A secure payment device, method, computer equipment and readable storage medium

Abstract

This article relates to the field of information security technology, and in particular to a secure payment device, method, computer equipment, and readable storage medium. The method includes directly executing subsequent steps after activating the secure payment device according to the user activation instruction; collecting the user's biometric information; when the biometric information is verified, directly generating dynamic verification information based on the user information and current feature information; generating and displaying the pattern to be identified according to the verification information. Using the embodiments of this article, it is convenient for elderly users and children to operate. After activating the secure payment device, they can generate a payment QR code by pressing their fingers on the fingerprint collection unit, without the need to unlock the smartphone, find the payment application software, call a small program of the payment application software, verify the fingerprint, and other complex operations.

Description

Technical Field

[0001] This article relates to the field of information security technology, and in particular to a secure payment device, method, computer equipment, and readable storage medium. Background Art

[0002] With the popularization of mobile payment in China, the use of cash is gradually decreasing. However, due to my country's large population and uneven cultural and educational levels, a large number of people do not know how to use smartphones and therefore cannot use mobile payment. In addition, due to the power consumption of smartphones, the smartphone battery may run out when traveling, making it impossible to use mobile payment. In addition, incomplete base station coverage in remote areas results in poor mobile phone signals, making it impossible to use mobile payment.

[0003] How to solve the problem of convenient payment in existing technologies is an urgent problem to be solved. Summary of the Invention

[0004] To solve the problems in the prior art, the embodiments of this article provide a secure payment device, method, computer equipment and readable storage medium, which are used to solve the problems in the prior art of inconvenience in mobile payment caused by telecommunications network signal problems, complex payment operations and low reliability.

[0005] The embodiment of this invention provides a secure payment method, including:

[0006] Activate the secure payment device according to the user's activation instructions and directly execute the subsequent steps;

[0007] Collect users' biometric information;

[0008] When the biometric information is verified, dynamic verification information is generated directly based on the user information and the current feature information;

[0009] A pattern to be identified is generated and displayed according to the verification information.

[0010] The embodiment of the present invention further provides a secure payment device, including a processor, a power control unit, a biometric information recognition unit, a pattern generation unit, and a display unit;

[0011] The power control unit is configured to activate the secure payment device according to a user activation instruction;

[0012] The processor is configured to directly call the biometric information recognition unit to collect the user's biometric information, and when the biometric information is verified, directly generate dynamic verification information based on the user information and current feature information;

[0013] The pattern generating unit is configured to generate a pattern to be identified based on the verification information;

[0014] The display unit is used to display the pattern to be recognized.

[0015] The embodiments of this document further provide a computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned method when executing the computer program.

[0016] The embodiments of this document further provide a computer-readable storage medium having computer instructions stored thereon, which implement the above method when executed by a processor.

[0017] The embodiments of this article make it easier for elderly users and children to operate. After activating the secure payment device, they can generate a payment QR code by pressing their finger on the fingerprint collection unit. There is no need to perform a series of complicated operations such as unlocking the smartphone, searching for the payment application software, calling a small program of the payment application software, and verifying the fingerprint. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the embodiments of this article or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of this article. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0019] Figure 1 The figure shows a schematic diagram of the structure of a secure payment system according to an embodiment of this invention;

[0020] Figure 2 Shown is a flow chart of a secure payment method according to an embodiment of this invention;

[0021] Figure 3 The figure shows a schematic diagram of the structure of a secure payment device according to an embodiment of this invention;

[0022] Figure 4 Shown is a flow chart of configuring a secure payment device according to an embodiment of this document;

[0023] Figure 5 Shown is a flow chart of a secure payment method executed on a secure payment device according to an embodiment of this document;

[0024] Figure 6 Shown is a data flow diagram of a secure payment method according to an embodiment of this invention.

[0025] [Description of Reference Numerals]

[0026] 101. Secure payment device;

[0027] 102. Collection terminal;

[0028] 103. Payment network;

[0029] 104. Front-end server;

[0030] 105. Internal network;

[0031] 106. Core payment system;

[0032] 107. Authentication server;

[0033] 301, processor;

[0034] 302. Power control unit;

[0035] 303. Biometric information recognition unit;

[0036] 304. Pattern generating unit;

[0037] 305. Display unit. DETAILED DESCRIPTION

[0038] The following will be combined with the accompanying drawings to clearly and completely describe the technical solutions in the embodiments of this document. Obviously, the embodiments described are only part of the embodiments of this document, not all of the embodiments. Based on the embodiments of this document, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of this document.

[0039] like Figure 1 FIG2 is a schematic diagram of the structure of a secure payment system according to an embodiment of the present invention. This diagram describes the system structure of payment performed through a secure payment device according to an embodiment of the present invention, which includes a secure payment device 101, a collection terminal 102, a payment network 103, a front-end server 104, an internal network 105, a core payment system 106, and an authentication server 107. The secure payment device 101 provides verification information during the payment process. The collection terminal 102 collects the verification information and transmits the verification information and payment information to the front-end server 104 via the payment network 103. The front-end server 104 sends the verification information to the authentication server 107 via the secure internal network 105 for verification. Once the verification is successful, the front-end server 104 sends the payment information to the core payment system 106 to complete the payment process.

[0040] Among them, the secure payment device 101 can refer to Figure 2As shown in FIG, a chip structure diagram of a secure payment device in an embodiment of the present invention is described in this figure. The secure payment device in the embodiment of the present invention is different from smart mobile devices such as smartphones, tablet computers, and smart watches in the prior art, because such smart mobile devices consume more power and have smaller battery capacity, and have certain problems with battery life. In addition, such smart mobile devices usually have payment services built into certain software, such as the payment QR code generation in WeChat and Alipay. First, you have to open the software, and then select the corresponding icon from the numerous icons and complicated interfaces to start the payment function. Therefore, there is also the problem of complicated operation. The secure payment terminal in the embodiment of this article does not install an intelligent operating system, such as the Android system, IOS system, or other intelligent operating systems, nor does it install communication software, such as WeChat, Alipay, etc., and does not need to activate baseband, WiFi, radio frequency and other modules at all times. It only needs to dynamically generate verification information based on the user's personal information and real-time time information to complete the payment service, making the payment service simple to operate and ensuring the security of the payment transaction. For areas with poor network coverage and elderly users, it is a simple and safe payment method; due to the simple structure and low energy consumption of the secure payment device, it can also be in standby mode for a long time, thereby avoiding the problem of short standby time of smart mobile terminals in the prior art.

[0041] like Figure 2 The flowchart of a secure payment method according to an embodiment of the present invention is shown. This figure describes the process of performing payment services through a secure payment device. The user can complete the payment service process even when the telecommunications network is poor through the easy-to-operate secure payment device. It can be used for small-amount payment application scenarios. For example, when an elderly user cannot operate a smartphone, they can find the payment software from the numerous applications on the smartphone and call out the payment interface. Through the secure payment terminal according to the embodiment of the present invention, the payment interface can be called out in one step to complete the small-amount payment business needs. It can also be used in another application scenario, such as when a child purchases goods alone and needs to make a small-amount payment. In order to prevent the merchant from overcharging and to prevent the child from using various unrelated applications, such as playing games, after taking the parent's smartphone, the secure payment device according to the embodiment of the present invention can be given to the child to purchase goods. The method specifically includes:

[0042] Step 201, directly executing subsequent steps after activating the secure payment device according to the user activation instruction;

[0043] Step 202: collecting the user's biometric information;

[0044] Step 203: When the biometric information is verified, dynamic verification information is generated directly based on the user information and the current feature information;

[0045] Step 204: Generate and display a pattern to be recognized based on the verification information.

[0046] Through the method of the embodiments of this article, the activation instruction can be a power-on instruction, and the power on and off of the security payment device can be achieved through the hardware power button, thereby activating the security payment device. Since the hardware structure of the security payment device is simple, it does not require a complex software operating system, nor does it require various application software and service software to be started in the background of the software system. Therefore, the security payment device can be started quickly, and it is not like the smart phones in the prior art, which require a long time to wait for the startup software system, background application software and service software when turning on and off. In addition, by activating the security payment device on demand, its power consumption can be saved and long-term use can be ensured; biometric verification can enhance the security of payment services. After passing the biometric verification, dynamic verification information is directly generated, and no other user operations are required during the period, which greatly simplifies the user's operation process in the payment business. Moreover, the dynamic verification information is directly generated on the security payment device for payment services, and other application software cannot be run, avoiding the interference of multiple applications on the smart phone on the user's use, and also enhancing the security of the payment business.

[0047] As an embodiment of this invention, activating the secure payment device according to the user activation instruction includes:

[0048] The secure payment device is powered on and activated according to the user's operation of the power key.

[0049] In the above steps, the secure payment device is normally powered off. To make a payment, the user can power on the secure payment device by moving the power button, for example, from the OFF state to the ON state. Alternatively, the power button can be a press-button mechanism, whereby the duration of pressing the button, for example, for three seconds, determines whether the secure payment device is powered on, thereby powering it on.

[0050] In other embodiments, the secure payment device can also be in a low-energy standby state, and the user moves or presses the activation button to activate the secure payment device to exit the low-energy standby state and be in a state where it can receive other user inputs, such as fingerprints or passwords, to perform payment transactions.

[0051] As an embodiment of the present invention, before activating the secure payment device according to the user activation instruction, the method further includes collecting the user's biometric information and storing the biometric information in a secure storage chip;

[0052] The user information and the reference characteristic information are obtained through the communication unit, and the user information and the reference characteristic information are stored in the secure storage chip.

[0053] The steps of collecting the user's biometric information and storing it in a secure storage chip, as well as storing the obtained user information and baseline feature information in the secure storage chip, performed in the above steps are configuration steps that need to be performed before the user uses the secure payment device of the embodiment of this article to perform payment services. When the user receives the secure payment device from the bank and powers on the secure payment device for the first time, it is necessary to collect the user's biometric information and store the biometric information in a local secure storage chip. In addition, the user information and baseline feature information are obtained from the connected smart terminal through a wireless communication unit such as a Bluetooth unit, and these user information and baseline feature information are stored in a local secure storage chip. When the user subsequently uses the secure payment device to complete the payment services described in the embodiment of this article, it is not necessary to run the above configuration steps.

[0054] As an embodiment of this invention, obtaining user information and reference characteristic information through the communication unit further includes:

[0055] The communication unit receives user information and benchmark feature information obtained by the smart terminal from the bank's back-end server.

[0056] In the above steps, the smart terminal can be, for example, a smart phone, a tablet computer, a laptop computer, and a desktop computer. Taking a smart phone as an example, when a user logs in to a bank account through a web page or application on the smart phone and establishes a communication connection with the bank's back-end server, the user information of the user of the bank's back-end server can be queried, such as a bank account number, user name, user number and other unique identifiers, and the system time of the bank's back-end server can also be obtained. The system time is used as the benchmark feature information, and the smart phone sends the aforementioned user information and system time to the secure payment device via wired or wireless means.

[0057] In other embodiments, the secure payment device may also obtain user information and baseline characteristic information from the bank's backend server via a wireless communication unit, such as a SIM communication unit (i.e., establishing a connection with the bank's backend server via a telecommunications network), or via a WiFi communication unit (i.e., establishing a connection with the bank's backend server via a wired Internet connection). Specifically, the user may enter their ID number or account number (and password, if necessary) via the numeric keys on the secure payment device. Based on this information, the secure payment device directly establishes a connection with the bank's backend server via the wireless communication unit, thereby obtaining the user information and baseline characteristic information stored on the bank's backend server.

[0058] As an embodiment of this invention, the user information and the reference characteristic information obtained by the intelligent terminal from the bank backend server through the communication unit are further included:

[0059] The smart terminal receives user information and benchmark feature information from the bank's back-end server through the wired communication unit.

[0060] In this step, when the user receives a secure payment device at a bank for the first time, the teller can operate to connect the secure payment device to the bank's smart terminal, such as a terminal with a USB unit. The teller enters the user's information, such as name, ID number, etc., on the terminal. The terminal will send the user information and baseline feature information stored in the bank's backend server to the secure payment device through the USB unit.

[0061] By using smart terminals to access user information and baseline feature information (such as system time) stored on the bank's backend server, the security of subsequent verification steps and payment services can be further guaranteed. Furthermore, obtaining this information through smart terminals can further reduce the hardware requirements of secure payment devices, lower power consumption, and make the secure payment device simpler and more convenient to operate.

[0062] As an embodiment of this invention, obtaining user information and reference feature information through a communication unit further includes:

[0063] The user information stored locally in the smart terminal and the reference feature information generated by the smart terminal are received through the communication unit.

[0064] In this step, when the smart terminal can be, for example, a smart phone, tablet computer, laptop computer, and desktop computer, taking a smart phone as an example, when the user logs in to the bank account through the smart phone's web page or application, the smart terminal will save the user's user information, such as bank account number, user name, user number and other unique identifiers. The smart terminal can send the locally saved user information and local system time as benchmark feature information to the secure payment device.

[0065] As an embodiment of this document, the reference characteristic information includes system time or number.

[0066] In this step, the reference characteristic information can be the real-time system time during the user configuration step, or a randomly generated starting number. The secure payment device can generate verification information that is different for each payment transaction based on the reference characteristic information and user information.

[0067] As an embodiment of this invention, when the reference characteristic information is system time, storing the user information and the reference characteristic information in the secure storage chip further includes:

[0068] Calculate cumulative time;

[0069] The step of generating dynamic verification information directly based on user information and current feature information further includes:

[0070] The system time and the accumulated time are accumulated to obtain the current system time to form the current feature information.

[0071] In this step, after the secure payment device obtains the initial system time through the configuration step, it immediately starts timing. When a user needs to make a payment, the secure payment device can calculate the current system time by adding the accumulated time obtained through timing to the initial system time. This allows for dynamic generation of verification information, such as a QR code, based on user information and the current system time. This ensures that the verification information generated for each payment transaction is different, thereby ensuring payment security. This means that the verification information is constantly changing, and even if it is leaked, it cannot be reused. In this embodiment, since the secure payment device is not connected to the Internet, is not constantly connected to and communicating with the smart terminal, and is often powered off, if the same verification information is generated based on the same system time for each payment transaction, it may compromise the security of the payment transaction. By powering off and shutting down, the device can operate in a low-energy mode to calculate the current system time in real time. Verification information can then be dynamically generated based on the changing current system time, thereby improving the security of the payment transaction.

[0072] As an embodiment of this invention, when the reference characteristic information is digital, the step of generating dynamic verification information directly based on the user information and the current characteristic information further includes:

[0073] The numbers are accumulated to obtain the current sequence number to form the current feature information.

[0074] In this step, the number randomly generated in the configuration step is used as the starting number (it may also be a unified starting number, for example, starting from 0000). After being stored in the secure payment device, when the user performs a payment transaction, a fixed value will be added to the starting number, for example, 1 will be added, to form a new sequence number, that is, the current sequence number. The number locally stored in the secure payment device is updated to the current sequence number, that is, when the user performs the next payment transaction, 1 will be added to the above-mentioned current sequence number to form a new current sequence number. Dynamic verification information can be generated by calculation using the current sequence number and user information. After the verification information is sent to the bank's back-end server, the bank's back-end server can query previous payment transaction records. If there is an identical sequence number, the verification fails. Such a result means that the pattern to be identified generated by the secure payment device has been used, and the current payment transaction is exited. If there is no identical sequence number, the verification passes. Such a result means that the pattern to be identified generated by the secure payment device has not been used, and the subsequent payment transaction process continues.

[0075] As an embodiment of this invention, collecting the user's biometric information includes:

[0076] The user's fingerprint information is obtained through the fingerprint collector.

[0077] In the above steps, the biometric information includes fingerprint information, password information, etc. Obtaining fingerprint information through a fingerprint collector can be more convenient for elderly users or children. The solution in the embodiment of this article only requires the user to take out the secure payment device, activate the secure payment device, and press the finger on the fingerprint collector. If the fingerprint recognition verification in the subsequent steps is passed, a pattern to be recognized, such as a QR code, will be generated and displayed on the display of the secure payment device. For the user, the payment transaction is basically completed. Other steps of the payment service, such as verifying the legitimacy of the pattern to be recognized, whether the account balance meets the payment transaction requirements, and whether there are any problems with the transfer of the transaction amount, will not cause any interference or impact to the user.

[0078] As an embodiment of this invention, when the biometric information verification further includes:

[0079] Determine whether the biometric information stored in the secure storage chip of the secure payment device is consistent with the collected user biometric information. If they are consistent, the verification is successful; if they are inconsistent, the verification fails.

[0080] As an embodiment of this article, directly generating dynamic verification information based on user information and current feature information means that when the biometric information verification is passed, the secure payment device does not perform other processing, such as unlocking the screen, clicking on the application software, clicking on a menu or button to call an application or applet, and directly merges the user information and current feature information in the secure storage chip to generate verification information (executed inside the processor of the secure payment device and not displayed to the user), and then generates an image to be identified and displays it on the display screen of the secure payment device.

[0081] The user information and current feature information are combined to generate verification information. For example, the user information is placed at the beginning of the string to be converted, and the verification information is placed at the end of the string to be converted, forming a complete string. Using the QR code conversion rules, for example, each letter in the string is converted to binary, a mode indicator is added to the beginning of the binary string, and an error correction level is added to the end of the binary string. The complete binary string is then represented as black and white blocks, forming a QR code pattern. Of course, this also involves performing an XOR operation with the mask image and the black and white blocks of the complete binary string, followed by pattern homogenization, which will not be detailed here.

[0082] As an embodiment of this invention, generating and displaying a pattern to be recognized according to the verification information further includes:

[0083] Signing the verification information using the private key of the secure payment device;

[0084] The pattern to be identified is generated and displayed according to the signature and verification information.

[0085] In this step, the private key is used to sign the secure payment device, and the signature and verification information are converted to generate a pattern to be recognized, such as a QR code, which can further improve the security of the payment.

[0086] As an embodiment of this invention, after generating and displaying the pattern to be recognized according to the verification information, the method further includes:

[0087] Acquire the pattern to be recognized through the acquisition terminal, and send the pattern to be recognized and payment information to the front-end server;

[0088] The front-end server sends the pattern to be recognized to the authentication server to verify the pattern to be recognized;

[0089] After the pattern to be recognized is verified, the front-end server sends the payment information to the core payment system to complete the payment service.

[0090] In this step, the acquisition terminal obtains the pattern to be recognized through a camera, infrared scanner and other devices, and sends the pattern to be recognized, or the verification information in the pattern to be recognized, and combines it with the payment information of the current payment business, including information such as product number, quantity, amount, and payment account, to the front-end server; the front-end server sends the pattern to be recognized or the verification information to the authentication server for verification; the authentication server recognizes the pattern to be recognized to obtain the verification information, or directly receives the verification information, and uses the user information and device ID in the verification information to search whether the corresponding user information exists in the system. If so, it feeds back a verification success message, wherein, if the verification information includes the user's signature, the user's public key can also be obtained, and the signature in the verification information is verified using the public key. After the verification is passed, the verification success message is fed back; if it does not exist, or the verification fails, the verification failure message is fed back.

[0091] If the front-end server receives verification success information, it will send the payment information to the core payment system to complete the payment service operation; if the front-end server receives verification failure information, it will feedback payment service failure information to the collection terminal, and can also feedback the reason for the payment service failure.

[0092] As an embodiment of this invention, the verification of the pattern to be identified further includes:

[0093] The authentication server obtains verification information through the pattern to be identified;

[0094] Obtaining user information and current feature information from the verification information;

[0095] Searching a historical payment service database for the current feature information that matches the user information;

[0096] If found, feedback verification failure information to the front-end server;

[0097] If not found, the verification success information is fed back to the front-end server.

[0098] In this step, when the current system time or the current sequence number in the verification information appears in the historical payment business record that matches the user information, it indicates that the verification information has been used in the previous payment business, that is, the pattern to be identified generated by the verification information and user information has been used, and there may be transaction risks in this payment business. Therefore, the authentication server feeds back transaction failure information to the front-end server; otherwise, it indicates that the verification information is brand new, the corresponding pattern to be identified has not been used, and this payment business is safe.

[0099] The method of the above-mentioned embodiment of this article is convenient for elderly users and children to operate. After activating the secure payment device, a payment QR code can be generated by pressing a finger on the fingerprint collection unit. There is no need to unlock the smartphone, find the payment application software, call a small program of the payment application software, verify the fingerprint, and other complex operations; and the generation of the payment QR code during the operation does not require the support of the telecommunications network, which is particularly applicable in remote areas with incomplete telecommunications network infrastructure; and even if the telecommunications network is not required when conducting payment services, the payment QR code can be generated in a dynamic manner, thereby improving the security of the payment service; in addition, since the executed payment service process logic is simple, the secure payment device does not require a complex operating system and a high-performance processor, and is low in cost, consumes less energy, and responds quickly. It can complete payment services without a smartphone, ensuring that the secure payment device can be used for a long time and stably to complete payment services.

[0100] like Figure 3 FIG2 is a schematic diagram of the structure of a secure payment device according to an embodiment of the present invention. The structure of the secure payment device is described in this figure, which includes a processor 301, a power control unit 302, a biometric information recognition unit 303, a pattern generation unit 304, and a display unit 305.

[0101] The power control unit 302 is used to activate the secure payment device according to a user activation instruction;

[0102] The processor 301 is configured to directly call the biometric information recognition unit 303 to collect the user's biometric information, and when the biometric information is verified, directly generate dynamic verification information based on the user information and current feature information;

[0103] The pattern generating unit 304 is configured to generate a pattern to be identified based on the verification information;

[0104] The display unit 305 is configured to display the pattern to be recognized.

[0105] The device of the above-mentioned embodiment of this article is convenient for elderly users and children to operate. After activating the secure payment device, a payment QR code can be generated by pressing a finger on the fingerprint collection unit. There is no need to unlock the smartphone, find the payment application software, call a small program of the payment application software, verify the fingerprint, and other complicated operations; and the generation of the payment QR code during the operation does not require the support of the telecommunications network, which is particularly applicable in remote areas with incomplete telecommunications network infrastructure; and even if the telecommunications network is not required when conducting payment services, the payment QR code can be generated in a dynamic manner, thereby improving the security of the payment service; in addition, since the executed payment service process logic is simple, the secure payment device does not require a complex operating system and a high-performance processor, and is low in cost, consumes less energy, and responds quickly. It can complete payment services without a smartphone, ensuring that the secure payment device can be used for a long time and stably to complete payment services.

[0106] like Figure 4 The flowchart of configuring a secure payment device in an embodiment of this invention is shown. This figure describes the process of configuring a secure payment device after a user receives it from a bank. Only a smartphone and a secure payment device are used as an example of participants in the configuration process. In other embodiments, the secure payment device can also be configured in other combinations. This method embodiment specifically includes:

[0107] Step 401: The secure payment device is started.

[0108] In this step, after the secure payment device is powered on, it opens the Bluetooth unit in configuration mode and waits for a connection with the smartphone. For example, this can be achieved by repeatedly turning the power button on and off. Alternatively, if the secure payment device is powered on and determines that it has not been configured, it will automatically enter configuration mode. Otherwise, it will enter normal mode and wait for fingerprint input.

[0109] Step 402: The smartphone establishes a Bluetooth connection with the secure payment device.

[0110] In this step, the user can use the Bluetooth unit of the smartphone to scan the Bluetooth unit of the secure payment device, and the two parties can communicate after the Bluetooth connection is established.

[0111] In step 403, the user connects to the bank server via the APP (application) of the smartphone.

[0112] In this step, the user can click on the bank APP installed on the smartphone to establish a connection with the bank server through the telecommunications network.

[0113] Step 404: The smartphone obtains the user information and system time stored on the bank server.

[0114] In this step, the user uses a smartphone to log in to the bank server using a username, password, etc., and obtains user information from the bank server, which may include, for example, username, user number, account number, etc.; and also obtains system time from the bank server, such as the current time on the system side.

[0115] Step 405: The smartphone sends the user information and system time to the secure payment device.

[0116] In this step, the request to send the user information and system time to the secure payment device can be achieved by the user clicking a button on the bank APP on the smartphone, or the secure payment device can send a request to the smartphone in the background, and the smartphone completes the information sending in the background after logging in to the bank APP.

[0117] Step 406: The secure payment device stores the user information and system time in a secure storage chip.

[0118] Step 407: The secure payment device prompts the user to input a fingerprint via the display.

[0119] This step can be performed before the aforementioned steps 402-406 or simultaneously with any of the steps.

[0120] Step 408: Receive the fingerprint information input by the user on the fingerprint collector.

[0121] Step 409: Store the input fingerprint information in a secure storage chip.

[0122] like Figure 5 The flowchart of a secure payment method executed on a secure payment device according to an embodiment of the present invention is shown. This figure describes the steps and methods executed by the secure payment device when performing payment services after the configuration. After the user enters the fingerprint information for verification, the secure payment device will directly display a dynamically generated QR code for completing the payment on the display unit, without requiring any manual operation or selection by the user. The method of this embodiment specifically includes:

[0123] Step 501: Activate the secure payment device.

[0124] In this step, when the user needs to perform a payment service, he or she takes out the configured secure payment device and powers on the secure payment device by operating the power button.

[0125] Step 502: prompt the user to input fingerprint information.

[0126] In this step, when the secure payment device is powered on and it is determined that configuration information has been prepared, a text prompt is directly displayed through the display unit, requesting the user to enter fingerprint information; or a prompt message is displayed through the display unit, while just waiting for the user to enter fingerprint information; or the user may be prompted to enter fingerprint information through a voice message from the speaker.

[0127] Step 503: The fingerprint collector collects the fingerprint information input by the user.

[0128] Step 504: Compare the collected fingerprint information with the fingerprint information in the configuration information of the secure storage chip. If they are consistent, the verification is successful; otherwise, the verification fails.

[0129] In this step, if the verification is successful, the subsequent steps will be entered to continue the payment business processing. If the verification fails, the system will continue to wait for the user to enter the fingerprint, or a corresponding prompt "Fingerprint input error" will be given. If the fingerprint information entered by the user fails to be verified multiple times, no operation information will be responded to and the system will enter a locked state. Even if the power is turned off and on again, it will remain locked and any operation by the corresponding user will be rejected.

[0130] Step 505: Obtain the device ID of the secure payment device, as well as the user information and system time in the secure storage chip.

[0131] In this step, the device ID of the secure payment device may be a unique identifier of a processor, a unique identifier of a Bluetooth unit, or a unique identifier of a secure storage chip.

[0132] Step 506: Get the current system time according to the system time.

[0133] In this step, the system time and the accumulated time in the secure storage chip are superimposed to obtain the current system time. For example, if the system time is 18:00:00 on January 1, 2021, and the accumulated time is 24 hours, 00 minutes, 00 seconds, then the current system time is 18:00:00 on January 2, 2021. If the secure payment device is used for payment again after a period of time, the accumulated time is 48 hours, 00 minutes, 00 seconds, then the current system time at that time is 18:00:00 on January 3, 2021.

[0134] Each time a secure payment device is used to make a payment, a new current system time is generated, and the verification information consisting of the current system time, user information, device ID (signature information), etc. is refreshed, forming dynamic verification information.

[0135] Step 507: Sign the device ID, user information, and current system time.

[0136] In this step, the verification information is signed by the user's private key, where the verification information includes the device ID, user information, and current system time.

[0137] Step 508: Generate a QR code from the verification information and signature information.

[0138] In this step, the device ID, user information, current system time, and signature information may be arranged in sequence to form a string, which is then converted into a binary string, which is then converted into a QR code consisting of black and white blocks.

[0139] Step 509: Display the QR code on the display unit.

[0140] like Figure 6 The data flow diagram of a secure payment method in the embodiment of this invention is shown. In this diagram, the process of performing payment business in the secure payment system composed of a secure payment device, a collection terminal, a front-end server, a core payment system, and an authentication server is described. The order described is not necessarily the only execution order of the embodiment of this invention. There may be other execution orders as long as the payment business can be completed within a reasonable range of variation. The secure payment device used in this embodiment can refer to the above-mentioned Figure 3 The structure shown may also include other necessary components, such as a battery and a housing. The secure payment device has a simple hardware structure and simple processing capabilities. Compared to smartphones, it consumes significantly less power and is extremely easy to operate. Simply turn on the power button and press your finger on the fingerprint recognition unit to generate a dynamically changing QR code. In addition to a camera for capturing patterns, the acquisition terminal may also include a communication unit, a network interface, a computer with certain data processing capabilities, etc. The method of this embodiment specifically includes:

[0141] Step 601: The collection terminal collects the QR code of the secure payment device.

[0142] In this step, the collection terminal may be a POS machine with a scanning function.

[0143] Step 602: parse the QR code to obtain verification information.

[0144] In this step, the acquisition terminal parses the acquired QR code to obtain the device ID, user information, current system time, and signature information to form a character string, and forms verification information according to specific data encapsulation rules.

[0145] The specific data encapsulation rule may be to convert the character string into binary or XML format data.

[0146] Step 603: Send the verification information and the payment information of this payment transaction to the front-end server via the network.

[0147] Step 604: The front-end server sends the verification information to the authentication server.

[0148] Step 605: The authentication server verifies the verification information.

[0149] In this step, the authentication server searches for the user's verification information in the historical payment service database. For example, it searches for the user number in the historical payment service database, and checks whether the user number has the same current system time and device ID. If so, it indicates that the QR code used in this payment service has been used and there is a risk in this payment service. If not, it indicates that this payment service is safe.

[0150] Among them, when the verification information also includes signature information, the public key matching the user information can also be obtained, and the signature information can be verified using the public key. If the verification passes, it can be ensured that the verification information provided by this payment service comes from the user's secure payment device.

[0151] Step 606: The authentication server feeds back information indicating successful verification to the front-end server, otherwise it feeds back information indicating failed verification.

[0152] Step 607: When the verification is successful, the front-end server sends the payment information to the core payment system.

[0153] If the verification fails, the verification failure information will be fed back to the collection terminal, and the reason for the failure will be fed back, that is, the current QR code may have been used, or other prompt information.

[0154] Step 608: The core payment system completes the payment transaction.

[0155] Step 609: The core payment system feeds back information indicating that the payment was successful to the front-end server.

[0156] Step 610: The front-end server sends payment success information to the collection terminal.

[0157] The methods, devices and systems of the embodiments of this article are convenient for elderly users and children to operate. After activating the secure payment device, a payment QR code can be generated by pressing a finger on the fingerprint collection unit. There is no need to unlock the smartphone, search for the payment application software, call a small program of the payment application software, verify the fingerprint and other complex operations; and the generation of the payment QR code during the operation does not require the support of the telecommunications network, which is particularly applicable in remote areas with incomplete telecommunications network infrastructure; and even if the telecommunications network is not required when conducting payment services, the payment QR code can be generated in a dynamic manner, thereby improving the security of the payment service; in addition, since the executed payment service process logic is simple, the secure payment device does not require a complex operating system and a high-performance processor, and is low in cost, consumes less energy, and responds quickly. It can complete payment services without a smartphone, ensuring that the secure payment device can be used for a long time and stably to complete payment services.

[0158] The embodiment of the present invention also provides a computer readable instruction, wherein when the processor executes the instruction, the program causes the processor to execute the following Figure 2 、 Figure 4-Figure 6 method.

[0159] It should be understood that in the various embodiments of this document, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this document.

[0160] It should also be understood that in the embodiments herein, the term "and / or" merely describes an association between associated objects, indicating that three possible relationships exist. For example, "A and / or B" could represent: A alone, A and B simultaneously, or B alone. Furthermore, the character " / " in this document generally indicates an "or" relationship between the associated objects.

[0161] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the composition and steps of each example according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this document.

[0162] Those skilled in the art will clearly understand that, for the sake of convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0163] In the several embodiments provided herein, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices, or units, or can be an electrical, mechanical, or other form of connection.

[0164] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments herein.

[0165] In addition, the functional units in the various embodiments herein may be integrated into a single processing unit, each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0166] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this article is essentially or the part that contributes to the existing technology, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of this article. The aforementioned storage medium includes: various media that can store program code, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0167] This article uses specific embodiments to illustrate the principles and implementation methods of this article. The description of the above embodiments is only used to help understand the methods and core ideas of this article. At the same time, for those skilled in the art, based on the ideas of this article, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation to this article.

Claims

1. A secure payment method, characterized in that include, After the secure payment device is activated according to the user's activation instruction, the subsequent steps are directly executed without being connected to the telecommunications network; Collect users’ biometric information; When the biometric information is verified, dynamic verification information is directly generated based on the user information and the current feature information; Generate and display a pattern to be identified according to the verification information; Before activating the secure payment device according to the user activation instruction, the method further includes: The secure payment device collects biometric information of the user and stores the biometric information in a secure storage chip of the secure payment device; The secure payment device receives user information and reference characteristic information obtained by the smart terminal from the bank's backend server through the Bluetooth unit, and stores the user information and reference characteristic information into a secure storage chip of the secure payment device; When the reference characteristic information is a number, the step of directly generating dynamic verification information based on the user information and the current characteristic information further includes accumulating the numbers to obtain a current sequence number to form the current characteristic information; When the biometric information verification is passed, it further includes determining whether the biometric information stored in the secure storage chip of the secure payment device is consistent with the collected user biometric information, if they are consistent, the verification is passed, if they are inconsistent, the verification fails; Generating and displaying the pattern to be recognized according to the verification information further includes signing the verification information by using a private key of the secure payment device; and generating and displaying the pattern to be recognized according to the signature and the verification information.

2. The method according to claim 1, characterized in that Activating the secure payment device according to the user activation instruction includes: The secure payment device is powered on and activated according to the user's operation of the switch key.

3. The method according to claim 1, characterized in that The receiving of user information and reference characteristic information from the bank backend server by the intelligent terminal through the communication unit further includes: The user information and the reference characteristic information are received by the intelligent terminal from the bank's back-end server through the wired communication unit.

4. The method according to claim 1, characterized in that: The method further includes obtaining user information and reference feature information through a communication unit, The user information stored locally in the smart terminal and the reference characteristic information generated by the smart terminal are received through the Bluetooth unit.

5. The method according to claim 1, characterized in that The reference characteristic information includes system time or number.

6. The method according to claim 5, characterized in that When the reference characteristic information is system time, storing the user information and the reference characteristic information in the secure storage chip further includes: Calculate the cumulative time; The step of directly generating dynamic verification information based on user information and current feature information further includes: The system time and the accumulated time are accumulated to obtain the current system time to form the current feature information.

7. The method according to claim 1, characterized in that After generating and displaying the pattern to be identified according to the verification information, further comprising: Acquire the pattern to be recognized through the acquisition terminal, and send the pattern to be recognized and the payment information to the front-end server; The front-end server sends the pattern to be recognized to the authentication server to verify the pattern to be recognized; After the pattern to be identified is verified, the front-end server sends the payment information to the core payment system to complete the payment service.

8. The method according to claim 7, characterized in that The verification of the pattern to be identified further includes: The authentication server obtains verification information through the pattern to be identified; Obtaining user information and current feature information in the verification information; Searching the historical payment service database for the current feature information that matches the user information; If found, feedback verification failure information to the front-end server; If not found, the verification success information is fed back to the front-end server.

9. A secure payment device, characterized in that Including, a processor, a power control unit, a biometric information recognition unit, a pattern generation unit, and a display unit; The power control unit is used to activate the secure payment device according to a user activation instruction; The processor is used to directly call the biometric information recognition unit to collect the user's biometric information, and when the biometric information is verified, directly generate dynamic verification information based on the user information and current feature information; When the reference characteristic information is a number, the processor is further configured to accumulate the numbers to obtain a current sequence number to form the current characteristic information; When the biometric information verification is passed, it is determined whether the biometric information stored in the secure storage chip of the secure payment device is consistent with the collected user biometric information. If they are consistent, the verification is passed; if they are inconsistent, the verification fails; The pattern generating unit is used to generate a pattern to be identified according to the verification information; the pattern generating unit is further used to sign the verification information by using a private key of the secure payment device; and generate and display the pattern to be identified according to the signature and the verification information; The display unit is used to display the pattern to be identified; It also includes a Bluetooth unit, which is used to receive user information and reference characteristic information obtained by the smart terminal from the bank's backend server before activating the secure payment device according to the user activation instruction, and store the user information and reference characteristic information in a secure storage chip of the secure payment device; The biometric information recognition unit collects the user's biometric information before activating the secure payment device according to the user activation instruction, and stores the biometric information in the secure storage chip of the secure payment device.

10. A computer device comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 8 is implemented.

11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method of any one of claims 1 to 8 is executed.

Images