee and the found user identification picture in the payment code included in the service request is higher than a preset threshold, the payment is continued; if it is lower than the preset threshold, the payment is terminated. The method according to claim 15, wherein the service request comprises the payment code and a user identity obtained after the client scans the payment code. The method according to claim 15, wherein the service request includes the payment code; Before performing the security check based on the user identity corresponding to the payment code included in the service request, the method further includes: determining the user identity corresponding to the payment code by analyzing the payment code. The method according to claim 18, wherein the continuing payment comprises: Structure and process the corresponding payment request; or, Construct a corresponding payment request, and forward the payment request to a payment server, and the payment server processes the payment request. A device, characterized in that the device includes: One or more processors; A storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1-21. A computer-readable storage medium having stored thereon a computer program, characterized in that when the program is executed by a processor, the method according to any one of claims 1-21 is implemented.

Images