Safety payment authentication method based on software client

Abstract

The invention provides a safety payment authentication method based on a software client. The method includes that credible authorization is performed on the operating environment of the client, namely, machine digital fingerprints of the environment of the client are extracted, an original secret order and a client digital certificate are generated accordingly, and the client submits the original secret order to an authentication server which authenticates the identity of the submitter to generate a corresponding server key; during payment, the client requires payment authentication; the authentication server generates a 'challenge' random number after verifying the user validity, adds the random number into payment information, generates a request payment token through a reversible encryption algorithm, and sends the token to the client; the client decrypts the request payment token after receiving and displays the payment information, and the user confirms the payment information and inputs a payment code; and the like. According to the safety payment authentication method, the challenge-response payment authentication mode is improved, and the problems of limitation on popularization caused by the usbkey hardware medium transmission cost and safety systemic bugs are solved.

Description

【Technical field】 [0001] The invention relates to a safe payment authentication method. 【Background technique】 [0002] In the field of online payment, the usual safe payment technology means include the following: [0003] 1) Safe payment method of mobile phone dynamic password [0004] This is a secure payment technology based on mobile phone binding. Its main mechanism is: when necessary, the transaction code is generated by the server (the verification code can be regarded as a special dynamic password), and it is sent through channels other than the network. The security level is high, but there is a lag in SMS messages and payment of SMS messages is required. The question of cost. [0005] 2) Safe payment method based on digital certificate identity authentication [0006] Its main mechanism is a certificate issued by an authoritative and impartial third-party organization (such as a CA center). Through encryption technology, the information transmitted on the net...

AI Technical Summary

Problems solved by technology

[0019] The technical problem to be solved by the present invention is to provide a secure payment authentication method based on a software client, improve the limitations of the challenge-response payment authentication method in the e-commerce network payment process, and solve the problem of usbkey hardware medium transfer, cost Restrictions brought about by the promotion; secondly, when the customer pays, the payment information needs to be confirmed twice, which solves the above-mentioned problem of security systemic loopholes

Images