Transaction prevention and control method and device for transaction card, equipment and storage medium

Abstract

The invention discloses a transaction prevention and control method, device and equipment for a transaction card and a storage medium, and the method comprises the steps: obtaining transaction information containing an application ciphertext and a position information plaintext when a mobile equipment end employs the transaction card to initiate a transaction at a POS terminal, and enabling the transaction card to be internally provided with a GPS chip, and respectively judging whether the position information plaintext is consistent with the geographic position of the POS terminal and the geographic position of the acquirer step by step, if so, verifying the application ciphertext by the card issuing mechanism, if the verification is correct, deducting assets in the transaction card and completing the transaction, and if the geographic positions are inconsistent or the verification of the application ciphertext is failed, terminating the transaction. Therefore, the GPS chip is embedded in the transaction card, the real-time position of the transaction card can be obtained, whether the relay attack exists or not can be known by comparing the geographic position, transaction prevention and control are carried out through a three-level prevention and control mechanism under the condition that the transaction card is not limited by an RRP protocol, and the relay attack can be identified and prevented more flexibly, safely, universally and accurately.

Description

Technical Field

[0001] The present application relates to the field of transaction security technology, and more specifically, to a transaction prevention and control method, device, equipment and storage medium for a transaction card. Background Art

[0002] Since the birth of bank cards, transaction security has attracted much attention from card companies, banks and users. Early magnetic stripe cards stored data on the magnetic stripe, which had serious security loopholes. Criminals could easily read the magnetic stripe information and steal money.

[0003] To improve security, bank cards have transitioned from magnetic stripe cards to widely used chip cards. Chip cards store data in a secure chip. With the continuous upgrade of the chip and the addition of anti-attack code in the software, its security performance has been improved, reducing the risk of fraudulent use caused by the leakage of magnetic stripe information, and the security issues of traditional bank cards have been effectively controlled.

[0004] However, the rapid development of the Internet and the iteration of smartphone functions have brought new security challenges to bank cards. A new type of relay attack has emerged, where criminals use NFO software and the NFC function of mobile phones to trick domestic bank card users into installing and registering NFO software on their phones. When the bank card is close to the phone, the NFO software reads the card information through NFC technology, and then transmits the information to mobile phones installed with NFO software overseas through the network, enabling overseas card consumption while the cardholder and bank card are still in China.

[0005] The current commonly used prevention and control method for relay attacks is the RRP protocol. During bank card transactions, after the GPO command, the terminal sends an exchange anti-relay attack data command to the card, and determines whether there is a relay attack by counting the time it takes the card to execute this command. If the execution time of the three executions is greater than the preset threshold, it is determined that a relay attack has occurred, and the terminal can terminate the transaction or hand it over to the issuing bank for processing. However, this method has many limitations. It requires both the terminal and the card to support the RRP protocol, both parties must have built-in RRP-related data objects, and CDA operations need to be performed during transactions to ensure data security. This limits its widespread application, and more effective prevention measures are urgently needed.

[0006] Based on this, how to prevent and control relay attacks on transaction cards without being restricted by the RRP protocol and accurately identify and prevent relay attacks in a more flexible and universal way is an issue that needs attention. Summary of the invention

[0007] In view of the above problems, the present application provides a transaction prevention and control method, device, equipment and storage medium for transaction cards, so as to perform relay attack prevention and control of transaction cards without being restricted by the RRP protocol, and accurately identify and prevent relay attacks in a more flexible and universal manner.

[0008] In order to achieve the above objectives, the specific plan is proposed as follows:

[0009] A transaction card transaction prevention and control method is applied to a prevention and control system, wherein the prevention and control system includes a POS terminal, an acquiring institution and a card issuing institution;

[0010] The method includes:

[0011] When a mobile device uses a transaction card to initiate a transaction at the POS terminal, the POS terminal obtains transaction information including an application ciphertext of the transaction and plaintext location information of the transaction card, wherein the transaction card has a built-in GPS chip;

[0012] Determining, by the POS terminal, whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the POS terminal;

[0013] If they are consistent, the transaction information is uploaded to the acquiring institution, and the acquiring institution determines whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the acquiring institution;

[0014] If they are consistent, the transaction information is sent to the card issuing institution, and the application ciphertext is verified by the card issuing institution. If the application ciphertext is verified to be correct, the asset corresponding to the transaction in the transaction card is deducted by the card issuing institution to complete the transaction.

[0015] Optionally, when the mobile device uses the transaction card to initiate a transaction at the POS terminal, obtaining transaction information including the application ciphertext of the transaction and the plaintext location information of the transaction card through the POS terminal includes:

[0016] When the mobile device initiates a transaction at the POS terminal using the transaction card, the POS terminal sends a short-distance payment system environment request command to the mobile device to obtain the short-distance payment system environment file control information of the transaction card;

[0017] Sending an application identifier command to the mobile device through the POS terminal based on the near-field payment system environment file control information, so that the mobile device can select a financial application and return the file control information of the financial application;

[0018] Sending, by the POS terminal, an application initialization command to the mobile device based on the file control information of the financial application, so that the mobile device returns application interaction features and application file locator data of transactions on the financial application;

[0019] Sending, by the POS terminal, a read record command to the mobile device based on the application interaction feature and the application file locator data, so that the mobile device returns the transaction record;

[0020] Based on the transaction record, the POS terminal sends a command to generate an application password to the mobile device, so that the mobile device generates transaction information including the application ciphertext of the transaction and the plaintext location information of the transaction card, and returns it to the POS terminal.

[0021] Optionally, the method further includes:

[0022] If the geographical location corresponding to the plain text of the location information is inconsistent with the current geographical location of the POS terminal, the transaction is terminated.

[0023] Optionally, the method further includes:

[0024] If the geographic location corresponding to the plain text of the location information is inconsistent with the current geographic location of the acquiring institution, the transaction is terminated.

[0025] Optionally, the method further includes:

[0026] If the application ciphertext fails to be verified, the transaction is terminated.

[0027] Optionally, the transaction information further includes input data of the application ciphertext;

[0028] The verifying the application ciphertext by the card issuing institution includes:

[0029] Based on the input data, the application ciphertext calculation algorithm of the card issuing institution is used to calculate the application ciphertext result;

[0030] If the ciphertext result is consistent with the application ciphertext, it means that the application ciphertext is verified correctly;

[0031] If the ciphertext result is inconsistent with the application ciphertext, it means that the ciphertext has failed to be verified.

[0032] A transaction prevention and control device for a transaction card, applied to a prevention and control system, the prevention and control system comprising a POS terminal, an acquiring institution and a card issuing institution;

[0033] The device includes:

[0034] A transaction information acquisition unit, configured to acquire transaction information including an application ciphertext of the transaction and plaintext location information of the transaction card through the POS terminal when a mobile device initiates a transaction using a transaction card at the POS terminal;

[0035] A POS terminal location determination unit, configured to determine, through the POS terminal, whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the POS terminal, and if consistent, execute the acquirer location determination unit;

[0036] The acquiring institution location determination unit is used to upload the transaction information to the acquiring institution, and determine through the acquiring institution whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the acquiring institution, and if they are consistent, execute the application ciphertext verification unit;

[0037] The application ciphertext verification unit is used to send the transaction information to the card issuing institution, and verify the application ciphertext through the card issuing institution. If the application ciphertext is verified to be correct, the asset corresponding to the transaction in the transaction card is deducted through the card issuing institution to complete the transaction.

[0038] Optionally, the transaction information acquisition unit includes:

[0039] A first transaction information acquisition subunit is used to send a short-distance payment system environment request command to the mobile device through the POS terminal when the mobile device uses the transaction card to initiate a transaction at the POS terminal, so as to obtain the short-distance payment system environment file control information of the transaction card;

[0040] A second transaction information acquisition subunit is used to send an application identifier command to the mobile device through the POS terminal based on the near-field payment system environment file control information, so that the mobile device can select a financial application and return the file control information of the financial application;

[0041] A third transaction information acquisition subunit is used to send an application initialization command to the mobile device through the POS terminal based on the file control information of the financial application, so that the mobile device returns the application interaction characteristics and application file locator data of the transaction on the financial application;

[0042] a fourth transaction information acquisition subunit, configured to send a read record command to the mobile device through the POS terminal based on the application interaction feature and the application file locator data, so that the mobile device returns the transaction record;

[0043] The fifth transaction information acquisition subunit is used to send a generate application password command to the mobile device through the POS terminal based on the transaction record, so that the mobile device can generate transaction information containing the application ciphertext of the transaction and the plaintext location information of the transaction card, and return it to the POS terminal.

[0044] Optionally, the device further comprises:

[0045] The first transaction termination unit is configured to terminate the transaction if the geographical location corresponding to the plain text of the location information is inconsistent with the current geographical location of the POS terminal.

[0046] Optionally, the device further comprises:

[0047] The second transaction termination unit is used to terminate the transaction if the geographical location corresponding to the plain text of the location information is inconsistent with the current geographical location of the acquiring institution.

[0048] Optionally, the device further comprises:

[0049] The third transaction termination unit is used to terminate the transaction if the application ciphertext fails to be verified.

[0050] Optionally, the transaction information further includes input data of the application ciphertext;

[0051] The application ciphertext verification unit comprises:

[0052] A ciphertext calculation unit, configured to calculate an application ciphertext result based on the input data by using an application ciphertext calculation algorithm of the card issuing institution;

[0053] A verification unit, configured to verify that the application ciphertext is correct if the ciphertext result is consistent with the application ciphertext;

[0054] The verification failure unit is used to indicate that the ciphertext has failed verification if the ciphertext result is inconsistent with the application ciphertext.

[0055] A transaction prevention and control device for a transaction card, comprising a memory and a processor;

[0056] The memory is used to store programs;

[0057] The processor is used to execute the program to implement the various steps of the transaction prevention and control method for the transaction card as described above.

[0058] A storage medium having a computer program stored thereon, characterized in that when the computer program is executed by a processor, each step of the transaction prevention and control method for a transaction card as described above is implemented.

[0059] By means of the above technical solution, when a transaction is initiated at a POS terminal using a transaction card on a mobile device, the present application obtains transaction information including the application ciphertext of the transaction and the location information plaintext of the transaction card, wherein the transaction card has a built-in GPS chip, and further, the POS terminal determines whether the location information plaintext is consistent with the geographical location of the POS terminal, and if so, uploads the transaction information to the acquiring institution, and the acquiring institution determines whether the location information plaintext is consistent with the geographical location of the acquiring institution, and if so, sends the transaction information to the issuing institution, and verifies the application ciphertext through the issuing institution, and if the application ciphertext is verified correctly, the asset corresponding to the transaction in the transaction card is deducted through the issuing institution to complete the transaction, and if the geographical location comparison is inconsistent or the application ciphertext verification fails, the transaction is terminated. It can be seen that by embedding a GPS chip in the transaction card, the real-time location of the transaction card can be obtained, and by comparing the geographical location, it can be known whether there is a relay attack, which is not restricted by the RRP protocol, and can more flexibly and universally accurately identify and prevent relay attacks. BRIEF DESCRIPTION OF THE DRAWINGS

[0060] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present application. Also, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0061] Figure 1 A system architecture diagram of a prevention and control system for implementing transaction card transaction prevention and control provided in an embodiment of the present application;

[0062] Figure 2 A schematic diagram of a process for implementing transaction card transaction prevention and control provided in an embodiment of the present application;

[0063] Figure 3 A schematic diagram of the prevention and control logic of the POS terminal, acquiring institution and issuing institution for three-level prevention and control of transaction card relay attacks provided in the embodiment of the present application;

[0064] Figure 4 A process for implementing contactless transactions using a transaction card provided in an embodiment of the present application;

[0065] Figure 5 Another flowchart for implementing transaction card transaction prevention and control provided in an embodiment of the present application;

[0066] Figure 6 A schematic diagram of a device structure for implementing transaction card transaction prevention and control provided in an embodiment of the present application;

[0067] Figure 7 A schematic diagram of the structure of a device for implementing transaction card transaction prevention and control provided in an embodiment of the present application. DETAILED DESCRIPTION

[0068] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0069] Figure 1 An optional system architecture for a prevention and control system for implementing transaction card transaction prevention and control provided in an embodiment of the present application, such as Figure 1 As shown, the system architecture may include:

[0070] POS terminal, acquiring institution and card issuing institution. Among them, the POS terminal can communicate with the acquiring institution to transmit transaction information. The acquiring institution can also communicate with the card issuing institution to transmit transaction information.

[0071] Specifically, the card issuer has the same AC calculation method as the transaction card, and uses this calculation method to calculate the application ciphertext input data to determine whether the calculation result is consistent with the application ciphertext uploaded by the transaction card. Both the POS terminal and the acquiring institution have a location comparison function to determine whether the location is consistent with the transaction card location.

[0072] based on Figure 1 The system architecture shown, Figure 2 A flow chart of a transaction prevention and control method for a transaction card provided in an embodiment of the present application is shown, referring to Figure 2 , the process may include:

[0073] Step S110: When the mobile device initiates a transaction at the POS terminal using the transaction card, the POS terminal obtains transaction information including the application ciphertext of the transaction and the plaintext location information of the transaction card.

[0074] Specifically, the transaction card may be a bank card. The mobile device may be a terminal installed and registered with software (NFO software) that can read card information, such as a mobile phone.

[0075] Before using the transaction card on a mobile device to conduct a transaction, the card must be placed close to the mobile phone for NFC recognition so that the mobile phone can recognize and store the transaction card information. It is understandable that since the mobile device is installed with software that can read the card information, the mobile device can connect the transaction card to the mobile device in a different location through the software.

[0076] The transaction card may be built with a GPS chip so that the location information of the transaction information can be clearly recorded with the real-time information of the transaction card.

[0077] Step S120: The POS terminal determines whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the POS terminal. If so, execute step S130.

[0078] It can be understood that by comparing the geographical location of the POS terminal with the geographical location corresponding to the plain text of the location information, it can be concluded whether the current transaction is conducted in the same geographical location. If the transaction card and the POS terminal are in the same area, then it means that the transaction has passed the verification of the POS terminal, otherwise there may be a relay attack.

[0079] Step S130: Upload the transaction information to the acquiring institution.

[0080] Specifically, after the transaction is verified by the POS terminal, the transaction information can be uploaded to the acquiring institution, which will further verify the transaction information.

[0081] Step S140: The acquiring institution determines whether the geographical location corresponding to the plain text location information is consistent with the current geographical location of the acquiring institution. If so, execute step S150.

[0082] It can be understood that by comparing the acquiring institution's geographical location with the geographical location corresponding to the plaintext location information, it can be determined whether the current transaction is conducted in the same geographical location. If the transaction card and the acquiring institution are in the same area, then it means that the transaction has passed the verification of the acquiring institution, otherwise the transaction is an abnormal transaction.

[0083] Step S150: Send the transaction information to the card issuing institution, and verify the application ciphertext through the card issuing institution.

[0084] Specifically, after the transaction is verified by the acquiring institution, the transaction information can be uploaded to the card issuing institution, which will further verify the transaction information.

[0085] Step S160: determine whether the application ciphertext is verified correctly. If so, execute step S170.

[0086] Specifically, the method of verifying the application ciphertext may be to recalculate based on its input data, and compare whether the uploaded result and the calculated result are consistent, so as to determine whether the verification is correct.

[0087] Step S170: The card issuing institution deducts the assets corresponding to the transaction from the transaction card to complete the transaction.

[0088] It is understandable that once a transaction passes the three-level control verification of the POS terminal, acquiring institution and issuing institution, it can be determined that the transaction is normal, and then the payment is deducted to complete the transaction.

[0089] Specifically, the logic of the three-level prevention and control of transaction card relay attacks by POS terminals, acquiring institutions and card issuers is as follows: Figure 3 As shown in the figure, AC stands for Application Cryptogram, which means application ciphertext, and CDA stands for Combined DDA / AC Generation, which means composite dynamic data authentication / application ciphertext generation.

[0090] The transaction prevention and control method for transaction cards provided in this embodiment obtains transaction information including application ciphertext of the transaction and plain text of location information of the transaction card when a transaction is initiated at a POS terminal using a transaction card on a mobile device, wherein the transaction card has a built-in GPS chip, and further, the POS terminal determines whether the plain text of the location information is consistent with the geographical location of the POS terminal, and if so, uploads the transaction information to the acquiring institution, and the acquiring institution determines whether the plain text of the location information is consistent with the geographical location of the acquiring institution, and if so, sends the transaction information to the issuing institution, and verifies the application ciphertext through the issuing institution, and if the application ciphertext is verified correctly, the asset corresponding to the transaction in the transaction card is deducted through the issuing institution to complete the transaction, and if the geographical location comparison is inconsistent or the application ciphertext verification fails, the transaction is terminated. It can be seen that the GPS chip is embedded in the transaction card, and the real-time location of the transaction card can be obtained. By comparing the geographical location, it can be known whether there is a relay attack, which is not restricted by the RRP protocol, and can more flexibly and universally accurately identify and prevent relay attacks.

[0091] In some embodiments of the present application, the above step S110, when a mobile device uses a transaction card to initiate a transaction at a POS terminal, the process of obtaining transaction information including the application ciphertext of the transaction and the location information plaintext of the transaction card through the POS terminal is introduced, such as Figure 4 As shown, the process may include:

[0092] Step S210: When the mobile device initiates a transaction at the POS terminal using the transaction card, the POS terminal sends a short-distance payment system environment request command to the mobile device to obtain the short-distance payment system environment file control information of the transaction card.

[0093] It is understandable that a remote mobile device can utilize NFO software to initiate a contactless transaction at a POS terminal using a transaction card.

[0094] Specifically, in the first step of a contactless transaction, the POS terminal sends a SELECT PPSE (Proximity Payment Systems Environment) command, and the mobile device returns PPSE FCI (File Control Information) information.

[0095] Step S220: The POS terminal sends an application identifier command to the mobile device based on the file control information of the proximity payment system environment, so that the mobile device can select a financial application and return the file control information of the financial application.

[0096] Specifically, in the second step of the contactless transaction, the POS terminal sends a SELECT AID (Application Identifier) ​​command to select a financial application, and the mobile device returns the FCI information of the financial application.

[0097] Step S230: Send an application initialization command to the mobile device based on the file control information of the financial application through the POS terminal, so that the mobile device returns the application interaction characteristics and application file locator data of the transaction on the financial application.

[0098] Specifically, in the third step of the contactless transaction, the POS terminal sends a GPO (Get Processing Options command) command, and the mobile device returns a response AIP (Application Interchange Profile) + AFL (Application File Locator).

[0099] Step S240: Sending a read record command to the mobile device via the POS terminal based on the application interaction feature and the application file locator data, so that the mobile device returns the transaction record.

[0100] Specifically, in the fourth step of the contactless transaction, the POS terminal sends a record read command according to the AFL, and the card / mobile phone returns the relevant records.

[0101] Step S250: Based on the transaction record, the POS terminal sends a command to generate an application password to the mobile device, so that the mobile device generates transaction information including the application ciphertext of the transaction and the plaintext location information of the transaction card, and returns it to the POS terminal.

[0102] Specifically, in the fifth step of the contactless transaction, the POS terminal sends a GAC ​​(Generate Application Cryptogram command) command, and the mobile device returns a response data, which includes AC (Application Cryptogram) or CDA (Combined DDA / AC Generation) and location information in plain text.

[0103] In some embodiments of the present application, the transaction prevention and control method of the transaction card mentioned in the above embodiment is further introduced, such as Figure 5 As shown, the method may include:

[0104] Step S310: When a mobile device initiates a transaction at a POS terminal using a transaction card, the POS terminal obtains transaction information including an application ciphertext of the transaction and plaintext location information of the transaction card.

[0105] Step S320: Determine through the POS terminal whether the geographical location corresponding to the plain text location information is consistent with the current geographical location of the POS terminal. If so, execute step S330; if not, execute step S380.

[0106] It is understandable that if the geographical location corresponding to the plain text location information is inconsistent with the current geographical location of the POS terminal, it means that the transaction may be subject to a relay attack. Considering the security of the transaction, step S380 can be executed to terminate the transaction.

[0107] Step S330: Upload the transaction information to the acquiring institution.

[0108] Step S340: Determine through the acquiring institution whether the geographical location corresponding to the plain text location information is consistent with the current geographical location of the acquiring institution. If so, execute step S350; if not, execute step S380.

[0109] It is understandable that if the geographic location corresponding to the plain text location information is inconsistent with the current geographic location of the acquiring institution, it indicates that there is an abnormality in the transaction. Considering the security of the transaction, step S380 can be executed to terminate the transaction.

[0110] Step S350: Send the transaction information to the card issuing institution, and verify the application ciphertext through the card issuing institution.

[0111] Step S360, determine whether the application ciphertext is verified correctly, if so, execute step S370, if not, execute step S380.

[0112] It is understandable that if the application ciphertext fails to be verified, it means that a result consistent with the uploaded application ciphertext cannot be calculated based on the input data of the application ciphertext. Therefore, the application ciphertext or the ciphertext input data may be tampered with, and even the plaintext location information may be tampered with, then the transaction can be terminated.

[0113] Step S370: The card issuing institution deducts the assets corresponding to the transaction from the transaction card to complete the transaction.

[0114] Among them, step S310 to step S370 correspond to step S110 to step S170 of the aforementioned embodiment one by one. Please refer to the introduction of the aforementioned embodiment for details, which will not be repeated here.

[0115] Step S380: Terminate the transaction.

[0116] Specifically, when a transaction fails to pass the control measures of the POS terminal, acquiring institution and issuing institution, the transaction can be terminated to ensure the security of the transaction.

[0117] In some embodiments of the present application, the process of verifying the application ciphertext by the card issuing institution mentioned in the above embodiment is introduced, and the process may include:

[0118] S1. Based on the input data, the application ciphertext calculation algorithm of the card issuer is used to calculate the application ciphertext result.

[0119] Specifically, the input data may be generated by the mobile device when performing a transaction at the POS terminal, and the input data may also be stored in the transaction information. Therefore, the application ciphertext may be calculated based on the input data.

[0120] S2. If the ciphertext result is consistent with the application ciphertext, it means that the application ciphertext is verified correctly.

[0121] S3. If the ciphertext result is inconsistent with the application ciphertext, it means that the ciphertext verification has failed.

[0122] The following describes an apparatus for implementing transaction prevention and control of transaction cards provided in an embodiment of the present application. The apparatus for implementing transaction prevention and control of transaction cards described below and the method for implementing transaction prevention and control of transaction cards described above can refer to each other.

[0123] See also Figure 6 , Figure 6 A schematic diagram of the structure of a device for implementing transaction prevention and control of transaction cards disclosed in an embodiment of the present application.

[0124] like Figure 6 As shown, the device may include:

[0125] The transaction information acquisition unit 11 is used to acquire the transaction information including the application ciphertext of the transaction and the plaintext location information of the transaction card through the POS terminal when the mobile device uses the transaction card to initiate a transaction at the POS terminal;

[0126] The POS terminal location determination unit 12 is used to determine whether the geographical location corresponding to the location information plain text is consistent with the current geographical location of the POS terminal through the POS terminal, and if they are consistent, execute the acquiring institution location determination unit 13;

[0127] The acquiring institution location determination unit 13 is used to upload the transaction information to the acquiring institution, and determine through the acquiring institution whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the acquiring institution, and if they are consistent, execute the application ciphertext verification unit 14;

[0128] The application ciphertext verification unit 14 is used to send the transaction information to the card issuing institution, and verify the application ciphertext through the card issuing institution. If the application ciphertext is verified to be correct, the card issuing institution deducts the assets corresponding to the transaction in the transaction card to complete the transaction.

[0129] Optionally, the transaction information acquisition unit includes:

[0130] A first transaction information acquisition subunit is used to send a short-distance payment system environment request command to the mobile device through the POS terminal when the mobile device uses the transaction card to initiate a transaction at the POS terminal, so as to obtain the short-distance payment system environment file control information of the transaction card;

[0131] A second transaction information acquisition subunit is used to send an application identifier command to the mobile device through the POS terminal based on the near-field payment system environment file control information, so that the mobile device can select a financial application and return the file control information of the financial application;

[0132] A third transaction information acquisition subunit is used to send an application initialization command to the mobile device through the POS terminal based on the file control information of the financial application, so that the mobile device returns the application interaction characteristics and application file locator data of the transaction on the financial application;

[0133] a fourth transaction information acquisition subunit, configured to send a read record command to the mobile device through the POS terminal based on the application interaction feature and the application file locator data, so that the mobile device returns the transaction record;

[0134] The fifth transaction information acquisition subunit is used to send a generate application password command to the mobile device through the POS terminal based on the transaction record, so that the mobile device can generate transaction information containing the application ciphertext of the transaction and the plaintext location information of the transaction card, and return it to the POS terminal.

[0135] Optionally, the device further comprises:

[0136] The first transaction termination unit is configured to terminate the transaction if the geographical location corresponding to the plain text of the location information is inconsistent with the current geographical location of the POS terminal.

[0137] Optionally, the device further comprises:

[0138] The second transaction termination unit is used to terminate the transaction if the geographical location corresponding to the plain text of the location information is inconsistent with the current geographical location of the acquiring institution.

[0139] Optionally, the device further comprises:

[0140] The third transaction termination unit is used to terminate the transaction if the application ciphertext fails to be verified.

[0141] Optionally, the transaction information further includes input data of the application ciphertext;

[0142] The application ciphertext verification unit comprises:

[0143] A ciphertext calculation unit, configured to calculate an application ciphertext result based on the input data by using an application ciphertext calculation algorithm of the card issuing institution;

[0144] A verification unit, configured to verify that the application ciphertext is correct if the ciphertext result is consistent with the application ciphertext;

[0145] A verification failure unit is used to indicate that the ciphertext has failed verification if the ciphertext result is inconsistent with the application ciphertext. The transaction prevention and control device for transaction cards provided in the embodiment of the present application can be applied to transaction prevention and control equipment for transaction cards, such as a prevention and control system. Optionally, Figure 7 The hardware structure diagram of the transaction card transaction prevention and control device is shown in FIG. Figure 7 , the hardware structure of the transaction prevention and control device of the transaction card may include: at least one processor 1, at least one communication interface 2, at least one memory 3 and at least one communication bus 4;

[0146] In the embodiment of the present application, the number of the processor 1, the communication interface 2, the memory 3, and the communication bus 4 is at least one, and the processor 1, the communication interface 2, and the memory 3 communicate with each other through the communication bus 4;

[0147] The processor 1 may be a central processing unit CPU, or an application-specific integrated circuit ASIC (Application Specific Integrated Circuit), or one or more integrated circuits configured to implement the embodiments of the present invention, etc.;

[0148] The memory 3 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), etc., such as at least one disk memory;

[0149] The memory stores a program, and the processor can call the program stored in the memory, wherein the program is used to:

[0150] When a mobile device uses a transaction card to initiate a transaction at a POS terminal, the POS terminal obtains transaction information including an application ciphertext of the transaction and plaintext location information of the transaction card, wherein the transaction card has a built-in GPS chip;

[0151] Determining, by the POS terminal, whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the POS terminal;

[0152] If they are consistent, the transaction information is uploaded to the acquiring institution, and the acquiring institution determines whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the acquiring institution;

[0153] If they are consistent, the transaction information is sent to the card issuing institution, and the application ciphertext is verified by the card issuing institution. If the application ciphertext is verified to be correct, the asset corresponding to the transaction in the transaction card is deducted by the card issuing institution to complete the transaction.

[0154] Optionally, the detailed functions and extended functions of the program may refer to the above description.

[0155] The embodiment of the present application further provides a storage medium, which may store a program suitable for execution by a processor, wherein the program is used to:

[0156] When a mobile device uses a transaction card to initiate a transaction at a POS terminal, the POS terminal obtains transaction information including an application ciphertext of the transaction and plaintext location information of the transaction card, wherein the transaction card has a built-in GPS chip;

[0157] Determining, by the POS terminal, whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the POS terminal;

[0158] If they are consistent, the transaction information is uploaded to the acquiring institution, and the acquiring institution determines whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the acquiring institution;

[0159] If they are consistent, the transaction information is sent to the card issuing institution, and the application ciphertext is verified by the card issuing institution. If the application ciphertext is verified to be correct, the asset corresponding to the transaction in the transaction card is deducted by the card issuing institution to complete the transaction.

[0160] Optionally, the detailed functions and extended functions of the program may refer to the above description.

[0161] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0162] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The various embodiments can be combined as needed, and the same or similar parts can refer to each other.

[0163] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A transaction prevention and control method for a transaction card, characterized in that: Applied to a prevention and control system, the prevention and control system includes a POS terminal, an acquiring institution and a card issuing institution; The method includes: When a mobile device uses a transaction card to initiate a transaction at the POS terminal, the POS terminal obtains transaction information including an application ciphertext of the transaction and plaintext location information of the transaction card, wherein the transaction card has a built-in GPS chip; Determining, by the POS terminal, whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the POS terminal; If they are consistent, the transaction information is uploaded to the acquiring institution, and the acquiring institution determines whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the acquiring institution; If they are consistent, the transaction information is sent to the card issuing institution, and the application ciphertext is verified by the card issuing institution. If the application ciphertext is verified to be correct, the asset corresponding to the transaction in the transaction card is deducted by the card issuing institution to complete the transaction.

2. The method according to claim 1, characterized in that When the mobile device uses the transaction card to initiate a transaction at the POS terminal, the POS terminal obtains transaction information including the application ciphertext of the transaction and the plaintext location information of the transaction card, including: When the mobile device initiates a transaction at the POS terminal using the transaction card, the POS terminal sends a short-distance payment system environment request command to the mobile device to obtain the short-distance payment system environment file control information of the transaction card; Sending an application identifier command to the mobile device through the POS terminal based on the near-field payment system environment file control information, so that the mobile device can select a financial application and return the file control information of the financial application; Sending, by the POS terminal, an application initialization command to the mobile device based on the file control information of the financial application, so that the mobile device returns application interaction features and application file locator data of transactions on the financial application; Sending, by the POS terminal, a read record command to the mobile device based on the application interaction feature and the application file locator data, so that the mobile device returns the transaction record; Based on the transaction record, the POS terminal sends a command to generate an application password to the mobile device, so that the mobile device generates transaction information including the application ciphertext of the transaction and the plaintext location information of the transaction card, and returns it to the POS terminal.

3. The method according to claim 1, characterized in that Also includes: If the geographical location corresponding to the plain text of the location information is inconsistent with the current geographical location of the POS terminal, the transaction is terminated.

4. The method according to claim 1, characterized in that: Also includes: If the geographic location corresponding to the plain text of the location information is inconsistent with the current geographic location of the acquiring institution, the transaction is terminated.

5. The method according to claim 1, characterized in that: Also includes: If the application ciphertext fails to be verified, the transaction is terminated.

6. The method according to any one of claims 1 to 5, characterized in that: The transaction information also includes input data of the application ciphertext; The verifying the application ciphertext by the card issuing institution includes: Based on the input data, the application ciphertext calculation algorithm of the card issuing institution is used to calculate the application ciphertext result; If the ciphertext result is consistent with the application ciphertext, it means that the application ciphertext is verified correctly; If the ciphertext result is inconsistent with the application ciphertext, it means that the ciphertext has failed to be verified.

7. A transaction prevention and control device for a transaction card, characterized in that: Applied to a prevention and control system, the prevention and control system includes a POS terminal, an acquiring institution and a card issuing institution; The device includes: A transaction information acquisition unit, configured to acquire transaction information including an application ciphertext of the transaction and plaintext location information of the transaction card through the POS terminal when a mobile device initiates a transaction using a transaction card at the POS terminal; A POS terminal location determination unit, configured to determine, through the POS terminal, whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the POS terminal, and if consistent, execute the acquirer location determination unit; The acquiring institution location determination unit is used to upload the transaction information to the acquiring institution, and determine through the acquiring institution whether the geographical location corresponding to the plain text of the location information is consistent with the current geographical location of the acquiring institution, and if they are consistent, execute the application ciphertext verification unit; The application ciphertext verification unit is used to send the transaction information to the card issuing institution, and verify the application ciphertext through the card issuing institution. If the application ciphertext is verified to be correct, the asset corresponding to the transaction in the transaction card is deducted through the card issuing institution to complete the transaction.

8. The device according to claim 7, characterized in that The transaction information acquisition unit includes: A first transaction information acquisition subunit is used to send a short-distance payment system environment request command to the mobile device through the POS terminal when the mobile device uses the transaction card to initiate a transaction at the POS terminal, so as to obtain the short-distance payment system environment file control information of the transaction card; A second transaction information acquisition subunit is used to send an application identifier command to the mobile device through the POS terminal based on the near-field payment system environment file control information, so that the mobile device can select a financial application and return the file control information of the financial application; A third transaction information acquisition subunit is used to send an application initialization command to the mobile device through the POS terminal based on the file control information of the financial application, so that the mobile device returns the application interaction characteristics and application file locator data of the transaction on the financial application; a fourth transaction information acquisition subunit, configured to send a read record command to the mobile device through the POS terminal based on the application interaction feature and the application file locator data, so that the mobile device returns the transaction record; The fifth transaction information acquisition subunit is used to send a generate application password command to the mobile device through the POS terminal based on the transaction record, so that the mobile device can generate transaction information containing the application ciphertext of the transaction and the plaintext location information of the transaction card, and return it to the POS terminal.

9. A transaction prevention and control device for a transaction card, characterized in that: including memory and processor; The memory is used to store programs; The processor is used to execute the program to implement each step of the transaction prevention and control method for a transaction card as described in any one of claims 1 to 6.

10. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, each step of the transaction prevention and control method for a transaction card as described in claims 1-6 is implemented.

Images