Information interaction method, identity authentication and electronic payment system and method

Abstract

The present invention relates to an information interaction method, identity authentication and electronic payment system and method. The information interaction method is applied to a first terminal, at least one second mobile terminal, an interactive server, and a physical terminal corresponding to the first terminal, and is characterized by comprising: A1: the first terminal forms interactive information with an interactive request and a physical signal characteristic value corresponding to the physical terminal, and sends it to the interactive server, and the interactive server stores the interactive information; A2: the physical terminal outputs a physical signal corresponding to the physical characteristic value; A3: the second mobile terminal obtains the physical signal, and sends the physical characteristic value corresponding to the physical signal to the interactive server, and the interactive server retrieves the corresponding interactive information and sends it back to the second mobile terminal, thereby completing the information interaction between the first terminal and the second mobile terminal, and can quickly form an acceptance environment, with the advantages of convenient interaction and easy popularization.

Description

Technical Field

[0001] The present invention relates to an information interaction method, an identity authentication or electronic payment system and method, and in particular to an information interaction method, an identity authentication and electronic payment system and method based on APP. Background Art

[0002] The electronic payment industry is eager to use mobile terminals such as smartphones and tablets to realize electronic payment and authentication. The basis of electronic payment is reliable identity authentication, and its uses also include access control, identity recognition in public service scenarios, etc.

[0003] Currently, NFC technology is widely used, but its application is very narrow. Among the existing mobile phones on the market, only about 10% support NFC, including Apple phones.

[0004] NFC technology also relies on specific POS models or pre-set scenarios, which may be POS deployed by local bus card companies, or bank card POS deployed by UnionPay or banks. There are few acceptance environments, which is not conducive to promotion and use.

[0005] In addition to NFC, the industry has tried to integrate payment-related e-wallet technologies into mobile phone SIM cards, including SIMPASS or RF-SIM technology. However, due to high costs, slow deployment, and unsatisfactory acceptance environment, it is difficult to popularize.

[0006] The code scanning method has gained a certain degree of popularity, including current service providers such as Alipay and WeChat. However, it has poor security and can only run in a closed loop within its own system; it relies on dedicated equipment as the acceptance environment, and like traditional POS, it cannot solve the problem of high acceptance environment costs.

[0007] Identity authentication is the basis of electronic payment, which can be considered as a payment involving an amount of "0". It generally involves public services and administrative licenses related to identity, such as access control, libraries, medical services, driver's licenses or security. Summary of the invention

[0008] The technical problem to be solved by the present invention is to provide an information interaction method, identity authentication and electronic payment system and method.

[0009] The technical solution adopted by the present invention to solve the technical problem is: to provide an information interaction method, which is applied to a first terminal, at least one second mobile terminal, an interaction server, and a physical terminal corresponding to the first terminal, including:

[0010] A1: The first terminal forms interaction information with the interaction request and the physical signal characteristic value corresponding to the physical terminal, and sends the interaction information to the interaction server, and the interaction server stores the interaction information;

[0011] A2: the physical terminal outputs a physical signal corresponding to the physical characteristic value;

[0012] A3: The second mobile terminal acquires the physical signal, and sends the physical characteristic value corresponding to the physical signal to the interactive server, and the interactive server retrieves the corresponding interactive information and sends it back to the second mobile terminal.

[0013] Preferably, the method further comprises:

[0014] A4: The second mobile terminal outputs confirmation information to the interaction server according to the interaction information.

[0015] Preferably, the method further comprises:

[0016] A5: The interaction server sends interaction result information to the first terminal and / or the second mobile terminal according to the confirmation information.

[0017] The present invention also provides an information interaction method, which is applied to at least one first terminal, at least one second mobile terminal, an interaction server, and a physical terminal corresponding to the first terminal, comprising:

[0018] B1: The first terminal signs in to the interactive server, sends the link address of the first terminal and the physical signal characteristic value of the physical terminal to the interactive server, and stores them;

[0019] B2: the physical terminal outputs a physical signal corresponding to the physical characteristic value;

[0020] B3: The second mobile terminal signs in to the interactive server and obtains an identity certificate;

[0021] B4: the second mobile terminal searches for and obtains the physical signal, queries the interactive server according to the physical signal characteristic value corresponding to the physical signal, obtains the corresponding link address of the first terminal, and establishes a data link between the first terminal and the second mobile terminal according to the link address;

[0022] B5: The first terminal sends an interaction request to all second mobile terminals connected thereto; after the second mobile terminal confirms the interaction request, it sends its identity certificate and a confirmation message to the first terminal.

[0023] The present invention also provides an identity authentication or electronic payment system, including a transaction server, an APP issued to a payee and a payer for use, and the system also includes one or more physical terminals deployed on site; the physical terminal includes one or more independent physical terminals corresponding to the payee; or, the physical terminal is a physical module in the payee's device.

[0024] The present invention also provides an identity authentication method or an electronic payment method, which is implemented on a system including a transaction server and an APP issued to a payee and a payer for use, and the method comprises the following steps:

[0025] 9-a) The payee enters a payment request or authentication request on the APP, together with a physical signal characteristic value and the payee's information to form a bill, which is sent to the transaction server; at the same time, the device corresponding to the physical signal is turned on to output the physical signal;

[0026] 9-b) The transaction server saves the received bill in a buffer;

[0027] 9-c) The payer APP searches for the physical signal output by the payee APP, and sends the obtained one or more physical signal characteristic values ​​to the transaction server. The transaction server retrieves the corresponding bill from the buffer and sends it back to the payer APP;

[0028] 9-d) The payer APP presents the bill to the payer. After the payer confirms that it is correct, he / she sends a confirmation signal to the APP. The payer APP sends a message confirming the bill to the transaction server.

[0029] 9-e) After receiving the transaction confirmation message, the transaction server performs account processing and sends the successful transaction or failure information to the payer APP and / or the payee APP;

[0030] 9-f) The payer APP and / or payee APP prompts the payer and payee respectively.

[0031] Preferably, the method also includes the following initialization steps: a) the payee or payer APP signs in to the payer server and the payee server respectively, and uses its configured key to perform two-way authentication with the payer server and the payee server; b) the payee APP opens the device corresponding to the physical signal used in subsequent transactions in advance, and outputs this physical signal to the outside.

[0032] Preferably, in step 9-b), the buffer formed by the transaction server includes, in addition to the bill, information of the person who charges the fee;

[0033] In step 9-d), the payer APP presents the bill to the payer, including the information of the person who charged the bill;

[0034] The physical signal is the SSID, Bluetooth ID or ultrasonic signal of WIFI, and the devices corresponding to the physical signal are the WiFi module, Bluetooth module and audio module.

[0035] Preferably, when the fee collector APP sends the bill to the transaction server, it signs with its own private key; when the transaction server sends the bill to the payer, it signs with its own private key; when the payment APP sends a bill confirmation signal to the transaction server, it signs with its own private key; when the transaction server sends successful transaction or failure information to the payer and payee, it signs with its own private key; the other party receiving the information uses the corresponding public key to verify the authenticity of its information.

[0036] The present invention also provides an identity authentication method or an electronic payment method, which is implemented on a system including a transaction server in the cloud, an APP issued to a payee and a payer, and one or more routers or APs deployed on site, and the method includes the following steps:

[0037] 14-a) Initialization steps

[0038] The payee APP signs in to the transaction server and provides its own physical signal characteristic value and IP address. The transaction server retains its physical signal characteristic value and IP address in its own buffer;

[0039] The payee's APP opens the device corresponding to the physical signal and outputs the physical signal;

[0040] The payer APP signs in to the transaction server and obtains an "identity certificate" which includes its ID and available balance.

[0041] 14-b) Preprocessing steps, the following steps are done concurrently rather than serially:

[0042] 14-b-1) The payer APP periodically searches for the physical signal sent by the payee APP, obtains the physical signal characteristic value, and then queries the transaction server to obtain its corresponding IP address;

[0043] The payer APP determines the distance based on the strength of the physical signal; establishes data links with the nearest payee APPs via IP addresses; the payer APP internally establishes a "connection table" to record the characteristic value, IP address and distance;

[0044] When the payer's APP determines that the distance is far enough, it automatically disconnects the link;

[0045] 14-b-2) The payee APP creates a "connection table" internally to record the address of the payer APP with which the data link is established;

[0046] 14-b-3) The payer APP periodically interacts with the transaction server and obtains an updated “identity certificate” each time;

[0047] 14-C) Trading steps

[0048] The payee enters a payment request or identity authentication request, and sends the payment request or identity authentication request to all payer apps in the "connection table" at the same time; the payer app presents the payment request, payee information, etc. to the payer;

[0049] After the payer confirms that it is correct, a confirmation signal is sent to the payee APP. If the payer APP confirms that the transaction is feasible, it sends the confirmation message and "identity certificate" to the payee APP.

[0050] The recipient's APP confirms that the transaction is feasible and prompts that the transaction is successful;

[0051] The payee APP and the payer APP respectively submit the successful transaction records to the transaction server for data processing.

[0052] By implementing the technical solution of the present invention, a physical signal output by a physical terminal is obtained by the second mobile terminal and then sent to an interactive server, and then the corresponding interactive information is retrieved, thereby completing the information interaction between the first terminal and the second mobile terminal. An acceptance environment can be quickly formed, which has the advantages of convenient interaction and easy popularization.

[0053] Furthermore, the APP runs on mobile terminals such as smartphones or tablets, and does not involve or rely on dedicated equipment, such as traditional POS+cards and NFC phones. The main body of the system is software, and the marginal cost of deployment is close to zero. It can quickly form an acceptance environment and is easy to popularize. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0055] Figure 1 It is a flow chart of an embodiment of an information interaction method of the present invention;

[0056] Figure 2 is a flow chart of another embodiment of an information interaction method of the present invention;

[0057] Figure 3 It is a structural diagram of the identity authentication or electronic payment system of the present invention.

[0058] Figure 4 It is a flow chart of the identity authentication or electronic payment method in the present invention.

[0059] Figure 5 It is a structural diagram of an electronic payment system in a preferred embodiment of the present invention. DETAILED DESCRIPTION

[0060] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0061] In one embodiment of the present invention, an information interaction method is provided, which can be applied to a first terminal, at least one second mobile terminal, an interaction server, and a physical terminal corresponding to the first terminal.

[0062] The first terminal may be a mobile device and / or a fixed device, such as a smart phone, a tablet computer, a PC, a smart cash register or other smart devices. The second mobile terminal may be a smart phone, a tablet computer, etc.

[0063] The physical terminal may be an independent device or a module disposed in the first terminal. The physical terminal may be, but is not limited to, a WiFi module, a Bluetooth module, or a sound module, etc., and the physical signal outputted externally may be, but is not limited to, radiated SSID, Bluetooth ID, or ultrasonic signal, etc.

[0064] like Figure 1 FIG. 1 is a flow chart of the information interaction method of this embodiment, which includes the following steps:

[0065] S101: The first terminal sends the interaction request and the physical signal characteristic value corresponding to the physical terminal to the interaction server as interaction information, and the interaction server stores the interaction information. The interaction request may be a payment request, an authentication request, a connection request, etc., and the interaction request and the physical signal characteristic value together form the interaction information, and the interaction server stores the interaction information to a specified location. Of course, the interaction server may distinguish and store one or more interaction requests of the first terminal according to the physical signal characteristic value.

[0066] S102: The physical terminal outputs a physical signal corresponding to the physical characteristic value. As mentioned above, the physical terminal can continuously radiate a physical signal such as an SSID or a Bluetooth ID or an ultrasonic signal to the outside for detection by the second mobile terminal.

[0067] S103: The second mobile terminal obtains the physical signal and sends the physical characteristic value corresponding to the physical signal to the interactive server, and the interactive server retrieves the corresponding interactive information and sends it back to the second mobile terminal. The second mobile terminal can obtain the corresponding physical signal through an existing Bluetooth module, WIFI module, sound module, etc., and obtain the corresponding physical characteristic value of the physical signal and send it to the interactive server.

[0068] The interaction server searches for an interaction request corresponding to the physical feature value in the stored interaction requests according to the physical feature value, and sends the corresponding interaction information to the second mobile terminal.

[0069] Furthermore, the method may also include step S104: the second mobile terminal outputs confirmation information to the interactive server according to the interactive information. For example, when the interactive information is payment information, the second mobile terminal may output confirmation payment information to the interactive server; when the interactive information is authentication information, the second mobile terminal may output confirmation authentication information to the interactive server; when the interactive information is connection request information, the second mobile terminal may output confirmation connection information to the interactive server.

[0070] S105: The interaction server sends the interaction result information to the first terminal and / or the second mobile terminal according to the confirmation information. For example, when the interaction information is payment information, the first terminal and the second mobile terminal can display the transaction success information at the same time or at any one of them; when the interaction information is authentication information, the first terminal and the second mobile terminal can display the authentication success information at the same time or at any one of them; when the interaction information is connection request information, the first terminal and the second mobile terminal can display the connection confirmation information at the same time or at any one of them.

[0071] like Figure 2 1 is a flow chart of another embodiment of the information interaction method of the present invention, which is applied to at least one first terminal, at least one second mobile terminal, an interaction server, and a physical terminal corresponding to the first terminal.

[0072] The first terminal may be a mobile device and / or a fixed device, such as a smart phone, a tablet computer, a PC, a smart cash register or other smart devices. The second mobile terminal may be a smart phone, a tablet computer, etc.

[0073] The physical terminal may be an independent device or a module disposed in the first terminal. The physical terminal may be, but is not limited to, a WiFi module, a Bluetooth module, or a sound module, etc., and the physical signal outputted externally may be, but is not limited to, radiated SSID, Bluetooth ID, or ultrasonic signal, etc.

[0074] The method includes: S201: The first terminal signs in to the interactive server, sends the link address of the first terminal and the physical signal characteristic value of the physical terminal to the interactive server, and stores them. Of course, the number of first terminals can be one or more, and each first terminal is distinguished by a link address, such as an IP address. Correspondingly, one or more physical terminals, such as routers, AP hotspots, etc., are configured, and each first terminal corresponds to a physical terminal. The interactive server saves each first terminal and the physical terminal in a buffer or database for later use.

[0075] S202: The physical terminal outputs a physical signal corresponding to the physical characteristic value.

[0076] S203: The second mobile terminal signs in to the interactive server and obtains an identity certificate. In a transaction environment, the identity certificate may include the ID corresponding to the second mobile terminal, available balance, etc. Of course, in other environments, such as requesting a connection or requesting authentication, other identity certificates may also be used.

[0077] S204: The second mobile terminal searches for and obtains the physical signal, queries the interactive server according to the physical signal characteristic value corresponding to the physical signal, obtains the corresponding link address of the first terminal, and establishes a data link between the first terminal and the second mobile terminal according to the link address.

[0078] In this embodiment, the second mobile terminal periodically searches for a physical signal sent by the physical terminal, obtains a physical signal characteristic value, and then queries the interactive server to obtain a link address corresponding to the first terminal.

[0079] The second mobile terminal determines the distance according to the strength of the physical signal, and establishes a data connection with the first terminal which is closest to it through the link address; and a "connection table" can be established inside the second mobile terminal to record information such as the physical signal characteristic value, link address and distance. When it is determined that the distance is far enough, the connection between the first terminal and the second mobile terminal is disconnected.

[0080] Furthermore, in order to ensure the security of the interaction, a "connection table" can also be established inside the first terminal to record the link addresses of all second mobile terminals that establish data links with the first terminal; the second mobile terminal periodically interacts with the interactive server, and after each interaction, obtains an updated "identity certificate".

[0081] S205: The first terminal sends the interaction request to all second mobile terminals connected to it; after the second mobile terminal confirms the interaction request, it sends its identity certificate and confirmation message to the first terminal. For example, the first terminal sends the interaction request to all second mobile terminals connected to it, and displays the corresponding information of the interaction request on the second mobile terminals; after the second mobile terminal confirms, it sends its identity certificate and confirmation message to the first terminal, and after the interaction is successful, the interaction record is kept in the interaction server.

[0082] like Figure 3 As shown, an identity authentication or electronic payment system of one embodiment of the present invention includes: a transaction server, an APP issued to a payee and a payer, and one or more physical terminals deployed on site; the physical terminal includes one or more independent physical terminals corresponding to the payee; or, the physical terminal is a physical module in the payee's device. The independent physical terminal includes one or more routers and / or APs; or, the physical terminal is a WiFi module, a Bluetooth module and / or a sound module corresponding to the payee. Among them, the transaction server interacts with the APP used by the payee and the payee through technical means such as 2G, 2.75G, 3G, 4G, 5G or WiFi. Each physical terminal corresponds to a payee, thereby establishing a unique corresponding relationship. The APP used by the payee and the payee can be a separate application or a mini-program embedded in certain applications, such as a mini-program embedded in a WeChat application.

[0083] Furthermore, the APPs issued to the payee and the payer are respectively configured with keys. The system also includes one or more payer servers that store and manage payer data, and one or more payee servers that store and manage payee data. Among them, the keys configured in the payee APP include the payee's private key and the public key of the APP issuer; the keys configured in the payer APP include the payee's private key and the public key of the APP issuer; the payee's public key and the APP issuer's private key are stored in the payee server, and the payer's public key and the APP issuer's private key are stored in the payee server.

[0084] The key used by the APP issued to the payee and payer is stored in a digital certificate in a certain file path; alternatively, the key configured in the payee or payer APP is stored inside the APP, embedded in the source code or stored in the data area of ​​the APP.

[0085] In the method of identity authentication or electronic payment using the identity authentication or electronic payment system, when the payee APP sends a bill to the transaction server, it signs with the payee's private key; when the transaction server sends a bill to the payer, it signs with the transaction server's private key; when the payer APP sends a bill confirmation signal to the transaction server, it signs with the payer's private key; when the transaction server sends successful transaction or failure information to the payer and payee, it signs with the transaction server's private key; the other party receiving the information uses the corresponding public key to verify the authenticity of its information.

[0086] Furthermore, the method also includes the following initialization steps: a) the payee or payer APP signs in to the payer server or payee server respectively, and uses its configured key to perform two-way authentication with the issuer.

[0087] Combine the following Figure 4 and Figure 5 , describing a system and method for identity authentication or electronic payment according to an embodiment.

[0088] a) The payee's APP turns on the Bluetooth module on the phone and initializes the Bluetooth ID to a globally unique value. The payee enters the payment amount or authentication request in the APP and sends it to the transaction server together with the Bluetooth ID. Of course, the payee can also just enter a payment or authentication request without the payment amount.

[0089] b) The transaction server saves the received bill in a buffer and creates an index for the Bluetooth ID;

[0090] c) The payer APP searches for the Bluetooth ID in the air and sends the obtained one or more Bluetooth IDs to the transaction server. The transaction server retrieves the corresponding bill from the buffer and sends it back to the payer APP;

[0091] d) The payer APP presents the bill to the payer. After the payer confirms that it is correct, he / she sends a confirmation signal to the APP. The payer APP sends a message confirming the bill to the transaction server. Of course, the bill may not include the amount of payment, and the payer can fill in the specific amount and then send a message confirming the bill to the transaction server.

[0092] e) After receiving the transaction confirmation message, the transaction server executes the account processing and sends the successful transaction or failure information to the payer APP and the payee APP;

[0093] f) The payer APP and the payee APP prompt the payer and the payee respectively.

[0094] The beneficial effects of the present invention are:

[0095] The APP runs on smartphones or tablets, and does not involve or rely on special equipment, such as traditional POS+ cards and NFC phones. The main body of the system is software, and the marginal cost of deployment is close to zero. It can quickly form an acceptance environment and is easy to popularize. Based on key authentication, the security of the system is guaranteed. Based on security, using communication means such as 2G, 2.75G, 3G, 4G and WiFi, the smartphones of both parties to the transaction are bidirectionally authenticated and exchange information under the coordination of the transaction server. The transaction speed can cope with the current scenarios of using contactless cards, such as buses and subways. Based on technical means such as Bluetooth and sound for on-site identification, it is non-directional, fast, and the user experience is better than scanning payment.

[0096] In another embodiment of the present invention, the identity authentication method or electronic payment method is implemented on a system including a transaction server and an APP issued to a payee and a payer for use, and the method includes the following steps:

[0097] 9-a) The payee enters a payment request or authentication request on the APP, together with his own physical signal characteristic value, the payee's information, etc. to form a bill (or request), and sends it to the transaction server; at the same time, the device corresponding to the physical signal is turned on to output the physical signal.

[0098] The payment request may include the payment amount and payment details filled in by the payee. Of course, the payment amount may also be left blank and filled in by the subsequent payer through his APP. The physical signal may be a WIFI SSID, Bluetooth ID or ultrasonic signal. The device corresponding to the physical signal may be a WiFi module, Bluetooth module and audio module; of course, it may also be an independent device.

[0099] 9-b) The transaction server saves the received bill in a buffer. Of course, in addition to the bill, the buffer formed by the transaction server also includes various information such as the information of the chargee and the details of the payment.

[0100] 9-c) The payer APP searches for the physical signal output by the payee APP, and sends the obtained one or more physical signal characteristic values ​​to the transaction server. The transaction server retrieves the corresponding bill from the buffer and sends it back to the payer APP.

[0101] 9-d) The payee APP presents the bill to the payee. After the payee confirms that it is correct, he / she sends a confirmation signal to the APP. The payee APP sends the message confirming the bill to the transaction server. The payee APP presents the bill to the payee, including the information of the collector, payment details, etc.

[0102] 9-e) After receiving the transaction confirmation message, the transaction server performs account processing and sends the successful transaction or failure information to the payer APP and / or the payee APP.

[0103] 9-f) The payer APP and / or payee APP prompts the payer and payee respectively.

[0104] Of course, when the payee APP is on a fixed device, such as a PC or other payment receiving device, the payer APP may not prompt. It is understandable that it can also be selectively displayed on either the payer APP and / or the payee APP or both according to actual needs.

[0105] Furthermore, the method also includes the following initialization steps: a) the payee or payer APP signs in to the payer server and the payee server respectively, and uses its configured key to perform two-way authentication with the payer server and the payee server; b) the payee APP opens the device corresponding to the physical signal used in subsequent transactions in advance, and outputs this physical signal to the outside.

[0106] Furthermore, in order to ensure security, the following operations can be performed independently: when the fee collector APP sends the bill to the transaction server, it signs with its own private key; when the transaction server sends the bill to the payer, it signs with its own private key; when the payment APP sends a bill confirmation signal to the transaction server, it signs with its own private key; when the transaction server sends successful transaction or failure information to the payer and payee, it signs with its own private key; the other party receiving the information uses the corresponding public key to verify the authenticity of its information.

[0107] In another embodiment of the present invention, the identity authentication method or electronic payment method is implemented on a system including a cloud transaction server, an APP issued to the payee and the payer, and one or more routers or APs deployed on site, and is characterized in that the method includes the following steps:

[0108] 14-a) Initialization steps

[0109] The payee APP signs in to the transaction server and provides its own physical signal characteristic value and IP address. The transaction server retains its physical signal characteristic value and IP address in its own buffer;

[0110] The payee's APP opens the device corresponding to the physical signal and outputs the physical signal;

[0111] The payer APP signs in to the transaction server and obtains an "identity certificate" which includes its ID and available balance.

[0112] 14-b) Preprocessing steps, the following steps are done concurrently rather than serially:

[0113] 14-b-1) The payer APP periodically searches for the physical signal sent by the payee APP, obtains the physical signal characteristic value, and then queries the transaction server to obtain its corresponding IP address;

[0114] The payer APP determines the distance based on the strength of the physical signal; establishes data links with the nearest payee APPs via IP addresses; the payer APP internally establishes a "connection table" to record the characteristic value, IP address and distance;

[0115] When the payer's APP determines that the distance is far enough, it automatically disconnects the link;

[0116] 14-b-2) The payee APP creates a "connection table" internally to record the address of the payer APP with which the data link is established;

[0117] 14-b-3) The payer APP periodically interacts with the transaction server and obtains an updated “identity certificate” each time;

[0118] 14-C) Trading steps

[0119] The payee inputs a payment request or an identity authentication request, and sends the payment request or identity authentication request to all payer apps in the "connection table" at the same time; the payer app presents the payment request, payee information, etc. to the payer; the payment request may include the payment amount, or of course, it may not include the payment amount, and the payer fills in the specific amount before sending the confirmation information to the transaction server.

[0120] After the payer confirms that it is correct, a confirmation signal is sent to the payer APP; when the payer APP confirms that the transaction is feasible, the confirmation message and "identity certificate" are sent to the payee APP; of course, when the payment request includes the payment amount, the confirmation information can be issued after verification; when the payment request does not include the payment amount, the payer needs to fill in the specific amount before the confirmation information is sent to the transaction server.

[0121] The recipient's APP confirms that the transaction is feasible and prompts that the transaction is successful;

[0122] The payee APP and the payer APP respectively submit the successful transaction records to the transaction server for data processing.

[0123] It is understandable that the payee and payer APPs can also set a key, and the encryption method can be applied to any of the above embodiments. In one embodiment of the encryption method, the following steps are included:

[0124] S101: Generate a key. In this embodiment, a key pair can be generated during software design, including a user's private key, a software publisher's public key, etc. The key pair can be visible or invisible.

[0125] S102: Setting the character string to be replaced at a setting position of the installation program corresponding to the software. When the software installation program is developed, a specific character string to be replaced can be set at a specific position in the development template or source code of the software.

[0126] S103: Searching for the string to be replaced, and replacing the string to be replaced with the key. When the user needs to download the corresponding installation program of the software, the user information can be bound to a specific set of keys by setting rules, and the string to be replaced can be replaced with the reorganized key and saved. At the same time, the corresponding key information is saved on the server side, so as to establish unique authentication information with the user.

[0127] Optionally, the method may further include step S104: compiling the installation program processed in step S3 into a to-be-installed program for the mobile terminal to install. The user may download the corresponding installation program through a wired network or a wireless network to obtain the software.

[0128] In this embodiment, each installation program has a unique key, thereby determining the uniqueness of the user's software usage and ensuring the security of information interaction.

[0129] In another embodiment of the encryption method, the method of this embodiment includes:

[0130] Certificate generation step (S201): Generate several key pairs, and generate several certificate files one by one according to the key pairs, and store them in the server. In this embodiment, the private key in the key pair and the information to be processed can be used to generate a certificate installation file, which is saved in a specified file path or database of the server for subsequent calls. It can be understood that each key pair is unique so that different mobile terminals can correspond to unique key pairs.

[0131] Furthermore, the private key in the key pair can be optionally encrypted with a user password and saved after the certificate file is generated, thereby further improving security.

[0132] Certificate distribution step (S202): The installation program corresponding to the software is packaged and output with a certificate file. For example, different certificate files are corresponding to different mobile terminals by setting rules, and the corresponding relationship is established and saved in a server or other device. Then, when different mobile terminals request the installation program, the certificate file corresponding to the mobile terminal is packaged and output with the installation program. When the installation program is installed, the certificate file is saved to a designated location or database of the mobile terminal, such as the memory of the mobile terminal, the set path of the mobile terminal or the database. During the data interaction process, the certificate file can be called for encryption, thereby improving the security of the interaction.

[0133] In another embodiment, in the certificate distribution step, after the mobile terminal installs the installation program corresponding to the software, one of the certificate files corresponding to the mobile terminal in the server is called, and the certificate file is saved to a designated location or database of the mobile terminal. For example, after the mobile terminal installs the software, a request for a certificate file is sent to the server, and the request may include information of the mobile terminal. After the mobile terminal receives the certificate file, the information of the certificate file, such as the private key, certificate content, etc., may be saved to the memory or a certain path or database of the mobile terminal.

[0134] The certificate distribution step may also include obtaining a private key through a user password, or encrypting and storing the private key.

[0135] The steps in the method of the embodiment of the present invention may be adjusted in order, combined or deleted according to actual needs. The modules, units or sub-units in the device of the embodiment of the present invention may be combined, divided or deleted according to actual needs.

[0136] What is disclosed above is only a preferred embodiment of the present invention, which certainly cannot be used to limit the scope of rights of the present invention. A person skilled in the art can understand that all or part of the processes of the above embodiments and equivalent changes made according to the claims of the present invention still fall within the scope of the invention.

Claims

1. An information interaction method, applied to at least one first terminal, at least one second mobile terminal, an interaction server, and a physical terminal corresponding to the first terminal, It is characterized in that include: B1: The first terminal signs in to the interactive server, sends the link address of the first terminal and the physical signal characteristic value of the physical terminal to the interactive server, and stores them; the link address is an IP address; B2: the physical terminal outputs a physical signal corresponding to the physical signal characteristic value; B3: The second mobile terminal signs in to the interactive server and obtains an identity certificate; B4: the second mobile terminal searches for and obtains the physical signal, queries the interactive server according to the physical signal characteristic value corresponding to the physical signal, obtains the corresponding link address of the first terminal, and establishes a data link between the first terminal and the second mobile terminal according to the link address; B5: The first terminal sends an interaction request to all second mobile terminals connected thereto; after the second mobile terminal confirms the interaction request, it sends its identity certificate and a confirmation message to the first terminal.

2. An identity authentication method implemented on a system including a transaction server, an APP issued to a payee and a payer, It is characterized in that The method comprises the following steps: 9-a) The payee enters a payment request or authentication request on the APP, together with a physical signal characteristic value of the payee and the payee's information to form a bill, which is sent to the transaction server; at the same time, the device corresponding to the physical signal is turned on to output the physical signal; wherein the payment request includes the payment amount; 9-b) The transaction server saves the received bill in a buffer; 9-c) The payer APP searches for the physical signal output by the payee APP, and sends the obtained one or more physical signal characteristic values ​​to the transaction server. The transaction server retrieves the corresponding bill from the buffer and sends it back to the payer APP; 9-d) The payer APP presents the bill to the payer. After the payer confirms that it is correct, he / she sends a confirmation signal to the APP. The payer APP sends a message confirming the bill to the transaction server. 9-e) After receiving the transaction confirmation message, the transaction server performs account processing and sends the successful transaction or failure information to the payer APP and / or the payee APP; 9-f) The payer APP and / or payee APP prompts the payer and payee respectively.

3. The identity authentication method as claimed in claim 2, It is characterized in that The method also includes the following initialization steps: a) the payee or payer APP signs in to the payer server and the payee server respectively, and uses the configured key to perform two-way authentication with the payer server and the payee server; b) the payee APP opens the device corresponding to the physical signal used in subsequent transactions in advance and outputs this physical signal to the outside.

4. The identity authentication method as claimed in claim 2, It is characterized in that In step 9-b), the buffer formed by the transaction server includes, in addition to the bill, information about the person who collected the fee; In step 9-d), the payer APP presents the bill to the payer, including the information of the person who charged the bill; The physical signal is the SSID, Bluetooth ID or ultrasonic signal of WIFI, and the devices corresponding to the physical signal are the WiFi module, Bluetooth module and audio module.

5. The identity authentication method as claimed in claim 2, Features: When the fee collector's APP sends a bill to the transaction server, it signs with its own private key; when the transaction server sends a bill to the payer, it signs with its own private key; when the payment APP sends a bill confirmation signal to the transaction server, it signs with its own private key; when the transaction server sends successful transaction or failure information to the payer and payee, it signs with its own private key; the other party receiving the information uses the corresponding public key to verify the authenticity of its information.

6. An identity authentication system, including a transaction server, an APP issued to a payee and a payer, Features: Used to implement the identity authentication method as described in any one of claims 2 to 5; also includes one or more physical terminals deployed on site; the physical terminal includes one or more independent physical terminals corresponding to the payee; or, the physical terminal is a physical module in the payee's device.

7. An identity authentication method is implemented on a system including a transaction server in the cloud, an APP issued to the payee and the payer, and one or more routers or APs deployed on site. It is characterized in that The method comprises the following steps: 14-a) Initialization steps The payee APP signs in to the transaction server and provides its own physical signal characteristic value and IP address. The transaction server retains its physical signal characteristic value and IP address in its own buffer; The payee's APP opens the device corresponding to the physical signal and outputs the physical signal; The payer APP signs in to the transaction server and obtains an "identity certificate" which includes its own ID and available balance; 14-b) Preprocessing steps, the following steps are done concurrently rather than serially: 14-b-1) The payer APP periodically searches for the physical signal sent by the payee APP, obtains the physical signal characteristic value, and then queries the transaction server to obtain its corresponding IP address; The payer APP determines the distance based on the strength of the physical signal; establishes data links with the nearest payee APPs through IP addresses; the payer APP internally establishes a "connection table" to record the characteristic value, IP address and distance; When the payer's APP determines that the distance is far enough, it automatically disconnects the link; 14-b-2) The payee APP creates a "connection table" internally to record the address of the payer APP with which the data link is established; 14-b-3) The payer APP periodically interacts with the transaction server and obtains an updated "identity certificate" each time; 14-C) Trading steps The payee enters a payment request or identity authentication request, and sends the payment request or identity authentication request to all payer apps in the "connection table" at the same time; the payer app presents the payment request and payee information to the payer; After the payer confirms that it is correct, a confirmation signal is sent to the payee APP; if the payer APP confirms that the transaction is feasible, it sends the confirmation message and "identity certificate" to the payee APP; The recipient's APP confirms that the transaction is feasible and prompts that the transaction is successful; The payee APP and the payer APP respectively submit the successful transaction records to the transaction server for data processing.

Images