Intelligent mobile phone online payment security system

Abstract

The invention discloses a smart phone online payment security system, and belongs to the technical field of data processing. The system comprises a data acquisition module, a data processing module, a safety early warning module and a payment security database. According to the invention, the user identity verification parameter and the payment network parameter are obtained, the user identity verification security evaluation value is obtained through processing according to the user identity verification parameter, the payment network security evaluation value is obtained through processing according to the payment network parameter, and the payment security system evaluation index is obtained through comprehensive analysis. And then safety early warning is carried out according to the payment security system evaluation index, so that the problem that the payment information of the user is stolen due to the existence of vulnerabilities in a part of smart phone online payment security systems when the user replaces the use equipment in the prior art is solved, the risks of payment fraud and network attack are greatly reduced, and the user experience is improved. And a higher safety guarantee is provided for the user.

Description

Technical Field

[0001] The present invention relates to the technical field of data processing, and in particular to a smart phone online payment security system. Background Art

[0002] With the acceleration of urbanization and the quickening pace of life, users have an increasing demand for convenient and efficient payment methods, and mobile payment just meets this demand, providing users with payment services anytime and anywhere. In the future, the popularization trend of mobile payment will be more significant and gradually penetrate into more fields.

[0003] The existing smartphone online payment system mainly realizes the payment function through the combination of software and hardware. In terms of software, the payment platform App is an important entry point for users to make payments, such as Alipay and WeChat Pay. In terms of hardware, the smartphone is the core device of the smartphone online payment system, which realizes convenient and secure online payment functions.

[0004] For example, the invention patent announcement with announcement number: CN105117906B announces a smart phone online payment security system that can be confirmed from the outside, including: a security chip, in which a transaction verification code is pre-stored; a controller; a card reading slot, which is correspondingly provided with a card reader; the card reader communicates with the security chip when receiving a card reading confirmation signal; a transaction verification code confirmation code is stored in the processing module; when using a smart phone for online payment, the transaction server verifies the transaction password, and after the verification is passed, the transaction server returns the first confirmation information; when the user enters the card reading confirmation signal through the controller, the card reader reads the transaction verification code from the security chip and sends it to the processing module, the processing module compares the transaction verification code with the transaction verification code confirmation code, when the two are consistent, the processing module opens the network connection and submits the second confirmation information to the transaction server, and the transaction server executes the online payment operation.

[0005] For example, an online payment method and an online payment system announced by the invention patent with announcement number: CN107657445B include: a mobile terminal obtains a trademark image and uploads the trademark image to a server; the server parses out a user account corresponding to the trademark image and obtains payment information associated with the user account; the mobile terminal generates a payment page based on the payment information associated with the user account returned by the server, so that the user can perform online payment operations on the payment page.

[0006] However, in the process of implementing the technical solution of the invention in the embodiments of the present application, the present application found that the above technology has at least the following technical problems:

[0007] In the prior art, when users change their devices, some smart phones' online payment security systems have loopholes, resulting in the problem of users' payment information being stolen. Summary of the invention

[0008] The embodiment of the present application provides a smartphone online payment security system, which solves the problem in the prior art that when a user changes the device, some smartphone online payment security systems have loopholes, resulting in the theft of the user's payment information, greatly reduces the risk of payment fraud and network attacks, and provides users with higher security protection.

[0009] The embodiment of the present application provides a smart phone online payment security system, including:

[0010] Furthermore, there are a data acquisition module, a data processing module, a security warning module and a payment security database; wherein the data acquisition module is used to obtain user identity authentication parameters and payment network parameters, and the payment network parameters include malicious code attack data and firewall working data; the data processing module is used to obtain a user identity authentication security assessment value based on the user identity authentication parameters, obtain a payment network security assessment value based on the payment network parameters, and obtain a payment security system assessment index through comprehensive analysis; the security warning module is used to issue a security warning based on the payment security system assessment index.

[0011] Furthermore, the step of obtaining a user identity authentication security assessment value based on user identity authentication parameters includes: the user identity authentication parameters include the number of identity authentication attempts in each identity authentication cycle, the identity authentication success rate in each identity authentication cycle and the identity authentication response time in each identity authentication cycle; monitoring the user identity authentication parameters of the current identity authentication cycle, obtaining the frequency of use of the current verification device, and matching the critical identity authentication response time, critical identity authentication success rate and critical number of identity authentication attempts from the payment security database; comprehensively analyzing to obtain the user identity authentication security assessment value, and performing security adjustments based on the user identity authentication security assessment value.

[0012] Furthermore, the step of making security adjustments based on the user identity authentication security assessment value includes: obtaining the user identity authentication security assessment threshold from the payment security database; comparing the user identity authentication security assessment value with the user identity authentication security assessment threshold; if the user identity authentication security assessment value is greater than or equal to the user identity authentication security assessment threshold, then verifying the user identity as a safe identity; if the user identity authentication security assessment value is less than the user identity authentication security assessment threshold, then verifying the user identity as a dangerous identity, and locking the verification device to prohibit identity authentication.

[0013] Furthermore, the step of obtaining a payment network security evaluation value based on payment network parameter processing includes: obtaining a firewall work performance evaluation value based on firewall work data processing; obtaining a malicious code attack degree value based on malicious code attack data and firewall work performance evaluation value processing; obtaining a payment network security evaluation value based on a comprehensive analysis of the firewall work performance evaluation value and the malicious code attack degree value, and performing security adjustments based on the payment network security evaluation value.

[0014] Furthermore, the step of obtaining a firewall working performance evaluation value based on firewall working data processing includes: the firewall working data includes throughput and packet loss rate; obtaining critical throughput and critical packet loss rate from the payment security database; and obtaining a firewall working performance evaluation value through comprehensive analysis.

[0015] Furthermore, the step of obtaining a malicious code attack degree value based on malicious code attack data and firewall work performance evaluation values ​​includes: the malicious code attack data includes the duration of the malicious code attack and the number of malicious code attacks; obtaining the critical malicious code attack duration, the critical number of malicious code attacks and the firewall work performance evaluation threshold from the payment security database; and obtaining the malicious code attack degree value through comprehensive analysis.

[0016] Furthermore, the step of making security adjustments based on the payment network security assessment value includes: comparing the payment network security assessment value with the payment network security assessment threshold; if the payment network security assessment value is greater than or equal to the payment network security assessment threshold, verifying that the payment network is in a safe state; if the payment network security assessment value is less than the payment network security assessment threshold, verifying that the payment network is in a dangerous state, and notifying network maintenance personnel to perform network maintenance.

[0017] Furthermore, the step of comprehensively analyzing and obtaining the payment security system evaluation index includes: comprehensively analyzing and obtaining the payment security system evaluation index based on the user identity authentication security evaluation value, the payment network security evaluation value, the user identity authentication security evaluation threshold and the payment network security evaluation threshold.

[0018] Furthermore, the method for obtaining the payment security system evaluation index is as follows:

[0019]

[0020] In the formula, ξE represents the payment security system evaluation index, α1 represents the payment security system evaluation impact factor corresponding to the preset user identity authentication security evaluation value, α2 represents the payment security system evaluation impact factor corresponding to the preset payment network security evaluation value, ζA1 represents the user identity authentication security evaluation value, ζA0 represents the user identity authentication security evaluation threshold, ζP1 represents the payment network security evaluation value, and ζP0 represents the payment network security evaluation threshold.

[0021] Furthermore, the step of issuing a security warning based on the payment security system evaluation index includes: obtaining a payment security system evaluation index threshold from a payment security database; comparing the payment security system evaluation index with the payment security system evaluation index threshold; if the payment security system evaluation index is greater than or equal to the payment security system evaluation index threshold, no security warning is issued; if the payment security system evaluation index is less than the payment security system evaluation index threshold, security verification is performed and a warning feedback is provided.

[0022] One or more technical solutions provided in the embodiments of the present application have at least the following technical effects or advantages:

[0023] 1. The present invention provides a smart phone online payment security system, thereby effectively solving the vulnerability of the user's payment information being stolen during the transmission process in the existing smart phone online payment security system, thereby effectively improving the security of the payment security system.

[0024] 2. The present invention further evaluates the working performance of the firewall by conducting a comprehensive analysis based on the throughput and packet loss rate of the firewall, thereby reducing problems such as network interruption and data loss caused by firewall failure.

[0025] 3. The present invention comprehensively considers firewall performance data and malicious code attack data to quantitatively evaluate the security of the payment network, thereby accurately evaluating the security risks faced by the payment network and avoiding the one-sidedness of single indicator evaluation. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 A schematic diagram of the structure of a smart phone online payment security system provided in an embodiment of the present application.

[0027] Figure 2 A graph showing changes in the payment security system evaluation index based on the smartphone online payment security system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0028] The embodiment of the present application provides an online payment security system for a smartphone, which solves the problem in the prior art that when a user changes his / her device, some online payment security systems of smartphones have loopholes, resulting in the theft of the user's payment information. By obtaining a user identity authentication security assessment value according to user identity authentication parameters, obtaining a payment network security assessment value according to payment network parameters, and obtaining a payment security system assessment index through comprehensive analysis, a security warning is issued according to the payment security system assessment index, thereby greatly reducing the risk of payment fraud and network attacks and providing users with higher security protection.

[0029] The technical solution in the embodiment of the present application is to solve the problem that when a user changes the device, some smart phone online payment security systems have loopholes, resulting in the user's payment information being stolen. The overall idea is as follows:

[0030] By obtaining user identity authentication parameters and payment network parameters, the user identity authentication security assessment value is obtained according to the user identity authentication parameters, and the payment network security assessment value is obtained according to the payment network parameters. A comprehensive analysis is performed to obtain the payment security system assessment index, and then a security warning is issued based on the payment security system assessment index. This solves the problem of user payment information being stolen due to vulnerabilities in the online payment security systems of some smartphones when users change their devices. This greatly reduces the risk of payment fraud and network attacks, and provides users with higher security protection.

[0031] In order to better understand the above technical solution, the above technical solution will be described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0032] like Figure 1 As shown, it is a structural schematic diagram of the smart phone online payment security system provided in the embodiment of the present application. The smart phone online payment security system provided in the embodiment of the present application includes: a data acquisition module, a data processing module, a security warning module and a payment security database; wherein, the data acquisition module is used to obtain user identity authentication parameters and payment network parameters, and the payment network parameters include malicious code attack data and firewall working data; the data processing module is used to obtain a user identity authentication security evaluation value according to the user identity authentication parameters, obtain a payment network security evaluation value according to the payment network parameters, and obtain a payment security system evaluation index through comprehensive analysis; the security warning module is used to make a security warning according to the payment security system evaluation index.

[0033] In this embodiment, the data acquisition module provides a reliable source of information for subsequent data processing and security warning by real-time monitoring and data collection; the data processing module conducts in-depth mining and analysis on the collected data to obtain accurate evaluation results; the security warning module monitors and evaluates the security status of the payment security system in real time. Once a potential security risk or abnormal behavior is found, it will immediately trigger the alarm mechanism to ensure that the user and the system can respond and handle it in time. The payment security database stores a large amount of user information, transaction records, security policies and other data, providing rich information support for the data processing module and the security warning module. By real-time monitoring, analysis and warning of potential security risks, the system can effectively prevent and respond to various payment security issues and ensure the user's financial security and transaction security.

[0034] In addition, the payment security database is used to store relevant data of the smartphone online payment security system, including: critical identity authentication response time, critical identity authentication success rate, critical identity authentication attempt number, critical throughput, critical packet loss rate, payment security system assessment impact factor corresponding to user identity authentication security assessment value, payment security system assessment impact factor corresponding to payment network security assessment value, etc. The data in the payment security database can be obtained through public databases or public data in some other payment security related systems.

[0035] Furthermore, the step of obtaining a user identity authentication security assessment value based on user identity authentication parameters includes: the user identity authentication parameters include the number of identity authentication attempts in each identity authentication cycle, the identity authentication success rate in each identity authentication cycle and the identity authentication response time in each identity authentication cycle; monitoring the user identity authentication parameters of the current identity authentication cycle, obtaining the frequency of use of the current verification device, and matching the critical identity authentication response time, critical identity authentication success rate and critical number of identity authentication attempts from the payment security database; comprehensively analyzing to obtain the user identity authentication security assessment value, and performing security adjustments based on the user identity authentication security assessment value.

[0036] In this embodiment, the critical value is preset based on historical data and security policies, and is used to determine whether the current identity authentication behavior is abnormal; the identity authentication cycle refers to the total time period from the start to the end of a single user login authentication, and the identity authentication response time refers to the time required for the system to respond and verify the user's identity after the user submits an identity authentication request. In addition, there is a certain correlation between the number of identity authentication attempts, the identity authentication success rate, and the identity authentication response time. The greater the identity authentication success rate, the greater the user identity authentication security assessment value. The length of the identity authentication response time may directly affect the user's identity authentication experience and security. A longer response time may mean that the system has a delay or is overloaded, thereby increasing the risk of identity authentication failure. Therefore, the longer the identity authentication response time, the smaller the user identity authentication security assessment value; under normal circumstances, the more attempts, the more likely the success rate is to be affected, because multiple attempts may mean that the user has encountered difficulties in authentication or there is a potential malicious attack, so the greater the number of identity authentication attempts, the smaller the user identity authentication security assessment value. Through real-time monitoring and comprehensive analysis of user identity authentication parameters, the system can promptly detect abnormal identity authentication behavior, thereby improving payment security; by setting critical values ​​and comparing and analyzing user identity authentication parameters, the system can effectively prevent fraud and protect user funds; on the premise of ensuring security, the system can also optimize the identity authentication process based on user identity authentication parameters to improve user experience.

[0037] The method for obtaining the user identity authentication security evaluation value is as follows:

[0038]

[0039] Where ζA represents the user identity authentication security assessment value, β1 represents the user identity authentication security assessment impact factor corresponding to the number of identity authentication attempts, β2 represents the user identity authentication security assessment impact factor corresponding to the identity authentication success rate, β3 represents the user identity authentication security assessment impact factor corresponding to the identity authentication response time, and N 1i represents the number of authentication attempts in the i-th authentication cycle, N0 represents the critical number of authentication attempts, and M 1i represents the authentication success rate of the ith authentication cycle, M0 represents the critical authentication success rate, and R 1ij represents the jth authentication response time of the i-th authentication cycle, R0 represents the critical authentication response time, i is the authentication cycle number, i = 1, 2, 3, ..., N, N is the number of authentication cycles, j is the authentication number, j = 1, 2, 3, ..., N 1i .

[0040] β1, β2 and β3 are payment network security assessment influencing factors corresponding to the number of identity authentication attempts, identity authentication success rate and identity authentication response time preset in the payment security database, respectively, and represent the numerical values ​​of the degree of influence of the number of identity authentication attempts, identity authentication success rate and identity authentication response time on the user identity authentication security assessment value, and can be directly obtained from the payment security database when used. For example, the number of identity authentication attempts and the user identity authentication security assessment influencing factors corresponding to the number of identity authentication attempts preset in the payment security database form a mapping set, and the user identity authentication security assessment influencing factors corresponding to the number of identity authentication attempts are obtained by inputting the mapping set according to the number of identity authentication attempts; the identity authentication success rate and the user identity authentication security assessment influencing factors corresponding to the identity authentication success rate preset in the payment security database form a mapping set, and the user identity authentication security assessment influencing factors corresponding to the identity authentication success rate are obtained by inputting the mapping set according to the identity authentication success rate; the identity authentication response time and the user identity authentication security assessment influencing factors corresponding to the identity authentication response time preset in the payment security database form a mapping set, and the user identity authentication security assessment influencing factors corresponding to the identity authentication response time are obtained by inputting the mapping set according to the identity authentication response time, wherein the mapping relationship is a many-to-one or one-to-one relationship, and the value range of the influencing factor in this embodiment is between 0 and 1.

[0041] Furthermore, the step of making security adjustments based on the user identity authentication security assessment value includes: obtaining the user identity authentication security assessment threshold from the payment security database; comparing the user identity authentication security assessment value with the user identity authentication security assessment threshold; if the user identity authentication security assessment value is greater than or equal to the user identity authentication security assessment threshold, then verifying the user identity as a safe identity; if the user identity authentication security assessment value is less than the user identity authentication security assessment threshold, then verifying the user identity as a dangerous identity, and locking the verification device to prohibit identity authentication.

[0042] In this embodiment, for users marked as dangerous, the system will lock their devices used for identity authentication to prevent further unauthorized access. At the same time, the system will prohibit the user from performing identity authentication in the current or future period to ensure the security of the payment system. For example, for users who are marked as dangerous for the first time, the system will disable their identity authentication for one day; for users who are marked as dangerous for the second or third time, the system will disable their identity authentication for one week; for users who are marked as dangerous for the third time or more, the system will disable the use of the number for life. By setting user identity authentication security assessment thresholds and performing comparisons, the system can identify and prevent potential security threats, thereby enhancing the overall security of the payment system; for legitimate users, as long as the identity authentication information they provide meets the requirements, the system will allow them to access the payment system, thereby improving the convenience of user experience.

[0043] Furthermore, the step of obtaining a payment network security evaluation value based on payment network parameter processing includes: obtaining a firewall work performance evaluation value based on firewall work data processing; obtaining a malicious code attack degree value based on malicious code attack data and firewall work performance evaluation value processing; obtaining a payment network security evaluation value based on a comprehensive analysis of the firewall work performance evaluation value and the malicious code attack degree value, and performing security adjustments based on the payment network security evaluation value.

[0044] In this embodiment, the firewall is the first line of defense of the payment network, and its working performance directly affects the security of the payment network. The firewall working performance evaluation value reflects the ability of the firewall in processing data packets, resisting attacks and ensuring network connectivity; malicious code attacks are one of the main threats faced by the payment network. Combined with the firewall working performance evaluation value, the effect of the firewall in resisting malicious code attacks can be evaluated, and the malicious code attack degree value can be calculated accordingly; in addition, the firewall working performance is related to the malicious code attack degree. Under normal circumstances, the firewall can filter the attack of malicious code, but excessively high-intensity attacks or frequent malicious traffic may cause the processing capacity of the firewall to reach its limit, thereby affecting its normal function. The larger the firewall working performance evaluation value, the larger the payment network security evaluation value, and the larger the malicious code attack degree value, the smaller the payment network security evaluation value. By comprehensively analyzing these two indicators, the security level of the payment network can be comprehensively evaluated. The payment network security evaluation value reflects the comprehensive ability of the payment network in resisting malicious code attacks, ensuring data security and transaction security. By comprehensively evaluating the security of the payment network, potential security vulnerabilities and weaknesses can be discovered and repaired in a timely manner to improve the overall security of the payment network.

[0045] The method for obtaining the payment network security assessment value is as follows:

[0046]

[0047] In the formula, ζP represents the payment network security assessment value, α8 represents the payment network security assessment impact factor corresponding to the firewall working performance, α9 represents the payment network security assessment impact factor corresponding to the malicious code attack degree, ζF1 represents the firewall working performance assessment value, ζF0 represents the firewall working performance assessment threshold, ζM0 represents the preset critical malicious code attack degree value, and ζM1 represents the malicious code attack degree value.

[0048] α8 and α9 are payment network security assessment impact factors corresponding to the firewall working performance and malicious code attack level preset in the payment security database, respectively, and respectively represent the numerical values ​​of the impact of the firewall working performance and malicious code attack level on the payment network security assessment value, and can be directly obtained from the payment security database when used. For example, the firewall working performance assessment value and the payment network security assessment impact factor corresponding to the firewall working performance assessment value preset in the payment security database form a mapping set, and the payment network security assessment impact factor corresponding to the firewall working performance assessment value is obtained by inputting the mapping set according to the firewall working performance assessment value; the malicious code attack level value and the payment network security assessment impact factor corresponding to the malicious code attack level value preset in the payment security database form a mapping set, and the payment network security assessment impact factor corresponding to the malicious code attack level value is obtained by inputting the mapping set according to the malicious code attack level value, wherein the mapping relationship is a many-to-one or one-to-one relationship, and the value range of the impact factor in this embodiment is between 0 and 1.

[0049] Furthermore, the step of obtaining a firewall working performance evaluation value based on firewall working data processing includes: the firewall working data includes throughput and packet loss rate; obtaining critical throughput and critical packet loss rate from the payment security database; and obtaining a firewall working performance evaluation value through comprehensive analysis.

[0050] In this embodiment, throughput refers to the maximum amount of data that the firewall can process per unit time under the condition of no frame loss and full load. The throughput can be obtained through professional network test instruments (such as Ixia, Spirent, etc.), firewall manufacturers or test reports issued by third-party organizations. High throughput indicates that the firewall can efficiently process a large number of data packets, while low throughput may cause network congestion and increased delay, so the higher the throughput, the higher the firewall performance evaluation value; packet loss rate refers to the percentage of data packets that the firewall should forward but does not forward due to insufficient resources under continuous load. A low packet loss rate indicates that the firewall can stably forward data packets and reduce the risk of data loss. A high packet loss rate may cause incomplete or failed data transmission, affecting the normal operation of network applications, so the lower the packet loss rate, the higher the firewall performance evaluation value. The packet loss rate can be directly obtained using network performance testing tools such as iperf tools. There is a close correlation between throughput and packet loss rate. Generally speaking, when the throughput of a firewall is high, it means that the firewall can process more data packets, thereby possibly reducing the packet loss rate; however, when the load of the firewall exceeds its processing capacity, the throughput will decrease and the packet loss rate will increase. By comprehensively analyzing the two parameters of throughput and packet loss rate, the firewall's performance can be accurately evaluated, providing strong protection for the security and smoothness of the network.

[0051] The method for obtaining the firewall performance evaluation value is as follows:

[0052]

[0053] Wherein, ζF represents the firewall performance evaluation value, α3 represents the firewall performance evaluation influencing factor corresponding to the preset throughput, α4 represents the firewall performance evaluation influencing factor corresponding to the preset packet loss rate, T1 represents the firewall throughput, T0 represents the critical throughput, P0 represents the critical packet loss rate, and P1 represents the packet loss rate.

[0054] α3 and α4 are the firewall performance evaluation influencing factors corresponding to the throughput and packet loss rate preset in the payment security database, respectively, which respectively represent the numerical values ​​of the degree of influence of the firewall throughput and packet loss rate on the firewall performance evaluation value, and can be directly obtained from the payment security database when used. For example, the firewall throughput and the firewall performance evaluation influencing factors corresponding to the throughput preset in the payment security database form a mapping set, and the firewall performance evaluation influencing factors corresponding to the throughput of the firewall are obtained according to the firewall throughput input mapping set; the firewall packet loss rate and the firewall performance evaluation influencing factors corresponding to the packet loss rate preset in the payment security database form a mapping set, and the firewall performance evaluation influencing factors corresponding to the packet loss rate of the firewall are obtained according to the firewall packet loss rate input mapping set, wherein the mapping relationship is a many-to-one or one-to-one relationship, and the value range of the influencing factor in this embodiment is between 0 and 1.

[0055] Furthermore, the step of obtaining a malicious code attack degree value based on malicious code attack data and firewall work performance evaluation values ​​includes: the malicious code attack data includes the duration of the malicious code attack and the number of malicious code attacks; obtaining the critical malicious code attack duration, the critical number of malicious code attacks and the firewall work performance evaluation threshold from the payment security database; and obtaining the malicious code attack degree value through comprehensive analysis.

[0056] In this embodiment, the duration of the malicious code attack can be directly obtained through a network monitoring tool or a security log system. The longer the duration of the malicious code attack, the greater the malicious code attack degree value; the number of malicious code attacks can be obtained by counting the number of malicious code attack events detected within a single user login time. The more malicious code attacks, the greater the malicious code attack degree value. The firewall performance evaluation threshold refers to a key indicator value used to evaluate whether the firewall performance meets the predetermined standard or whether there are potential problems. The greater the firewall performance evaluation value, the smaller the malicious code attack degree value. Generally speaking, the longer the duration of the malicious code attack, the more time and resources the attacker has to launch an attack, so the number of attacks may also increase accordingly. On the contrary, if the attack duration is shorter, the number of attacks may be relatively small; and the firewall's performance directly affects the number of attacks that it can prevent and the duration of the attack. By combining these three parameters for comprehensive analysis, the degree of malicious code attacks can be quantitatively evaluated, which helps the security team to more accurately understand the scope and severity of the attack, thereby formulating more effective countermeasures.

[0057] The method for obtaining the malicious code attack degree value is as follows:

[0058]

[0059] Wherein, ζM represents the malicious code attack degree value, α5 represents the malicious code attack degree influencing factor corresponding to the preset malicious code attack duration, α6 represents the malicious code attack degree influencing factor corresponding to the preset malicious code attack number, α7 represents the malicious code attack degree influencing factor corresponding to the preset firewall working performance, D1 represents the malicious code attack duration, D0 represents the critical malicious code attack duration, F1 represents the malicious code attack number, F0 represents the critical malicious code attack number, ζF0 represents the firewall working performance evaluation threshold, and ζF1 represents the firewall working performance evaluation value.

[0060] α5, α6 and α7 are the malicious code attack degree influencing factors corresponding to the malicious code attack duration, the number of malicious code attacks and the firewall working performance preset in the payment security database, respectively indicating the numerical values ​​of the influence of the malicious code attack duration, the number of malicious code attacks and the firewall working performance on the malicious code attack degree value, and can be directly obtained from the payment security database when used. For example, the duration of a malicious code attack and the malicious code attack degree influencing factor corresponding to the duration of a malicious code attack preset in a payment security database form a mapping set, and the mapping set is input according to the duration of the malicious code attack to obtain the malicious code attack degree influencing factor corresponding to the duration of the malicious code attack; the number of malicious code attacks and the malicious code attack degree influencing factor corresponding to the number of malicious code attacks preset in a payment security database form a mapping set, and the mapping set is input according to the number of malicious code attacks to obtain the malicious code attack degree influencing factor corresponding to the number of malicious code attacks; the firewall work performance evaluation value and the malicious code attack degree influencing factor corresponding to the firewall work performance evaluation value preset in the payment security database form a mapping set, and the mapping set is input according to the firewall work performance evaluation value to obtain the malicious code attack degree influencing factor corresponding to the firewall work performance evaluation value, wherein the mapping relationship is a many-to-one or one-to-one relationship, and the value range of the influencing factor in this embodiment is between 0 and 1.

[0061] Furthermore, the step of making security adjustments based on the payment network security assessment value includes: obtaining a payment network security assessment threshold from a payment security database; comparing the payment network security assessment value with the payment network security assessment threshold; if the payment network security assessment value is greater than or equal to the payment network security assessment threshold, verifying that the payment network is in a safe state; if the payment network security assessment value is less than the payment network security assessment threshold, verifying that the payment network is in a dangerous state, and notifying network maintenance personnel to perform network maintenance.

[0062] In this embodiment, once the payment network is marked as dangerous, the system will immediately notify the network maintenance personnel. The maintenance personnel will receive detailed warning information, including the network's security assessment value, indicators below the threshold, and possible sources of threats. The maintenance personnel will conduct a comprehensive inspection and maintenance of the payment network based on this information to ensure that it is restored to a safe state. Through real-time monitoring and early warning, the system can promptly detect security risks in the payment network and notify the maintenance personnel to handle them, thereby avoiding potential security incidents and data leaks. When the payment network is in a safe state, the system allows normal payment transactions to proceed, ensuring the continuity and stability of transactions.

[0063] Furthermore, the step of comprehensively analyzing and obtaining the payment security system evaluation index includes: comprehensively analyzing and obtaining the payment security system evaluation index based on the user identity authentication security evaluation value, the payment network security evaluation value, the user identity authentication security evaluation threshold and the payment network security evaluation threshold.

[0064] In this embodiment, the user identity authentication security assessment threshold refers to the key indicator value used to assess whether the user identity authentication security meets the predetermined standards or whether there are potential problems, and the payment network security assessment threshold refers to the key indicator value used to assess whether the payment network meets the predetermined standards or whether there are potential problems. In the combined analysis of the user identity authentication security assessment value and the payment network security assessment value, there is a close correlation between the two. The user identity authentication security assessment value mainly focuses on the authenticity and reliability of the user identity, while the payment network security assessment value focuses on the security and stability of the payment network system. The two complement each other in function and together constitute a complete line of defense for the payment security system. By comprehensively evaluating the security performance of the two aspects, potential security vulnerabilities and risk points can be discovered and repaired in a timely manner, thereby improving the overall security of the payment security system. The payment security system evaluation index is a comprehensive indicator that reflects the overall security and performance level of the payment security system.

[0065] Furthermore, the method for obtaining the payment security system evaluation index is as follows:

[0066]

[0067] In the formula, ξE represents the payment security system evaluation index, α1 represents the payment security system evaluation impact factor corresponding to the preset user identity authentication security evaluation value, α2 represents the payment security system evaluation impact factor corresponding to the preset payment network security evaluation value, ζA1 represents the user identity authentication security evaluation value, ζA0 represents the user identity authentication security evaluation threshold, ζP1 represents the payment network security evaluation value, and ζP0 represents the payment network security evaluation threshold.

[0068] In this embodiment, α1 and α2 are payment security system assessment impact factors corresponding to the user identity authentication security assessment value and the payment network security assessment value preset in the payment security database, respectively, and respectively represent the numerical values ​​of the degree of influence of the user identity authentication security assessment value and the payment network security assessment value on the payment security system assessment index, and can be directly obtained from the payment security database when used. For example, the user identity authentication security assessment value and the payment security system assessment impact factor corresponding to the user identity authentication security assessment value preset in the payment security database form a mapping set, and the payment security system assessment impact factor corresponding to the user identity authentication security assessment value is obtained by inputting the mapping set according to the user identity authentication security assessment value; the payment network security assessment value and the payment security system assessment impact factor corresponding to the payment network security assessment value preset in the payment security database form a mapping set, and the payment network security assessment value inputs the mapping set to obtain the payment security system assessment impact factor corresponding to the payment network security assessment value, wherein the mapping relationship is a many-to-one or one-to-one relationship, and the value range of the impact factor in this embodiment is between 0 and 1.

[0069] The payment security system assessment impact factor corresponding to the user identity authentication security assessment value is set to 0.6, the payment security system assessment impact factor corresponding to the payment network security assessment value is set to 0.4, the user identity authentication security assessment value is set to 1.5, the user identity authentication security assessment threshold is set to 1.2, and the payment network security assessment threshold is set to 1.3. Under different payment network security assessment values, the payment security system assessment index data table based on the smartphone online payment security system is shown in Table 1.

[0070] Table 1 Payment security system evaluation index data table based on smartphone online payment security system

[0071] serial number <![CDATA[ζA1]]> <![CDATA[ζP1]]> ξE 1 1.5 1.2 1.885 2 1.5 1.25 1.894 3 1.5 1.3 1.903 4 1.5 1.35 1.911 5 1.5 1.4 1.920

[0072] like Figure 2 As shown, it is a payment security system evaluation index change diagram based on the smart phone online payment security system provided by the embodiment of the present application, which is composed of Figure 2 As can be seen from Table 1, when the payment security system assessment impact factor corresponding to the user identity authentication security assessment value, the payment security system assessment impact factor corresponding to the payment network security assessment value, the user identity authentication security assessment value, the user identity authentication security assessment threshold, and the payment network security assessment threshold are the same, and the payment network security assessment values ​​are different, as the payment network security assessment value increases, the payment security system assessment index also increases.

[0073] Furthermore, the step of issuing a security warning based on the payment security system evaluation index includes: obtaining a payment security system evaluation index threshold from a payment security database; comparing the payment security system evaluation index with the payment security system evaluation index threshold; if the payment security system evaluation index is greater than or equal to the payment security system evaluation index threshold, no security warning is issued; if the payment security system evaluation index is less than the payment security system evaluation index threshold, security verification is performed and a warning feedback is provided.

[0074] In this embodiment, the payment security system evaluation index threshold is a critical value set to ensure payment security, which is used to measure whether the security performance of the payment security system meets the predetermined security standards. Through real-time monitoring and early warning, it is possible to timely discover and deal with security risks in the payment security system, thereby effectively preventing malicious attacks and data leakage and other events, and improving the overall security of the payment system; according to the results of the security early warning, security resources can be allocated in a targeted manner, such as strengthening security protection measures, increasing the frequency of security monitoring, etc., so as to optimize resource allocation and improve security efficiency. When performing security verification and early warning feedback, an area without important information can be divided from the system as a test area, allowing testers to try to break through the defense of the test area in the system and obtain its information to discover system weaknesses and loopholes. After successfully penetrating the system, try to increase the attacker's permissions to obtain more system control rights, and further test whether the system has permission management loopholes, such as unauthorized access escalation, privilege abuse, etc.

[0075] To summarize, this embodiment obtains a user identity authentication security assessment value based on user identity authentication parameters, obtains a payment network security assessment value based on payment network parameters, obtains a payment security system assessment index through comprehensive analysis, and issues a security warning based on the payment security system assessment index, thereby solving the problem of user payment information being stolen due to vulnerabilities in the online payment security systems of some smartphones when users change their devices, greatly reducing the risks of payment fraud and network attacks, and providing users with higher security protection.

[0076] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0077] The present invention is described with reference to flowcharts and / or block diagrams of systems, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0078] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0079] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0080] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0081] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A smart phone online payment security system, characterized in that: include: Data acquisition module, data processing module, security warning module and payment security database; The data acquisition module is used to acquire user identity authentication parameters and payment network parameters, wherein the payment network parameters include malicious code attack data and firewall working data; The data processing module is used to obtain a user identity authentication security evaluation value according to the user identity authentication parameters, obtain a payment network security evaluation value according to the payment network parameters, and obtain a payment security system evaluation index through comprehensive analysis; The security warning module is used to issue a security warning based on the payment security system evaluation index.

2. The smart phone online payment security system as claimed in claim 1, characterized in that: The step of obtaining a user identity authentication security assessment value according to the user identity authentication parameters comprises: The user identity authentication parameters include the number of identity authentication attempts in each identity authentication cycle, the identity authentication success rate in each identity authentication cycle, and the identity authentication response time in each identity authentication cycle; Monitor the user authentication parameters of the current authentication cycle, obtain the usage frequency of the current authentication device, and match the critical authentication response time, critical authentication success rate, and critical authentication attempt number from the payment security database; A comprehensive analysis is performed to obtain a user identity authentication security assessment value, and security adjustments are made based on the user identity authentication security assessment value.

3. The smart phone online payment security system as claimed in claim 2, characterized in that: The step of performing security adjustment according to the user identity authentication security evaluation value comprises: Obtain user identity authentication security assessment threshold from the payment security database; The user identity authentication security assessment value is compared with the user identity authentication security assessment threshold. If the user identity authentication security assessment value is greater than or equal to the user identity authentication security assessment threshold, the user identity is verified to be a safe identity and the operation can continue. If the user identity authentication security assessment value is less than the user identity authentication security assessment threshold, the user identity is verified to be a dangerous identity, and the verification device is locked to prohibit identity authentication.

4. The smart phone online payment security system as claimed in claim 1, characterized in that: The step of obtaining a payment network security assessment value according to the payment network parameter processing comprises: Obtaining a firewall working performance evaluation value according to firewall working data processing; The malicious code attack degree value is obtained by processing the malicious code attack data and the firewall work performance evaluation value; The payment network security assessment value is obtained by comprehensive analysis of the firewall work performance assessment value and the malicious code attack degree value, and security adjustments are made based on the payment network security assessment value.

5. The smart phone online payment security system as claimed in claim 4, characterized in that: The step of obtaining a firewall working performance evaluation value according to the firewall working data processing comprises: The firewall working data, including throughput and packet loss rate; Obtain critical throughput and critical packet loss rate from the payment security database; Comprehensive analysis is performed to obtain the firewall performance evaluation value.

6. The smart phone online payment security system as claimed in claim 4, characterized in that: The step of obtaining the malicious code attack degree value according to the malicious code attack data and the firewall work performance evaluation value comprises: The malicious code attack data includes the duration of the malicious code attack and the number of malicious code attacks; Obtain critical malicious code attack duration, critical malicious code attack times, and firewall performance evaluation thresholds from the payment security database; Comprehensive analysis is performed to obtain the malicious code attack degree value.

7. The smart phone online payment security system as claimed in claim 4, characterized in that: The step of performing security adjustment according to the payment network security evaluation value comprises: Obtain payment network security assessment thresholds from the payment security database; The payment network security assessment value is compared with the payment network security assessment threshold. If the payment network security assessment value is greater than or equal to the payment network security assessment threshold, the payment network is verified to be in a safe state. If the payment network security assessment value is less than the payment network security assessment threshold, the payment network is verified to be in a dangerous state, and the network maintenance personnel are notified to perform network maintenance.

8. The smart phone online payment security system as claimed in claim 1, characterized in that: The steps of comprehensively analyzing and obtaining the payment security system evaluation index include: The payment security system assessment index is obtained through comprehensive analysis of user identity authentication security assessment value, payment network security assessment value, user identity authentication security assessment threshold and payment network security assessment threshold.

9. The smart phone online payment security system as claimed in claim 8, characterized in that: The method for obtaining the payment security system evaluation index is as follows: In the formula, ξE represents the payment security system evaluation index, α1 represents the payment security system evaluation impact factor corresponding to the preset user identity authentication security evaluation value, α2 represents the payment security system evaluation impact factor corresponding to the preset payment network security evaluation value, ζA1 represents the user identity authentication security evaluation value, ζA0 represents the user identity authentication security evaluation threshold, ζP1 represents the payment network security evaluation value, and ζP0 represents the payment network security evaluation threshold.

10. The smart phone online payment security system as claimed in claim 1, characterized in that: The steps of providing security warning according to the payment security system evaluation index include: Obtain payment security system evaluation index threshold from the payment security database; The payment security system assessment index is compared with the payment security system assessment index threshold. If the payment security system assessment index is greater than or equal to the payment security system assessment index threshold, no security warning is issued. If the payment security system assessment index is less than the payment security system assessment index threshold, security verification is performed and warning feedback is given.

Images